text:
My Rank: PRIVATE
Poster Rank:4854
Join Date: Jun 2011
Mentioned: 0 Post(s)
Quoted: 6 Post(s)
Re: Russian Passenger Aircraft Crash in Egypt
Russian Instagram profile with all the victims.
|The Following User Says Thank You to deathingmetal For This Useful Post:
The Frugie
My Rank: PRIVATE
Poster Rank:4854
Join Date: Jun 2011
Mentioned: 0 Post(s)
Quoted: 6 Post(s)
Re: Russian Passenger Aircraft Crash in Egypt
Update: 224 people, including the crew, 25 children, the youngest - 10 months (!) old (died with parents, bodies found). 4 citizens of Ukraine, 1 - Belarus, the rest - Russians. It was mostly family vacations, so...all dead. One family included 5 members - parents and 3 children. Some went on romantic vacation to celebrate engagement, birthdays...
It was an ugly situation in Pulkovo airport when it wasn't announced that the plane had crashed, the screen showed Delayed, though it was already all over the news. So journalists rushed to puzzled relatives who were still waiting for they family members to land with the questions like: Who died in your family?
|The Following 4 Users Say Thank You to deathingmetal For This Useful Post:
AceGoober, Azimuth, gatagato, Oswald2001
My Rank: FIRST SERGEANT
Poster Rank:380
Join Date: Oct 2013
Mentioned: 98 Post(s)
Quoted: 1038 Post(s)
Re: Russian Passenger Aircraft Crash in Egypt
Russia? The same country that shot down the Malaysian Airlines plane over Ukraine causing 298 deaths? Well they still owe 74 lives then.
|The Following User Says Thank You to andersveg For This Useful Post:
Re: Russian Passenger Aircraft Crash in Egypt
Crash site seen from a helicopter!
|The Following 2 Users Say Thank You to Berserk For This Useful Post:
AceGoober, Kelseecat65
My Rank: LANCE CORPORAL
Poster Rank:2257
Join Date: Jun 2009
Mentioned: 0 Post(s)
Quoted: 68 Post(s)
Re: Russian Passenger Aircraft Crash in Egypt
This is an interesting development.
Egypt has so far been adamantly denying that there was any terrorism aspect to this crash to save their tourism while Russia has been mum and saying nothing is being discounted.
This tends to suggest that the Egyptians are now thinking that a passenger's carry-on luggage may have been tampered with prior to boarding if I understand this correctly.
Keep in mind that this was a chartered flight and packaged vacation and there was no possibility that an unknown or random individual purchased tickets to board. This "passenger lounge" would already be a sterile area after checking carry-on baggage.
Same people that flew in, flew out. All have been checked against any terrorist connections and databases, so it's very unlikely that one of the passengers knowingly took down the plane.
While anything can still be possible, this recent development shows that the investigation has taken a critical turn.
|The Following 2 Users Say Thank You to sunairco For This Useful Post:
Azimuth, Kelseecat65
Re: Russian Passenger Aircraft Crash in Egypt
Russian plane crash: state of bodies suggests mid-air explosion - latest news..
Cockpit recordings reveal "uncharacteristic sounds" in final moments of disaster in Sinai which killed 224 people.
Splits have emerged between Russia and Egypt as Cairo rejected Russian investigators' conclusion that a Metrojet airliner had broken up in mid-air before crashing.
Four days into the investigation into the fate of Flight 7K9268, the Egyptian government said there was no evidence to support claims by Russian officials that the Airbus A321 "broke up in the air". It is the most public rift to date between the two governments, which initially both strongly suggested the aircraft had been brought down by a technical fault, only to concede later that foul play was a possibility.
As investigators from both countries began examining the plane's black boxes, the Russian news agency Interfax reported that a cockpit recorder had picked up sounds of chaos in the flight's final moments.
"Judging by the recording, a situation onboard developed suddenly and unexpectedly for the crew, and as a result the pilots did not manage to send a distress signal," a source said.
An Egyptian doctor who examined around half of the 224 bodies told The Telegraph that about one in five of the corpses had been badly burned in the moments before death.
The finding suggests that a fire broke out in the cabin while the plane was still the air but the doctor was not able to firmly conclude what caused the fire.
Meanwhile, Egyptian president Abdel Fattah al-Sisi said that speculation the flight had been brought down by the Islamic State (Isil) was "false propaganda" intended to damage Egypt's image.
A spokesman for Russian president Vladimir Putin said there was no evidence of terrorism and it was "inappropriate" to speculate on whether the flight may have been downed in revenge for Russia's intervention in Syria.
US intelligence said their satellites had detected a mid-air flash as the aircraft went down but were able to rule out a missile strike because there was no tell-tale heat trail coming from the ground.
The flash could be the explosion of a bomb going off but could also be a mechanical breakdown, like an fuel tank erupting, the American officials said.
Security has been stepped up at Sharm el-Sheikh airport, where the Metrojet flight took from 23 minutes before being lost to radar.
Long queues waited at a security check but British tourists said they did not mind as long as it kept them safe. "I'd rather to wait for careful check and return back home safely and not have my plane crashed." said Nick Matthews.
Metrojet flights to and from Moscow and Nijni Novgorod continued out of Sharm el-Sheikh despite the questions surrounding Flight 7K9268.
In St Petersburg, a second government aircraft carrying human remains, personal belongings, and documents recovered from the crash site arrived early Tuesday morning.
"As of today 140 bodies and more than 100 body parts have been brought to St Petersburg," said Alexei Smirnov, the head of the national emergency response centre in Moscow.
Nineteen victims had been identified by relatives by yesterday evening, officials said in a briefing. Victims so far identified by relatives include an eight-year old child from the town of Novgorod and Alexander Kopylov, the deputy mayor of the city of Pskov.
The remains have been sent to the morgue at the city's main crematorium for identification and examination by forensic pathologists before being released to families for burial.
Officials have said it could take weeks to fully identify all 244 victims, and DNA samples were sent to Moscow on Tuesday to held identify some of the most badly damaged remains.
|The Following 4 Users Say Thank You to Clubhouse For This Useful Post:
Azimuth, gatagato, kellyhound, Kelseecat65
Re: Russian Passenger Aircraft Crash in Egypt
My suspicion is that improper repairs to tail section damage from an incident many years before failed catastrophically.
Possibly initiated and/or aggravated by other metal fatigue issues.
Third World countries - like Russia - typically don't care much about things like metal fatigue.
They use equipment until it wears out.
|The Following User Says Thank You to Oswald2001 For This Useful Post:
Re: Russian Passenger Aircraft Crash in Egypt
I hate flying. The entire flight, from days before until I'm safely on the ground stress me out too much.
|The Following 2 Users Say Thank You to Kelseecat65 For This Useful Post:
Oswald2001, sideshowfreak
My Rank: LANCE CORPORAL
Poster Rank:2257
Join Date: Jun 2009
Mentioned: 0 Post(s)
Quoted: 68 Post(s)
Re: Russian Passenger Aircraft Crash in Egypt
The intact, unburnt tail from bulkhead backwards though is compelling and the distance away from the main crash to support the mechanical failure aspect.
Some bodies that have been examined do show evidence of a blast and it wouldn't have taken much of a blast to rupture the fuselage. Last report that I've seen claims that so far, no residue of an explosive or accelerant has been recovered of bodies tested.
This also may still be a bunch of bull as both tourism and political concerns may try to bury the real reason and we're going to end up with a story about the main fuel tank exploding a la TWA-800 which I'm don't doubt.
|The Following User Says Thank You to sunairco For This Useful Post:
Re: Russian Passenger Aircraft Crash in Egypt
it could be propaganda but they stated the aircraft got a major checkup last year. If any there, they would have found the tiny cracks in the metal.
I flew mutliple times with russian aircraft, everytime i entered such aircraft i accepted my possible dead, that it was likely i would not survive
Once you are safely landed it feels like you are reborn
|Thread Tools


text:
Essays in the Category "National Security Policy"
The Real Threat from China Isn't "Spy Trains"
The trade war with China has reached a new industry: subway cars. Congress is considering legislation that would prevent the world's largest train maker, the Chinese-owned CRRC Corporation, from competing on new contracts in the United States.
Part of the reasoning behind this legislation is economic, and stems from worries about Chinese industries undercutting the competition and dominating key global industries. But another part involves fears about national security.
Why the NSA Makes Us More Vulnerable to Cyberattacks
The Lessons of WannaCry
There is plenty of blame to go around for the WannaCry ransomware that spread throughout the Internet earlier this month, disrupting work at hospitals, factories, businesses, and universities. First, there are the writers of the malicious software, which blocks victims' access to their computers until they pay a fee. Then there are the users who didn't install the Windows security patch that would have prevented an attack. A small portion of the blame falls on Microsoft, which wrote the insecure code in the first place.
Puzzling out TSA's Laptop Travel Ban
On Monday, the TSA announced a peculiar new security measure to take effect within 96 hours. Passengers flying into the US on foreign airlines from eight Muslim countries would be prohibited from carrying aboard any electronics larger than a smartphone. They would have to be checked and put into the cargo hold. And now the UK is following suit.
Cybersecurity Issues for the Next Administration
Solutions require both corporate regulation and international cooperation
This essay appeared on Time.com as part of a special section called Let's Talk About the Issues.
On today's Internet, too much power is concentrated in too few hands. In the early days of the Internet, individuals were empowered. Now governments and corporations hold the balance of power. If we are to leave a better Internet for the next generations, governments need to rebalance Internet power more towards the individual.
New Leaks Prove It: The NSA Is Putting Us All at Risk to Be Hacked
The National Security Agency is lying to us. We know that because of data stolen from an NSA server was dumped on the internet. The agency is hoarding information about security vulnerabilities in the products you use, because it wants to use it to hack others' computers. Those vulnerabilities aren't being reported, and aren't getting fixed, making your computers and networks unsafe.
Your iPhone Just Got Less Secure. Blame the FBI.
When Johns Hopkins discovered a different security flaw, it notified Apple so the problem could be fixed. The FBI is keeping its newly found breach a secret from everyone.
The FBI's legal battle with Apple is over, but the way it ended may not be good news for anyone.
Federal agents had been seeking to compel Apple to break the security of an iPhone 5c that had been used by one of the San Bernardino, Calif., terrorists. Apple had been fighting a court order to cooperate with the FBI, arguing that the authorities' request was illegal and that creating a tool to break into the phone was itself harmful to the security of every iPhone user worldwide.
Last week, the FBI told the court it had learned of a possible way to break into the phone using a third party's solution, without Apple's help.
Security vs. Surveillance
Both the "going dark" metaphor of FBI Director James Comey and the contrasting "golden age of surveillance" metaphor of privacy law professor Peter Swire focus on the value of data to law enforcement. As framed in the media, encryption debates are about whether law enforcement should have surreptitious access to data, or whether companies should be allowed to provide strong encryption to their customers.
It's a myopic framing that focuses only on one threat—criminals, including domestic terrorists—and the demands of law enforcement and national intelligence. This obscures the most important aspects of the encryption issue: the security it provides against a much wider variety of threats.
Hacking Team, Computer Vulnerabilities, and the NSA
When the National Security Administration (NSA)—or any government agency—discovers a vulnerability in a popular computer system, should it disclose it or not? The debate exists because vulnerabilities have both offensive and defensive uses. Offensively, vulnerabilities can be exploited to penetrate others' computers and networks, either for espionage or destructive purposes. Defensively, publicly revealing security flaws can be used to make our own systems less vulnerable to those same attacks.
Why are We Spending $7 Billion on TSA?
News that the Transportation Security Administration missed a whopping 95% of guns and bombs in recent airport security "red team" tests was justifiably shocking. It's clear that we're not getting value for the $7 billion we're paying the TSA annually.
But there's another conclusion, inescapable and disturbing to many, but good news all around: We don't need $7 billion worth of airport security. These results demonstrate that there isn't much risk of airplane terrorism, and we should ratchet security down to pre-9/11 levels.
The World's Most Sophisticated Hacks: Governments?
Last month, Moscow-based security software maker Kaspersky Labs published detailed information on what it calls the Equation Group and how the U.S. National Security Agency and their U.K. counterpart, GCHQ, have figure how to embed spyware deep inside computers, gaining almost total control of those computers to eavesdrop on most of the world's computers, even in the face of reboots, operating system reinstalls, and commercial anti-virus products. The details are impressive, and I urge anyone interested in tech to read the Kaspersky documents, or these very detailed articles.
Cyberweapons Have No Allegiance
The thing about infrastructure is that everyone uses it. If it's secure, it's secure for everyone. And if it's insecure, it's insecure for everyone. This forces some hard policy choices.
The Government Must Show Us the Evidence That North Korea Attacked Sony
American history is littered with examples of classified information pointing us towards aggression against other countries—think WMDs—only to later learn that the evidence was wrong
When you're attacked by a missile, you can follow its trajectory back to where it was launched from. When you're attacked in cyberspace, figuring out who did it is much harder. The reality of international aggression in cyberspace will change how we approach defense.
Many of us in the computer-security field are skeptical of the U.S.
NSA Hacking of Cell Phone Networks
The Intercept has published an article—based on the Snowden documents—about AURORAGOLD, an NSA surveillance operation against cell phone network operators and standards bodies worldwide. This is not a typical NSA surveillance operation where agents identify the bad guys and spy on them. This is an operation where the NSA spies on people designing and building a general communications infrastructure, looking for weaknesses and vulnerabilities that will allow it to spy on the bad guys at some later date.
In that way, AURORAGOLD is similar to the NSA's program to hack sysadmins around the world, just in case that access will be useful at some later date; and to the GCHQ's hacking of the Belgian phone company Belgacom.
The U.S.'s Hypocritical Stance Against Chinese Hackers
Chinese hacking of American computer networks is old news. For years we've known about their attacks against U.S. government and corporate targets. We've seen detailed reports of how they hacked The New York Times.
Should U.S. Hackers Fix Cybersecurity Holes or Exploit Them?
There's a debate going on about whether the U.S. government—specifically, the NSA and United States Cyber Command—should stockpile Internet vulnerabilities or disclose and fix them. It's a complicated problem, and one that starkly illustrates the difficulty of separating attack and defense in cyberspace.
A software vulnerability is a programming mistake that allows an adversary access into that system.
Let the Spies Spy, Let the Cops Chase Terrorists
According to NSA documents published in Glenn Greenwald's new book "No Place to Hide," we now know that the NSA spies on embassies and missions all over the world, including those of Brazil, Bulgaria, Colombia, the European Union, France, Georgia, Greece, India, Italy, Japan, Mexico, Slovakia, South Africa, South Korea, Taiwan, Venezuela and Vietnam.
This will certainly strain international relations, as happened when it was revealed that the United States is eavesdropping on German Chancellor Angela Merkel's cell phone—but is anyone really surprised? Spying on foreign governments is what the NSA is supposed to do. Much more problematic, and dangerous, is that the NSA spies on entire populations.
Internet Subversion
In addition to turning the Internet into a worldwide surveillance platform, the NSA has surreptitiously weakened the products, protocols, and standards we all use to protect ourselves. By doing so, it has destroyed the trust that underlies the Internet. We need that trust back.
Trust is inherently social.
There's No Real Difference Between Online Espionage and Online Attack
Back when we first started getting reports of the Chinese breaking into U.S. computer networks for espionage purposes, we described it in some very strong language. We called the Chinese actions cyber-attacks. We sometimes even invoked the word cyberwar, and declared that a cyber-attack was an act of war.
Metadata = Surveillance
Ever since reporters began publishing stories about NSA activities, based on documents provided by Edward Snowden, we've been repeatedly assured by government officials that it's "only metadata." This might fool the average person, but it shouldn't fool those of us in the security field. Metadata equals surveillance data, and collecting metadata on people means putting them under surveillance.
An easy thought experiment demonstrates this. Imagine that you hired a private detective to eavesdrop on a subject.
NSA Robots are "Collecting" Your Data, Too, and They're Getting Away With It
Increasingly, we are watched not by people but by algorithms. Amazon and Netflix track the books we buy and the movies we stream, and suggest other books and movies based on our habits. Google and Facebook watch what we do and what we say, and show us advertisements based on our behavior. Google even modifies our web search results based on our previous behavior.
It's Time to Break Up the NSA
The NSA has become too big and too powerful. What was supposed to be a single agency with a dual mission—protecting the security of U.S. communications and eavesdropping on the communications of our enemies—has become unbalanced in the post-Cold War, all-terrorism-all-the-time era.
Putting the U.S.
Let the NSA Keep Hold of the Data
Giving it to private companies will only make privacy intrusion worse.
One of the recommendations by the president's Review Group on Intelligence and Communications Technologies on reforming the National Security Agency—No. 5, if you're counting—is that the government should not collect and store telephone metadata. Instead, a private company—either the phone companies themselves or some other third party—should store the metadata and provide it to the government only upon a court order.
This isn't a new idea. Over the past decade, several countries have enacted mandatory data retention laws, in which companies are required to save Internet or telephony data about customers for a specified period of time, in case the government needs it for an investigation.
Everything We Know About How the NSA Tracks People's Physical Location
French translation
Glenn Greenwald is back reporting about the NSA, now with Pierre Omidyar's news organization FirstLook and its introductory publication, The Intercept. Writing with national security reporter Jeremy Scahill, his first article covers how the NSA helps target individuals for assassination by drone.
Leaving aside the extensive political implications of the story, the article and the NSA source documents reveal additional information about how the agency's programs work. From this and other articles, we can now piece together how the NSA tracks individuals in the real world through their actions in cyberspace.
How the NSA Threatens National Security
Secret NSA eavesdropping is still in the news. Details about once secret programs continue to leak. The Director of National Intelligence has recently declassified additional information, and the President's Review Group has just released its report and recommendations.
With all this going on, it's easy to become inured to the breadth and depth of the NSA's activities.
Leakers and Governments Should Work Together
In the Information Age, it's easier than ever to steal and publish data. Corporations and governments have to adjust to their secrets being exposed, regularly.
When massive amounts of government documents are leaked, journalists sift through them to determine which pieces of information are newsworthy, and confer with government agencies over what needs to be redacted.
Managing this reality is going to require that governments actively engage with members of the press who receive leaked secrets, helping them secure those secrets—even while being unable to prevent them from publishing.
Why the NSA's Defense of Mass Data Collection Makes No Sense
The basic government defense of the NSA's bulk-collection programs—whether it be the list of all the telephone calls you made, your email address book and IM buddy list, or the messages you send your friends—is that what the agency is doing is perfectly legal, and doesn't really count as surveillance, until a human being looks at the data.
It's what Director of National Intelligence James R. Clapper meant when he lied to Congress. When asked, "Does the NSA collect any type of data at all on millions or hundreds of millions of Americans?" he replied, "No sir, not wittingly." To him, the definition of "collect" requires that a human look at it. So when the NSA collects—using the dictionary definition of the word—data on hundreds of millions of Americans, it's not really collecting it, because only computers process it.
Your Life, Under Constant Surveillance
Historically, surveillance was difficult and expensive.
Over the decades, as technology advanced, surveillance became easier and easier. Today, we find ourselves in a world of ubiquitous surveillance, where everything is collected, saved, searched, correlated and analyzed.
But while technology allowed for an increase in both corporate and government surveillance, the private and public sectors took very different paths to get there.
NSA and GCHQ target Tor Network That Protects Anonymity of Web Users
The National Security Agency has made repeated attempts to develop attacks against people using Tor, a popular tool designed to protect online anonymity, despite the fact the software is primarily funded and promoted by the US government itself.
Top-secret NSA documents, disclosed by whistleblower Edward Snowden, reveal that the agency's current successes against Tor rely on identifying users and then attacking vulnerable software on their computers. One technique developed by the agency targeted the Firefox web browser used with Tor, giving the agency full control over targets' computers, including access to files, all keystrokes and all online activity.
But the documents suggest that the fundamental security of the Tor service remains intact.
Attacking Tor: How the NSA Targets Users' Online Anonymity
Secret servers and a privileged position on the internet's backbone used to identify users and attack target computers
The online anonymity network Tor is a high-priority target for the National Security Agency. The work of attacking Tor is done by the NSA's application vulnerabilities branch, which is part of the systems intelligence directorate, or SID. The majority of NSA employees work in SID, which is tasked with collecting data from communications systems around the world.
According to a top-secret NSA presentation provided by the whistleblower Edward Snowden, one successful technique the NSA has developed involves exploiting the Tor browser bundle, a collection of programs designed to make it easy for people to install and use the software.
Why the NSA's Attacks on the Internet Must Be Made Public
By reporting on the agency's actions, the vulnerabilities in our computer systems can be fixed. It's the only way to force change
Today, the Guardian is reporting on how the NSA targets Tor users, along with details of how it uses centrally placed servers on the internet to attack individual computers. This builds on a Brazilian news story from last week that, in part, shows that the NSA is impersonating Google servers to users; a German story on how the NSA is hacking into smartphones; and a Guardian story from two weeks ago on how the NSA is deliberately weakening common security algorithms, protocols, and products.
The common thread among these stories is that the NSA is subverting the internet and turning it into a massive surveillance tool. The NSA's actions are making us all less safe, because its eavesdropping mission is degrading its ability to protect the US.
How the NSA Thinks About Secrecy and Risk
As I report in The Guardian today, the NSA has secret servers on the Internet that hack into other computers, codename FOXACID. These servers provide an excellent demonstration of how the NSA approaches risk management, and exposes flaws in how the agency thinks about the secrecy of its own programs.
Here are the FOXACID basics: By the time the NSA tricks a target into visiting one of those servers, it already knows exactly who that target is, who wants him eavesdropped on, and the expected value of the data it hopes to receive. Based on that information, the server can automatically decide what exploit to serve the target, taking into account the risks associated with attacking the target, as well as the benefits of a successful attack.
The NSA-Reform Paradox: Stop Domestic Spying, Get More Security
The nation can survive the occasional terrorist attack, but our freedoms can't survive an invulnerable leader like Keith Alexander operating within inadequate constraints.
Leaks from the whistleblower Edward Snowden have catapulted the NSA into newspaper headlines and demonstrated that it has become one of the most powerful government agencies in the country. From the secret court rulings that allow it to collect data on all Americans to its systematic subversion of the entire Internet as a surveillance platform, the NSA has amassed an enormous amount of power.
There are two basic schools of thought about how this came to pass. The first focuses on the agency's power.
Could U.S. Have Stopped Syria's Chemical Attack?
We recently learned that U.S. intelligence agencies had at least three days' warning that Syrian President Bashar al-Assad was preparing to launch a chemical attack on his own people, but wasn't able to stop it. At least that's what an intelligence briefing from the White House reveals. With the combined abilities of our national intelligence apparatus—the CIA, National Security Agency, National Reconnaissance Office and all the rest—it's not surprising that we had advance notice.
NSA Surveillance: a Guide to Staying Secure
The NSA has huge capabilities – and if it wants in to your computer, it's in. With that in mind, here are five ways to stay safe
Now that we have enough details about how the NSA eavesdrops on the internet, including today's disclosures of the NSA's deliberate weakening of cryptographic systems, we can finally start to figure out how to protect ourselves.
For the past two weeks, I have been working with the Guardian on NSA stories, and have read hundreds of top-secret NSA documents provided by whistleblower Edward Snowden. I wasn't part of today's story—it was in process well before I showed up—but everything I read confirms what the Guardian is reporting.
At this point, I feel I can provide some advice for keeping secure against such an adversary.
The US Government Has Betrayed the Internet. We Need to Take It Back
The NSA has undermined a fundamental social contract. We engineers built the internet – and now we have to fix it
German translation
Government and industry have betrayed the internet, and us.
By subverting the internet at every level to make it a vast, multi-layered and robust surveillance platform, the NSA has undermined a fundamental social contract. The companies that build and manage our internet infrastructure, the companies that create and sell us our hardware and software, or the companies that host our data: we can no longer trust them to be ethical internet stewards.
This is not the internet the world needs, or the internet its creators envisioned.
The Spooks Need New Ways to Keep Their Secrets Safe
Big-government secrets require a lot of secret-keepers. As of October 2012, almost 5m people in the US have security clearances, with 1.4m at the top-secret level or higher, according to the Office of the Director of National Intelligence.
Most of these people do not have access to as much information as Edward Snowden, the former National Security Agency contractor turned leaker, or even Chelsea Manning, the former US army soldier previously known as Bradley who was convicted for giving material to WikiLeaks. But a lot of them do—and that may prove the Achilles heel of government.
The Only Way to Restore Trust in the NSA
I've recently seen two articles speculating on the NSA's capability, and practice, of spying on members of Congress and other elected officials. The evidence is all circumstantial and smacks of conspiracy thinking—and I have no idea whether any of it is true or not—but it's a good illustration of what happens when trust in a public institution fails.
The NSA has repeatedly lied about the extent of its spying program. James R. Clapper, the director of national intelligence, has lied about it to Congress.
NSA Intimidation Expanding Surveillance State
We Need Protection from Intelligence-Gathering Run Amok
This essay also appeared in the Livingston Daily and the Daily Journal.
If there's any confirmation that the U.S. government has commandeered the Internet for worldwide surveillance, it is what happened with Lavabit earlier this month.
Lavabit is—well, was—an e-mail service that offered more privacy than the typical large-Internet-corporation services that most of us use.
The Real, Terrifying Reason Why British Authorities Detained David Miranda
The scariest explanation of all? That the NSA and GCHQ are just showing they don't want to be messed with.
Last Sunday, David Miranda was detained while changing planes at London Heathrow Airport by British authorities for nine hours under a controversial British law—the maximum time allowable without making an arrest. There has been much made of the fact that he's the partner of Glenn Greenwald, the Guardian reporter whom Edward Snowden trusted with many of his NSA documents and the most prolific reporter of the surveillance abuses disclosed in those documents. There's less discussion of what I feel was the real reason for Miranda's detention. He was ferrying documents between Greenwald and Laura Poitras, a filmmaker and his co-reporter on Snowden and his information.
The NSA Is Commandeering the Internet
Technology companies have to fight for their users, or they'll eventually lose them.
Danish translation
It turns out that the NSA's domestic and world-wide surveillance apparatus is even more extensive than we thought. Bluntly: The government has commandeered the Internet. Most of the largest Internet companies provide information to the NSA, betraying their users. Some, as we've learned, fight and lose.
The Army in Our Midst
In one Maryland county, SWAT teams were deployed once a day on average in 2009, most often to serve search or arrest warrants.
War as a rhetorical concept is firmly embedded in American culture. Over the past several decades, federal and local law enforcement has been enlisted in a war on crime, a war on drugs and a war on terror. These wars are more than just metaphors designed to rally public support and secure budget appropriations. They change the way we think about what the police do.
NSA Secrets Kill Our Trust
In July 2012, responding to allegations that the video-chat service Skype—owned by Microsoft—was changing its protocols to make it possible for the government to eavesdrop on users, Corporate Vice President Mark Gillett took to the company's blog to deny it.
Turns out that wasn't quite true.
Or at least he—or the company's lawyers—carefully crafted a statement that could be defended as true while completely deceiving the reader. You see, Skype wasn't changing its protocols to make it possible for the government to eavesdrop on users, because the government was already able to eavesdrop on users.
At a Senate hearing in March, Director of National Intelligence James Clapper assured the committee that his agency didn't collect data on hundreds of millions of Americans.
The Public-Private Surveillance Partnership
This essay also appeared in The Memphis Commercial Appeal, Stuff, The Guardian Comment Is Free, and Veterans Today.
Italian translation
Imagine the government passed a law requiring all citizens to carry a tracking device. Such a law would immediately be found unconstitutional. Yet we all carry mobile phones.
Cyberconflicts and National Security
Whenever national cybersecurity policy is discussed, the same stories come up again and again. Whether the examples are called acts of cyberwar, cyberespionage, hacktivism, or cyberterrorism, they all affect national interest, and there is a corresponding call for some sort of national cyberdefence.
Unfortunately, it is very difficult to identify attackers and their motivations in cyberspace. As a result, nations are classifying all serious cyberattacks as cyberwar.
Mission Creep: When Everything Is Terrorism
NSA apologists say spying is only used for menaces like "weapons of mass destruction" and "terror." But those terms have been radically redefined.
One of the assurances I keep hearing about the U.S. government's spying on American citizens is that it's only used in cases of terrorism. Terrorism is, of course, an extraordinary crime, and its horrific nature is supposed to justify permitting all sorts of excesses to prevent it. But there's a problem with this line of reasoning: mission creep.
Has U.S. Started an Internet War?
Today, the United States is conducting offensive cyberwar actions around the world.
More than passively eavesdropping, we're penetrating and damaging foreign networks for both espionage and to ready them for attack. We're creating custom-designed Internet weapons, pre-targeted and ready to be "fired" against some piece of another country's electronic infrastructure on a moment's notice.
This is much worse than what we're accusing China of doing to us.
Before Prosecuting, Investigate the Government
Edward Snowden broke the law by releasing classified information. This isn't under debate; it's something everyone with a security clearance knows. It's written in plain English on the documents you have to sign when you get a security clearance, and it's part of the culture. The law is there for a good reason, and secrecy has an important role in military defense.
What We Don't Know About Spying on Citizens: Scarier Than What We Know
The NSA's surveillance of cell-phone calls show how badly we need to protect the whistle-blowers who provide transparency and accountability.
French translation
Russian translation
Finnish translation
Yesterday, we learned that the NSA received all calling records from Verizon customers for a three-month period starting in April. That's everything except the voice content: who called who, where they were, how long the call lasted—for millions of people, both Americans and foreigners. This "metadata" allows the government to track the movements of everyone during that period, and build a detailed picture of who talks to whom. It's exactly the same data the Justice Department collected about AP journalists.
It's Smart Politics to Exaggerate Terrorist Threats
Swedish translation
Terrorism causes fear, and we overreact to that fear. Our brains aren't very good at probability and risk analysis. We tend to exaggerate spectacular, strange and rare events, and downplay ordinary, familiar and common ones. We think rare risks are more common than they are, and we fear them more than probability indicates we should.
Transparency and Accountability Don't Hurt Security—They're Crucial to It
As part of the fallout of the Boston bombings, we're probably going to get some new laws that give the FBI additional investigative powers. As with the Patriot Act after 9/11, the debate over whether these new laws are helpful will be minimal, but the effects on civil liberties could be large. Even though most people are skeptical about sacrificing personal freedoms for security, it's hard for politicians to say no to the FBI right now, and it's politically expedient to demand that something be done.
If our leaders can't say no—and there's no reason to believe they can—there are two concepts that need to be part of any new counterterrorism laws, and investigative laws in general: transparency and accountability.
Why FBI and CIA Didn't Connect the Dots
The FBI and the CIA are being criticized for not keeping better track of Tamerlan Tsarnaev in the months before the Boston Marathon bombings. How could they have ignored such a dangerous person? How do we reform the intelligence community to ensure this kind of failure doesn't happen again?
It's an old song by now, one we heard after the 9/11 attacks in 2001 and after the Underwear Bomber's failed attack in 2009.
The Boston Marathon Bombing: Keep Calm and Carry On
It is easy to feel scared and powerless in the wake of attacks like those at the Boston Marathon. But it also plays into the perpetrators' hands.
German translation
As the details about the bombings in Boston unfold, it'd be easy to be scared. It'd be easy to feel powerless and demand that our elected leaders do something—anything—to keep us safe.
It'd be easy, but it'd be wrong. We need to be angry and empathize with the victims without being scared.
Our Security Models Will Never Work—No Matter What We Do
A core, not side, effect of technology is its ability to magnify power and multiply force—for both attackers and defenders. One side creates ceramic handguns, laser-guided missiles, and new-identity theft techniques, while the other side creates anti-missile defense systems, fingerprint databases, and automatic facial recognition systems.
The problem is that it's not balanced: Attackers generally benefit from new security technologies before defenders do. They have a first-mover advantage.
Danger Lurks in Growing New Internet Nationalism
Cyber-espionage is old news. What's new is the rhetoric, which is reaching a fever pitch right now.
For technology that was supposed to ignore borders, bring the world closer together, and sidestep the influence of national governments, the Internet is fostering an awful lot of nationalism right now. We've started to see increased concern about the country of origin of IT products and services; U.S. companies are worried about hardware from China; European companies are worried about cloud services in the U.S; no one is sure whether to trust hardware and software from Israel; Russia and China might each be building their own operating systems out of concern about using foreign ones.
I see this as an effect of all the cyberwar saber-rattling that's going on right now.
Unsafe Security: A Sociologist Aptly Analyzes our Failures in Top-Down Protection
Against Security: How We Go Wrong at Airports, Subways, and Other Sites of Ambiguous Danger, by Harvey Molotch, Princeton University Press, 278 pages, $35.
Security is both a feeling and a reality, and the two are different things. People can feel secure when they're actually not, and they can be secure even when they believe otherwise.
This discord explains much of what passes for our national discourse on security policy.
Militarizing Cyberspace Will Do More Harm Than Good
We're in the early years of a cyberwar arms race. It's expensive, it's destabilising and it threatens the very fabric of the internet we use every day. Cyberwar treaties, as imperfect as they might be, are the only way to contain the threat.
If you read the press and listen to government leaders, we're already in the middle of a cyberwar.
Fear Pays the Bills, but Accounts Must Be Settled
A lot of the debate around President Obama's cybersecurity initiative center on how much of a burden it would be on industry, and how that should be financed. As important as that debate is, it obscures some of the larger issues surrounding cyberwar, cyberterrorism, and cybersecurity in general.
It's difficult to have any serious policy discussion amongst the fear mongering. Secretary Panetta's recent comments are just the latest; search the Internet for "cyber 9/11," "cyber Peal-Harbor," "cyber Katrina," or -- my favorite -- "cyber Armageddon."
There's an enormous amount of money and power that results from pushing cyberwar and cyberterrorism: power within the military, the Department of Homeland Security, and the Justice Department; and lucrative government contracts supporting those organizations.
Debate Club: An International Cyberwar Treaty Is the Only Way to Stem the Threat
We're in the early years of a cyberwar arms race. It's expensive, it's destabilizing, and it threatens the very fabric of the Internet we use every day. Cyberwar treaties, as imperfect as they might be, are the only way to contain the threat.
If you read the press and listen to government leaders, we're already in the middle of a cyberwar.
Why Terror Alert Codes Never Made Sense
The Department of Homeland Security is getting rid of the color-coded threat level system. It was introduced after 9/11, and was supposed to tell you how likely a terrorist attack might be. Except that it never did.
Attacks happened more often when the level was yellow ("significant risk") than when it was orange ("high risk").
Close the Washington Monument
A heavily edited version of this essay appeared in the New York Daily News.
Securing the Washington Monument from terrorism has turned out to be a surprisingly difficult job. The concrete fence around the building protects it from attacking vehicles, but there's no visually appealing way to house the airport-level security mechanisms the National Park Service has decided are a must for visitors. It is considering several options, but I think we should close the monument entirely. Let it stand, empty and inaccessible, as a monument to our fears.
It Will Soon Be Too Late to Stop the Cyberwars
The world is gearing up for cyberwar. The US Cyber Command became operational in November. Nato has enshrined cyber security among its new strategic priorities. The head of Britain's armed forces said recently that boosting cyber capability is now a huge priority for the UK.
3 Reasons to Kill the Internet Kill Switch Idea
Last month, Sen. Joe Lieberman, I-Conn., introduced a bill that might -- we're not really sure -- give the president the authority to shut down all or portions of the Internet in the event of an emergency. It's not a new idea. Sens. Jay Rockefeller, D-W.Va., and Olympia Snowe, R-Maine, proposed the same thing last year, and some argue that the president can already do something like this. If this or a similar bill ever passes, the details will change considerably and repeatedly.
Threat of "Cyberwar" Has Been Hugely Hyped
There's a power struggle going on in the U.S. government right now.
It's about who is in charge of cyber security, and how much control the government will exert over civilian networks. And by beating the drums of war, the military is coming out on top.
Should the Government Stop Outsourcing Code Development?
This essay appeared as the second half of a point/counterpoint with Marcus Ranum. Marcus's half is here.
French translation
Information technology is increasingly everywhere, and it's the same technologies everywhere. The same operating systems are used in corporate and government computers. The same software controls critical infrastructure and home shopping.
U.S. Enables Chinese Hacking of Google
Google made headlines when it went public with the fact that Chinese hackers had penetrated some of its services, such as Gmail, in a politically motivated attempt at intelligence gathering. The news here isn't that Chinese hackers engage in these activities or that their attempts are technically sophisticated -- we knew that already -- it's that the U.S. government inadvertently aided the hackers.
In order to comply with government search warrants on user data, Google created a backdoor access system into Gmail accounts.
Fixing Intelligence Failures
President Obama in his speech last week rightly focused on fixing the intelligence failures that resulted in Umar Farouk Abdulmutallab being ignored, rather than on technologies targeted at the details of his underwear-bomb plot. But while Obama's instincts are right, reforming intelligence for this new century and its new threats is a more difficult task than he might like.
We don't need new technologies, new laws, new bureaucratic overlords, or - for heaven's sake - new agencies. What prevents information sharing among intelligence organizations is the culture of the generation that built those organizations.
Profiling Makes Us Less Safe
There are two kinds of profiling. There's behavioral profiling based on how someone acts, and there's automatic profiling based on name, nationality, method of ticket purchase, and so on. The first one can be effective, but is very hard to do right. The second one makes us all less safe.
Cold War Encryption is Unrealistic in Today's Trenches
Sometimes mediocre encryption is better than strong encryption, and sometimes no encryption is better still.
The Wall Street Journal reported this week that Iraqi, and possibly also Afghan, militants are using commercial software to eavesdrop on U.S. Predators, other unmanned aerial vehicles, or UAVs, and even piloted planes. The systems weren't "hacked" -- the insurgents can't control them -- but because the downlink is unencrypted, they can watch the same video stream as the coalition troops on the ground.
So-called Cyberattack Was Overblown
To hear the media tell it, the United States suffered a major cyberattack last week. Stories were everywhere. "Cyber Blitz hits U.S., Korea" was the headline in Thursday's Wall Street Journal. North Korea was blamed.
Clear Common Sense for Takeoff: How the TSA Can Make Airport Security Work for Passengers Again
It's been months since the Transportation Security Administration has had a permanent director. If, during the job interview (no, I didn't get one), President Obama asked me how I'd fix airport security in one sentence, I would reply: "Get rid of the photo ID check, and return passenger screening to pre-9/11 levels."
Okay, that's a joke. While showing ID, taking your shoes off and throwing away your water bottles isn't making us much safer, I don't expect the Obama administration to roll back those security measures anytime soon. Airport security is more about CYA than anything else: defending against what the terrorists did last time.
How Science Fiction Writers Can Help, or Hurt, Homeland Security
A couple of years ago, the Department of Homeland Security hired a bunch of science fiction writers to come in for a day and think of ways terrorists could attack America. If our inability to prevent 9/11 marked a failure of imagination, as some said at the time, then who better than science fiction writers to inject a little imagination into counterterrorism planning?
I discounted the exercise at the time, calling it "embarrassing." I never thought that 9/11 was a failure of imagination. I thought, and still think, that 9/11 was primarily a confluence of three things: the dual failure of centralized coordination and local control within the FBI, and some lucky breaks on the part of the attackers.
Coordinate, But Distribute Responsibility
This essay appeared as part of a round table about Obama's cybersecurity speech on The New York Times's Room for Debate blog.
I am optimistic about President Obama's new cybersecurity policy and the appointment of a new "cybersecurity coordinator," though much depends on the details. What we do know is that the threats are real, from identity theft to Chinese hacking to cyberwar.
His principles were all welcome — securing government networks, coordinating responses, working to secure the infrastructure in private hands (the power grid, the communications networks, and so on), although I think he's overly optimistic that legislation won't be required. I was especially heartened to hear his commitment to funding research.
We Shouldn't Poison Our Minds with Fear of Bioterrorism
Terrorists attacking our food supply is a nightmare scenario that has been given new life during the recent swine flu outbreak. Although it seems easy to do, understanding why it hasn't happened is important. GR Dalziel, at the Nanyang Technological University in Singapore, has written a report chronicling every confirmed case of malicious food contamination in the world since 1950: 365 cases in all, plus 126 additional unconfirmed cases. What he found demonstrates the reality of terrorist food attacks.
Who Should Be in Charge of Cybersecurity?
U.S. government cybersecurity is an insecure mess, and fixing it is going to take considerable attention and resources. Trying to make sense of this, President Barack Obama ordered a 60-day review of government cybersecurity initiatives. Meanwhile, the U.S.
How Perverse Incentives Drive Bad Security Decisions
An employee of Whole Foods in Ann Arbor, Michigan, was fired in 2007 for apprehending a shoplifter. More specifically, he was fired for touching a customer, even though that customer had a backpack filled with stolen groceries and was running away with them.
I regularly see security decisions that, like the Whole Foods incident, seem to make absolutely no sense. However, in every case, the decisions actually make perfect sense once you understand the underlying incentives driving the decision.
Terrorists May Use Google Earth, But Fear Is No Reason to Ban It
This essay also appeared in The Hindu, Brisbane Times, and The Sydney Morning Herald.
German translation
It regularly comes as a surprise to people that our own infrastructure can be used against us. And in the wake of terrorist attacks or plots, there are fear-induced calls to ban, disrupt or control that infrastructure. According to officials investigating the Mumbai attacks, the terrorists used images from Google Earth to help learn their way around.
How to Prevent Digital Snooping
As the first digital president, Barack Obama is learning the hard way how difficult it can be to maintain privacy in the information age. Earlier this year, his passport file was snooped by contract workers in the State Department. In October, someone at Immigration and Customs Enforcement leaked information about his aunt's immigration status. And in November, Verizon employees peeked at his cellphone records.
Why Obama Should Keep His BlackBerry -- But Won't
When he becomes president, Barack Obama will have to give up his BlackBerry. Aides are concerned that his unofficial conversations would become part of the presidential record, subject to subpoena and eventually made public as part of the country's historical record.
This reality of the information age might be particularly stark for the president, but it's no less true for all of us. Conversation used to be ephemeral.
CRB Checking
Since the UK's Criminal Records Bureau (CRB) was established in 2002, an ever-increasing number of people are required to undergo a "CRB check" before they can interact with children. It's not only teachers and daycare providers, but football coaches, scoutmasters and Guiders, church volunteers, bus drivers, and school janitors -- 3.4 million checks in 2007, 15 million since 2002. In 2009, it will include anyone who works or volunteers in a position where he or she comes into contact with children: 11.3 million people, or a quarter of the adult population.
This might make sense if it worked, but it doesn't.
Time to Show Bottle and Tackle the Real Issues
This essay also appeared in the Taipei Times.
Airport security found a bottle of saline in my luggage at Heathrow Airport last month. It was a 4oz bottle, slightly above the 100 ml limit. Airport security in the United States lets me through with it all the time, but UK security was stricter.
Why Society Should Pay the True Costs of Security
It's not true that no one worries about terrorists attacking chemical plants. It's just that our politics seem to leave us unable to deal with the threat. Toxins such as ammonia, chlorine, propane and flammable mixtures are being produced or stored as a result of legitimate industrial processes. Chlorine gas is particularly toxic; in addition to bombing a plant, someone could hijack a chlorine truck or blow up a railcar.
The TSA's Useless Photo ID Rules
No-fly lists and photo IDs are supposed to help protect the flying public from terrorists. Except that they don't work.
The TSA is tightening its photo ID rules at airport security. Previously, people with expired IDs or who claimed to have lost their IDs were subjected to secondary screening. Then the Transportation Security Administration realized that meant someone on the government's no-fly list -- the list that is supposed to keep our planes safe from terrorists -- could just fly with no ID.
Now, people without ID must also answer personal questions from their credit history to ascertain their identity.
Memo to Next President: How to Get Cybersecurity Right
Obama has a cybersecurity plan.
It's basically what you would expect: Appoint a national cybersecurity adviser, invest in math and science education, establish standards for critical infrastructure, spend money on enforcement, establish national standards for securing personal data and data-breach disclosure, and work with industry and academia to develop a bunch of needed technologies.
I could comment on the plan, but with security, the devil is always in the details -- and, of course, at this point there are few details. But since he brought up the topic -- McCain supposedly is "working on the issues" as well -- I have three pieces of policy advice for the next president, whoever he is.
CCTV Doesn't Keep Us Safe, Yet the Cameras Are Everywhere
Pervasive security cameras don't substantially reduce crime. There are exceptions, of course, and that's what gets the press. Most famously, CCTV cameras helped catch James Bulger's murderers in 1993. And earlier this year, they helped convict Steve Wright of murdering five women in the Ipswich area.
Are Photographers Really a Threat?
What is it with photographers these days? Are they really all terrorists, or does everyone just think they are?
Since 9/11, there has been an increasing war on photography. Photographers have been harrassed, questioned, detained, arrested or worse, and declared to be unwelcome.
Crossing Borders with Laptops and PDAs
Last month a US court ruled that border agents can search your laptop, or any other electronic device, when you're entering the country. They can take your computer and download its entire contents, or keep it for several days. Customs and Border Patrol has not published any rules regarding this practice, and I and others have written a letter to Congress urging it to investigate and regulate this practice.
But the US is not alone.
America's Dilemma: Close Security Holes, or Exploit Them Ourselves
On April 27, 2007, Estonia was attacked in cyberspace. Following a diplomatic incident with Russia about the relocation of a Soviet World War II memorial, the networks of many Estonian organizations, including the Estonian parliament, banks, ministries, newspapers and broadcasters, were attacked and -- in many cases -- shut down. Estonia was quick to blame Russia, which was equally quick to deny any involvement.
It was hyped as the first cyberwar: Russia attacking Estonia in cyberspace.
Census of Cyberspace Censoring
Book Review of Access Denied
China restricts Internet access by keyword.
In 1993, Internet pioneer John Gilmore said "the net interprets censorship as damage and routes around it", and we believed him. In 1996, cyberlibertarian John Perry Barlow issued his 'Declaration of the Independence of Cyberspace' at the World Economic Forum at Davos, Switzerland, and online. He told governments: "You have no moral right to rule us, nor do you possess any methods of enforcement that we have true reason to fear."
At the time, many shared Barlow's sentiments.
The Myth of the "Transparent Society"
When I write and speak about privacy, I am regularly confronted with the mutual disclosure argument. Explained in books like David Brin's The Transparent Society, the argument goes something like this: In a world of ubiquitous surveillance, you'll know all about me, but I will also know all about you. The government will be watching us, but we'll also be watching the government. This is different than before, but it's not automatically worse.
Bruce Schneier: Security at What Cost?
National ID System Is Not Worth The $23 Billion Price Tag
The argument was so obvious it hardly needed repeating: We would all be safer if we had a better ID card. A good, hard-to-forge national ID is a no-brainer (or so the argument goes), and it's ridiculous that a modern country such as the United States doesn't have one. One result of this line of thinking is the planned Real ID Act, which forces all states to conform to common and more stringent rules for issuing driver's licenses.
But security is always a tradeoff; it must be balanced with the cost.
Driver's Licenses for Immigrants: Denying Licenses Makes Us Less Safe
Many people say that allowing illegal aliens to obtain state driver's licenses helps them and encourages them to remain illegally in this country. Michigan Attorney General Mike Cox late last year issued an opinion that licenses could be issued only to legal state residents, calling it "one more tool in our initiative to bolster Michigan's border and document security."
In reality, we are a much more secure nation if we do issue driver's licenses and/or state IDs to every resident who applies, regardless of immigration status. Issuing them doesn't make us any less secure, and refusing puts us at risk.
The state driver's license databases are the only comprehensive databases of U.S.
What Our Top Spy Doesn't Get: Security and Privacy Aren't Opposites
If there's a debate that sums up post-9/11 politics, it's security versus privacy. Which is more important? How much privacy are you willing to give up for security? Can we even afford privacy in this age of insecurity?
Time to Close Gaps in Emergency Communications
I live in Minneapolis, so the collapse of the Interstate 35W bridge over the Mississippi River earlier this month hit close to home, and was covered in both my local and national news.
Much of the initial coverage consisted of human interest stories, centered on the victims of the disaster and the incredible bravery shown by first responders: the policemen, firefighters, EMTs, divers, National Guard soldiers and even ordinary people, who all risked their lives to save others. (Just two weeks later, three rescue workers died in their almost-certainly futile attempt to save six miners in Utah.)
Perhaps the most amazing aspect of these stories is that there's nothing particularly amazing about it. No matter what the disaster -- hurricane, earthquake, terrorist attack -- the nation's first responders get to the scene soon after.
Is Big Brother a Big Deal?
This essay appeared as part of a point-counterpoint with Marcus Ranum. Marcus's side, to which this is a response, can be found on his website.
Big Brother isn't what he used to be. George Orwell extrapolated his totalitarian state from the 1940s. Today's information society looks nothing like Orwell's world, and watching and intimidating a population today isn't anything like what Winston Smith experienced.
Vigilantism Is a Poor Response to Cyberattack
Last month Marine Gen. James Cartwright told the House Armed Services Committee that the best cyberdefense is a good offense.
As reported in Federal Computer Week, Cartwright said: "History teaches us that a purely defensive posture poses significant risks," and that if "we apply the principle of warfare to the cyberdomain, as we do to sea, air and land, we realize the defense of the nation is better served by capabilities enabling us to take the fight to our adversaries, when necessary, to deter actions detrimental to our interests."
The general isn't alone. In 2003, the entertainment industry tried to get a law passed (.pdf) giving it the right to attack any computer suspected of distributing copyright-protected material. And there probably isn't a sysadmin in the world who doesn't want to strike back at computers that are blindly and repeatedly attacking their networks.
Automated Targeting System
This article was published under the title "They're Watching."
If you've traveled abroad recently, you've been investigated. You've been assigned a score indicating what kind of terrorist threat you pose. That score is used by the government to determine the treatment you receive when you return to the U.S. and for other purposes as well.
Do Federal Security Regulations Help?
This essay appeared as part of a point-counterpoint with Marcus Ranum.
Regulation is all about economics. Here's the theory. In a capitalist system, companies make decisions based on their own self-interest. This isn't a bad thing; it's actually a very good thing.
The ID Chip You Don't Want in Your Passport
This essay also appeared in San Jose Mercury News, Sacramento Bee, Concord Monitor, Fort Worth Star Telegram, Dallas Morning News, Contra Costa Times, Statesman Journal, and The Clarion-Ledger.
If you have a passport, now is the time to renew it -- even if it's not set to expire anytime soon. If you don't have a passport and think you might need one, now is the time to get it. In many countries, including the United States, passports will soon be equipped with RFID chips.
Is There Strategic Software?
This essay appeared as part of a point-counterpoint with Marcus Ranum. Marcus's side can be found on his website.
If you define "critical infrastructure" as "things essential for the functioning of a society and economy," then software is critical infrastructure. For many companies and individuals, if their computers stop working then they stop working.
It's a situation that sneaked up on us.
We're Giving Up Privacy and Getting Little in Return
Better to Put People, Not Computers, in Charge of Investigating Potential Plots
Collecting information about every American's phone calls is an example of data mining. The basic idea is to collect as much information as possible on everyone, sift through it with massive computers, and uncover terrorist plots. It's a compelling idea, and convinces many. But it's wrong.
The Anti-ID-Theft Bill That Isn't
California was the first state to pass a law requiring companies that keep personal data to disclose when that data is lost or stolen. Since then, many states have followed suit. Now Congress is debating federal legislation that would do the same thing nationwide.
Except that it won't do the same thing: The federal bill has become so watered down that it won't be very effective.
U.S. Ports Raise Proxy Problem
Does it make sense to surrender management, including security, of six U.S. ports to a Dubai-based company? This question has set off a heated debate between the administration and Congress, as members of both parties condemned the deal.
Most of the rhetoric is political posturing, but there's an interesting security issue embedded in the controversy.
Uncle Sam is Listening
Bush may have bypassed federal wiretap law to deploy more high-tech methods of surveillance.
When President Bush directed the National Security Agency to secretly eavesdrop on American citizens, he transferred an authority previously under the purview of the Justice Department to the Defense Department and bypassed the very laws put in place to protect Americans against widespread government eavesdropping. The reason may have been to tap the NSA's capability for data mining and widespread surveillance.
Illegal wiretapping of Americans is nothing new. In the 1950s and '60s, in a program called "Project Shamrock," the NSA intercepted every single telegram coming in or going out of the United States.
Unchecked Presidential Power
In the weeks after 9/11, while America and the world were grieving, President Bush built a legal rationale for a dictatorship. Then he started using it to avoid the law.
This past Thursday, the New York Times exposed the most significant violation of federal surveillance law in the post-Watergate era. President Bush secretly authorized the National Security Agency to engage in domestic spying, wiretapping thousands of Americans and bypassing the legal procedures regulating this activity.
This isn't about the spying, although that's a major issue in itself. This is about the Fourth Amendment protections against illegal search.
The Erosion of Freedom
Spying tools are now routinely used against ordinary, law-abiding Americans who have no connection to terrorism.
Christmas 2003, Las Vegas. Intelligence hinted at a terrorist attack on New Year's Eve. In the absence of any real evidence, the FBI tried to compile a real-time database of everyone who was visiting the city. It collected customer data from airlines, hotels, casinos, rental car companies, even storage locker rental companies. All this information went into a massive database -- probably close to a million people overall -- that the FBI's computers analyzed, looking for links to known terrorists.
Fatal Flaw Weakens RFID Passports
In 2004, when the U.S. State Department first started talking about embedding RFID chips in passports, the outcry from privacy advocates was huge. When the State Department issued its draft regulation in February, it got 2,335 comments, 98.5 percent negative. In response, the final State Department regulations, issued last week, contain two features that attempt to address security and privacy concerns.
A Sci-Fi Future Awaits the Court
At John Roberts' confirmation hearings last week, there weren't enough discussions about science fiction. Technologies that are science fiction today will become constitutional questions before Roberts retires from the bench. The same goes for technologies that cannot even be conceived of now. And many of these questions involve privacy.
Toward a Truly Safer Nation
Leaving aside the political posturing and the finger-pointing, how did our nation mishandle Katrina so badly? After spending tens of billions of dollars on homeland security (hundreds of billions, if you include the war in Iraq) in the four years after 9/11, what did we do wrong? Why were there so many failures at the local, state and federal levels?
These are reasonable questions.
Risks of Third-Party Data
Reports are coming in torrents. Criminals are known to have downloaded personal credit information of over 145,000 Americans from ChoicePoint's network. Hackers took over one of Lexis Nexis' databases, gaining access to personal files of 32,000 people. Bank of America Corp. lost computer data tapes that contained personal information on 1.2 million federal employees, including members of the U.S.
Digital Information Rights Need Tech-Savvy Courts
Opinion: The courts need to recognize that in the information age, virtual privacy and physical privacy don't have the same boundaries.
For at least seven months last year, a hacker had access to T-Mobile's customer network. He is known to have accessed information belonging to 400 customers—names, Social Security numbers, voice mail messages, SMS messages, photos—and probably had the ability to access data belonging to any of T-Mobile's 16.3 million U.S. customers.
The Security of Checks and Balances
Much of the political rhetoric surrounding the US presidential election centers around the relative security posturings of President George W. Bush and Senator John Kerry, with each side loudly proclaiming that his opponent will do irrevocable harm to national security.
Terrorism is a serious issue facing our nation in the early 21st century, and the contrasting views of these candidates is important. But this debate obscures another security risk, one much more central to the US: the increasing centralisation of American political power in the hands of the executive branch of the government.
Over 200 years ago, the framers of the US Constitution established an ingenious security device against tyrannical government: they divided government power among three different bodies.
Do Terror Alerts Work?
How would we know? An essay by one of the world's busiest security experts.
As I read the litany of terror threat warnings that the government has issued in the past three years, the thing that jumps out at me is how vague they are. The careful wording implies everything without actually saying anything. We hear "terrorists might try to bomb buses and rail lines in major U.S.
Academics locked out by tight visa controls
U.S. Security Blocks Free Exchange of Ideas
Cryptography is the science of secret codes, and it is a primary Internet security tool to fight hackers, cyber crime, and cyber terrorism. CRYPTO is the world's premier cryptography conference. It's held every August in Santa Barbara.
How Long Can the Country Stay Scared?
Want to learn how to create and sustain psychosis on a national scale? Look carefully at the public statements made by the Department of Homeland Security.
Here are a few random examples: "Weapons of mass destruction, including those containing chemical, biological or radiological agents or materials, cannot be discounted." "At least one of these attacks could be executed by the end of the summer 2003." "These credible sources suggest the possibility of attacks against the homeland around the holiday season and beyond."
The DHS's threat warnings have been vague, indeterminate, and unspecific. The threat index goes from yellow to orange and back again, although no one is entirely sure what either level means.
U.S. 'No-Fly' List Curtails Liberties
Intended as a counterterrorism tool, it doesn't work and tramples on travelers' rights
Imagine a list of suspected terrorists so dangerous that we can't ever let them fly, yet so innocent that we can't arrest them - even under the draconian provisions of the Patriot Act.
This is the federal government's "no-fly" list. First circulated in the weeks after 9/11 as a counterterrorism tool, its details are shrouded in secrecy.
But, because the list is filled with inaccuracies and ambiguities, thousands of innocent, law-abiding Americans have been subjected to lengthy interrogations and invasive searches every time they fly, and sometimes forbidden to board airplanes.
US-VISIT Is No Bargain
In the wake of the U.S. Department of Homeland Security's awarding of its largest contract, for a system to fingerprint and to keep tabs on foreign visitors in the United States, it makes sense to evaluate our country's response to terrorism. Are we getting good value for all the money that we're spending?
US-VISIT is a government program to help identify the 23 million foreigners who visit the United States every year.
Security and Compliance
It's been said that all business-to-business sales are motivated by either fear or greed. Traditionally, security products and services have been a fear sell: fear of burglars, murders, kidnappers, and -- more recently -- hackers. Despite repeated attempts by the computer security industry to position itself as a greed sell -- "better Internet security will make your company more profitable because you can better manage your risks" -- fear remains the primary motivator for the purchase of network security products and services.
The problem is that many security risks are not borne by the organization making the purchasing decision.
Unchecked Police And Military Power Is A Security Threat
As the U.S. Supreme Court decides three legal challenges to the Bush administration's legal maneuverings against terrorism, it is important to keep in mind how critical these cases are to our nation's security. Security is multifaceted; there are many threats from many different directions. It includes the security of people against terrorism, and also the security of people against tyrannical government.
CLEARly Muddying the Fight Against Terror
Danny Sigui lived in Rhode Island. After witnessing a murder, he called 911 and became a key witness in the trial. In the process, he unwittingly alerted officials of his immigration status. He was arrested, jailed and eventually deported.
We Are All Security Customers
National security is a hot political topic right now, as both presidential candidates are asking us to decide which one of them is better fit to secure the country.
Many large and expensive government programs--the CAPPS II airline profiling system, the US-VISIT program that fingerprints foreigners entering our country, and the various data-mining programs in research and development--take as a given the need for more security.
At the end of 2005, when many provisions of the controversial Patriot Act expire, we will again be asked to sacrifice certain liberties for security, as many legislators seek to make those provisions permanent.
As a security professional, I see a vital component missing from the debate.
Terrorist Threats and Political Gains
Posturing, pontifications, and partisan politics aside, the one clear generalization that emerges from the 9/11 hearings is that information--timely, accurate, and free-flowing--is critical in our nation's fight against terrorism. Our intelligence and law-enforcement agencies need this information to better defend our nation, and our citizens need this information to better debate massive financial expenditures for anti-terrorist measures, changes in law that aid law enforcement and diminish civil liberties, and the upcoming Presidential election
The problem is that the current administration has consistently used terrorism information for political gain. Again and again, the Bush administration has exaggerated the terrorist threat for political purposes. They're embarked on a re-election strategy that involves a scared electorate voting for the party that is perceived to be better able to protect them.
A National ID Card Wouldn't Make Us Safer
This essay also appeared, in a slightly different form, in The Mercury News.
As a security technologist, I regularly encounter people who say the United States should adopt a national ID card. How could such a program not make us more secure, they ask?
The suggestion, when it's made by a thoughtful civic-minded person like Nicholas Kristof (Star-Tribune, March 18), often takes on a tone that is regretful and ambivalent: Yes, indeed, the card would be a minor invasion of our privacy, and undoubtedly it would add to the growing list of interruptions and delays we encounter every day; but we live in dangerous times, we live in a new world ... .
America's Flimsy Fortress
Every day, some 82,000 foreign visitors set foot in the US with a visa, and since early this year, most of them have been fingerprinted and photographed in the name of security. But despite the money spent, the inconveniences suffered, and the international ill will caused, these new measures, like most instituted in the wake of September 11, are mostly ineffectual.
Terrorist attacks are very rare. So rare, in fact, that the odds of being the victim of one in an industrialized country are almost nonexistent.
Slouching Towards Big Brother
Last week the Supreme Court let stand the Justice Department's right to secretly arrest noncitizen residents.
Combined with the government's power to designate foreign prisoners of war as "enemy combatants" in order to ignore international treaties regulating their incarceration, and their power to indefinitely detain U.S. citizens without charge or access to an attorney, the United States is looking more and more like a police state.
Since the Sept. 11 attacks, the Justice Department has asked for, and largely received, additional powers that allow it to perform an unprecedented amount of surveillance of American citizens and visitors.
Fingerprinting Visitors Won't Offer Security
Imagine that you're going on vacation to some exotic country.
You get your visa, plan your trip and take a long flight. How would you feel if, at the border, you were photographed and fingerprinted? How would you feel if your biometrics stayed in that country's computers for years?
Outside View: Fixing intelligence
A joint congressional intelligence inquiry has concluded that 9/11 could have been prevented if our nation's intelligence agencies shared information better and coordinated more effectively. This is both a trite platitude and a profound proscription.
Intelligence is easy to understand after the fact. With the benefit of hindsight, it's easy to draw lines from people in flight school here, to secret meetings in foreign countries there, over to interesting tips from informants, and maybe to INS records.
Testimony before the Subcommittee on Cybersecurity, Science, and Research and Development
Testimony and Statement for the Record of Bruce Schneier
Chief Technical Officer, Counterpane Internet Security, Inc.
Hearing on "Overview of the Cyber Problem-A Nation Dependent and Dealing with Risk"
Before the Subcommittee on Cybersecurity, Science, and Research and Development
Committee on Homeland Security
United States House of Representatives
June 25, 2003
2318 Rayburn House Office Building
Mr. Chairman, members of the Committee, thank you for the opportunity to testify today regarding cybersecurity, particularly in its relation to homeland defense and our nation's critical infrastructure. My name is Bruce Schneier, and I have worked in the field of computer security for my entire career. I am the author of seven books on the topic, including the best-selling Secrets and Lies: Digital Security in a Networked World [1].
Guilty Until Proven Innocent?
In April 2003, the US Justice Department administratively discharged the FBI of its statutory duty to ensure the accuracy and completeness of the National Crime Information Center (NCIC) database. This enormous database contains over 39 million criminal records and information on wanted persons, missing persons, and gang members, as well as information about stolen cars and boats. More than 80,000 law enforcement agencies have access to this database. On average, the database processes 2.8 million transactions each day.
American Cyberspace: Can We Fend off Attackers?
Forget It: Bland PR Document Has Only Recommendations
AT 60 pages, the White House's National Strategy to Secure Cyberspace is an interesting read, but it won't help to secure cyberspace. It's a product of consensus, so it doesn't make any of the hard choices necessary to radically increase cyberspace security. Consensus doesn't work in security design, and invariably results in bad decisions. It's the compromises that are harmful, because the more parties you have in the discussion, the more interests there are that conflict with security.
Efforts to Limit Encryption Are Bad for Security
In the wake of the devastating attacks on New York's World Trade Center and the Pentagon, Sen. Judd Gregg (R-N.H.), with backing from other high- ranking government officials, quickly seized the opportunity to propose limits on strong encryption and "key-escrow" systems that insure government access. This is a bad move because it will do little to thwart terrorist activities and it will also reduce the security of our critical infrastructure.
As more and more of our nation's critical infrastructure goes digital, cryptography is more important than ever. We need all the digital security we can get; the government shouldn't be doing things that actually reduce it.
Arrest of Computer Researcher Is Arrest of First Amendment Rights
The arrest of a Russian computer security researcher was a major setback for computer security research. The FBI nabbed Dmitry Sklyarov after he presented a paper at DefCon, the hacker community convention in Las Vegas, on the strengths and the weaknesses of software to encrypt an electronic book.
Although I'm certain the FBI's case will never hold up in court, it shows that free speech is secondary to the entertainment industry's paranoia about copyright protection.
Sklyarov is accused of violating the Digital Millennium Copyright Act (DMCA), which makes publishing critical research on this technology more serious than publishing design information on nuclear weapons.
Testimony before the Senate Subcommittee on Science, Technology, and Space
Testimony and Statement for the Record of Bruce Schneier
Chief Technical Officer, Counterpane Internet Security, Inc.
Hearing on Internet Security before the Subcommittee on Science, Technology, and Space of the Committee on Commerce, Science and Transportation
United States Senate
July 16, 2001
253 Russell Senate Office Building
My name is Bruce Schneier. I am the founder and Chief Technical Officer of Counterpane Internet Security. Inc. Counterpane was founded to address the immediate need for increased Internet security, and essentially provides burglar alarm services for computer networks.
Body of Secrets by James Bamford
The author of a pioneering work on the NSA delivers a new book of revelations about the mysterious agency's coverups, eavesdropping and secret missions.
In 1982, James Bamford published "The Puzzle Palace," his first exposé on the National Security Agency. His new exposé on the NSA is called "Body of Secrets." Twenty years makes a lot of difference in the intelligence biz.
During those 20 years, the Reagan military buildup came and went, the Soviet Union fell and the Cold War ended, and a bevy of new military enemies emerged. Electronic communications exploded through faxes, cellphones, the Internet, etc.
International Cryptography
Revised version.
One of the stranger justifications of U.S. export controls is that they prevent the spread of cryptographic expertise. Years ago, the Administration argued that there were no cryptographic products available outside the U.S. When several studies proved that there were hundreds of products designed, built, and marketed outside the U.S., the Administration changed its story.
NIST AES News
A version of this essay appeared on ZDNet.com.
AES is the Advanced Encryption Standard, the encryption algorithm that will eventually replace DES. In 1997, the U.S. government (NIST, actually), solicited candidate algorithms for this standard. By June 1998 (the submission deadline), NIST received fifteen submissions.
WORD IN EDGEWISE: Scrambled Message
Key recovery is like trying to fit a square peg into a round hole. No matter how much you finagle it, it's simply not going to work.
In the September issue of Information Security, Commerce Undersecretary William Reinsch suggests that U.S. crypto export policy hinges on the concept of "balance" (Q&A: "Crypto's Key Man").
For key recovery policy to be successful, he argues, it must achieve a balance between privacy and access, between the needs of consumers and the requirements of the law-enforcement community.
For those who have followed the key recovery debate, Reinsch's comments will have a familiar ring.
Electronic Speech - For Domestic Use Only
The U.S. State Department recently ruled that some forms of electronic speech are not protected by the First Amendment and can be prohibited from export. This decision raises questions about freedom of speech on the information superhighway. As business communications continue to migrate from paper mail to electronic mail, these questions will become more important.
High-Tech Government Snooping: Anti-Crime or Orwell Revisited?
Good news! The federal government respects and is working to protect your privacy... just as long as you don't want privacy from the government itself.
In April 1994, the Clinton administration, cleaning up old business from the Bush administration, introduced a new cryptography initiative that ensures the government's ability to conduct electronic surveillance.
Clipper Gives Big Brother Far Too Much Power
In April, the Clinton administration, cleaning up business left over from the Bush administration, introduced a cryptography initiative that gives government the ability to conduct electronic surveillance. The first fruit of this initiative is Clipper, a National Security Agency (NSA)-designed, tamper-resistant VLSI chip. The stated purpose of this chip is to secure telecommunications.
Clipper uses a classified encryption algorithm.
Sidebar photo of Bruce Schneier by Joe MacInnis.

subset: commoncrawl


text:
Name Last modified Size Description
Parent Directory - record directory 3517818n.dat 2000-01-01 00:00 280 numerics 3620655n.dat 2000-01-01 00:00 31K numerics s17646-3301-10-14-20-40n.hea 2012-02-05 23:47 417 numerics header file s17646-3301-10-14-23-29n.hea 2012-02-05 23:47 423 numerics header file
If you would like help understanding, using, or downloading content, please see our Frequently Asked Questions.
If you have any comments, feedback, or particular questions regarding this page, please send them to the webmaster.
Comments and issues can also be raised on PhysioNet's GitHub page.
Updated Friday, 28 October 2016 at 16:58 EDT
PhysioNet is supported by the National Institute of General Medical Sciences (NIGMS) and the National Institute of Biomedical Imaging and Bioengineering (NIBIB) under NIH grant number 2R01GM104987-09.


text:
Welcome back to "Doggerel," where I ramble on about words and phrases that are misused, abused, or just plain meaningless.
The last entry relevant to this largely dealt with woos using appeals to consequences of normal actions. These alleged consequences typically had no evidence supporting their existence. This entry is largely about woos appealing to the consequences of belief.
The most famous of the appeals to consequences of belief is probably Pascal's Wager, paraphrased as: "If you believe in God and God exists, you'll get infinite reward. If you don't believe in God, and God exists, you'll get infinite punishment. If God doesn't exist, you don't get anything either way." Of course, the problems are myriad: It presumes that God acts on belief, rather than some other criteria. It presumes there's only one kind of God to believe or disbelieve. It presumes God cares. Yadda, yadda, yadda. Most of all, though, it's putting fear and selfishness ahead of curiosity. Follow the link above for more details.
Shouldn't we just study the evidence before reaching conclusions, rather than forming a selfish conclusion and making an appeal to that selfishness? That's what a lot of religious appeals to consequences of belief boil down to: Do this, because we say it's in your best interest, even though we defined the belief in terms of non-evidence-based self-interest.
What separates woo-based arguments like this from the scientific method is the emphasis: Woos highly stress the importance of believing in the conclusion, regardless of how it was arrived at, often exploding if someone dares question how they arrived. Science, unlike woo, emphasizes that method: How we know what we know? Science is willing to overturn its earlier conclusions when better evidence contradicts it. Woo, on the other hand, will generally never do such a thing. Conclusions are sacrosanct, and methods are only good if they agree with the conclusion.
Science, of course, tends toward the philosophy that sacred cow makes the best hamburger. Dissecting the 'holy' bovine will get more accurate answers than fear and egomania.
Friday, September 28, 2007
Doggerel #124: "Better Safe Than Sorry!"
2 comments:
If Pascal's Wager really works, then combined with a multitude of creeds it provides a proper scientific explanation for Hell's climate.
Are you sure you're not forgetting anything? Check ye group.
-- the DM
- Infophile said...
Sacred cows may make good hamburgers, but if you really want some good meat, it's spherical cows or bust. I've never personally eaten meat from a sacred spherical cow, but I've heard it's been classified as the most pleasurable way to die.
Subscribe to: Post Comments (Atom)


text:
The United Nations Climate Change Conference is in full swing at Copenhagen this week with the big shots moving in to take the limelight from the lesser players. So far Canada has borne the brunt of the scorn reserved for those who have questions about Anthropogenic Global Warming or responsibilities and remedial actions regarding climate change in general.
The United States—thanks probably to President Barack Obama—has avoided much criticism despite never signing the Kyoto Protocol and despite the high per capita levels of resource consumption in that country. Curious isn't it how Obama has reversed international opinion of the U.S. in less than a year—and with very little real action on the environment on his or his country's part. They consume most of what we produce, but we take the heat for the resulting greenhouse effect.
Canada, we are told, is obstructing real progress at Copenhagen. Yes, we who produce only an estimated two per cent of the world's greenhouse gas emissions are—according to the Climate Action Network—"… doing the most to obstruct progress in the global climate talks."
And we are treated to the spectacle of the Mayor of Toronto, David Miller, agreeing to collect so-called "Fossil of the Day" awards on behalf of Canada.
Yes, readers, the very same who man who surreptitiously backed the city employees' unions when they went on strike last summer:
- he grossly mislead Toronto tax-payers about the cost of workers sick-day benefits;
- he allowed the unions to boot City Council out of city hall during the strike;
- he pretended to represent city management, but he caved on every material demand from the unions;
- Toronto has shown an unprecedented level of irresponsible financial management and general ineptness during his administration; and
- Toronto has slipped from second- to third-rate under his administration.
By pretending to speak for Canada, David Miller shows what a puffed up ass he really is. He travels 5,000 miles to be a central figure in the ridiculing of Canada.
Today I read that delegations from Ontario and Quebec are trying to differentiate their position from the federal government's, declaring they will not carry higher emission-reduction burdens for the sake of oil sands expansion in the Western provinces. Shameful!
Ontario Environment Minister John Gerretsen and Quebec Environment Minister Line Beauchamp seem quite prepared for Canada to carry higher emission-reduction burdens for China, India, Brazil and the rest of the so-called G77 developing nations, but not for their fellow Canadians in Western Canada. Shameful!
Little account seems to be taken of why Canada's emissions level is as high as it is.
We have an energy-intensive economy and live in the northern hemisphere where we need heating in the winter and cooling in the summer. In 2006, Canada produced 19.3 quadrillion British Thermal Units (Btu) of total energy, the fifth-largest amount in the world. Since 1980, Canada's total energy production has increased by 87 per cent, while its total energy consumption has increased by only 44 per cent. Almost all of Canada's energy exports go to the United States, making it the largest source of U.S. energy imports. Canada is consistently among the top sources for U.S. oil imports, and it is the largest source of U.S. natural gas and electricity imports. (Source)
Moreover, we are home to only 0.5 per cent of the world's population, but account for 1.7 per cent of the world's GDP. Canada is literally one of the world's powerhouses. Is it any wonder then that we are the source of two per cent of worldwide emissions?
I'll match Canada's real record of social and international responsibility against any member of the so-called G77 (which represents 130 developing countries) who are salivating at the prospect that their leaders—many of them corrupt dictators—will be stuffing their pockets to overflowing with the hundreds of billions they are demanding from the developed countries.
China—with thousands of billions of dollars in reserves is the third largest economy and first or second polluter and contributor to greenhouse gasses—has aligned itself with the G77 and stands waiting for a handout. Shameful!
Curious that the very changes the G77 demand of us would cripple our economy, yet, at the same time, they demand we contribute billions to their welfare.
Here's hoping MP for Calgary Centre-North, Canada's Minister of the Environment Jim Prentice and Prime Minister Stephen Harper hang tough this week at Copenhagen and add their much needed voices of reason to the negotiations there.
Return to Main page »
© 2009 Russell G. Campbell
All rights reserved.


text:
If you've been following along at home, you know we're setting up a beta testing site for LiveSide running on Azure, mirroring our main site. So far we've created a Windows Server 2012 R2 Virtual Machine (in Part One), and set that server up as a web, ftp, and mail server (in Part Two).
Now we're ready to install WordPress, and for that we're going to use Microsoft's free Web Platform Installer. Web PI, as it is sometimes known, will not only install the programs and features you want, but also take care of setting up permissions, and making sure you have everything you need to run the programs it installs.
To get Web PI, you can simply open up IIS and click on your server name (in our case betaliveside), and you should get a pop up window offering to install Web PI.
If for some reason you don't get the prompt, or aren't familiar with IIS yet, you can always open IE and navigate to
and install Web PI from there.
In either case, it's a very small download and only takes a few minutes.
Before we go further, as should be apparent to you once you open up the Web PI, it does a lot more than just install WordPress. There are lots of tools, frameworks, databases and more all available to install via the Web Platform Installer, and it should take care of any of the dependencies you'll need to get you up and running quickly, whether you're installing WordPress, or using your server for other tasks. Note that the Web PI may not have the absolute latest product updates available (WordPress, for example, installs as version 3.6 and you'll need to upgrade to 3.8 once you get all set up), but it's actively maintained and should be fairly current.
Once Web PI is installed, we'll just search for WordPress in the search box in the upper right corner:
Click "Install", and on the next screen Web PI will ask you to choose a database for WordPress. We suggest you just stick with MySQL. Choose a root password, and click continue. Web PI will list out all the programs and dependencies it's going to install and set up for you:
Agree to the terms and Web PI will begin the installation.
Again, after only about 3 or 4 minutes, the installation will complete and you'll begin setting up WordPress. For the purposes of this demo, we're going to install WordPress as the default website, in the localhost root (installing WordPress to /wordpress in the second box, "WordPress application name:" will install WordPress as a subdirectory to the default website, meaning you'll need to navigate to <site>/wordpress to get to it. In our case, we want to go directly to WordPress in the root):
You'll get a prompt asking you if it's ok to overwrite the installation folder, just agree, and in a few seconds IE will open http://localhost with the "famous 5 minute WordPress installation process". Fill out the info, and click "Install WordPress".
A few seconds after that, you should be logged in to WordPress!
Now, if you've jumped ahead and tried to access the site from outside the server, you're going to have problems, that is until you make a few changes to WordPress. You need to set a Home and Site URL, which you can do from the Admin Panel in Settings>General, or by opening up wp-config.php in your WordPress installation (which, if you've done everything by the book, should be at C:\\inetpub\wwwroot\wp-config.php (you may have to tell Windows to use Notepad to edit the file)), and adding these two lines just before the happy blogging line:
define('WP_HOME','http://<your azure server name>.cloudapp.net');
define('WP_SITEURL','http://<your azure server name>.cloudapp.net');
/* That's all, stop editing! Happy blogging. */
(We prefer editing wp-config, as it blocks these two settings from being overwritten from within WordPress, which could be very unfortunate!)
If you have a domain name you want to point at your new installation, of course you can do that, but you can continue to use the xxx.cloudapp.net name if you're in development. Remember that you're going to have to jump through some hoops if you're planning on working on your WordPress site in development and then using it under a different name in production, WordPress doesn't have a seamless way to make those changes, and it becomes more of a bother if you've already added content.
You also have an IP address for your server: you can find it in the Azure Portal, in the Virtual Machine section, in the Dashboard. It's in the right hand sidebar (the public IP). You'll need this to set up a DNS Zone if you're pointing a domain name at the web server.
So now we have a server deployed, set up as a web server, and running WordPress, all up in the cloud, woohoo! While we're most of the way there, we're still going to have to tweak our system a bit to get everything really working well. That's next up in our series.