Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

Scheduled Pinned Locked Moved Uncategorized
63 Posts 50 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • nila@infosec.exchangeN nila@infosec.exchange

    @0xabad1dea I wonder how interesting of an attack vector that could be in real life scenarios. How about having an LLM generate 500 drafts with non-obvious misinformation and watch crawlers crawl it, models being trained with the data and then people citing the resulting misinformation?

    Or, more wildly: what's the authN process for working groups? I wonder how far a swarm of agent sock puppets could get in the RFC process...

    ratsnakegames@mastodon.socialR This user is from outside of this forum
    ratsnakegames@mastodon.socialR This user is from outside of this forum
    ratsnakegames@mastodon.social
    wrote last edited by
    #49

    @nila @0xabad1dea the auth process is "if the IETF isn't interested, it doesn't proceed to the RFC stage", apparently.

    You can't just post a standard, but you CAN just post a draft/proposal, which is what both this and "IPv8" are.

    ratsnakegames@mastodon.socialR nila@infosec.exchangeN 2 Replies Last reply
    0
    • ratsnakegames@mastodon.socialR ratsnakegames@mastodon.social

      @nila @0xabad1dea the auth process is "if the IETF isn't interested, it doesn't proceed to the RFC stage", apparently.

      You can't just post a standard, but you CAN just post a draft/proposal, which is what both this and "IPv8" are.

      ratsnakegames@mastodon.socialR This user is from outside of this forum
      ratsnakegames@mastodon.socialR This user is from outside of this forum
      ratsnakegames@mastodon.social
      wrote last edited by
      #50

      @nila @0xabad1dea as long as crawlers correctly interpret the draft as a draft and journos / wiki editors etc do their due diligence (which, i am told, they always do), there is no attack vector

      1 Reply Last reply
      0
      • ratsnakegames@mastodon.socialR ratsnakegames@mastodon.social

        @nila @0xabad1dea the auth process is "if the IETF isn't interested, it doesn't proceed to the RFC stage", apparently.

        You can't just post a standard, but you CAN just post a draft/proposal, which is what both this and "IPv8" are.

        nila@infosec.exchangeN This user is from outside of this forum
        nila@infosec.exchangeN This user is from outside of this forum
        nila@infosec.exchange
        wrote last edited by
        #51

        @ratsnakegames @0xabad1dea Do you think an agent swarm led by an APT could social engineer its way into "the IETF"? Setting up web pages, blogs, arXiv submissions etc. for a network of sock puppets definitely seems within reach of such actors.

        (And, come to think of it, any other standards body...)

        1 Reply Last reply
        0
        • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

          it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

          thelancashireman@hostux.socialT This user is from outside of this forum
          thelancashireman@hostux.socialT This user is from outside of this forum
          thelancashireman@hostux.social
          wrote last edited by
          #52

          @0xabad1dea

          Reminds me of Doug Zongker's publication:
          http://isotropic.org/papers/chicken.pdf
          https://www.youtube.com/watch?v=yL_-1d9OSdk

          1 Reply Last reply
          0
          • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

            it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

            raymaccarthy@mastodon.ieR This user is from outside of this forum
            raymaccarthy@mastodon.ieR This user is from outside of this forum
            raymaccarthy@mastodon.ie
            wrote last edited by
            #53

            @0xabad1dea
            Cat5e or Cat6 cable isn't good enough.
            You need Cat9 cable,

            1 Reply Last reply
            0
            • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

              @hugo @slothrop I’m saying it’s a pointed political statement and not a random joke https://infosec.exchange/@0xabad1dea/116419619962656186

              hugo@someone.elses.computerH This user is from outside of this forum
              hugo@someone.elses.computerH This user is from outside of this forum
              hugo@someone.elses.computer
              wrote last edited by
              #54

              @0xabad1dea @slothrop 👌🏻 no worries next time I won’t reply unless to say something deep and serious which is probably once a year for me on Mastodon. You can ignore me.
              Have a good day

              1 Reply Last reply
              0
              • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                if you have no idea what this is about: a very official-looking "IPv8" draft appeared that was an absolute fever dream of and-a-pony wishlist features for a censorious regime, down to using json web tokens at the hardware level for some reason

                gudenau@hachyderm.ioG This user is from outside of this forum
                gudenau@hachyderm.ioG This user is from outside of this forum
                gudenau@hachyderm.io
                wrote last edited by
                #55

                @0xabad1dea When I read the beginning of IPv8 I thought it was an April 1st one.

                1 Reply Last reply
                0
                • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                  it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                  orb2069@mastodon.onlineO This user is from outside of this forum
                  orb2069@mastodon.onlineO This user is from outside of this forum
                  orb2069@mastodon.online
                  wrote last edited by
                  #56

                  @0xabad1dea I think the somebody in question is @mat ?

                  0xabad1dea@infosec.exchange0 1 Reply Last reply
                  0
                  • orb2069@mastodon.onlineO orb2069@mastodon.online

                    @0xabad1dea I think the somebody in question is @mat ?

                    0xabad1dea@infosec.exchange0 This user is from outside of this forum
                    0xabad1dea@infosec.exchange0 This user is from outside of this forum
                    0xabad1dea@infosec.exchange
                    wrote last edited by
                    #57

                    @Orb2069 @mat thank you, I didn't realize there was an official announcement post on mastodon for it

                    1 Reply Last reply
                    0
                    • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                      it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                      eblu@wetdry.worldE This user is from outside of this forum
                      eblu@wetdry.worldE This user is from outside of this forum
                      eblu@wetdry.world
                      wrote last edited by
                      #58

                      @0xabad1dea throwing in an obligatory shoutout to @mat for being the ietf kitty. cats deserve credit

                      1 Reply Last reply
                      0
                      • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                        it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                        shadowdancer@mstdn.socialS This user is from outside of this forum
                        shadowdancer@mstdn.socialS This user is from outside of this forum
                        shadowdancer@mstdn.social
                        wrote last edited by
                        #59

                        @0xabad1dea
                        Okay, this is cool, my #cat would likely benefit from this. Does anyone know if there's someone already implementing this?

                        1 Reply Last reply
                        0
                        • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                          it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                          blogdiva@mastodon.socialB This user is from outside of this forum
                          blogdiva@mastodon.socialB This user is from outside of this forum
                          blogdiva@mastodon.social
                          wrote last edited by
                          #60

                          @0xabad1dea what has @catsalad been up to?

                          1 Reply Last reply
                          0
                          • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                            it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                            jennyfluff@chitter.xyzJ This user is from outside of this forum
                            jennyfluff@chitter.xyzJ This user is from outside of this forum
                            jennyfluff@chitter.xyz
                            wrote last edited by
                            #61

                            @0xabad1dea that makes more sense than the IPv8 one

                            1 Reply Last reply
                            0
                            • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                              it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                              fedihacker@masto.esF This user is from outside of this forum
                              fedihacker@masto.esF This user is from outside of this forum
                              fedihacker@masto.es
                              wrote last edited by
                              #62

                              @0xabad1dea Meooooooowwwwwwwwwwwwwwww.

                              1 Reply Last reply
                              0
                              • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                                it seems someone decided to prove you really can just publish any nonsense protocol draft with the IETF https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

                                th@social.v.stT This user is from outside of this forum
                                th@social.v.stT This user is from outside of this forum
                                th@social.v.st
                                wrote last edited by
                                #63

                                @0xabad1dea reminds me of Doug Zonker's foundational academic paper "Chicken Chicken Chicken: Chicken Chicken". https://isotropic.org/papers/chicken.pdf

                                Link Preview Image
                                1 Reply Last reply
                                0
                                Reply
                                • Reply as topic
                                Log in to reply
                                • Oldest to Newest
                                • Newest to Oldest
                                • Most Votes


                                • Login

                                • Login or register to search.
                                • First post
                                  Last post
                                0
                                • Categories
                                • Recent
                                • Tags
                                • Popular
                                • World
                                • Users
                                • Groups