Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Russia Starts Blocking VPN Protocols

vpncentral.com

Post reply on HN
Print view View original

161–166 of 166 posts

Re: Russia Starts Blocking VPN Protocols

#161

Post by lostmsu »

Aerbil313 wrote: post #147
lifty wrote: post #139

Earlier quoted context omitted.

I fully agree with you. Digital sovereignty is important for countries and it makes sense that they are trying to become digitally independent. The bad part is that this particular instance, it will be used against the people. I would say that better goal would be for individuals to be digitally sovereign, and not countries. Individual digital sovereignty protects us from external and internal oppression.

I'm afraid that's technically not possible. Internet is inherently centralized due to the need for ISPs, and there are TLS CAs, TSMC, and many more things. Current sophistication of technology needs centralization for its manufacture and use.

None of the things you mentioned are fully centralized.

Re: Russia Starts Blocking VPN Protocols

#162

Post by fruitreunion1 »

est wrote: post #157
fruitreunion1 wrote: post #89

Earlier quoted context omitted.

I think this is a good thing. Apply obfuscation on top of WireGuard, that way you can have the functionality and security of the WireGuard tunnel and swap between different obfuscation techniques as needed.

Is there a mechanism to apply obfuscation on top of wireguard on latest Ubuntu stable? AFAIK wireguard is built inside the kernel.

The idea is you connect to the wireguard UDP port from one of the obfuscation tunnels.

laptop -> obfuscation tunnel (udp2raw/iodine/ssh/tor/wstunnel/etc.) -> wireguard UDP port. Though some protocols like ssh or tor only support TCP, so you have to run an additional tunnel in the machine to get to wireguard (udp-over-tcp).

Re: Russia Starts Blocking VPN Protocols

#163

Post by est »

fruitreunion1 wrote: post #162
est wrote: post #157

Earlier quoted context omitted.

Is there a mechanism to apply obfuscation on top of wireguard on latest Ubuntu stable? AFAIK wireguard is built inside the kernel.

The idea is you connect to the wireguard UDP port from one of the obfuscation tunnels. laptop -> obfuscation tunnel (udp2raw/iodine/ssh/tor/wstunnel/etc.) -> wireguard UDP port. Though some protocols like ssh or tor only support TCP, so you have to run an additional tunnel in the machine to get to wireguard (udp-over-tcp).

tunnel on top of another tunnel works, but at the cost of speed and ops complexity.

Re: Russia Starts Blocking VPN Protocols

#164

Post by Lex-2008 »

Aerbil313 wrote: post #124
Lex-2008 wrote: post #115

Earlier quoted context omitted.

> if I'm to be spied by someone, I'd prefer my own government who is far more likely to act in my best interests than the three letter agencies of US. I'm also aware of an opposite opinion: if I'm to be spied by someone, it's better to be a three letter agency overseas, since it's much harder for them to harm me, than a three letter agency in my home country, which can just knock at my door.

See my reply to your sibling 'I don't disagree with this...'

Oh, thanks for pointing me to it!

And thanks for the comment. Indeed, I was thinking about countries like Russia, where US three-letter agencies don't have extradition power, as far as I know (thinking about Snowden). Countries like mentioned in that thread, indeed, have more complicated relationships with US.

Re: Russia Starts Blocking VPN Protocols

#165

Post by Aerbil313 »

GoblinSlayer wrote: post #153
Aerbil313 wrote: post #109

Earlier quoted context omitted.

Tech nerds often don't realize how much the world of software is subject to the real world. You can be cut off access to any technology if your country is not willing to give its natural resources to another. No different from trade sanctions. Open source is a bunch of individuals helpless in the face of orders from Pentagon to close it all up. * You won't have the expertise to quickly build your own solutions when t…

You mean they block SSL and you have to use plain HTTP?

SSL is but one form of centralization of technology.

Re: Russia Starts Blocking VPN Protocols

#166

Post by Aerbil313 »

lost_tourist wrote: post #156
Aerbil313 wrote: post #84

Earlier quoted context omitted.

I don't live in China. Yet I'd very much like my country having its own national software stack (OS, search engine, browser, social media apps). All is fine for you guys in the US, but you forget when our national interests conflict with yours or big tech corporations or when the privacy of our citizens is concerned, it happens to be a national security issue. I trust my own government to not spy on me unnecessarily,…

But are you going to block the US/Europe on your national network so that your citizens live in a silo. Are you afraid of free flow of information or of your citizens seeing it? That's what Russia, China, and North Korea do, is that what you want in your country?

I don't directly propose blocking the rest of the world, but e.g. using a national social media app implies banning foreign ones. I'd very much like the personal data and the advertising income mined from the eyeball time of citizens to not cross the borders of my country. This is not to mention a state-run app would have just enough ads to pay for the costs of the service, and maybe even none if it's ruled in the parliament that advertisement is harmful to the wellbeing of citizens.
Post reply on HN