Just Bob
Premium
join:2000-08-13
Spring Hill, FL
| reply to devicenull
Re: Security Absurdity: A long-overdue wake up call
said by devicenull  :[...] The only way an ISP can provide a totally safe approach is with some sort of walled garden. Don't allow anyone onto the "public" internet, only trusted ISP sites. I somehow doubt this is a good idea. [...] Actually, that may not be a bad idea. New and inexperienced users could be confined to their ISP's portal. Only after demonstrating some level of competence would they be allowed out onto the internet. They could also have to demonstrate that their computer met some level of security.
Add egress filtering and many of the problems would be somewhat mitigated.
»www.sans.org/y2k/egress.htm |
|
N O Y B
St. John 3.16
join:2005-12-15
Forest Grove, OR
1 edit | reply to devicenull
Traveling the highways is also inherently unsafe. That’s why auto manufactures are required to provide certain safety devices and meet legislated requirements. The legislation is a result of their own unwillingness to do it on their own. ISP are headed down the same road. |
|
devicenull
Premium
join:2002-12-01
Clifton, NJ
| reply to N O Y B
The internet is inherently unsafe. For all I know, the next time I visit this site, it will have been hacked using a 0day exploit, have another 0day exploit to bypass my proxy software, and a 0day exploit to infect my computer via my browser. Not likely at all, but still a possibility.
The only way an ISP can provide a totally safe approach is with some sort of walled garden. Don't allow anyone onto the "public" internet, only trusted ISP sites. I somehow doubt this is a good idea.
The last thing I want to see is the ISP filtering sites. If they started doing this, I would drop them pretty quickly. Who says what they block? Their "unsafe" sites, or sites they don't like. |
|
N O Y B
St. John 3.16
join:2005-12-15
Forest Grove, OR
1 edit | reply to devicenull
The operator of a product (automobile, etc) is responsible for its use and modifications they may make. Yes. But the manufacture or service provider is responsible for the product or service being provided. These are two different things.
If an company sells a product or service that is unsafe when used as intended, they should be held liable for damages suffered by their customers.
ISP are currently selling services that as provided are unsafe and most certainly does result in loss by their customers. It would be sort of like leaving seatbelt purchase and installation up to the customer.
If an ISP is unwilling to provide a safe and secure internet connection then they should get out or be put out of business. |
|
