Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How the great firewall of China detects and blocks fully encrypted traffic [pdf]

gfw.report

Post reply on HN
Print view View original

211–220 of 289 posts

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#211

Post by dizhn »

proto_lambda wrote: post #30
dizhn wrote: post #15

Earlier quoted context omitted.

We have a satellite office in Dubai. I know their static IP. When they connect to our imap/smtp server they are coming in from another IP. I never looked into it deeply but assumed their connection is being diverted for inspection. (If true, they would probably not be below performing industrial espionage with the data they are accessing)

At that level, there is no reason to proxy it through a different IP address. If you control the network, you can just make the packets come from the original, real address.

It might be something government mandated where all ISPs direct mail traffic to a central location. (The largest ISP is the government by the way)

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#212

Post by qingcharles »

helen___keller wrote: post #50
WinstonSmith84 wrote: post #3

I was wondering about simply using VPNs, which is not mentioned in the article at all, but checking GFW on Wikipedia, it tells: > The use of VPNs in China can provide individuals access to the international internet, but in China, it can be a potential legal risk. In 2017, the Chinese government declared all unauthorized VPN services to be illegal.[94] An example of the use of this punishment is Vera Zhou, a student…

When I was in China in 2019, the VPN built into google fi actually got me around the GFW with zero effort. I didn’t even realize it until I caught myself checking American social media unhindered. My experience is most younger and tech savvy people have a VPN. It’s common / casual, like speeding your car by 10mph on the highway. Most people are not persecuted for using a VPN, I assume that’s reserved for people who t…

This is the same in Qatar, and probably in other Middle-East countries. Most of the residents use a VPN to get around the firewall, but I don't think anyone would be prosecuted for it unless the police wanted a nice easy reason to get you into custody.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#213

Post by fnordpiglet »

stevofolife wrote: post #156
guessmyname wrote: post #107

Earlier quoted context omitted.

More context about this WikiPedia excerpt: → https://www.chinafile.com/extensive-surveillance-china → https://www.rfa.org/cantonese/news/student-01272020075256.ht... It looks like 周月明 (Vera Yueming Zhou) was sent to a Chinese concentration camp mostly because she was part of a religious minority and not necessarily for using a VPN to access the University of Washington’s website. > Vera was living in her hometown of…

Thanks for this elaboration. Upon reading original comment, it felt very strange that she was "encamped" for using VPN to access her school homework. Immediately I knew there was more than it meets the eye.

It’s subjective of course, but the real story seems worse.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#214

Post by mayormcmatt »

woooooo wrote: post #193
ImPostingOnHN wrote: post #183

Earlier quoted context omitted.

the "cide" in genocide refers to destroying for example, a cultural genocide refers to destroying culture, e.g. Uighur or Muslim culture

Would you say the choice of the word "genocide" here is because it's the most accurate description of what's going on? Or is it chosen for rhetorical/propaganda effect without too much concern for accuracy?

Not the person you're responding to, but it is an accurate description of genocide under its current meaning as defined by the UN (probably the most authoritative body on this kind of matter).

https://www.un.org/en/genocideprevention/genocide.shtml

What the Chinese are doing there is covered under Article II, c.

If you are being pedantic by holding fast to the literal Greek translation of "geno" and "cide" then, well, this is simply not the complete modern meaning of the term.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#215

Post by l3mure »

pessimizer wrote: post #168
guessmyname wrote: post #107

Earlier quoted context omitted.

More context about this WikiPedia excerpt: → https://www.chinafile.com/extensive-surveillance-china → https://www.rfa.org/cantonese/news/student-01272020075256.ht... It looks like 周月明 (Vera Yueming Zhou) was sent to a Chinese concentration camp mostly because she was part of a religious minority and not necessarily for using a VPN to access the University of Washington’s website. > Vera was living in her hometown of…

Exactly. This is the period when Muslim ethnic groups like the Uigurs were being rounded up on any pretense to be reeducated into not wanting to be separatists anymore (often with no indication that they had anything to do with separatism other than their ethnicity.) Seeing the VPN pop up was more than enough of an excuse. Calling it a "genocide" is 99% propaganda, but it was obviously a sinofication meant to get rid…

> In the beginning, they were inspired and immunized by the US's anti-Muslim fervor during the GWB invasions (we were not only not criticizing, but probably even sharing intelligence with China.)

Yeah, seems to be overlooked quite a lot since it's convenient for the US narrative lately.

> Starting in 2002, the American government detained 22 Uyghurs in the Guantanamo Bay detainment camp. The last 3 Uyghur detainees, Yusef Abbas, Hajiakbar Abdulghupur and Saidullah Khalik, were released from Guantanamo on December 29, 2013, and later transferred to Slovakia.

> None of the Uyghurs wanted to be returned to China. The United States declined to grant the Uyghurs political asylum, or to allow them parole, or even freedom on the Naval Base.

> A May 2008 report by the Inspector General of the United States Department of Justice claimed that American military interrogators appeared to have collaborated with visiting Chinese officials at Guantánamo Bay to enact sleep deprivation of the Uyghur detainees.

https://en.wikipedia.org/wiki/Uyghur_detainees_at_Guantanamo...

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#216

Post by woooooo »

mayormcmatt wrote: post #214
woooooo wrote: post #193

Earlier quoted context omitted.

Would you say the choice of the word "genocide" here is because it's the most accurate description of what's going on? Or is it chosen for rhetorical/propaganda effect without too much concern for accuracy?

Not the person you're responding to, but it is an accurate description of genocide under its current meaning as defined by the UN (probably the most authoritative body on this kind of matter). https://www.un.org/en/genocideprevention/genocide.shtml What the Chinese are doing there is covered under Article II, c. If you are being pedantic by holding fast to the literal Greek translation of "geno" and "cide" then, well…

That article IIc pivots on the key phrase "physical destruction".

Look, internment isnt good either, why dig in your heels on the most loaded possible word?

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#217

Post by cheaprentalyeti »

seanmcdirmid wrote: post #92
mooxiu wrote: post #82

Earlier quoted context omitted.

google, facebook, amazon, twitter, github, you name it ...

Also Reddit (ironically Chinese owned).

Reddit's owned by the Chinese? I thought they were owned by a US-based conglomerate called Advance Publications, which is the same group that owns Conde Nast.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#218

Post by ImPostingOnHN »

woooooo wrote: post #216
mayormcmatt wrote: post #214

Earlier quoted context omitted.

Not the person you're responding to, but it is an accurate description of genocide under its current meaning as defined by the UN (probably the most authoritative body on this kind of matter). https://www.un.org/en/genocideprevention/genocide.shtml What the Chinese are doing there is covered under Article II, c. If you are being pedantic by holding fast to the literal Greek translation of "geno" and "cide" then, well…

That article IIc pivots on the key phrase "physical destruction". Look, internment isnt good either, why dig in your heels on the most loaded possible word?

physical destruction, internment, cultural genocide, they are all happening

why not focus on that, rather than your personal, individual dislike of a term?

why dig your heels in on the semantics of the thing, rather than the substance?

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#219

Post by noduerme »

CamperBob2 wrote: post #206
noduerme wrote: post #167

Earlier quoted context omitted.

Police in America don't control residents. Most of the time they can't even control themselves.

Police in America don't control residents. How was your nap, Mr. Van Winkle? 2020 wasn't a great year in the US. You were better off spending it asleep, trust me.

Don't flatter yourself. Nothing happened in 2020 that hasn't happened a lot worse, a lot more times before in America. If anything, the police were surprisingly ineffectual at protecting the owners' interests. I'll step out and burn a flag all day long in the street. They ain't gonna arrest me.

I've seen the police publicly flog random people on the street in Vietnam just for being in their way. What a wonderfully just, equitable socialist paradise.

Go check out and live in a country where the police actually control people and get back to me.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#220

Post by jxramos »

last_responder wrote: post #197
ineptech wrote: post #180

Earlier quoted context omitted.

I understand where you're coming from, but -cide implies killing.

[flagged]

what?

> cidium "act of killing," from caedere "to kill, to cut down" (from PIE root *kae-id- "to strike"). https://www.etymonline.com/search?q=homocide https://www.etymonline.com/search?q=fratricide https://www.etymonline.com/search?q=suicide

lots of others

Post reply on HN