nickwitha_k (he/him)

  • 0 Posts
  • 106 Comments
Joined 1 year ago
cake
Cake day: July 16th, 2023

help-circle



  • I’ve got a few things that I need to get done in the next few days (hopefully mostly sorted today) but you’ve got me rather intrigued with this as a puzzle. I’ll see if I can get some time to sketch some thoughts out and maybe some high-level implementation of some bits in Python (it’s faster to POC things).

    A few quick thoughts:

    • I think that an existing or novel protocol built on top of the Internet Protocol is likely the way to go. Following the OSI model, you can target Layer 4, with some simple stuff for higher layers. Client/Server (possibly the same binary) and associated automation should handle Layers 1-3 (translating between different carriers for Layers 1 and 2, and handling routing of data packets in Layer 3).

    • Message routing strategies and their impact on OpSec is worth consideration. By this I mean: broadcast-only vs targeted-only vs both vs hybrid. All three have trade-offs.

    Broadcast-only: Makes it harder to know the intended destination of the message. Conversely, by being routed to either all known addresses or all approved addresses, it can be more vulnerable to interception by a compromised endpoint.

    Targeted-only: May be harder to intercept as the path that a packet takes should result in it hitting fewer potential endpoints. Conversely, some form of addressing is necessary to know, at the least, the next hop in transit. This makes tracing the intended endpoint, as well as network hops much easier (ex. running a traceroute).

    Both: Gains the advantages and disadvantages of both approaches, depending on the which mode the data is transmitted in. Ensuring that data is transmitted correctly becomes important and has implications on the requirement of maintaining known good versions of the client/server software to avoid unintentional or malicious improper routing.

    Hybrid: Could take many forms but the one that comes to my mind is a multilevel hub and spoke architecture (I’ll draw this out). Basically, you end up having 2-3 “modes” for a client/server: hub, spoke, and endpoint. One or more client/servers operating in a hub “mode” act like traditional servers, kinda like a bulletin board, holding packets for local delivery or transmission to another hub. Client/servers in the spoke mode act as hops between hubs. Client/servers in the endpoint mode are the actual intended destination (this could be combined with the spoke mode). To protect endpoint identity, the destination could be part of the encrypted data packet allowing an endpoint to attempt to decrypt packets received from a hub locally, making it harder to know which endpoint a message is intended for. This does still require greater visibility of hub addresses for routing.

    • Encryption of packets is vital. Supporting some modularity might be of value so as to allow use of simpler cryptography for PoC but, the protocol should ensure that it is possible to break reverse compatibility (normally NOT what you want to do for networking protocols but avoiding an “it’s an old code but still checks out” situation would be more important).

    • Amateur radio should be avoided both in PoC and hypothetical “production” use cases. The ban on encryption is insurmountable there and illegal use of encryption could lead to hightened visibility because the FCC, historically, does not fuck around with illegal radio signals. This means all wireless should be below 1W in the US, in bands that are legal for unlicensed use.

    • Any physical layer that supports arbitrary data transfers should be possible. The implementation to support it would be part of the client/server. So, Bluetooth, 802.11, LORA, sneakernet, and many others could be hypothetically supported. Again, though, this relies on the protocol’s stack to be and to understand it, either directly, or translated by another component.

    • A web of trust may be a good approach for authentication and identity.













  • I think a big problem is (as of the last time I checked) the complete lack of anyone making practical things for VR. Not saying that everything needs to be practical to justify its existence but, I think that VR companies have been continually trying to skip ahead to the equivalent of where computing is now, ignoring the history of computers being primarily targeted to research and practical applications before they were adopted en masse and provided a lucrative market. So, instead, they just keep making glorified tech demos, hoping that someone else will do the hard work and they can rake in easy money by forcing them through app stores.

    TL;DR: I think that short-sighted, profit-driven decision making is the reason that VR isn’t yet anything more than a niche.




  • Disclosure: I don’t play CoD anymore (I also think the series is overrated) and would like to see Activision/Blizzard burn.

    You are, unfortunately, partially misperceiving and/or mischaracterizing the game and genre. Most are not murder simulators. Some certainly are (ex. Hitman and the skippable single player bits of one of the CoD games is) but those are the minority - the plots are generally revolving around military conflicts (whether military conflicts are by definition murder or not is another thing altogether though I would personally say that they are in the same ethical place) and the multiplayer is basically technological sports. Since the early-2000s at least, they have been propaganda supporting imperialism and normalizing military conflict, though GenZ seems to have wised up on that.

    For the “real world guns” thing, they aren’t anymore with limited exceptions where a firearms company explicitly partners with them.

    Additionally, the correlation between individuals playing violent video games and taking part on violence just does not exist in any research that has been conducted. Violent video games, in fact, allow people to work out aggression and frustration in healthy, non-destructive ways. Your anger is pointed in the wrong direction. If you want to target something that will have an actual impact, dedicate some energy to pushing fixes for wealth inequality and poverty. Yes, that’s harder to pin down but most things worth doing aren’t easy.