Slashdot Mirror


From Slaying Dragons To Dictators

tcd004 writes "In a weekend, programmer Austin Heap transformed from an apathetic MMO player to a world class regime-slayer. When word for Iran's rigged election broke over Twitter, Heap decided to dedicate himself to building a better proxy system for people behind Iran's firewall. Heap's creation, Haystack, conceals someone's real online destinations inside a stream of innocuous traffic. You may be browsing an opposition Web site, but to the censors it will appear you are visiting, say, weather.com. Heap tends to hide users in content that is popular in Tehran, sometimes the regime's own government mouthpieces."

233 comments

  1. So let's talk abou it. by Rod+Beauvex · · Score: 1, Interesting

    Sometimes, good things should not be discussed.

    1. Re:So let's talk abou it. by betterunixthanunix · · Score: 2, Insightful

      Security through obscurity is no security at all.

      I strongly doubt that the existence of this system is a mystery to the government of Iran, at least not if it is beyond a certain level of popularity.

      --
      Palm trees and 8
    2. Re:So let's talk abou it. by BitZtream · · Score: 0, Flamebait

      So ... you know nothing about security at all I take it.

      All computer security is through obscurity (passwords, encryption, both just security through obscurity). The lock on your homes door is security through obscurity (knowing the obscure key pattern).

      I always love when someone talks about security through obscurity like they know what they are talking about.

      The instant someone like yourself makes such a retarded comment you picked up from someone else or Wikipedia, those of us who DO know about it start chuckling inside.

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
    3. Re:So let's talk abou it. by Haffner · · Score: 1

      Any piece of security software that can be unraveled by discussing it is not a solution. The article mentions that the developer is already trying to prepare counter-countermeasures, so hopefully this one has some extended relevance.

      --
      "Going to war without the French is like going deer hunting without your accordion." ~General Norman Schwarzkopf
    4. Re:So let's talk abou it. by Anonymous Coward · · Score: 0

      Hostile governments are so unsophisticated that Slashdot babble can give them an advantage?

    5. Re:So let's talk abou it. by bigstrat2003 · · Score: 1

      Strong words coming from someone who doesn't understand that "security through obscurity" is being used in the proper context here.

      --
      "16MB (fuck off, MiB fascists)" - The Mighty Buzzard
    6. Re:So let's talk abou it. by TopherC · · Score: 1

      I always thought the phrase "security through obscurity" means protection by a weak or unstudied algorithm that is ad-hoc and thought to be unknowable. Passwords usually involve strong but publicly-known hashing algorithms. Isn't it better to rely on strong encryption techniques than merely obscure ones?

    7. Re:So let's talk abou it. by _Sprocket_ · · Score: 1

      All computer security is through obscurity (passwords, encryption, both just security through obscurity). The lock on your homes door is security through obscurity (knowing the obscure key pattern).

      Except, that isn't obscurity - that's a secret. The difference is subtle. However, one way to look at the issue is whether observation of a system will uncover the secret needed to defeat the system. I can study a cryptographic system without knowing how to defeat a given cryptographic key (unless that system is flawed). Likewise, buying the same brand lock shouldn't allow me to duplicate your house key (although many cheap home lock systems are pretty trivial to defeat - so maybe "security though obscurity" really does apply). Compare a house key to a "shave-and-a-haircut" knock. I can observe you using a key to get past a door without providing me the details to do the same if I don't posses a copy of your key. However, if I observe you doing the "shave-and-a-haircut" knock, I can then duplicate the same procedure myself.

    8. Re:So let's talk abou it. by LinusMartensson · · Score: 1

      judging from the article, what he does isn't necessarily hiding data within other content. More likely he's written an encryption where the encrypted content conveniently resembles data that the government of Iran finds undesirable to ban, such as legitimate requests to government websites. Of course, if you're talking about the invite-only principle, I can only assume that it will help spread the software in a wider area whilst initially making it hard for the government to access and reverse-engineer the software. Every day helps, I guess.

    9. Re:So let's talk abou it. by Anonymous Coward · · Score: 0

      "I always love when someone talks about security through obscurity like they know what they are talking about."

      Why, because they remind you so much of yourself? If you think a lock, a mechanical device is an example of "security through obscurity," you're either huffing glue or trolling. Judging by your post record I'd say it's both. I mean you're so utterly wrong that the fact that you try to build yourself up as if you're an expert is fucking laughable.

      But hey, go ahead and "chuckle" now you laughing jackass, ignorance is bliss.

    10. Re:So let's talk abou it. by u17 · · Score: 1

      I have a countermeasure that renders this proxy useless. Will sell it to any interested government for a bargain price of $1M.


      (actually it's grep, but don't tell anyone!)

    11. Re:So let's talk abou it. by DaMattster · · Score: 1

      Security through obscurity is no security at all. I strongly doubt that the existence of this system is a mystery to the government of Iran, at least not if it is beyond a certain level of popularity.

      Uh, I don't really think this is obscurity. A more appropriate term would be obfuscation for this is exactly what Austin Heap's innovation is doing. This is a rather clever and ingenious way of getting around censorship. I also would not overestimate the Iranian government. If a URL can successfully be obfuscated, it would be difficult for censorship to uncover this.

    12. Re:So let's talk abou it. by L4t3r4lu5 · · Score: 1

      What's a real mystery to me is why there's a picture of Garry McKinnon half way down the page.

      Is he even involved?

      --
      Finally had enough. Come see us over at https://soylentnews.org/
    13. Re:So let's talk abou it. by x2A · · Score: 2, Informative

      There's nothing obscure about how a lock works. I think you misunderstand what the word 'obscure' means.

      --
      The revolution will not be televised... but it will have a page on Wikipedia
    14. Re:So let's talk abou it. by allsorts46 · · Score: 1

      He's above a link saying "View a list of the world's biggest cyber attacks.". Guess he's apparently one of those.

    15. Re:So let's talk abou it. by Anonymous Coward · · Score: 0

      I always love when someone talks about security through obscurity like they know what they are talking about.

      Since GP is right and you are wrong, and assuming you're logic is correct, I love the way you are calling yourself a retard.

    16. Re:So let's talk abou it. by Anonymous Coward · · Score: 0

      A more appropriate term would be obfuscation

      The actual term is steganography, though it appears it actually encrypts the message as well.

    17. Re:So let's talk abou it. by Miseph · · Score: 1

      In this case it most certainly is. In fact, it's the only type of security possible. User A is trying to view site B without being detected by monitor C... the data must, inevitably, travel from B to A. If it also goes through D, E, F, G, H and I, and somewhere along the way appears to deliver to J, then A is somewhat less likely to get caught.

      Unless you mean to say that Heap is only effective at obfuscating connections between points because nobody can see the code, in which case you're probably right.

      --
      Try not to take me more seriously than I take myself.
    18. Re:So let's talk abou it. by Anonymous Coward · · Score: 0

      I can observe you using a key to get past a door without providing me the details to do the same if I don't posses a copy of your key.

      Yet again proving to the delight of insanely pedantic nit-pickers (that'd be me) that using physical security as an analogue to computer security is not especially helpful.

      Now trained security freaks know to keep the key covered by their hand, and shield it from view going in and out of the lock, but ordinary people don't. That means, with a good enough camera (indoors, you'd probably need a non-visible (IR, UV, even X-ray) flash or strobe, outdoors just a plain digicam & daylight), I _can_ potentially get a good enough picture of most people's keys while they're unlocking their door that I could construct a close-enough duplicate.

    19. Re:So let's talk abou it. by betterunixthanunix · · Score: 1

      The comment I was replying to indicated that it would be a bad idea to talk about the system, since it might tip off the Iranian government. My point was that if talking about the system makes it less useful, then it is not very secure to begin with.

      The goal of the system is to avoid government censorship. If the government being aware of such a system allows them to be able to prevent it from being used, then the system does not solve the problem it is intended to solve. The second sentence was meant to illustrate this point: the Iranian government will undoubtedly become aware of this system if more than a handful of people use it (can you imagine trying to convince 1000s of people to protect the secret that a particular computer program exists?).

      --
      Palm trees and 8
    20. Re:So let's talk abou it. by betterunixthanunix · · Score: 1

      Please see the comment I was replying to. OP said that it would be a bad idea to discuss the software; my point was simply that if discussing the software meant that it would be less effective, then it is not very good to begin with.

      --
      Palm trees and 8
    21. Re:So let's talk abou it. by KahabutDieDrake · · Score: 1

      This is such a comical misunderstanding of the phrase "security through obscurity" that I can't help but think you are trolling.

      On the subject of your front door lock... that's a tumbler lock, and while you may argue that the key is the obscure part here, I would argue that such a lock operates on KNOWN principles, and does not employ any obfuscation what so ever. While a lock that looked like a standard tumbler lock, but actually used a secret combination of turns and push/pull on the key itself would in fact be a lock using obfuscation for security. Ideally, only the proper key, used in the proper way would unlock it. In this way you have obfuscated the locking mechanism, and an essential part to this is not letting anyone see inside the lock. Which brings us back to the application of that term to computer science. If I can see your software, and make the effort to understand it fully, any security through obfuscation will be defeated. While if you use strong encryption, even though I can see you doing it, I can't defeat it. Get it?

    22. Re:So let's talk abou it. by brasselv · · Score: 1

      My point was that if talking about the system makes it less useful, then it is not very secure to begin with.

      You are thinking in terms of computer security, and there 100% correct.

      The larger point, however, is that there may be other 'security' reasons not to talk about it.
      For example, more people involved in the project may find themselves in the spotlight. People have a physical life, and their actions can be spied - or worse.

      Unfortunately, there is no 'by design' security protection against a bullet. Overall, as long as the thing does not make too many headlines, it seems we are better off - no matter how much the system is inherently secure from a strictly IT point of view.

      --
      "Whenever people agree with me I always feel I must be wrong." (Oscar Wilde)
    23. Re:So let's talk abou it. by Anonymous Coward · · Score: 0

      Love the internet. Giving idiots the opportunity to open their mouth without any knowledge for quite some time and will continue (unfortunately). Get a book, read an article from a valuable source. DO SOMETHING before you say something about a topic you have no business speaking about. Go back to 4chan, or whatever rock you came from under, and keep watching your Justin Bieber videos.

    24. Re:So let's talk abou it. by _Sprocket_ · · Score: 1

      Yet again proving to the delight of insanely pedantic nit-pickers (that'd be me) that using physical security as an analogue to computer security is not especially helpful.

      I completely agree (even if I'm enough of a sucker for conversation that I'll delve in to the analogy discussion). The rules of the digital world and the physical world are entirely different (even if the digital world is simply a limited subset of the physical).

  2. So let me get this straight by rshxd · · Score: 2, Insightful

    Why is this article being put out now? The Iranian elections were awhile ago

    1. Re:So let me get this straight by _Sprocket_ · · Score: 2, Funny

      Do you perhaps have some conspiracy theory prepared to answer your own question?

    2. Re:So let me get this straight by Anonymous Coward · · Score: 1, Interesting

      Because it takes a while to duplicate the functionality of Tor.

      They could have only gotten this out right away if they had used Tor instead of re-inventing the wheel.

      Sheesh...

    3. Re:So let me get this straight by h4rm0ny · · Score: 2, Insightful

      Why is this article being put out now? The Iranian elections were awhile ago

      Maybe they think those of us pointing out that the elections weren't rigged will have got bored and gone away by now or that endless repetition will have made the "rigging of Iranian elections" accepted history at last.

      There's no good evidence that Iran's elections were rigged. Whether Western powers like it or not, Ahmadinejad seems to have won legitimately. He's actually very popular in rural areas and not unpopular in Tehran, either. There's a just a fairly affluent and pro-US faction in the cities that want a pro-Western candidate. If you look at independent polls before the election, they were predicting Ahmadinejad would win (this includes pollsters from the US) and if you read the stories about electoral fraud, you'll find a lot of "no smoke without fire" arguments and some warping of the truth (e.g. the endless repetition of the factoid that more people voted in some places than actually lived there, which is actually obvious when you know that in Iran, to facillitate easy voting, people commonly vote in the area in which they work rather than their registered home village). But you wont find actual evidence of fraud. The papers were full of "some people say there might be fraud" but bugger all "this shows there was fraud". What you can find is that the US congress voted through around US$10 million dollars to fund activities to overthrow the government of Iran and that Bush approved the CIA to start active operations within Iran. But they'd never stoop to trying to de-legitimize the Iranian democratic process or rile up protest groups trying to over throw the government, would they? I mean, not again.

      --

      Aide-toi, le Ciel t'aidera - Jeanne D'Arc.
  3. I'm just guessing here... by $RANDOMLUSER · · Score: 3, Insightful

    But "looking at porn" wasn't one of the viable alternatives?

    --
    No folly is more costly than the folly of intolerant idealism. - Winston Churchill
  4. So let's NOT !! by Anonymous Coward · · Score: 0

    Jury !!

  5. Little different by Monkeedude1212 · · Score: 4, Funny

    I don't know if I'd consider setting up a good Proxy server as "Slaying a Dictator".

    I think that's actually part of a big chain quest so that you can get keyed along with a large group of people to then slay the dictator.

    1. Re:Little different by SomeJoel · · Score: 2, Insightful

      I don't know if I'd consider setting up a good Proxy server as "Slaying a Dictator".

      I think that's actually part of a big chain quest so that you can get keyed along with a large group of people to then slay the dictator.

      You must first reach exalted with several factions, including "UN" and at least a few of the "U.S. Military" subfactions. Otherwise you can't even zone in.

      --
      <Complete your profile by adding a signature!>
    2. Re:Little different by stuckinphp · · Score: 0

      Austin Heap transformed from an apathetic MMO player, to a world class regime-slayer

      I don't see where it says he's a dictator slayer.

      --
      if only
    3. Re:Little different by Anonymous Coward · · Score: 0

      Which regime did he slay?

    4. Re:Little different by sorak · · Score: 1

      I don't know if I'd consider setting up a good Proxy server as "Slaying a Dictator".

      I think that's actually part of a big chain quest so that you can get keyed along with a large group of people to then slay the dictator.

      You must first reach exalted with several factions, including "UN" and at least a few of the "U.S. Military" subfactions. Otherwise you can't even zone in.

      So that's why we didn't accomplish it before:

      The UN general looks at you and says 'I have a quest for you. In my country, horses are illegal. I want a pony'

      action: kick general

      Ouch!

      action: kick general

      Ouch!

      action: kick general

      Ouch!

      action: go home
      action: clear brush

  6. LOL! "Iran's rigged election broke over Twitter" by Anonymous Coward · · Score: 0, Troll

    You mean that laughably juvenile attempt by US intelligence agencies to pretend to be Iranian citizens by setting up fake Twitter and other social media accounts?

    Regime change isn't very effective when you have the Keystone Kops trying to carry it out for you.

  7. Proxy Ban? by Soporific · · Score: 2, Insightful

    Wouldn't they just ban anyone connecting to known proxies or any proxy in general that wasn't set up by the authorities?

    ~S

    1. Re:Proxy Ban? by Monkeedude1212 · · Score: 1

      This isn't like Counterstrike where you can just straight up ban someone by IP for doing something you don't like - not only can the authorities not watch everything but also the internet itself is so complex that's hard to determine what's happening precisely.

      Is there any way for you to tell right now if I'm using a proxy or not?

    2. Re:Proxy Ban? by Soporific · · Score: 1

      No, but I'd think that in an extremely censored nation they might only allow citizens to connect through specified egress points or exchanges which could be monitored. I guess the point of the software is to mast that activity, but is it really a stretch to see a government hell bent on controlling its citizens start using a white list?

      ~S

    3. Re:Proxy Ban? by Anonymous Coward · · Score: 0

      Slashdot could. Check your ip then check if that ip is a proxy.

      If I had control over your nation's internet infrastructure it could be automated for every user in your country

    4. Re:Proxy Ban? by Anonymous Coward · · Score: 0

      The thing is, building a white list is a lot harder than it seems.

      Building a white list is easy when the rules are fast and loose, just let anything you're not sure of slide and let majority decision figure it out. Building a white list when the the rules are slow and tight is hard since the majority are the people you DON'T want pruning the list in the first place.

    5. Re:Proxy Ban? by Kaz+Kylheku · · Score: 1

      They can't stop you from connecting to a local proxy that's running on the same machine as your web browser.

      From the Haystack FAQ we can surmise that you run some small client program and point your browser at that.

    6. Re:Proxy Ban? by mrogers · · Score: 1

      From the Haystack FAQ we can surmise that you run some small client program and point your browser at that.

      That makes sense, but if the local proxy's going to encode your request for whyweprotest.net in a stream of requests for weather.com, there needs to be a proxy on the other side of the firewall that intercepts those requests and extracts the request for whyweprotest.net.

      So here's the problem: how does your local proxy get the address of the remote proxy, without the Iranian secret police being able to run their own copy of Haystack, get the address of the remote proxy, and block it (or, worse, use the firewall to record all the addresses that connect to it)?

      In the literature, this goes by the imaginative name of the "proxy discovery problem". Solutions include privately sharing proxy addresses with trusted friends, distributing addresses by email, requiring clients to solve computational puzzles, requiring users to solve captchas, and using the structure of social networks to limit the number of proxies an attacker can discover.

      Which method does Haystack use? We don't know, because Austin Heap hasn't published any technical details of the design, or submitted it for review by a trusted party like the EFF, despite calls for him to do so.

      The gold standard here is Tor: all the code is open source, there are detailed design documents, they submit their designs for peer review by the security community, and they have an excellent track record of fixing the weaknesses that are found. Austin Heap needs to learn a lesson from them, because just saying "It's ok, we encipher everything" doesn't cut it in 2010.

    7. Re:Proxy Ban? by tucuxi · · Score: 1

      Vote this guy up. He actually seems to have a clue on the problem.

      If Haystack works as advertised, the Iranian censors will surely be eager to run a copy and run all possible traces on it to see what is going on. Somehow, Haystack-running computer must be able to place encrypted payloads into seemingly harmless requests, get them to servers that can reroute them to their adequate destinations, and convert the replies from those servers into encrypted messages inside seemingly harmless page requests. Making this undetectable is a truly tall order.

      Finally, even though I also like the idea of OSS (and am also genuinely curious about their approach), I understand that if their method will not work if authorities know the exact workings, obscurity is marginally better than nothing.

  8. For all that Iran is... by Wyatt+Earp · · Score: 5, Informative

    It is not a dictatorship.

    Misguided, dangerous, theocratic, abusive, yes. But not a dictatorship.

    1. Re:For all that Iran is... by wideBlueSkies · · Score: 1

      Which country are you writing about specifically?

      --
      Huh?
    2. Re:For all that Iran is... by Anonymous Coward · · Score: 1, Insightful

      Well, if the elections are rigged, it's hardly democracy now isn't it....

    3. Re:For all that Iran is... by Anonymous Coward · · Score: 0

      Sounds like the USA

    4. Re:For all that Iran is... by Wyatt+Earp · · Score: 1

      It is a theocracy and democracy at the same time, but not a dictatorship.

    5. Re:For all that Iran is... by Wyatt+Earp · · Score: 2, Interesting

      How is the US a theocracy?

    6. Re:For all that Iran is... by CRCulver · · Score: 2, Insightful

      The mullahs are the highest authority in the country, and they are not answerable to elections. They also have their own private army which is not responsible to the voice of the people even in the most abstracted fashion. Hard to claim that's not a dictatorship.

    7. Re:For all that Iran is... by Wyatt+Earp · · Score: 5, Informative

      That would be a theocracy. Not a dictatorship.

      "Theocracy is a form of government in which a god or deity is recognized as the state's supreme civil ruler, or in a higher sense, a form of government in which a state is governed by immediate divine guidance or by officials who are regarded as divinely guided."

      "Iran's government is described as a "theocratic republic".Iran's head of state, or Supreme Leader, is an Islamic cleric appointed for life by an elected body called Assembly of Experts. The Council of Guardians, considered part of the executive branch of government, is responsible for determining if legislation is in line with Islamic law and customs (the Sharia), and can bar candidates from elections, and greenlight or ban investigations into the election process."

      A dictatorship is ruled by an individual. So like Iraq before Operation Iraqi Freedom kicked him out of power.

    8. Re:For all that Iran is... by commodore64_love · · Score: 2, Insightful

      The word you are looking for is oligarchy - unelected men that sit on the top and make the rules.

      Kinda like our unelected Supreme Court Oligarchs. (I'm still trying to find the part of the US Constitution that the Court claims allows them to ban obscene material. I swear it's not there, even though they claim it is. Hmmm.)

      --
      "I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
    9. Re:For all that Iran is... by CRCulver · · Score: 2, Informative

      A dictatorship is ruled by an individual.

      Not necessarily. Ever hear the phrase "dictatorship of the proletariat" within Marxist-Leninist thought? There the dictatorship would be ruled by the working class as a whole.

      If you bothered looking up "theocracy" in the dictionary, then you should have looked up "dictatorship" too. Merriam-Webster give as their third definition: "3 a : a form of government in which absolute power is concentrated in a dictator or a small clique b : a government organization or group in which absolute power is so concentrated c : a despotic state". A military junta, or in this case a group of religious leaders who wield absolute power, unaccountable to the people (and who can override democratically elected legislators) can fairly be called a dictatorship.

    10. Re:For all that Iran is... by Wyatt+Earp · · Score: 1

      Its the crusty old men are grumpy clause.

      Actually, Article I, Section 8 “To regulate Commerce with foreign Nations, and among the several States,”

    11. Re:For all that Iran is... by Anonymous Coward · · Score: 0

      Dumb guy gets show to be...well..dumb.

      Instead of cutting his losses and moving, he makes himself look even dumber and butthurt. Go back to World of Warcraft or jerking off.

    12. Re:For all that Iran is... by commodore64_love · · Score: 0

      But if the porn does not travel across state lines (i.e. I get it from a nearby town), then where is the authority? Answer: It isn't there.

      Furthermore the 1st amendment forbids Congress from outlawing obscenity, due to protection of the free press. Any such law is null. "The purpose of a written constitution is to bind-up the several branches of government by certain laws, which, when they transgress, their acts shall become nullities." - Thomas Jefferson, 1782 (back when Virginia was still an independent nation)

      --
      "I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
    13. Re:For all that Iran is... by Wyatt+Earp · · Score: 1

      Grumpy old man clause it is then.

    14. Re:For all that Iran is... by hitmark · · Score: 1

      i think the term is theocracy. And technically speaking; the vatican is the same, on a much smaller scale.

      --
      comment first, facts later. http://chem.tufts.edu/AnswersInScience/RelativityofWrong.htm
    15. Re:For all that Iran is... by nobodylocalhost · · Score: 1

      > Well, if the elections are rigged, it's hardly democracy now isn't it....

      Reminds me of those guys by the Bush...

      --
      Where is the "Ignorant" mod tag?
    16. Re:For all that Iran is... by Anonymous Coward · · Score: 0

      It isn't. It is a great Judeo-Christian patriotic Republic, which spreads its values all over the world on the wings of shock and awe.

      From Hiroshima and Nagasaki, via Vietnam and Iran, to the freedom-loving regimes of South America and the great Mujaheddins, who drove the evil Soviet empire from Afghanistan, the US has brought happiness to so many, it is hard to count.

    17. Re:For all that Iran is... by tenco · · Score: 1

      Dictionary? WTH. Try a encyclopedia next time: http://en.wikipedia.org/wiki/Dictatorship

    18. Re:For all that Iran is... by CRCulver · · Score: 1

      Look, a dictionary is a normal tool for looking up the meanings that have been ascribed to words. In spite of the OP's claim, the word "dictatorship" is regularly used in the English language to describe governments like Iran's. The Wikipedia article is wrong inasmuch as it attempts to fix the word to a single meaning, while standard dictionaries like M-W which I cited above and the OED show it has a range of usages.

    19. Re:For all that Iran is... by bloobamator · · Score: 1

      The Iranian people have been disenfranchised by their own government. That same government then began summarily beating and executing dissenters. If that's not a dictatorship, I'm not sure what is.

      From http://www.merriam-webster.com/dictionary/dictatorship: Main Entry: dictatorship Pronunciation: \dik-t-tr-ship, dik-\ Function: noun Date: 1542 1 : the office of dictator 2 : autocratic rule, control, or leadership 3 a : a form of government in which absolute power is concentrated in a dictator or a small clique b : a government organization or group in which absolute power is so concentrated c : a despotic state

      --
      "Crude and slow, clansman. Your attack was no better than that of a clumsy child."
    20. Re:For all that Iran is... by Anonymous Coward · · Score: 0

      http://en.wikipedia.org/wiki/Supreme_Leader_of_Iran

    21. Re:For all that Iran is... by h4rm0ny · · Score: 2, Insightful


      Ever heard someone refer to Internet Explorer as "The Internet"? Does it make your teeth grind? Same principle, I'm afraid. Those of us who understand the meanings of words have a responsibility to use them correctly and lead by example.

      --

      Aide-toi, le Ciel t'aidera - Jeanne D'Arc.
    22. Re:For all that Iran is... by DrEasy · · Score: 1

      Godwin Law alert: it is a dictatorship if you can only choose between Hitler and Mussolini at the elections.

      Any opposition party worth its salt is banned in Iran.

      --
      "In our tactical decisions, we are operating contrary to our strategic interest."
    23. Re:For all that Iran is... by DrXym · · Score: 1
      A dictatorship is ruled by an individual. So like Iraq before Operation Iraqi Freedom kicked him out of power.

      So Iran is more analogous to a religious junta.

    24. Re:For all that Iran is... by Anonymous Coward · · Score: 0

      Well, people ARE trying to limit the rights of minorities in the United States based upon what they may or may not have interpreted from the most popular holy book in the country. Not to mention that many people refuse to even entertain the possibility of a leader who does not belong to the dominant religion. Oh, and each and every individual coin and bill gives praise to the deity of the very same religion.

      That sounds, at the least, borderline theocratic to me.

    25. Re:For all that Iran is... by LordLimecat · · Score: 1

      Just because someone cheats at a game doesnt mean the rules have changed.

    26. Re:For all that Iran is... by Hatman39 · · Score: 1

      Exactly!

      Since, apparently, the only difference between a Theocracy and a Dictatorship is the motivation, we should stop calling it a theocracy (Well, unless God himself can be proven to speak directly to his people) and start calling it what it is: A religious dictatorship.

      In a sense it reminds me of communism, a decent idea in theory, but all to easily abused by those willing to lie, cheat and kill to enrich themselves.

    27. Re:For all that Iran is... by CRCulver · · Score: 1

      Ever heard someone refer to Internet Explorer as "The Internet"? Does it make your teeth grind?

      No.

      Those of us who understand the meanings of words have a responsibility to use them correctly and lead by example.

      Maybe you should take a basic linguistics course. The very first thing you'll learn is that prescriptivism is ultimately futile. The meaning of words change naturally over time, in a variety of directions. There's nothing one can do to stop it, and putting people down for using a widely recognized meaning, just because you don't like it, just marks you as an ass.

      It would be one thing if someone wrote a post on dictatorships and said "For the purposes of this post, by 'dictatorship' I mean regimes led by a single person". But it's another thing to do like the OP, and claim that anyone using variant meanings is wrong. FWIW, those variant meanings have been in the Oxford English Dictionary since before your grandparents were born.

    28. Re:For all that Iran is... by tehcyder · · Score: 1

      Ever hear the phrase "dictatorship of the proletariat" within Marxist-Leninist thought?

      That was just Marx and Engels trying to scare the shit out of the upper classes.

      --
      To have a right to do a thing is not at all the same as to be right in doing it
    29. Re:For all that Iran is... by tehcyder · · Score: 1

      If Iran's a dictatorship who's the fucking dictator?

      --
      To have a right to do a thing is not at all the same as to be right in doing it
    30. Re:For all that Iran is... by Wyatt+Earp · · Score: 1

      How is the US immigration debate being dictated by the Bible?

      "In God We Trust" is not Christian, it's Deist or pan-denominational.

      The US has had 10 presidents who were "not affiliated" and six others as "religious views doubtful". Quakers, Catholic, Baptists, Jewish Vice-President, so yes the US entertains the possibility of a leader who is not a strict Protestant. 76% of Americans are identified as Christian, so of course the bulk of the politicians are coming from that pool.

    31. Re:For all that Iran is... by AK+Marc · · Score: 1

      Ah, so you practice prescriptive linguistics, while the vast majority of English speakers follow a more descriptive philosophy. As for using an encyclopedia for a definition, you are much more likely to get the prescriptive version. But that doesn't make anyone right or wrong, and calling someone wrong because you have your personal preferred definition that you can back up, and they have theirs which they can back up makes you look silly. OK, you don't like that particular use of the word. But it's in the dictionary and understood by most, so it's valid (even if not proper).

  9. Uh oh... by Anonymous Coward · · Score: 0

    If Iran finds out, he's going to be in a Heap of trouble! ...sorry, I'll see myself out....

  10. thinkofthechildren by esocid · · Score: 2, Insightful

    I look forward to a 'thinkofthechildren' argument from some congressman in the future about why it should be illegal here.

    --
    Absolute power corrupts absolutely. indymedia
    1. Re:thinkofthechildren by ducomputergeek · · Score: 2, Informative

      Already happening. Just about anyone running a Tor Exit node is at risk for Kiddie porn charges. I had friends that set up Tor nodes during the Iran unrest. One of them decided to see if it was doing any good and was shocked that more than half the traffic was actually porn and a fair amount of it kiddie porn. As soon as he told the others, everyone stopped hosting the nodes and a couple even Dbaned their HDD's. No one wanted to risk being caught. None of them were rich enough to fight it.

      --
      "The problem with socialism is eventually you run out of other people's money" - Thatcher.
    2. Re:thinkofthechildren by Anonymous Coward · · Score: 1, Insightful

      Well, you have just convinced me to A) never host a TOR node and B) never use a TOR node.

    3. Re:thinkofthechildren by commodore64_love · · Score: 1

      Possession of photos of a rape victim should not be a crime, just the same as possession of photos of murder victims is not a crime. Some people get off on the latter, but that doesn't mean we should outlaw it.

      And nudity? It is never illegal regardless of age (as ruled by the Supreme Court). That's why nudist websites are allowed to exist.

      --
      "I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
    4. Re:thinkofthechildren by ducomputergeek · · Score: 1

      Doesn't matter what the law should say, it's what it does say. And are you going to quote law with the cops? Because they have guns.

      --
      "The problem with socialism is eventually you run out of other people's money" - Thatcher.
    5. Re:thinkofthechildren by Anonymous Coward · · Score: 1, Informative

      Already happening. Just about anyone running a Tor Exit node is at risk for Kiddie porn charges.

      That's simply not true...
      It can be said that anyone who browses the internet and uses a computer is at risk. Please point me to any instances of a tor node operator being indicted for the data routed through his machine. It hasn't happened, it doesn't happen, and under current law, it won't happen.

    6. Re:thinkofthechildren by Anonymous Coward · · Score: 1, Insightful

      Obvious tactic to discourage tor node hosting. Spam them with material that's a no-no pretty much everywhere. All too easy to scare western individuals into apathy and inaction.

      Really, did it come as a surprise to you that running subversive operation is also morally hard?

      Well then, safest way to help is to donate to wikileaks, pirateparties, amnesty international, eff, etc. They have more courage to do what it takes.

    7. Re:thinkofthechildren by h4rm0ny · · Score: 1

      Possession of photos of a rape victim should not be a crime, just the same as possession of photos of murder victims is not a crime

      In both cases, distributing those photos can cause great distress. Yes, people should have some right to privacy and not have their suffering passed around for other people's sexual gratification.

      And nudity? It is never illegal regardless of age (as ruled by the Supreme Court). That's why nudist websites are allowed to exist.

      There are cases where simple nudity has been misclassified as porn, but child porn is a great deal more horrible than simple pictures of children naked which most of us wouldn't even think of as porn if it weren't for the context of the discussion. There are sights where people exchange softcore pictures (you can probably guess) and some people stick child porn in there which unfortunately you can still make out in the thumbnails (or I guess if you're unlucky and the thumbnail is poor, actually click on and get the full thing). Child porn is disgusting and harmful and it does a disservice to suggest that it is stuff like people's holiday snaps of their children naked in the sea or something. It is really, really sick stuff and the perpetrators should be tracked down and dealt with by the law.

      --

      Aide-toi, le Ciel t'aidera - Jeanne D'Arc.
    8. Re:thinkofthechildren by emastro · · Score: 1

      Possession of photos of a rape victim should not be a crime, just the same as possession of photos of murder victims is not a crime. Some people get off on the latter, but that doesn't mean we should outlaw it.

      Too late, already done (in Britain). It's called "extreme porn law", enacted after someone who got off on snuff movies offed a schoolteacher who might or might not have been into erotic strangulation, IIRC.

  11. US Supported Terrorist Attacks Inside Iran by Anonymous Coward · · Score: 0, Troll

    The US was stupid to think trying to fabricate faux outrage on social media sites was ever going to accomplish anything. You do get the usual fools who karma whore inane posts 'standing up for democracy'. But those same karma whores have moved on to the next funny Cat video story five minutes later.

    The rest of the world sees the massive US military forces completely surrounding Iran.

    The rest of the world sees the US supporting and funding terrorist groups killing people inside of Iran.

    The rest of the world sees the US supporting Israeli state terror.

  12. Re:LOL! "Iran's rigged election broke over Twitter by Fnkmaster · · Score: 4, Interesting

    As opposed to the laughably juvenile attempts by Iranian intelligence agencies to spam twitter with pro-Iranian-government messages?

    Also, please include citations when you make accusations like that. I pulled up a bunch of articles on the Iranian twitspam with no problem but found it harder to dig up reports of US Agencies doing the same (though I wouldn't be shocked if they had, this seems to go both ways).

  13. Get a clue by Zero__Kelvin · · Score: 4, Informative

    "I always love when someone talks about security through obscurity like they know what they are talking about.

    The instant someone like yourself makes such a retarded comment you picked up from someone else or Wikipedia, those of us who DO know about it start chuckling inside."

    Hey pal, I've got bad news for you but you are the one who doesn't know what the term means. You should be laughing at yourself for not understanding a term and then looking down upon others who do understand it. I hope you especially laugh at how incompetent Bruce Schneier is to use the term, because you are no doubt more competent than him (ROTFLMAO).

    The term has never implied that you can know the keys and still not get in. It specifically refers to a principle in security engineering, which attempts to use secrecy (of design, implementation, etc.) to provide security - [emphasis added]. In other words if you cannot publish the algorithm without rendering the system vulnerable, then that is security through obscurity.

    --
    Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    1. Re:Get a clue by Prune · · Score: 2, Interesting

      Of course, you're both playing semantics games. In a von Neumann machine, such as is every desktop computer, for example, the separation of data and program is superficial--it's just a psychologically-driven convention. It is also an extremely frequently violated convention (both by machine--Windows tends to rewrite memory-loaded images of binaries heavily--and by humans, in cases not just of the more rare virus-modifying code, but in every instance of scripting/interpreters/just-in-time compilation). Thus, obscuring the keys is not fundamentally different from obscuring the algorithms because there is no fundamental distinction between program and data. In practical terms it may be more convenient to have many keys per algorithm rather than the other way around, but this is merely adopted for trivial practical reasons. Again, there's nothing wrong with "through obscurity" by the usual definition as long as the level of obscurity applied to the algorithms corresponds to the level of obscurity applied to the keys in the more common approach.

      --
      "Politicians and diapers must be changed often, and for the same reason."
    2. Re:Get a clue by Prune · · Score: 1

      self-modifying **

      --
      "Politicians and diapers must be changed often, and for the same reason."
    3. Re:Get a clue by StikyPad · · Score: 4, Informative

      From TFFaq:

      8. In keeping the source code a secret, aren't you just relying on "security through obscurity"? Won't authorities eventually discover how your software works anyway?

      This charge is difficult to rebut, because under normal conditions, "security through obscurity" is indeed false security. However, Haystack has several properties that make it a special case.

      First of all, we do not rely on "obscurity" for protecting our users' privacy. Everything that one of ours users sends and receives is enciphered. It would take centuries for all the world's computers to decipher one of our users' browsing sessions even with full access to the Haystack source code.

      "Obscurity," however, does make it much harder to find ways to block our software. Of course the authorities will pour resources into finding a way to do this, and they may temporarily succeed. In that event, we will refine our software and issue a new version that circumvents the restrictions. We will not, however, give the authorities any assistance in this process. By retarding their efforts, we ensure that the Haystack network operates more robustly for longer periods.

    4. Re:Get a clue by Zero__Kelvin · · Score: 0

      "Of course, you're both playing semantics games. In a von Neumann machine, such as is every desktop computer, for example, the separation of data and program is superficial--it's just a psychologically-driven convention."

      The term "semantic games" doesn't mean what you appear to believe it does. It is absurd to state that there is no difference between algorithms and data. To make this perfectly clear, it makes perfect sense to talk about self modifying code, but to speak of self-modifying data would be absurd. So in other words, while I agree with you that the OP was indeed playing a semantic game (and he lost, miserably) I was certainly doing no such thing.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    5. Re:Get a clue by Zero__Kelvin · · Score: 0

      "In practical terms it may be more convenient to have many keys per algorithm rather than the other way around, but this is merely adopted for trivial practical reasons."

      That is like saying I walk to the corner store because it is more convenient than chartering a plane (hint: it is conceptually possible, but can NEVER happen in real life.)

      I think the fact that there are many, many, many more easily determined keys than there are algorithms which can be published and still work might have just a bit to do with these "trivial practical reasons" to which you allude.

      There are very, very, very few known secure algorithms so if you give me the key and tell me to guess the secure algorithm I can brute force it in less than 20 tries ;-) So, as you can now see, there is a reason why security folks, if they are competent, apply a pragmatic rather than purely theoretical mindset to the problem domain.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    6. Re:Get a clue by jpapon · · Score: 1

      I think the point trying to be made is that bits are bits, and that drawing the distinction between those which act on others, and those which are acted upon is merely a construct we use to keep things sane. You could just as easily make data which contains an algorithm (say, self extracting compressed files), as you could make an algorithm which contains data (any algorithm which contains a pre-defined filter).

      --
      -- Let us endeavor so to live that when we pass even the undertaker shall be sorry. -- M. Twain
    7. Re:Get a clue by Anonymous Coward · · Score: 0

      That's arm-chair theorizing.

      In practice it may not work out so well -- unless the said armchair "regime slayer" (which regime did he slay, btw, to get this awesome nickname?) has extensive experience in counter-espionage, if he is a real threat (which I doubt), his organization will be infiltrated. Anna Chapman's ugly Iran sister may already be his sysadmin's secret girlfriend for all we know ;)

      If that happens, them keeping it close among themselves will only bring more harm to those they mean to support.

      Also, they assume that the "authorities" will take measures to counter his service.

      If, however, internet-able opposition is small in numbers, the authorities could do exactly the opposite - find a vulnerability, exploit it, and just make lists of inconvenient people for later convenient disposal.

      But overall, since no regimes were slayed, this is a hugely overrated "operation" and the said faq is just an ego-inflating measure.

    8. Re:Get a clue by Zero__Kelvin · · Score: 1

      "I think the point trying to be made is that bits are bits"

      Yes, I get that, and the point is dead wrong. Bits are only bits in a context. When that context is code it is completely different than when taken in a data context.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    9. Re:Get a clue by _Sprocket_ · · Score: 2, Insightful

      That kind of sounds like every press release from every security vendor who claims a secret sauce implementation. I don't see how their situation is "a special case."

    10. Re:Get a clue by phantomcircuit · · Score: 2, Insightful

      If the authorities can block the software they can determine it's being used. The act of using software to circumvent the filtering is in and of itself a serious crime.

      Just because they cant tell what exactly you were doing isn't going to stop them from throwing people in jail or worse.

    11. Re:Get a clue by jpapon · · Score: 1

      Bits are only bits in a context. When that context is code it is completely different than when taken in a data context.

      Right, and there is no steadfast distinction. Code is data until it gets interpreted into a series of instructions. Even that you could still call data, since it is still only a sequence of bits residing somewhere in memory which describe a possible sequence of actions.

      The point is that nothing residing in a computer CAN be an algorithm, since an algorithm is a theoretical construct. A program is just data which describes what happens when it is applied to other data.

      So it doesn't matter where you draw the line between cipher and key. It may take a little mind-bending, but data describes the path that will be taken just as much as the program itself. A "program" and its "data" are just two pieces of data being combined. We call one "program" and the other "data" to help our understanding. But as Prune was saying, the line is often blurred, if not completely thrown out. If I imbed a virus in an image file, is it "data" or a "program"?

      --
      -- Let us endeavor so to live that when we pass even the undertaker shall be sorry. -- M. Twain
    12. Re:Get a clue by Anonymous Coward · · Score: 0

      ROTFLMAO! HA HA HA HA

    13. Re:Get a clue by KahabutDieDrake · · Score: 1

      That makes no sense what so ever. Bits can be code, and code can be bits. Despite any convoluted circumstance you come up with, EVERYTHING on your computer is bits. Period. In the context of a computer, data/code/bits are interchangeable. Only programmers make the semantic distinction between "code" and "data", and then only because it's convenient, not because there is any inherent difference in form.

    14. Re:Get a clue by Zero__Kelvin · · Score: 0

      "Only programmers make the semantic distinction between "code" and "data", and then only because it's convenient"

      On the contrary CPU's make a distinction between them all of the time. In fact you can fail to make the distinction, as you have thus far done, for as long as you like. The CPU will go right on making the distinction. HANL ;-)

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    15. Re:Get a clue by sjs132 · · Score: 1

      I was also curious about that, because the current regime in Iran is the same regime that has been in Iran for years... So what did he slay?

      -5 sword of mercy to him, Try harder, I'm rooting for you. Peaceful means of course... Bloodshed is so hard to get out of one's tunic.

      --
      --- Relax, that mass muderer is just trying to reduce our carbon footprint, one fetus at a time...
    16. Re:Get a clue by gnud · · Score: 1

      While this is most certainly true, software like Haystack can prevent iranian intelligence from discovering "new" dissidents through surveillance of known ones.

    17. Re:Get a clue by mea37 · · Score: 2, Insightful

      And by the same argument, a lead weight is indistinguishable from a light ray, because it's all just energy.

      The fact that a key is bits and an (implementation of an) algorithm is bits does not mean that the two are indistinguishable from a security perspective when treated as a secret. I could start by quibbling about the size of the secret, but the more fundamental issue is how widely applicable is the secret (or, somewhat equivalently, how widely distributed is evidence of the secret).

      In short, you're conflating the ideas of "secret" and "obscure". Perhaps everything obscure is kept secret, but not everything kept secret can be described as "obscure". Something is obscure if it is widely applicable but not widely known.

      In PGP encryption, the algorithms apply universally to every message to and from every user of the system. The fingerprints of the algorithm are on every computer capable of sending and receiving such messages. Trying to keep such a widely-applicable thing secret would be reliance on security through obscurity.

      My private key, though, is totally unavailable to almost everyone. The most direct point is, if I start using a new key tomorrow, I can safely say that Evil Hackers, Inc. hasn't spent decades of effort making progress towards knowing what that key is - and even if they crack it, that only compromises the messages I sent using that key, not the entire system, because that particular key is applicable to nothing else.

      The lock on my door at home requires a key, and you don't know the corret shape; but if you do a little research, you do have a good guess at the basic mechanics of the lock. To the extent that such knowledge leads to insights about how to defeat my (or anyone's) lock, the design is weak. The fact that having my key in hand would give you access to my house is unrelated to that fact.

    18. Re:Get a clue by initialE · · Score: 1

      Google relies on security through obscurity - they obscure the way in which pages are ranked to protect themselves against competitors, and users against SEOs.Granted that it doesn't prevent people from trying (and occasionally succeeding) in pushing up their results though.

      --
      Starbucks, Harbuckle of Breath.
    19. Re:Get a clue by _Sprocket_ · · Score: 1

      Google relies on security through obscurity - they obscure the way in which pages are ranked to protect themselves against competitors, and users against SEOs.Granted that it doesn't prevent people from trying (and occasionally succeeding) in pushing up their results though.

      I wouldn't call page-rank a security mechanism.

  14. Misleading... by Zantac69 · · Score: 2, Funny

    I thought this was a new game coming out where you did both: Grand Theft Horse 2 - The Dark Ages.

    --
    1331461 is only semiprime *sigh* Alas - I am just short of 1337.
  15. Re:LOL! "Iran's rigged election broke over Twitter by jandrese · · Score: 2, Insightful

    Iran's government sure loves blaming the US doesn't it.

    --

    I read the internet for the articles.
  16. Learn something, daily by way2trivial · · Score: 3, Informative

    Iranian law is pretty tough on smut
    http://www.google.com/search?hl=en&safe=off&q=pornography+laws+in+iran&aq=f&aqi=&aql=&oq=&gs_rfai=

    Here's one snip from one result
    "The AP reports that Iran's parliament on Wednesday voted in favor of a bill that could lead to death penalty for persons convicted of working in the production of pornographic movies. "

    "Adnkrnonsinternational reports that under the new law, anyone distributing pornographic material can be sentenced to a fine of up to 16,000 euros while owners of a porn video or film risk up to 76 lashings. "

    "Executing Iranians involved in the porn industry isn't a brand new story, unfortunately. "

    --
    every day http://en.wikipedia.org/wiki/Special:Random
    1. Re:Learn something, daily by commodore64_love · · Score: 4, Interesting

      I hate moral dictatorship. It doesn't matter if it's coming from a Muslim government, the Church of Rome, or politicians. Ya know... it's my life. If I want to be an asshole that looks at porn, doesn't go to church, and keeps to himself, I have that right. Stop trying to force me to adopt your moral beliefs.

      So this HAYSTACK program. Would it work in the US and EU? It appears the answer is "no" since it was specifically designed for Iraq.

      --
      "I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
    2. Re:Learn something, daily by Farmer+Tim · · Score: 4, Funny

      ...owners of a porn video or film risk up to 76 lashings.

      In some circles that's considered a bonus feature.

      --
      Blank until /. makes another boneheaded UI decision.
    3. Re:Learn something, daily by Anonymous Coward · · Score: 0

      >So this HAYSTACK program. Would it work in the US

      Why would you need it here?

    4. Re:Learn something, daily by c6gunner · · Score: 1

      Iranian law is pretty tough on smut .... death penalty for persons convicted of working in the production of pornographic movies ....

      Meh. This is Iran we're talking about. I'm pretty sure they have the death penalty for driving without a seatbelt. A law isn't considered "tough" there unless the punishment involves teeth pulling and genital mutilation.

    5. Re:Learn something, daily by 32771 · · Score: 2, Insightful

      > If I want to be an asshole that looks at porn, doesn't go to church, and keeps to himself, I have that right.

      It would sound much better if you would replace that 'and' with an 'or'.

      Also you have to understand those overly religious societies. They are under considerable stress while surviving in a harsh environment by any means possible (if there is no stress you can create some, i.e. with lacking medical insurance). This creates a situation where even the most basic needs of a human being may remain unfulfilled. Also they have devout followers who procreate madly thereby further reducing the value of a human life. So going back to your moral values and those dictatorships, it has to be obvious to you that while all the fulfillment of basic human needs will continue to be lacking, capable politicians will always be able to find something else to justify their existence with, like chasing after social misfits or other odd people who don't really do any harm.

      Sane societies have long discovered that they could invest all those resources more wisely, see the following for an example http://en.wikipedia.org/wiki/John_Locke

       

      --
      Je me souviens.
    6. Re:Learn something, daily by Anonymous Coward · · Score: 0

      How do you feel about the viewing of child pornography?

    7. Re:Learn something, daily by Anonymous Coward · · Score: 0

      It appears the answer is "no" since it was specifically designed for Iraq.

      *Iran

    8. Re:Learn something, daily by Tenek · · Score: 4, Insightful

      Much better than I feel about the production of child pornography, and much worse than I feel about the viewing of what the Moral Guardians' consider "child pornography".

    9. Re:Learn something, daily by Anonymous Coward · · Score: 0

      Technically Iran isn't a dictatorship it's an authoritarian democracy

    10. Re:Learn something, daily by sorak · · Score: 1

      The word euros seems out of place there. Whenever I read about barbaric penalties for things that shouldn't be illegal, I always imagine that the currency system is based on the trading of severed hog heads, syphilitic hooker toes, or some other currency that is as useless and screwed up as the law itself.

    11. Re:Learn something, daily by hedpe2003 · · Score: 1

      It appears the answer is "no" since it was specifically designed for Iraq.

      Iran...It's NOT the same country you know...

      --
      Comprehensive solutions via a competition of ideas like no other.
  17. They assume regime's government mouthpieces... by Anonymous Coward · · Score: 0

    Nobody actually reads the official versions. The regime automatically assumes any supposed traffic to official sites is an attempt at obfuscation and puts their magnifying glass on those packets.

  18. But how does it work? by by+(1706743) · · Score: 5, Funny

    It must be tricky to hide sensitive data in innocuous data streams. Of course, I'm sure it's possible...

    1. Re:But how does it work? by Eternauta3k · · Score: 4, Funny

      You forgot to bold the space. Like this.

      --
      Yeah. Would you choose a neurosurgeon who pokes around people's brains in his spare time? I wouldn't.
    2. Re:But how does it work? by scorp1us · · Score: 1, Informative

      How you can do it without a proxy. Open up one tab of your real destination. And 8 other innocuous tabs. Then generate a volume of traffic on those tabs, occasionally clicking on the first, real one.

      You can't "hide" your destination in volume. People don't search that, computers do. If there is a DNS entry resolved, or a host IP used, it can be logged. You're not hiding anything, or even pissing anyone off. You can't even hide your destination in SSL. All they need is a databse of IPS taged with topics, and they can make plenty of guesses about you.

      Oh, and I learned my first programming language at 5. :-p (which is impressive for 1981), (TI-99 4A)

      --
      Slashdot's rate-of-post filter: Preventing you from posting too many great ideas at once.
    3. Re:But how does it work? by scorp1us · · Score: 1

      And someone mod him up.

      --
      Slashdot's rate-of-post filter: Preventing you from posting too many great ideas at once.
    4. Re:But how does it work? by Anonymous Coward · · Score: 0

      Logo was a great language back in the day for getting a child used to the concept of OO. My dad gave me his TI-99 4A a few years later than you, but we must be about the same age. I laugh when someone says their computer is too slow now when I think about what things were like back then, saving programs to cassette tape and trying to reload them the next day.

  19. What if someone use this in US by Anonymous Coward · · Score: 0

    This seems to be a espionage program.
    The funny thing is that this level of anarchism is only suggested for Iran! What if you wants to use it in US? Not so complicated: You'll end up in prison!

  20. Re:LOL! "Iran's rigged election broke over Twitter by copponex · · Score: 3, Insightful

    Iran has elections, but doesn't pick the right person, so it's a dictatorship. Same is true for Venezuela and Gaza, and any country over the past sixty years that made the mistake of voting for left-leaning leaders in the Western Hemisphere.

    And what about China, Saudi Arabia, Egypt, etc? Well, they make us a shitload of money, or they at least follow our orders, so, you know. It's different.

  21. A Lock != Security through obscurity by Anonymous Coward · · Score: 1, Interesting

    That is baloney. Security through obscurity means that the entire system itself is obscured, as the only protection. Traditional (lock) security means that one (or more) aspect[s] of the system is/are protected by requiring significant effort to circumvent.

    Security through obscurity is leaving your door unlocked, but living in a remote area.
    Security without obscurity is locking your door, and living in the city.

    In case 1, the barrier between criminals and your house is knowing that your house exists at that spot. In case 2, it is not only knowing the ridges on your key, but spending the effort of creating a key that matches that qualification*. There is effort involved in the second case. If, instead of simply living in a remote area, you lived on the top of a difficult cliff, you would have normal security as well.

    *Also, there is effort involved in examining your lock to obtain those ridges, mugging you and stealing the key, etc.

    1. Re:A Lock != Security through obscurity by blair1q · · Score: 2, Interesting

      Living in a remote area would be security. The remoteness is the barrier to entry.

      Security through obscurity is more like leaving your door unlocked, but living in a building where all the other doors are locked. Or having a locked door but leaving the window unlocked and using the fire escape. Or leaving the key under the mat. It's not security, it just keeps people from believing they're looking at something unsecured.

      And the reason it's a major fail is that it is defeated by random actions that are far simpler than the randomness needed to defeat the security you're not implementing. Kids trying every doorknob, for instance, or the guy who vacuums the hall knowing all of the doormats that have keys under them.

      As for keys and obscurity; if you have 10,000 doors to lock, and use a key system that only allows for 1,000 keys, you're counting on obscurity to keep people from trying their keys in other locks. But if you use a system that allows for 1,000,000 keys, that's actual security. Because none of the locks has to take a key used in another, and someone making a random key will have to make at least a hundred to get even a 50-50 chance of findng one that unlocks just one of the 10,000 doors, and potentially he could make 990,000 and still not find one.

      As for codes, any code that gets used for more than one message reduces the security of the code. So anything other than One-Time Pad is slightly relying on security through obscurity, but you're talking about having 2048-bit security instead of infinite-bit security and thinking that's insufficient? It's not really security through obscurity until you start using rot-13 instead, and hope nobody notices.

    2. Re:A Lock != Security through obscurity by _Sprocket_ · · Score: 1

      Living in a remote area would be security. The remoteness is the barrier to entry.

      The problem with that analogy is that a barrier to entry isn't the only aspect involved. All obscurity is a barrier to entry. The problem is that people's perception of the effectiveness of obscurity, of how much of a barrier is presented, is often surprisingly inaccurate.

      Being in a remote area might not be much of a barrier if I have ways of discovering your address. Finding out your address is not only a remote location, but that location is a fortress dug in to the top of a mountain might present a different situation (assuming you've got good locks).

      Of course - I find comparisons of physical world security with information security to be fundamentally flawed. There's similarities but the rules tend to be entirely different between the environments; there's only so much that can be done with the laws of physics while we can completely re-define protocols.

  22. Re:LOL! "Iran's rigged election broke over Twitter by Anonymous Coward · · Score: 0

    There's no fooling you Einstein!

    OMG!!! 'teh Iranian Guberment' has infiltrate Slashdot!

    Fucking retard.

  23. Might need that in the US as well by Anonymous Coward · · Score: 0

    Except that 'hate speech' is objectively bad and therefore people deserve to have it blocked either by their service providers or easily accessible private hosting services, whilst criticism of the president of Iran is objectively good and therefore we need a way to secure access and accessible hosting for the citizens of Iran.

  24. Bleh! by Anonymous Coward · · Score: 0

    Yeah, that dude is a world class regime slayer, and I'm the batman.

  25. Does the name Salman Rushdie ring any bells? by HBI · · Score: 1

    This guy should not be sitting for laudatory news coverage. These are the same people that brought you death sentence fatwas in absentia, and the religious nutjobs to carry them out.

    --
    HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
  26. Re:LOL! "Iran's rigged election broke over Twitter by Duradin · · Score: 1

    Who doesn't?

  27. I guess I'll come out and say it... by scribblej · · Score: 5, Insightful

    Bullshit.

    Less than a month and many all-nighters later, Heap and a friend had created Haystack. The anti-censorship software is built on a sophisticated mathematical formula that conceals someone's real online destinations inside a stream of innocuous traffic. You may be browsing an opposition Web site, but to the censors it will appear you are visiting, say, weather.com.

    This doesn't make sense. It still has to connect to and load the BAD website, too...

    Other anti-censorship programs--such as Tor, Psiphon, or Freegate--can successfully hide someone's identity, but censors are able to detect that these programs are being run and then work to disable the communication. With Haystack, the censors aren't even aware the software is in use. "Haystack captures all outgoing connections, encrypts them, and then masquerades the data as something else," explains Heap. "If you want to block Haystack, you are gonna block yourself."

    OK, this makes so little sense I can't even figure out how to respond to it.

    Heap intends to gradually develop Haystack's presence in the country. He has started to share it with select activists and trusted individuals on an invitation-only basis. They will then be asked to share it with their friends. It is the same model that was originally followed by Google's Gmail. The targeted approach is smarter from a security standpoint. Also, he doesn't want the software to collapse from low-value demand.

    SAY WHAT?

    Yeah, there's one word for this whole article. BULLSHIT. It stinks.

    1. Re:I guess I'll come out and say it... by sstamps · · Score: 1

      Yeah, I think there is a bit of hype involved. It sounds basically like an obfuscating proxy server. Requests and data are encrypted and obfuscated in normal requests to innocuous websites like weather.com.

      The thing is that it still will require use of a proxy server, and it most certainly can be EASILY detected with a number of methods, ranging from diff-ing to statistical analysis of data being transferred. I have no doubts that the Iranian government has the ability to get a copy of the software and determining what proxy servers it connects to, then blocking them. It then goes back to the same level of effort as with current proxies like Tor -- a game of Whack-A-Mole.

      --
      -SS "Teach the ignorant, care for the dumb, and punish the stupid."
    2. Re:I guess I'll come out and say it... by StikyPad · · Score: 2, Informative

      The article may be the nonsensical writings of an unsavvy reporter, but the project itself seems real enough.

      http://www.censorshipresearch.org/projects/introduction/
      http://www.censorshipresearch.org/about/
      http://www.haystacknetwork.com/

    3. Re:I guess I'll come out and say it... by scribblej · · Score: 1

      Thank you for those links. After reading in more detail, I think I'm kind of sticking with my claim of bullshit. Of course I wouldn't put it so strongly now but I still don't see how he can do what he is claiming and make it difficult (or as he claims, IMPOSSIBLE) to block.

    4. Re:I guess I'll come out and say it... by Anonymous Coward · · Score: 0

      sophisticated mathematical formula

      this definately rings a bullshit bell.

      If I had infinte bandwidth, I could easily check every website you check first then see if your traffic matches mine.

    5. Re:I guess I'll come out and say it... by Anonymous Coward · · Score: 0

      Let me suggest a far easier exercise. Block child porn. The well resourced US government claims it wishes to do this, and you've made it clear that you believe blocking something is easy, since even the much poorer Iranian government can do it.

      So get back to us when there's a month when child porn isn't readily available on the Internet. Let us know, because it's not as though we're searching for it, if you like just present a whole month when no-one was arrested for trading it, or downloading it, etc. that's a good start.

      Meanwhile, evidently just "blocking" content on the Internet isn't quite as easy as you thought. Blocking a "site" may work if the user is stuck with Internet Explorer, but if they can run their own software then content is what they care about, not addresses, and there's no effective way to block content, as the child porn issue illustrates.

      The Iranians will obviously still be able to arbitrarily detain, imprison or even murder their own citizens. You could claim that arresting anyone who uses the Internet is an effective way to "block" technologies like Haystack. But that's not very realistic, it forces Iran to become a technological backwater like North Korea, which they don't want.

    6. Re:I guess I'll come out and say it... by c6gunner · · Score: 1

      Check out their FAQ:

      "at the same time allows users to security use normal web browsers and network applications."
      "Haystack hides traffic to any from the internet at large inside traffic "
      "The executable is under half a megabytes "
      "We would like to see our as many people as possible assert their human right to free expression."
      "revealing the source code at this time would only aide the authorities"

      Plus their FAQ logo actually says QFA. If they pay so little attention to detail on their site, I can just imagine what the program must be like. It probably has some bug that accidentally sends your name, phone number, physical address, and all e-mail correspondence directly to the mullahs.

    7. Re:I guess I'll come out and say it... by sstamps · · Score: 3, Interesting

      That's oversimplifying the case a bit, I think.

      In Iran, the state has draconian control over the press as well as any "companies" which act as communication feeds. Not so in the US, where communications companies are (for the most part) autonomous and protected like a sacred cow (thanks to the First Amendment).

      I think a better analogy would be blocking porn (child or otherwise) in Iran. I don't live there, and I don't directly know anyone who does, but the known/published government actions and policies are VERY strict, so I would expect there would be a LOT less ability to access porn of *any* kind in Iran.

      In contrast, in the US, there is very little to no active efforts to filter anything, but rather to detect actual access to illegal porn and prosecute at the individual lawbreaker level. However, even that is a spotty and half-hearted effort at best.

      In Iran, you have to register your website with the government, and they can and do block access country-wide to popular internet sites as they deem unfit (YouTube, for example).

      As a result, while it is not impossible to get access to internet content deemed verboten by the state there, the bar has been significantly raised to do so. Thus, any claims to circumvent it without some really revolutionary technology to back them up have to be taken with a grain of salt. That said, I am glad the guy made the effort, and happy for what little freedom it may provide to someone in Iran looking for hope outside their dismal state of being there, but I also don't want people to get snookered into a false hope that this is something far more than what it claims. Over there, people are jailed/murdered by the state for violating their insanely draconian laws.

      --
      -SS "Teach the ignorant, care for the dumb, and punish the stupid."
    8. Re:I guess I'll come out and say it... by jd · · Score: 2, Interesting

      It's basically security through obscurity. A dangerous, but popular, past-time that never actually delivers at the end of the day. Not through lack of sincerity (necessarily) but through the fact that such a method is inherently flawed. Being easy doesn't mean it's any good. It's ultimately why steganography alone is not secure - there will be fingerprints (always) that allow you to separate the two signals and thus yield the original message, if the message is kept as-is. In the case of steganography, the solution is simple - increase the entropy. If the message is compressed and/or encrypted, and the pixels NOT used for storing the text have the same bits scrambled such that the level of randomness is roughly uniform across the whole message, the most you can definitely do is determine that the low pixels do not contain picture information. You would not necessarily be able to tell if that was due to storing more bits than the capture device was capable of accurately recording or if there was some other cause. The image would look, from any obvious analytical standpoint, the same in both cases.

      So the question here is could you do the same in a proxy? Instead of trying to merely hide the data in traffic, can you reduce the fingerprint on the traffic you actually consider important and increase the background noise such that the signal and the noise are indistinguishable by any method whatsoever?

      Not obviously. Not without rolling out IPSec, and I don't see any dictatorship agreeing to that. Hell, I can't see ANY country being willing to tolerate the bulk of Internet traffic being encrypted. (That, I suspect, is some part of why IPv6 is so late in being rolled out. Originally, it mandated IPSec. Which meant EVERYTHING on the Internet being encrypted well beyond the capacity of anyone to break. From the three-letter agency perspective, that would be bad for business. From the uber-expensive SSL certificate standpoint, that would kill any business other than authentication entirely. From the ISP perspective, it would cut into their profit margins for virtual leased lines.)

      Yes, if multi-path is enabled, ISPs and backbone networks haven't turned themselves into spanning trees, and routers are configured to balance things properly, then you could randomize the paths of packet fragments. If (and if you thought that last lot was a big if, then wait till you see this!) the web server ALWAYS supports compressed and/or encrypted requests AND sends the replies likewise (ie: gzip and/or SSL/TLS can ALWAYS be used for ANY request, without exception, AND replies are no less compressed or encrypted), then (in principle) it would be difficult even with deep packet inspection to tell if a fragment was from legal content or illegal content. Not impossible, but difficult.

      To make it impossible, you have to make the fragments non-differentiable to an external observer. ATM uses very small packets, so if you tunneled the fragments over ATM to make even smaller fragments, then tunnel over IP so that you could use IP-over-DNS (since the ATM fragments are roughly the same size as DNS packets), and THEN use something like DNSSec to make it extremely hard to distinguish tunneled packets versus conventional packets, and THEN somehow get this DNS tree linked into the official DNS tree in said country...

      This could work. It's a variant of the Byzantine General's Problem. You can only tell what are real packets if (N/2)+1 nodes are legitimate. If the rogue network of interconnected DNS nodes is great enough that the authorized network of DNS nodes cannot reach that threshold, the authorized tree could, in principle, be subverted to serve the purposes of the rogue network.

      In practice, no country is so stupid that it would blithely provide enough tunnels into anything that country regarded as mission-critical in such a manner as to allow such subversion. They MIGHT provide a few such tunnels and use the bottleneck in an effort to track the source (since it would be guaranteed that only hostile traffic would be coming through that tunnel). In other words, create a bloody great honeypot.

      The last time a country DID allow critical infrastructure to be subverted, Julius Caesar ended up with a knife in his back. It kinda discourages the practice.

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    9. Re:I guess I'll come out and say it... by bugs2squash · · Score: 1

      I agree. Looks to me like this can go one of three ways.
      1) It's real and someone relies upon it and gets caught and punished because it has failed, or
      2) It's actually been created by the Iranian government, or
      3) It's a scam and totally fake
      I'm leaning toward (3) right now.

      --
      Nullius in verba
    10. Re:I guess I'll come out and say it... by Anonymous Coward · · Score: 0

      From the Haystack web-site linked below, it seems that the approach is "TOR, but using steganography in HTML, instead of SSL" (and of course the TOR/onion routing bit will be much weaker than TOR).

      This seems like a reasonable approach, since it should be more difficult to identify the server nodes (assuming they are hosted in countries commonly visited from Iranian computers) than it is for TOR (which is easily characterized as "SSL to lots of unusual countries").

      The claims that it is "undetectable" and "unblockable" are clearly hyperbole.

      If the censor didn't know it was occuring, it is very unlikely they would detect it. If they read slashdot and decide to put the effort into looking for it, then it is quite likely they will find it.

      Once they've found it, they have a bunch of different options, including blocking based on IP, which should work reasonably well given Haystack probably won't that many external nodes (probably they would just work out who was using it and put them on a list...?)

    11. Re:I guess I'll come out and say it... by Anonymous Coward · · Score: 0

      (I'm the same AC who wrote up my understanding of how it must work in response to the original GP)

      I don't believe this is correct.

      There is lots of random-ish information inside a typical HTTP transaction (eg session cookies, javascript, images of varying quality), in which steganographically encoded information can be embedded. The only question is whether you need to increase the amount of information transferred between client and server by so much that it's obvious something fishy is going on.

      To get hold of the textual content of censored sites, my guess would be no (volumetric analysis on Internet traffic is quite hard except at the extremes).

      (Unfortunately there are other ways of detecting this sort of thing. They require significantly more effort, hence I agree there is certainly an element of "security through obscurity" to the whole thing)

    12. Re:I guess I'll come out and say it... by tucuxi · · Score: 1

      Ok, security through obscurity is false security -- but it can delay efforts long enough to make it worthwhile anyway. If it is hard enough to detect, then it may have a positive influence in making censorship harder. The technical problem is not so much in making the "censorable" content seem innocent (as you say, steganography+encryption can go a long way). The main problem is in establishing the connections to the "censorable" websites without getting caught. Doing so requires the use of proxies, and since anyone accessing the proxies may be doing something illegal, the censors will blacklist any proxies they find (and do bad things to people caught using them). Therefore, most of the effort will probably be concentrated on making proxy access seem legit, and minimizing the risk of the entire list of available proxies being discovered.

      The first thing the censors will do is to try to grab a copy of the software, install it locally, and audit all network connections in and out. They can automate this, and anything outside of expected behavior will be a candidate for blacklisting. If they manage to find a reliable pattern, they will be able to stop the use of the program entirely (assuming they have the necessary sort of high-throughput deep-packet inspection firewalls in place).

      The only real differences between censors and censored is that (a) hopefully, there are many more potential censored (although drowned in a sea of otherwise innocent chatter) than censors and (b), some would-be good guys are presumably known to the developers. Any solution will have to play on these strengths to make the proxy list really hard to compromise. For instance, bootstrapping a copy of Haystack may require submitting the nonce of an un-compromised user; this would make blacklisting the whole operation a lot harder, and would make breaches by censors easily self-healing. Just pray there is no easy pattern to identify Haystack users.

      Incidentally, an Iranian friend of mine says that authorities there use a very low-tech, but very effective way to keep people off the bad stuff. Keep bandwith very low. That way, additional layers can make things slow down to a crawl, and finding needles in the logs becomes a much easier task.

    13. Re:I guess I'll come out and say it... by Bryan3000000 · · Score: 1

      The bits of the article you quote seem clear enough. It's two-way encrypted communication first. On top of that, the encrypted stream is hidden in a stream of normal traffic, to obscure its existence. While I'm sure it could be possible to nevertheless discover the existence of the stream, it could be dramatically more difficult - if it's obfuscated to look as if it is a part of the normal traffic. Even if it's discovered, it would then have to be completely teased out and decrypted. It's also quite possible that while such an encrypted stream could possibly be discovered in any given instance, that it would be many of orders of magnitude more difficult to create an algorithm to recognize such encrypted streams among all normal traffic. Or it could be easier if statistical analysis is used. Either way, there is a possibility that something of real value has been created here.

    14. Re:I guess I'll come out and say it... by scribblej · · Score: 1

      Bryan,

          I appreciate your attempt at an analysis of the claims, but you're really not doing anything but repeating what was said already.

      The bits of the article you quote seem clear enough. It's two-way encrypted communication first.

          I didn't (think I needed to) want to get into the details of why these claims make no sense. But I will...

          If you have an encrypted stream of data, it goes without saying the party you are communicating with must understand what you're saying. So this claim of encrypted communications means (as is spelled out elsewhere) this system uses a client-server architecture /with specifically configured servers/ for people to connect to. It will not take long before those servers are identified and blocked.

      On top of that, the encrypted stream is hidden in a stream of normal traffic, to obscure its existence

          While that sounds awesome, that traffic all has to GO someplace. So we've got two possible situations: 1) we are sending a bunch of 'normal' data to a server that looks like a proxy, and in some of those normal proxy requests, we hide additional proxy requests and responses that are encrypted. This is probably exactly how it works, and since the system they are connecting to looks exactly like an open proxy, it's going to be blocked no matter what. They lose. 2) The client sends a bunch of normal data to a bunch of normal sites, and the encrypted data to the special haystack servers. This is so stupid and easy to discover/block it surely cannot be at all what they have designed.

      Either way, there is a possibility that something of real value has been created here.

          I'm positive the author thinks he has created something of real value, but I'm willing to go ahead and say this project is doomed to failure. IT will only work as well as the current system of open proxies works, because it's not effectively any different.

          I cannot imagine the Iranian government is so stupid as to only block only open proxies that appear to serve up BAD content; I would assume they block them all as a matter of course once identified. All he's really invented here is an open proxy that doesn't appear to serve anything BAD. As far as that goes, I bet it's probably rather successful... and would make a great product for e.g. surfing porn from a workplace that doesn't take the obvious step of blocking all external proxies. But it will not work in an environment where ALL externally proxied requests are considered a violation.

    15. Re:I guess I'll come out and say it... by Bryan3000000 · · Score: 1

      I take what you are saying, but the claim appears to be that this is not simply a proxy. A simple proxy would not even require client software. My assumption has been that it works a bit differently, in that the client does most of the work - opens and handles the normal connections and somehow obscures the encrypted proxy requests in this stream of normal traffic.

      It is admittedly tailored to one country's current blocking strategy at the moment. Whether there is anything of value then depends on whether this is still at its heart a regular proxy that can be easily discovered and blocked, or whether it is rather some type of dynamically changing proxy which could be vastly more difficult to block entirely (similar to some botnet control networks). If the latter, there could be value in this combination of strategies, although it still would not be perfect.

  28. Regime slayer is ultra offensive by SuperKendall · · Score: 2, Insightful

    Given that the regime in question is still very much in control, and that the only slaying that was done was by the regime, I find the term "regime slayer" to be laughable at best and really offensive at worst for those that hoped for better for the Iranian people.

    That was an extreme case showing that sometimes, mere communication is not enough to evoke change.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
  29. Re:LOL! "Iran's rigged election broke over Twitter by jandrese · · Score: 2, Funny

    Astroturfing on the internet? Well I never!

    --

    I read the internet for the articles.
  30. Re:LOL! "Iran's rigged election broke over Twitter by alvinrod · · Score: 4, Informative

    Well, we do have an extensive history of meddling. Okay, it's actually freaking huge. Whether or not we actually did anything or not, I wouldn't blame Iran for believing that the US played some role in the recent turmoil.

  31. A Retrospective on Iran by Grond · · Score: 4, Informative

    As this article in Foreign Policy explains, the Internet, especially Twitter, didn't contribute nearly as much to the protests in Iran as has been reported: Misreading Tehran: The Twitter Devolution. "Word of mouth was by far the most influential medium used to shape the postelection opposition activity." Other major media included text messages and email, which this software wouldn't help much with.

    Efforts to counter censorship and intrusive government monitoring should be applauded, but it's a bit premature to call this "world class regime-slaying."

  32. Re:LOL! "Iran's rigged election broke over Twitter by countertrolling · · Score: 0

    Set your wayback machine to 1953, Sherman...

    --
    For justice, we must go to Don Corleone
  33. I'm guessing we're talking about this: by blcss · · Score: 1

    http://www.haystacknetwork.com/faq/

    Sez it's got encryption too.

    --
    We don't need yet another new programming language. Let's just pick an existing language and fix its flaws.
  34. Direct Link to Haystack by phantomcircuit · · Score: 2, Informative

    All I see is a bunch of "Donate Now!" buttons/links, no actual software. http://www.haystacknetwork.com/

    1. Re:Direct Link to Haystack by DeadPixels · · Score: 1

      Haystack is currently available to a select number of users in Iran in our beta phase and is being prepared for a final release. We plan to start our official release of haystack as soon as we obtain the necessary funds to expand our network capacity to support a sufficiently large number of users.

      I would like to learn more about how this actually works, though...I'm kind of disappointed that TFA was more of an informational piece about the developer than about the tech itself, though I guess I should have expected as much from the headline.

    2. Re:Direct Link to Haystack by moxley · · Score: 1

      0. When will Haystack be ready?

              Haystack is currently in the beta testing stage, and we are in the process of working out the last kinks in the system. We are also in the process of taking care of a number of procedural hurdles that must be settled before the program is operational. We are aiming for a full release sometime this winter.

    3. Re:Direct Link to Haystack by Creepy · · Score: 1

      yeah - this was also in PopSci and didn't have much info, just that it was already being used in Iran, but you can get the gist of it from the faq:

      Haystack hides traffic to any from the internet at large inside traffic that looks like perfectly normal web connections to innocuous sites. The Haystack client connects to our servers which in turn talk to websites on behalf of our users.

      also

      From a user's point of view, Haystack appears to be a normal HTTP proxy, which means that Haystack not only supports all modern web browsers, but many other network programs as well, including Yahoo Messenger, FTP clients, and IRC clients.

      So basically, it is a proxy system that goes a bit above and beyond a normal proxy server because it needs to mangle the headers to look like it is coming from a "good" site and it also needs to do something to keywords that would be picked up by deep packet filtering (which Iran uses). According to the faq again, the data is enciphered to look like normal, unencrypted web traffic, so this is apparently how they get around deep packet filtering.

      They claim that the only way it is block-able is by completely disabling the internet, and from a received page point of view I can see that because the header could be completely mangled to look like it came from a legitimate site. The problem would be if the proxy was found and blocked - in that case, there would be no way to request pages, and I'm not sure how they intend to get around that aside from moving the proxy server frequently.

      There is an ironic (if you believe situational irony is irony) solution to blocking this traffic - IPsec with AH (part of IPv6, but you can get it for IPv4) - AH guarantees the source, but IPsec secures the data, so you fix the packet source problem, but break the ability to snoop.

    4. Re:Direct Link to Haystack by bkk_diesel · · Score: 1

      According to the FAQ:

      Haystack is currently in the beta testing stage, and we are in the process of working out the last kinks in the system. We are also in the process of taking care of a number of procedural hurdles that must be settled before the program is operational. We are aiming for a full release sometime this winter.

  35. So Is Slashdot Now A Proxy For Bolton by Anonymous Coward · · Score: 0

    in its support for the illegal overthrow of dictators?

    The story title is very subversive.

    Yours In Moscow,
    Kilgore Trout

  36. Grep by vivin · · Score: 1

    grep needle haystack

    Where "needle" is a dissident site and "haystack" is a log file.

    Couldn't the Iranian censors do something to that effect? Or am I just being naive?

    --
    Vivin Suresh Paliath
    http://vivin.net

    I like
  37. Hello, let me introduce you to 'the internets' by Anonymous Coward · · Score: 0

    There are obviously two ways for the "bad guys" on the internet to detect you, they must see what is inside your 'stream', or they must trace your stream to you.

    But can't you simply encrypt your data and make it impossible for them to see inside your stream, you say? Good trick, but they can see where the stream comes from and guess what is inside.

    So instead you mix up your stream with all the other streams so that there is a bit of your stream everywhere. This causes their minds to be boggled and you win.

    Any questions?

    captcha: pedagogy

    1. Re:Hello, let me introduce you to 'the internets' by Culture20 · · Score: 1

      So instead you mix up your stream with all the other streams so that there is a bit of your stream everywhere. This causes their minds to be boggled and you win.

      If one bit of your stream comes from the BAD website, they take you out to a soccer stadium and shoot you. Their minds might be boggled, but you still lose.

  38. Re:LOL! "Iran's rigged election broke over Twitter by couchslug · · Score: 2, Interesting

    "Regime change isn't very effective when you have the Keystone Kops trying to carry it out for you."

    Regime change isn't going to happen due to a few protesting students, and the mullocracy can choose to kill them off if they threaten Islamic control of government.

    The people who want to change Iran will have to display a greater will to power than the Islamocracy. That's a very tough act to follow. It would require a Maoist level of ruthlessness, not the trifling discontent of a few young people.

    --
    "This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
  39. US Funding And Interference by Anonymous Coward · · Score: 1, Insightful

    "Word of mouth was by far the most influential medium used to shape the postelection opposition activity."

    Hilarious! Yep, it was 'word of mouth' and not US funding and agents working inside of Iran.

    God bless 'teh Iranian People'! We're gonna bring them Wallmart and Baby Jesus!

    Go away Grond, your stupid isn't funny or extreme. You're just an unremarkable dumb guy.

    1. Re:US Funding And Interference by tucuxi · · Score: 1

      Hilarious! Yep, it was 'word of mouth' and not US funding and agents working inside of Iran.

      So the fact that the US is indeed willing to fund agents in Iran means that there cannot be any Iranis that are genuinely pissed about having their election stolen? Great logic there, Anonymous.

      No matter what you think, many 20-year old Iranians are pretty fed up with the regime telling them all those things that they cannot do, and find that being blatantly lied to and manhandled by authorities that preach morality and restraint is insulting.

  40. Re:LOL! "Iran's rigged election broke over Twitter by Anonymous Coward · · Score: 0

    I get it. Instead of any actual evidence or credible testimony implicating the USA in this instance, just use the past history (as if the US were unique to meddling) to indict and use as the only basis for pointing fingers.

    I hope you aren't in any position of authority, because people who use this line of reasoning would be laughed out for being so unbelievably stupid.

  41. Re:LOL! "Iran's rigged election broke over Twitter by Anonymous Coward · · Score: 0, Flamebait

    Boggle. You're like a flashback to that kid in Junior High who thought he was badass political and foreign relations expert.

    Here's a clue dumbfuck. The Iranian people don't want their 'regime changed'.

    They do want to be safe from US and Israeli terror.

  42. Re:LOL! "Iran's rigged election broke over Twitter by kyz · · Score: 1

    Iran has elections, but they matter not a jot as the public don't get to elect the Revolutionary Guard, the only ones with real power.

    I dislike the US's hypocrisy, and their meddling in world affairs, but you have to admit that the people in charge of Iran are scumbags. Not scumbags that give the US the moral authority to invade the country and steal the oil, but scumbags nonetheless.

    --
    Does my bum look big in this?
  43. Awww..Poor Liddle jandrese Got Owned by Anonymous Coward · · Score: 0

    And now is crying in an AC post. Don't fret jandrese, I won't tell anyone it's really you...

  44. Regime slayer? by Eunuchswear · · Score: 1

    Sounds good.

    How many regimes has he slayed, exactly?

    --
    Watch this Heartland Institute video
  45. be careful... by Anonymous Coward · · Score: 0

    I'd take a bit of caution if I were him. Going around saying "I'll develop something that will allow you to bypass Iran's censorship" is one thing. Doing it, and letting the world know you are is quite another. I'd try to tread a bit more anon. If this becomes huge, he could become a target. I completely agree with bypassing this type of security as freedom of speech should be a universal right, not just an american one, but I'd be hesitant to throw it in the face of a country with terrorist ties.

  46. Re:LOL! "Iran's rigged election broke over Twitter by Eunuchswear · · Score: 2, Insightful

    Iran has elections, but they matter not a jot as the public don't get to elect the Revolutionary Guard, the only ones with real power.

    Correct in principle, if not in detail (It's the supreme leader, not the guardians of the revolution, who has the power.)

    So why does the US get all twisted about what the "president", Ahmadinejad, who has no control over foreign policy says and does?

    --
    Watch this Heartland Institute video
  47. Dogfish by Anonymous Coward · · Score: 0

    "A computer savant, Heap learned his first programming language in fourth grade; he was programming in 18 languages by his senior year in high school."

    I guess if he can put 18 computer languages into one application will make a difference :)

  48. alvinrod got destroyed by Anonymous Coward · · Score: 0

    I'm a neutral observer here, but its obvious alvinrod is the one who got owned and utterly obliterated.

    He sounded like the typical college douchebag who listened too much to the "US is evil" professors, spitting out the same "US did XYZ" crap at every opportunity to try to prove how smart he thinks he is.

    1. Re:alvinrod got destroyed by alvinrod · · Score: 4, Insightful

      I'm obviously responding to a troll here, but I'm not a person who hates this country. There are some things I don't like about this country, but I can't say that there's any other country where I'd prefer to live. Well, maybe Switzerland.

      If some entity has a long history of doing X, it's pretty damn stupid not to expect them to do X. It has nothing to do with whether or not it's right or wrong, the US has a history of involving itself in foreign politics. There's no need to pass moral judgement on it, but it's a fact that the US has attempted to influence foreign politics with great frequency in the past.

  49. Re:LOL! "Iran's rigged election broke over Twitter by digitalnoise615 · · Score: 1

    "Regime change isn't very effective when you have the Keystone Kops trying to carry it out for you."

    Regime change isn't going to happen due to a few protesting students, and the mullocracy can choose to kill them off if they threaten Islamic control of government.

    The people who want to change Iran will have to display a greater will to power than the Islamocracy. That's a very tough act to follow. It would require a Maoist level of ruthlessness, not the trifling discontent of a few young people.

    Precisely. As much as I want to shoot myself in the face for saying this, those "young people" would have a better chance if they read Mao's Little Red Book and took it to heart than doing what they're doing.

  50. so... by hitmark · · Score: 1

    how long before the first bittorrent clients show up that borrow from this?

    --
    comment first, facts later. http://chem.tufts.edu/AnswersInScience/RelativityofWrong.htm
    1. Re:so... by Flash+Modin · · Score: 1

      For real. I doubt any titans of industry will thank him for slaying them.

  51. Re:LOL! "Iran's rigged election broke over Twitter by c6gunner · · Score: 1

    Well, we do have an extensive [wikipedia.org] history [wikipedia.org] of meddling. [wikipedia.org] Okay, it's actually freaking huge.

    Who doesn't?

  52. Re:LOL! "Iran's rigged election broke over Twitter by jpapon · · Score: 1

    The people who want to change Iran will have to display a greater will to power than the Islamocracy. That's a very tough act to follow. It would require a Maoist level of ruthlessness, not the trifling discontent of a few young people.

    Unfortunately, very true. Americans were spoiled by a revolution that was really quite easy when it comes down to it. Britain was ruled by a King who was borderline (if not completely) insane, and was distracted by their on-again-off-again war with the French. Not to mention the vast array of other colonial possessions they needed to keep in line.

    I imagine a revolution in Iran would be much more along the lines of the first French revolution. It's not a colonial revolution. It's overthrow of a regime governed by their own people. The Supreme Leader is not going to just roll over and let disgruntled students overthrow their "perfect" theocracy, where nobody is gay, women are never raped, and everyone is a devout Muslim. To achieve true Democracy, heads will need to roll, blood will need to wash clean the atrocities and oppression of the current rulers. I just hope that the US government is smart enough to realize that this sort of revolution cannot be instigated from abroad; it must come directly and unequivocally from within.

    --
    -- Let us endeavor so to live that when we pass even the undertaker shall be sorry. -- M. Twain
  53. obligatory by Anonymous Coward · · Score: 0

    How does I slayed regime?

  54. Re:LOL! "Iran's rigged election broke over Twitter by Anonymous Coward · · Score: 1, Insightful

    You're mixing concepts, my friend.

    Iran is a dictatorship not because their elections "don't pick the right person", it is a dictatorship because the election process is rigged so that only certain people can be elected, and these need approval from a non-elected body anyways.

    Leftness or rightness of leaders has no leaning on the degree of dictatorship.

    You can have very left dictatorships, and you can have very right dictatorships (like the US-supported Iran before their revolution, like Pinochet's Chile, like the multiple banana republics supported by US in Latin and South America).

  55. Reporter didn't do his job by Anonymous Coward · · Score: 0

    Hmm, this guy is good at getting press, awards, and money, but I don't see any technology that hasn't been around in open-source form for ten years or more. Am I missing something?

    And I question that Haystack works technically as described. If you download a page from banned.com, you either connect detectably to banned.com, or you use some kind of proxy (or more than one) that does the connection. So is he saying that weather.com has agreed to install a proxy on their site?

  56. Re:LOL! "Iran's rigged election broke over Twitter by mjwx · · Score: 1

    Iran's government sure loves blaming the US doesn't it.

    Well they learned that a government could justify any erosion of rights and even start wars for resourses in far off nations by giving the people some imagined threat from a nation no-one really understands.

    I wonder who else has tried that lately.

    --
    Calling someone a "hater" only means you can not rationally rebut their argument.
  57. Re:LOL! "Iran's rigged election broke over Twitter by Alex+Belits · · Score: 4, Insightful

    Everyone else.

    Seriously, Americans, your country is unique in the amount of evil it produces. Deal with it.

    --
    Contrary to the popular belief, there indeed is no God.
  58. Re:LOL! "Iran's rigged election broke over Twitter by mjwx · · Score: 4, Insightful

    "Regime change isn't very effective when you have the Keystone Kops trying to carry it out for you." Regime change isn't going to happen due to a few protesting students, and the mullocracy can choose to kill them off if they threaten Islamic control of government. The people who want to change Iran will have to display a greater will to power than the Islamocracy. That's a very tough act to follow. It would require a Maoist level of ruthlessness, not the trifling discontent of a few young people.

    Spoken like someone who doesn't have a clue about Iran, Iranian demographics (more specifically age and racial demographics) or the current Iranian government.

    Frankly I dont think you used enough made up scare words based around Islam, I'm surprised you didn't slip islamofacsist in there. To be frank, this kind of propaganda is weak, easy to see through and insult the intelligence of anyone who reads it.

    But I'll hit you with the cluebat. Iran's population is primarily comprised of Persians, the government is primarily Arab. Due to the Iraq-Iran war in the 80's the 30-50 yr age bracket is severely depleted so the current theocracy has never had to deal with 20 somethings that don't remember the brutality of the Shah.

    There are two armed forces in Iran, first the Iranian army which makes up the bulk of the forces and is almost exclusively ethnic Persian. Next is the Republican Guard, which is far smaller and almost exclusively Arab (Palestinian and Lebanese). The Republican Guard is used mainly as a police force. Arabs and Persians only have about 6000 years of recorded racial conflict so if a shooting war actually starts (which it wont) it will be over in a matter of days as the Persian army outnumbers the Republican Guard 10 to 1, has superior equipment and the support of the Persian people. Due to the fact that a large portion of the army will rebel if anyone gives the order to kill civilians en masse the Iranian government will not do this (they are theocratic, not stupid).

    Finally we have multiple examples of how non-violent revolutions can be effective and lead to more stable states. India, Philippines (EDSA rebellion), Much of Eastern Europe in 1989 (czech, poland, east germany). New forms of communications have been able to organise non-violent revolutions more effectively then violent ones, SMS's were used during the EDSA II rebellion. Violent revolution often has the effect of not working (Ireland tried for how many hundreds of years) or placing a dictator in power (Palestine, Cambodia, Cuba). Since the end of WWII, more stable democracies have been formed by non-violent means then violent ones. So you're desire to incite violence in the Iranian people is misguided at best but I'd describe it as retarded.

    Iran's (the government of Iran) problem is that it's never had to deal with a large population of 20 yr olds, now it does and the 20 yr olds are disaffected. They dont know how bad the Shah was and only know that the current government is oppressive. Violent revolutions often have the opposite effect of what the instigator intends, so if the Iranian youth start fire-bombing government buildings then it has just as much chance of backfiring and forcing people to rally around the government. Take the recent unrest in Thailand. Initially the red shirts were garnering support from much of Thailand and around the world as they were painting themselves as the oppressed, well until they started bombing BTS stations. In the end, people said the Thai government was right to take military actions and that the Thai military was very restrained as only 40 people killed, on the other hand the red shirts torched one of Bangkok's largest shopping centres further eroding support and strengthening the Thai government.

    --
    Calling someone a "hater" only means you can not rationally rebut their argument.
  59. Re:LOL! "Iran's rigged election broke over Twitter by Anonymous Coward · · Score: 0

    It is a matter of degree of control, my friend.

    The elections in the US may be rigged -- you seem to think so, and I don't know, I don't live there -- but they seem to me not quite rigged in the way and to a degree sufficient for a dictatorship.

    In the Communist era, the kind of rigging that makes a technical democracy into a dictatorship had a very descriptive name - "democratic centralism".

    Basically, the plebes do have election rights, but they have no other rights, including no rights to run or propose candidates without approval from the center.

    So, once elected for the first time (not that it ever happened IRL, but suppose it did), the center becomes a real 80LVL elf and rules with, like 100500% powers, those powers including making the technical rules for the next elections.

    Do you really have that in the US?

  60. Obscurity. by Anonymous Coward · · Score: 0

    This is an interesting project that I've been aware of for a while, but I did not get a good first impression. I followed the development of Haystack and its predecessor proxyheap a year ago, so far as that was possible, but it seemed to be deliberately shrouded in mystery, and going by the conversations in the relevant IRC channels on FreeNode, criticisms of this or requests for information were occasionally answered with accusations of dishonesty or personal attacks.

    In particular, I recall this:

    <austinheap> Those of you who want to reverse engineer the protocol and "publish documents" are just heling the IRI. Why not spend time cracking Tor and making it useless too? If your best interest in helping Iran is to create FUD about a tool to evade censorship, go ahead. (July 2009)

    And this: http://twitter.com/austinheap/status/2187636648

    This is not intended to be a blanket dismissal or FUD, but the NewsWeek article's style is concerningly uncritical and sensationalist, while being unaware of the technologies and knowledge that already exist in this field. I'd prefer to see it analyzed by someone like Schneier.

  61. Kudos, but ... by dfuess · · Score: 1

    Kudos to Heap. Anyone applying technology to oppose oppressive regimes gets an A+ from me. Notwithstanding that such news is uplifting for us, Heap has probably put his life in jeopardy to do this. I hope we are not adding to that jeopardy by exposing it here.

  62. Re:LOL! "Iran's rigged election broke over Twitter by Anonymous Coward · · Score: 0

    Wishful thinking on your part Alex.

    And how I wish you were right. If the U.S. were to decide to become an active force for evil in the world then we would swiftly subjugate the remainder of the planet so fast it would make other wannabe evil empires green with envy. So many of America's problems could be quickly solved if America would only embrace evil and always act in the most evil way possible when dealing with others.

    No more concern about civilian casualties. Unless of course the military were slacking and not causing enough of them. Invasions by American military would mean not only the destruction of your military forces but also the razing of your cities and infrastructure and the slaughter of your population. Streets and rivers would run red with blood while a miasma of death and decay and shit hung over your lands as diseases, pestilence, and starvation ravaged any unfortunates not killed in the initial onslaught and follow up extermination operations.

    It would be simply fucking glorious!

  63. Give us a break... by Anonymous Coward · · Score: 0

    from the techie propaganda. Stop gearing up for another war.

  64. Re:LOL! "Iran's rigged election broke over Twitter by couchslug · · Score: 1

    NONE of the revolutionary examples you cite were revolts against _religious_fanatic_ masters.

    BTW I'm not inciting revolution. I'm observing what is required to displace ruthless people who are inspired by an imaginary celestial friend.

    The Iranians aren't going anywhere, because Iran is far too comfortable for revolt. Revolutions don't usually happen when there is no freedom, they happen when there isn't enough food. Nothing to see here.

    I don't care if Iran revolts or not. Democracy would just make them a more efficient enemy of non-Islamic nations. They don't "want to become Europe", they just want a piece of the current pie.

    I don't confuse these people with secular humans. They were chanting "God is Great" during their protests. Invoking superstition isn't progress.

    --
    "This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
  65. really? by DrEasy · · Score: 1

    Iran has elections, but doesn't pick the right person, so it's a dictatorship. Same is true for Venezuela and Gaza, and any country over the past sixty years that made the mistake of voting for left-leaning leaders in the Western Hemisphere.

    Any country? Didn't know France, Sweden, Spain and basically all of Western Europe, and also half of South America became dictatorships for having voted for left-leaning leaders at some point in the past sixty years.

    --
    "In our tactical decisions, we are operating contrary to our strategic interest."
  66. Exposing dictators and their henchmen by Anonymous Coward · · Score: 0

    Dictators can't survive alone; they need willing henchmen to do their dirty work. They pay them well and protect them from retribution. Imagine if the names, ranks and home addresses of all of the henchmen were published on the Internet, together with the names of their wives and children, and the schools to which their children went. Even if no one did anything with this information, the fact that it was publicly posted and available to all would have a hugely discouraging effect on both active and wannabe henchmen.

  67. Context old chap, where is the context? by Anonymous Coward · · Score: 0

    Iran's elections are a sham. Candidates are vetted and that way opposition politticians of repute, specially if they are reformists, can't compete fairly.

    And to call Iran's regime leftist frankly beggers belief.

    Venezuela and Gaza, for all their failing, have had monitored elections that have been decalred clean by international observers.

    Only uninformed USians (i.e. the majority) don't know that Hugo Chavez or Hammas are actually legitimately elected.

    1. Re:Context old chap, where is the context? by copponex · · Score: 1

      Iran's elections are a sham. Candidates are vetted and that way opposition politticians of repute, specially if they are reformists, can't compete fairly.

      And that differs from the US political elections how?

      And to call Iran's regime leftist frankly beggers belief.

      I didn't say the current government was leftist. I was referring to the dozen or so governments we overthrew in the Western Hemisphere who had elected left leaning governments.

      Saddam Hussein had a socialist state -- read the 1970 Iraqi Constitution -- but was supported because of the political situation involving Iran and Russia. Iran in 1953 had a left leaning democratic government that was trying to get a fairer shake for the oil resources under their feet. So that government was thrown out in a coup backed by the US and Britain, and the police state installed to protect American and British interests was overthrown in 1979. The new Iranian state does have some socialist elements -- national resources belonging to the people -- and many rightist revolutionary elements, like hardline Islamic hawks who do control vast parts of the political machine. In any case, it's far more legitimate than Egypt or Saudi Arabia and many other states we have backed in the past.

  68. Re:LOL! "Iran's rigged election broke over Twitter by tucuxi · · Score: 1

    NONE of the revolutionary examples you cite were revolts against _religious_fanatic_ masters.

    Pretty much all European monarchies were theocracies, in the sense that the monarch claimed to be chosen by God, and received strong legitimization from the Church (when not actively leading it). Many other regimes have had close ties with their local faiths and fallen. Ok, no big upheavals in Islamic countries -- but they do not have such a long span of post-colonialism and post-cold war history.

    The Iranians aren't going anywhere, because Iran is far too comfortable for revolt. Revolutions don't usually happen when there is no freedom, they happen when there isn't enough food. Nothing to see here.

    I question your knowledge of Irani life. I happen to know a few Iranians, and the feelings after the last rigged elections were pretty high. Even if sudden revolt is very unlikely (unless the regime really goofs up), erosion is steadily under way. Without an "outer enemy" to blame everything on and with higher levels of education, a huge mass of 20-somethings is feeling cheated by their current leaders.

    I don't care if Iran revolts or not. Democracy would just make them a more efficient enemy of non-Islamic nations. They don't "want to become Europe", they just want a piece of the current pie.

    I don't confuse these people with secular humans. They were chanting "God is Great" during their protests. Invoking superstition isn't progress.

    Ah, another devout follower of The Clash of Civilizations. Either with us or against us, attaboy. Two things I find amusing about your post. First, the idea that no understanding is possible with others of a different religion. 100-year wars were fought between Catholics and Protestants, but we got over it, and now we can speak of Europe, and are more prosperous than ever. Why can't Islamic-majority societies function alongside other nations? In fact, many of them already do - today's Indonesia is mostly Islamic, but does not seem to threaten your sensibilities. Second, the idea that Western society is completely secular. Just look at the ties between conservative parties (say, Republicans in the US) and local religious zealots.

    Finally, according to Kapuciski's book on the Iranian Revolution, the cry of "Allahu Akbar" was traditionally chanted during those protests, as defiance of the Shah's authority and against the (US backed) Shah's brutal regime of oppression and terror, which seemed to exceed the worse Latin-American standards . In this sense, it may reflect less religions fanaticism and more of an official protest slogan against much of the same phenomenon. Something like "give us back our Revolution".

  69. Austin Heap by Anonymous Coward · · Score: 0

    This is a guy (Austin Heap) who in high school (Olentangy High School, Lewis Center, Ohio) would have his mom send out press releases mostly of the "whiz kid programmer" variety about him in the hopes that they would get picked up by a wire service or elsewhere. He is all about getting press and becoming famous. I'm sure there is nothing completely original in this software, it is probably pieced together from known entities. He also used to read slashdot and I'm sure he reads anything about himself he can so I'll say, Hey Austin congrats on the coverage and hopefully the software does some good.

  70. Re:LOL! "Iran's rigged election broke over Twitter by Zeek40 · · Score: 1

    I don't think America is unique in the amount of evil it produces, just the amount it exports. There are plenty of tin-pot dictators, warlords and autocrats out there producing much more evil than the US, they just keep it all local.

  71. Re:LOL! "Iran's rigged election broke over Twitter by hedpe2003 · · Score: 2, Insightful

    And the amount of evil it has combated. (ie, Nazis, Soviets, etc)
    And in the Aid in which is gives
    And the amount of technological achievements (Modern Assembly Line, Computers, Synthetic Life?)

    I mean really.... Give it a rest.

    --
    Comprehensive solutions via a competition of ideas like no other.
  72. Re:LOL! "Iran's rigged election broke over Twitter by couchslug · · Score: 1

    "100-year wars were fought between Catholics and Protestants, but we got over it, and now we can speak of Europe, and are more prosperous than ever. "

    You make my point for me. Europe took centuries of warfare to WEAKEN religion into to social club it is today. We may revile it in the streets and put crucifixes in jars of urine if we like.

    Why is it not reasonable to expect the that reformation of Islam will require massive violence, prepare for that, and be comfortable with the idea that violence is the price for weakening superstition? The nice thing about religionist war is the casualties don't matter.

    --
    "This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
  73. Re:LOL! "Iran's rigged election broke over Twitter by hedpe2003 · · Score: 2, Insightful

    It would be simply fucking glorious!

    You're an idiot

    --
    Comprehensive solutions via a competition of ideas like no other.
  74. Re:LOL! "Iran's rigged election broke over Twitter by Raenex · · Score: 2, Insightful

    Everyone else.

    Everyone else doesn't have an extensive history of meddling? So Russia, England, Germany, France, and on and on, don't have such histories? Name a big country, there's a good chance they have a history of meddling.

  75. Re:Golly! Maybe Because They Said So Themselves? by Anonymous Coward · · Score: 0

    That's not a citation. You are apparently the dumbfuck since you still failed to provide one. Saying "Maybe because they said so themselves" gives no source or attribution. Fucking moron.

  76. Re:LOL! "Iran's rigged election broke over Twitter by Fnkmaster · · Score: 2, Insightful

    While we have undoubtedly exported some nasty results with our foreign policy, the US is also unique in the amount of good it has produced - you know, little things that better the world like computers, the internet, and a large amount of modern medical technology. Whether that has, overall, outweighed the evil we have produced, I'm just not sure and I doubt anybody can easily answer that question.

    And I'm not really sure that the stuff done in the name of fighting communism was truly evil though some of the results were very nasty. Communism and the threat of nuclear war were scary and were perceived as existential threats by many at the time. It sounds completely ludicrous now that we know that the Soviet economy was overextended and straining to keep up during the Cold War era, but it's unfair to judge the past with full knowledge of the outcomes.

  77. Re:LOL! "Iran's rigged election broke over Twitter by Some+Bitch · · Score: 1

    And the amount of evil it has combated. (ie, Nazis, Soviets, etc)

    We're glad you rocked up to WWII and all, but don't forget we were already fighting the Nazis when you didn't want any part of it. We were a tiny island nation with no chance whatsoever of winning but we still fought with everything we had.

    And in the Aid in which is gives

    Last time I looked the US wasn't even in the top 10 as a percentage of GDP.

    And the amount of technological achievements (Modern Assembly Line, Computers, Synthetic Life?)

    Alan Turing was British, I'll give you the other two though.

    I mean really.... Give it a rest.

    I'd suggest you do so yourself, the two times I've visited your country I loved every minute of it but at least keep the flag waving to things you actually did or do well at.

  78. Typical Naive Geek Answer by Hasai · · Score: 1

    ....First of all, we do not rely on "obscurity" for protecting our users' privacy. Everything that one of ours users sends and receives is enciphered. It would take centuries for all the world's computers to decipher one of our users' browsing sessions even with full access to the Haystack source code....

    Typical naive geek answer.

    Here's the typical totalitarian state's answer: Drag you in for interrogation and beat on you until you tell them what all that encrypted traffic was.

    Welcome to the World, kiddies. . . .

    --

    Regards;

    Hasai

    1. Re:Typical Naive Geek Answer by Anonymous Coward · · Score: 0

      Do you really think he's going to memorize the encrypted traffic? For what end?

  79. Re:LOL! "Iran's rigged election broke over Twitter by tucuxi · · Score: 1

    You make my point for me. Europe took centuries of warfare to WEAKEN religion into to social club it is today.

    So you think that all countries are doomed to repeat the same mistakes for themselves, and that no-one can learn from their neighbors? Interesting point.

    As for a "reformation of Islam requiring massive violence" and "casualties don't matter in religionist war", I object to both statements. Many muslims lead productive and integrated lives in western societies. Hell, some mostly muslim countries are not all that bad. Human nature is pretty much the same the world over, regardless of culture. Ignorance and desperation drive people to do stupid things, and religion is not an overarching cause for all the evils in the world. Even if it does share some of the blame.

    One thing is believing in God, which most Iranians admittedly do, and another one is Iranians believing their current leaders try to put a spin on the latest rigged elections. Pacific transitions from highly devout authoritarian governments to democracies can happen -- witness the case in Spain after the fall of Franco.

  80. Re:LOL! "Iran's rigged election broke over Twitter by Anonymous Coward · · Score: 0
    I really wasn't trying to sound snoody, it's just the Anti-American bias is sad. But on your points...

    We're glad you rocked up to WWII and all, but don't forget we were already fighting the Nazis when you didn't want any part of it. We were a tiny island nation with no chance whatsoever of winning but we still fought with everything we had.

    Right, but your country wanted no part of it until it was threatened. (Austria and Czechoslovakia weren't enough), as did we. Which is in my opinion more noble, yet far more dangerous than the pre-emptive war idiology that Hitler scared us into from that point forward.

    Alan Turing was British, I'll give you the other two though.

    What I should have said was the digital computer by George Stibitz - but of course Turing is at least as appropriate - selective history on my part. Maybe I should have replaced Computer with Slashdot. :)

    Last time I looked the US wasn't even in the top 10 as a percentage of GDP.

    18th actually, using GDP. But there's something to be said for the fact that if you add up the actual amount given by the top 10 annually, you'll reach the amount the US gives.

    Really... All I am trying to say is that we export at least as much good as evil in the world.

  81. Re:LOL! "Iran's rigged election broke over Twitter by Alex+Belits · · Score: 0, Troll

    I am VERY familiar with how Communists governed -- they were still better than your politicians. I can grant you one thing, they had one ruling party, US has two. They have two ruling parties now -- both are worse than one they had before, and both are better than two you have in power (I mean, United Russia is better than Democrats and Russian Communist Party is better than Republicans, other comparisons are up to debate), so this is hardly relevant.

    Of course, if you compare yourself to anything other than Communists or Theocrats, the true extent of your political system's backwardness becomes apparent, so don't even try.

    --
    Contrary to the popular belief, there indeed is no God.
  82. Re:LOL! "Iran's rigged election broke over Twitter by Alex+Belits · · Score: 1

    "Extensive history" of other governments only looks impressive if summed over millennia of their existence, and, more importantly, everyone else wisened up and stopped this shit decades or centuries ago.

    US causes death, destruction and misery all over the world right now, at a scale and rate never seen before from any of the "evil empires" of the past.

    --
    Contrary to the popular belief, there indeed is no God.
  83. Re:LOL! "Iran's rigged election broke over Twitter by Raenex · · Score: 1

    "Extensive history" of other governments only looks impressive if summed over millennia of their existence

    Millennia? Try looking at the last 100 years. You might have missed two World Wars, followed by a cold war with the USSR over communism that spanned the globe. The United States emerged as the sole superpower, and as such in the last couple of decades had the biggest footprint in foreign meddling, but Russia is on the rise again and re-asserting its influence.

    Smaller countries tend to confine their meddling to bordering countries.

    US causes death, destruction and misery all over the world right now, at a scale and rate never seen before from any of the "evil empires" of the past.

    You have no fucking clue. Go read some history books.

  84. Re:LOL! "Iran's rigged election broke over Twitter by c6gunner · · Score: 1

    The fact that this got "+5 Insightful" instead of "-5 Gibbering Twit" is really, really sad. Slashdot has always had a certain bias, politically, but it used to be filled with fairly intelligent and rational individuals. I guess that time has passed.

  85. Re:LOL! "Iran's rigged election broke over Twitter by Anonymous Coward · · Score: 0

    Nice post! I'm in Europe, but wisdom is universal. Kudos

  86. Re:LOL! "Iran's rigged election broke over Twitter by mjwx · · Score: 2, Informative

    NONE of the revolutionary examples you cite were revolts against _religious_fanatic_ masters.

    Neither is Iran, they are no more religious then the Filipino government (except they are the "right" religion for you) but the Filipino's did it, twice. Yes the PNP (Philipino National Police) will lock you up if you upset the religious leaders, having been there, you dont state you're anti-Christian as almost every native Filipino is very devout, especially the ones in power. It's the only time in my life I've ever said, God is Great (note, the Filipino's are great people, just avoid the topic of religion).

    BTW I'm not inciting revolution. I'm observing what is required to displace ruthless people who are inspired by an imaginary celestial friend.

    I never said that you were inciting, I said you were retarded for thinking that violent revolution was the best way to get rid of a theocracy, let alone the only way.

    The Iranians aren't going anywhere, because Iran is far too comfortable for revolt.

    Comfortable lives often lead to greater revolutions when freedoms are being visibly curtailed. The American Colonies did this (things weren't that bad under the King, you just wanted more freedom), same with India and lets not get started on Ireland, using your logic The Troubles should never have happened. I'll remind my Irish friend (who grew up in Belfast during the 70's and 80's) of that next time the subject comes up.

    I don't care if Iran revolts or not. Democracy would just make them a more efficient enemy of non-Islamic nations.

    Here's where you show your true face in this argument. You dont give two hoots about the Iranian people, you just want to slag off Islam. Well I live near the two largest Islamic democracies, Malaysia and Indonesia and we aren't threatened at all. I can go to Kuala Lumpur, drink a beer, have extra-marital relations with a woman (who doesn't wear a hijab). Hell, Surabaya in Indonesia is a sex tourism destination. Sounds like Islamic democracies are nothing but badness.

    Or you're full of shit.

    --
    Calling someone a "hater" only means you can not rationally rebut their argument.
  87. Re:LOL! "Iran's rigged election broke over Twitter by Alex+Belits · · Score: 1

    Millennia? Try looking at the last 100 years. You might have missed two World Wars,

    What was the total duration of both, and number of people killed? Compare that to people dying of hunger and poverty thanks to US policies after WWII ended.

    followed by a cold war with the USSR over communism that spanned the globe.

    Not only I remember it, I was on the opposite side of it. Contrary to what your friendly propaganda workers told you, the only country that messed with things all over the globe, was US. American politicians seen ghosts of USSR every time any even remotely leftist group of politicians came to power anywhere, and attacked them as if nukes were raining on Washington, DC. USSR, at most, occasionally jumped across its border reacting to what it perceived as a direct threat to its territory -- granted, often in a mildly assholish (Hungary, Czechoslovakia) or unsuccessful (Afghanistan) way. Not that US did not outdo USSR meddling in both Eastern Europe and Middle East by multiple orders of magnitude (Balkan wars/Kosovo, Afghanistan, Iraq) after that.

    The United States emerged as the sole superpower, and as such in the last couple of decades had the biggest footprint in foreign meddling, but Russia is on the rise again and re-asserting its influence.

    Then your tenure as self-proclaimed "sole superpower" can be described by one letter, and that letter is F.

    --
    Contrary to the popular belief, there indeed is no God.
  88. Re:LOL! "Iran's rigged election broke over Twitter by Raenex · · Score: 1

    What was the total duration of both, and number of people killed?

    There's a wide range of estimates, so I'll use one reference that is simple and looks well researched:

    First World War (1914-18): 15 000 000
    Second World War (1937-45): 55 000 000

    Compare that to people dying of hunger and poverty thanks to US policies after WWII ended.

    I'll wait for your numbers and citations to back them up.

    Not only I remember it, I was on the opposite side of it.

    You lived in the USSR?

    Contrary to what your friendly propaganda workers told you

    Just remember that propaganda is used by all parties. Why is it that the communists countries were the ones with state controlled media? Was there a single paper in the Soviet Union criticizing Stalin?

    USSR, at most, occasionally jumped across its border reacting to what it perceived as a direct threat to its territory -- granted, often in a mildly assholish (Hungary, Czechoslovakia) or unsuccessful (Afghanistan) way.

    I wouldn't call Cuba "across the border" from USSR. The USSR had direct influence in a large number of countries after World War II. They were also involved in conflicts like Vietnam and Korea. You seem to give the USSR a free pass for their interference "perceived as a direct threat to its territory". Anti-communist revolutions in bordering communists countries is not a direct threat. Indirect, yes, but that's the same reason why the US was fighting communism.

  89. Re:LOL! "Iran's rigged election broke over Twitter by Alex+Belits · · Score: 1

    Second World War (1937-45): 55 000 00

    More like 70 millions, actually.

    How many people died prematurely thanks to living in unhealthy condition under US-backed governments in Africa alone?

    You lived in the USSR?

    Yes, I did.

    I wouldn't call Cuba "across the border" from USSR.

    Cuban revolution was not in any way provoked by USSR, it was provoked by massively shitheaded Cuban government and overall popularity of leftist movements in Latin America. After revolution Cuba was friendly to USSR, however there was no actual meddling involved, and USSR didn't benefit from Cuba being Communist, other than in propaganda value. Even Cuban missile crisis was not in any way worse than US placing its missiles across the border from USSR in friendly Turkey -- and it was resolved by both countries backing off (and not by what you were told).

    Afghanistan, on the other hand, was across the border from USSR, and was a direct threat to USSR territory -- as opposed to being any kind of threat to US territory now. What US is doing there is somewhere on the scale between "pointless" and "colonialism".

    --
    Contrary to the popular belief, there indeed is no God.
  90. Re:LOL! "Iran's rigged election broke over Twitter by Raenex · · Score: 1

    More like 70 millions, actually.

    As I said, estimates vary widely.

    How many people died prematurely thanks to living in unhealthy condition under US-backed governments in Africa alone?

    I'm still waiting for your numbers and citations.

    Even Cuban missile crisis was not in any way worse than US placing its missiles across the border from USSR in friendly Turkey

    I never said US wasn't meddling in a similar fashion. However, the USSR did meddle in Cuba by trying to place those missiles there.

    Afghanistan, on the other hand, was across the border from USSR, and was a direct threat to USSR territory

    Ridiculous. Direct threat implies they were going to invade the USSR. No such thing was going to happen. It's like the United States invading Mexico while it is having a revolution, claiming there is a "direct threat". See how easy it is to make excuses for your own government's behavior?

    What US is doing there is somewhere on the scale between "pointless" and "colonialism".

    The US was attacked by a terrorist network enjoying the full sanction of the Taliban.