well yeah.

[becomethewaifu@tech.lgbt]

@da_667 Or even just unplugging the proxy when they aren't actively updating... I've gotten very tired of the "move fast and break things" movement convincing everyone to do rolling releases that happen "whenever." (aside from actually urgent patches that can't wait till patch Tuesday of course, but those are usually a lot less relevant to airgapped machines...)

[m3t00@app.wafrn.net]

@da_667@infosec.exchange

more hype; singularity achieved; https://abcnews.com/Business/openai-ceo-sam-altman-claims-ai-singularity-arrived/story?id=135120342

if it told them they were wasting their time. they'd call it a hallucination

[rotopenguin@mastodon.social]

@catsalad @da_667 a well designed lairgap will take you a long way, but you eventually have to open it up to lob missiles at the rest of the world.

[da_667@infosec.exchange]

@rotopenguin @catsalad looks like you found my rimworld base.

[da_667@infosec.exchange]

@rotopenguin @catsalad "what's with the hole in the roof" oh, that's for the artillery and mortars.

[outofspace@berlin.social]

@da_667 Nothing airgaps a network better than helium.

[ladypretzal@transfem.social]

@da_667@infosec.exchange there was no bread in the "no bread allowed zone" except for croutons for susan

[technicaladept@techhub.social]

@da_667 Oh stories I can tell you about airgaps. Like the time I sent an email to Vodaphone. I needed an asset register for the customer's workgroup LAN. So I decided to email to my account at Demon Internet, which is what they called Vodaphone in those days. So I took a floppy from my pocket. Which was the style at the time. Now, to send an email required a separate computer with a modem, and in those days, modems were rated in KBd because that was short for Kilo Baud. Gimme 56 KBd, for dialup you'd say. Now where was I... oh yeah. The important thing was that I had an floppy in my pocket, which was the style at the time. You couldn't 128 bit RC4, because of the export controls. The only thing you could get was those ol' crackable 40bit ones...

[catboycody@tech.lgbt]

@da_667 What happened to the good old sneaker network?

Now I wonder how many people think that wifi, bluetooth etc. is still an airgap...

[benhm3@mastodon.social]

@da_667

It is an airgap of the MIND.

Or:

It's an ALTERNATIVE airgap.

[jackemled@furry.engineer]

@da_667 They must think "airgap" means Wi-Fi instead of Ethernet.

[tehfishman@ioc.exchange]

@da_667 the environment they are describing is actually an air-gape, where they do the goatse spread at their competitors and AI slop attacks spew forth from the OpenAI butthole logo.

[fritzadalis@infosec.exchange]

@catsalad @da_667
Dat airgap

[falken@social.falkensweb.com]

@da_667 "no reason"? Not even "proving" how scary #llm is, so law makers will regulate their competition away?

[womble@infosec.exchange]

@da_667 I guess if you spend long enough with the hell machine that uses words but does not know that words have meanings, you lose the knowledge yourself that words have meanings.

[netzblockierer@tech.lgbt]

@da_667 Yeah.

I remember Aaron. Was a good guy…

He's propably turning in his grave so fast that he could power half of the U.S. households already…

[netzblockierer@tech.lgbt]

@da_667 yeah, they are criminally incompetent dipshits…

[philsalkie@mindly.social]

@becomethewaifu @da_667

I suggest to customers that OT remote access devices be put on a combination of a key switch and a mechanical timer (think bathroom heat lamp).

Vendor wants access to do an update?
Turn the key, set the timer to 30 minutes.
A door that only exists for less than an hour at a time a couple times a year is much more secure than one that's sitting there 24/7/365 with every AI on the planet trying to pick the lock.

Also, VPNs and routing are NOT data diodes or isolated networks. All it takes is for some 12-year-old offshore junior IT admin to log into that switch and go "why this so confusing setup? Fix make easier" and suddenly the whole world can see your controllers. (Yes, that can and does happen.)

I'm a big fan of dumb switches on non-routable subnets for OT networks, with fixed-protocol bridging devices to read data from the subnet and forward it to the outside. Definitely don't want to be in a position where you need to get a system working, but a smart switch has died, that model doesn't exist any more, and nobody knows what routes were programmed into it, so they drop in a dumb switch and - Hooray! - things work again (but now the whole world can access the equipment), or things don't work and nobody thinks that the dumb switch can be the issue, because it clearly works...

[ajn142@infosec.exchange]

@davedave @TindrasGrove @da_667 like this paper?

https://peterstory.me/publications/story_pep_2023.pdf

[adhdruid@infosec.exchange]

@da_667 ️ Improper airgap detected, Druid has entered the chat.

The Industry is being ‘led’ by fucking morons. We all know this, but their hope is that we miss details like this.

The more time goes on, the more people won’t even acknowledge the importance of the words used.