Slashdot Mirror
Paul Vixie On the Unevenly Distributed Intelligence of Internet Infrastructure
CowboyRobot writes "Writing for ACM's Queue magazine, Paul Vixie argues, "The edge of the Internet is an unruly place." By design, the Internet core is stupid, and the edge is smart. This design decision has enabled the Internet's wildcat growth, since without complexity the core can grow at the speed of demand. On the downside, the decision to put all smartness at the edge means we're at the mercy of scale when it comes to the quality of the Internet's aggregate traffic load. Not all device and software builders have the skills and budgets that something the size of the Internet deserves. Furthermore, the resiliency of the Internet means that a device or program that gets something importantly wrong about Internet communication stands a pretty good chance of working "well enough" in spite of this. Witness the endless stream of patches and vulnerability announcements from the vendors of literally every smartphone, laptop, or desktop operating system and application. Bad guys have the time, skills, and motivation to study edge devices for weaknesses, and they are finding as many weaknesses as they need to inject malicious code into our precious devices where they can then copy our data, modify our installed software, spy on us, and steal our identities."
fb.
Its not that the beta is horrid on top of that now you get spammed with mega banners and popups, what is this 2001? all over again? Is slashdot really dieing. You guys need to make your mind.
As of now on slashdot you need to have No Script running plus at least Addblock, also block the shitty flash too.
This may be actually time to start looking around, anyone interested starting slashdot 2?
I think that Slashdot is a perfect rebuttal to this theory.
The existing site, while not perfect, is far closer to the "core" of the Internet than it is to the "edge". Yet despite its shortcomings, it's actually a very usable and practical site. We can easily engage in discussion here, for example. It's anything but "stupid". It's quite smart and pragmatic.
Then we have the Slashdot beta site. It's obvious at the "edge" of the Internet, so to speak. Yet it is not "smart". As anyone who has used it will know quite well, it is as dumb as it could possibly be. It's so broken and awful in so many irreparable ways. It makes it damn near impossible to read the content here, and even more difficult to participate in discussions. It's a failure, and best categorized as "stupid".
So I don't totally buy this theory. I think that the "core" is often the "core" because it's the smartest or best way of doing something. What we find floating at the "edges" is crap, like the Slashdot beta site. It's at the "edge" because it's nothing more than a turd that has been flung away from civilization.
I'm sorry, this is off topic, but I was getting a warning at the top of Slashdot that classic is going to be going away soon (looks like in 6 months).
How many readers are going to leave if slashdot classic is cut off completely?
It's just the way TCP/IP was designed, back in the ARPANET days, you know.
Putting all the intelligence in the hosts allows for more resiliency, since it takes a lot to the bring the whole infrastructure down this way.
Mobile networks are quite the opposite, though (smarter infrastructure, a little more dumb terminals).
Software defined networks are definitely a way to bring some intelligence back in the infrastructure of IP networks.
We'll see if it will enable a smarter Internet or not.
Paul Vixie can pontificate on the Unevenly Distributed Intelligence at Dice that has resulted in this abomination known as Beta Slashdot...
If you want news from today, you have to come back tomorrow.
n/t
We have the core of the internet, the "FUBARBeta"!
g+.
I made this, specifically for item "B" below: Hosts do more w/ less (1 file) @ a faster level (ring 0) vs redundant browser addons (slowing up slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ OS, & 1st net resolver queried w\ 45++ yrs.of optimization):
---
APK Hosts File Engine 9.0++ 32/64-bit:
http://start64.com/index.php?o...
(Details of hosts' benefits enumerated in link)
Summary:
---
A. ) Hosts do more than AdBlock ("souled-out" 2 Google/Crippled by default) + Ghostery (Advertiser owned) - "Fox guards henhouse", or Request Policy -> http://yro.slashdot.org/commen...
B. ) Hosts add reliability vs. downed or redirected DNS + secure vs. known malicious domains too -> http://tech.slashdot.org/comme... w/ less added "moving parts" complexity + room 4 breakdown,
C. ) Hosts files yield more speed (blocks ads & hardcodes fav sites - faster than remote DNS), security (vs. malicious domains serving mal-content + block spam/phish), reliability (vs. downed or Kaminsky redirect vulnerable DNS, 99% = unpatched vs. it & worst @ ISP level + weak vs FastFlux + DynDNS botnets), & anonymity (vs. dns request logs + DNSBL's).
---
* Addons are more complex + slowup browsers in message passing (use a few concurrently & see) - Addons slowdown SLOWER usermode browsers layering on MORE: I work w/ what you have in kernelmode, via hosts (A tightly integrated PART of the IP stack itself)
APK
P.S.=> * "A fool makes things bigger + more complex: It takes a touch of genius & a lot of courage to move in the opposite direction." - Einstein
** "Less is more" = GOOD engineering!
*** "The premise is, quite simple: Take something designed by nature & reprogram it to make it work FOR the body, rather than against it..." - Dr. Alice Krippen "I AM LEGEND"
...apk
Yes, intelligence is very unevenly distributed on the internet. By one measure, approximately 25% of the internet audience will find a complete void of any intelligence at all. I say, fuck that.
We can't change the first two without destroying the Internet, but there's no reason why computers should contain so much valuable information to steal.
Stop /. redirecting you to it @ least, by adding THIS to your hosts file:
216.34.181.45 beta.slashdot.org
216.34.181.45 slashdot.org
216.34.181.46 images.slashdot.org
216.34.181.48 it.slashdot.org
216.34.181.48 developers.slashdot.org
216.34.181.48 yro.slashdot.org
216.34.181.48 mobile.slashdot.org
216.34.181.48 news.slashdot.org
216.34.181.48 ask.slashdot.org
216.34.181.48 tech.slashdot.org
216.34.181.48 apple.slashdot.org
216.34.181.48 books.slashdot.org
216.34.181.48 games.slashdot.org
216.34.181.48 hardware.slashdot.org
216.34.181.48 interviews.slashdot.org
216.34.181.48 linux.slashdot.org
216.34.181.48 science.slashdot.org
216.34.181.48 idle.slashdot.org
* :)
THAT will block out their ability to redirect you to it whatsoever - Especially the 1st line item/BOLDED entry above...
(You're welcome)
APK
P.S.=> To import, sort, deduplication, create & manage a custom hosts file easily that does not only THAT shown above (plus that also secures you vs. redirects @ the DNS or even site level), but also gives you more speed, security, reliablity, & even anonymity, use this (shameless plug, details of what custom hosts give you in FULL are listed here) -> http://start64.com/index.php?o...
... apk
that are the cause of breaches and insecurities of the Internet. Long ago that was not the case, because simply connecting a computer to the Internet would get it infected with malware. Computer and browser makers have learned how to largely avoid this, but no one has yet figured out a way to prevent trusting or stupid human beings from giving permission to install programs that subsequently are able to do severe damage. This is part of human nature and will never change.
A sufficiently advanced simulation is indistinguishable from reality.
To validly disprove (with computing tech) my points on hosts files - which, I KNOW, can't be done: Hence their cowardly reprehensible "hit & run" downmod of my post, but yet not being able to disprove my points.
* :)
(That's really ALL I need to see/know... it tells me my points are invulnerable & they are - Truth, always is!)
APK
P.S.=> I also think it's VERY FUNNY they think their effete impotent "downmods" will "hide" my post - the fool doing the "hit & run" downmod apparently doesn't realize that MOST folks here browse well below the default "moderation threshold" (which is easily sockpuppet cheated, or by logging out of your account after downmodding others, then trolling by ac instead afterwards - talk about "Busted Code" - figures though: Look @ the TYPE of "men" (using that term loosely) who designed it: Nerd weasels who act like women (and downmod others unjustly as is thecase here), who aren't even GOOD @ design for Pete's sake... lol, about as good @ programming as Mr. Vixie's shown himself to be, what-with his EASILY redirect poisoned & fastflux botnet abused DNS system...!)
... apk
http://queue.acm.org/detail.cfm?id=2578510
Complaints about beta go here (;-))
davecb@spamcop.net
Hosts do more w/ less (1 file) @ a faster level (ring 0) vs redundant browser addons (slowing up slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ OS, & 1st net resolver queried w\ 45++ yrs.of optimization):
---
APK Hosts File Engine 9.0++ 32/64-bit:
http://start64.com/index.php?o...
(Details of hosts' benefits enumerated in link)
Summary:
---
A. ) Hosts do more than AdBlock ("souled-out" 2 Google/Crippled by default) + Ghostery (Advertiser owned) - "Fox guards henhouse", or Request Policy -> http://yro.slashdot.org/commen...
B. ) Hosts add reliability vs. downed or redirected DNS + secure vs. known malicious domains too -> http://tech.slashdot.org/comme... w/ less added "moving parts" complexity + room 4 breakdown,
C. ) Hosts files yield more speed (blocks ads & hardcodes fav sites - faster than remote DNS), security (vs. malicious domains serving mal-content + block spam/phish), reliability (vs. downed or Kaminsky redirect vulnerable DNS, 99% = unpatched vs. it & worst @ ISP level + weak vs FastFlux + DynDNS botnets), & anonymity (vs. dns request logs + DNSBL's).
---
* Addons are more complex + slowup browsers in message passing (use a few concurrently & see) - Addons slowdown SLOWER usermode browsers layering on MORE: I work w/ what you have in kernelmode, via hosts (A tightly integrated PART of the IP stack itself)
APK
P.S.=> Hosts files can also STOP THE REDIRECT TO /. "beta", easily, just as shown here -> http://tech.slashdot.org/comme... can "almsot all ads blocked" (lol)? Hell no - like I said, it's inferior & that is only 1 of roughly 18 areas I can PROVE it is... in addition to being 'souled-out' to admen/google
...apk
Yes, but fuck beta?
Here's a comment, requested or not: Fuck Beta.
Complexity is a vulnerability. Simplicity is a strength.
If something is just too simple to be modified or hacked or manipulated by anyone including the rightful owners then its too simple to be perverted by a hostile agent. Simplicity is frequently a virtue.
I've decided to stop wasting my time responding to AC trolls/sockpuppets... so if you want a response from me... login.
Fuck Beta.
You have ignored the desires of this community to push your own agenda. You merely want us to believe you care, nothing more.
"Bad guys have the time, skills, and motivation to study edge devices for weaknesses..."
But you know, it's funny... I would have thought the giant corporations that are behind manufacturing these devices (and in many cases the software for them) have just as much skill to look at these things from the other end.
Apparently what they have lacked is the motivation to do so. That should change.
It's easy enough to do. The principle is what matters & the 1st line shows you it (I changed beta.slashdot.org to the IP address of slashdot.org - so, that said? Just take the subdomains noted & put their "classic site" analog IP addresses to them, & those 'classic models'' are listed in MY list already (for protection vs. DNS redirect mostly, but also for speed of resolution locally vs. remote DNS lag in comparison)
APK
P.S.=> Enjoy - however, it's ONLY "forestalling the inevitable" imo: The "money men" are in control here, not the former owners, or the editors (who are only 'championing' the 'beta' to hold onto their jobs - sad, but true & that IS life @ times)!
Hey, for me? Well - This place has served its purpose for me (which lately, has only to "turn folks on" to hosts & my program, since I know this place is going downhill + has been since the troll population & bogus sockpuppet or logout of your account after issuing a downmod + troll by ac afterwards population here got SO out-of-control - I only use it as a FORUMS for "Spreading the GOOD word" of my app & what it can do for users, gratis, in more speed, security, reliability, & anonymity...).
S so, after 10++ yrs. of hanging around here? I may just have to find another site since they DEMAND javascript (the root of all evil online basically in malcode that exists online on sites) - FOR TRACKING - "f" THAT!
... apk
DNS can use UDP, yes, but it can also use TCP, so as an example of "a UDP", it is quite poor.
The real "Libtards" are the Libertarians!
Said it best (I merely listened & applied that idea) -> http://tech.slashdot.org/comme...
* :)
(Especially since it actually WORKS for better online speed, security, reliablity, & even added anonymity (vs. DNS request logs OR DNSBLs)
APK
P.S.=> Hosts ARE a simple design, & easily managed manually even (unless large, & that's where my app takes over) - plus, they "shore up" faults in DNS (redirect poisoning &/or FastFlux botnets that abuse it like mad (& they ARE becoming the prevalent design in botnets, fast - big threat: Almost as big as javascript itself... stupid, stupid, stupid! It's like they IGNORED what happened to MS & Adobe with scriptable documents, & the same is happening online because of it... CGI Bins/Win CGI was a SAFER model by far, in a TRUE "client-server" design where the server DOES THE PROCESSING WORK, not the client!)... apk
Ever since he became a Dice shareholder, that is. But does he know that Dice assigns zero value to Slashdot?
"they need to inject malicious code into our precious devices where they can then copy our data, modify our installed software, spy on us, and steal our identities."
Not on my networks, which comprise about 1 million people at the moment.
All of our infrastructure is open source and we don't have those issues. Been opeperating a standatf 3.x kernel on 25 routers with millions of people accessing them, along with the server software, also LINUX based running Apache, Tomcat Servlets, and PostGRES...OpenLDAP and TLS for the internal key management infrastructure.
so I don't see a problem with the internet as designed, works very well. It doesn't need change.
You are trying to change the internet for your own malicious purposes, in my opinion, than actually address the problem:
1) Internet security as far as functionality is concerned, works extremely well. I travel and I go to many places, and there has only been once in the past two years I couldn't access my VPN server due to a real internet outage. I say outage because the local admin at your so called "smart edge" made a few bad investment decisions, proprietary gear bankrolled with back doors.
2) Most of the problems you do see with sites, internet infrastructure is entirely not related to the internet as designed per se, but a frustration with governments who don't like what the internet is doing. That is, an obstruction to their spheres of power and political and industrial espionage which they require to gain an edge to stay in power.
The internet has a nasty habit of revealing the connections of two sets of laws that normally can't be seen by the plebs: That is the ones that say you have to spend 5 years in prison for 1 ounce of pot, complete with a criminal record so you will never be hired again vs. If you're say a Banker, and rob whole countries you get a pay raise and pat on the back or send you send the plebs to thier doom. For example, when the French found they couldn't get any of their gold back from the Fed they invaded Mali to stabilize their banks.
So I don't see any problems with the internet.
I do see a problem with governments and the internet coexisting together though, but that is not a technology problem.
As I see it, one or the other has to go and so far the internet is fighting a losing battle.
Got Geometrodynamics? Awe, too hard to figure out? Too bad.
http://tech.slashdot.org/comme...
* :)
It'll allow you to access CLASSIC slashdot for as long as it exists on the server/IP noted, stopping the redirect...
APK
P.S.=> I only got redirected to it once, hasn't happened since because of hosts overriding I do - I couldn't stand the beta since it DEMANDS javascript to particpate here (that, is going to KILL this site if they keep it up - since everyone KNOWS that javascript is TRULY, the "root of all evil" online as a scripting language in in document for Pete's sake, in trackers, malicious script, etc. - they didn't LEARN by the Adobe & MS example in macros apparently. CGI bin &/or Win CGI was a SAFER model to do the same, all server-side like a GOOD "client-server" design model where work is done server side, & no business logic in the front-end OR processing CPU cycles excessively eaten by clientside PC processing either)... apk
"it's not ready" as you say, so can we please stop use it until it is ready?
PLEASE stop redirect us to this not ready thing
PLEASE let users themselves choose if they want to betatest this not ready thing.
Well it seems to have improved a bit since I last tried it.
Pity it takes so much vertical room that I have to scroll a lot of see comments. Still work to do. So I don't think its going away anytime soon.
Also why do we still have 'load more' on a desktop system in this day and age?
And the serif fonts, I know they're supposed to be more readable but they seem strangely irritating.
serif fonts is never more readable on screen, and you should at least have 300dpi before you use seriffed fonts.
(as always on the web, prettify headings etc if you like, but whatever you do in the CSS, never change the normal text font.)
Let's hope dice stop forcing all of us to suffer this horrible beta madness now. they got their feedback, all the feedback they ever gonna get... why make the pain longer?
http://tech.slashdot.org/comme...
* :)
(Enjoy!)
APK
P.S.=> Via a SIMPLE easily done hosts file edit, you control THEM, not the other way around... apk
Can you just f** remove it for us ? I think that most people hate it.
x
"the Internet core is stupid, and the edge is smart"
That is true on SO many levels.
Let's punch them where it hurts. FUCK BETA
Very true.
make it go away
You must be some sort of a Markov chain.
Perhaps
Paul Vixie on measures to prevent the Internet's architecture from assisting Dos attackers.
(It will still be dumb core, smart(er) edge after the changes.)
AFIK SMS was a testing mode, rides along the signal path anyway, essentially free to implement, Yet they monitized the crap out of it.
wanted: one clever sig,apply within