News for hackers. Stuff that matters.
Re:Cloudflare is now powering Microsoft Edge Secure Network by kgeist on Thursday September 28, 2023 @01:58PM (#37693233)
>There is already precedent for this happening in Russia; in that incident every VPN pulled out of the country. However if everyone enforces it, it's gonna be hard.

Not only that, ISPs now close all connections which look like VPN traffic. I used to have my own OpenVPN server as a window to the free world and now it doesn't work... I wish there was some kind of open standard which doesn't leave a very obvious signature which is easy to detect by ISPs. I don't know if HTTP CONNECT can be hidden from ISPs? I guess I'm going to try Edge after all.

Re:Cloudflare is now powering Microsoft Edge Secure Network by supriyo-biswas on Thursday September 28, 2023 @02:05PM (#37693315)
You could look into Shadowsocks, V2Ray and similar.

It's also been a while I've read about these topics, so I'm not sure if Russia also does entropy analysis and fingerprinting differences to block these protocols either.

You may like reading about the new TSPU system in Russia [1], and discussing your issues on [2].

[1] https://censoredplanet.org/tspu

[2] http://ntc.party

Re:Cloudflare is now powering Microsoft Edge Secure Network by acheong08 on Thursday September 28, 2023 @02:06PM (#37693333)
The Chinese have been fighting this war for a while. The results are in favor of users: see Trojan-gfw, Xray-core, v2ray
Re:Cloudflare is now powering Microsoft Edge Secure Network by gerdesj on Thursday September 28, 2023 @04:49PM (#37695636)
Try switching to 443/tcp or try a high port like 10000/udp. The first might look rather like streaming over https and the second like an encrypted RTP stream in a mad SIP n RTP session.

You can also co-exist OpenVPN on 443/tcp with a "real" web server. The usual use case for that is getting more value out of a single IP address. Put your pony fan club website up or an Ubuntu default webpage.

Another possibility is to use port knocking to open ports before the OVPN connects.

Re:Cloudflare is now powering Microsoft Edge Secure Network by gerdesj on Thursday September 28, 2023 @04:56PM (#37695725)
... and now I come to think of it:

PPTP is generally believed to be broken so it might be "allowed" because it will be assumed that grabbing and storing the stream will be sufficient for later analysis. Then you put a OpenVPN inside the PPTP tunnel with proper, modern encryption.

... 53/tcp or udp might be worth trying too. 123/udp - ntp, 25/tcp - email! Basically try being weird - it may well work!