3 ms·

I've not seen any evidence of MITM attacks by ISPs since snowden. Have there been any evidence of HTTPS and/or VPNs being MITM'd by UK ISPs? Unless the UK gov

I've not seen any evidence of MITM attacks by ISPs since snowden. Have there been any evidence of HTTPS and/or VPNs being MITM'd by UK ISPs? Unless the UK government has cracked all the ciphers used by HTTPS + VPNs and have backdoored every CA, I think we'd already know about widespread systematic MITM attacks in UK users. If they have done all of that, then you can bet others have too then the whole world is screwed Please cite your sources of actual evidence. Talking about mysterious black boxes doesn't count - they could be pollution sensors for all we know.

dangerface 8y ago
> I've not seen any evidence of MITM attacks by ISPs since snowden. [1] There is evidence GCHQ are doing attacks on HTTPS via UK ISPs pre-snowden, post-snowden what does it matter? There is no evidence they have stopped. [2] The Investigatory Powers Act legalizes the governments use of this technology. If you are going to argue that they no longer have this capability or Snowden made it all up Im gonna need some sources. > Unless the UK government has cracked all the ciphers used by HTTPS + VPNs and have backdoored every CA You don't need to hack all the things you just need to hack like 95% of the things and [1] is evidence GCHQ have that. I mean I guess you can say "yea but im in that 5% the system works!" while GCHQ work to close the gap. I mean just read some of the stuff GCHQ do: https://theintercept.com/2015/09/25/gchq-radio-porn-spies-track-web-users-online-identities/ https://theintercept.com/2015/09/25/gchq-radio-porn-spies-tr... [1] https://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryption-codes-security https://www.theguardian.com/world/2013/sep/05/nsa-gchq-encry... [2] https://www.libertyhumanrights.org.uk/human-rights/privacy/snoopers-charter https://www.libertyhumanrights.org.uk/human-rights/privacy/s...

dangerface 8y ago

> I've not seen any evidence of MITM attacks by ISPs since snowden. [1] There is evidence GCHQ are doing attacks on HTTPS via UK ISPs pre-snowden, post-snowden what does it matter? There is no evidence they have stopped. [2] The Investigatory Powers Act legalizes the governments use of this technology. If you are going to argue that they no longer have this capability or Snowden made it all up Im gonna need some sources. > Unless the UK government has cracked all the ciphers used by HTTPS + VPNs and have backdoored every CA You don't need to hack all the things you just need to hack like 95% of the things and [1] is evidence GCHQ have that. I mean I guess you can say "yea but im in that 5% the system works!" while GCHQ work to close the gap. I mean just read some of the stuff GCHQ do: https://theintercept.com/2015/09/25/gchq-radio-porn-spies-track-web-users-online-identities/ https://theintercept.com/2015/09/25/gchq-radio-porn-spies-tr... [1] https://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryption-codes-security https://www.theguardian.com/world/2013/sep/05/nsa-gchq-encry... [2] https://www.libertyhumanrights.org.uk/human-rights/privacy/snoopers-charter https://www.libertyhumanrights.org.uk/human-rights/privacy/s...