This is the input that was submitted before the workshop. Thanks to all contributors!
The workshop was organized in four elements: chairs’ presentation, two panels, and an open discussion.
Lixia: too much succees or failure?
- technically may have gotten blinded by success and missed some problems
Lixia: why is security failing?
Thomas
- infrastructure hacks suggest that something is wrong
- architecture seems to have problems
Lixia: Why?
Christian: Security does not pay
- it’s a market thing
- you don’t make money by it
- unless there is regulation or customer movement, better security is not coming
Lixia: technically community aspects?
Thomas: OAuth-2.0 example
- was done in applications area, now being rewritten
Jari: two reasons why security is failing
- security is hard
- some parties don’t care enough, so they lose other people’s data
- if there is no harm for them, there is motivation to improve security
- some players are too big to be held responsible
- not just accidents, also deliberate sale of information
Christian: security is already centralized
- building big castles
- most attacks today (ransomware) are not caused by anything in the Internet
- mostly exploiting zero-day bugs in implementations
- typically with support of state-level actors
- need to get to next-level of software security, but probably not a topic for today
- In Internet model there is one relevant property: everyone can send data to everyone (unsolicited)
- Was a design goal
- also an enable for spam, DDoS
- we have not worked out a defense against it
Viet: security is a fast-moving topic
- smaller players can spend less money in keeping up
- could also be a factor why security is easier in centralized systems
Lixia
- if you don’t let people to freely communicate with each other, would you not end up with a system like today?
Christian: yes, there is a tension
- the fact that everybody can talk to everybody is an important property
- but also led to some of the problems today
- and we have not teased this apart yet
Lixia
- are we lacking an effective solution to enable both free peer-to-peer communication while preventing abuse as well?
Jari
- attack question has broader relevance
- some things are easier when you are big (“attack resistance”)
- if we had a different design, maybe we wouldn’t have to resort to centralization so much
- But: we could also be just one indirection away from another level of attacks