Category Archives: Security

Na stolu kru (bread on the table)

by Dragutin Tadijanovic

Stajati pred bijelim papirom,
Jos neispisanim, i znati:
Dosad su sastavljeni milijuni pjesama
Na svim jezicima Svijeta
I za milijune ljudi na Zemlji
Spremljeno je vec oruzje da ih unisti —
A ti hoces da se cuje i tvoj krik:
Mir Svijetu! Sloboda Svijetu!
I svakome na stolu kruh!
Standing before a blank sheet of paper
Not a single word on it, I realize;
Men have written millions of poems
In every language of the World
For the millions of people on Earth
There is a weapon ready to destroy them —
But you also want your cry to be heard:
Peace to the World! Freedom to the World!
Bread on the table for everyone!

A world without signs

Sign of things to come? This concept seems downright un-American, so it is probably a good thing it is not being attempted in America:

European traffic planners are dreaming of streets free of rules and directives. They want drivers and pedestrians to interact in a free and humane way, as brethren — by means of friendly gestures, nods of the head and eye contact, without the harassment of prohibitions, restrictions and warning signs.

Here is an interesting perspective on why the concept is even being considered:

“The many rules strip us of the most important thing: the ability to be considerate. We’re losing our capacity for socially responsible behavior,” says Dutch traffic guru Hans Monderman, one of the project’s co-founders. “The greater the number of prescriptions, the more people’s sense of personal responsibility dwindles.”

[…]

It may sound like chaos, but it’s only the lesson drawn from one of the insights of traffic psychology: Drivers will force the accelerator down ruthlessly only in situations where everything has been fully regulated. Where the situation is unclear, they’re forced to drive more carefully and cautiously.

Indeed, “Unsafe is safe” was the motto of a conference where proponents of the new roadside philosophy met in Frankfurt in mid-October.

Yes, I agree that too many senseless rules desensitizes people. Not sure that translates into a complete absence of any signs at all. After all, you have to marvel at some of the irony buried in the story:

A sign by the entrance to the small town (population 1,000) reads “Verkeersbordvrij” — “free of traffic signs.”

Personally, I noticed a big difference between European airport security officials who quietly shuffled everyone through security and American TSA employees yelling out mind-numbing orders like “People, you must remove your coats! Take off your shoes!” And my personal favorite: “Open your passport to the correct page!” Although the lines were more disorganized in Europe, they actually seemed to flow more steadily.

Perhaps Europe is coming to a “surrealist” movement, while the US lags behind in the age of rationalism and industrial security.

Like those involved in Dada, adherents of Surrealism thought that the horrors of World War I were the culmination of the Industrial Revolution and the result of the rational mind. Consequently, irrational thought and dream-states were seen as the natural antidote to those social problems.

Will a Dali of risk soon emerge? I can just imagine: “We no longer use stop signs, but instead try to find ways to harness subconsious abilities to manage change and conflict…” How will insurance companies cope with determining fault? What about the camera-ticket systems used to flag violations — what will the industry do?

“More than half of our signs have already been scrapped,” says traffic planner [in the town of Drachten in the Netherlands] Koop Kerkstra. “Only two out of our original 18 traffic light crossings are left, and we’ve converted them to roundabouts.” Now traffic is regulated by only two rules in Drachten: “Yield to the right” and “Get in someone’s way and you’ll be towed.”

Strange as it may seem, the number of accidents has declined dramatically.

Total number, or ratio of accidents to overall traffic? Maybe the number declined because people would rather drive somewhere else now?

Edited to add (24 Nov 2006): The BBC says that London is about to have a go at safety without signs:

Planners are now planning to strip out the safety barriers, kerb stones and traffic lights which keep pedestrians and drivers separate. Shared space, they say, will actually make the area safer – because drivers will have to make eye contact with pedestrians before proceeding.

As a former bicycle-commuter in London, I can say it takes a lot more than eye-contact to determine a driver’s intentions. In fact, this reminds me of all the cabbies who seemed to have a secret desire to take out cyclists by faking a direction and then heading another way. Can you imagine a “no-sunglasses” rule, or importing poker rules to the roadway. That seems rediculous today, but if you have to rely on body-language to be safe…

It used to take nerves of steel, lightning-fast reactions, and top-shape equipment (brakes, gears, tires) to minimize the risk of a ride through downtown London. In other words, I loved every minute, and despite all the miles I never had an accident. My only regret is that I did not know the severe health risk of the air quality on a cyclist’s lungs and there was nothing personally I could have done to reduce the risk, even had I known.

Google Appliance XSS

It is a good idea to keep an eye on sla.ckers.org if you are curious whether your organization’s shorts might be swinging in the breeze. Take the Google Search Appliance post from November 17th, for example:

an XSS in most sites that uses the google search API with it’s generic results template. The api allows any encoding method to be used for output, and doesn’t sanitize until after the page has been converted. (Google.com uses the same API but it’s unaffected because it santizes in UTF8 before converting to the output encoding)

Plenty of vulnerable sites (links to exploited pages) provided by the post, including stanford.edu, fda.gov, unc.edu, nhl.com…

Note the hint to sanitize before conversion, and the difference found between the appliance and the mothership.

Holocaust archive opened

I thought this was an odd twist to the story about the International Tracing Service (ITS):

This vast archive — 16 miles of files in six nondescript buildings in a German spa town — contains the fullest records of Nazi persecutions in existence. But because of concerns about the victims’ privacy, the ITS has kept the files closed to the public for half a century, doling out information in minimal amounts to survivors or their descendants on a strict need-to-know basis.

This policy, which has generated much ill-feeling among Holocaust survivors and researchers, is about to change.

In May, after years of pressure from the United States and survivors’ groups, the 11 countries overseeing the archive agreed to unseal the files for scholars as well as victims and their families.

Were there victims who wanted the archive to remain closed? It seems more plausable to me that the identities being protected were actually of the perpetrators. It is an archive of accountability.

“If you sat here for a day and read these files, you’d get a picture of what it was really like in the camps, how people were treated. Look — names and names of kapos, guards — the little perpetrators,” [Paul Shapiro, of the U.S. Holocaust Memorial Museum in Washington] said.

[…]

Mandated to trace missing persons and help families reunite, ITS has allowed few people through its doors, and has responded to requests for information on wartime victims with minimal data, even when its files could have told more.

Shocking to think how useful this information would be to undo the dislocation and destruction to families, and yet it was kept secret under the pretense of helping victims. Odd, no? Also shocking to see just how widespread the systems were, and thus how many people would have been impacted had the documents been released earlier:

Postwar historians estimated about 5,000 to 7,000 detention sites. But after the Cold War ended, records began pouring out of the former communist nations of East Europe. More sites were disclosed in the last six years in claims by 1.6 million people for slave labor reparations from a $6.6 billion fund financed by the German government and some 3,000 industries.

“We have identified somewhere in the neighborhood of 20,000 camps and ghettos of various categories,” said Geoffrey Megargee of the Holocaust Museum in Washington, who is compiling a seven-volume encyclopedia of these detention centers.