Talk:2166: Stack - Revision history

162.158.158.149: Addition of comment to the discussion

2019-07-04T05:25:15Z

Addition of comment to the discussion

Ianrbibtitlht at 18:35, 24 June 2019

2019-06-24T18:35:06Z

Malgond at 17:51, 24 June 2019

2019-06-24T17:51:53Z

Malgond at 17:51, 24 June 2019

2019-06-24T17:51:34Z

172.68.141.52 at 13:01, 24 June 2019

2019-06-24T13:01:15Z

172.68.133.54 at 13:00, 24 June 2019

2019-06-24T13:00:03Z

162.158.107.79: Not clear that OSI model intended. Maybe separate the OSI interpretation.

2019-06-23T08:00:24Z

Not clear that OSI model intended. Maybe separate the OSI interpretation.

Ianrbibtitlht at 02:24, 22 June 2019

2019-06-22T02:24:24Z

Ianrbibtitlht at 23:44, 21 June 2019

2019-06-21T23:44:54Z

162.158.34.206 at 22:04, 21 June 2019

2019-06-21T22:04:57Z

← Older revision		Revision as of 05:25, 4 July 2019
Line 22:		Line 22:
	:: It is not so clear. First of all there's no mention of OSI; moreover there's eight layers in the picture, not seven. "Foreign government" may still be at ISO Layer 1, e.g. at a chip fab, or somewhere higher such as in factory-installed firmware or OS image. "Own government" may be anything starting from installing hardware implants via interdiction, through firmware/OS/crypto compromise (planted vulnerabilities), 0-days (discovered vulnerabilities) to traffic capture/analysis - and so on. My personal take on layers' meanings is: HW design shortcomings; malicious firmware installed at foreign factories; NSA-planted APTs (low-level); malware infections; Javascript (or trojan app) mining code; backdoors planted in app code by a current employee; vulnerabilities in app code exploited by a former employee; user-inflicted problems such as misconfiguration or installation of questionable software -- [[User:Malgond\|Malgond]] ([[User talk:Malgond\|talk]]) 17:51, 24 June 2019 (UTC).		:: It is not so clear. First of all there's no mention of OSI; moreover there's eight layers in the picture, not seven. "Foreign government" may still be at ISO Layer 1, e.g. at a chip fab, or somewhere higher such as in factory-installed firmware or OS image. "Own government" may be anything starting from installing hardware implants via interdiction, through firmware/OS/crypto compromise (planted vulnerabilities), 0-days (discovered vulnerabilities) to traffic capture/analysis - and so on. My personal take on layers' meanings is: HW design shortcomings; malicious firmware installed at foreign factories; NSA-planted APTs (low-level); malware infections; Javascript (or trojan app) mining code; backdoors planted in app code by a current employee; vulnerabilities in app code exploited by a former employee; user-inflicted problems such as misconfiguration or installation of questionable software -- [[User:Malgond\|Malgond]] ([[User talk:Malgond\|talk]]) 17:51, 24 June 2019 (UTC).
	::: This is where I'm at on the question as well. It seems that connecting each tech stack layer to an OSI model layer is a too bit restrictive. [[User:Ianrbibtitlht\|Ianrbibtitlht]] ([[User talk:Ianrbibtitlht\|talk]]) 18:35, 24 June 2019 (UTC)		::: This is where I'm at on the question as well. It seems that connecting each tech stack layer to an OSI model layer is a too bit restrictive. [[User:Ianrbibtitlht\|Ianrbibtitlht]] ([[User talk:Ianrbibtitlht\|talk]]) 18:35, 24 June 2019 (UTC)
		+	:::: Just wanted to add my thoughts, but I saw the eighth "user layer" as representing the human element, e.g. social engineering, and the fact its narrower than the other layers might indicate its supposed to not be standard. In my mind, this would make sense as most companies have a support desk that doesn't realise its own role in security, and can therefore be compromised by a customer with little technical skill. Maybe I'm clutching at straws to fit in in with the OSI model, but what other model is there that's well known enough? [[Special:Contributions/162.158.158.149\|162.158.158.149]] 05:25, 4 July 2019 (UTC)

← Older revision		Revision as of 18:35, 24 June 2019
Line 21:		Line 21:
	: I disagree. There's a clear link, with hardware exploits on the bottom, and the "foreign government" layer is likely a reference to the US-Huawei situation. [[Special:Contributions/172.68.141.52\|172.68.141.52]] 13:01, 24 June 2019 (UTC)		: I disagree. There's a clear link, with hardware exploits on the bottom, and the "foreign government" layer is likely a reference to the US-Huawei situation. [[Special:Contributions/172.68.141.52\|172.68.141.52]] 13:01, 24 June 2019 (UTC)
	:: It is not so clear. First of all there's no mention of OSI; moreover there's eight layers in the picture, not seven. "Foreign government" may still be at ISO Layer 1, e.g. at a chip fab, or somewhere higher such as in factory-installed firmware or OS image. "Own government" may be anything starting from installing hardware implants via interdiction, through firmware/OS/crypto compromise (planted vulnerabilities), 0-days (discovered vulnerabilities) to traffic capture/analysis - and so on. My personal take on layers' meanings is: HW design shortcomings; malicious firmware installed at foreign factories; NSA-planted APTs (low-level); malware infections; Javascript (or trojan app) mining code; backdoors planted in app code by a current employee; vulnerabilities in app code exploited by a former employee; user-inflicted problems such as misconfiguration or installation of questionable software -- [[User:Malgond\|Malgond]] ([[User talk:Malgond\|talk]]) 17:51, 24 June 2019 (UTC).		:: It is not so clear. First of all there's no mention of OSI; moreover there's eight layers in the picture, not seven. "Foreign government" may still be at ISO Layer 1, e.g. at a chip fab, or somewhere higher such as in factory-installed firmware or OS image. "Own government" may be anything starting from installing hardware implants via interdiction, through firmware/OS/crypto compromise (planted vulnerabilities), 0-days (discovered vulnerabilities) to traffic capture/analysis - and so on. My personal take on layers' meanings is: HW design shortcomings; malicious firmware installed at foreign factories; NSA-planted APTs (low-level); malware infections; Javascript (or trojan app) mining code; backdoors planted in app code by a current employee; vulnerabilities in app code exploited by a former employee; user-inflicted problems such as misconfiguration or installation of questionable software -- [[User:Malgond\|Malgond]] ([[User talk:Malgond\|talk]]) 17:51, 24 June 2019 (UTC).
		+	::: This is where I'm at on the question as well. It seems that connecting each tech stack layer to an OSI model layer is a too bit restrictive. [[User:Ianrbibtitlht\|Ianrbibtitlht]] ([[User talk:Ianrbibtitlht\|talk]]) 18:35, 24 June 2019 (UTC)

@@ Line 20: / Line 20: @@
 I don't think labeling the layers by the OSI layers makes much sense.  There is no indication in the comic that the OSI model is intended.  If going to cover OSI, maybe put in a table with the OSI model levels as one column (to clearly separate that interpretation from others).  [[Special:Contributions/162.158.107.79|162.158.107.79]] 08:00, 23 June 2019 (UTC)
 : I disagree. There's a clear link, with hardware exploits on the bottom, and the "foreign government" layer is likely a reference to the US-Huawei situation. [[Special:Contributions/172.68.141.52|172.68.141.52]] 13:01, 24 June 2019 (UTC)
-:: It is not so clear. First of all there's no mention of OSI; moreover there's eight layers in the picture, not seven. "Foreign government" may still be at ISO Layer 1, e.g. at a chip fab, or somewhere higher such as in factory-installed firmware or OS image. "Own government" may be anything starting from installing hardware implants via interdiction, through firmware/OS/crypto compromise (planted vulnerabilities), 0-days (discovered vulnerabilities) to traffic capture/analysis - and so on. My personal take on layers' meanings is: HW design shortcomings; malicious firmware installed at foreign factories; NSA-planted APTs (low-level); malware infections; Javascript (or trojan app) mining code; backdoors planted in app code by a current employee; vulnerabilities in app code exploited by a former employee; user-inflicted problems such as misconfiguration or installation of questionable software.
+:: It is not so clear. First of all there's no mention of OSI; moreover there's eight layers in the picture, not seven. "Foreign government" may still be at ISO Layer 1, e.g. at a chip fab, or somewhere higher such as in factory-installed firmware or OS image. "Own government" may be anything starting from installing hardware implants via interdiction, through firmware/OS/crypto compromise (planted vulnerabilities), 0-days (discovered vulnerabilities) to traffic capture/analysis - and so on. My personal take on layers' meanings is: HW design shortcomings; malicious firmware installed at foreign factories; NSA-planted APTs (low-level); malware infections; Javascript (or trojan app) mining code; backdoors planted in app code by a current employee; vulnerabilities in app code exploited by a former employee; user-inflicted problems such as misconfiguration or installation of questionable software -- [[User:Malgond|Malgond]] ([[User talk:Malgond|talk]]) 17:51, 24 June 2019 (UTC).

← Older revision		Revision as of 17:51, 24 June 2019
Line 20:		Line 20:
	I don't think labeling the layers by the OSI layers makes much sense. There is no indication in the comic that the OSI model is intended. If going to cover OSI, maybe put in a table with the OSI model levels as one column (to clearly separate that interpretation from others). [[Special:Contributions/162.158.107.79\|162.158.107.79]] 08:00, 23 June 2019 (UTC)		I don't think labeling the layers by the OSI layers makes much sense. There is no indication in the comic that the OSI model is intended. If going to cover OSI, maybe put in a table with the OSI model levels as one column (to clearly separate that interpretation from others). [[Special:Contributions/162.158.107.79\|162.158.107.79]] 08:00, 23 June 2019 (UTC)
	: I disagree. There's a clear link, with hardware exploits on the bottom, and the "foreign government" layer is likely a reference to the US-Huawei situation. [[Special:Contributions/172.68.141.52\|172.68.141.52]] 13:01, 24 June 2019 (UTC)		: I disagree. There's a clear link, with hardware exploits on the bottom, and the "foreign government" layer is likely a reference to the US-Huawei situation. [[Special:Contributions/172.68.141.52\|172.68.141.52]] 13:01, 24 June 2019 (UTC)
		+	:: It is not so clear. First of all there's no mention of OSI; moreover there's eight layers in the picture, not seven. "Foreign government" may still be at ISO Layer 1, e.g. at a chip fab, or somewhere higher such as in factory-installed firmware or OS image. "Own government" may be anything starting from installing hardware implants via interdiction, through firmware/OS/crypto compromise (planted vulnerabilities), 0-days (discovered vulnerabilities) to traffic capture/analysis - and so on. My personal take on layers' meanings is: HW design shortcomings; malicious firmware installed at foreign factories; NSA-planted APTs (low-level); malware infections; Javascript (or trojan app) mining code; backdoors planted in app code by a current employee; vulnerabilities in app code exploited by a former employee; user-inflicted problems such as misconfiguration or installation of questionable software.

← Older revision		Revision as of 13:01, 24 June 2019
Line 19:		Line 19:

	I don't think labeling the layers by the OSI layers makes much sense. There is no indication in the comic that the OSI model is intended. If going to cover OSI, maybe put in a table with the OSI model levels as one column (to clearly separate that interpretation from others). [[Special:Contributions/162.158.107.79\|162.158.107.79]] 08:00, 23 June 2019 (UTC)		I don't think labeling the layers by the OSI layers makes much sense. There is no indication in the comic that the OSI model is intended. If going to cover OSI, maybe put in a table with the OSI model levels as one column (to clearly separate that interpretation from others). [[Special:Contributions/162.158.107.79\|162.158.107.79]] 08:00, 23 June 2019 (UTC)
−	: I disagree. There's a clear link, with hardware exploits on the bottom, and the "foreign government" layer is likely a reference to the US-Huawei situation.	+	: I disagree. There's a clear link, with hardware exploits on the bottom, and the "foreign government" layer is likely a reference to the US-Huawei situation. [[Special:Contributions/172.68.141.52\|172.68.141.52]] 13:01, 24 June 2019 (UTC)

← Older revision		Revision as of 13:00, 24 June 2019
Line 19:		Line 19:

	I don't think labeling the layers by the OSI layers makes much sense. There is no indication in the comic that the OSI model is intended. If going to cover OSI, maybe put in a table with the OSI model levels as one column (to clearly separate that interpretation from others). [[Special:Contributions/162.158.107.79\|162.158.107.79]] 08:00, 23 June 2019 (UTC)		I don't think labeling the layers by the OSI layers makes much sense. There is no indication in the comic that the OSI model is intended. If going to cover OSI, maybe put in a table with the OSI model levels as one column (to clearly separate that interpretation from others). [[Special:Contributions/162.158.107.79\|162.158.107.79]] 08:00, 23 June 2019 (UTC)
		+	: I disagree. There's a clear link, with hardware exploits on the bottom, and the "foreign government" layer is likely a reference to the US-Huawei situation.

← Older revision		Revision as of 08:00, 23 June 2019
Line 17:		Line 17:

	I think the stack resembles an 8-layer wedding cake! [[User:Ianrbibtitlht\|Ianrbibtitlht]] ([[User talk:Ianrbibtitlht\|talk]]) 02:24, 22 June 2019 (UTC)		I think the stack resembles an 8-layer wedding cake! [[User:Ianrbibtitlht\|Ianrbibtitlht]] ([[User talk:Ianrbibtitlht\|talk]]) 02:24, 22 June 2019 (UTC)
		+
		+	I don't think labeling the layers by the OSI layers makes much sense. There is no indication in the comic that the OSI model is intended. If going to cover OSI, maybe put in a table with the OSI model levels as one column (to clearly separate that interpretation from others). [[Special:Contributions/162.158.107.79\|162.158.107.79]] 08:00, 23 June 2019 (UTC)

← Older revision		Revision as of 02:24, 22 June 2019
Line 15:		Line 15:
	we seem to be missing compromised by anti virus software - but that aside I want the t-shirt[[Special:Contributions/162.158.34.206\|162.158.34.206]]		we seem to be missing compromised by anti virus software - but that aside I want the t-shirt[[Special:Contributions/162.158.34.206\|162.158.34.206]]
	:It's probably not a Windows-based server, so no anti-virus software is needed! [[User:Ianrbibtitlht\|Ianrbibtitlht]] ([[User talk:Ianrbibtitlht\|talk]]) 23:44, 21 June 2019 (UTC)		:It's probably not a Windows-based server, so no anti-virus software is needed! [[User:Ianrbibtitlht\|Ianrbibtitlht]] ([[User talk:Ianrbibtitlht\|talk]]) 23:44, 21 June 2019 (UTC)
		+
		+	I think the stack resembles an 8-layer wedding cake! [[User:Ianrbibtitlht\|Ianrbibtitlht]] ([[User talk:Ianrbibtitlht\|talk]]) 02:24, 22 June 2019 (UTC)

← Older revision		Revision as of 23:44, 21 June 2019
Line 14:		Line 14:

	we seem to be missing compromised by anti virus software - but that aside I want the t-shirt[[Special:Contributions/162.158.34.206\|162.158.34.206]]		we seem to be missing compromised by anti virus software - but that aside I want the t-shirt[[Special:Contributions/162.158.34.206\|162.158.34.206]]
		+	:It's probably not a Windows-based server, so no anti-virus software is needed! [[User:Ianrbibtitlht\|Ianrbibtitlht]] ([[User talk:Ianrbibtitlht\|talk]]) 23:44, 21 June 2019 (UTC)

← Older revision		Revision as of 22:04, 21 June 2019
Line 11:		Line 11:

	Isn't the title text a reference to [https://www.bleepingcomputer.com/news/security/open-mongodb-databases-expose-chinese-surveillance-data/ when china had some surveillance databases publicly visible]? [[User:Rerere284\|Rerere284]] ([[User talk:Rerere284\|talk]]) 17:48, 21 June 2019 (UTC)		Isn't the title text a reference to [https://www.bleepingcomputer.com/news/security/open-mongodb-databases-expose-chinese-surveillance-data/ when china had some surveillance databases publicly visible]? [[User:Rerere284\|Rerere284]] ([[User talk:Rerere284\|talk]]) 17:48, 21 June 2019 (UTC)
		+
		+
		+	we seem to be missing compromised by anti virus software - but that aside I want the t-shirt[[Special:Contributions/162.158.34.206\|162.158.34.206]]