Posts Tagged ‘security’

Some dissembling required

Monday, February 28th, 2011
some-dissembling-required

Here’s what I learned this week: People in the United States are waging a war of disinformation to thwart terrorists. They’re writing technical articles about things that won’t work and posting them on unsecured computers in an effort to lure spies, would-be bombers and other anarchists.

The computers are called honeypots. The instructions on sensitive topics act as bait to lure would-be terrorists into hacking the computers and stealing bogus information, as one tech observer who sells the servers puts it.

Honeypot farmsWhile this seems alarming to most of us it’s apparently nothing new to the tech community. The term honeypot may have evolved from the sexual entrapment practiced by spy agencies during World War II. The computers apparently were first used to counter attacks by monitoring the behavior of hackers once they obtain access to a system. This comes in handy when you’re trying to stay one step ahead of people who code computer viruses and other malware.

Honeypots make useful tools for businesses and governments looking to plug vulnerabilities in their networks, or spread disinformation.

A search of Slashdot.com turns up dozens of articles about honeypots, including one that sets the tone for this type of counterterrorism: “Honeypots should have no production value, and hence should not see any legitimate traffic or activity. Whatever they capture is therefore malicious or unauthorized.”

Or as eweek.com puts it, “Its sole purpose is to detect and track any interactions with it, since any such interactions can be assumed to be a probe, scan or attack.”

As a former journalist I dislike disinformation. But as someone who travels on business, I like the idea of landing in one piece. Uncomfortable but probably safe. Aside from the erosion of privacy and freedom, that balancing act could define modern life.

Who owns you?

Tuesday, September 7th, 2010
who-owns-you

The Who once asked “Who are You?” an existential question couched in a pop-song wrapper. In the digital age the more pressing issue is who owns our data, both the information we buy and the data we create.

We face at least two issues: access and privacy.

Apple’s approach to digital rights management provides a nuanced example of the issue of access to the data we buy. When we purchase music on a CD we buy the right to listen to that music in any form on any device—instant access. When we buy a song from iTunes, Apple restricts the mobility of that material: we can synch our music collection with up to five computers but we can’t transfer the songs to an unauthorized computer.

web_boxCloud computing—the process where the data and the application that creates and displays it reside on a computer somewhere in the ether—provides an example of both issues. Here we own the data and rent the application and server space, or get it for free thanks to advertiser support. But if we can’t connect to the Internet, if we don’t have continuous access, ownership means little. And if the data isn’t locked down on our servers, is it secure?

It’s the second issue, that thorny combination of privacy and security, that causes the most concern. If access to the data we buy or create is restricted by law or logistics, can we say that we fully control it? Who does? The people who sell the data, or the companies that house it?

If data is your lifeblood, who owns it—and you?