Live data from Hacker News

Lawmakers want to ban VPNs

eff.org

381–390 of 419 posts

Re: Lawmakers want to ban VPNs

#381
post #345

Earlier quoted context omitted.

> Using this tech, all the CP traffic would detectably flow towards my ip, right? No, but I'm curious why you'd think that?

The risk surely exists if you decide to run their gate service: "After you activate the VPN Gate Service, anyone can connect a VPN connection to your computer, and access to any hosts on the Internet via your computer" "When you are running the VPN Gate Relaying Function on your company's network, then any person's communication to Internet hosts will be relayed via your company's network." > https://www.vpngate.net/…

It's no different from a coffee shop providing an open WiFi, or an ISP providing you with a fiber connection. What people do on it is their problem, not yours. Their web traffic is wrapped in another layer of HTTPS, not in plaintext you can read. Most traffic is not criminal traffic, you're not any more likely to be the exit node for a criminal than you are to purchase something from a criminal in real life. That waitress you just tipped at the restaurant? Might've been a murderer. In either case, you don't know that you've dealt with a criminal. You providing the exit node is like a transaction: you're "paying" for the VPN service by helping run the service.

The point of all this is to make it so that governments can't pin down the IP of any client without expending significant resources. It makes mass surveillance, control, and prosecution prohibitively expensive. Law enforcement would still be able to trace suspects through the hops with their rich arsenal of backdoors, exploits, and clues in the physical world, just not without significant effort and therefore expenses. So they will only be able to pursue criminals in a targeted manner, which is how law enforcement in a free society is supposed to work.

The decentralized VPN service can only work if clients are also servers, otherwise there will be too many people who use the service without contributing to it, resulting in a tragedy of the commons.

Re: Lawmakers want to ban VPNs

#382

Earlier quoted context omitted.

> I think us software people tend to think in absolutes. "Software people" have an above-average understanding of probabilities overall. It's politicians who tend to think in absolutes. If you tell them that the effectiveness of something is poor and vastly exceeded by its costs, they say "so you admit that its effectiveness is more than zero". And then people will instead have to say that something doesn't work when…

I'll be honest, I'm struggling to understand how your reply addresses the points made in OP's comment. OP's points were: completely banning VPN is difficult significantly reducing VPN usage is a win for (totalitarian) govs it's enough to make it difficult for the layman to achieve govs' goal

> completely banning VPN is difficult

No one disputes this.

> significantly reducing VPN usage is a win for (totalitarian) govs

But a loss for non-totalitarian countries, and therefore a cost rather than a benefit in the context of US states doing it.

> it's enough to make it difficult for the layman to achieve govs' goal

And I addressed that, but I'll reiterate.

Even ordinary people can bypass VPN blocks with a trivial amount of effort. It's really not that hard, and in fact there is an entire cottage industry dedicated to making it easier, because we don't want totalitarian regimes keeping their population in the dark -- and the people thwarting those blocks are our friends, or often even the US government itself, for actually good reasons for once.

So if you block something that people aren't that interested in seeing, like criticism of the government when that's something that tends to make a lot of people uncomfortable, then blocking people from seeing it has an effectiveness which is a little better than totally negligible. Because some people won't go out of their way even a little bit to see it, and then they don't. (Which is why it's important that we make it absolutely trivially easy for ordinary people to bypass those blocks.)

Whereas if you're trying to block something that people actually want -- drugs, porn, whatever -- it's not going to work because that trivial amount of effort to bypass it is too small to be meaningful in a context where the user is actively seeking it out.

Re: Lawmakers want to ban VPNs

#383

A device-side IP filter locked behind a password that parents can configure in the device's settings would be much more effective and easier to implement than censoring the Internet. This should be the default solution, yet it's never brought up for whatever reason. Not to mention these online content censorship laws for kids are wrong in principle because parents are supposed to be in control of how they raise each…

> parents are supposed to be in control of how they raise each of their own kids You realize that a lot of parents support this sort of thing because they are not technically sophisticated enough to control it themselves? Or they simply think that it has no place in polite society? That is why politicians enact these laws, because they are hearing from constituents that they want it.

> You realize that a lot of parents support this sort of thing because they are not technically sophisticated enough to control it themselves?

We can make it so that it's as easy as changing the settings on their child's phone and then setting a password to lock that setting. The technical barrier isn't high.

> Or they simply think that it has no place in polite society?

That doesn't justify giving the government the tools to crush free speech on the Internet, which threatens the very existence of polite society. The current wave of authoritarianism around the world is a direct consequence of undemocratic governance systems on the Internet. In hindsight, it was kind of our fault. Failing to foresee its civilization-scale impact, we did not design the Internet with democratic principles in mind. This eventually resulted in large social media and cloud services platforms with enough users to sway elections, that operate under opaque centralized moderation and curation mechanisms. This became a real problem when smartphones were invented and most of human communication suddenly got moved online: freedom of speech has been de facto damaged for almost two decades now.

But it's a problem that can reverse itself, if we can figure out a way to neutralize the Internet's implicit incentives that encourage the centralization of compute and storage (which is equivalent to the centralization of power when most communication occurs online). And as you might guess, such solutions require a free enough Internet to create and deploy. That's why we must push back against these Internet control laws in the meantime, otherwise governments will simply use these legal tools to suppress attempts to decentralize the Internet, and we'd end up with authoritarian regimes all around the world.

Re: Lawmakers want to ban VPNs

#384

Earlier quoted context omitted.

> I think us software people tend to think in absolutes. "Software people" have an above-average understanding of probabilities overall. It's politicians who tend to think in absolutes. If you tell them that the effectiveness of something is poor and vastly exceeded by its costs, they say "so you admit that its effectiveness is more than zero". And then people will instead have to say that something doesn't work when…

> "It works better for totalitarian regimes" is an argument for not doing it. The problem is that authoritarianism has been allowed to become attractive to many politicians, because they are allowed to be bought by corporate money, even if it harms their constituents. Rights, freedom, and privacy has become secondary to money and the blind lust for power.

That's more of a second order effect but I'm not sure it's wrong.

You have so many twits trying to get away with authoritarian nonsense that they're conditioning people through propaganda to accept authoritarian nonsense. What happens then? More twits trying to get away with authoritarian nonsense.

We need to come up with a better solution to this than the historical norm of things getting so bad that people are finally willing to fight a war over it.

Re: Lawmakers want to ban VPNs

#385

Earlier quoted context omitted.

Is it working in Russia? I'm Russian and basically every single person I know has and actively uses a VPN with no consequences. WireGuard also works just fine - I was able to selfhost and use it without any extra obfuscation. They only blocked a few largest providers, but that's seemingly it.

I'd be concerned there about the combination of "loggable" with "practically everyone breaks the law every day" (the latter is generally true in many countries, but not always in ways that are easy to record). You can get away with it but if you ever displease someone, then the consequences could show up suddenly then.

That's the regime that the vast majority of the world lives under now. You're almost certainly breaking the law in some way; we have a vast corpus of law that is usually unenforced until you draw the ire of some bureaucrat, politician, or law enforcement officer, and then they come down on you like a ton of bricks. The average citizen is usually counting on being boring, nondescript, and non-threatening enough that nobody bothers to call them on it.

Why else do you think actual policies change so much between presidential administrations (assuming a U.S. bias, but other countries have similar issues)? All the laws about cryptocurrency, DEI, greenhouse gas emissions, environmental regulations, etc. that the Biden administration cared about but the Trump administration is choosing not to enforce are still on the books. If Democrats ever get back in to power, people that are casting them aside under pressure from the current administration are likely in for a whole lot of pain. And likewise, during the Biden administration all the laws about immigration and federal control over the federal budget were still in force, and people who relied upon a friendly administration are currently going through a world of pain right now.

No, this is not the way it should be. If I were to rewrite the Constitution, one thing I'd put in is a feedback mechanism between legislation and enforcement, so that laws which are not enforced fall off the books, and it becomes illegal for the executive branch to choose not to enforce a law. That'd force the body of law to converge to what is a.) realistically enforceable and b.) what actually happens in practice, so that people can look at what their neighbors are doing and be reasonably sure that they're not breaking any laws by doing the same thing.

But in the absence of that, your best bet is often to still just look at what your neighbors are doing and do the same thing, because then you blend in to the crowd and don't attract attention.

Re: Lawmakers want to ban VPNs

#386
> To both implement an age verification system and also to block the access of users connected via VPN.

This would require blocking VPN use for all users, regardless of where the user comes from (at just until their age verified). That seems like a big invasion of rights of users from other states.

If they insist on blocking VPN use, the onus should be on VPN service providers, or VPN service users.

Re: Lawmakers want to ban VPNs

#387

Earlier quoted context omitted.

It won’t even work* *without resorting to complete Russian style government control The US is not (yet) Russia. The rule of law is definitely being destroyed as we speak, so who knows 5, 10 years down the road, but there are still several prerequisite institutions that need to be destroyed before the US could reliably enforce a VPN ban.

Every country that has slid into North Korea style total control begins with a "it won't happen here. And it'd stop before it gets that bad."

Every country that hasn't begins with same

Re: Lawmakers want to ban VPNs

#388

Earlier quoted context omitted.

Wow, I have no words. I could strike some off your comment to make something, though.

Random trivia: Memes in that format are known as "speed of lobsters" memes, where you take a screenshot of some text/post/tweet/whatever and then delete/hide words and letters to make up completely different sentences.

Well, I thought I knew all the memes, but I learned something new, thank you.

Re: Lawmakers want to ban VPNs

#389

"Here's what happens if VPNs get blocked: everyone has to verify their age by submitting government IDs, biometric data, or credit card information directly to websites—without any encryption or privacy protection." Can someone explain how this is true? Even if there is not a VPN, there should be https encryption and privacy protection.

If you have https encryption and privacy protection, how is the VPN ban going to be enforced?

Re: Lawmakers want to ban VPNs

#390

Earlier quoted context omitted.

If you haven’t noticed, “the people in DC” right now don’t care about the US outside of red states. And the reason a plane is different because people think it could happen to them if they got on a plane. If you don’t live in NYC, it’s easy to avoid the NYC train system. If I want to get from ATL to Seattle - what am I going to do drivers two or three days? > Less than a quarter as many people as get stuck when the N…

> If you haven’t noticed, “the people in DC” right now don’t care about the US outside of red states. I feel like you're failing to see the symmetry at all. We have direct historical evidence on point that they cared about some New York City skyscrapers, and those were definitely Republicans too. Do you really think they wouldn't care about the same thing today regardless of whether it was a plane or a train? > And t…

No I’m saying it’s completely illogical that you believe the US pressured countries to have the same security screenings on domestic flights within the country including to get on a baby twin engine plane for a 30 minute flight from SJO to XQP or that countries like Great Britain or Israel that had a history of bombings wouldn’t have increased security measures.

If you are asking whether it is the same, everywhere. In my recent experience of flying out of international airports…

- LHR - you don’t remove your shoes and they have newer scanners that supposedly detect explosives in liquids.

- SJO - you don’t remove your shoes

- XQP - they don’t have sophisticated scanners. Security uses handheld scanners. But what do you expect when the terminal is literally a hut? (https://upload.wikimedia.org/wikipedia/commons/thumb/0/01/Qu...)

> But if it happens to a train people don't think it could happen to them if they got on a train?

Well first most people outside of NYC aren’t as heavily dependent on public transportation. They already see it as dangerous and for poor people (yes I think that’s ignorant). In other words people with means already avoid public transportation and they would even be more likely to do so. This is very much a car centric culture

Do you know how many people outside of NYC believe the narrative that the minute you step on a train in NYC that you are going to be shot or raped?

No I don’t believe that. I’ve used NYC mass transit once when I went to the US Open (the reason I mentioned Queens where the Arthur Ashe stadium is).

I lived in Atlanta for 25 years. I took MARTA once to get from the north suburbs of Atlanta to the airport. The rest of the time we would drive or take Uber. I took it again recently to get from the airport to downtown when visiting.

MARTA also has such a reputation for only being for poor people to the point where its derogatorily called Moving Africans Rapidly Through Atlanta (before the pearl clutching starts about me using a racist acronym I’m Black). If people started bombing trains. You would see even less ridership from people who had alternatives.

> All of the transportation systems are interconnected. What does the connectedness change? If something happens on a train in New York, does it materially affect San Francisco

You mean all 5 people who ride trains inter-city across the country?

> Which is another reason it's a farce, because it also affects flights entering the US and then it doesn't matter what the TSA does when you can go through airport security in the country of your choosing with the weakest or most bribe-accepting security that lets you get behind the checkpoint on a plane to the US.

Most bribes are for drugs and other contraband. Have you ever in the past 20 years heard of a case where someone bribed an official to bring a weapon on board a plane that was used to take over or bomb a plane?

But you still haven’t answered the main overriding question - why does every major airport in every country have the same procedures? Is everyone in the world wrong? And if it is because of supposed pressure from the US, why is it true for domestic flights within their own borders and for their train systems (at least my n=1 experience on a train outside of the US)?

Post reply on HN