> remarkably, nearly all the end-user consumer Internet browsing and app traffic we observed used TLS or QUIC There was a surprising amount of resistance to the push to enable TLS everywhere on the public Internet. I'm glad it was ultimately successful.
Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]
71–80 of 145 posts
Re: Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]
#72Had a vendor offer a customer of mine a huge discount if they purchased radios without the encryption license in the year of our lord 2024. Not even WPA or WEP. Just clear across the sky. And this is terrestrial. My bet is that in space there would be a noticable increase in heat/energy if they did encryption by default. But its still incredible to see them pretend like space is impossible to get to, ultimate obscuri…
The landing page has a Q&A. This is the relevant part of the response to the question, "Why aren't all GEO satellite links encrypted?" >Encryption imposes additional overhead to an already limited bandwidth, decryption hardware may exceed the power budget of remote, off-grid receivers, and satellite terminal vendors can charge additional license fees for enabling link-layer encryption. In addition, encryption makes i…
The same could have easily been mandated for satellite links - no encryption, your packet won't get forwarded to the internet at the ground station, and any packets sent to you from the internet will be sent to you encrypted. And all this can be implementd without needing to touch the satellite itself, which will continue to forward what it sees as unencrypted traffic without any design changes. It could even have been implemented incrementally on existing running services, with old and new equipment working side-by-side, but all new ground stations required to support encryption, and with a sunset date for old equipment, and a rolling upgrade program.
DOCSIS got this right in 1999; the satellite industry has had 25 yeqrs to catch up.
Re: Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]
#73Earlier quoted context omitted.
If you fire people for stuff they didn’t maliciously introduced you will end up with no people to work with. Imagine jailing doctors for every patient that died you would be out of doctors quite soon.
If the doctor is criminally negligent they could be jailed.
Re: Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]
#74As with anything in life, when it's what you know and do on the regular, that simple thing can look like magic to others. I met an old timer in the satellite business that came out to help install our receiver for a new TV channel the company I was at was getting off the ground. He found out what bird we were using and what its slot was. Based on that, he knew how many satellites over from the satellite he knew and u…
Eh I kind of feel like you can't say that. If something is magical before you learn how it's done, it should be magical after. The magical part isn't "it's actually impossible", but "it's so far from what I could come up on my own", which still holds after you know the secret.
Penn and Teller play a lot with that idea, for example.
Re: Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]
#75Had a vendor offer a customer of mine a huge discount if they purchased radios without the encryption license in the year of our lord 2024. Not even WPA or WEP. Just clear across the sky. And this is terrestrial. My bet is that in space there would be a noticable increase in heat/energy if they did encryption by default. But its still incredible to see them pretend like space is impossible to get to, ultimate obscuri…
> My bet is that in space there would be a noticable increase in heat/energy if they did encryption by default. Why would it? The data originates from earth, and should be encrypted during the uplink leg too, so the crypto should all happen in the ground segment (or even well before it reached anything that could be considered part of the satellite setup, honestly).
I believe that’s one of the few things that even amateur radio operators are allowed to encrypt for that reason.
Re: Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]
#76Re: Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]
#77Earlier quoted context omitted.
Eh I kind of feel like you can't say that. If something is magical before you learn how it's done, it should be magical after. The magical part isn't "it's actually impossible", but "it's so far from what I could come up on my own", which still holds after you know the secret.
Yes, some excellent magic tricks work even better when you know how they work, especially if they’re the kind that’s based on putting in ridiculous amounts of work or skill/practice. Penn and Teller play a lot with that idea, for example.
Re: Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]
#78Some of the stuff that was extracted from the unencrypted traffic in the link: - T-Mobile backhaul: Users' SMS, voice call contents and internet traffic content in plain text. - AT&T Mexico cellular backhaul: Raw user internet traffic - TelMex VOIP on satellite backhaul: Plaintext voice calls - U.S. military: SIP traffic exposing ship names - Mexico government and military: Unencrypted intra-government traffic - Walm…
> This is insane! Not as insane as it was in the early 2000s… > while link-layer encryption has been standard practice in satellite TV for decades Before Snowden, I would say 99% of ALL TCP traffic I saw on satellites was in unadulterated plain-text. Web and email mostly. … the pipe was so fast, you could only pcap if you had a SCSI hard drive!
Re: Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]
#79Re: Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]
#80Can someone help me understand the use of "diameter" in this sentence. I am guessing it refers to the satellite's signal coverage of the Earth's surface. If that's the case, wouldn't something like arc degrees be a better measure? I just can't figure out how "diameter" can be used to describe a coverage arc or area.