UK government targets VPNs in new online safety consultation as Lords vote for ban (www.techradar.com)

submitted 3 months ago by floofloof@lemmy.ca to c/unitedkingdom@feddit.uk

20 comments fedilink hide all child comments

all 25 comments

sorted by: hot top new old

[-] IanTwenty@piefed.social 25 points 3 months ago

Parliament itself recommends VPN use for its members:

Labour's Lord Knight acknowledged that VPNs could "undermine the child safety gains of the Online Safety Act" but warned that age-gating the apps could be "extremely problematic". He said:

"My phone uses a VPN, following a personal device cyber consultation offered by this Parliament. VPNs can make us more secure, and we should not rush to deprive children of that safety."

[+] YesButActuallyMaybe@lemmy.ca 16 points 3 months ago* (last edited 3 days ago)

[deleted]

[-] deadcream@sopuli.xyz 8 points 3 months ago

You think UK would be the first country to ban VPNs? There are thousands of talented and very committed computer scientists in authoritarian countries tirelessly working to enforce internet censorship. They discovered many wonderful technical solutions to this problem.

All the mainstream VPN protocols like OpenVPN and Wireguard don't even try to hide themselves and are easily detected no matter what port you use. They are useless if you country is seriously set to block VPNs.

There are different protocols specifically designed to circumvent censorship and they do so by masking their traffic to like something innocuous like HTTPS. However even they can be detected using advanced traffic analysis. For example, if a given machine only sends and receives HTTPS traffic to a single specific overseas server, it is safe to assume that it's not actually a genuine website traffic but a VPN masquerading as HTTPS.

There is special hardware that all users' traffic goes through that detects these patterns and automatically throttles/blocks these connections.

[-] Korhaka@sopuli.xyz 4 points 3 months ago

What if you were playing a browser game for hours? Wouldn't that also be HTTPS traffic to the same server all the time?

[-] deadcream@sopuli.xyz 4 points 3 months ago* (last edited 3 months ago)

Maybe, depending on the game. But your OS and running programs will still be making http requests to various servers. Microsoft's, Google's, Steam's, etc. Modern devices and OSes phone home constantly. If you have VPN all your traffic will go through a single server (unless you configure split tunneling to use VPN only for certain sites) and that's easily detectable.

There also databases of known VPN IP addresses, and if you set up your own then analyzing hardware/software will still know see that you are communicating with a rented server in cloud and will flag you as suspicious.

[-] Korhaka@sopuli.xyz 2 points 3 months ago

At this point it sounds easier to rsync our porn collections with each other..

[-] floofloof@lemmy.ca 2 points 3 months ago* (last edited 3 months ago)

Some P2P routing solution seems to be needed, along the lines of Tor or i2p but disguising its traffic. But no doubt they'll be after any P2P communications next.

[-] floofloof@lemmy.ca 5 points 3 months ago

Presumably they'd learn the IP addresses the VPN providers are using and watch for connections to those.

[-] Flax_vert@feddit.uk 4 points 3 months ago

China manages to figure it out using deep packet inspection.

Funnily enough, they don't fully ban them. Just randomly cut them off to inconvenience the user.

[-] Blackmist@feddit.uk 3 points 3 months ago

Most of them do that too a degree anyway. Credit cards are only available to over 18s, so if you pay with one of those, that's your ID. I guess this is mostly for free VPNs (although I've never found one that was any good) and people paying with debit cards or crypto.

[-] Korhaka@sopuli.xyz 4 points 3 months ago

A lot of people in the UK don't have credit cards. Debit cards are fine and kids have those too. Dont Mullvad accept cash?

[-] danielquinn@lemmy.ca 11 points 3 months ago

I will never get used to the comfort Britons appear to have with surveillance. I guess it's time to set up a Wireguard instance of my own in the Netherlands to proxy everything through.

[-] Korhaka@sopuli.xyz 4 points 3 months ago

It's not like we have a choice

[-] FishFace@piefed.social 1 points 3 months ago

But id cards, which might actually be useful, are unthinkable!

[-] Paddzr@lemmy.world 1 points 3 months ago

Are they tho? anti ULEZ was driven hard due to cameras invading privacy. At least in the circles I've seen.

[-] Infernal_pizza@lemmy.dbzer0.com 11 points 3 months ago* (last edited 3 months ago)

Isn't this part of the same amendment that will make government spyware mandatory on all devices? So does that mean that part passed as well? VPNs are not the most concerning part here yet that's the only bit that seems to be getting reported

page 20

The “CSAM requirement” is that any relevant device supplied for use in the UK must have installed tamper-proof system software which is highly effective at preventing the recording, transmitting (by any means, including livestreaming) and viewing of CSAM using that device

So that means mandatory spyware and effectively makes alternative OS's/unlocked bootloaders illegal

[-] floofloof@lemmy.ca 9 points 3 months ago* (last edited 3 months ago)

Are Linux, BSD, etc. about to become illegal in the UK? Good luck with that. It certainly seems to make GrapheneOS and all other privacy-preserving phone OSs illegal.

[-] Korhaka@sopuli.xyz 2 points 3 months ago

I wonder if we can get around that. Tamper proof in software? So device comes with Windows and you can't uninstall their crap It's tamper proof! But you can just remove Windows.

[-] homesweethomeMrL@lemmy.world 7 points 3 months ago

Goddamn, UK.

this post was submitted on 22 Jan 2026

60 points (100.0% liked)

United Kingdom

6665 readers

178 users here now

General community for news/discussion in the UK.

Less serious posts should go in !casualuk@feddit.uk or !andfinally@feddit.uk
More serious politics should go in !uk_politics@feddit.uk.

Try not to spam the same link to multiple feddit.uk communities.
Pick the most appropriate, and put it there.

Posts should be related to UK-centric news, and should be either a link to a reputable source, or a text post on this community.

Opinion pieces are also allowed, provided they are not misleading/misrepresented/drivel, and have proper sources.

If you think "reputable news source" needs some definition, by all means start a meta thread.

Posts should be manually submitted, not by bot. Link titles should not be editorialised.

Disappointing comments will generally be left to fester in ratio, outright horrible comments will be removed.
Message the mods if you feel something really should be removed, or if a user seems to have a pattern of awful comments.

founded 2 years ago

MODERATORS

tom@feddit.uk

GreatAlbatross@feddit.uk

frankPodmore@slrpnk.net