On Wed, Jan 4, 2023 at 6:34 AM Vittorio Bertola <vittorio.bertola=40open-xchange.com@xxxxxxxxxxxxxx> wrote: > > > > Il 03/01/2023 11:27 CET John Mattsson <john.mattsson=40ericsson.com@xxxxxxxxxxxxxx> ha scritto: > > - Threat Model: The IETF has failed to update the Internet Threat Model to include compromised endpoints, misbehaving endpoints, and large centralized information sources. This is very disappointing as these things were, and still are major enablers for pervasive monitoring. Assuming compromise is an essential zero trust principle. The excellent IAB document RFC 7624 that talks about compromise and exfiltration deserve much more citations. > > There were attempts to do this, and even a dedicated IAB program and mailing list, which was wrapped up without results just a few months ago. I still think this was a big fail; in fact, this implies that counteraction against surveillance capitalism practices can only happen elsewhere, at the regulatory level, as the IETF community either does not know what to do about it, or does not want to do anything about it. What bothers me most today are that "modern" OSes, like chromebooks, android, ios, have no way to do a packet capture of "their side" of your computer. Not even being able to know what IPs my own device is talking to (or blocking some) makes me a tad... paranoid. Privacy and control for whom? > -- > > Vittorio Bertola | Head of Policy & Innovation, Open-Xchange > vittorio.bertola@xxxxxxxxxxxxxxxx > Office @ Via Treviso 12, 10144 Torino, Italy -- This song goes out to all the folk that thought Stadia would work: https://www.linkedin.com/posts/dtaht_the-mushroom-song-activity-6981366665607352320-FXtz Dave Täht CEO, TekLibre, LLC
