Zero Trust Information
stratechery.com
stratechery.com
also on polarization: https://www.pnas.org/content/114/40/10612
The conclusion: "Many authors point to the Internet in general and social media in particular as possible drivers of political polarization. We find that polarization has increased the most among the groups least likely to use the Internet and social media. Under appropriate assumptions, these facts can be shown to imply a limited role for the Internet and social media in explaining the recent rise in measured political polarization."
This could imply dominant second-order effects. Traditional media has changed its content & form radically in response to the Internet.
from the perspective of the founder of a remote-first startup, NetFoundry, who was amongst the first to offer zero trust networking as a service.
Just ask people what the difference between zero trust and role based access control is. If you have rbac and everything uses it, is that zero trust? A smart policy engine like... Windows AD?
To me "zero trust" just means do authentication the right way for everything. You can ask 10 security companies what it means and you will get 10 diffrent answers. I fear the hype train is drowning the architectural philosophy.
Ideally, if I ping a device in some random subnet unless I am authenticated and authorized to specifically reach that node and this authorization is audited routinely my icmp packet should never reach the destination. In reality,nothing out there is that granular so people define it at diffrent levels of granularity and scope and have their own zero trust. Also, Cisco's TACACS+ was made for this. 802.1x was suppose to enable NAC for this as well (for those who don't know TACACS supports granular authorization like sudo-ish) people just never took it that far.
Zero trust is easily hijacked as a marketing slang, maybe something like "authenticated explicit authorization" is better to avoid the awkardity of having to debate "no,I don't think that is zero trust",especially given how people are trying to apply it outside of infosec.
Having said that, it's nice to see that people acknowledge the ways that information was available, seeding the need to re-evaluate information dynamics.
This is a mangled neologism for epistemic vigilance. We have many terms for epistemological outlooks that describe them without conflating commitments and information at large.
> Suppose that all published information followed a normal distribution [wrt quality of information]:
Or don't, because that's not remotely close to true or useful for modeling what to do about it.
This criticism is worth making because assuming a normal distribution of information quality makes the world already flat, and your problem reduces to news media bias.
This type of simplification reflects tech-culture naïveté. It is not the case that all problems are simply waiting to be properly understood as simple by someone familiar with tech.
> This is not to say that the Internet means that everything is going to be ok, either in the world generally or the coronavirus crisis specifically. But once we get through this crisis, it will be worth keeping in mind the story of Twitter and the heroic Seattle Flu Study team: what stopped them from doing critical research was too much centralization of authority and bureaucratic decision-making; what ultimately made their research materially accelerate the response of individuals and companies all over the country was first their bravery and sense of duty, and secondly the fact that on the Internet anyone can publish anything.
This is not true. A push/pull of many factors plays into how modern science gets done. Some of those factors include centralization, bureaucracy, piracy, and individual judgment.
It is neither useful nor accurate to claim that "centralization of authority and bureaucratic decision-making" prevented a group of researchers from exploring research predicated on genome sequences whose coordination, publication, and syndication all rely heavily on centralized infrastructure projects and public health institutions.
Scientific and public health bureaucracies are complicated. Lifesci loves preprints and dodging publishers, but it also loves centralized bioinformatics and genomics infra.
I am comfortable generalizing "lifesci" here, because it's damn near universal.
Every [reasonable] educated person resents or at least distrusts medical regulators, especially those who work for them. So it's not saying much that yes, of course, scientists do too.
Within lifesci, you would be hard-pressed to find scientists who aren't simultaneously saying "open access good", "publish your data at <centralized repository>", and "I can't believe that <govt agency> is <regulating something incredibly poorly>."
This differs from attitudes of general populations, whose stances on health + safety + environment bureaucracies seem to be well-predicted by factors entirely unrelated to the efficacy of the tooling and services provided by those bureaucracies. Often that means keystone issues that reflect information diet, like views on GMOs and climate change.
If the first word out of your mouth when discussing the needs of modern science is "centralization", you're engaging in wrongheaded techthink. It's worth doing something about, of course, but it truly is immaterial to the everyday workflows of most lab science.
I see this error a lot in tech infrastructure projects. It's frustrating to see very cool, valuable things get built by scientist-coder teams who fail to appreciate that "decentralized x" is not a selling point for the vast majority of prospective users.
These projects often fail to achieve good market fit because they treat problems of scientific research as if they're problems of consumer data privacy. Nobody BLASTs a sequence because they just love the bureaucratic directives of NCBI so much, nor do they contribute new GenBank sequence data for the clout. They do so because it helps make their work feasible.
Don't underestimate the impact of that separation of concerns on scientific attitudes toward centralization. It matters a hell of a lot that researchers don't have to know how GenBank is built or what BLAST actually does as an algorithm.
The problem is that it's extremely easy to overvalue one's own critical-thinking skills, and so think that one is immune when one isn't. (In fact, when experts are fooled in areas that they think are covered by their expertise, then they tend to be worse fooled than non-experts.)
However it’s so much easier to then for a non-expert to say that their half-baked solution worked due to the survivorship bias.
This point is incredibly popular because non-experts have less to loose by making dumb choices in the first place and there are way more non-experts, thus the whole set of non-experts can afford to be the fireflies in any industry.
Or the "experts" have more invested in their "expertise" or are more indoctrinated in their view and more stubborn to move from it.
If you look at the history of math, medicine, economics, physics, etc, the biggest detractors of new ideas, new information, etc were the experts.
Take Cantor and his proof of countable and uncountable infinities. It's was the experts within academia who attacked him relentlessly. So much so that it sent Cantor to a mental asylum.
Cantor works as an example. Who was it that eventually adopted his ideas?
Experts aren't infallible, but they are (almost definitionally) the ones doing the work to move their field closer to truth. They may miss the mark sometimes, maybe often, but they're also the only ones hitting the mark.
Lots of physicists are detractors of "new physics"
https://gizmodo.com/the-dirtiest-fight-in-physics-is-about-t...
String theory has tons of detractors.
General and special relativity had detractors until experiments.
Newton and his physics was criticized. An "invisible force" called gravity that mysteriously acts on objects across distances?
We could go back to copernicus, galileo and eventually to aristotlean physics.
> Cantor works as an example. Who was it that eventually adopted his ideas?
What's your point?
> Experts aren't infallible, but they are (almost definitionally) the ones doing the work to move their field closer to truth.
But that's not the point. You made it sound like all experts are. I proved to you that it is not the case. Many times, it's the experts doing their damnednest to prevent progress. It's a small group of experts who fight and succeed against established expert dogma.
> They may miss the mark sometimes, maybe often, but they're also the only ones hitting the mark.
Who is they. You act like "they" are all working towards a common objective. I showed you that's not true. Many times, sadly, experts work hard to maintain the status quo.
I suggest you look up a book on philosophy or history of science. It'll be an eye-opener. It seems like you still cling to the silly "perfect" idea of experts.
But the non-experts would not even understand him.
As a matter of fact the more non-expert the person is, the higher the probability they would burn Cantor alive for not working in the fields instead.
Well, you don't have to call them that, but most people whom others call experts are overconfident in this quantifiable way. See, for example, https://www.psychologytoday.com/us/blog/the-art-thinking-cle... . You probably can't do it as well as you think you can either.
Also you are literally referencing a blog of a science which has serious troubles with the replication or it’s own studies.