Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by bad_user on Wednesday October 03, 2018 @12:01PM
(#18131569)
Good job Google.
I'm a very harsh critique of Google due to the threat they pose for privacy, however here they are doing a good thing, along the lines of the public DNS servers they provide, which I know have helped people [1].
Having your requests go through Google is not ideal, however not many people have the capacity to search for better, but more obscure solutions.
Also this isn't about privacy, but about working around censorship at the DNS level. If you want privacy, you use an anonymous VPN or Tor. And frankly, if you can't trust Google's privacy policy for this service, then you shouldn't use a Google phone.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by bduerst on Wednesday October 03, 2018 @07:43PM
(#18135761)
I mean, China's the one censoring it. Google could link to the censored websites in the results but that would be a terrible user experience. Wouldn't it be better to do what they do with DMCA takedowns in the US, where they tell you how many results have been removed and why?
And Google already censors search results in the EU with the right to be forgotten, where they've received 41,000 requests from EU politicians, so there is precedence in working with local governments
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by rrix2 on Wednesday October 03, 2018 @09:37PM
(#18136411)
They also tied every search request with a government ID according to some reports and one must assume they’re willing and able to share that with the Chinese state security. As far as I’m aware the EU isn’t targeting minority citizens for increased surveillance like the Chinese state is doing to the Uighurs either.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by samat on Wednesday October 03, 2018 @11:04AM
(#18130891)
The problem Intra solves is very real. MiTM attack on the DNS are the simplest ways to censor internet access and they are widely used in many countries.
I do despise google's efforts in dismantling any privacy which is left on the internet, but this particular program is very good.
I don't get this attitude of 'don't take a cake from the devil'. A) google is not devil, just another megacorp B) don't be blinded with slogans, evaluate merits of each offer individually. This particular offer is great and helps real people aka 'makes the world a better place', lol.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by x220 on Wednesday October 03, 2018 @04:42PM
(#18134656)
If Google considers handing off private info to China, which is known to execute people with disliked political beliefs, it's not self-evidently wrong to compare Google and their executives to the devil.
Edit: if you want to downvote, please also reply with your ideas and tell me why you disagree with me.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by r3bl on Wednesday October 03, 2018 @05:31PM
(#18135000)
I've seen no comment here ever praising Google's actions in China here, and I'm very doubtful I will.
That said, this particular product, which has nothing to do Google's business with China, is absolutely crucial for people facing censorship elsewhere, and it is without a doubt a morally good product. You can't even claim that they're doing it solely to gather DNS data (for whatever reason), because if they were making an attempt at that, they would sure as fuck wouldn't allow you to choose Cloudflare.
You can sit here and call that hypocritical because of Google's relationship in China, but that doesn't make their solution any less good to those facing censorship. Nobody else stepped up. Jigsaw did, and they deserve to be thanked for that.
Even if someone's intentions are evil in nature, you're not going to make them less evil by saying "who cares, you're evil" whenever they do something good.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by sirn on Wednesday October 03, 2018 @10:59AM
(#18130833)
Just want to add: if anyone running iOS, you might want to try DNSCloak[1] which is a small wrapper over dnscrypt-proxy. I've been using it for a while and it has been reliable so far.
I also run my own DoH server in Singapore that block adverts[2] with Ansible script to deploy it to any FreeBSD servers[3] :-)
Edit: looks like mine doesn't supported running with Intra quite yet. Will work on it tonight.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by sharcerer on Wednesday October 03, 2018 @10:48AM
(#18130709)
Does your server allow Google Ads because honestly, I would feel like a hypocrite blocking their ads as those ads basically pay for what Jigsaw does. Just saying.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by pjc50 on Wednesday October 03, 2018 @10:26AM
(#18130479)
What this appears to be is a DNS-over-HTTPs proxy application, which will route your DNS traffic directly to Google bypassing any substitutions or deletions made by your local ISP or government.
Whether the advantages of that outweigh giving google your DNS traffic (and realistically they already know every site you visit, because almost everyone uses google analytics) depends on your local security situation.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by daveFNbuck on Wednesday October 03, 2018 @10:59AM
(#18130840)
It can be configured to use any DNS-over-HTTPs server, and has cloudflare hard-coded as an option. When you first install it, they have a short onboarding that ends with asking you to enable needed permissions and informing you that you can use other providers, so you have a chance to change the settings before enabling the permissions.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by sharcerer on Wednesday October 03, 2018 @10:44AM
(#18130667)
I think Jigsaw has a good record of making tools which work for the oppressed sections or in areas of cybersecurity/censorship etc. Good work must be appreciated. I don't think any other Big Co. has a division dedicated to solving such specific problems.
Yeah, the China bit is really saddening/irritating. They're gonna crush their own legacy.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by r3bl on Wednesday October 03, 2018 @11:22AM
(#18131059)
Don't forget about the Project Zero team!
Regardless of my privacy concerns regarding Google and other Alphabet-owned businesses, Jigsaw and Project Zero teams deserve to be praised by anyone who gives a shit about privacy/security.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by sharcerer on Wednesday October 03, 2018 @11:28AM
(#18131132)
Project Zero is the reason I regard Google's security as one of the best (possibly the best). They haven't had any major/minor leak, IIRC, which is a huge deal. I mean even if 1 data leak occurred in the next 2 years, I wouldn't be that pissed off (T&C Apply).
Accomplishments of these 2 teams deserve more mention.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by LethargicStud on Wednesday October 03, 2018 @10:30AM
(#18130526)
Can someone explain why a government couldn't block the IP of this service? Whether it's a VPN or just dns over https, it seems the servers wouldn't have infinite dynamic ips and could therefore be blocked.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by apeace on Wednesday October 03, 2018 @12:08PM
(#18131663)
1) What's stopping these countries from blocking the hard-coded Google/Cloudflare IP addresses? Doesn't seem like a great solution technically speaking.
2) I wouldn't use this if I lived in China. Companies operating in China are required to turn over data about their users to the government. And Google is soon going to be partnering with China to release a censored version of their search engine[1]. Now they can provide the government your entire browsing history, not just your searches!
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by jigaway2 on Wednesday October 03, 2018 @11:06AM
(#18130903)
I couldn't help but guffaw at this headline, given that Jigsaw's current flagship product is an automated censorship bot [1]. This is another example of the absurd belief that only ISPs can censor the internet, and not trillion dollar platform companies with monopolies or near-monopolies in several areas.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by kylnew on Wednesday October 03, 2018 @09:55AM
(#18130196)
Without looking into the Privacy Policy for details on tracking, it seems like this would be a lesser of two evils situation. Either experience censorship in your country or see everything, with the caveat that Google logs it.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by bad_alloc on Wednesday October 03, 2018 @09:58AM
(#18130220)
A country that censors content will be very interested in obtaining these logs from Google. Since they seem to be willing to cooperate with state actors, users might set themselves up for reprecussions later on.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by kylnew on Wednesday October 03, 2018 @10:00AM
(#18130238)
No kidding. That was my next thought among other issues with the plan, but I'm trying not to be too cynical about what will happen to the data. I won't be using this any time soon, personally.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by Ajedi32 on Wednesday October 03, 2018 @10:29AM
(#18130519)
So it's just a way to backport support for DNS-over-TLS to older Android versions? Neat, but not as big a deal as the article headline might lead you to believe.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by tomp on Wednesday October 03, 2018 @12:12PM
(#18131716)
> That makes it easy for oppressive governments — like Turkey, which has used this technique before — to intercept web addresses requests and either kill them in their tracks to stop sites from loading, or redirect to a fake site.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by jillesvangurp on Wednesday October 03, 2018 @10:46AM
(#18130699)
Sounds like a good idea. Most users have so far very little control over android dns and using TLS sounds like a good idea in any case. Makes you wonder why this is not more widespread given that there are a lot of nasty attacks that involve dns hacks.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by sigmar on Wednesday October 03, 2018 @11:30AM
(#18131171)
anyone using this on LineageOS 15.1? Seems to connect okay, but chrome gives "err_network_changed" when I go to any site and I'm not sure how to debug...
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by bun_at_work on Wednesday October 03, 2018 @10:42AM
(#18130657)
Just a few things:
1) This tool is made by an Alphabet owned company (Jigsaw), not Google, another Alphabet owned company. The companies will have different missions, even if profits flow the same direction.
2) Venezuela doesn't have a huge market where Google is blocked by a nation-wide firewall.
3) China has a nation-wide firewall blocking any Google service, thereby forcing Google to negotiate how their service works if they want to make money there.
Note: Oversimplifying the situation for the sake of pitchforking a company you might not like does no one any good. Venezuela and China are very different companies, in very different environments. Google as a company (and Alphabet, probably more so) is almost certainly anti-censorship, philosophically; they just don't operate in a vacuum.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by whatshisface on Wednesday October 03, 2018 @10:52AM
(#18130750)
>Google as a company (and Alphabet, probably more so) is almost certainly anti-censorship, philosophically; they just don't operate in a vacuum.
Since when was being motivated to do wrong a mitigating condition for having done wrong? "Sorry officer, I wasn't going to steal it at first, but then I started wanting it."
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by jamescostian on Wednesday October 03, 2018 @12:38PM
(#18131999)
This isn't like theft. It's more like the law says you can't read certain things, so a printing company adjusts the books they print for the people of that country. Obviously they don't want to censor things, but they also want to profit.
They can either be totally censored or partially censored and still make money. Are you asking for them to give up and accept total censorship and forfeit money? If not, what would you like Google to do?
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by PhasmaFelis on Wednesday October 03, 2018 @01:19PM
(#18132460)
> Obviously they don't want to censor things, but they also want to profit.
I'm not seeing the moral difference between this and the grandparent post. "We don't want to be evil, but they offered us a lot of money, so what could we do?"
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by jamescostian on Wednesday October 03, 2018 @05:29PM
(#18134973)
Is google existing in China with censorship an "evil" thing? Any alternative in China will need the same censorship, so why is Google evil? I think we can all agree that people (and companies) being censored are not evil just because they must censor themselves - rather, the heads of the country that require censorship are the evil ones.
If you're a police officer and you have to arrest people for some stupid law you disagree with, are you evil, or are the people requiring you to perform that arrest evil?
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by PhasmaFelis on Wednesday October 03, 2018 @11:13PM
(#18136865)
This argument boils down to "What I'm doing is evil, but someone else would do it if I refused, so I might as well get paid for it." It's basically the Nuremberg Defense, but without even the threat of punishment, only desire for profit.
To answer your question: the police officer may not be evil, but she's certainly doing evil. It may be possible to make a coherent argument that the harm done is outweighed by the good the cop can do in her community if she toes the line and keeps her job. I don't think you can make that argument when the harm is "willingly abetting an oppressive government on a massive scale" and the benefit is "we make a whole bunch of money."
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by zelon88 on Wednesday October 03, 2018 @02:23PM
(#18133145)
China will steal any technology you put in their country.
Not only will they steal it, but they'll use it for whatever they want.
Right now China is talking to Google because they lack the technological prerequisites to make their goals happen by themselves. If you want to see a Chinese Google competitor, just let Google get a shoe in the door and wait a couple years. Then when China has what it wants they'll dismiss Google.
Google's short-sighted greed is going to divide the internet in two. We should be letting China either stand on it's own or join the rest of the world. Instead they will prioritize market share in a technologically inept country and, quite advertently, give the Chinese everything they're lacking to completely break away from the world wide web and start their own.
I just can't wait until Google gets kicked out of the party they created for themselves.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by jamescostian on Wednesday October 03, 2018 @05:38PM
(#18135052)
> China is talking to Google because they lack the technological prerequisites to make their goals happen by themselves
Seriously? China has 1.3B people and you don't think that any of them can do the same things people in USA can do?
> technologically inept country
Add up the populations of Europe and USA and you'll still be hundreds of millions away from that of China alone. And you still believe China is technologically inept?
I can't tell if this is satire or if you just hate China. Do you have any measurements demonstrating the ineptitude you mention?
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by ebullientocelot on Wednesday October 03, 2018 @06:46PM
(#18135445)
China certainly isn't technologically inept. They are playing a game of catchup that is mad impressive, makes plenty of sense that they'd seek to "appropriate" IP instead of reinventing the wheel.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by zelon88 on Wednesday October 03, 2018 @04:47PM
(#18134692)
Do you really think a nation state (especially a psuedo-communist one) that involves itself in a project like this with specific requirements (like backdoors) is going to let it be housed off-site? Do you really think they won't demand to let their engineers all over it? Inside and out?
The whole reason AMD exists is because IBM wouldn't do business with Intel without an alternate domestic supplier.
In government manufacturing here in the US we can't even put CUI in the Cloud if the end-user is the government. And we're democratic. Can you imagine the export controls on Chinese technology?
The chances that China WON'T see the source code are zero.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by whatshisface on Wednesday October 03, 2018 @12:47PM
(#18132125)
The parent was arguing that it was less wrong because Google was motivated to do it by self-interest. That's simply not a mitigating factor in any case.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by code_duck on Wednesday October 03, 2018 @01:07PM
(#18132345)
I guess that’s what the GP was saying. I’m not sure what the alternative is, though - Google could completely pull out of the Chinese market and leave it for competitors like Facebook, Yahoo and MS? Didn’t we go through that already?
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by whatshisface on Wednesday October 03, 2018 @02:24PM
(#18133155)
To respond to your argument, the same "sitting duck" claim could be made in any case of wrongdoing. You can't steal something just because it is unsecured and likely to be stolen - "His bike wasn't locked, so I took it on the grounds that somebody would probably take it and that somebody might as well be me." Neither the ease of perpetrating the crime nor the number of other criminals in the world are mitigating factors when you and your specific actions are tried.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by code_duck on Thursday October 04, 2018 @01:43PM
(#18141985)
We’re talking about business. To many people, those other companies are conducting legitimate business in China, not committing a clearly inexcusable crime, like your example. Google is competition with those companies worldwide, and it could easily be construed by shareholders that their refusal to participate is harming the business. A clear case can be made that choosing to not participate in the largest market in the world for moral reasons is not a good business decision. The comparison you’ve made fits the situation poorly but I’d welcome a better analogy.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by xg15 on Wednesday October 03, 2018 @11:10AM
(#18130939)
> China has a nation-wide firewall blocking any Google service, thereby forcing Google to negotiate how their service works if they want to make money there.
So if the Chinese demand they get real-time access to all information Google has stored about anyone, or Google gets banned from China, they should do that too?
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by bhtru on Thursday October 04, 2018 @11:32AM
(#18140811)
Whataboutism wasn’t necessarily the point I intended on making. Rather if Google employees feel morally infringed at the prospect of Dragonfly for reasons described why then do they give a pass to their own state? Of course the USA & China differ vastly on governance but what’s the use of principles if you selectively apply them?
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by wutbrodo on Wednesday October 03, 2018 @01:01PM
(#18132294)
IIRC, MUSCULAR was the program where they were getting direct access, and they did so without Google's knowledge. That was the program that had the slides with the infamous (at least within Google) smiley talking about how SSL is removed at the edge of Google's network.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by throwwedoct on Wednesday October 03, 2018 @02:35PM
(#18133299)
Who needs camps when you can drone strike them? [1]
> In 2014, former CIA and NSA director Michael Hayden said in a public debate, “We kill people based on metadata.”
> According to multiple reports and leaks, death-by-metadata could be triggered, without even knowing the target’s name, if too many derogatory checks appear on their profile. “Armed military aged males” exhibiting suspicious behavior in the wrong place can become targets, as can someone “seen to be giving out orders.” Such mathematics-based assassinations have come to be known as “signature strikes.”
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by throwwedoct on Wednesday October 03, 2018 @11:41PM
(#18136992)
GP was asking how this is different than what the NSA does. The poster above me said it was because China acts on that information, but the US does not.
I provided evidence America does act on information.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by x220 on Thursday October 04, 2018 @02:37AM
(#18137686)
You're not wrong. The NSA acts on that information, but the comparison is meaningless. America launches targeted attacks on what it believes to be terrorist threats to itself. China murders millions of its own innocent civilians.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by jackhack on Wednesday October 03, 2018 @11:00AM
(#18130852)
related to #1 -- I predict if some division of Alphabet threatens the income of another larger division (esp. Google), the smaller one will be shut down.
This is the reason for much of Sony's failure/inability to build a usable mp3 player. They built amazing music playback devices, but the record label division was so terrified of 'piracy' they forced the hardware division to require a proprietary encryption format (no "plain" mp3s) which essentially ruined the usability. So the company that built the walkman was hobbled, deliberately. Even the Poor Sony Aibo robot dog had to use specially modified Sony memory sticks with encryption and keys written into the normally-unwritable boot sector.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by mcphage on Wednesday October 03, 2018 @12:17PM
(#18131763)
Alternately, Jigsaw won’t work against Google’s own censorship efforts, and exists to push countries that want to censor their citizens’ internet to use Google’s own censorship product.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by HillaryBriss on Wednesday October 03, 2018 @10:52AM
(#18130755)
> ...thereby forcing Google to negotiate how their service works if they want to make money there.
I'm struggling to see how this addresses the point about Google's variable standards. I mean, are you saying that somehow because Google needs to adjust its standard to make money in a particular market that it therefore doesn't have variable standards?
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by bun_at_work on Thursday October 04, 2018 @08:19AM
(#18139188)
I'm not trying to justify anything, exactly. I'm pointing out that oversimplifying the situation is not helpful.
However, they are different in this case because Venezuela's market isn't large enough that Google feels the need to bend to the will of the government there to be competitive in the world's market. Therefore, they can afford, on a competitive level, to stand against censorship in Venezuela, where doing the same thing in China costs them a huge amount of money. Which is their motivator, as they are a corporation.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by jlarocco on Wednesday October 03, 2018 @12:09PM
(#18131679)
I'm not sure I understand what you're getting at.
Alphabet and Google can't claim to be against censorship while they're profiting from it. They can't have their cake and eat it too.
Clearly the only thing Google and Alphabet are "for" is making more money, so there's really no point pretending they have a moral compass guiding them.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by ben_w on Wednesday October 03, 2018 @12:58PM
(#18132255)
Why can’t they make that claim? There are many things in this world that I oppose yet benefit from. I can’t fight every injustice in the world — I don’t know how to, I haven’t got the skills, I don’t have the resources.
It’s like a prayer to serenity: Grant me the courage to change what I cannot accept, the serenity to accept what I cannot change, and the wisdom to know the difference.
Google maybe rich beyond the dreams of any single human, but they can’t force the Chinese government to stop thinking like the Chinese government.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by jlarocco on Wednesday October 03, 2018 @03:24PM
(#18133884)
> Why can’t they make that claim?
Well, they can claim anything they want. If they want to be consistent and have integrity then they'll make sure their actions align with their claims. Claiming to support privacy while also conceding to China shows they have no integrity and they're only telling people what they want to hear for marketing purposes.
> Google maybe rich beyond the dreams of any single human, but they can’t force the Chinese government to stop thinking like the Chinese government.
Right, but their inability to change Chinese policy doesn't imply that they have to take an active role in helping China's censorship. They could have said, "We're not doing business in China because it conflicts with our 'Don't be evil' policy." Instead, they got rid of that policy and are working with the Chinese government to censor web content.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by r3bl on Wednesday October 03, 2018 @11:09AM
(#18130932)
As someone who was a part of a project that Jigsaw sponsored, I can vouch for his claim that Google and Jigsaw have entirely different (and often contrary) missions.
I am a Google critic as much as everyone else here, but I can say with confidence that we would all be thrilled if Google took the same stand on censorship as is Jigsaw's.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by freewizard on Wednesday October 03, 2018 @10:52AM
(#18130748)
Yes, dual standards because of dual internets. Alphabet is contributing to the trend of dual internets predicted by its own ex-CEO Eric Schmidt[1], "a Chinese-led internet and a non-Chinese internet led by America".
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by foobiekr on Wednesday October 03, 2018 @11:55AM
(#18131494)
Perhaps this project is to create demand for Google-China-like solutions in other countries. Venezuela is not a large market but perhaps they want a demo vehicle for Saudi Arabia to witness to help get them a deal (and a more favorable one than China).
The most profitable SW projects often have a lot of reuse.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by gambler on Wednesday October 03, 2018 @11:47AM
(#18131401)
Just another example of why codes of conduct are fuzzy hypocritical bullshit.
If you want to actually change something, create clearly defined, actionable rules, specify scope and follow them 100% of the time. Like "we do not log any information except X and Y".
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by bubblethink on Wednesday October 03, 2018 @10:51AM
(#18130740)
This is about preventing dns manipulation attacks. That assumes that a DNS server (like 8.8.8.8) is generally accessible, but an adversary is trying to manipulate the responses. In China, you anyway can't access regular global dns servers. You need to use official dns supported by the government. So the question of dns manipulation is moot.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by tgsovlerkhgsel on Wednesday October 03, 2018 @06:32PM
(#18135370)
"Worked" does not mean freely accessible. It means you received DNS responses when you sent DNS requests there, but there's a high chance the responses weren't coming from Google, and that encrypted connections would fail.
However, it seems that Google hosts the encrypted endpoint separately anyways, not on 8.8.8.8.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by Barrin92 on Wednesday October 03, 2018 @02:33PM
(#18133283)
Google's a big business with many divisions and even more people. I don't see why moral consistency is supposed to be expected or of particular interest.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by x220 on Wednesday October 03, 2018 @04:39PM
(#18134635)
Google and Alphabet have executives that set mission statements. If these executives wanted to, they could easily prioritize ethical conduct and refuse compliance with censorship schemes and oppressive regimes.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by hnbroseph on Wednesday October 03, 2018 @02:15PM
(#18133071)
what consistency are you referring to? that jigsaw ought do what google does, or google ought to what jigsaw does, and thus establish some notional inter-consistency between them?
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by samswin on Wednesday October 03, 2018 @03:02PM
(#18133647)
It will tell the user to the chinese government, in a way.
1. All DNS traffic from intra must go through the chinese national firewall. Although the firewall cannot see or tamper the data, it can tell whether it is encrypted.
2. Most DNS traffic are not encrypted. Intra users will be very easy to discover to the firewall, like a flare in the night.
3. One's name is linked to one's IP in china, and encryption alone cannot hide the user IP.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by 394549 on Wednesday October 03, 2018 @10:44AM
(#18130670)
Maybe it will, but have a country-specific feature to report its users to the authorities. After all, gotta comply with those "local laws and regulations."
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by mikeash on Wednesday October 03, 2018 @11:12AM
(#18130965)
This is an interesting communications dilemma.
I don't think most people have really understood the Google/Alphabet transition. When most people think of "Google" they're actually thinking of Alphabet.
If you say "Google" then you're conveying the correct information using the wrong term. If you say "Alphabet" then you're using the right term but a lot of people won't know what you're talking about. What to do?
This is probably less of a problem on HN than it is for TechCrunch.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by CydeWeys on Wednesday October 03, 2018 @11:20AM
(#18131034)
I would really hope that everyone on HN knows what Alphabet is by now. If necessary, it can be written as "Alphabet (Google's parent company)". The TechCrunch crowd is pretty similar and should mostly know this too, right?
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by antidesitter on Wednesday October 03, 2018 @11:51AM
(#18131444)
> This is an interesting communications dilemma. I don't think most people have really understood the Google/Alphabet transition.
If the media consistently referred to Google as Google and Alphabet as Alphabet, people would learn the difference more quickly. Using one term for the other is just delaying this process and sowing confusion.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by ccnafr on Wednesday October 03, 2018 @01:24PM
(#18132513)
The confusion is also because despite being Alphabet-owned... most of these smaller companies are listed under a Google domain, so people believe they're Google-owned instead of Alphabet-owned.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by SonnyWortzik on Wednesday October 03, 2018 @02:08PM
(#18132985)
oh just turn it on an use it huh? And collect all of my web queries. Clever. Yet another mass collection scheme by Alphabet. I have to give it to Google(the real company here), they sure know how to embed themselves everywhere in your life.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by RcouF1uZ4gsC on Wednesday October 03, 2018 @10:52AM
(#18130751)
I find it ironic that both CloudFlare and Google which this app uses, were involved in the censorship of DailyStormer. It was a vile site and Google and ClouFlare were fully within their rights to terminate their business agreement with them. However, they do not also get to turn around and claim the high moral ground of being anti-censorship in principle. So this is not about censorship vs free speech, it is about government vs corporate censorship.
Re:Alphabet's cyber unit Jigsaw introduces a new security ap...
by s73v3r_ on Wednesday October 03, 2018 @01:32PM
(#18132591)
Choosing not to do business with a company is NOT censorship. The only way you could believe it to be so is if you believe that the Daily Stormer has a right to speech, but no one else does.
I'm a very harsh critique of Google due to the threat they pose for privacy, however here they are doing a good thing, along the lines of the public DNS servers they provide, which I know have helped people [1].
Having your requests go through Google is not ideal, however not many people have the capacity to search for better, but more obscure solutions.
Also this isn't about privacy, but about working around censorship at the DNS level. If you want privacy, you use an anonymous VPN or Tor. And frankly, if you can't trust Google's privacy policy for this service, then you shouldn't use a Google phone.
[1] https://developers.google.com/speed/public-dns/
And Google already censors search results in the EU with the right to be forgotten, where they've received 41,000 requests from EU politicians, so there is precedence in working with local governments
Which ones? I wasn't aware it was even live. Are you talking about Bing, which is already operating in China?
https://theintercept.com/2018/09/14/google-china-prototype-l...
I do despise google's efforts in dismantling any privacy which is left on the internet, but this particular program is very good.
I don't get this attitude of 'don't take a cake from the devil'. A) google is not devil, just another megacorp B) don't be blinded with slogans, evaluate merits of each offer individually. This particular offer is great and helps real people aka 'makes the world a better place', lol.
Edit: if you want to downvote, please also reply with your ideas and tell me why you disagree with me.
That said, this particular product, which has nothing to do Google's business with China, is absolutely crucial for people facing censorship elsewhere, and it is without a doubt a morally good product. You can't even claim that they're doing it solely to gather DNS data (for whatever reason), because if they were making an attempt at that, they would sure as fuck wouldn't allow you to choose Cloudflare.
You can sit here and call that hypocritical because of Google's relationship in China, but that doesn't make their solution any less good to those facing censorship. Nobody else stepped up. Jigsaw did, and they deserve to be thanked for that.
Even if someone's intentions are evil in nature, you're not going to make them less evil by saying "who cares, you're evil" whenever they do something good.
https://github.com/Jigsaw-Code/intra
Also, if you're looking for a DoH server that block adverts, here is mine:
https://dns.aaflalo.me/dns-query
> https://dns.aaflalo.me/dns-query
Great! I've been looking for something like this for a long time. Is the source code open? Not that I don't trust you with my DNS queries but...
https://www.aaflalo.me/2018/10/tutorial-setup-dns-over-https...
Still need to document the PiHole part.
I've also disable all logging for Nginx and Pihole. The server is also listed on https://dnscrypt.info/public-servers
Also, if you're in the American Continent, you might want to use the proxy I setup on Google Cloud Platform:
https://dns-gcp.aaflalo.me/dns-query
I also run my own DoH server in Singapore that block adverts[2] with Ansible script to deploy it to any FreeBSD servers[3] :-)
Edit: looks like mine doesn't supported running with Intra quite yet. Will work on it tonight.
[1]: https://itunes.apple.com/us/app/dnscloak-dnscrypt-doh-client...
[2]: https://sg.dns.grid.in.th/dns-query
[3]: https://github.com/sirn/gridns-deploy
I don't think you'll find a dns server that block ads that have whitelisted Google Ads.
Whether the advantages of that outweigh giving google your DNS traffic (and realistically they already know every site you visit, because almost everyone uses google analytics) depends on your local security situation.
Note that your local security situation may include the good old rubber hose attack: https://security.stackexchange.com/questions/194353/police-f...
Regardless of my privacy concerns regarding Google and other Alphabet-owned businesses, Jigsaw and Project Zero teams deserve to be praised by anyone who gives a shit about privacy/security.
2) I wouldn't use this if I lived in China. Companies operating in China are required to turn over data about their users to the government. And Google is soon going to be partnering with China to release a censored version of their search engine[1]. Now they can provide the government your entire browsing history, not just your searches!
[1] https://theintercept.com/2018/08/01/google-china-search-engi...
[1] https://www.nytimes.com/2017/02/23/technology/google-jigsaw-...
https://blog.nightly.mozilla.org/2018/06/01/improving-dns-pr...
Has been plenty useful getting around court -ordered clampdowns on torrent sites in India.
You can configure it to use any publicly known DoH server: https://github.com/curl/curl/wiki/DNS-over-HTTPS#publicly-av...
You can use your own DNS-over-HTTPS server if you want to.
Or "non-oppressive" governments like the UK.
Google on Venezuelan censoring: bad, fight it
Google on Chinese censoring: complicit, support it
1) This tool is made by an Alphabet owned company (Jigsaw), not Google, another Alphabet owned company. The companies will have different missions, even if profits flow the same direction.
2) Venezuela doesn't have a huge market where Google is blocked by a nation-wide firewall.
3) China has a nation-wide firewall blocking any Google service, thereby forcing Google to negotiate how their service works if they want to make money there.
Note: Oversimplifying the situation for the sake of pitchforking a company you might not like does no one any good. Venezuela and China are very different companies, in very different environments. Google as a company (and Alphabet, probably more so) is almost certainly anti-censorship, philosophically; they just don't operate in a vacuum.
Since when was being motivated to do wrong a mitigating condition for having done wrong? "Sorry officer, I wasn't going to steal it at first, but then I started wanting it."
They can either be totally censored or partially censored and still make money. Are you asking for them to give up and accept total censorship and forfeit money? If not, what would you like Google to do?
I'm not seeing the moral difference between this and the grandparent post. "We don't want to be evil, but they offered us a lot of money, so what could we do?"
If you're a police officer and you have to arrest people for some stupid law you disagree with, are you evil, or are the people requiring you to perform that arrest evil?
To answer your question: the police officer may not be evil, but she's certainly doing evil. It may be possible to make a coherent argument that the harm done is outweighed by the good the cop can do in her community if she toes the line and keeps her job. I don't think you can make that argument when the harm is "willingly abetting an oppressive government on a massive scale" and the benefit is "we make a whole bunch of money."
Not only will they steal it, but they'll use it for whatever they want.
Right now China is talking to Google because they lack the technological prerequisites to make their goals happen by themselves. If you want to see a Chinese Google competitor, just let Google get a shoe in the door and wait a couple years. Then when China has what it wants they'll dismiss Google.
Google's short-sighted greed is going to divide the internet in two. We should be letting China either stand on it's own or join the rest of the world. Instead they will prioritize market share in a technologically inept country and, quite advertently, give the Chinese everything they're lacking to completely break away from the world wide web and start their own.
I just can't wait until Google gets kicked out of the party they created for themselves.
Seriously? China has 1.3B people and you don't think that any of them can do the same things people in USA can do?
> technologically inept country
Add up the populations of Europe and USA and you'll still be hundreds of millions away from that of China alone. And you still believe China is technologically inept?
I can't tell if this is satire or if you just hate China. Do you have any measurements demonstrating the ineptitude you mention?
There's no reason to bring source code over.
The whole reason AMD exists is because IBM wouldn't do business with Intel without an alternate domestic supplier.
In government manufacturing here in the US we can't even put CUI in the Cloud if the end-user is the government. And we're democratic. Can you imagine the export controls on Chinese technology?
The chances that China WON'T see the source code are zero.
So if the Chinese demand they get real-time access to all information Google has stored about anyone, or Google gets banned from China, they should do that too?
What America does has no effect on the morality of what China does. This is whataboutism at its finest.
But I suppose you’re right, the US only murders tens of millions of foreigners.
Is there one? PRISM and the early Snowden leaks indicated the searches were immediate. Was that not true?
[1]: https://www.nytimes.com/2018/09/08/world/asia/china-uighur-m...
> In 2014, former CIA and NSA director Michael Hayden said in a public debate, “We kill people based on metadata.”
> According to multiple reports and leaks, death-by-metadata could be triggered, without even knowing the target’s name, if too many derogatory checks appear on their profile. “Armed military aged males” exhibiting suspicious behavior in the wrong place can become targets, as can someone “seen to be giving out orders.” Such mathematics-based assassinations have come to be known as “signature strikes.”
https://www.rollingstone.com/politics/politics-features/how-...!
I provided evidence America does act on information.
This is perspective.
This is the reason for much of Sony's failure/inability to build a usable mp3 player. They built amazing music playback devices, but the record label division was so terrified of 'piracy' they forced the hardware division to require a proprietary encryption format (no "plain" mp3s) which essentially ruined the usability. So the company that built the walkman was hobbled, deliberately. Even the Poor Sony Aibo robot dog had to use specially modified Sony memory sticks with encryption and keys written into the normally-unwritable boot sector.
I'm struggling to see how this addresses the point about Google's variable standards. I mean, are you saying that somehow because Google needs to adjust its standard to make money in a particular market that it therefore doesn't have variable standards?
Not quite following you ...
That's the point. Google is willing to throw out their supposed principles in order to make money.
How is that a justification?
However, they are different in this case because Venezuela's market isn't large enough that Google feels the need to bend to the will of the government there to be competitive in the world's market. Therefore, they can afford, on a competitive level, to stand against censorship in Venezuela, where doing the same thing in China costs them a huge amount of money. Which is their motivator, as they are a corporation.
Alphabet and Google can't claim to be against censorship while they're profiting from it. They can't have their cake and eat it too.
Clearly the only thing Google and Alphabet are "for" is making more money, so there's really no point pretending they have a moral compass guiding them.
It’s like a prayer to serenity: Grant me the courage to change what I cannot accept, the serenity to accept what I cannot change, and the wisdom to know the difference.
Google maybe rich beyond the dreams of any single human, but they can’t force the Chinese government to stop thinking like the Chinese government.
Well, they can claim anything they want. If they want to be consistent and have integrity then they'll make sure their actions align with their claims. Claiming to support privacy while also conceding to China shows they have no integrity and they're only telling people what they want to hear for marketing purposes.
> Google maybe rich beyond the dreams of any single human, but they can’t force the Chinese government to stop thinking like the Chinese government.
Right, but their inability to change Chinese policy doesn't imply that they have to take an active role in helping China's censorship. They could have said, "We're not doing business in China because it conflicts with our 'Don't be evil' policy." Instead, they got rid of that policy and are working with the Chinese government to censor web content.
this seems a bit reductive if not weaseling. google isn't a bystander, they're knowingly and voluntarily aiding a state oppress it's people.
c o m p a n i e s
Sorry for bringing this up (I never do that on HN) but this is just too questionable of a defense to be putting up.
I am a Google critic as much as everyone else here, but I can say with confidence that we would all be thrilled if Google took the same stand on censorship as is Jigsaw's.
[1] https://www.cnbc.com/2018/09/20/eric-schmidt-ex-google-ceo-p...
https://www.pcmag.com/news/357494/google-to-de-rank-rt-sputn...
The most profitable SW projects often have a lot of reuse.
[1] https://en.wikipedia.org/wiki/The_Sneetches_and_Other_Storie...
And it worked. Sadly, there are many more evils in the world than becoming Microsoft.
If you want to actually change something, create clearly defined, actionable rules, specify scope and follow them 100% of the time. Like "we do not log any information except X and Y".
https://www.washingtonpost.com/news/morning-mix/wp/2018/03/2...
Will this tool bypass the censored Google that will be introduced in China?
More likely it will automatically report the user to the Chinese government if used in China.
However, it seems that Google hosts the encrypted endpoint separately anyways, not on 8.8.8.8.
1. All DNS traffic from intra must go through the chinese national firewall. Although the firewall cannot see or tamper the data, it can tell whether it is encrypted.
2. Most DNS traffic are not encrypted. Intra users will be very easy to discover to the firewall, like a flare in the night.
3. One's name is linked to one's IP in china, and encryption alone cannot hide the user IP.
It may work in some other nations. But not china.
"Alphabet's Jigsaw" would be more appropriate. Jigsaw is, at best, a sibling of Google, not a part of Google.
It is explained in the very first sentence, but comments so far don't seem to acknowledge that.
I don't think most people have really understood the Google/Alphabet transition. When most people think of "Google" they're actually thinking of Alphabet.
If you say "Google" then you're conveying the correct information using the wrong term. If you say "Alphabet" then you're using the right term but a lot of people won't know what you're talking about. What to do?
This is probably less of a problem on HN than it is for TechCrunch.
It's still Google because it's the most important part. A synecdoche, not a misconception.
> Waymo, the former Google self-driving project that spun out to become a business under Alphabet, ...
Didn't look through all of them, but couldn't find an instance in which Waymo is represented as Google's Waymo anywhere, let alone in the title.
If the media consistently referred to Google as Google and Alphabet as Alphabet, people would learn the difference more quickly. Using one term for the other is just delaying this process and sowing confusion.
https://jigsaw.google.com/