Recently in Security Category

Image via Wikipedia

Greetings. According to the Wall Street Journal, U.S. Senate immigration reform advocates Chuck Schumer and Lindsey Graham are proposing a mandatory biometric (e.g. fingerprint-based) National ID Card system, and are attempting to brush away privacy concerns as trivial and irrelevant.

Note: I heard back anonymously from a customer of iContact. Are they upset that all their customer's email addresses were stolen? Yes. But they aren't that worried about the impact, because they know that most of their customers will never realize that iContact or their company was the source of the leak. In other words, there is no incentive for bulk mail providers to improve security. An email address, particularly one associated with a particular set of services, is the means by which targeting spammers target phishing attacks. It's the key to password changes, bank accounts, and more. Why are the security standards for email any less than they are for credit cards?

Image via CrunchBase

Case #1—AWeber

Image via CrunchBase

Example of how "de-Latinized" domain names can be subverted

http://bit.ly/6YbTBR  (Dean Collins' Blog)

Dean, the "fun" has only just begun.  Some of us have been warning of
this consequence for ... well ... pretty much since day one of the
concept.

As the character of Margo Channing (Bette Davis) so accurately warned
in "All About Eve":

"Fasten your seatbelts, it's going to be a bumpy night!"

To say the least ...

--Lauren--
NNSquad Moderator

раyраl.com

I don't think I need to say much here. September 21.

Protesters here in Minneapolis have been targeted by a series of highly intimidating, sweeping police raids across the city, involving teams of 25-30 officers in riot gear, with semi-automatic weapons drawn, entering homes of those suspected of planning protests, handcuffing and forcing them to lay on the floor, while law enforcement officers searched the homes, seizing computers, journals, and political pamphlets. Last night, members of the St. Paul police department and the Ramsey County sheriff's department handcuffed, photographed and detained dozens of people meeting at a public venue to plan a demonstration, charging them with no crime other than "fire code violations," and early this morning, the Sheriff's department sent teams of officers into at least four Minneapolis area homes where suspected protesters were staying.

This isn't the first of these this week. It really bothers me that the police can arrest people, confiscate their goods, never press charges, and release them all later with no explanation and no consequences. This makes intimidation far too easy. The magic words "homeland security" keep getting invoked.

If the police now have a simple way to hold people without charges, then the people need a simple way to make the police suffer consequences when the power is misused. 

I originally wrote this for my online "'zine" called Buzz, hosted on commons.somewhere.com. That was in November of 2000, right after the Florida election fiasco. Although the specifics of that election are dated, the general information is not. This is about polls, how newspapers report them, and how our need for instant results just makes things worse.

I originally wrote this in January of 2004 but never got around to posting it. Unfortunately, it seems to be just as relevant now. As Bruce Schneier says, we spend a lot of time and money (and fear) on "movie plot" security. The point of terrorism is to inspire fear. I suspect the terrorists have succeeded beyond their wildest expectations.

Today I dropped my laptop off at the Junior High (excuse me, "Middle School") so my daughter could make a presentation in Science class. (Yes, they have computers there, but they are these Windows things that don't meet my daughter's standards for design or elegance.) The plan was simple. I'd go in, meet her at the classroom between periods, give her the laptop, and return at the end of the period to pick it up. (It's my primary machine, I'm not going to leave it with her for the whole day.) I was going to drop it off at the office, but she suggested that I go in the back door. I pointed out that it was locked. She said to knock on the classroom window or wait until someone came out. I said I thought the front door might be a better idea.

Well, the best laid plans.... I was talking to a neighbor just before I left, and she told me I'd better get a hall pass. Seems that last Halloween a parent went to a class party (with the teacher's consent) dressed as a gangster, complete with a wooden gun. On the way out after class, someone asked him if he had a hall pass, he told them he was just leaving. A janitor followed him, someone called the police, he seemed to be driving towards another school (kind of hard not to do that in our town), there was a lockdown there and the police arrested him and took him to jail.

So I decided to play things by the book. I went in the front door to ask for a pass.

"May I help you?"
"Yes, I'd like to take this bag down to my daughter's science class, she needs it for the next period."
"Nooo, may I help you?"

Well, that was kind of a weird response. So I tried again. This time she actually explained. No, I couldn't go to the classroom. I'd have to leave it in the office. So I left it in the office, with a note to my daughter telling her she should bring it back to the office after class. They then called the classroom my daughter was currently in, interrupting the teacher, to tell him to have my daughter come to the office after class. (I'm told that the phone often rings four or five times in the classrooms in a single class—who's brilliant idea was that? When notes had to be delivered in person, they got prioritized.)

Ironically, this was in fact my original plan, but I'd rejected it when my daughter suggested going straight to the classroom, because I realized that between getting her stuff out of her locker, and coming to the office, there was no way she was going to make it in the four minutes they allot between classes.

An hour later I returned to the office, explained to a different person there that I was waiting for my daughter to return the laptop, and waited in the office. When the bell (tone) rang, I went and stood in the hall. Being on edge from all this concern about me, I carefully stood where they could see me from the window, so they'd know I wasn't going anywhere. All was going swimmingly until Baltimore (sorry, very obscure song reference there). I said "Hi" to a few students I knew, nodded to a teacher of two. Then the assistant principal showed up.

"Do you have pass?"
"No, I'm just waiting for my daughter."
"You need to check in to the office."
"I did. They know."
"You need to wait in the office. I hope you appreciate our security."

Well, no, as a matter of fact, I didn't appreciate it at all. That's like the record companies encrypting the CD as a "service" to the customer. But anyway, I kept my mouth shut... that time.

So she escorted me ten feet to the office door and inside. She then attempted to explain to the office person what I was doing there (we both told her we already knew—what, she doesn't hear a word I say?) The office person asked what classes my daughter was between, I explained, she said that meant she'd be passing from the stairwell to the auditorium. I agreed. That, I said, was why I'd been waiting where I could watch for her.

Well, at this point the assistant principal spoke up again. I don't remember the exact words, but it was to the same effect as before. That I should be glad that they were providing this level of security for my children.

I told her that she didn't want to get in a discussion with me about paranoia and security.

So of course, she did.

This wasn't paranoia, she said. These days you needed to provide tighter security.

I told her that I didn't like bringing up my kids in this kind of environment.

She agreed, but said that that was just the way we had to do it because of the times we lived in.

I said a few more things, but rather than paraphrase them quickly, let me state them here more clearly.

These are not dangerous times!

Americans are safer now than ever before in history. Not because of recent increased "security", but because of general changes in our society, and in the world as a whole. (Surprise, surprise. The world as a whole is generally better too—could be even better if we'd stop treating enemies of enemies as friends, and start thinking about them as people rather than governments, but that's a topic for another missive.)

Hijaackings? School bombings? Kidnappings? Firebombings? Groups planning the overthrow of the government? Hidden cells plotting acts of terrorism against citizens and buildings? Those aren't things that are happening now. Those are things that happened frequently in the 50's, 60's and 70's. Has everybody forgotten all the hijacked airplanes to Cuba? Ransome threats? The SLA? Bombed churches and schools? This isn't recent stuff, this is old news. We didn't get paranoid then. Why are we paranoid now?

And the paranoia isn't healthy. Our government is attempting to declare U.S. citizens to be enemy combatants with no rights at all. That barely makes sense if they are found fighting in a foreign country against us. But we're talking about U.S. citizens captured in the the United States, with no evidence that they ever took any action against the U.S.. And we've tens of millions of citizens that think this is a legitimate power for the government to have! Has everyone forgotten J. Edgar Hoover and doctored evidence? Has everyone forgotten Nixon and the breakins? McCarthy? Those were people who had absolutely no qualms about faking evidence against their enemies. What could possibly persuade someone to give that kind of unaccountable power to our government? We have proof that given secrecy and power, our government officials will eventually abuse it. And yet we want to give them more secrecy and more power?

But, you say. This is all different. It calls for extreme measures.

What is different? Terrorism in the U.S.? Hardly. Domestic terrorism has been a problem in this country since its founding. I didn't see anyone asking Christian ministers to stand-up and condemn the bombing of the Federal Building by a Christian. Foreign terrorism isn't new either. We have a family friend who was assassinated in a New Jersey parking lot. He was a high profile Bahai, and someone had him hunted down and killed. This isn't even the first time the World Trade Center was attacked—we didn't panic the first time that happened.

America is a very safe place to live. The problem is, the safer we get, the more we jump at shadows and worry about little things. This time we got hit with a big and successful attack. Our government has deliberately taken advantage of our fear to take steps that give the government more power, and the citizens less power and less freedom. One common misperception they've pushed, and I think it is more from self-delusion than a deliberate attempt to mislead, is that there is some danger of an attack on the American infrastructure. The World Trade Center was hardly a piece of American infrastructure. It was a symbol of American capitalism and of American arrogance (in the sense that it was an attempt to show off by building higher for the sake of building higher). It was attacked because, like almost all terrorism, this is a battle over ideas and a way of life (and democracy isn't the issue, so much as capitalism and democracy without moral direction). The Golden Gate bridge isn't a symbol of America, and so it's not a likely target. Killing lots of people by spreading nuclear fallout isn't the kind of thing that gets viewed as a move against foreign oppression. Domestic terrorists, fighting what they believe to be an internal war for control, attack that kind of thing. But this is a battle of symbols and press. If you want to look for targets of external terrorism, then look to things that symbolize the worst of the United States to the rest of the world.

But don't look to the local Junior High.

There is absolutely no reason for paranoid security at a middle school. Abductions haven't been suddenly climbing—they've been steadily declining, even before tightened security. Kids aren't innocent of the outside world, they are more aware. And Osama Bin Ladin is not going to try and take out the local Middle School. Furthermore, if some guy with a gun walks into the school and starts shooting the kids, forcing every parent (and even substitute teachers) to wear little badges is not going to slow him down one second. And if he really wants to be stealthy, is the work of a few minutes to make a fake badge that would escape all but the closest scrutiny. Finally, because it's a silly requirement, and because everyone knows in their heart that it's a not a big deal—it doesn't get treated as real. I spoke to half a dozen kids, nodded to several teachers. Did any one of them comment on the fact that I didn't have a badge? No. Not the teachers, the administrators or the kids. Not the ones who knew me, or the ones who didn't.

So what are we teaching in our schools? We're teaching people to be afraid and at the same time, that they should ignore authority. Silly rules breed disrespect. At first it's just disrespect of the silly rules. But it spreads. You stop having respect for the people who made them. And then you stop taking the sensible rules seriously. And throughout all of it is this general sense of fear. You're told that things are dangerous, but you can see that nothing real is being done about it. Either you stop believing anything they say, or you start believing you have no control over your future.

None of those things are lessons I want my kids to learn. And I'd far rather have them take their chances in the real world, than live behind a barrier of lies and half-truths.

So no. I don't appreciate security that manifests itself as distrust and lack of respect for parents and students, without providing any real security. And I'm appalled that people can look at the present and be so frightened, having completely forgotten that the past was much worse.

This paper was written for my 10th grade English class. We were given a choice of topics and allowed to argue either side. We researched the topics and made notes, but the final paper had to be written in class, which left no time for proof-reading or editing down. There was a problem with the file server, so I was unable to save my paper. This version was scanned in from the printed copy, and may have additional errors as a result.