however, ISPs have begun rolling out white list (essentially an allow list of like a hundred websites) blocks, with mobile internet being essentially completely gone in many places, next step is white list blocks on home broadband ISPs, which has already started happening
these are extremely difficult if not impossible to bypass, with currently working solutions relying on being deployed to domestic cloud providers' whitelisted subnets
however, authorities have already been started cracking down on this, and with KYC requirements for those VPSs, these solutions are likely to soon vanish too (running a VPN service carries jail time with it)
there are some other fringe solutions, like encoding TCP traffic into a video signal, and streaming it over a call via a Russian service like VK video calls, however that relies on those websites being available abroad, and there is no telling how long this will remain a viable solution
i'm not sure what to do to be honest, just thought i'd share, if anyone has any solutions, i'd be very thankful, since i'm out of ideas, outside of going near a border and setting up a point to point wifi signal via a directed antenna (is that even viable anyways?)
thanks
alexgor26•20h ago
redrove•19h ago
(machine translation)
How would this ever work with a whitelist? did you even read the post?
taminka•18h ago
Postosuchus•18h ago
1. Thanks to the sanctions, it is virtually impossible for RF citizens to purchase anything abroad with Russian credit cards.
2. VPN was design not to obfuscate but to encrypt - that is, the protocol doesn't conceal the fact that VPN channel is being used, you just cannot peek into the content in this channel. Which means that more and more sophisticated tools are being used to block VPN communications.
taminka•18h ago
it looks like they are basically impossible to detect, given the failure to block them, outside of timing attacks (seeing if a request crosses Russia's border and comes back quickly after), however that is fully mitigated by just having having the vpn "disconnect" and route traffic directly to Russian unblocked sites, which would otherwise be able to perform such a timing attack detection
pretty interesting stuff, there are several versions of this system, and even the ones that have existed for a while work pretty well
sigbottle•1h ago