Who monitors the monitors? (or how I've been worrying about securing the user from admin)

Hey folks. I’ve returned from the desert that is my life in loneliness with a dream and chapped thighs - for oh how long I’ve walked over broken glass to realize my true calling: I want to advocate for digital liberation… yes. And that means liberation from the echtay oligarchsyay.

My big thing currently is trying to figure out the most effective, secure and private way of facilitating a :rotating_light: DATA COOPERATIVE :rotating_light: Your forums location has been reported to ICE, for some reason. But wait! There’s more!!

Getting an organizational model up to create specific, legally binding roles is one thing (because you want people to be held judicially responsible), but how does one guarantee that those who “host” a data cooperative won’t be reading memory or monitoring usage of keys to decrypt and encrypt on server?

The problem is twofold, because on one hand you have the literal data center that everyone seems to trust blindly (unless there’s something I’m missing here), at least if you’re not running your own bare metal and just need access to tier 1 network access.

But how about kubernetes clusters? How much can you boobietrap containers and orchestration systems to the point where the user is protected against admin - however absurd that may sound. The phrases “privelege escalation” and “physical access” aren’t alien to me, but still. Is this a pipe dream?

But I really wonder how people who are tech literate can render services on to people who aren’t tech literate, without having a position of being able to exploit the illiterate? There’s history behind all of this of course to remind us that text literacy is really something we need to spread.

But barring having a platform or deployment strategy already made, let alone UI, UX and DX, where could one start? Encrypted memory, in process encryption, combinations of off-site verification mechanisms with internal orchestrations, etc.

I’m thinking also of how to make renting of server rack space more accessible and available to the general public. If I could make an organization of 100 people by a U1 system for their own infra that they all equally control individually, I would be sooooo happy.

There’s plenty of supposition in here for you to take shots at, and please do. I’m here to learn and figure out from people who know more than me what direction to take.

Anyways, I’ve been Thor, a jack of all trades and a master of none. Please be advised and have a lovely day :slight_smile:

LL&P :vulcan_salute:

1 Like

Familiar with the story of Kim Dotcom, Megaupload, and Mega? Here’s a good write up on the security design of Mega. The TLDR is that Mega was designed such that Mega’s administrators can’t view users’ data for legal and liability reasons.

It already is; there are plenty of commercial collocations. The issue isn’t the data center, it’s that the general public doesn’t want rack space.