News for hackers. Stuff that matters.
Re:EU Digital Identity Reform: The Good, Bad and Ugly in the... by sofixa on Wednesday November 08, 2023 @02:35AM (#38187680)
> Now majority of web runs on public cloud and "encrypted" by CloudFlare MiTM engine. These are literally centralised mass surveillance platforms.

If you can prove any of the big public clouds are breaking TLS for surveillance purposes, they'll be dead within months. Now is your chance, short them and expose them (or you can even combine with professionals, like Hindenburg Research).

Re:EU Digital Identity Reform: The Good, Bad and Ugly in the... by mildmotive on Wednesday November 08, 2023 @02:41AM (#38187718)
I don’t think the concern here is TLS, but rather how CloudFlair works. This is a unique problem to CloudFlair. TLS itself is not the issue.
Re:EU Digital Identity Reform: The Good, Bad and Ugly in the... by SXX on Wednesday November 08, 2023 @02:50AM (#38187773)
Nothing wrong with TLS. It's just funny how author suggests that someone actually cared about Snowden revelations.

It's like "We were worried about mass surveillance after Snowden so decided to host everything directly on FBI servers" because CloudFlare is exactly this.

Re:EU Digital Identity Reform: The Good, Bad and Ugly in the... by walterbell on Wednesday November 08, 2023 @04:16AM (#38188237)
A decade late, but there's a draft bill, https://news.ycombinator.com/item?id=38185720

> a Frankenstein bill more than 200 pages long, combining the choicest parts of a stack of cannibalized privacy bills that rarely made it past committee. The patchwork effect helps form a comprehensive package, targeting various surveillance loopholes and tricks at all levels of government—from executive orders signed by the president, to contracts secured between obscure security firms and single-deputy police departments in rural areas ... The GSRA is a Christmas list for privacy hawks and a nightmare for authorities who rely on secrecy and circumventing judicial review to gather data on Americans without their knowledge or consent.

Re:EU Digital Identity Reform: The Good, Bad and Ugly in the... by SXX on Wednesday November 08, 2023 @05:51AM (#38188746)
That's actually a great news. At least some legal barrier is better than none.
Re:EU Digital Identity Reform: The Good, Bad and Ugly in the... by SXX on Wednesday November 08, 2023 @02:44AM (#38187738)
These are facts:

1. CloudFlare and clouds obliged to follow US law.

2. Gag orders exist.

It doesn't matter if they actively used for mass surveillance or not. This "encryption" dont protect anything from US government or it's allies.

Re:EU Digital Identity Reform: The Good, Bad and Ugly in the... by AndyMcConachie on Wednesday November 08, 2023 @02:48AM (#38187762)
Re:EU Digital Identity Reform: The Good, Bad and Ugly in the... by fragmede on Wednesday November 08, 2023 @03:05AM (#38187853)
It's about having to extend trust past your comfort zone. Would you be fine with total strangers having your address and your house keys, and a pinky swear to never use them, or would you rather them not have your keys in the first place?
Re:EU Digital Identity Reform: The Good, Bad and Ugly in the... by ClumsyPilot on Wednesday November 08, 2023 @04:23AM (#38188270)
> big public clouds are breaking TLS for surveillance purposes, they'll be dead within months

You mean how all the telco corporations that, as Snowned releaved, helped NSA conduct mass survailance are now bancrupt? Oh, wait!