2 ms·

You don’t need to bring up quantum computers. Almost all protocols in the networking industry are basically running with a shared secret that is service global.

You don’t need to bring up quantum computers. Almost all protocols in the networking industry are basically running with a shared secret that is service global. Pop any box at all and you have the world for any traffic you can capture. The problem with the shared secret model isn’t that it can be stolen, it’s that it is globally shared within a provider network. You can’t root it in a hardware device. You can’t do forensics to see from what node it was stolen. We are talking about an industry where they still connect console servers, often to serial terminal aggregators that are on the internal network alongside the management Ethernet ports, which have dumb guessable passwords, often the same one on every box, that all their bottom tier overseas contractors know. It’s just sad.

trod1234 2y ago
> You don't need to bring up quantum computers. Almost all protocols in the networking ... Its true that those protocols are basically running shared secrets, but those areas all have some visibility with auditing and monitoring. You crack a root or signing key at the co-processor level and you can effectively warp and control what anyone sees or does with almost no forensics being possible. It fundamentally allows a malevolent entity the ability to alter what you see on the fly with no defense possible. Such is the problem with embedded vulnerabilities, its just like that NewAg train thing. Antitrust and bricking for monopolistic benefit is far more newsworthy then say embedding a remote radio-controlled off-switch with no plausible cover, that can brick the trains as they move harvests, food stuffs, or military equipment. Its corruption, not national security. Would many believe that its the latter over the former when it does both? It is sad that our societal systems have become so brittle that they cannot check or effectively stop the structural defects and destructive influences within itself.

trod1234 2y ago

> You don't need to bring up quantum computers. Almost all protocols in the networking ... Its true that those protocols are basically running shared secrets, but those areas all have some visibility with auditing and monitoring. You crack a root or signing key at the co-processor level and you can effectively warp and control what anyone sees or does with almost no forensics being possible. It fundamentally allows a malevolent entity the ability to alter what you see on the fly with no defense possible. Such is the problem with embedded vulnerabilities, its just like that NewAg train thing. Antitrust and bricking for monopolistic benefit is far more newsworthy then say embedding a remote radio-controlled off-switch with no plausible cover, that can brick the trains as they move harvests, food stuffs, or military equipment. Its corruption, not national security. Would many believe that its the latter over the former when it does both? It is sad that our societal systems have become so brittle that they cannot check or effectively stop the structural defects and destructive influences within itself.