I do not know what is more critical: the risk of censorship or stand by while hospitals, banking, nuclear power plants and other systems become compromised and go down with people dying because of it. These decision makers not only have powers but also have a responsibility

▲

citrin_ru 12 hours ago | parent | next [-]

Have you ever seen a hospital, a bank, a power plan to expose telnetd to the public internet in the last 20 years? It should be extremely rare and should be addressed by company’s IT not by ISPs.

	▲	sznio 12 hours ago \| parent \| next [-]
		These are the institutions I would most expect to do that. Well, maybe not a bank.
	▲	_ink_ 12 hours ago \| parent \| prev [-]
		Probably Tier 1 providers have some insight on this.

▲

gspr 14 hours ago | parent | prev | next [-]

This feels more akin to discovering an alarming weakness in the concrete used to build those hospitals, banks and nuclear power plants – and society responding by grounding all flights to make sure people can't get to, and thus overstress, the floors of those hospitals, banks and nuclear power plants.

▲

zh3 10 hours ago | parent | next [-]

In the UK we have in fact discovered an alarming weakness in the concrete used to build schools, hospitals and other public building (in one case, the roof of a primary school collapsed without warning). The response was basically "Everybody out now".

https://en.wikipedia.org/wiki/2023_United_Kingdom_reinforced...

https://www.theconstructionindex.co.uk/news/view/raac-crisis...

https://www.theguardian.com/education/2023/aug/31/what-is-ra...

▲

forty 13 hours ago | parent | prev | next [-]

You feel it's similar because having access to port 23 is similarly life critical as having access to an hospital? Or is it because like with ports, when people can't flight to an hospital, they have 65000 other alternative options?

▲

gspr 13 hours ago | parent [-]

All I'm saying is that the only right place to fix this is at the hospital. Not at the roads leading to it.

▲

da_chicken 12 hours ago | parent | next [-]

That's my question. Why is there infrastructure that has open access to port 23 on the Internet. That shouldn't be a problem that the service provider has to solve, but it should absolutely be illegal for whomever is in charge of managing the service or providing equipment to the people managing the service. That is like selling a car without seatbelts.

We are beyond the point where not putting infrastructure equipment behind a firewall should result in a fine. It's beyond the point that this is negligence.

▲

forty 12 hours ago | parent | prev [-]

There again, I think the comparison fails.

Fixing the hospital: single place to work on, easier

Blocking all the roads/flights: everywhere, harder

Fixing all the telnet: everywhere, harder/impossible

Blocking port 23 on an infra provider: single place, easier

It makes sense to me to favor the realistic solution that actually works vs the unrealistic one which is guaranteed not fix the issue, especially when it's much easier to implement

	▲	dizhn 9 hours ago \| parent \| next [-]
		I run telnetd on 2323 because I don't want hackers to find it.
	▲	gspr 8 hours ago \| parent \| prev [-]
		The hospital-plural-s: many places. Roads: a lot more places than that. The core of the analogy holds.

▲

PunchyHamster 7 hours ago | parent | prev [-]

nah, that's like seeing an open gate to nuclear tank - a thing easily fixed within few minutes - and responding to it by removing every road in existence that can bear cars

▲

7bit 13 hours ago | parent | prev [-]

Censorship is one of these words that get slapped on anything.

Filtering one port is not censorship. Not even close.

	▲	trashb 7 hours ago \| parent [-]
		> censorship, the suppression or removal of writing, artistic work, etc. that are considered obscene, politically unacceptable, or a threat to security It is not the responsibility of the Tier 1 or the ISP to configure your server securely, it is their responsibility to deliver the message. Therefore it is an overreach to block it because you might be insecure. What is next. They block the traffic to your website because you run PHP? Similar to how the mailman is obligated to deliver your letter at address 13 even though he personally might be very superstitious and believe by delivering the mail to that address bad things will happen.