News for hackers. Stuff that matters.
Re:Google disables “domain fronting” capability used to evad... by kome on Friday April 20, 2018 @03:12AM (#16882741)
What fortunate timing indeed. That's just a kind reminder about what the interests of Google and Amazon are. Not those of their consumers for sure.

Also, especially Google have all the interest to let the Russians destroy Telegram. At this point I would be very suspicious of all other messengers that still work in Russia.

Edit: also Amnesty International is on it: https://twitter.com/amnesty/status/986955700550144002

Re:Google disables “domain fronting” capability used to evad... by codedokode on Friday April 20, 2018 @06:19AM (#16883589)
Viber currently has problems with connectivity in Russia. They have been complying with russian laws, but they made an unwise decision to use servers in Amazon network that are being blocked now because of Telegram. So the messenger that complies with the law now has problems and Telegram just works.
Re:Google disables “domain fronting” capability used to evad... by baybal2 on Friday April 20, 2018 @03:38AM (#16882881)
>At this point I would be very suspicious of all other messengers that still work in Russia.

That's a conjecture is rational, but I think you already have to be very suspicious of anything that worked there for last 5 years, Telegram inclusively.

It is unbelievable for me that they maintained legal presence in the country up until now, while all others were indiscriminately blocked years ago, and incompliant software authors were raided by 3 letter agencies and raped with assault rifles.

Re:Google disables “domain fronting” capability used to evad... by kome on Friday April 20, 2018 @03:48AM (#16882912)
Others were "indiscriminately blocked years ago"? Do you have a source for that?

As far I know - but I might be wrong - Google, Facebook, Instagram or Whatsapp have never been blocked in Russia.

Re:Google disables “domain fronting” capability used to evad... by baybal2 on Friday April 20, 2018 @03:58AM (#16882954)
BBM public server was certainly blocked as early as 5 years ago.

Blackphone servers at around 4 or 3 years ago as well, just few months after its market release (while signal is still available though)

All modded GSM phones were under blanket ban for even longer. Modded GSM phone vendors are routinely raided.

Then Line, KaoKao and gazillion of others.

There is no doubt that they were very deliberate in targeting anything with hard crypto.

FB, and Google are routinely complying with Russians, so no wonder about them still being there.

Re:Google disables “domain fronting” capability used to evad... by Lionsion on Friday April 20, 2018 @11:25AM (#16885524)
> modded GSM phones

What do you mean by this? I'm genuinely curious. "modded GSM phones" yields zero hits on Google for me.

Re:Google disables “domain fronting” capability used to evad... by baybal2 on Saturday April 21, 2018 @03:18AM (#16890361)
Stuff like TopSec S35 or Security AG. Some are garage made. All of them basically put a block cypher in between the GSM codec chip and the modem. Such stuff was relatively easy to do on old dumbphones
Re:Google disables “domain fronting” capability used to evad... by acct1771 on Monday April 23, 2018 @12:42AM (#16900566)
Are there any modern incarnations?
Re:Google disables “domain fronting” capability used to evad... by kome on Friday April 20, 2018 @04:03AM (#16882978)
Thanks! It's even more suspicious why Google and Facebook products still works then... And they have never been blocked.
Re:Google disables “domain fronting” capability used to evad... by notyourday on Friday April 20, 2018 @12:12PM (#16885982)
Well, unlike other execs, Durov has been challenging Russia at a great personal cost for years.
Re:Google disables “domain fronting” capability used to evad... by Fins on Friday April 20, 2018 @02:53PM (#16887501)
No longer than a couple of years ago Durov was writing sweet fairy tales about Great Russia and how he's never going to leave because it is the greatest place on Earth. Only when his business (based on hosting pirated content and stolen designs) was slightly "shared" with more important people did he suddenly change his tune.

I don't have any opinion on this, but it is rather common sentiment in Runet that really Telegram is in cahoots with Russian TLAs anyway.

Re:Google disables “domain fronting” capability used to evad... by nabc45 on Friday April 20, 2018 @03:50AM (#16882918)
>while all others were indiscriminately blocked years ago

As far as I am concerned Telegram was blocked for 1) being used by terrorists and 2) the Telegram staff refusing to turn in data to aid the investigation. This has not happened to other messengers like WhatsApp and they are not blocked. Am I wrong?

Re:Google disables “domain fronting” capability used to evad... by codedokode on Friday April 20, 2018 @06:11AM (#16883559)
Actually there are interesting legal details in the story.

Telegram should be blocked under the Russian court order for not providing decryption keys, but that order doesn't contain ruling to block entire Amazon or Google network - only IP addresses used by Telegram. Whole networks are being blocked under the order by Prosecutor General from 2015 (yes, from 2015, and recently they started to use new order from 2018). But the problem is that Prosecutor's Office doesn't have authority to block messengers, so the order is about discovering illegal content (extremist content or appeals for organizing unapproved rally - not sure if I translated correctly) located on all of those IP addresses which obviously is a lie.

So this is dubious even under russian laws.

Why are they blocking entire networks? Well, the problem is that there are limits in ACL size so if Telegram starts using thousands of IP addresses the tables can become too big. So they chose to block entire networks instead. Also, finding out which IP addresses they are using takes time, distributing and updating blocking rules by ISP takes time (on order of hours, up to a day), so without this Telegram could change IPs faster than they are blocked.

There already are russian businesses that were using IP addresses from those networks, that are suffering damages because of blocking. They are moving to other datacenters in a rush. It is unlikely that they will try to recover damages from the government.

Re:Google disables “domain fronting” capability used to evad... by nabc45 on Friday April 20, 2018 @06:51AM (#16883728)
That's bad, especially that last paragraph, but I would lay the blame directly on Amazon and Google. They should kick Telegram out if having them affects other customers. That's standard practice in hosts, for example when a specific website is receiving a DoS, the website is blackholed so other customers don't see their service interrupted.
Re:Google disables “domain fronting” capability used to evad... by codedokode on Friday April 20, 2018 @07:20AM (#16883839)
No, they should not. They are not under russian jurisdiction and are not obliged to comply with russian laws. Or should they comply with laws of Thailand, Iran, China and North Korea too? Kick out sites that criticise communist party?
Re:Google disables “domain fronting” capability used to evad... by nabc45 on Friday April 20, 2018 @07:27AM (#16883880)
I did not say that. I said that Telegram moved to their clouds to evade the sentence of a judge, which means Russian ISPs resorted to banning entire IP ranges, which means law-abiding customers are now affected by it. This is, because of the malicious actions of Telegram, now Russian citizens can't access law-abiding websites hosted in Google and Amazon. That should bother Google and Amazon, who should guarantee the connectivity of their law-abiding customers by kicking out Telegram so the IP range bans are lifted.

In the end Google and Amazon will kick out Telegram, it's probably a matter of days, so I don't understand what this fuss is about.

Re:Google disables “domain fronting” capability used to evad... by Molaxx on Friday April 20, 2018 @08:15AM (#16884107)
Which malicious actions by telegram? Providing their customers with private communication not eavesdropped by the russian government? A government linked with the murder of political oposition personalities? If the Russian government decided to ban Amazon and make law abiding Russian businesses suffer the responsibility lays on the Russian government,not Amazon. I personally think that if Amazon would ban telegram and succumb to the heavy handed Russian policy it'll hurt the law abiding Russian citizen ability to express any dissatisfaction with their government and decisions. This would directly lead to a government that governs for the sake of its own existance and not for the betterment of its citizens. How could it if it doesn't allow the citizens to express their wishes and plights? But that is an internal Russian issue which I believe the Russians should deal with however they like. My interest in Amazon not succumbing is the effect it'll have around the world. I would not like my government to get such ideas because it directly affects my rights.
Re:Google disables “domain fronting” capability used to evad... by codedokode on Friday April 20, 2018 @08:45AM (#16884286)
> In the end Google and Amazon will kick out Telegram,

Telegram invented a nice trick. Durov wants to reward people hosting proxies so Google and Amazon will have to identify them and kick them out too.

Re:Google disables “domain fronting” capability used to evad... by codedokode on Friday April 20, 2018 @08:49AM (#16884300)
Telegram has no authority to ban anything so it cannot be at fault. Trying to make your service work cannot be called "malicious activity".

> That should bother Google and Amazon, who should guarantee the connectivity of their law-abiding customers by kicking out Telegram so the IP range bans are lifted.

This might increase an influx of complaints from other governments. If they kicked out Telegram, why not kick out someone else?

Re:Google disables “domain fronting” capability used to evad... by amarkov on Friday April 20, 2018 @09:07AM (#16884411)
> Telegram has no authority to ban anything so it cannot be at fault. Trying to make your service work cannot be called "malicious activity".

Telegram knew the Russian government was trying to censor them. So they disguised their traffic as Google traffic. Now, because Telegram did this and Russia called their bluff, some Google clients who have nothing to do with Telegram can no longer reach the Russian market.

Why isn't this just as malicious as any other denial of service attack? It sucks for Telegram, but it's not reasonable or sustainable to let anyone who needs to evade censorship impersonate Google.

Re:Google disables “domain fronting” capability used to evad... by baybal2 on Friday April 20, 2018 @04:12AM (#16883024)
>WhatsApp and they are not blocked. Am I wrong?

FB routinely complied with regime's requests, just take a look on a number of chatrooms they took down. So no wonder them not being seen as a problem.

Re:Google disables “domain fronting” capability used to evad... by nabc45 on Friday April 20, 2018 @04:20AM (#16883056)
Calling Russia a regime is like calling Microsoft "Micro$oft".
Re:Google disables “domain fronting” capability used to evad... by StavrosK on Friday April 20, 2018 @06:28AM (#16883625)
I would imagine the analogy would be to call Russia ₽ussia.
Re:Google disables “domain fronting” capability used to evad... by Traubenfuchs on Friday April 20, 2018 @05:17AM (#16883335)
If you want to spin conspiracy theories think about the following: It's very likely that every time we hear that government x can't beat software y (TrueCrypt, Telegram, etc.) it's fake news to make you think that software is safe and increase the amount of users who trust it.