5 ms·
Apparent use of Sandvine devices for malicious or dubious ends in two countries
- tehwebguy 9y agoHopefully someday we can hold accountable those helping dictator Recep Erdogan to oppress his people as war criminals!
- sosilkj 9y agoFacebook also aids the Erdogan regime: https://www.nytimes.com/2015/01/27/world/europe/facebook-said-to-block-pages-on-muhammad-to-avoid-ban-in-turkey.html https://www.nytimes.com/2015/01/27/world/europe/facebook-sai...
- coretx 9y agoI'm not so in the loop anymore regarding helping out dissidents, but what I do remember is that the BGP based censorship in Turkey is executed by the Militairy. Perhaps it's a idea for citizenlab to sue the Turkish state for using it's militairy agains't it's own people. The political price of censorship would rise even if the litigation fails.
- yoran 9y agoThis shows again that the vast majority of corporations are non-ethical entities and only seek profit. Only when their profits are endangered, e.g. backlash from the general public, do they act "ethically".
- verytrivial 9y agoWell, not really. But it does show the safety of internet users can be compromised by attacks/inducements against a trivially small number of companies entrusted with critical infrastructure.
- vollmond 9y agoCorporations are made up of people. How many people are assisting in exactly this sort of thing? Military servicemembers, bureaucrats, judicial workers, etc? As long as humans are violating ethics, the organizations they create will as well. It's by no means a business-specific feature of society.
- mabbo 9y agoAn acquaintance of mine that I've known since high school (and apparently we had play dates when we were toddlers) works for Sandvine. Travels often to handle installations. I had not realized this is what they do, what he was setting up. Kind of sad to hear it. He's no fool, which means he probably fully understands what he's doing. I do wonder how he justifies it to himself.
- Angostura 9y agoThey provide generic traffic management and acceleration tools. They can be used to provide this kind of bulk of interception but its not the only (or even most usual?) application
- kevin_nisbet 9y agoIt may be unfair to jump to the conclusion that your acquaintance does this type of work. From how far I've gotten through the report, it seems to more be pointing towards the procera equipment doing this, which is a recent merger with Sandvine late last year. Also, it's not like Sandvine only sells it's products to Turkey and Egypt for this feature set, it's entirely plausible that this person could work in a market that doesn't have these concerns. Disclosure: I used to work with Sandvine as a customer in a previous role
- buraktamturk 9y agoI wonder what prevents them to order TurkTrust to issue ssl sertificates to do this kind of attack to the secure websites. Turkey recently has gained power to take over companies, if they don't comply with their order (temporary, State-of-emergency law). I think they had issued a certificate to *.google.com before: https://nakedsecurity.sophos.com/2013/01/08/the-turktrust-ssl-certificate-fiasco-what-happened-and-what-happens-next/ https://nakedsecurity.sophos.com/2013/01/08/the-turktrust-ss... edit: Ankara was the target. Like this one.
- Sephr 9y agoNothing at all, and CAA doesn't help solve the problem either unfortunately. Even when it comes to CAs that voluntarily adopted CAA, their implementations have silently failed on occasion. See https://www.net.in.tum.de/fileadmin/bibtex/publications/papers/caa17.pdf https://www.net.in.tum.de/fileadmin/bibtex/publications/pape...
- sorokod 9y agoAccording to the map here https://www.sandvine.com/company https://www.sandvine.com/company, very few countries are not a customer.