Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How the great firewall of China detects and blocks fully encrypted traffic [pdf]

gfw.report

Post reply on HN
Print view View original

231–240 of 289 posts

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#231

Post by blablablub »

cookiengineer wrote: post #19

But does the paper imply that something like chunked encoding smuggled HTTP requests with an encrypted payload after the second chunk would work? That is, assuming entry nodes are available as e.g. nginx proxies inside the Chinese ASNs and are allowed to operate serving websites to ASNs from foreign countries. I'm mentioning nginx because there were some related bypass vulnerabilities in the past, and one could argue…

tried that...done that... blocked The last rule of the GFW is: If you don't know what this traffic is or it looks suspicious, block it.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#232

Post by psychphysic »

stevofolife wrote: post #156
guessmyname wrote: post #107

Earlier quoted context omitted.

More context about this WikiPedia excerpt: → https://www.chinafile.com/extensive-surveillance-china → https://www.rfa.org/cantonese/news/student-01272020075256.ht... It looks like 周月明 (Vera Yueming Zhou) was sent to a Chinese concentration camp mostly because she was part of a religious minority and not necessarily for using a VPN to access the University of Washington’s website. > Vera was living in her hometown of…

Thanks for this elaboration. Upon reading original comment, it felt very strange that she was "encamped" for using VPN to access her school homework. Immediately I knew there was more than it meets the eye.

The best bit is that we're enacting very similar laws in the West [0]. As much as China is often deplorable I do wonder how much of a blind spot we have here to our own sins.

[0] https://news.ycombinator.com/item?id=36428046

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#233

Post by mannerheim »

pindab0ter wrote: post #226
mannerheim wrote: post #179

Earlier quoted context omitted.

[flagged]

Can we not call that "cute"? That seems needlessly abrasive for people who are genuinely unaware.

Anyone who believes themselves exempt from the laws of a country they travel to because of a little booklet they carry isn't just unaware, they are foolish, and dangerously so because they not only endanger themselves, but everyone else they convince to adopt this attitude. Better they receive the scorn they deserve now than for them or anybody else to face the same consequences Griner or Warmbier faced.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#234

Post by mannerheim »

thalassophobia wrote: post #228
jareklupinski wrote: post #190

Earlier quoted context omitted.

https://www.nytimes.com/article/brittney-griner-russia.html

She did commit a crime by travelling to Russia with an illegal substance, for which she got roughly the same sentence as a typical Russian would get if caught with a similar amount of drugs. This case doesn't seem to be out of the ordinary, except for the "criminal" being a famous foreigner.

Using a VPN in China is also a crime.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#235

Post by osti »

mooxiu wrote: post #82
DeathArrow wrote: post #75

What kind of websites does China block?

google, facebook, amazon, twitter, github, you name it ...

Not sure where you get your info, but github definitely isn't blocked. And there is a amazon.cn, just no one uses that crap.

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#236

Post by jiggawatts »

narism wrote: post #62
__sy__ wrote: post #41

I’ve done so much experimentation with GFW pre pandemic while staying in China for extended period of times. I was always amazed at how quickly they would catch up on my shadowsocks, random ssh tunnels…etc. 48 hours top before I had to rotate IPs. This report seems to indicate this is now instant? Fwiw My most reliable trick ended up piggie-backing off of a physical line going into Hong Kong from Shenzhen, and when r…

MS and other vendors recommend doing something similar (connecting via Hong Kong): https://learn.microsoft.com/en-us/azure/virtual-wan/intercon...

Meanwhile Microsoft refuses to implement TLS 1.3 in their CDNs so that HTTPS-VPNs can’t be blended in with other Microsoft traffic.

“You should…” from any large corporation translates in my mind to “…because we certainly won’t.”

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#237

Post by goodgrieving »

ImPostingOnHN wrote: post #218
woooooo wrote: post #216

Earlier quoted context omitted.

That article IIc pivots on the key phrase "physical destruction". Look, internment isnt good either, why dig in your heels on the most loaded possible word?

physical destruction, internment, cultural genocide, they are all happening why not focus on that, rather than your personal, individual dislike of a term? why dig your heels in on the semantics of the thing, rather than the substance?

[flagged]

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#238

Post by onetokeoverthe »

pessimizer wrote: post #168
guessmyname wrote: post #107

Earlier quoted context omitted.

More context about this WikiPedia excerpt: → https://www.chinafile.com/extensive-surveillance-china → https://www.rfa.org/cantonese/news/student-01272020075256.ht... It looks like 周月明 (Vera Yueming Zhou) was sent to a Chinese concentration camp mostly because she was part of a religious minority and not necessarily for using a VPN to access the University of Washington’s website. > Vera was living in her hometown of…

Exactly. This is the period when Muslim ethnic groups like the Uigurs were being rounded up on any pretense to be reeducated into not wanting to be separatists anymore (often with no indication that they had anything to do with separatism other than their ethnicity.) Seeing the VPN pop up was more than enough of an excuse. Calling it a "genocide" is 99% propaganda, but it was obviously a sinofication meant to get rid…

[dead]

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#239

Post by jdkee »

jxramos wrote: post #220
last_responder wrote: post #197

Earlier quoted context omitted.

[flagged]

what? > cidium "act of killing," from caedere "to kill, to cut down" (from PIE root *kae-id- "to strike"). https://www.etymonline.com/search?q=homocide https://www.etymonline.com/search?q=fratricide https://www.etymonline.com/search?q=suicide lots of others

Wrong.

See https://www.un.org/en/genocideprevention/documents/atrocity-...

Re: How the great firewall of China detects and blocks fully encrypted traffic [pdf]

#240

Post by throwaway290 »

pessimizer wrote: post #172
throwaway290 wrote: post #124

Earlier quoted context omitted.

I didn't downvote you but if a government - offers no way of replacing itself democratically - extends own term indefinitely - blocks free exchange of information - censors specific speech that shows its failures or desire of people to replace it - suppresses internal protests with murders and disappearings of people (1989 Tiananmen, 2019+ Hong Kong, blank paper movement, ...) etc then it's super clear its primary go…

There's probably more disagreement within the Chinese government than between the two dominant parties of each of the western powers.

Yes of course. Because those disagreements are about how to stay power really, and something else for looks.
Post reply on HN