this post was submitted on 09 Jan 2025
618 points (97.7% liked)

Technology

60350 readers
4666 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[โ€“] desktop_user@lemmy.blahaj.zone 0 points 18 hours ago (1 children)

how would you ban any internet service without firewalls or routing? DNS bans are trivial to bypass and maybe I'm not thinking hard enough but I'm out of practical ways to prevent access to Twitter or meta.

[โ€“] taanegl@lemmy.ml 3 points 16 hours ago

There's a barrier to entry in those cases. If you're DNS actively reroutes people are mostly inclined not to try and figure out a way to bypass it - unless bothered, like we see with the porn access law in Florida.

In any case, you can do packet dropping on a routing level from the ISP - which technically isn't a national firewall, even if it serves the same purpose.

Segmenting the internet means doing routing in a way where the link between nodes is actively blocked, which is something completely different and is more what you'll get behind the Chinese "firewall" - when it is more like a physical barrier than a firewall rule, because it'll be impossible to actually facilitate a manual link, whereas a DNS blocking can be more easily bypassed.

There's level to these problems and just having a "national firewall" means nothing, because it doesn't get down to the minutia of what's actually being achieved.