351–360 of 378 posts
Earlier quoted context omitted.
I'm not a West Hater by any means, but I'd say the war started when the US and the UK engineered a coup in Iran because Iran nationalized their oil industry (after the British oil company running it refused to be audited or to renegotiate terms). https://en.wikipedia.org/wiki/1953_Iranian_coup_d'%C3%A9tat
Whereas I'd say the problem was forced nationalisation.
Earlier quoted context omitted.
I've been thinking about this lately, and it seems that you could use something like a book code. Client and server use existing internet accessible images as the book and then your communication simply references bytes in those images: client requests a URL that encodes the bytes it wants to send, server returns HTML containing the urls of images containing the bytes it wants to send in response (and any extra conte…
Just pass a DVD with white noise when you meet in person. That should keep you in one time pads as long as you want to communicate with someone. All you need is XOR and a bookmark. Of course you need to meet once , if that's not feasible you're going to get more technical.
s/cat pictures/whatever you want/
Earlier quoted context omitted.
Part of me hopes you are right, because I don't like seeing Chrome/Google throw it's muscle around. Part of me hopes you are wrong, because I think encryption and security don't need to be opposing forces and MITM isn't required for strong security (though maybe for good GRC and audit).
Key pinning you can't override locally is DRM.
Here is the text of what was there.
ENG ALMATY
Press center Company News Internet news TV News Publishing Video Archive Photo archives Operators Main page Press center Company News Kazakhtelecom JSC notifies on introduction of National security certificate from 1 January 2016 Kazakhtelecom JSC notifies on introduction of National security certificate from 1 January 2016 From 1 January 2016 pursuant to the Law of the Republic of Kazakhstan «On communication» Committee on Communication, Informatization and Information, Ministry for investments and development of the Republic of Kazakhstan introduces the national security certificate for Internet users.
According to the Law telecom operators are obliged to perform traffic pass with using protocols, that support coding using security certificate, except traffic, coded by means of cryptographic information protection on the territory of the Republic of Kazakhstan.
The national security certificate will secure protection of Kazakhstan users when using coded access protocols to foreign Internet resources.
By words of Nurlan Meirmanov, Managing director on innovations of Kazakhtelecom JSC, Internet users shall install national security certificate, which will be available through Kazakhtelecom JSC internet resources. «User shall enter the site www.telecom.kz and install this certificate following step by step installation instructions”- underlined N.Meirmanov.
Kazakhtelecom JSC pays special attention that installation of security certificate can be performed from each device of a subscriber, from which Internet access will be performed (mobile telephones and tabs on base of iOS/Android, PC and notebooks on base of Windows/MacOS).
Detailed instructions for installation of security certificate will be placed in December 2015 on site www.telecom.kz.
PR department Kazakhtelecom JSC
30.11.2015
Academy of Public Administration under the President of the Republic of Kazakhstan
Official site of the President of the Republic of Kazakhstan
Информационно-аналитический портал Write to us FAQ Site map Report an error Career with Us Procurement Аукционы Reference book Help © 2010-2015, АО «Қазақтелеком»
Earlier quoted context omitted.
What do you do? You immediately reach out to Apple, Google, Facebook, Twitter, Box, Dropbox, Tumblr, and any other popular platform which has mobile apps. You ask, or down-right demand they implement certificate pinning in their apps so they will fail when middled with the government provided certificate. This will in turn break access to those platforms via mobile apps which will result in very real and direct impac…
Down-right demand? With what authority? It sounds like you're confusing these corporations for governments, as if they had to enforce your human rights..
Earlier quoted context omitted.
You are confused. This is exactly what pinning defends against.
Sorry, no: Chrome does not perform pin validation when the certificate chain chains up to a private trust anchor. A key result of this policy is that private trust anchors can be used to proxy (or MITM) connections, even to pinned sites. -- https://www.chromium.org/Home/chromium-security/security-faq...
Link is 404'd Here is the text of what was there. ENG ALMATY Press center Company News Internet news TV News Publishing Video Archive Photo archives Operators Main page Press center Company News Kazakhtelecom JSC notifies on introduction of National security certificate from 1 January 2016 Kazakhtelecom JSC notifies on introduction of National security certificate from 1 January 2016 From 1 January 2016 pursuant to t…
Earlier quoted context omitted.
It is already par for the course in the enterprise world (both public and private sector), for difficult to deny political/economic reasons.
Which is quite another thing, after all you are using somebody else network, just as you have every right to hear Adeles new album in your home, but not in mine. Besides these days you can use your own phone and mobile data, at which point you should be safe.
Earlier quoted context omitted.
I'm not a West Hater by any means, but I'd say the war started when the US and the UK engineered a coup in Iran because Iran nationalized their oil industry (after the British oil company running it refused to be audited or to renegotiate terms). https://en.wikipedia.org/wiki/1953_Iranian_coup_d'%C3%A9tat
Whereas I'd say the problem was forced nationalisation.