Who Will Control the Software That Powers the Internet?

Here’s a non-paywalled version: https://genius.com/Marc-andreessen-why-software-is-eating-th...

If you’re questioning the venue of that second link, as I recall, a16z was one of the earlier backers of Genius.

> Domestic customers get to have a fuel price cap

Interesting, I didn't realize that commercial usage wasn't subject to the price cap, and generally know very little about commercial supply

> EV users get a to select a preferential rate

Yes most suppliers are now offering time of use tariffs that are better suited for electric vehicle owners, these typically come with a super low off peak rate, and then a higher rate the rest of the day.

For someone that can charge a vehicle during that off peak time they should come out ahead, but I'd be very surprised if British gas got upset if you charged your vehicle on their standard tariffs.

> any detected pot growers get referred to the appropriate police force.

I thought that kind of investigation was generally instigated by the police rather than the other way around, but not 100% sure.

> SMETS2 meter will create a nice new 2.4 Ghz network (and 868 Mhz

I presume you're meaning the HAN that the meter uses to update the in home display. As far as I'm aware this is securely encrypted. Whether it'll stand the test of time who knows (let's face it WEP and friends certainly didn't), but the same logic could be applied to the WiFi network your router is creating.

Difference being that the data going over the HAN is likely to be a constant stream of values meaning it doesn't leak much information unless you can decrypt it. Someone able to passively observe that local network can almost certainly observe your WiFi transmissions, which will be much more variable - little to no activity when you aren't home, and lots of activity when you're streaming a movie.

Also yes smets1 was a bit of a cock up, but they aren't obsolete just dormant and in the process of joining the DCC - https://www.smartdcc.co.uk/smart-future/enrolment-and-adopti...

Yup, I do mean the HAN - and the way CAD including IHD connect to it. It may be based on ZigBee, but it modifies the protocol to add its own authorisation and encryption prototypes. They may have sound basis as of today but given the precedent (GSM/UMTS encryption, WEP, WPA, but also Infineon cryptographic corprocessor failures), the custom modifications to ZigBee and a couple of other deviations from usual practices I would consider it almost a certainty that within the lifetime of the device the protocol will be broken or bypassed. The question is how and when, not if.

Let me put it this way: I would be pleasantly surprised if it is otherwise, as that would be the exception, not the rule.

> Difference being that the data going over the HAN is likely to be a constant stream of values meaning it doesn't leak much information unless you can decrypt it. Someone able to passively observe that local network can almost certainly observe your WiFi transmissions, which will be much more variable - little to no activity when you aren't home, and lots of activity when you're streaming a movie.

Most of the equipment I have is wired (optical or copper), including supposedly mobile devices ([0]) and the ones that aren't are not a good indicator of presence (roughly constant data stream). It's a different story if one was to bring an IMSI catcher, of course - but there is only so much you can do and still participate in the modern world.

As a side note: I admit I may be biased as the meter location would preclude any IHD from being in range of HAN (5 reinforced concrete slabs away for electric, worse for gas), has problems with GSM connectivity for the same reasons and has dubious physical security against anyone who posseses a high tech tool known as "screwdriver" or "knife". The fallback procedure that UK suppliers have for this situation is "read the meter like a dumb meter" [sic!] until the supposed "alternative HAN solution" is in place. I know it puts me in the 3.5% minority of households, but still it rankles.

[0] This is normally where I go on a rant about flagship Pixel USB-C powered phones being unable to charge and use network adapter at the same time due to incomplete implementation on the phone side - one or the other. Older micro-usb models could do both as long USB-OTG was supported. iOS devices have no such issue, but they have other ones.

DWDM and whatever other technologies are important but simultaneously irrelevant when discussing the base layer of the Internet. Everything online is built on TCP/IP so Twitter doesn’t need to do anything if Comcast switches from DWDM to pigeon carrier as backhaul.

They download the binaries they trust off the net.

You're insinuating that some users are too stupid to know who to trust and go around downloading random binaries. If there are such users, then I guess my OS is not geared towards them, but rather to software developers, creative professionals, etc. who know what they're doing and need to get their application software directly from the developer.

People who don't know who to trust or want their OS developers to keep repositories for them can keep using Apple devices with their walled gardens or repository-centric Linux distros.

> which never get any security patches and leave dozens of copies of vulnerable dependencies lying around?

Do Windows applications never get any security patches?

And yes, sandboxing is not an infallible security mechanism, but it could help, and it also has other practical advantages not related to security.