- cross-posted to:
- technews@radiation.party
- cross-posted to:
- technews@radiation.party
You must log in or register to comment.
In case anyone wondered how to potentially get around this…
- Pay for a server in another country that gives you SSH access
- Create SSH SOCKS tunnel:
ssh -N -D 8008 your-server-ip - Open your browser and set the SOCKS server to
localhost:8008(in Chromium/Firefox you can search for this in Settings)
So, that’s definitely better than nothing, but your browser isn’t the only thing – though these days, it is a very important thing – that talks to the Internet. If, for example, you’re using a lemmy client to read this, I’d bet that it’s good odds that it doesn’t have SOCKS support.
Though I wouldn’t be surprised if someone has made VPN software that intercepts connections and acts as a proxy SOCKS client, which would make it work more like a traditional VPN if you can reach a remote SOCKS server, though maybe with a performance hit.
googles
Yeah, okay, looks like stunnel can do this on Linux. So it’s a thing.
You don’t need a 100% solution, though, to have a pretty big impact on society. Combine technical barriers with it just being easier to not think about what’s going on outside, maybe some chilling effects from legally going after people who do start doing things that you don’t like (viewing websites, spreading information, etc), and you can control people’s information environment a lot. Make using circumvention solutions illegal – okay, maybe you can bypass their system if you don’t get caught, but do you want to risk it? Make creating or spreading circumvention solutions really illegal. Do you want to risk getting in a lot of trouble so that random other person can get unrestricted or unmonitored Internet access?
On that note, I was reading about the way North Korea does it in an article from someone who got out of North Korea. That is about as close as it gets to a 100% solution. Only a few thousand people are authorized to get Internet access. You need to apply to use the Internet with a couple of days lead time. Each pair of computers has a “librarian” monitoring what the Internet user on each side is doing, and every five minutes or so the computer will halt with whatever you were doing on the screen and require fingerprint re-authorization from the “librarian” to continue. Users are not allowed to view pages in Korean, just English and Chinese (I assume because most information out there that you’d have to go outside North Korea to get access to is likely available in either English or Chinese, and they definitely don’t want people seeing anything out of South Korea).
That pretty much screws North Korea in terms of access to information, is a costly solution, but if you place an absolute priority on control of the information environment, North Korea does prove that it’s possible to take a society there.
North Korea does prove that it’s possible to take a society there.
I don’t think NK took themselves there, they were already there when the internet was invented. Easier to limit access to few people when you have draconian measures in place when access becomes possible.
Having a society that already widely has access to one that has extremely limited access is a lot more difficult.
This is a good point that many don’t think about. Even if you could somehow drop hardware and free starlink into North Korea it wouldn’t even matter because the citizens never grew up on internet culture. No one would be able to figure out what to do with it by the time they got caught.
Unfortunately it would be trivial to block an SSH tunnel like this. I recall reading news 10 years ago (maybe even earlier) some foreign journalist tried this at a Beijing hotel room and got shut down in minutes. That was when people are still using PPTP and L2TP protocols to get around censorship, Wireguard and shadowsocks wouldn’t be born for another couple years.
This is actually pretty interesting, thanks for sharing. Although i live in a third world country that doesnt care about anything at all including piracy, but this tunneling thing looks pretty handy
Couldn’t you also just set the VPN to use port 443?
E: Apparently this isn’t enough. IE, for Wireguard, you would need to find a way to obfuscate the handshake.
I’m not 100%, but I think you could set this up for free with an Oracle AlwaysFree tier VM.
(Boo Oracle, yes I know. Still very handy.)
Just looked up Oracle Always Free… Good to know about, thanks!
Shithole country
Worse: shithole country that turns everything they touch into shit too.
Bootlicking simply comes naturally to the Russian culture.
Edit: my apologies to the Russian brothers and sisters still fighting the good fight by blowing up Putin’s shit.
deleted by creator
I suspect that if things continue in the trajectory that they seem to be heading, that people from Russia who exit may likely be better-off too, as much as moving countries is a significant barrier.
Wouldn’t those be jobs that typically require advanced education? Why would they want to throw that subset of the population into the meat grinder?
deleted by creator
Good read. So it sounds like your analysis of the situation is that it is short sighted and Putin is simply a Megalomaniac attempting to hold onto power, would you say that is an accurate summary? Or is he just crazy and super optimistic that things will change all the sudden one day?
Because even if you kept all the people physically producing bombs and shells, eventually you will run out of the educated people that run the other industries that support the military industrial system in Russia if this goes on for long enough.
deleted by creator
Removed by mod
But also laws don’t really matter in Russia.
well 😅
I’d appreciate a source for that statement. :o
Removed by mod
IIRC Pakistan also do this (vpn is blocked by default and you’ll need to submit documentation to justify using VPN if you want to use VPN in your company), though their main reason is to reduce VoIP spammers.
It has got to be better to just make phone authentication better than to hope that nobody in the country is going to spam and then block VPNs to the outside.
This has nothing to do with phone security though. Pakistan is the source of spam calls in many developed nations. Those spam call center operators was able to operate on the cheap from Pakistan due to cheap labors and cheap access to international calls via VoIP, so by blocking unregistered VoIP and VPN, they hoped to kill the spam call center industries (or at least that’s what they tell people when they started cracking on vpn a few years ago, might be legitimate if they’re getting pressure from western goverments to control the spam situation). This will also increase tax revenue because legitimate call centers will have to use licensed VoIP services that pay tax to Pakistan government.
Oh, okay, I gotcha. I figured that it was the other way around, that people spamming from outside Pakistan were targeting people inside.
I see! So, to quote the sources you provided:
“Despite widespread speculation, the law does not directly ban the operation of VPNs and anonymisers. However, it does restrict access to banned websites with the help of these tools.”
I.e. the VPN providers themselves are not illegal, though the VPN providers technically have to not allow users to access content listed by rospotrebnadzor. That’s responsibility on the side of the providers, not a ban on use. Practically speaking it still is attempting to censor content, but neither of the three sources claim that VPN use is illegal in Russia.
You can argue as much as you want, but the full usage of a vpn is illegal in russia by law, because you could access real informations instead of their bullshit propaganda.
Yes you can install it freely and “use” it to a certain degree to browse on pages uncle Putin allows you, but you can’t use it completely without any restrictions, e.g the definition of real usage in my opinion. So in my understanding the (full) usage of a vpn is prohibited by law in russia.
And they are now actively blocking protocols…so 🤷♂️
Don’t get me wrong, I think those restrictions are horrible and Putin is a tyrant, but it’s irresponsible to say that VPNs are illegal. They are not. People should use them to access alternative media like Meduza instead of accepting that there’s only state media. VPNs are still incredibly useful and we shouldn’t play into the scare tactics of the Russian government by insinuating that you can end up in jail by using VPNs. I think that’s coming, too, but these tools are still available to get around lots of the censorship. As you yourself noted, most of the VPN providers aren’t actually complying with the law, so you can access way more material, without current legal repercussions to the individual, at least based on the sources you provided.
This is not accurate information. VPN usage is not banned.
Using is not illegal
Removed by mod
Illegal to show how bypass bans, it is allowed to use VPNs
But how are their propaganda farms going to be able to pretend they are in your country now?
They still get to operate don’t worry!!
Removed by mod
Exemptions that only apply rules to the common people. Maybe device registration with an exception using ipv6 address
annnd another dictatorship box checked off the list… wont be long now
Until what? Until Russia is a dictatorship? That ship sailed a long time ago.
Won’t be long before Putin catches up to Kim Jong Un in the Oppression Olympics
No drug testings pls
Until he stops pretending?
Didn’t he say that’s so sure to be re elected that it doesn’t even need to waste money on useless elections?
Removed by mod
deleted by creator
Theoretically, yes, since there are options other than WG/OVPN available through Smart Protocol, which Alternate Routing leverages.
I live in Russia and I have vps with wireguard vpn in Netherlands. At the current moment it works for me pretty well except the some connection failures two days ago. But they were very short. But I don’t know how long my vps will be accessible with these fucking blocking.
You might want to sign up with astrill. Greetings from China, we’ve been dealing with this shit for decades.
Thanks for advice. I didn’t hear about it before. It will be my backup plan.
Can you confirm that it is still working fine on normal home internet but not on cellular data? Have been back to Russia multiple times per year (family reasons) and none vpn ever works on cellular network. Some work at home and places.
My own vpn is to my house in different country. Wireguard. That has always been working over home wifi here (not cellular). Even until now.
For now it works both via mobile data and home provider. My mobile operator is Tinkoff. The home Internet provider - City Telekom. But sometimes it losses connection for several minutes. But generally it works well.
It will be blocked soon. Go read here what to do https://habr.com/ru/articles/731608/
Now comes the Great Russian Firewall.
The Copper Curtain?
I don’t think they can afford copper at the moment. Try cotton maybe.
ProtonVPN has a “stealth” protocol. Does anyone know if that breaks through?
protonvpn hasn’t worked here at all for a long time now lol
It doesn’t work in China, if that’s any indication.
Absolutely doesn’t. Even tried to go like 100 servers to see.
But nothing related to proton get through
deleted by creator
Russia is a terrorist state. #SlavaUkraini #ArmUkraineForVictory
I love all my fellow Russians and Ukrainians who rise above the brainwashing that this commenter is demonstrating.
Fuck patriotism and slogans, that’s what politicians want you to do to die for them. All wars would be over in a day if people just realized this as politicians can’t fight their wars without people like this commenter.
Ukraine was invaded bro. Their politicians did exactly nothing to encourage war.
Maybe theirs didn’t, some other countries’ did (and still do) because it advances their interest.
Russia is less terrorist than Azerbaijan, but the latter isn’t even being sanctioned (and there’s been an ICJ decision against them, but everybody ignores it) for starving out a little country of 120k people right now in a medieval siege, and openly stating that they are doing exactly that.
I don’t think Ukraine has lots of problems. At least the aggressor there is recognized for what it is and the victim is recognized for what it is and armed by half the world.
I don’t think Ukraine deserves any attention, in fact, since in Artsakh they support Azerbaijan. Support of now finally actual genocide happening is what makes me think that.
Russian likes to threaten the world with nukes - nuclear war would inevitably lead to a nuclear holocaust that would cause the near extinction of the human species.
I don’t give a flying fuck about Azerbaijan. Russia is terrorizing the entire species of humanity. Until you’re threatening to wipe out the entire planet, you are not a terrorist on the same level as Russia.
Russian likes to threaten the world with nukes
Tactical nukes usually.
nuclear war would inevitably lead to a nuclear holocaust that would cause the near extinction of the human species.
If you use tactical nukes, then it’s not much more significant than using thermobaric ordnance or cassettes or even chemical weapons or anything else kinda nasty and non-conventional.
It won’t lead to a global thermonuclear war and thus a nuclear holocaust any more than use of sarin in Syria did.
However! If you don’t give a flying fuck about a smaller holocaust then I don’t give one about your bigger one even if it involves me, I just don’t care.
It won’t lead to a global thermonuclear war and thus a nuclear holocaust any more than use of sarin in Syria did.
You didn’t mention the escalation policy of either of those countries during a war event.
Escalation policies tend to become very elastic when implemented by humans.
They really can get to some limited strategic exchange, but after that point some countries are democratic and that demos which supposedly rules them will tear into pieces everybody preventing the cessation of hostilities, and others are authoritarian, and their authority cares about its lives and well-being the most.
I mean, NATO officials have become much more modest with words about “any attack on NATO territory is an attack on NATO” after a few stray missiles have landed on Polish territory, for example.
Escalation policies tend to become very elastic when implemented by humans.
I’m talking about the Rules of Engagement during wartime. Especially when it comes to the release of nuclear weapons. These rules are very un-elastic.
Each use of nuclear force is responded to by an escalated nuclear force reply. This can keep happening until all the missiles are in the air, flying to their destinations.
If you don’t give a flying fuck about a smaller holocaust then I don’t give one about your bigger one even if it involves me, I just don’t care.
Sure, Russia threatens the entire human species, but if it doesn’t suit your liberal virtue-signalling for some marginalized minority, then it’s fine with you.
What’s the survival of humanity vs your imaginary liberal internet points.
Sure, Russia threatens the entire human species,
Your life is worth at best as much as any Artsakhi farmer’s life. In fact much less, if by “the entire human species” you mean yourself.
Now, Russia can’t threaten anybody, I’d be surprised if any of those strategic nukes are still operational. I happen to live in Russia and know how things are usually done here. That aside, Russia’s regime consists of thieves and murderers, not some Hollywood fascist hardliners. They care for their lives very much.
but if it doesn’t suit your liberal virtue-signalling for some marginalized minority
At this point I’d actually prefer that somebody nukes the miserable being you are.
And people of Artsakh are very much the majority in their land, however they are besieged and dying from hunger.
But, well, it’s good to know that you care about Ukraine only because of being afraid that, again, somebody nukes you.
Also my ancestors on paternal side happen to be from a certain valley in the province of Tayq, Western Armenia, currently occupied by a certain genocidal NATO country. I won’t buy your bullshit. I’ll care about Ukraine and somebody, again, nuking you personally when enough people care about that, which is never.
The people of Artsakh are also people of the world. Russia is threatening them with extinction too. You don’t actual care about them. You’re a fake and a liar begging for liberal minority points online.
Russia is threatening them in much more material way, with all its deals with Azerbaijan (which would be something sanction-worthy for the latter if it were, I don’t know, Georgia), but it isn’t killing them right now.
You don’t actual care about them.
I very definitely do, my aunt’s husband is from there and a participant of the first war.
You’re a fake and a liar
Judging by your use of the words “liberal” and “minority”, I’d say your opinion on the matter is not worth much, neither are you as a whole.
I think Ukraine is a western puppet. But that doesn’t mean Russia isn’t also shit.
People can wrap their heads around two mean bullies fighting in a schoolyard. But someone when it’s politics many people want a single bad guy.
Ukraine is not “western” puppet, it’s just a big oligarch-dominated part of the ex-USSR.
Say, Transcaucasia was toxic nationalist-bandit-oligarch dominated, with these components being initially almost equally mixed, and to some extent still is.
Russia was oligarch and FSB dominated, until those merged with FSB being on top.
Ukraine was similar, but oligarchs are on top now.
I wholeheartedly agree that Ukraine is better than Russia. It’s just more similar to Russia in the dimension of evil than most here seem to think.
It was not working 2 day on mobile operators, now waiting full shutdown
yup. kinda same experience. tele2. complete shutdown on my vpn.
Shadowsocks worked fine
Shadowsocks is very difficult to block. What provider do you use for shadowsocks?
Shadowsocks/ShadowsocksR/vmess/vless/trojan:
I am pretty confused by the article.
What I’d expected based on what I’ve seen so far was that the Kremlin would not care what protocols are used, just whether the a given VPN provider was in Russia and whether it provided the government with access to monitor traffic in the VPN.
So, use whatever VPN protocol you want to talk to a VPN provider where we can monitor or block traffic by seeing inside the VPN. You don’t get to talk to any VPN providers for which we can’t do that, like ones outside Russia, and the Russian government will do what it can to detect and block such protocols when they pass somewhere outside of Russia.
But that doesn’t seem to fit with what the article says is happening.
The media in Russia reports that the reason behind this is that the country isn’t banning specific VPNs. Instead, it’s putting restrictions on the protocols these services use.
According to appleinsider.ru, the two protocols that are subject to the restrictions are:
- OpenVPN
- WireGuard
A Russian VPN provider, Terona VPN, confirmed the recent restrictions and said its users are reporting difficulties using the service. It’s now preparing to switch to new protocols that are more resistant to blocking.
I don’t see what blocking those protocols internal to Russia buys the Kremlin – if Terona conformed to Russian rules on state access to the VPN, I don’t see how the Kremlin benefits from blocking them.
And I don’t see why Russia would want to permit through other protocols, though maybe there are just the only protocols that they’ve gotten around to blocking.
EDIT: Okay, maybe Terona doesn’t conform to state rules or something and there is whitelisting of VPN providers in Russia actually happening. Looking at their VK page, it looks like Terona’s top selling point is “VPN access to free internet” and they have a bunch of country flags of countries outside of Russia. So maybe Russia is blocking VPN connectivity at the point that it exits Russia, and it’s affecting Terona users who are trying to use a VPN to access the Internet outside Russia, which would be in line with what I would have expected.
Your edit makes sense, it would be possible to block all VPN traffic but just whitelist traffic from trusted IP addresses (like those in Russia). But I don’t think we have enough info to say for sure that’s what’s happening.
Couldn’t you just use any server/droplet/AWS instance via SSH to get around this law? Seems much simpler.
If you’re savvy enough, sure. But for the lay person who doesn’t want a clouded view of the world, they likely won’t have the same resources or technical capabilities.
It’s not without drawback though. SSH tunnel consumes a lot more cpu compared to wireguard. If your vps has a weak cpu, it might not even able to fully saturate a 1gbps connection due to cpu bottleneck on certain ciphers. If you’re using a mobile device, it will drain your battery faster than wireguard.
So it’ll take you 10 minutes, instead of 5, to download a DVD rip of a movie… This limitation would have next to no practical impact on being able to communicate with the free world.
True, it’s not like Russian need to use VPN to pirate stuff anyway.
Wait! You got it. We just encapsule https in the bittorrent protocol!
I was talking to someone from the UAE in some thread on lemmy.blahaj.zone a month back. Apparently, because the UAE doesn’t like LGBT stuff, they block images hosted on that server.
I was seriously thinking there about what it would take to hide a VPN connection, and that BitTorrent Is actually not a terrible choice, as it generates a lot of bidirectional traffic.
IIRC I went looking and some guy did a prototype as his masters thesis some years back.
Lemme see if I can find it.
googles
Yeah.
https://github.com/danoctavian/bit-smuggler
China started killing VPN connections.
watcha gonna do.
bit-smuggler might be the tool for you. keep those pesky internet censors off your back, get your tweets through and read your wikipedia in peace.
bit-smuggler is a tool designed to allow you to defeat internet censorship by tunneling your network traffic through what appears to be a genuine bittorrent peer connection, fooling censorship firewalls into thinking it’s harmless.
EDIT: Ah, now I remember. Wasn’t that they block images, but that they block the server. Gay UAE dude could use a permissable Threadiverse server and federation would let him talk to people on lemmy.blahaj.zone. However, the image-hosting is not federated. If someone put a post with an image up, he could view the text on another Threadiverse server, but couldn’t see the images, because the images don’t propagate to federated servers. The browser still tries to talk to the original server for that.
People in western countries use VPN to hide bittorrent traffics, while people living in an authoritarian countries uses bittorrent to hide VPN traffics. Life is sometimes stranger than fictions.
Very interesting project though. Thanks for mentioning it.
that’s assuming you can get one, which is challenging since most hosting companies don’t/can’t offer services in russia anymore
OpenVPN + obfs4proxy should still work. I’ve been using it in China for some time along with a VPN client on Android & windows that support obfs3.
