Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Kazakhstan to MitM all HTTPS traffic starting Jan 1

telecom.kz

Post reply on HN
Print view View original

341–350 of 378 posts

Re: Kazakhstan to MitM all HTTPS traffic starting Jan 1

#341

Post by psykovsky »

roywiggins wrote: post #307
peteretep wrote: post #273

Earlier quoted context omitted.

> most people wouldn't understand the full implication So attack that. Tell a story. What does this allow the government to do? Could a jealous ex-lover who works for the government read their ex's messages? Could the local mayor find out if you've got a medical problem? Get an illustrator to draw these up as little comics. Make images that people can understand. This is a great example: http://www.wordstream.com/ima…

Keep the government out of our dick picks! John Oliver: Government Surveillance https://youtu.be/XEVlyP4_11M?t=1518

Keep our dick pics out of government databases, you mean? I never took a dick pic which included governmental staff, but maybe I'm weird like that...

Re: Kazakhstan to MitM all HTTPS traffic starting Jan 1

#345

Post by ptaipale »

bmahax wrote: post #286

I don't agree with all the comments here. A sovereign state decided to ensure all outgoing traffic is protected by a secure signature that is not possessed by foreign intelligence agencies or hackers (well, that's the idea). It is a very cheap and effective way to achieve this. Spying on the population is not prevented by GeoTrust and Cie's loosy certificates, a lot of literature and real life examples already show t…

> A sovereign state decided to ensure all outgoing traffic

Not "ensure". MITM. It provides no security benefits. But it might provide another attack surface for additional malicious adversaries (criminals and other governments).

Re: Kazakhstan to MitM all HTTPS traffic starting Jan 1

#347

Post by [deleted] »

kazakh wrote: post #213

Kazakh here. Fuck, what do we do? Any suggestions other than trying to raise awareness? To give some context, the reason why they are getting away with such brute methods is that the most people wouldn't understand the full implication. I would be surprised if this would prove difficult to enforce - the first thing an ordinary person would do when, say, Facebook wouldn't load is to call up the Kazakhtelecom's support…

[deleted]

Re: Kazakhstan to MitM all HTTPS traffic starting Jan 1

#349

Post by realusername »

duskwuff wrote: post #141
briandear wrote: post #93

Earlier quoted context omitted.

And it wouldn't work. You've apparently have never been stuck inside China. I was there for a few years and it was brutal, network wise. Local companies just replace what can't be accessed from the outside.

China had a large domestic Internet industry, though. KZ doesn't.

Exactly, and it's been blocked almost since the beginning in China, which means users are now using local products. If the users can't access the websites they are normally using the next day, they will just get some unblocking software from a friend, this things are shared really quickly.

Re: Kazakhstan to MitM all HTTPS traffic starting Jan 1

#350

Post by mentat »

asymmetric wrote: post #291
patcheudor wrote: post #250

Earlier quoted context omitted.

What do you do? You immediately reach out to Apple, Google, Facebook, Twitter, Box, Dropbox, Tumblr, and any other popular platform which has mobile apps. You ask, or down-right demand they implement certificate pinning in their apps so they will fail when middled with the government provided certificate. This will in turn break access to those platforms via mobile apps which will result in very real and direct impac…

Down-right demand? With what authority? It sounds like you're confusing these corporations for governments, as if they had to enforce your human rights..

Rights exist, they cannot be enforced they can only be violated.
Post reply on HN