4 ms·
Deep Packet Inspection... aaannd the game is over. Sorry, but the only the way to defend is to do something against it, protest, demonstrate, campaigns. And to
by X4 13y ago
Deep Packet Inspection... aaannd the game is over. Sorry, but the only the way to defend is to do something against it, protest, demonstrate, campaigns. And to attack the arguments of the politicians with a very strong backup or to leave the country.
Vote for: http://www.pirateparty.org.uk/ http://www.pirateparty.org.uk/
If you know 'anything' that really circumvents DPI, please let me know, I will buy it, now! :) (Hopefully I can shoot my own Satellite into space someday..)
- tomjen3 13y agoSsh vpn proxy in the USA, fairly simple and even dpi can't do shit about that.
- X4 13y agoI have read the oppsite, can you show me how vpn+proxy over ssh can prevent getting blocked from DPI? I thought they block everything not on their whitelist.
- tomjen3 13y agoWell that would mean they would have to block most non-mainstream sites or alternatively block a ton of things. Of course with a whitelist it is more difficult but it is almost certainly not they way they will do it.
- __alexs 13y agoGiven what we already know about the extent of DPI monitoring on the US internet, and the US govs data sharing programs, why do you think this a more practical choice than actual democratic representation in the long term?
- est 13y agoBlock any TCP protocol starting with string "SSH-" Problem solved. Seriously people think SSH or VPN is advanced? Every clear text handshake protocol could be blocked at ease.
- tokenizerrr 13y agoSure, then SSH is blocked. SSH is very necessary in the day to day work for a ton of people, and it would shut down businesses.
- mikeash 13y agoRight. The trick is not to use something that's technically infeasible to block, but to use something that's politically infeasible to block.
- est 13y agoPoliticians doesn't give a shit about your business, if you use porn-enabled SSH, you are a terroist suspect and a threat to childrens of the nation.
- lmm 13y agoAny protocol that runs over SSL on port 443?
- mateuszf 13y agoUsing sslh one can actually host both https sites and ssh on one port. I used this to hop over a very restrictive firewall in my company, it works great.
- est 13y agoHttps handshake is also clear text. There's was previous attempt to block certain types of SSL cert in the past.
- nly 13y agoAs pointed out by est, you can snoop on SSL certificates passing over the wire and drop connections containing canonical names you don't like, or signed by CAs you don't like. You can also drop and throttle HTTPS connections without effecting genuine use, while completely buggering up P2P and other bulky uses.
- nly 13y agoThey could certainly inspect 6in4 traffic, but at the moment major UK ISPs aren't even offering native IPv6, so doing so would be fairly tenuous.
- iuguy 13y agoYes, I do. Repeatedly and often, and I'll continue to do so till they put me behind bars and beyond if I could. However I'll only release it on a gradual level as it's a cat and mouse game.