Category Archives: Security

Touareg Poems

The enigmatic Touareg people have been struggling for survival for over forty years. Drought and state repression menace their future. And from that VW names a giant SUV after them. Why?

The Germans have interesting names for their cars. The Bora is a cold, north to northeast wind that blows down from the mountains of Hungary and across the Adriatic Sea. The Passat is a tradewind and also may be an old name for a trader’s sailboat. And of course the warm desert winds that blow from Africa across the Mediterranean are known as the Scirocco. Apparently VW claims the Golf is some sort of transliteration of gulf stream currents, but that seems like a stretch to me.

Was the name “Touareg” intended to draw attention to their survival or elevate world consciousness about these people? Doubtful. That’s about as likely as Porsche trying to help Cayenne drivers learn to add a little spice to their palate. Was it the Germans making light of yet another French colonial debacle of international proportions? Nah. Marketing is probably just marketing and someone thought the Touareg (for those who have heard of them) represent strength and survival in harsh conditions; exactly the sort of thing that a soccer mom driving around suburban American can really appreciate. Hmmm, when will a car company name one of their vehicles “the soccer mom”?

Incidentally, someone recently said to me that they think cars shouldn’t be named after people at all. I agree! The “New Yorker” was a horrible name for a car and certainly did no justice to inhabitants of that fine city. In its original incarnation it was a 19 foot 5000 pound monster with a 440 cubic inch engine that burned gasoline like it would never disappear. Does that say “New Yorker” to you?

Touareg in Indigo

Alas, a web search for Touareg brings up 10,000 pointers to an automobile. Well, who knows what the impact of that will be, but I just thought I might be able to do my part and bring a little attention back to international history as well as poetry by talking about the real people here.

In brief: the Touareg (who call themselves Kel Tamsheq) live in the southern Sahara, dispersed across the borders of several countries including Algeria, Mali, Libya, and Niger. Despite this separation they share a common language apparently related to Berber. They are perhaps most known historically for establishing the north African city Timbuktu in the 10th century near the Niger river and fostering trade including scholarship, literature and books.

They were essentially tribes of caravans around the Sahara with agricultural work performed by non-Touareg serfs. Fast forward several hundred years to their fierce resistance to French colonization in the 1890s — colonial guns against swords of the nomads. The French feared them as raiders, which led to massacres of the nomadic minority. They were thus forced to sign treaties that led to oppression by the state. Their attempt to gain autonomy during the Mali independence movement in the 1960s failed and so they struggled as dislocated minorities through severe African drought in the 1970s and 1980 that devastated their livelihood. With little or no control of government, and rampant corruption, foreign aid rarely was distributed where it was needed most.

Their suffering resulted in a cultural revival and rebellion. By the start of the 1990s the Touareg attempted again to gain more autonomy in Niger and Mali through armed resistance. This led many into years of rebel training camps, imprisonment and even exile to Mauritania, Algeria and Burkina Faso. The mid-1990s, finally saw cease-fire agreements and they are apparently doing better under President Konare.

Touareg in IndigoI think. Anyway, the Touareg are said to be famous for their literature, wit and poems, especially women’s love songs, but I have had a hard time finding any examples that aren’t buried away in impenetrable ethnographic tomes. Instead I have been listening to an all-woman call-and-response group called Tartit (apparently their name means “united” or “union”). Some of the more interesting things about the Touareg traditions include the fact that despite the prevalence of Islamic influence only men wear veils. Women are also allowed to divorce and choose their own husbands. And perhaps most shocking is that men aren’t allowed to play the tinde (drum). Yes, I’m being sarcastic, although I have to admit that women drummers are rare in Western culture and almost unheard of in military/marching bands. Touareg men instead play an imzad (guitar) or tehardent (violin). Thus they appear to be a people known for wit, pride and fearlessness and the women clearly play a dominant/respected role. All this tells me that their lyrics and poetry may have some interesting insights and matrilineal perspectives that we would be wise to preserve before it is too late. My favorite song so far is Holiyane Holiyana, that is said to tell the story of a man who seduced women by advising them to beware of him. I might have botched the translation, though.

If only I could find someone who could point me to the language of the Touareg poems…perhaps next year I’ll have to attend the Festival in the Desert and sit among the indigo robes in the sand.

And if anyone’s looking for a real mind-bender, check out the MIT puzzle pages called Timbuktu. I especially like the History Lesson puzzle, which reminded me of the news about the code buried in the da Vinci ruling not to mention Scott Crosby’s infamous method of hiding DeCSS code in a news report about the DeCSS trial itself.

Chinese thieves fake entire company

Worried about corporate espionage? A Herald Tribute report today reveals that NEC, the entire company, was duplicated. Company investigations uncovered the length to which some counterfeiters/competitors will go — from producing branded new product release announcements right down to their business cards:

After two years and thousands of hours of investigation in conjunction with law enforcement agencies in China, Taiwan and Japan, the company said it had uncovered something far more ambitious than clandestine workshops turning out inferior copies of NEC products. The pirates were faking the entire company.

Evidence seized in raids on 18 factories and warehouses in China and Taiwan over the past year showed that the counterfeiters had set up what amounted to a parallel NEC brand with links to a network of more than 50 electronics factories in China, Hong Kong and Taiwan.

Now, do you have less trust in NEC products because they might be fake, or do you trust them far more because they are concerned about their brand reputation/quality if not lost revenues? If nothing else it shows that the pirates think NEC is worth copying.

Lawnmowers, risks and rebates

If you care about air quality, you also probably cringe every time someone brings up the subject of recreational or utility gas-powered engines. These workhorses are notoriously inefficient and designed with virtually no emission controls whatsoever, although historically they have the odd distinction of being called “less costly” because they pollute more.

According to EPA analysis [reported in 1998], the small engine regulation will increase the cost of equipment by an average of $5-7 per unit, but durability will improve and fuel efficiency will increase for most small engines. These improvements in engine technology may offset the increase in cost.

It all comes back to what you value, right? If raw power is all you are after, then you essentially only measure one type of output — a very artificial test, like measuring the color of a steak but ignoring the taste. Simply put, good engineers are encouraged to factor in common risk (noise, toxins, wear, lost input/efficiency), if they want to measure and report the real output(s).

I think I was first alerted to the problem more than a decade ago when travelling by small-engine rickshaws in Asia that belched plumes of poisonous petroleum exhaust. The inefficiency of these engines was staggering at the macro level, but because the real risk and costs were not properly burdened by the operators the micro level had a “cheap” formula working to their favor. Fortunately the greater good was brought to bear and these monsters were eventually outlawed in some cities, like Kathmandu, because of the obvious noise/air pollution risk to the general population. I also remember a story on NPR about snowmobile engine opponents. A single operator was said to be creating as much pollution as 1,000 automobiles. That’s just compounded by the habit of some to replace their exhaust with race pipes that have “higher output”. Talk about inefficiency!

The most popular area for winter visitors is located around Old Faithful, most accessible from the West Entrance to the park, where as many as 1200 snowmobiles can pass through during any given day. Here the exhaust is so thick that it is considered harmful to the park rangers operating the tollbooths. The tollbooths have been coated in Plexiglas, and fresh-air is pumped inside to protect the rangers from the harmful fumes. Unfortunately, the park’s wildlife does not have a way to escape the fumes, and is constantly subjected to their harmful levels.

Anyway, this came up today because I read about a “lawnmower buyback program” in the Silicon Valley:

In the spring and summer, gasoline-powered lawn mowers create an estimated nine tons of air pollution every day in the Bay Area. Grass trimmings also make up a significant portion of the waste that gets buried in local landfills. By switching to an electric mulching mower or push mower, you can save time and money while cutting down on air pollution and yard waste.

This spring, the Air District is sponsoring mower exchange events in Santa Clara and Contra Costa counties. Rebates of up to $150 are available to those who wish to exchange their old gas-powered mowers for new air pollution-free electric ones.

Interested participants should bring their mowers, drained of gas and oil, to a participating Home Depot store at the date and time listed below. You must turn in your old mower for recycling to get a discount. You can attend either event, provided that you are a resident of the nine-county Bay Area.

May 6th, 8a – 12p
Campbell Home Depot
480 E. Hamilton Ave.
(408) 866-1900

May 20th, 8a – 12p
Pittsburg Home Depot
2300 N. Park Blvd.
(925) 476-1900

Lawn Mower Buy-back events are on a first-come, first-served basis, for as long as supplies last.

Very cool. Such is life that incentives have to be created like this to offset the dynamic of today’s American chic. The “victory garden” seems like some sort of unpalatable fantasy rather than a hot topic in the US. The pride many have in wasteful consumption is tied to individual calculations of short-term expense as well as pleasure; it’s like the cluelessly lavish parties that ran right up to the market crash in 1929. In fact I was at a gathering just last night where a very wealthy woman said she was trying to fight the chilly weather by driving her giant SUV more often and revving the engine whenever possible.

The reality is that it is hard to off-set this kind of idiocy without some kind of carrot because the average American consumers clearly do not desire to think through the big picture implications of their actions. And if you follow the US energy company line of reasoning, consumers and the providers should be allowed to create toxic conditions in order to make a decent living, and the government should then step in to pay for the cleanup. It’s the rickshaw driver model, but in America the rickshaw driver parent corporations have more power over the government than vice versa, so don’t expect the Bush administration to enact the kind of ban on harmful emissions that Asian countries have shown they are willing to make.

Incidentally, I wonder how many people will buy a gas mower on craigslist (about $25-$125 right now) just to get the buyback rebate? I mean if you don’t have any mower at all that’s a chance to prevent someone else from using a gas mower. This seems oddly similar to when large technology companies buy emissions credits in order to support renewable energy innovation as well as block other companies from polluting past their allocation.

And that’s my ramble for today. Now, how do we start setting financial incentives to reduce the number of vulnerable applications that are released to the public?

Risk Homeostasis and the Paradox of Warning

Over the years, people have pointed me to the theory of risk homeostasis, as put forth by Dr. Gerald Wilde, Professor Emeritus of Psychology, Queen’s University.

How do we balance risk and safety? The synopsis of Wilde’s theory is that if you perceive a change will make you safer, then you actually may be prone to take more risk, thus negating the actual risk reduction. However, if you want to be safer than you will make real tangible reductions in risk. I have two thoughts that immediately come to mind when I hear this kind of discussion coming my way:

  1. If the risk reduction is in fact effective, then it is effective, and you might want to take on that additional risk. That is to say that if you increase the capacity of your risk “cup”, so to speak, then you are indeed able to take on more risk beyond the level you were at prior to the increased capacity. It is a misnomer to say “see, I still got hurt” without factoring the level of hurt you would be at without the risk reductions. Soldiers do not wear armor because they want to put themselves more in harms way, they are forced to put themselves in danger even without perceptions of safety and thus desire better protection.
  2. Measuring perception is like measuring taste. Maybe people in one sample group are all accustomed to pumpkin and associate it with spending comforting fall evenings with family eating pie, while another sample group has never tasted such orange goop before and knows only jack-o-lanterns their neighbors leave rotting outside to be scary. Which group’s perception, when measured, is going to provide a reliable indicator of the next sample group? Both, neither…? Exposure (time) and culture are definitely factors that can skew measures of perception.

At the end of the day it seems Wilde is suggesting that the only accurate measure for reduction of risk is an agent’s personal desire to be safe.

This is a dangerous problem, especially in any major domain shift in engineering, where customers have no idea how to assess technology risk. Wants become more like cult thinking or mysticism, which gets in the way of scientifically measured safety.

Someone wanting a “safe” ride isn’t at all the same as someone wanting a “safe robot” ride, because the latter often ends up being an unhinged belief about robotic capability (e.g. absence of skill to audit defects) yet everyone can measure basic safety of a ride (e.g. zero crashes).

The more you want something, apparently in Wild’s world, the more likely you will get it, and perhaps vice versa. Yet he confesses that the problem with wants is that their definition hinges on proper information and a rational actor who will know how to decipher the data and make a proper decision instead of just “belief”.

We want to eat, not make ourselves ill, but do we have reliable enough data in our hands to know whether an industrialized burger from industrialized ingredient packing plant will increase our risk disproportionately to other lunch options including a butcher’s hand made patty? (Hint: automation technology lacking transparency often is fraud at high speed and scale, as predicted and documented for over a century.)

Wilde’s writing is full of insightful examples and anecdotes and definitely worth reviewing. Here’s a sample from chapter six that discusses “Intervention by education“:

Other victims of the “lulling effect” have been reported, e.g. children under the age of five. In 1972, the Food and Drug Administration in the USA ordered manufacturers of painkillers and other selected drugs to equip their bottles with “child-proof” lids. These are difficult to open for children (and sometimes for adults as well) and often go under the name of “safety caps,” a misleading name, as we will see. Their introduction was followed by a substantial increase in the per capita rate of fatal accidental poisonings in children. It was concluded that the impact of the regulation was counterproductive, “leading to 3,500 additional (fatal plus non-fatal) poisonings of children under age 5 annually from analgesics”.[17] These findings were explained as the result of parents becoming less careful in the handling and storing of the “safer” bottles”. “It is clear that individual actions are an important component of the accident-generating process. Failure to take such behavior into account will result in regulations that may not have the intended impact”. Indeed, safety is in people, or else it is nowhere.

If parents can be blamed for the lack of effectiveness of safety caps, does a government that passes such near-sighted safety legislation go guilt-free? Does an educational agency that instills a feeling of overconfidence in learner drivers go guilt-free? Does a traffic engineering department that gives pedestrians a false sense of safety remain blameless; or a government that requires driver education at a registered driving school before one is allowed to take the licensing test? Is it responsible to call a seatbelt a “safety belt”, to propagate through the media such slogans as “seatbelts save lives”, “speed kills”, “to be sober is to be safe”, “use condoms for safe sex”, or others of the same ilk?

In any event, it is interesting to note that accident countermeasures sometimes may increase danger, rather than diminish it. If stop signs are installed at junctions in residential areas and at all railway crossings that have no other protection, if flashing lights appear at numerous intersections, if warning labels are attached to the majority of consumer products, these measures will eventually lose their salience and their credibility. They amount to crying wolf when no such beast is in the area. And in the rare event it is, the warning will no longer be received and there may be a victim.

This is why over-use of warnings may be dangerous. A warning that is not perceived as needed will not be heeded–even when it is needed. “A warning can only diminish danger as long as there is danger.” This is the paradox of warning. It sounds puzzling, but what it means is that warning signs can only make people behave more cautiously if they agree that their behaviour would probably have been more risky if they had not seen the warning sign.

Over-use of warnings may be dangerous.

Important to consider this when technology companies are caught harming people but say “we posted warnings”. Maybe their warnings were used in ways that increased risks by simultaneously making customers falsely believe they aren’t necessary, the most dangerous version of the paradox — more risks taken than “if they had not seen the warning sign”.