Thursday, March 10, 2016

Senator Feinstein Revives Stupid Idea That Internet Companies Are 'Materially Supporting Terrorism' If ISIS Members Use Their Sites

Last year, FBI Director James Comey floated a ridiculous idea that retweeting ISIS tweets could be seen as "material support" for terrorism. Indeed, an American teenager got sentenced to 11 years in jail for pro-ISIS tweets, with the "material support" being that some of those tweets linked to pages that taught people how to use Bitcoin. Some have taken this idea even further, and argued that internet companies can be slapped with "material support for terrorism" claims or charges if they let ISIS members or other terrorists make use of their services.

This is ridiculous for many, many reasons, not the least of which is that (like in the encryption debate) it seems to presume that there's some algorithm to magically determine who is good (not a terrorist) and who is bad (terrorist!). And just like ridiculous and impossible arguments for "kicking ISIS off the open web" -- it would be ridiculously counterproductive. Not only would it be ridiculously costly to internet companies, but it would actually take away a major source of intelligence about terrorist groups, since they often reveal useful things on social media.

But guess who's seriously thinking about looking to see if it's possible to slap "material support of terrorism" charges on internet companies? Why, it's a Senator who actually is supposed to be representing many of their interests as California companies, Senator Dianne Feinstein. Jenna McLaughlin, a national security reporter for The Intercept, noted that Feinstein floated the idea this week, as if Feinstein had just thought of it:
We've already discussed how dumb an idea this is (even more so that it comes from a California Senator), but ACLU deputy legal director Jameel Jaffer had an excellent response as well, highlighting the sheer stupidity of Feinstein's suggestion:


Permalink | Comments | Email This Story











Monday, February 22, 2016

DailyDirt: Nuclear Power Making Progress?

The problems with nuclear power via fission have obviously not been overcome by technology (or politics). European countries have started to back off nuclear power, and the US isn't expanding its nuclear power capacity in the near future. However, nuclear power isn't dead yet. Maybe some people think it should be, but what if someone figures out how to prevent meltdowns and burn nuclear waste as fuel? After you've finished checking out those links, take a look at our Daily Deals for cool gadgets and other awesome stuff.

Permalink | Comments | Email This Story











Thursday, February 18, 2016

Yes, The Backdoor That The FBI Is Requesting Can Work On Modern iPhones Too

So... over the past couple days, plenty of folks (including us) have reported that the backdoor demanded by the FBI (and currently granted by a magistrate judge) would likely work on the older iPhone model in question, the iPhone 5C, but that it would not work on modern iPhones that have Apple's "Secure Enclave" -- basically a separate chip that stores the key.
Plenty of reports -- including the Robert Graham post that we linked to, and a story by Bruce Schneier -- suggested that an attempt to follow through with the FBI's request in the presence of the Secure Enclave would effectively eliminate the key and make decryption nearly impossible.

However, earlier this morning Apple started telling a bunch of people, including reporters, that this is not true. Effectively they're saying that, yes, the new software could update the Secure Enclave firmware and keep the key intact -- meaning that this backdoor absolutely can be used against modern iPhones. One of the guys who helped design the whole Secure Enclave setup in the first place, John Kelley, has basically said the same thing, admitting that updating the firmware will not delete the key:


A blog post by Dan Guido -- which originally asserted that the Secure Enclave would be wiped on update -- now admits that's not true and, yes, this backdoor likely works on modern iPhones as well:
Apple can update the SE firmware, it does not require the phone passcode, and it does not wipe user data on update. Apple can disable the passcode delay and disable auto erase with a firmware update to the SE. After all, Apple has updated the SE with increased delays between passcode attempts and no phones were wiped.
I've asked some security folks if it's possible that future iPhones could be designed to work the way people thought the Secure Enclave worked, and the basic answer appears to be "that's a fairly difficult problem." People have some ideas of how it might work, but all came back with reasons why it might not. I asked one security expert if there was a way for Apple to build a more secure version that was immune to such an FBI request, and the response was: "I don't know. I sure hope so."

Update: I should add that this backdoor still just makes it easier for the FBI to then try to brute force a user's PIN or passcode. If the user sets a significantly strong passcode, you have a better chance of protecting your data, but that's on the user (and, also, many users likely find it hellishly inconvenient to have a strong passcode on their phone).

Permalink | Comments | Email This Story











Tuesday, February 9, 2016

DailyDirt: Making A Road Trip Across The US...

The Cannonball Run plot of racing across the US has inspired some drivers to set illegal records -- though the concept was started in 1933 by Edwin "Cannonball" Baker who drove from NYC to LA in 53 hours (and popularized in the 70s as a protest against highway speed limits). We've previously mentioned Alex Roy making the trip in about 32 hours, but more recently, Ed Bolian and a couple other drivers/passengers did it in just 28 hours and 50 minutes. If you've always wanted to drive across country in some insane way, check out some of the records that other people have set. After you've finished checking out those links, take a look at our Daily Deals for cool gadgets and other awesome stuff.

Permalink | Comments | Email This Story











Wednesday, February 3, 2016

DailyDirt: Who Doesn't Like Cheap Oil?

For a pretty good stretch, the price of a barrel of oil was about $90-$100, but now the price is around $35 or so. That's a good bargain for some consumers, but on the other hand, thousands of oil workers aren't working and plenty of companies that bet on oil prices staying high are going out of business. The simplified explanation is that the current oil supply exceeds the demand for it -- and it takes some time/politics for oil production to adapt. Oil prices might start to go back up significantly in 2017, but in the meantime, there are about 68 oil projects around the world worth about $380 billion that are on hold for a while. After you've finished checking out those links, take a look at our Daily Deals for cool gadgets and other awesome stuff.

Permalink | Comments | Email This Story











Wednesday, January 13, 2016

Comcast-Funded Think Tank: Broadband Usage Caps Make Netflix Streaming Better. You're Welcome.

As we've noted for some time, the broadband industry (and all the think tanks and politicians that work for it) have spent the last few years trying to vilify Netflix. That's primarily due to the company's support of net neutrality, but also its opposition to anti-innovative and anti-competitive broadband usage caps. These attacks usually start with the criticism that Netflix now dominates around 37% of peak downstream traffic (as if that's a bad thing), followed by some bizarre and unfounded claim that Netflix should be forced to "pay its fair share" (read: give us a cut of revenues despite us having no legitimate claim to it).

While these assaults had quieted down for a while, Daniel Lyons (not the fake Steve Jobs Daniel Lyons) and the American Enterprise Institute last week came out with a bizarre missive on broadband caps, in which Lyons tries to claim that broadband usage caps are a great way to force Netflix "to become a better corporate netizen." As noted above, Lyons starts by highlighting how Netflix consumes a huge amount of peak Internet capacity:
"Netflix has long reigned as one of America’s most significant Internet-traffic generators. Network equipment company Sandvine reports that the video-streaming company is by far the leader in peak period traffic, responsible for more than 33 percent of all fixed Internet traffic during peak hours — more than twice the share of the next-biggest competitor, YouTube. This means that at times when the Internet is most susceptible to congestion, Netflix alone is responsible for one out of every three packets sent through the network."
For clarity it should be noted that Netflix customers are responsible for this consumption. Netflix consumers who, in the United States, already pay more for bandwidth than consumers in most developing countries. Netflix in turn not only pays for bandwidth, it now pays ISPs for direct interconnection to their networks, after ISPs were accused of intentionally degrading peering points to force its hand. Everybody is paying, and paying, and paying some more -- so it doesn't matter one iota how much bandwidth Netflix is consuming -- because consumers are demanding and (probably over)paying for it.

Back in December, Netflix announced it was making some changes to the way it intelligently encodes its titles. This shift involves encoding titles differently depending on type and genre, since cartoons (with static backgrounds) technically eat less bandwidth than live action movies. The move was prompted by one thing: this month's expansion by Netflix into 130 more countries. Netflix's primary concern? Making sure that networks -- especially of the mobile variety in developing nations -- would have a more consistent and trouble-free viewing experience. It was just a smart, albeit admittedly belated shift in improving the way Netflix operates.

Apparently seeing a flimsy logical opportunity for the ages, Lyons tries to claim that Netflix was forced to improve its efficiency -- solely thanks to the wonder and glory of broadband usage caps:
Usage-based pricing forced Netflix to be more mindful of the size of its digital footprint. Because they face potential overage charges, consumers are becoming more aware of the amount of bandwidth their online activities consume. This leads edge providers such as Netflix to develop more efficient methods of delivery, in response to increased consumer sensitivity. The result is a more efficient operation that benefits everyone by freeing up network capacity — which is like broadband providers improving speeds, but without having to install new network lines."
That's an astonishing, incredible load of bullshit.

Netflix has long allowed capped users to adjust streaming quality to manage consumption, but to claim caps are to thank for these improvements is aggressively dishonest. Lyons and his friends at the AEI are funded by Comcast, the same company that's aggressively expanding utterly unnecessary usage caps on millions of consumers. Those caps have one overarching function: to raise rates on uncompetitive markets, give Comcast's own services an unfair advantage, and to protect Comcast TV revenues from Internet video.

There's clearly some worry on the part of Comcast and its think tank friends that the FCC will finally get off its ass and begin pressing Comcast on its anti-competitive abuse of usage caps, but if this is the best argument the AEI can come up with, Comcast may want to reconsider its disinformation budget for 2016.

Permalink | Comments | Email This Story