There's a lack of warning about DOXXING, including self-DOXXing. Use a different Lemmy identity on different servers. DOXXing is easy when you DOXX yourself through a combination of interests in French, Hair Extensions, Ningbo, Physics, Quebec, Rabbits, Scuba and Vegetarian.
this post was submitted on 12 Jun 2023
7 points (100.0% liked)
china
3 readers
1 users here now
An alternative for /r/china
R1: Be respectful. No directed offensive language or personal attacks are allowed. Profanity is allowed, but not if it’s directed at others. Racism, sexism, and slurs or similar remarks are not allowed in either English or Chinese, including in usernames.
R2: No bad faith behavior. Bad faith behavior can include combative argumentation or statements intended to disrupt others’ points of view rather than engaging with them, attempts to provoke others into being caustic, making derisive remarks that add little value, or otherwise participating in discussions to the detriment of others. Making extreme unsubstantiated claims or sharing materials that are low in substance but high in outrage may also lead to removal.
R3: Media policy. Memes, images, videos, gifs, and other types of media are allowed but are strictly moderated. Media regarding real life people and events should provide appropriately sourced background context or risk deletion. On a spectrum from daily life musings to cultural commentary to political soapboxing, moderation of media will tighten. Media concerning topics that have already been discussed at length will likely be deleted. See also r/ChinaMemes
R4: Post title policy. Posts with low-effort, editorialized, provocative, inaccurate, sensationalist, or misleading titles will be removed and may result in a ban. In addition, posts linking to news articles or other third-party content in English must match the title of the original source or will be removed.
R5: No reposts / One post per topic. When posting about current events or new developments, please check if there are already other submissions on the topic. We regularly delete subsequent posts about the same topic, even if they provide additional information or context. If you would like to share additional information about something that has already been posted, please do so as a comment in the original thread.
R6: Posts must be related to China. Content that is only tangentially or incidentally related to China will generally be deleted.
R7: Submit the best source format. Submissions should be of the best available source format. For example, twitter posts should be submitted as links, not as screenshots. If your post is removed for this reason, you may resubmit it after appropriately selecting a better format.
R8: No meta-drama References to other subreddits that tend to cause drama, or contain Reddit Content Policy violations or other issues such as hate speech or misinformation, will likely be removed. Posts about bans or removals on other subreddits are not allowed.
R9: If posting in Chinese, please translate at least the post title / 规则11：如果发布中文贴子，请至少将标题翻译成英文
founded 1 year ago
MODERATORS
Yeah. If they wanted to know what you were saying, they'd simply cross reference for ISP info with your post times.
You don't know if the connection is used to post or to view posts if it's encrypted
I don't think most VPN that is accessible from China is trustworthy either. There is no way out.
Well as of now we have never heard of someone being in trouble because of Reddit posts. So either they know and don't care or they just don't know.
~~I think they might know, at least they can if they wanted to. Pinning down a reddit post from ISP data is not that hard: reddit don't put post id in query string, but in the URL, which is unencrypted. With the created time of a post, the added payment link from a VPN, I think they can kind of pin down the author of a post if they really wanted to.~~
~~But I think most dissenters are not that much of a concern for the CCP, and it would cost a lot of resources to arrest most of them. Especially given there are many low-hanging fruits on Weibo, I don't think they want to spend the effort to silence such a minority that cannot even be heard by most Chinese.~~
Turns out URL is also encrypted except the base domain (see comment). So it is unlikely they can figure out.
The URL is also encrypted on a https connection, they can only see you've connected to Reddit... not what you're actually browsing: https://blog.mozilla.org/en/privacy-security/https-protect/
HTTPS also prevents your internet service provider (ISP) from seeing what pages you visit beyond the top level of a website. That means they can see that you regularly visit https://www.reddit.com, for example, but they won’t see that you spend most of your time at https://www.reddit.com/r/CatGifs/.
It's called self-hosting, you only have to buy a VPS
If you self host an VPN, meaning that the outbound of your VPS/machine you host VPN can be checked, as least, what IP it connected.
So, you got to buy VPS from foreign country, not in mainland or hongkong
For the censorship issue, of someone can't reach here than your advice is meaningless
For the ISP issue, have you heard of HTTPS? It uses military grade encryption and nearly every website has it
Lemmy is unblocked in China, at least various instances are. And https is meaningless, they don't care what particular content you access, as long as the website itself hosts potentially controversial content, you're on the hook regardless. A mere DNS resolve to a domain they don't want you to see is all it takes.
You can use DNS crypt to send encrypted DNS requests to servers outside of China
Are you in China?
Yes, I was able to use DNS Crypt earlier, but of course that's because it's under the radar and they could block all of those servers at any time they wish
DNS over HTTPS
Something that is blocked in China
How do you block https without making 99% of websites defunct?
They don't block all of HTTPS, they try to block TLS 1.3 + ESNI so they will require to know what website you're browsing
They also block encrypted connections to common servers like 8.8.8.8 so that they see what DNS request you're making
Certainly, they can't block DNS over HTTPS to your own overseas DNS server unless they know about it
Are there massive security vulnerabilities in TLS 1.2?
Yes, like telling the Chinese government what site you visit, for example