FLASH
Shkruar nga Pamfleti
The expert who first denounced the DPI scandal, debunks ASKS's Igli Tafa...
IT expert Besmir Semanaj has called the National Cyber Security Authority's bluff. Today, the head of this institution, Igli Tafa, tried to convince us that internet traffic is encrypted and cannot be intercepted by the DPI devices that the government has installed in mobile and internet companies.
But Semanaj, the person who first denounced the scandal, emphasizes that this is not true. On social networks, he has called out ASKS' bluff.
“ It was also said that DPI increases security and protects against attacks, which in principle is true. But I have a simple question: If DPI is so useful and risk-free, why would you remove it after a year? Below I am showing you what DPI does to encrypted traffic. This is not me saying this, but ChatGPT itself and every serious online document says it ,” he writes.
Full post
Please don't believe me — open ChatGPT or search Google and read for yourself.
As stated by ASKS, “100% of internet traffic is encrypted.” If this were true, then we would enter the Guinness Book of Records and be the only ones in the world to have achieved it. When such a statement comes from an expert, it is natural to put your hands on your head.
Then another one comes out and says "we block TikTok at the packet level" — while talking about encrypted traffic.
It was also said that DPI increases security and protects against attacks, which is true in principle. But I have a simple question:
If DPI is so useful and risk-free, why would you remove it after a year?
Below I'm going to show you what DPI does to encrypted traffic. I'm not saying this, but ChatGPT itself and every serious online document say it.
Deep Packet Inspection (DPI) – What It Is and What It Does to Encrypted Traffic
What DPI can do:
• Analyzes traffic: Discovers which applications or services a user is using.
• Filters: Can block, slow down, or prioritize certain types of traffic (such as video, torrents, etc.).
• Monitors: Records user activity for commercial or government purposes.
• Modifies data: Can insert ads or redirect pages.
• Enforces policies: Such as page blocking and censorship.
⸻
What Happens to Encrypted Traffic?
1. DPI cannot decrypt content, but it is not completely blind:
• Can see IP addresses, site names (via SNI or DNS), packet size, and traffic rate.
• It can use methods like “fingerprinting” to identify which service you are using (e.g. YouTube, Netflix).
2. Invasion of privacy:
• Even without viewing the content, DPI can track your online behavior and build user profiles.
• In some countries, it is used for mass surveillance by the state.
3. Slowing down encrypted traffic:
• Even though the traffic is encrypted, DPI can figure out that you are using a video or phone call and intentionally slow it down.
4. Man-in-the-Middle (MitM) attacks:
• In extreme cases DPI can use SSL/TLS traffic interception:
• The ISP steps in, creates a fake certificate, and “sees” everything.
• This only works if the user has installed a certificate
• This destroys the security of encryption and is very dangerous for privacy.
This is no longer an issue that belongs only to experts and the media — now is the time for SPAK to step in. The presence of the devices was officially acknowledged, while everything else continues to remain in the dark.
Lini një Përgjigje