Comment

Comment by PeterZhizhin

Right now, we have a legislation (this one existed since 2012) that requires to ban certain IP addresses. All ISP's are being monitored by the authority called Roscomnadzor and allowing access to a banned IP will lead to fines. Unfortunately, this doesn't really work because people here learned how to use VPN's, proxies and Tor. Moreover, with cloud providers you can easily switch IP addresses. Telegram messenger was banned here but it still works. I guess that they frequently change IP addresses and use multiple cloud providers. When Roscomnadzor tried to ban the messenger, they added significant number of IP subnetworks (I think that the largest blocked subnet was 52.192.0.0/11 used by AWS). This lead to all sorts of different problems because it turned out that some banks and large companies were paralysed for months as their websites were blocked.

After a year of of trying to block the messenger, they just decided to pass this law. All ISPs that handle inter-counties exchange must install a government backdoor that could shut down all outgoing and incoming connections outside from Russia.

Also, some websites now are blocked by their DNS record, not by their IP. This lead to other problems. Imagine there was a website X that was blocked in Russia. The X company decides to change the domain and abandon X. Now, someone else buys the banned domain and adds any IP addresses to the DNS (like, government authorities websites). Whoala! These websites are banned in Russia as well. This happened multiple times and lead to Google, YouTube and other websites being inaccessible here.

The legislation proposes a separate national DNS system that differs from the ICANN one. Similarly to how North Korea does this in their country. This way no-one could buy an abandoned blocked website and add a bunch of valuable and valid IPs there.

They claim that this will increase the stability of the Russian Internet. People in our government believe that the Internet was designed in the US to control the world. They also believe that they could shut down the Internet in any country at this point of time. They say that this has already happened in Syria once and we need to prepare for this.

They don't actually explain that the thing that happened to Syria was possible only because they had a single ISP. And their centralised system was hacked.

I believe that if we decide to install a backdoor to all of our ISPs, then someone else from the outside could pull the switch.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton