Slashdot Mirror


Behind the Great Firewall: What It's Really Like To Log On From China

alphadogg (971356) writes China makes headlines every other week for its censorship of the Internet, but few people outside the country know what it's like to live with those access controls, or how to get around them. This IDG News Service writer has lived in China for close to six years and censorship has been a near constant, lurking in the background ready to "harmonize" the Web and throw a wrench in his online viewing. It's been especially evident this month. Google's services, which don't follow the strict censorship rules, are currently blocked. How long that will last is unknown, but it coincides with the 25th anniversary of the Tiananmen Square protests earlier this month — an event the Chinese government wants no one to remember.

49 of 90 comments (clear)

  1. You Can Help by rotorbudd · · Score: 2

    Just run a Tor obfuscated bridge.

    --
    A bullet may have your name on it, but artillery is addressed to " Whom It May concern"
    1. Re:You Can Help by rotorbudd · · Score: 2

      The bridge isn't running in China, the user connects to it from China.
      Here's a little info https://www.torproject.org/doc...

      --
      A bullet may have your name on it, but artillery is addressed to " Whom It May concern"
    2. Re:You Can Help by cyfer2000 · · Score: 1

      China's GFW can dynamically identify Tor traffics and block them.

      --
      There is a spark in every single flame bait point.
    3. Re:You Can Help by Zontar+The+Mindless · · Score: 1

      I wonder how the user in china has downloaded tor in the first place?

      In much the same way that all smart Chinese Internet users have been using VPNs for years, I imagine.

      --
      Il n'y a pas de Planet B.
    4. Re:You Can Help by Opportunist · · Score: 1

      Why do you think China's attempts at censoring the net would be any more successful than ours? Has blocking any torrent site ever lasted longer than a few nanoseconds 'til someone found a way around it and word spread?

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    5. Re:You Can Help by Arker · · Score: 1

      "But, for the most part, the main thing I noticed was the sluggishness of a high latency connection. It wasn't always clear if a site had been blocked or it it was just failing to load because incompetent web admins insist upon loading hundreds of scripts that each take the latency hit. I'd have sites take multiple seconds to load as a result."

      Request policy and noscript solves this problem along with a great many others in one go.

      --
      =-=-=-=-=-=-=-=-=-=-=-=-=-=-
      Friends don't let friends enable ecmascript.
    6. Re:You Can Help by Nimey · · Score: 2

      Yes, and here's how to do it:
      https://www.torproject.org/pro...

      I've been running an obfuscated bridge for about a year now. Setting up was pretty easy and it's been pain-free since then, especially since bandwidth usage limits can be set.

      For the uninitiated, a bridge is basically an unpublished entry point into the Tor system; unpublished means you have to send an email to or visit a certain server to be given the address of just one rather than being in the directory for all to see at once, meaning that it's harder for a censor to block. An obfuscated bridge also runs the obfs proxy, which attempts to hide Tor traffic from monitors like the Great Firewall.

      --
      Hail Eris, full of mischief...

      E pluribus sanguinem
    7. Re:You Can Help by Anonymous Coward · · Score: 1, Informative

      China's attempts to censor the net is magnitudes more successful than ours

      I disagree. China's population control is based on direct, overt actions. US' uses indirect, covert actions. While more expensive, these are less likely to make people cause trouble.

      the US does not censor the net at all

      Remember when the US seized Demonoid's domain?

    8. Re:You Can Help by ruir · · Score: 1

      My only experience with the Great Firewall is with a couple of chinese students returning home and asking why OUR VPN stopped working, and me not knowing what to say them because I did not want to be politically incorrect. At the end of the day I told them all was ok in our side, and for them to talk to their uni administrator. However I had the suspicion it was blocked, and they might have known it too. So at the end of the day, VPN use is not so linear.

    9. Re:You Can Help by murdocj · · Score: 2

      You don't get it, do you. If you were in China, this discussion wouldn't be happening, and simply for posting here you could be in jail.

    10. Re:You Can Help by Fuzi719 · · Score: 2

      Last year the GFW began blocking OpenVPN connections. Many VPN providers were blocked, their DNS entries erased from the standard DNS servers that the Chinese ISPs use. The way around that now is to hardcode a DNS server like OpenDNS or Google DNS and to use PPTP or L2TP VPN connections. I can attest that those still work, I was back in China over the Chinese New Year holidays. I was able to use VPN on my laptop connected to a Shanghai ISP as well as on my Android phone using China Mobile HSPA+ data.

    11. Re:You Can Help by Zemran · · Score: 1

      TOR quite simply does not work in China. I find it hard to understand why so many people here cannot see how easy it is to recognise protocols connected with TOR, VPN, Proxies, etc. and block any user that uses any forbidden protocol. None of these things work, not because they block the hubs or the addresses but because the they block the protocols.

      --
      I love stacking my barbecues in the shed at the end of summer - you can't beat a bit of grill on grill action.
    12. Re:You Can Help by dj245 · · Score: 1

      You don't get it, do you. If you were in China, this discussion wouldn't be happening, and simply for posting here you could be in jail.

      In the US, we are given the illusion of freedom and transparency so that we feel superior, poke fun and insults at the systems of other systems, and don't question our own system. Propaganda is most effective when people don't realize it as such. Different methods, same result.

      --
      Even those who arrange and design shrubberies are under considerable economic stress at this period in history.
    13. Re:You Can Help by 228e2 · · Score: 1

      This is why everyone hates America. We are so damn dense and lack any global perspective.

      Really? The US censors your internet on a national (or any) level comparable to China? Really? You have to VPN to get on CNN/FB/Twitter? You have use TOR to get on Slashdot? Using any of the above sites is illegal in the US?

      --
      Since when does being a Socialist mean 'someone who has a different opinion than me'?
    14. Re:You Can Help by mattack2 · · Score: 1

      China's attempts to censor the net is magnitudes more successful than ours (US) primarily because the US does not censor the net at all

      Then don't you really mean 'infinitely' more successful? How can you be magnitudes more successful than 0?

  2. It's a little like Fight Club... by Zanadou · · Score: 4, Insightful

    As soon as you talk about how to get around the Great Firewall of China...

    ...that method suddenly stops working.

    (Somewhere in Beijing, a Zman adds "*.astrill.com" to the blocklist.)

    1. Re:It's a little like Fight Club... by Cryacin · · Score: 1

      (Somewhere in Beijing, a Zman adds "*.astrill.com" to the blocklist.)

      I wish someone over in the western hemisphere would add that rule.

      --
      Science advances one funeral at a time- Max Planck
    2. Re:It's a little like Fight Club... by Anonymous Coward · · Score: 2, Informative

      Nonsense.

      Here is how you get around the "Great Firewall of China":

      ssh -D1234 some.server.outside.china.which.you.rented.com

      There, you're done. Yes, that really works, and if you're a tourist, the chances of really getting into trouble over that are, well, not huge. Some system will notice, somewhere - but you'll be gone after two to four weeks, anyways. It's not hard to get around the firewall - it is hard to get around it for a long time without showing up on the radar.

      The real, main reason why the Great Firewall works is that it has the threat of legal consequences backing it up, that there is the real (or, something that is nearly as good, imagined to be real) chance that somebody will start asking you questions about what you are doing, if you are tunneling out or such. The other reason why the firewall works is that an average user will not bother - effectively, you block some website in the major ISPs DNS servers and have google remove it, it is out of sight, out of mind for the _vast_ majority of the population.

  3. so it's like a work or school network by Anonymous Coward · · Score: 2, Insightful

    So it's like a work or school network that covers an entire country. "Few people outside the country know what it's like to live with those access controls, or how to get around them," is total crap. Many, many people know exactly what it's like. Plenty of people outside China have been fired, expelled, or jailed for getting around access controls. Kids today are spoiled brats who grow up with home Internet and no restrictions as long as mommy pays the Internet bill. They have no comprehension of what it was like to have school or work be the only Internet access available.

    1. Re:so it's like a work or school network by nurb432 · · Score: 1

      Plenty of people outside China have been fired, expelled, or jailed for getting around access controls.

      Getting expelled from not following some school's ToS is far different than living where the government is doing it to you at home, and you could be executed if caught.. Getting fired from a job, well its your own damned fault. ( sounds more like you are the spoiled brat here )

      Also, who has been jailed due to 'firewall' circumvention? ( other than perhaps some 3rd world country, as they dont count )

      --
      ---- Booth was a patriot ----
  4. Wishful thinking by TWX · · Score: 1

    ...with the 25th anniversary of the Tiananmen Square protests earlier this month â" an event the Chinese government wants no one to remember.

    It's nice to want things.

    Thing about it is, if China's ruling party could hold on to power without committing further abuses then time would probably actually be on their side for forgetting about Tiananmen. After all, my own country committed terrible atrocities throughout its existence and we simply look at those transgressions in a historical context, but between limiting the amount of time that our leaders are in power (at least the President) and peacefully transitioning between those leaders makes it easier to let go. China doesn't have any of that going for them.

    --
    Do not look into laser with remaining eye.
    1. Re:Wishful thinking by donscarletti · · Score: 1, Insightful

      limiting the amount of time that our leaders are in power (at least the President) and peacefully transitioning between those leaders makes it easier to let go. China doesn't have any of that going for them.

      I call bullshit. Jiang Zenmin: General secretary of CCP 1989 - 2002, PRC Chairman 1993 - 2003, Hu Jintao: General Secretary of CCP 2002 - 2012, PRC Chairman 2003 - 2013, Xi Jinping: General Secretary of CCP 2012 -, PRC Chairman 2013 - notice a pattern? Maximum of 2 terms for both positions, 5 years each. Jiang had an extra part term as General Secretary because his predecessor was deposed early. Premier is similar, maximum of 2 terms, 5 years each.

      The main difference is only the manner of the leader's choosing.

      Anyway, term limits are not enforced in any Westminster style government and they are stronger for it since at no time a leader is in his final term without chance of re-election and the nation may choose to continue with a great leader for as long as he is great. America should really consider getting rid of term limits, since without them Clinton could have been president for the last 22 years as he is not even 70 yet and more than capable of doing a better job than the last two. Consider FDR who

      --
      When Argumentum ad Hominem falls short, try Argumentum ad Matrem
  5. They could have asked me by Anonymous Coward · · Score: 1, Funny

    I lived in China for 10 years. I don't like their censorship but I have to admit, they are very good at it. And they've developed something that the NSA can only wet dream about. I shudder to think how much computing power is used. They don't simply block content, they also modify it (text and images, particularly). For example, if you're looking at some standard western porn (white man fucking a white woman) they run image filters to shrink the penis size. There are some image artifacts but if you weren't familiar with white cock you'd probably mistake them for jpg compression. Interestingly, they don't shrink black cock.

    1. Re:They could have asked me by Anonymous Coward · · Score: 1

      Whilst it is a rather subtle troll, and I will admit it made me chuckle, I still do not make it a practice to mod trolls up.

  6. Much adu about nothing by ebonum · · Score: 3, Informative

    I live in China. Everyone I know hops the GFW with ease. It is a non-issue on laptops and cell phones.
    These guys have a storefront in Shanghai:
    http://vpninja.net/
    You go to the store, you pay in Chinese currency and they give you a log in. It is fast and reliable.
    Lots of people I know use Astrill. (astrill.com)
    Of course anyone who is actually worried about security will set up their own server abroad and use putty or OpenVPN to access YouTube.

    1. Re:Much adu about nothing by whoever57 · · Score: 2

      Of course anyone who is actually worried about security will set up their own server abroad and use putty or OpenVPN to access YouTube.

      The last time I was there, OpenVPN connections were being blocked, while openvpn had worked perfectly 6 months earlier. In fact, on that trip, all attempts to run openvpn over UDP appeared to be blocked (I even tried port 53). I found that ssh (tcp/22) was not being blocked and used that. Later I found suggestions that playing with the MTU of the openvpn traffic would avoid the blocking.

      Another time, dropbox packages for Linux were being blocked, but not the dropbox service.

      Summary, GFW blocking is inconsistent and changes day by day.

      --
      The real "Libtards" are the Libertarians!
    2. Re:Much adu about nothing by ebonum · · Score: 1

      Yes. The blocking changes all the time, and it changes by location. Sites that work at the office might not work at home. Go to the areas that are closer to Xinjiang (the western parts with more Muslims), and it becomes very difficult to get over the GFW. PPTP works nearly 100% of the time. OpenVPN has more issues. It might work for 30 minutes then cut off, then work fine for a few days, then go off for a week.

  7. Bad premise. by Anonymous+Psychopath · · Score: 1

    ...few people outside the country know what it's like to live with those access controls, or how to get around them...

    Well, there are the millions that visit China each year, and anyone who's ever bothered setting up a VPN connection so they could FaceTime with family or whatever.

    --

    Eagles may soar, but weasels don't get sucked into jet engines.

  8. There is no Great Firewall: by Hartree · · Score: 3, Informative

    "And we'll block any web site that says there is!"

  9. Re:We are being bred for slavery. by Anonymous Coward · · Score: 1

    They are dismantling the sleeping middle class. More and more people are becoming poor. We are their cattle. We are being bred for slavery.

    Who is 'they'?

    At a personally uncritical time, I remember seeing a clip a few years ago of U.S. President Truman being pissed while storming out of some international game changing economic summit after the second world war (in the late 1940's). Being asked what happened, he responded with "They're trying to set it up so that they'll put all of us, everyone, permanently in debt forever." or something to that effect.

    I've been trying to relocate it with no success to see how much of it was misunderstood by my personal opinions that I may have put into his comment. Does anyone recall anything about this? Was it just a specific temporal non-issue or something more on a grander somewhat conspiratorial scale?

  10. Re:We are being bred for slavery. by cavreader · · Score: 1

    He was talking about the US being saddled with paying for the lions share of the post-war recovery efforts.

  11. Re:I'd like a VPN in to China... by ganjadude · · Score: 1

    I was thinking the se the other day, it would be interesting to tunnel into china and see what they see

    --
    have you seen my sig? there are many others like it but none that are the same
  12. Re:I'd like a VPN in to China... by ruir · · Score: 1

    Ask any Russian guys, they (p)own plenty of XPs in China.

  13. I'm in reading this from China right now. by Bleek+II · · Score: 2

    I'm a chemistry teacher at a private school in Kunming, China. I use a VPN to get around. First of all half the battle is the terrible infrastructure here. I use a VPN to access everything I need to but I am constantly in a battle to stay connected with my 1Mb/s 500ping connection. If you don't have a VPN you are pretty crippled for most common sites like Google and social media. BTW Slashdot works fine without a VPN.

    1. Re:I'm in reading this from China right now. by Bleek+II · · Score: 1

      I've come from nowhere to nowhere, and I'm going nowhere. I never much cared for the illusion of somewhere full of somebodies full of themselves. That's just how I flow.

    2. Re:I'm in reading this from China right now. by Rick+in+China · · Score: 1

      Don't feed the troll mate. :D Regardless of the connection package, our VPN restriction (I'm assuming you use a European or North American server) largely comes down to geography..so the 1Mbit 8Mbit 20Mbit 100Mbit packages offered by the telecoms here largely end up with similar ping and sometimes similar bandwidth over VPN at the end of the day. In-country direct connections, however, the advertised speed is much closer to being realized..

  14. How to beat censorship in china. by aliquis · · Score: 1

    1. Demand democracy.
    2. Convince someone else to follow and on and do the same (including convincing someone else.)

    1. Re:How to beat censorship in china. by Giant+Electronic+Bra · · Score: 2

      Yeah, good luck, your lifespan is measured in days. If you are careful and lucky you can complain about SOME things, and people do let their opinions be known about GENERAL things "its very polluted here, this should be fixed!" or "food is too expensive!" etc. The government is pretty sensitive about public opinion up to a certain point. It is just always hard to tell if they will react to your complaints by fixing the problem, or killing you.

      --
      "Malo periculosam, libertatem quam quietam servitutem." -- Jefferson
  15. Agreed by Anonymous Coward · · Score: 2, Informative

    I've spent some time in various parts of China. I simply set up 2 AWS micro instances running SQUID listening only on localhost and then ssh tunneled my laptop into them (I set up several ports for sshd to listen on just in case they blocked one or more). Had no problems. This has been known to work for quite some time reliably. Now and then you'd get a slowdown or your connections would drop, but overall it worked fine. Fire up your SSH client, use the -L option to tunnel a local port over to squid (and the -p option if you need to use an alternate ssh port) and you are all set. I upsed 2 machines just in case they got wise to the first one I'd have a fallback, but they didn't bother it.

    Now, a friend of mine that used this technique set up a machine in his basement, and some nice chinese hackers broke into it and rummaged around. So you may find that you COULD get some attention this way, and you probably want to be not-too-foolish about how you utilize your nice little door to the world. In my case I just used it to browse my favorite sites, do some email, and a few things like that.

    Its also worth noting that the GFW doesn't seem to do much with non-http protocols. It is known to block most VPN software, but Skype for instance works fine (though again, I wouldn't count on it being safe from prying eyes, and skype is known to leak certain types of information).

    Honestly, I think Chinese internet sensorship is intended more to control the information flow INSIDE China and stop people from getting together and DOING anything political. They rarely bother about what people SAY, as long as it isn't "lets get together and club some Communists over the head tomorrow". The other danger is if you talk about specific people, like local officials. Anything that sounds like an actionable complaint is probably unwise. Idle talk OTOH? I don't think they care that much. They might delete it, but basically only a small fraction of Chinese people are stupid enough to bother saying anything like that, or have the time and energy for agitation vs finding gainful employment and some sort of living situation.

  16. Noscript helped a lot by Giant+Electronic+Bra · · Score: 2

    A LOT! I don't want your average bozo website running any script on my machine anyway...

    --
    "Malo periculosam, libertatem quam quietam servitutem." -- Jefferson
  17. Most companies set up web proxies at minimum. by Rick+in+China · · Score: 1

    Some set up constant tunnels. Personally I use StrongVPN when not at my office or on office network, so it's sorta like this: Most of my internet use does not involve a proxy OR VPN, and is perfectly fine. When I need YouTube or Hulu or something, I open StrongVPN L2TP through San Fran. When I'm at work I'm typically going thru a proxy for common services we use like google services or whatever and need no configuration on whichever device I am using. My network connection at home is 20mbit fibre, typically when I'm NOT on VPN I can download torrents or stream videos from non-youtube sources fast, when I AM on VPN I can typically stream high quality YouTube/Hulu without buffering issues..gotta have me some Shark Tank! I've been primarily in China since 2003, and can tell you - for anyone slightly technically inclined, the GFW is not an issue, and never really has been.. the occasional biggest problem is when they try to disrupt encrypted traffic and it grinds VPNs to a snailmail pace.

  18. Re:meanwhile, the west buys the same mechanisms... by Giant+Electronic+Bra · · Score: 4, Interesting

    Well, the women are awesome. The rest of it? Sure, the government is pro-business and pro-capitalism, except its THEIR business and capitalism. In China the govt officials are the ones with the money, and LOTS of it. Corruption is astronomical. Unless you're in cahoots with some guys with a lot of 'face' you aren't going anywhere, and you can bet they get the fillet mignon cut of whatever you build. It makes the tax rates in the US quite equitable. There's LOTS of red tape too, though of course again how much that matters depends on whom you are connected to. The middle class in China is microscopic. If you were in downtown of a tier 1 city then you might get the impression, surrounded in your nice westerner bubble, that there were lots of well-off people around, but if you actually went out and met the regular Chinese people and talked to the people serving you food and selling you things and made friends with them you'd find out that life for the average chinese is pretty rough. Now go out to the countryside, or even tier 3 cities (prefect level towns for instance) of which there are 1000's and you find there's only a very small veneer of 'middle class' people.

    As for the economy being 'robust', the banks all collapsed in the late 90's, ALL of them are insolvent. Most of the major businesses, same thing (the state owned ones). There's a whole zombie financial and economic sector that is just propped up with tax money or patronage in some form or other. There are a lot of businesses, yes, and a huge export sector, lots of growth, etc. There is also 300 million underemployed people, etc. The realestate bubble in China is 10x the size of the US one, and its teetering right now. Frankly I'm out, and I'm getting my g/f out too before something busts loose and it goes down like the US did in '07. Even the big financial analysts are looking pretty scared now. Housing is slowing and China is going to have a big bump.

    --
    "Malo periculosam, libertatem quam quietam servitutem." -- Jefferson
  19. What's this internet thing you speak of? by evilviper · · Score: 3, Informative

    few people outside the country know what it's like to live with those access controls

    It seems a strange sentiment to express, on a technical site.

    I've never been to China, and yet I know EXACTLY what their internet access is like. Anyone here can find out for themselves in 10 minutes flat, by hopping on a proxy located in China, and surfing around.

    The only extra bit of knowledge that I gained through my extensive time dealing with it, is how incredibly random, frequently changing, and therefore frustrating and utterly-pointless the IP bans are. Send enough traffic over an IPSec tunnel in a short enough period of time, and expect it to be suddenly blocked one day, only to work again in just a few days.

    --
    Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    1. Re:What's this internet thing you speak of? by kamapuaa · · Score: 2

      Send enough traffic over an IPSec tunnel in a short enough period of time, and expect it to be suddenly blocked one day, only to work again in just a few days.

      This. It's totally arbitrary. Also it's a two-tier system, where many things are easily proxied around, while some sites (pornography, Falun Gong, Tian'anmen) can't be.

      I think mostly the point is to inconvenience and be protectionist rather than block. Sure you can get on twitter if you really want, but your average Joe in China doesn't want to bother figuring out proxies just to get some stupid cat picture, so they turn to Weibo or some wannabe-twitter site like that instead.

      --
      Slashdot: providing anti-social weirdos a soapbox, since 1997.
  20. Re:I'd like a VPN in to China... by pix · · Score: 1

    Err...exactly what you see.... A few sites are blocked (they return an HTTP error), some sites are just excruciatingly slow (Google sites at present), most are exactly the same. And a VPN solves the first two issues. Do bear in mind that the vast majority of Chinese citizens don't really speak much English, so if you want to see what the locals look at, it would be in Chinese! And the Chinese internet ecosystem is far more vibrant then most countries...taobao, wechat, line, qq, baidu etc etc. Honestly - China is really not that different to anywhere else....in Shanghai (where I live), you would be hard pressed to tell the difference between it and any other large international cities (except that Shanghai has more Maseratis, Porsches, Ferraris, LV shops, high class shopping centers than anywhere else in the world I've been. As an expat, we are most definitely not the rich people.

  21. The Grass-Mud Horse Lexicon by PapayaSF · · Score: 2

    Another way the Chinese evade censorship is to use oblique terms and references, many of which are quite funny. The Grass-Mud Horse Lexicon is a compilation of them. (In Mandarin, "grass-mud horse" sounds very close to "fuck your mother" and is a way of evading and poking fun at censorship of vulgar content.)

    --
    Q: What does the "B." in Benoit B. Mandelbrot stand for? A: Benoit B. Mandelbrot
    1. Re:The Grass-Mud Horse Lexicon by Rick+in+China · · Score: 2

      Tried tested and failed. China constantly cracks down on new 'evasive' methods of communicating. This year they used tons of other phrases, and were promptly blocked, like "this day" or "may 35th" or "that day" or "spring to summer" or other various 'elusive' terms...blocked. In addition they tried to hide messages in porn. This is all part of the tit-for-tat that, well, often just ends in more and more blockage and nothing more.

    2. Re:The Grass-Mud Horse Lexicon by Anonymous Coward · · Score: 1

      I'm going to just say it now. China is stupid. Not the people of China really, but the government is pants-on-head retarded.

      They banned the phrase "May 35th". What about "April 65th", "March 96th", "February 124th", or "January 155th"? What about "July -26th" or "July 339th"?

      Sure, a good calendar will sort it out quickly, but which calendar? Gregorian? Julian? Hebrew? Are they going to ban "Sivan 1, 1989"? (Pentecost is on Sivan 6, which was June 9th that year.) What about every number between "612921600" and "613007999", since those are the starting and ending Unix epoch timestamps for that date?

      Banning the mere mention of historical fact just makes you a backwater twatwaffle country like North Korea. Only a moron of a country would want to be North Korea, where the entire country's history is comprised of the bad fever dreams of their stubby little despot.

      Since China seems to want to pretend that reality didn't happen and that someone's imagination is real, that pretty much proves that China is stupid. If they're going for the whole 1984-esqe information control thing, they're doing a piss-poor job of it. It's out of their control, it's out of their ability to control, and they just look stupid to everybody that isn't them. Except Kim Jong Un (and Kim Jong Tiss!), who thinks it's perfectly normal to act like an insane crybaby in front of a world that is laughing.