← Back to context

Comment by mm263

13 hours ago

This is just laying down the ground work for Russia-style deep packet inspection. “We don’t have a capability to censor the foreign internet, so we need measures to cut off the violating sites from our side”

I think it’s an open question whether the British state has the technical chops, money and willingness to implement a Great Firewall type solution.

The state isn’t totally incompetent but doing it properly would be a serious undertaking, the kind of thing where the recent track record of big government tech projects isn’t great

  • They already track everything going through the undersea cables, why couldn't they start blocking at those points?

    • Getting the raw data is relatively straightforward, but my understanding is doing real time DPI at country scale without being easily circumvented (and without breaking the rest of the internet you want to work) isn't so easy.

      If you want to really make sure nobody in the uk can easily access 4chan (PRC style) it needs some effort, and you're in an arms race with attempts to mask/tunnel traffic so it gets through

      1 reply →

  • Why are you assuming that they aren't totally incompetent? They look pretty incompetent from my perspective. Or they just want to present the appearance of incompetence for an ulterior motive? That seems needlessly complex when they are already admitting their malevolence daily.

    • There are examples of the apparently ineffective British state suddenly gaining some teeth and some competence when they actually care.

      One example is after the Southport riots, miraculously the justice system became hyperefficient and the perpetrators were found, arrested, charged and jailed within a week.

      That suggests a lot of what looks like incompetence (potholes, petty crime, maybe also this) is actually just the state not really caring about a lot of issues.

      If they decide they really care about internet censorship, I wouldn't rule out them suddenly becoming a lot more competent in that specific area

Sorry for copypaste, but I still hope people will see true intentions of govt.

Just a recap how it happened in Russia:

1. First, year ~2015 legal framework was created under disguise of banning pirated media(specifically torrents.ru)(legislative push). State-wide DNS ban introduced. Very easy to circumvent via quering 8.8.8.8

2. Then, having legal basis, govt included extra stuff in banned list(casinos, terrorist orgs, etc)(executive push). IP bans introduced, applied very carefully.

3. Legal expanded allowing govt to ban specific media on very vague criterias(legislative push). IP blocks tried on some large websites. DPI hardware mandated to be installed by ISPs to filter by HTTPS SNI(executive push).

4. At ~2019 Roskomnadzor(RKN) created, special govt entity which enforces bans without court orders(legislative push).

5. ~2021 sites become banned if they are not filtering content by Russian laws by request of RKN(executive push). VPN services were obligated to also DPI-filter traffic(legislative push).

6. ~2023 Crackdown on VPN started(executive push). Popular commercial services were IP-banned, OpenVPN and IPSec connections selectively degraded by DPI.

7. ~2025 Heavy VPN filtering(vless, wireguard, etc) introduced(executive push). Performance of certain sites were degraded(youtube, twitter, etc ).

That's already been done, on the ISP level, some time ago. For torrent sites and similar, if I remember correctly.

  • I'm pretty sure it was to protect the children, or fight terrorism, or to save the NHS, or lower taxes.

deep packet inspection is not really necessary, headers contain information about the destination, as long as you don’t encrypt those, there is no need to do any decryption.

  • You just need to follow this to the logical conclusion. They’ll ban using your proposed method, people will switch to VPN and other modern methods and to combat people still accessing the forbidden internet they will need DPI and TSPU-like devices

    • I think the conclusion is more like mandating home and business web access is proxied at a national level and most other protocols disallowed. Use of VPNs without a VPN tax stamp and key escrow is prima facie evidence of violation of the Counter-Terrorism and Security act. Use of non-standard protocols is assumed to be criminal intent. Check with your approved internet provider for how to access the Internet safely.

    • What proposed method? I'm explaining how things work. In order to send a packet, the destination address needs to be known to the delivering entities. Encryption occurs by using enveloping, the envelope is unencrypted, but the content is encrpyted.

      This is how it works, if you want I can explain to you why it works like this, or you can work it out from first principles. But this is not a proposal.

      VPNs are an asterisk and they work not by avoiding this natural unavoidable principle, but by tunneling, the VPN or proxy vendor is putting themselves on the headers, and on the backend they still route the packets to the destination by putting the intended destination on the headers.

      If these VPNs don't comply with local regulations and are used to evade national restrictions they can and are often themselves subject to bans. But even if not, it acts as a sort of waiver and compromising element for all illicit activity.

      Sometimes it's not necessary to completely outlaw something, it is sufficient to make it so that engaging in the outlawed activity is sufficiently uncomfortable and clear that it is illegal, forcing users to undeniably acknowledge they are avoiding the law. An example of this is trying to watch pirated movies without paying for them, yeah you can do it, but you gotta do some shady shit and dodge a lot of malware, and eat shady gambling ads and etcetera.

      In addition to making you feel like an asshole, it removes any recourse you may have, it's very hard to make any claim later, you cannot really complain later if you were accessing it illegally to begin with. Nobody is going to pursue you to the end of the world not to access a pirated movie or an illegal website, but they pursue the distributor and make things very uncomfortable enough so that you are effectively hiding like a fiending outlaw.

Likely yes IMO, especially since the UK is making moves to militarize.