I think most of us don't want to play global thermonuclear war, and view all steps toward the disconnected and adverserial world that will run that game in a very dim light.
If you keep doing this we're going to have to ban you again. I'd rather not, because you've also posted some good comments. Would you mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the spirit of this site more to heart? We're trying to have at least one place on the internet that isn't torn apart and degraded by the usual snark and aggression. If you agree that that's worth having, I'm sure you'll see how we need everyone to do their part to keep it that way.
They are a welcome development for governments who'll be able to execute tighter control. I don't think that they're a welcome development for citizens, even for those who do not really care about politics. Want to play World of Warcraft today like you always did? Too bad, servers are in France. Want to learn some web development? Too bad, MDN is not mirrored.
This is a big question for sure. Especially for the technical content. There are a lot of really talented software engineers that come out of Russia, among others.
The government here is less bothered by Russians reading something foreign than by them writing something not too happy. Mostly in Russian language, but whatever.
You missing out on some content is collateral damage, and that's not the government's problem. After all, there's government-approved content, and that should be enough.
So we don’t know what exactly they tested. Why is this news, let alone an international one?
Also, as far as I understand, what the Russians were officially saying was that they were developing fallback systems for the event if, in another bout of sanctions, Russia gets disconnected from the global internet. Which, given their standing with the international community, may be a reasonable thing to do. But the journalists present this story as Russia's voluntary step towards isolating itself from the global internet. I am not sure why.
Power consolidation. The Internet is currently the best way to get access to honest, quality journalism - which is probably the biggest threat to Putin, et cetera.
> The Internet is currently the best way to get access to honest, quality journalism
Honest, quality journalism is a fantasy. It never existed. Even Benjamin Franklin used his newspaper to influence elections by slandering his political rivals. Not to mention fake news[0].
Billion-dollar companies with competent management pay large amounts of money to newsgathering agencies and companies for accurate information with which they can make business decisions on. I trust the objectivity of journalism when I pay for it directly and the news is the product - rather than most online journalism where (in practice, at least from the soulless business position) the audience is the product for advertisers which necessarily means compromising journalism.
Nothing is free from bias - that much is true; that doesn't mean we should adopt your too-cynical attitude.
The thing to keep in mind is that paying for it is no guarantee that you aren't still also the product even without direct advertising. Incentives are a very messuy business and everything is a signal to someone - regardless of validity. There are no epistemological guarantees period so wariness is always required.
We moderate such comments heavily: https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que.... If you see a post that ought to have been moderated but hasn't been, the likeliest explanation is that we didn't see it. You can help by flagging it or emailing us at hn@ycombinator.com.
Oh, during a social unrest in Egypt in 2011 the government famously shut down the internet. Didn't help them much :-)
I think the main concern of the Russian internet users is to get isolated from the rest of the internet indefinitely during peace time, in a way of China or North Korea. I am not sure we are seeing signs that the Russian government intends to go that far yet.
When all that mess with Russia/Ukraine had started the West was openly contemplating disconnecting Russia from the international payment services. That had lead Russia to develop it's own.
The Internet is a vital infrastructure element. Leaving the risk of potential disruption to some US congressmen's whims is not a very wise choice. Of course it can be used with bad intentions as well but so can anything else. I think I've already mentioned this in my older post and it was downvoted eagerly.
> the West was openly contemplating disconnecting Russia from the international payment services
This is a claim made by the Russian government with little actual support as far as I know. It comes up every once in a while when the issue is mentioned, and is usually uncritically accepted.
I now looked a bit into it, thanks for the link. I think it would make a big difference if that was a credible threat by the parliament, or if it was some random grandstanding by a politician. Given that the idea was not discussed again (all references to the issue are to the same resolution, it seems, AFAICT), it is quite likely that (a) the idea was not serious, and (b) it gave the Russian government an excuse. If it's being used as an excuse then there's no point in taking it as a serious threat to Russian national security the way some people do. The Russian government is very fond of portraying itself as a victim of the West, so some skepticism is warranted.
"...it is quite likely that (a) the idea was not serious, and (b) it gave the Russian government an excuse..."
It looks like you are the one looking for excuse. Following your logic Russia should really wait until threats become very serious then be hit in the face and only then react? I think you're asking a for bit too much Kumbaya.
"
12. Recalls that the restrictive measures taken by the EU are directly linked to the Russian Federation’s violation of international law with the illegal annexation of Crimea and the destabilisation of Ukraine, while the trade measures taken by the Russian Federation, including those against Ukraine and other Eastern Partnership countries which have recently concluded Association Agreements with the EU, are unjustified; calls for the EU to consider excluding Russia from civil nuclear cooperation and the Swift system;
"
Now as far as it concerns the Internet there is even no real need to bring Swift example. Any country would be insane to let their Internet infrastructure under someone else's control. Question of course how much it will cost to build a replacement for situations if the things go sour. So for many countries, especially the ones that are on friendly terms with the US, they can let it slide. Not so much for Russia, China etc.
> in Egypt in 2011 the government famously shut down the internet
The news is that they can now isolate their Internet domestically and run a Russia-only WWW. They presumably could have shut it off completely from Day 1.
I would assume any foreign website (Twitter, PayPal, Facebook, etc.) would need to be co-located within Russia to continue to operate. Even then, it would be cutoff from updating or querying any foreign databases.
I can imagine online banking with foreign entities would become a problem as well.
YouTube would be one prominent example; Wikipedia, Google search & hosting, Twitter are all popular.
There are also media of a more liberal nature who can’t comfortably host in RuNet / being registered as Russian companies, so they exist outside. meduza.io being a prominent example
I can't really think of any outside of youtube. There's local search engine (Yandex and some lesser ones), there's local social website (vkontakte). Russians don't talk English well and mostly use Russian websites which are, obviously, mostly hosted inside Russia. Wikipedia is another example, but, funny enough, Russian government wants to develop a curated alternative and already have money to fund it (basically web hosted encyclopedia).
By whom? State actors can just launch attacks from computers that have both a Russian internet link and a link up to a internet providing satellite, no?
Of course security is an obvious pretense for control.
The way you actually reduce attack surface is to take the critical pieces off of it and minimize the paths to be watched, not the whole system. That would be like ensuring it is possible to close off all of the highways into Washington DC to response time for the three federal branches. If it was actually that damn important they would make and use secure tunnels. The only added benefit is an excuse to shut out protesters.
Not to mention mere independence isn't everything for system functionalities. Going to muscle powered factories to remove logistical dependence on power would be an obviously stupid move for example because the performance is so much worse. It is "selling ceramic knives that cannot be sharpened as never needing it" marketing deception of trying to cast a flaw as a strength.
I don't think this is such an effective control if you mean controlling the population. Usually when countries shut down the Internet it's to prevent protestors from organizing rather than disconnecting them from the outside world. This doesn't give them additional leverage considering the Russian government's current power.
This is actually most useful for security. At least if you are attacked your national network will survive.
That is extremely unlikely to happen. Payments, banking, investment will be always connected, or placed abroad in the required way. At least for important enough transactions - probably not Amazon, but stock trades...
That's what very much has already happened. Visa and MasterCard pulled their services a few years ago after another set of US sanctions. Also, if you are a business and using SWIFT to transact - US has the final say what you can and can not do. So now Russia has it's own payment card system MiR and working with China, India and even Iran on alternative to SWIFT.
I think it was a mistake for US to retract payment services. A smaller country may be severely affected by it indeed, but not a country of the size of Russia, China or India.
Now if payment networks were pulled, then what is next? Internet would be the logical follow-up. Hence the testing. It all makes perfect sense when you look at it from Rissia's side.
Whenever Russia talks about "national security", you have to understand that this is a country that considers e.g. NGOs that receive any foreign funding (even non-state!) to be an infringement of said security.
> But the journalists present this story as Russia's voluntary step towards isolating itself from the global internet. I am not sure why.
Because control over access to the web is a theme of lawmaking and enforcement here for almost ten years. This is not an isolated initiative. I'd also very much like to know what exactly the ‘test’ consisted of, but there's no doubt that Russian government dreams of having a Big Russian Firewall and the rest of the wonderful Chinese inventions.
Like e.g. having some government-mandated apps preinstalled on every phone sold here, which is coming into force in some following months. Like having messenger users identified by linking them to phone numbers, which is already a law and soon will be a law for email too (if I didn't miss it having been passed).
> Like e.g. having some government-mandated apps preinstalled on every phone sold here, which is coming into force in some following months.
It is the news the exact meaning of which is open to interpretation. Given that those pre-installed apps can be uninstalled, we should at least allow a possibility that rather than being an insidious tactic to spy on users this is simply a clumsy protectionist anti-competitive legislation to stimulate growth of local tech companies.
For starters, where do you see that the apps can be uninstalled? Since when system-installed apps can be removed by a user without rooting or replacing the system?
Secondly, pretending that this is an independent event and that the government, Duma, courts and police have a shred of good will after what they were doing for the last ten–twenty years, is so laughable that your insistence on that interpretation is baffling and suggestive.
Even if by some miracle the apps are innocent at first, nothing prevents the FSB from slipping in different functionality after a year, or even in an update.
> have a shred of good will after what they were doing for the last ten–twenty years
If by the "good will" you mean whether they are earnestly concerned with improving the quality of life of ordinary Russian citizens, then the answer is, most likely not.
But between this and the worst possible interpretation (oh, they must be doing this to allow the FSB easy access into everyone's phones) there are various other possible interpretations, involving various degrees of self-indulgence or maliciousness. Can it be cheap publicity or a symbolic gesture? The first sponsor of the legislation is a member of LDPR, a nationalist party which is obsessed with Russian identity and isolationism. Can it be part of the import substitution project that Russia has been pursuing (largely unsuccessfully, I understand?) since 2014, to loosen its dependency on foreign imports? Can it be a protectionist measure to help otherwise uncompetitive local businesses? I think any of these options is realistic enough to explain the existence of the bill, even without going all the way to regarding it as a covert Kremlin/FSB operation. Which of course it may be, but it is simply too early to tell. I am sure in half a year — or whenever distributors start pre-installing prescribed apps — security experts will let us know whether these apps, besides just being a nuisance, are actually doing something malicious. Then we will have actual facts at our disposal, not just worries and speculations.
Do you remember the much-maligned Yarovaya law from several years back? Has it had any scary practical consequences on the Russian internet?
> For starters, where do you see that the apps can be uninstalled? Since when system-installed apps can be removed by a user without rooting or replacing the system?
Which is an issue that affects pretty much every smartphone with a default Android ROM: Google is baked deep in there, often there's a ton of additional smartphone vendor bloat and trackingware.
A lot, if not all of that data can be accessed by US intelligence agencies trough the third-party doctrine [0].
The same applies to the biggest social media companies out there, they are all US based: Billions of people, all over the world, tell Facebook their deepest secrets and most personal and private details.
For any non-American that's a massive OpSec risk just waiting to happen, its making large parts of populations suddenly very transparent and vulnerable to all kinds of nasty tactics like blackmail [1].
Which is one of the main reasons why countries like Russia and China push domestic alternatives: It's not all just about controlling the platform, the biggest part of it is giving their citizens a local alternative that doesn't mass-scale dox them to an "adversary state".
In that context, I consider it kinda weird how US Americans freak out over TikTok being Chinese and some app by Russian developers sending data to Amazon servers, supposedly being "massive security risks".
But when other countries don't want to give up their populations data wholesale to the US, that's suddenly made out as pure oppressive authoritarianism.
You are not wrong, but right now the consequences are materially different.
As a Russian citizen it is not uncommon to go to jail for two years for expressing anti government views online, that kind of thing does not happen int he west - for now.
It doesn't happen in the West, because the West rather makes it happen in the Middle East [0], to such a degree that whole generations of people have been scarred for life [1].
While at home we jail people for viewing "terrorist content online" [2], which is so vaguely defined that it regularly ends up being "The other sides PoV", if that PoV even manages to penetrate to the everpresent layer of moderation on social media [3].
After terrorism, the next thing is now "hate speech" [4], and as much as US Americans think they are immune to such trends, they really are not. US millennials increasingly welcome and actually demand more moderation because they think that's gonna solve their right-wing extremist problem.
> It doesn't happen in the West, because the West rather makes it happen in the Middle East
Uh, I get that you want to highlight the hypocrisy of the west, but that was an astoundingly poor argument: By killing Pakistani the west silences criticism at home? And then as proof this happens you link to examples of domestic criticism?
A good 50% of phone users could probably do it without assistance, and people can always have someone else do it. Rooting a phone is really not difficult, simpler than installing windows xp used to be.
There are very few real reporters left. Most of the articles reek of bias and since Russia is a designated bad country no matter what they do it is evil.
I am not really trying to protect Russia here but articles like the one in the title are written for brain dead people. They should go try janitor work instead.
Really? Not welcome by whom? You do not know what difficult profession is. Try something better. And the reason they suffer from stigmas is their own doing.
>But the journalists present this story as Russia's voluntary step towards isolating itself from the global internet. I am not sure why.
Because Russia is the bad guy du jour... They have to gal to try to not sell their country and assets wholesale to foreign interests, plus something kleptocracy something (which the West never minds when it comes to allies, or their own behaviour in Asia, L. America, Africa, etc).
So you get the usual barrage or news items, and people who can't even point Europe on the map (much less such subtlety as to point to e.g. France or Russia) feel like they can have an opinion.
I'm not a journalist and I had to leave Russia because of Putin's regime. Maybe I just know more facts, but for every citizen it's clear like day that all this fuzz is about blocking sources of information. Try to search about "FBK Navalnyj" and you'll find more info.
It was almost certainly a test of a local root zone, a Russian-controlled DNS scheme capable of standing in for the real system. This could be tested without literally disconnecting and wouldn't be very difficult with the cooperation of local isps. But it probably broke https.
If u have a state-owned, state-run DNS service with a root zone and cooperation (forced or not) from ISPs, you really would not have to care about https, and if CT services are not reachable nobody would know.
Aren't there private and public keys involved ? Public keys are pre-packaged with clients (Firefox/Chrome/etc), so the state can't just change or fake the private keys.
Maybe they would force all clients to prepackage a government key and then change all infrastructure to pretend all websites use this public key for their https traffic?
> But the journalists present this story as Russia's voluntary step towards isolating itself from the global internet. I am not sure why.
Because sanctioning a country off the internet has never been done. It's not a credible threat given the topology. Russia is land adjacent to many countries that would be unlikely to participate in a partitioning led by the US, and such a partition would not be very effective if only some countries participated.
Neither North Korea nor Iran are or have been disconnected from the global internet or phone systems by outside countries, and they are the most sanctioned nations.
Perhaps the isolation is planned to be only temporary, though voluntary.
As I read the articles, the "disconnection from the internet" seems to be one more tool in the toolbox for internal control. A disconnection will also prevent possible "outside influences" from amplifying problems during any sensitive periods (e.g. the time following Putin's eventual death).
President Vladimir Putin may hunt shirtless, fly with cranes, cuddle with tigers, etc. but he is not (yet?) immortal.
Once Putin dies, the people running the show need a successor for the supreme leader of the Russian Federation to step in fast and assert legitimacy, with force, if necessary.
Any dissent against the successor needs to be squashed quickly, otherwise any displeasure in the form of rioting runs the risk of spreading and giving the currently oppressed opposition chances to grow their influence.
Also, opportunistic power grab attempts by lesser players and regions need to be contained.
Edit: to be clear, I assume Putin will somehow keep his power even after he is officially not the President (after the 2024 elections).
Plausible deniability must be assumed with morally controversial actions on the part of institutions, especially government security institutions.
One way to deal with this is context. In this case the pattern of Russia with regard to electronic free speech is pretty clear, so it's reasonable to assume these actions are at least partially motivated by something other than emergency preparedness.
Thesis: a lot of conservative America have a bit of a thing for the iron wall.
Pitching it thus, as if Russia were to build its own "Great Wall of China", or perhaps putting them in the "North Korea Internet, LOL!" category, probably catches eyeballs.
Although it has to be said that there are other supposedly more free western nations that have done similar dodgy things with their Internet, and didn't quite get the hard treatment in media-at-scale, but rather more of a velvet glove... Yes, 5-eyes nation citizens, you might ought want to take a closer look at the Anglo plans for the Internet, they're not quite savoury ..
It was the next logical step for Russia after they built their own GPS and their alternative to the World Bank, the BRICS bank. Their biggest enemy has proven that they cannot be trusted and they are the ones who invented the Internet. Anytime they have a disagreement with a nation, they take their ball and go home. Like what they were doing with Huawei. I won't be surprised if China and India are working on the same kind of project.
This world needs an alternative to anything built by the USA. That way superpowers will have to go to the negotiation table on an equal footing. We don't want one bully. We need at least 5 bullies.
Of course Russia has had its own version of GPS for decades. Those ICBMs need some way to find their destination. https://en.wikipedia.org/wiki/GLONASS
World Bank has never been important to Russia. You're right the US is dominating financial world right now which most of the world hates and its inevitable for something else to compete.
Really the world bank's role is to be the scapegoat for fiscal misrule as the lender of last resort. They may or may not be "fair" (a subjective standard) and there are legitimate things to disagree with such as assignment of debts from previous regimes but crucially they lack the power to do much. They are judges without ballifs or executioners. They wield no force but saying no to loans and telling others what they think.
If the countries could sustain themselves without credit from them then they have no need to be involved. The worst is essentially snarky comments pointing out that the current management goes against orthodoxy/still hasn't paid them back from 1977. If the country succeeds despite going against their judgement then they just look silly until either the world bank revises their conventional wisdom or they get to say "told ya so!" when the shoe drops.
Austerity may do worse than an open credit pipeline in terms of growth and human impact but there are no guarantees that the creditor wouldn't mess that up as well and solvency is required to function in their role. While nice they literally can't be an infinite credit that never needs paid back fountain.
The way you defeat bullies isn't another bully. Just look at the record of violent revolutions going full circle over and over again. The way you destroy bullies is the same as warrior elites (generic term for nobles, head warriors of tribes, generalismons, generic because it doesn't matter). Make them irrelevant.
Wealthy warrior elites are left with terrible dilemmas with merchants. If they let merchants grow then their position slips (less elite) but the military position stays the same or grows from taxes. If they don't then their holdings become backwards and they weaken, but they retain their hold on power internally. They can try to plunder but that means war and even if successful running out of prey to hunt. Seizing territory spreads them thinner and gives more administrative burden.
Peace is really a terrible weapon of attrition against warrior elites. It forces them to stab themselves with Morton's fork repeatably.
The funny thing is that economic bullies find themselves in the same role, as they either become warrior elite literally (using force for gain) or metaphorically (using their economic clout as a cudgel) vs new challengers who themselves may render them irrelevant if they fail to innovate.
How much Facebook and other tech giants will be affected by a fragmented internet? Is FB still a $600B company if they are prevalent only in the USA, UK and Canada?
I wonder if this trend of closed borders limited information circulation could lead to the diminishing of companies that depend on the network effect and rise of the companies with hard tech.
I suspect yes to the first if widespread enough in GDP (frankly in the grand scheme of things they matter less than Italy) and a hard no to the second.
There is no reason to think that "hard tech" (assuming you mean more physical hardware) would benefit as a field they aren't really competitors even in terms of sucking up talent. Isolation wouldn't give them an edge there.
Second as fragments would call for reinventing the wheel locally or possibly copying it to serve an insular market. We have already seen this with Cuban mechanics. They didn't become "the Detroit of the third world" producing cheaper cars for other nations, or even a divergent tech path for transit that was better in some way. They just essentially practiced at the art of antique automobile necromancy. Small players with adjacent bigger markets can innovate and scale up. Small players in small markets stagnate. The "small and local serves you better" is more meme than fact. People really want their parochial corner to be just as good but it hasn't worked out that way and stays small for several good reasons, and "choice" isn't one of them.
Facebook and Amazon _never_ penetrated Russian market. Russian companies (e.g. Yandex, VK) dominate in their respective domestic niches. Yandex even bought out Uber's operations here.
Normally I'd expect Globocorp to configure its intranet with, for example, a separate AS each for Germany and Russia. But the AS in Germany may be connected to the Russia AS via a 155 Mb/s leased line from Berlin to St Petersburg with BGP routers. The German AS may also connect via a corporate firewall to a public ISP in Germany, and the Russian AS to a public ISP in Russia.
It is theoretically possible, therefore for a user on a public ISP to connect via Globocorp's intranet to a public ISP web site in Germany.
Is there some technical or administrative requirement to prevent transit via corporate intranets?
I guess they would simply cut it in half by disconnecting the Russian ISP to the German one. Even VPNs stop being useful if all connections to the outside are severed.
Disconnecting the Russian ISP to the German one doesn't disconnect the leased line internal to Globocorps intranet which connects the Gobalcorp intranets in Russia and Germany.
They have the ability to redirect traffic to government controlled devices that isps have to support (they sometimes have nice DNS ptrs like DPI in them). The isps have to speak bgp to the govt boxes and they can announce large swaths of IP space to be redirected.
It would be very unlikely that a company would publish that kind of route (it really should be filtered out) or allow traffic from outside the network to route through it.
Unless they are intending to provide transit, the only routes they would announce to peers in either country would be to their own network.
Rarely mentioned, but Russia also tested the security of their (mobile signal networks) SS7 and Diameter systems Dec 16-17.
It never fails to amaze me how little attention is paid to these systems that can track, intercept and hijack the comms of mobile phone users of any country, internationally.
You could MITM Signal if you control the cell towers on either end. It would be visible, because the security number would change. But in my experience helping people set it up, very few users understand what those numbers are for, and what it means when they change. Most just mark them as verified immediately.
The situation when the Internet is a black market thing is a huge victory for the Russian authoritarian state.
They can afford to have 15% of the population with access to information and what not on the black market. The course of the country will be dictated by the beliefs of the other 85%, which will all buy into the 1000s of kaleidoscopic realities readily manufactured by Surkov & Co, and will all support every single action of the government.
"I got and decoded some materials from today's meeting of the Ministry of Digital Affairs on the exercises. Something tells me either a closed regime or not closed regime will be announced, but we won’t be able to get access either way. So, feed on some rumors. Let it be rumors from me. After [sunglasses] are my additions, probably mocking, will always follow. Based on what I heard and the slides, I can draw two additional conclusions:
the Internet is impossible to understand and nobody understands what needs testing;
️ THEY'RE CONFUSING the law “on sustainable Runet” and the law “on critical objects of information infrastructure”. These are different laws, each living in its own sandbox, this confusion has been going on since the very beginning of the draft law “on a stable Runet”
️️️ Some slides (for some reason labeled Positive Technologies):
⏰ On December 16 and 17, exercise scenarios were worked out to ensure the stability and integrity of mobile radiotelephone communications for the SS7 and Diameter protocols
All four federal mobile operators participated in the exercises. As part of the exercises, 18 attack scenarios were worked out for each operator - 12 through signal networks 2/3 of the SS7 generation and 6 through signal networks Diameter
️ The attacker was able to successfully carry out 62.5% of attacks through SS7 and 50% through DIameter
The average attack detection time was about 2-3 minutes
During the exercise, all scenarios were completed in full. Testing out the scenarios for each operator was about 6 hours. On average, working out one scenario took about 20 minutes. [sunglasses] Grains of corn fried by each curator were eaten about 800 grams each. Drunk 24 liters of coffee. 46.5 kg of cookies consumed
LEARNING RECOMMENDATIONS
To increase the effectiveness of warning, detecting and blocking attacks through signaling networks on the side of the telecom operator, it is necessary to provide:
1️⃣ Attack detection tools through the SS7 and Diameter signaling networks, which will allow timely detection of attacks on individual mobile subscribers and the operator’s infrastructure
2️⃣ Telecommunication equipment settings that prohibit signaling messages that are not used to establish communications between operators, but can be used to conduct attacks on networks of telecom operators
3️⃣ Procedures and security tools that allow you to quickly block ataui through signal networks
5️⃣ Leave the market if points 1-4 were as unexpected for the operator as for representatives of the Ministry of Digital
CONCLUSIONS ON THE RESULTS OF THE EXERCISES
In the Russian Federation, it is necessary to create a regulatory framework and a unified system for collecting and analytically processing information about attacks through signaling networks on the infrastructure and subscribers of mobile telecom operators, as well as connecting it to the State SOPKA [2/3 slide picture from 4 positions OPERATORS -> UNIFIED SYSTEM -> GASOPOK]
[sunglasses] Also in the Russian Federation, it is necessary to create a regulatory framework, to create a unified system for collecting and analytically processing information about attacks on WordPress and PHPNuke, as well as connecting it to GosSOPKA
[sunglasses] Also in the Russian Federation, it is necessary to create a regulatory framework to create a unified system for collecting and analytical processing of information about attacks on active switches, as well as connecting it to the Sta...
I think "authoritarianism" is more apt than "communism" in describing the relationship between the government and the people rather than an economic model.
"Already history has in a sense ceased to exist, ie. there is no such thing as a history of our own times which could be universally accepted, and the exact sciences are endangered as soon as military necessity ceases to keep people up to the mark. Hitler can say that the Jews started the war, and if he survives that will become official history. He can’t say that two and two are five, because for the purposes of, say, ballistics they have to make four. But if the sort of world that I am afraid of arrives, a world of two or three great superstates which are unable to conquer one another, two and two could become five if the fuhrer wished it. That, so far as I can see, is the direction in which we are actually moving, though, of course, the process is reversible."
Russia is a kleptocracy and all these 'tests' are just another way to steal money. Kleptocratic billionaires can not keep being billionaires without such 'projects'.
> "Increasingly, authoritarian countries which want to control what citizens see are looking at what Iran and China have already done.
The US does the same. Indeed, the US takes down stuff globally, often by pwning a site's primary DNS servers.
But of course, they claim that they are only taking down "illegal" sites. But there's rarely (if ever) any sort of due process.
Edit: This is a well known fact. The FBI even brags about it, from time to time. But if any y'all want to claim that it's not, or is somehow distinguishable, please do share.
Edit: For example, the FBI took down a news site, which was arguably protected by the Constitution:
Rising balkanization, tariff wars, sanctions, isolationism and nationalism sets the table for future ”dark ages”-like declines and world wars. Sanctions, isolation and tariffs, each like eye-for-an-eye, makes the whole world “blind.” Overall, it’s another nail in the coffin of the mythology of perpetual progress, showcasing eras of decay, retreat, chaos, division and regression. Some points of the existing order need to be adjusted before corruption, greed, hate and narcissism scatter us like dust into the wind.
145 comments
[ 2.9 ms ] story [ 198 ms ] threadhttps://news.ycombinator.com/newsguidelines.html
Edit: you've been breaking the site guidelines badly and repeatedly lately.
https://news.ycombinator.com/item?id=21868444
https://news.ycombinator.com/item?id=21853510
https://news.ycombinator.com/item?id=21864399
If you keep doing this we're going to have to ban you again. I'd rather not, because you've also posted some good comments. Would you mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the spirit of this site more to heart? We're trying to have at least one place on the internet that isn't torn apart and degraded by the usual snark and aggression. If you agree that that's worth having, I'm sure you'll see how we need everyone to do their part to keep it that way.
Bonus points: you linked the same URL twice, you dummy.
These guidelines as you selectively enforce them are a motherfucking joke and the entire site knows it.
Also I was never banned, you truth-twisting faggot.
Fuck off and die loser.
Fixed, thanks.
Thought experiment: Can you imagine Russian satcom provider providing Internet service to US based customers in violation of the US law?
Rarely is technology a sole answer to social or political problem.
You missing out on some content is collateral damage, and that's not the government's problem. After all, there's government-approved content, and that should be enough.
So we don’t know what exactly they tested. Why is this news, let alone an international one?
Also, as far as I understand, what the Russians were officially saying was that they were developing fallback systems for the event if, in another bout of sanctions, Russia gets disconnected from the global internet. Which, given their standing with the international community, may be a reasonable thing to do. But the journalists present this story as Russia's voluntary step towards isolating itself from the global internet. I am not sure why.
I believe Putin wants to undo glasnost.
Honest, quality journalism is a fantasy. It never existed. Even Benjamin Franklin used his newspaper to influence elections by slandering his political rivals. Not to mention fake news[0].
[0]: https://www.saturdayeveningpost.com/2017/02/even-ben-frankli...
Both exist.
Nothing is free from bias - that much is true; that doesn't mean we should adopt your too-cynical attitude.
https://news.ycombinator.com/newsguidelines.html
Some potential benefits to Russia:
1. Thwart cyber attacks
2. Control information
3. Halt foreign online payments
There are of course downsides, but I think the original premise was security in the event of war / aggression.
That was my understanding as well.
I think the main concern of the Russian internet users is to get isolated from the rest of the internet indefinitely during peace time, in a way of China or North Korea. I am not sure we are seeing signs that the Russian government intends to go that far yet.
The Internet is a vital infrastructure element. Leaving the risk of potential disruption to some US congressmen's whims is not a very wise choice. Of course it can be used with bad intentions as well but so can anything else. I think I've already mentioned this in my older post and it was downvoted eagerly.
This is a claim made by the Russian government with little actual support as far as I know. It comes up every once in a while when the issue is mentioned, and is usually uncritically accepted.
https://www.forbes.com/sites/kenrapoza/2015/01/27/russia-to-...
I don't know that statement's veracity, but it seems credible.
It looks like you are the one looking for excuse. Following your logic Russia should really wait until threats become very serious then be hit in the face and only then react? I think you're asking a for bit too much Kumbaya.
Here:From the "JOINT MOTION FOR A RESOLUTION" from the European Parlament ( https://www.europarl.europa.eu/doceo/document/RC-8-2014-0118... )
" 12. Recalls that the restrictive measures taken by the EU are directly linked to the Russian Federation’s violation of international law with the illegal annexation of Crimea and the destabilisation of Ukraine, while the trade measures taken by the Russian Federation, including those against Ukraine and other Eastern Partnership countries which have recently concluded Association Agreements with the EU, are unjustified; calls for the EU to consider excluding Russia from civil nuclear cooperation and the Swift system; "
Now as far as it concerns the Internet there is even no real need to bring Swift example. Any country would be insane to let their Internet infrastructure under someone else's control. Question of course how much it will cost to build a replacement for situations if the things go sour. So for many countries, especially the ones that are on friendly terms with the US, they can let it slide. Not so much for Russia, China etc.
The news is that they can now isolate their Internet domestically and run a Russia-only WWW. They presumably could have shut it off completely from Day 1.
The utility of the web isn't the protocols it technology employed; it's the content.
I can imagine online banking with foreign entities would become a problem as well.
There are also media of a more liberal nature who can’t comfortably host in RuNet / being registered as Russian companies, so they exist outside. meduza.io being a prominent example
By whom? State actors can just launch attacks from computers that have both a Russian internet link and a link up to a internet providing satellite, no?
The way you actually reduce attack surface is to take the critical pieces off of it and minimize the paths to be watched, not the whole system. That would be like ensuring it is possible to close off all of the highways into Washington DC to response time for the three federal branches. If it was actually that damn important they would make and use secure tunnels. The only added benefit is an excuse to shut out protesters.
Not to mention mere independence isn't everything for system functionalities. Going to muscle powered factories to remove logistical dependence on power would be an obviously stupid move for example because the performance is so much worse. It is "selling ceramic knives that cannot be sharpened as never needing it" marketing deception of trying to cast a flaw as a strength.
Russia doesn't need pretense for control.
This is actually most useful for security. At least if you are attacked your national network will survive.
That is extremely unlikely to happen. Payments, banking, investment will be always connected, or placed abroad in the required way. At least for important enough transactions - probably not Amazon, but stock trades...
> That is extremely unlikely to happen.
That's what very much has already happened. Visa and MasterCard pulled their services a few years ago after another set of US sanctions. Also, if you are a business and using SWIFT to transact - US has the final say what you can and can not do. So now Russia has it's own payment card system MiR and working with China, India and even Iran on alternative to SWIFT.
I think it was a mistake for US to retract payment services. A smaller country may be severely affected by it indeed, but not a country of the size of Russia, China or India.
Now if payment networks were pulled, then what is next? Internet would be the logical follow-up. Hence the testing. It all makes perfect sense when you look at it from Rissia's side.
When did that happen? I’ve been paying with a Master Card just recently in Russia.
I find it interesting. I wouldn’t have known otherwise.
Because control over access to the web is a theme of lawmaking and enforcement here for almost ten years. This is not an isolated initiative. I'd also very much like to know what exactly the ‘test’ consisted of, but there's no doubt that Russian government dreams of having a Big Russian Firewall and the rest of the wonderful Chinese inventions.
Like e.g. having some government-mandated apps preinstalled on every phone sold here, which is coming into force in some following months. Like having messenger users identified by linking them to phone numbers, which is already a law and soon will be a law for email too (if I didn't miss it having been passed).
It is the news the exact meaning of which is open to interpretation. Given that those pre-installed apps can be uninstalled, we should at least allow a possibility that rather than being an insidious tactic to spy on users this is simply a clumsy protectionist anti-competitive legislation to stimulate growth of local tech companies.
Secondly, pretending that this is an independent event and that the government, Duma, courts and police have a shred of good will after what they were doing for the last ten–twenty years, is so laughable that your insistence on that interpretation is baffling and suggestive.
Even if by some miracle the apps are innocent at first, nothing prevents the FSB from slipping in different functionality after a year, or even in an update.
If by the "good will" you mean whether they are earnestly concerned with improving the quality of life of ordinary Russian citizens, then the answer is, most likely not.
But between this and the worst possible interpretation (oh, they must be doing this to allow the FSB easy access into everyone's phones) there are various other possible interpretations, involving various degrees of self-indulgence or maliciousness. Can it be cheap publicity or a symbolic gesture? The first sponsor of the legislation is a member of LDPR, a nationalist party which is obsessed with Russian identity and isolationism. Can it be part of the import substitution project that Russia has been pursuing (largely unsuccessfully, I understand?) since 2014, to loosen its dependency on foreign imports? Can it be a protectionist measure to help otherwise uncompetitive local businesses? I think any of these options is realistic enough to explain the existence of the bill, even without going all the way to regarding it as a covert Kremlin/FSB operation. Which of course it may be, but it is simply too early to tell. I am sure in half a year — or whenever distributors start pre-installing prescribed apps — security experts will let us know whether these apps, besides just being a nuisance, are actually doing something malicious. Then we will have actual facts at our disposal, not just worries and speculations.
Do you remember the much-maligned Yarovaya law from several years back? Has it had any scary practical consequences on the Russian internet?
Which is an issue that affects pretty much every smartphone with a default Android ROM: Google is baked deep in there, often there's a ton of additional smartphone vendor bloat and trackingware.
A lot, if not all of that data can be accessed by US intelligence agencies trough the third-party doctrine [0].
The same applies to the biggest social media companies out there, they are all US based: Billions of people, all over the world, tell Facebook their deepest secrets and most personal and private details.
For any non-American that's a massive OpSec risk just waiting to happen, its making large parts of populations suddenly very transparent and vulnerable to all kinds of nasty tactics like blackmail [1].
Which is one of the main reasons why countries like Russia and China push domestic alternatives: It's not all just about controlling the platform, the biggest part of it is giving their citizens a local alternative that doesn't mass-scale dox them to an "adversary state".
In that context, I consider it kinda weird how US Americans freak out over TikTok being Chinese and some app by Russian developers sending data to Amazon servers, supposedly being "massive security risks".
But when other countries don't want to give up their populations data wholesale to the US, that's suddenly made out as pure oppressive authoritarianism.
[0] https://en.wikipedia.org/wiki/Third-party_doctrine
[1] https://theintercept.com/2014/02/24/jtrig-manipulation/
As a Russian citizen it is not uncommon to go to jail for two years for expressing anti government views online, that kind of thing does not happen int he west - for now.
While at home we jail people for viewing "terrorist content online" [2], which is so vaguely defined that it regularly ends up being "The other sides PoV", if that PoV even manages to penetrate to the everpresent layer of moderation on social media [3].
After terrorism, the next thing is now "hate speech" [4], and as much as US Americans think they are immune to such trends, they really are not. US millennials increasingly welcome and actually demand more moderation because they think that's gonna solve their right-wing extremist problem.
[0] https://arstechnica.com/information-technology/2016/02/the-n...
[1] https://www.theatlantic.com/politics/archive/2013/10/saddest...
[2] https://www.bbc.com/news/uk-41479620
[3] https://www.mediapost.com/publications/article/327887/pbs-th...
[4] https://www.dw.com/en/germany-dozens-of-raids-over-online-ha...
Uh, I get that you want to highlight the hypocrisy of the west, but that was an astoundingly poor argument: By killing Pakistani the west silences criticism at home? And then as proof this happens you link to examples of domestic criticism?
Why are you adding this restriction? Rooting or replacing the system are totally valid of getting rid of these things.
I am not really trying to protect Russia here but articles like the one in the title are written for brain dead people. They should go try janitor work instead.
Because Russia is the bad guy du jour... They have to gal to try to not sell their country and assets wholesale to foreign interests, plus something kleptocracy something (which the West never minds when it comes to allies, or their own behaviour in Asia, L. America, Africa, etc).
So you get the usual barrage or news items, and people who can't even point Europe on the map (much less such subtlety as to point to e.g. France or Russia) feel like they can have an opinion.
The strategic implications are quite vast on a variety of levels: political, military, technical, economic.
The 'nationalisation' of the web into various national webs is a big deal.
Aren't there private and public keys involved ? Public keys are pre-packaged with clients (Firefox/Chrome/etc), so the state can't just change or fake the private keys.
Maybe they would force all clients to prepackage a government key and then change all infrastructure to pretend all websites use this public key for their https traffic?
Because sanctioning a country off the internet has never been done. It's not a credible threat given the topology. Russia is land adjacent to many countries that would be unlikely to participate in a partitioning led by the US, and such a partition would not be very effective if only some countries participated.
Neither North Korea nor Iran are or have been disconnected from the global internet or phone systems by outside countries, and they are the most sanctioned nations.
Not to mention Japan, to which they are directly connected via two distinct 640 Gbps links, Hokkaido-Sakhalin and Nadhodka-Naoetsu: https://www.submarinenetworks.com/en/systems/asia-europe-afr... and https://www.submarinenetworks.com/en/systems/asia-europe-afr...
As I read the articles, the "disconnection from the internet" seems to be one more tool in the toolbox for internal control. A disconnection will also prevent possible "outside influences" from amplifying problems during any sensitive periods (e.g. the time following Putin's eventual death).
President Vladimir Putin may hunt shirtless, fly with cranes, cuddle with tigers, etc. but he is not (yet?) immortal.
Once Putin dies, the people running the show need a successor for the supreme leader of the Russian Federation to step in fast and assert legitimacy, with force, if necessary.
Any dissent against the successor needs to be squashed quickly, otherwise any displeasure in the form of rioting runs the risk of spreading and giving the currently oppressed opposition chances to grow their influence.
Also, opportunistic power grab attempts by lesser players and regions need to be contained.
Edit: to be clear, I assume Putin will somehow keep his power even after he is officially not the President (after the 2024 elections).
One way to deal with this is context. In this case the pattern of Russia with regard to electronic free speech is pretty clear, so it's reasonable to assume these actions are at least partially motivated by something other than emergency preparedness.
Thesis: a lot of conservative America have a bit of a thing for the iron wall.
Pitching it thus, as if Russia were to build its own "Great Wall of China", or perhaps putting them in the "North Korea Internet, LOL!" category, probably catches eyeballs.
Although it has to be said that there are other supposedly more free western nations that have done similar dodgy things with their Internet, and didn't quite get the hard treatment in media-at-scale, but rather more of a velvet glove... Yes, 5-eyes nation citizens, you might ought want to take a closer look at the Anglo plans for the Internet, they're not quite savoury ..
This world needs an alternative to anything built by the USA. That way superpowers will have to go to the negotiation table on an equal footing. We don't want one bully. We need at least 5 bullies.
World Bank has never been important to Russia. You're right the US is dominating financial world right now which most of the world hates and its inevitable for something else to compete.
If the countries could sustain themselves without credit from them then they have no need to be involved. The worst is essentially snarky comments pointing out that the current management goes against orthodoxy/still hasn't paid them back from 1977. If the country succeeds despite going against their judgement then they just look silly until either the world bank revises their conventional wisdom or they get to say "told ya so!" when the shoe drops.
Austerity may do worse than an open credit pipeline in terms of growth and human impact but there are no guarantees that the creditor wouldn't mess that up as well and solvency is required to function in their role. While nice they literally can't be an infinite credit that never needs paid back fountain.
Nations are all bullies. To their people and externally. Without them, though, other bullies take their place. Usually, they're worse.
Be careful what you wish for - there were 5 bullies 105 years ago and we know what happened!
Wealthy warrior elites are left with terrible dilemmas with merchants. If they let merchants grow then their position slips (less elite) but the military position stays the same or grows from taxes. If they don't then their holdings become backwards and they weaken, but they retain their hold on power internally. They can try to plunder but that means war and even if successful running out of prey to hunt. Seizing territory spreads them thinner and gives more administrative burden.
Peace is really a terrible weapon of attrition against warrior elites. It forces them to stab themselves with Morton's fork repeatably.
The funny thing is that economic bullies find themselves in the same role, as they either become warrior elite literally (using force for gain) or metaphorically (using their economic clout as a cudgel) vs new challengers who themselves may render them irrelevant if they fail to innovate.
I wonder if this trend of closed borders limited information circulation could lead to the diminishing of companies that depend on the network effect and rise of the companies with hard tech.
There is no reason to think that "hard tech" (assuming you mean more physical hardware) would benefit as a field they aren't really competitors even in terms of sucking up talent. Isolation wouldn't give them an edge there.
Second as fragments would call for reinventing the wheel locally or possibly copying it to serve an insular market. We have already seen this with Cuban mechanics. They didn't become "the Detroit of the third world" producing cheaper cars for other nations, or even a divergent tech path for transit that was better in some way. They just essentially practiced at the art of antique automobile necromancy. Small players with adjacent bigger markets can innovate and scale up. Small players in small markets stagnate. The "small and local serves you better" is more meme than fact. People really want their parochial corner to be just as good but it hasn't worked out that way and stays small for several good reasons, and "choice" isn't one of them.
Same for China.
It has always been that way.
Uber - Yandex(russian alternative) etc.
I'm sure there's a lot of stuff you'd need to roll, I bet it would make for an interesting article :D
Normally I'd expect Globocorp to configure its intranet with, for example, a separate AS each for Germany and Russia. But the AS in Germany may be connected to the Russia AS via a 155 Mb/s leased line from Berlin to St Petersburg with BGP routers. The German AS may also connect via a corporate firewall to a public ISP in Germany, and the Russian AS to a public ISP in Russia.
It is theoretically possible, therefore for a user on a public ISP to connect via Globocorp's intranet to a public ISP web site in Germany.
Is there some technical or administrative requirement to prevent transit via corporate intranets?
Unless they are intending to provide transit, the only routes they would announce to peers in either country would be to their own network.
It never fails to amaze me how little attention is paid to these systems that can track, intercept and hijack the comms of mobile phone users of any country, internationally.
It is a long running rumor in Russian internet that Russian spies managed to tap UK politician phones with fake roaming requests in 2016.
They can afford to have 15% of the population with access to information and what not on the black market. The course of the country will be dictated by the beliefs of the other 85%, which will all buy into the 1000s of kaleidoscopic realities readily manufactured by Surkov & Co, and will all support every single action of the government.
Google Translate with some manual editing for clarity by me.
1: https://t.me/zatelecom
# 1: https://t.me/zatelecom/13046
"I got and decoded some materials from today's meeting of the Ministry of Digital Affairs on the exercises. Something tells me either a closed regime or not closed regime will be announced, but we won’t be able to get access either way. So, feed on some rumors. Let it be rumors from me. After [sunglasses] are my additions, probably mocking, will always follow. Based on what I heard and the slides, I can draw two additional conclusions:
the Internet is impossible to understand and nobody understands what needs testing;
️ THEY'RE CONFUSING the law “on sustainable Runet” and the law “on critical objects of information infrastructure”. These are different laws, each living in its own sandbox, this confusion has been going on since the very beginning of the draft law “on a stable Runet”
️️️ Some slides (for some reason labeled Positive Technologies):
⏰ On December 16 and 17, exercise scenarios were worked out to ensure the stability and integrity of mobile radiotelephone communications for the SS7 and Diameter protocols
All four federal mobile operators participated in the exercises. As part of the exercises, 18 attack scenarios were worked out for each operator - 12 through signal networks 2/3 of the SS7 generation and 6 through signal networks Diameter
️ The attacker was able to successfully carry out 62.5% of attacks through SS7 and 50% through DIameter The average attack detection time was about 2-3 minutes
During the exercise, all scenarios were completed in full. Testing out the scenarios for each operator was about 6 hours. On average, working out one scenario took about 20 minutes. [sunglasses] Grains of corn fried by each curator were eaten about 800 grams each. Drunk 24 liters of coffee. 46.5 kg of cookies consumed
LEARNING RECOMMENDATIONS
To increase the effectiveness of warning, detecting and blocking attacks through signaling networks on the side of the telecom operator, it is necessary to provide:
1️⃣ Attack detection tools through the SS7 and Diameter signaling networks, which will allow timely detection of attacks on individual mobile subscribers and the operator’s infrastructure
2️⃣ Telecommunication equipment settings that prohibit signaling messages that are not used to establish communications between operators, but can be used to conduct attacks on networks of telecom operators
3️⃣ Procedures and security tools that allow you to quickly block ataui through signal networks
4️⃣ Periodic external signaling network security audits
5️⃣ Leave the market if points 1-4 were as unexpected for the operator as for representatives of the Ministry of Digital
CONCLUSIONS ON THE RESULTS OF THE EXERCISES
In the Russian Federation, it is necessary to create a regulatory framework and a unified system for collecting and analytically processing information about attacks through signaling networks on the infrastructure and subscribers of mobile telecom operators, as well as connecting it to the State SOPKA [2/3 slide picture from 4 positions OPERATORS -> UNIFIED SYSTEM -> GASOPOK]
[sunglasses] Also in the Russian Federation, it is necessary to create a regulatory framework, to create a unified system for collecting and analytically processing information about attacks on WordPress and PHPNuke, as well as connecting it to GosSOPKA
[sunglasses] Also in the Russian Federation, it is necessary to create a regulatory framework to create a unified system for collecting and analytical processing of information about attacks on active switches, as well as connecting it to the Sta...
George Orwell, 1944
https://en.wikipedia.org/wiki/Internet_censorship_in_the_Uni...
I can imagine that US will also disconnect itself if hostile access to critical infrastructure is at stake.
China is permanently semi-connected for that matter.
The US does the same. Indeed, the US takes down stuff globally, often by pwning a site's primary DNS servers.
But of course, they claim that they are only taking down "illegal" sites. But there's rarely (if ever) any sort of due process.
Edit: This is a well known fact. The FBI even brags about it, from time to time. But if any y'all want to claim that it's not, or is somehow distinguishable, please do share.
Edit: For example, the FBI took down a news site, which was arguably protected by the Constitution:
https://www.deepdotweb.com/
... and you can see it through early 2019 here:
https://web.archive.org/web/*/https://deepdotweb.com