If you want to leg it through China’s Great Firewall, don't forget to pull on your newly darned Shadowsocks
(2021/01/28)
- Reference: 1611800540
- News link: https://www.theregister.co.uk/2021/01/28/great_firewall_circumvention_plans/
- Source link:
China’s recent upgrades to its content-blocking Great Firewall can be circumvented, according to the censorship fighters of the Great Firewall Report.
Members of the group last year published a [1]paper [PDF] detailing how China had improved the firewall to detect the use of [2]Shadowsocks , a tool for using SOCKS5 proxies outside the Middle Kingdom to avoid the nation's internet blockades.
[3]
SOCKS5 is an IETF-approved [4]protocol that can flow all sorts of network traffic through a proxy, not just regular HTTP.
Shadowsocks is an open-source tool that creates an encrypted SSH-like tunnel through the Great Firewall to compatible SOCKS5 proxy servers on the outside, and routes your connections through this gap to a proxy and out the wider internet. It's designed specifically to ensure this encrypted traffic is difficult to detect and does not arouse suspicion.
[5]
US Department of Homeland Security warns American business not to use Chinese tech or let data behind the Great Firewall [6]READ MORE
That allows you to, in theory, browse the sites and services you want without the Great Firewall snooping on your activity and severing connections if you're looking at forbidden stuff.
The Great Firewall Report team reckons Beijing is on top of this, and in 2019 tuned its national filter to detect Shadowsocks, using traffic analysis and network probing, and block its users.
The report’s authors now say recent versions of Shadowsocks – from 3.3.1 and up – are awake to China’s attempts to poke holes in users’ SOCKS and will allow netizens to sneak through the firewall undetected.
It’s not that easy, of course. The authors offer a [7]long list of precautions that need to be taken to do this right, plus a [8]procedure advising exactly how to build a suitable Shadowsocks-compatible proxy server.
The Great Firewall Report publishes its advice widely, which means that China’s national network administrators will already be aware of how their content-crimping efforts can be circumvented.
[9]
Game on. ®
Get our [10]Tech Resources
[1] https://gfw.report/publications/imc20/data/paper/shadowsocks.pdf
[2] https://shadowsocks.org/en/index.html
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YBJE68R4AqVBIWZPWHVYuwAAAE4&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://www.rfc-editor.org/rfc/inline-errata/rfc1928.html
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YBJE68R4AqVBIWZPWHVYuwAAAE4&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2020/12/23/dhs_warns_us_businesses_dont_use_china_tech/
[7] https://gfw.report/blog/ss_advise/en/
[8] https://gfw.report/blog/ss_tutorial/en/
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YBJE68R4AqVBIWZPWHVYuwAAAE4&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://whitepapers.theregister.com/
Members of the group last year published a [1]paper [PDF] detailing how China had improved the firewall to detect the use of [2]Shadowsocks , a tool for using SOCKS5 proxies outside the Middle Kingdom to avoid the nation's internet blockades.
[3]
SOCKS5 is an IETF-approved [4]protocol that can flow all sorts of network traffic through a proxy, not just regular HTTP.
Shadowsocks is an open-source tool that creates an encrypted SSH-like tunnel through the Great Firewall to compatible SOCKS5 proxy servers on the outside, and routes your connections through this gap to a proxy and out the wider internet. It's designed specifically to ensure this encrypted traffic is difficult to detect and does not arouse suspicion.
[5]
US Department of Homeland Security warns American business not to use Chinese tech or let data behind the Great Firewall [6]READ MORE
That allows you to, in theory, browse the sites and services you want without the Great Firewall snooping on your activity and severing connections if you're looking at forbidden stuff.
The Great Firewall Report team reckons Beijing is on top of this, and in 2019 tuned its national filter to detect Shadowsocks, using traffic analysis and network probing, and block its users.
The report’s authors now say recent versions of Shadowsocks – from 3.3.1 and up – are awake to China’s attempts to poke holes in users’ SOCKS and will allow netizens to sneak through the firewall undetected.
It’s not that easy, of course. The authors offer a [7]long list of precautions that need to be taken to do this right, plus a [8]procedure advising exactly how to build a suitable Shadowsocks-compatible proxy server.
The Great Firewall Report publishes its advice widely, which means that China’s national network administrators will already be aware of how their content-crimping efforts can be circumvented.
[9]
Game on. ®
Get our [10]Tech Resources
[1] https://gfw.report/publications/imc20/data/paper/shadowsocks.pdf
[2] https://shadowsocks.org/en/index.html
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YBJE68R4AqVBIWZPWHVYuwAAAE4&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://www.rfc-editor.org/rfc/inline-errata/rfc1928.html
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YBJE68R4AqVBIWZPWHVYuwAAAE4&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2020/12/23/dhs_warns_us_businesses_dont_use_china_tech/
[7] https://gfw.report/blog/ss_advise/en/
[8] https://gfw.report/blog/ss_tutorial/en/
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YBJE68R4AqVBIWZPWHVYuwAAAE4&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://whitepapers.theregister.com/
Re: Leave my socks out of this!
RM Myers
As I understand the article, with Shadowsocks we can each have our own Shadow Systems. Human cloning is finally a thing!
Leave my socks out of this!
Danged whippersnappers always goin' through muh dirty laundry an' playin' in muh drawers.
*Shakes a fossilized fist*
An' get off muh LawnGnome!
=-)p