Re:QUIC and HTTP/3 Support Now in Firefox Nightly and Beta
by giovannibonetti on Friday April 16, 2021 @08:44PM
(#26840643)
A firewall would be a great place to add some machine learning
[ Parent
| on HN ]
Re:QUIC and HTTP/3 Support Now in Firefox Nightly and Beta
by zrm on Saturday April 17, 2021 @12:34AM
(#26841606)
A little bit Poe's Law there, but I'll assume you're serious and point out the problem.
Machine learning has non-trivial false positives. We don't need firewalls launching denial of service attacks on legitimate traffic at random.
Re:QUIC and HTTP/3 Support Now in Firefox Nightly and Beta
by Xylakant on Saturday April 17, 2021 @07:21AM
(#26843392)
I’ve seen an IDS decide to classify all traffic, including management traffic as hostile. The result was an outage for one of the larger web shops in germany.
Re:QUIC and HTTP/3 Support Now in Firefox Nightly and Beta
by meowface on Saturday April 17, 2021 @01:36PM
(#26845954)
Sounds like an IPS.
An IDS basing its fundamental action (detection) partly on ML can definitely be a good, valuable idea. An IPS basing its fundamental action (blocking traffic) partly on ML is the problem.
Re:QUIC and HTTP/3 Support Now in Firefox Nightly and Beta
by codetrotter on Saturday April 17, 2021 @08:32AM
(#26843772)
Well, it is said that the only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards.
Blanket denying all traffic is a good first step to ensuring that the system is really, really secure :P