Slashdot Mirror


Mozilla Is Considering Revoking TeliaSonera Trust For Sales To Dictators

ndogg writes "Mozilla is considering pulling TeliaSonera from its list of root certificate SSL providers. They have asked for comments on this on their mailing list. They're concerned about the use of the certificates by those governments for spying on its citizens, particularly in Azerbaijan, Kazakhstan, Georgia, Uzbekistan and Tajikistan — where TeliaSonera operates subsidiaries or is heavily invested. Mozilla's concern is that TeliaSonera has possibly issued certificates that allow hardline government servers to masquerade as legitimate websites — so-called man-in-the-middle attacks — and decrypt web traffic. This alleged activity would contradict Mozilla's policy against 'knowingly issuing certificates without the knowledge of the entities whose information is referenced in the certificates.'"

123 comments

  1. Sounds like a legitmate use to me! by Anonymous Coward · · Score: 0

    Sounds like a legitmate use to me!

  2. Mozilla Corporation - Fighting for Freedom against by Anonymous Coward · · Score: 0

    Better revoke all those root certificates in control of US-based companies.

  3. Decentralised is the way to go. by Anonymous Coward · · Score: 4, Insightful

    Instead of trusting any of these companies (they'll sell to the US government as well, I'm sure), why not switch to Convergence? It reduces the need to trust companies like this.

    Mozilla (and Google, and other browser makers) should include it by default in all their products (even if turned off) to make it easier for people to switch away from centralised systems. Viva le revolucion.

    1. Re:Decentralised is the way to go. by bill_mcgonigle · · Score: 2

      A great feature of Convergence is the ability to have multiple signatures. HTTPS needs this too. Imagine the current scenario where gmail regularly has 25 signors on its certificate and then one day there is only one. With something like EFF's HTTPS Everywhere SSL Observatory, this could be flagged.

      But, switching TLS signing to PGP is a big deal and not backwards compatible. What I'd like to see (somebody else do this so I don't have to) would be an extension that would allow multiple certificates to be presented to the client. Old clients would just get the first one, newer clients could get multiple certs from a server. Klunky, yes, but backwards compatible.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  4. There are many others. by Anonymous Coward · · Score: 4, Insightful

    Mozilla still includes all kinds of questionable cert authorities. Once I learned that, I had to go through my default Firefox installs and remove all the ones by Chinese government arms and similar.

    Why single out these countries? I will never need a cert signed by a foreign government - ANY foreign government. There are probably only about 5% of authorities I actually might trust included in Firefox. The rest are illegitimate for 99% of users.

    1. Re:There are many others. by interval1066 · · Score: 4, Insightful

      I will never need a cert signed by a foreign government - ANY foreign government.

      I'm having a hard time with trusting domestic governments as well.

      --
      Python: 'And then suddenly you have a language which says "we're all stuck with whatever the whiniest coder wants".'
    2. Re:There are many others. by Anonymous Coward · · Score: 0

      That's why we ought to allow for multiple CAs per attestation. If both the US government and Chinese government believe a public key belongs to someone, I trust that more than I trust either certification alone.

      Similar concept: if TeliaSonera is unable to prove to the Mozilla team that they aren't influenced by governments (but let's say there also isn't any strong evidence that they are influenced), then you don't need to totally pull them. Set them to 0.1 trusted; enough that their attestation as to someone's identity might be able to push someone over a threshold score of 0.85 (or whatever some particular use case requires), but not so much that they're totally trusted to be the sole authority. No one but the user should ever be Able to be a sole authority.

    3. Re:There are many others. by FrangoAssado · · Score: 1

      That's a nice idea, but it doesn't really solve the underlying problem. Imagine that you're convinced that TeliaSonera is friendly to governments in Central Asia (as the story seems to imply). So it would make sense to trust them (a lot) to attest government-friendly identities in that region. But it would be silly to trust them (at all) for anything else.

      In the end, trust in a CA has context. It's not enough to simply assign a number to convey how much you trust a particular CA; what you're really interested is how much you trust a particular CA to attest a particular identity.

    4. Re:There are many others. by HiThere · · Score: 1

      While your point has merit, context is a really tricky problem. A weight is something simple and easy...and could be implemented without slowing things down much.

      OTOH, I certainly feel that individuals shouls be able to adjust the weights easily.

      Question: Should the CA be able to determine whether or not a particular site trusts them? If not, how do you indicate the amount of trust (since you don't want to just block)? Things get complicated quickly.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    5. Re:There are many others. by rtfa-troll · · Score: 2

      Mozilla still includes all kinds of questionable cert authorities.

      Oh yes? Please list them and link to a certificate provided by one of them which has been issued without the permission of the party it has reputedly been issued to. Specifics please. This is the criteria, more or less the only criteria, which makes a cert authority questionable. Otherwise you are just (correctly) questioning the CA system which doesn't do what you think it does.

      --
      =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
    6. Re:There are many others. by Krenair · · Score: 1

      So how would you propose that be fixed? I'm not sure it'd be a good idea to distribute hundreds of different copies of Firefox each with a different set of root certificates for the correct country.

  5. Re:Mozilla Corporation - Fighting for Freedom agai by interval1066 · · Score: 1

    Yeah, I was just going to say... better pull the certs of servers in the US then...

    --
    Python: 'And then suddenly you have a language which says "we're all stuck with whatever the whiniest coder wants".'
  6. Surely, no American company would stoop so low... by dragisha · · Score: 0

    As to sell services to dictatorships?! Of course not!

    But those Swedes (and Fines == Swedes in disguise... Or it's vice versa?) they are capable of anything. Just remember that Finish (his mother's tongue is Swedish, ha!) guy who invented Linux, and you will understand what they are capable of!

    Mozilla, please stop them!

    --
    http://opencm3.net, http://www.nongnu.org/gm2/
  7. You Probably should make sure first by Anonymous Coward · · Score: 0

    " Mozilla's concern is that TeliaSonera has possibly issued certificates that allow hardline government servers to masquerade as legitimate websites — so-called man-in-the-middle attacks — and decrypt web traffic."

    Maybe they should check first to see if they have issued the certificates, otherwise they could find themselves in a world of hurt

  8. Re:Mozilla Corporation - Fighting for Freedom agai by hairyfeet · · Score: 4, Insightful

    Hell did any government official go to jail for the Gulf Of Tonkin false flag which cost 58,000 Americans their lives? How about for Fast & Furious which handed drug cartels weapons by the truckload and killed at least one border agent and countless civilians?

    Frankly the US government is just as nasty and corrupt as the rest, read general Butler's "War is a racket" speech sometime. That speech is nearly a century old and could have been taken from the current papers, wars all over the place for the benefit of a few rich people and corps, if the US gov told me it was raining outside? I'd want a second opinion.

    --
    ACs don't waste your time replying, your posts are never seen by me.
  9. Re:Mozilla Corporation - Fighting for Freedom agai by agm · · Score: 5, Insightful

    The whole point of certificates and SSL is to protect communications between the browser and the web server. It's not "to protect communications from everyone except the government". It's to protect it from EVERYONE - including (and sometimes especially) the government.

  10. Re:Mozilla Corporation - Fighting for Freedom agai by radiumsoup · · Score: 0

    There most certainly is a "good or bad" - your own assertion that every government in the world is corrupt supports that, in fact. I have no idea why you went on the anti-US rant there, but whatever.

    The issue to discuss is the difficult position that Mozilla finds itself in now: an intentional and self-imposed obligation to act when cert authorities are compromised coupled with the unintended consequence of now having to decide if a Sovereign nation, acting legally within its own jurisdiction, constitutes a "compromised" cert auth. But it's their own damn fault for putting themselves in the situation where they presume to act on behalf of their userbase despite the userbase not all having identical use cases for their software.

    I think their best course of action is for Mozilla to implement some sort of "greylist" that they can turn on something like a red SSL banner (instead of green) indicating a potentially compromised cert or key authority. That banner could then be turned on and off by the user if they desire, without the effect of cutting off legitimately issued SSL certs in the process. Nobody is cut off, but Mozilla feels better about warning end users of the "problem" that they feel obligated to act on. No harm except for the butthurt that some finite number of users might feel about "imperialists forcing morality" or whatever other rot they can conjure up.

  11. Good to see by starfishsystems · · Score: 4, Interesting

    It's good to see browser maintainers recognizing that the browser is an essential - albeit uncertified - part of HTTPS authentication.

    The preinstalled root certs have enormous leverage. If the validation of certificate requests performed by CAs is a known weak link in X.509, how much more so the point where those CAs are designated as trusted?

    Thanks to the efforts of Mozilla, among others, we have a much more diverse browser ecosystem than even a few years ago. To some extent at least, the free market can decide which browser to use. I know that I'm more inclined to use a product that is squarely on the side of human rights than one which can be used as an instrument of oppression. And these difficult questions of policy and enforcement provide a chance for Mozilla to distinguish itself, which I think it's doing very ably.

    --
    Parity: What to do when the weekend comes.
    1. Re:Good to see by girlintraining · · Score: 2

      I know that I'm more inclined to use a product that is squarely on the side of human rights than one which can be used as an instrument of oppression.

      Then you may want to consider not using Mozilla. They're talking about pulling the certificate authority of a half dozen smaller countries on the suspicion that it has cooperated with those governments' lawful requests to monitor their citizens internet access. Or as it is called on slashdot, "spying." But here's the thing: There's no proof. It's just a suspicion... and it's a suspicion based on guilt by association no less.

      So Mozilla is proposing forcing some of the people in these countries to use insecure communications on the suspicion that their governments may be trying to force their citizens to use insecure communications.

      Sounds legit.

      --
      #fuckbeta #iamslashdot #dicemustdie
    2. Re:Good to see by starfishsystems · · Score: 1
      The willingness to hear about suspicions is a necessary part of gathering evidence, it's not a final assessment of evidence. "Talking about" doing something is a necessary part of due process, it's not the final outcome. If you don't understand these basic distinctions already, please give them some thought,

      Speaking of weighing evidence, can you be a little more specific than a vague reference to "half a dozen smaller countries"? It's not possible to take such claims seriously. They certainly don't constitute grounds to think less of Mozilla, but they do raise doubts about you if this is your best way of establishing credibility. (And no, you can't date my daughter either, in case you were wondering. You're definitely not in her league.)

      Purely in terms of policy, I'm more inclined to favor removing a questionable root cert than installing it on the off chance that it will be missed. You're claiming that its removal will "force" citizens to "use insecure communications" when such is not remotely the case:
      • If you're serious about security, you can generate your own cert for free, or set up your own CA for that matter. It's done all the time. I've personally led four large internal PKI initiatives: two for industry, one for academic research and one for government. This approach is more robust than going to a third party CA.
      • You're not forced to do anything when one particular CA has come under a shadow of doubt; there are hundreds of CAs who will be delighted to sign your cert request in exchange for a modest fee and a pathetic level of background verification. The "weak link" CA problem is not due to scarcity but to excess. And finally,
      • There's nothing stopping you from installing any root cert you like, including reinstalling the very certs that the browser maintainers have determined are suspicious. Go for it. Have a blast.
      --
      Parity: What to do when the weekend comes.
    3. Re:Good to see by girlintraining · · Score: 1

      Speaking of weighing evidence, can you be a little more specific than a vague reference to "half a dozen smaller countries"? It's not possible to take such claims seriously. They certainly don't constitute grounds to think less of Mozilla, but they do raise doubts about you if this is your best way of establishing credibility. (And no, you can't date my daughter either, in case you were wondering. You're definitely not in her league.)

      From the summary of the article: "Azerbaijan, Kazakhstan, Georgia, Uzbekistan and Tajikistan". And no, I wouldn't want to date your daughter, if she's got a personality anything like yours though, I can well imagine your desperation to find her someone.

      --
      #fuckbeta #iamslashdot #dicemustdie
    4. Re:Good to see by ftobin · · Score: 1

      I don't see how people are being forced to use insecure communications. Websites can choose to get certificates from wherever they want. All this does is take out one of the certificate providers.

    5. Re:Good to see by idontgno · · Score: 1

      Which is likely to be the source of trusted certificates for locally-provisioned HTTPS. Sure, no one's hijacking connections to US sites, but a local-language and locally-sited Google or Facebook or Twitter could be fair game.

      --
      Welcome to the Panopticon. Used to be a prison, now it's your home.
  12. DNSSEC for certificate distribution by crow · · Score: 3, Interesting

    I'm not particularly impressed with Convergence in particular. What seems to make the most sense is to self-publish SSL certificates using DNSSEC.

    1. Re:DNSSEC for certificate distribution by radiumsoup · · Score: 1

      now this... this seems like something I'd be interested in reading about. Is there some real discussion about this, or did you come up with it yourself? (It's not a bad idea at all at first blush)

    2. Re:DNSSEC for certificate distribution by Znork · · Score: 1

      I don't quite get how DNSSEC will solve anything, doesn't DNSSEC use trust anchors that can be just as comprimized as the current SSL 'trust'?

      Or is there some special extra trustworthiness that makes the root signers more immune to coercion or trickery?

    3. Re:DNSSEC for certificate distribution by Anonymous Coward · · Score: 1

      http://tools.ietf.org/html/rfc6698
      http://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities

      In short, it's very new and no browser has serious support for it. Except maybe the Chromium dev channel.
      https://wiki.mozilla.org/Security/DNSSEC-TLS-details#Google_Chrome

    4. Re:DNSSEC for certificate distribution by Anonymous Coward · · Score: 2, Interesting

      Proper DNSSEC uses a single trust anchor for the root "." that can validate the delegated registries (com., net., uk., fr.). DLV registries were a hack until the root zone got signed, which has now happened.

      For DNSSEC to work you need to validate the responses of signed zones and you need to trust their corresponding registries (for .com Verisign). The person signs their zone (example.com) and pushes their public key up to Verisign in the form of DS record. The registry can remove the public key, causing the zone to be DNSSEC unsecure (the usual case with most domains) OR they can modify the public key causing SERVFAIL for DNSSEC aware resolvers OR they can modify the public key and the authoritative nameservers for your domain and do whatever they want... since they are the registrar. Bottom line: if you don't trust the registrar for your domain, you are already screwed.

      If you don't already have control of your own authoritative DNS servers then your host could be forced to change the records anyway. It's all a horrible mess.

    5. Re:DNSSEC for certificate distribution by slimjim8094 · · Score: 2

      It's not some entity other than the one who's already directing you to the website. Presumably if it were easier to redirect at the DNS level as opposed to MITMing and getting a fake certificate, people would be doing that instead. It also makes any compromise much more visible and reduces the number of people you need to trust absolutely.

      --
      I have developed a truly marvelous proof of this comment, which this signature is too narrow to contain.
    6. Re:DNSSEC for certificate distribution by Engeekneer · · Score: 1

      I partly agree, but there are problems with just trusting DNSSEC.

      In the current situation, to impersonate a SSL protected site you need to MITM in some way (e..g DNS spoofing), and get a valid certificate for the domain. So you have to at least attack two different security measures (even if MITM is simple for some entities).

      If certificate info is published in DNSSEC you need to compromise only one place to achieve both MITM and add fake certificates. Sure it might be harder, but if this method was used, I bet that the attacks on DNS servers would go up a lot.

    7. Re:DNSSEC for certificate distribution by Anonymous Coward · · Score: 0

      DNSSEC makes exactly the same amount of sense as the current SSL CA system. "Too big to fail" entities controlling identity, authenticity and trust is never going to work. I suggest you read this article and take a look at the Monkeysphere project:

      http://www.thoughtcrime.org/blog/ssl-and-the-future-of-authenticity/
      http://web.monkeysphere.info/

  13. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 0, Troll

    Frankly the US government is just as nasty and corrupt as the rest, read general Butler's "War is a racket" speech sometime. That speech is nearly a century old and could have been taken from the current papers, wars all over the place for the benefit of a few rich people and corps.

    Smedley Butler was, if not an outright Communist, at least a fellow traveller. His views on American's wars of the era are therefore tainted by the particular ideology that gripped him at that time, and he was not a dispassionate commentator.

    With the benefit of hindsight, Americans today can look back and see that US military intervention in Central America was not just stimulated by the desire to benefit a few corporations, but a wise political decision to expand America's power and reduce the threat from other countries. (Sure, some corporations were helped, but so what; if there were material rewards to reap from our foreign interventions, then certainly they should go to our boys.) And America's increasing muscle didn't benefit just "a few rich people", but everyone: American prosperity during the 20th century, things like the rise of the middle class, depended on keeping Latin America poor and subservient.

  14. SSL is broken by design by ivrogne · · Score: 3, Interesting

    Why doesn't everyone use SRP instead?
    - User proves it has password without divulging any data.
    - Man in the middle obtains zero information.
    - Generates encryption key for rest of the connection.

    1. Re:SSL is broken by design by Anonymous Coward · · Score: 1

      In order to prevent active attacks, you need something to base the trust off of. In SSL, CAs are used, which is quite questionable because there's a lot of them with lots of different possible influences. In SRP, a shared secret (in the form of a password entered by the user) is used. That requires (1) somehow prearranging a shared secret and a related (2) a way of handling the user losing that shared secret. It seems like a good idea for applications like banking where you have a pre-existing relationship with the website and they can communicate with you out-of-band (similar to how they mail you the PIN code for an ATM card). I would certainly like that to be common place. I guess for websites with logins you could use normal SSL initially to setup an account and then use SRP to login. That still requires the weaker SSL, but it means that attacks cannot be done as easily at least.

    2. Re:SSL is broken by design by Anonymous Coward · · Score: 0

      I think SRP assumes you already know the key of who you're trying to talk to. I'm not seeing anything that implies it could replace SSL's chain of trust model for key discovery.

    3. Re:SSL is broken by design by cbhacking · · Score: 1

      In this particular instance, you actually want to say "password" of the person - it's actually right there in the protocol name - but yes. SRP is fantastic for situations where you want to authenticate over an unsecured connection. It is incapable of handling registration over such a connection though, unless there's somebody else's password you use first to establish a secure channel. This means it is not a viable replacement for SSL/TLS in common web usage.

      SRP does also have a "key" of sorts, but it's public info. Additionally, the server doesn't actually store the password, only a password verifier. Once a password is verified, as a side effect of the verification both sides now have a high-entropy random value which has never been sent over the wire and cannot be deduced from traffic that was (without knowledge of the password); this value is suitable for a symmetric session key. In many ways, SRP looks like an ideal protocol... until you ask how the server gets the password verifier in the first place. Doing that part over an unsecured channel opens you up to MitM attack as surely as trusting a malicious SSL certificate authority does.

      --
      There's no place I could be, since I've found Serenity...
    4. Re:SSL is broken by design by Anonymous Coward · · Score: 0

      No, sorry, wrong. SRP does provide protection against active (or man-in-the-middle) attacks. The drawback is it requires pre-coordination between the two parties to generate the password/password hash pair. The advantage of X.509 is that the two parties don't have to pre-coordinate with each other, only with a trusted third party.

  15. Why not TLD scope CAs by Anonymous Coward · · Score: 1

    Presumably 99.9999% of US Government certs are in .mil and .gov, and 99.99999% of chinese-government-puppet certs are in CN, etc.

    Seems to me that the exposure could be enormously narrowed by scoping all of the obscure CAs to the one or two TLDs where they are most commonly used.

  16. Re:Mozilla Corporation - Fighting for Freedom agai by Impy+the+Impiuos+Imp · · Score: 0

    I like the US forcing its American Way on others, insofar as it means freedom.

    I don't care about your religion.

    I don't care about your culture.

    I don't care about your politics.

    Your desire to lord over me is not on an equal footing with my desire to be free.

    It is about freedom -- of associaton, of speech, of property. Everyhing else, and I mean everything, is just sophistry by angry men trying to gather a group of follower, be it by vote or a local group of thugs.

    --
    (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
  17. it will be hard to not drop them now by roozta · · Score: 2

    Interesting discussion on the Mozilla forum. In light of the information so far, it seems like it would be difficult for Mozilla to keep TeliaSonera as trusted and not lose face. It will be interesting to see what kind of implications this has going forward in regards to dealing with other CAs that have practices or relationships that might fall into the similar shady areas as TeliaSonera. There are some forum posts mentioning that maybe Cybertrust (acquired by Verizon - known for participating in surveillance activity) and Entrust (related to BlueCoat via Thoma Bravo) as possibly requiring similar scrutiny.

  18. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 2, Insightful

    "As nasty and corrupt as..." ... China under Mao? Venezuela under Chavez? Cuba under Castro? The USSR under Lenin and Stalin? Cambodia under Pol Pot? The NPRK under the various Kims? Zimbabwe under Mugabe? Zaire/the Congo under Mobutu?

    Care to revise your bullshit story?

    For all of America's, the American government's, and its leaders' flaws - and of course they are many (and one wonders how your life would stand up upon the withering criticism and examination that the life of a President, for example, gets) - I believe very few of our leaders have ever had a genuine desire to harm people nor have they harbored a profound megalomania. Ego - of course; megalomania - no. Sure, go ahead and despise a President because of their ideological orientation that you disagree with but the notion of the Chomskyites, this strange Kool-Aid they like to guzzle, being fed doses of pablum about "American Imperialism" and the "Military-Industrial Complex" and railing endlessly about the "Evils of Capitalism" yet enjoying its countless benefits (you know, like jobs, homes, clothes, electronics, computers, global air travel, and this weird little thing called the Internet), never proffering a meaningful let alone viable alternative, I am convinced is one of the luxuries provided by the American model of capitalism and Constitutional governance. Trust me if you were to write what you wrote about Mugabe your flesh-burned and -torn body (they wouldn't spend a bullet on you, lest they lose out on a good opportunity to torture you first) would soon be found on the roadside somewhere.

    And, if you despise America, think it hopelessly corrupt and nasty "as the rest" then why not leave it for greener pastures? Maybe some other country has it figured out better than we do? According to Michael Moore, Cuba has the best medical care in the world. Just ask Hugo Chavez.

  19. Re:Mozilla Corporation - Fighting for Freedom agai by agm · · Score: 1, Redundant

    I like the US forcing its American Way on others, insofar as it means freedom.

    Unless you are gay and want to marry.

    Want your children to learn real science in school and not pseudo-babble based on superstition.

    Want to earn a living without the state confiscating some of it from you.

    None of that indicates the US is pro-freedom.

  20. Re:Mozilla Corporation - Fighting for Freedom agai by ShanghaiBill · · Score: 1

    Unless you are gay and want to marry.

    There are many places in America where gays can marry, and more states are considering it. We are moving in the right direction.

    Want your children to learn real science in school and not pseudo-babble based on superstition.

    Creationists and IDers have repeatedly been smacked down by the courts.

    Want to earn a living without the state confiscating some of it from you.

    American taxes are among the developed world's lowest.

    None of that indicates the US is pro-freedom.

    Would you care to name someplace better?

  21. Mozilla supports the Internet Civil Rights Bill in by Anonymous Coward · · Score: 1

    Brazil. So this kind of action is a natural extension of that.

  22. So what is the procedure to protect yourself by Marrow · · Score: 1

    If there are Authorities you do not need in the browser list, how do you choose which ones to untrust? What if you only use https with a few sites, should you just look at the information and whitelist only those?

  23. Re:Mozilla Corporation - Fighting for Freedom agai by agm · · Score: 1

    Unless you are gay and want to marry.

    There are many places in America where gays can marry, and more states are considering it. We are moving in the right direction.

    It's hardly a country that loves freedom if it regulates people's personal lives like this.

    Want to earn a living without the state confiscating some of it from you.

    American taxes are among the developed world's lowest.

    And yet those taxes are still there. How can the US be pro freedom if it actively harms people by confiscating property off them using a threat of force?

    None of that indicates the US is pro-freedom.

    Would you care to name someplace better?

    I can't - but that doesn't mean (in any way at all) that the US is the bastian of freedom. It's not. Your government removes and dilutes your freedoms far too much.

  24. And why do the browsers have different lists by Marrow · · Score: 1

    Firefox works from a list thats different than Chrome. I assume that there is another list again for people writing software for https connections. Maybe thats why I see the ssl libraries updating on my machine? If this is broken, then why is there not software available to "tune it" or test it so that it can be made to work?
    Can the web server see what Cert you used? Can they tell that a fake cert was used? Maybe it should draw a warning on your pages that the cert authority had no business issuing the cert that was used?
    Turn every browser in to a cert tester. Obviously you trust your browser.

  25. Re:Mozilla Corporation - Fighting for Freedom agai by tepples · · Score: 2

    It's hardly a country that loves freedom if it regulates people's personal lives like this.

    It's a federal country. You have the freedom to leave a state that doesn't respect your freedom for one that does.

    How can the US be pro freedom if it actively harms people by confiscating property off them using a threat of force?

    Without taxation, there is no way to fund a court or police force. Without those, there is no way to enforce the laws against a private citizen using force or fraud to coerce another private citizen. Or what am I missing?

  26. Mod parent up by gottabeme · · Score: 0

    A rare voice of reason in a sea of anti-American populists milking the current fad.

    --
    "Those who consume the bulk of goods are those who make them. We must never forget this secret of our prosperity."
  27. Re:Mozilla Corporation - Fighting for Freedom agai by agm · · Score: 1

    It's hardly a country that loves freedom if it regulates people's personal lives like this.

    It's a federal country. You have the freedom to leave a state that doesn't respect your freedom for one that does.

    So you're saying that the US is pro-freedom, except for when it's not and in those cases you can go and live somewhere else?

    How can the US be pro freedom if it actively harms people by confiscating property off them using a threat of force?

    Without taxation, there is no way to fund a court or police force.

    There are other ways of raising funds without resorting to extortion. Donations and lotteries come to mind.

    Without those, there is no way to enforce the laws against a private citizen using force or fraud to coerce another private citizen. Or what am I missing?

    You're missing the fact that in order to prevent one citizen from using force or fraud against another citizen, the state must use force and fraud against all citizens.

    If their goal is to protect people from the initiation of force then they lost immediately when they fund it via compulsory means.

  28. Re:Mozilla Corporation - Fighting for Freedom agai by gmuslera · · Score: 1

    Considering how the US government is positioned for playing MITM games, and that is putting laws to require information and actions from internet providers of critical services, is tempting at the very least. But having such aggresive player in the middle of the field maybe is better to just close your eyes and just put a token warning in a page tham trying to fix it, just will put more in evidence how broken is everything now.

  29. Re:Mozilla Corporation - Fighting for Freedom agai by gottabeme · · Score: 0

    It's hardly a country that loves freedom if it regulates people's personal lives like this.

    Balderdash. Anyone can live with whomever he wants and can make whatever kind of promises or agreements he wants with whomever he wants. The government not giving a slip of paper endorsing or verifying their private decisions is not a form of regulating their personal lives--it's the opposite! It's refusing to be involved in it! How much more freedom do you require than lack of involvement?

    And yet those taxes are still there. How can the US be pro freedom if it actively harms people by confiscating property off them using a threat of force?

    You're being silly. Every nation in the world has taxes, and no nation could exist with zero taxes. Taxes have been around as long as death. Your argument is preposterous and irrational.

    I can't - but that doesn't mean (in any way at all) that the US is the bastian[sic] of freedom. It's not. Your government removes and dilutes your freedoms far too much.

    All governments do--that's their basic function. Only by the vigilance of its citizens does a nation preserve its liberty. Thankfully, our basic rights which allow us to be vigilant are enshrined in our founding documents, a claim which few nations can make.

    Is the US perfect? Hardly. Is it getting worse? Perhaps. Is there any freer nation? No.

    But, hey, bashing America is easy and popular, so why not join the mob?

    --
    "Those who consume the bulk of goods are those who make them. We must never forget this secret of our prosperity."
  30. Re:Mozilla Corporation - Fighting for Freedom agai by Runaway1956 · · Score: 2

    "There is no good or bad."

    You were making sense, until you wrote that bit of drivel. Yes, child, there really IS good, and there really IS bad. I can agree with you that the US government often doesn't know the difference. I can agree that the US government is in no position to be the final arbiter of good and bad. But, there really are evil sumbitches in the world. A significant number of them occupy positions of power.

    --
    "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
  31. Re:Mozilla Corporation - Fighting for Freedom agai by Runaway1956 · · Score: 5, Insightful

    Strange. Almost everyone who has issues with the corruption found in American politics is labeled as a "communist".

    And, if my wealth, relative to that of the rest of the world, depends on a subservient Latin America - well, I don't need or want it.

    --
    "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
  32. Re:Mozilla Corporation - Fighting for Freedom agai by Ironchew · · Score: 1

    I like the US forcing its American Way on others...

    Your desire to lord over me is not on an equal footing with my desire to be free.

    Those two statements contradict each other, especially when "forcing its American Way on others" means an occupying force.

    It is about freedom -- of associaton, of speech, of property.

    Property is not a natural right.

  33. Well shit by TheGoodNamesWereGone · · Score: 1

    ... That rules out Obama...

    1. Re:Well shit by Anonymous Coward · · Score: 0

      ... That rules out Obama...

      Come on now, even Teliasonera didn't sell to Obama.

  34. Re:Mozilla Corporation - Fighting for Freedom agai by HiThere · · Score: 1

    More to the point, ownership is not a right that can be defined in the absence of government....and here "government" has to be defined as "use or threat of overriding force".

    Note that in this sense social animals have government, so it's broader than the normal use of the term.

    For that matter, I equate "natural right" to "evolutionarily stable strategy", which means that it alters with the environment, and isn't something stable. It's also worth remembering that "money" is a government invention (King Cyrus of the Persians, IIRC) and was originally a promise that the item being offered was actually as represented. (I.e., a small bar of gold with the royal seal embossed on it.) But do note that counterfeiting arose amost immediately, so there's nothing "natural" about it without the presence of overriding force.

    --

    I think we've pushed this "anyone can grow up to be president" thing too far.
  35. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 0

    I'd be willing that's a bit of talk, that you aren't willing to walk if things actually came to it.

    There's nothing stopping you from doing it, so go ahead and move down there.

  36. Re:Mozilla Corporation - Fighting for Freedom agai by HiThere · · Score: 1

    Not quite clear what you are reccommending here.

    FWIW, I don't thing ANY of the certificate issuing authorities are trustworthy. This doesn't mean that some aren't worse then others, and it might make sense to revoke the trust you have given to some of the worst actors, if you can do so without TOO much cost to yourself. If nothing else it would ensure that the infrastructure is in place to do the revokation. And it would encourage the weaker authorities to avoid being excessively vile.

    The down side is that this will be interpreted by some as a statement that you trust those you don't revoke the certificates of.

    --

    I think we've pushed this "anyone can grow up to be president" thing too far.
  37. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 5, Insightful

    First, this is coming from a die hard libertarian.

    You do realize that the idea of taxes is to pay for things that everyone uses, but would be infeasible to be run by private entities. This so called extortion you speak of is basically making you pay for that which you use. i.e. not stealing it. Any sane individual has no problem with paying taxes for public services, the disagreement comes into what should be a public service and what should not.

    And you're statement on fraud confirms you do not know what fraud is. I may not know everything the government does with the money I give them, but I do know that it's not swindled from me, and I do know what a lot of it goes towards. Fraud would be being told you're paying for one thing, then either not getting it at all, or getting something very different, and worth much less.

    And everything is pro-freedom except when it's not. I expect to be free to do what I want, except when it violates the freedoms of other people. I don't expect to have the freedom to get in my car drunk off my ass and drive down the road. That endangers the freedom of other people to exist.

    Seriously, are you trolling or just stupid?

  38. So my email will stop working by Anonymous Coward · · Score: 0

    Surely Thunderbird will omit the same certificates and my company and private email stop working without the trouble because TeliaSonera decided to follow the law in the countries it operates in, and some political activists don't like it. Now, I'm all for political freedoms and human rights but no fucking way you do touch my livelihood. I haven't oppressed anybody except the /. with my cowardly anonymous comments.
      Peoples of the world are responsible of their own freedom, or lack of it. That is democracy, freedom and self-determination which nobody can give them to by any means.
    --
    Cowardly Dramatic Activist who after some theatrical comments considers switching email and browser, once again.

  39. Re:Mozilla Corporation - Fighting for Freedom agai by TheLink · · Score: 3, Interesting

    I use certificate patrol. It basically warns you if a cert has changed suspiciously, or if the CA has changed.

    It's flawed in that it only remembers one cert per domain for comparison and nowadays for whatever reasons companies like facebook and Google often use different certs signed by different CAs for the same domains and spread the load/connections amongst them. So you can get more warning prompts than you'd want.

    This doesn't mean the concept is broken though, just that Certificate Patrol's particular implementation has room for improvement.

    The desired case is, if at home you decide that the different certs you get from gmail or facebook are OK (and told the plugin to ignore them), then go to some foreign country and suddenly you get certs that are signed by TeliaSonera, you'd get a warning message and you'd know that something was up and choose not to login.

    Same goes for logging in to your bank/corporate site while on a business trip to China. If the cert changes unexpectedly - from being signed by say Equifax to being signed by CNNIC, you should get a warning too.

    --
  40. Re:Mozilla Corporation - Fighting for Freedom agai by gmuslera · · Score: 1

    Lets put it this way. Already the US security agencies have access, and is actively using it, to google/facebook/twitter and so on information, no need to get into the encrypted communication. But what about other sites, specially the ones not hosted in US but that could use certificates to encrypt communication? If don't have already pretty broad (i.e. to *.com) or reissued certificates, will start to ask for them pretty soon.

    In the other hand, not trusting any certificates from any US based company will show almost any secure site as untrusted, being intercepted or not. Would you use your credit card, put personal data, or download binaries to execute on a site with a big red warning telling you that the site could be fake? There is no middle ground, or can't be trusted, or can, there is no space to say "it can be examined or modified as anything that goes thru something US related"

  41. Re:Mozilla Corporation - Fighting for Freedom agai by hairyfeet · · Score: 1, Insightful

    So because Stalin was a dick, the feds are...what? Given a free pass because "Hey they ain't beating me with a tire iron herpa de derpa". That is about the DUMBEST fucking argument I have EVER read, and since we are talking about the net that is a pretty mean feat...congrats. Oh I noticed you didn't have the balls to have a UID, kinda sad when you don't even have the balls to stand behind your bullshit, maybe because even you could see the problems with it?

    BTW that was the SAME ARGUMENT used by McCarthy during his red scare which ruined lives and helped lead to the 58,000 that died for nothing in Vietnam...again GREAT company you are keeping there sparky.

    --
    ACs don't waste your time replying, your posts are never seen by me.
  42. PLEASE MOZILLA by Anonymous Coward · · Score: 0

    Restrict SSL certificates to just the domains they should vouch for.

    In this case, TeliaSonera might (or might not) be trusted for domains like se, kz or az, but they definitely shouldn't be trusted for uk, us or cn.

    Yes, we need to find something better than certificate authorities in the long term, but let's apply common sense and try to limit the mayhem a bad CA can cause now. It's easy, practically free and compatible with current technology.

  43. Re:Surely, no American company would stoop so low. by Anonymous Coward · · Score: 0

    Goes to show that a low UID is not a guarantee of smarts...

  44. Re:Mozilla Corporation - Fighting for Freedom agai by agm · · Score: 1

    It's hardly a country that loves freedom if it regulates people's personal lives like this.

    Balderdash. Anyone can live with whomever he wants and can make whatever kind of promises or agreements he wants with whomever he wants. The government not giving a slip of paper endorsing or verifying their private decisions is not a form of regulating their personal lives--it's the opposite! It's refusing to be involved in it! How much more freedom do you require than lack of involvement?

    Then why all this fuss about gay marriage? Why is bigamy illegal? Laws that criminalise those things restrict personal liberties.

    And yet those taxes are still there. How can the US be pro freedom if it actively harms people by confiscating property off them using a threat of force?

    You're being silly. Every nation in the world has taxes, and no nation could exist with zero taxes. Taxes have been around as long as death. Your argument is preposterous and irrational.

    Just because all nations have taxation does not mean that it is impossible for a nation to exist without it. Just because taxation has been around for a long time doesn't mean it's not an infringement on our liberties.

    I can't - but that doesn't mean (in any way at all) that the US is the bastian[sic] of freedom. It's not. Your government removes and dilutes your freedoms far too much.

    All governments do--that's their basic function. Only by the vigilance of its citizens does a nation preserve its liberty.

    The basic function of government should be to protect people from harm. They shouldn't be the ones doing the harming.

    Thankfully, our basic rights which allow us to be vigilant are enshrined in our founding documents, a claim which few nations can make.

    Is the US perfect? Hardly. Is it getting worse? Perhaps. Is there any freer nation? No.

    But, hey, bashing America is easy and popular, so why not join the mob?

    I'm not bashing the USA. I'm bashing all countries that dilute the freedoms of its citizens. (Which is all countries). Some are much better than others.

  45. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 1

    Yes your taxes are low because you have poor people living in misery! People who wants to live good, doesn't live in USA, you live in propaganda, in bubble where poor people are to be ignored and not to be taken care of. There are loads of better countries, I am from scandinavia in from our point of view, USA seems more like third word dictatorial country than rich democratic country ... you should try to live somewhere else sometimes ...

  46. Re:Mozilla Corporation - Fighting for Freedom agai by rtfa-troll · · Score: 4, Insightful

    How about giving us a specific link to a faked cetificate from a specific "US" CA?

    --
    =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
  47. Re:Mozilla Corporation - Fighting for Freedom agai by fustakrakich · · Score: 2

    According to Michael Moore, Cuba has the best medical care in the world. Just ask Hugo Chavez.

    No. The US has the best medical care in the world. Just ask Michael Jackson.

    --
    “He’s not deformed, he’s just drunk!”
  48. Re:Surely, no American company would stoop so low. by Anonymous Coward · · Score: 0

    And you think you are smart? :)

  49. Re:Mozilla Corporation - Fighting for Freedom agai by ArsenneLupin · · Score: 1

    Certificates are global. A single bad CA spoils the trust in all of them. So Mozilla has to pull those. (yes, this is a problem with how SSL currently works)

  50. Haha. Ok, what about Verisign/etc? by X.25 · · Score: 5, Insightful

    I mean, they've been issuing intermediate CA certs to various 'friendly' governments and agencies, to support MITM (for 'lawful interceptions' only, of course).

    Will Mozilla remove them too, since they seem to be breaching that same policy?

    1. Re:Haha. Ok, what about Verisign/etc? by MMC+Monster · · Score: 2

      4 words:

      Too big to fail.

      Apparently if verisign is delisted, the internet stops working as expected.

      Which really means the internet is broken and needs to be fixed. Maybe delisting all the security signers and starting from scratch (web of trust, etc.) is a good thing...

      --
      Help! I'm a slashdot refugee.
  51. Re:Mozilla Corporation - Fighting for Freedom agai by X.25 · · Score: 1, Insightful

    Smedley Butler was, if not an outright Communist, at least a fellow traveller. His views on American's wars of the era are therefore tainted by the particular ideology that gripped him at that time, and he was not a dispassionate commentator.

    Hahaha. Are you actually using this as an argument?

    Wow.

  52. Re:Mozilla Corporation - Fighting for Freedom agai by X.25 · · Score: 1

    "As nasty and corrupt as..." ... China under Mao? Venezuela under Chavez? Cuba under Castro? The USSR under Lenin and Stalin? Cambodia under Pol Pot? The NPRK under the various Kims? Zimbabwe under Mugabe? Zaire/the Congo under Mobutu?

    Care to revise your bullshit story?

    For all of America's, the American government's, and its leaders' flaws - and of course they are many (and one wonders how your life would stand up upon the withering criticism and examination that the life of a President, for example, gets) - I believe very few of our leaders have ever had a genuine desire to harm people nor have they harbored a profound megalomania. Ego - of course; megalomania - no. Sure, go ahead and despise a President because of their ideological orientation that you disagree with but the notion of the Chomskyites, this strange Kool-Aid they like to guzzle, being fed doses of pablum about "American Imperialism" and the "Military-Industrial Complex" and railing endlessly about the "Evils of Capitalism" yet enjoying its countless benefits (you know, like jobs, homes, clothes, electronics, computers, global air travel, and this weird little thing called the Internet), never proffering a meaningful let alone viable alternative, I am convinced is one of the luxuries provided by the American model of capitalism and Constitutional governance. Trust me if you were to write what you wrote about Mugabe your flesh-burned and -torn body (they wouldn't spend a bullet on you, lest they lose out on a good opportunity to torture you first) would soon be found on the roadside somewhere.

    And, if you despise America, think it hopelessly corrupt and nasty "as the rest" then why not leave it for greener pastures? Maybe some other country has it figured out better than we do? According to Michael Moore, Cuba has the best medical care in the world. Just ask Hugo Chavez.

    You are probably under 30, since it would appear you don't understand what USA was 30+ years ago and why people see USA as horribly horribly corrupt country.

    But of course, your short life experience and Wikipedia make you competent to bleath about anything you wish.

  53. Impact for me. by Z00L00K · · Score: 1

    Since I'm supporting an application that uses TeliaSonera certificates on the web server.

    And changing to another certificate is probably not on the map since it runs at TeliaSonera.

    --
    If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    1. Re:Impact for me. by EmperorArthur · · Score: 1

      If they follow through with it, and if the other browser makers follow them, then you won't have to worry about it.

      A CA's business is all based on trust. As soon as they're known to be untrustworthy then they're dead. Well, for any commerce or banking site at least. I expect the governments to still use them though. Even being suspect is enough to drive business away.

      What we need is browsers pushing DNSSEC. Users are trained to look for the green padlock. If you display it as say yellow for a secure sight without DNSSEC your users will start to notice. Once DNSSEC becomes mainstream you can use that for key signing as described in other posts on this topic.

      --
      So lets pretend that we've just completed writing this code, as opposed to having just completed sabotaging it -Altera
  54. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 0

    AC, just wanted to say thank you for a rational bit of writing! I was starting to feel sad about the Internet population again :)

    I would happily call myself a libertarian if I didn't feel that capital L Libertarians had stolen the word and loaded it with poorly thought out nonsense. (Don't get me started on the economics of gold and the pros and cons of abstract currency...)

  55. Re: Mozilla Corporation - Fighting for Freedom aga by MysteriousPreacher · · Score: 1

    Oh I noticed you didn't have the balls to have a UID, kinda sad when you don't even have the balls to stand behind your bullshit

    As opposed to Mr. Hairyfeet of 4 Riverside Drive, Boston who risks his political career whenever he posts?

    Yeah it's more credible when there's a tag associated, but it's not taking balls to log in and create an account. I could post any amount of heinous shit myself and walk away with my life working just perfectly.

    --
    -- Using the preview button since 2005
  56. Re: Mozilla Corporation - Fighting for Freedom aga by Anonymous Coward · · Score: 0

    How do you know where he lives?

  57. dangerous territory by stenvar · · Score: 4, Insightful

    US, Canadian and European governments also spy on their citizens. So Mozilla now needs to determine whose spying is good and whose spying is bad. I'm not sure that's a business that Mozilla should be in.

    Perhaps a better solution would be to make it easier and more user friendly for people to detect questionable certificates and choose which certificates you trust. But, of course, that would upset Western governments...

  58. Re:Mozilla Corporation - Fighting for Freedom agai by VortexCortex · · Score: 1

    I believe very few of our leaders have ever had a genuine desire to harm people nor have they harbored a profound megalomania. Ego - of course; megalomania - no.

    What is, Manifest Destiny's Child.

    I'll take ironic idiots for $1000, Alex.

  59. Re:Mozilla Corporation - Fighting for Freedom agai by L4t3r4lu5 · · Score: 2

    I would argue that anyone logging in to their corporate site from China without using a VPN with a self-signed certificate is doing it wrong. Hell, I'm going on holiday to Australia later in the year and I'm setting up a VPN to my home network so I can use email etc without worrying about my credentials being lifted by any local agency. I know it's a little much for most home users, but for anyone with even an inkling of tech knowhow or a corporate user it should be mandatory.

    --
    Finally had enough. Come see us over at https://soylentnews.org/
  60. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 0

    China under Mao? Venezuela under Chavez? Cuba under Castro? The USSR under Lenin and Stalin? Cambodia under Pol Pot? ...

    When elected politicians inflict a few million deaths, its acceptable because its less than the 40 million deaths suffered by a country which can't choose their leader. Then you won't mind being first in the ground assault during the next war?

    ... I believe very few of our leaders ...

    Let's view this statement in the history of Vietnam: President Kennedy, agreed. President Johnson, agreed. President Nixon, talked about 'resolving' the war, then ordered more soldiers and bombs into Vietnam.

    When one starts talking economics, uneducated political leaders run into 'deep water' very quickly, but they have to make the big decisions; it's a recipe for disaster.

    ... if you despise America ....

    If you love America, similarly, you will get a gun and fight today's enemy of the USA .

  61. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 0

    Yeah, what goes around comes around. You have been trying to force your shit on others, shouting "freedom" along the way. That kind of shit will get you more terrorists coming after you.

    The people you are trying to force your freedom over do care about their religin, culture, and politics. They will fight back.

  62. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 0

    The US does have some of the best medical care in the world. It is just that it is not very good with respect to the price. The high price of US medical care stem from two primary factors.

    1. Liability of doctors.
    2. Lack of mandatory health insurance.

    Due to issue 1 in combination with the in general ridiculously high lawsuit awards in the US, doctors have to take out very expensive insurances, having to pay sometimes more than a million USD per year for their lawsuit protection; this cost spills over on the health insurance costs as the doctors need to get the funding to take out their lawsuit insurances. Issue 2 contributes substantially to the costs of the medical insurances; after all a person signing up for an insurance is more likely to already have an illness. The only way to get a reasonably priced medical insurance in the US is to be signed up to a group insurance, which is arranged by the company you are working for, however, even these are over priced due to issue 1.

  63. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 0

    I am intrigued - you appear to be taking stabs at well-known communist leaders, grouping them all together, ignoring non-communist dictators. Then you suddenly add Mobutu to the end?

    Did you not realise he had active backing from your government (until he was no longer deemed useful)?

    Was it an attempt to appear unbiased?

  64. Re:Mozilla Corporation - Fighting for Freedom agai by KiloByte · · Score: 1

    Unless you are gay and want to marry.

    There are many places in America where gays can marry, and more states are considering it. We are moving in the right direction.

    The same group that pushes for gays to marry also presses the hardest to outlaw polygamy, and 1-on-1 marriage between biological adults. The latter even carries massive prison sentences, and at least brands you for life.

    --
    The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
  65. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 0

    what a fucking dumb comment
    your logic is shit house

  66. Re:Mozilla Corporation - Fighting for Freedom agai by sFurbo · · Score: 4, Insightful

    Your original comment said "Frankly the US government is just as nasty and corrupt as the rest[...]", against which examples of other, worse regimes is a quite effective argument.

  67. lol by Anonymous Coward · · Score: 0

    ya like how many 4 worse out of 200 or so...ya that's being something to be proud of. China which you do so much trade form you might as well say is part of america...being what just slightly worse then you

  68. usa ranked 16th best nation to live in by Anonymous Coward · · Score: 0

    sad three are at least 15 nations better to live in all nicely ranked
    and all the top ten have free health care but one and all but 3 have no national debts and 8 of top ten are considered socialist democracies.
    ENJOY and google for the link unless your govt or hollywood blocks it.

  69. Re:Mozilla Corporation - Fighting for Freedom agai by _merlin · · Score: 1, Offtopic

    The 58,000 of you are nothing compared to the 400,000 civilians killed in a war that you had to use a false flag operation to start. What about them? What about the ongoing effects of what you left behind? My wife's cousin not only can't speak but has no concept of language because of the dioxins in the food chain. It really makes my blood boil when I see shit in the media that ignores the cost to Vietnam while making a big deal over the loss of American or Australian lives, or the effects of agent orange on foreign veterans. There's nothing to feel sorry for, that's the price you paid for a war you had no business starting.

    If I can pull a Godwin, the winners of WW2 get to write history, build memorials to their lost, and demonise the other side. Accused perpetrators were tried and executed. There's no mourning for the Nazi soldiers who followed their government's orders to fight. There doesn't even seem to be much sympathy for the civilians who perished in the fire bombings. Why doesn't VN get the same luxury? They won the fucking war and got their own country back, but they're still painted as the bad guys. There's no sympathy for the civilians, the perpetrators of the war were never held to account, there's no compensation for the lingering effects. And I get a nice reminder of this every time I catch up with the extended family.

  70. Re:Mozilla Corporation - Fighting for Freedom agai by higuita · · Score: 1, Insightful

    ok troll, i will bite it!

    what, homeland security, FBI, NSA are angels?

    The countless US invasions, the protection of dictators like Noriega, Pinochet and even Saddam just because (at their opinion its the less of two evils), the support of Islamic groups like the Taliban, etc, etc. Even today, with the CIA torture jails, Halliburton corruption, wall street and banks frauds show that you have nastiness and corruption all over the top US government and companies.

    Probably the US is directly and indirectly responsible of more killings and problems than most of those countries.

    People all over the world have the same "Capitalism benefits" as you, even if they are communists, fascists, tribal, etc!! things like jobs (duh!) , homes (double duh!) , clothes ( triple duh!) , electronics (all made in china today... that is communist!!) , computers (even URSS had their own computers!), air travel(duh!) and yes, even internet (call it arpanet, fidonet, AMPRNet or minitel, what ever... arpanet won, but there where alternatives out there)

    And yes, cuba have the BEST medical care in the world... and that limited high-tech medical machinery. In cuba everyone have full and free medical support, people around the world travel to cuba to use their medical cares for hard to solve problems (not free for non-residents of course). That doesnt mean that they can cure everything, that mean they give you the best treatment for your problem and long term support for it. No bullshit like, "Take this treatment, the other one a lot better, but is too expensive"... Everyone gets best treatment, not just the rich people.

    Huge amount of money will also not give you better medical treatment, just ask Ted Kennedy.

    who is full of bullshit now?

    stop looking to your own belly and thinking that you are the center of the world. US have good things, but it also have many bad things, just like every place in the world!

    --
    Higuita
  71. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 0

    How about giving us a specific link to a faked certificate from a specific "Azerbaijan", "Kazakhstan", "Georgia", "Uzbekistan" or "Tajikistan" CA?

  72. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 0

    Your wealth, relative to that of the rest of the world, depends on a subservient China. Do you prefer it that way?

  73. Re:Mozilla Corporation - Fighting for Freedom agai by hairyfeet · · Score: 0

    And again your argument boils down to "Its okay that they raped me because if it would have been the other bunch they would have fisted me as well"...and you HONESTLY can't see the fault with that logic? this isn't a popularity contest, how many around the world have DIED by direct involvement of the US government since 1960?

    And as for the other guy...who in the fuck would think I'm from Boston? that ain't even in the same timezone first off, and second if you are too God damned lazy to even spend the 3 whole minutes registering why in the hell should we give a shit what you think? With all the trolls and shills hiding behind AC so nobody can see their past posts frankly the opinions of most ACs are worth a bucket of piss as far as I'm concerned, get off your lazy ass and spend less time than it took to spew the bullshit and post as a user as sFurbo at least had the balls to do. I may not agree with a word he says, just as me and Crosshair have had some pretty heated arguments over issues I can AT LEAST respect the fact that unlike the AC spewing bullshit he has the balls to stand by his comment history for all to see.,

    --
    ACs don't waste your time replying, your posts are never seen by me.
  74. Re:Mozilla Corporation - Fighting for Freedom agai by sFurbo · · Score: 2

    I am not saying anything about what is OK, and I think much of what the US government is doing and have done is very far from OK.

    But that was not what we were discussing. You said that the US government was "as nasty and corrupt as the rest", the AC pointed out some examples that he felt was worse while acknowledging that the US did have its own problem, and you interpreted that as giving the US a free pass. I pointed out that that was not what the AC said, and you have now accused ME of saying everything the US does is OK. Lets see if you can get a hattrick, and misinterpret this post as well!

  75. You don't sound like Libertarians I know by Zontar_Thing_From_Ve · · Score: 1

    You, sir, are either not a Libertarian or you represent the 1% of the party that is actually rational.

    Here's what I hear all the time from Libertarians I have known.
    ALL taxes are evil. Well, OK, maybe it's necessary to pay something just to support the military so China/Russia/whoever won't invade us.
    There's NOTHING that the government does that private industry can't do better and cheaper. NOTHING.
    Most of the taxes paid are wasted on a bloated government.
    If government didn't do anything except run the military and maybe 1 or 2 other tasks, everybody would be richer and better off in this country.

    1. Re:You don't sound like Libertarians I know by Anonymous Coward · · Score: 0

      Sounds more like a capitalist to me..

  76. Re:Mozilla Corporation - Fighting for Freedom agai by alexo · · Score: 1

    "As nasty and corrupt as..." ... China under Mao? Venezuela under Chavez? Cuba under Castro? The USSR under Lenin and Stalin? Cambodia under Pol Pot? The NPRK under the various Kims? Zimbabwe under Mugabe? Zaire/the Congo under Mobutu?

    Are you trying to say that, if we rank all regimes in modern history by their level of corruption, the current US one would be in, what, 9th place?

    OK, correction accepted.

  77. Re: Mozilla Corporation - Fighting for Freedom aga by SteveFoerster · · Score: 1

    Don't get excited. It's the address of a hotel.

    --
    Space game using normal deck of cards: http://BattleCards.org
  78. Re:Mozilla Corporation - Fighting for Freedom agai by alexo · · Score: 1

    [...] original comment said "Frankly the US government is just as nasty and corrupt as the rest[...]", against which examples of other, worse regimes is a quite effective argument.

    Let's deconstruct that argument, shall we?

    The AC gave a list of 8 regimes, with three of the examples constituting of dead ex-leaders.
    So, considering regimes ranging from 1917 (Example #4: USSR under Lenin) until today, given that we currently have over 200 countries and the tumultuous nature of the past century, a conservative estimate would be at least twice that number of distinct "regimes". I'm not a political historian, so I'll just take 400 as my estimate (feel free to correct me with hard data).

    8 of which were claimed to be worse than the present-day US.
    A whopping 2%.

    Unless you provide us with a more comprehensive list, you may want to reconsider the effectiveness of the argument.

  79. In Vietnam... by Anonymous Coward · · Score: 0

    3+ million people died, and the illegal chemical warfare waged there left the people genetically wounded for generations to come.

  80. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 0

    Hippy communist terrorist, GET HIM!

  81. Re:Mozilla Corporation - Fighting for Freedom agai by david_thornley · · Score: 1

    OK, what's so different about the US nowadays? US involvement in Iraq and Vietnam seems rather similar to me - authorization gained by deceit, winning all the battles but still floundering, lasting longer than WWII did (assuming the common 1939 start date), hurting a lot of innocent civilians. Slightly earlier, anti-communist witch hunts had been the demonization of the day, and during the Vietnam War the FBI infiltrated a lot of peaceful anti-war groups in an attempt to discredit them. I think I understand what the USA has been for longer than thirty years now, and I don't get your point.

    --
    "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  82. Re:Mozilla Corporation - Fighting for Freedom agai by Anonymous Coward · · Score: 0

    I believe the exact statement was "Every government in the world is corrupt from a point of view", with the key being "from a point of view". One man's trash is another man's treasure and all of that.

    In my view, the US government is one of the most evil and insidious in the world. They meddle in the affairs of other countries, piss a bunch of people off, cry when retaliated against, then invade and force US opinion on others under the false banner of "liberation".

  83. Anti-american populists like President Eisenhower? by Anonymous Coward · · Score: 0

    Wasn't President Eisenhower one of the people who first talked about a "Military-Industrial Complex?" http://www.youtube.com/watch?v=CWiIYW_fBfY

  84. Re:Anti-american populists like President Eisenhow by gottabeme · · Score: 1

    I don't understand what you mean. I was referring to the way it seems popular to villify the U.S. nowadays, ignoring the good things the U.S. has done and continues to do. Yes, Eisenhower spoke about that, and he may have been right.

    But I think you missed the GP's point. It's easy to criticize the status quo, because it's far, far from perfect, just, or fair. The problem is that there is no viable alternative. Communism and socialism and fascism all failed, because they are rotten at their core. Capitalism allows enough freedom for some people to do bad things and fulfill their greed, potentially at others' expense, but that's a price you pay for freedom. If you give up that freedom, you pay a greater price in that the common people have no liberty to determine their own destiny, or at least attempt to. And by removing that freedom, you not only give up a basic human right and greatly harm quality of life, but you also remove motivation for work, creativity, ingenuity, dedication, etc.

    People who rail against capitalism may be justified in their criticisms, and I'm sure it could be regulated better than it is. But that is what they should be calling for: better (not necessarily more) regulation of capitalism. Simply crying that capitalism is bad and unfair and evil is pointless, and ultimately naive, because there is no reasonable alternative.

    Empty voices easily fill the void with empty words, but they ring hollow.

    --
    "Those who consume the bulk of goods are those who make them. We must never forget this secret of our prosperity."
  85. Re:Mozilla Corporation - Fighting for Freedom agai by gottabeme · · Score: 1

    It's hardly a country that loves freedom if it regulates people's personal lives like this.

    Balderdash. Anyone can live with whomever he wants and can make whatever kind of promises or agreements he wants with whomever he wants. The government not giving a slip of paper endorsing or verifying their private decisions is not a form of regulating their personal lives--it's the opposite! It's refusing to be involved in it! How much more freedom do you require than lack of involvement?

    Then why all this fuss about gay marriage? Why is bigamy illegal? Laws that criminalise those things restrict personal liberties.

    That's a good question. Originally I'm sure it goes back to something like common law or colonial values, i.e. moral values. From a practical standpoint, it probably exists to protect women from men who would marry a woman and then marry another woman, perhaps even secretly; this could go on and on, as he abandons each one for the next. When those laws were written or assumed, women could not as easily suvive independently. It really hasn't been that many years since marriage and family was a basic necessity for most people to survive.

    But again, while marrying two people at once may be illegal, there is no law against a spouse leaving and living with someone else, even having children. The government won't recognize it legally, but those two people don't require such official recognition to live together and make whatever promises they want to each other. As morally wrong as it is, it's not illegal.

    And yet those taxes are still there. How can the US be pro freedom if it actively harms people by confiscating property off them using a threat of force?

    You're being silly. Every nation in the world has taxes, and no nation could exist with zero taxes. Taxes have been around as long as death. Your argument is preposterous and irrational.

    Just because all nations have taxation does not mean that it is impossible for a nation to exist without it. Just because taxation has been around for a long time doesn't mean it's not an infringement on our liberties.

    Of course taxes are an infringement upon liberties.

    Or that's one viewpoint. Another is that reasonable taxes are necessary for a government to exist and protect its citizens' liberties--without any taxes, a government couldn't exist, and might-makes-right would create anarchy.

    I can't - but that doesn't mean (in any way at all) that the US is the bastian[sic] of freedom. It's not. Your government removes and dilutes your freedoms far too much.

    All governments do--that's their basic function. Only by the vigilance of its citizens does a nation preserve its liberty.

    The basic function of government should be to protect people from harm. They shouldn't be the ones doing the harming.

    No one will disagree with you there. But again, that's not possible without taxes of some form. Even if government were only run by part-time volunteers, it would still be necessary to purchase and maintain resources for government use.

    Thankfully, our basic rights which allow us to be vigilant are enshrined in our founding documents, a claim which few nations can make.

    Is the US perfect? Hardly. Is it getting worse? Perhaps. Is there any freer nation? No.

    But, hey, bashing America is easy and popular, so why not join the mob?

    I'm not bashing the USA. I'm bashing all countries that dilute the freedoms of its citizens. (Which is all countries). Some are much better than others.

    Ok...so what's your point? That the world isn't perfect?

    --
    "Those who consume the bulk of goods are those who make them. We must never forget this secret of our prosperity."
  86. More force or less force by tepples · · Score: 1

    There are other ways of raising funds without resorting to extortion. Donations and lotteries come to mind.

    A lottery is a tax on being bad at math. Where does law enforcement get its funding once people become no longer bad at math?

    You're missing the fact that in order to prevent one citizen from using force or fraud against another citizen, the state must use force and fraud against all citizens.

    As for force, in this imperfect system of things, it is impossible to reduce total force and fraud to zero. The job of a tax-funded police force is to minimize the use of force. The job of a lot of other tax-funded services is to minimize situations that lead to poverty because desperation to survive is itself known to lead to the use of force. As for fraud, the laws are on the books for all to see. Please explain what you meant by government use of fraud against citizens.

    1. Re:More force or less force by agm · · Score: 1

      There are other ways of raising funds without resorting to extortion. Donations and lotteries come to mind.

      A lottery is a tax on being bad at math. Where does law enforcement get its funding once people become no longer bad at math?

      A lottery is not a tax when partaking is voluntary. Other funding mechanisms include charity and user charges.

      You're missing the fact that in order to prevent one citizen from using force or fraud against another citizen, the state must use force and fraud against all citizens.

      As for force, in this imperfect system of things, it is impossible to reduce total force and fraud to zero. The job of a tax-funded police force is to minimize the use of force. The job of a lot of other tax-funded services is to minimize situations that lead to poverty because desperation to survive is itself known to lead to the use of force. As for fraud, the laws are on the books for all to see. Please explain what you meant by government use of fraud against citizens.

      I don't think the state should protect people from themselves or from nature. That's what the community is for, via voluntary means. The state should only protect people from other people.

      I consider forcing someone to hand over their money using a threat of force to be a form of fraud. It may not be the best use of the word, but either way it's unethical and should be illegal.

    2. Re:More force or less force by tepples · · Score: 1

      Other funding mechanisms include charity and user charges.

      But everybody is a "user" of being protected from other people, and now we're right back to taxes.

      I don't think the state should protect people from themselves or from nature. That's what the community is for, via voluntary means.

      So what should a community do with people who refuse to participate? Consider carefully how you choose your answer to this question; otherwise, you're right back to government services.

    3. Re:More force or less force by agm · · Score: 1

      Other funding mechanisms include charity and user charges.

      But everybody is a "user" of being protected from other people, and now we're right back to taxes.

      I would help to fund a police force that protects my neighbour even though my neighbour would not. It's in my best interests to do so.

      I don't think the state should protect people from themselves or from nature. That's what the community is for, via voluntary means.

      So what should a community do with people who refuse to participate? Consider carefully how you choose your answer to this question; otherwise, you're right back to government services.

      So long as those people are not harming other people then they get left alone. But they don't get to use any services that they do not pay for.

    4. Re:More force or less force by tepples · · Score: 1

      But they don't get to use any services that they do not pay for.

      A child cannot afford to pay for anything. Should children whose parents die starve to death?

    5. Re:More force or less force by agm · · Score: 1

      But they don't get to use any services that they do not pay for.

      A child cannot afford to pay for anything. Should children whose parents die starve to death?

      A child would have a guardian. Adults are responsible for children, not feeding them would be tantamount to abusing them. If a child has no parents then someone would adopt that child. There are a lot of people out there that would be willing to do this.

      Would you let a child starve? I wouldn't. Freedom is about caring for other people around us, and acting to help them. Not because we are forced to but because it's the right thing to do.

    6. Re:More force or less force by tepples · · Score: 1

      I would help to fund a police force that protects my neighbour even though my neighbour would not. It's in my best interests to do so. [...] But they don't get to use any services that they do not pay for.

      So how should the police determine at a glance who has subscribed and who has not?

  87. Re:Mozilla Corporation - Fighting for Freedom agai by hairyfeet · · Score: 1

    Wow...congrats to the old dude, you sir pretty much demolished that argument with a couple of well written sentences, bravo sir. I guess I'm a little too passionate to pull something similar off, I was raised with a deep love of individual freedoms and all the jack booted bullshit we've seen for quite awhile really burns me up.

    In fact the only thing that will piss me off quicker is the "you better love Murrica or GTFO" crowd because they make it clear the US government could slaughter brown and yellow people like cattle as long as they waved the flag, its the whole "America fuck yeah!" bullshit taken to its logical conclusion. How anybody could buy that bullshit when they saw the pics of soldiers with "Be very quiet, I'm hunting iwackis" patches posing with corpses like they nailed a 4 point buck is beyond me, I know my grandfather that fought against that kind of evil shit in WWII must be spinning in his grave at the sight of that.

    --
    ACs don't waste your time replying, your posts are never seen by me.