Securing a laptop for travel to China

Re:Securing a laptop for travel to China by e12e on Saturday June 17, 2017 @11:09AM (#14576208)

But there's no "deep packet" inspection of encrypted vpn or an ssh tunnel? Sure, you can guess that the connection is encrypted, and block it on general principle - but there's no way (that I know of) you could selectively block ssh based on the content/traffic pattern (you might let through low-throughput ssh only, ie: only allow use that "looks like" shell use, but a) you could run w3m on the other end of that tunnel, and b) it sounds unlikely - as that would also kill many other uses like file transfer for backup etc).

I'm curious if ssh access to eg: digital ocean is allowed?

If so, you can simply use ssh as a socks5 proxy:

  ssh -D 8080 [email protected]
  # Set your browser to use 127.0.0.1:8080
  # as a socks5 proxy for dns lookup and
  # traffic, via eg foxyproxy for firefox

I'm not saying GFW won't block this, but I'm doubtful it'll allow plain ssh, and block this use case?

[ Parent | on HN ]

Re:Securing a laptop for travel to China by tluyben2 on Saturday June 17, 2017 @12:35PM (#14576550)

In my experience ssh works but tunneling over ssh does not. Not sure how they do that. Personally when I am there I only miss Google for programming issues. It is terribly inefficient to use something else imho.

[ Parent | on HN ]

Re:Securing a laptop for travel to China by Canada on Saturday June 17, 2017 @01:13PM (#14576704)

The reason why tunneling over SSH doesn't work very well is because the network is crap. SSH runs on TCP, and TCP doesn't perform well when there's a lot of packet loss. Even for interactive logins it's frustrating without mosh.

[ Parent | on HN ]

Re:Securing a laptop for travel to China by codedokode on Saturday June 17, 2017 @06:07PM (#14577935)

One could also distinguish between "normal" SSH and SSH used as a tunnel by used bandwidth.

[ Parent | on HN ]

Re:Securing a laptop for travel to China by dis-sys on Saturday June 17, 2017 @01:08PM (#14576679)

this has been blocked for ages.

[ Parent | on HN ]