Thanks Jon
. I now know what TOR is.
Re the VPN blocking, which I'm almost convinced is a non-starter, unless I'm missing something to get to the foreign VPN you still have to go through your ISP who I believe would know that was where the traffic was going. So it could be blocked.
Earlier posts have shown that even if that were the case, blocking would be far from simple.
The issue is that I can disguise VPN traffic very easily as something else; North Korea, Cuba and others manage to avoid this issue by blocking everything, except a small amount of data approved by the state, which gets copied onto state-controlled servers. China and Iran do block VPNs officially, but get bypassed routinely by two different mechanisms:
- Abuse of licensed VPNs; if China permits a VPN from IBM China HQ to IBM USA, it then has to trust IBM USA to not let employees at IBM China access forbidden material via IBM USA's Internet link. All it takes is one employee at IBM USA letting people at IBM China through (by mistake, possibly - "of course Steve, you can Remote Desktop to my machine while I'm asleep to check whether the task I triggered is complete" - and whoops, Steve can also browse the web from your machine).
- Disguised VPNs, such as Tor in some configurations. This is VPN traffic disguised so that it looks like something acceptable, such as HTTP traffic for web browsing; the disguise is especially effective if the traffic inside the VPN matches the traffic profile of the disguise. The filtering then sees (for example) normal browsing of the Seattle Chinese Post that's been approved by the censor, but someone at the Seattle Chinese Post has arranged for that traffic to route out to the uncensored Internet.
In both cases, draconian (and enforced!) punishments for bypassing the censor are the major way to prevent it happening - if you know that being caught bypassing the censor at all is a guarantee of 10 to 30 years in jail, and being caught accessing banned content having bypassed the censor is a guarantee of life imprisonment or death penalty, you're a lot more cautious than you might be if the penalty is an £100 fine. If you then get the catch rate up high enough that most people who might consider bypassing the censor know someone who's been punished for doing so, you put a heavy brake on the idea.
Whether this is the sort of environment the country that produced George Orwell would like to create is a different question - it's entirely possible to do it, it's just not at all easy.