News for hackers. Stuff that matters.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by kccqzy on Sunday July 23, 2017 @07:21PM (#14834901)
An easy and legal way to circumvent the firewall is to buy a SIM card from a foreign country and use roaming.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by dankohn1 on Sunday July 23, 2017 @08:57PM (#14835234)
I was in Beijing a few weeks ago for the Linux Foundation conference <https://www.lfasiallc.com/linuxcon-containercon-cloudopen-ch... and was amazed that:

1) Verizon had added China to TravelPass in the last year, so it now costs $10 a day for up to half a gig of data, plus unlimited voice and text. 2) There was complete access to Google and Twitter because my iPhone was using an international SIM.

Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by chipperyman573 on Monday July 24, 2017 @03:49AM (#14836586)
$10/day is $300/mo. Per line. A lot of people, especially people in China, can't afford that.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by dankohn1 on Monday July 24, 2017 @11:00AM (#14838965)
Yes, I was in no way suggesting that this was a practical alternative for Chinese researchers needing to bypass the Great Firewall. Besides the expense, I presume there are laws against Chinese citizens using international SIM cards for the purpose of bypassing the firewall.

I was simply making the point that the government has made accommodations to ease the use by international business travelers.

I'll also add that my ExpressVPN account (which I used from different Wi-Fi networks) often failed to connect, presumably because the Great Firewall is looking for VPN network patterns to block.

Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by dstryr on Monday July 24, 2017 @05:54AM (#14837102)
I use the poor man's version of this. T-Mobile One plans give you uncensored 2G data at no extra cost.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by Miredly on Monday July 24, 2017 @02:42PM (#14841380)
I make a pretty decent salary in the US, and I wouldn't call that affordable.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by aembleton on Sunday July 23, 2017 @07:38PM (#14834956)
Why would that work? My internet traffic would be routed through the local cell tower and have to traverse the Great Firewall.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by kccqzy on Sunday July 23, 2017 @07:50PM (#14834990)
I have tried that and doing a whois on my public IP revealed that it belongs to the original ISP, not whatever local ISP I was using. Even visiting Google shows the Google page of the original country. I guess they just have agreements to tunnel traffic in a way that circumvents the Great Firewall.

But politically it is much easier to understand. The only people who are likely doing this are tourists, and the government certainly doesn't want to hurt tourism.

Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by sigmar on Sunday July 23, 2017 @08:33PM (#14835162)
>a whois on my public IP revealed that it belongs to the original ISP, not whatever local ISP I was using

did you do other checks to see if your traffic was being censored? a whois of your public ip says nothing about whether your traffic has been manipulated.

> Even visiting Google shows the Google page of the original country. I guess they just have agreements to tunnel traffic in a way that circumvents the Great Firewall.

google serves pages depending on your public ip

Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by kccqzy on Sunday July 23, 2017 @11:28PM (#14835690)
The Great Firewall doesn't in general modify traffic. It either allows traffic to pass though, or blocks it (TCP RST, rate limiting, etc). I was able to visit normally blocked sites like Google at full speed of a typical cellular connection.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by tristanj on Sunday July 23, 2017 @08:43PM (#14835202)
It works because cellular roaming traffic travels over a tunnel to your carrier's source country. This greatly simplifies data billing calculations, since they only have to keep track of the usage of one connection.

The traffic is already tunneled when it passes through the GFW.

Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by schuke on Sunday July 23, 2017 @11:23PM (#14835665)
So I guess the reverse is true also, which explains why my mainland SIM card wouldn't have unfiltered access roaming in HK.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by tristanj on Monday July 24, 2017 @01:11PM (#14840393)
I believe so. When I was in China, my mainland SIM didn't work at all in HK. I assume many people get prepaid SIMs when traveling out of China so they wouldn't be subject to filtering anyway.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by em3rgent0rdr on Monday July 24, 2017 @02:56AM (#14836383)
Isn't this effectively a VPN? Or is the traffic not encrypted?
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by tristanj on Monday July 24, 2017 @01:06PM (#14840312)
Yes, effectively a VPN but I would just call it a tunnel, I don't think it fits the definition of a VPN.

I'm not sure if this traffic is encrypted (I assume it is), but I know GFW filtering happens at egress points so mobile traffic would already be tunneled by then. They could add dedicated hardware at mobile towers to GFW this traffic but I don't think the govt sees a need to. The primary target of the GFW is to stop Chinese citizens from accessing foreign services. Foreigners on foreign roaming data plans are not the intent of the GFW.

My bet is that they could filter this, but it's not worth the infrastructure investment.

Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by dmoy on Monday July 24, 2017 @12:19AM (#14835858)
The other half of why this works (everyone else has already covered the technical end), is that the party is not really concerned with controlling foreigners' access (at least not nearly as much as they are concerned about domestic). So they focus their efforts at blocking traffic that isn't liable to be 99% non-resident.