Mrs Mouse at workWhat's a MAC address and Ethernet frame header for? Why don't packets simply start with an IP header?
| blog | https://blog.erratasec.com |
| blog | https://cybersec.substack.com |
| github | https://github.com/robertdavidgraham |
Robert Graham
- 8.3K Followers
- 344 Following
- 912 Posts
Created BlackICE, Sidejacking, Masscan, and other infosec things.
@postmodern they can appear about 30 seconds later
@minusavenue In college I worked for the computer science center where they stuck me in a room where the Token Ring hubs were located, where I heard the things clicking open and closed all day long.
@ErrataRob
We’ve reached an absurd state of affairs where everybody knows the OSI Model is false, where everyone is confused by most of it. Yet, people still defend it, claiming some of it is helpful. Many remember some epiphany, where OSI helped them “get” a difficult concept. The problem is that these cases are almost always misconceptions, such as “layers”.
I love this already.
Consider Ethernet. It's trivially simple frame format with destination and source address, followed by a type field, and faster versions are the outgrowth of the latest technology.
But STILL, you really don't understand until understand history. Why is there an Ethernet separate from the Internet? Why not just have the frame start at the IP header, getting rid of the Ethernet header completely???
Computer science is like art history: almost everything was created in reaction to the status quo. You won't understand it until you first understand the status quo of the time.
Them: "I don't really get Z"
Me: Well, yea, it's because you are trying to understand it outside the context of history.
Me: <Gives hour long history lesson>
Them: <eyes glaze over>
Me: Well, yea, it's because you are trying to understand it outside the context of history.
Me: <Gives hour long history lesson>
Them: <eyes glaze over>
@tarheel I see he has experience in SNA, that would explain why he's not a fan of OSI.
How do you understand the term "Zero-Trust"?
I wrote up a blogpost about how I understand it, where I try to provide a serious answer instead of just cynicism and sarcasm. I mean, the cynical/sarcastic/humorous answers are better, but at some point, we need a serious discussion, too.
https://cybersect.substack.com/p/a-serious-definition-of-the-unserious
A serious definition of the unserious "zero-trust" buzzword
A saw a tweet that went something like this: “I have 10 years of experience and several certifications, and I still don’t know what the heck ‘zero-trust’ is” A lot of responses are sarcastic and humorous, so I thought I’d write up something sincere and serious, defining what this word actually means.