{"id":95680,"date":"2025-12-31T00:12:32","date_gmt":"2025-12-30T23:12:32","guid":{"rendered":"https:\/\/www.infokuryr.cz\/n\/?p=95680"},"modified":"2025-12-30T12:50:24","modified_gmt":"2025-12-30T11:50:24","slug":"z-madisonu-do-moskvy-jak-funguji-vpn-a-proc-je-vlady-navzdory-vsem-pokusum-nemohou-zastavit","status":"publish","type":"post","link":"https:\/\/www.infokuryr.cz\/n\/2025\/12\/31\/z-madisonu-do-moskvy-jak-funguji-vpn-a-proc-je-vlady-navzdory-vsem-pokusum-nemohou-zastavit\/","title":{"rendered":"Z Madisonu do Moskvy: Jak funguj\u00ed VPN a pro\u010d je vl\u00e1dy (navzdory v\u0161em pokus\u016fm) nemohou zastavit"},"content":{"rendered":"
<\/div>\n
\n
\n

Vl\u00e1dy se opakovan\u011b sna\u017e\u00ed zablokovat internet, jen aby zjistily, \u017ee jim nikdy nepat\u0159il.<\/span><\/strong><\/p>\n

Jasn\u011b modr\u00fd \u0161t\u00edt slo\u017een\u00fd z propojen\u00fdch uzl\u016f a polygon\u00e1ln\u00edch \u010dar, um\u00edst\u011bn\u00fd nad soust\u0159edn\u00fdmi digit\u00e1ln\u00edmi obvody a plynul\u00fdmi s\u00ed\u0165ov\u00fdmi linkami na tmav\u011b modr\u00e9m pozad\u00ed, symbolizuj\u00edc\u00ed kybernetickou bezpe\u010dnost a ochranu dat.\u2003<\/span><\/p>\n

N\u011bkde v Madisonu se jeden z\u00e1konod\u00e1rce d\u00edv\u00e1 na symbol Wi-Fi, jako by to byly hieroglyfy. U jednac\u00edho stolu ostatn\u00ed z\u00e1konod\u00e1rci souhlasn\u011b p\u0159ikyvuj\u00ed a p\u0159edst\u00edraj\u00ed, \u017ee rozum\u00ed.<\/span><\/p>\n

Probl\u00e9m, \u0159\u00edkaj\u00ed, nen\u00ed v tom, \u017ee by jejich z\u00e1kon o ov\u011b\u0159ov\u00e1n\u00ed v\u011bku byl absurdn\u00ed. Probl\u00e9m je v tom, \u017ee lid\u00e9 k jeho obch\u00e1zen\u00ed pou\u017e\u00edvaj\u00ed virtu\u00e1ln\u00ed priv\u00e1tn\u00ed s\u00edt\u011b. \u0158e\u0161en\u00ed: z\u00e1kaz VPN.<\/span><\/p>\n

Ano, to je skute\u010dn\u00e9.<\/span><\/p>\n

N\u00e1vrh z\u00e1kona AB 105\/SB 130 je nejnov\u011bj\u0161\u00edm p\u0159\u00edsp\u011bvkem Wisconsinu do jeho st\u00e1le rostouc\u00edho katalogu legislativn\u00edho \u0161a\u0161kov\u00e1n\u00ed. N\u00e1vrh z\u00e1kona vy\u017eaduje, aby v\u0161echny webov\u00e9 str\u00e1nky nab\u00edzej\u00edc\u00ed materi\u00e1ly, kter\u00e9 by mohly b\u00fdt \u201e\u0161kodliv\u00e9 pro nezletil\u00e9\u201c, musely ov\u011b\u0159it v\u011bk ka\u017ed\u00e9ho u\u017eivatele a zablokovat ka\u017ed\u00e9ho, kdo se p\u0159ipoj\u00ed p\u0159es VPN.<\/span><\/p>\n

Abychom pochopili, jak m\u00e1lo se tomuto z\u00e1konu v\u011bnovalo pozornost, sta\u010d\u00ed se pod\u00edvat na to, co od webov\u00fdch str\u00e1nek vy\u017eaduje: blokovat \u201eu\u017eivatele VPN z Wisconsinu\u201c. Lid\u00e9, kte\u0159\u00ed tento z\u00e1kon napsali, si neuv\u011bdomuj\u00ed, \u017ee VPN ze sv\u00e9 podstaty maskuje p\u016fvod internetov\u00e9ho provozu.<\/span><\/p>\n

Neexistuje \u017e\u00e1dn\u00fd technick\u00fd zp\u016fsob, jak splnit po\u017eadavky z\u00e1kona. To ale nezastavilo z\u00e1konod\u00e1rce, kte\u0159\u00ed v\u011b\u0159\u00ed, \u017ee routery jsou poh\u00e1n\u011bny v\u00edl\u00edm prachem.<\/span><\/p>\n

Kdykoli n\u011bjak\u00fd z\u00e1kon zn\u00ed takto bezohledn\u011b, m\u016f\u017eete se vsadit, \u017ee se prod\u00e1v\u00e1 jako ochrana d\u011bt\u00ed. Je to \u0161ikovn\u00fd \u0161t\u00edt. Formulace se roz\u0161i\u0159uje o \u201e\u0161kodliv\u00e9 pro nezletil\u00e9\u201c a zahrnuje cokoli, co se by\u0165 jen zmi\u0148uje o sexu, anatomii nebo reprodukci. V praxi to zahrnuje u\u010debnice biologie, um\u011bn\u00ed, literaturu a v\u011bt\u0161inu popul\u00e1rn\u00ed kultury.<\/span><\/p>\n

Probl\u00e9m nen\u00ed v bezpe\u010dnosti. Jde o cenzuru s p\u0159\u00e1telskou tv\u00e1\u0159\u00ed. Jakmile st\u00e1t za\u010dne definovat, co je \u201e\u0161kodliv\u00e9\u201c, v\u0161echno se stane ter\u010dem. A ve Wisconsinu je tato definice tak roz\u0161\u00ed\u0159en\u00e1, \u017ee by se j\u00ed dalo projet datov\u00fdm centrem.<\/span><\/p>\n

Kdo je po\u0161kozen<\/span><\/strong><\/h3>\n

VPN nejsou pro hackery specializovan\u00fdmi n\u00e1stroji. Firmy se na n\u011b spol\u00e9haj\u00ed. \u0160koly je pot\u0159ebuj\u00ed. Novin\u00e1\u0159i, ob\u011bti dom\u00e1c\u00edho n\u00e1sil\u00ed a aktivist\u00e9 se na nich spol\u00e9haj\u00ed, pokud jde o jejich ochranu. Dokonce i University of Wisconsin-Madison ofici\u00e1ln\u011b poskytuje svou vlastn\u00ed VPN, aby studenti mohli bezpe\u010dn\u011b p\u0159istupovat k v\u00fdzkumn\u00fdm a studijn\u00edm materi\u00e1l\u016fm.<\/span><\/p>\n

Tak\u017ee kdy\u017e tito z\u00e1konod\u00e1rci mluv\u00ed o \u201ez\u00e1kazu VPN\u201c, mluv\u00ed o od\u0159\u00edznut\u00ed podnik\u016f, student\u016f a zraniteln\u00fdch osob od z\u00e1kladn\u00edch n\u00e1stroj\u016f, kter\u00e9 pot\u0159ebuj\u00ed k pr\u00e1ci a p\u0159e\u017eit\u00ed. Je to digit\u00e1ln\u00ed sebevra\u017eda historick\u00fdch rozm\u011br\u016f.<\/span><\/p>\n

A samoz\u0159ejm\u011b ka\u017ed\u00fd, kdo se rozhodne toto omezen\u00ed obej\u00edt, tak u\u010din\u00ed. Otev\u0159en\u00e9 proxy, levn\u00e9 servery, nov\u00e9 tunely \u2013 internet obch\u00e1z\u00ed nesmysly rychleji, ne\u017e politik m\u011bn\u00ed sv\u00e1 t\u00e9mata.<\/span><\/p>\n

Toto se stane, kdy\u017e VPN zkrachuj\u00ed: Ka\u017ed\u00fd u\u017eivatel mus\u00ed p\u0159edlo\u017eit ofici\u00e1ln\u00ed pr\u016fkaz toto\u017enosti nebo kreditn\u00ed kartu, aby prok\u00e1zal sv\u016fj v\u011bk. Tato data pak skon\u010d\u00ed u poskytovatel\u016f t\u0159et\u00edch stran, kte\u0159\u00ed by nedok\u00e1zali ochr\u00e1nit ani sendvi\u010d, nato\u017e osobn\u00ed \u00fadaje. Pokud \u2013 a ne v p\u0159\u00edpad\u011b \u2013 dojde k \u00faniku datab\u00e1ze, va\u0161e jm\u00e9no a historie prohl\u00ed\u017een\u00ed budou nav\u017edy uzam\u010deny v tabulce.<\/span><\/p>\n

Ti sam\u00ed z\u00e1konod\u00e1rci, kte\u0159\u00ed postavili tento sledovac\u00ed stroj, budou p\u0159edst\u00edrat \u0161ok, a\u017e exploduje.<\/span><\/p>\n

Michigan se o tento trik pokusil. Spojen\u00e9 kr\u00e1lovstv\u00ed si jen muml\u00e1, \u017ee ud\u011bl\u00e1 tot\u00e9\u017e. \u0160\u00ed\u0159\u00ed se to jako \u0161patn\u00fd n\u00e1pad podpo\u0159en\u00fd lobbistick\u00fdmi pen\u011bzi. Poselstv\u00ed je jasn\u00e9: pokud n\u00e1stroje na ochranu soukrom\u00ed zt\u011b\u017euj\u00ed vym\u00e1h\u00e1n\u00ed \u0161patn\u00fdch z\u00e1kon\u016f, pak probl\u00e9m mus\u00ed b\u00fdt v t\u011bchto n\u00e1stroj\u00edch.<\/span><\/p>\n

Ironi\u00ed je dokonal\u00e1. Lid\u00e9 za\u010dali pou\u017e\u00edvat VPN, aby se chr\u00e1nili p\u0159ed sledov\u00e1n\u00edm. Z\u00e1konod\u00e1rci si toho v\u0161imli a rozhodli se, \u017ee skute\u010dnou hrozbou je soukrom\u00ed. Je to jako zak\u00e1zat de\u0161tn\u00edky, proto\u017ee v\u00e1s nebav\u00ed, \u017ee lid\u00e9 z\u016fst\u00e1vaj\u00ed v suchu.<\/span><\/p>\n

Pokud Wisconsin toto skute\u010dn\u011b schv\u00e1l\u00ed, nebude to fungovat. Pouze to sn\u00ed\u017e\u00ed bezpe\u010dnost webu, zn\u00ed\u017e\u00ed jeho soukrom\u00ed a zn\u00ed\u017e\u00ed jeho funk\u010dnost pro v\u0161echny ostatn\u00ed. Z\u00e1visl\u00ed na pornografii nebudou trp\u011bt. Firmy, studenti a novin\u00e1\u0159i ano.<\/span><\/p>\n

Kdy\u017e se vl\u00e1dy sna\u017e\u00ed mikrospravovat internet, internet se tomu sm\u011bje. Ale u\u017eivatel\u00e9 za to plat\u00ed. Z\u00e1kazy VPN nechr\u00e1n\u00ed d\u011bti. Chr\u00e1n\u00ed nev\u011bdomost.<\/span><\/p>\n

Pokud \u017eijete ve Wisconsinu, zavolejte sv\u00e9mu sen\u00e1torovi. \u0158ekn\u011bte mu, \u017ee by se va\u0161e vl\u00e1da m\u011bla nau\u010dit, jak funguje VPN, ne\u017e za\u010dne zakazovat internet.<\/span><\/p>\n

Pokud se v\u00e1m pl\u00e1n va\u0161eho st\u00e1tu na z\u00e1kaz VPN zd\u00e1 b\u00fdt ji\u017e tak pomaten\u00fd, po\u010dkejte si, a\u017e uvid\u00edte, jak se o tohle cel\u00e9 roky sna\u017e\u00ed \u201eseri\u00f3zn\u00ed\u201c vl\u00e1dy cel\u00e9ho sv\u011bta. Ka\u017ed\u00fd cenzor na planet\u011b nakonec naraz\u00ed na stejn\u00fd probl\u00e9m.<\/span><\/p>\n

Mohou schvalovat tolik z\u00e1kon\u016f, kolik cht\u011bj\u00ed, ale v cest\u011b jim stoj\u00ed fyzika a matematika.<\/span><\/p>\n

Blokov\u00e1n\u00ed zn\u00e1m\u00fdch rozsah\u016f IP adres VPN<\/span><\/strong><\/h3>\n

Prvn\u00ed trik v autorit\u00e1\u0159sk\u00e9m syst\u00e9mu je jednoduch\u00fd. Vl\u00e1dy na\u0159izuj\u00ed poskytovatel\u016fm internetu, aby blokovali jakoukoli IP adresu pat\u0159\u00edc\u00ed komer\u010dn\u00ed VPN. Je to digit\u00e1ln\u00ed \u00fatok na krtka.<\/span><\/p>\n

VPN spole\u010dnosti mohou m\u011bnit servery rychleji, ne\u017e vl\u00e1dy stihnou vytv\u00e1\u0159et nov\u00e9 \u010dern\u00e9 listiny. Mohou si pronaj\u00edmat nov\u00e9 IP adresy, kombinovat lokality a prezentovat se jako b\u011b\u017en\u00fd reziden\u010dn\u00ed provoz, tedy jako jak\u00e9koli dom\u00e1c\u00ed p\u0159ipojen\u00ed.<\/span><\/p>\n

\u010cern\u00e9 listiny se stanou b\u011bhem n\u011bkolika dn\u00ed k ni\u010demu.<\/span><\/p>\n

Ti, co z\u016fstali, nejsou zlo\u010dinci. Jsou to \u00fa\u010detn\u00ed, kte\u0159\u00ed se sna\u017e\u00ed z\u00edskat p\u0159\u00edstup k firemn\u00ed s\u00edti ze sv\u00fdch hotelov\u00fdch pokoj\u016f.<\/span><\/p>\n

Hloubkov\u00e1 inspekce paket\u016f: Luxusn\u00ed n\u00e1zev pro \u0161pion\u00e1\u017e<\/span><\/strong><\/h3>\n

Pak je tu Deep Packet Inspection, neboli DPI, kter\u00e1 zn\u00ed dostate\u010dn\u011b technicky, aby zap\u016fsobila i na sen\u00e1tora. C\u00edlem je analyzovat internetov\u00fd provoz a detekovat varovn\u00e9 sign\u00e1ly VPN protokol\u016f, jako je OpenVPN nebo WireGuard. Je to n\u00e1stroj preferovan\u00fd cenzory v zem\u00edch, jako je \u010c\u00edna, kde je ka\u017ed\u00fd paket pova\u017eov\u00e1n za potenci\u00e1ln\u00ed my\u0161lenkov\u00fd zlo\u010din.<\/span><\/p>\n

Probl\u00e9m: V\u00fdvoj\u00e1\u0159i VPN nejsou hloup\u00ed. Maskuj\u00ed provoz tak, aby vypadal jako norm\u00e1ln\u00ed prohl\u00ed\u017een\u00ed webu. N\u011bkte\u0159\u00ed se schov\u00e1vaj\u00ed v tunelech HTTPS nebo WebSocket. Jin\u00ed pou\u017e\u00edvaj\u00ed nen\u00e1padn\u00e9 re\u017eimy, kter\u00e9 n\u00e1hodn\u011b m\u011bn\u00ed metadata. DPI se st\u00e1v\u00e1 nekone\u010dnou hrou na ko\u010dku a my\u0161, kde my\u0161 neust\u00e1le vym\u00fd\u0161l\u00ed nov\u00e9 p\u0159evleky.<\/span><\/p>\n

Je to divadlo s dohledem a publikum za to plat\u00ed.<\/span><\/p>\n

Kriminalizace VPN: Hran\u00ed si se strachem<\/span><\/strong><\/h3>\n

Kdy\u017e sel\u017ee technologie, n\u00e1sleduje zastra\u0161ov\u00e1n\u00ed. Vl\u00e1dy schvaluj\u00ed z\u00e1kony kriminalizuj\u00edc\u00ed neopr\u00e1vn\u011bn\u00e9 pou\u017e\u00edv\u00e1n\u00ed VPN v nad\u011bji, \u017ee strach dos\u00e1hne toho, \u010deho k\u00f3d nedos\u00e1hne. Vytv\u00e1\u0159\u00ed titulky v m\u00e9di\u00edch, zat\u00fdk\u00e1 p\u00e1r ne\u0161\u0165astn\u00fdch jedinc\u016f a v\u0161echny ostatn\u00ed zah\u00e1n\u00ed do ilegality.<\/span><\/p>\n

Ale i tehdy s\u00edt\u011b p\u0159e\u017e\u00edvaj\u00ed. U\u017eivatel\u00e9 si z\u0159izuj\u00ed soukrom\u00e9 servery, \u0161ifruj\u00ed provoz, aby vypadal oby\u010dejn\u011b, nebo p\u0159ech\u00e1zej\u00ed na ve\u0159ejn\u00e9 Wi-Fi, aby zahladili stopy. Kriminalizace pouze \u017eene pou\u017e\u00edv\u00e1n\u00ed VPN hloub\u011bji do st\u00ednu, kde se st\u00e1v\u00e1 obt\u00ed\u017en\u011bj\u0161\u00edm sledovateln\u00fdm a odoln\u011bj\u0161\u00edm v\u016f\u010di dohledu.<\/span><\/p>\n

Jin\u00fdmi slovy, je to jako zak\u00e1zat z\u00e1mky, proto\u017ee by je mohli pou\u017e\u00edt zlo\u010dinci.<\/span><\/p>\n

Licen\u010dn\u00ed past<\/span><\/strong><\/h3>\n

Dal\u0161\u00edm obl\u00edben\u00fdm je model registrace. Ob\u010dan\u00e9 mus\u00ed po\u017e\u00e1dat o povolen\u00ed k pou\u017e\u00edv\u00e1n\u00ed VPN a firmy se mus\u00ed zaregistrovat u vl\u00e1dy. Je to digit\u00e1ln\u00ed ekvivalent Hall Passu, ne\u017e si budete moci zabezpe\u010dit sv\u00e1 vlastn\u00ed data.<\/span><\/p>\n

Poskytovatel\u00e9, kte\u0159\u00ed dodr\u017euj\u00ed p\u0159edpisy, jsou nuceni st\u00e1t se monitorovac\u00edmi partnery, povinni ukl\u00e1dat protokoly o pou\u017e\u00edv\u00e1n\u00ed a p\u0159ed\u00e1vat je ka\u017ed\u00e9mu, kdo si o n\u011b po\u017e\u00e1d\u00e1. Skute\u010dn\u00e9 n\u00e1stroje pro ochranu soukrom\u00ed se v\u0161ak jednodu\u0161e p\u0159esouvaj\u00ed do zahrani\u010d\u00ed. U\u017eivatel\u00e9 se obracej\u00ed na zahrani\u010dn\u00ed nebo samohostovan\u00e9 servery, kter\u00e9 nejsou nikomu odpov\u011bdn\u00e9.<\/span><\/p>\n

V\u0161echny tyto licen\u010dn\u00ed modely dosahuj\u00ed toho, \u017ee se z ob\u010dan\u016f dodr\u017euj\u00edc\u00edch z\u00e1kony st\u00e1vaj\u00ed datov\u00e9 body.<\/span><\/p>\n

Blokov\u00e1n\u00ed webov\u00fdch str\u00e1nek a aplikac\u00ed VPN<\/span><\/strong><\/h3>\n

Kdy\u017e v\u0161echno ostatn\u00ed sel\u017ee, \u00fa\u0159ady se zam\u011b\u0159\u00ed na distribuci. Blokuj\u00ed p\u0159\u00edstup k web\u016fm VPN nebo je odstra\u0148uj\u00ed z obchod\u016f s aplikacemi. My\u0161lenkou je v prvn\u00ed \u0159ad\u011b zabr\u00e1nit u\u017eivatel\u016fm ve sta\u017een\u00ed t\u011bchto n\u00e1stroj\u016f.<\/span><\/p>\n

V\u00fdsledkem je m\u00edrn\u00e1 nep\u0159\u00edjemnost. U\u017eivatel\u00e9 stahuj\u00ed aplikace z internetu, pou\u017e\u00edvaj\u00ed mirrory nebo si stahuj\u00ed instala\u010dn\u00ed soubory z GitHubu \u010di e-mailem. N\u011bkte\u0159\u00ed dokonce pou\u017e\u00edvaj\u00ed Tor ke stahov\u00e1n\u00ed VPN, kter\u00e9 cht\u011bly vl\u00e1dy zav\u0159\u00edt. Za ka\u017ed\u00e9 zav\u0159en\u00e9 dve\u0159e se objev\u00ed deset nov\u00fdch.<\/span><\/p>\n

Povinnosti protokolov\u00e1n\u00ed<\/span><\/strong><\/h3>\n

N\u011bkter\u00e9 vl\u00e1dy vol\u00ed rafinovan\u011bj\u0161\u00ed p\u0159\u00edstup a nut\u00ed poskytovatele internetov\u00fdch slu\u017eeb zaznamen\u00e1vat metadata o \u0161ifrovan\u00e9m provozu. Blokuj\u00ed tak\u00e9 \u0161ifrovan\u00fd SNI, webovou funkci, kter\u00e1 skr\u00fdv\u00e1, kter\u00e9 webov\u00e9 str\u00e1nky u\u017eivatel nav\u0161t\u011bvuje. Je to zp\u016fsob sledov\u00e1n\u00ed bez p\u0159\u00edm\u00e9ho z\u00e1kazu.<\/span><\/p>\n

\u0160ifrov\u00e1n\u00ed se ale nestar\u00e1 o mand\u00e1ty. V\u00fdvoj\u00e1\u0159i implementuj\u00ed \u0161ifrovan\u00e9 DNS dotazy a dom\u00e9nov\u00e9 fronty, aby zakryli c\u00edle. Otisky prst\u016f se neust\u00e1le m\u011bn\u00ed, co\u017e trackery opakovan\u011b \u010din\u00ed nepou\u017eiteln\u00fdmi. \u010c\u00edm v\u00edce vl\u00e1da sleduje, t\u00edm m\u00e9n\u011b vid\u00ed.<\/span><\/p>\n

C\u00edlen\u00ed na obchody s aplikacemi a platby<\/span><\/strong><\/h3>\n

A kone\u010dn\u011b je tu je\u0161t\u011b vliv korporac\u00ed. Pokud se p\u0159\u00edm\u00e1 cenzura stane chaotickou, vl\u00e1dy budou tla\u010dit na Apple, Google a poskytovatele platebn\u00edch slu\u017eeb, aby odstranili VPN aplikace nebo zmrazili sv\u00e9 platby.<\/span><\/p>\n

Toto bude fungovat, dokud u\u017eivatel\u00e9 neza\u010dnou platit kryptom\u011bnami, pou\u017e\u00edvat alternativn\u00ed repozit\u00e1\u0159e nebo sd\u00edlet aplikace p\u0159\u00edmo. Tato politika penalizuje pohodl\u00ed, nikoli soukrom\u00ed. Lid\u00e9, kte\u0159\u00ed v\u011bd\u00ed, co d\u011blaj\u00ed, si v\u017edycky najdou zp\u016fsob.<\/span><\/p>\n

Pokud vl\u00e1dy skute\u010dn\u011b uvedou svou fantazii o z\u00e1kazu VPN do praxe, mohou o\u010dek\u00e1vat technologick\u00fd hon, kter\u00fd nemohou vyhr\u00e1t. Spole\u010dnosti stoj\u00edc\u00ed za t\u011bmito n\u00e1stroji nejsou jen n\u011bjak\u00e9 d\u00edt\u011b ve sklep\u011b s n\u00e1hradn\u00edm notebookem. Jsou to s\u00edt\u011b in\u017een\u00fdr\u016f, kryptograf\u016f a fanatik\u016f do soukrom\u00ed, kte\u0159\u00ed berou cenzuru jako h\u00e1danku, kterou je t\u0159eba vy\u0159e\u0161it.<\/span><\/p>\n

Pro ka\u017ed\u00fd nov\u00fd firewall postav\u00ed \u017eeb\u0159\u00edk. Pro ka\u017edou \u010dernou listinu vymysl\u00ed p\u0159estrojen\u00ed. Nen\u00ed to f\u00e9rov\u00fd boj.<\/span><\/p>\n

Existuj\u00ed v\u0161ak zp\u016fsoby, jak se lid\u00e9 a VPN spole\u010dnosti mohou br\u00e1nit.<\/span><\/p>\n

Rotace IP adres a reziden\u010dn\u00ed IP pooly<\/span><\/strong><\/h3>\n

Prvn\u00edm krokem je splynout s davem. VPN slu\u017eby neust\u00e1le aktualizuj\u00ed sv\u00e9 IP adresy a nakupuj\u00ed p\u0159\u00edstup k reziden\u010dn\u00edm IP fond\u016fm, kter\u00e9 vypadaj\u00ed jako b\u011b\u017en\u00e9 dom\u00e1c\u00ed internetov\u00e9 p\u0159ipojen\u00ed. Pro vl\u00e1dn\u00ed filtr tento provoz vypad\u00e1 jako babi\u010dka kontroluj\u00edc\u00ed si e-maily nebo teenager sleduj\u00edc\u00ed YouTube.<\/span><\/p>\n

Ne\u017e cenzor aktualizuje \u010dernou listinu, VPN u\u017e bude d\u00e1vno pry\u010d. Jej\u00ed blokov\u00e1n\u00ed bude jako honit st\u00edny ko\u0161t\u011btem.<\/span><\/p>\n

Pokro\u010dil\u00e9 technologie obfuskace<\/span><\/strong><\/h3>\n

V\u00fdvoj\u00e1\u0159i VPN zvl\u00e1dli um\u011bn\u00ed maskov\u00e1n\u00ed. Pou\u017e\u00edvaj\u00ed re\u017eimy zaml\u017eov\u00e1n\u00ed, d\u00edky nim\u017e \u0161ifrovan\u00fd provoz vypad\u00e1 jako norm\u00e1ln\u00ed provoz HTTPS nebo WebSocket. N\u011bkter\u00e9 napodobuj\u00ed hlasov\u00fd provoz, jin\u00e9 p\u0159edst\u00edraj\u00ed n\u00e1hodn\u00fd \u0161um na pozad\u00ed.<\/span><\/p>\n

Tyto techniky vych\u00e1zej\u00ed z principu s\u00edt\u011b Tor, p\u016fvodn\u00ed anonymiza\u010dn\u00ed s\u00edt\u011b, kter\u00e1 po cel\u00e1 desetilet\u00ed p\u0159e\u017eila vl\u00e1dn\u00ed dohled. Vl\u00e1dy dok\u00e1\u017e\u00ed detekovat b\u011b\u017en\u00e9 VPN podpisy, ale ne to, co vypad\u00e1 jako b\u011b\u017en\u00e9 prohl\u00ed\u017een\u00ed. Ka\u017ed\u00fd paket se st\u00e1v\u00e1 n\u00e1vnadou.<\/span><\/p>\n

Tunely na jin\u00fdch \u00farovn\u00edch<\/span><\/strong><\/h3>\n

Kdy\u017e se vl\u00e1dn\u00ed firewall stane p\u0159\u00edli\u0161 ru\u0161iv\u00fdm, VPN se za\u010dnou zapouzd\u0159ovat do jin\u00fdch protokol\u016f. Skr\u00fdvaj\u00ed se v p\u0159ipojen\u00edch TLS, QUIC nebo HTTP\/2, kter\u00e9 ji\u017e miliony webov\u00fdch str\u00e1nek pou\u017e\u00edvaj\u00ed. Blokov\u00e1n\u00ed takov\u00e9ho provozu by ochromilo cel\u00fd web.<\/span><\/p>\n

Kr\u00e1sa t\u00e9to metody spo\u010d\u00edv\u00e1 v jej\u00ed jednoduchosti. D\u00edky propojen\u00ed s p\u00e1te\u0159\u00ed internetu nut\u00ed VPN cenzory volit mezi \u00fapln\u00fdm dohledem a \u00fapln\u00fdm vypnut\u00edm.<\/span><\/p>\n

Mo\u017enosti vlastn\u00edho hostov\u00e1n\u00ed a decentralizovan\u00e9 VPN<\/span><\/strong><\/h3>\n

Mnoho spole\u010dnost\u00ed poskytuj\u00edc\u00edch VPN nyn\u00ed u\u017eivatel\u016fm poskytuje n\u00e1stroje pro provozov\u00e1n\u00ed vlastn\u00edch priv\u00e1tn\u00edch server\u016f. Sta\u010d\u00ed jen p\u00e1r kliknut\u00ed a kdokoli si m\u016f\u017ee nastavit osobn\u00ed VPN server u cloudov\u00e9ho poskytovatele nebo dokonce na sv\u00e9m dom\u00e1c\u00edm routeru. N\u011bkter\u00e9 experimentuj\u00ed s peer-to-peer s\u00edt\u011bmi, d\u00edky nim\u017e je ka\u017ed\u00fd u\u017eivatel sou\u010d\u00e1st\u00ed distribuovan\u00e9 mesh s\u00edt\u011b.<\/span><\/p>\n

Tyto syst\u00e9my je prakticky nemo\u017en\u00e9 zablokovat. Neexistuje \u017e\u00e1dn\u00fd centr\u00e1ln\u00ed uzel, \u017e\u00e1dn\u00e1 ve\u0159ejn\u00e1 IP adresa, kterou by bylo mo\u017en\u00e9 zablokovat, ani \u017e\u00e1dn\u00e1 autorita, na kterou by bylo mo\u017en\u00e9 vyv\u00edjet n\u00e1tlak. Ka\u017ed\u00e9 p\u0159ipojen\u00ed se st\u00e1v\u00e1 vlastn\u00edm mal\u00fdm ostr\u016fvkem soukrom\u00ed.<\/span><\/p>\n

V\u00edceskokov\u00e9 sm\u011brov\u00e1n\u00ed a z\u00e1lo\u017en\u00ed cesty<\/span><\/strong><\/h3>\n

Dal\u0161\u00edm krokem je redundance. VPN mohou sm\u011brovat provoz p\u0159es v\u00edce uzl\u016f, co\u017e umo\u017e\u0148uje p\u0159ipojen\u00edm proch\u00e1zet \u0159adou bod\u016f obfuskace na r\u016fzn\u00fdch kontinentech. Pokud jedna cesta sel\u017ee, software se automaticky p\u0159epne na jinou.<\/span><\/p>\n

Z pohledu u\u017eivatele se p\u0159ipojen\u00ed nikdy nep\u0159eru\u0161\u00ed. Z pohledu cenzora je provoz pouhou fantomem. Poka\u017ed\u00e9, kdy\u017e zav\u0159ou jedny dve\u0159e, VPN se objev\u00ed n\u011bkde jinde.<\/span><\/p>\n

Sm\u011brov\u00e1n\u00ed podobn\u00e9 dom\u00e9nov\u00e9mu frontingu<\/span><\/strong><\/h3>\n

Kdy\u017e se v\u011bci zhor\u0161\u00ed, VPN se uchyluj\u00ed k triku, kter\u00fd pou\u017e\u00edvaj\u00ed aktivist\u00e9 a novin\u00e1\u0159i v represivn\u00edch re\u017eimech: dom\u00e9nov\u00e9mu frontingu, kter\u00fd skr\u00fdv\u00e1 VPN provoz ve velk\u00fdch cloudov\u00fdch slu\u017eb\u00e1ch. Po\u017eadavek na VPN server vypad\u00e1 jako po\u017eadavek na Google nebo Amazon. Aby jej vl\u00e1da zablokovala, musela by ochromit polovinu internetov\u00e9ho \u00fast\u0159edny.<\/span><\/p>\n

Zem\u011b, kter\u00e9 se o to pokusily, se ocitly v situaci, kdy ne\u00famysln\u011b odpojily bankovn\u00ed syst\u00e9my, nemocnice a vl\u00e1dn\u00ed webov\u00e9 str\u00e1nky. Ukazuje se, \u017ee i autorit\u00e1\u0159sk\u00e9 st\u00e1ty pot\u0159ebuj\u00ed k fungov\u00e1n\u00ed cloudov\u00e9 slu\u017eby.<\/span><\/p>\n

Nen\u00e1padn\u00ed instal\u00e1to\u0159i a alternativn\u00ed distribu\u010dn\u00ed kan\u00e1ly<\/span><\/strong><\/h3>\n

Kdy\u017e se obchody s aplikacemi zpolitizuj\u00ed, VPN spole\u010dnosti p\u0159ech\u00e1zej\u00ed do ilegality. Instala\u010dn\u00ed bal\u00ed\u010dky vyd\u00e1vaj\u00ed prost\u0159ednictv\u00edm zrcadel GitHubu, \u0161ifrovan\u00fdch e-mail\u016f nebo dokonce offline m\u00e9di\u00ed. V extr\u00e9mn\u00edch p\u0159\u00edpadech maskuj\u00ed software jako n\u011bco \u00fapln\u011b jin\u00e9ho, \u200b\u200bnap\u0159\u00edklad program pro \u00fapravu fotografi\u00ed nebo s\u00ed\u0165ov\u00fd n\u00e1stroj.<\/span><\/p>\n

Tyto taktiky nejsou nov\u00e9. Aktivist\u00e9 v \u00cdr\u00e1nu, Rusku a \u010c\u00edn\u011b je pou\u017e\u00edvaj\u00ed ji\u017e l\u00e9ta k distribuci softwaru pod p\u0159\u00edsnou cenzurou. Poka\u017ed\u00e9, kdy\u017e vl\u00e1da uzav\u0159e jeden kan\u00e1l, objev\u00ed se jin\u00fd, provozovan\u00fd dobrovoln\u00edky, kte\u0159\u00ed se odm\u00edtaj\u00ed vzd\u00e1t p\u0159\u00edstupu k otev\u0159en\u00e9mu webu.<\/span><\/p>\n

Partnerstv\u00ed s komunitami zam\u011b\u0159en\u00fdmi na soukrom\u00ed<\/span><\/strong><\/h3>\n

Spole\u010dnosti VPN maj\u00ed tajnou zbra\u0148: komunity, kter\u00e9 si skute\u010dn\u011b cen\u00ed soukrom\u00ed. V\u00fdvoj\u00e1\u0159i open-source program\u016f provozuj\u00ed zrcadla, bridge servery a alternativn\u00ed p\u0159\u00edstupov\u00e9 body. Kdy\u017e se vl\u00e1dy pokus\u00ed izolovat u\u017eivatele VPN, tyto s\u00edt\u011b je nen\u00e1padn\u011b znovu p\u0159ipoj\u00ed.<\/span><\/p>\n

Je to jak\u00e1si infrastruktura odporu, vybudovan\u00e1 lidmi, kte\u0159\u00ed vn\u00edmaj\u00ed soukrom\u00ed jako ob\u010danskou povinnost, ne jako kon\u00ed\u010dek. Vl\u00e1dy maj\u00ed policii a pr\u00e1vn\u00edky. VPN maj\u00ed in\u017een\u00fdry, kte\u0159\u00ed nikdy nesp\u00ed.<\/span><\/p>\n

Decentralizovan\u00e9 platebn\u00ed metody<\/span><\/strong><\/h3>\n

I kdyby cenzo\u0159i zastavili tok pen\u011bz, VPN maj\u00ed z\u00e1lo\u017en\u00ed pl\u00e1ny. P\u0159ij\u00edmaj\u00ed kryptom\u011bny, p\u0159edplacen\u00e9 pouk\u00e1zky a dal\u0161\u00ed anonymn\u00ed platebn\u00ed metody, kter\u00e9 obch\u00e1zej\u00ed banky a obchody s aplikacemi. Jakmile mohou u\u017eivatel\u00e9 platit, ani\u017e by odhalili svou identitu, finan\u010dn\u00ed tlak ztr\u00e1c\u00ed smysl.<\/span><\/p>\n

V n\u011bkter\u00fdch regionech VPN distribuuj\u00ed aktiva\u010dn\u00ed k\u00f3dy prost\u0159ednictv\u00edm digit\u00e1ln\u00edch d\u00e1rkov\u00fdch karet a dar\u016f od komunity, \u010d\u00edm\u017e zcela obch\u00e1zej\u00ed tradi\u010dn\u00ed platebn\u00ed syst\u00e9my. Byznys pokra\u010duje, zat\u00edmco regula\u010dn\u00ed org\u00e1ny nad\u00e1le spekuluj\u00ed.<\/span><\/p>\n

Ka\u017ed\u00e1 vl\u00e1da, kter\u00e1 se sna\u017e\u00ed potla\u010dit VPN, poskytuje d\u016fkaz, pro\u010d je lid\u00e9 pot\u0159ebuj\u00ed. \u010c\u00edm tvrd\u0161\u00ed je z\u00e1sah, t\u00edm chyt\u0159ej\u0161\u00ed se n\u00e1stroje st\u00e1vaj\u00ed. Ka\u017ed\u00fd z\u00e1kaz vytv\u00e1\u0159\u00ed nov\u00e9 \u0159e\u0161en\u00ed, ka\u017ed\u00e9 omezen\u00ed nov\u00fd \u0159\u00e1dek k\u00f3du.<\/span><\/p>\n

VPN spole\u010dnosti u\u017e neprod\u00e1vaj\u00ed jen soukrom\u00ed. Buduj\u00ed paraleln\u00ed internet, kter\u00fd se nikoho nept\u00e1 na svolen\u00ed. A ne\u017e se cenzo\u0159i kone\u010dn\u011b pod\u00edvaj\u00ed od sv\u00fdch rozbit\u00fdch firewall\u016f, zbytek sv\u011bta se snad u\u017e d\u00e1vno posune d\u00e1l.<\/span><\/p>\n

Christina Maas<\/span><\/em><\/strong><\/p>\n<\/div>\n<\/div>\n

\n
\n

Zdroj<\/span><\/a><\/span><\/h3>\n

 <\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Vl\u00e1dy se opakovan\u011b sna\u017e\u00ed zablokovat internet, jen aby zjistily, \u017ee jim nikdy nepat\u0159il. Jasn\u011b modr\u00fd…<\/p>\n","protected":false},"author":2,"featured_media":95681,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[7],"tags":[63,647,2452,3815],"_links":{"self":[{"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/posts\/95680"}],"collection":[{"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/comments?post=95680"}],"version-history":[{"count":0,"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/posts\/95680\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/media\/95681"}],"wp:attachment":[{"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/media?parent=95680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/categories?post=95680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/tags?post=95680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}