Slashdot Mirror


How Some Chinese Users Bypass The Great Firewall

CowboyRobot writes "The ACM has an article describing the history and present of the Great Firewall of China (GFW). 'Essentially, GFW is a government-controlled attacking system, launching attacks that interfere with legitimate communications and affecting many more victims than malicious actors. Using special techniques, it successfully blocks the majority of Chinese Internet users from accessing most of the Web sites or information that the government doesn't like. GFW is not perfect, however. Some Chinese technical professionals can bypass it with a variety of methods and/or tools. An arms race between censorship and circumvention has been going on for years, and GFW has caused collateral damage along the way.'"

21 of 58 comments (clear)

  1. So it's just like... by urusan · · Score: 4, Interesting

    So it's just like the DRM arms race between content companies and technically capable pirates that has caused collateral damage (to legitimate users) along the way?

    Weird.

    1. Re:So it's just like... by aNonnyMouseCowered · · Score: 2

      "i dont think sony ever killed people for bypassing drm though..."

      I don't think China has ever sentenced to death someone for merely bypassing the Firewall. Which isn't to say that dissidents aren't tortured or arrested on bogus charges, or that you can get jailed merely for repeating rumors about the health or wealth of certain Party officials. But you have to be doing some seriously disruptive activities in REAL life to get the capital punishment.

    2. Re:So it's just like... by wisnoskij · · Score: 4, Informative

      Well then you have never gotten caught or tried then.
      Actually, I would say that the punishment in the US is far more severe for piracy than the Chinese punishment for censorship laws.
      That said, its seems that using proxies to bypass the firewall just for normal every day activities is not even really considered illegal in and of itself. The general answer to the question of, "what is the risk/punishment" is there is none.

      --
      Troll is not a replacement for I disagree.
    3. Re:So it's just like... by poity · · Score: 2

      Perhaps in function, but not in essence. DRM has alternatives, there is no alternative to truth. The consequences of you not being able to watch Batman on your laptop is personal in scale, the consequences of not being informed is societal in scale. And even though this may be unpopular on /., I take the stance that content creators have at least some rights over the distribution of their creations, whereas governments have absolutely no rights over the distribution of truth.

      --
      your thin skin doesn't make me a troll
    4. Re:So it's just like... by poity · · Score: 3, Insightful

      This is true. If people were actually punished in the legal sense for accessing information blocked by the firewall there would be a ruckus. Not a huge one, but big enough that it keeps government from acting brashly. It's the sending of information, writing blogs on banned topics, weibo-ing controversial things, etc. that could get you in IRL trouble.

      --
      your thin skin doesn't make me a troll
    5. Re:So it's just like... by K.+S.+Kyosuke · · Score: 3, Funny

      i dont think sony ever killed people for bypassing drm though...

      That doesn't conclusively demonstrate that they don't want to.

      --
      Ezekiel 23:20
  2. vpn by __aardcx5948 · · Score: 5, Informative

    I was in China for 2 trips. used a US vpn both times, had no issues.

    1. Re:vpn by Anonymous Coward · · Score: 5, Interesting

      It's probably easier if you are not a Chinese citizen and don't have to live with possible consequences.

    2. Re:vpn by Anonymous Coward · · Score: 4, Interesting

      A few months ago, I tried to help a Chinese national in a hotel in Spain connect to the hotel network. I think his laptop had some really odd network monitoring stack replacement software on it. I think he worked for a Chinese public university.

      I work as a systems integrator and administrator for small businesses in the USA. After 20 minutes, I had to continue my vacation. I don't believe he ever got connected by wifi or directly wired ethernet.

  3. Sensationalist Summary by mellyra · · Score: 5, Interesting

    Some Chinese technical professionals can bypass it with a variety of methods and/or tools.

    I've met quite a few Chinese in online games and what they tell is that circumventing the firewall is as easy as using a proxy or VPN, is basically risk-free (to the end-user) and is really nothing special amongst their peer-group (age 15-30, educated, typically upper middle class). Every now and then their preferred proxy or VPN provider gets blocked and they have to look for a new one but that's a minor hassle and not a deal-breaker.

    So the emphasis when reading the summary should definetely be on the variety of tools that are available to sidestep the firewall, not on the level of technical competence that is required to do so.

    1. Re:Sensationalist Summary by nurb432 · · Score: 2

      I wouldnt say risk free, as if they get caught bypassing it woudlnt go well for them.

      Somehow i dont think the officals will care or even ask what you were doing across the 'forbidden link', and just doing it is enough crime in itsself for them.

      --
      ---- Booth was a patriot ----
  4. Technical professionals? by Anonymous Coward · · Score: 5, Insightful

    I've been living in china for a year by now. And I'm rather sorprised by how easy is to bypass the firewall. It doesn't take technical knowledge of any kind. You simply have to use one of the great number of programs that allow you to do it and that most chinese people tend to share using usb.

    The firewall is mostly an annoyance than anything else, since the programs that bypass it use proxys which slow your internet speed and make it so that you cannot use it for activities that require decent bandwith. Still if you are pacient enough, it's like it's not there.

    1. Re:Technical professionals? by BeTeK · · Score: 2

      Yup, I was in china in a conference few years back and bypassing the firewall to get to the facebook was as simple as ssh -D 1234 username@my.server.com. And then setting browser proxy setting correctly.

  5. Recently attempts are made to block UDP VPNs by sc0rpi0n · · Score: 5, Informative

    I live in China and noticed that since a few weeks (starting before the congress) the quality of OpenVPN UDP connections deteriorated severely. Formerly traffic worked fine, but now a ping over OpenVPN has significantly higher packet loss and latency than a direct ping to the same host, while these used to be similar. The connection often drops for 5-10 minutes, after which it is reestablished. A tunnel over ssh now performs a lot better than an OpenVPN connection.

    Note that I am using my own servers and non-default ports, not established VPN providers that are easier to block. This behavior occurs on different networks from different ISPs. Additionally, L2TP connections now fail most of the time, while they worked a few months ago.

    1. Re:Recently attempts are made to block UDP VPNs by Anonymous Coward · · Score: 2, Funny

      What are you doing? I should report you to the authorities for violating the law.

      People like you make me ashamed to be Chinese.

  6. Ignore this story by Anonymous Coward · · Score: 2, Informative

    This story hurts China's tender heart and makes pandas cry. Stop being so mean.

    1. Re:Ignore this story by overmoderated · · Score: 3, Funny

      I love panda steak with some whale sauce.

  7. It's only a speed bump by ebonum · · Score: 5, Interesting

    I live in China. I don't know anyone who has significant problems with the GFW. It is very easy to hop over. Personally, I use a paid for VPN. I used one for about 3 years without problems. It was finally shut down about a month ago, so I switched. Without a VPN, it is only mildly annoying. You can't get on Youtube and Google is very slow. Most things work normally. For instance, CNN works, but the video section does not.

    Funny thing. If you are on the phone with someone and say "VPN", the call sometimes drops immediate. Works better in Chinese than English.

    When you don't have a VPN, what is really annoying is are all the US sites that pop-up messages saying that their service is not available in your country. Grrr. Then sites like Microsoft keep bumping you back to their Chinese site and hiding "the show me the page in English" button. It is sad how the internet is getting to sensitive to location. The great thing about the internet was that you could be anywhere. Now companies want to figure out where you are based and serve you country specific content. If you have a Galaxy SIII that you bought in China, try going to the US app store. You can't. Even with a VPN or flying to the US, it will not work.

    1. Re:It's only a speed bump by Anonymous Coward · · Score: 2, Interesting

      I think it is a crime to put geofences, a crime against the evolution of society. People have worked hard to make everything on the internet "one click away", and here come various countries (eg: China, Arab countries) and companies (eg: Hulu) that reject us based on location. Then links get posted on forums with international attendance and half the members can't see the content. It's a restriction of speech. This and the DVD zoning, another moron restriction that reduced sales worldwide.

  8. Re:What happens in China today by blade8086 · · Score: 2

    Nono - of course not!

    Clearly because :

    Obamas middle name is 'hussain' and not 'Honkey Mc Wasp Cracker'

    The obama presedency is:

    A half baked conspiricy theory that doesn't make any sense, whereby his dead islamic but free-market liberal (aka 'liberal' not 'librul') step father secretly controls his president stepson Barrack to implement Chinese-style free-market authoritarian 'communism' despite the fact that the Chinese government is hostile at worst and ambivalent at best to any form of organized religion.

    This theory is justified, because some doof on fox news has made some sort of bolony equation that the islamic 'caliphate' expressed in the koran in the mid 600's is really a form of subverted marxist communism which was invented in the mid 1800s to early 1900s,
    and also because donald trump manages to say through 10 layers of facelift, botox, and hair bleach, that in fact *barak obamas* legitimate birth certificate is a fake, instead of his entire visage.

    So obviously:

    Electing a wishy washy, opinion changing ex-outsourcer-to-china who believes in *mormonism* for crying out loud, would have enabled a sea change of US opinion and therefore the end of the chineese empire, enabled the so-called 'liberation' of
    the 'secular' state of Israel from the evil Islamic tear-wrists, thereby proving american exceptionalism, and the recreation
    of the third temple which would magically bring forth the tribulation and end times, and the fulfillment of Gods promise to the Jews
    that they would be the chosen people but somehow would automatically convert to Christianity upon this event and thankfully since I am a WASP would be raptured up to heaven with my pre-1985 class III weapons and I wouldn't have to ever look at someone who has dark skin or speaks spanish ever again because the unclean 'darkies' were not predestined by Zwingli and John Weslayan, the apostles of the true made up faith, to have a place in the hereafter halleluja!

    Testify my Brothers! It is the Truth!

  9. Handing the control of Internet to the UN by fufufang · · Score: 2

    I think this article shows why UN should not control the Internet. I much prefer US to control it. US is not perfect. However I would rather not let controls like China to meddle with the Internet.