Ended up choosing an SSH SOCKS proxy + Tunnelblick because it had the fewest moving parts. Combined with a passwordless SSH key, I saw this status on Facebook today: Kyle is truly a computer wizard! as in, his Tunnelblick thingy is working! Location? China. Success.