6 ms·
Would buffered connectivity mitigate what is becoming a Swiss cheese infrastructure of hardware (security holes in everything)? Direct connectivity (on Interne
by aSplash0fDerp 7y ago
Would buffered connectivity mitigate what is becoming a Swiss cheese infrastructure of hardware (security holes in everything)?
Direct connectivity (on Internet 1.0) seems to be playing with fire nowadays.
Security admins probably love the fact that they are guarding their assets from unknown threats/vulnerabilities that major manufactures have included in their products.
- saagarjha 7y agoWhat is buffered connectivity?
- aSplash0fDerp 7y agoHonestly, I think they need to create new categories for the protocols used for the traditional Internet and divide it into Local Area Protocals (LAPs) and Wide Area Protocols (TCP/IP is the defacto WAP) as well as adding a gateway (like AppleTalk to IP gateways of yore) so that there is more than an airgap (its a different language/protocol as well) separating your network from from the worlds biggest venerable network. Or, as compute power, storage and hardware get less expensive, running two cryptoledgers for inbound and outbound communications would make it easier to sanitize every bit that enters a network. I like squid and other products, but I think dropping TCP/IP from the LAN or tranfering all packets in amber (bitledger) would correct a lot of the present shortcomings with security, privacy and unfixable manufacturer defects.
- saagarjha 7y agoHow would that help with this issue, which is specific to the processor itself?
- aSplash0fDerp 7y agoReally??? Needing physical access to compromise a system sounds like a much better way to play whack-a-mole. If the hardware cannot protect itself, moving the defense to the next layer out sounds plausible to me.
- saagarjha 7y agoSanitizing input that you will then execute is known to be Turing-complete.
- aSplash0fDerp 7y agoThe bitledger-as-a-router/gateway/firewall was more of a joke, but replacing TCP/IP on the LAN only changes how we interface with the network without changing any of the building blocks in place.