For folks looking to bypass these rudimentary DPI blocks, you don't really need a VPN. DoH + one of these should be enough On Windows: - GoodbyeDPI: https://github.com/ValdikSS/GoodbyeDPI ( https://ntc.party/c/community-software/goodbyedpi/8 ) On Mac / Linux: - GreenTunnel: https://github.com/SadeghHayeri/GreenTunnel ( https://www.npmjs.com/package/green-tunnel ) On Android: - Intra: https://github.com/jigsaw-code/in…
Is there a way to run one of these on the router level, using something like OpenWrt? DoH already works really well.
Tell HN: GitHub is partially blocked in India
71–80 of 184 posts
Re: Tell HN: GitHub is partially blocked in India
#72Basically it is a proxy that alters HTTPS traffic to prevent DPI systems from detecting the domain during the TLS handshake. At least in Spain it works for me to bypass the blocking of the major ISPs [2].
Re: Tell HN: GitHub is partially blocked in India
#73Earlier quoted context omitted.
Hence the "no fallback" point. Bad guys can always block entire IPs, and by not having a fallback to insecure SNI, that's their only choice.
As someone who doesn't want untrusted devices on my network, I'd want to be able to encrypt SNI at my firewall.
Re: Tell HN: GitHub is partially blocked in India
#74The fact that people rely on GitHub, even when it is based on git, which is free and distributed software, shows how easy it is for big companies to force users into their closed software.
Re: Tell HN: GitHub is partially blocked in India
#75The fact that people rely on GitHub, even when it is based on git, which is free and distributed software, shows how easy it is for big companies to force users into their closed software.
Re: Tell HN: GitHub is partially blocked in India
#76For folks looking to bypass these rudimentary DPI blocks, you don't really need a VPN. DoH + one of these should be enough On Windows: - GoodbyeDPI: https://github.com/ValdikSS/GoodbyeDPI ( https://ntc.party/c/community-software/goodbyedpi/8 ) On Mac / Linux: - GreenTunnel: https://github.com/SadeghHayeri/GreenTunnel ( https://www.npmjs.com/package/green-tunnel ) On Android: - Intra: https://github.com/jigsaw-code/in…
OP claims it’s SNI based and not DNS based, so switching DNS providers likely won’t do anything.
All the apps listed do get past most rudimentary SNI-based blocks, incl GoodbyeDPI which is pretty sophisticated. One still needs DoH because (unencrypted) DNS is the weakest link.
Re: Tell HN: GitHub is partially blocked in India
#77Re: Tell HN: GitHub is partially blocked in India
#78Earlier quoted context omitted.
How, exactly, do you propose doing that? Do you mean hiring lawyers to try and get the court's decision reversed? Or lobbying to get legislation passed to prevent courts from being able to do things like this in the future? And if the court's decision doesn't get reversed and/or the legislation doesn't pass, what then?
Go after the supporters of the people who implemented the ban.