How SOPA will destroy Internet security

Discuss

22 Responses to “How SOPA will destroy Internet security”

  1. tofagerl says:

    How come none of the anti-SOPA congressmen called them on it? Why didn’t they just say “Well, honorable gentleman from Texas, how about you explain to us exactly why you think the security problems won’t apply? Don’t worry about getting too technical, I’ve got this engineer from Cisco here to fact check you.”

    • elix says:

      I think their attitude is “I don’t know but I don’t care, I’ve been paid to make sure this passes so stop talking.” They sure acted like that was the partyline.

  2. Cowicide says:

    Cory, I made your monkey here at this link (see link for details/attribution/mask/etc):
    http://boingboing.net/2011/12/17/wtf-is-happening-with-sopa-now.html#comment-388925149

  3. i’m starting to wonder if only idiots can get their election campaigns funded.

    • HahTse says:

      They are not idiots. They are just so skilled in getting elected (= their campaigns funded), that they suck at everything else. The german word for this is “Fachidiot” (plural: “Fachidioten”)

  4. TacoChuck says:

    As a slashdot headline read this week, it just isn’t fucking funny any more that our national lawmakers are technology ignoramuses.  It is time they start getting called on it and voted against if they a tech idiots.

    • DyingAtheist says:

      The problem is the US doesn’t get to pick and choose like that. The UK is the same. You have to pick the lesser of two evils. In a perfect world voters would have the ability to individually select an expert for each issue. Imagine a world where public support meant the experts behind the internet got 95% of the decision making power on this issue! I’ll ignore the realistic conclusion of that line of thinking, which is Oprah Winfrey and the cast of America’s Got Talent controlling every aspect of our lives…

      • HahTse says:

        Look up “Liquid Democracy”.

      • scav says:

        It’s nothing like as bad as that in the UK: we have multiple political parties (at least 3 major ones), and when one of them fucks up badly, the others have to adjust their policies to try to hoover up a share of the disillusioned voters.  None of them can expect to sit back complacently and get those votes without at least giving the appearance of addressing the issues.

        Also, independent candidates don’t need a multi-millions campaign fund to get elected.  They just need to front up a 500 quid deposit and a thousand signatures, and they often get elected on their own merits when the public get sick of party politics.

        In Scotland it’s even better: the parties with seats in the parliament are the SNP, Labour, Liberal Democrats, Conservative and Green (and one independent).  It’s still mostly a 2-horse race but the horses are different than in the UK parliament, so we get to keep the bastards on their toes.

        • DyingAtheist says:

          We have two parties, both desperate to be as broadly accepted as possible resulting in two identical leaders with big smiles and dark hair that only differ on major ideological issues (same as US). The third party plays the role of forward thinking and progressive in a desperate attempt to gain the vote of the currently non-voting youth. As soon as they get near power they abandon all their ideals just so they can join in with the big boys. The Green party is like the BNP, in that it has one issue to push and has no place controlling all of government. The SNP lives off of the “we hate the English” vote and honestly is worse then the BNP. It wants power for itself at the expense of it’s country. And yes I am vastly oversimplifying but I’m afraid I cannot accept that we are better off then the US.

          • Antinous / Moderator says:

            The SNP lives off of the “we hate the English” vote and honestly is worse then the BNP.

            Yeah, they’re worse than the openly fascist BNP. Except for, you know, being progressive and supporting things like racial equality and gay marriage.

  5. Hey, I have this idea. How about letting people who have a clue make technical decisions? Crazy right? Right?!

  6. Marktech says:

    I know that Upton Sinclair has been quoted on this before, but it bears repeating: it is difficult to get a man to understand something, when his salary depends upon his not understanding it.

  7. DyingAtheist says:

    Hours of logical and factual arguments against SOPA going up against that maid from Family Guy who just says “No….no…..no. You sign bill”. It’s so terrifying it goes beyond parody. You could throw together a comedy sketch with simple logical statements like “the Earth is a sphere” or “water is important” being met with the session clerk saying “5 for, 22 against” over and over.

  8. Donaleen Kohn says:

    Have you considered that it may be very deliberate?  Maybe they don’t like all the information we can get and share.   Corporations want total control of what we know.  For example, they don’t like our product reviews. 

  9. coffee100 says:

    People are actually surprised Government and Big Business want to destroy the Internet?  Really? 

    The mainstream wants everything back the way it was:  asses on couches and consumers living up to their responsibility: being a gullet that doesn’t talk, swallows advertising and shits cash.

  10. digi_owl says:

    i see a upshot of non-.com urls for new services once this passes.

  11. ComradeQuestions says:

    Yeah, okay, except that what’s described here isn’t remotely how browsers or DNSSEC actually behave.  First, browsers don’t just cast about to random DNS servers all over the world til they find a response; they’ll only check the 2-3 servers configured manually or through DHCP, and if the first server they check responds with “that website doesn’t exist”, it won’t check any others.

    Secondly, as the article alludes to, no current browsers or OSes independently verify DNSSEC signatures themselves.  At most they simply trust their configured DNS servers when those servers say a response is authenticated (https://tools.ietf.org/html/rfc4033#page-12 ).  There are browser plugins which do more, but as of right now, DNSSEC is only a consideration between DNS servers, and client consideration is purely theoretical.

  12. roypbogwib says:

    It may not be how it works now, but then DNSSEC hasn’t been widely implemented yet. It is how it should work. “Trusting the ISP’s DNS” is what we have now, and it isn’t good enough; and even if we are relatively sure the ISP is using DNSSEC, the only way to be confident is to confirm the authenticity of DNS data. 

    For DNSSEC to continue working, you’d have to set it up so the MPAA (through its agent, the Attorney General) can, when it feels like it, assert ownership of any domain name and replace the previous owner’s DNSSEC certificate with one of its own. Then (after a bit of latency) the DNS will be blocked (or redirected) for clients. 

    Property rights to a domain name and due process are, of course, inconsequential principles when pitted against the right of MPAA members to make money and to block sites it suspects of interfering.

    To make this work with non-US domain names and servers, you’d have to block access to non-US root servers, and probably block IP routing to the servers the MPAA thinks might be costing it sales. China does this all the time, and we all know how effective that is, to say nothing of how hypocritical it would be for us to criticize China’s Great Firewall, while helping the MPAA to build a Great Firewall around the US for its own use. 

    If the US allows the MPAA to build a Great Firewall around US territory, the MPAA will push to do the same with other markets (Australia, Japan, Europe, Russia, etc.). 

    Once the mechanism is in place for the MPAA to control a Great Firewall around the US, it will be just a matter of time before DHS, or Amazon.com, or some pro-Family group, or whoever,  to decide it should be able to use the same mechanism to block something it doesn’t like.  Imagine! A new business: the MPAA can sell blocking services on the Great US Firewall. This can replace its current and archaic business model, which will prove untenable in a few years even with SOPA. 

    I’m not saying MPAA doesn’t have a grievance, I’m just saying that SOPA is a sledge hammer being used to go after a spec of dust on a piece of very fine crystal glass. 

  13. Kara_h says:

    “The internet interprets censorship as damage and routes around it” – John Gilmour

Leave a Reply