Google Groups Home Help | Sign in
Message from discussion No IRC at Red and Black
The group you are posting to is a Usenet group. Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
Michael Weinberg  
View profile
 More options May 7, 6:34 pm
From: "Michael Weinberg" <mich...@personaltelco.net>
Date: Wed, 7 May 2008 15:34:09 -0700
Local: Wed, May 7 2008 6:34 pm
Subject: Re: [ptp-general] Re: No IRC at Red and Black

On Wed, May 7, 2008 at 3:23 PM, Daniel Johnson <tekno...@gmail.com> wrote:

>  >  True enough. IRC is so completely insecure (both in terms of
>  >  connection and ability to verify who is on the other side of the chat)
>  >  that freenode's direct message security and the notion that anything
>  >  on IRC should be considered at all safe strikes me as
>  >  dangerous/irresponsible Internet usage.

>  Still I feel like every opportunity to make something less insecure
>  should be taken.  For example I wouldn't consider I wouldn't consider
>  allowing access from a limited number of IP addresses as sufficient
>  security in, and of itself, but adding it means that they have to know
>  what IP's are allowed, and spoof them before they can even attempt to
>  exploit other security holes.  This gives you another opportunity to
>  detect the intrusion attempt.

>  I secure protocol like ssh, or https is probably good enough on an
>  open network like a personal telco node, but a completely insecure
>  protocol like IRC justifies at least trying old school security
>  techniques.

I can understand this, from a purely personal, psychological stand
point, but from an educational position, which PTP has, an insecure
connection/protocol is insecure. If you can't have end-to-end
security, securing the mid-points does nothing but lure a user into a
false sense of security. IRC--in a cafe, at home, in your
office--should be treated as insecure, and used accordingly.

--
Michael Weinberg
President
Personal Telco Project, Inc.


    Reply    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.

Create a group - Google Groups - Google Home - Terms of Service - Privacy Policy
©2008 Google