deleted by creator
Blocking all encrypted traffic… fantastic suggestion comrade, I’ll forward this on to the Kremlin. Also, you’ve been drafted.
I suppose with “comrade” you are hinting at Soviet customs, but Russia isn’t the USSR and couldn’t be further from being socialist
Settle down, it was a joke
what
Russia isn’t the USSR but it is heading towards the USSR ways, and it’s already there in many aspects. It’s not just on a technical definition, a lot of pro-war and nationalist rhetoric is rooted in the old USSR culture.
The USSR wasn’t socialist, it was communist. And yes I know, it wasn’t real communism because real communism is a utopia.
Russia isn’t implementing maternal paid leave, a good universal healthcare system, guaranteed housing, food, education, and a job, so it’s not heading for the ‘USSR ways’ and the USSR was socialist
Oh please. In all the ways that matter, it is identical.
It’s a custom protocol that uses SSL/TLS for key exchange and such, so it can be detected. It’s actually causing huge problems for many large Russian companies, as it’s common to use those protocols for remote access, work, etc.
As mentioned in the article you need something like “Shadowsocks” to avoid protocl blocking, since it fully disguises the traffic as standard SSL/TLS. Which was created for, and is still used to circumvent this type of blocking in “the great firewall of china”.
https://security.stackexchange.com/questions/187649/is-it-possible-to-detect-vpn-in-the-network
tl;dr: You can infer that OpenVPN is used from the key exchange somehow.
Yes there is a difference between https traffic.
SSL is a higher layer thing, isn’t it? A VPN is just encapsulating an IP packet in another IP packet and getting it to the tunnel endpoint. Unless the whole of the inner IP packet is encrypted, the service provider could just sniff your packets and block anything that looks like an IP packet in the outer packet payload?
Shithole country
Worse: shithole country that turns everything they touch into shit too.
Bootlicking simply comes naturally to the Russian culture.
Edit: my apologies to the Russian brothers and sisters still fighting the good fight by blowing up Putin’s shit.
using a vpn is also illegal in russia since 2017 😅
But also laws don’t really matter in Russia.
well 😅
I’d appreciate a source for that statement. :o
In November 2017, the Russian government passed a law banning the use of VPNs, Tor, and proxies to access unauthorized content. Since that time, it has been used to restrict specific VPN services.
The ban targets VPN providers who refuse to submit data to the Russian government. The threat of bans came in 2019. Two waves of bans followed in 2021, covering 15 VPNs. Only one Russia-based provider is known to have complied with the rules.
https://surfshark.com/blog/vpn-in-russia
https://www.reuters.com/article/us-russia-internet-idUSKBN1AF0QI
IIRC Pakistan also do this (vpn is blocked by default and you’ll need to submit documentation to justify using VPN if you want to use VPN in your company), though their main reason is to reduce VoIP spammers.
This is not accurate information. VPN usage is not banned.
Using is not illegal
if you want to use it in its original purpose it’s illegal. If you use a vpn not registered with Roskomnadzor, it’s illegal because you can access stuff that putin does not want you to see.
therefore using a vpn with its normal purpose to create your private tunnel and access what you want is in fact illegal in russia.
Illegal to show how bypass bans, it is allowed to use VPNs
annnd another dictatorship box checked off the list… wont be long now
Until what? Until Russia is a dictatorship? That ship sailed a long time ago.
Won’t be long before Putin catches up to Kim Jong Un in the Oppression Olympics
No drug testings pls
Still wouldn’t be able to catch up with the US, they are gold medalists
The US has some serious issues with corruption, but it’s FAR from a dictatorship, lol.
It’s getting there though due to what Trump did. Hopefully people have the smarts to vote in the next election.
Highest prison population w/ privately owned prisons, besides the elite class of your country controls what happens in your country (media included), you have no say in it.
This is utter nonsense. If the US was a dictatorship, I wouldn’t be scared to death of the upcoming elections.
Ask anyone who lived in a US controlled military dictatorship if they are scared of the upcoming elections. (Read the Jakarta Method by Vincent Bevins). Besides, both parties are bought out by the bourgeoisie of you country, so nothing is ‘dangerous’, about voting since it will serve the same interests either ways.
Until he stops pretending?
Didn’t he say that’s so sure to be re elected that it doesn’t even need to waste money on useless elections?
Proton vpn has a feature that can be turned on for oppressive governments, ‘alternate routing’ I believe. Would that be sufficient or no?
Theoretically, yes, since there are options other than WG/OVPN available through Smart Protocol, which Alternate Routing leverages.
deleted by creator
But how are their propaganda farms going to be able to pretend they are in your country now?
They still get to operate don’t worry!!
Maybe they don’t actually have all those propaganda farms that the dems were crying about, did that thought cross your mind?
In case anyone wondered how to potentially get around this…
- Pay for a server in another country that gives you SSH access
- Create SSH SOCKS tunnel:
ssh -N -D 8008 your-server-ip - Open your browser and set the SOCKS server to
localhost:8008(in Chromium/Firefox you can search for this in Settings)
So, that’s definitely better than nothing, but your browser isn’t the only thing – though these days, it is a very important thing – that talks to the Internet. If, for example, you’re using a lemmy client to read this, I’d bet that it’s good odds that it doesn’t have SOCKS support.
Though I wouldn’t be surprised if someone has made VPN software that intercepts connections and acts as a proxy SOCKS client, which would make it work more like a traditional VPN if you can reach a remote SOCKS server, though maybe with a performance hit.
googles
Yeah, okay, looks like stunnel can do this on Linux. So it’s a thing.
You don’t need a 100% solution, though, to have a pretty big impact on society. Combine technical barriers with it just being easier to not think about what’s going on outside, maybe some chilling effects from legally going after people who do start doing things that you don’t like (viewing websites, spreading information, etc), and you can control people’s information environment a lot. Make using circumvention solutions illegal – okay, maybe you can bypass their system if you don’t get caught, but do you want to risk it? Make creating or spreading circumvention solutions really illegal. Do you want to risk getting in a lot of trouble so that random other person can get unrestricted or unmonitored Internet access?
On that note, I was reading about the way North Korea does it in an article from someone who got out of North Korea. That is about as close as it gets to a 100% solution. Only a few thousand people are authorized to get Internet access. You need to apply to use the Internet with a couple of days lead time. Each pair of computers has a “librarian” monitoring what the Internet user on each side is doing, and every five minutes or so the computer will halt with whatever you were doing on the screen and require fingerprint re-authorization from the “librarian” to continue. Users are not allowed to view pages in Korean, just English and Chinese (I assume because most information out there that you’d have to go outside North Korea to get access to is likely available in either English or Chinese, and they definitely don’t want people seeing anything out of South Korea).
That pretty much screws North Korea in terms of access to information, is a costly solution, but if you place an absolute priority on control of the information environment, North Korea does prove that it’s possible to take a society there.
It was not working 2 day on mobile operators, now waiting full shutdown
Is this just address/port blocking, or DPI of some kind? I’m wondering what they can trigger off?
Interesting read: https://www.ntkernel.com/how-to-bypass-egypts-wireguard-ban/
vpn traffic isnt directly hidden, but it can be helped along.
youd need to encapsulate your vpn traffic in a different protocol, make sure you shape your traffic to expected values for that protocol and then avoid known vpn endpoints.
Couldn’t you just use any server/droplet/AWS instance via SSH to get around this law? Seems much simpler.
If you’re savvy enough, sure. But for the lay person who doesn’t want a clouded view of the world, they likely won’t have the same resources or technical capabilities.
It’s not without drawback though. SSH tunnel consumes a lot more cpu compared to wireguard. If your vps has a weak cpu, it might not even able to fully saturate a 1gbps connection due to cpu bottleneck on certain ciphers. If you’re using a mobile device, it will drain your battery faster than wireguard.
So it’ll take you 10 minutes, instead of 5, to download a DVD rip of a movie… This limitation would have next to no practical impact on being able to communicate with the free world.
However will they get messages through??
Can this actually work? If you run Wireguard on a non-default port, is it possible to tell that it’s wireguard?
Most open source vpn protocols, afaik, do not obfuscate what they are, because they’re not designed to work in the presence of a hostile operator. They only encrypt the user data. That is, they will carry information in their header that they are such and such vpn protocol, but the data payload will be encrypted.
You can open up wireshark and see for yourself. Wireshark can very easily recognize and even filter wireguard packets regardless of port number. I’ve used it to debug my firewall setups.
In the past when I needed a VPN in such a situation, I had to resort to a paid option where the VPN provider had their own protocol which did try to obfuscate the nature of the protocol.
Yes ofc they can. The Wireguard protocol is not designed to be hidden.
Interesting read: https://www.ntkernel.com/how-to-bypass-egypts-wireguard-ban/
Chinese firewall can detect it, AFAIK
Gfw is mostly picky about anything udp or where both ports are unknown. Also if the known port (server) isn’t from a licensed block.
Basically there are heuristics that lead to either a reset, a temp block, or a perm block, but it seems to vary from time to time a lot.
[email protected] will love this.
After a discussion that lasted for way too long, it appears that they like censorship.
They think that this is a perfectly reasonable argument: https://youtu.be/QFgcqB8-AxE and that the government knows better and thus information should be suppressed.
Absolutely ridiculous…
Russia is a terrorist state. #SlavaUkraini #ArmUkraineForVictory
Russia is less terrorist than Azerbaijan, but the latter isn’t even being sanctioned (and there’s been an ICJ decision against them, but everybody ignores it) for starving out a little country of 120k people right now in a medieval siege, and openly stating that they are doing exactly that.
I don’t think Ukraine has lots of problems. At least the aggressor there is recognized for what it is and the victim is recognized for what it is and armed by half the world.
I don’t think Ukraine deserves any attention, in fact, since in Artsakh they support Azerbaijan. Support of now finally actual genocide happening is what makes me think that.
Russian likes to threaten the world with nukes - nuclear war would inevitably lead to a nuclear holocaust that would cause the near extinction of the human species.
I don’t give a flying fuck about Azerbaijan. Russia is terrorizing the entire species of humanity. Until you’re threatening to wipe out the entire planet, you are not a terrorist on the same level as Russia.
Russian likes to threaten the world with nukes
Tactical nukes usually.
nuclear war would inevitably lead to a nuclear holocaust that would cause the near extinction of the human species.
If you use tactical nukes, then it’s not much more significant than using thermobaric ordnance or cassettes or even chemical weapons or anything else kinda nasty and non-conventional.
It won’t lead to a global thermonuclear war and thus a nuclear holocaust any more than use of sarin in Syria did.
However! If you don’t give a flying fuck about a smaller holocaust then I don’t give one about your bigger one even if it involves me, I just don’t care.
If you don’t give a flying fuck about a smaller holocaust then I don’t give one about your bigger one even if it involves me, I just don’t care.
Sure, Russia threatens the entire human species, but if it doesn’t suit your liberal virtue-signalling for some marginalized minority, then it’s fine with you.
What’s the survival of humanity vs your imaginary liberal internet points.
Sure, Russia threatens the entire human species,
Your life is worth at best as much as any Artsakhi farmer’s life. In fact much less, if by “the entire human species” you mean yourself.
Now, Russia can’t threaten anybody, I’d be surprised if any of those strategic nukes are still operational. I happen to live in Russia and know how things are usually done here. That aside, Russia’s regime consists of thieves and murderers, not some Hollywood fascist hardliners. They care for their lives very much.
but if it doesn’t suit your liberal virtue-signalling for some marginalized minority
At this point I’d actually prefer that somebody nukes the miserable being you are.
And people of Artsakh are very much the majority in their land, however they are besieged and dying from hunger.
But, well, it’s good to know that you care about Ukraine only because of being afraid that, again, somebody nukes you.
Also my ancestors on paternal side happen to be from a certain valley in the province of Tayq, Western Armenia, currently occupied by a certain genocidal NATO country. I won’t buy your bullshit. I’ll care about Ukraine and somebody, again, nuking you personally when enough people care about that, which is never.
The people of Artsakh are also people of the world. Russia is threatening them with extinction too. You don’t actual care about them. You’re a fake and a liar begging for liberal minority points online.
Russia is threatening them in much more material way, with all its deals with Azerbaijan (which would be something sanction-worthy for the latter if it were, I don’t know, Georgia), but it isn’t killing them right now.
You don’t actual care about them.
I very definitely do, my aunt’s husband is from there and a participant of the first war.
You’re a fake and a liar
Judging by your use of the words “liberal” and “minority”, I’d say your opinion on the matter is not worth much, neither are you as a whole.
I love all my fellow Russians and Ukrainians who rise above the brainwashing that this commenter is demonstrating.
Fuck patriotism and slogans, that’s what politicians want you to do to die for them. All wars would be over in a day if people just realized this as politicians can’t fight their wars without people like this commenter.
