User:Becha/InternetPlumbing

Lecture at Hacking Feminism

• 6 April 2016, 8PM
• By Becha
• https://wiki.laglab.org/Hacking_Feminism

Internet Plumbing

Internet Plumbing is a word-game with multiple layers of meaning (ha! a recursive pun ;-)

Series of Tubes

• https://en.wikipedia.org/wiki/Series_of_tubes
• http://www.salon.com/2012/05/28/tubes_what_the_internet_is_made_of/
• http://knowyourmeme.com/memes/series-of-tubes
• http://www.submarinecablemap.com/

Ubiquitous and complicated as plumbing?

• Internet as a utility
• just like "plumbing" (water & sewage), there is underlying "technology" to it, so complex, that no-one seems to grasp how all of it works
• 60% of the population of the planet does NOT have "teh Internets", and 30% does not have plumbing either (http://www.un.org/waterforlifedecade/sanitation.shtml)

Acronyms!

• TCP/IP
• IPv4, IPv6: Internet Protocol (IP) addresses
• NAT: Network Address Translation
• DNS: Domain Name System
• ASN: Autonomous System Number
  • used for BGP routing (Border Gateway Protocol)
• IXP: Internet eXchange Point
• SMTP
• HTTP
• CDN

Basics

https://en.wikipedia.org/wiki/Border_Gateway_Protocol

Many many more resources: books, videos:

• Internet_Governance_and_hackers#How_does_the_Internet_work

Links:

• http://en.flossmanuals.net/bypassing-censorship/ch006_chapter-1-how/
• https://en.wikipedia.org/wiki/Internet_protocol_suite
• http://what-when-how.com/data-communications-and-networking/network-and-transport-layers-data-communications-and-networking/
• http://what-when-how.com/data-communications-and-networking/network-models-data-communications-and-networking/
• http://www.laneye.com/network/how-network-works/mac-address-and-ip-address-relationship.htm
• https://www.amplicon.com/building/networking-principles.cfm#ip
• DNS & CDNs: Internet plumbing: Think globally, route locally, Mar 16th 2011, http://www.economist.com/node/21016766/print

Security, Privacy, Avoiding Censorship

• IPSec
• DNSSEC
• BGP security & plumbing:
  • https://www.blackhat.com/docs/us-15/materials/us-15-Remes-Internet-Plumbing-For-Security-Professionals-The-State-Of-BGP-Security-wp.pdf
  • https://www.youtube.com/watch?v=po_9p6XxK2E

• User Self-help:
  • https://www.takebackthetech.net
  • https://gendersec.tacticaltech.org/wiki/index.php/Manuals_with_a_gender_perspective
  • http://hackingwithcare.in/by/ressources/
  • https://gendersec.tacticaltech.org/wiki/index.php/Complete_manual
  • http://en.flossmanuals.net/bypassing-censorship/ch007_chapter-2-censorship/

Alternatives

MeshNet: "Hackers and philosophers building an utopia together": http://becha.home.xs4all.nl/hackers-philosophers-utopian-network-dec-2012-becha.pdf

MeshNet#Education

P2pbgpsec#Technical_view

November 2014: Nature will have the last word, on Future of Technology, RIPE69 https://wiki.techinc.nl/index.php/File:Nature-speaking-on-future_of_the_internet-RIPE69.pdf

UnCivilization: critical thinking about Internet & capitalism: https://lists.puscii.nl/wws/info/uncivilization

• • Hackers_tribes#Internet_and_Capitalism
  • Hackers_tribes#Internet.2C_Electrical_Energy_Efficiency.2C_Pollution
  • Hackers_tribes#Against_Anthropocentrism

Playfull: Internet Simulator: https://github.com/nsec/the-internet

• Alternative Network Deployments: Taxonomy, characterization, technologies and architectures

https://www.ietf.org/id/draft-irtf-gaia-alternative-network-deployments-04.txt

• The Critical Engineering Manifesto: https://www.criticalengineering.org/

Overview

Comparing OSI & TCP / IP layers

Original borrowed from: https://en.wikipedia.org/wiki/OSI_model

TCP / IP Model	OSI Model
Layer	OSI Layer	Protocol data unit (PDU)	Function	Examples
Application	7. Application	Data	High-level APIs, including resource sharing, remote file access, directory services and virtual terminals	TLS, FTP, HTTP, HTTPS, SMTP, SSH, Telnet, BGP!
	6. Presentation		Translation of data between a networking service and an application; including character encoding, data compression and encryption/decryption	CSS, GIF, HTML, XML, JSON
Transport	5. Session		Managing communication sessions, i.e. continuous exchange of information in the form of multiple back-and-forth transmissions between two nodes	RPC, SCP, NFS, PAP,
	4. Transport	Segment (TCP) / Datagram (UDP)	Reliable transmission of data segments between points on a network, including segmentation, acknowledgement and multiplexing	NBF, TCP, UDP
Network / Internet	3. Network	Packet	Structuring and managing a multi-node network, including addressing, routing and traffic control	AppleTalk, ICMP, IPsec, IPv4, IPv6
Link layer	2. Data link	Frame	Reliable transmission of data frames between two nodes connected by a physical layer	IEEE 802.2, L2TP, LLDP, MAC, PPP, ATM, MPLS
	1. Physical	Bit	Transmission and reception of raw bit streams over a physical medium	DOCSIS, DSL, Ethernet physical layer, ISDN, USB

Cross-layer functions:

• ARP is used to translate IPv4 addresses (OSI layer 3) into Ethernet MAC addresses (OSI layer 2).
• Domain Name Service is an Application Layer service which is used to look up the IP address of a given domain name. Once a reply is received from the DNS server, it is then possible to form a Layer 3 connection to the third-party host.
• etc

Layers as an allegory

OSI Model T-shirt enhanced to include an 8th and 9th layer as defined by Evi Nemeth: https://en.wikipedia.org/wiki/Evi_Nemeth // https://www.isc.org/product/isc-9-layer-osi-model-cotton-t-shirt/

(TODO: add ISC reference to Evi's wikipedia page!!)

ABSTRACTION

Explaining complex concepts using layers is a useful abstraction.

Goal here is to illustrate layers by practical examples, and point out owners, developers, dangers, mitigations & alternatives.

This is not exactly technically correct, for the detail oriented people! 

Number	Layer name	Example	Practically	Owner	Developed by	Vulnerabilities / Dangers	Mitigation / Securing	Alternatives
9	Organisation / Political	(Internet) Governance		technical community, civil society, governments	IGF (Internet Governance Forum), UN, ITU, IETF, ICANN,		awareness, take part!	someone will build a new *net, AlterNet :-)
8	Individual / Financial	Operating System (OS) + choice of software	Linux, FreeBSD, Minix...; iOS, Android, Windows...	User!	programmers & developers: FLOSS community; Apple, Google,Micro$oft	backdoors, surveillance, spying on users; lock-in; monopoly;	community participation; unionization of programmers; see articles here [yy]	knowledge, self-empowerment, solidarity
7	Application	7.3 -> VoIP	skype
		7.2 -> SMTP	email
		7.1 HTTP: web, WWW	web sites! LoLCats!	individuals, on their own servers! blogs (blogspot?), mainstream media, hosting companies; CDNs (Akamai, Amazon...); corporations: Google, Facebook, Twitter... YouTube..	W3c, IETF	censorship; silos; walled gardens; commercialization, consumerism;	technically: httpS, SSL, TLS; Tor; politically: activism, digital human rights; associations of users;	torrent! p2p! alternative social media!
6	Presentation	HTML, CSS, JSON
5	Session	BGP (actually layer 7...)	routing: exchanging AS reachability info via gossip: based on trust & peering agreements! physical routers by routers: Cisco/Juniper (commercial monopolists ;-)	Large ISPs; Tier1 / Tier2 ; IXPs!! RIRs give out AS numbers	"routing-wg" @ RIPE; *NOGs! (nano, nlnog, grnog; peering forums; Euro-IX); IETF; Open-Source community ; hackers	"route hijacks", government regulation & takeover (killer switch), hierarchies;	technically: BGPsec, IRR, RPKI; politically: influencing governance	p2p protocols, Betman [xx]; MPLS, SDN; Tor?!
4	Transport	UDP -> e.g. DNS (see above!)	www.belastingdiest.nl	User; Registrar, Registry, ccTLD, gTLD, ICANN, US government!	DNS OARC, IETF, root-nameserver operators, ICANN, IGF/UN/ITU	"balkanisation", US hegemony; internationalization; censorship;	technically: DNSSEC, DANE ; Tor; politically: participating in governance	Alternative trees; blockchain (namecoin); etc
3	Network	Internet / IP	ifconfig; IPv4, NAT, 10.10.10.10, IPv6	no-one: IP addresses are "leased"! (PI,PA,LIR,RIR,IANA,IETF)	RIR PDP, IANA, IETF	hierarchy, run-out, incompatibility, market forces; surveillance	IPSec	Blockchain?
2	Data-link	Network / Physical connections	Ethernet cables, WiFi, fibers, satellites, under-sea cables	Individuals, communities, ISP, "carriers", corporations, governments,	Hackers, commercial companies, governments	"ownership" models; hierarchy of server-client model; pollution & distraction of Earth; surveillance	commoning; shared infrastructure; development of sustainable technologies (?!), recycling; awareness & activism	Community WiFi, Project Loon, Drones
1	Physical	HW - end user equipment	Computer, tablet, phone...	User	Commercial companies: Apple, Siemens, Samsung...	Un-ethical manufacturing, security backdoors, pollution caused by e-waste disposal,	Hard:	Open HW movement; fair-phone; DIY, Repair Cafes, fair-trade...

Next: Internet Governance

See this lecture : Internet_Governance_Digital_Culture#Internet_Governance

Internet_Governance_and_hackers