Many could crash the 'Net ... but they lack motivation

NETWORK WORLD NEWSLETTER: GIBBS & BRADNER
08/09/05

Dear networking.world@gmail.com,

In this issue:

* Backspin columnist Mark Gibbs contends that the Internet is
  vulnerable and it hasn't been taken down because the bad guys
  lack motivation
* Links related to Gibbs & Bradner
* Featured reader resource
_______________________________________________________________
This newsletter is sponsored by HP ProCurve
Network World Executive Guide: Getting Wireless Right
Wireless LANs move beyond data to voice and video

The WAN alphabet is constantly growing, as standards setting
bodies develop new protocols and technologies that will
transform wireless networks. Today, most everyone agrees that
with these new standards and new tools, airtight wireless
security is getting easier to accomplish. Get a
behind-the-scenes look at what cutting-edge users are doing and
the latest information on wireless security trends.
http://www.fattail.com/redir/redirect.asp?CID=109920
_______________________________________________________________
VORTEX is where you breakthrough to value

You'll find the VORTEX2005 event like no other. At last, a
chance to spend two days and nights devoted to developing
innovative strategies to help your IT organization "Breakthrough
to Value." Hear from the top names in IT today as they discuss
the challenges facing enterprise IT and formulate solutions.
http://www.fattail.com/redir/redirect.asp?CID=109796
_______________________________________________________________

Today's focus: Many could crash the 'Net ... but they lack
motivation

By Mark Gibbs

Last week's column
<http://www.networkworld.com/columnists/2005/080105backspin.html>
on Cisco's fracas with one Michael Lynn and its implications
for shutting down the 'Net generated interesting feedback.
Thanks to all who wrote in.

Reader Dane Dawson disapproved: "Cisco was able to work with the
other people and stay the issue, but that didn't stop a
media-driven periodical such as yours . . . from publishing
whatever you want."

I should point out that I am not an employee of Network World
and my editor doesn't control what I write (except to correct
the grammar and take out the dirty words).

So why do I think the Cisco fracas matters so much? My concern
was that Cisco chose security through obscurity to paper over
the cracks in the Internet infrastructure, which is effectively
a Cisco monoculture.

Dawson continued, "So instead of working quietly to hush this,
you publish it so that every anti-Cisco, anti-American,
terrorist [in the name of journalism], hacker and anyone else
who was close to destroying a company, has access and the tools
to exploit routers . . . . Congratulations, you have become a
terrorist yourself."

Even though I didn't write about any details of the exploit or
even point out where you could find out how it worked, I am
apparently a terrorist for having the temerity to discuss a
public issue! What this complaint demonstrates is a profound
misunderstanding of how the Internet is vulnerable and who is
the threat.

As you will see from the 'NetBuzz column due south of here
<http://www.networkworld.com/columnists/2005/080805buzz.html>,
Paul McNamara and I disagree on how vulnerable the 'Net really
is. He contends that if it was that vulnerable, someone would
have had a whack at it by now. As we can see no signs of such an
attempt, we should conclude it isn't vulnerable.

<digression>This is essentially the anti-UFO "alien wrench"
argument: If aliens are visiting us all the time then why
haven't we found an alien wrench lying around? I don't believe
in UFOs but let's see: If you're several million miles from the
garage wouldn't you plan to keep track of your wrench? Wouldn't
completely cleaning up after you've scared the bejesus out of
some hick farmer and disemboweled one of his cattle be
logical?</ digression>

Anyway, I contend that the Internet is vulnerable and it hasn't
been taken down because the bad guys with the wherewithal don't
have the motivation to do so. Consider the terrorists. There are
lots of them all over the world and many of them have the
wherewithal, but they need the 'Net.

For example, it is well-known that Al Qaeda uses the Internet
extensively for communication and publishing propaganda. Take
out the 'Net and they'd have to go back to traditional
communications. It would also screw up their banking
arrangements.

Is your average hacker a risk to the Internet? It would only be
by accident. A really knowledgeable hacker probably wouldn't
attack the 'Net because if you are that savvy you can foresee
the consequences and they would be serious to say the least.

The wild card is someone as crazy as the Unabomber. Luckily he
didn't have the wherewithal when it came to the 'Net but he's
not the only looney out there.

The most likely source of doom as far as the 'Net is concerned
will be a skilled teenage hacker with a total lack of
perspective and empathy, as shown by the boys who committed the
Columbine massacre. There's your alien wrench. Just because you
haven't seen it yet doesn't mean the aliens don't exist. Lack of
evidence doesn't disprove the theory or remove the possibility.

Found a wrench? Tell <mailto:backspin@gibbs.com>. And check
Gearblog

The top 5: Today's most-read stories

1. Questions dog Cisco routers
<http://www.networkworld.com/nlgibrad4703>

2. First family of Windows Vista viruses unleashed
<http://www.networkworld.com/nlgibrad4704>

3. Anti-spyware firm warns of massive ID theft ring
<http://www.networkworld.com/news/2005/080505-id-theft.html?t5>

4. Crashing the 'Net
<http://www.networkworld.com/columnists/2005/080805buzz.html?t5>

5. Cisco vulnerability posted to Internet
<http://www.networkworld.com/nlgibrad4706>
_______________________________________________________________
To contact: Mark Gibbs

Mark Gibbs is a consultant, author, journalist, and columnist
and he writes the weekly Backspin
<http://www.networkworld.com/columnists/gibbs.html> and Gearhead
<http://www.networkworld.com/columnists/gearhead.html> columns
in Network World, as well as the Gearblog blog
<http://www.networkworld.com/weblogs/gearblog/> . We'll spare
you the rest of the bio but if you want to know more, go to
<http://www.gibbs.com/mgbio>. Contact him at
<mailto:webapps@gibbs.com>
_______________________________________________________________
This newsletter is sponsored by HP ProCurve
Network World Executive Guide: Getting Wireless Right
Wireless LANs move beyond data to voice and video

The WAN alphabet is constantly growing, as standards setting
bodies develop new protocols and technologies that will
transform wireless networks. Today, most everyone agrees that
with these new standards and new tools, airtight wireless
security is getting easier to accomplish. Get a
behind-the-scenes look at what cutting-edge users are doing and
the latest information on wireless security trends.
http://www.fattail.com/redir/redirect.asp?CID=109919
_______________________________________________________________
ARCHIVE LINKS

Gibbs archive:
http://www.networkworld.com/columnists/gibbs.html

Bradner archive:
http://www.networkworld.com/columnists/bradner.html
_______________________________________________________________
FEATURED READER RESOURCE

HARD WORK, GOOD PAY

According to Network World's 2005 Salary Survey, network
professionals are enjoying substantial increases in pay,
especially at the highest- and lowest-tier job titles. But are
those increases coming with higher titles, more work or both?
Find out if compensation alone is keeping network professionals
happy in their careers - or is something else? Click here:

<http://www.networkworld.com/you/2005/072505-salary-survey.html>
_______________________________________________________________
May We Send You a Free Print Subscription?
You've got the technology snapshot of your choice delivered
at your fingertips each day. Now, extend your knowledge by
receiving 51 FREE issues to our print publication. Apply
today at <http://www.subscribenw.com/nl2>

International subscribers click here:
<http://nww1.com/go/circ_promo.html>
_______________________________________________________________
SUBSCRIPTION SERVICES

To subscribe or unsubscribe to any Network World e-mail
newsletters, go to:
<http://www.nwwsubscribe.com/Changes.aspx>

To change your e-mail address, go to:
<http://www.nwwsubscribe.com/ChangeMail.aspx>

Subscription questions? Contact Customer Service by replying to
this message.

This message was sent to: networking.world@gmail.com
Please use this address when modifying your subscription.
_______________________________________________________________

Have editorial comments? Write Jeff Caruso, Newsletter Editor,
at: <mailto:jcaruso@nww.com>

Inquiries to: NL Customer Service, Network World, Inc., 118
Turnpike Road, Southborough, MA 01772

For advertising information, write Kevin Normandeau, V.P. of
Online Development, at: <mailto:sponsorships@nwfusion.com>

Copyright Network World, Inc., 2005