A View from Simson Garfinkel
Could Al Qaeda Plunge England into an Internet Blackout?
Apparently it almost did, according to an article published a few days ago in the Sunday Times (London).
According to an article by David Leppard, Scotland Yard has uncovered evidence that Al Qaeda operatives were going to blow up Telehouse Europe, a large colocation facility in Britain that is the country’s largest Internet hub. Suspects who were recently arrested had conducted reconnaissance against Telehouse and had planned to infiltrate the organization and blow it up from inside.
I’ve toured colocation and peering facilities in the past; I even had a tour of MAE West in 1996, back when it was still a major Internet exchange point. At the time I wrote that “security at MAE West is good, but not great … Some luddite terrorist using my name could easily have called MFS, arranged the tour, and then blown up the gigaswitch with a pipe bomb.”
In Leppard’s article, representatives for Telehouse reassure that “strategically important organisations” such as Telehouse are well defended against terrorists. We’re also told that the organization went to higher states of alarm when it was alerted.
But let’s be honest here: Telehouse may have the greatest security in the world, but it’s just insanity for the United Kingdom to have a single Internet hotel where all the bits flow in and out. A big truck bomb could drop the building. A dirty bomb or biological hazard could simply render the building uninhabitable. Sometimes even accidents can turn a building into a wasteland. Late last year, for example, a building in Cambridge, MA, a block from the Technology Review offices had to be evacuated when a transformer in the basement blew up. It wasn’t terrorism, just an electrical accident. The building was closed and all the companies in it had to find new places to go. A lot of computer equipment was left behind–some of it running and still accessible by the network, but other equipment was turned off and irretrievable. I’m told that the building would have had to have been condemned as an environmental hazard if the transformer had contained PCBs. Fortunately, it didn’t.
It’s certainly nice and economical for England to put most of its external Internet connectivity in a single location. But it’s in the country’s long-term interests to have multiple peering points–each with a diversity of organizations. This protects against both terrorist threats and insider attacks from one of the companies.
Redundancy is a good idea, but it’s expensive. One of the roles of government should be to enforce safety and reliability standards. We’ve all learned that the free market does a really bad job when it comes to planning for high-outcome, low-probability events.
Keep up with the latest in security at EmTech MIT.
Discover where tech, business, and culture converge.
September 11-14, 2018
MIT Media Lab