[aklug] Re: ACS Google Gateway

From: Christopher Brown <cbrown@woods.net>
Date: Thu Oct 17 2013 - 22:44:39 AKDT

I think folks missed the point of my reply.

Stop thinking proxy cache, start thinking content storage engine.

Cache engine in the Google/Akamai/Netflix context _IS NOT_ an intercept
device. It does not sit between you any anything.

They are simply boxes that keep a "local cache" of CDN content that the
content provider can send you to, instead of sending you to _*exactly
the same thing*_ 1200+ miles away within their internal network.

It is about making the content available _closer_ to the consumer and
operating more efficiently for everyone.

The secondary point was that while the pervasive info leakage issues
exist, and are threats, they have nothing to do with a content engine.
They exist with or without and focusing on the wrong overly specific
thing takes the focus away from the real issues.

On 10/17/13 10:52 AM, Shane Spencer wrote:
> So I've been wanting to offer caching solutions to the major ISPs around
> here lately for obvious reasons and I'm happy they are here.. no buts.
>
> I think it's great that ACS is onboard with something google can use to
> provide us better service. I'd love to know that at the core of it
> theres a super futuristic compressed SCTP based SPDY aware load balancer
> connecting the dots for me to access googles service and helping reroute
> the dots in case of problems in the googleverse.
>
> If they can cache queries that would be amazing.. since they are mostly
> tailored. If they are being cached that means there are descriptive
> orientations for taylored content (I'd love to know if I'm described as
> 'that man beast that searches for linux stuff a lot').
>
> Biggest concern I have is that I've done far too much SSL MITM work. I
> use evil, stupid, insecure techniques with production stuffs in order to
> allow better quality on the backend by reducing security a smidge.. like
> using SSL load balancers that forward to non-SSL ports on application
> servers.. such is life.
>
> If there's any path for ISP employees to plug in a network cable and
> fiddle a monitor port to see unencrypted googledatas then please let me
> know.
>
> - Shane
>
>
> On Thu, Oct 17, 2013 at 7:22 AM, Royce Williams <royce@tycho.org
> <mailto:royce@tycho.org>> wrote:
>
> Minor correction:
>
> On Thu, Oct 17, 2013 at 5:27 AM, Royce Williams <royce@tycho.org
> <mailto:royce@tycho.org>> wrote:
>
> [snip]
>
> > Target knows you're pregnant before you do:
> >
> >
> http://www.forbes.com/sites/kashmirhill/2012/02/16/how-target-figured-out-a-teen-girl-was-pregnant-before-her-father-did/
>
> Actually, this was supposed to be "Target knows that *your daughter*
> is pregnant before you do."
>
> That being said, since people's buying habits are deeply tied to
> unconscious processes, I wouldn't be surprised if you could conclude
> things about people that they themselves don't know (or don't want to
> admit to themselves). :-)
>
> I also believe that search-engine reach is more broad than actual
> purchase tracking because searches reveal what you want and/or are
> curious about, not just what you actually buy and do.
>
> And in a world where law enforcement is (understandably) desperate for
> correlation, if it just so happens that all terrorists eat bananas,
> you'd better keep your lunch in a Faraday bag. Especially if you're
> *not* a terrorist.
>
> Royce
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org
> <mailto:aklug-request@aklug.org>>
> with 'unsubscribe' in the message body.
>
>
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Thu Oct 17 22:45:04 2013

This archive was generated by hypermail 2.1.8 : Thu Oct 17 2013 - 22:45:04 AKDT