Just Bob
Premium
join:2000-08-13
Spring Hill, FL
| reply to devicenull
Re: Security Absurdity: A long-overdue wake up call
said by devicenull  :[...] The only way an ISP can provide a totally safe approach is with some sort of walled garden. Don't allow anyone onto the "public" internet, only trusted ISP sites. I somehow doubt this is a good idea. [...] Actually, that may not be a bad idea. New and inexperienced users could be confined to their ISP's portal. Only after demonstrating some level of competence would they be allowed out onto the internet. They could also have to demonstrate that their computer met some level of security.
Add egress filtering and many of the problems would be somewhat mitigated.
»www.sans.org/y2k/egress.htm |
|
N O Y B
St. John 3.16
join:2005-12-15
Forest Grove, OR
1 edit | reply to devicenull
Traveling the highways is also inherently unsafe. That’s why auto manufactures are required to provide certain safety devices and meet legislated requirements. The legislation is a result of their own unwillingness to do it on their own. ISP are headed down the same road. |
|
devicenull
Premium
join:2002-12-01
Clifton, NJ
| reply to N O Y B
The internet is inherently unsafe. For all I know, the next time I visit this site, it will have been hacked using a 0day exploit, have another 0day exploit to bypass my proxy software, and a 0day exploit to infect my computer via my browser. Not likely at all, but still a possibility.
The only way an ISP can provide a totally safe approach is with some sort of walled garden. Don't allow anyone onto the "public" internet, only trusted ISP sites. I somehow doubt this is a good idea.
The last thing I want to see is the ISP filtering sites. If they started doing this, I would drop them pretty quickly. Who says what they block? Their "unsafe" sites, or sites they don't like. |
|
