Category Archives: Security

Poland cracks down on ex-Soviet spies

The BBC reports:

The Polish parliament has approved a bill designed to remove people who collaborated with the communist secret services from public life.

The bill could lead to the dismissal of hundreds of thousands of people working in business, the media and government.

Wouldn’t it be ironic if they were removed and then came back under a fake ID, or would they give up the fake one and come back with their real ID…?

FWIW, I originally posted this on Schneier’s blog.

America losing War on Terrorable Diseases

John Stewart has some razor-sharp analysis of the stem cell veto by President Bush. You have to watch this.

Incidentally, Senator Feinstein provides a crucial bit of information on the debate:

The Castle-DeGette legislation now approved by both the House and the Senate would make available for use stem-cell lines derived from embryos left over from in vitro fertilization clinics — embryos that are already slated to be disposed of and, therefore, it is difficult to understand the objections.

[…]

Let us be clear: We are talking about embryos that will be destroyed, whether or not this bill becomes law. It is an indisputable fact these embryos have no future.

I can think of nothing more ethical than using embryos that would otherwise be wasted, to generate new, viable stem-cell lines offering medical hope and promise to so many.

Is it that the President just opposed to progress? Hates science? How can it be that he would rather cells be destroyed than used to cure people of terminal and debilitating illnesses?

Maybe it’s just me, but this puts his position on emissions control and global warming in perspective. The official response seems to be that no one, even scientists, can really be certain of anything and therefore life as we know it must go on unchallenged. This reminds me of a VP many years ago who launched a product against the advice of the infosec team because “they can’t prove the risk is absolute”, whereas he said his resolve and faith of success were absolute. The company lost over $250K for the next seven days as their site failed and that VP was eventually let go because the negative economic impact of his highly anti-scientific approach was so readily apparent.

A similar theme apparently emerges with regard to the Bush administration’s new policy on agriculture and ranching. Environmental scientists and conservationists were recently told that they will not be allowed to form an opinion after only one year of apparent destruction by ranchers — a minimum of two years of data is required. In addition, the new policy is based on the declaration that “cattlemen themselves are the best stewards of the land”. Scary reasoning, as many have tried to point out:

“That’s an extremely unbalanced requirement,” said John Buckley, executive director of the Twain Harte-based Central Sierra Environmental Resource Center, “unless they’re also requiring that the public’s costs are taken into account.”

Buckley said that would mean the economic costs associated with degraded watersheds and damaged wildlife habitat also should be weighed in determining the future of public-land grazing.

Another case of externalities, where those who care about a balanced outcome try to show the long-term harm of not taking action, and the Bush administration shows its disdain for people who want to use a truly scientific approach to factoring risks.

Imagine this type of governance in information security or structural engineering, where experts would be told that they could not warn of critical flaws until months after discovery and users were already clearly harmed. Software companies gotta’ make money, right? Even then a security team might be told that software developers are the best stewards of the software and thus should ultimately decide when to fix a bug, if at all.

Back to economic and social considerations, it’s important to note how the Bush administration bends the term to suit their purpose. A look at the bigger picture makes it seem that they should reverse their own policy:

The ranchers pay $1.35 per animal unit month — the amount of forage required to feed a cow and a calf for one month.

This fee has remained unchanged for years, and is lower than fees charged for state or private lands. Past efforts to revise the grazing fee — including a 1991 proposal passed by the House to boost it to $8.70 — have collapsed on Capitol Hill.

“It really, truly is an abuse of the taxpayers to not at least charge fair market value,” Buckley said.

Ranchers clearly have some lobby power. Who will pay, though, if turns out that they were taking unfair advantage of the land and causing residual and external harm? Have you experienced the pesticides and herbacides that ruin drinking water and kill off the local flora and fauna? What about heavy metals from industry? Who pays for the clean-up of someone else’s folly? What if they are drunk or delusional? Differing values, it seems, are at the heart of the issue especially when obvious harm takes many years to see.

Yahoo! dismisses DRM

The BBC highlights a bold move by Yahoo!

DRM systems can include special formats for media files or proprietary media players.

For instance, people buying tracks from the iTunes store cannot move tracks on to non-Apple portable music devices. Others restrict the number of times a user can copy a file.

Yahoo does not agree.

Does not agree that iTunes cannot move tracks…? Seems like an awkwardly written story, but with dramatic effect. Also seems like a bad sign that the reporter doesn’t know it’s “Yahoo!” and not “Yahoo”.

On the official Yahoo music blog, director of product management Ian Rogers wrote: “As you know, we’ve been publicly trying to convince record labels that they should be selling MP3s for a while now.

“Our position is simple: DRM doesn’t add any value for the artist, label (who are selling DRM-free music every day – the Compact Disc), or consumer, the only people it adds value to are the technology companies who are interested in locking consumers to a particular technology platform.”

Dave Goldberg, the vice president and general manager of Yahoo Music urged record labels reconsider their stance on DRM technology earlier this year.

Case against AT&T wiretap to proceed

The EFF reports that a “Judge Denies Government’s Motion to Dismiss AT&T Case”:

AT&T Corp. (which was recently acquired by the new AT&T, Inc,. formerly known as SBC Communications) maintains domestic telecommunications facilities over which millions of Americans’ telephone and Internet communications pass every day. It also manages some of the largest databases in the world, containing records of most or all communications made through its myriad telecommunications services.

The lawsuit alleges that AT&T Corp. has opened its key telecommunications facilities and databases to direct access by the NSA and/or other government agencies, thereby disclosing to the government the contents of its customers’ communications as well as detailed communications records about millions of its customers, including the lawsuit’s class members.

The lawsuit also alleges that AT&T has given the government unfettered access to its over 300 terabyte “Daytona” database of caller information—one of the largest databases in the world. Moreover, by opening its network and databases to wholesale surveillance by the NSA, EFF alleges that AT&T has violated the privacy of its customers and the people they call and email, as well as broken longstanding communications privacy laws.

The lawsuit also alleges that AT&T continues to assist the government in its secret surveillance of millions of Americans. EFF, on behalf of a nationwide class of AT&T customers, is suing to stop this illegal conduct and hold AT&T responsible for its illegal collaboration in the government’s domestic spying program, which has violated the law and damaged the fundamental freedoms of the American public.