Thursday, February 28th, 2008
A few words about the title: The first seven letters are written using a very simple code, or cypher. Each of the letters in the original word is replaced by the character to which it is closest on the keyboard. The process of hiding a message by substituting other letters, numbers or symbols is known as encryption. When the code is reversed, the title reads ‘Explaining Encryption’.
But it also looks like swearing, doesn’t it? In fact, the use of characters like this to denote swearing is a simple (dare we say crude?) kind of encryption. A child too innocent to know such words derives no meaning from the random collection of characters. Someone well versed in the ways of the world, though, can add up the number of characters and quickly deduce what was intended.
On and off over the last two months, we’ve been looking at various aspects of online security. This week, we’re going to consider what steps we can take to make the information we send over the Internet secure from prying eyes.
We’ll also consider why it is that no one uses these measures, and why most of us won’t any time soon.
Read the rest of this entry »
Originally published at the Scriptorum. You can comment here or there.
Uncategorized |
Thursday, February 28th, 2008
Instead of exposing the painful ritual of public/private key exchange, software developers should instead be using metaphors of human trust and service.
A ‘translator’ service, for example. The user ‘invents’ an imaginary language, then decides who among her friends is allowed to speak it with her. She then instructs her ‘translator’ (e.g. her own personal Navajo) to convey messages between herself and her friend’s translator.
(Only the personal Navajos actually need to speak this ‘language’ of course. As far as the two correspondents are concerned, the only change is that they’re sending the message via the ‘translator’ rather than directly, but even that is a wafer-thin bit of functionality once the channel is established and the communications process automated.)
Quick encryption, well understood, and easy to implement. Most importantly, you don’t have to explain encryption, public and private keys, or any other security gobbledygook to someone who really doesn’t want – and shouldn’t need – to hear it.
http://scriptorum.imagicity.com/2008/02/29/idea-personal-navajo/#comments
Uncategorized |
Tuesday, February 26th, 2008
I’ve been doing some shameless self-promotion recently, and felt the need to create a distinct site for all the stuff I write for public consumption. As opposed, that is, to the random epistolary cruft that I am fool enough to foist on my friends.
I’ll therefore be culling out all my more formal bits of writing (columns, etc.) and posting them to my new writing blog: Corpus Scriptorum Crumbum.
Before you subscribe to my feed, be advised that I’ll be posting and backdating a fair amount of stuff you’ve likely already seen, if not read. Might be a good idea to wait a week before tossing me into the feed bucket.
Uncategorized |
Tuesday, February 26th, 2008
[Just pasting this here for reference.]
Someone asked:
I’m curious what the /. community thinks… what if a company such as Comcast were to offer two plans:
1. $30/mo – The internet as we know it today without any preference to content providers, advertising, etc
2. 2) $15/mo – An internet where some content providers get preference, subsidizing the lower monthly bill.
If companies offered a choice would we still care?
Effectively, it would be no choice at all. It would, in fact, be disastrous.
The effects described in George Akerlof’s 1970 paper, The Market for 'Lemons' come into play in such a scenario. In a nutshell, the paper states that certain markets (like used cars) favour the sale of ‘lemons’ over quality. The reason is that it’s easier to simply wax and buff a lemon (and rely on the buyer’s ignorance) than it is to do the right thing and service it properly before re-selling.
The reason this approach works is because buyers can’t see what’s under the hood and, generally speaking, wouldn’t know what to look for even if they could. So instead of paying well for quality, they tend to buy the cheapest item, regardless of its condition. The same is true of Internet service. People just don’t know what’s possible. Worse still, they don’t have the ability to recognise whether they’re getting what they’re supposed to or not.
So if the telcos were to foist a divided offering on their customers, they could rely on ignorance to invoke a market for ‘lemons’. People see no extra value in buying the better service, so they flock en masse to the cheaper one. Telco then discontinues the more expensive one, citing lack of consumer interest.
Minimum operating standards such as Network Neutrality were put into place to protect consumers and the market itself. Absent Net Neutrality, the potential for abuse of control over traffic by carriers is far too great. No compromise is possible in this regard, because degradation of Net Neutrality is a degradation of the market itself.
Uncategorized |
Friday, February 22nd, 2008
I’m going to start blaming random network- and computer-related problems on Bitsharks. Get all my customers used to the idea of these predatory bots cruising the network, dining on people’s transmissions.
USER: “Why didn’t my email go through?”
ME: “Did you receive a failure message?”
USER: “No.”
ME: “Uhhh, you didn’t send it alone, did you?”
USER: “What do you mean?”
ME: “Well… how big was the message?”
USER: “Just a paragraph or so. Why?”
ME: [Dismayed] “And you sent it onto the Internet alone?”
USER: “What, why?”
ME: “Don’t you know what can happen?”
USER: “What? What are you talking about?”
ME: [sighs] “Poor little thing. Probably never had a chance. Hang on a sec….” [Types random commands into console.]
USER: [alarmed] “What’s going on?”
ME: “It’s what I thought. Bitsharks.”
USER: “What did you call me?”
ME: “Nonono. Bit. Shark. A Bitshark got your email.”
USER: “A Bitshark?”
ME: “Yeah. Predatory bots cruising the shallow parts of the Internet. They single out the smaller, more vulnerable bits of data, then consume them.”
USER: “Oh my God.”
ME: [Pained, patient] “Look, just do me a favour. Next time, send your email out in groups. Sometimes the numbers confuse the Bitsharks and the little guys manage to make it through.”
USER: “Oh, the poor thi- I, I… of course.”
ME: “You won’t forget?”
USER: “Heavens, no.”
ME: “Good. Tell your friends.”
Uncategorized |
Thursday, February 21st, 2008
The Australian government recently announced that it was taking the issue of Internet piracy very seriously. They were, according to reports, considering their own version of a British proposal to require Internet Service Providers to cut off so-called ‘repeat offenders’. People who were suspected of deliberately and repeatedly downloading unauthorised music and video files would have their Internet accounts suspended.
This is a commendable goal. Respect for the creative works of others is at a low ebb these days. We need to alter our cavalier approach to copyright and to properly reward those who spend their time and effort in creating the music, movies, software and other creations we so enjoy.
The advent of the Internet and its increasingly important role in people’s day-to-day lives have caused a fundamental shift in the nature of creativity and sharing. In the past only a small minority of writers and musicians ever saw their works published, and fewer still managed to do so without first being recruited by a major producer.
Anyone wishing to achieve any kind of popularity was at the mercy of those who controlled the means of distribution, who had relationships up and down the supply chain, who could spend the required sums on advertising and marketing. It should come as no surprise, then, that traditional publishing and recording contracts gave the majority of the revenues from such works to the publishers and recording companies. Only a small fraction of that was ever returned to the creative artists themselves.
Copyright law has changed greatly over the years. Its original intent was to provide protection to the author of a creative work, allowing them a short-lived period of monopoly on the reproduction of their opus. It was reasoned that this would ensure that creators had every opportunity to profit from their efforts, in exchange for enriching the market of ideas for generations to come. In the intervening years, publishers and distributors have lobbied successfully for greater and greater protections, including a much longer protection period than originally envisaged.
In the age of printed books and vinyl records, this worked quite well for almost everyone concerned. Reproduction was an expensive and time-consuming process and though some complained about predatory practices in the recording and publishing industries, it was rare that truly great talents went unremarked and unrewarded.
With the advent of cheap home recording equipment, however, things began to change. Friends began to make ‘mix tapes’ for others using their dual-cassette machines. Video cassettes routinely changed hands, allowing a generation of office workers to catch up on their favourite soap operas, and fundamentally changing the power of position in the broadcast schedule.
The music, movie and television industries cried out at the prospect that their artists might be denied revenue. Some countries arranged for a tariff to be placed on the sale of every blank cassette, recordable CD or DVD disk, the proceeds of which would be given back to an industry body, which in turn would share the money among recording artists according to their recent sales ranking. In Canada, for example, publishers and recording companies receive between 80 and 85% of the approximately 28 millions dollars annually collected from this. Performers receive the bulk of the remainder.
Producers and distributors still complain, however, that digital reproduction is far too easy, that the Internet makes it possible for people to share unauthorised copies of their work on an unprecedented scale. But when they announced a campaign of legal attacks on illegal file-sharers in the US, they were roundly castigated for treating their own customers like criminals. More importantly, this campaign of legal intimidation has had little or no effect on the level of file sharing among the general public.
There’s a good reason for this. Digital reproduction is just way too easy, and no technical measure can ever successfully stop it. Copy-protection schemes such as the rather euphemistically named Digital Rights Management are ineffective in their very nature. There is no technical way to stop someone from making copies of anything he likes. In order for a song or a movie to play, it has to be read by the computer. And the moment it is readable, it can be written as well. Copying is inevitable. It’s just that simple.
The major distributors and publishers are being forced to find other means to maintain their historical control on the production and dissemination of creative works. Their popularisation of the word ‘piracy’ has had an unfortunate rebound effect, wherein responsible people resent file copying being equated with rape, pillaging and plunder, and many youth proudly flaunt the title, even to the point of creating International Talk Like a Pirate day, when people are encouraged to speak like characters from a Robert Louis Stephenson potboiler.
The proposed legislation in the UK and its copycat counterpart in Australia would require Internet Service Providers, or ISPs, to suspend or even terminate the account of people suspected to have repeatedly downloaded unauthorised music and video files. Apparently, their experience with the fruitless wave of lawsuits in America has taught the recording industry that they shouldn’t be seen to be policing this area themselves.
The proposed legislation won’t work, unfortunately, for technical, ethical and moral reasons.
First off, trying to put technical limits on what can and cannot be freely copied futile. If a file can be read, it can be copied, and if it can’t be read, it’s useless to anyone. Limiting distribution is also an impossible task. There is absolutely no way to tell whether you’re sharing unauthorised copies of files without watching everything you do on the Internet – and that would be an unwarranted and egregious violation of your privacy.
But even if such a legal precedent were allowed, it would still be trivially easy for someone to hide their activity using encryption technology. They could practice misdirection by transferring the files via shared computers located overseas. Or they could simply disguise the traffic to make it look like they’re downloading from a website or mail server. There’s already one Russian service in existence that is promising exactly that.
There is no technical or legislative solution to the sharing of illegal content. Every measure introduced to curb this kind of activity has acted as nothing more than a temporary inconvenience to those determined to copy files. Worse, it’s made it more difficult for people to take advantage of any number of legitimate uses of file sharing.
A digital copy costs next to nothing to create. And when I give a copy to my friend, I still get to keep the one I’ve got. This means that digital music and video is effectively free to obtain. It is not, of course, free to produce. It’s cheaper than ever it was, but it’s still a long way from free.
This represents a tremendous threat to those who have traditionally controlled the production and distribution of creative works. It also provides a revolutionary opportunity to independant artists the world over and to those in traditionally marginal markets. Artists who might only sell a copy or two in any particular record store are realising decent profits by marketing and selling their work to a global audience on the Internet. Many bands are being signed by clubs and promoters based on the support shown by the size of the following on their MySpace websites.
File copying should be encouraged, not punished. At the same time, we need to find ways to recognise the value of every artist’s contribution to society. There’s no easy way to do so, either. Respect can’t be legislated, regulated or applied coercively through threat of litigation. It arises organically, based on a sense of the common good.
People in Vanuatu know more about respect than most. Every important tabu has been preserved as much by the willing compliance of the people as by any overt threat of force. As more and more of Vanuatu’s kastom is captured and stored on computer, we’ll have to work hard to ensure that it continues to be revered and respected by all who view it, no matter how widely it’s shared.
Uncategorized |