Slashdot Mirror
MIT To End Open-Network Policy In Response To Recent Attacks
An anonymous reader writes "MIT announced that despite a long history of running an open network (so that any student can run a server on any port, without any questions asked), it will now end this policy due to recent denial-of-service attacks and gunman hoax. From a letter sent by Executive Vice President and Treasurer Israel Ruiz: 'I am deeply and personally committed to safeguarding our community, protecting our campus and securing our systems. Together with our colleagues dedicated to campus safety and security, with the support of senior academic leadership and in collaboration with the campus community, we are deploying all necessary resources to this effort. It will require the dedication of all of us to promote safety awareness, complete necessary emergency training, and adhere to reinforced cyber security guidelines. IS&T staff members are working with information technology (IT) leadership and partners across campus in making the changes described above. We continue to explore all opportunities to further strengthen our preparedness, and will communicate additional information as these plans evolve.'"
"over a gunman... blah blah... blah..."
Okay, thanks MIT. You just let the terrorist win. Giving into fear is a stance the country as a whole has never given into. Even after 9/11, the most destructive terrorist attack on US soil ever, we said "Fuck the terrorists. We don't negotiate. Ever." And yet, here you are, one of the premier educational institutions in the country, where our best and brightest come to learn, caving like a house of cards.
You're pathetic.
#fuckbeta #iamslashdot #dicemustdie
Apparently, the new policy is just by default:
Those engaged in research, teaching and learning activities will be given the option to opt out of the default network security policy through a self service mechanism.
Basically, it looks like someone in administration finally asked "What if we're actually a target?" and the response was "we're royally screwed". Yes, it's nice to give open access to everything, but I doubt most college students, even at MIT, follow reasonable security procedures. So now, they're going to block everything by default, and if someone wants to open access, they can do it themselves. Best case, there's no problems and nobody notices. Worst case, MIT's network isn't such a help during an attack.
So a university changed its default security policy. Big deal. I don't see how this is newsworthy.
You do not have a moral or legal right to do absolutely anything you want.
A few assholes can and will ruin a good thing for everyone.
Hail Eris, full of mischief...
E pluribus sanguinem
Bad form to reply to myself, I know, but I did find one noteworthy detail in that memo upon further inspection:
Passwords will also be tested to ensure a minimum level of complexity; existing weak passwords will be required to be changed.
...so MIT stores its passwords in a form that allows complexity testing... Interesting.
They could just be brute-forcing 7 characters and calling it a day, or adding something to a commonly-used login system... but if it's feasible to test how complex an existing password is, I have to wonder about how the passwords are being stored.
You do not have a moral or legal right to do absolutely anything you want.
The "Home of the Brave" is a joke at MIT, and U.S. universities across America. Once the wussy administrators take hold, all is lost without a fight. Wussy administrators will use security and safety as they cudgels, They will hide behind their desks and enact policy that eliminates any freedom that may challenge the status quo.
This is, in fact, what America deserves unless and until we ALL have the courage to fight it everywhere it is. I would say "Shame On You" to MIT, but I would be decades late.
Of those who ... know ... and do ... infinitely ... more ... than he.
Executive Vice President and Treasurer Israel Ruiz [the he] shows the length of his Penis, his most valued object that he worships 24/7 with devout devotion, is the deciding 'criteria' on anything now and forevermore MIT.
they were just waiting for an excuse to kill open access... this may even get rid of RMS
MIT students really like the freedom that they have on their nets, and in fact, have come to take it for granted. I forsee massive disobedience to this, along with protests. and I'll be standing there right beside them.
I mean, yes, this is Slashdot, so the kneejerk reactions are appropriate, but if you bother to read the article, the changes are just plain common sense. They are going to enforce reasonable passwords, and if you want to have an externally accessible server, you either need to use a VPN, or opt out of the security policy. All this foaming at the mouth about the end of academic freedom sounds a lot like the NRA freaking out when someone proposes limiting how many rounds you can fire off at a time without reloading.
And since I need to have something in the message body, I think we could all learn from the NRA's mastery of agitprop:
http://tpmmuckraker.talkingpointsmemo.com/2013/04/nra_magazine_covers.php
Hail Eris, full of mischief...
E pluribus sanguinem
Here they admit they don't understand the Internet, by limiting incomming "connections" and acting if there was a difference between a server and a client. It's a testament that freedom and education are now less important than stupidity and the fear of imaginary dangers.
What is the faculty's response to this response?
a commitment to a “free and unfettered internet.”
We had a "free and unfettered internet"...and then the spammers-, virus coders-, and hackers-for-profit moved in.
Orwell: "In a Time of Universal Deceit, telling the Truth is a Revolutionary Act"
From what it sounds like they are trying to be reasonable, and not a brain dead one size fit all solution
I'm dismayed that MIT, of all places, uses the thoroughly awkward term "cyber security" in its official correspondence. Outside of a few sci-fi novels, "cyber" seems to be the province of clueless congressmen and the reporters who love them. It's a buzzword for media outlets, politicians, and consultants who don't understand the net, want to profit from others' lack of understanding of the net, or both.
How does this effect me? How does this effect 99.9% of the world? Who cares?
Common US rule :
For your security, we are getting rid of your liberty.
Shows this guy's "commitment", dunnit?
If it acts like an old woman, talks like an old woman, ...
Shit, both my grandmothers had more spine than he.
Honestly after the whole Swartz case we knew it wasn't a 'free network.' You know, it would have been nice if they "secured it" to their liking before they harassed someone to death for using it.
It probably doesn't _affect_ you at all, since you apparently didn't get an MIT education, let alone any education.
False flag?
CS is not networking not IT / severs and not desktop / help desk work.
Now maybe if you where a programmer then the classes would of helped you more.
In unrelated news, Slashdot has asked the community for hosting recommendations as the current provider is changing their network policies.
...what you're blathering on about?
systemd is Roko's Basilisk.
CS students NEED that stuff though before they overuse resources on shared machines/networks. BTW, it's clear you skipped your English classes. "Would of" is not a contraction for "would have", but "would've" is.
Those who are willing to sacrifice so much freedom for so little seurity deserve to live the consequences. Now at UNIs there is as much allowes creativity and curiosity as in the toughest corporate environment.
If you're a student, running your game server (or Net-accessible model railroad controller, or whatever) doesn't have anything to do with what you're paying MIT
You are there to learn, why does it have to be only through classes? What is the point of computer labs and a fast network if not to help you learn? That's part of the REASON you go to a college, so that you have access to facilities you would not otherwise. May as well burn down the library also, or only allow check-out of course approved books!
If you aren't allowed access to resources around you for however you want to learn, then there is REALLY no point in going to college at all. And MIT just lost a distinctive advantage that made them a better technical school. Now there is no way I could justify paying an MIT tuition with them basically treating students like criminals.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
If you feel so strongly about your views, why are you posting A.C.? Should we really not try to analyze why events happen? And while we're at it, let's generalize with statements like "You can't negotiate with these guys"
CS is not networking not IT / severs
Part of it very much is (especially networking). How can you design an application to make effective use of a network without at least understanding the basics of how a network works?
It's all intertwined, and any good CS program DOES have some options to help you learn those things. But it's not like additional learning does not help.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
When I worked at MIT (admittedly, years ago), we left things open because to do otherwise was to challenge students to attack. Security through boredom worked - until the outside world caught up to the point where they presented a significant threat.
Cyber Semantics Nazi!
Someone will invariably ruin it for everyone else. Trolls are part of human nature I guess.