* Monolithic endpoint hardware architecture is a root cause issue
* Closed ecosystem, e.g. by Apple, is a root cause issue
* Not everyone has the resources to build/maintain a proper portable NOC"
* A "portable NOC" can conceivably be architected into endpoint architecture
* VPN should be an entirely separate appliance within the device itself, physically distinct from the network interface and endpoint
Planty of opportunity here for secure rebuild, but who can possibly dethrone Google/Apple's trillion dollar entrenched ecosystem? Besides, why re-architect just the endpoints? The flat, single-pipe global internet is part of the root cause issue.
Throw it all out, start over. Another life, maybe.
Monolithic network appliances, computers, endpoints, etc are fundamentally designed without a security-first posture.
There's nothing conceptually wrong with a modem that also contains a NAT firewall/router/switch/(WAP). But in practice, even examining the hardware architecture of a consumer-grade router reveals fundamental design flaws in terms of the monolithic nature of the hardware architecture. Thus, using separate appliances for modem, router, switch, etc., that are physically separated, is still a good idea.
Of course, once you pick apart the shortcomings of a global TCP/IP network itself, it's clear that a single pipe connected directly to the internet is also a horrible idea, security-wise. I have been asking myself of late: "Self, if we were to design the internet from scratch and from security-first principles, how would it look?" Doing so requires detaching entirely from the existing mess we've created. Actually building a new security-first internet with backwards-compatibility would be an enormous increase in complexity, and would put into question the viability of the security of trillions in investment into entrenched global-scale infrastructure. Thus, any attmepts to solve this problen -- essentially boiling the ocean(s) -- is likely to remain (literally) a (multi-)pipe dream.
However, I am hopeful that new initiatives to build out 'hyperscale' and 'edge' clouds will present a genuine opportunity to realize the dream of a secure internet, secure networking, secure devices.
> That's unfortunate for you. I have a hard time imagining the frame of mind where that'd be possible.
Having experienced the novelty of life (including the awe of Hubble deeep field images as a younger adult), I can understand your frame of mind where it's difficult to imagine the frame of mind needed to be underwhelmed.
> benefit
Makes sense. The idea of working out models of the universe is exciting.
Would it have made sense to deploy a "sacrificial lamb" (mocked up mirrors with damage measurement mechanism) to the chosen lagrange point, in order to ascertain the extent of actual damage likely to occur, prior to continuing to develop/deploy JWST as planned?
I am underwhelmed by the photos. Presumably there will be significant scientific benefit beyond galaxy porn?
SWE salaries will fall as supply seems to have increased, due to the gold rush.
However, Electrical Engineers/Electronic Engineers with skills pertinent to "chip land" will increase in demand, and salaries will rise - perhaps dramatically. Long term domestic investment via government subsidies will have a focus area on promoting education/corporate pipelines, in order to address the shortage.
Planty of opportunity here for secure rebuild, but who can possibly dethrone Google/Apple's trillion dollar entrenched ecosystem? Besides, why re-architect just the endpoints? The flat, single-pipe global internet is part of the root cause issue.
Throw it all out, start over. Another life, maybe.