Russia Just Created Its Own Certificate Authority.

  Рет қаралды 361,871

Mental Outlaw

Mental Outlaw

2 жыл бұрын

In this video I discuss the certificate authority that the Russian government recently setup to avoid online sanctions, and what this means for the people that might be using it.
₿💰💵💲Help Support the Channel by Donating Crypto💲💵💰₿
Monero
45F2bNHVcRzXVBsvZ5giyvKGAgm6LFhMsjUUVPTEtdgJJ5SNyxzSNUmFSBR5qCCWLpjiUjYMkmZoX9b3cChNjvxR7kvh436
Bitcoin
3MMKHXPQrGHEsmdHaAGD59FWhKFGeUsAxV
Ethereum
0xeA4DA3F9BAb091Eb86921CA6E41712438f4E5079
Litecoin
MBfrxLJMuw26hbVi2MjCVDFkkExz8rYvUF
Dash
Xh9PXPEy5RoLJgFDGYCDjrbXdjshMaYerz
Zcash
t1aWtU5SBpxuUWBSwDKy4gTkT2T1ZwtFvrr
Chainlink
0x0f7f21D267d2C9dbae17fd8c20012eFEA3678F14
Bitcoin Cash
qz2st00dtu9e79zrq5wshsgaxsjw299n7c69th8ryp
Etherum Classic
0xeA641e59913960f578ad39A6B4d02051A5556BfC
USD Coin
0x0B045f743A693b225630862a3464B52fefE79FdB
Subscribe to my KZfaq channel goo.gl/9U10Wz
and be sure to click that notification bell so you know when new videos are released.

Пікірлер: 1 400
@FredOrSomething
@FredOrSomething 2 жыл бұрын
mental outlaw never fails to include anime gifs 💀
@thomzwiefler6305
@thomzwiefler6305 2 жыл бұрын
He's is Coomer Prime
@co9681
@co9681 2 жыл бұрын
@@thomzwiefler6305 he knows his audience
@johnsmith8981
@johnsmith8981 2 жыл бұрын
Come for the tech, stay for the waifus.
@KatzRool
@KatzRool 2 жыл бұрын
@@johnsmith8981 Kenny is mai waifu
@rgxx9081
@rgxx9081 2 жыл бұрын
Fr
@jose-pe
@jose-pe 2 жыл бұрын
I've always wondered how the internet would be in the Soviet Union, if it weren't dissolved. Guess we might know the answer soon
@jevvf3246
@jevvf3246 2 жыл бұрын
Look no further than China...
2 жыл бұрын
Soon soon... Have a nice one...
@snap_oversteer
@snap_oversteer 2 жыл бұрын
Oddly enough, .su domains were never removed and they are still in use.
@wealthybone2990
@wealthybone2990 2 жыл бұрын
@ Not China this is different wne would be better
@wealthybone2990
@wealthybone2990 2 жыл бұрын
But this isn't the Soviet union? There is no Soviet union and the internet would actually be a good place.
@kebien6020
@kebien6020 2 жыл бұрын
Just to clarify. The padlock means "We are certain that you are connected to a site that has control over that domain name, btw the connection is encrypted". It doesn't mean "you are on a secure site". This is mentioned in the vid, I just wanted to summarize.
@risingstar1309
@risingstar1309 2 жыл бұрын
Secure CONNECTION, not secure website. I am no disagreeing with you
@feitan8745
@feitan8745 2 жыл бұрын
same can be said about google or any other major website.
@echelecopao
@echelecopao 2 жыл бұрын
"We are certain that you are connected to a service that is presenting a certificate with a valid name (fqdn), and a trust chain which links to a root certificate that is trusted by your web browser" Transparent corporate web proxies don't "have control over all internet domains", yet they can mitm-intercept all the web traffic from employees using company computers because of the above.
@aggressivetoast
@aggressivetoast 2 жыл бұрын
How do i know then if its a safe website?
@kebien6020
@kebien6020 2 жыл бұрын
@@aggressivetoast That's the neat part. You don't.
@wacesferpit
@wacesferpit 2 жыл бұрын
At the same this is pretty damn sketchy, it is also super sketchy how access to backbone technology is all in the hands of American tech companies "we don't like your country, now your entire population should not have access to being able to do banking securely, hosting, being able to make money online or anything"
@notsojharedtroll23
@notsojharedtroll23 2 жыл бұрын
Sketchy^n
@twinters8
@twinters8 2 жыл бұрын
The tech companies increasingly own all of us. This is just the next logical step of deplatforming. Now its happening against a whole country at a time lol.
@sylviam6535
@sylviam6535 2 жыл бұрын
Big Tech has overplayed its hand in using its power to punish. It’s dreams of being global systems have died now. Each economic zone will create its own systems.
@VertegrezNox
@VertegrezNox 2 жыл бұрын
Help Americans retake the big tech companies that our taxes paid/stillPaying for, let's make it FOSS. Amazon, Google, Apple, Microsoft and on have defrauded the American public and acted as an abusive "arm of government" such monopolistic practices are a violation of both domestic laws and international fair trade business laws. Anyway, be sure to let randoms or your pals know that US tax payers funded big tech, and we the people want our data out of the hands of Palentir and we want to FOSS the infrastructure that our taxes paid for. Amazon can go eat a bag of rolled quarters.
@whitewolf262
@whitewolf262 2 жыл бұрын
I feel bad for the average Russian civilian. It's not their fault they're stuck in a dystopian nightmare.
@jimjongun
@jimjongun 2 жыл бұрын
The truth comes out, he wasn't banned from posting for a week, but actually suffering from crippling Vtuber addiction. We've all been there
@TheSetkon
@TheSetkon 2 жыл бұрын
Bullshit... No one gets addicted to Vtubers for only a week.
@thomas.thomas
@thomas.thomas 2 жыл бұрын
@@TheSetkon lol
@z3ro216
@z3ro216 2 жыл бұрын
@@TheSetkon what's the allure of vtubers? I've seen things of them but I don't see how it's addicting
@jimjongun
@jimjongun 2 жыл бұрын
@@z3ro216 imagine women but funny
@king_james_official
@king_james_official 2 жыл бұрын
@@z3ro216 coomers like looking at anime girls
@thesuccinsuccess
@thesuccinsuccess 2 жыл бұрын
As a cybersecurity major, your videos help me apply what I learn to real scenarios, and I appreciate that you explain everything in a way it's easy to understand. Thank you!
@orlandofurioso7329
@orlandofurioso7329 2 жыл бұрын
I love when good knowledge is spread on the internet, gives me hope
@dickheadrecs
@dickheadrecs 2 жыл бұрын
this must be the new way to major in cybersecurity. the old way was to get arrested by the fbi
@KnutBluetooth
@KnutBluetooth 2 жыл бұрын
Except he's wrong and describing something that might have been possible 5 to 10 years ago. Because most correctly configured websites have CAA DNS records and HSTS.
@reyrose3689
@reyrose3689 2 жыл бұрын
Nice pfp
@thesuccinsuccess
@thesuccinsuccess 2 жыл бұрын
@@KnutBluetooth Can you explain more about that? He explained a lot of what I have to read in my textbooks so I assumed it was accurate. I am only in my first semester with this major so I don't know much lol
@_abdul
@_abdul 2 жыл бұрын
For those with the basic knowledge of SSL Certificates, http vs https and trust authority, Skip to 7:55 for the video in context of Russia.
@arshiaseyyedshakeri890
@arshiaseyyedshakeri890 2 жыл бұрын
It took me 6minutes and 57 seconds to get to your comment. Thanks for that minute of my time you saved
@PinkBunnyCorporation
@PinkBunnyCorporation 2 жыл бұрын
I needed the info, but upvoting for other big brains who don't need it.
@charleswhite688
@charleswhite688 2 жыл бұрын
FemonicRBLX I love you
@aquilafasciata5781
@aquilafasciata5781 2 жыл бұрын
Man you should do this on all videos
@-41337
@-41337 2 жыл бұрын
"that's like remembering the phone number of every single one of your friends. that doesn't make sense" Damn that makes me feel old, as this is exactly what we did. It was common to have memorized two dozen or more phone numbers. Friends, family, work, etc.
@nevermore3055
@nevermore3055 2 жыл бұрын
It's just how things were before people became dependent on technology
@topazish
@topazish 2 жыл бұрын
@@nevermore3055 because telephones aren't technology lol
@annybodykila
@annybodykila 2 жыл бұрын
I still remember my childhood number and my first cell number and best friends number from like 6th grade, havent been in school for almost 20 yrs
@depralexcrimson
@depralexcrimson 2 жыл бұрын
@@annybodykila i know one of my oldr friends still remembers his home ph. number, his friends telephone numbers (home numbers) his mom's cell phone number from 15 years ago and a lot of other stuff LOL funny how our brain remembers the most useless things ever.
@desktorp
@desktorp 2 жыл бұрын
It's funny, I can still remember my friend's parent's home phone number but couldn't tell you my friend's cell phone number.
@KaiBannon
@KaiBannon 2 жыл бұрын
Russia anti-censorship security V.S. social media anti-censorship bypasses.
@vidyagaems4063
@vidyagaems4063 2 жыл бұрын
Special content operations*
@nbarrager
@nbarrager 2 жыл бұрын
"Just send me the virus link" A few days ago, someone I didn't know messaged me and I responded with "what is it today? gift cards of crypto?"
@JamesWilson01
@JamesWilson01 2 жыл бұрын
Hey, Escobar Cash is legit! 🤪
@aarosundvall
@aarosundvall 2 жыл бұрын
@@JamesWilson01 Don't talk shit on Hitlerwealth!
@valletas
@valletas 2 жыл бұрын
Fun fact many goverment websites from brazil do not have a certificate Gov websites have gotten better but most of them are still shit here in brazil
@kaizarchan
@kaizarchan 2 жыл бұрын
Indeed I wonder if I will make a carrer fixing the gov sites, or the way these are awfully made is intentionally designed by CIA.
@jiwujang3508
@jiwujang3508 2 жыл бұрын
Same for south korea as well
@Gigachad-mc5qz
@Gigachad-mc5qz 2 жыл бұрын
neither do russian sites i think
@AmunRa1
@AmunRa1 2 жыл бұрын
Governments often don’t shell out the bucks for the good web developers and instead get the lowest bidder.
@kryststar6800
@kryststar6800 2 жыл бұрын
I think the major problem with this, is the fact that the user is forced to only use government specified browsers that can use the government created certificate service.....Sounds like an absolute monopoly with absolute power over what can be seen, posted, shared, and disseminated.... Seems like a perfectly dystopian internet experience....
@fallencrow6718
@fallencrow6718 2 жыл бұрын
Like google?
@kryststar6800
@kryststar6800 2 жыл бұрын
@@fallencrow6718 But imagine google actually having a whole an complete monopoly over all usable internet service.....Sounds Terrifying to me :(
@FrogsRghey
@FrogsRghey 2 жыл бұрын
You mean like the great firewall of china? Lol
@kryststar6800
@kryststar6800 2 жыл бұрын
@@FrogsRghey Yeah more like china.....
@ItumelengS
@ItumelengS 2 жыл бұрын
@@kryststar6800 more like Google actually
@your_new_sjw_waifu
@your_new_sjw_waifu 2 жыл бұрын
I've legit been wondering how sanctions would affect CAs in Russia.
@whitepaperkat67
@whitepaperkat67 2 жыл бұрын
Wait a second. Do I know you aren't you pleroma or Mastodon?
@AmalekIsComing
@AmalekIsComing 2 жыл бұрын
Yeah
@armmelon327
@armmelon327 2 жыл бұрын
@@whitepaperkat67 yea, i had to double take when i saw him
@igorchistyakov8876
@igorchistyakov8876 2 жыл бұрын
@agapp11able and one year prior to that One who shall not be named made changes to the Constitution in order to protect children and Russian culture. And also to grant himself a lifetime diplomatic immunity among some other things. Back in a day I thought he simply didn't want to answer for palaces tHaT aRe PhOtOsHoPeD aNd NoT fOr HiM aNd LoOk At *YoUr* GoVeRnMeNt FiRsT! But boy did I not expect political ambitions to really hit the fan. Damn.
@igorchistyakov8876
@igorchistyakov8876 2 жыл бұрын
@agapp11able kinda, but not really. Intellectuals are pretty much on the same page most of the time, while "common" people would be surprised, how much alike they really are, if it wasn't for the language barrier. Apart from fetishizing suffering: Russian people take great pride in their ability to indure and overcome adversities and never yield or whine. Older generation, that is, I can't see this mindset being all that prevalent in the youth. If you have any other traits in mind, that are more or less unique to Russian culture, I would appreciate your insights. I think it has to do with newly (welp, 2012 sort of "new") discovered shale and slant gas deposits in Ukraine. Most of which are in Crimean exclusive economic zone and on the northwest of DNR. The peninsula itself is too expensive to hold with the Crimean channel blockage, hence the imperative to clear the dam and gain foothold by the Dnieper. The latter being the only natural border between Russia and Europe apart from Carpathian mountains, so we have the rest of the conflict: Donetsk and Lugansk won't last too long as buffer zones without it. Russian economy can't afford big competitors in Europe, hence the blitzkrieg special gamble. All or nothing. We'll never know for sure, what were the actual reasons, but at least this rationale helps me see some logic in what is happening. As horrible as it is.
@szaszm_
@szaszm_ 2 жыл бұрын
1:53 DNS servers are rarely hacked, but if they would get hacked, then the attacker could just buy a certificate for the domain, and TLS is circumvented. You only need to demonstrate that you control a certain domain to buy a certificate for it. What TLS really protects against is man in the middle attacks, when the attacker hacks your network, or you're on an insecure wifi, or your ISP/government are hacking. I used to demonstrate that with rogue wifi APs with an SSID like McDonalds or something that people's phones will automatically connect to.
@codegeek98
@codegeek98 2 жыл бұрын
I'd recommend reading Christopher Soghoian's 2011 paper "Certified Lies" [edit: BE SURE to find an uncensored copy; the appendix includes some very damning supporting material, but many _academic_ sources omit it] to put a big asterisk on TLS' protection against governments; the tldr is there are so many intermediates that are so poorly run that it's nearly inevitable that the NSA has coerced a few into giving them either illicit certificates or the keys outright
@jan_harald
@jan_harald 2 жыл бұрын
@@codegeek98 and I think that it's highly likely Let's Encrypt has also probably given them at least read-only access, given how it's such a critical piece, with nearly everyone who's not straight buying their certs, using LE
@joshuavillwo
@joshuavillwo 2 жыл бұрын
@@jan_harald But Read-Only access means nothing. These days all certificate issuance is public information anyways thanks to "certificate transparency." (Except for illicitly-issued ones, I'm sure)
@szaszm_
@szaszm_ 2 жыл бұрын
@@codegeek98 Yeah, the NSA can do pretty much anything, but at least it protects against other, less powerful APTs / resourceful and sophisticated adversaries, like the government of Kazakhstan as mentioned in the video. I believe it can protect against Russia as well. Probably not China, because they control the hardware.
@jan_harald
@jan_harald 2 жыл бұрын
@@joshuavillwo it means a LOT to have read-only access to your passwords and stuff, to any private messages you send via web chat, etc etc certificate transparency tells you what CA issued what cert to who, and when, which is not what I'm talking about here
@hojjat5000
@hojjat5000 2 жыл бұрын
I remember hearing about this back in Iran 10 years ago. They used a Dutch certificate authority to mitm Google users. I wish we could move on to a better system than this.
@beverly9486
@beverly9486 2 жыл бұрын
1:25 “imagine trying to remember all the phone numbers for your friends… it wouldn’t make since”. Me: well buddy back in my day…
@cmnidit4444
@cmnidit4444 2 жыл бұрын
Back in your day it still didnt make sense to do.
@uniquechannelnames
@uniquechannelnames 2 жыл бұрын
@@cmnidit4444 It happened simply due to the fact most people dialed numbers manually back then, so the number got cemented in your head anyway. And since calling was more prevalent, you dialed those numbers more often too.
@foxtailedcritter
@foxtailedcritter 2 жыл бұрын
I don't root for russia but at this point I'm not surprised anymore.
@raylopez99
@raylopez99 2 жыл бұрын
Russia is an analog world "root virus"
@wealthybone2990
@wealthybone2990 2 жыл бұрын
Who do you root for then?
@ereder1476
@ereder1476 2 жыл бұрын
FFS, geopolitical conflict isn't a game. You don't root for a team...
@sierra991
@sierra991 2 жыл бұрын
pun intended?
@berthold64
@berthold64 2 жыл бұрын
@@ereder1476 not my problem
@Bigfoot_With_Internet_Access
@Bigfoot_With_Internet_Access 2 жыл бұрын
They just now thought to do that? I would have assumed this is something every country has, but then again I'm just a bigfoot so what do I know
@Contractor48
@Contractor48 2 жыл бұрын
That was so well explained. I am glad I subscribed to this channel.
@miyukoi
@miyukoi 2 жыл бұрын
Russian here. First time hearing about this certificate thing ngl but was a nice watch. Thanks for the information not gonna ever install that crap
@jafarcusto2125
@jafarcusto2125 2 жыл бұрын
Russian here. And will install. And don't give a fuck.
@miyukoi
@miyukoi 2 жыл бұрын
@Valar Melkor not a single one I use asked for this so far so. Anyways prob gonna use VPN if anything, I proxy most of my traffic this days anyway
@user-og6hl6lv7p
@user-og6hl6lv7p 2 жыл бұрын
@@miyukoi probably won't be able to get around this one Ilyich.
@JohnDoe-ph6if
@JohnDoe-ph6if 2 жыл бұрын
@agapp11able >"made our own" what, spyware? lmao at least with america you're out of reach legally, good luck with FSB on your ass at all times
@bajszosklarinetmadar3957
@bajszosklarinetmadar3957 2 жыл бұрын
that's some next-level cuckoldry
@matthewmcclain1316
@matthewmcclain1316 2 жыл бұрын
Dude, this was really good video. Well put together and packed with info. On a topic that I've wondered about for a long time too. Good job.
@charleswhite688
@charleswhite688 2 жыл бұрын
You're right.
@Dervraka
@Dervraka 2 жыл бұрын
In the early days of the internet we really DID have to know those long numerical IP addresses. In fact there was a booklet, sort of like a telephone directory that got updated a couple times a year with valid IP addresses and what site they would take you to.
@HeavenHalos
@HeavenHalos 2 жыл бұрын
The anime gifs make this infodump easier to digest. Stay a legend, man.
@soulextracter
@soulextracter 2 жыл бұрын
1:23 "..it's like, imagine trying to remember the phone number for every single one of your friends. That doesn't make sense.." Holy shit do I feel old now. First day of kindergarten we memorized our own home phone numbers, and then we always memorized the home phone numbers of our closest friends and family. I still remember like twelve different numbers from my childhood, some of which are out of service today!
@ianbell9041
@ianbell9041 2 жыл бұрын
"Imagine remembering the phone number of all your friends.. that just wouldn't make sense." This is how it was done before cell phones. I'm not even that old but I still remember phone numbers of some of my friends from elementary school.
@nafees_ur_rehman
@nafees_ur_rehman 2 жыл бұрын
They're note down in a notebook
@salsamancer
@salsamancer 2 жыл бұрын
Yes we never had a rolodex or a contacts book. We all memorized every number we needed.
@jakob4112
@jakob4112 2 жыл бұрын
Uhhhh, maybe you- as a kid- only had to remember them. functioning adults needed a contacts book however
@stale2665
@stale2665 2 жыл бұрын
The problem with this is that a single web site like youtube might have dozens of IP addresses, because they have load balancing servers all over the world. Maybe you remember the ip to the youtube server closest to you in seattle, but then you're going on a business trip to london and the ip you remember is now super slow. Also, remember phone books? Those enormous books with a thousand huge pages? That's basically an analogue DNS server.
@ianbell9041
@ianbell9041 2 жыл бұрын
@@jakob4112 I am not saying that every single number was memorized. However, all close family members, family friends, etc were memorized numbers. My parents actually taught us kids to memorize the numbers in case there was a problem because that was "normal" at that time (2000s). My friends knew those numbers as well. I do remember a little contacts book that also held the phone number for the doctor's office, dentist office, etc. If I ever forgot someone's phone number I would just ask my parents and they would recite it to me. There are movies that reference this common behavior and older people I speak to mention old numbers that they still remember which are no longer relevant to them.
@oliversmeeton
@oliversmeeton 2 жыл бұрын
My school uses a proxy server that forces you to use it's certificate and apparently they are even expelling people who use VPNs.
@cherubin7th
@cherubin7th 2 жыл бұрын
If Russia can use this for a man in the middle attack, then so can the old certificate organisations from the US, and are doing this. Make a video on how to prevent the USA from making a man in the middle attack.
@abcd-kz9vw
@abcd-kz9vw 2 жыл бұрын
Exactly! All "Russia could do this bad thing, Russia could do that bad thing..." blah blah blah... That only means the US could have been able to do all those bad things all along for decades.
@Moks89
@Moks89 2 жыл бұрын
There'd be whistleblowers.
@typedef_
@typedef_ 2 жыл бұрын
@@Moks89 Really ? Snowdens are few and far between. Most people involved in this kind of stuff love it and love to keep their mouth shut.
@mrED123
@mrED123 2 жыл бұрын
Such a well put together video and that transition to Russia’s certificate was flawless. Thanks!
@banks3388
@banks3388 2 жыл бұрын
Interesting, so what you're saying is that Russia is basically building it's own digital and financial infrastructure from the ground up which is more or less invalidating Western sanctions?
@pharder1234
@pharder1234 2 жыл бұрын
Exactly, quite soon it seems there will be a divided internet and financial system. One for the west and Europe and another for Russia China and Eurasia
@sylviam6535
@sylviam6535 2 жыл бұрын
China already has. Eventually, all the major economic zones will. They have seen how vulnerable they are depending on US tech.
@VertegrezNox
@VertegrezNox 2 жыл бұрын
It's all WEF/NWO agenda, y'all playing right into it. Dividing up the internet so that global communication becomes impossible. So you won't see the riots IN Australia or NewZeland or Canada or Ukraine etc etc. The same players from Downing Street are behind destroying your economies, this is by design and it doesn't take too much digging to hear this straight from their own mouths in recordings archived in places scattered throughout the interweb. Russell Brand been talking about some of the evidence coming out though, great channel for waking up normos.
@sylviam6535
@sylviam6535 2 жыл бұрын
@@VertegrezNox - And you think that a global system run by abusive US Big Tech is better?
@sylviam6535
@sylviam6535 2 жыл бұрын
@@pharder1234 - I predicted that some time ago. These are strategic industries now, and must be locally based.
@pekkakoskinen5763
@pekkakoskinen5763 2 жыл бұрын
Watame sheep in the last vid, and now confused Fubuki... can't tell if Kenny fell through the Hololive rabbithole or if he's just spending too much time lurking on /g/ lately :p
@ozzy2361
@ozzy2361 2 жыл бұрын
Thanks for always sharing your knowledge. Learned a lot from your channel
@BlueIsLeet
@BlueIsLeet 2 жыл бұрын
Based content
@generallyunimportant
@generallyunimportant 2 жыл бұрын
Based content
@zbjz
@zbjz 2 жыл бұрын
More videos on SSL and certificate authorities please! I am very interested in learning more
@hsharma3933
@hsharma3933 2 жыл бұрын
It’s important to realize that trust in a practical sense just means the issuing CA’s certificate is in your host os’s trust store. For windows that’s the crypto api (CAPI) store
@KotleKettle
@KotleKettle 2 жыл бұрын
And again, thanks for explaining everything to normies like myself. Much love 💕
@vladislavkaras491
@vladislavkaras491 2 жыл бұрын
Thanks for the video! It was pretty interesting to watch!
@ShizaruBloodrayne
@ShizaruBloodrayne 2 жыл бұрын
The more I learn about how much of a joke cyber security is, the more I'm coming to terms that just using cash for everything makes the most sense. I already suck at managing my personal life. Having to manage my cyber life like I need to be coding everything on Linux just seems too hectic for me. I'm better off fending off a mugger with my bare fists than I am trying to hide my tracks online for every little tiny thing when all I'm trying to do is just play some damn video games and watch videos lmao.
@Bigoldgrizzly1337
@Bigoldgrizzly1337 2 жыл бұрын
Superfish was an example of certificates gone bad.
@danieldietz8292
@danieldietz8292 2 жыл бұрын
Love these info segments. Thanks friend.
@forytube4998
@forytube4998 2 жыл бұрын
Every country should do the same. Too much risk to put the trust on Third Party CA
@46620
@46620 2 жыл бұрын
Weeb shit at the start: Bottom left: Yoshino Koharu (Sakura Quest) Bottom right: Fubuki (hololive) Top left: Karen Kujo (kiniro mosaic) Bottom Middle: Kurumi Nanase (Menhera Shoujo Kurumi-chan)
@Monkechnology
@Monkechnology 2 жыл бұрын
Mental Outlaw, is it true that Russia will legalise pirating? It would be huge ngl
@user-rg5tk3sw6v
@user-rg5tk3sw6v 2 жыл бұрын
There were some rumours, but the government refused to do so.
@Keepontakingit
@Keepontakingit 2 жыл бұрын
Just saw an article about how Russia might re-open all the Mcdonalds restaurants by lifting the trademark restrictions depending on how everything goes. It's def on the table I'd say.
@NobleRaider2747
@NobleRaider2747 2 жыл бұрын
The anomaly. Do we proceed? Yes. He is still... Only human.
@debtminer4976
@debtminer4976 2 жыл бұрын
@@Keepontakingit If they were smart, they'd just repurpose those restaurants to serve good food. Fuck McDonalds.
@AngelaMerici12
@AngelaMerici12 2 жыл бұрын
@@Keepontakingit And opening their doors to obesity?? Is better as they have it right now.
@mishrasidhant
@mishrasidhant 2 жыл бұрын
Your explanations are on point! Ty!
@lostinthesky1381
@lostinthesky1381 2 жыл бұрын
Thank you, very educational
@lonterel4704
@lonterel4704 2 жыл бұрын
Hi from Russia. Don't worry, we are fine
@BuetifullPersun
@BuetifullPersun 2 жыл бұрын
Hail comrade
@fleshtearer9454
@fleshtearer9454 2 жыл бұрын
Still fine, tovatish
@gigiduru125
@gigiduru125 2 жыл бұрын
I'm surprised they don't have one yet. I live in a small country in eastern europe and we have a local company which runs an internationally recognized top level root CA, like included in windows. Ofc the company has deep ties with the local secret service and military and stuff.
@faceofdead
@faceofdead 2 жыл бұрын
very informative, thank you!
@djnikx1
@djnikx1 2 жыл бұрын
👍Nicely explained! Cheers!
@happytree5647
@happytree5647 2 жыл бұрын
yay new Mental Outlaw upload!
@happytree5647
@happytree5647 2 жыл бұрын
edit: very informative as always, keep up with the great content o7
@InfiniteAZE
@InfiniteAZE 2 жыл бұрын
thanks for info!
@BriefNerdOriginal
@BriefNerdOriginal 2 жыл бұрын
Very clear explanation. Thanks
@multirampage1
@multirampage1 2 жыл бұрын
16:47 Using certificates from Chinese CAs is probably the best move, big tech will probably not do anything to those lol.
@AceOfHearts1498
@AceOfHearts1498 2 жыл бұрын
Don't think the Russians would want the Chinese to be able to spy on them though.
@multirampage1
@multirampage1 2 жыл бұрын
@@AceOfHearts1498 I didn't think of that, that's a good point.
@multirampage1
@multirampage1 2 жыл бұрын
@@AceOfHearts1498 Hey I just looked it up and apparently CAs don't store private keys of issued certificates, how would they spy on you then?
@abcd-kz9vw
@abcd-kz9vw 2 жыл бұрын
The moment the American big tech does a thing to those, it will be the end of apple, end of apple fanboys. No more iPoon. No more M1 MacBock toys for them. They will panic "OMG! Where is my iPoon?", "Oh no! I can't live without my iPoon! Give me iPoon Max Pro Now! I need it!"
@cosmicdot.
@cosmicdot. 2 жыл бұрын
Mental Outlaw is secretly a weebo.
@pekkakoskinen5763
@pekkakoskinen5763 2 жыл бұрын
secretly?! :o
@mattmurphy1065
@mattmurphy1065 2 жыл бұрын
If I get hacked, they’ll see my mental outlaw addiction.
@user-qj9ye1uv8g
@user-qj9ye1uv8g Жыл бұрын
"Imagine trying to remember the phone number for every single one of your friends" Grandmas memorizing the phone numbers of the entire extended family, the entire village/community/neighborhood, their friends, and acquaintances by heart (even when using a smartphone) be like
@chanpasadopolska
@chanpasadopolska 2 жыл бұрын
Is there any firefox\chrome extension that's remembers dns number for bookmarks instead of it's http address? It would be helpful sometimes.
@tissuepaper9962
@tissuepaper9962 2 жыл бұрын
It's called a notebook. Return to monke.
@Abu_Shawarib
@Abu_Shawarib 2 жыл бұрын
browser already caches most stuff
@dankdreamz
@dankdreamz 2 жыл бұрын
You could just add them to your host file.
@CubicApocalypse128
@CubicApocalypse128 2 жыл бұрын
>dns number The word you're looking for is IP address.
@mskiptr
@mskiptr 2 жыл бұрын
@@dankdreamz Yep, /etc/hosts is exactly that
@NyanGeneral
@NyanGeneral 2 жыл бұрын
as a computing student your videos are amazing. as an artist, your videos are also amazing, more for the journalism. you are definitely one of the best channels on youtube, and i constantly share your videos with my classmates.
@hahayes1122
@hahayes1122 2 жыл бұрын
very well explained , nice one !
@robertshockley755
@robertshockley755 2 жыл бұрын
Great information and advice.
@robertpaulson8790
@robertpaulson8790 2 жыл бұрын
This was a rather long way of getting to the point that you've been man in the middling my youtube sessions.... I promise I just like art style
@Kaizushiya
@Kaizushiya 2 жыл бұрын
Comparing remembering IP addresses to remembering your friends phone numbers as being difficult? Oh how times have changed.
@the_gost_gamer3841
@the_gost_gamer3841 2 жыл бұрын
thanks for the anime illustrations it helps the understanding
@anthonyyu4249
@anthonyyu4249 2 жыл бұрын
Keep up the great work
@deepspacewanderer9897
@deepspacewanderer9897 2 жыл бұрын
Is there a (relativelty easy) way to mark a certificate authority as partially trusted, so that, if i trust it or not, would vary on a site by site basis? Because, like, i would trust this new vertificate authority if i'm connecting to some russian government website, but not if i'm connecting to, lets say, youtube. Although, considering the levels of corruption, i wouldnt want to trust it even when connecting to govt websites, because i wouldnt be surprised, if, sooner or later, either the private key will be sold/stolen, or there will be a certificate(s), issued for a fake govt website(s). But i guess i wont really have a choice.
@aaraviii
@aaraviii 2 жыл бұрын
Use Yandex Browser for the govt activities.
@Computerdude1500
@Computerdude1500 2 жыл бұрын
@@OggerFN That only works if the program isn't reading them from a random pem file somewhere in the filesystem. Linphone (the SIP softphone app) likes to do that.
@yvrelna
@yvrelna 2 жыл бұрын
If you want to partially trust a CA on a site-by-site basis, you might as well just configure the browser not to trust the CA at all. Just add the website certificate into your trust Exception list. You're going to have to decide the site certificate yourself anyway.
@jhoughjr1
@jhoughjr1 2 жыл бұрын
idk if that makes sense. If the cert is trustable for one site, its trusted for all, or trusted for none.
@kras_mazov
@kras_mazov 2 жыл бұрын
Use a VM.
@davidyoder5890
@davidyoder5890 2 жыл бұрын
I take major issue with citizens being punished for the actions of their leaders. Just remember that necessity is the mother of invention. With all of these sanctions from governments and big tech, the outcome will be that the Russian people will continue to march forward. What the world is doing right now will force Russia to develop all of this tech on their own - this will likely lead to more national pride, new products and services, and will diversify Russia's exports - in short these measures will make them stronger.
@user-xp1xg2dv6i
@user-xp1xg2dv6i 2 жыл бұрын
it seems like this was Putin's - or of whoever might be behind him - plan. He couldn't have not expected such an outcome.
@privacyhelp
@privacyhelp 2 жыл бұрын
Look china, the US banned them from ISS. But now china can made their own space station, meanwhile other countries still crying and depend to US for space programs
@glebb..3416
@glebb..3416 2 жыл бұрын
Looks like it... Russians anounced that they will beginn doing their own phones, laptops and other tech. And im sure after a few years they will manage to do it because they dont have other options. Even chinese phones are now more expensive in Russia.
@JhoTerra
@JhoTerra 2 жыл бұрын
there is already a whole history behind soviet era tech that makes me doubt it will really go that way
@glebb..3416
@glebb..3416 2 жыл бұрын
@@JhoTerra The Russian federation and the USSR are two different things. Also what was the problem with soviet technology?
@chromerims
@chromerims 2 жыл бұрын
👏You're crushing it
@matthewwiddows6319
@matthewwiddows6319 Жыл бұрын
All that needs to happen is the major vendors remove trust for the new russian authority, then will be no different to a self signed.
@Cutlazz
@Cutlazz 2 жыл бұрын
Never thought I’d see the day mental outlaw mentions VTubers
@bestledisthe
@bestledisthe 2 жыл бұрын
I see, a Man of Culture
@teacon7
@teacon7 2 жыл бұрын
this vid oughtta be labelled 'educational' ...all current events aside, this seems like a good breakdown on how ssl works (/worked). Thanks.
@chrism4008
@chrism4008 2 жыл бұрын
Great explanation!
@thomasmaughan4798
@thomasmaughan4798 2 жыл бұрын
In the United States there's already a rather large MITM operation, called "Cloudflare". You get the padlock and everything, but if you actually inspect the certificate, it isn't what you thought you were going to. Cloudflare is its own CA, Certificate Authority, and consequently it affirms that its customers are legitimate so you get the "padlock" symbol. So instead of going directly to a particular server, you are going to a *proxy* which inspects your packets and then re-packages them for transport to the actual server; and THAT link can be secured by the "real" server certificate or not secure at all. When there's a malfunction in Cloudflare, customers make phone calls to banks and whatever but it isn't the bank's fault and indeed there's not really anything the bank can do about it. "Fiddler" is a nifty diagnostic program that is a MITM proxy *right on your own computer* and it requires to install the Fiddler root certificate so that your browsers think they are talking to whatever but really they are talking to Fiddler. It makes possible to diagnose problems with websites that use HTTPS.
@liyifenn
@liyifenn 2 жыл бұрын
Cloudflare is not a MITM operation. It's primarily a DDoS mitigation company and it's been around for a *loong* time.
@nisetsu
@nisetsu 2 жыл бұрын
Install another copy of Firefox, if you have regular Firefox already you can get Beta, Developer Edition or Nightly, install certificate, now you can chose if you want to get mitm by NSA or KGB. And if you think that NSA doesn't have keys from all the western CAs I got a bridge to sell you.
@My_Old_YT_Account
@My_Old_YT_Account 2 жыл бұрын
Or just take the portable version
@TheSuperBoyProject
@TheSuperBoyProject 2 жыл бұрын
I know right? Everything is so messed up on the way it's set up it's insane. I'm sure there are methods on encrypting packets without having a massive eye surveiling you but they are purposefully not implemented.
@Anti-FreedomD.P.R.ofSouthKorea
@Anti-FreedomD.P.R.ofSouthKorea 2 жыл бұрын
Great info.
@Rarog204
@Rarog204 2 жыл бұрын
Hey man, wondering if you are going to make a video on DuckDuckGo's most recent announcment on twitter, to which I find ridiculous.
@straightupanarg6226
@straightupanarg6226 2 жыл бұрын
What was it?
@Rarog204
@Rarog204 2 жыл бұрын
@@straightupanarg6226 They are going to "rank down" searches that goes against their views, so basically they are becoming Google but with less budget and no selling points.
@kaizarchan
@kaizarchan 2 жыл бұрын
@@Rarog204 So trashy, I now I have no reasons at all to use this piece of s*.
@HamguyBacon
@HamguyBacon 2 жыл бұрын
@@PefectPiePlace2 duckduckgo is google search engine except it removes some manipulation. If you want a real search engine use Yaccy.
@Ultra289
@Ultra289 2 жыл бұрын
@@HamguyBacon yaccy? Hmmmm
@carbinepeepoo
@carbinepeepoo 2 жыл бұрын
This is gold for many of us political dissidents.
@rabbigaschambergholocauste4519
@rabbigaschambergholocauste4519 2 жыл бұрын
@@100c0c it will be good for western dissidents, think snowden. Its useful for them to leverage forces that cause instability in rival nations.
@carbinepeepoo
@carbinepeepoo 2 жыл бұрын
@@100c0c The point is that there will be a multipolar world order as countries like Russia and China start to have control over their own sphere of influence. The US government cant project power the same way that it used to in the 90's and early 2000's.
@Taybitchz
@Taybitchz 2 жыл бұрын
This analogy! 🤣🤣 "It would be like having to remember all of your friends phone numbers." Haha that's exactly what we used to have to do! I still remember my childhood best friends' home numbers.
@kiryuukanae5573
@kiryuukanae5573 2 жыл бұрын
Damn you explain the whole HTTPS and SSL better than my lecturer
@saveappitsme9554
@saveappitsme9554 2 жыл бұрын
Hey there, Russian here, the majority of PC's on which this fucking pain in the ass certificate is installed belong to schools, I know it because I study in one of them and I'm also the one who does all the computer stuff and Linux magic (in Russian school GNU Linux prevails since windows needs licensing). You get extensive instructions along side with an order that you have to install this certificate. This guide includes instructions for Linux
@4EJT
@4EJT 2 жыл бұрын
В каком городе это вообще происходит?
@saveappitsme9554
@saveappitsme9554 2 жыл бұрын
@@4EJT В Вологодской области везде это точно
@frankiefrom80s80
@frankiefrom80s80 2 жыл бұрын
То есть, ты хочешь сказать, что у нас на большинстве школьных компудахтеров стоит линукс? ну насмешил, не поверю
@saveappitsme9554
@saveappitsme9554 2 жыл бұрын
@@frankiefrom80s80 ты когда в школе учился, динозавр? Русские люди не будут платить за Винду, а не лицензионную ос в школах устанавливать нельзя. Я не знаю насчёт Москвы, но Москва это не Россия, в моем городе во всех не платных школах Линукс, ещё встречал макось с Виндой через буткэмп, но они в меньшинстве Есть ноуты, с которыми активированная винда идёт вместе, но они для ЕГЭ/ОГЭ в школе лежат, ну или для учителей
@LadislausKallig
@LadislausKallig 2 жыл бұрын
@@saveappitsme9554 не знаю, что на счёт остальной России, но во всех школах мск и спб я видел только винду. И сам заканчивал школу, в которой все компьютерные классы были оборудованы пк с виндой.
@artemon121
@artemon121 2 жыл бұрын
I live in Russia and even I didn't know that! Good job man
@Druid_Plow
@Druid_Plow 2 жыл бұрын
Remembering phone numbers, oo noo. We know who wouldn't have made it far in the 20th century.
@kippie80
@kippie80 2 жыл бұрын
Yeah man, back in the 90's we had 'key parties' to create circles of trust. The tech still works like that if people bothered.
@fryktenogmennesket
@fryktenogmennesket 2 жыл бұрын
I'm your Russian viewer. This means we'll use one of those two shitty browsers for government websites and regular browsers for the rest of the Internet.
@ivagov5758
@ivagov5758 2 жыл бұрын
for this they use yandex browser - it is based on chromium, and it works very well, many people use it
@generallyunimportant
@generallyunimportant 2 жыл бұрын
@@ivagov5758 yeah, yandex and any chromium stuff is just a ram consumer, i won't install it just to use gosuslugi lol.
@nullmind
@nullmind 2 жыл бұрын
They actually have a list of domains that use the certificate, its the second button on the gosuslugi website that says CSV-something. Its mostly banks and government websites
@shadesoftime
@shadesoftime 2 жыл бұрын
That button says "download csv-file" and it isn't the list
@nullmind
@nullmind 2 жыл бұрын
@@shadesoftime csv is a microsoft excel document format
@shadesoftime
@shadesoftime 2 жыл бұрын
@@nullmind r/whoosh
@nullmind
@nullmind 2 жыл бұрын
@@shadesoftime am i too smart to understand this?
@celeridad6972
@celeridad6972 2 жыл бұрын
@@nullmind who knows, does that CSV file containing the domains that use the certificate? He seems not to believe so
@kborak
@kborak 2 жыл бұрын
I still remember numbers from when I was a kid and there were no cell phones. I think you underestimate the human capacity to remember strings of numbers.Great explanation of https though!
@AquilaFawkes
@AquilaFawkes 2 жыл бұрын
Would you do video on mesh network, like SSB protocol, so other nations can prepare for internet sanctions like this?
@worldpeace1062
@worldpeace1062 2 жыл бұрын
They can pay Snowden big money to help with this 👍
@NovoFurryhatted
@NovoFurryhatted 2 жыл бұрын
Imagine you'd known how RU Internet segment works. Root certificates and authority centers exist here since 2000s - they are used for online trading, taxes, document signing (digital signatures). Surprise, its not only bears and vodka in Russia.
@alx123094
@alx123094 2 жыл бұрын
I didn't understand anything but i watched the whole video still. Gotta support the homie.
@ericalexanderson3442
@ericalexanderson3442 2 жыл бұрын
I once met a guy who was part of that chain. His job was sitting at home and making sure certain pages that appeared to him were secure and authorizing it. Seemed like a sweet deal lol
@j.samuelwaters81
@j.samuelwaters81 2 жыл бұрын
Old Millennials and Gen-Xers be like: Right, just imagine how totally insane it would be to actually know peoples' phone numbers... 😏
@stale2665
@stale2665 2 жыл бұрын
There's a reason why we were sent phone books heavier than bricks every few years. We couldn't remember every number we needed either, except for our inner circle. And in the context of the internet, web sites pretty much have different numbers based on what you're trying to do, or where in the world you're logging on from. It'd be an absolute nightmare. It also helped that our closest friends and family would usually have the same area code, which makes the digits you needed to remember even fewer. IPs of your favourite web sites don't follow any sort of pattern like that.
@j.samuelwaters81
@j.samuelwaters81 2 жыл бұрын
​@@stale2665 I agree with you on your point about area codes, and I'll even kick it up a notch (bam!): most people's phone numbers rarely changed, so it was much easier to eventually commit it to memory In fairness, address books were a thing... Phone books though, were not for the purpose of having access to numbers you already knew, but were for allowing you to (hopefully)look up a number you didn't already know. And they were kinda terrible at it, too They were, however, excellent for stacking up to give your home that rustic, lived-in hoarder feel :D
@BasedPureblood
@BasedPureblood 2 жыл бұрын
Can you review that Russian Linux Distro?
@redrocket8062
@redrocket8062 2 жыл бұрын
There is nothing more beneficial for the average citizens than a government that strives for economic independence. Being able to produce basic necessities is a must for a strong independent nation.
@lol-dm8wx
@lol-dm8wx 2 жыл бұрын
If we have a truly free market then large companies will rule instead of the government.
@redrocket8062
@redrocket8062 2 жыл бұрын
@@lol-dm8wx I was talking about production a country that can function by itself is in a better position than one relying on other countries to survive. Also the government has a monopoly on force and most major US corporations are buying that force for their own means. Which means those corporations are the ones currently running the show.
@lol-dm8wx
@lol-dm8wx 2 жыл бұрын
@@redrocket8062 ah
@vidtech2630
@vidtech2630 Жыл бұрын
Good for them.
@vextor2681
@vextor2681 2 жыл бұрын
The thumbnails keep getting better and better.
@FarnhamJ07
@FarnhamJ07 2 жыл бұрын
I feel like DigiCert & al. revoking Russian certificates in the first place was a huge,shortsighted mistake that just enabled them to do this. This outcome was inevitable, and what did it really accomplish aside from locking average people out of their online banking? Sanctioning Putin and his cronies, international transactions &c. is one thing, but denying everyday Russian people things like a secure connection to check if their paycheck has been deposited is just ridiculous and counterproductive.
@Th3_Revolution
@Th3_Revolution 2 жыл бұрын
Tbh, this also applies to the most of the western sanctions. For example, what does removing of apple pay and google play accomplish, aside from restricting devices that common russians did pay for? They probably just won’t trust those western companies anymore and rather buy chinese alternative or smth.
@FarnhamJ07
@FarnhamJ07 2 жыл бұрын
@@Th3_Revolution Definitely; it's petty and just fosters resentment.
@Nogardtist
@Nogardtist 2 жыл бұрын
it means they hate freedom
@totally_not_a_troll
@totally_not_a_troll 2 жыл бұрын
That vTuber addiction example hit so close to home, I had to hide under the table.
@1988ildar
@1988ildar 2 жыл бұрын
The real reason is: *Thawte CA* recently has revoked certificates of some russian banks. It broke banks' websites. "National" certificates can avoid that in the future. Although "national" certificates allow _"major comrade" («товарищ майор»)_ to read users' traffic, that is NOT the real reason for their creation. P.S. Seven years ago national card processing system was created in Russia. Today *VISA* and *MasterCard* has stopped card processing in Russia, so the national system is the thing that still makes their cards processing is possible.
@laurencemusolino
@laurencemusolino 2 жыл бұрын
I think Russia will benefit from separation of system dependence on the US. It seems that US Democrats are rude to Russia whether they are invading other countries or just minding their own business. Both Europe and Northern American liberals want Russia to be public enemies. Russia is better of accepting this and becoming totally systems independent of these nations.
@SteelyGlow
@SteelyGlow 2 жыл бұрын
I'd rather let comrade Major read my traffic than "Sir yes Sir" guys
@fedyaf2710
@fedyaf2710 2 жыл бұрын
Виза и Мастеркард в текущих реалиях вообще бесполезные карты, МИР хоть можно добавить в MirPay. Помню, как мне при выдаче университетской карты в сентябре 2021 сбербанк всучил еще и Мастеркард со словами "ну вы же знаете что картой мир особо не заплатишь нигде". Ну а все этим сертификаты и отечественные ОС - то, от чего стоит держаться подальше. Если windows перестанет работать, то я поставлю debian или ubuntu, а не "Астра", которую 100% напичкали следящим ПО и backdoor для major comrade. Use google translate if neccesary. My text english is very bad, i can only understand.
@WelteamOfficial
@WelteamOfficial 2 жыл бұрын
No, you're wrong when you say CA are the best system we've got right now. I would advise you read up on DANE TLS if you've not already. All a website operator need to do is self sign his certificate and put the fingerprint in his DNS records. Your "CA" is now DNSSEC, boom you're done. But of course for this to work, your fav browser need to actually support this check ; chrome being the trend followers as usual and mozilla somehow not seeing the demand to bypass CA, this has stalled for years.
Darknet OPSEC Bible 2022 Edition
22:13
Mental Outlaw
Рет қаралды 612 М.
Reddit Keeps Destroying Itself
14:17
Mental Outlaw
Рет қаралды 196 М.
Stay on your way 🛤️✨
00:34
A4
Рет қаралды 23 МЛН
Gym belt !! 😂😂  @kauermtt
00:10
Tibo InShape
Рет қаралды 17 МЛН
Викторина от МАМЫ 🆘 | WICSUR #shorts
00:58
Бискас
Рет қаралды 3,5 МЛН
We Need to Rethink Exercise - The Workout Paradox
12:00
Kurzgesagt – In a Nutshell
Рет қаралды 5 МЛН
Certificates and Certificate Authority Explained
16:23
Hussein Nasser
Рет қаралды 133 М.
The Plan to Stop Non Autonomous Driving
8:35
Mental Outlaw
Рет қаралды 21 М.
Why I Am Bigger Than MR BEAST  - And Why is YouTube Broken
18:37
The Spiffing Brit
Рет қаралды 1,6 МЛН
Why VPNs are a WASTE of Your Money (usually…)
14:40
Cyberspatial
Рет қаралды 1,4 МЛН
Hackers Steal Millions From Vegas Casinos
13:33
Mental Outlaw
Рет қаралды 106 М.
Certificates from Scratch - X.509 Certificates explained
21:50
OneMarcFifty
Рет қаралды 100 М.
Hacking Forum Raided By The Feds, Head Admin Arrested
17:56
Mental Outlaw
Рет қаралды 186 М.
The $2.1 Billion McDonald's Machine
10:35
fern
Рет қаралды 1,1 МЛН
Is Monero Compromised?
24:42
Mental Outlaw
Рет қаралды 224 М.
Сколько реально стоит ПК Величайшего?
0:37
Looks very comfortable. #leddisplay #ledscreen #ledwall #eagerled
0:19
LED Screen Factory-EagerLED
Рет қаралды 7 МЛН