[deleted]
[deleted]
You are correct. They mentioned Heartbleed and the software that is responsible for it.
It’s Time to Encrypt the Entire Internet
71–80 of 99 posts
Re: It’s Time to Encrypt the Entire Internet
#72Earlier quoted context omitted.
> It's time to decentralize the internet. There is no good reason why we can't have email, webpages, photos, even facebook-like social stuff housed on our own machines in our own homes (or some other place under our control). This is how the internet is designed, and you can already do this today. In my case, I host my own dns, email, and my own webpages, locally on my home connection. You just have to be willing to…
>This is how the internet is designed, and you can already do this today. In my case, I host my own dns, email, and my own webpages, locally on my home connection. You just have to be willing to learn, and willing to do. Once you've learned, the actual "do" is rather trivial. That's great that it works for you. But there are lots of people who are perfectly capable of doing this who don't want the hassle (let alone t…
It's true... but I view this as a technology problem not a problem _in_principle_. After all we don't all need to be engineers and electricians to operate a refrigerator, or our automobiles, for example. Society has built up the infrastructure to support individuals owning cars. We aren't all forced to use buses.
Re: It’s Time to Encrypt the Entire Internet
#73Re: It’s Time to Encrypt the Entire Internet
#74Earlier quoted context omitted.
"Maybe someone will come along and create a super easy to install and low maintenance server platform" that's the idea
How would you ensure operational continuity for my mom who only has an ipad? Since that's the direction the world seems to be taking.
You can cache the data. I mean just think about how Git works. You can sync the information at random intervals between peers, and you don't need a direct connection all the time. A well-designed P2P decentralized network solves all these problems. A can send to C through B, if A and C are not currently connected and so on.
In fact, these are solved problems, and implemented in e.g. Freenet as far as I know.
Re: It’s Time to Encrypt the Entire Internet
#75Earlier quoted context omitted.
You could just use Google's 8.8.8.8 and 8.8.4.4 though.
Google's DNS resolvers are 100% truthful?
I've never heard of them changing or blocking entries. They're on Wikileaks' list of censorship-avoiding DNS servers http://www.wikileaks.org/wiki/Alternative_DNS And Google claims: Google Public DNS does not perform blocking or filtering of any kind. https://developers.google.com/speed/public-dns/docs/intro?cs...
Re: It’s Time to Encrypt the Entire Internet
#76For as long as the general population remains as computer illiterate as they are today no amount of encryption or decentrialising will save the internet.
Despite its growing importance, the topic of computing is completely ignored at school.
They teach the kids how to click on a few icons on Microsoft Word and Excel and PowerPoint, they graduate and become adults and think they know about computing.
We have trained people to not learn anything of substance about computers, just click on this button, and push that button ... easy. There's only so far that stuff goes.
When they teach you calculus, you don't turn around and tell the mathematicians "oh well ... just go make it easier for me this is not user-friendly".
But with software no one is willing to take a single step towards learning some basic principles.
So we end up making sacrifices because people can't be bothered with anything more complex than pushing this big green button right here.
A better internet requires a population that understands some basic principles and is therefore willing to put some effort in protecting themselves.
Re: It’s Time to Encrypt the Entire Internet
#77It's time to decentralize the internet. There is no good reason why we can't have email, webpages, photos, even facebook-like social stuff housed on our own machines in our own homes (or some other place under our control). The current situation is akin to having to travel to some centralized letter-reading facility in order to read letter mail. Your grandma sends you a letter in the mail and you have to go to a cent…
Why is it impossible to trust someone? With sufficient transparency and checks/balances, wouldn't a partially centralized internet be acceptable? It's not an easy solution by any stretch of the imagination. If you can come up with a realistic solution then please let us know and we will help implement it. Nothing is stopping you from hosting servers at your home or place of business (except maybe specific ISPs), isn'…
While trust is unlikely given the current state of politics, there is a better reason to not trust anything: the same reason you give up unnecessary privileges in a server jail.
Limiting trust doesn't just protect against malicious or targeted attacks - it also helps with plain old bugs. In general, limiting access and trust to what is actually needed is a good engineering practice.
Or, simply: we gave up on /etc/hosts.equiv (and .rhosts) a long time ago, and it would be a bad idea to repeat that kind of design mistake.
Re: It’s Time to Encrypt the Entire Internet
#78Earlier quoted context omitted.
Google's DNS resolvers are 100% truthful?
I've never heard of them changing or blocking entries. They're on Wikileaks' list of censorship-avoiding DNS servers http://www.wikileaks.org/wiki/Alternative_DNS And Google claims: Google Public DNS does not perform blocking or filtering of any kind. https://developers.google.com/speed/public-dns/docs/intro?cs...
Not what I had in mind. Ignoring the NXDOMAIN results, what makes you trust the VALUE of the NS/A/AAAA/MX/whatever records you get from Google (or any other resolver)?
Because I have frequently seen provably-wrong results from other resolvers, and some highly-suspicious results from 8.8.8.8 on occasion (though I haven't checked particularly often).
The point being, unless you're proving the results with DNSSEC (or similar), you can't trust any source.
Re: It’s Time to Encrypt the Entire Internet
#79Earlier quoted context omitted.
> Maybe someone will come along and create a super easy to install and low maintenance server platform. There is a developer release available already: https://freedomboxfoundation.org/ All packages are included in Debian Sid.
My mom can't install that herself, and wouldn't be able to find information on how to do it by browsing the freedombox website. It's so obvious that the current freedombox website is targeted at computer geeks only and not general people. It is not 'super easy to install' if it's not granny-proved.
It is targeted at them, it is just not even close to done. Really, with this latest release it is only approaching getting usable at all.
Re: It’s Time to Encrypt the Entire Internet
#80Earlier quoted context omitted.
> It's time to decentralize the internet. There is no good reason why we can't have email, webpages, photos, even facebook-like social stuff housed on our own machines in our own homes (or some other place under our control). This is how the internet is designed, and you can already do this today. In my case, I host my own dns, email, and my own webpages, locally on my home connection. You just have to be willing to…
>This is how the internet is designed, and you can already do this today. In my case, I host my own dns, email, and my own webpages, locally on my home connection. You just have to be willing to learn, and willing to do. Once you've learned, the actual "do" is rather trivial. That's great that it works for you. But there are lots of people who are perfectly capable of doing this who don't want the hassle (let alone t…
Very true, but also not my point.
My point was: "there is no change to the internet at all necessary for this to happen".
The original comment to which I replied implied that the commenter believed the internet needed to change in some way in order to decentralize. My point was it was already, and still is, natively decentralized. What is preventing "decentralization" is convenience, and lack of knowledge, not the underlying architecture of the internet.