Iran Cyber Security and Artificial Intelligence (civilian and military)

[BHAN85]

Iran bans pagers, walkie-talkies on flights after device attacks killed dozens in Lebanon - EFE Noticias

Tehran, Oct 12 (EFE).- Iran has banned passengers from carrying pagers and walkie-talkies on airplanes, citing security concerns, following deadly explosions involving these devices in Lebanon, which killed dozens and injured thousands. “To ensure flight safety, passengers in the aviation sector mus

efe.com

why they think the same can't be done in smartphone and tablets?

 

[BHAN85]

The minister said that more than two-thirds of internet users in Iran use Virtual Private Networks (VPNs) to get around the curbs imposed on access to foreign-based social media platforms and websites.

Telecoms minister says Iran determined to ease internet restrictions

Iran’s telecoms minister says the country is determined to ease restrictions on the internet.

www.presstv.ir

They will lift restrictions because most of Iranians use VPN.
If I were them, I would forbid VPN instead.

 

[Hack-Hook]

The minister said that more than two-thirds of internet users in Iran use Virtual Private Networks (VPNs) to get around the curbs imposed on access to foreign-based social media platforms and websites.

Telecoms minister says Iran determined to ease internet restrictions

Iran’s telecoms minister says the country is determined to ease restrictions on the internet.

www.presstv.ir

They will lift restrictions because most of Iranians use VPN.
If I were them, I would forbid VPN instead.

It's already illegal to use vpn

 

[BHAN85]

It's already illegal to use vpn

I meant, forbid it in a technical way.

Forbid all conections to VPN providers ip addresses.

 

[BHAN85]

One decade ago, big webs under Google rule started to change from HTTP to HTTPS, making impossible a direct monitoring from local authorities.

USA enemies keep watching without movement, and they even allow more than half country using VPN to besides encrypt 100% traffic.

The only USA enemy with a smart Internet sovereignty vision is China.

The rest, keep unmoved, giving for free all information about their citizens to their enemy who want to destroy them.

First measures should be.
1. Own browser mandatory use inside country, modification of Chromium to redirect traffic to own proxy servers with a own encryption visible to local authorities.
2. Re-pack all .apk main applications to move internet traffic through local proxy servers
3. Forbid all conections outside that scheme

And so on.

But they did nothing. Iran even doesnt have a own messaging app or own search engine. Russia has Telegram as IM and Yandex as search engine. China has Wechat as IM and Baidu as search engine. Iran nothing.

 

[Hack-Hook]

I meant, forbid it in a technical way.

Forbid all conections to VPN providers ip addresses.

Iran already do that but Even China can't do that for all gonnection . Unless they cut all outside traffic they can't do that

 

[Hack-Hook]

One decade ago, big webs under Google rule started to change from HTTP to HTTPS, making impossible a direct monitoring from local authorities.

USA enemies keep watching without movement, and they even allow more than half country using VPN to besides encrypt 100% traffic.

The only USA enemy with a smart Internet sovereignty vision is China.

The rest, keep unmoved, giving for free all information about their citizens to their enemy who want to destroy them.

First measures should be.
1. Own browser mandatory use inside country, modification of Chromium to redirect traffic to own proxy servers with a own encryption visible to local authorities.
2. Re-pack all .apk main applications to move internet traffic through local proxy servers
3. Forbid all conections outside that scheme

And so on.

But they did nothing. Iran even doesnt have a own messaging app or own search engine. Russia has Telegram as IM and Yandex as search engine. China has Wechat as IM and Baidu as search engine. Iran nothing.

People just use a fork or original. unless you make installing a spyware on people computer you can't make them follow that nonsense

 

[Hack-Hook]

@BHAN85 And by the way I use two folk of Firefox as browser, floorp and tor . How you gonna make me use a chromium based nonsense .

 

[BHAN85]

@BHAN85 And by the way I use two folk of Firefox as browser, floorp and tor . How you gonna make me use a chromium based nonsense .

If I were your ISP I can forbid all connections except one to my VPN, only accesible through my software, and with a proxy inside that VPN of every famous web (90% of connections are to a few webs).

i.e: Imagine I want to spy your Google searches, but I have no relations with USA/Google to do that. AS your ISP (or your state) I can forbid connections to normal google website, and I set a proxy to Google (e.g: in www.google.mynet.ir) that resends any query to real google, allowing me to log the search query, and besides confusing real google about who really do the search.

Proxy server - Wikipedia

en.wikipedia.org

 

[BHAN85]

People just use a fork or original. unless you make installing a spyware on people computer you can't make them follow that nonsense

Have you tried anytime a public wifi hotspot with a captive portal?
It's the same concept, in the captive portal (before login to hotspot) you're accessing to a limited internet with one only host available.

It's just a pair of iptables (linux firewall) rules in the router to redirect whole internet traffic to one internet host.

The ISP you use can do the same to make mandatory the use of their software as internet tunnel, forbidding all connections outside that protocol.

 

[BHAN85]

Example of proxy web

Invidious is a proxy web of Youtube web, that allows see and download youtube videos (and of course, they can monitor all the traffic, or forbid only certain videos, without have any relation to youtube).

Invidious Instances

the url youtu.be/-aT8gszVpyY is accesible in https://inv.nadeko.net/watch?v=-aT8gszVpyY

The same concept can be done in all webs, even automatically and with same original design.

That should be done any state with problematic relations to the state where the web is host.

The original web can forbid many connection from same ip addresses, but a ISP have a pool of thousands ip addresses to use one different in each request.
And of course the web can forbid whole access from one country, but I guess they prefer some data than no data at all, and this is a way to deal.

Just use proxy of main webs, and forbid original webs, and you get sovereignty over your internet access.

 

[Hack-Hook]

Example of proxy web

Invidious is a proxy web of Youtube web, that allows see and download youtube videos (and of course, they can monitor all the traffic, or forbid only certain videos, without have any relation to youtube).

Invidious Instances

the url youtu.be/-aT8gszVpyY is accesible in https://inv.nadeko.net/watch?v=-aT8gszVpyY

The same concept can be done in all webs, even automatically and with same original design.

That should be done any state with problematic relations to the state where the web is host.

The original web can forbid many connection from same ip addresses, but a ISP have a pool of thousands ip addresses to use one different in each request.
And of course the web can forbid whole access from one country, but I guess they prefer some data than no data at all, and this is a way to deal.

Just use proxy of main webs, and forbid original webs, and you get sovereignty over your internet access.

Those proxy allow for example microsoft website , you guess what your proxy see of you use snowflake

 

[BHAN85]

Those proxy allow for example microsoft website , you guess what your proxy see of you use snowflake

A ISP (or a state ordering to ISP) can forbid all traffic except the traffic that goes through your proxys, making almost impossible non-local-surveillance and the most important, making harder for the enemy to know what content see each citizen (because all people requests are mixed in same proxy server).

 

[BHAN85]

North Korea "internet"

Kwangmyong (network) - Wikipedia

en.wikipedia.org

The good thing of computers is that you can fully automatize repetitive tasks.
I.e: You can allow access to twin mirrors of every internet web through a proxy in real time, and only forbid the content you dont want to be seen, and make surveillance over all the rest.

The problem to do that massively are two:
-Apps that dont use standard websites, require a individual unpack/repack for each app. Posssible to do it in android phones/tablets, impossible to do it in non-jailbreak iphones/ipads. New ssl certs must be installed in each device.
-Internet services based in individual user accounts (Gmail, twitter and so on), that can do more specifical limitations and it would be harder to clone in a twin mirror proxy.

 

[Hack-Hook]

North Korea "internet"

Kwangmyong (network) - Wikipedia

en.wikipedia.org

The good thing of computers is that you can fully automatize repetitive tasks.
I.e: You can allow access to twin mirrors of every internet web through a proxy in real time, and only forbid the content you dont want to be seen, and make surveillance over all the rest.

The problem to do that massively are two:
-Apps that dont use standard websites, require a individual unpack/repack for each app. Posssible to do it in android phones/tablets, impossible to do it in non-jailbreak iphones/ipads. New ssl certs must be installed in each device.
-Internet services based in individual user accounts (Gmail, twitter and so on), that can do more specifical limitations and it would be harder to clone in a twin mirror proxy.

North Korea is not internet , it's intranet.
North Korean civilian have no business relation to outside world you can't do that to a country that have private economy sector