Skip to content

UK households could face VPN 'ban' after use skyrockets following Online Safety Bill

Technology
355 222 8.4k
  • Prominent backbench MP Sarah Champion launched a campaign against VPNs previously, saying: “My new clause 54 would require the Secretary of State to publish, within six months of the Bill’s passage, a report on the effect of VPN use on Ofcom’s ability to enforce the requirements under clause 112.

    "If VPNs cause significant issues, the Government must identify those issues and find solutions, rather than avoiding difficult problems.” And the Labour Party said there were “gaps” in the bill that needed to be amended.

    for those in the UK and/or Other places in Europe just know it's so painfully easy to either set up your own VPN or just use something like Mullvad.

    I set up my own VPN this morning for the first time on my server and it took less than 10minutes. plenty of guides online on how to do it.

  • Lol what is going on over there. The UK is becoming more dystopian by the day.

    They looked at their calendar and thought "Oh shit!" when they saw they were overdue to start V for Vendetta.

  • Oh, sweet summer child. Of course you can ban them. Lawmakers don't always care about the technicality of things, because in most cases they don't have to.

    You can't prevent VPN from existing, and short of a very tightly curated whitelist of services, you can't prevent people from actually using them, sure. Unless you're on the side of the state, the Law, and the enforcement. In which case, you can. A blanket ban on VPN usage is the perfect gateway to "we've seen traffic from your house toward a known VPN server, so, blam, arrest". And it does not have to stop at known server.

    Given the regular tries to outright ban encryption, this is the perfect venue to mass target encrypted communications. Depending on the wording, the mere presence of unobservable traffic could be enough for an arrest.

    If what I'm saying here sound dystopian to you, just remember that not only most of this was actually tried (and aborted) time after time, but also that until quite recently, the general public actually using strong encryption was illegal in many places, including our western countries, and experiments to make state spyware mandatory are also a recurrent thing (which might take hold with the "ID verification through your phone" apps soon).

    Thanks for this. I think it's really important to point out that merely having unobservable traffic could be a trigger for this.

    We can't avoid taking these threats seriously because we think we are smarter.

  • I don't think it's even possible to get rid of VPNs without outright banning encryption. If I set up a VPN that uses an obscure port and the traffic is encrypted, how are they going to know it's even a VPN?

    Attached below is a Wireshark trace I obtained by sniffing my own network traffic.

    I want to draw your attention to this part in particular:

    Underneath "User Datagram Protocol", you can see the words "OpenVPN Protocol". So anyone who sniffs my traffic on the wire can see exactly the same thing that I can. While they can't read the contents of the payload, they can tell that it's OpenVPN traffic because the headers are not encrypted. So if a router wanted to block OpenVPN traffic, all they would have to do is drop this packet. It's a similar story for Wireguard packets. An attacker can read the unencrypted headers and learn

    • The size of the transmission
    • The source and destination IP addresses by reading the IP header
    • The source and destination ports numbers by reading the TCP or UDP headers
    • The underlying layers, up until the point it hits an encrypted protocol (such as OpenVPN, TLS, or SSH)
  • I doubt their corpo overlords would allow a VPN ban considering the amount of companies that use them.

    It would be trivial for them to write it so it bans it for citizen use but is allowed for corporate and government use. The people have no rights anymore

  • Thanks for this. I think it's really important to point out that merely having unobservable traffic could be a trigger for this.

    We can't avoid taking these threats seriously because we think we are smarter.

    We arent smarter. Actually most people here have no voice or influence outside of their computer screen.

    We can use some tech, sure. But I very much challenge the idea that we are smarter as a group than other university students.

    But since a lot of us have poor social skills, we compensate by thinking we are smarter or better, when we should instead train our social skills and stop thinking like that.

  • They couldn't switch off VPNs for businesses. I work in a hospital and we use VPNs to create secure tunnels to other third party health care companies as well as NHS adjacent health services amongst other things. This is to protect patient sensitive data amongst other things. This would cripple our service and go against NHS england and government requirements for the secure transfer and sharing of data.

    This would have to be public VPNs only. Despite the fact that it would be complete bullshit either way.

    Well, you could just go back to sending stuff by fax machine forever, but then instead of even using the fax machine to sync patient data just make the patients fill out their own entire medical history from scratch every time they go to a different doctor and take their word for it.

  • We arent smarter. Actually most people here have no voice or influence outside of their computer screen.

    We can use some tech, sure. But I very much challenge the idea that we are smarter as a group than other university students.

    But since a lot of us have poor social skills, we compensate by thinking we are smarter or better, when we should instead train our social skills and stop thinking like that.

    I agree, but I think it is a trap we can easily fall into. Especially in this case.

  • I agree, but I think it is a trap we can easily fall into. Especially in this case.

    Yeah I agree. We have to wake up a bit. Real change happens outside of this place.

  • Prominent backbench MP Sarah Champion launched a campaign against VPNs previously, saying: “My new clause 54 would require the Secretary of State to publish, within six months of the Bill’s passage, a report on the effect of VPN use on Ofcom’s ability to enforce the requirements under clause 112.

    "If VPNs cause significant issues, the Government must identify those issues and find solutions, rather than avoiding difficult problems.” And the Labour Party said there were “gaps” in the bill that needed to be amended.

    To me it looks like every government in the world is pro-surveillance and anti-privacy; they're just all at different stages of depth into those ideologies done in practice. Privacy and anti-surveillance against foreign governments and corporations, pro for domestic. And I continue decade after decade to say that you should fear your domestic government far more than any foreign unless you're a country that may have US and allies bombing/droning and paratrooping your country. Countries with a modern enough military mostly have to worry about their own government rather than foreign governments

  • You're literally being Jimmy Salvile right now

    ~ Guy who posed for photo ops with Salvile twenty years ago

    Omg my brother amd I went to see Rolf Harris when we were kids and he invited my brother onto the stage. So woerd to think of now 😕

  • Prominent backbench MP Sarah Champion launched a campaign against VPNs previously, saying: “My new clause 54 would require the Secretary of State to publish, within six months of the Bill’s passage, a report on the effect of VPN use on Ofcom’s ability to enforce the requirements under clause 112.

    "If VPNs cause significant issues, the Government must identify those issues and find solutions, rather than avoiding difficult problems.” And the Labour Party said there were “gaps” in the bill that needed to be amended.

    Funny how its always so important to ban useful and empowering things for citizens in the name of safety but someone we can't ban business practices that cause mass extinctions, change the climate, impoverish the working class or kill enough of us to only be seen as a statistic instead of people. If they actually cared about safety, they would be banning the things that cause mass suffering and death, not VPNs. We should be opposed to these kinds of bans on the principle that it further disempowered us so we are less able to deal with the threats of all the mass suffering and death that they refuse to keep us safe from.

  • To me it looks like every government in the world is pro-surveillance and anti-privacy; they're just all at different stages of depth into those ideologies done in practice. Privacy and anti-surveillance against foreign governments and corporations, pro for domestic. And I continue decade after decade to say that you should fear your domestic government far more than any foreign unless you're a country that may have US and allies bombing/droning and paratrooping your country. Countries with a modern enough military mostly have to worry about their own government rather than foreign governments

    To me it looks like every government in the world is pro-surveillance and anti-privacy; they're just all at different stages of depth into those ideologies done in practice.

    Because they are all fuckin crooked and all want to keep their power.

  • Prominent backbench MP Sarah Champion launched a campaign against VPNs previously, saying: “My new clause 54 would require the Secretary of State to publish, within six months of the Bill’s passage, a report on the effect of VPN use on Ofcom’s ability to enforce the requirements under clause 112.

    "If VPNs cause significant issues, the Government must identify those issues and find solutions, rather than avoiding difficult problems.” And the Labour Party said there were “gaps” in the bill that needed to be amended.

    this is obviously such a dumpster fire that I can't help but wonder, "When will they realize how dumb this is and back out of it?"

    then i remember that Brexit happened

    fuckin stubbornness is a national identity for you blokes innit

  • The problem is that content filters don't work all that well in the age of https everywhere. I mean, you can block the pornhub.com domain, that's fairly straightforward ... but what about reddit.com which has porn content but also legitimately non-porn content. Or closer to home: any lemmy instance.

    I think it would be better if politicians stopped pearl clutching and realized that porn perhaps isn't the worst problem in the world. Tiktok and influencer brainrot, incel and manosphere stuff, rage baiting social media, etc. are all much worse things for the psyche of young people, and they're doing exactly jack shit about that.

    That's a problem is for ISPs and content providers to figure out. I don't see why the government has to care other than laying out the ground rules - you must offer and implement a parental filter for people who want it for free as part of your service. If ISPs have to do deep packet inspection and proxy certs for protected devices / accounts then that's what they'll have to do.

    As far as the government is concerned it's not their problem. They've said what should happen and providing the choice without being assholes to people over 18 who are exercising their rights to use the internet as they see fit.

  • That's a problem is for ISPs and content providers to figure out. I don't see why the government has to care other than laying out the ground rules - you must offer and implement a parental filter for people who want it for free as part of your service. If ISPs have to do deep packet inspection and proxy certs for protected devices / accounts then that's what they'll have to do.

    As far as the government is concerned it's not their problem. They've said what should happen and providing the choice without being assholes to people over 18 who are exercising their rights to use the internet as they see fit.

    @arc99 @SpaceCadet thats basically allowing the Government to force ISP to build a solution which is able to sensor every content. Sorry there is alot of reasons why you should be against it.

  • Parents should monitor what their kids are doing not the government

    While I agree wholeheartedly with this, it's often not that easy.

    Back in the days of 28.8 modems my parents found my little bro's downloaded porn stash. It was in a Zip disk in his underwear drawer. They then locked down both of our AOL accounts so we couldn't see that stuff.

    I thought this was bullshit because I kept my Zip disk full of porn next to all the other ones and labeled it "Homework." Why should I get punished if I didn't get caught?

    So I downloaded a keylogger, stole my dad's password, and unlocked my account and continued to download porn.

    However, I don't think government regulation would have worked in my case.

    That's the other issue, kids will find ways around it they always have when it comes to restrictions.

  • That's the other issue, kids will find ways around it they always have when it comes to restrictions.

    Tell some kid they get all the porn they want if they figure out fusion power and we’d have it in a fortnight.

    Took me about that long to figure out how to boot up silently, resume downloads, and shutdown the pc before my dad woke up for work.

  • Tell some kid they get all the porn they want if they figure out fusion power and we’d have it in a fortnight.

    Took me about that long to figure out how to boot up silently, resume downloads, and shutdown the pc before my dad woke up for work.

    Yeah never underestimate a horney teenager haha.

  • What if we all started using I2P for most stuff? The governments couldn't do anything about it.

    Good idea, for sure.

  • Itch.io has begun restoring NSFW content, but only if it’s free

    Technology technology
    18
    218 Stimmen
    18 Beiträge
    0 Aufrufe
    A
    So... Who processes the donation?
  • 733 Stimmen
    191 Beiträge
    4k Aufrufe
    S
    What makes it worse?
  • Jack Dorsey’s New App Just Hit a Very Embarrassing Security Snag

    Technology technology
    19
    1
    139 Stimmen
    19 Beiträge
    200 Aufrufe
    U
    Briar is Android only. Bitchat is an iOS app (may have an Android port in the future though, I think).
  • Ready-made stem cell therapies for pets could be coming

    Technology technology
    1
    1
    27 Stimmen
    1 Beiträge
    18 Aufrufe
    Niemand hat geantwortet
  • 432 Stimmen
    19 Beiträge
    243 Aufrufe
    M
    I think they meant 'because'
  • 238 Stimmen
    20 Beiträge
    173 Aufrufe
    A
    Unless you are a major corporation... you are not free to take anything.
  • Catbox.moe got screwed 😿

    Technology technology
    40
    55 Stimmen
    40 Beiträge
    392 Aufrufe
    archrecord@lemm.eeA
    I'll gladly give you a reason. I'm actually happy to articulate my stance on this, considering how much I tend to care about digital rights. Services that host files should not be held responsible for what users upload, unless: The service explicitly caters to illegal content by definition or practice (i.e. the if the website is literally titled uploadyourcsamhere[.]com then it's safe to assume they deliberately want to host illegal content) The service has a very easy mechanism to remove illegal content, either when asked, or through simple monitoring systems, but chooses not to do so (catbox does this, and quite quickly too) Because holding services responsible creates a whole host of negative effects. Here's some examples: Someone starts a CDN and some users upload CSAM. The creator of the CDN goes to jail now. Nobody ever wants to create a CDN because of the legal risk, and thus the only providers of CDNs become shady, expensive, anonymously-run services with no compliance mechanisms. You run a site that hosts images, and someone decides they want to harm you. They upload CSAM, then report the site to law enforcement. You go to jail. Anybody in the future who wants to run an image sharing site must now self-censor to try and not upset any human being that could be willing to harm them via their site. A social media site is hosting the posts and content of users. In order to be compliant and not go to jail, they must engage in extremely strict filtering, otherwise even one mistake could land them in jail. All users of the site are prohibited from posting any NSFW or even suggestive content, (including newsworthy media, such as an image of bodies in a warzone) and any violation leads to an instant ban, because any of those things could lead to a chance of actually illegal content being attached. This isn't just my opinion either. Digital rights organizations such as the Electronic Frontier Foundation have talked at length about similar policies before. To quote them: "When social media platforms adopt heavy-handed moderation policies, the unintended consequences can be hard to predict. For example, Twitter’s policies on sexual material have resulted in posts on sexual health and condoms being taken down. YouTube’s bans on violent content have resulted in journalism on the Syrian war being pulled from the site. It can be tempting to attempt to “fix” certain attitudes and behaviors online by placing increased restrictions on users’ speech, but in practice, web platforms have had more success at silencing innocent people than at making online communities healthier." Now, to address the rest of your comment, since I don't just want to focus on the beginning: I think you have to actively moderate what is uploaded Catbox does, and as previously mentioned, often at a much higher rate than other services, and at a comparable rate to many services that have millions, if not billions of dollars in annual profits that could otherwise be spent on further moderation. there has to be swifter and stricter punishment for those that do upload things that are against TOS and/or illegal. The problem isn't necessarily the speed at which people can be reported and punished, but rather that the internet is fundamentally harder to track people on than real life. It's easy for cops to sit around at a spot they know someone will be physically distributing illegal content at in real life, but digitally, even if you can see the feed of all the information passing through the service, a VPN or Tor connection will anonymize your IP address in a manner that most police departments won't be able to track, and most three-letter agencies will simply have a relatively low success rate with. There's no good solution to this problem of identifying perpetrators, which is why platforms often focus on moderation over legal enforcement actions against users so frequently. It accomplishes the goal of preventing and removing the content without having to, for example, require every single user of the internet to scan an ID (and also magically prevent people from just stealing other people's access tokens and impersonating their ID) I do agree, however, that we should probably provide larger amounts of funding, training, and resources, to divisions who's sole goal is to go after online distribution of various illegal content, primarily that which harms children, because it's certainly still an issue of there being too many reports to go through, even if many of them will still lead to dead ends. I hope that explains why making file hosting services liable for user uploaded content probably isn't the best strategy. I hate to see people with good intentions support ideas that sound good in practice, but in the end just cause more untold harms, and I hope you can understand why I believe this to be the case.
  • 149 Stimmen
    19 Beiträge
    162 Aufrufe
    C
    Got it, at that point (extremely high voltage) you'd need suppression at the panel. Which I would hope people have inline, but not expect like an LVD.