New German law would force ISPs to allow secret service to install trojans

Re:New German law would force ISPs to allow secret service t... by johannes1234321 on Thursday July 09, 2020 @03:43PM (#23784236)

For many things there isn't really need to get the payload. Get the IP addresses, DNS lookups and TLS SNI information and correlate to information gathered from elsewhere and you can derive a lot.

[ Parent | on HN ]

Re:New German law would force ISPs to allow secret service t... by pabs3 on Thursday July 09, 2020 @10:25PM (#23787535)

You can derive a lot just from the set of IP addresses accessed, even if those IPs are cloud/CDN providers:

"What can you learn from an IP?" https://irtf.org/anrw/2019/slides-anrw19-final44.pdf

[ Parent | on HN ]

Re:New German law would force ISPs to allow secret service t... by dilyevsky on Thursday July 09, 2020 @04:02PM (#23784459)

+1 Hopefully DNS over tls and new sni encryption standards will put an end to all this in next 5-10 years

[ Parent | on HN ]

Re:New German law would force ISPs to allow secret service t... by throwawayway9 on Thursday July 09, 2020 @05:46PM (#23785603)

+1 for the optimism, but unfortunately even with those mitigations it is not enough. Using a VPN in combination with DoT/H is currently best practice I believe.

[ Parent | on HN ]

Re:New German law would force ISPs to allow secret service t... by pabs3 on Thursday July 09, 2020 @10:26PM (#23787541)

Even multi-layer VPNs or Tor leak data via global correlation attacks. We need VPNs and Tor to start doing network bandwidth padding.

[ Parent | on HN ]

Re:New German law would force ISPs to allow secret service t... by throwawayway9 on Thursday July 09, 2020 @11:22PM (#23787832)

Yes, I agree. Is there anything we can do in the meantime?

[ Parent | on HN ]