Slashdot Mirror


From Slaying Dragons To Dictators

tcd004 writes "In a weekend, programmer Austin Heap transformed from an apathetic MMO player to a world class regime-slayer. When word for Iran's rigged election broke over Twitter, Heap decided to dedicate himself to building a better proxy system for people behind Iran's firewall. Heap's creation, Haystack, conceals someone's real online destinations inside a stream of innocuous traffic. You may be browsing an opposition Web site, but to the censors it will appear you are visiting, say, weather.com. Heap tends to hide users in content that is popular in Tehran, sometimes the regime's own government mouthpieces."

55 of 233 comments (clear)

  1. So let me get this straight by rshxd · · Score: 2, Insightful

    Why is this article being put out now? The Iranian elections were awhile ago

    1. Re:So let me get this straight by _Sprocket_ · · Score: 2, Funny

      Do you perhaps have some conspiracy theory prepared to answer your own question?

    2. Re:So let me get this straight by h4rm0ny · · Score: 2, Insightful

      Why is this article being put out now? The Iranian elections were awhile ago

      Maybe they think those of us pointing out that the elections weren't rigged will have got bored and gone away by now or that endless repetition will have made the "rigging of Iranian elections" accepted history at last.

      There's no good evidence that Iran's elections were rigged. Whether Western powers like it or not, Ahmadinejad seems to have won legitimately. He's actually very popular in rural areas and not unpopular in Tehran, either. There's a just a fairly affluent and pro-US faction in the cities that want a pro-Western candidate. If you look at independent polls before the election, they were predicting Ahmadinejad would win (this includes pollsters from the US) and if you read the stories about electoral fraud, you'll find a lot of "no smoke without fire" arguments and some warping of the truth (e.g. the endless repetition of the factoid that more people voted in some places than actually lived there, which is actually obvious when you know that in Iran, to facillitate easy voting, people commonly vote in the area in which they work rather than their registered home village). But you wont find actual evidence of fraud. The papers were full of "some people say there might be fraud" but bugger all "this shows there was fraud". What you can find is that the US congress voted through around US$10 million dollars to fund activities to overthrow the government of Iran and that Bush approved the CIA to start active operations within Iran. But they'd never stoop to trying to de-legitimize the Iranian democratic process or rile up protest groups trying to over throw the government, would they? I mean, not again.

      --

      Aide-toi, le Ciel t'aidera - Jeanne D'Arc.
  2. I'm just guessing here... by $RANDOMLUSER · · Score: 3, Insightful

    But "looking at porn" wasn't one of the viable alternatives?

    --
    No folly is more costly than the folly of intolerant idealism. - Winston Churchill
  3. Re:So let's talk abou it. by betterunixthanunix · · Score: 2, Insightful

    Security through obscurity is no security at all.

    I strongly doubt that the existence of this system is a mystery to the government of Iran, at least not if it is beyond a certain level of popularity.

    --
    Palm trees and 8
  4. Little different by Monkeedude1212 · · Score: 4, Funny

    I don't know if I'd consider setting up a good Proxy server as "Slaying a Dictator".

    I think that's actually part of a big chain quest so that you can get keyed along with a large group of people to then slay the dictator.

    1. Re:Little different by SomeJoel · · Score: 2, Insightful

      I don't know if I'd consider setting up a good Proxy server as "Slaying a Dictator".

      I think that's actually part of a big chain quest so that you can get keyed along with a large group of people to then slay the dictator.

      You must first reach exalted with several factions, including "UN" and at least a few of the "U.S. Military" subfactions. Otherwise you can't even zone in.

      --
      <Complete your profile by adding a signature!>
  5. Proxy Ban? by Soporific · · Score: 2, Insightful

    Wouldn't they just ban anyone connecting to known proxies or any proxy in general that wasn't set up by the authorities?

    ~S

  6. For all that Iran is... by Wyatt+Earp · · Score: 5, Informative

    It is not a dictatorship.

    Misguided, dangerous, theocratic, abusive, yes. But not a dictatorship.

    1. Re:For all that Iran is... by Wyatt+Earp · · Score: 2, Interesting

      How is the US a theocracy?

    2. Re:For all that Iran is... by CRCulver · · Score: 2, Insightful

      The mullahs are the highest authority in the country, and they are not answerable to elections. They also have their own private army which is not responsible to the voice of the people even in the most abstracted fashion. Hard to claim that's not a dictatorship.

    3. Re:For all that Iran is... by Wyatt+Earp · · Score: 5, Informative

      That would be a theocracy. Not a dictatorship.

      "Theocracy is a form of government in which a god or deity is recognized as the state's supreme civil ruler, or in a higher sense, a form of government in which a state is governed by immediate divine guidance or by officials who are regarded as divinely guided."

      "Iran's government is described as a "theocratic republic".Iran's head of state, or Supreme Leader, is an Islamic cleric appointed for life by an elected body called Assembly of Experts. The Council of Guardians, considered part of the executive branch of government, is responsible for determining if legislation is in line with Islamic law and customs (the Sharia), and can bar candidates from elections, and greenlight or ban investigations into the election process."

      A dictatorship is ruled by an individual. So like Iraq before Operation Iraqi Freedom kicked him out of power.

    4. Re:For all that Iran is... by commodore64_love · · Score: 2, Insightful

      The word you are looking for is oligarchy - unelected men that sit on the top and make the rules.

      Kinda like our unelected Supreme Court Oligarchs. (I'm still trying to find the part of the US Constitution that the Court claims allows them to ban obscene material. I swear it's not there, even though they claim it is. Hmmm.)

      --
      "I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
    5. Re:For all that Iran is... by CRCulver · · Score: 2, Informative

      A dictatorship is ruled by an individual.

      Not necessarily. Ever hear the phrase "dictatorship of the proletariat" within Marxist-Leninist thought? There the dictatorship would be ruled by the working class as a whole.

      If you bothered looking up "theocracy" in the dictionary, then you should have looked up "dictatorship" too. Merriam-Webster give as their third definition: "3 a : a form of government in which absolute power is concentrated in a dictator or a small clique b : a government organization or group in which absolute power is so concentrated c : a despotic state". A military junta, or in this case a group of religious leaders who wield absolute power, unaccountable to the people (and who can override democratically elected legislators) can fairly be called a dictatorship.

    6. Re:For all that Iran is... by h4rm0ny · · Score: 2, Insightful


      Ever heard someone refer to Internet Explorer as "The Internet"? Does it make your teeth grind? Same principle, I'm afraid. Those of us who understand the meanings of words have a responsibility to use them correctly and lead by example.

      --

      Aide-toi, le Ciel t'aidera - Jeanne D'Arc.
  7. thinkofthechildren by esocid · · Score: 2, Insightful

    I look forward to a 'thinkofthechildren' argument from some congressman in the future about why it should be illegal here.

    --
    Absolute power corrupts absolutely. indymedia
    1. Re:thinkofthechildren by ducomputergeek · · Score: 2, Informative

      Already happening. Just about anyone running a Tor Exit node is at risk for Kiddie porn charges. I had friends that set up Tor nodes during the Iran unrest. One of them decided to see if it was doing any good and was shocked that more than half the traffic was actually porn and a fair amount of it kiddie porn. As soon as he told the others, everyone stopped hosting the nodes and a couple even Dbaned their HDD's. No one wanted to risk being caught. None of them were rich enough to fight it.

      --
      "The problem with socialism is eventually you run out of other people's money" - Thatcher.
  8. Re:LOL! "Iran's rigged election broke over Twitter by Fnkmaster · · Score: 4, Interesting

    As opposed to the laughably juvenile attempts by Iranian intelligence agencies to spam twitter with pro-Iranian-government messages?

    Also, please include citations when you make accusations like that. I pulled up a bunch of articles on the Iranian twitspam with no problem but found it harder to dig up reports of US Agencies doing the same (though I wouldn't be shocked if they had, this seems to go both ways).

  9. Get a clue by Zero__Kelvin · · Score: 4, Informative

    "I always love when someone talks about security through obscurity like they know what they are talking about.

    The instant someone like yourself makes such a retarded comment you picked up from someone else or Wikipedia, those of us who DO know about it start chuckling inside."

    Hey pal, I've got bad news for you but you are the one who doesn't know what the term means. You should be laughing at yourself for not understanding a term and then looking down upon others who do understand it. I hope you especially laugh at how incompetent Bruce Schneier is to use the term, because you are no doubt more competent than him (ROTFLMAO).

    The term has never implied that you can know the keys and still not get in. It specifically refers to a principle in security engineering, which attempts to use secrecy (of design, implementation, etc.) to provide security - [emphasis added]. In other words if you cannot publish the algorithm without rendering the system vulnerable, then that is security through obscurity.

    --
    Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    1. Re:Get a clue by Prune · · Score: 2, Interesting

      Of course, you're both playing semantics games. In a von Neumann machine, such as is every desktop computer, for example, the separation of data and program is superficial--it's just a psychologically-driven convention. It is also an extremely frequently violated convention (both by machine--Windows tends to rewrite memory-loaded images of binaries heavily--and by humans, in cases not just of the more rare virus-modifying code, but in every instance of scripting/interpreters/just-in-time compilation). Thus, obscuring the keys is not fundamentally different from obscuring the algorithms because there is no fundamental distinction between program and data. In practical terms it may be more convenient to have many keys per algorithm rather than the other way around, but this is merely adopted for trivial practical reasons. Again, there's nothing wrong with "through obscurity" by the usual definition as long as the level of obscurity applied to the algorithms corresponds to the level of obscurity applied to the keys in the more common approach.

      --
      "Politicians and diapers must be changed often, and for the same reason."
    2. Re:Get a clue by StikyPad · · Score: 4, Informative

      From TFFaq:

      8. In keeping the source code a secret, aren't you just relying on "security through obscurity"? Won't authorities eventually discover how your software works anyway?

      This charge is difficult to rebut, because under normal conditions, "security through obscurity" is indeed false security. However, Haystack has several properties that make it a special case.

      First of all, we do not rely on "obscurity" for protecting our users' privacy. Everything that one of ours users sends and receives is enciphered. It would take centuries for all the world's computers to decipher one of our users' browsing sessions even with full access to the Haystack source code.

      "Obscurity," however, does make it much harder to find ways to block our software. Of course the authorities will pour resources into finding a way to do this, and they may temporarily succeed. In that event, we will refine our software and issue a new version that circumvents the restrictions. We will not, however, give the authorities any assistance in this process. By retarding their efforts, we ensure that the Haystack network operates more robustly for longer periods.

    3. Re:Get a clue by _Sprocket_ · · Score: 2, Insightful

      That kind of sounds like every press release from every security vendor who claims a secret sauce implementation. I don't see how their situation is "a special case."

    4. Re:Get a clue by phantomcircuit · · Score: 2, Insightful

      If the authorities can block the software they can determine it's being used. The act of using software to circumvent the filtering is in and of itself a serious crime.

      Just because they cant tell what exactly you were doing isn't going to stop them from throwing people in jail or worse.

    5. Re:Get a clue by mea37 · · Score: 2, Insightful

      And by the same argument, a lead weight is indistinguishable from a light ray, because it's all just energy.

      The fact that a key is bits and an (implementation of an) algorithm is bits does not mean that the two are indistinguishable from a security perspective when treated as a secret. I could start by quibbling about the size of the secret, but the more fundamental issue is how widely applicable is the secret (or, somewhat equivalently, how widely distributed is evidence of the secret).

      In short, you're conflating the ideas of "secret" and "obscure". Perhaps everything obscure is kept secret, but not everything kept secret can be described as "obscure". Something is obscure if it is widely applicable but not widely known.

      In PGP encryption, the algorithms apply universally to every message to and from every user of the system. The fingerprints of the algorithm are on every computer capable of sending and receiving such messages. Trying to keep such a widely-applicable thing secret would be reliance on security through obscurity.

      My private key, though, is totally unavailable to almost everyone. The most direct point is, if I start using a new key tomorrow, I can safely say that Evil Hackers, Inc. hasn't spent decades of effort making progress towards knowing what that key is - and even if they crack it, that only compromises the messages I sent using that key, not the entire system, because that particular key is applicable to nothing else.

      The lock on my door at home requires a key, and you don't know the corret shape; but if you do a little research, you do have a good guess at the basic mechanics of the lock. To the extent that such knowledge leads to insights about how to defeat my (or anyone's) lock, the design is weak. The fact that having my key in hand would give you access to my house is unrelated to that fact.

  10. Misleading... by Zantac69 · · Score: 2, Funny

    I thought this was a new game coming out where you did both: Grand Theft Horse 2 - The Dark Ages.

    --
    1331461 is only semiprime *sigh* Alas - I am just short of 1337.
  11. Re:LOL! "Iran's rigged election broke over Twitter by jandrese · · Score: 2, Insightful

    Iran's government sure loves blaming the US doesn't it.

    --

    I read the internet for the articles.
  12. Learn something, daily by way2trivial · · Score: 3, Informative

    Iranian law is pretty tough on smut
    http://www.google.com/search?hl=en&safe=off&q=pornography+laws+in+iran&aq=f&aqi=&aql=&oq=&gs_rfai=

    Here's one snip from one result
    "The AP reports that Iran's parliament on Wednesday voted in favor of a bill that could lead to death penalty for persons convicted of working in the production of pornographic movies. "

    "Adnkrnonsinternational reports that under the new law, anyone distributing pornographic material can be sentenced to a fine of up to 16,000 euros while owners of a porn video or film risk up to 76 lashings. "

    "Executing Iranians involved in the porn industry isn't a brand new story, unfortunately. "

    --
    every day http://en.wikipedia.org/wiki/Special:Random
    1. Re:Learn something, daily by commodore64_love · · Score: 4, Interesting

      I hate moral dictatorship. It doesn't matter if it's coming from a Muslim government, the Church of Rome, or politicians. Ya know... it's my life. If I want to be an asshole that looks at porn, doesn't go to church, and keeps to himself, I have that right. Stop trying to force me to adopt your moral beliefs.

      So this HAYSTACK program. Would it work in the US and EU? It appears the answer is "no" since it was specifically designed for Iraq.

      --
      "I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
    2. Re:Learn something, daily by Farmer+Tim · · Score: 4, Funny

      ...owners of a porn video or film risk up to 76 lashings.

      In some circles that's considered a bonus feature.

      --
      Blank until /. makes another boneheaded UI decision.
    3. Re:Learn something, daily by 32771 · · Score: 2, Insightful

      > If I want to be an asshole that looks at porn, doesn't go to church, and keeps to himself, I have that right.

      It would sound much better if you would replace that 'and' with an 'or'.

      Also you have to understand those overly religious societies. They are under considerable stress while surviving in a harsh environment by any means possible (if there is no stress you can create some, i.e. with lacking medical insurance). This creates a situation where even the most basic needs of a human being may remain unfulfilled. Also they have devout followers who procreate madly thereby further reducing the value of a human life. So going back to your moral values and those dictatorships, it has to be obvious to you that while all the fulfillment of basic human needs will continue to be lacking, capable politicians will always be able to find something else to justify their existence with, like chasing after social misfits or other odd people who don't really do any harm.

      Sane societies have long discovered that they could invest all those resources more wisely, see the following for an example http://en.wikipedia.org/wiki/John_Locke

       

      --
      Je me souviens.
    4. Re:Learn something, daily by Tenek · · Score: 4, Insightful

      Much better than I feel about the production of child pornography, and much worse than I feel about the viewing of what the Moral Guardians' consider "child pornography".

  13. But how does it work? by by+(1706743) · · Score: 5, Funny

    It must be tricky to hide sensitive data in innocuous data streams. Of course, I'm sure it's possible...

    1. Re:But how does it work? by Eternauta3k · · Score: 4, Funny

      You forgot to bold the space. Like this.

      --
      Yeah. Would you choose a neurosurgeon who pokes around people's brains in his spare time? I wouldn't.
  14. Re:LOL! "Iran's rigged election broke over Twitter by copponex · · Score: 3, Insightful

    Iran has elections, but doesn't pick the right person, so it's a dictatorship. Same is true for Venezuela and Gaza, and any country over the past sixty years that made the mistake of voting for left-leaning leaders in the Western Hemisphere.

    And what about China, Saudi Arabia, Egypt, etc? Well, they make us a shitload of money, or they at least follow our orders, so, you know. It's different.

  15. I guess I'll come out and say it... by scribblej · · Score: 5, Insightful

    Bullshit.

    Less than a month and many all-nighters later, Heap and a friend had created Haystack. The anti-censorship software is built on a sophisticated mathematical formula that conceals someone's real online destinations inside a stream of innocuous traffic. You may be browsing an opposition Web site, but to the censors it will appear you are visiting, say, weather.com.

    This doesn't make sense. It still has to connect to and load the BAD website, too...

    Other anti-censorship programs--such as Tor, Psiphon, or Freegate--can successfully hide someone's identity, but censors are able to detect that these programs are being run and then work to disable the communication. With Haystack, the censors aren't even aware the software is in use. "Haystack captures all outgoing connections, encrypts them, and then masquerades the data as something else," explains Heap. "If you want to block Haystack, you are gonna block yourself."

    OK, this makes so little sense I can't even figure out how to respond to it.

    Heap intends to gradually develop Haystack's presence in the country. He has started to share it with select activists and trusted individuals on an invitation-only basis. They will then be asked to share it with their friends. It is the same model that was originally followed by Google's Gmail. The targeted approach is smarter from a security standpoint. Also, he doesn't want the software to collapse from low-value demand.

    SAY WHAT?

    Yeah, there's one word for this whole article. BULLSHIT. It stinks.

    1. Re:I guess I'll come out and say it... by StikyPad · · Score: 2, Informative

      The article may be the nonsensical writings of an unsavvy reporter, but the project itself seems real enough.

      http://www.censorshipresearch.org/projects/introduction/
      http://www.censorshipresearch.org/about/
      http://www.haystacknetwork.com/

    2. Re:I guess I'll come out and say it... by sstamps · · Score: 3, Interesting

      That's oversimplifying the case a bit, I think.

      In Iran, the state has draconian control over the press as well as any "companies" which act as communication feeds. Not so in the US, where communications companies are (for the most part) autonomous and protected like a sacred cow (thanks to the First Amendment).

      I think a better analogy would be blocking porn (child or otherwise) in Iran. I don't live there, and I don't directly know anyone who does, but the known/published government actions and policies are VERY strict, so I would expect there would be a LOT less ability to access porn of *any* kind in Iran.

      In contrast, in the US, there is very little to no active efforts to filter anything, but rather to detect actual access to illegal porn and prosecute at the individual lawbreaker level. However, even that is a spotty and half-hearted effort at best.

      In Iran, you have to register your website with the government, and they can and do block access country-wide to popular internet sites as they deem unfit (YouTube, for example).

      As a result, while it is not impossible to get access to internet content deemed verboten by the state there, the bar has been significantly raised to do so. Thus, any claims to circumvent it without some really revolutionary technology to back them up have to be taken with a grain of salt. That said, I am glad the guy made the effort, and happy for what little freedom it may provide to someone in Iran looking for hope outside their dismal state of being there, but I also don't want people to get snookered into a false hope that this is something far more than what it claims. Over there, people are jailed/murdered by the state for violating their insanely draconian laws.

      --
      -SS "Teach the ignorant, care for the dumb, and punish the stupid."
    3. Re:I guess I'll come out and say it... by jd · · Score: 2, Interesting

      It's basically security through obscurity. A dangerous, but popular, past-time that never actually delivers at the end of the day. Not through lack of sincerity (necessarily) but through the fact that such a method is inherently flawed. Being easy doesn't mean it's any good. It's ultimately why steganography alone is not secure - there will be fingerprints (always) that allow you to separate the two signals and thus yield the original message, if the message is kept as-is. In the case of steganography, the solution is simple - increase the entropy. If the message is compressed and/or encrypted, and the pixels NOT used for storing the text have the same bits scrambled such that the level of randomness is roughly uniform across the whole message, the most you can definitely do is determine that the low pixels do not contain picture information. You would not necessarily be able to tell if that was due to storing more bits than the capture device was capable of accurately recording or if there was some other cause. The image would look, from any obvious analytical standpoint, the same in both cases.

      So the question here is could you do the same in a proxy? Instead of trying to merely hide the data in traffic, can you reduce the fingerprint on the traffic you actually consider important and increase the background noise such that the signal and the noise are indistinguishable by any method whatsoever?

      Not obviously. Not without rolling out IPSec, and I don't see any dictatorship agreeing to that. Hell, I can't see ANY country being willing to tolerate the bulk of Internet traffic being encrypted. (That, I suspect, is some part of why IPv6 is so late in being rolled out. Originally, it mandated IPSec. Which meant EVERYTHING on the Internet being encrypted well beyond the capacity of anyone to break. From the three-letter agency perspective, that would be bad for business. From the uber-expensive SSL certificate standpoint, that would kill any business other than authentication entirely. From the ISP perspective, it would cut into their profit margins for virtual leased lines.)

      Yes, if multi-path is enabled, ISPs and backbone networks haven't turned themselves into spanning trees, and routers are configured to balance things properly, then you could randomize the paths of packet fragments. If (and if you thought that last lot was a big if, then wait till you see this!) the web server ALWAYS supports compressed and/or encrypted requests AND sends the replies likewise (ie: gzip and/or SSL/TLS can ALWAYS be used for ANY request, without exception, AND replies are no less compressed or encrypted), then (in principle) it would be difficult even with deep packet inspection to tell if a fragment was from legal content or illegal content. Not impossible, but difficult.

      To make it impossible, you have to make the fragments non-differentiable to an external observer. ATM uses very small packets, so if you tunneled the fragments over ATM to make even smaller fragments, then tunnel over IP so that you could use IP-over-DNS (since the ATM fragments are roughly the same size as DNS packets), and THEN use something like DNSSec to make it extremely hard to distinguish tunneled packets versus conventional packets, and THEN somehow get this DNS tree linked into the official DNS tree in said country...

      This could work. It's a variant of the Byzantine General's Problem. You can only tell what are real packets if (N/2)+1 nodes are legitimate. If the rogue network of interconnected DNS nodes is great enough that the authorized network of DNS nodes cannot reach that threshold, the authorized tree could, in principle, be subverted to serve the purposes of the rogue network.

      In practice, no country is so stupid that it would blithely provide enough tunnels into anything that country regarded as mission-critical in such a manner as to allow such subversion. They MIGHT provide a few such tunnels and use the bottleneck in an effort to track the source (since it would be guaranteed that only hostile traffic would be coming through that tunnel). In other words, create a bloody great honeypot.

      The last time a country DID allow critical infrastructure to be subverted, Julius Caesar ended up with a knife in his back. It kinda discourages the practice.

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
  16. Regime slayer is ultra offensive by SuperKendall · · Score: 2, Insightful

    Given that the regime in question is still very much in control, and that the only slaying that was done was by the regime, I find the term "regime slayer" to be laughable at best and really offensive at worst for those that hoped for better for the Iranian people.

    That was an extreme case showing that sometimes, mere communication is not enough to evoke change.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
  17. Re:LOL! "Iran's rigged election broke over Twitter by jandrese · · Score: 2, Funny

    Astroturfing on the internet? Well I never!

    --

    I read the internet for the articles.
  18. Re:LOL! "Iran's rigged election broke over Twitter by alvinrod · · Score: 4, Informative

    Well, we do have an extensive history of meddling. Okay, it's actually freaking huge. Whether or not we actually did anything or not, I wouldn't blame Iran for believing that the US played some role in the recent turmoil.

  19. A Retrospective on Iran by Grond · · Score: 4, Informative

    As this article in Foreign Policy explains, the Internet, especially Twitter, didn't contribute nearly as much to the protests in Iran as has been reported: Misreading Tehran: The Twitter Devolution. "Word of mouth was by far the most influential medium used to shape the postelection opposition activity." Other major media included text messages and email, which this software wouldn't help much with.

    Efforts to counter censorship and intrusive government monitoring should be applauded, but it's a bit premature to call this "world class regime-slaying."

  20. Direct Link to Haystack by phantomcircuit · · Score: 2, Informative

    All I see is a bunch of "Donate Now!" buttons/links, no actual software. http://www.haystacknetwork.com/

  21. Re:LOL! "Iran's rigged election broke over Twitter by couchslug · · Score: 2, Interesting

    "Regime change isn't very effective when you have the Keystone Kops trying to carry it out for you."

    Regime change isn't going to happen due to a few protesting students, and the mullocracy can choose to kill them off if they threaten Islamic control of government.

    The people who want to change Iran will have to display a greater will to power than the Islamocracy. That's a very tough act to follow. It would require a Maoist level of ruthlessness, not the trifling discontent of a few young people.

    --
    "This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
  22. Re:A Lock != Security through obscurity by blair1q · · Score: 2, Interesting

    Living in a remote area would be security. The remoteness is the barrier to entry.

    Security through obscurity is more like leaving your door unlocked, but living in a building where all the other doors are locked. Or having a locked door but leaving the window unlocked and using the fire escape. Or leaving the key under the mat. It's not security, it just keeps people from believing they're looking at something unsecured.

    And the reason it's a major fail is that it is defeated by random actions that are far simpler than the randomness needed to defeat the security you're not implementing. Kids trying every doorknob, for instance, or the guy who vacuums the hall knowing all of the doormats that have keys under them.

    As for keys and obscurity; if you have 10,000 doors to lock, and use a key system that only allows for 1,000 keys, you're counting on obscurity to keep people from trying their keys in other locks. But if you use a system that allows for 1,000,000 keys, that's actual security. Because none of the locks has to take a key used in another, and someone making a random key will have to make at least a hundred to get even a 50-50 chance of findng one that unlocks just one of the 10,000 doors, and potentially he could make 990,000 and still not find one.

    As for codes, any code that gets used for more than one message reduces the security of the code. So anything other than One-Time Pad is slightly relying on security through obscurity, but you're talking about having 2048-bit security instead of infinite-bit security and thinking that's insufficient? It's not really security through obscurity until you start using rot-13 instead, and hope nobody notices.

  23. Re:LOL! "Iran's rigged election broke over Twitter by Eunuchswear · · Score: 2, Insightful

    Iran has elections, but they matter not a jot as the public don't get to elect the Revolutionary Guard, the only ones with real power.

    Correct in principle, if not in detail (It's the supreme leader, not the guardians of the revolution, who has the power.)

    So why does the US get all twisted about what the "president", Ahmadinejad, who has no control over foreign policy says and does?

    --
    Watch this Heartland Institute video
  24. Re:So let's talk abou it. by x2A · · Score: 2, Informative

    There's nothing obscure about how a lock works. I think you misunderstand what the word 'obscure' means.

    --
    The revolution will not be televised... but it will have a page on Wikipedia
  25. Re:LOL! "Iran's rigged election broke over Twitter by Alex+Belits · · Score: 4, Insightful

    Everyone else.

    Seriously, Americans, your country is unique in the amount of evil it produces. Deal with it.

    --
    Contrary to the popular belief, there indeed is no God.
  26. Re:LOL! "Iran's rigged election broke over Twitter by mjwx · · Score: 4, Insightful

    "Regime change isn't very effective when you have the Keystone Kops trying to carry it out for you." Regime change isn't going to happen due to a few protesting students, and the mullocracy can choose to kill them off if they threaten Islamic control of government. The people who want to change Iran will have to display a greater will to power than the Islamocracy. That's a very tough act to follow. It would require a Maoist level of ruthlessness, not the trifling discontent of a few young people.

    Spoken like someone who doesn't have a clue about Iran, Iranian demographics (more specifically age and racial demographics) or the current Iranian government.

    Frankly I dont think you used enough made up scare words based around Islam, I'm surprised you didn't slip islamofacsist in there. To be frank, this kind of propaganda is weak, easy to see through and insult the intelligence of anyone who reads it.

    But I'll hit you with the cluebat. Iran's population is primarily comprised of Persians, the government is primarily Arab. Due to the Iraq-Iran war in the 80's the 30-50 yr age bracket is severely depleted so the current theocracy has never had to deal with 20 somethings that don't remember the brutality of the Shah.

    There are two armed forces in Iran, first the Iranian army which makes up the bulk of the forces and is almost exclusively ethnic Persian. Next is the Republican Guard, which is far smaller and almost exclusively Arab (Palestinian and Lebanese). The Republican Guard is used mainly as a police force. Arabs and Persians only have about 6000 years of recorded racial conflict so if a shooting war actually starts (which it wont) it will be over in a matter of days as the Persian army outnumbers the Republican Guard 10 to 1, has superior equipment and the support of the Persian people. Due to the fact that a large portion of the army will rebel if anyone gives the order to kill civilians en masse the Iranian government will not do this (they are theocratic, not stupid).

    Finally we have multiple examples of how non-violent revolutions can be effective and lead to more stable states. India, Philippines (EDSA rebellion), Much of Eastern Europe in 1989 (czech, poland, east germany). New forms of communications have been able to organise non-violent revolutions more effectively then violent ones, SMS's were used during the EDSA II rebellion. Violent revolution often has the effect of not working (Ireland tried for how many hundreds of years) or placing a dictator in power (Palestine, Cambodia, Cuba). Since the end of WWII, more stable democracies have been formed by non-violent means then violent ones. So you're desire to incite violence in the Iranian people is misguided at best but I'd describe it as retarded.

    Iran's (the government of Iran) problem is that it's never had to deal with a large population of 20 yr olds, now it does and the 20 yr olds are disaffected. They dont know how bad the Shah was and only know that the current government is oppressive. Violent revolutions often have the opposite effect of what the instigator intends, so if the Iranian youth start fire-bombing government buildings then it has just as much chance of backfiring and forcing people to rally around the government. Take the recent unrest in Thailand. Initially the red shirts were garnering support from much of Thailand and around the world as they were painting themselves as the oppressed, well until they started bombing BTS stations. In the end, people said the Thai government was right to take military actions and that the Thai military was very restrained as only 40 people killed, on the other hand the red shirts torched one of Bangkok's largest shopping centres further eroding support and strengthening the Thai government.

    --
    Calling someone a "hater" only means you can not rationally rebut their argument.
  27. Re:alvinrod got destroyed by alvinrod · · Score: 4, Insightful

    I'm obviously responding to a troll here, but I'm not a person who hates this country. There are some things I don't like about this country, but I can't say that there's any other country where I'd prefer to live. Well, maybe Switzerland.

    If some entity has a long history of doing X, it's pretty damn stupid not to expect them to do X. It has nothing to do with whether or not it's right or wrong, the US has a history of involving itself in foreign politics. There's no need to pass moral judgement on it, but it's a fact that the US has attempted to influence foreign politics with great frequency in the past.

  28. Re:LOL! "Iran's rigged election broke over Twitter by hedpe2003 · · Score: 2, Insightful

    And the amount of evil it has combated. (ie, Nazis, Soviets, etc)
    And in the Aid in which is gives
    And the amount of technological achievements (Modern Assembly Line, Computers, Synthetic Life?)

    I mean really.... Give it a rest.

    --
    Comprehensive solutions via a competition of ideas like no other.
  29. Re:LOL! "Iran's rigged election broke over Twitter by hedpe2003 · · Score: 2, Insightful

    It would be simply fucking glorious!

    You're an idiot

    --
    Comprehensive solutions via a competition of ideas like no other.
  30. Re:LOL! "Iran's rigged election broke over Twitter by Raenex · · Score: 2, Insightful

    Everyone else.

    Everyone else doesn't have an extensive history of meddling? So Russia, England, Germany, France, and on and on, don't have such histories? Name a big country, there's a good chance they have a history of meddling.

  31. Re:LOL! "Iran's rigged election broke over Twitter by Fnkmaster · · Score: 2, Insightful

    While we have undoubtedly exported some nasty results with our foreign policy, the US is also unique in the amount of good it has produced - you know, little things that better the world like computers, the internet, and a large amount of modern medical technology. Whether that has, overall, outweighed the evil we have produced, I'm just not sure and I doubt anybody can easily answer that question.

    And I'm not really sure that the stuff done in the name of fighting communism was truly evil though some of the results were very nasty. Communism and the threat of nuclear war were scary and were perceived as existential threats by many at the time. It sounds completely ludicrous now that we know that the Soviet economy was overextended and straining to keep up during the Cold War era, but it's unfair to judge the past with full knowledge of the outcomes.

  32. Re:LOL! "Iran's rigged election broke over Twitter by mjwx · · Score: 2, Informative

    NONE of the revolutionary examples you cite were revolts against _religious_fanatic_ masters.

    Neither is Iran, they are no more religious then the Filipino government (except they are the "right" religion for you) but the Filipino's did it, twice. Yes the PNP (Philipino National Police) will lock you up if you upset the religious leaders, having been there, you dont state you're anti-Christian as almost every native Filipino is very devout, especially the ones in power. It's the only time in my life I've ever said, God is Great (note, the Filipino's are great people, just avoid the topic of religion).

    BTW I'm not inciting revolution. I'm observing what is required to displace ruthless people who are inspired by an imaginary celestial friend.

    I never said that you were inciting, I said you were retarded for thinking that violent revolution was the best way to get rid of a theocracy, let alone the only way.

    The Iranians aren't going anywhere, because Iran is far too comfortable for revolt.

    Comfortable lives often lead to greater revolutions when freedoms are being visibly curtailed. The American Colonies did this (things weren't that bad under the King, you just wanted more freedom), same with India and lets not get started on Ireland, using your logic The Troubles should never have happened. I'll remind my Irish friend (who grew up in Belfast during the 70's and 80's) of that next time the subject comes up.

    I don't care if Iran revolts or not. Democracy would just make them a more efficient enemy of non-Islamic nations.

    Here's where you show your true face in this argument. You dont give two hoots about the Iranian people, you just want to slag off Islam. Well I live near the two largest Islamic democracies, Malaysia and Indonesia and we aren't threatened at all. I can go to Kuala Lumpur, drink a beer, have extra-marital relations with a woman (who doesn't wear a hijab). Hell, Surabaya in Indonesia is a sex tourism destination. Sounds like Islamic democracies are nothing but badness.

    Or you're full of shit.

    --
    Calling someone a "hater" only means you can not rationally rebut their argument.