Secure Web Browsing - Computerphile 

Yesh

Clue, you're gonna need more than a vpn if you want to get around the deep, dark places of the world.

i really liked him, check his channels "Thom scot" and another one just dont remember the name

+Nirup Iyer His channel is fantastic.

+Nirup Iyer plus 1 to Tom Scotts channel. He just did a great video about how many videos youtube can have before running out of address space.

+Nirup Iyer It was easier in the past when Tom was more closely linked to the university. Nowadays, Tom is a freelancer and has his own channel to think about.

no

+Jim R. Didriksen It's not entirely the same. This is because ads are grabbed separate from the main webpage, and what most ad blocking software does is it stops that initial request so the ad company records wont show you as a bought customer. basically ad companies only pay for what they get so the one hosting the webpage is the one losing profit.

+Vaidas Šukauskas It's not, it's an act of wire fraud in USA and just fraud elsewhere. These ISP's are doing man-in-middle attacks on their own customers. But most courts staff have VCRs that blink 12:00...

+PsychoticusRex yea, they kinda just get away with it

JakesDen Gaming what do you mean? That's what he said

+Vaidas Šukauskas In not-so-developed countries where the digital world is still lawless you can get away with everything online. That's why cyber crime is usually based in those countries, the authorities just go "Crime? What crime? This person has never been to your country, get lost."

+Vaidas Šukauskas this kind of attack (man-in-the-middle) can be also done by a tor exit node. This scenario might be more realistic.

No, not really. Since when did every domain on the planet start supporting https, by default??

+DoctorDARKSIDE Should have used an N if he meant to go back in time.

Elliot Grey Or an N with a curved line at the bottom. That's clearly too hard.

+Cadde Fair enough. :)

+DoctorDARKSIDE Pretty sure the e stands for Edge ;)

+90hijacked ... Only an SSH connection could conceivably get by it. a big part is knowing who's a threat or not; conceivably you could do an ssh connection to a proxy on a safe network and avoid your ISPs fraud and then proceed normally....

Yeah the writing was a bit close to the end of the page so I had to fold space...

+teekanne15 Because RU-vid uses https, you're using this right now. It's not much slower =)

+teekanne15 Not really. In fact, thanks to the fact that many browsers only support HTTP/2 over HTTPS, HTTPS can actually be _faster_ than plain HTTP in some cases.

Andrew Meyer Oh hey, I had no idea. Learn a new computery thing every day, I guess =)

Standard since I was a kid. Maybe even before. :)

+Nirup Iyer it's called Edge now and it's totally not just internet explorer!

+Zudo It actually really isn't bad. They rebuilt the engine from scratch and it works pretty well.

+iandonaldpaul Well, AFAIK Edge is made from scratch, but it's was made to be basic enough that they couldn't make the same mistakes. - I give up. It's been 10 years. 10 YEARS SINCE I STARTED TRYING. I will never learn how to cook steak. - Hey what if I teach you how to make a ham sandwich instead? - Great idea!

+Zudo Oh, it's not perfect, but it's a huge step up from IE.

+Waniou fair enough, but Chrome still wins the race by a big shot

+Nyyppis Programming is a means to an end. They should be taught programming and be encouraged to reverse engineer stuff to show just how easy it is to break something and use it for their own purposes. The first "hack" i learned with computers was deleting a database file containing user information before starting a program. Unfortunately i don't recall the program used but it was a text-based GUI under DOS. Once the file was gone, you gained automatic "SUPER USER" access when you started the program and could thus edit all the scripts and stuff that still was around after deletion of the user file. In those scripts were passwords for network shares on the school's server. This meant i now had access to certain stuff on the server that i shouldn't have access to. Such as each students private work folders with all their essays in them etc. If you are taught programming you also learn how easy it is to break stuff. If you are taught to write binary data files, you also learn how to read binary data files and as such you learn how to use a hex editor and with a hex editor you can look into stuff you shouldn't look into. It also lets you do all kinds of other stuff to break programs. I NOP'ed a certain function in a program using a disassembler when i was tired of it nagging me about buying a licence. In conclusion, if you learn programming you learn HOW to break stuff and that teaches you how to defend against the most common/simple hacks and cracks. You also learn that NOTHING is unbreakable, given enough knowledge, time and ideas. As such, the only way to win is to not participate. Just like War Games.

Yeah, I get your point and agree that the things you mentioned are important. I was trying to say that programming is just a small part of what should actually be taught. And that's why I don't approve calling it "programming" in the curriculum. I'll try to elaborate. To understand this video you don't need to understand any coding. But if you wanted to test the concepts of this video... Well then you need coding skills. How many hours of self educational playing around with computers you did before you could pull off the hack? How many basic concepts of computers you thought to yourself before you even knew you could execute a hack like that? Most likely you haven't even thought about how much you first had to know to be able to pull off that hack because it's all mixed up with the things you learned after. And I don't mean this in a bad way. That's just what happens when you learn a lot of stuff. It becomes instinctive and becomes a blur. I'm actually a bit jealous because you pulled off such a fun hack. I never did anything remotely so fun. So yeah. What I was trying to say: Teach universal and basic skills to all students and give the most interested ones voluntary extra courses for a chance to enhance their skills. The above mentioned basics include some programming too. And that's when courses called Programming become relevant. I must admit that it looks like I bashed down programming entirely but that's not it. It's just that curriculum's have very limited time and you need to make most of it.

+I'm Not A Xenophobe, Back In My Day It Was Called "Patriotism" What are you referring to? There is no banner.

foobars It's at the beginning of the video.

+Meb8Rappa it's a ghost.

+Penny Lane Which is why i used to trust an ISP that advocated that they would never share private information with anyone, not even the authorities. Problem though was that they had really awful customer service and so i switched when they didn't respond to a simple request in over a week. I dunno why i wanted to share that, i guess it's just that hard to find an ISP that cares both about you as a customer and your rights on the internets.

If you do everything in a VM, and that VM gets hacked, isn't that a distinction without a difference?

Tyler Swagar What I was thinking is that they can't mine your computer for data, if every time you step away from it, you delete the VM. So nothing can grab saved data. But yeah a VM would still have those issues.

@@WIImotionmasher VM+VPN+HTTPS

+Hungry Guy Email headers already include the IPs of every server they were relayed through. People don't spoof 'from' IPs, because it's far easier to just use a random open relay. Relaying legitimate mail through multiple Random Servers on the Internet is really uncommon these days; it's usually the various boxes within a sender's network that relay traffic to the mail servers on the edge of the network, and then straight to the recipient's mailserver, then through whatever setup they have there. Validation of sender IPs is the problem SPF is designed to fix: a domain lists a TXT record in spf format, and recipients can judge whether or not the sender was permitted to send based on this value. Unfortunately, the majority of spam comes from open relays, often being run on compromised PCs, and has garbage envelope senders for point at a domain that doesn't list anything -- because it doesn't have to.

+Paul Naama First!

Well many websites do

+Marcel Robitaille Even external assets, such as jquery, etc? CDN's can have a great effect on the load speed of pages you know.

Joe Westcott I don't use jQuery. Vanilla js all the way.

+Marcel Robitaille Exactly how proud were you of your single point of failure setup?

+Jim Pörn (TheOfficialZip) 12