61–70 of 108 posts
Earlier quoted context omitted.
DMCAs aren't the same thing, but those are also abused to silence negative opinions. If you give people a powerful tool, they tend to get funny ideas.
I didn't say DMCAs. In my country for example I can't access The Pirate Bay. I just see a "webpage blocked" message. And that hasn't been used, yet, to silence opinions.
Earlier quoted context omitted.
DMCAs aren't the same thing, but those are also abused to silence negative opinions. If you give people a powerful tool, they tend to get funny ideas.
I didn't say DMCAs. In my country for example I can't access The Pirate Bay. I just see a "webpage blocked" message. And that hasn't been used, yet, to silence opinions.
Someone on Reddit highlighted that the block seems to key off of the SSL SNI header, regardless of which IP you try to connect to. There must be some Deep Packet Inspection going on here, then? https://www.reddit.com/r/europe/comments/56h0s3/they_just_bl... Is the blocking able to handle stuff like fragrouter where the TCP stream is broken down into 1byte payload packets?
Snort can at least get you close. A custom snort module maybe able to do the specific cert: https://www.snort.org/faq/readme-ssl It's stream5 preprocessor can deal with most evasion techniques as it does full tcp stream reconstruction. http://manual-snort-org.s3-website-us-east-1.amazonaws.com/n...
For those interested in what the leaked emails contained, here's a related article: http://www.dailydot.com/layer8/redhack-turkey-albayrak-censo...
Earlier quoted context omitted.
Snort can at least get you close. A custom snort module maybe able to do the specific cert: https://www.snort.org/faq/readme-ssl It's stream5 preprocessor can deal with most evasion techniques as it does full tcp stream reconstruction. http://manual-snort-org.s3-website-us-east-1.amazonaws.com/n...
But does that scale to ISP or even country level of traffic? Having enough RAM to reassemble all the TCP connections in a country sounds wild.
Stream fragmentation has its own entire configuration in snort as it is a known attack method to bypass detection.
Last I remember that top end box was 2x 12 or 16 core Xeon CPUs with 256GB ram.
Earlier quoted context omitted.
Thats was not really valid. Every site is technical. There is far more business documents in dropbox than in github. Plus the purpose of the leakers is to create disruption, and apparently it works.
For people working in a turkey as programmers I'm pretty sure not having access to GitHub and Dropbox is not great. Surely for political statements you can use any stupid host.
If we expect the dissidents to not use the best-connected channels available to them for fear of inconveniencing others, we are complicit in silencing them.
Earlier quoted context omitted.
Till today, I've never heard anyone sued over a situation like using vpn but I'm sure we'll see that in not so distant future. For almost a year, I've been forced to use vpn at least couple of times a month for a similar problem.
Glad to hear that you live in a country where people generally have to be sued in order to be punished.
If you become a target against government for any reason at all, you'll get sued for an absurd claim, taken into prison till the law case to be handled which will not be lasted for years.
There are dozens of examples of the scenario above including mostly journalists, activists, military personnel etc.
To describe how serious this is let me give an example: I'm arguing my dad for him to not share his political messages via facebook from his account. It is that paranoid you've become that you fear for a simple fb message, you can lose your parents.
It's a torrent file you damn ignorant politicians. Tell your favorite IT guys to block this : magnet:?xt=urn:btih:489b0cef1d7d49fe5ae2ae8cc2f0708b8286cbb3&dn=All+mail+Including+Spam+and+Trash.rar
Earlier quoted context omitted.
That's... casinos and porn? Where do I sign up for a degeneracy-free country?
Do you see that red `1019855` in the top of that site? That's the number of "collaterals", sites which are not intently banned, but just happened to share some infrastructure with blocked ones, and suffering as well. As a most clear example, there is 93.184.220.29, DigiCert's IP to serve revocation lists. It is banned since September 29, don't ask why. This basically means that GitHub, Facebook, PayPal, SUSE and ICAN…
Forgive my ignorance, but does this mean that Russian internet user's browsers would not be aware of revocations? Or is there another way on this one?
Edit: obviously only mean revocations of DigiCert certs