Encrypted traffic interception on Hetzner and Linode targeting Jabber service

Re:Encrypted traffic interception on Hetzner and Linode targ... by scraptor on Friday October 20, 2023 @06:33PM (#37962229)

The fact that they were legally required to MITM their customers does not make them more trustworthy (in the sense of unlikely to do it in the future), just the opposite! Of course that applies equally to any other cloud host (modulo jurisdiction games) but that does little to restore my interest in running my software on other peoples computers.

[ Parent | on HN ]

Re:Encrypted traffic interception on Hetzner and Linode targ... by wlonkly on Friday October 20, 2023 @09:46PM (#37963371)

Or, presumably, using other people's internet peering, since the MITM was outside of the XMPP server host.

I think jurisdiction games is all you have, because outside of that there's going to be _someone_ close to you network-wise who will fold when faced with a lawful intercept order.

[ Parent | on HN ]

Re:Encrypted traffic interception on Hetzner and Linode targ... by Jenda_ on Friday October 20, 2023 @09:53PM (#37963404)

It's not about "other peoples computers" (there is no evidence of the system itself to be backdoored). If you are running on your own hardware in your own house, you still need an ISP that can do exactly this time of MITM.

[ Parent | on HN ]

Re:Encrypted traffic interception on Hetzner and Linode targ... by dathinab on Saturday October 21, 2023 @02:48PM (#37969476)

yes it applies to pretty much any datacenter and carrier in the world

but that's why running thing at home doesn't help that much, because it also applies to carriers, too

and when it comes to sizing data it tends to not make much difference whether they physically size disk at your home or in the data center, actually if legal order for a sizure like that is confirmed by a judge it's normally applied to all the computers such a person has, both at home and in datacenters

[ Parent | on HN ]