China's Man-On-the-Side Attack on GitHub
I wonder why TCP implementations don't monitor mid-stream changes to things like packet TTLs and optionally drop the connections as a result, or rather, I wonder what would break if they did something like that.