Live data from Hacker News

VPN access being disabled in China

rendezvous.blogs.nytimes.com

41–50 of 62 posts

Re: VPN access being disabled in China

#41

Before travel to China, create a throwaway email account on a service, possibly Yahoo. Don't touch your real email accounts while you're there, if possible. The only time I've ever had an email account hacked is following use in China.

Note that Yahoo has good relationships with the government. I would definitely recommend gmail instead

Re: VPN access being disabled in China

#42

Before travel to China, create a throwaway email account on a service, possibly Yahoo. Don't touch your real email accounts while you're there, if possible. The only time I've ever had an email account hacked is following use in China.

My employer (smartly) prohibits bringing any corporate equipment into China - including cell phones which access company email, and generally suggest not touching the Internet (at least any of your accounts) at all.

Having been there, this is honestly very good advice.

Re: VPN access being disabled in China

#43
post #33

Here is a real test for Anonymous; take down the worlds most notorious firewall.

The lulz does not seem like a fair reward when the adversary's not even slightly squeamish about abducting you and your family and selling your organs.

That's a pretty strong statement (not that I disagree with it), just that it's strong enough that I'd love to see a citation for evidence of that history.

Re: VPN access being disabled in China

#44

This sucks for travelers and ex-pats, but for China's future this is a very, very, very big deal. I lived in Shanghai last year, and Chinese Internet surveillance is unreal. I could use gmail chat to talk about tiananman square, but as soon as I did all of my Google apps would suddenly be unavailable. I can only assume that when i used certain keywords my every chat was being monitored. A VPN was the only way I could…

How were they able to sniff your keywords on Gmail chat? I thought as long as you are connected via HTTPS, your packets are encrypted.

Or does China not allow connecting to foreign websites via HTTPS?

Re: VPN access being disabled in China

#45
post #36

Earlier quoted context omitted.

Oh wow, this is not good. Is it possible to evade this sniffing? I have my own Linode VPS, and have learnt to use Tinc VPN software. I'm learning Mandarin and plan to travel to China in a year or few, so this censorship makes me sad and hits my motivation.

Many of us on the mainland ("us" being the type of people who would read HN) have switched to SSH proxies over port 443. Sshuttle [1] is highly recommended. 1. https://github.com/apenwarr/sshuttle

Interesting that SSH is getting through still.

I wonder how much longer till Chinese avoidance VPN tech needs to resort to stenography in images to transfer data. Masking data as cat pictures would be slow but not automatically detectable.

Re: VPN access being disabled in China

#46

I used to run a relatively successful internet-oriented startup in mainland China. Having spent most of a decade there since 2001, in fact the majority of my adult life, I considered it home. Unfortunately, the government - who initially woeed me to return to China with a reasonably lucrative scholarship - keeps making shitty decisions that just make it less and less attractive to live in. Increasing levels of intern…

Out of curiosity, what was the startup?

Re: VPN access being disabled in China

#47

I used to run a relatively successful internet-oriented startup in mainland China. Having spent most of a decade there since 2001, in fact the majority of my adult life, I considered it home. Unfortunately, the government - who initially woeed me to return to China with a reasonably lucrative scholarship - keeps making shitty decisions that just make it less and less attractive to live in. Increasing levels of intern…

Out of curiosity, what was the startup?

'Dajiudianwang' hotel reservation, ~2007-2009. We reached the same property network size as CTrip and ELong (3300+ individual property contracts across China), but also provided services in (non-broken) English, Japanese Korean, Thai and Vietnamese. We were highly automated, running a call center and paperless, digital fax workflow on a custom diskless Linux and asterisk on an E1 over private fibre.

I gave up on it because, despite basically winning Europe's largest travel-industry VC event in London in 2009, I didn't find a viable source of venture capital to expand our marketing, once the system was proven and almost break-even on self-funded capital. Basically locals wanted to take over, and foreigners didn't trust the Chinese legal system. I write it off as my 'Chinese MBA' now, and happily take a salary and less stress instead.

I'd be interested to pick it up again, if I found the right backers.

PS. Oh! David! Hey .. I think we corresponded once before. :)

Re: VPN access being disabled in China

#48

Time to create Bitcoin-enabled p2p VPN market? I have thought about the idea for some time. The marketplace operator could take something like 30% cut. Any private invidual could sell their internet connection to the chinese and earn some bitcoins in the process. There could be some rules which could stop the chinese goverment from knowing which IP's operate in the market. For example, someone could buy certain VPN/I…

Bitcoin "solves" the problem of anonymous payments, but with copyright and other liability, never mind asymmetrical connections, would probably make this unappealing to providers.

Re: VPN access being disabled in China

#49

This is nothing new. They have added more IPs to the VPN blocklist. I have no idea why this is news. This happens several times per year. This cat and mouse game has been going on for years. Every time this happens it is just a pain in the ass to find a new VPN that isn't blocked. If you are technical, it is best to just setup your own VPN on linode or amazon. That way you have less problems with blocked IPs.

This is what they used to do, but they've gotten more sophisticated - I've been running VPNs for China for my family on EC2 for a while. As far as I can tell, they almost never flat out block an IP. Initially they block a DNS hostname from resolving to a specific IP, then they start filtering out various different ports (including the default VPN ones). You can normally change to a random port and get OpenVPN to star…

Well, that's exactly why I thinked of this (concept only at this point). http://www.sami-lehtinen.net/blog/simple-protocol-obfuscator...

Re: VPN access being disabled in China

#50

This sucks for travelers and ex-pats, but for China's future this is a very, very, very big deal. I lived in Shanghai last year, and Chinese Internet surveillance is unreal. I could use gmail chat to talk about tiananman square, but as soon as I did all of my Google apps would suddenly be unavailable. I can only assume that when i used certain keywords my every chat was being monitored. A VPN was the only way I could…

It is not illegal for foreigners to talk about the three Ts with Chinese nationals, its just not very wise. China technically has the right of free speech in their constitution, so you wouldn't go to jail for this (but you could still get in trouble, lose your job, get deported, etc...)
Post reply on HN