Category Archives: Security

US AirForce panned for DDoS proposal

Wired has a hilarious critique of an Air Force proposal to counter DDoS attacks with…DDoS attacks.

I’m sure that DDoS attacks could be useful to the military under certain circumstances. So could sending our enemies a bunch of unwanted magazine subscriptions, or ordering them dozens of pizzas with anchovies and pineapple (blech). But adults don’t do that sort of thing.

The internet is a community venture, and DDoS is vandalism against the community. There’s no such thing as pinpoint targeting in a DDoS attack; innocent civilian infrastructure is impacted every time.

Basically, Col. Williamson has noticed that there are bad guys in the swimming pool, and his solution is to piss in their general direction. That’s the kind of behavior that rightly gets you kicked out of the pool and sent home for the summer.

Funny stuff. The only problem is that the US Air Force is already infamous for use of excessive force that destroys civilian life, let alone lifestyle. Carpet bombing and nuclear attacks have been their heritage so the Wired critique will surely fall on deaf ears.

Although nicely written, the critique seems disconnected from history. It also has a logical loophole: with the intent and capability to disable or destroy all infrastructure, who exactly would be kicking whom out of the pool?

The Air Force has been used for exactly what the author complains about — excessive force that harms civilians. Examples by the US military alone include Dresden, Tokyo, Hiroshima and much of Cambodia (e.g. 600K deaths from 3,500 sorties in 1969 alone, with 2,756,941 total tons dropped in 230,516 sorties on 113,716 sites until 1973)

This all hearkens back to strategists in WWI who saw fighting by air as just another way to completely obliterate civilian infrastructure to achieve victory. I’ve seen it blamed on the Italians, but you can be certain every military has a high ranking official who thinks like general Sherman did in his 1864 four-month “scorched earth” march of destruction. I guess you could say he was literally pissing in the pool, but as nobody could manage to send him home that summer he instead garnered the surrender of armies from the Carolinas, Georgia and Florida.

Ronald Reagan Speech Suggests Aliens Among Us

No kidding. In his address to the 42d Session of the United Nations General Assembly in New York, New York he said that we just need a common enemy (outsider, if you will) to absolve our differences. Sounds dangerously like scapegoating to me. Then he said there are aliens already among us — those who are in favor of war.

Can we and all nations not live in peace? In our obsession with antagonisms of the moment, we often forget how much unites all the members of humanity. Perhaps we need some outside, universal threat to make us recognize this common bond. I occasionally think how quickly our differences worldwide would vanish if we were facing an alien threat from outside this world. And yet, I ask you, is not an alien force already among us? What could be more alien to the universal aspirations of our peoples than war and the threat of war?

So we should unite ourselves against those who favor war or who threaten war? A war on those who want war?

Quick, grab a pitchfork and some torches. We have some unification work to do.

Gold Fish Crackers Stolen from Switzerland

1958 Can of Goldfischli
Every so often I hear complaints about people who copy things and improve them instead of “inventing” them. It just came up again in a discussion on Bruce Schneier’s blog.

Did you hear the one about the Gold Fish cracker invented in 1958 by Oscar Kambly at his family business?

America gets its first taste of Goldfish crackers in 1962. Margaret Rudkin discovers the snack cracker on a trip to Switzerland and returns with the recipe.

The Kambly site says the idea originally was a gift for Oscar’s wife.

Who would have thought that the Gold Fish cracker is actually a Swiss invention? And I wonder why Rudkin re-branded as OEM instead of being a distributor.

Maybe the Swiss stole the idea from the French, and maybe they stole it from… will the real inventor please swim forward?

One has to wonder what would happen if the town of Cheddar had a penny for every ounce of cheese sold in America under their stolen name…

PCI 1.2 officially announced

The PCI security standards council issues a press release yesterday:

With this new update, which is based on extensive feedback from the Council’s Participating Organizations, the PCI DSS will enhance the clarity of its technical requirements, offer improved flexibility and address new and evolving risks and threats.

It is mostly about clarification to resolve the issues raised with the 1.1 release.