• 1 Post
  • 441 Comments
Joined 2 years ago
cake
Cake day: June 11th, 2023

help-circle








  • “Never forget” is great and all but from a German perspective it seems to not be enough. It is much more important to make sure the same or very similar things do not happen again, not by China and not by any other nation. Otherwise you end up like we did here in Germany where decades of “never forget” lead to very similar sentiments being expressed by a new major party but since things are slightly different (e.g. the “never forget” was always phrased to be about Jews, this is more about foreigners in general) people seem to allow themselves to ignore them.







  • Unless websites use the very latest version of SSL at the very least the hostname you connect to (the Server Name Indication field) is visible. As are your DNS queries unless you use DoT or DoH or DNSCrypt or some similar encrypted DNS protocol.

    Until very recently most browsers also defaulted to using http for any address you typed into the address bar without a protocol so your first request was HTTP and could redirect you to an entirely different website. DNS spoofing would work just fine with this since the website you actually connect to over https after the redirect is already attacker controlled and has a certificate for hat attacker controlled domain (e.g. with replacement unicode characters that look virtually identical to the original website domain name).

    The router can also see your Mac address so they might have a unique identifier to track you across open Wifi networks (if we are talking commercial country-wide installations run by one company).

    Many gaming protocols also do not use TLS encryption since they rely on UDP and while there are encryption variants for that gaming is often unreasonably optimized for speed over everything else.

    So in summary, in general, yes, the network you are connected to can be dangerous and can learn some information about your network usage.