Category Archives: Internet

Ello There

I just joined Ello, the ad-free, public-spirited, clean-design alternative to Twitter.

It’s pretty, and I like the spirit of the thing, but I’m not sure yet what I’ll do with it — many of the accounts there seem much more graphics-oriented than I am. Not to mention cooler.

Posted in Internet | Leave a comment

IAB’s Major Statement on Internet Privacy

Looks like the IAB is being all Habermasian again:

IAB Statement on Internet Confidentiality

In 1996, the IAB and IESG recognized that the growth of the Internet depended on users having confidence that the network would protect their private information. RFC 1984 documented this need. Since that time, we have seen evidence that the capabilities and activities of attackers are greater and more pervasive than previously known. The IAB now believes it is important for protocol designers, developers, and operators to make encryption the norm for Internet traffic. Encryption should be authenticated where possible, but even protocols providing confidentiality without authentication are useful in the face of pervasive surveillance as described in RFC 7258.

Newly designed protocols should prefer encryption to cleartext operation. There may be exceptions to this default, but it is important to recognize that protocols do not operate in isolation. Information leaked by one protocol can be made part of a more substantial body of information by cross-correlation of traffic observation. There are protocols which may as a result require encryption on the Internet even when it would not be a requirement for that protocol operating in isolation.

We recommend that encryption be deployed throughout the protocol stack since there is not a single place within the stack where all kinds of communication can be protected.

The IAB urges protocol designers to design for confidential operation by default. We strongly encourage developers to include encryption in their implementations, and to make them encrypted by default. We similarly encourage network and service operators to deploy encryption where it is not yet deployed, and we urge firewall policy administrators to permit encrypted traffic.

We believe that each of these changes will help restore the trust users must have in the Internet. We acknowledge that this will take time and trouble, though we believe recent successes in content delivery networks, messaging, and Internet application deployments demonstrate the feasibility of this migration. We also acknowledge that many network operations activities today, from traffic management and intrusion detection to spam prevention and policy enforcement, assume access to cleartext payload. For many of these activities there are no solutions yet, but the IAB will work with those affected to foster development of new approaches for these activities which allow us to move to an Internet where traffic is confidential by default.

Posted in Internet, Surveillance | Leave a comment

The New Pictograms

Google released 750 new icons for phones and tablets that will undoubtedly take over the world. They’re free for anyone to use.

click for larger image

(Click above for a larger image of a some of them.) Cory Doctorow thinks this move by Google is great, and one disagrees with Cory at one’s peril since he’s usually right.

I suppose it’s language-independent and transnational. I can’t help but think, though, that the task of memorizing the meanings for these pictures will be akin to learning Chinese.

Wasn’t the move from pictograms to the alphabet supposed to be a triumph of civilization?

Posted in Internet | 3 Comments

Shellshock Still Kicking

arghOh, joy: despite a vigorous round of patching, Shellshock isn’t dead, and isn’t even resting:

Google security researcher Michal "lcamtuf" Zalewski has disclosed to iTnews that over the past two days he has discovered two previously unaddressed issues in the Bash function parser, one of which is as bad as the original Shellshock vulnerability.

"The first one likely permits remote code execution, but the attack would require a degree of expertise to carry out," Zalewski said.

"The second one is essentially equivalent to the original flaw, trivially allowing remote code execution even on systems that deployed the fix for the initial bug," he added.

— iTnews.com.au, Further flaws render Shellshock patch ineffective. Spotted via Slashdot

Posted in Internet, Software | Leave a comment

Valde Mirum

This is soooo weird: Krebs on Security, Lorem Ipsum: Of Good & Evil, Google & China.

Posted in Cryptography, Internet | 1 Comment

.ma Meh

Dog.ma resolves, but isn’t interesting. Opti.ma is parked, which almost seems appropriate.

Enig.ma doesn’t resolve, which also seems appropriate, and it isn’t available. And neither are mag.ma and dra.ma.

Look.ma exists but is boring.

Ma.ma doesn’t resolve and isn’t available. Nor is Kar.ma.

Nor even meh.ma.

OK, back to work now.

Posted in Internet | Leave a comment

Reset The Net

reset-the-net

Posted in Internet, Surveillance | Leave a comment