News for hackers. Stuff that matters.

A comment on QUIC and HTTP/3 Support Now in Firefox Nightly and Beta. Parent comment

Re:QUIC and HTTP/3 Support Now in Firefox Nightly and Beta by zrm on Saturday April 17, 2021 @12:34AM (#26841606)
A little bit Poe's Law there, but I'll assume you're serious and point out the problem.

Machine learning has non-trivial false positives. We don't need firewalls launching denial of service attacks on legitimate traffic at random.

[ Parent | on HN ]
Re:QUIC and HTTP/3 Support Now in Firefox Nightly and Beta by Xylakant on Saturday April 17, 2021 @07:21AM (#26843392)
I’ve seen an IDS decide to classify all traffic, including management traffic as hostile. The result was an outage for one of the larger web shops in germany.
[ Parent | on HN ]
Re:QUIC and HTTP/3 Support Now in Firefox Nightly and Beta by meowface on Saturday April 17, 2021 @01:36PM (#26845954)
Sounds like an IPS.

An IDS basing its fundamental action (detection) partly on ML can definitely be a good, valuable idea. An IPS basing its fundamental action (blocking traffic) partly on ML is the problem.

[ Parent | on HN ]
Re:QUIC and HTTP/3 Support Now in Firefox Nightly and Beta by codetrotter on Saturday April 17, 2021 @08:32AM (#26843772)
Well, it is said that the only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards.

Blanket denying all traffic is a good first step to ensuring that the system is really, really secure :P

[ Parent | on HN ]