Live data from Hacker News

The Great Firewall of Yale

162.209.96.128

11–20 of 135 posts

Re: The Great Firewall of Yale

#14
post #10

Earlier quoted context omitted.

If they were only blocking based on IP address then students wouldn't be able to ping the server. So they're blocking on at least the TCP layer. ... not that that constitutes DPI either.

This looks like the block page you get from a Palo Alto firewall. The feature set includes traffic inspection, among many other things. We've got a couple where I work, they are pretty great firewalls actually.

[deleted]

Re: The Great Firewall of Yale

#16
I expect the official explanation to be something like "we cannot endorse an unofficial service that might give misleading information to our students."

Every censor does it from an honest desire to keep this terribly misleading information away from the unknowing masses.

I don't think Yale is blocking the service in a conspiratorial effort to stymie students, but from a not well thought out desire to babysit.

Re: The Great Firewall of Yale

#20

If it were only deep packet inspection, the solution would be simply to prefix https:// and be done with it. As other posters have remarked, I suspect the article means an IP based block.

That is until Yale than set themselves up to forcefully man in the middle all outgoing https connections.
Post reply on HN