Comments on: Fight the commies

Question: Fight the commies

saysthis — Sat, 12 Mar 2005 15:10:05 -0800

Wanna subvert an authoritarian regime? Help me get around the Great Firewall!

Really, that's basically all. They've (China) perfected their blocking technology to the point where they can detect any search query, not just in google and yahoo, and they can block parts of sites. They block any and all web proxies the instant they go online, and the only way to completely get around the blocks is to encrypt all your traffic in HTML. I need to either a) learn to proxy outside of the country without the help of applications or b) get some impenetrable software. No BBC news. No blogspot. No google cache. Timeout errors way more often than should happen. Government spies monitoring my net traffic 'cause they know I'm a foreigner and shutting it down if I type the wrong thing into google. I only want to surf in peace.

By: Eideteker

Eideteker — Sat, 12 Mar 2005 16:03:35 -0800

Hmm... it looks like everyone who replied to this thread earlier was arrested and had their comments deleted. Such is the vast Red Chinese conspiracy!

By: signal

signal — Sat, 12 Mar 2005 16:27:58 -0800

Have somebody set up a vnc on a non-chinese computer and use that for your surfing needs? TightVNC is quite good, IMO.

By: furiousxgeorge

furiousxgeorge — Sat, 12 Mar 2005 16:28:41 -0800

...hmmm...have you considered, ya know...not messing around with the autoritarian regime?

BBC ain't worth the hassle.

By: nyterrant

nyterrant — Sat, 12 Mar 2005 16:50:11 -0800

What you need is an Infernet. [.pdf]

By: delmoi

delmoi — Sat, 12 Mar 2005 17:07:37 -0800

Hmm... VNC sounds like a good idea.

What I'd do, if I were you would be to buy a hosting plan and setup your own, password-protected proxy on it. Only you can use it, so the government dosn't know what's going on. Use SSL to prevent snooping. A hosting plan from one-hosting.com can be had for $83 a month, and can run PHP scripts. here's one package that claims to do it. And another, and another.

My recomendation: Buy hosting and install 'em all. on one-hosting SSL setup is simple, you just drop those files into the "httpsdocs" folder and add an SSL username through the control pannel.

The next option would be a dedicated server, which you could install squid on if these PHP ones don't work. With a dedicated server, you could probably get VNC running and surf the web through there.

There's always a possibility the chinese could block SSL and VNC, also.

By: event

event — Sat, 12 Mar 2005 17:08:47 -0800

What you need is an SSH tunnel over port 80 to a computer outside of China.

If you don't have an external computer, you can also try JAP or Tor. It is my understanding, though, that the Chinese government is aware of, and at one time or another has attempted to block, each of these.

By: numble

numble — Sat, 12 Mar 2005 21:52:46 -0800

Maybe it's just stepped up security because the NPC is going on, and it might be easier afterwards. I'm no real expert, however.

By: gd779

gd779 — Sat, 12 Mar 2005 22:33:56 -0800

It's unlikely that China is actually blocking all the proxies. The academics at the major universities, in my experience, needed unfettered access, so there are probably frequently updated BBS's listing proxies if you know where to look.

How long have you been/will you be in the country? I may (or may not) be able to help you out a bit more. I'll tell you this, though: if you're in an area with a lot of foreigners, you're not the only one in this position. Make friends, and somebody will hook you up. Guanxi, remember.

On preview: numble is likely right, in my judgment. When the NPC meeting is over, things might get easier.

By: majick

majick — Sat, 12 Mar 2005 22:50:59 -0800

Please enjoy this fine peekabooty, a system designed to do precisely such circumvention:

The goal of the Peekabooty Project is to create a product that can bypass the nation-wide censorship of the World Wide Web practiced by many countries.

By: andrew cooke

andrew cooke — Sun, 13 Mar 2005 04:07:03 -0800

i'd do what event suggests, assuming ssh isn't illegal (since ssh is a pretty general, and useful, piece of software, it is probably accepted). more targetted solutions might be made illegal and are likely to share target (proxy) addresses, making the traffic from them more obvious (presumably the chinese are doing traffic analysis too). so i'd get access to a machine, or several if possible so that you can hop between addresses every now and then, abroad, and bounce off those using ssh. all you need is a friend with a cable connection who's capable of configuring his computer correctly (dynamic addresses aren't a problem - use dyndns.org or, if that's blocked, set up an email trigger that sends a reply from their machine with the current address - i use this as a backup for if dyndns fails).

and if that makes no sense, in general, educate yourself. those terms are googleable. the more you know, the safer you should be, within reason, and certainly you'll be more flexible.

By: andrew cooke

andrew cooke — Sun, 13 Mar 2005 04:34:09 -0800

incidentally, you might want to be extra-paranoid and explicitly configure the ssh keys before connecting. since they have absolute control of the network they can do a man in the middle attack on you (ssh assumes that the initial key is correct, so can be fooled by mim if it is always present, afaik).

By: andrew cooke

andrew cooke — Sun, 13 Mar 2005 07:54:19 -0800

just got an email from a lurker, fragments follow (and bow down before my l337 abilities in hiding the names):

There are a few solutions that people in China are using to get around the
firewall. "U17ra[drop this]5urf" and "Fr33[and this]ga7e" are programs that work as SSH proxy
finders, accessing lists of proxies outside the country that your net
traffic can be routed through. They can be found on 3M[this too]ul3 fairly easily,
because naturally, searching for them via Google is no good.

[note: when posting this, it's probably a good idea to obfuscate the names
of the two programs, since the Chinese filters will often react to them and
return "Document contains no data" errors. ]

By: jessamyn

jessamyn — Sun, 13 Mar 2005 08:32:56 -0800

Just to make sure all bases are covered, my friend Paul over at ibiblio.org deals with trying to get around the Chinese firewall quite frequently [I believe they host Tibet's web site] and has compiled an FAQ of sorts for technical solutions and resources in case that helps.

By: Item

Item — Mon, 14 Mar 2005 00:45:56 -0800

Andrew, if I may ask, what is "3Mul3?

Just wondering.

By: Optamystic

Optamystic — Mon, 14 Mar 2005 03:56:58 -0800

emule

By: saysthis

saysthis — Thu, 17 Mar 2005 09:50:29 -0800

Been a while since I've checked this thread, but if anyone's still looking, thanks! I appreciate all the help I can get. I've always been computer-stupid but this kind of stuff is making me change my habits fast.