World's most internetty firm tries life off the net, and it's sillier than it seems
(2023/07/24)
- Reference: 1690187411
- News link: https://www.theregister.co.uk/2023/07/24/google_air_gap_comment/
- Source link:
Opinion It seems intuitively obvious. Disconnect your PC from the internet, and it's safe from attack. Google thinks enough of the idea to try cutting off a couple of thousand workstations from the pestilential swamp. The air gap is an experiment in increasing the cost of mounting an attack, says the company.
Google toys with internet air-gap for some staff PCs [1]READ MORE
Trying new approaches to security is a good idea, as is understanding the economic logic behind threats. Good for you, Google. It's just a shame it can't possibly work. It may even cause much more harm than good.
Start with the obvious. It isn't an air gap. A true air-gapped device has no connection to any other, wired or wireless. If you need to be really sure, you have to put it in a Faraday cage to muffle the broadcasts any digital processing makes – put an old AM radio next to a smartphone to hear how much screams into the ether.
At a stretch, a network can be air gapped if it has no internet working, but that's already intrinsically less safe. Any device on that network will compromise all of them if an accidental, surreptitious or illicit connection is made. That's what brought down the ultra-high security Iranian centrifuges purifying uranium: no direct internet connection needed if a [2]Stuxnet-infected device is plugged in . And it's not as if the Brain boot sector virus couldn't spread across a globe full of impeccably air-gapped 1988 vintage PC clones.
Of course, the Google air gap is extremely virtual. Workers will still be on Google's internal network and have access to the normal tools and office software. Which brings in all those lovely attack vectors of email and shared documents. Exactly how the air gap will be implemented isn't clear, whether there are isolated network segments or user-mapped firewall whitelists, or some other approach. It doesn't matter. It won't work.
[3]
The ultimate reason is the ultra-dense irony of Google trying to cut itself off from the internet. It's so concentrated it collapses in on itself to a singularity of self-contradiction. No company has done more than Google to make our lives at work and outside completely dependent on the internet. Try turning your computer's network off and see how far you get. Unless the modern workplace is completely reinvented, cutting off the internet is cutting off the work.
[4]
[5]
This is where so much of the damage caused by everyday corporate IT security comes from. Like air gaps, it's easy to understand the basic principle of restricting users to things that the company can secure. Like air gaps, it supposes any such thing is possible. Instead of building a fortress of security, this approach has produced the biggest conspiracy of silence in the corporate world. Employees are made to do security awareness courses and given conditions of employment that mandate compliance with rules and the use of approved IT only. This is enough for management to comply with their own compliance rules. All boxes are ticked and the company can report a responsible and effective cybersecurity policy.
[6]Goodbye Azure AD, Entra the drag on your time and money
[7]The AI arms race could give us the cool without the cruel
[8]The number's up for 999. And 911. And 000. And 111
[9]Whose line is it anyway, GitHub? Innovation, not litigation, should answer
If only. The users pay lip service to the rules because they'll be sacked if they don't. But where the tools and policies get in the way of doing their jobs they use their own tools, moving data across, in and out of the corporate control zone in unorthodox ways. Corporate tools and protocols are usually terrible at helping people do their jobs because who asks users what they need? Besides, diversity is hard to manage.
Yet people need to do those damned jobs so find ways to do them. Their line managers do the same. Nobody admits to it, and as asking for help from support is dangerous, who knows how insecure it actually is? If you think diversity is expensive to secure, try not securing it at all.
An effective air-gap policy in general use will be this writ large. The stricter the lockdown, the more inventive the workarounds. You can't do as the vendors and analysts say, re-engineering businesses to see data as oxygen firing fast iteration based on analytics if you choke off the movement of that data. We're supposed to be removing silos, not welding them shut within Faraday cages.
[10]
The attack surface is the same membrane the business breathes through. It needs to be designed to be both permeable and resistant to infection, but little kills as surely and swiftly as suffocation.
There are few absolute rules in computing. Data has to move into and out of processors. There is no fundamental difference between data and instructions, whether a processor computes or obeys depends entirely on context. A perfectly secure computer is perfectly useless – but fortunately, it's also perfectly impossible.
Google knows all this. It would be far better advised to ignore the feelgood implausibility of the air gap and concentrate on making business IT that understands what users need, and helps them make good security decisions. Somebody has to. ®
Get our [11]Tech Resources
[1] https://www.theregister.com/2023/07/19/google_cuts_internet/
[2] https://www.theregister.com/2022/10/24/black_reward_iran_nuclear_leak/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZL5LwqjwH@vj9SQDbkPXkwAAAcc&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZL5LwqjwH@vj9SQDbkPXkwAAAcc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZL5LwqjwH@vj9SQDbkPXkwAAAcc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2023/07/17/enra_azure_ad_opinion_column/
[7] https://www.theregister.com/2023/07/10/ai_arms_race/
[8] https://www.theregister.com/2023/07/03/the_numbers_up_for_999/
[9] https://www.theregister.com/2023/06/19/opinion/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZL5LwqjwH@vj9SQDbkPXkwAAAcc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[11] https://whitepapers.theregister.com/
Google toys with internet air-gap for some staff PCs [1]READ MORE
Trying new approaches to security is a good idea, as is understanding the economic logic behind threats. Good for you, Google. It's just a shame it can't possibly work. It may even cause much more harm than good.
Start with the obvious. It isn't an air gap. A true air-gapped device has no connection to any other, wired or wireless. If you need to be really sure, you have to put it in a Faraday cage to muffle the broadcasts any digital processing makes – put an old AM radio next to a smartphone to hear how much screams into the ether.
At a stretch, a network can be air gapped if it has no internet working, but that's already intrinsically less safe. Any device on that network will compromise all of them if an accidental, surreptitious or illicit connection is made. That's what brought down the ultra-high security Iranian centrifuges purifying uranium: no direct internet connection needed if a [2]Stuxnet-infected device is plugged in . And it's not as if the Brain boot sector virus couldn't spread across a globe full of impeccably air-gapped 1988 vintage PC clones.
Of course, the Google air gap is extremely virtual. Workers will still be on Google's internal network and have access to the normal tools and office software. Which brings in all those lovely attack vectors of email and shared documents. Exactly how the air gap will be implemented isn't clear, whether there are isolated network segments or user-mapped firewall whitelists, or some other approach. It doesn't matter. It won't work.
[3]
The ultimate reason is the ultra-dense irony of Google trying to cut itself off from the internet. It's so concentrated it collapses in on itself to a singularity of self-contradiction. No company has done more than Google to make our lives at work and outside completely dependent on the internet. Try turning your computer's network off and see how far you get. Unless the modern workplace is completely reinvented, cutting off the internet is cutting off the work.
[4]
[5]
This is where so much of the damage caused by everyday corporate IT security comes from. Like air gaps, it's easy to understand the basic principle of restricting users to things that the company can secure. Like air gaps, it supposes any such thing is possible. Instead of building a fortress of security, this approach has produced the biggest conspiracy of silence in the corporate world. Employees are made to do security awareness courses and given conditions of employment that mandate compliance with rules and the use of approved IT only. This is enough for management to comply with their own compliance rules. All boxes are ticked and the company can report a responsible and effective cybersecurity policy.
[6]Goodbye Azure AD, Entra the drag on your time and money
[7]The AI arms race could give us the cool without the cruel
[8]The number's up for 999. And 911. And 000. And 111
[9]Whose line is it anyway, GitHub? Innovation, not litigation, should answer
If only. The users pay lip service to the rules because they'll be sacked if they don't. But where the tools and policies get in the way of doing their jobs they use their own tools, moving data across, in and out of the corporate control zone in unorthodox ways. Corporate tools and protocols are usually terrible at helping people do their jobs because who asks users what they need? Besides, diversity is hard to manage.
Yet people need to do those damned jobs so find ways to do them. Their line managers do the same. Nobody admits to it, and as asking for help from support is dangerous, who knows how insecure it actually is? If you think diversity is expensive to secure, try not securing it at all.
An effective air-gap policy in general use will be this writ large. The stricter the lockdown, the more inventive the workarounds. You can't do as the vendors and analysts say, re-engineering businesses to see data as oxygen firing fast iteration based on analytics if you choke off the movement of that data. We're supposed to be removing silos, not welding them shut within Faraday cages.
[10]
The attack surface is the same membrane the business breathes through. It needs to be designed to be both permeable and resistant to infection, but little kills as surely and swiftly as suffocation.
There are few absolute rules in computing. Data has to move into and out of processors. There is no fundamental difference between data and instructions, whether a processor computes or obeys depends entirely on context. A perfectly secure computer is perfectly useless – but fortunately, it's also perfectly impossible.
Google knows all this. It would be far better advised to ignore the feelgood implausibility of the air gap and concentrate on making business IT that understands what users need, and helps them make good security decisions. Somebody has to. ®
Get our [11]Tech Resources
[1] https://www.theregister.com/2023/07/19/google_cuts_internet/
[2] https://www.theregister.com/2022/10/24/black_reward_iran_nuclear_leak/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZL5LwqjwH@vj9SQDbkPXkwAAAcc&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZL5LwqjwH@vj9SQDbkPXkwAAAcc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZL5LwqjwH@vj9SQDbkPXkwAAAcc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2023/07/17/enra_azure_ad_opinion_column/
[7] https://www.theregister.com/2023/07/10/ai_arms_race/
[8] https://www.theregister.com/2023/07/03/the_numbers_up_for_999/
[9] https://www.theregister.com/2023/06/19/opinion/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZL5LwqjwH@vj9SQDbkPXkwAAAcc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[11] https://whitepapers.theregister.com/
Air gaps don't work
Flak
Stuxnet proved that.
Try turning your computer's network off and see how far you get.
Lil Endian
Erm.... can anyone post me the rest of the article please? I accidentally pressed F5 before I finished...
katrinab
Before the internet, all the company records were written on pieces of paper and stored in filing cabinets. All the reference materials were printed on pieces of paper and stored on book shelves.
Customer and supplier orders were written on pieces of paper and carried to their location by a postman (and yes it was a man, because we are talking about historical times here).
Yes, we managed it, but to we really want to go back to those days?
Paul Herber
Yes, we do, and what about this wheel thingy. Sounds terribly exciting!
Everything is impossible until someone does it
Pete 2
> Exactly how the air gap will be implemented isn't clear ... It doesn't matter. It won't work
There is an old (older than the internet) saying along the lines of
Those who say something is impossible should stay out of the way of those making it happen
Which could be a corollary of Arthur Clarke's observation about elderly scientists.
Re: Everything is impossible until someone does it
Anonymous Coward
There is, of course, Isaac Asimov's Corollary to Clarke's law:
"When, however, the lay public rallies round an idea that is denounced by distinguished but elderly scientists and supports that idea with great fervour and emotion – the distinguished but elderly scientists are then, after all, probably right."
"who knows how insecure it actually is?"
Pascal Monett
We'll find out when there is a stupendous malware breach that takes control of the non-airgapped PCs and spreads to the so-called air-gapped ones still connected to the same network and the mayhem and forensic report that follows demonstrates that the whole thing was worse than useless because false sense of security.
Any day now, just waiting for it . . .
m4r35n357
Apparently nobody likes the taste of dog food!
It's not about the air gap
My view on this is that it’s not about the air gap is about imposing, dark satanic mills style control upon the proletariat of the employees