News for hackers. Stuff that matters.

A comment on China’s scary lesson to the world: Censoring the Internet works.

Re:China’s scary lesson to the world: Censoring the Internet... by kitchi on Tuesday May 24, 2016 @01:51AM (#11759224)
> VPN software is simple

Can someone explain why VPN software is "simple"? I thought it encrypted your data so they cannot be inspected, plus if you tunnel over the HTTP/HTTPS ports how can VPN traffic be separated out from "regular" traffic?

[ Parent | on HN ]
Re:China’s scary lesson to the world: Censoring the Internet... by fiveyearsinarow on Tuesday May 24, 2016 @01:55AM (#11759244)
Because to establish the tunnel, you need to send some "handshake" packets to the server. Those packets are not encrypted and can be easily identified and dropped.
[ Parent | on HN ]
Re:China’s scary lesson to the world: Censoring the Internet... by netheril96 on Tuesday May 24, 2016 @02:02AM (#11759265)
Which is why `shadowsocks` has become popular to bypass the GFW: it has no such handshake phase and hence cannot be easily identified.
[ Parent | on HN ]
Re:China’s scary lesson to the world: Censoring the Internet... by fiveyearsinarow on Tuesday May 24, 2016 @02:27AM (#11759345)
...and when GFW has trouble stopping `shadowsocks`, it threatens the author of the software. GFW is not only the technology, which is easy to bypass, but also the system that average citizen cannot escape.
[ Parent | on HN ]
Re:China’s scary lesson to the world: Censoring the Internet... by wsuskc on Tuesday May 24, 2016 @05:46AM (#11760092)
>if you tunnel over the HTTP/HTTPS ports how can VPN traffic be separated out from "regular" traffic? it can't. that's why openvpn doesn't work in China but openvpn tunneled over stunnel (TLS proxy for arbitrary TCP streams) does.
[ Parent | on HN ]