News for hackers. Stuff that matters.
Re:Russia has started indiscriminately blocking all OpenVPN/... by someotherperson on Saturday January 20, 2024 @09:33AM (#39067889)
Unfortunately, thanks to the Great Firewall of China, there has been a lot of resources put in to fingerprint VPNs and block them by state actors.

Fortunately, however, there is equally years of some of the smartest minds on the planet working to bypass Chinese censorship, so there are some great OpenVPN alternatives.

I really encourage you to look into something like Shadowsocks which Chinese people have found great success in using over the last several years.

In your case, however, it's worth mentioning that if you can't connect at all then it's likely they've blocked the commercial IPs of the VPN nodes.

It's quite sad that projects like Streisand[0] were archived, but I'm sure there are other alternatives that might make it just as easy to roll onto a server.

[0] https://github.com/StreisandEffect/streisand

Re:Russia has started indiscriminately blocking all OpenVPN/... by circularfoyers on Saturday January 20, 2024 @10:16AM (#39068358)
Outline (https://getoutline.org) is even easier to deploy than Streisand in my experience and uses Shadowsocks.
Re:Russia has started indiscriminately blocking all OpenVPN/... by quickslowdown on Saturday January 20, 2024 @11:03AM (#39068889)
This is really cool, thanks for sharing! I've been using Tail scale for a while, mostly because it's simple, but I don't love relying on some company for my VPN. Is this more like OpenVPN or Wireguard? Reading their site, it seems like it's closer to a traditional, OpenVPN-like connection, but I'm still interested in this over something like Nebula.
Re:Russia has started indiscriminately blocking all OpenVPN/... by latchkey on Saturday January 20, 2024 @11:21AM (#39069118)
Re:Russia has started indiscriminately blocking all OpenVPN/... by nylonstrung on Saturday January 20, 2024 @11:21AM (#39069115)
You could also use headscale to self host a tailscale control server
Re:Russia has started indiscriminately blocking all OpenVPN/... by ThePowerOfFuet on Saturday January 20, 2024 @12:21PM (#39069943)
>getoutline.org uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.

Doesn't even let me decline cookies not required for operation of the website, yet wants me to trust them with my data?

gtfo.

Re:Russia has started indiscriminately blocking all OpenVPN/... by throwaway22048 on Saturday January 20, 2024 @03:13PM (#39071790)
Just decline them in your browser settings...?
Re:Russia has started indiscriminately blocking all OpenVPN/... by asdffdasasdf on Sunday January 21, 2024 @02:23AM (#39076413)
all those things are useless.

if you have contact out of the country you're already part of a very small elite. if not, you cannot use this. they are so oblivious to the demography they claim to help that the site requires js, a big no if you want to be seen by really f** people having to use tor browser.

all this does is placate some small elite. it helps china/Russia more than anything else.

Re:Russia has started indiscriminately blocking all OpenVPN/... by 8organicbits on Saturday January 20, 2024 @10:24AM (#39068465)
What's the current legal risk of using a VPN in China or Russia these days? I found a couple articles about people getting charged, but none I know to be reputable or particularly well written.
Re:Russia has started indiscriminately blocking all OpenVPN/... by seanmcdirmid on Saturday January 20, 2024 @10:29AM (#39068519)
China at least, isn’t a strong rule of law country, rather it is more of a rule by law one. So if they want to get you, they’ll find some law to get you on, and if they don’t, they won’t go after you for using a VPN or other minor offenses. So I wouldn’t really worry about it.
Re:Russia has started indiscriminately blocking all OpenVPN/... by machomaster on Saturday January 20, 2024 @12:16PM (#39069878)
Pretty much the same applies to Putin's Russia as well.
Re:Russia has started indiscriminately blocking all OpenVPN/... by d0mine on Saturday January 20, 2024 @01:19PM (#39070568)
Are there any other types of countries? Note: you don't need to put something into law to silence someone.

If necessary anyone can be canceled. Everybody is "guilty" but select few are prosecuted.

Therefore the real power belongs to those who decides what issues can be ignored.

Re:Russia has started indiscriminately blocking all OpenVPN/... by cracrecry on Saturday January 20, 2024 @02:25PM (#39071293)
Yes, they are. There is a world of difference. In the West you normal people have so much power they do not even realise. You see that when you live outside it.

In the West there is a long History of institutions(like cities) that went against the abuses of the people in charge. You were a servant, you entered a city(burg) you became free, the city protected you. This happened for centuries. In China something like that happened at specific periods, but eventually the Emperor took all the power.

In China the Emperor or the Tzar in Russia could do anything. In Russia those that wanted freedom lost every single time. If a servant entered a city and the city did not deliver the fugitive, the Tzar will burn the city. The same happened with the Soviets. You want your own food? We will kill you all and send your children and wife to Siberia. Everybody else(not the Emperor) were servant. Now Xi or Putin are the new emperors, like Lenin, Stalin or Mao were.

I have lived in China as a privileged engineer/expatriate.

Basically most people have no idea what a country without rule of law(like China) is.

>If necessary anyone can be canceled. Or you can cancel them. You consider yourself a victim, a nobody, but people can get public and get a million views and could do real damage to those in power.

Re:Russia has started indiscriminately blocking all OpenVPN/... by asdffdasasdf on Sunday January 21, 2024 @02:28AM (#39076433)
you were also a privilege person in the West and oblivious to poorer people outside of larger cities as the people you saw in China being oblivious to poorer people living outside of larger cities. foreigners, no matter how privileged, hardly can live inside the safety bubbles you yourself lived in the west.
Re:Russia has started indiscriminately blocking all OpenVPN/... by hulitu on Tuesday January 23, 2024 @12:53PM (#39106895)
> Yes, they are. There is a world of difference. In the West you normal people have so much power they do not even realise.

In my West people are jailed without trial (Guantanamo, and other secret prisons) or cases are fabricated to bring them to jail (Assange).

> I have lived in China as a privileged engineer/expatriate.

> Basically most people have no idea what a country without rule of law(like China) is.

So you give up priviledges to return to a country where the rule of law is observed.

No further comments.

Re:Russia has started indiscriminately blocking all OpenVPN/... by seanmcdirmid on Tuesday January 23, 2024 @09:16PM (#39112809)
Don't let perfect be the enemy of good.
Re:Russia has started indiscriminately blocking all OpenVPN/... by seanmcdirmid on Saturday January 20, 2024 @06:01PM (#39073396)
There is no black and white rule of law/rule by law countries. Only ones that tilt more to one or the other. So like China might be a 35 and the states might be a 65.
Re:Russia has started indiscriminately blocking all OpenVPN/... by machomaster on Saturday January 20, 2024 @12:15PM (#39069865)
In Russia using VPN itself is not illegal. Using VPN to do certain stuff can be punished, of course.
Re:Russia has started indiscriminately blocking all OpenVPN/... by kgeist on Saturday January 20, 2024 @10:44AM (#39068689)
I guess it depends on what sites you want to visit using VPN. People here in Russia openly use VPN to visit Instagram etc., and no one seems to have an issue with that. But if you want to read some opposition sites, however... Now that's some gray area.
Re:Russia has started indiscriminately blocking all OpenVPN/... by EasyMark on Saturday January 20, 2024 @05:27PM (#39073089)
If the VPN is working then they wouldn't know if you're going to instagram or fuckrussianoppression.org tho
Re:Russia has started indiscriminately blocking all OpenVPN/... by gh02t on Saturday January 20, 2024 @10:38PM (#39075300)
That ambiguity is beneficial, they can simply say you did whatever they want to say with the VPN usage as a pretext.
Re:Russia has started indiscriminately blocking all OpenVPN/... by lovegrenoble on Saturday January 20, 2024 @12:07PM (#39069751)
Just block CNN to sleep better )
Re:Russia has started indiscriminately blocking all OpenVPN/... by antisthenes on Saturday January 20, 2024 @12:25PM (#39069983)
Don't forget that the "real" risk and the "legal" risk in states like Russia/China can be very different.

The laws are written in specifically vague verbiage as to be interpreted in favor of state actors by judges whenever they need to be. You may be clear in the letter of the law in your mind, until a charge is brought up against you using another law, etc.

Re:Russia has started indiscriminately blocking all OpenVPN/... by EasyMark on Saturday January 20, 2024 @05:28PM (#39073103)
"We support democracy and freedom of expression except in these 20,352 exceptions"
Re:Russia has started indiscriminately blocking all OpenVPN/... by yellow_lead on Saturday January 20, 2024 @10:07AM (#39068261)
Can anyone confirm Shadowsocks works anymore? When I tried to use it a few years ago, it got blocked in a few days.

To be honest, I think they are blocking anything that exchanges a lot of data with oversesas IPs, after hitting a certain threshold.

Re:Russia has started indiscriminately blocking all OpenVPN/... by apfsx on Saturday January 20, 2024 @10:29AM (#39068524)
Shadowsocks and ShadowsocksR don’t work anymore in my experience in China or Iran. V2ray does which is the successor to those.
Re:Russia has started indiscriminately blocking all OpenVPN/... by superkuh on Saturday January 20, 2024 @10:58AM (#39068835)
Shadowsocks does work against MITM attacks by my US ISP Comcast though. It is great software.
Re:Russia has started indiscriminately blocking all OpenVPN/... by apfsx on Saturday January 20, 2024 @11:45AM (#39069443)
Wouldn’t plain WireGuard also do that?
Re:Russia has started indiscriminately blocking all OpenVPN/... by superkuh on Sunday January 21, 2024 @11:17AM (#39079805)
WireGuard is a lot heavier than shadowsocks-libev. shadowsocks-libev is literally under 5MB of ram used and very little CPU. Also very quick to compile and config. WireGuard is a full fledged heavy VPN. Shadowsocks can be used as a simple socks proxy if you want; and that's plenty for stopping Comcast from injecting malicious javascript into my HTTP connections.
Re:Russia has started indiscriminately blocking all OpenVPN/... by gruez on Saturday January 20, 2024 @12:07PM (#39069753)
What "MITM attacks" are you talking about?
Re:Russia has started indiscriminately blocking all OpenVPN/... by cj on Saturday January 20, 2024 @12:25PM (#39069991)
Not the person you're replying to, but most ISPs and cellular providers log DNS queries and use that to profile you or resell to data brokers.

If you want to have some fun understanding this better, call up (for example) Verizon and have them send you the data they have on you. It's surprisingly detailed, including timestamped logs of every DNS query (in addition to specific profiling data, like "how likely you are to buy a new phone" or "household income", etc).

https://www.verizon.com/support/download-and-view-vpd-file/

After doing this myself, I always (at a minimum) use a privacy centric DNS and never the ISP's default.

Re:Russia has started indiscriminately blocking all OpenVPN/... by michael1999 on Saturday January 20, 2024 @01:18PM (#39070550)
Stream-downscaling, ad injection, etc. US isp shenanigans.
Re:Russia has started indiscriminately blocking all OpenVPN/... by polski-g on Saturday January 20, 2024 @05:48PM (#39073274)
Comcast intercepts and rewrites your DNS queries to their own servers. I spent hours figuring out why I wasn't getting NXDOMAIN back from 8.8.8.8 until I realized Comcast was MITMing me.
Re:Russia has started indiscriminately blocking all OpenVPN/... by superkuh on Sunday January 21, 2024 @11:23AM (#39079853)
Comcast started attacking it's customers via MITM about ~2013 or so. Initially it was ads, https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=co... . This would break things like, say, the Steam browser and prevent it from working. I literally had this happen to me. Eventually Comcast changed it's terms of service and violated it's contracts with existing customers and started limiting total data transfer to about 1 TB/mo. When it started doing this it also started MITM injecting JS about your usage into HTTP connections: https://rietta.com/blog/comcast-insecure-injection/

Comcast is the only non-56k ISP available in my area still in 2024. So I use them... but I also have to make sure to protect myself from their attacks. If I did what they're doing I'd go to prison. But some types of legal persons have more rights than human persons.

Re:Russia has started indiscriminately blocking all OpenVPN/... by bbarnett on Saturday January 20, 2024 @10:47AM (#39068719)
I wonder how many of these services are just state actors, who can then track people more directly.
Re:Russia has started indiscriminately blocking all OpenVPN/... by yellow_lead on Saturday January 20, 2024 @10:52AM (#39068782)
These are open source proxies, not centralized services, so I think it's unlikely.

At least shadowsocks was well researched in the past, I'm not sure about v2ray.

Re:Russia has started indiscriminately blocking all OpenVPN/... by EasyMark on Saturday January 20, 2024 @05:24PM (#39073066)
If I was in Russia I would be a lot less afraid of USA/Britain/Germany MITM than I would of Putin's agents catching wind of the free flow of information and coming for me and my family and throwing us off the roof or putting polonium in our water supply.
Re:Russia has started indiscriminately blocking all OpenVPN/... by bbarnett on Sunday January 21, 2024 @03:40AM (#39076737)
Interesting. I said 'state actor' not 'western actor'.

The state, any state, often employs such tactics to make people believe they are protected, and therefore said people will act more openly. There are a myriad of such known cases, in fact the examples are endless.

So if one is in Russia... beware, for ways to get around blocking which work, may be ways secretly controlled by the Russian state. An example is a VPN service which is secretly run by the state, regardless of where it is incorporated or physically located.

Another example is blocking products which are effective, but letting products which are easily MITM by the state to "work", thereby providing the illusion of security and safety.

These tactics are thousands of years old, the employment of such methods is all that has changed. Make those which you distrust, use methods you control to organize. An example; the pub which is uses for meetings, is actually owned by state sympathizers, who claim otherwise.

Re:Russia has started indiscriminately blocking all OpenVPN/... by KomoD on Saturday January 20, 2024 @11:26AM (#39069192)
v2ray is a great alternative
Re:Russia has started indiscriminately blocking all OpenVPN/... by feedforward on Saturday January 20, 2024 @01:41PM (#39070832)
Should point out when people go into the Sturm und Drang of the Great Firewall, that it was largely built by corporate America.

https://www.wired.com/2008/05/leaked-cisco-do/

Re:Russia has started indiscriminately blocking all OpenVPN/... by erebe__ on Saturday January 20, 2024 @02:01PM (#39071041)
Shameless plug, there is also wstunnel (i am its author) https://github.com/erebe/wstunnel/, hope you enjoy.
Re:Russia has started indiscriminately blocking all OpenVPN/... by EasyMark on Saturday January 20, 2024 @05:21PM (#39073044)
I imagine that is something that is not "top secret" that Xi can easily share with Putin and something that could be applied almost immediately to routers in Russia. That sucks that Russians can't see other perspectives. It doesn't seem to matter a lot since 80% of Russians still support him mindlessly, but those other 20% can help set a seed of doubt on his atrocities and autocratic lies but not if they can't get info.