News for hackers. Stuff that matters.
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by tptacek on Tuesday April 19, 2016 @04:55PM (#11530329)
You mean apart from the fact that the US Government doesn't operate a "Great Firewall of the United States"?
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by jonathankoren on Tuesday April 19, 2016 @04:59PM (#11530372)
No, but what if there is some sort of NSA backdoor? I have no evidence of one, but if they're willing to build special hardware for another country's secret police, why not?
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by tptacek on Tuesday April 19, 2016 @05:14PM (#11530485)
That's a legit question. If you'll design software specifically to help China persecute a religion, it's hard to imagine pushing back too hard on a lawful request from your own government.
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by swombat on Tuesday April 19, 2016 @05:25PM (#11530578)
Walls are so passé. Panopticons have been the modern way to keep people in check since sometime back in the 18th/19th Century in Europe. After all, when you have nothing to hide, you are nothing to fear...
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by tptacek on Tuesday April 19, 2016 @05:28PM (#11530597)
You're suggesting that there are straightforward comparisons to be drawn between the Communist Party of China and the United States Government?

That sounds like something that's especially fun to argue on an Internet message board and not all that illuminating anywhere else.

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by Zigurd on Tuesday April 19, 2016 @06:38PM (#11531039)
Just a moment ago you argued that China is a nation of laws and Cisco didn't break them, so they are not criminals. Now you question the ability to make "straightforward comparisons." Which is it? Or are we getting at the essence of American exceptionalism here?
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by tptacek on Tuesday April 19, 2016 @06:42PM (#11531066)
I did not claim that China is a nation of laws. But even if I had, I still wouldn't understand this objection. Could you try to make it clearer?
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by vacri on Tuesday April 19, 2016 @10:53PM (#11531953)
> You mean apart from the fact that the US Government doesn't operate a "Great Firewall of the United States"?

So, basically you're saying that even though Cisco has shown a willingess to work with a corrupt government in China, that willingness to work with corruption does not translate to the US, simply because the US doesn't run a 'great firewall'?

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by mirimir on Wednesday April 20, 2016 @12:30AM (#11532267)
The NSA would rather collect data ;)

But there is some blocking. It's mostly been DNS poisoning, against "piracy" and such. I don't recall specifics, but at times there have been sites that were reachable with IP addresses, but not using public DNS servers. There have been, for example, Firefox plug-ins with hard-coded lookups.

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by sitkack on Tuesday April 19, 2016 @04:57PM (#11530353)
Doesn't it? It is just transparent and the traffic shaping is self enforced.
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by tptacek on Tuesday April 19, 2016 @04:58PM (#11530358)
No, it doesn't.
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by peteretep on Tuesday April 19, 2016 @09:14PM (#11531666)
I sincerely thank you for pushing back on all the crap in this particular thread. HN seems to have devolved in to "well the world SHOULD work the way I want it to" recently, and you're doing sterling work here being the voice of reason.
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by manicdee on Tuesday April 19, 2016 @08:01PM (#11531431)
You ate correct of course. Five eyes is not a firewall. Tapping into fibre optics, spying on civilian satellite communications, and keeping tabs on everyone's phone calls, emails and web browsing s not a firewall either.

But it is an invalid comparison snce it isn't the GFW that is gettng people killed, it's the packet inspection and traffic monitoring.

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by djrogers on Tuesday April 19, 2016 @06:59PM (#11531154)
That's not a firewall any more than a river is a damn.
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by alanwatts on Tuesday April 19, 2016 @05:34PM (#11530644)
Of course, there are many much more subtle and effective ways to stifle free speech and human rights than a big firewall which can easily be circumvented with a VPN. MITM attacks, botnet troll armies, astroturfing, etc. etc. Good luck finding proof of that though.
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by tptacek on Tuesday April 19, 2016 @05:35PM (#11530663)
"I can't find proof of this, therefore it must be happening" is very popular message board logic.
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by PavlovsCat on Tuesday April 19, 2016 @11:18PM (#11532037)
> "I can't find proof of this, therefore it must be happening" is very popular message board logic.

It's also not what they said, at all. If anything, you could say they argued it might be happening because it's more effective.

From seeing the things people and companies do openly, from marketing to politics, I see no reason to believe that moral qualms is what would keep them from doing more. And while I don't know about MITM attacks, that seems like something that would be done on an individual basis; as for astroturfing and "troll armies", the logic is rather "if it makes sense, works, is cheap, has been reported on multiple times, then yeah, it's probably happening", at least for me, can't speak for the other poster.

And is anyone honestly debating that

> there are many much more subtle and effective ways to stifle free speech and human rights than a big firewall

is true? Because refuting a straw man is not the same thing.

And here too I'm sure I could find reading material if required, I'm sure. From the candid beginnings of marketing and public relations to all sorts of musings, short stories and probably even Star Trek episodes about how a prison you can see, one you know you're in, is much less insidious and effective than one where you think you're free, where you never try the door or don't even realize there is one. I remember a short story in my 8th grade textbook or something that was about a prison without walls. You can say and do what you want, sure, and you think you came up with what you want all by yourself, too, it's just you didn't. That's the general idea.

Walls, like murder, are just very crude tools, they are not the zenith of oppression and exploitation. If you see huge concentrations of power, skepticism is always warranted. How could there be smoke without fire? It doesn't prove anything, sure, and even if I could prove that "there has to be a fire", then that doesn't make any wild fantasies about the nature of it correct. But still, to muse about causes one can't prove (yet) seems a lot less foolish than to for example say "oh look, a huge blob of smiling friendly power, it just has to be everything it says on the tin". I'd rather be wrong about something I investigated for the right reasons, than guess right by sheer dumb luck.

But personally I prefer to think of useful ways that would also nip some fires in the bud anyway. I don't need to know if we are being manipulated, I know critical thought is required and I know group think can be dangerous even when not manipulated, which it is so readily. So why not catch one real and one potential bird with one stone that is obligatory? I don't know how much of a problem global warming is, but I know that renewable energies are a good idea regardless, at "worst" we simply get to use fossil fuels for more plastic and fertilizer rather than burning them. I don't know how many people the planet can sustain, but I know something that needs to grow to not collapse cannot work on a finite planet, and that we need to rethink that at least until we get out of the solar system and split up into a gazillion humanities that will do whatever. I don't need to know if someone is trying to guess my password, I simply generate a long random one anyway. And so on.

Likewise, I don't know if there will ever be the kind of oppressive societies here and where you are that were the norm throughout history and are still plentiful in the world, and I can't prove the exact levels of fuckery we are under right now, much less my idle suspicion that the West might fall get phased out in favour of the Chinese model -- but I still strive to be the best and most free I can be. Certain things should not be a response to pressure from the outside, they should be growing anyway. If there is nothing on the outside trying to opppress, everybody is happy. If there is, it gets to pop, and everybody who matters is happy. Win/win?

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by alanwatts on Tuesday April 19, 2016 @05:43PM (#11530711)
As are appeals to authority. i.e.: "I can't find proof of this, therefore it must not be happening

Let me ask you this, what precisely would suffice as proof, in your opinion, of such activities?

On the internet, maybe there really is no such thing as undeniable "proof" that anyone did anything, considering how easy it is to fabricate evidence. [1]

[1]https://news.ycombinator.com/item?id=11440594

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by tptacek on Tuesday April 19, 2016 @06:16PM (#11530930)
Pointing out that you've presented no evidence for an argument is not an "appeal to authority".
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by alanwatts on Wednesday April 20, 2016 @09:38AM (#11534254)
>Argument from ignorance (from Latin: argumentum ad ignorantiam), also known as appeal to ignorance (in which ignorance represents "a lack of contrary evidence"), is a fallacy in informal logic. It asserts that a proposition is true because it has not yet been proven false (or vice versa). This represents a type of false dichotomy in that it excludes a third option, which is that: there may have been an insufficient investigation, and therefore there is insufficient information to prove the proposition be either true or false.

https://en.wikipedia.org/wiki/Argument_from_ignorance

Open and shut case, Johnson!

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by meepmorp on Wednesday April 20, 2016 @05:31PM (#11537894)
If anyone here could be reasonably construed as arguing from ignorance it'd be you.

You said that "there are many much more subtle and effective ways to stifle free speech and human rights than a big firewall," such as "MITM attacks, botnet troll armies, astroturfing, etc. etc."

If you're not asserting that such techniques are being deployed, then ok. But if you are, and follow that up with "Good luck finding proof of that though," as though that's a perfectly reasonable excuse for not being able to back up what you're alleging, then you are yourself asserting "a proposition is true because it has not yet been proven false."

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by alanwatts on Thursday April 21, 2016 @09:11AM (#11541803)
Of course such attacks are being deployed, but by whom and for what purpose?

Here is an example of one such attack, which the researchers called "Censorship 2.0".

https://www.reddit.com/r/netsec/comments/38wl43/we_used_sock...

See also:

https://en.wikipedia.org/wiki/Hacking_Team#Use_by_repressive...

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by PavlovsCat on Tuesday April 19, 2016 @11:33PM (#11532082)
Aaand it's off the front page.

http://i.imgur.com/FQNYhED.png

Isn't that interesting? The story above this one is roughly as old, has half the upvotes, and more comments. The one just below it is a lot older, and has a lot more comments than upvotes. Conspiracy? No, just the audience I guess, but all the same: QED.

> Unpopular ideas can be silenced, and inconvenient facts kept dark, without the need for any official ban. Anyone who has lived long in a foreign country will know of instances of sensational items of news — things which on their own merits would get the big headlines-being kept right out of the British press, not because the Government intervened but because of a general tacit agreement that ‘it wouldn’t do’ to mention that particular fact. So far as the daily newspapers go, this is easy to understand. The British press is extremely centralised, and most of it is owned by wealthy men who have every motive to be dishonest on certain important topics. But the same kind of veiled censorship also operates in books and periodicals, as well as in plays, films and radio. At any given moment there is an orthodoxy, a body of ideas which it is assumed that all right-thinking people will accept without question. It is not exactly forbidden to say this, that or the other, but it is ‘not done’ to say it, just as in mid-Victorian times it was ‘not done’ to mention trousers in the presence of a lady. Anyone who challenges the prevailing orthodoxy finds himself silenced with surprising effectiveness. A genuinely unfashionable opinion is almost never given a fair hearing, either in the popular press or in the highbrow periodicals.

http://orwell.ru/library/novels/Animal_Farm/english/efp_go

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by tptacek on Tuesday April 19, 2016 @11:54PM (#11532156)
This story was on the front page for hours today.
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by alanwatts on Wednesday April 20, 2016 @09:43AM (#11534292)
Not the first time this has happened to me:

https://news.ycombinator.com/item?id=11109985

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by bcook on Tuesday April 19, 2016 @04:59PM (#11530366)
No, we only have the NSA that can archive days (weeks?) worth of the United States internet traffic, seamlessly MITM 0days, or tons of other frightening things...

I guess a transparent firewall is not a firewall?

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by tptacek on Tuesday April 19, 2016 @05:13PM (#11530477)
We don't have anything like a "transparent firewall", either.
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by bcook on Tuesday April 19, 2016 @05:30PM (#11530620)
Unless you are fully aware of NSA activities, you cannot be sure of that statement.

Here's an excerpt from Cisco: [0]“Traditionally, a firewall is a routed hop and acts as a default gateway for hosts that connect to one of its screened subnets. A transparent firewall, on the other hand, is a Layer 2 firewall that acts like a "bump in the wire," or a "stealth firewall," and is not seen as a router hop to connected devices.”

I dunno if our disagreement is about the semantics of what a "transparent firewall" is, but the NSA has been shown to filter a majority of the traffic that traverses the USA, so your statements that the USA has nothing like the GFW seems a bit off...

[0]: http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/conf...

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by tptacek on Tuesday April 19, 2016 @05:36PM (#11530665)
The NSA "filters" a majority of the traffic that traverses the USA? What site can't I get to because of those filters?
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by grecy on Tuesday April 19, 2016 @09:56PM (#11531801)
A massive wall with a gate in it that allows everyone through is still a wall.

Everyone going through that gate can be monitored, recorded, held for questioning, etc.

And jumping out of the metaphor, every packet passing through the gate can be copied and stored for later.

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by bcook on Tuesday April 19, 2016 @05:42PM (#11530705)
I guess my criticism is that stopping communication (GFW) and monitoring communication (NSA) are very similar, therefore we do have our own GFW.
Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by tptacek on Tuesday April 19, 2016 @06:04PM (#11530856)
What the US does is not even remotely similar to what the GFW does.

And, by the way, the idea that you can trivially evade the GFW using a VPN? That's an extremely dangerous assumption.

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by bcook on Tuesday April 19, 2016 @06:18PM (#11530946)
I see monitoring and blocking to be part of the same machine. We apparently disagree. :)

>And, by the way, the idea that you can trivially evade the GFW using a VPN? That's an extremely dangerous assumption.

I think that part of your reply was meant for someone else. (I agree with the part I quoted.)

Re:Cisco’s Attempt to Dodge Responsibility for Facilitating ... by kbenson on Tuesday April 19, 2016 @07:46PM (#11531378)
I think a big problem with your argument is your assumption that the US government does, or even can, monitor to the same degree that China does. The amount of interconnections and peering between networks makes this near impossible in practice in the US. If they could, there would have been no need for them to try to tap directly into Google's datacenter-to-datacenter lines. The internet is a mesh, not a star. Monitoring can get far by picking the largest entities and trying to insert themselves at those points, but there's plenty of traffic that goes directly between entities that isn't monitored. This works for monitoring, because it's passive, but once we're talking about a firewall and something is blocked, traffic will just shift to routes that aren't blocked if they exist. The GFW is a firewall because they actually have control of all the routes.