Home
The Autumnal City [entries|archive|friends|userinfo]
Tarmle

[ website | The Ruins of Morning ]
[ userinfo | livejournal userinfo ]
[ archive | journal archive ]

Secrecy is Weakness: 641A [Jun. 21st, 2006|04:07 pm]
[Tags|, , , ]

"His vision was spherical, as though a single retina lined the inner surface of a globe that contained all things, if all things could be counted. And here things could be counted, each one."


641A by Tarmle - Creative Commons Attribution-ShareAlike 2.5 LicenseThis work is licensed under a Creative Commons Attribution-ShareAlike 2.5 License.
linkpost comment

Secrecy is Weakness: Schrödinger's IED Jammer [Mar. 16th, 2006|05:00 pm]
[Tags|, , ]

Loose lips sink ships... and allow the enemy to develop better IEDs (improvised explosive devices) according to Prez. Dubya and the Pentagon who are attempting to dissuade the media from reporting on technical developments in ant-IED technology.

Reporter and blogger Noah Shachtman has been told by a U.S. Colonel that his reporting on the development of technology to thwart the ever present danger of roadside bombs in Iraq was little short of spying. The argument is that revealing this information to the world would allow the enemy to develop work-arounds for the anti-IED systems before they are even deployed:

None of the material in the story -- the stuff about microwave blasters or radio frequency jammers -- was classified, he admitted. Most of it had been taken from open source materials. And many of the systems were years and years from being fielded. But by bundling it all together, I was doing a "world class job of doing the enemy's research for him, for free." So watch your step, he said, as I went back to my ride-alongs with the Baghdad Bomb Squad -- the American soldiers defusing IEDs in the area. [Noah Shachtman - defensetech.org]


To put the cherry on this, the president and the Pentagon, after smearing the Los Angeles Times for the same 'offence', are preparing a policy to prevent further disclosure of this kind of information:

A draft memo prepared for Gordon England, the deputy defense secretary, would impose strict limits on all exchanges of information on improvised explosive devices and efforts to defeat them. This includes a mandate that all requests for information from journalists regarding IED threats and IED defeat efforts be routed through public affairs offices, according to a copy of the memo.

The policy would also require entire new discipline on exchanging information related to IED efforts across the government, academia and industry.

"Preserving information security is a critical component to winning this war and protecting the lives of our service members," states the draft memo. "We must protect sensitive information and deny our enemies easy access to critical intelligence." [military.com]


Here's the SiW bottom line: If your anti-IED technology fails just because people know about it, if your ship can be sunk with loose lips, then the truth is not the problem, it's the technology that has failed, and it's the reliance on secrecy that has allowed so much time and effort to be wasted on a fundamentally flawed system. If your device does not work 'in the open' then it does not work at all! If secrecy is your primary defence, you've already lost.

Exactly what kind of war is being fought when a government is forced to treat its own people like the enemy? Perhaps science students should be signing NDAs before their lectures.

A little while back I posted about forensics experts refusing to work with TV series creators to produce convincing science in their shows (such as CSI:*) because they thought that it was giving too much information to criminals on how to avoid leaving evidence (or create misleading evidence). I have to admit, I thought then that it was just amusing, but this is starting to look like the beginning of an extremely disturbing trend.
link2 comments|post comment

And real pain for my sham friends... [Jan. 27th, 2006|11:25 pm]
[Tags|, ]

The guys at Penny Arcade may have caught a brief glimpse into the brave new world of the professional shill. This ominous missive was received from a fan claiming to have been interviewed for a "guerilla marketing business" in San Francisco:

I was told that if I accepted the job, I was to have at LEAST 50 identities on as many forums as I could muster (they wanted 100 eventually), with a goal of 5 posts an hour. The posts had to be well thought out, and the idea was that I was to establish multiple identities with a history on the forums, so that when the timing was right a well written but subtly placed marketing post could be finessed in. And regular visitors would recognize the post as coming from a long time poster.

They had 12 people working there full time, and were hiring 10 more. You do the math. No wait, I'll do it for you: that's 880 posts a day (if minimum was met). However he said the better ones could do around 8 or 10 an hour. And they had different "verticals" so there was the sports guy, and the games guy, the hentai, excuse me I mean anime guy, etc.

But the most critical point was this: develop and integrate the identity. No random "HEY EB GAMES IS AWESOME BUY THIS" stuff.

Kinda spooky.


I have to agree, this is somewhat spooky. If it's not real then I have the feeling it's about to be. It would be really interesting to catch these guys on the job.

Via the Penny Arcade Blog.
linkpost comment

Revolting Invertebrates [Dec. 20th, 2005|04:21 pm]
[Tags|, ]

A couple of interesting things from this article on the lighter side of science this year (via Fortean Times). First the collision of biology and politics:

"The guardians of animal nomenclature had mixed feelings over a proposal to name three newly-discovered species of slime-mould beetle after US President George W. Bush, Vice President Dick Cheney and Defense Secretary Donald Rumsfeld. A pair of insect experts reserved the names Agathidium bushi, Agathidium cheneyi and Agathidium rumsfeldi for their latest creepy-crawlies."


And this one belongs in the Secrecy is Weakness category:

"The fashion for television detective series which focus on forensic science may be unwittingly providing tips to real-world criminals, a study by British researchers said. Some forensic scientists were even becoming unwilling to cooperate with the media for precisely that reason."

Obviously knowledge is the kryptonite of criminal investigation so these forensic "scientists" would rather we were all ignorant.
linkpost comment

Secrecy is Weakness: Patched with a Word [Dec. 9th, 2005|09:48 am]
[Tags|]

Just in case you thought the SiW philosophy was getting a little theoretical:

"It seems that many if not all IT Auditors, CSOs, and IT security staff, live daily with the fear of the "never expiring password" being exposed. It is the unspoken taboo – the wide open back door in every corporate network today. It is virtually certain that there is not a single business critical application in your company that isn’t wide open. Do you ever wonder how it is that information such as credit card details, personal data, intellectual property, seems to always be so vulnerable. You would think that companies had adequate security precautions to stop this happening, and yet it continues to be a problem." (via net-security.org <- /.)

linkpost comment

Secrecy is Weakness: Dilemma [Dec. 5th, 2005|08:49 pm]
[Tags|]

No details on this one, just a (rather extreme) analogy.

Imagine you are a scientist living and working in a utopian society. In this peaceful nation there are no secrets except those kept by individuals. In the scientific community there is no thought of personal gain, no concealment of successes or failures, every concept, every experiment, every result, every last bit of data is shared for the greater good.

Now imagine that you have conceived of a new kind of weapon, one that your peace-loving society would never use, would never build. But your nation is not without its enemies, those who envy its freedom, it's resources, who resent its disregard for concepts of property, intellectual and otherwise, those who would take your freedom if they could. These enemies would build this weapon, and they would probably use it.

Since your society is completely open, everything that the community knows, the world knows. If you reveal the weapon concept to your fellow scientists it will soon be available to all. And yet, the idea is based on a simple enough technology, so sooner or later someone else will think of it, and as likely someone among your enemies as among your friends. The only way to develop a defence is to reveal the weapon's nature and allow your scientist to help you work on countermeasures, but you also know the concept is elementary and could be made to work long before there is a way to stop it.

There is your dilemma, do you reveal your secret and almost certainly bring destruction down upon your nation, with only the slimmest chance of developing a defence. Or do you remain silent and gain your people a few years, perhaps a decade, of peace before someone else makes the same discovery and you are left with not even that slim chance of survival?
link7 comments|post comment

Secrecy is Weakness: Windmills [Dec. 2nd, 2005|11:39 pm]
[Tags|]

The SNEP and SCPP (a "civil company of the phonographic producers" trans.) is in the process of lobbying the French government for a change in the law that will ban open software.

SNEP and SCPP have told Free Software authors: "You will be required to change your licenses." SACEM add: "You shall stop publishing free software," and warn they are ready "to sue free software authors who will keep on publishing source code" should the "VU/SACEM/BSA/FA Contents Department" bill proposal pass in the Parliament.

It appears that publishing Free Software giving access to culture is about to become a counterfeiting criminal offence. Will SACEM sue France Télécom R&D research labs for having published Maay and Solipsis (P2P pieces of software used to exchange data)?– (via FSF France -> Boing Boing)

All this does re-label a virtue as a crime. Even if this ridiculous bill is passed, open source software will continue to made available to French citizens from outside their jurisdiction. Much of the web runs on open and free software and one assumes they are not going to ban that. How exactly do you teach programming without 'publishing' source code? Will computer science lecturers be served with take-down notices as they chalk up the final semi-colon on the board? Will France simply stop training software authors?

If we do not communicate, there is no culture. Openness creates culture just as surely as secrecy will destroy it.
link3 comments|post comment

Secrecy is Weakness: Spin [Nov. 4th, 2005|12:13 am]
[Tags|]

It was recently revealed that Sony have been surreptitiously installing rootkits on the PCs of legitimate CD buyers. The rootkit software conceals files and running processes from the user and from scanning, anti-viral, administration and debugging systems. The intention is to run DRM services on the legal purchaser's machine to prevent them misusing the content of the media they legitimately bought. However, this cloaking system provides a huge breach in security that might easily be exploited by a hacker to run other invisible services on a victim's computer. This is, of course, deplorable. However the real problem here is how Sony are dealing with their exposure: not by apologising for their incredible stupidity and offering the tools for removing the insecure system but by supplying an update that merely alters it and then openly lying about the potential dangers:

SOFTWARE UPDATES/ PLUG-INS

November 2, 2005 - This Service Pack removes the cloaking technology component that has been recently discussed in a number of articles published regarding the XCP Technology used on SONY BMG content protected CDs. This component is not malicious and does not compromise security. However to alleviate any concerns that users may have about the program posing potential security vulnerabilities, this update has been released to enable users to remove this component from their computers. [via BoingBoing]


This is precisely the sort of spin activity that turned Cisco into the enemy. The problem is that their secret activities have now placed tens (perhaps hundreds) of thousands of computer systems in jeopardy and their attempted misdirection in this statement deliberately avoids conveying the true dangers posed by their actions. This means that many of those at risk have no proper indication of the gravity of their situation and so are less likely to take steps to protect their systems.

I suspect having a hundred viruses at the top of the threat list with 'Sony' in their names is price they may yet have to pay for this idiocy.
linkpost comment

Secrecy is Weakness: For Beginners [Oct. 11th, 2005|11:31 pm]
[Tags|]

Answer honestly: why would you not want your family to know where you are?

Microsoft researchers are working on a wall mounted display wich will allow busy families to keep track of each other. Researchers have christened it as the "whereabout clock". They agree to being partially inspired by Harry Potter novels. The whereabout clock's screen uses icons bearing the faces of each family member. Signals from their mobile phones are used to tell the computer where they are and the icons wander between colored segments to show whether they are at home, school, work or elsewhere.


phoneyworld.com via gizmodo.com.

Until recently I hadn't really considered the potential of the SiW philosophy applied to personal life, society, politics etc. Originally I was only considering technology, yet it really doesn’t seem all that unreasonable as an approach to some form of social system.
link2 comments|post comment

Secrecy is Weakness: Free from Harm [Sep. 30th, 2005|01:54 am]
[Tags|]

There are those who keep secrets because they fear they will be harmed, and there are those who keep secrets because they have harmed or intend harm to someone. In all cases it must be the goal of society to render those secrets obsolete. Those who fear ridicule, discrimination and hatred over some ludicrously simple piece of information must be provided a society that is prepared to accept that information without hesitation or prejudgement. Those who would do harm should not be provided the luxury of keeping their transgression or their intention a secret.

It is not enough simply to reveal a secret that may injure oneself. Instead the world must be altered so that such secrets becomes unnecessary.

Our world is addicted to secrecy, an addiction so pervasive that it is pivotal to our very concept of self, of personality, of individuality. We wear our secrets like armour though all this does is pin us down under the weight of them, making us more vulnerable rather than less.

A world that no longer requires secrecy will be a world where we learn who we really are, a world that does not permit harm, a world that is free.

[ My (rather earnest) response to a comment on The Ruins' LazyLog ]
link3 comments|post comment

Secrecy is Weakness: Hero [Jul. 31st, 2005|08:22 pm]
[Tags|]

Mike Lynn, former employee of Internet Security Systems, blew the whistle on a potentially devastating security flaw in Cisco's router software that could threaten vast sections of the internet's infrastructure, despite intimidation from the company:
"[Cisco] said the vulnerability was not new and that it had already patched the problem in April and sent revised software to customers. Lynn said, however, that Cisco did not tell customers exactly why the software was revised or indicate that the update was a critical patch. As a result, he said, system administrators didn't understand the urgency for patching their system. Cisco denied that the flaw was as critical as Lynn said it was."
linkpost comment

Secrecy is Weakness: Commercial [Jun. 15th, 2005|12:33 am]
[Tags|]

Judges in Florida are routinely throwing out DUI cases because the manufacturers of breath-test equipment keep their software secret. Since it cannot then be proven in court that the equipment is functioning correctly their product is rendered utterly worthless. (via BoingBoing)
linkpost comment

Secrecy is Weakness [May. 19th, 2005|07:00 pm]
[Tags|]


Never confuse secrecy with security.
Every secret is a vulnerability, a defect patched with a word.
Your secrets are your enemy's weapons.
They are your house of straw, your feet of clay.
Secrecy is the antithesis of security.

link5 comments|post comment

navigation
[ viewing | most recent entries ]