Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Threeuk is blocking Tutanota

tutanota.com

Post reply on HN
Print view View original

171–177 of 177 posts

Re: Threeuk is blocking Tutanota

#171

Post by roenxi »

Nextgrid wrote: post #149
roenxi wrote: post #134

Earlier quoted context omitted.

How can an ISP be sure an end-to-end encrypted communication channel isn't being used for porn? It is encrypted. By design they have no idea what it is being used for. It would be very easy to set up a ring of pornography distributors using email (at least in the UK, in civilised countries they'd probably be put out of business by the open internet).

By this interpretation, any TLS channel, even to a supposedly "clean" domain, can be used for porn. Btw, nothing prevents you from emailing porn over Gmail or any of the other "allowed" email providers.

Yep. It seems quite likely the UK has a problem with any TLS channel that isn't with a trusted endpoint. There is precedent if they want to take extreme measures - https://www.zdnet.com/article/china-is-now-blocking-all-encr...

Re: Threeuk is blocking Tutanota

#172

Post by wkat4242 »

theodric wrote: post #142
wkat4242 wrote: post #44

Earlier quoted context omitted.

I know. They are now but at the time they were not. Tesco mobile was on O2 (also as MVNO). I think I heard Three and O2 have merged since then or something. Or was it Three and Meteor? I don't live in Ireland anymore so I don't really follow it. Tesco mobile didn't do any of three's skullduggery though. No filtering and their support was excellent. You could even write to them directly on boards.ie (which is itself a…

I have a place in Ireland where I spend a minority of my time at the moment. It's LTE-only (a farm in the mountains of North Cork) so I've tasted the rainbow of available options in my muddy corner of paradise in 2021-2022: -Vodafone was great, and had (or enforced) no fair-use limit, but suddenly started to majorly suck (~25Mbps down to 500Kbps; 60ms latency up to to 2s). 1-2 bars of LTE Band 20; no Band 28. They sh…

Oh yes Eir is what Meteor used to be, right? I've been gone a long time.

I live in a big city now but I still use 4G as backup because my fibre provider can be a bit hit and miss. Fibre is usually installed on the outside of buildings here so it can be pretty dependent on weather.

I've been thinking of upgrading to a 5G CPE but there's not much point - 4G is enough for working from home and cost me only 25 bucks for the modem. And most prepaid plans here don't allow 5G yet anyway.

Re: Threeuk is blocking Tutanota

#173

Post by yamtaddle »

newaccount74 wrote: post #169
yamtaddle wrote: post #167

Earlier quoted context omitted.

Real-world ecommerce systems often end up with quite a long list of email domains that either provide some weight to a "fraud or not?" algo, or are outright banned. You don't just block tutanota, you block a big, long list of high-abuse email sources, periodically updated.

It surprises me that this would be effective, since setting up an email host that's just capable of receiving emails should be trivial. Then again, maybe I am overestimating fraudsters, and by blocking email hosts that make it too easy to sign up you can get rid of a significant chunk of them...

Their game is high-volume-low-cost/effort, which I think is the main reason that this approach does significantly cut fraud volume (admittedly at, typically, a tiny cost in lost sales).

A lot of them are just stuffing stolen credit card numbers to try to find which ones still work, anyway, so they don't care about breaking into your system in particular, they just want to find any system that will let them attempt a charge. If they're finding enough of those using cheap or free anonymous accounts from low-credibility email address providers, they have no reason to spend more time or effort on it.

Blocking these providers doesn't mean you won't still see better-targeted fraud attempts, but it cuts down on a ton of the low-effort but high-volume automated crap—and that stuff can kill a merchant payment processing account in a weekend, if you're not pretty good at blocking it.

Re: Threeuk is blocking Tutanota

#174

Post by lost_tourist »

weberer wrote: post #140
lost_tourist wrote: post #87

Earlier quoted context omitted.

then it should be up to your company to say "hey we don't allow emails from X" and not do business with them. Like someone said in a previous thread "ISPs shoudl be dumb pipes", otherwise they get a nanny complex. Credit cards seem to be doing the same thing these days, acting like nannies.

>Credit cards seem to be doing the same thing these days Credit card companies have been doing this since day 1

not really, only for illegal and particularly reprehensible/gray areas. Porn is an accepted expression of freedom of speech and is protected speech. Visa/MC/Amex don't need to be the police.

Re: Threeuk is blocking Tutanota

#175

Post by ThePowerOfFuet »

tomxor wrote: post #96
fmajid wrote: post #85

The UK is almost as bad an enemy of the Internet as Australia and the nanny-state filters are beyond obnoxious. Back when I was with “Vodafone Full Fibre broadband” (in reality shitty VDSL because the truth-in-advertising authority gave ISPs license to lie), they had accidentally blocked StackOverflow for 3 days because it was actually the test site for implementation of the filters and they had been turned on by acc…

> A VPN is essential to defend yourself from the jackbooted UK government. I tend to agree. Unfortunately even VPN doesn't entirely solve it though. On the one hand wiregaurd makes this feel far more transparent and comfortable technically compared to how it used to with old fashioned crappy TCP over TCP style VPN... instead we now get low overhead, low latency, native, simple configuration etc. The only problem is t…

> The only problem is the end point: Running your own makes you very uniquely identifiable

https://www.mullvad.net/

Re: Threeuk is blocking Tutanota

#176

Post by fmajid »

RockRobotRock wrote: post #53
Throwaway3user wrote: post #35

Earlier quoted context omitted.

But this seems more like a bug? Correcting to use https has no issues...

Because they can't intercept HTTPS.

They don’t need to. DNS is still mostly in the clear, and SNI is still unencrypted so they may not know exactly what you are reading, but they definitely know what sites you are on.

Re: Threeuk is blocking Tutanota

#177

Post by tomxor »

ThePowerOfFuet wrote: post #175
tomxor wrote: post #96

Earlier quoted context omitted.

> A VPN is essential to defend yourself from the jackbooted UK government. I tend to agree. Unfortunately even VPN doesn't entirely solve it though. On the one hand wiregaurd makes this feel far more transparent and comfortable technically compared to how it used to with old fashioned crappy TCP over TCP style VPN... instead we now get low overhead, low latency, native, simple configuration etc. The only problem is t…

> The only problem is the end point: Running your own makes you very uniquely identifiable https://www.mullvad.net/

I already use mullvad, and as good as they are no VPN is immune to the issues I mentioned unfortunately.
Post reply on HN