Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How the great firewall of China detects and blocks fully encrypted traffic [pdf]

gfw.report

Post reply on HN
Print view View original

191–200 of 289 posts

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#191

Post by 0xffff2 »

pawelos wrote: post #178
reaperman wrote: post #154

Earlier quoted context omitted.

USA will issue “anyone” 2-3 valid passports at the same time. This is designed for two reasons: 1) you travel a lot and sometimes may need to mail your passport off to get a pre-travel visa from some consulate, while you are still outside the USA. This way you can send off one passport to get the visa for your next country, while keeping a valid passport with you while you’re abroad. 2) You need to travel between Isr…

Israel no longer gives you any visa stamps in passport. https://www.touristisrael.com/the-israeli-passport-stamp/974...

I visited Israel circa 2012 and this was true even then.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#192

Post by dirtyid »

mensetmanusman wrote: post #98

China doesn't realize how much they are being held back by meaningless investments of time and expertise on this. They spend almost the same %GDP as the US does on the US military as on their internal suppression forces. Maybe it's good for the world that they burn so much talent and wealth on adding inefficiency to their internal information exchange.

PRC centralized narrative setting apparatus is more efficient than constant misinformation shitshow on western platforms. Not to mention the entire reason why PRC has domestic info ecosystem is because they were prescient in filtering external content. The system already paid for itself many times over.

>They spend almost the same %GDP as the US does on the US military as on their internal suppression forces.

It's almost as if PRC doesn't spend that much %GDP on military. The waste is PRC spending as much as US on domestic policing, which is not great considering how militarized US policing is. Meanwhile PRC simply doesn't spend that much on defense <2% vs US ~3.5%, if you include guestimates of shadow budgets, 3% vs 6%.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#193

Post by woooooo »

ImPostingOnHN wrote: post #183
ineptech wrote: post #180

Earlier quoted context omitted.

I understand where you're coming from, but -cide implies killing.

the "cide" in genocide refers to destroying for example, a cultural genocide refers to destroying culture, e.g. Uighur or Muslim culture

Would you say the choice of the word "genocide" here is because it's the most accurate description of what's going on?

Or is it chosen for rhetorical/propaganda effect without too much concern for accuracy?

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#194

Post by [deleted] »

rfoo wrote: post #169
law_enforcement wrote: post #102

The comments from people obviously never having been into a restricted country are hilarious. There are a few, most likely shadow approved, VPN providers that work. I refuse to believe they are just smarter than the GFW. I am convinced they are sanctioned and monitored. Which is fine if you never have any beef with the government. Which you never know you do until you do. Stuff like socks5/shadowsocks and wireguard h…

Your comment is equally hilarious from the point of view of a native who lives in China now. idk if i'm smarter than the GFW but every time I rolled my own censorship-circumvention tool it worked well, even the most lazy way worked. I've never used any VPN provider. And FYI even unchanged WireGuard still works, though there seems to be some offline traffic analysis looking for that, so once a week you'd wake up to yo…

[deleted]

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#195

Post by nerdbert »

H8crilA wrote: post #76
JPLeRouzic wrote: post #7

The algorithm found seems so unintuitive that I wonder if it was not found by the AI. " Allow a connection to continue if the first TCP payload (pkt) sent by the client satisfies any of the following exemptions: Ex1: popcount(pkt) len(pkt) ≤ 3.4 or popcount(pkt) len(pkt) ≥ 4.6. Ex2: The first six (or more) bytes of pkt are [0x20,0x7e]. Ex3: More than 50% of pkt’s bytes are [0x20,0x7e]. Ex4: More than 20 contiguous by…

It's extremely intuitive. You're trying to filter unusual, encrypted traffic. First rule exploits the IND-CPA property of most encryption. You want to kill traffic that has about 4 bits set to 1 per byte, i.e. traffic that "looks random". The following rules are exemptions for permissible encrypted or compressed traffic (note that compression, while not IND-CPA, results in high entropy and thus will trigger the first…

Cool, I'll just base32 my encrypted traffic and sail through!

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#196

Post by vkou »

noduerme wrote: post #167
wahnfrieden wrote: post #141

Earlier quoted context omitted.

[flagged]

Police in America don't control residents. Most of the time they can't even control themselves.

They control unwanted residents, and unarmed[1] protesters.

[1] They prefer not to fuck with the armed ones.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#197

Post by last_responder »

ineptech wrote: post #180
matchapples wrote: post #170

Earlier quoted context omitted.

Why do you say it's 99% propaganda? "sinofication" sounds a lot like "eliminating the existing culture" which sounds a lot like genocide. Genocide is more than just murdering everyone like in some of the most well known cases like the Holocaust -- it includes elimination of an ethnic group by any means possible, including "nativification"

I understand where you're coming from, but -cide implies killing.

[flagged]

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#198

Post by justincredible »

throwaway290 wrote: post #124
H8crilA wrote: post #111

Earlier quoted context omitted.

I would disagree. The leading organization is much more aligned with the needs of the nation than the likes of Iran or Russia, which probably wouldn't mind bombing the shit out of their own city if it was necessary to stay in power. For example they actually bow to American pressure and try to avoid sanctions or other trade problems. As of today their navy could be completely destroyed with like 30% of the US Navy, s…

I didn't downvote you but if a government - offers no way of replacing itself democratically - extends own term indefinitely - blocks free exchange of information - censors specific speech that shows its failures or desire of people to replace it - suppresses internal protests with murders and disappearings of people (1989 Tiananmen, 2019+ Hong Kong, blank paper movement, ...) etc then it's super clear its primary go…

[dead]

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#199

Post by ImPostingOnHN »

woooooo wrote: post #193
ImPostingOnHN wrote: post #183

Earlier quoted context omitted.

the "cide" in genocide refers to destroying for example, a cultural genocide refers to destroying culture, e.g. Uighur or Muslim culture

Would you say the choice of the word "genocide" here is because it's the most accurate description of what's going on? Or is it chosen for rhetorical/propaganda effect without too much concern for accuracy?

Would you say the common, accurate usage of the term "cultural genocide" to refer to what the term refers to, is a bigger or smaller problem than the actual cultural genocide itself?

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#200

Post by FredPret »

pessimizer wrote: post #177
FredPret wrote: post #103

This is such an own goal by China. All this useless work done suppressing the human spirit.

> All this useless work done suppressing the human spirit. It also becomes an inspiration to others.

Would-be dictators, or firewall makers?
Post reply on HN