▲ 689 ▼ Federal bill would force VPN providers, ISPs, and DNS services to block foreign piracy sites (www.tomshardware.com) submitted 1 month ago by Mustachius_Grumpius@thelemmy.club to c/technology@lemmy.world 154 comments fedilink hide all child comments
[–] OwOarchist@pawb.social 15 points 1 month ago (16 children) Or ... time to set my VPN to Canada. permalink fedilink source parent hideshow 16 child comments replies: [–] Burninator05@lemmy.world 11 points 1 month ago (10 children) I think the intent of the law is that it wouldn't mater. If the VPN blocks the site, you can't get to the site. permalink fedilink source parent hideshow 10 child comments replies: [–] OwOarchist@pawb.social 16 points 1 month ago (7 children) Why would a Canadian VPN server obey US block lists? permalink fedilink source parent hideshow 7 child comments replies: [–] peopleproblems@lemmy.world 18 points 1 month ago (5 children) It wouldn't, which is why I roll my eyes every time I see a bill demanding what a VPN must do. The only way for them to actually enforce this through VPNs is to block VPNs. Which, presumably, they'll do at some point, but with an exception list for companies paying the right license fee to use a Government Approved VPN. Which, obviously, will be full of security flaws, and likely won't be HIPPA compliant or other compliances etc, etc. permalink fedilink source parent hideshow 5 child comments replies: [–] cmnybo@discuss.tchncs.de 7 points 1 month ago (2 children) There are ways to obfuscate VPN traffic that's resistant to DPI. It makes it look like normal HTTPS traffic. That will make completely blocking VPNs difficult. I'm sure even more effective obfuscation methods will be developed if VPN blocking becomes widespread. permalink fedilink source parent hideshow 2 child comments replies: [–] peopleproblems@lemmy.world 4 points 1 month ago Thats a good point. Regardless, technology is too advanced for the lawmakers anyway. Might as well just start enforcing amish policy adoption laws. permalink fedilink source parent [–] frongt@lemmy.zip 1 point 1 month ago HTTPS will be banned, unless you install the government CA certs that let them decrypt your traffic. https://www.eff.org/deeplinks/2022/03/you-should-not-trust-russias-new-trusted-root-ca permalink fedilink source parent [–] saltesc@lemmy.world 6 points 1 month ago (1 child) So, basically there's the internet, then there's the US internet. People will start moving to China for more freedoms. permalink fedilink source parent hideshow 1 child comment replies: [–] yucandu@lemmy.world 6 points 1 month ago Did you forget about the Great Firewall? Not that even it can defeat VPNs anyway. permalink fedilink source parent [–] Burninator05@lemmy.world 1 point 1 month ago A Canadian based VPN provider wouldn't have to but a US based VPN provider with a Canadian node likely would. And the law (or subsequent revisions) would likely make it illegal for a provider, regardless of where it is based, to offer service if they aren't complaint with US laws. permalink fedilink source parent [–] obvs@lemmy.world 11 points 1 month ago I don't know if you're familiar with how VPNs work, but it's basically like a computer in the other country is sharing its internet connection with you. So let's imagine that things are reversed, and you're a VPN provider in the United States and you're sharing your internet connection with some computers in another country, like Saudi Arabia, for example. And just to be clear, you conduct no business in Saudi Arabia. You're just sharing your internet connection with people from there. You don't have any associates in Saudi Arabia, and you have no intention of ever going to Saudi Arabia. And let's say that Saudi Arabia passed a law that said VPN providers had to block some kind of content, like maybe banning all access to content about your favorite band. How is this going to affect the VPN service you provide to the other computers? permalink fedilink source parent [–] schipelblorp@sh.itjust.works 9 points 1 month ago* (last edited 1 month ago) You VPN into Canada and then sign onto another VPN from there? Would that work? Hell, depending on how the law is written and how clever the lawyers are, the VPN can ship you out to Canada, then connect you back to the network via an authentication token that verifies you are a member of the service without verifying your country of origin. permalink fedilink source parent [–] Lost_My_Mind@lemmy.world 0 points 1 month ago (4 children) ......where are you from? permalink fedilink source parent hideshow 4 child comments replies: [–] db2@lemmy.world 2 points 1 month ago (3 children) Wrong question these days. permalink fedilink source parent hideshow 3 child comments replies: [–] bigfish@lemmy.dbzer0.com 6 points 1 month ago (1 child) I forgot.. A/S/L? permalink fedilink source parent hideshow 1 child comment replies: [–] db2@lemmy.world 3 points 1 month ago permalink fedilink source parent [–] Lost_My_Mind@lemmy.world 3 points 1 month ago Well, based on what he said, he's wrong. Unless he's not from the usa. So before I pointed out the flaw in his plan, I want to make sure I'M not wrong. permalink fedilink source parent
[–] Burninator05@lemmy.world 11 points 1 month ago (10 children) I think the intent of the law is that it wouldn't mater. If the VPN blocks the site, you can't get to the site. permalink fedilink source parent hideshow 10 child comments replies: [–] OwOarchist@pawb.social 16 points 1 month ago (7 children) Why would a Canadian VPN server obey US block lists? permalink fedilink source parent hideshow 7 child comments replies: [–] peopleproblems@lemmy.world 18 points 1 month ago (5 children) It wouldn't, which is why I roll my eyes every time I see a bill demanding what a VPN must do. The only way for them to actually enforce this through VPNs is to block VPNs. Which, presumably, they'll do at some point, but with an exception list for companies paying the right license fee to use a Government Approved VPN. Which, obviously, will be full of security flaws, and likely won't be HIPPA compliant or other compliances etc, etc. permalink fedilink source parent hideshow 5 child comments replies: [–] cmnybo@discuss.tchncs.de 7 points 1 month ago (2 children) There are ways to obfuscate VPN traffic that's resistant to DPI. It makes it look like normal HTTPS traffic. That will make completely blocking VPNs difficult. I'm sure even more effective obfuscation methods will be developed if VPN blocking becomes widespread. permalink fedilink source parent hideshow 2 child comments replies: [–] peopleproblems@lemmy.world 4 points 1 month ago Thats a good point. Regardless, technology is too advanced for the lawmakers anyway. Might as well just start enforcing amish policy adoption laws. permalink fedilink source parent [–] frongt@lemmy.zip 1 point 1 month ago HTTPS will be banned, unless you install the government CA certs that let them decrypt your traffic. https://www.eff.org/deeplinks/2022/03/you-should-not-trust-russias-new-trusted-root-ca permalink fedilink source parent [–] saltesc@lemmy.world 6 points 1 month ago (1 child) So, basically there's the internet, then there's the US internet. People will start moving to China for more freedoms. permalink fedilink source parent hideshow 1 child comment replies: [–] yucandu@lemmy.world 6 points 1 month ago Did you forget about the Great Firewall? Not that even it can defeat VPNs anyway. permalink fedilink source parent [–] Burninator05@lemmy.world 1 point 1 month ago A Canadian based VPN provider wouldn't have to but a US based VPN provider with a Canadian node likely would. And the law (or subsequent revisions) would likely make it illegal for a provider, regardless of where it is based, to offer service if they aren't complaint with US laws. permalink fedilink source parent [–] obvs@lemmy.world 11 points 1 month ago I don't know if you're familiar with how VPNs work, but it's basically like a computer in the other country is sharing its internet connection with you. So let's imagine that things are reversed, and you're a VPN provider in the United States and you're sharing your internet connection with some computers in another country, like Saudi Arabia, for example. And just to be clear, you conduct no business in Saudi Arabia. You're just sharing your internet connection with people from there. You don't have any associates in Saudi Arabia, and you have no intention of ever going to Saudi Arabia. And let's say that Saudi Arabia passed a law that said VPN providers had to block some kind of content, like maybe banning all access to content about your favorite band. How is this going to affect the VPN service you provide to the other computers? permalink fedilink source parent [–] schipelblorp@sh.itjust.works 9 points 1 month ago* (last edited 1 month ago) You VPN into Canada and then sign onto another VPN from there? Would that work? Hell, depending on how the law is written and how clever the lawyers are, the VPN can ship you out to Canada, then connect you back to the network via an authentication token that verifies you are a member of the service without verifying your country of origin. permalink fedilink source parent
[–] OwOarchist@pawb.social 16 points 1 month ago (7 children) Why would a Canadian VPN server obey US block lists? permalink fedilink source parent hideshow 7 child comments replies: [–] peopleproblems@lemmy.world 18 points 1 month ago (5 children) It wouldn't, which is why I roll my eyes every time I see a bill demanding what a VPN must do. The only way for them to actually enforce this through VPNs is to block VPNs. Which, presumably, they'll do at some point, but with an exception list for companies paying the right license fee to use a Government Approved VPN. Which, obviously, will be full of security flaws, and likely won't be HIPPA compliant or other compliances etc, etc. permalink fedilink source parent hideshow 5 child comments replies: [–] cmnybo@discuss.tchncs.de 7 points 1 month ago (2 children) There are ways to obfuscate VPN traffic that's resistant to DPI. It makes it look like normal HTTPS traffic. That will make completely blocking VPNs difficult. I'm sure even more effective obfuscation methods will be developed if VPN blocking becomes widespread. permalink fedilink source parent hideshow 2 child comments replies: [–] peopleproblems@lemmy.world 4 points 1 month ago Thats a good point. Regardless, technology is too advanced for the lawmakers anyway. Might as well just start enforcing amish policy adoption laws. permalink fedilink source parent [–] frongt@lemmy.zip 1 point 1 month ago HTTPS will be banned, unless you install the government CA certs that let them decrypt your traffic. https://www.eff.org/deeplinks/2022/03/you-should-not-trust-russias-new-trusted-root-ca permalink fedilink source parent [–] saltesc@lemmy.world 6 points 1 month ago (1 child) So, basically there's the internet, then there's the US internet. People will start moving to China for more freedoms. permalink fedilink source parent hideshow 1 child comment replies: [–] yucandu@lemmy.world 6 points 1 month ago Did you forget about the Great Firewall? Not that even it can defeat VPNs anyway. permalink fedilink source parent [–] Burninator05@lemmy.world 1 point 1 month ago A Canadian based VPN provider wouldn't have to but a US based VPN provider with a Canadian node likely would. And the law (or subsequent revisions) would likely make it illegal for a provider, regardless of where it is based, to offer service if they aren't complaint with US laws. permalink fedilink source parent
[–] peopleproblems@lemmy.world 18 points 1 month ago (5 children) It wouldn't, which is why I roll my eyes every time I see a bill demanding what a VPN must do. The only way for them to actually enforce this through VPNs is to block VPNs. Which, presumably, they'll do at some point, but with an exception list for companies paying the right license fee to use a Government Approved VPN. Which, obviously, will be full of security flaws, and likely won't be HIPPA compliant or other compliances etc, etc. permalink fedilink source parent hideshow 5 child comments replies: [–] cmnybo@discuss.tchncs.de 7 points 1 month ago (2 children) There are ways to obfuscate VPN traffic that's resistant to DPI. It makes it look like normal HTTPS traffic. That will make completely blocking VPNs difficult. I'm sure even more effective obfuscation methods will be developed if VPN blocking becomes widespread. permalink fedilink source parent hideshow 2 child comments replies: [–] peopleproblems@lemmy.world 4 points 1 month ago Thats a good point. Regardless, technology is too advanced for the lawmakers anyway. Might as well just start enforcing amish policy adoption laws. permalink fedilink source parent [–] frongt@lemmy.zip 1 point 1 month ago HTTPS will be banned, unless you install the government CA certs that let them decrypt your traffic. https://www.eff.org/deeplinks/2022/03/you-should-not-trust-russias-new-trusted-root-ca permalink fedilink source parent [–] saltesc@lemmy.world 6 points 1 month ago (1 child) So, basically there's the internet, then there's the US internet. People will start moving to China for more freedoms. permalink fedilink source parent hideshow 1 child comment replies: [–] yucandu@lemmy.world 6 points 1 month ago Did you forget about the Great Firewall? Not that even it can defeat VPNs anyway. permalink fedilink source parent
[–] cmnybo@discuss.tchncs.de 7 points 1 month ago (2 children) There are ways to obfuscate VPN traffic that's resistant to DPI. It makes it look like normal HTTPS traffic. That will make completely blocking VPNs difficult. I'm sure even more effective obfuscation methods will be developed if VPN blocking becomes widespread. permalink fedilink source parent hideshow 2 child comments replies: [–] peopleproblems@lemmy.world 4 points 1 month ago Thats a good point. Regardless, technology is too advanced for the lawmakers anyway. Might as well just start enforcing amish policy adoption laws. permalink fedilink source parent [–] frongt@lemmy.zip 1 point 1 month ago HTTPS will be banned, unless you install the government CA certs that let them decrypt your traffic. https://www.eff.org/deeplinks/2022/03/you-should-not-trust-russias-new-trusted-root-ca permalink fedilink source parent
[–] peopleproblems@lemmy.world 4 points 1 month ago Thats a good point. Regardless, technology is too advanced for the lawmakers anyway. Might as well just start enforcing amish policy adoption laws. permalink fedilink source parent
[–] frongt@lemmy.zip 1 point 1 month ago HTTPS will be banned, unless you install the government CA certs that let them decrypt your traffic. https://www.eff.org/deeplinks/2022/03/you-should-not-trust-russias-new-trusted-root-ca permalink fedilink source parent
[–] saltesc@lemmy.world 6 points 1 month ago (1 child) So, basically there's the internet, then there's the US internet. People will start moving to China for more freedoms. permalink fedilink source parent hideshow 1 child comment replies: [–] yucandu@lemmy.world 6 points 1 month ago Did you forget about the Great Firewall? Not that even it can defeat VPNs anyway. permalink fedilink source parent
[–] yucandu@lemmy.world 6 points 1 month ago Did you forget about the Great Firewall? Not that even it can defeat VPNs anyway. permalink fedilink source parent
[–] Burninator05@lemmy.world 1 point 1 month ago A Canadian based VPN provider wouldn't have to but a US based VPN provider with a Canadian node likely would. And the law (or subsequent revisions) would likely make it illegal for a provider, regardless of where it is based, to offer service if they aren't complaint with US laws. permalink fedilink source parent
[–] obvs@lemmy.world 11 points 1 month ago I don't know if you're familiar with how VPNs work, but it's basically like a computer in the other country is sharing its internet connection with you. So let's imagine that things are reversed, and you're a VPN provider in the United States and you're sharing your internet connection with some computers in another country, like Saudi Arabia, for example. And just to be clear, you conduct no business in Saudi Arabia. You're just sharing your internet connection with people from there. You don't have any associates in Saudi Arabia, and you have no intention of ever going to Saudi Arabia. And let's say that Saudi Arabia passed a law that said VPN providers had to block some kind of content, like maybe banning all access to content about your favorite band. How is this going to affect the VPN service you provide to the other computers? permalink fedilink source parent
[–] schipelblorp@sh.itjust.works 9 points 1 month ago* (last edited 1 month ago) You VPN into Canada and then sign onto another VPN from there? Would that work? Hell, depending on how the law is written and how clever the lawyers are, the VPN can ship you out to Canada, then connect you back to the network via an authentication token that verifies you are a member of the service without verifying your country of origin. permalink fedilink source parent
[–] Lost_My_Mind@lemmy.world 0 points 1 month ago (4 children) ......where are you from? permalink fedilink source parent hideshow 4 child comments replies: [–] db2@lemmy.world 2 points 1 month ago (3 children) Wrong question these days. permalink fedilink source parent hideshow 3 child comments replies: [–] bigfish@lemmy.dbzer0.com 6 points 1 month ago (1 child) I forgot.. A/S/L? permalink fedilink source parent hideshow 1 child comment replies: [–] db2@lemmy.world 3 points 1 month ago permalink fedilink source parent [–] Lost_My_Mind@lemmy.world 3 points 1 month ago Well, based on what he said, he's wrong. Unless he's not from the usa. So before I pointed out the flaw in his plan, I want to make sure I'M not wrong. permalink fedilink source parent
[–] db2@lemmy.world 2 points 1 month ago (3 children) Wrong question these days. permalink fedilink source parent hideshow 3 child comments replies: [–] bigfish@lemmy.dbzer0.com 6 points 1 month ago (1 child) I forgot.. A/S/L? permalink fedilink source parent hideshow 1 child comment replies: [–] db2@lemmy.world 3 points 1 month ago permalink fedilink source parent [–] Lost_My_Mind@lemmy.world 3 points 1 month ago Well, based on what he said, he's wrong. Unless he's not from the usa. So before I pointed out the flaw in his plan, I want to make sure I'M not wrong. permalink fedilink source parent
[–] bigfish@lemmy.dbzer0.com 6 points 1 month ago (1 child) I forgot.. A/S/L? permalink fedilink source parent hideshow 1 child comment replies: [–] db2@lemmy.world 3 points 1 month ago permalink fedilink source parent
[–] Lost_My_Mind@lemmy.world 3 points 1 month ago Well, based on what he said, he's wrong. Unless he's not from the usa. So before I pointed out the flaw in his plan, I want to make sure I'M not wrong. permalink fedilink source parent