CircleID

Comments

Net Neutrality: A Net-Head View

• Comment posted Aug 13, 2010 7:09 am PDT — by George Ou
  There are only three Net Neutrality proposals for regulation one more extreme than the other. Least extreme but still very bad - Ban voluntary business agreements and prevent ISPs from selling prioritized or enhanced services to content and application providers. …

• Comment posted Aug 11, 2010 8:59 am PDT — by George Ou
  You keep talking about DPI in relation to NN so it's clear you're confused about it.  It's a totally separate and exaggerated issue.  People try to make DPI sound evil when it is a technology that can be used for…

• Comment posted Aug 11, 2010 4:19 am PDT — by George Ou
  First, you grossly misunderstand the DPI issue.  Here's how DPI actually works. Second, you're conflating DPI with the issue of Net Neutrality.  Net Neutrality the call to prohibit voluntary and legal business transactions between ISPs and content providers (not between…

• Comment posted Aug 07, 2010 8:15 am PDT — by George Ou
  "Any traffic management technology can be misused, whether it be diffserv, firewalls, traffic shaping or whatever.  There can be no defence of that misuse by claiming it is simply the application of technology." True, but there's no defense for false…

• Comment posted Aug 06, 2010 9:54 am PDT — by George Ou
  "Google have over 1 million servers, which is a huge capital investment however you measure it, and then there is the software on top of it and paying ISPs to deliver their data is not cheap either. A case could…

Dr. Peering Commits Malpractice on Net Neutrality

• Comment posted Dec 10, 2009 4:41 pm PST — by George Ou
  Bottom line, would it be such a horrible thing to ask for more clarification regarding paragraph 106?  Why stifle this dialog when the FCC is asking for this very type of clarification? NPRM paragraph 106 never says "Quality of Service"…

• Comment posted Dec 09, 2009 1:28 pm PST — by George Ou
  "Paid peering traffic is no more prioritized than regular peering or transit traffic". That's a ridiculous statement.  The fact that Paid Peering traffic jumps ahead of transit traffic and the fact that it's a far more exclusive and less contentious…

• Comment posted Dec 09, 2009 1:21 pm PST — by George Ou
  Daniel, you conveniently left out the fact that paragraph 106 bans priorized and *ENHANCED* services.  What does it mean to enhance or prioritize delivery?  Putting someone's packet's ahead of the line BY DEFINITION is prioritized and enhanced and it's probably…

IPv6 Answers to Common Questions from Policy Makers, Executives and Other Non-Technical Readers

• Comment posted Nov 16, 2009 9:39 pm PST — by George Ou
  "an extra 96 bits increases the theoretical size of the address space by many trillions of times" It's a hell of a lot more than many trillion.  It's more like 79,228 trillion trillion times as many.

AT&T CTO Donovan: We Need Non-Discrimination

• Comment posted Nov 06, 2009 4:58 am PST — by George Ou
  When you ban good network management http://www.digitalsociety.org/2009/11/fcc-nprm-prohibits-good-network-management/ Kill existing business models http://www.digitalsociety.org/2009/10/changes-to-fcc-four-principles-could-ban-existing-services/ And you single out ISPs from competing at all in the content distribution market by prohibiting them from offering any kind of premium delivery services such as CDN,…

Cutting Through the Twitter DDoS Hype

• Comment posted Aug 10, 2009 8:44 pm PDT — by George Ou
  Russian government prefers bullets, poison, or radioactive material to silence people.  If it is true that they are switching to DDoS, that would be a huge improvement in my mind.

Some Unsolicited Advice for AT&T re Google Voice

• Comment posted Aug 05, 2009 1:00 am PDT — by George Ou
  Google Voice is not a VoIP application.  Google Voice is just a call setup application that dials your phone and the phone you want to call from your application.  This has nothing to do with AT&T;and they've stated so. I…

Obama's Missed Opportunity

• Comment posted Mar 26, 2009 7:49 am PDT — by George Ou
  "Many people, including you, have opposed transpraency and truth in advertising." Don't know what you're smoking, but I almost forgot I was talking to the professional troll.

• Comment posted Mar 26, 2009 6:35 am PDT — by George Ou
  "However, when they start posting false policies or provide false answers to what is happening, that is where (minimal) regulation would kick in." I didn't here Richard or anyone else oppose transparency and truth in advertising.  If there is a…

DPI is Not a Four-Letter Word!

• Comment posted Mar 17, 2009 3:16 am PDT — by George Ou
  Joe, don't confuse port blocking with anti-spam or anti-virus.  All three systems work independently of each other and they don't need the presence of the other two systems to work. Everyone here is trying as patiently as possible to explain…

• Comment posted Mar 17, 2009 2:52 am PDT — by George Ou
  Joe, one last try.  There is no DPI technology involved here.  It's simple port blocking which is around 2 decades old. I and other people on this site have tried to correct you and explain that this has nothing to…

• Comment posted Mar 16, 2009 10:31 pm PDT — by George Ou
  You don't use any kind of DPI technology to do simple port filtering which has been around for around two decades.

• Comment posted Mar 16, 2009 9:01 pm PDT — by George Ou
  All ISPs block outbound port 25 Joe and they've been doing it for many years.  At one time before Comcast blocked outbound port 25 for anything other than Comcast's SMTP server, Comcast's customers were unknowingly sending ~25% of the world's…

Cloud Computing Types: Public Cloud, Hybrid Cloud, Private Cloud

• Comment posted Mar 09, 2009 3:40 pm PDT — by George Ou
  There have been cases where a cloud vendor just flat out closes or changes something and declares that they can't get you your data back.  One vendor outsourced to a second vendor and the second vendor changed something and refused…

• Comment posted Mar 09, 2009 6:53 am PDT — by George Ou
  And as I recall, a failure of any of those three is a major business disruption.  A failure of any three will cost the company money.  For some businesses, like that credit card processing company that handled all the VISA…

• Comment posted Mar 08, 2009 10:23 pm PDT — by George Ou
  Try telling your customers you violated their confidentiality and see how forgiving they are.  With current disclosure laws, you can no longer ignore confidentiality.

• Comment posted Mar 08, 2009 8:03 pm PDT — by George Ou
  What happens when the cloud vendor loses your data, or gets hacked?  How do you explain to the auditors?  Who's going to send out the letters to the customers explaining their data has either been lost or worse, stolen? This…

Carriers Are Trying to Take Back Control of the Home Network

• Comment posted Jan 22, 2009 5:53 pm PST — by George Ou
  They require Coax to the STB today because they had to support analog broadcasts and TVs without any set top boxes.  Once they stop supporting analog broadcasts, then it may not be necessary to use Coax. Still, why the obsession…

• Comment posted Jan 22, 2009 9:53 am PST — by George Ou
  "Why can't we just run our own network wires to their set top boxes" Who says you can't run your own wires?  You CAN run your own network wires to your heart's content, but most people don't because they don't…

The Problem With HTTPS SSL Runs Deeper Than MD5

• Comment posted Jan 07, 2009 9:48 am PST — by George Ou
  DNSSEC doesn't protect against malware either, nor does it ever claim to be a substitute for anti-virus.  The same is true of this proposal. "It does, as their IT Staff is not going to upgrade the computers of their users"…

• Comment posted Jan 07, 2009 9:42 am PST — by George Ou
  "> Most of us have fairly predictable web surfing patterns and it doesn't require > a massive list to maintain all the secure sites or unsecured sites we visit. Does granny understand those concepts? Smart" The whole point of this…

• Comment posted Jan 07, 2009 4:41 am PST — by George Ou
  "If your threat model includes DNS poisoning or a man-in-the-middle attack, then DNS records can't offer additional protection unless they are fully signed. Without DNSSEC, then, the records only work when you aren't under attack. If a site seriously wants…

• Comment posted Jan 07, 2009 4:01 am PST — by George Ou
  "let the user decide what sites are sensitive" Why confuse the user?  Would it be that awful if too much of their surfing habits are protected?  Encryption is so cheap that a $30 CPU can encrypt 800 Mbps of AES-256…

• Comment posted Jan 07, 2009 2:28 am PST — by George Ou
  The malware issue is moot here.  As I've stated over and over again, malware means game over for everything.  If you're going to knock any solution for failing to protect against complete PC hijacking, then you can argue against any…

• Comment posted Jan 06, 2009 11:47 pm PST — by George Ou
  You keep coming back to the malware issue but as I keep saying, it's already game over if you have malware.  So the malware issue is moot in this discussion. "If it does not fully cover the problem, why try…

WiMAX vs. WiFi

• Comment posted Jan 06, 2009 11:17 pm PST — by George Ou
  "It's certainly possible that WiFi will evolve to have more control than it has today although I would guess that the control would remain very distributed and tolerant of contending systems with no control-communication." Distributed "control" or participation is the…

The Problem With HTTPS SSL Runs Deeper Than MD5

• Comment posted Jan 06, 2009 10:34 pm PST — by George Ou
  "How? When one is in the middle one can spoof it all, including your in-DNS entry for saying "only use SSL". Full supprt and verification of DNSSEC would be required to catch it. And of course on top of that…

• Comment posted Jan 06, 2009 9:18 pm PST — by George Ou
  Nobody ever types HTTP or HTTPS or bothers to check it.  When people go to bank.com, they either type www.bank.com or just bank.com and expect to be taken to the right place.  I can't think of a single person that…

• Comment posted Jan 06, 2009 8:32 pm PST — by George Ou
  What I'm trying to say is that in the case of DNS hijacking (either DNS poisoning or fake wireless hotspot), you won't be fooled by a fake bank.com when you're trying to go to the real bank.com. This mechanism doesn't…

• Comment posted Jan 06, 2009 6:33 pm PST — by George Ou
  "And how does a normal user know that https://www.bank.com != https://www.b4nk.com" Jeroen, that's far cry from proper DNS names.  Like I said, the proposal is designed to help users against the biggest vector of attack where consumers are protected from…

• Comment posted Jan 06, 2009 3:41 am PST — by George Ou
  Brett says: "I do note, however, that the solution does not address the problem of phishing at all: if a user can be tricked into visiting a malicious website, then no amount of SSL validation (or its absence by publicly…

• Comment posted Jan 06, 2009 3:03 am PST — by George Ou
  The problem is that web authentication with SSL can be hijacked nearly 100% of the time based on every study conducted through simple social engineering techniques. As for the costs, do you see a problem if your bank account gets…

• Comment posted Jan 05, 2009 5:18 pm PST — by George Ou
  Carl, I don't care how they post it.  It doesn't matter if you "securely" deliver your login credentials to an attacker whose identity you failed to verify due to the lack of HTTPS.  This is the same dumb argument those…

WiMAX vs. WiFi

• Comment posted Jan 04, 2009 10:03 pm PST — by George Ou
  Unmanaged wireless don't scale.  Simply look at what happens when we compare a unmanaged/unscheduled Wi-Fi network to a managed LTE network. 20 MHz of unmanaged/unscheduled 802.11b Wi-Fi operating in an ideal environment with no external interference supports 4 simultaneous VoIP…