We are developing the social individualist meta-context for the future. From the very serious to the extremely frivolous... lets see what is on the mind of the Samizdata people.

Samizdata, derived from Samizdat /n. - a system of clandestine publication of banned literature in the USSR [Russ.,= self-publishing house]

Privacy? What privacy?

With yet another long international flight stretching ahead of me, I finally have time and boredom enough to write a good deal more on network security issues than I have in the past. I have been at least peripherally involved in the area (self defense of my own and customers business networks) for quite some time.

There has been a sea change in the threat model over the last few years. The underworld of the Gibson novel has come to pass although things are perhaps not so dramatic as in the stories. Reality does not fit neatly between two covers.

I recently wrote about a possible case of industrial scale industrial espionage. There is much evidence in security literature that this is occuring and KGB/FSB bugged Russian hotels are not the only place one need worry. Everyone is getting into the game. For those who might be interested in such things I recommend a Dartmouth paper “CyberWarfare: An Analysis Of The Means And Motivations Of Selected Nation States”, Bilko And Chang, December 2004.

While reading Bilko and Chang a number of other strands of thought came together. It puts a whole new light on the recent move of major internet equipment suppliers into Chinese production facilities. Among these, two are of particular note.

  • IBM Thinkpads: the laptop of choice of many network professionals.

  • Cisco Routers: These are ubiquitous in the infrastructure of the Internet from major backbone to small office.

Then there is the Lynn debacle. Michael Lynn gave a presentation at DEFCON this last summer in which he showed beyond a shadow of a doubt Trojans can be inserted into Cisco backbone routers… and by extension most other brands as well. His slide presentation was not of a specific exploit but of a generic method.

Cisco and ISS, the company from which he had just resigned, went totally over the top. They sent a crew to the DEFCON to remove pages from the programs. Afterwards they threatened to sue Michael Lynn unless he agreed to allow their forensics people to cryptographically wipe anything to do with the the research from his disk drives. They sent nasty letters to all and sundry who posted his slide set. They tracked down and took possession of every bit of video of the session they could get their hands on. Despite their best efforts to pull a “1984”, they failed.

It was not just failure, it was total, abyssmal, embarrasing, hang-your-head you idiot failure. Instead of a few interested hackers and security analysts with copies stored in dusty corners of the internet they made it a slashdot affair. Absolutely everyone has the document now. I will not post a link here because if you really are interested you already have a copy and if you do not you can find it easily enough.

Another reason these actions were foolish on the part of Cisco brings me back to the central point of this article. The Cisco heap smash attack described by Michael Lynn was only an improvement on already published literature… and it may have already been implimented… by Chinese hackers.

→ Continue reading: Privacy? What privacy?

Friends of Dottie

I promise only mild amusement, but sometimes mild amusement is what one needs. And there’s a subtle mordancy underneath.

The latest splendid animation from Will Flash for Cash Productions in aid of the UK campaign against ID cards is here, and will explain the title of the post.

For those who missed it, their earlier biting attack on Mr Secretary Clarke and the glorious scheme using a cute musical puppy is here.

Welcome to a strange world. Sound, and familiarity with British political figures, most definitely an advantage.

Has Britain just joined China in creating panoptic internet survaillance?

I have just heard a rumour from a usually reliable source that effective either yesterday or today, the UK state has put on-line some system by which all access to the internet in the UK now goes through a government server system to enable them to monitor, well, everything you do on-line. Is the UK state now rivaling China in its efforts to control and monitor its subject people?

Has anyone else heard anything about this?

Meanwhile officialdom ensures some people will embrace ID controls with gratitude

Spiked carries a fascinating, if frightening, piece by Charles Pither, a private doctor, on the invasive requirements of galloping regulation on those working in the healthcare sector. Just being able to check and list their employees (and their own) slave-number online will no doubt come as a relief.

What I hadn’t appreciated, until the man came to make his inspection, was all the personal data that we needed to keep for our staff (in a locked cabinet, of course). Two references, a recent photo, a copy of their passport, copies of their qualification certificates, a curriculum vitae with explanations for any gaps, a copy of their contract and job description.

Including the cleaner? Yes, including the cleaner. ‘It’s not me who makes the regulations’, said the man from the HCC. ‘The onus is on you to comply with the statutory requirements as set out in the standards of care regulations.

Read the whole thing, as they say.

What’s most disturbing is how suddenly these bureaucratic personal checks have sprung up, and how it has happened with no resistence. The Health Care Commission was created by the Health and Social Care (Community Health and Standards) Act 2003, and started its interfering on April 1st 2004. The Criminal Records Bureau was established under the Police Act 1997, but its functions have been rapidly widened, in legislation on children, education, financial services, and health, but also notably by a series of Exceptions Orders to the Rehabilitation of Offenders Acts that have made the idea of a spent conviction (an old, minor one you need not acknowledge) pretty much obsolete. The operative Control of Substances Hazardous to Health Regulations are dated 2002.

Never mind 1890, it would be nice to get the British state back to the size it was in 1990.

Divided by more than a single language

Here is an interesting contrast between the UK and the US.

The Boston Globe, a Democrat newspaper in a Democrat town, is attacking President Bush’s Supreme Court nominee, John Roberts. Nothing particularly exciting or shocking about that. You might not agree with them, but it’s legitimate, and that is how things are done there.

What intrigues me is the manner of the most recent attack:

Roberts, as Reagan aide, backed national ID card, yells the headline.

It is plainly the Globe’s assumption that its readers will take this is a sign of a fundamentally illiberal personality, not fit to be entrusted on the bench with the defence of American liberties. British popular assumptions, even in the liberal press, have a long way to go. It is still not appreciated much here that state control of personal identity is a big deal, never mind that its fans are poisionous advocates of evil.

No ID? NoIDea

Hate the idea of ID cards? Do not keep your views to yourself.

The beast is wounded but not dead yet

The government’s plans to impose ID cards on British people get wobblier by the day and at last they seem to realise that there is no point in pretending otherwise. Nevertheless, it is important for everyone to remember who cast their votes in Parliament and thereby allowed us to get this close to a civil liberties calamity in the first place. We are by no means in the clear yet but it does seem that things are going our way to some extent and so it is important to kick and stamp on this beast hard whilst it is down.

If we are to avoid this issue coming back to haunt us again and again, we need to make sure that forgiveness is left for the afterlife and use the voting record to MPs who voted in favour at any time to question their fundamental morality and trustworthiness, regardless of party. It is essential not just now but in the foreseeable future to make this issue as fraught and unpleasant as possible for all concerned. If we can make ‘the ID cards issue’ synonymous with political calamity, methinks politicos might just avoid the issue in favour of lower hanging fruit.

NO2ID’s Poster Girl

I implied here that I would let Samizdata readers know when a new, more inclusive 😉 anti-ID-card pledge was up and running. It is now.

We are lucky to have the charming former stand-up Franky Ma as the pledge leader. As the covers of more consumer magazines, in more countries, than it is comfortable to imagine attest, you cannot go far wrong associating an attractive young woman with your product.

You can give your word to support the nearly 11,000 ID refuseniks here and you can support NO2ID itself, as ever, here.

Not heroic but necessary: 10,000 minutemen

I cannot claim to have been brave very much in my life. And I do not know that I am being brave now. But I do know that I am now committed along with more than 10,000 others to refuse to register with the National Identity Register, whatever the Government may now choose to do to me.

The first NO2ID “Refuse” pledge through the MySociety PledgeBank site has been successful. 10,000, and counting, British people value freedom enough that they are prepared to become an un-person, rather than submit to lifelong supervision under the fallaciously named “ID card” system that the Government hopes to introduce. In four weeks we have raised promises of £100,000 for legal defence. And people are still joining in.

In a few days we will launch a bigger pledge, a million-pound-plus fighting fund, for everyone to subscribe to who supports the refuseniks, but cannot (because they have dependents or professional obligations) join in the identity strike. We need 50,000 people willing to pledge £20 if the bill passes. Look out for it.

And to the American readers of this blog I say: Help us now. If we go down, you are next…

NO2ID - Stop ID cards and the database state

“I will not be pushed, filed, stamped, indexed, briefed, debriefed, or numbered.
My life is my own.”

British born terrorists will be entitled to ID cards

Now that we know what everyone except Tony Blair suspected (that the suicide bombers were probably British born or at least legal residents), perhaps it is worth noting that had mandatory ID cards been in force, they would have been perfectly entitled to avail themselves of one each.

Yes, I can see how this will help stamp out terrorism. Right? Right?

And we need ID cards why exactly?

So London was attacked and hundreds were killed or wounded by Islamic fanatics (showing incidently why we are utterly right to be fighting these vermin wherever they are to be found)… and having ID cards would have made not one damn bit of difference.

Next time some pontificating dissembling jackass holds up ‘terrorism’ as why Britain need these odious things, I am likely to spit in their face.

Chips with everything

As strange as it may sound, I still maintain a smidgeon of sympathy with all those wretched, deluded souls who sincerely believed that technology was going to liberate us all from the leviathan. I am but fearful. They, on the other hand, must be both fearful and crushed:

The British government acknowledged Monday that it would consider using implanted ID chips to track sex offenders, raising the specter of forced chipping.

While not yet a reality, implants that can remotely check bodily functions and location are just around the corner: Microchips are being developed for a variety of health functions, and a Florida company is planning to develop a prototype of an implanted GPS device by the end of the year.

When the Food and Drug Administration green-lighted the use of ID chips in humans last month, civil liberties advocates worried that people could be forced to get chipped as a condition of employment or parole. News that the British government may implant sex offenders in the future fanned those fears.

Of course, it will start with convicted (or maybe even suspected) child molesters. Who could possibly object to that?