News for hackers. Stuff that matters.

A comment on MITM on HTTPS traffic in Kazakhstan. Parent comment

Re:MITM on HTTPS traffic in Kazakhstan by shawnz on Thursday July 18, 2019 @05:24PM (#20474051)
No, it's not pointless. This attack was detectable because of PKI. Without it the attack would not have been detectable.

Being imperfect is different than being pointless. Even if you developed the perfect algorithm for global security infrastructure, the Kazakhstan government could still just break down your door and implant the backdoor into your hardware if they wanted. So by your logic should we just forget about this encryption stuff and just do everything in plain text again?

[ Parent | on HN ]
Re:MITM on HTTPS traffic in Kazakhstan by ridaj on Thursday July 18, 2019 @06:36PM (#20474618)
> Being imperfect is different than being pointless.

In particular, we'd see a lot more places than Kazakhstan do this if good countermeasures weren't in place...

[ Parent | on HN ]
Re:MITM on HTTPS traffic in Kazakhstan by mmphosis on Thursday July 18, 2019 @05:55PM (#20474281)
An implant is not necessary. Intel ME is embedded with the CPU and has access to everything.
[ Parent | on HN ]
Re:MITM on HTTPS traffic in Kazakhstan by cpach on Friday July 19, 2019 @05:03AM (#20477148)
Intel ME is indeed scary stuff, but I think you need to provide stronger evidence if you want to convince us that governments can snoop on anyone anywhere just because of ME.
[ Parent | on HN ]