Slashdot Mirror


Web Security CEO Warns About Control Of Internet Falling Into Few Hands (cnbc.com)

The idea behind the internet was to make a massive, decentralized system that wasn't under control of anyone, but that is increasingly changing, according to Matthew Prince, CEO of web security company CloudFlare. His statements come at a time when Google and Facebook and other companies are increasingly building new products and services and locking in users to their respective walled gardens. From a CNBC report: "More and more of the internet is sitting behind fewer and fewer players, and there are benefits of that, but there are also real risks," said Matthew Prince, chief executive officer of web security company CloudFlare, in an interview with CNBC. His comments came at CloudFlare's Internet Summit -- a conference featuring tech executives and government security experts -- on Tuesday in San Francisco. "If everything sits behind Facebook and you can't publish pictures like that, is the world a better place? Probably not," said Prince. "Before you know it, you could wake up and find more of the internet sits behind a small number of gate-keepers," said Prince. Putting that sort of power in the hands of a small number of people and companies "might not be the best thing," he said. Still, the wave of consolidation among the major internet companies is likely to continue, at least for now, he said.

2 of 87 comments (clear)

  1. Not really a problem, IMHO. by Qbertino · · Score: 2, Interesting

    Google and Co. are basically what Compuserve, AOL and T-Online were back then.

    All that needs to happen is that a few FOSS developers finally get fed up and finally redo all protocols that have gone bad or broken and replace DNS with some Blockchain based namecoin thingie, replacing email and perhaps even web on top of that with some new, fully network abstracted and end-to-end encrypted data exchange layer sans anoying ads and Facebook is history.

    Until then we're simply a two class internet, with ordinaries on Facebook and experts on encrypted Jabber and maybe diaspora.

    Facebook, Snapcrap, WhatsCrap and the liked are basically todays mass media channels. But unlike the unwieldy and expensive radiostations of yesteryear they can be replaced by the next teenager with a laptop, some extra time and the next fad up his sleve.

    I really don't see much of a problem here. Not yet that is.

    --
    We suffer more in our imagination than in reality. - Seneca
  2. Standards by nine-times · · Score: 5, Interesting

    I think the root of the problem here is that, in the past several years, there has been no focus on developing common open standards.

    I think the easiest example to give is the difference between messaging apps and email. If I use Gmail and I want to send an email to someone whose email is on Office 365, AOL, Yahoo, a private email server, or any email server at all, there's not really any difficulty. I can connect to my server either by using Google's website or by using a standard protocol (SMTP), the email gets transferred to the recipient's mail server through a standard protocol (again SMTP), and then the recipient can probably download it using a standard protocol (e.g. IMAP). SMTP and IMAP aren't without their shortcomings, and the openness of this system has had problems because of its openness (e.g. spam), but overall it works wonderfully. However, things would not work this way if they were designed today.

    In contrast, several companies (including Facebook, Apple, Google, and Microsoft) have developed messaging applications, which are to some degree aimed at replacing SMS, IM, and/or email. These applications each use proprietary protocols for sending and receiving messages, and there is no compatibility between them. While I can use Thunderbird to send and receive my email on my Gmail account, there isn't a 3rd-party open source Hangouts app, because (at least as far as I know) the protocols for it are not open. From my Gmail account, I can send email to users with "facebook.com" email addresses, but I can't use hangouts to message with Facebook Messenger users. I need a Facebook account in order to do that.

    This is just an easy and obvious example. I chose to compare email to messaging because I think it makes for an easy comparison, and it's clearly a bit stupid. There isn't really anything so complex about text messaging that Facebook, Apple, Google, WhatsUp, and all other messaging apps couldn't simply message each other. However, I don't think this a fluke, but instead the easiest-to-understand example of how the internet is moving more and more toward walled gardens. Nobody is developing open standards, or at least, nobody is really agreeing to use them.

    To give another example, many sites let you log in with your Facebook account or your Google account-- I think some let you use a Twitter or LinkedIn account. This is great, since it diminishes the number of login credentials that you need to know, memorize, or secure. However, each of these companies are basically offering their own separate incompatible authentication service. The site developer has to decide to actively support Google Authentication, and if they do, it doesn't allow me to authenticate on their site against my Facebook credentials (for example). They must support each method of authentication individually, rather than having one framework that allows authentication against whichever identity provider the user wishes to use.

    And although some people will think I'm a crackpot, I think this is a very widespread problem that includes Silicon Valley's obsession with "apps". Instead of developing a photo-hosting service, you have to have a photography app that's tied to a service. They make it so you can't use the app with a different service, and you can't use the service with a different app. Then a couple of companies (e.g. Google, Microsoft, Facebook, Apple) buy all these different apps, and make it so the apps and the services only interact well with their other apps and services. It's not hard to see how this quickly turns into a set of walled gardens.

    In my view this all goes back to the issue of standards. If these apps and services used standard protocols and standard APIs, then they could all interact with each other.