91–100 of 184 posts
Can anyone from India confirm if this proxy server [1] is enough to bypass the block? Basically it is a proxy that alters HTTPS traffic to prevent DPI systems from detecting the domain during the TLS handshake. At least in Spain it works for me to bypass the blocking of the major ISPs [2]. [1] https://github.com/hectorm/demergi [2] https://github.com/hectorm/demergi/blob/master/ISP.md
Indian here. This seems to be blown a bit out of proportion. I am residing in a Tier-1 city in India and have an internet connection with a local ISP. I am able to access the content on the supposed blocked domain, so this is probably one ISP proactively blocking the domain without it being formally asked to do so (court order can't be ISP-specific AFAIK). I work in a large consultancy firm and have friends in other…
The post specifically mentions which one ISP is doing the blocking. If you're not using them, then it likely wouldn't affect you... until your ISP also starts following the order.
If anything, your comment is trying to heavily downplay what is happening.
Indian here. This seems to be blown a bit out of proportion. I am residing in a Tier-1 city in India and have an internet connection with a local ISP. I am able to access the content on the supposed blocked domain, so this is probably one ISP proactively blocking the domain without it being formally asked to do so (court order can't be ISP-specific AFAIK). I work in a large consultancy firm and have friends in other…
Earlier quoted context omitted.
> On Android: Most phones nowadays should have DoT support built-in nowadays.
> Most phones nowadays should have DoT support built-in nowadays. DoT does help even if it can be trivially blocked (more than one way to do so, but blocking TCP on port 853 would do the trick)... DoT cannot help bypass SNI-based censorship (unless apps implement domain-fronting).
Indeed, and this is exactly why DoH is better than DoT.
> DoT cannot help bypass SNI-based censorship (unless apps implement domain-fronting).
TLS ECH will. I can't wait for it to become mainstream.
For folks looking to bypass these rudimentary DPI blocks, you don't really need a VPN. DoH + one of these should be enough On Windows: - GoodbyeDPI: https://github.com/ValdikSS/GoodbyeDPI ( https://ntc.party/c/community-software/goodbyedpi/8 ) On Mac / Linux: - GreenTunnel: https://github.com/SadeghHayeri/GreenTunnel ( https://www.npmjs.com/package/green-tunnel ) On Android: - Intra: https://github.com/jigsaw-code/in…
How about standing up to the people who implemented the ban and their supporters. I don't understand why we are working around oppression.
A great time to consider self-hosting your Git repositories then? Like all the inflated hype in the news with the federation 'goobledegook' and 'technobabble' with Mastodon and alternatives with techies spinning up instances, perhaps it is about time that techies use Git properly and consider self-hosting your repositories just like how many techies do with self-hosting Mastodon instances? I don't think there is an e…
Except moving your repo is a matter of changing the origin, pushing and notifying your co workers. It's not like moving social network identity, and it saves some admin burden. If you use just the repo feature, that is. If you fall into the trap of using GitHub's other services you have vendor lock in and you're more screwed than when considering moving from Twitter to Mastodon.
I would also argue that moving to a self hosted remote is going to have significant administrative burden when it comes to security and updates compared to anything SaaS.
Most people use GitHub, GitLab, and Bitbucket for the collaboration features, everyone already knows they can run vanilla git and actively choose not to.
[flagged]
[flagged]
Earlier quoted context omitted.
Hence the "no fallback" point. Bad guys can always block entire IPs, and by not having a fallback to insecure SNI, that's their only choice.
As someone who doesn't want untrusted devices on my network, I'd want to be able to encrypt SNI at my firewall.
The fact that people rely on GitHub, even when it is based on git, which is free and distributed software, shows how easy it is for big companies to force users into their closed software.
GitHub is free for individuals and OSS projects... Most people don't want to manage their own vanilla Git server. GitHub, GitLab, and Bitbucket provide collaboration features you'll never see in Git.