Friday, December 18, 2015

Trump Calls For Partial Shutdown Of The Internet, Doesn't Understand What He's Saying

I have to admit that I find Donald Trump's presidential campaign fascinating. Or, rather, I find its survival to this point fascinating. What amazes me about it is that the Trump campaign exhibited a strong commitment to not actually putting forward any detailed policy prescriptions, except for a few general policy ideas that mostly conflict with the party whose nomination he's seeking. And those policy ideas he does express have generally been either despicable, impossible to implement, or both. Deporting six million Latin Americans? Yeah, that just isn't going to happen. Putting a hold, however temporary, on legal immigration by using a religious test to keep Muslims out of the country? That violates the very founding document an American President would be tasked with upholding. Also, it's disgusting.

But this is what you get when you have a candidate whose campaign is reflecting base anger rather than actual knowledge and know-how. And Trump's latest policy proclamation is further proof that potential voters are listening to someone who simply doesn't know what the hell they're talking about. If, like me, you're a sadist, then you too were watching the latest Republican debate on CNN the other night when Trump was asked several times if he would consider censoring the internet to combat ISIS. He eventually said he would, in a very Trump-ish way.

"I would certainly be open to closing areas where we are at war with somebody. I sure as hell don't want to let people that want to kill us and kill our nation use our internet."
So that nobody thinks this is pulled out of context, Trump was actually confirming what he'd said at a campaign stop days earlier.
"We're losing a lot of people because of the internet, and we have to do something," Trump said at a rally earlier this month. "We have to go see Bill Gates and a lot of different people that really understand what's happening. We have to talk to them maybe in certain areas closing that internet up in some way."
So, the policy prescription here is for all of us to caravan over to Bill Gates house and discuss how to close up that internet over coffee and scones. Putting aside the concept of the internet being "ours", as in America's, which is dumb to begin with, most people have taken Trump's idea to be one of two things: either we're shutting down the internet in Syria and Iraq, or we're filtering the internet both inbound and outbound on the American side to keep ISIS from reaching our citizens.

As some have already written, the concept of us shutting down the internet in Syria is unworkable.
This post claims it would be easy, just forge a BGP announcement. Doing so would then redirect all Syrian traffic to the United States instead of Syria. This is too simplistic of a view. Technically, the BGP attack described in the above post wouldn't even work. BGP announcements in the United States would only disrupt traffic to/from the United States. Traffic between Turkey and ISIS would remain unaffected. The Internet is based on trust -- abusing trust this way could only work temporarily, before everyone else would untrust the United States. Legally, this couldn't work, as the United States has no sufficient legal authority to cause such an action. Congress would have to pass a law, which it wouldn't do.

ISIS has to pay for telecommunications links to route traffic through other countries. This causes ISIS to share the IP address space of those countries. Since we are talking about client access to the Internet, these are probably going through NATs of some kind. Indeed, that's how a lot of cellphone access works in third world countries -- the IP address of your phone frequently does not match that of your country, but of the country of the company providing the cellphone service (which is often outsourced). Any attempt to shut those down is going to have a huge collateral impact on other Internet users. You could take a scorched earth approach and disrupt everyone's traffic, but that's just going to increasingly isolate the United States while having little impact on ISIS. Satellite and other private radio links can be setup as fast as you bomb them.
This is technical speak for "the internet routes around censorship", especially so when you're talking about an outside force attempting to flip the off switch on internet access to an entire geographical region. It's impossible as a practical matter and downright stupid strategically on top of it. Note that ISIS controlled territory is absolutely spilling over with innocents that have no interest in ISIS ruling their lives. Trump would have us cut off one of our few access roads to those people? Why? They're the ones we're going to eventually need on our side.

Well, since that idea of censoring the internet wouldn't work, maybe Trump was talking about putting the blocks in place on the America side. You know, by blocking access to and from certain parts of the web so that they don't reach American users and American users can't reach them. There is a model for this, of course, though it's a bit strange to watch a Republican candidate pitch a Chinese censorship model as policy.
Of course, if we really wanted to exclude ISIS from the US internet, there is a model of how to do it: China's Great Firewall. That's the censorship regime the Chinese government uses to try to keep subversive ideas like democracy and human rights out of their country. In principle, we could adopt the same tactics here in the United States, building a virtual wall around the United States and filtering all of the information flowing in and out of the country to try to prevent jihadists from communicating with Americans.

And for this to work, we'd have to not only prevent ISIS members from posting on US websites but also prevent impressionable Americans from browsing websites the US government deems too ISIS-friendly. This would, of course, be a massive violation of the First Amendment, and Americans are unlikely to stand for the US government deciding which websites they're allowed to read.
It also still wouldn't work, because, again, the internet routes around censorship. Anyone that believes that the great firewall of China hasn't been penetrated is laughably naive. It may have limited access, but it hasn't cut it off. And that's in China, where there isn't a built-in fundamental value into the history of the citizenry centered around free speech and free access to information. So, not only an inept idea, but against the very Constitution that Trump would be swearing to defend.

Look, we make a habit around these parts of not ragging on either Republicans or Democrats, because that isn't what this site is about. And fortunately, this post has done neither, because Trump is neither conservative nor liberal. He's just a guy whose only ideas seem to be censorious and authoritarian. Given his wish to censor the internet, I'd say he's disqualified himself from the office.



Permalink | Comments | Email This Story









Tuesday, December 15, 2015

Spanish Government Using Obstructionism And Bureaucracy To Nullify Transparency Law

For obvious reasons, many politicians hate the whole idea of allowing freedom of information requests. Former prime minister Tony Blair, whose government brought in the UK's Freedom of Information Act, said he bitterly regretted doing so. As he wrote in his autobiography:

Freedom of Information. Three harmless words. I look at those words as I write them, and feel like shaking my head till it drops off my shoulders. You idiot. You naive, foolish, irresponsible nincompoop. There is really no description of stupidity, no matter how vivid, that is adequate. I quake at the imbecility of it.
The problem for governments that hate the scrutiny that FOI laws bring is that it looks a bit suspicious to kill off the right where it already exists -- cynics might think they have something to hide. So the question politicians obviously ask themselves is: how can we throttle FOI laws without making it too obvious?

In the UK, the government hopes to achieve this by asking for a report on the FOI system from an "Independent Commission on Freedom of Information" that is largely made up of people who are no great friends of the idea, pretty much guaranteeing a negative outcome. In addition, the terms of reference of the Commission make it clear that the exercise is about reining in the public's right to information, not expanding it.

Here's how the Slovenian government is tackling the problem of that pesky FOI stuff -- make it expensive:

The European Federation of Journalists (EFJ) together with its affiliate, the Slovenian Journalists’ Association (DNS), Transparency International Slovenia and Access Info Europe, have today called on the Slovenian Parliament to reject a last-minute amendment that permits public officials to charge for their time in answering freedom of information requests, something that would be direct interference with the right of journalists and NGOs to access information.
But these approaches pale in comparison to the cunning scheme adopted by the Spanish government. Access Info Europe has just announced that it is closing down its online service designed to help people make FOI requests in the country. Here's why:
It is with huge reluctance that Access Info Europe and Civio today announce the closure of the request website "Tu Derecho a Saber" (Your Right to Know) because the need to have an electronic ID and the refusal to respond to emails is making it impossible to help the public send requests.

In the first year of implementation of Spain’s much-criticised transparency law, we processed requests manually, using Civio’s electronic ID to send them via the central Transparency Portal’s complex verification systems, something that was taking up to a few hours per day.

On 10 December 2015, as the law comes into force at the regional and local level, we are faced with the prospect of hundreds of different systems across the country. To make things more complex, the design of the regional and local portals, the ID system required, and the online forms used, differ from one administration to the next.
You have to admire the Spanish government's sense of irony here. Freedom of Information, a system designed to make governments more transparent, is being strangled and rendered almost unusable by the opaque and labyrinthine bureaucracy that has been built around it. Tony Blair would be proud.

Follow me @glynmoody on Twitter or identi.ca, and +glynmoody on Google+



Permalink | Comments | Email This Story









Lightbulb DRM: Philips Locks Purchasers Out Of Third-Party Bulbs With Firmware Update

The world of connected devices is upon us and things have never been better. Criminals can access your email account by breaking into your fridge. Your child's toys and your television record your conversations and send them to manufacturers' servers, where criminals are (again) able to access them. Your home thermostat goes HAL 9000 and attempts to set your house on fire. And, now, your lightbulbs won't do the one thing you expect them to do: produce light.

Purchasers of the Philips Hue "smart" ambient lighting system are finding out that the new firmware pushed out by the manufacturer has cut off access to previously-supported lightbulbs. (h/t William Neilson Jr.)

Philips just released firmware for the Philips Hue bridge that may permanently sever access to any “non-approved” ZigBee bulbs.

[...]

The recent change seems to suggest any non-Philips bulbs from manufacturers such as Cree, GE, and Osram will not be supported in many situations, whereas “Friends of Hue” branded product are. At the time of publication, it’s unclear whether 3rd party bulbs will stop working immediately after the firmware update or if they may only become inaccessible after the bridge is reset. We’re also not sure if being “reset” means rebooted or factory reset. This appears to apply to both the round v1 bridge and square v2 HomeKit-compatible bridge after the latest firmware update is applied.
ZigBee is the underlying standard that controls these smart lighting systems.
ZigBee is the open, global standard of choice for connected lighting applications providing ease-of-use and low-cost installation and maintenance for both consumers and business.
Philips uses ZigBee, which should mean any bulbs compatible with this standard will work with its Hue fixtures. Not anymore. The firmware update removes this support, limiting this "open, global" standard to Philips' own bulbs and those it has designated as "Friends of Hue."

Needless to say, purchasers aren't happy.
Literally. Philips has just slapped fans like us in the face and kicked interoperability out the door. Without any communication they delivered a new firmware to the system that disables adding products that they don't approve of. Basically they are banning other Zigbee Light Link products despite the fact that they are a Connected Lighting Alliance member whose mission is to promote interoperability.

As it seems (and unless this is just a huge mistake on Philips' side), they have without a warning turned their open product into a walled garden. They have also destroyed the value of the solutions that the customers have set up based on Philips' promises.

And the worst thing is that Philips has done this to their most enthusiastic fans. To the early adopters. To those who enthusiastically recommended the system to their friends.
Philips only began delivering nonsensical statements about its removal of previously-existent functionality after the complaints began to roll in. And like so many other companies that have wielded this DRM-esque tactic against their own customers, the excuses offered may as well just read "because this makes us more money." Seriously, are any of Philips' pissed off purchasers really going to believe this excuse?
While the Philips Hue system is based on open technologies we are not able to ensure all products from other brands are tested and fully interoperable with all of our software updates. For guaranteed compatibility you need to use Philips Hue or certified Friends of Hue products.
TL;DR: While technically an open system, we've closed it because $$$. These early adopters have already performed the heavy lifting on the compatibility end. They're the ones who have road-tested ZigBee-compliant bulbs and reported their findings to others. So, when a company removes support (by pushing a firmware update without prior warning) for compatible bulbs and claims the issue is "compatibility," it's so blatantly false as to be laughable. Unless you can't laugh, because you already bought one.

And Philips is apparently incredibly socially awkward. Trying to find which other bulbs are supported as "Friends of Hue" via Philips' websites is pointless. One just leads you to a page informing you that you can use Siri to control your lights. Searching for "Friends of Hue" brings you to another Philips website… which only lists products sold by Philips. In fact, while the "program" appears to allow third parties to sell products for its Hue line, it appears that every new development is sold under the Philips brand, which means that the competitiveness the phrase "Friends of Hue" implies is, in reality, no competition at all.

A walled garden is still a walled garden, no matter how beautifully lit it is. Philips has chosen to screw paying customers by locking them out of their choice of bulbs in pursuit of maximum profitability. There's nothing smart about that decision.



Permalink | Comments | Email This Story









Thursday, November 26, 2015

Turing Refuses To Lower Cost Of Daraprim, Hides News Ahead Of Thanksgiving Holiday

When last we checked in with Martin Shkreli -- founder of Turing Pharmaceuticals and the personification of everything that's wrong with the pharmaceutical industry and mankind -- he was feebly defending his company's decision to jack up the price of a 60-year-old medication some 5000%. Shkreli became America's least liked human being after his company increased the price per pill of Daraprim (used by both AIDS and cancer patients) from $13.50 per pill to $750 per pill. After relentless criticism, Shkreli appeared to backpedal, claiming last September the company would lower prices:
"We’ve agreed to lower the price on Daraprim to a point that is more affordable and is able to allow the company to make a profit, but a very small profit,” he told ABC News. “We think these changes will be welcomed."
Yeah, or not.

Hoping to bury any criticism ahead of the Thanksgiving holiday, Turing released a dodgy press release on Wednesday implying the company had finally seen the error of its ways and would be reducing the cost of Daraprim. Except it's not actually doing anything of the sort. While the company will offer hospitals a 50% discount (now only a 2500% mark up) and is engaging in a few superficial efforts most companies already offer via their patient assistance programs, the press release buries the lede in that the core price of Daraprim isn't going anywhere.

And, just to add insult to injury, a company spokesman insists that's a good thing because (I kid you not) lower drug prices don't benefit patients:
"Drug pricing is one of the most complex parts of the healthcare industry. A drug's list price is not the primary factor in determining patient affordability and access. A reduction in Daraprim's list price would not translate into a benefit for patients."
There's nothing complex about being a raging asshole. There's also nothing complex about a former hedge fund manager jacking up the price of an essential drug 5000% (as is happening with many previously-inexpensive generics), pretending he'd seen the error of his ways, then feebly trying to hide his total lack of integrity ahead of a long holiday weekend.

Permalink | Comments | Email This Story









FCC Makes It Clear It Thinks Some Net Neutrality Abuses Are 'Innovative' And 'Pro Competition'

If you were wondering whether or not the FCC would bless T-Mobile's new controversial zero rating plans, agency boss Tom Wheeler has given a pretty good indication of which way the agency is leaning. As covered previously, T-Mobile's been aggressively experimenting with zero rating -- first by exempting only the biggest music services from its usage caps -- then more recently by announcing Binge On. Binge On exempts video services from T-Mobile's wireless data caps, but "optimizes" those streams, limiting them to 480p.

T-Mobile tap danced around net neutrality rather cleverly, by making the option something users can disable, while stating that any company that wants to participate can join, for free. The problem remains one of precedent: by opening the doors to carriers as middle men in this fashion, you're fundamentally changing the way the internet works. Companies now need to seek special permission from ISPs to ensure their traffic is on a level playing field. A small streaming company in Cleveland, for example, may not even realize it's being discriminated against, or that it needs to contact T-Mobile to stop it.

The pitfalls are nuanced, and consumers have generally been oblivious to the bad precedent thanks to the lure of "free data" (that's not really free, since usage caps are entirely arbitrary constructs to begin with). And now we can add FCC boss Tom Wheeler to the list of folks who apparently think abandoning a truly open internet is just a nifty idea:
"Wheeler, in a press conference following the FCC's November meeting, appeared to endorse the Binge On offering, calling it pro-competitive and innovative. "It is clear in the Open Internet order that we are pro-competition and pro-innovation and clearly, this meets both of those criteria," he said. "It is highly innovative and highly competitive."
But apparently to appease the six of us that see the potential pitfalls here, the FCC boss then turned around and suggested the agency will be keeping an eye on the program:
"He said the FCC would keep an eye on Binge On per the general conduct standard in those new open Internet rules, which allows the FCC to look at such business models on a case-by-case basis.

That rule, he elaborated, says a carrier "should not unreasonably interfere with the access to someone who is trying to get to an edge provider and an edge provider who is trying to get to a consumer. So, what we are going to be doing is watching Binge On, keeping and eye on it, and measure it against the general conduct rule."
Again, T-Mobile's program may not be the most offensive net neutrality violation ever seen, but the precedent remains horrible. While T-Mobile may be more consumer friendly than other carriers, the simple act of allowing zero rating opens the door to carriers like AT&T and Verizon that are decidedly less so. Meanwhile, Wheeler may be replaced by an FCC boss with an even more flexible interpretation of "innovation" (assuming they're not busy trying to dismantle the rules entirely). This potential for preferential discrimination is why Chile, Norway, Netherlands, Finland, Iceland, Estonia, Latvia, Lithuania, Malta and Japan all moved to prohibit zero rating in some fashion.

The FCC did e-mail me to note that the "Commission staff is working to make sure it understands the new offering," but Wheeler's comments (and previous FCC statements) make it pretty clear that the agency sees usage caps and zero rating as little more than creative pricing. In other words, the agency's telling ISPs: violate net neutrality, just be creative about it. As T-Mobile's program took root, the magenta-hued character that is T-Mobile CEO John Legere was quick to applaud himself:
I don't know. The slow but steady erosion of a healthy, neutral internet to the sound of thunderous applause?

Permalink | Comments | Email This Story









Tuesday, November 24, 2015

DailyDirt: Did You Wash Your Hands?

Washing your hands with soap is an activity that most Americans probably take for granted. However, even doctors need to be reminded sometimes how important hand washing with soap is. This isn't just a conspiracy from the big "soap industry" for people to use more soap. Plenty of soap is bought and wasted, but hopefully, more people will use soap appropriately and wisely around the world.... Before you go off to wash your hands, take a look at this holiday gift guide for some awesome deals at the Techdirt deals store.

Permalink | Comments | Email This Story