At least two major mobile operators / ISPs are injecting JS into web traffic to display pop-up ads / Youtube videos on the lower right corner of every web page. The videos "commemorate" last year's events on July 15 in a language that is, to put it mildly, thorougly in line with Erdogan's ideology, and make a point of offering free data and phone credits throughout the 3-day commemorations being held.
Interestingly, I don't get the Erdogan's message on my cell. My friends tried calling me last night to hear the message, they don't hear it when they call me either. Could be related to me using my networks -paid- call ring tone customising app.
> https://security.googleblog.com/2013/01/enhancing-digital-ce...
> https://www.wired.com/2013/01/google-fraudulent-certificate/
In the past couple of weeks I noticed the a number of ISPs (for sure Turkcell for mobile and Türk Telekom for land lines) started injecting a wrong certificate, I guess to MITM the communication.
The certificate is of course wrong (it is both untrusted and the domain name is wrong) so the browser will notice this and block the access, but I'm surprised that I haven't seen any discussion about this online