this post was submitted on 27 Nov 2025
82 points (97.7% liked)

Privacy

43402 readers
638 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago
MODERATORS
 

With the UK apparently floating ideas of a VPN ban it's got me worried about the future of anonymity online. Now people have already pointed out that a VPN ban doesn't make sense because of all the legitimate uses of one and wouldn't even be enforceable anyway, but that got me thinking.

What if governments ordered websites (such as social media sites) to block traffic originating from a VPN node? Lots of sites already do this (or restrict your activity if they detect a VPN) to mitigate spam etc. and technically that wouldn't interfere with "legitimate" (in the eyes of the gov) VPN usage like logging onto corporate networks remotely

It's already a pain with so many sites either blocking you from access or making you jump through a million captchas using VPNs now. I'm worried it's about to get a whole lot worse

top 50 comments
sorted by: hot top controversial new old
[–] stupid_asshole69@hexbear.net 1 points 6 hours ago

To go a little further, I used the example of heroin and machine guns in my other reply, but there are lots of countries where people licensed to use these (or technology that’s similar like oxycontin) are allowed or there exist analogs (like bump stocks or binary triggers) that avoid the law.

Heck, in the us any knucklehead can get on the good boy list for heroin or machine guns they just need to pass a bunch of checks and submit to a series of audits and inspections.

The point of banning vpn use would be to keep people from using the technology to skirt identity laws, not to prevent the use of the technology altogether, so it’s likely any ban would take the form of legal wording that looks like “use of computer networking technology to conceal ones identity or aid or abet or perpetrate any crime is unlawful under this section.”

So again, yes they absolutely can do it and no it wouldn’t mean corporations would suddenly have to turn in all their edge devices.

I’m really surprised that on this instance no one has replied with the “laws are threats made by the dominant social economic class” copypasta. Fake ahh anarchists…

[–] cyberpunk007@lemmy.ca 2 points 15 hours ago

Lol it would break so much shit they just couldn't.

[–] irmadlad@lemmy.world 3 points 20 hours ago

Prohibition has never been a deterrent to consumption.

[–] communism@lemmy.ml 3 points 1 day ago (1 children)

I imagine it'd be a jurisdiction issue for what you propose. If, say, the UK mandates that websites block VPN nodes, that will affect websites served from the UK (creating a Great Firewall of Britain). But what about websites served outside the UK? Those websites can't possibly tell if a user is from the UK and using a VPN, vs outside the UK and using a VPN, so they can't only block UK visitors—they'd have to block all VPN traffic, which is probably not worth it from a business point of view. I suppose the UK could then deem that website illegal in the UK and block them, but then that'd only block the website for non-VPN users in the UK... But if the website owner is outside the UK they can't be punished for violating that law.

More probable (though I still think unlikely) is that a country could sniff for e.g. Wireguard packets and block those. But again that's unlikely because of businesses using VPNs to let employees access company intranets at home.

[–] Jason2357@lemmy.ca 1 points 1 day ago

These laws tend to effect any company that does business in the state or country. Any commercial service or company wanting to make money from UK customers will be required to implement the VPN block for all their customers.

[–] ftbd@feddit.org 8 points 1 day ago (3 children)

VPN technology will never be banned, as most companies rely on it heavily, e.g. for remote work. The only thing I could see is ISPs keeping a blacklist of known addresses of commercial VPN providers, but that seems like an uphill battle

[–] sqgl@sh.itjust.works 1 points 19 hours ago* (last edited 19 hours ago) (1 children)

A company can run their own VPN server. A third party need not be involved. The commercial VPN service providers can therefore be blocked by government without affecting those businesses.

[–] ftbd@feddit.org 1 points 11 hours ago (1 children)

Yes. By 'VPN technology' I mean e.g. wireguard, openVPN, which are infeasible to ban since companies probably use the same software stack.

[–] sqgl@sh.itjust.works 1 points 8 hours ago

I don't know what a software "stack" is but government can packet sniff to see if that kind of software is used but the vendors in this cat and mouse game apparently can sometimes fool the packet sniffers.

China cannot block all VPN's so it is looking good for us geeks. However we need to educate the masses.

[–] IphtashuFitz@lemmy.world 2 points 1 day ago

Companies like Akamai already do this to an extent. My employer is an Akamai customer, and they’ve offered this service to us in the past when we saw a lot of malicious traffic originating from commercial VPN providers.

[–] Jason2357@lemmy.ca 1 points 1 day ago

There are already (crappy) ip blocklists available specifically for retail VPN providers. They don't include corporate vpn providers because capitalism. Anonymizing VPN services have limited IP blocks that are easily tracked.

[–] Zoma@sh.itjust.works 9 points 2 days ago

Tor bridges exist for this don't they?

[–] artyom@piefed.social 15 points 2 days ago* (last edited 2 days ago) (3 children)

Lots of places are applying that sort of regulation already. Problem is, how do you know which IPs are VPNs? There are some obvious ways, and many people block some VPNs already but you can't block every VPN. I can spin up a VPN right now and open it up to users in other countries. It's impossible.

The gov could theoretically maintain a repository of "known" VPNs that they could require sites to block, though. They could even force them to be blocked at the DNS level. This would probably be fairly effective.

But that's also most certainly going to be abused as well.

[–] Jason2357@lemmy.ca 2 points 1 day ago (1 children)

They are only interested in retail, anonymizing VPNs. If you spin up your own VPN you are still 1:1 linked to that IP address. If you use a work VPN, they fully track everything. The anonymizing ones that dont track users and share an IP between many users are a threat to mass surveilance.

[–] artyom@piefed.social 1 points 1 day ago* (last edited 1 day ago)

They are only interested in retail, anonymizing VPNs

Okay, and how will they know which ones those are?

If you spin up your own VPN you are still 1:1 linked to that IP address

I don't think you read that entire sentence. I wasn't talking about spinning one up for my personal use.

[–] filcuk@lemmy.zip 8 points 1 day ago (1 children)

Same as the stupid age verification, it will funnel people away from legitimate services to dodgy ones.

[–] Jason2357@lemmy.ca 3 points 1 day ago

Small scale version. I heard from some kids that they wanted to play Roblox at school. IT had blocked it on the Wifi. The kids advice to each other was “go on the play store, search VPN, and install whatever one is free.” - IT absolutely isn't making those kids safer.

[–] IphtashuFitz@lemmy.world 1 points 1 day ago

Not to mention that it’s trivial to change your IP on most cloud providers. So if a VPN provider is using a cloud service for some of its gateways then it can quickly remember them if necessary.

[–] bl4kers@lemmy.ml 20 points 2 days ago (2 children)

That would severely cripple remote work/collaboration, which is essential for all megacorps. Unless there's some sort of carve out for that I don't see it happening

[–] Jason2357@lemmy.ca 2 points 1 day ago

They will only apply it to retail VPNs. You think capitalists play by the same rules?

…some sort of carve out…

Oi oi, wotsalldisthen? U got a permit for that VPN, innit?

[–] Kirk@startrek.website 28 points 2 days ago (5 children)

It's theoretically possible but difficult to actually do. China has a large central government and surveillance state, VPNs are essentially banned there, and yet a large percentage of the population uses them daily to the point where it's commonplace.

[–] Lfrith@lemmy.ca 14 points 2 days ago

If China can't do it then nobody can. I'll only be worried if China manages to successfully block out VPN use in their country.

[–] Auli@lemmy.ca 2 points 2 days ago* (last edited 2 days ago)

I still believe they let it happen. Could be wrong but it reminded me of the Machines in the Matrix.

load more comments (3 replies)
[–] chaoticnumber@lemmy.dbzer0.com 15 points 2 days ago (1 children)

I have moments when I think "I might get banned for this", this is one of those moments.

You may try to ban vpns but you can not really, people usually find ways around censorship. We are notorious for this stuff, as a species.

Its infuriating to me when people just roll over for the powers that be. They may ban some nodes, others will pop up, those will get banned too and so the cycle of cat and mouse begins.

You can host your own vpn with wireguard. It takes a bit of figuring out, sure, but you can literally do so with a raspberry pi. Stick it in a network of choice and voila.

Oh they may control stuff, but this is not a game that can be won, human repression is a futile effort, it may work for a while, but there is a reason why regimes fall. See the wall of Berlin and so many other examples.

Fret not friend, for hope dies last.

[–] Auli@lemmy.ca 4 points 2 days ago (1 children)

They could ban VPNs and not play cat an mouse. I always think China allows some VPN use when they could stop it completely. I always think of the Matrix with the option of leaving.

[–] sqgl@sh.itjust.works 1 points 19 hours ago* (last edited 19 hours ago)

I had my Internet crippled in China in 2012 after I used Hamachi to log into my home computer in Australia.

The crippling got worse if I repeated my action eventually disabling the internet completely for about an hour.

I played this game a few times to pick up on the pattern.

[–] herseycokguzelolacak@lemmy.ml 11 points 2 days ago

Anything can be made illegal. Enforcement is tricky. At the moment it is very easy to block Wireguard protocol at the ISP level, some even do it. But that would probably push Wireguard and others to invest more in obfuscation.

As a sidenote, it bugs me that Wireguard does not support obfuscation out of the box, and you have to put it on top of wireguard.

[–] UltraGiGaGigantic@lemmy.ml 6 points 2 days ago

Anything is possible. Except being free of course.

Just human things.

[–] eleitl@lemmy.zip 7 points 2 days ago (3 children)

You can always just route your traffic through a roll your own tunnel to some cheap cloud VM. Modern automation makes it even painless.

[–] Jason2357@lemmy.ca 1 points 1 day ago (1 children)

I do exactly this, but it doesn’t protect your privacy. That one IP address is literally tied to your credit card number and you are the only person using it.

[–] eleitl@lemmy.zip 1 points 9 hours ago

It takes lawful intercept by ISP out of the loop and the egress point should be in a minimally cooperative jurisdiction. You know the endpoint is known good since you're the admin and the IP is not in a known VPN exit blocklist. Of course economically it makes sense to share tunnels with family and friends.

[–] Buckshot@programming.dev 2 points 2 days ago

I do this. I already had a cloud vps with a vpn on it for remote access so i figured i might as well set it up to route traffic as well.

Still get loads of sites blocking me

[–] Auli@lemmy.ca 3 points 2 days ago* (last edited 2 days ago) (2 children)

People won't do that as we are lazy as a species. Any sort of friction and the people who do it well drop considerably.

[–] eleitl@lemmy.zip 3 points 1 day ago

When privacy is outlawed, only outlaws will have privacy.

[–] pulsewidth@lemmy.world 4 points 2 days ago

People used to not use VPNs too - until they realized how useful they can be by spread in pop culture and increasing tech awareness of the general public.

If commercial VPNs are banned the tech savvy will move onto a replacement immediately, and the knowledge will slowly expand through social circles and social media until it has similar penetration in society.

A VPN ban would be both harmful (to business and consumers short term) and pointless.

[–] NarrativeBear@lemmy.world 16 points 2 days ago* (last edited 2 days ago) (2 children)

How can you ban a VPN (virtual private network)?

I have a VPN setup at home and at my parents home, I can connect either as if I was at either location physically. My office has VPNs for connecting between offices and connecting from remote locations. And dont get me started about being and to purchase a VPS in any country you want, and run a VPN on it.

Does this mean people and companies can no longer setup their own VPN's.

If this is about privacy and anonymity, evey bowsers on any device has a unique identifying fingerprint that allows it to be identifiable even using a VPN. So what is this ban even targeting?

The Hidden Tracking Method Your VPN Can't Block - https://www.youtube.com/watch?v=pJOpHSPkWMo

[–] ISOmorph@feddit.org 3 points 2 days ago (6 children)

So what is this ban even targeting?

UK is one of the forerunners in regard to online ID checks, for example for porn sites. Brits now regularly use VPNs to escape those checks

load more comments (6 replies)
[–] Auli@lemmy.ca 1 points 2 days ago

For profit VPNs I think is what everyone means. So people can get past region blocks or censorship. Since they offset very little else.

[–] crunchy@lemmy.dbzer0.com 12 points 2 days ago

The end goal is to either make encryption completely ineffective or get rid of it altogether. Remember the last few times lawmakers have tried "protecting the children"?

[–] stupid_asshole69@hexbear.net 4 points 2 days ago

Yes they can ban it, you will face repercussions if you violate that ban just like if you violate the ban your country probably has on heroin or machine guns.

You can get around it by using doh and a http proxy configured in your web browser, not at the os level.

Yeah, next they'll shut down computer servers

Stupid

[–] delta_fsociety@lemmy.ml 3 points 2 days ago (1 children)

in my experience, community and people would always find work arounds

load more comments (1 replies)
load more comments
view more: next ›