Я не понимаю в чем проблема. Речь же идет о private optic links. Зачем их шифровать? Я и сейчас не убежден, что проблема в этом. Мне кажется, что либо у них прямой доступ к внутренней сети Гугла (тогда SSL не сильно поможет), любо они читают траффик еще на входе (тогда уж совсем пофиг)
define "private". quite likely, it still goes through third-party equipment or at least third-party premises - that's an attack vector right there. my guess is, securing these links costs quite a bit, so whoever's in charge just figured they could save a mil or a dozen.
Well, yes, but there is pretty much only one entity who would be able to attack infrastructure on that scale. Eavesdropping on Google-bandwidth data channel is too expensive if you are after an individual or a small company and non-feasible if you are after the whole thing -- unless your a the size of Google. So yeah, I don't blame them.
not necessarily "only one": there's a few other entities with capabilities kind of comparable on the order of magnitude, plus the "unknown unknowns". yes, it's a rather unlikely scenario, but not out of the realm of the possible. i mean, if you implement "encryption" and talk data safety, gotta think of such things. comm channels of all kinds have been compromised since the beginning of history, so it's really an amateurish mistake.
I'm talking about the intersection of entities that can do it and entities that could be interested in doing it (on this scale). I can't think of anything but the government.
no subject
Date: 2013-10-30 10:27 pm (UTC)Вообще странно, что до сих пор это было и есть не так!
no subject
Date: 2013-10-30 11:02 pm (UTC)wtf google, really. "do no evil, do stupid"?
no subject
Date: 2013-10-31 02:32 am (UTC)no subject
Date: 2013-10-31 02:38 am (UTC)no subject
Date: 2013-10-31 02:45 am (UTC)Eavesdropping on Google-bandwidth data channel is too expensive if you are after an individual or a small company and non-feasible if you are after the whole thing -- unless your a the size of Google. So yeah, I don't blame them.
no subject
Date: 2013-10-31 02:55 am (UTC)no subject
Date: 2013-10-31 02:56 am (UTC)no subject
Date: 2013-10-31 02:58 am (UTC)