3 ms·
My goodness, what a charade! > In other words, hacker software needs to automatically load and read the emblem, so it can recognise that it is accessing a syst
by verisimi 3y ago
My goodness, what a charade!
> In other words, hacker software needs to automatically load and read the emblem, so it can recognise that it is accessing a system belonging to an organisation that is protected by international humanitarian law. And that needs to happen during the software’s first reconnaissance, before it does any damage to the system.
Hackers are going to look up the emblem "protected by international humanitarian law".
> Another key requirement is for the digital emblem to be managed in a decentralised way rather than by a central authority. States that are committed to international humanitarian law should be able to verify that a certain digital infrastructure on their territory is entitled to protection and therefore bears an emblem.
And when they say decentralised, they mean centralised: states "should be able to verify that a certain digital infrastructure".
PS Felix Linker is defining a new protocol for hackers to anonymously check whether infrastructure can be attacked... The theatre of war!
- neontomo 3y agoThe whole thing feels dreamt up by AI.
- thinkingemote 3y agoThis is aimed at nation state hackers. E.g. those who work with bosses and budgets and accountability.
- dmvdoug 3y agoIt’s merely meant to be a digital equivalent of a physical red cross/crescent on a battlefield. So if the “hackers” are members of the armed forces of a State Party to the Geneva Conventions of 1949, then… yes, they had better look up the emblem, if they don’t want to be seen as war criminals. That’s the idea at least. although, as I’ve said elsewhere in my comments on this, I think they’re going to need to propose an AP for it to have any actual legal effect.
- VBprogrammer 3y agoI should probably read the article but it sounds like a great way of announcing the that you are attacking a server.
- A1kmm 3y agoThe conference paper is the best read for details: https://dl.acm.org/doi/pdf/10.1145/3576915.3616578 https://dl.acm.org/doi/pdf/10.1145/3576915.3616578 - the security properties of the scheme are 1) supports covert inspection, 2) emblems are verifiably authentic and 3) provides accountability - identification of parties that issued fraudulent emblems. The covert inspection part is primarily through broadcast of the emblem through multiple channels (so it will go to many people interacting with the systems who didn't ask) so that the attacker will see the emblem passively without having to make a request for it that only attackers would make.