Hacker News Reader

Comment by MarcScott | Hacker News Reader

What's to stop ISPs blocking the Immunicity proxy as well? The ORG stated that

☑ web blocking circumvention tools

will be one of the checkboxes.

In that case it's probably best to buy your own cheap VPS and setup openvpn on it, I can't see them taking down VPS providers.

http://www.theregister.co.uk/2013/07/04/payment_block_swedis... Are you sure about that? Slowly but steady they are closing all our public and completely legal private venues of communication, all with the help of companies such as VISA and Mastercard.

You're mixing-up VPN (Virtual Private Network) and VPS (Virtual Private Server). A VPS can be used as a personal VPN, among other things. As parent suggested, it would be hard to imagine a ban on VPSs.

Then you use mullvad.net and pay with cash by snail mail.

On the plus side, their proxy resolves to about 15 highly diverse IPs, including IPv6 (cough IPv6 tunnel).

Deep Packet Inspection... aaannd the game is over. Sorry, but the only the way to defend is to do something against it, protest, demonstrate, campaigns. And to attack the arguments of the politicians with a very strong backup or to leave the country.

Vote for: http://www.pirateparty.org.uk/

If you know 'anything' that really circumvents DPI, please let me know, I will buy it, now! :) (Hopefully I can shoot my own Satellite into space someday..)

Ssh vpn proxy in the USA, fairly simple and even dpi can't do shit about that.

I have read the oppsite, can you show me how vpn+proxy over ssh can prevent getting blocked from DPI? I thought they block everything not on their whitelist.

Well that would mean they would have to block most non-mainstream sites or alternatively block a ton of things. Of course with a whitelist it is more difficult but it is almost certainly not they way they will do it.

Given what we already know about the extent of DPI monitoring on the US internet, and the US govs data sharing programs, why do you think this a more practical choice than actual democratic representation in the long term?

Block any TCP protocol starting with string "SSH-"

Problem solved.

Seriously people think SSH or VPN is advanced? Every clear text handshake protocol could be blocked at ease.

Sure, then SSH is blocked. SSH is very necessary in the day to day work for a ton of people, and it would shut down businesses.

Right. The trick is not to use something that's technically infeasible to block, but to use something that's politically infeasible to block.

Politicians doesn't give a shit about your business, if you use porn-enabled SSH, you are a terroist suspect and a threat to childrens of the nation.

Any protocol that runs over SSL on port 443?

Using sslh one can actually host both https sites and ssh on one port. I used this to hop over a very restrictive firewall in my company, it works great.

Https handshake is also clear text. There's was previous attempt to block certain types of SSL cert in the past.

As pointed out by est, you can snoop on SSL certificates passing over the wire and drop connections containing canonical names you don't like, or signed by CAs you don't like.

You can also drop and throttle HTTPS connections without effecting genuine use, while completely buggering up P2P and other bulky uses.

They could certainly inspect 6in4 traffic, but at the moment major UK ISPs aren't even offering native IPv6, so doing so would be fairly tenuous.

Yes, I do. Repeatedly and often, and I'll continue to do so till they put me behind bars and beyond if I could.

However I'll only release it on a gradual level as it's a cat and mouse game.

This was exactly my first thought too. I was hoping for something clever in the "How it works" section of their website, but it's just a simple proxy which resides on their servers. If gateway.immunicity.net gets blocked then it's game over isn't it?

Yeah or they end up as a honey pot for the govt providing a neatly compiled list of addresses.

Reply on news.ycombinator.com