[AusNOG] Consensus from the IETF 88 Technical Plenary - Internet hardening

[Geordie Guy]

1) It's not an ad hominem. I wasn't attacking his person, I was revealing
that I was having trouble understanding why he would hold the position he
was advocating until I did some brief research that suggested that he is
professionally directly involved in a business model which would likely
need to be completely rethunk with what the IETF are proposing.  Network
security vendors are weird in that they often play both sides of the
argument, helping enterprises secure their information from prying eyes,
and also prying into information under the auspices of some wider security
and safety issue. Maybe it's a symptom of their spy and resisted being
spied-upon government variants, but none of it is news.  As Mark pointed
out, "as if millions of DPI vendors voices..." etc etc.

2) Geordie Carmichael Guy, son of Dianne Allana and Wayne Jeffrey Guy.
 Pleased to meet you. If I may be so bold as to suggest you spend more time
focussing on the merit of arguments and less time wielding shock jock
mythology like "anonymous people on the Internet are cowardly and abusive
and their arguments poorly supported" I reckon we could usefully examine
this critical decision point at how the world's and Australia's networks
should be evolved and operated in the light of this clear threat to
information confidentiality and security.

3) I'll have you know I am very classy  I dress very conservatively yet
fashionably in high quality apparel, am very well groomed and well spoken
and friends tell me I am quite affable.  I live in a very nice suburb,
drive a late model car and have a pleasant, infectious chuckle and a
confident walk that shows a real sense of purpose without being menacing.

Encrypt all the things.  Encrypt them all.  As Mark mentioned, a key tenant
of security is confidentiality. I don't even agree we shouldn't bother to
encrypt the cat pictures. Encrypt those to. What business is it of the
NSA's if I'm looking at cat pictures? Does legality and harmlessness in use
cases actually obviate the need for us to build and operate secure
networks? I don't think it does, otherwise the old "nothing to fear nothing
to hide" nonsense starts to take on a colour of truth.

Geordie (seriously, Geordie)


On Sat, Nov 9, 2013 at 10:59 AM, Lloyd Wood <lloyd.wood at yahoo.co.uk> wrote:

> An ad hominem response from an anonymous account?
>
> You stay classy, "Geordie Guy."
>
> On 8 Nov 2013, at 14:32, Geordie Guy <elomis at gmail.com> wrote:
>
> Oh wait I just looked you up on LinkedIn.  Nevermind.
>
>
> On Fri, Nov 8, 2013 at 2:26 PM, Geordie Guy <elomis at gmail.com> wrote:
>
>> Gross overreaction?  I'm curious to hear more about how a national scale
>> warrantless surveillance system, the bugging of the phone of foreign heads
>> of state and the hacking of some of the Internet's most important company's
>> datacenter interconnects doesn't warrant encryption.  What do you think
>> would've been an appropriate response?  No ice cream after dinner and
>> straight to bed?
>>
>>
>> On Fri, Nov 8, 2013 at 2:20 PM, Dobbins, Roland <rdobbins at arbor.net>wrote:
>>
>>>
>>> On Nov 8, 2013, at 10:11 AM, Mark Newton <newton at atdot.dotat.org> wrote:
>>>
>>> > I can't say I'm disappointed in this resolution. Should have happened
>>> a long time ago.
>>>
>>> The problem with overencryption of this magnitude is that besides the
>>> additional overhead, it makes dealing with DDoS attacks and other security
>>> issues considerably more difficult in terms of detection, classification,
>>> traceback, and mitigation, not to mention broadening the attack surface and
>>> providing a non-insignficant impact amplification, due to crypto overhead.
>>>
>>> On top of that, it's useless - the spooks and spies (not to mention the
>>> ODCs) simply bypass it all and get everything en clair from the endpoints
>>> themselves.
>>>
>>> This is a bad move; a gross over-reaction that, if implemented (which I
>>> doubt it will be), will degrade the overall security posture of the
>>> Internet to a significant degree.
>>>
>>> There are no technical solutions to social ills.  If this comes to pass,
>>> we will all regret it.
>>>
>>> -----------------------------------------------------------------------
>>> Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>
>>>
>>>           Luck is the residue of opportunity and design.
>>>
>>>                        -- John Milton
>>>
>>> _______________________________________________
>>> AusNOG mailing list
>>> AusNOG at lists.ausnog.net
>>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>>
>>
>>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20131109/6cd3c4d8/attachment.html>