Kazakhstan's HTTPS Interception

This post describes our analysis of carrier-level HTTPS interception ordered by the government of Kazakhstan.

The Kazakhstan government recently began using a fake root CA to perform a man-in-the-middle (MitM) attack against HTTPS connections to websites including Facebook, Twitter, and Google. We have been tracking the attack, and in this post, we provide preliminary results from our ongoing research and new technical details about the Kazakh interception system.

👉🏼 Read more:
https://censoredplanet.org/kazakhstan

#kazakhstan #HTTPS #interception #websites #MitM #tracking #attack #research #analysis #facebook #twitter #google
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@cRyPtHoN_INFOSEC_ES

Let's Reverse Engineer Discord

How we reverse engineered Discord’s call protocol and found it being MITM-ed by Discord

Article, Comments

#discord #privacy #mitm

Hardware Security Threats Against #Bluetooth #Mesh Networks

https://ieeexplore.ieee.org/document/8433184/authors#authors

Security risks of Bluetooth

Man-in-the-middle attacks (#MITM):
Bluetooth connections can be susceptible to eavesdropping attacks if strong encryption is not used. Older Bluetooth versions (before 4.2) are particularly risky.

#Bluejacking & #bluesnarfing:
Attackers could try to send unwanted messages (bluejacking) or even steal data from devices (bluesnarfing).

Traceability:
Bluetooth devices often send unique #MAC addresses, which makes users traceable.

Weak standard pairing methods:
Many devices still use simple PINs or confirm connections without verification (e.g. "Just Works" mode with Bluetooth LE).

Risks specific to Bluetooth mesh networks

Mesh networks increase the attack surface:
Each device in the mesh acts as a relay, which means that a compromised device could influence the entire data traffic.

Lack of end-to-end encryption:
If the app/software does not implement additional encryption, messages can be forwarded in plain text.

Decentralized management:
Without centralized control, it is difficult to identify and remove malicious nodes.

Israeli spyware vans infiltrate American streets and your phones

https://cybernews.com/privacy/us-police-israeli-spy-vans-falconet-cognyte/

Comments

#zog #usa #mitm #cognyte #stingrays #why

🍿 Is your phone being tracked? IMSI Catchers (EFF Rayhunter Setup Guide)

🔗 https://www.youtube.com/watch?v=UXp77zJkLN4

#stingray #mitm

The Texas Department of Public Safety just purchased four Tahoes, where over $3.8 million went towards #Falconet interception equipment.

Falconet from the israeli company #Cognyte, serves as a cell tower simulator that intercepts cell phone data from all devices within range.

Police mount these systems in Tahoes so the vehicles can collect information while driving through areas without any direct interaction with targets.

This mobile approach generates ongoing records of phone locations and communications for everyone nearby rather than only suspects, which creates comprehensive movement profiles and bypasses traditional warrant requirements under the Fourth Amendment. (39 seconds)

Join @davidavocadowolfe 🥑
#cops #gov #why #MITM #stingray