Hacker News Reader

Comment by 21 | Hacker News Reader

This is richly ironic. I had to check that this was not an article from The Onion.

Will this tool bypass the censored Google that will be introduced in China?

More likely it will automatically report the user to the Chinese government if used in China.

This is about preventing dns manipulation attacks. That assumes that a DNS server (like 8.8.8.8) is generally accessible, but an adversary is trying to manipulate the responses. In China, you anyway can't access regular global dns servers. You need to use official dns supported by the government. So the question of dns manipulation is moot.

So that makes it morally consistent...how?

what consistency are you referring to? that jigsaw ought do what google does, or google ought to what jigsaw does, and thus establish some notional inter-consistency between them?

Google's a big business with many divisions and even more people. I don't see why moral consistency is supposed to be expected or of particular interest.

Google and Alphabet have executives that set mission statements. If these executives wanted to, they could easily prioritize ethical conduct and refuse compliance with censorship schemes and oppressive regimes.

This is not true. I tried 8.8.8.8 and it worked when I visited China 2 years ago.

Were you on a VPN?

that’s what they wanted you to think ;)

"Worked" does not mean freely accessible. It means you received DNS responses when you sent DNS requests there, but there's a high chance the responses weren't coming from Google, and that encrypted connections would fail.

However, it seems that Google hosts the encrypted endpoint separately anyways, not on 8.8.8.8.

It will tell the user to the chinese government, in a way.

1. All DNS traffic from intra must go through the chinese national firewall. Although the firewall cannot see or tamper the data, it can tell whether it is encrypted.

2. Most DNS traffic are not encrypted. Intra users will be very easy to discover to the firewall, like a flare in the night.

3. One's name is linked to one's IP in china, and encryption alone cannot hide the user IP.

It may work in some other nations. But not china.

It probably won't even be available to Chinese users.

Maybe it will, but have a country-specific feature to report its users to the authorities. After all, gotta comply with those "local laws and regulations."

It wouldn't work in China anyway. So it can be available there, or not available there. Would make no functional difference.

Reply on news.ycombinator.com