Live data from Hacker News

The Great Cannon has been deployed again

cybersecurity.att.com

131–140 of 470 posts

Re: The Great Cannon has been deployed again

#131

> These attacks would not be successful if the following resources were served over HTTPS instead of HTTP: Can someone explain how using HTTPS would mitigate this attack?

HTTPS makes a MiTM attack much harder, because you need to have a valid cert for the host you are spoofing.

Re: The Great Cannon has been deployed again

#132
post #100
post #64

Earlier quoted context omitted.

[flagged]

[flagged]

So what if China isn't running death camps per se? The problem is that it's running something of the magnitude of Nazi Germany and getting away with it. No sane government would go 100% Nazi overnight, but if they see that being 50% Nazi is OK, then they might raise it to 75% etc. It's a game like all authoritarian politics. They're probing ground, and many other authoritarians around the world are looking at the result. This is why it's important that China gets called out for its atrocities, and called out hard.

Re: The Great Cannon has been deployed again

#133
post #117
post #64

Earlier quoted context omitted.

[flagged]

The real question is if anyone would've even cared about the atrocities of Nazi Germany if it wasn't in their national interest to go to war. The reason England and France got into the war is because of Germany's expansionist policies and not because of moral reasons at the time.

This. The Final Solution and the extermination camps only happened in 1942, after every major player already entered the war. Eugenics was reasonably popular at the time, so that wasn't a reason to go to war either, and while the concentration camps were immoral and at the start of the war they were comparatively humane and not much out of line with what was deemed acceptable at the time (US internment of Japanese, Russian labor camps and the current ICE camps come to mind). The conditions drastically worsened as the camps filled up, but by that time Europe was already at war.

What Hitler did was terrible, but that's not the reason we had a war. "Germany (or Japan) might invade us next" is what was really in everyone's mind.

Re: The Great Cannon has been deployed again

#134
post #122

Earlier quoted context omitted.

Some food for thought: In Tibet, people regularly self-immolate themselves to show to the world how desperate the situation of Tibetan is. Imagine in what circumstances you would need to live to see people around you self-immolate. It's not just one person, and just a dozen.

I'm not defending China at all, they have tons of shitty policies. I'm just saying it is nothing like the holocaust and it is pretty absurd when people do those kind of comparisons. It reminds me of just before the Iraq invasion when the propaganda was at it's highest (Freedom fries and Dixie Chicks). If I again compare with the US as an example even if people don't like that. You have had many hundred if not thousan…

The problem is you have two types of people, you have the guy that sees his kid get blown up and is like F'it I am going to detonate myself. I get it, I could be that guy under the right circumstances. The problem is the world is just as full of people ready and willing to exploit that guy and that is what happens. The situation is a lot more complicated than the American imperialist kills babies meme. The problem is though when you go after the other guys, who need going after, some good people get killed and it creates a newly exploitable class based on that anger and resentment.

The guy who just wants to be left alone is constantly pushed into a corner by the guy that wants to control and manipulate people and those are the two types of people in the world. The American revolution was filled with guys that just wanted to be left alone. Congress is now filled with guys that want to control and manipulate. They are naturally attracted to power. It will take them pushing the US citizen who wants to be left alone (AKA the silent majority) into the corner before anything changes.

Re: The Great Cannon has been deployed again

#135

It's bad that there are enough plain http connections for this to be possible.

Although Baidu does still default to HTTP, the Chinese government has the root certificates for every Chinese certificate authority. It can MITM traffic for anybody in China, even over HTTPS, so that wouldn't solve the problem.

[deleted]

Re: The Great Cannon has been deployed again

#136

Earlier quoted context omitted.

According to the article, the attacks are currently ineffective for a number of reasons, one being their js code is bugged. Imagine Gavrillo Princip's gun was prone to jamming consistently.

Wait, didn’t that happen though? I thought the arch duke was originally supposed to be killed in a failed bombing, and the handgun was a second and happenstance scenario.

There was a royal procession to City Hall in Sarajevo, during which a grenade was thrown at the Archduke. It (barely) missed, they drove off, and had a meeting with some local magistrate.

After the meeting, Franz wanted to travel to the hospital to visit the civilians who'd been wounded by the errant grenade. En route, his driver, confused, took the same route from the morning procession. When they realized what was happening, they told him to turn around and get the out if there. When the driver stopped to turn around, they were ~1 block from the site of the first assassination attempt. One if the co-conspirators (who had lost his nerve the first time, and had been milling around and hoping that Franz would come back by), was standing where the car came to a stop. Two shots killed Fran's Ferdinand and his wife.

Fun fact about this--Franz Ferdinand's death was not the cause of the Great War in the way that people tend to think it was. The assassination caused the war in the sense that it was a convenient excuse for a war that the Austro-Hungarians already wanted, but not because (Austro-Hungarian Emperor) Franz Joseph wanted revenge or anything like that. In fact, Franz Joseph's secretary later said that he "almost seemed grateful" that Ferdinand (whose marriage was so problematic that he had been forced to proactively abdicate on behalf of his children) was out of the way.

Re: The Great Cannon has been deployed again

#137
post #37

Earlier quoted context omitted.

I think the primary argument line is something along: 1. Online ads today are so bad they must be blocked 2. But blocking ads blocks revenue for sites we like 3. So we should pay for them more directly 4. But I'm not about to set up 100 different monthly subscriptions. These corporations are not trustworthy and I cannot monitor this many bills. 5. We need a solution to simplify money -> content -> creator transfer 6.…

Serve content related ads and don't track. I'd be fine with that.

Advent of Code does a great job at this. Its ads are text-based, relevant, and unintrusive. Of course, it has a pretty particular aesthetic, but plenty of sites could do a simple (non-animated) image or text to surface their sponsor without being annoying.

Re: The Great Cannon has been deployed again

#138

Earlier quoted context omitted.

Why should they care, what's anyone going to do about it?

For one, we should all be making sure our websites use https all the time. If all you have is a personal website serving up mostly static content then it might not seem like you need to bother with a certificate but things like the Great Cannon are a great argument that you do. It's not unlike a public health argument for why everybody should be vaccinated.

HTTPS will help your users not getting infected by code that a 3rd party injected on your site. But it will probably not help against the cannon, because the Chinese probably have some china controlled certificate installed.

Re: The Great Cannon has been deployed again

#139

So, maybe firewall off China for a couple of days? Sure, it would hurt on both sides but at least it would be clear that abuse at this scale leads to being blackholed.

This doesn’t work. The DDoS requests actually come from outside China when oversea visitors are hit by the malicious js while browsing Chinese websites.

Re: The Great Cannon has been deployed again

#140

Earlier quoted context omitted.

On the contrary, people pay for Netflix. People also pay for the ad-free upgrade to Hulu. Speaking to text websites, people are also using Brave, though I don't know how that experiment will work out in the end.

When it is reasonably priced, people will pay for legal alternatives. If there was a Netflix for paid websites, which would provide subscriptions in a convenient way to all websites in bulk, people would pay for that. Current options are: > Manage subscriptions of 10 plus websites manually > Pay by your privacy It is clear that both options suck, so people opt in to ad blockers instead. Legal options are just overpri…

Ad blocking is not illegal.
Post reply on HN