The Clean Network – United States Department of State

Post by sukilot » Mon, Aug 10, 2020, 9:46 PM UTC

ISL wrote: post #98

waihtis wrote: post #90

Earlier quoted context omitted.

> Furthermore, State is a decade or more behind the game. It is my impression that modern companies that care about security assume that all networks are compromised and act accordingly. Unfortunately far from true. There's a small percentage who have the resource to run this kind of ops. Don't look at FAANG on how security is in companies, they're outliers by far.

State's 2020 budget is $52B. It has direct-collaboration access to DOD and NIST. We should expect our national-security infrastructure to be more resilient than commercial infrastructure, not less.

Post by remus » Mon, Aug 10, 2020, 9:48 PM UTC

codemonkey-zeta wrote: post #111

hijinks wrote: post #28

only the NSA is allowed to backdoor US networking hardware

I laughed, but also ... yes? As a lover of liberty I would much rather just my own government (by which I am ostensibly represented) have the ability to infringe on that liberty than 2 governments. I would want to support regulations that protect myself and neighbors from the influence of those other infringers, no?

Post by sukilot » Mon, Aug 10, 2020, 9:50 PM UTC

pathseeker wrote: post #105

ISL wrote: post #80

I have the same feeling about this as I did the announcement of the "Department of Homeland Security". The name sounded Soviet in origin, with only the exchange of "Homeland" in place of "Motherland". It reminded me of things my family had taught me didn't happen in the United States. "We call on all freedom-loving nations and companies to join the Clean Network." is a sentence straight out of an authoritarian playbo…

> It is my impression that modern companies that care about security assume that all networks are compromised and act accordingly. See https://cloud.google.com/beyondcorp as an example. No, you assume the network can be compromised like any other device in the system. You still defend the network and add in layers of access control. Employees of Google still use VPNs to connect into sensitive networks. With the preva…

Post by mthoms » Mon, Aug 10, 2020, 9:55 PM UTC

supernova87a wrote: post #207

monoideism wrote: post #194

Earlier quoted context omitted.

> What unusual attack do they get access to by owning or manufacturing the equipment? It is incredibly easy to add almost undetectable backdoors to hardware, particularly inside ICs. Here's one particularly clever attack described by security researchers at U of Michigan, but there are many: https://www.wired.com/2016/06/demonically-clever-backdoor-hi...

How would a hardware vulnerability on router equipment handling traffic compromise data flowing over that router which has already been encrypted properly at the source/destination?

Post by advaita » Mon, Aug 10, 2020, 9:59 PM UTC

ETHisso2017 wrote: post #202

throwyawayy2020 wrote: post #50

The US is ran & staffed by the hyper-partisan “Z-team” right now. This is tragic & dangerous bc we need shrewd & wise people to make decisions + build coalitions in the opening decades of 21st century, not hyper-partisan kooks. Some of the worst actors in cyber space rn is the Russian gov’t & their intelligence + “security” services —- it sure is funny (funny as in strange, not humorous) how difficult it is to get an…

What is the Z-team?