番羽土啬口巴: July 2015

Friday, July 31, 2015

重新编译lantern2正式版-去除PAC,最新源代码

http://ift.tt/1eG5oUb

去除PAC方法：

func doPACOn() {
}

func doPACOff() {
}

去除PAC去除启动主页的版本也编译出来了：

http://ift.tt/1JAtSuI

去除启动主页保留PAC代理的编译版本：

http://ift.tt/1eG5par

原文：http://ift.tt/1JAtUCQ

via 细节的力量 http://ift.tt/1JAtSuQ

翻墙知识翻墙问答：“USB加密金钥”二步认证法最可靠但多限制

问：最近，学民思潮有成员的Gmail户口被窃，令不少学民思潮成员资料，以及Facebook曝光。现时Gmail有二步认证的方法，防止户口被窃，但这么多种二步认证方法中，有那一个方法是最可靠，而可以肯定密码不会在途中被窃？

李建军：谷歌现时支援二步认证的方法很多，包括短信、电话、手机应用程式，以及USB加密金钥。

现时众多二步认证方法中，最安全稳当而且易用是USB加密金钥，因为USB加密金钥完全不会将认证码经任何未有加密的电讯网络传送，而现时买到的 USB加密金钥，亦在美国等国制造，很难受中国当局的影响。只不过，这种方法在技术上有比较多限制。只有桌面电脑能够支援USB加密金钥，手机以及平板电脑就不能够支援，亦只有Chrome浏览器才能支援USB加密金钥，IE以及Safari使用者完全享受不到USB加密金钥的好处。

对中国用户而言，由于无法在中国买到USB加密金钥，必须在美国或欧洲国家订购，一旦遗失加密金钥都将会颇为麻烦。

另一个相当可靠方法是Google Authenticator的应用程式，就算你手机接收不到短信，甚至完全没连上互联网都好，只要运行这个应用程式，都可以产生必须的二步认证码，只要第一次做好短信或电话认证便可，这个应用程式适合一些频繁更改电话号码，又嫌买USB加密金钥麻烦的人。现时Google Authenticator支援iOS、Android以及Blackberry，几乎涵盖了大部分手机作业系统。

你亦可以设定常用的电脑不用二步认证码都可以登入，但其馀机器一律需要用二步认证码，但设为不用二步认证码的电脑或手机，都必须是常携带在身的手机或电脑，否则不法之徒或中国政府的人，就会有机可乘，偷掉了你的谷歌户口也不自知。

问：在上集翻墙问答中，只是示范了MD-5杂凑码来验证翻墙软件真伪，而没有示范相对安全的SHA-1杂凑码？

李建军：要成功鉴定翻墙软件的真伪，就必须软件开发商提供相关的杂凑码，现时无论自由门，还是无界浏览，都是在网站提供MD-5的杂凑码，而并非SHA-1 甚至更安全的SHA-256杂凑码。因此，我们就算想教如何使用SHA-1杂凑码来验证软件真伪，都仍然无能为力。要等翻墙软件开发商，陆续改用SHA- 1甚至SHA-256杂凑码，才可能会有更安全的使用方式。

除了翻墙问答教的方法，透过互联网以及浏览器，都可以检查档案的MD-5杂凑码是否原装正版，而无须理会自己电脑的作业系统。这次翻墙问答预备视频，示范有关用法，欢迎听众浏览本台的网站收看。

问：MD-5到底有什么漏洞，为何有部分人视MD-5为一个不大安全的杂凑码技术？

MD-5是上世纪九十年代发展的技术，至今用了接近廿五年，无论长度，还是当中演算法则，都被黑客所看破，因此MD-5技术己经不能够保证百分百可靠。SHA-1稍迟于MD-5发展，但都用了二十年，不少弱点亦被黑客所识破，因此都被视为一种不大安全的技术。

现时俗称SHA-256的SHA-2家族，是暂时最安全的技术，除了因为技术新外，亦因为杂凑字码长度比较长，演算法暂时漏洞不多，黑客未有能力在SHA- 2的杂凑码上动手脚。若更多软件公司愿意公布档案的SHA-2杂凑码，用户可以改用SHA-2杂凑码认辨软件真伪，再配合档案数码证书的普及，中国当局以至部分黑客要在网上发放假的软件，恐怕并非一件容易的事。而2012年发表的SHA-3现时尚未普及，相信在一段时日后才会出现相关应用。

原文：http://ift.tt/1haBuJq

via 细节的力量 http://ift.tt/1haBuJs

Thursday, July 30, 2015

懒人在思考：我是如何优雅且靠谱地翻墙

曲径这个优秀的“翻墙”解决方案向大家说再见了，官方声明如下：

向曲径说再见

曲径从诞生至今，为科技工作者和在校师生，在获取商业信息和学术研究等方面提供了很大的方便和技术支持。在曲径运作中，个别问题还处于法律空白，有些问题还存在争议。

为了维护国家互联网法律和政策，保证互联网用户获取信息内容和渠道的安全性，国家要求互联网用户从正规渠道获取信息。基于该原因，曲径自觉遵守国家的法律、法规和政策，已在2015年7月28日，自愿将名下所有互联网服务关停，并不再提供类似的服务。曲径开发者将从事其它领域的工作。

给各位所造成的不便和麻烦深表歉意。在未来几天，将给涉及到费用的用户发送邮件，处理退费事宜。请留意邮件和这里的消息。

如果还有问题，请发邮件至support@getqujing.com。

曲径

2015年7月29日

说实话很可惜，但是我们又能如何呢？对我来说只能不断提升自身实力，为自己，为身边的一些重要的人。

大家发现一个规律没？越是普及的越容易被干掉，之前我发过一门黑科技：

黑科技之无障碍访问 Google

后来呢？一旦冒出头角，很快被干掉。这是黑暗森林，人为刀俎我为鱼肉，你可以低调地对抗，但是却没法燎原。

我这里给大家分享我的翻墙方案，一种相对原生态高成本的翻墙方案，这种方案对我来说优雅且靠谱。

优雅是因为，我每次翻墙只需要一行简单命令：

gfw -d start

靠谱是因为这是我基于开源解决方案自己打造的，方案组合如下：

shadowsocks + 一台海外 VPS + Chrome(SwitchyOmega)/Firefox(AutoProxy)

我不打算教大家一步步打造，我上面说了这种翻墙方案是原生态高成本的，正因为是原生态，所以打造过程很灵活。我这儿给大家一些关键指引，剩下的靠你自己了。请原谅我不能给你我自己的具体打造过程，因为知道的人越多，我这种过程迟早被干掉。但是要相信我给你指引的思路将会是永恒的存在，原因就是：原生态！

shadowsocks 的各种详情与他们提供各种组合解决方案看这：

http://ift.tt/1DcvTfA

如果没这个开源的关键解决方案怎么办呢？我给你一个永恒思路，技术贴请看：

http://ift.tt/1lo2f9R

这个技术贴可以让你明白翻墙的最本质原理，你会搞明白什么是本地转发、远程转发、动态转发。

如 shadowsocks 这般伟大靠谱的开源解决方案还有：GoAgent，但是要搞定这个的成本可能更高。

然后买一台海外的 VPS，关于这个我不点名，否则被批量和谐就麻烦了，大家自己百度 :)

有了海外 VPS，你就可以登上去部署 shadowsocks 服务端了，然后在本机部署上 shadowsocks 客户端，一条翻墙的梯子就初步打通了。

我们的上网工具一般都会支持代理配置，配置下就好啦。当然配置这块也有方便的解决方案，拿 Chrome 举例吧，SwitchyOmega 这个扩展实在太方便了，配置好就可以真正优雅了，因为它可以判断如果是被墙的就翻墙，如果不是被墙的就正常连接不翻墙，这样可以很好地保证我们的上网体验，因为翻墙毕竟会影响速度。这种“智能判断”的本质是：可以配置一份 gfwlist 规则文件…

还有更多高级姿势吗？有呀，改日再议。

写到这，我发现我什么都不知道，别问我，加油，爱好自由的你，自由是需要成本的。

对了，我那个优雅的指令：

gfw -d start

是如何诞生的？其实是这样：

alias gfw=”sudo sslocal -c /etc/shadowsocks.json”

懂的人懂。

哦，可以优雅地赞赏了，感谢你 :)

源地址：http://ift.tt/1IanVQV

原文：http://ift.tt/1IanVQX

via 细节的力量 http://ift.tt/1ItvD7N

Wednesday, July 29, 2015

My Take: Top 5 Best VPNs for China (Updated July 2015)

Update July 2015: as many of you know, China cracked down on VPNs in early 2015 after this article was published. While many VPN services had to make changes to their connection protocols, I continue to use each of the 5 services since the crackdown and they all function well.

*Click to watch the video and then subscribe to the FarWestChina Youtube channel!

Sadly, FarWestChina has been inaccessible here in China since 2009, blocked by the “Great Firewall” (i.e. China’s censorship). I have no idea why it was blocked – other than the fact that I’m talking about one of the most sensitive regions in China – and there’s nothing I can do to unblock the site. Trust me, I’ve tried everything short of knocking on a government official’s door.

The only way I’ve been able to work on this site from my home here in China is through what is known as a VPN, or a Virtual Private Network.

Because I have over 5 years of first-hand experience with over 15 different VPN services, I get more than a few emails every month from people asking me my recommendation for VPNs. It’s an obvious need for anybody living in China but more and more people are realizing that online security is something netizens in every country should consider.

I’m not trying to hard-sell anybody here…more than anything I just want to provide some helpful information for those people who need to get a new VPN. A few of the links here and in the video are affiliate links which means that at no additional cost to you I will be compensated if you purchase the service. I wouldn’t recommend these VPNs if I hadn’t used them extensively myself, though, and I’ve used each of these VPNs for at least 6 months this last year.

So take a look at this breakdown of the top 5 VPNs for China and then you can scroll down further for a more detailed summary of each.

Top 5 VPNs for China

	VyprVPN	12VPN	ExpressVPN	Witopia	PureVPN
Founded:	2009	2007	2009	2003	2007
Pros:	Chameleon encryption 3-day FREE trial	Mobile-only option China-specific protocols	Simple setup Easy to Use Beautiful design	Longevity (10+ yrs) Low Price	Low Price Fast Streaming
Cons:	Pricey	Simple software	Pricey	Requires special China config	Lower encryption
Torrent	Yes*	No	Yes	Yes*	Yes
Dedicated Apps	Yes	No	Yes	No	Yes
Trial Period	3 day trial	14 day MBG**	30 day MBG**	30 Day MBG**	3 Day MBG**
Pricing:	Monthly: $14.99/mo Annual: $8.33/mo	Monthly: N/A Annual: $8.25/mo	Monthly: $12.99/mo Annual: $8.33/mo	Monthly: N/A Annual: $5.83/mo	Monthly: $7.95/mo Annual: $3.99/mo

*They allow torrenting but will pass on DCMA notices for illegal activity.
**”MBG” refers to a Money Back Guarantee

As I mentioned in the video above, there are literally hundreds of VPNs to choose from on the market and there are quite a few good ones that didn’t make this list.

These, however, have stood the test of time (they are all at least 5 years old), have made a specific effort to reach the China market, all offer hundreds of servers across the globe and they all have unlimited bandwidth.

A Look at VyprVPN in China (3 Day Free Trial)

*Note: to try VyprVPN free for 3 days and get 50% off your first month you can click here for the special discount.

I was turned on to VyprVPN this past year and have been incredibly impressed with both their software and their special “Chameleon” encryption protocol. It’s simple to use and best of all…you can try it for free for 3 days to see how it works for you.

For those of you who use a VPN on their tablet or mobile device, VyprVPN has one of the best apps on the market for both Android and iOS. Just plug in your login information and you’re good to go.

VyprVPN has been around since 2009 but the parent company, GoldenFrog, has been around for more than a decade providing online services. I’ve spoken at length with some of their representatives and really like their focus on the China market, which is comforting considering how much the Chinese internet landscape changes.

If all of this sound good to you, click here to give them a try for 3 days…free.

A Look at 12VPN in China (10% Discount Code)

I’ve been a 12VPN customer since 2013 and it’s been my go-to VPN on my computer and phone. Why? It’s simple and it just works…every time.

The software isn’t flashy and they don’t have a dedicated iPhone or Android app but setup for both was an easy download of one file that took me all of 5 minutes.

One of the things I’ve truly appreciated about 12VPN is their commitment to communication. I get periodic emails informing me of changes in the VPN and changes in the Great Firewall. For example, last year one of the submarine cables that connects Asia with North America was severed. Out of the 10 VPNs I had running at the time, 12VPN was the only one that let me know what was happening and why I should expect slower speeds on the Los Angeles servers.

If 12VPN seems to fit your needs, you can give them a try here. Don’t forget: 12VPN has graciously offered a discount to FarWestChina readers. Just enter “fwc10″ to get 10% off your order!

A Look at ExpressVPN in China

ExpressVPN is another VPN that I spent much of 2014 testing out. I’m a huge fan of their overall design – the website, desktop app and mobile app are all beautiful.

I always recommend this VPN to anybody I know who doesn’t consider themselves tech-savvy. Perhaps they didn’t know what a VPN was to begin with or they always have somebody else install new software for them. With ExpressVPN, you can easily do it all yourself.

For those who desire simplicity and easy, ExpressVPN has been a solid option here in China for the past few years. You can check out their pricing here.

A Look at Witopia (Bonus 15% Discount)

Witopia has been one of the longest-running VPNs in China. I remember back in 2008 when I was first looking for a VPN and it seemed like 90% of all expats were using Witopia.

That’s changed of course, not because Witopia’s service is any worse but mainly because the competition has become much more fierce since then. Witopia has also decided not to offer an affiliate program (one of the reasons they can offer such low prices) so most of their advertising is word-of-mouth, like this.

Witopia is an excellent choice for desktop users but less-so if your primary use is mobile. The VPN works, it was just a huge pain to get set up – and this coming from a guy who set up 10 different VPNs this past year.

That one complaint aside, I can confidently recommend Witopia as a good option here in China. Best of all, when you use this link you can get 15% off the Witopia service which is already priced quite low.

A Look at PureVPN in China

Summer Special! PureVPN is running a special right now: if you purchase one year of service you get another 12 months for free!

Last but not least, PureVPN is another popular option here in China. They boast over 1 million users world-wide and their market share in China seems to be growing at a rapid pace.

While I’m not a huge fan of their software, which feels like it was coded back in the 1990s, the service works well. Their speeds are excellent and I found them to be the best in terms of streaming – at least for me out here in Xinjiang.

What you might find useful is their “Server Selection Tool” where you tell the software what you want to do (download, stream US content, stream UK content, etc) and it will tell you which servers best suit you needs.

Considering the price – which is often one of the lowest around – PureVPN is an excellent VPN option for the price conscious buyer.

So that about covers it! If you’re here in China and using a VPN, leave a comment below to let me know what you use.

原文：http://ift.tt/1AnNTvG