[163397] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: PRISM: NSA/FBI Internet data mining project

daemon@ATHENA.MIT.EDU (Jay Ashworth)
Fri Jun 7 12:11:49 2013

Date: Fri, 7 Jun 2013 12:10:57 -0400 (EDT)
From: Jay Ashworth <jra@baylink.com>
To: NANOG <nanog@nanog.org>
In-Reply-To: <1A62CA26-1214-43CA-8E5B-344AC8BEAA25@seiden.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

----- Original Message -----
> From: "Mark Seiden" <mis@seiden.com>

> but the ability to assemble intelligence out of taps on providers'
> internal connections
> would require reverse engineering the ever changing protocols of all
> of those providers.
> and at least at one of the providers named, where i worked on security
> and abuse,
> it was hard for us, ourselves, to quickly mash up data from various
> internal services
> and lines of business that were almost completely siloed --
> data typically wasn't exposed widely and stayed within a particular
> server or data center absent a logged in session by the user.

Jamie makes an excellent point here: Least Privilege should apply within
carrier's cores and data centers, just as much as within corporate and
organizational ones.

Cheers,
-- jra
-- 
Jay R. Ashworth                  Baylink                       jra@baylink.com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates     http://baylink.pitas.com         2000 Land Rover DII
St Petersburg FL USA               #natog                      +1 727 647 1274


home help back first fref pref prev next nref lref last post