[Noisebridge-discuss] Door bell
Rubin Abdi
rubin at starset.net
Wed Feb 3 22:32:19 UTC 2010
Hi all. This subject has turned into a dead horse beating gang bang a
number of times in the history of Noisebridge since it was a physical
static space. Here are the bullet points everyone eventually gets to
during these discussions...
General notes:
* All access systems have problems. Nothing is actually secure, even
with physical keys.
* All access systems could potential be a mouth watering target for a
hacker, electronic systems more so then physical systems.
* All electronic authentication systems to gain access to a space could
potential be used to log traffic, even with "anonymous keys".
* Physical systems (such as with a key) give the greatest amount of
anonymity, but isn't 100% anonymous if someone wanted to log traffic.
* RFID systems, no matter how secure and "key change" prone still have
the possibility of tracking a user with a system independent of its
intended access system (like a high power RFID scanner setup across the
street).
* Electronic access systems give the greatest ability to deny access to
a target user or group of users.
Access systems and Noisebridge:
* There are a number of members that would like their access traffic to
Noisebridge not to be logged, ever.
* There are a number of members who have stated that if an electronic
system (no matter how secure) was to be setup and forced onto all users
of Noisebridge, it'll be removed and possibly destroyed or disabled.
* Many members do not appreciate the idea of access "control" and the
potential to deny a user or group of users access to Noisebridge.
* There is no official "access control" group at Noisebridge to act as a
policing body to enforce any particular type of authentication system or
to reprimand anyone for hacking into a system.
* No one has objected to setting up an opt in access system, and so one
has been setup using either SSH or HTTP and the Noisebridge network.
So it comes down to this, if you'd like to setup an access system at
Noisebridge, make it so it's opt in without effecting anything else
that's been prior setup. Keeping the physical key system constant and
functional makes pretty much most members happy. Also asking users for
creative input on making a opt in system functional and fairly sure via
the list is a good idea, but don't expect to only get positive input
about something.
I've added this sort of disclaimer to our wiki, easy to link to the next
time someone asks about setting up a "bar code on ass" access system
instead of going on a multiple day long heated mud slinging discussion
on the list.
https://www.noisebridge.net/wiki/Resources/Access_System#Disclaimer
Going back to being on mother fucking subject, the landlord is getting
someone to replace the door bell button/box down at the gate, I'm
guessing sometime this week.
Thanks for reading, god bless and save the kittens.
--
Rubin Abdi
rubin at starset.net
More information about the Noisebridge-discuss
mailing list