‹ BackHN Continuity

Thread

Court agrees with EFF: Utah's VPN law demands a technical impossibility

802 points · 405 comments · hn_acker

  1. SoftTalker · · focus · HN ↗
    > platforms are left with an impossible choice: completely block all VPN traffic nationwide or withdraw access from Utah entirely

    Is it even possible to reliably know that a connection is from a VPN? Anyone can proxy through a random hosting provider.

    1. ranger_danger · · focus · HN ↗
      Not when the definition of VPN is subjective. I could proxy/VPN through a friend's house and nobody would ever know it wasn't them.
      1. codedokode · · focus · HN ↗
        Yes but isn't it suspicious that all your traffic goes to the friend's house and not to Facebook and Reddit? If you claim it is not a VPN does it mean your friend is providing illegal unlicensed hosting? That's even worse.
        1. [deleted] · · focus · HN ↗

          [deleted]

        2. iAMkenough · · focus · HN ↗
          Split tunnel is a thing, and in that instance the platform required to comply (like a porn site) doesn’t have any way to see all your traffic to determine if it’s a VPN/proxy connection or not.
          1. codedokode · · focus · HN ↗
            If you cannot determine the traffic type, you can block it and wait until someone appears with proper documentation and explains what they were sending.
            1. iAMkenough · · focus · HN ↗
              That's what the judge agreed with: it's unreasonable to require you to block all Internet traffic with the assumption it's all VPN traffic until proven otherwise.

              Under Utah's law as written, a private business has to assume any single IP address could be operating a VPN/proxy.

            2. 306bobby · · focus · HN ↗
              He said nothing about traffic type, that will always be HTTPS and websocket stuff. Nothing out of the ordinary to block there VPN or not

              With cross tunneling all your normal traffic would go through your ISP usually and just your porn traffic goes through the VPN. Unless it's a major provider, as far as your ISP is concerned you're just connecting to someone's private server occasionally

        3. malfist · · focus · HN ↗
          > does it mean your friend is providing illegal unlicensed hosting

          Since when do you have to pull permits to put a server on the web?

        4. ranger_danger · · focus · HN ↗
          "Suspicious" is not illegal, and neither is hosting.
        5. zen928 · · focus · HN ↗
          Why would that be suspicious?
        6. someonebaggy · · focus · HN ↗
          If anybody is monitoring traffic patterns to this extent, it's not public knowledge. Even the NSA is unlikely to see traffic from one house to another in the same neighbourhood. And nobody except top terrorists gets prosecuted based on NSA intel because they have to reveal how they got the intel.
      2. irenaeus · · focus · HN ↗
        This requires a lot of extra work though, and extra work is downward pressure on the behavior (underage people looking at pornography) that the state of Utah is trying to exert downward pressure on.

        The inability to immediately and perfectly eliminate a behavior is not a good enough reason to be against any attempt to eliminate that behavior.

        1. Rohansi · · focus · HN ↗
          > The inability to immediately and perfectly eliminate a behavior is not a good enough reason to be against any attempt to eliminate that behavior.

          So if you are legally required to block all VPN users and then fail to actually block all VPN users what is stopping you from being punished for not complying with the law?

          1. mahboi · · focus · HN ↗
            Yeah, that's the problem. But if they changed the law to not require all users to be blocked, it'd still have the outcome they want.
          2. fc417fc802 · · focus · HN ↗
            Common sense on the part of the judge presumably. Best effort and common practice will enter into it. Lots of regulation is like that.
          3. someonebaggy · · focus · HN ↗
            Nothing. Making laws that are impossible to comply with, then selectively enforcing them, is a favourite tactic of fascism because it allows you to imprison anyone you want, arbitrarily.
      3. EvanAnderson · · focus · HN ↗
        A lot of law is adjudicated based on the intent, not the black-and-white definition. Proxying your traffic thru a friend's house (VPS in another location, etc) would be considered a "VPN" by a court. Definitional hacks, for the most part, don't fly with judges.

        To handle the matter technically Utah would need a "great firewall of Utah" and a legislative mandate that all ISPs route thru it. Somehow they'd have to factor-in signals from cellular sites neighboring states and satellites.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.