• Biblbrox@lemmy.world
    link
    fedilink
    English
    arrow-up
    55
    ·
    edit-2
    11 months ago

    I live in Russia and I have vps with wireguard vpn in Netherlands. At the current moment it works for me pretty well except the some connection failures two days ago. But they were very short. But I don’t know how long my vps will be accessible with these fucking blocking.

    • godless@lemmy.world
      link
      fedilink
      English
      arrow-up
      42
      ·
      11 months ago

      You might want to sign up with astrill. Greetings from China, we’ve been dealing with this shit for decades.

    • Nanabaz2@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      11 months ago

      Can you confirm that it is still working fine on normal home internet but not on cellular data? Have been back to Russia multiple times per year (family reasons) and none vpn ever works on cellular network. Some work at home and places.

      My own vpn is to my house in different country. Wireguard. That has always been working over home wifi here (not cellular). Even until now.

      • Biblbrox@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        11 months ago

        For now it works both via mobile data and home provider. My mobile operator is Tinkoff. The home Internet provider - City Telekom. But sometimes it losses connection for several minutes. But generally it works well.

  • Honytawk@lemmy.zip
    link
    fedilink
    English
    arrow-up
    31
    arrow-down
    2
    ·
    11 months ago

    But how are their propaganda farms going to be able to pretend they are in your country now?

    • AndyLikesCandy@reddthat.com
      link
      fedilink
      English
      arrow-up
      3
      ·
      11 months ago

      Exemptions that only apply rules to the common people. Maybe device registration with an exception using ipv6 address

    • mihor@lemmy.ml
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      46
      ·
      11 months ago

      Maybe they don’t actually have all those propaganda farms that the dems were crying about, did that thought cross your mind?

      • nomnomdeplume@lemmy.world
        link
        fedilink
        English
        arrow-up
        25
        arrow-down
        1
        ·
        11 months ago

        Before it was widely reported, Twitter’s geocoding feature showed a ton of Russian-based accounts posing as “Americans” and only discussing politics. Would love to see lemmy be more transparent about accounts posting here too, tbh.

        • tal@kbin.social
          link
          fedilink
          arrow-up
          3
          ·
          edit-2
          11 months ago

          In all honesty, I would expect at least an organized troll farm to use VPNs ending outside Russia.

          Random people in Russia might just act directly, but it’s a red flag that’s easy to pretty-inexpensively eliminate.

          googles

          It sounds like at least the Internet Research Agency troll farm used VPNs.

          https://www.bbc.com/news/technology-43093390

          According to court documents, the IRA took several measures to hide its tracks, duping the technology companies who were unaware, or unable, to stop what was filtering through their systems.

          The key - and obvious - move was to hide the fact that these posts were coming from Russia. For that, the IRA is said to have used several Virtual Private Networks - VPNs - to route their operations through computers in the US. The operatives allegedly used stolen identities to set up PayPal accounts using real American names.

          • nomnomdeplume@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            11 months ago

            Even if it’s just a hash of an ip4, that would go a long way towards identifying who is coming from where

        • mihor@lemmy.ml
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          8
          ·
          11 months ago

          I’d say you probably want to check my geolocation?

      • voluble@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        arrow-down
        1
        ·
        edit-2
        11 months ago

        They exist. Inform yourself on the Internet Research Agency, one of Russia’s state sponsored troll farms. A handful of their activities are well documented in factual records. ‘Dems’ weren’t crying about it, every rational person who doesn’t want foreign interference and disinformation flooding our spaces is concerned about it. This should not be a partisan issue whatsoever.

        • tal@kbin.social
          link
          fedilink
          arrow-up
          3
          ·
          11 months ago

          Yeah, I don’t even really have a problem with RT, as long as it’s labeled so that people understand that it’s the Russian state speaking. But a lot of forums rely more-or-less on the idea that people are more-or-less good faith actors. Very large scale efforts to have people pretend to be someone else and make non-good-faith arguments is something that I think that a lot of our forums can’t today handle well.

          Arguably, that’s a technical problem that needs to be fixed in some way.

      • Biblbrox@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        11 months ago

        Sadly, but we have. There is a big propaganda campaign have been raised for the last 2 years. It was here before but not in a such huge amount.

  • Grant_M@lemmy.ca
    link
    fedilink
    English
    arrow-up
    42
    arrow-down
    18
    ·
    11 months ago

    Russia is a terrorist state. #SlavaUkraini #ArmUkraineForVictory

    • lemming007@lemm.ee
      link
      fedilink
      English
      arrow-up
      9
      arrow-down
      21
      ·
      11 months ago

      I love all my fellow Russians and Ukrainians who rise above the brainwashing that this commenter is demonstrating.

      Fuck patriotism and slogans, that’s what politicians want you to do to die for them. All wars would be over in a day if people just realized this as politicians can’t fight their wars without people like this commenter.

      • SCB@lemmy.world
        link
        fedilink
        English
        arrow-up
        20
        arrow-down
        3
        ·
        11 months ago

        Ukraine was invaded bro. Their politicians did exactly nothing to encourage war.

        • lemming007@lemm.ee
          link
          fedilink
          English
          arrow-up
          4
          arrow-down
          12
          ·
          edit-2
          11 months ago

          Maybe theirs didn’t, some other countries’ did (and still do) because it advances their interest.

    • vacuumflower@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      7
      arrow-down
      61
      ·
      11 months ago

      Russia is less terrorist than Azerbaijan, but the latter isn’t even being sanctioned (and there’s been an ICJ decision against them, but everybody ignores it) for starving out a little country of 120k people right now in a medieval siege, and openly stating that they are doing exactly that.

      I don’t think Ukraine has lots of problems. At least the aggressor there is recognized for what it is and the victim is recognized for what it is and armed by half the world.

      I don’t think Ukraine deserves any attention, in fact, since in Artsakh they support Azerbaijan. Support of now finally actual genocide happening is what makes me think that.

      • FaeDrifter@midwest.social
        link
        fedilink
        English
        arrow-up
        16
        arrow-down
        5
        ·
        11 months ago

        Russian likes to threaten the world with nukes - nuclear war would inevitably lead to a nuclear holocaust that would cause the near extinction of the human species.

        I don’t give a flying fuck about Azerbaijan. Russia is terrorizing the entire species of humanity. Until you’re threatening to wipe out the entire planet, you are not a terrorist on the same level as Russia.

        • vacuumflower@lemmy.sdf.org
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          8
          ·
          11 months ago

          Russian likes to threaten the world with nukes

          Tactical nukes usually.

          nuclear war would inevitably lead to a nuclear holocaust that would cause the near extinction of the human species.

          If you use tactical nukes, then it’s not much more significant than using thermobaric ordnance or cassettes or even chemical weapons or anything else kinda nasty and non-conventional.

          It won’t lead to a global thermonuclear war and thus a nuclear holocaust any more than use of sarin in Syria did.

          However! If you don’t give a flying fuck about a smaller holocaust then I don’t give one about your bigger one even if it involves me, I just don’t care.

          • FaeDrifter@midwest.social
            link
            fedilink
            English
            arrow-up
            2
            arrow-down
            1
            ·
            11 months ago

            If you don’t give a flying fuck about a smaller holocaust then I don’t give one about your bigger one even if it involves me, I just don’t care.

            Sure, Russia threatens the entire human species, but if it doesn’t suit your liberal virtue-signalling for some marginalized minority, then it’s fine with you.

            What’s the survival of humanity vs your imaginary liberal internet points.

            • vacuumflower@lemmy.sdf.org
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              1
              ·
              11 months ago

              Sure, Russia threatens the entire human species,

              Your life is worth at best as much as any Artsakhi farmer’s life. In fact much less, if by “the entire human species” you mean yourself.

              Now, Russia can’t threaten anybody, I’d be surprised if any of those strategic nukes are still operational. I happen to live in Russia and know how things are usually done here. That aside, Russia’s regime consists of thieves and murderers, not some Hollywood fascist hardliners. They care for their lives very much.

              but if it doesn’t suit your liberal virtue-signalling for some marginalized minority

              At this point I’d actually prefer that somebody nukes the miserable being you are.

              And people of Artsakh are very much the majority in their land, however they are besieged and dying from hunger.

              But, well, it’s good to know that you care about Ukraine only because of being afraid that, again, somebody nukes you.

              Also my ancestors on paternal side happen to be from a certain valley in the province of Tayq, Western Armenia, currently occupied by a certain genocidal NATO country. I won’t buy your bullshit. I’ll care about Ukraine and somebody, again, nuking you personally when enough people care about that, which is never.

              • FaeDrifter@midwest.social
                link
                fedilink
                English
                arrow-up
                1
                ·
                11 months ago

                The people of Artsakh are also people of the world. Russia is threatening them with extinction too. You don’t actual care about them. You’re a fake and a liar begging for liberal minority points online.

                • vacuumflower@lemmy.sdf.org
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  arrow-down
                  1
                  ·
                  11 months ago

                  Russia is threatening them in much more material way, with all its deals with Azerbaijan (which would be something sanction-worthy for the latter if it were, I don’t know, Georgia), but it isn’t killing them right now.

                  You don’t actual care about them.

                  I very definitely do, my aunt’s husband is from there and a participant of the first war.

                  You’re a fake and a liar

                  Judging by your use of the words “liberal” and “minority”, I’d say your opinion on the matter is not worth much, neither are you as a whole.

          • Cosmic Cleric@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            1
            ·
            11 months ago

            It won’t lead to a global thermonuclear war and thus a nuclear holocaust any more than use of sarin in Syria did.

            You didn’t mention the escalation policy of either of those countries during a war event.

            • vacuumflower@lemmy.sdf.org
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              3
              ·
              11 months ago

              Escalation policies tend to become very elastic when implemented by humans.

              They really can get to some limited strategic exchange, but after that point some countries are democratic and that demos which supposedly rules them will tear into pieces everybody preventing the cessation of hostilities, and others are authoritarian, and their authority cares about its lives and well-being the most.

              I mean, NATO officials have become much more modest with words about “any attack on NATO territory is an attack on NATO” after a few stray missiles have landed on Polish territory, for example.

              • Cosmic Cleric@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                arrow-down
                1
                ·
                11 months ago

                Escalation policies tend to become very elastic when implemented by humans.

                I’m talking about the Rules of Engagement during wartime. Especially when it comes to the release of nuclear weapons. These rules are very un-elastic.

                Each use of nuclear force is responded to by an escalated nuclear force reply. This can keep happening until all the missiles are in the air, flying to their destinations.

      • nomadjoanne@lemmy.world
        link
        fedilink
        English
        arrow-up
        7
        arrow-down
        7
        ·
        edit-2
        11 months ago

        I think Ukraine is a western puppet. But that doesn’t mean Russia isn’t also shit.

        People can wrap their heads around two mean bullies fighting in a schoolyard. But someone when it’s politics many people want a single bad guy.

        • vacuumflower@lemmy.sdf.org
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          4
          ·
          11 months ago

          Ukraine is not “western” puppet, it’s just a big oligarch-dominated part of the ex-USSR.

          Say, Transcaucasia was toxic nationalist-bandit-oligarch dominated, with these components being initially almost equally mixed, and to some extent still is.

          Russia was oligarch and FSB dominated, until those merged with FSB being on top.

          Ukraine was similar, but oligarchs are on top now.

          I wholeheartedly agree that Ukraine is better than Russia. It’s just more similar to Russia in the dimension of evil than most here seem to think.

  • tal@kbin.social
    link
    fedilink
    arrow-up
    23
    ·
    edit-2
    11 months ago

    I am pretty confused by the article.

    What I’d expected based on what I’ve seen so far was that the Kremlin would not care what protocols are used, just whether the a given VPN provider was in Russia and whether it provided the government with access to monitor traffic in the VPN.

    So, use whatever VPN protocol you want to talk to a VPN provider where we can monitor or block traffic by seeing inside the VPN. You don’t get to talk to any VPN providers for which we can’t do that, like ones outside Russia, and the Russian government will do what it can to detect and block such protocols when they pass somewhere outside of Russia.

    But that doesn’t seem to fit with what the article says is happening.

    The media in Russia reports that the reason behind this is that the country isn’t banning specific VPNs. Instead, it’s putting restrictions on the protocols these services use.

    According to appleinsider.ru, the two protocols that are subject to the restrictions are:

    • OpenVPN
    • WireGuard

    A Russian VPN provider, Terona VPN, confirmed the recent restrictions and said its users are reporting difficulties using the service. It’s now preparing to switch to new protocols that are more resistant to blocking.

    I don’t see what blocking those protocols internal to Russia buys the Kremlin – if Terona conformed to Russian rules on state access to the VPN, I don’t see how the Kremlin benefits from blocking them.

    And I don’t see why Russia would want to permit through other protocols, though maybe there are just the only protocols that they’ve gotten around to blocking.

    EDIT: Okay, maybe Terona doesn’t conform to state rules or something and there is whitelisting of VPN providers in Russia actually happening. Looking at their VK page, it looks like Terona’s top selling point is “VPN access to free internet” and they have a bunch of country flags of countries outside of Russia. So maybe Russia is blocking VPN connectivity at the point that it exits Russia, and it’s affecting Terona users who are trying to use a VPN to access the Internet outside Russia, which would be in line with what I would have expected.

    • PeachMan@lemmy.one
      link
      fedilink
      English
      arrow-up
      5
      ·
      11 months ago

      Your edit makes sense, it would be possible to block all VPN traffic but just whitelist traffic from trusted IP addresses (like those in Russia). But I don’t think we have enough info to say for sure that’s what’s happening.

  • egeres@lemmy.world
    link
    fedilink
    English
    arrow-up
    23
    arrow-down
    1
    ·
    11 months ago

    Is it possible to bypass this block? Say, embedding VPN packets within a different protocol?

    • TheQuantumPhysicist@programming.dev
      link
      fedilink
      English
      arrow-up
      17
      arrow-down
      1
      ·
      11 months ago

      I don’t know why some moron downvoted you, but the answer is maybe. For reference, I have always bypassed SSH firewall blocking by sneaking SSH packets within https.

      The only way this won’t be possible is if the government enforces installing a certificate to use the internet, so that they can do a man-in-the-middle-attack. I heard this is already being done in Afghanistan.

      • nomadjoanne@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        1
        ·
        11 months ago

        So sad. More and more we are seeing a world were the powers that be can do anything they want but if you do it it’s (rightfully) malware and illegal.

        The vast majority of popular apps and OSes are spyware by any reasonable definition of the term.

        • tal@kbin.social
          link
          fedilink
          arrow-up
          2
          ·
          11 months ago

          I remember, back in the late 1990s, if I have the time right, when RealPlayer phoned home to check for updates, and there was enormous uproar over the privacy implications.

          Things sure have changed since then.

    • Shan@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      11 months ago

      For simple web browsing or streaming over https you can use a socks proxy.

      For full VPN function you could try something like IPSec or L2TP, as they’re not listed in the protocols Russia is targeting.

  • rustydomino@lemmy.world
    link
    fedilink
    English
    arrow-up
    18
    ·
    11 months ago

    Can someone explain from a technical standpoint how they can block OpenVPN running on port 443? my admittedly limited understanding is that port 443 is the common port for https. If they blocked that port wouldn’t that mean that they would be blocking nearly the entire internet?

    • float@feddit.de
      link
      fedilink
      English
      arrow-up
      13
      ·
      11 months ago

      I don’t know what they actually do but one possibly is to look for (absence of) the TLS handshake. Or maybe they simply infect all devices on the Chinese market with MITM certificates to be able to decrypt all TLS encrypted traffic. Should be easy to force companies to do that in such a country.

      • Shan@lemmy.world
        link
        fedilink
        English
        arrow-up
        29
        ·
        11 months ago

        The port isn’t their focus, they’re looking at the protocol that is being used, regardless of the port. The protocol is still visible when not doing deep packet inspection. That’s why there suggesting a socks proxy for Russian citizens, because that uses HTTPS to tunnel traffic, so it wouldn’t be caught up in protocol analysis.

        • binom@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          ·
          11 months ago

          can you maybe link some ressources on how the protocol used can be detected? i did not know about this and would like to read into it some more :)

          • noride@lemm.ee
            link
            fedilink
            English
            arrow-up
            2
            ·
            11 months ago

            Look up NBAR for the basic idea. Each vendor has their own ‘secret sauce’ implementation, Palo Alto only needs 9 bytes of payload for disambiguation, iirc.

    • Too Lazy Didn't Name@lemmy.woodward.tech
      link
      fedilink
      English
      arrow-up
      5
      ·
      11 months ago

      From my understanding, they are most likely just blocking the defualt port of wireguard / openvpn and IPs associated with the VPN servers of VPN providers they dont like.

      If they wanted to block VPN traffic over 443 to any IP, they would have to do deep packet inspection, which I would imagine is infeasible for Russia.

      Supposedly, the Chinese great firewall does use deep packet inspection, so it is possible to do this at the country level.

      • targetx@programming.dev
        link
        fedilink
        English
        arrow-up
        1
        ·
        11 months ago

        They specifically mention it’s on the protocol level which would imply it’s doing more than just blocking some ports. Not sure why you’d think China could pull that off but it would be infeasible for Russia?

    • Aux@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      1
      ·
      11 months ago

      You can analyze the traffic, detect common patterns and also detect source of the request. Russian IT specialists are now using very complex solutions to come around the block which work a lot like MITM attacks.

  • BloopWut@lemmy.world
    link
    fedilink
    English
    arrow-up
    15
    ·
    11 months ago

    OpenVPN + obfs4proxy should still work. I’ve been using it in China for some time along with a VPN client on Android & windows that support obfs3.

  • HootinNHollerin@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    12
    ·
    11 months ago

    Proton vpn has a feature that can be turned on for oppressive governments, ‘alternate routing’ I believe. Would that be sufficient or no?

    • eroc1990@lemmy.parastor.net
      link
      fedilink
      English
      arrow-up
      2
      ·
      11 months ago

      Theoretically, yes, since there are options other than WG/OVPN available through Smart Protocol, which Alternate Routing leverages.

  • vacuumflower@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    1
    ·
    11 months ago

    This has been happening intermittently since 2012 or something.

    Not wg, cause it wasn’t popular then.

    HTTP\HTTPS tunneling etc are not that hard, ya knaw.

    Or encrypted GRE, ffs.

  • lud@lemm.ee
    link
    fedilink
    English
    arrow-up
    16
    arrow-down
    9
    ·
    11 months ago

    !chapotraphouse@hexbear.net will love this.

    After a discussion that lasted for way too long, it appears that they like censorship.

    They think that this is a perfectly reasonable argument: https://youtu.be/QFgcqB8-AxE and that the government knows better and thus information should be suppressed.

    Absolutely ridiculous…

      • Bone@lemmy.world
        link
        fedilink
        English
        arrow-up
        8
        arrow-down
        2
        ·
        11 months ago

        Yes they are. And they shadow delete comments! That’s after several of their members straight up sent abusive messages to me. I of course reported them. That’s when I noticed my comments deleted.

        I’m not too worried about it. If that’s how they are with others, their message and community won’t reach far. Fuck em

        • Corkyskog@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          2
          ·
          11 months ago

          I would love to see true metrics on what percent of them are Russian, Bots, Eastern European and people living in western countries… considering every other comment from that instance seems to simply be “fuck the west”