8 ms·
820GB Database Dump of Roskomnadzor (Russian Government Censorship Organization)
- chillage 5y agoKind of need to ask. Does this giant data dump from a censorship organization also include gathered personal data from private citizens? In which case this probably should not be made public.
- mmastrac 5y agoI don't think the privacy of citizens of a country actively involved in a hostile and unjustified military action against Ukraine is where our focus should be here.
- cyberpunk 5y agoNo. This is EXACTLY where it should be if we want to maintain our moral high ground.
- fit2rule 5y ago
- lanstin 5y agoSuch an understanding was a key to the US's fairly strong soft-power for much of the 20th C. Don't be cruel, treat everyone as tho they could be you.
- deleted 5y ago[deleted]
- wolverine876 5y agoAll humans are created equal and are endowed with inalienable rights ...
- runnerup 5y agoWhose moral high ground? As an American who worked in the middle east I have seen with my own eyes the devastation and ruin which American war crimes have wrought. I'm sure if we were forced to choose between a unitary superpower of USA, China, or Russia that the vast majority of anglophones would choose USA to "rule the world" -- myself included. But the wars in Iraq/etc were atrocities whose primary positive outcome was to fatten the owners of defense companies. That's a hell of a reason to kill as many people as we did. Again, I'm not saying "USA is as bad as Russia", I much prefer the USA being the world superpower. But I think we have very limited moral high ground as it is. I would like us to earnestly try building a bit more of it!
- cyberpunk 5y agoI'm European, so yeah, certainly not yours.
- wolverine876 5y ago> I have seen with my own eyes the devastation and ruin which American war crimes have wrought. No doubt those things have happened and are very serious, especially to the victims, but morality is a property of sinners; it's not meaningful for saints. What makes morality special and meaningful is that we have it and use it despite our sins, despite having the free will to chose evil. Saints don't exist anyway - we would have no morality if it required them. The world is rallying around Ukraine because of morality, because of a belief in freedom, self-determination, and justice. That is why the United States has so many allies, and countries like China and Russia have very few - it is possibly the great realist, geopolitical advantage of the US: we have allies who trust us, welcome our bases, invite our intervention, because of the (limited, human, very flawed) morality. > I would like us to earnestly try building a bit more of it! I could not agree more! Thank you for saying it.
- runnerup 5y agoYou’re probably overestimating the network effects of perceived morality and underestimating the effects of being by far the most powerful nation since 1945. If China doesn’t implode and becomes way more powerful than the United States, we will lose most of our allies regardless of popular opinion. But I really like your attitude!
- __del__ 5y ago"due to the tyrannical nature of your nation's government, your privacy rights have been suspended"
- mrguyorama 5y agoIsn't that basically the NSA's line? To it's own citizens no less?
- mcswell 5y agoNo.
- zeven7 5y agoSome people might even say bombing hospitals of your enemies isn't off limits. Those people would be the Russian politicians. Let's do better.
- dragonwriter 5y agoWell, so far they've said, officially, about this one bombing, in order (I may have missed some other explanations): (1) We didn't do it. (I think this story also had “Ukraine bombed it themselves”, but that may have been added by unofficial proxies and not part of the official explanation.) (2) We did it, intentionally, but it is long out of use as a maternity hospital and is instead an Azov base and so part of our legitimate war against Ukrainian Nazis, and the pregnant women shown are crisis actors. (3) We’re investigating what actually happened.
- mmastrac 5y agoAre you making an equivalence between bombing hospitals and releasing private information as a side-effect of leaking a censorship organization's data?
- zeven7 5y agoNo
- BTCOG 5y agoJust as one example as there are numerous others - October 3rd, 2015 US Air Force AC-130U gunship struck a trauma hospital in Kunduz in Northern Afghanistan, killing 42 and injuring 30 others. I wouldn't think Russian politicians called for hospitals and Ukrainian schools to be hit, but that's just not how war works. Certainly, US politicians weren't calling for an Afghan hospital to be struck with missile fire.
- trasz 5y agoExcept they did. Russian military can’t fight proper army, so they are killing civilians instead. It’s not an accident, it’s done on purpose.
- chillage 5y agoI mean I don't think that forgetting our principles and indiscriminately screwing with everything inside Russia's borders because it's all fair game is the way to go either. So for example in this case if we want to damage the censorship agency we ideally remove PII of anyone who is innocent within the leak. I.e. anyone that doesn't actually work for the agency at least. By analogy, if you hate the prison system, make sure you are punishing jailors rather than prisoners
- mmastrac 5y agoInformational warfare is a perfectly valid and far superior alternative to physical, violent war.
- chillage 5y agoAgreed for sure. In either type of war though, I think we're agreed it's best to leave civilians out?
- trasz 5y agoMost Russians support Putin.
- brnt 5y agoAccurate statistics are hard to come by. Also, are brainwashed cult members truly supportive of their cult leader?
- spacemanmatt 5y agoNo, but from a tactical perspective they are exactly enemy combatants.
- brnt 5y agoSure, but is there any way to 'disarm' the brainwashed?
- hnov 5y agoOh Roskomnadzor filters by citizenship?
- cyberpunk 5y agoI imagine the 290GB 'Legal Research and HR databases' will, which they said they will release even before they've looked at them. Stay classy.
- throw10920 5y agoI take it that you're also willing to condemn Snowden for releasing his trove of documents without looking at them either, with the result being that 95% of them weren't related to his stated purpose (domestic surveillance programs on Americans)?
- jazzyjackson 5y ago> should not be made public. you mean more public than it already is?
- trasz 5y agoAt this point, any damage done to Russia is either morally good, or at least neutral. Literally anything. In the worst case it’s just collateral damage.
- wolverine876 5y agoInterestingly, that is not at all the view of real soldiers, involved in life-and-death, existential conflict. Damage to enemy civilians must be minimized and be proportional to the purpose. You can't nuke a town because someone threw a rock at you, for example. Remember that goes for both sides: If you nuke their town, then your civilians are likely to suffer the same or worse. Among real soldiers, the 'anything goes' mentality is the mindset of war criminals.
- trasz 5y agoRussians aren’t soldiers, they are state terrorists. By purposefully attacking civilians they gave up their rights.
- OrderlyTiamat 5y agoCould you clarify "they"? Do you mean all russians? Including the ones in jail right now for protesting the war?
- spacemanmatt 5y ago> By purposefully attacking civilians they gave up their rights. The scope is pretty well-defined.
- OrderlyTiamat 5y agoThen giving out personal information unlimited to that well-defined scope is not justified nor well defended by this argument. You can't have it both ways.
- 5y ago
- alexklark 5y agoThese two “secret raw databases” are consultant.ru and garant.ru, publicly available legal information and reference software used by all legal departments over the country. This leak is probably made up by FSB.
- ishanoshada 5y ago
- chockchocschoir 5y agoMore information about the database dump: https://ddosecrets.com/wiki/Roskomnadzor https://ddosecrets.com/wiki/Roskomnadzor Who "Roskomnadzor" is: > The Federal Service for Supervision of Communications, Information Technology and Mass Media, abbreviated as Roskomnadzor (Russian: Роскомнадзор), is the Russian federal executive agency responsible for monitoring, controlling and censoring Russian mass media. Its areas of responsibility include electronic media, mass communications, information technology and telecommunications, supervising compliance with the law, protecting the confidentiality of personal data being processed, and organizing the work of the radio-frequency service. https://en.wikipedia.org/wiki/Roskomnadzor https://en.wikipedia.org/wiki/Roskomnadzor
- miohtama 5y agoWould be nice if instead of just stealing information hackers could modify the filter list and redirect people away from propaganda. What would it take to take over the TV broadcasting system?
- walrus01 5y agoa nice thought, but the people physically present at the broadcast sites and russian censorship facilities have the upper hand. if you broadcast something the government doesn't like, men with guns literally come to shut down your studio and arrest you.
- deleted 5y ago[deleted]
- walrus01 5y agosee also, Russia's "SORM" system mandated for deep packet inspection appliance installation within ISP middle-mile networks. https://www.google.com/search?client=firefox-b-1-d&q=russia+SORM https://www.google.com/search?client=firefox-b-1-d&q=russia+... Just very recently http/port 80 traffic in russia is now being redirected to a page trying to get people to download and trust a government run root CA for TLS, which would enable MITM of TLS1.2/TLS1.3 traffic. https://bugzilla.mozilla.org/show_bug.cgi?id=1758773 https://bugzilla.mozilla.org/show_bug.cgi?id=1758773 https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/QaKxfr5hOXg https://groups.google.com/a/mozilla.org/g/dev-security-polic...
- stefan_ 5y agoI think in the past when governments tried this route the response was browsers explicitly distrusting the certificate. I'll be getting my popcorn out to see if they have a spine because last time it was just Kazakhstan. See also: https://blog.mozilla.org/en/mozilla/mozilla-takes-action-to-protect-users-in-kazakhstan/ https://blog.mozilla.org/en/mozilla/mozilla-takes-action-to-...
- walrus01 5y agomozilla is generally good about these things, but what about browsers that use the operating system root CA trust storage? Mozilla is the only browser vendor that maintains their own root CA list independently. If you can get the operator of a windows 10/11 or MacOS device, or ios or android client device to insert a root CA into the OS trust store, then edge, chrome, and safari will trust it.
- stefan_ 5y agoChrome starts with the operating system CA store, but they have a large builtin list of revoked or otherwise blocked certificates: https://www.chromium.org/Home/chromium-security/crlsets/ https://www.chromium.org/Home/chromium-security/crlsets/
- BudaDude 5y agoOn a scale of 1 to Equifax, how bad is this leak ?
- cyberpunk 5y ago-1? -2?
- sydthrowaway 5y agowhy so low.
- jazzyjackson 5y agothats actually a negative offset index, so on a length of 10, it's a 7 ;)
- cassepipe 5y agoIn python maybe but not in C
- olliej 5y agoIn C it’s the return address :D
- stjohnswarts 5y agoThat's a big.... maybe... with lots of exceptions
- olliej 5y agoI was just making a joke about the out of bounds interaction :D It could be a wide variety of things, including both defined and undefined behaviour
- samstave 5y agoHow search? What sear for? What is an incremnating phrase that should be looked into? Data is always data if we cannot interpret? Another language is always gibberesh without context or understanding? Plz Respond.
- chockchocschoir 5y agoIf you don't know Russian/know how to use a translator, maybe there are other people more equipped to be doing the searching than you? Wait for journalists and others to dig through the data and read the articles when they come out instead.
- themodelplumber 5y agoWords of destructive intent: Destroy, kill, sabotage, interdict, hack, threaten, blackmail Words of misleading intent: Portray, cover up, hide, mislead, sneaky, clever Words of cult-like organizational foundations: Believe, disbelieve, abandon, relationship Sensitive terms for global conversation: Human rights, torture, war crime, international partners Emotive words: Swear words, rude names like "Nazis" etc. Those should be a start
- cyberpunk 5y agoI mean, this is some really low hanging fruit and I don't really expect a lot of shocking revelations to come from this. Censorship? In Russia? Why, I never. And it's just, OK now for us to be releasing stolen files from foreign governments ? We are not at war with Russia (yet). I'm not really onboard with this kind of thing. Flip the switch and imagine some Russian hackers doing it to your country, you would be annoyed. (I'm not pro-russian or anything; fuck Putin and the horse he rode in on -- I just think this is largely pointless, some script kiddie trying to show how j33t he is, and will just escalate things further for zero gain.)
- chockchocschoir 5y ago> And it's just, OK now for us to be releasing stolen files from foreign governments ? We are not at war with Russia (yet). Who are "us" in this context? This was released by individuals, not a entity acting for a foreign governments. Leaks happen when your security is poor. For all we know, this hack could have been done by a Ukrainian individual, who very much is at war with Russia now, would that make you feel better?
- cyberpunk 5y agoActually it would.
- 09bjb 5y agoWell, if we let our "leaders" run amok with the powers of warfare I'd expect some serious repercussions to the citizenry. "I didn't vote for him" won't get us much sympathy with our brothers and sisters elsewhere if our government is out killing people en masse.
- bostonsre 5y agoThis war can be stopped by russia and russia only. Public opinion in russia is shaped and controlled by this organization. A large proportion of the population is believing the bs that this organization is providing. I think anything that can be done to undermine this organization inside of russia to shift public opinion can potentially help stop this war and I am all for it. Russia hacks other countries without regard to sovereignty of other countries, playing nice with them will do nothing but encourage them to keep being assholes.
- tra3 5y agoThis is a dump from Republic of Bashkortostan [1], a Russian republic. This initially confused me because I though of the republics as used in Soviet Union. Another interesting tidbit from Russian internet. Municipal services in Moscow are suggesting that folks move over to Russian browsers [2, in russian]. Some claim it's because Roskomnadzor is planning to sniff all traffic, even SSL. Some are saying it's because CAs are revoking Russian keys. [1]: https://en.wikipedia.org/wiki/Bashkortostan https://en.wikipedia.org/wiki/Bashkortostan [2]: https://politota.d3.ru/cheburnet-prodolzhaet-okuklivatsia-2266500/?sorting=rating https://politota.d3.ru/cheburnet-prodolzhaet-okuklivatsia-22...
- vbezhenar 5y agoThat's because some CAs are revoking certificates for some Russian websites. Of course they'll have technical ability for Major-in-the-Middle attack, so that's not something I'd exclude. I wonder if there's rule which disallows CAs to revoke certificates without reason. It seems that those actions undermine the whole web security model. Kazakhstan was wise to introduce national root certificates.
- ajross 5y agoCite for CA revocations? I hadn't heard that, and a quick google shows just one McClatchy story about a pretty obvious (and English language) propaganda site.
- deleted 5y ago[deleted]
- vbezhenar 5y agoI'm not sure if it was discussed on English websites. I know about revocation of one bank certificate: VTB bank. You can check certificate here: https://crt.sh/?id=5201004735 https://crt.sh/?id=5201004735 Another example is cbr.ru (Central Bank of Russia): https://crt.sh/?id=6051080112 https://crt.sh/?id=6051080112
- captn3m0 5y ago
- itronitron 5y agoAnyone that bothers to download this should expect that there is some form of malware included in the file.
- nr2x 5y agoAnd this is why the good Lord has given us virtual machines.
- inetknght 5y agoEscaping a virtual machine isn't unheard of. If I were a betting man then I would place good money that this, being a data dump of a state, could contain state-sponsored 0-days designed to escape such things.
- nr2x 5y agoFirst rule of censor club: never release the list of censored words
- mrtweetyhack 5y ago
- wolverine876 5y agoVigilante warfare is very dangerous. What happens when there is a ceasefire or peace agreement, and some vigilante violates it? What if a vigilante unwittingly interferes with an actual operation by their side (e.g., by exposing an exploit their side was using), or ignorantly destroys a resource the good guys needed? What happens if a vigilante crosses the line and conducts what the Russians think is an attack, requiring a military response? For example, what if a vigilante finds an exploit at a Russian nuclear weapons facility (maybe without even realizing what they are attacking)? NATO intelligence agencies can claim it wasn't them, but of course they would - why would the Russians believe that? Warfare is coordinated, controlled violence, not indiscriminate violence. The vigilante stuff is very dangerous and probably achieves little. Leave it to the NSA, CIA, etc.
- eproxus 5y ago> Warfare is coordinated, controlled violence, not indiscriminate violence. I doubt Ukrainian civilians see it that way right now.
- lostmsu 5y agoThe NSA, the agency, that unlawfully collected my and yours private phone data?
- wolverine876 5y agoI agree about the problems, but who else?
- lostmsu 5y agoI think vigilantes are fine in this particular case.
- archagon 5y agoI don't think finger-wagging is going to stop determined hackers. This is something we will just have to accept in future wars.
- buildsjets 5y agoI sure hope the pee tape surfaces amidst all this hackery.
- hk__2 5y agoWas this flagged? It was #1 on the homepage a few minutes ago, and now it doesn’t appear on the homepage anymore.
- beeboop 5y agoI recommend hckrnews.com to get a less (usually community) censored view of submissions
- chockchocschoir 5y agoIt seems so! I'm unsure why, this seems like the perfect type of content for HN as it's focus on technology and would be interesting for most hackers. One minute it was at the top of frontpage, next one it was close to the bottom and now it's on the second page...
- throw10920 5y agoWhy else would it be flagged except for a large number of Russian sockpuppet HN accounts flagging it?
- tinus_hn 5y agoPretty rich accusation coming from ‘throw10920’.
- throw10920 5y ago...and here we have an ad-hominem comment that clearly violates HN guidelines while contributing nothing to the discussion.
- cockboi699 5y ago
- cockboi699 5y ago
- ishanoshada 5y ago
- ishanoshada 5y ago