Follow Mark on LinkedIn Follow @marknca on Twitter Follow marknca on YouTube
marknca

Mornings With Mark
no. // 0 0 0 5

Net Neutrality

Subscribe to the podcast.

Watch the episode here

Join the discussion on LinkedIn

Tweet about this episode

Full machine generated transcript follows

Good morning. How's everyone doing today? Hit me up online at Mark NCAA and let me know today. I wanted to talk about net neutrality. And the reason why we're talking about net neutrality today is because it's June 11th in in the United States. This means that the previous ruling on net neutrality is no longer in effect, which means internet service providers can shape their networks how they please now, they've all promise not to abuse or to take advantage of this newfound freedom.

And of course the FCC with ugly pie have been pushing that this is going to be a benefit. This will for size piece to invest and build up their networks to provide Broadband to those who don't have it and these are all nice things to hear and I know there is a huge amount of challenges around the concept of Regulation and the political climate, but the summary for consumers is that this is a way for isps to make sure that they're not just a dumb pipe.

Fraid that's their fear. They own this network. They want to monetize and maximize the value of the getting out of this at work and being able to prioritize traffic from Partners or from Services. They own he's away for now. I'm against it but that's not what this video is about.

I like our net neutrality. I think it in the shores of fair playing field for everybody. But again not what we're diving into here today. What I want to dive into I'm is the security and privacy ramifications or at least the reminder of the position your ISP plays within your role.

Now the way the reason why I speak could perhaps provide a fast lane could provide, you know services that don't count against your data cap that could leverage your information to provide a better add delivery experience for its advertising Partners as the CEOs of AT&T and Verizon stated they want to do is because they know everything about your internet surfing habits.

There's a common assumption among average users and why not? There's not like it's Nothing is push out there that your home connection or even your cell connection is a relatively private connection. It's not your ISP has the health of the month at work tomorrow, but they're also in the perfect place to monitor all of the activities that you're doing online.

This is why we in the security privacy community and pushed end-to-end encryption and that's where encryption starts at the application that you're using and finishes at the other side of that communication. So if I'm having a direct message chat with you the viewer, the individual viewer that message is encrypted on my phone.

I made transits down the stack of the operating system encrypted out across the network encrypted up the stack of your phone encrypted to wear your application will decrypt it so that we can communicate securely so people know that we are communicating but they don't know the contents of that communication what your internet service provider is in a position to see everything that's not encrypted.

I see all the metadata around your encrypted Communications because you're going over there pipe to get to the internet and we saw this years ago with a common practice wear anytime you mistyped domain your internet service provider with serve up ads and because they own the DNS that your connection uses.

Regularly DNS is the domain name service. That's essentially like a phone book that translates google.com into a matching IP address. So unless you manually gone into your home router and overridden that to use a third-party DNS service that promises privacy or contribute to your privacy. Your ISP knows every website you requested from a domain level and then they can see the traffic associate with that because you're going across their Network privacy threat that people aren't necessarily aware of I think that's a security threat with the lack of net neutrality.

Now that people haven't quite gained the Capri or Stop game but haven't quite comprehended right it's going to be a collateral a sort of a secondary impact of the lack of Regulation around at neutrality is the fact that you lose even more trust in the network that you're on so you're using a cloud-based Security Service.

How do you know that that's not being throttled as far as performance. So hopefully that's it because the security service is encrypted end-to-end. But even if it's encrypted end-to-end Your Eyes Peas in a position now to slow down that track again slow that response which creates a potential security issue for you is you're expecting a certain response time and more least your systems.

Are there no longer getting that I'm going to get this is getting a position is peace to be more aggressive on the Privacy intrusion side because they're in a position to see all that. There's no longer any regulation in the u.s. Holding them back in other jurisdictions. In other countries.

They're absolutely is a Nismo movements underway in the states to reinstate or to ensure that net neutrality rules stay in place in those states have but I think it's an interesting aspect where a lot of people just assume Your Eyes Peas on your side. They assume that that's a safe and trusted partnership and you do need to trust them to a certain extent.

However, you should be aware of their capabilities because they are sitting on that the first segment of the network as you connect to it. They by default have your DNS Day by default see all of your activity all of your traffic back and forth. You need to take steps or are you should look at taking steps to reduce that visibility into to lessen their impact in their ability to serve you ads because they can inject as into your traffic as we've seen where you read been with caps what time Meijer peas will send a banner into your web pages saying here near your cap.

You're about to be charged over just a nice feature. But the way they Implement that feature is really scary. That means they're inserting. They're content to the content you ask for from somebody else. Now, the the safeties are off. They are free to do almost. Wherever they choose because net neutrality is no longer place.

Things you as a user need to readjust your relationship there. So think about using a trusted third-party VPN for all of your traffic connected right from your home right around to a VPN and that means that now Your Eyes Peas only going to see encrypted traffic at the very least.

Look at using a third-party DNS servers that you trust. You know, there are a couple out there that you have privacy and Security First, as opposed to Gathering more data around networks. So we're it interesting time. It'll be this is not going to be sort of that instant snap of today.

There's going to be a whole bunch of catastrophic things. But because there's no longer any push for that regulation or there's no longer any regulation place. That means II's peas can Kratos Fast Lanes can create those preferred Services the immediate idea. There is for the increase of Revenue normally run ads, but there are some security and privacy impacts and I think we need to monitor those closely.

What do you think? Let me know. Hit me up online at Mark NCAA in the comments down below or as always Email me at Mark n. CA only gets better with discussion again this content this show is driven by your ideas are getting lots of great feedback a lots of push around starting a cybersecurity again going to be looking at a series of that quite shortly to update a couple weeks ago.

We drove into that topic on a couple shows. How about let me know what you're looking at to hear about to talk about. I hope you are set up for a fantastic Monday. We'll talk to online and we'll see on the show tomorrow. Good morning. How's everyone doing today? Hit me up online at Mark NCAA and let me know today.

I wanted to talk about net neutrality. And the reason why we're talking about net neutrality today is because it's June 11th in in the United States. This means that the previous ruling on net neutrality is no longer in effect, which means internet service providers can shape their networks how they please now, they've all promise not to abuse or to take advantage of this newfound freedom.

And of course the FCC with ugly pie have been pushing that this is going to be a benefit. This will for size piece to invest and build up their networks to provide Broadband to those who don't have it and these are all nice things to hear and I know there is a huge amount of challenges around the concept of Regulation and the political climate, but the summary for consumers is that this is a way for isps to make sure that they're not just a dumb pipe.

Fraid that's their fear. They own this network. They want to monetize and maximize the value of the getting out of this at work and being able to prioritize traffic from Partners or from Services. They own he's away for now. I'm against it but that's not what this video is about.

I like our net neutrality. I think it in the shores of fair playing field for everybody. But again not what we're diving into here today. What I want to dive into I'm is the security and privacy ramifications or at least the reminder of the position your ISP plays within your role.

Now the way the reason why I speak could perhaps provide a fast lane could provide, you know services that don't count against your data cap that could leverage your information to provide a better add delivery experience for its advertising Partners as the CEOs of AT&T and Verizon stated they want to do is because they know everything about your internet surfing habits.

There's a common assumption among average users and why not? There's not like it's Nothing is push out there that your home connection or even your cell connection is a relatively private connection. It's not your ISP has the health of the month at work tomorrow, but they're also in the perfect place to monitor all of the activities that you're doing online.

This is why we in the security privacy community and pushed end-to-end encryption and that's where encryption starts at the application that you're using and finishes at the other side of that communication. So if I'm having a direct message chat with you the viewer, the individual viewer that message is encrypted on my phone.

I made transits down the stack of the operating system encrypted out across the network encrypted up the stack of your phone encrypted to wear your application will decrypt it so that we can communicate securely so people know that we are communicating but they don't know the contents of that communication what your internet service provider is in a position to see everything that's not encrypted.

I see all the metadata around your encrypted Communications because you're going over there pipe to get to the internet and we saw this years ago with a common practice wear anytime you mistyped domain your internet service provider with serve up ads and because they own the DNS that your connection uses.

Regularly DNS is the domain name service. That's essentially like a phone book that translates google.com into a matching IP address. So unless you manually gone into your home router and overridden that to use a third-party DNS service that promises privacy or contribute to your privacy. Your ISP knows every website you requested from a domain level and then they can see the traffic associate with that because you're going across their Network privacy threat that people aren't necessarily aware of I think that's a security threat with the lack of net neutrality.

Now that people haven't quite gained the Capri or Stop game but haven't quite comprehended right it's going to be a collateral a sort of a secondary impact of the lack of Regulation around at neutrality is the fact that you lose even more trust in the network that you're on so you're using a cloud-based Security Service.

How do you know that that's not being throttled as far as performance. So hopefully that's it because the security service is encrypted end-to-end. But even if it's encrypted end-to-end Your Eyes Peas in a position now to slow down that track again slow that response which creates a potential security issue for you is you're expecting a certain response time and more least your systems.

Are there no longer getting that I'm going to get this is getting a position is peace to be more aggressive on the Privacy intrusion side because they're in a position to see all that. There's no longer any regulation in the u.s. Holding them back in other jurisdictions. In other countries.

They're absolutely is a Nismo movements underway in the states to reinstate or to ensure that net neutrality rules stay in place in those states have but I think it's an interesting aspect where a lot of people just assume Your Eyes Peas on your side. They assume that that's a safe and trusted partnership and you do need to trust them to a certain extent.

However, you should be aware of their capabilities because they are sitting on that the first segment of the network as you connect to it. They by default have your DNS Day by default see all of your activity all of your traffic back and forth. You need to take steps or are you should look at taking steps to reduce that visibility into to lessen their impact in their ability to serve you ads because they can inject as into your traffic as we've seen where you read been with caps what time Meijer peas will send a banner into your web pages saying here near your cap.

You're about to be charged over just a nice feature. But the way they Implement that feature is really scary. That means they're inserting. They're content to the content you ask for from somebody else. Now, the the safeties are off. They are free to do almost. Wherever they choose because net neutrality is no longer place.

Things you as a user need to readjust your relationship there. So think about using a trusted third-party VPN for all of your traffic connected right from your home right around to a VPN and that means that now Your Eyes Peas only going to see encrypted traffic at the very least.

Look at using a third-party DNS servers that you trust. You know, there are a couple out there that you have privacy and Security First, as opposed to Gathering more data around networks. So we're it interesting time. It'll be this is not going to be sort of that instant snap of today.

There's going to be a whole bunch of catastrophic things. But because there's no longer any push for that regulation or there's no longer any regulation place. That means II's peas can Kratos Fast Lanes can create those preferred Services the immediate idea. There is for the increase of Revenue normally run ads, but there are some security and privacy impacts and I think we need to monitor those closely.

What do you think? Let me know. Hit me up online at Mark NCAA in the comments down below or as always Email me at Mark n. CA only gets better with discussion again this content this show is driven by your ideas are getting lots of great feedback a lots of push around starting a cybersecurity again going to be looking at a series of that quite shortly to update a couple weeks ago.

We drove into that topic on a couple shows. How about let me know what you're looking at to hear about to talk about. I hope you are set up for a fantastic Monday. We'll talk to online and we'll see on the show tomorrow.