Live data from Hacker News

How the great firewall of China detects and blocks fully encrypted traffic [pdf]

gfw.report

181–190 of 289 posts

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#181
post #175

Earlier quoted context omitted.

Encamped for your beliefs and not for breaking the law, that makes it much better!

[flagged]

We can look at russia arresting random foreign nationals for bullshit reasons right now.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#182

Earlier quoted context omitted.

Why do you say it's 99% propaganda? "sinofication" sounds a lot like "eliminating the existing culture" which sounds a lot like genocide. Genocide is more than just murdering everyone like in some of the most well known cases like the Holocaust -- it includes elimination of an ethnic group by any means possible, including "nativification"

I understand where you're coming from, but -cide implies killing.

Of a nation or ethnic group.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#183

Earlier quoted context omitted.

Why do you say it's 99% propaganda? "sinofication" sounds a lot like "eliminating the existing culture" which sounds a lot like genocide. Genocide is more than just murdering everyone like in some of the most well known cases like the Holocaust -- it includes elimination of an ethnic group by any means possible, including "nativification"

I understand where you're coming from, but -cide implies killing.

the "cide" in genocide refers to destroying

for example, a cultural genocide refers to destroying culture, e.g. Uighur or Muslim culture

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#184

Earlier quoted context omitted.

In fact, the US Department of State recommends that all US citizens have a photocopy of their passport with them, when traveling abroad. Supposedly you get in shorter lines at the consulate if you have at least a photocopy of your passport available. You should be able to petition the consulate of your home country to issue you a new passport. I think it may be illegal, but I've heard from people who travel to places…

Anyone that says you should keep your passport on you when you're in a foreign country has never traveled. I never keep my passport on my person when I'm walking around outside the US. I lock it away as securely as I can wherever I'm staying, and carry a color copy of it in my pocket. Part of this is simply because American passports are extremely valuable. Another part is that anyone who wants to fuck with you in so…

Another part is that anyone who wants to fuck with you in some semi-official capacity now has to choose whether to go back to your hotel or arrest you on the spot, which puts them in a better mind to give up or take a bribe.

Happened to me at an airport in Thailand. Some airside police officer demanded to inspect my passport, then wouldn't give it back to me until I walked him to an ATM so I could pay him a "tax" in cash.

I never went back to Thailand.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#185
post #160

Earlier quoted context omitted.

“We will shoot your satellite if you don’t block access while over China”.

In orbit? Good luck Lasers maybe?

the US has done so with a missile so basic that it's named "standard missile 3"

most satellites will just be following an uninterrupted, predictable path for most of their time

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#186
post #132

Earlier quoted context omitted.

Can't you use a "sanctioned" VPN to tunnel your connection to a "real" VPN or any wireguard endpoint? They could still be able to find out you're using a VPN, but not monitor your traffic.

Yes, you can. But you have to wonder what the sanctioned VPN is doing on/to your machine. There is a lot of trust going into any VPN solution.

are you talking about the VPN endpoint exploiting a 0day vulnerability in the VPN client stack of the OS?

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#187

I was wondering about simply using VPNs, which is not mentioned in the article at all, but checking GFW on Wikipedia, it tells: > The use of VPNs in China can provide individuals access to the international internet, but in China, it can be a potential legal risk. In 2017, the Chinese government declared all unauthorized VPN services to be illegal.[94] An example of the use of this punishment is Vera Zhou, a student…

When I was in China in 2019, the VPN built into google fi actually got me around the GFW with zero effort. I didn’t even realize it until I caught myself checking American social media unhindered. My experience is most younger and tech savvy people have a VPN. It’s common / casual, like speeding your car by 10mph on the highway. Most people are not persecuted for using a VPN, I assume that’s reserved for people who t…

The reverse is true as well. I traveled in India with a friend from China who used their Chinese sim card in India, and their data was censored through the firewall. Really annoying to be outside China and not able to use Google maps.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#188

Earlier quoted context omitted.

In fact, the US Department of State recommends that all US citizens have a photocopy of their passport with them, when traveling abroad. Supposedly you get in shorter lines at the consulate if you have at least a photocopy of your passport available. You should be able to petition the consulate of your home country to issue you a new passport. I think it may be illegal, but I've heard from people who travel to places…

Anyone that says you should keep your passport on you when you're in a foreign country has never traveled. I never keep my passport on my person when I'm walking around outside the US. I lock it away as securely as I can wherever I'm staying, and carry a color copy of it in my pocket. Part of this is simply because American passports are extremely valuable. Another part is that anyone who wants to fuck with you in so…

Yep, laminated color copy is the way to go.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#189
post #57

Earlier quoted context omitted.

At that level, there is no reason to proxy it through a different IP address. If you control the network, you can just make the packets come from the original, real address.

It was probably written by junior devs, like most other software around the world.

GFW that can inspect petabytes of traffic per second for 1.4 bln population cannot be written by juniors

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#190

Earlier quoted context omitted.

[flagged]

We can look at russia arresting random foreign nationals for bullshit reasons right now.

https://www.nytimes.com/article/brittney-griner-russia.html
Post reply on HN