Slashdot Mirror

← Back to Stories (view on slashdot.org)

Defeating China's National Firewall

Posted by ryuzaki0 on from the obligitory-harry-potter-reference dept.

Bruce Schneier is reporting on his blog that a recent paper is discussing how to defeat China's national firewall. From the article: "However, because the original packets are passed through the firewall unscathed, if both of the endpoints were to completely ignore the firewall's reset packets, then the connection will proceed unhindered! We've done some real experiments on this -- and it works just fine!! Think of it as the Harry Potter approach to the Great Firewall -- just shut your eyes and walk onto Platform 9¾."

2 of 370 comments (clear)

  1. It's not THEIRS by mrcaseyj · · Score: 5, Insightful
    >No matter how "horrible" Chinese internet policy is by US standards, it's their damned network segment. Let them work it out for themselves.

    The chinese internet doesn't belong to the chinese government, it belongs to the chinese people. When they have a real democracy then "they" (the people) can decide how to run it. Until then we shouldn't respect how "they" (the government) want to run the internet any more than we would if some bank robbers were holding hostages and "they" (the robbers) wanted to decide how to run the bank.

  2. Re:Publish and Perish by Anonymous Coward · · Score: 5, Insightful

    > You cannot tell if a remote host is responding to reset packets from your firewall, at least not directly.

    If you had to send multiple resets for the same port pair, they're ignoring you.