Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

Scheduled Pinned Locked Moved Uncategorized
63 Posts 50 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

    if you have no idea what this is about: a very official-looking "IPv8" draft appeared that was an absolute fever dream of and-a-pony wishlist features for a censorious regime, down to using json web tokens at the hardware level for some reason

    jelu@mastodon.socialJ This user is from outside of this forum
    jelu@mastodon.socialJ This user is from outside of this forum
    jelu@mastodon.social
    wrote last edited by
    #48

    @0xabad1dea I hope people learn a little bit about the IETF draft process also: https://www.ietf.org/participate/ids/

    Yes, anyone can submit a draft. It does not mean anything beside showing how strong what-ever they just took is...

    Link Preview Image
    1 Reply Last reply
    0
    • nila@infosec.exchangeN nila@infosec.exchange

      @0xabad1dea I wonder how interesting of an attack vector that could be in real life scenarios. How about having an LLM generate 500 drafts with non-obvious misinformation and watch crawlers crawl it, models being trained with the data and then people citing the resulting misinformation?

      Or, more wildly: what's the authN process for working groups? I wonder how far a swarm of agent sock puppets could get in the RFC process...

      ratsnakegames@mastodon.socialR This user is from outside of this forum
      ratsnakegames@mastodon.socialR This user is from outside of this forum
      ratsnakegames@mastodon.social
      wrote last edited by
      #49

      @nila @0xabad1dea the auth process is "if the IETF isn't interested, it doesn't proceed to the RFC stage", apparently.

      You can't just post a standard, but you CAN just post a draft/proposal, which is what both this and "IPv8" are.

      ratsnakegames@mastodon.socialR nila@infosec.exchangeN 2 Replies Last reply
      0
      • ratsnakegames@mastodon.socialR ratsnakegames@mastodon.social

        @nila @0xabad1dea the auth process is "if the IETF isn't interested, it doesn't proceed to the RFC stage", apparently.

        You can't just post a standard, but you CAN just post a draft/proposal, which is what both this and "IPv8" are.

        ratsnakegames@mastodon.socialR This user is from outside of this forum
        ratsnakegames@mastodon.socialR This user is from outside of this forum
        ratsnakegames@mastodon.social
        wrote last edited by
        #50

        @nila @0xabad1dea as long as crawlers correctly interpret the draft as a draft and journos / wiki editors etc do their due diligence (which, i am told, they always do), there is no attack vector

        1 Reply Last reply
        0
        • ratsnakegames@mastodon.socialR ratsnakegames@mastodon.social

          @nila @0xabad1dea the auth process is "if the IETF isn't interested, it doesn't proceed to the RFC stage", apparently.

          You can't just post a standard, but you CAN just post a draft/proposal, which is what both this and "IPv8" are.

          nila@infosec.exchangeN This user is from outside of this forum
          nila@infosec.exchangeN This user is from outside of this forum
          nila@infosec.exchange
          wrote last edited by
          #51

          @ratsnakegames @0xabad1dea Do you think an agent swarm led by an APT could social engineer its way into "the IETF"? Setting up web pages, blogs, arXiv submissions etc. for a network of sock puppets definitely seems within reach of such actors.

          (And, come to think of it, any other standards body...)

          1 Reply Last reply
          0
          • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

            it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

            thelancashireman@hostux.socialT This user is from outside of this forum
            thelancashireman@hostux.socialT This user is from outside of this forum
            thelancashireman@hostux.social
            wrote last edited by
            #52

            @0xabad1dea

            Reminds me of Doug Zongker's publication:
            http://isotropic.org/papers/chicken.pdf
            https://www.youtube.com/watch?v=yL_-1d9OSdk

            1 Reply Last reply
            0
            • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

              it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

              raymaccarthy@mastodon.ieR This user is from outside of this forum
              raymaccarthy@mastodon.ieR This user is from outside of this forum
              raymaccarthy@mastodon.ie
              wrote last edited by
              #53

              @0xabad1dea
              Cat5e or Cat6 cable isn't good enough.
              You need Cat9 cable,

              1 Reply Last reply
              0
              • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                @hugo @slothrop I’m saying it’s a pointed political statement and not a random joke https://infosec.exchange/@0xabad1dea/116419619962656186

                hugo@someone.elses.computerH This user is from outside of this forum
                hugo@someone.elses.computerH This user is from outside of this forum
                hugo@someone.elses.computer
                wrote last edited by
                #54

                @0xabad1dea @slothrop 👌🏻 no worries next time I won’t reply unless to say something deep and serious which is probably once a year for me on Mastodon. You can ignore me.
                Have a good day

                1 Reply Last reply
                0
                • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                  if you have no idea what this is about: a very official-looking "IPv8" draft appeared that was an absolute fever dream of and-a-pony wishlist features for a censorious regime, down to using json web tokens at the hardware level for some reason

                  gudenau@hachyderm.ioG This user is from outside of this forum
                  gudenau@hachyderm.ioG This user is from outside of this forum
                  gudenau@hachyderm.io
                  wrote last edited by
                  #55

                  @0xabad1dea When I read the beginning of IPv8 I thought it was an April 1st one.

                  1 Reply Last reply
                  0
                  • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                    it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                    orb2069@mastodon.onlineO This user is from outside of this forum
                    orb2069@mastodon.onlineO This user is from outside of this forum
                    orb2069@mastodon.online
                    wrote last edited by
                    #56

                    @0xabad1dea I think the somebody in question is @mat ?

                    0xabad1dea@infosec.exchange0 1 Reply Last reply
                    0
                    • orb2069@mastodon.onlineO orb2069@mastodon.online

                      @0xabad1dea I think the somebody in question is @mat ?

                      0xabad1dea@infosec.exchange0 This user is from outside of this forum
                      0xabad1dea@infosec.exchange0 This user is from outside of this forum
                      0xabad1dea@infosec.exchange
                      wrote last edited by
                      #57

                      @Orb2069 @mat thank you, I didn't realize there was an official announcement post on mastodon for it

                      1 Reply Last reply
                      0
                      • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                        it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                        eblu@wetdry.worldE This user is from outside of this forum
                        eblu@wetdry.worldE This user is from outside of this forum
                        eblu@wetdry.world
                        wrote last edited by
                        #58

                        @0xabad1dea throwing in an obligatory shoutout to @mat for being the ietf kitty. cats deserve credit

                        1 Reply Last reply
                        0
                        • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                          it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                          shadowdancer@mstdn.socialS This user is from outside of this forum
                          shadowdancer@mstdn.socialS This user is from outside of this forum
                          shadowdancer@mstdn.social
                          wrote last edited by
                          #59

                          @0xabad1dea
                          Okay, this is cool, my #cat would likely benefit from this. Does anyone know if there's someone already implementing this?

                          1 Reply Last reply
                          0
                          • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                            it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                            blogdiva@mastodon.socialB This user is from outside of this forum
                            blogdiva@mastodon.socialB This user is from outside of this forum
                            blogdiva@mastodon.social
                            wrote last edited by
                            #60

                            @0xabad1dea what has @catsalad been up to?

                            1 Reply Last reply
                            0
                            • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                              it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                              jennyfluff@chitter.xyzJ This user is from outside of this forum
                              jennyfluff@chitter.xyzJ This user is from outside of this forum
                              jennyfluff@chitter.xyz
                              wrote last edited by
                              #61

                              @0xabad1dea that makes more sense than the IPv8 one

                              1 Reply Last reply
                              0
                              • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                                it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                                fedihacker@masto.esF This user is from outside of this forum
                                fedihacker@masto.esF This user is from outside of this forum
                                fedihacker@masto.es
                                wrote last edited by
                                #62

                                @0xabad1dea Meooooooowwwwwwwwwwwwwwww.

                                1 Reply Last reply
                                0
                                • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                                  it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                                  th@social.v.stT This user is from outside of this forum
                                  th@social.v.stT This user is from outside of this forum
                                  th@social.v.st
                                  wrote last edited by
                                  #63

                                  @0xabad1dea reminds me of Doug Zonker's foundational academic paper "Chicken Chicken Chicken: Chicken Chicken". https://isotropic.org/papers/chicken.pdf

                                  Link Preview Image
                                  1 Reply Last reply
                                  0
                                  Reply
                                  • Reply as topic
                                  Log in to reply
                                  • Oldest to Newest
                                  • Newest to Oldest
                                  • Most Votes


                                  • Login

                                  • Login or register to search.
                                  • First post
                                    Last post
                                  0
                                  • Categories
                                  • Recent
                                  • Tags
                                  • Popular
                                  • World
                                  • Users
                                  • Groups