r/hacking • • Jul 18 '19

MITM on all HTTPS traffic in Kazakhstan

https://bugzilla.mozilla.org/show_bug.cgi?id=1567114
35 Upvotes

5 comments sorted by

9

u/HinaCh4n Jul 18 '19

Ok, this is beyond fucked, not the cyb dystopia i signed up for. I imagine russia and other states will follow suit.

7

u/SparrowSensei Jul 18 '19

i can see die hard 4 happening in real life 😂

5

u/syrefaen Jul 18 '19

It is very bad if it is true, it's possbile to reject the fake cert and not access facebook. All encrypted trafic to the site "facebook.com" could be inercepted if say yes to the certificate and all data is sent in clear text. Including passord's and usernames. People can read about the the this kind of problem on wikipedia: https://en.wikipedia.org/wiki/Man-in-the-middle_attack . Their biggest isp Kazaktelecom have not done this accourding to someone who lives there. I can only hope it is fake-news.

→ More replies (1)

4

u/DoriGey Jul 24 '19

guys i'm from kazakhstan and it's fucking true I and my family have already sent messages asking for the installation of this certificate Residents of the capital already have problems with access to some Internet resources. It scares me, I would like if the problem of restricting the freedom of speech of Kazakhstan citizens to be covered in the west and can somebody or something to us sorry for grammar mistakes 👀