Hacker News Reader

Comment by nodrog3000 | Hacker News Reader

Simple solution, Use your router to block whatever you need to, control your kids devices, the internet stays free and open.

What are we talking about?

There are no laws that will turn out well.

View on HN

The entire point is to gain control over internet traffic. Your suggestion doesn't work because it requires people to implement it themselves and since you can't control all people, you can't control how they're going to implement it.

The title "for the children" is tongue-in-cheek. It's not serious.

> The entire point is to gain control over internet traffic.

I see many arguments claiming it's about mass surveillance and an invasion of privacy and so on.

We already have mass surveillance, so I don't really buy into those arguments.

I think it's worth considering that it is actually about control. Or more precisely, that it's about dissuading citizens from using social media in the first place.

The damage done to our western democracies from misinformation spread via social media has not gone unnoticed...

Censoring the internet is about as anti-democratic a policy that can be implemented.

I remember reading someone argue that anytime you see a claim that we need to do something to protect democracy just replace the word democracy with bureaucracy and then the statement makes sense.

It amazes me how compartmented the mind of the West is: the "protector of Democracy" is barely conscient of its own lies... There is no democracy, barely an illusion of one.

But somehow "force all adults to sort their thrash" instead of "let's standardize the packaging and materials" is fine? Oh I see

Not addressing to you specifically, just figure of speech

You know what we are talking about. It was written in the book.

You want the internet to be engineered so you will be able to MITM traffic?

That's already a thing. One can install Squid on their router, generate a CA cert, sign their server certs with it and install the CA into all the devices in the home. It's called Squid SSL Bump. [1] A small handful of sites still use public key pinning and will have to be added to exclusions in the configuration.

The router must then be configured to only allow Squid HTTPS, Unbound DNS and Chrony NTP out to the internet.

Doing this will of course break things like video games. The parents should have a way to bypass Squid and permit all traffic out during family video game time.

[1] - https://github.com/alatas/squid-alpine-ssl Not my repo, needs updating

Apps have cert pinning. What now?

Websites have public key pinning. [1] HPKP Most sites don't do this any more but enough do that anyone running a Squid SSL Bump MitM proxy needs to know.

[1] - https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning

And do you block children from accessing any of them?

Which of them specifically are you asking about?

Reply on news.ycombinator.com