Live data from Hacker News

Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025

gfw.report

151–160 of 195 posts

Re: Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025

#151

Earlier quoted context omitted.

Continents are a social construct. In North American English, we typically divide the Americas into a North and South America. The collective noun for North and South America is the Americas. (Though this remains ambiguous in respect of the Caribbean and Pacific Islands.) Getting pedantic about calling America America is sort of like insisting on referring to China as Zhonghua. Like, sure. Whatever. But you’re clearl…

I thought continents are a geographical term divided by tectonic plates and such. Still seams to be weird to single out a single country to assign the name of a continent.

> thought continents are a geographical term divided by tectonic plates and such

Common misconception, but incorrect. Here is a map of major tectonic plates [1]. They sort of map to our continents. But only loosely. European countries often fissure Eurasia, same way many Spanish-language countries unify the North American, South American, Caribbean, Cocos, Nazca, Scotia and Juan de Fuca plates into an Americas. (Or include the Arabias and India in Asia, et cetera.)

> seams to be weird to single out a single country to assign the name of a continent

New Zealand doesn’t like the Australian plate, Trump doesn’t like the Gulf of Mexico, Riyadh the Persian Gulf, et cetera. At the end of the day, you have to decide if you’re having a substantive or semantic discussion. I personally tend to find the latter boring and repetitive unless actually digging into the meat of the issue (versus the usual “I like to say it this way QED”.)

[1] https://www.usgs.gov/media/images/tectonic-plates-earth

Re: Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025

#152
post #73

Earlier quoted context omitted.

In English, there is no continent named "America." It's unambiguously used to refer to the United States.

[flagged]

I'm speaking as someone who has done a bit of research into this topic.

I'm not aware of a single example of an English-speaking country that teaches that there's a continent named "America." It's taught as two continents: North America and South America. "America" is just short for the "United States of America," and in English it's entirely unambiguous.

Re: Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025

#153
post #73

Earlier quoted context omitted.

In English, there is no continent named "America." It's unambiguously used to refer to the United States.

I would not say "unambiguously" when it comes to natural languages. And no, "America" may have referred to the US when I was a kid and here in Central Europe we had Back to the Future type of shoes with the American flag, yeah, and I would not say unambiguously so. If someone says "America" to refer to a place, they really ought to specify if they want you to understand them.

I can't think of any English speaking countries in central Europe off the top of my head.

"America" is short for "The United States of America" in English. That's its definition. I don't understand how people have difficulty with this concept.

Re: Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025

#154
post #64

Earlier quoted context omitted.

AWS in China also doesn't have the Key Management Service, which leads to me to conclude it must be pretty secure. I added an A record for subdomain and pointed it at Chinese IP addresses. I wonder if I will get that angry email?

Or they just dont want to be put in the position of having to give out keys. I think the real paranoid people use cloudHSM.

Both KMS and CloudHSM are FIPS 140-2 Level 3 and AWS claims they cannot read private keys from KMS. The main difference is KMS uses IAM and the AWS REST API while CloudHMS uses PKCS #11/JCE and a separate permissions system.

Re: Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025

#155
post #84

Earlier quoted context omitted.

Anyone operating in/around China who needs a real VPN has a service they pay for and use that isn't mainstream that isn't blocked (using V2ray or similar). There's a reason why Shadowrocket is the number 1 app on the app store. I'm sure there are a lot of cases of people using e.g., off-the-shelf VPN apps and have trouble, but power users in China are always running a VPN, usually to Japan, that doesn't have this pro…

How do you propose users in China will magically get around a nation state injecting packets?

That's literally what VPNs are for.

If you aren't aware: a Virtual Private Network creates a fully encrypted link between you and a remote node. So long as your encryption keys are secure, there's no way for anyone (even a global superpower) to listen to or intrude on that connection. There is no possible way to break into this connection, even with the entire planet's computing resources.

From the outside, all you can see is a stream of encrypted data between two nodes. You cannot tell where the traffic goes once it exits the VPN server or what it contains.

The only way to compromise a VPN connection is the most straightforward and pedestrian: compromise the VPN host and directly spy on their clients with their own hardware.

The GFW certainly can and has detected such encrypted streams and blocked them for being un-inspectable. With a VPN you can perfectly hide what you're doing and you can perfectly prevent intrusion. You cannot prevent someone noticing you're using a VPN. China can simply blanket ban connections that look like VPN traffic. But they cannot tell what you're doing with that VPN.

Re: Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025

#156

Earlier quoted context omitted.

Look up Meshtastic. It’s kinda fun. Can chat with random people around you. But I don’t think it’s really that useful unless you have a really good spot like an antenna on your roof with no trees or buildings in the way.

It's not that finicky in practice. I live in a heavily wooded area and I can still see plenty of nodes, some pretty far away. Trees are actually somewhat helpful there because you can easily rig up a node up high by throwing a line over a branch.

I live in the suburbs, not really any high rises around be but some townhouses, I can “see” 180 nodes, but I can’t reliably message my friend 1km away. I get a lot of messages on the public chat but if I send one it’s a 50/50 if it will be acknowledged by any nodes.

I tried it while staying in a high rise hotel and the experience was great. Instant acknowledgement and super reliable communication

Re: Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025

#157

Earlier quoted context omitted.

> You say that because you don't hold a Chinese or Indian passport. Not really. People like it in China, regardless of whether they're Chinese. I took an English teaching certification course in Shanghai. The teachers for that course were used to rotating around the world as the company held courses in various random locations. One day the teachers asked what was apparently a standard question for them, "are you plan…

We are agreeing with each other

I didn't think so. There were only two or three students in that course who held a Chinese passport. There were almost as many Ethiopians. A clear majority was Americans, some ethnically Chinese, some white.

The teachers, incidentally, were British and New Zealander, and they were firm about instructing us in teaching British pronunciation. I assume most of the students went on to ignore that part of the curriculum.

Re: Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025

#158

Earlier quoted context omitted.

It won't get you from where you are to China though.

No but something like WSPR or FT8 would. Needs a license though.

FT8 has such a small payload that you couldn't fit an emoji, much less an average English sentence.

There's no authentication so anyone can pretend to be you. Traditional methods of verifying the sender (HMAC) would take so many hours to transmit that the physical propagation paths you're communicating through will probably collapse before you deliver the smallest verified message.

If you need to communicate information, FT-8 is not for you.

Re: Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025

#159

Think of how many people who have remote jobs with American companies couldn't connect to their meetings while they "work from home" while secretly being in China! Normally they have to fight VPN issues anyway, but having a sovereign state inject your packets is certainly a fun new one.

> Normally they have to fight VPN issues anyway There are special virtual SIM cards that provide access to services from mainland China, as well as VPNs that function normally without issues. I used both while I was in China.

Yeah, have used one. Mine was a downloadable eSIM and meant for foreign travelers with 1-week plan. It actually establishes an IPsec VPN to the origin country. Beijing dare not to block foreigners' roaming services.

Re: Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025

#160
post #2

Terrible, this is Internet curfew. It's not uncommon to imagine they'd shutdown Internet across border during any war (like against Taiwan).

That's what's so great about LoRA. Decentralized txt msgs, ultra cheap radios people run at home or wherever. $10-35USD ON AMAZON. Least txts get through.

Local police already equipped with signal jammer cars. Usually only used in college entrance exam period. They also appeared in recent protest in Jiangyou city.
Post reply on HN