FOI Topics and Links of the Week
March 8th, 2010 | by Jennifer | Published in cloud, cybersecurity, Facebook, Future of the Internet, ubicomp | 3 Comments
A roundup of happenings that bear on the issues in The Future of the Internet –
Canadian Android Carrier Forcing Firmware Update. A Canadian carrier wanted users to download a firmware upgrade that fixed a glitch prohibiting users from dialing 911, so it made the upgrade mandatory. Seems reasonable. But it bundled in an update that “prevent[ed] users from ever gaining root access to their phones.” Sneaky—one more way that contingent generativity really is contingent, even for savvy users.
Biggest Mobile Operators Join Forces On App Store Project. A few dozen mobile operators have come together to try to create a mobile developer’s dream: a set of standards for applications that would work across phones and mobile OSes, and a single app store (with a single approval process) in which to sell those apps. This could be a good thing if it worked—developers might have more say in big-picture application development, and single carriers or hardware manufacturers would have less ability to be a development chokepoint. (It would also be nice for consumers, generally making the smartphone world look more like the PC world.) I’d be more excited if efforts to create uniform mobile standards weren’t so difficult and historically so unsuccessful.
Demand for Android Phones Makes “Monstrous” 250% Jump. Another developer’s dream (perhaps), Android, is seeing significant growth. “Android has finally caught consumer interest,” according to a research firm. Also, Android users are almost as happy as iPhone users with their phone (72% to 77%).
Big Brother Is Here, Families Say. This story is so bizarre, I don’t know what to make of it. A school in Philadelphia gave out laptops without telling the students or their families that the cameras could be remotely activated. The idea was to use the cameras if the laptops were stolen, but one family claims a camera was used to spy on a student. If true (details are cloudy), that would (a) be mind-bogglingly dumb on the school’s part, and (b) reminiscent of this (ubiquitous cameras) and this (remote activation) in the book. Check out the Onion’s take here.
Microsoft takes the StopBadware Approach Further. Last week, MS obtained a restraining order to deactivate 277 domain names it had linked to the Waledec botnet. Severing the connection between drones and the mothership goes beyond tactics employed by the Google/StopBadware Project. It effectively makes the targeted websites invisible, instead of slapping a prominent warning label on them. Although MS attempted to cut off only addresses used exclusively for spam, it appears that the single U.S.-based target may be a legitimate site, if a hapless drone. While owners have the opportunity to reclaim their addresses, MS’s actions raise questions of proportionality and whether cooperation and information-sharing between prominent Internet denizens, such as MS and Google, if possible, would result in more efficient and just solutions. Their approach also highlights the tension between the need for secrecy to effectively attack the spam network and the notice usually required prior to legal action.
One step behind. Thesixtyone.com, a site that allows the public to listen to, rate, and buy largely indie music, is looking for a hacker that can break up the bot-powered voting rings seeking to game their democratic rating system. A laudable goal, but one spammers have already begun to circumvent by using real people instead of bots.
Passing through the cloud. Katherine Boehret recently reviewed Pogoplug, a device that makes files web-accessible without actually storing them in the cloud. While this type of solution doesn’t address data-portability concerns surrounding extraction of personal data in usable form – to allow seamless transition between social networking sites, for example – it does let the user to maintain more control over data instead of entrusting it entirely to the cloud. This control prevents third parties from holding data hostage and from losing, allowing government access to, selling, or mining personal information; but users can still access their files from almost anywhere.
Please think twice. A website launched last week illustrates the risk of publicly sharing information online. Pleaserobme.com aggregates Twitter posts that contain location-sharing information from Foursquare in a chronological list to show the potential for exploitation by Internet users with malicious intentions. While it’s probable that only a small set of burglars will take advantage of this information, the site is an example of a grassroots campaign to raise awareness of potential problems for users who don’t recognize how the information they freely give can be mined. Whether this awareness leads them to alter their behavior or simply “get over it” is up to the individual.
Facebook messaging glitch. A subset of Facebook users experienced firsthand the risk of entrusting control of personal messages to third parties. Last Wednesday, FB accidentally sent the private messages of a “small number” of users to strangers instead of the intended recipients. Unlike well-publicized security breaches of credit card companies and banks, the misdirected messages were largely personal in nature and contained little identifying information, so the risk of actual injury is low. But that may not be very comforting to those who had intimate details divulged to strangers. Some of the accounts indeed provoke a gut-level enquiry as to how privacy violation should be measured. On the flip-side, the occasional misrouting of a letter by the Post Office doesn’t give rise to much concern – and in that case the sender is usually clearly identifiable – so why should electronic mail be afforded greater scrutiny?
—By Jennifer Halbleib and Elisabeth Oppenheimer


March 8th, 2010 at 9:57 pm (#)
[...] FOI Topics and Links of the Week :: The Future of the Internet — And How to Stop It [...]
March 8th, 2010 at 11:19 pm (#)
Re: Cloud Storage
The beauty of the Cloud Storage paradigm is that the consumer doesn’t have to worry about the exact location of the data, as long as the provider can guarantee the Confidentiality, Integrity and the Availability of the Data and Transaction Logs. Pogoplug, while an excellent device for accessing personal storage over the internet, is a single point of failure. It cannot guarantee Availability. This takes away the agility and nimbleness of Cloud based storage.
Confidentiality needs to be addressed, but I don’t think building private clouds (e.g. Pogoplug) is the way to go. We need to explore other ways of ensuring Confidentiality. One way is to utilize host-proof hosting[1] encrypted vaults, where only the users has the means to decrypt the information stored in the Cloud.
1. http://en.wikipedia.org/wiki/Host-proof_hosting
March 9th, 2010 at 7:14 pm (#)
Re: Please think twice
Get over it. Privacy is dead :)
In a world where the second replicator (Memes) are using the first replicator (Genes) to propagate itself[1], there is no point in worrying about the privacy! :)
Saqib
1. http://www.ted.com/talks/susan_blackmore_on_memes_and_temes.html