←back to thread

Mitigating the Hetzner/Linode XMPP.ru MitM interception incident

(www.devever.net)
341 points hlandau | 2 comments | 20 Oct 23 20:31 UTC | HN request time: 0.482s | source
Show context
abigail95 ◴[20 Oct 23 22:43 UTC] No.37962300[source]▶
> What would a perfect attacker do?

If you had physical access to the computer, some sort of bus interception to exfiltrate data from the machine.

replies(2): >>37962373 #>>37963714 #
whalesalad ◴[20 Oct 23 22:52 UTC] No.37962373[source]▶
extremely difficult to get physical access in a datacenter
replies(5): >>37962416 #>>37962421 #>>37962655 #>>37963217 #>>37963509 #
1. sebstefan ◴[20 Oct 23 22:57 UTC] No.37962416[source]▶
Sure but this is the German police and more generally nation states, not only they can, they don't even need to they just ask
replies(1): >>37965648 #
2. Beijinger ◴[21 Oct 23 10:38 UTC] No.37965648[source]▶
While the rule of law in Germany is much worse than most people think, it is not so bad as you assume. I doubt that Hetzner would give in to a police request. A court order, yes. But not to a police request. This does not mean, the police won't try it: https://www.dw.com/de/e-mail-firma-kritisiert-ermittler/a-18...

Unfortunately can't find the original post. Every idiot police officer thought he has a right to just email them to handle over data :-)