Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How the great firewall of China detects and blocks fully encrypted traffic [pdf]

gfw.report

Post reply on HN
Print view View original

131–140 of 289 posts

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#131

Post by H8crilA »

nonethewiser wrote: post #119
H8crilA wrote: post #111

Earlier quoted context omitted.

I would disagree. The leading organization is much more aligned with the needs of the nation than the likes of Iran or Russia, which probably wouldn't mind bombing the shit out of their own city if it was necessary to stay in power. For example they actually bow to American pressure and try to avoid sanctions or other trade problems. As of today their navy could be completely destroyed with like 30% of the US Navy, s…

> which probably wouldn't mind bombing the shit out of their own city if it was necessary to stay in power See the Tiananmen Square Massacre.

Bombing a city can result in tens to hundreds of thousands of casualties.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#132

Post by bilkow »

law_enforcement wrote: post #102

The comments from people obviously never having been into a restricted country are hilarious. There are a few, most likely shadow approved, VPN providers that work. I refuse to believe they are just smarter than the GFW. I am convinced they are sanctioned and monitored. Which is fine if you never have any beef with the government. Which you never know you do until you do. Stuff like socks5/shadowsocks and wireguard h…

Can't you use a "sanctioned" VPN to tunnel your connection to a "real" VPN or any wireguard endpoint? They could still be able to find out you're using a VPN, but not monitor your traffic.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#133

Post by pdntspa »

noduerme wrote: post #123
WinstonSmith84 wrote: post #3

I was wondering about simply using VPNs, which is not mentioned in the article at all, but checking GFW on Wikipedia, it tells: > The use of VPNs in China can provide individuals access to the international internet, but in China, it can be a potential legal risk. In 2017, the Chinese government declared all unauthorized VPN services to be illegal.[94] An example of the use of this punishment is Vera Zhou, a student…

Just a small personal anecdote from another country with tight restrictions: When I rented a furnished apartment in Saigon back in 2008, there was an ethernet cable on the table and a piece of paper in English that said "Do not visit websites of anti-government propaganda, or pornography, or news such as the New York Times." Naturally, as the police held my passport for the entire year I was in Vietnam, I was cautiou…

Wait, the police held your passport? Why?

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#134

Post by pdntspa »

H8crilA wrote: post #111
jcarrano wrote: post #101

Earlier quoted context omitted.

It is not the goal of the CCP to advance China as it is to keep themselves in power.

I would disagree. The leading organization is much more aligned with the needs of the nation than the likes of Iran or Russia, which probably wouldn't mind bombing the shit out of their own city if it was necessary to stay in power. For example they actually bow to American pressure and try to avoid sanctions or other trade problems. As of today their navy could be completely destroyed with like 30% of the US Navy, s…

You have to keep the poeple happy enough, not even China could withstand the full force of their own people rising up against them.

So, on the surface, you appear aligned with growth and advancement and all that.

But under the surface, the system is about control, and only control.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#135

Post by m-p-3 »

apatheticonion wrote: post #42
__sy__ wrote: post #41

I’ve done so much experimentation with GFW pre pandemic while staying in China for extended period of times. I was always amazed at how quickly they would catch up on my shadowsocks, random ssh tunnels…etc. 48 hours top before I had to rotate IPs. This report seems to indicate this is now instant? Fwiw My most reliable trick ended up piggie-backing off of a physical line going into Hong Kong from Shenzhen, and when r…

I tried to setup a shadowsocks server to bypass the GFW about 2 weeks ago. Server was hosted on my local network in Australia (with public IP), client was connecting from China (using the server IP). It was blocked immediately and the client could not connect. I had several unknown IPs try to connect prior to the attempted connection. I was stunned at how water tight the GFW is, it's really unfortunate as I would lov…

I run https://snowflake.torproject.org/ in my browser as my way to help.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#136

Post by balder1991 »

pantalaimon wrote: post #53
helen___keller wrote: post #50

Earlier quoted context omitted.

When I was in China in 2019, the VPN built into google fi actually got me around the GFW with zero effort. I didn’t even realize it until I caught myself checking American social media unhindered. My experience is most younger and tech savvy people have a VPN. It’s common / casual, like speeding your car by 10mph on the highway. Most people are not persecuted for using a VPN, I assume that’s reserved for people who t…

I think China doesn’t care if foreigners use a VPN, it’s their own people they want to keep under control.

I keep contact with a girl in China and from her reports using VPNs is kinda common for young people with college education. She would do it sometimes to access YouTube, and would laugh it off when I would say she should be careful doing such things.

I suppose for the government, as long as it isn’t the majority of people doing something that would cause trouble, it isn’t worth tracking down all things, as expected.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#138

Post by speedgoose »

blablablub wrote: post #38
sysstemlord wrote: post #11

Earlier quoted context omitted.

I'd go for ssh if I was trying to bypass it. At least legally I can claim that I'm just sshing to my aws server and not be jailed for using vpn.

using ssh for proxying is getting blocked within the first minute.

Does this mean that in addition of the classic fail2ban, geoip firewall, or forever super slow login banners, we could also have a honey pot sending a lot of data with a traffic pattern similar than web browsing ?

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#139

Post by throw_19cn1k3 »

apatheticonion wrote: post #42
__sy__ wrote: post #41

I’ve done so much experimentation with GFW pre pandemic while staying in China for extended period of times. I was always amazed at how quickly they would catch up on my shadowsocks, random ssh tunnels…etc. 48 hours top before I had to rotate IPs. This report seems to indicate this is now instant? Fwiw My most reliable trick ended up piggie-backing off of a physical line going into Hong Kong from Shenzhen, and when r…

I tried to setup a shadowsocks server to bypass the GFW about 2 weeks ago. Server was hosted on my local network in Australia (with public IP), client was connecting from China (using the server IP). It was blocked immediately and the client could not connect. I had several unknown IPs try to connect prior to the attempted connection. I was stunned at how water tight the GFW is, it's really unfortunate as I would lov…

A fellow Aussie currently in China, a Trojan [0] server has been working fine for the last week I've been here. I've got it hosted through a VPS (smaller provider) in LA. While it's a bit of a pain to setup, reliability has been pretty decent (with occasional? short breaks) and definitely useable - my laptop is connected 24/7 and I can access the unfiltered web, including video, just fine. V2ray also supposedly works quite well, but I haven't looked into it.

[0] https://github.com/trojan-gfw/trojan

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#140

Post by wahnfrieden »

nonethewiser wrote: post #115
guessmyname wrote: post #107

Earlier quoted context omitted.

More context about this WikiPedia excerpt: → https://www.chinafile.com/extensive-surveillance-china → https://www.rfa.org/cantonese/news/student-01272020075256.ht... It looks like 周月明 (Vera Yueming Zhou) was sent to a Chinese concentration camp mostly because she was part of a religious minority and not necessarily for using a VPN to access the University of Washington’s website. > Vera was living in her hometown of…

Just tragic. Hard to imagine living in such a backwards place

[flagged]
Post reply on HN