News for hackers. Stuff that matters.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by aembleton on Sunday July 23, 2017 @07:38PM (#14834956)
Why would that work? My internet traffic would be routed through the local cell tower and have to traverse the Great Firewall.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by kccqzy on Sunday July 23, 2017 @07:50PM (#14834990)
I have tried that and doing a whois on my public IP revealed that it belongs to the original ISP, not whatever local ISP I was using. Even visiting Google shows the Google page of the original country. I guess they just have agreements to tunnel traffic in a way that circumvents the Great Firewall.

But politically it is much easier to understand. The only people who are likely doing this are tourists, and the government certainly doesn't want to hurt tourism.

Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by sigmar on Sunday July 23, 2017 @08:33PM (#14835162)
>a whois on my public IP revealed that it belongs to the original ISP, not whatever local ISP I was using

did you do other checks to see if your traffic was being censored? a whois of your public ip says nothing about whether your traffic has been manipulated.

> Even visiting Google shows the Google page of the original country. I guess they just have agreements to tunnel traffic in a way that circumvents the Great Firewall.

google serves pages depending on your public ip

Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by kccqzy on Sunday July 23, 2017 @11:28PM (#14835690)
The Great Firewall doesn't in general modify traffic. It either allows traffic to pass though, or blocks it (TCP RST, rate limiting, etc). I was able to visit normally blocked sites like Google at full speed of a typical cellular connection.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by tristanj on Sunday July 23, 2017 @08:43PM (#14835202)
It works because cellular roaming traffic travels over a tunnel to your carrier's source country. This greatly simplifies data billing calculations, since they only have to keep track of the usage of one connection.

The traffic is already tunneled when it passes through the GFW.

Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by schuke on Sunday July 23, 2017 @11:23PM (#14835665)
So I guess the reverse is true also, which explains why my mainland SIM card wouldn't have unfiltered access roaming in HK.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by tristanj on Monday July 24, 2017 @01:11PM (#14840393)
I believe so. When I was in China, my mainland SIM didn't work at all in HK. I assume many people get prepaid SIMs when traveling out of China so they wouldn't be subject to filtering anyway.
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by em3rgent0rdr on Monday July 24, 2017 @02:56AM (#14836383)
Isn't this effectively a VPN? Or is the traffic not encrypted?
Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by tristanj on Monday July 24, 2017 @01:06PM (#14840312)
Yes, effectively a VPN but I would just call it a tunnel, I don't think it fits the definition of a VPN.

I'm not sure if this traffic is encrypted (I assume it is), but I know GFW filtering happens at egress points so mobile traffic would already be tunneled by then. They could add dedicated hardware at mobile towers to GFW this traffic but I don't think the govt sees a need to. The primary target of the GFW is to stop Chinese citizens from accessing foreign services. Foreigners on foreign roaming data plans are not the intent of the GFW.

My bet is that they could filter this, but it's not worth the infrastructure investment.

Re:VPN crackdown ‘unthinkable’ trial by firewall for China’s... by dmoy on Monday July 24, 2017 @12:19AM (#14835858)
The other half of why this works (everyone else has already covered the technical end), is that the party is not really concerned with controlling foreigners' access (at least not nearly as much as they are concerned about domestic). So they focus their efforts at blocking traffic that isn't liable to be 99% non-resident.