Slashdot Mirror


Growing Commercialization Threatens Net Security

dr3vil writes "The BBC is reporting that the concentration of the net's backbone in fewer hands has made it more vulnerable to attack. The report compares an attack to travel problems when traffic is disrupted at O'Hare. Hopefully someone in a position to act will pay attention."

28 of 199 comments (clear)

  1. In Soviet Russia ... by dzym · · Score: 5, Insightful
    Growing commercialization is threatened by Net Security.

    Surely you mean increased centralization, however.

    1. Re:In Soviet Russia ... by flewp · · Score: 4, Insightful

      Anytime you concentrate anything in one area, the risks are likely to be larger. If I put my money in various hiding spots, it'd be a lot safer than hiding it all under my mattress. Sure, someone may find one or two of the stash spots, but it outweighs the risk of losing it all if someone discovers it under my mattress. Okay, that analogy might have been a stretch, but I think it gets to the point of the article. I think it's only news because someone ran some tests.

      --
      WWJD.... for a Klondike bar?
  2. From the article: by RomikQ · · Score: 3, Insightful
    The 11 September attack knocked out net hubs

    Can someone please explain WTF does that have to do with anything? Do they just throw that kind of stuff in as an onbligatery 9/11 reference?
    --
    Join the elite! Post at score:2! Ghostwheel is online.
    1. Re:From the article: by Moonshadow · · Score: 3, Insightful
      A single attack was able to take out a large amount of net routing software. A similar attack, targeted at one of the net's chokepoints could be disasterous.

      It's not just a silly reference. It's a demonstration of the fact that an attack like that could have dire consequenses to the net, and at this point, there's not much we can do about it.

      Now, if they'd said "Sept 11 caused people to run around screaming, tripping over datacenter cables and unplugging the net", then I would see your point, but as it stands, it's a valid example.

  3. A Simple Internet Model by Real+World+Stuff · · Score: 2, Insightful
    From the Article:
    "In its early days the net was as decentralised, as possible with multiple links between many of the nodes forming it. If one node disappeared, traffic could easily flow to other links and route traffic to all parts.

    However, said the researchers, the increasing commercialisation of the net has seen the emergence of large hubs that act as key distribution points for some parts of the web."


    As a result, the net has become much more vulnerable to attack.
    Finally, someone other than a corporate Paki is commenting on the health of the internet. It is no longer an internet, but rather interconnected proprietary WAN's.
    --
    If we don't fight for ourselves no one will.
  4. Resilience to Attack by otisaardvark · · Score: 4, Insightful

    Internet access and bandwidth are very vulnerable, but remember there are lots of copies of the DNS server records, and the actual content is extremely widespread and can easily be put online again given some time - in a genuine emergency situation internet access would only be a priority to those on the periphery anyway. Fine, we need more hubs and greater decentralisation, but lets not get carried away.

  5. Commercialization ruins so many things. by vectus · · Score: 5, Insightful

    The Internet really isn't alone. Ads have really taken over society. Everywhere you look, from people's clothing to the garbage on the ground, to blatently all over every layer of packaging on the goods you buy at the local Safeway.

    I've gotten so sick of it. The reason I switched to Linux (probably the dumbest reason in a lot of people's opinions) was to escape the fact that every program I installed had huge logos and ads plastered all over.

    I remember when you were mocked and considered weird if you sold out. Now, if you don't sell out, you're considered stupid for not making money while you can.

    I get the feeling this blatent lack of ethics will be part of the downfall of our economy. You can only have so many people leeching at one time before it runs out of blood.

    1. Re:Commercialization ruins so many things. by Happy+go+Lucky · · Score: 2, Insightful
      I consider clothing with huge ads on them a form of commercialization. Before my day, clothing never had ads on them. It was simple and elegant. Now, people pay $30 for a t-shirt, for the sole reason that it has a big logo that will associate them with a brand only a certain social class can afford.

      More or less.

      When Cross Colors were big, I got to know more than a few people who had to decide between a new pair of huge-assed pants and paying their child support. "Screw the Kids" was apparently in that year.

      Now, near as I can tell, the big names are Tommy Hilfiger (whoever the hell HE is) and Phillies. Brilliant. Why don't you walk around wearing a flag which tells every single bluesuit that you're probably holding?

      That was brought about by the commercialization of society.

      Society has pretty much always been commercialized. Ever since Oog the Caveman realized that he wanted something that Ugg of the Hill Tribe had, and there was a way to get it that didn't involve sneaking into someone's camp or whacking him over the head.

      Commercialization has done a lot for us.. but I feel we're pushing it too far. Companies are starting to blatently ignore any privacy we have so they know where to advertise.

      They can't act on information they don't have. All Nextel knows about my phone service is that the bill is paid on time. All the Chevrolet dealer needed to know was what name to put on the bill of sale for my truck, and how to call the bank to be sure there really was $7500 to cover my truck.

      If you don't give a businessman enough info to ensure that he'll be able to collect from you, he'll be iffy about extending you credit. However, there are these green cotton things marked "This note legal tender for all debts public and private," most bearing pictures of dead white men, which tend to go a long way.

  6. They do have a point... by IdleTime · · Score: 3, Insightful

    They do have a point here.
    The fewer centralized points the traffic has to go through the higher the risk of failure. And with failure, the lack of service to millions of people.

    I can't validate the correctness of the story, but my impression has always been that the backbones are designed to failover if they hit a problem and that there are several routes between multiple backbones that is serving the same strecth of net. I may be wrong on this, but at least that was the goal back in the 80's when I first started using the net.

    The article needs to be taken serious, as more and more business depends on the net. If it fails one one or more backbone stretches, it will have enormous consequences for business, meaning your's and my paycheck may be endangered. Oh, and the answee is not to get rid of Microsoft in this case :-)

    --
    If you mod me down, I *will* introduce you to my sister!
  7. But life will go on.... by SmoothOperator · · Score: 4, Insightful
    "If you destroyed a major internet hub, you would also destroy all the links that are connected to it," said Morton O'Kelly, Professor of Geography at Ohio State University.


    It would have ripple effects throughout the internet..."

    ... and the Montana rancher will still herd his cattle, and the wine-maker in Italy will still stomp his grapes, and the crossing-guard will still be out there at 7 AM... Life will go on, boys and girls, life will go on, like it has before the 'net...

    --

    Veni, vidi, vici.

    1. Re:But life will go on.... by Em+Emalb · · Score: 3, Insightful

      OK, yes, in the aspect that you describe, life will go on. Those jobs you listed probably do not have a business need for the internet.

      Tell that to a bank, or a mdeical facility. Data communications are a very important everyday part of life. If you disrupt it, sure, the low-tech grape stompers won't see a thing. Any company with a web presence will though.

      --
      Sent from your iPad.
  8. Eggs in one basket... by ryants · · Score: 5, Insightful
    Behold, the fool saith, `Put not all thine eggs in the one basket'--which is but a manner of saying, `Scatter your money and your attention'; but the wise man saith, `Put all your eggs in the one basket and-- watch that basket!'
    -- Mark Twain (emphasis mine)
    --

    Ryan T. Sammartino
    "Ancora imparo"

    1. Re:Eggs in one basket... by mat+catastrophe · · Score: 4, Insightful

      Unfortunately, when there is only one basket, there are suddenly many, many thieves.

      --
      sig not found
  9. It's simple: Less Security = More Convenient by dagg · · Score: 4, Insightful
    The rule of "less security = more convenient" applies in nearly all situations... and it applies here as well. The only way to increase the security in this particular situation is to de-centralize the big hubs. But that will be very inconvenient to the big companies that own the hubs. There are few reasons to do inconvenient things.

    --
    Sex Gateway

    --
    Sex - Find It
  10. Re:Why not get US in on this? by Moonwick · · Score: 2, Insightful

    This isn't the government's job. Surely you wouldn't recommend that the government start dabbling in long-distance voice networks, as well, would you?

    Besides, the internet isn't a "US-only" thing. While you can improve things on your home soil, the companies that operate the backbones extend beyond just one country; there's only so much the US government could do.

    --
    Only on slashdot can a posting be rated "Score -1, Insightful".
  11. The Greater Danger of Centralization by Bouncings · · Score: 3, Insightful
    Ok, security is harmed. Given. But to me there is a much larger problem with the centralization of the Internet: control.

    Think for a minute, what country has about the most centralized internet backbone? That would be China, or, The Great Firewall of China. Look at it this way, in order to Do Something Really Bad in China, they have to implement it on one set of backbones with one central authority.

    Now that the backbone is mostly owned by big business in the United States, it centralizes control of the Internet toward big businesses. Which yeah, could really pretty much suck.

    --
    -- Ken Kinder ken@_nospam_kenkinder.com http://kenkinder.com/
  12. Missing Key Point by Hamstaus · · Score: 4, Insightful

    In its early days the net was as decentralised, as possible with multiple links between many of the nodes forming it. If one node disappeared, traffic could easily flow to other links and route traffic to all parts.

    I would not give this article a lot of serious thought. It describes how simulated attacks show vulnerable spots in the internet, and seeks to lay blame for it. However, comparing the current state of the Internet to it's own beginnings is obviously going to show differences (DUH!). I mean, back in the pre-web days (you remember those, folks? ah, sweet gopher. R.I.P.), if you didn't know exactly where or what you were looking for... well... none of this fancy googlin' stuff, that's all I gotta say.

    If you consider the growth of the internet from that point, which was basically a loose, random interconnection of .edu's, .gov's and .mil's, there was no need for centralization. However, suddenly, one day everyone wanted to be on the net! And out of that chaos, logical central points developed.

    I like to explain the internet to non-techie people as something like the Interstate highways in the United States. And using that metpahor... if you take out a central location... well, it'll be a lot slower and harder to get to where you need to go, but it's not like you've isolated an entire region for all eternity.

    My point is, there are centralized locations because it was efficient to do so. Eventually, as more and more high speed wire is laid out across the world, these will slowly become less important. It's just that the growth has been too fast for the present time!

    --
    I moderate "-1, Fool"
  13. CIDR and the centralisation of routing is to blame by ikekrull · · Score: 3, Insightful

    Obviously there were good reasons to introduce CIDR (Classless Inter Domain Routing) and concentrate the ability to route around problems to the 'core' of the internet, but this is the price you pay.

    The only way real redundancy and fault-tolerance will be restored is to introduce IPV6 - or some other means to widen the availablity of routable IPV4 space, and remove the barriers currently in place for people to partipate in the 'routable' internet.

    Of course with this comes lack of control for MPAA/RIAA/Governments, increased freedom for independent operators, and also increased complexity and route-table storage requirements for all.

    However, if the internet is to withstand prolonged and/or distributed attack, then the ability to route effectively will have to be extended further toward the edge of the net than it currently is.

    --
    I gots ta ding a ding dang my dang a long ling long
  14. Re:Why not get US in on this? by Uruk · · Score: 5, Insightful

    The government is the absolute antithesis of decentralization. Look at the heirarchy - if there's anything that public servants and the government structure as a whole is known for, it's a pecking order. Government doesn't understand decentralization, because ultimately that tends to make things harder to control and administer, and governments are all about controlling and administering. That's their core goal.

    The government's primary self-chosen mission in most countries of the world today is to promote economic growth, which often is interpreted as doing whatever the industrialists ask of them. And guess where the industrialists stand on the commercialization of the internet....

    --
    -- Truth goes out the door when rumor comes innuendo. -- Groucho Marx
  15. Centralization by signine · · Score: 3, Insightful

    I don't see why centralization would come up though, regardless of who owns the fiber, it's still in the same place. The routers are also still in the same place most likely, which basically means what's getting centralized are the servers, and we already know that. Imagine how many fewer webservers there would be if San Jose were to lose connectivity, or New York for that matter. It's also possible that with fewer providers we have fewer routers which means there are fewer places BGP is routing with. This decreases fault tolerance, of course, and to some degree performance. It's like how when you're in Iowa you see most of your traffic going through Kansas City, even if it's going to Chicago.

    *shrug*

    --
    If there is a God, you are an authorized representative. - Kurt Vonnegut Jr.
    1. Re:Centralization by questionlp · · Score: 2, Insightful

      One way that I think having less, but larger companies owning more of the backbone could be potentially be a hazard is that large companies are harder to steer, cutting costs and overhead is always on their minds (which means the could be cutting down the quality of the engineers and staff, which could create weak spots in portions of the company), and the fact that the larger the targets are... the more prone they will be to dissidents and people who just plain don't like them (i.e.: Microsoft or AOL/TW).

      Just a kludge of thoughts that crossed my mind.

  16. Monoculture Considered Harmful. Film at 11. by mudshark · · Score: 5, Insightful

    Yes, Virginia, the health of the Internet *does* depend on decentralized technologies such as multiple backbones, gegraphically distributed root name servers, and standards committees not answerable to any single political entity or product vendor.

    It's no different from a business monopoly, (or cartel, or oligopoly) which tends to create artificially high prices, poor quality of goods and services, and in the case of computing and networks a fertile breeding ground for viruses, worms and other nasty exploits.

    And the analogue these worlds share with real live ecosystems is uncanny: Plant an entire state in one strain of corn for a few seasons in a row and watch the fun.

    Didn't we already learn this crap? Why do the FCC, FTC, SEC and other god-forsaken, nutless bend-over wastes of acronyms keep rubber-stamping all the mergers?

    --
    In other news, astrophysicists have announced that they now know what all that dark matter is: it's stupidity.
  17. Re:Why not get US in on this? by daeley · · Score: 3, Insightful

    You're absolutely right! Can you even imagine some part of the government trying to think about decentralization? Ha! Their brains would probably explode! Stupid governments.

    --
    I watched C-beams glitter in the dark near the Tannhauser gate.
  18. Re:We can only hope by daeley · · Score: 3, Insightful

    I'm puzzled why this was rated as ``off-topic''. Guess there wasn't enough anti-Microsoft content.

    He should have linked to this picture. :)

    --
    I watched C-beams glitter in the dark near the Tannhauser gate.
  19. BGP and conflicting policies are the problem by wuchang · · Score: 2, Insightful

    One of the biggest problems in the backbone is that attempting to support arbitrary routing policies driven by a myriad of different customers overconstrains the problem of global internet routing. This leads to configurations in which either many solutions exist or no solutions exist to the routing problem and causes routing instability. Couple this with the fact that router configuration is a black art that is extremely error-prone and you get WorldCom-like outages. Such problems will actually IMPROVE with more consolidation. If you're interested, check this paper out.

  20. Re:didn't the internet start out by jc42 · · Score: 3, Insightful

    It could be useful to point out once again that multiple interconnections and multiple routes was an important part of the original Arpanet that led to the Internet. It was (as the commercial people keep forgetting) a project funded 100% by the US Defense Department, and they wanted a network that would survive in battle conditions. Fact is, this is also a good design principle for design in a world where many of the components have a MTBF of days or weeks.

    Problem is, commercial folks invariably see reduncancy as a needless expense. Their natural tendency is to reduce everything to the bare minimum (while selling the maximum, of course). Then when anything breaks, big chunks of the system are down.

    The World Trade Center attack is an excellent example that woke up a lot of people. There was far too much infrastructure passing under those buildings, and as a result, a lot of the communication systems in Manhattan collapsed along with the buildings. This stupidity was pointed out by people before the attacks, but the commercial interests in charge of the comm lines saw no profit in decentralizing. Even now, they're resisting the idea and merely rebuilding a lot of the destroyed capacity, because a better system would be more expensive.

    Governments have stepped in and forced things like the phone, electricity and highway systems to have alternate routes that can be used in disasters and emergencies. The Net is becoming an important part of the world's infrastructure, and eventually those evil old governments are going to step in and force the commercial crowd to supply redundancy in the same way.

    --

    --
    Those who do study history are doomed to stand helplessly by while everyone else repeats it.
  21. This is twaddle by ethaz · · Score: 4, Insightful
    With multiple commercial carriers, all operating their own backbones from multiple POPs the likelihood of the destruction of a building, or for that matter, an entire city having an impact on Internet connectivity overall is nonsense. The largest backbone providers, AT&T, UUNet, Sprint, Qwest, Level 3 all operate with SONET rings at the physical layer plus BGP4 routing. And all of them operate from separate physical facilities (UUNet and Sprint don't normally share a building, for example). Further, since the MAEs, the NAPs and other public peering points are, for the most part, irrelevant to the major backbones (their private peering arrangements are separate from these places), their connectivity to each other would survive. Sure, it might need to be shifted from SF to, say, Chicago, in the case of an emergency, but that could be done in a day or so, if not in hours. If anyone of them lost a major node, they continue to operate. The only effected connections would be those directly connected to that disable node.


    This is far better than the pre-1993 days when there was a single backbone, operating on non-redundant private lines.

    I guess this guy wanted some publicity. He got it.

  22. You won't like the way life has to go on... by alizard · · Score: 3, Insightful
    However, that Montana rancher may have one hell of a problem getting to his CitiBank account and that low-tech grape stomper might find a "CLOSED" sign on that farm whose ability to take orders from the companies they supply suddenly got unplugged.

    I'm amazed to see comments like yours on a tech forum. Civilization has put its eggs in the internet basket. Basically, because it's cheaper.

    Most data traffic having to do with operating the supply chain that gets those grapes to your grocery store in terms of wine and that cattle rancher's product to your store in terms of steak goes through the Internet. Even in the cases where this isn't so, you can bet that at least a few critical links in the supply chain are via Internet.

    Could workarounds be found? For the short term, maybe. However, perhaps you'd notice if the price of milk in your grocery store went up 50% or average prices at WalMart went up 100%.

    The only people who wouldn't notice the effects of a long-term loss of the Net are so remote from civilization that the international market economy doesn't touch them much, and that doesn't even describe most of the Third World. They might not know why they suddenly can't make a living or the price of anything imported doubled or worse, but they would notice.