• Home
  • About
  • Blog
  • News
  • Events
  • Media
  • Video
  • Glossary
  • Contact
  • Download
  • RSS

In the “Cassandra” department

September 20th, 2009  |  by elisabeth  |  Published in Future of the Internet  |  3 Comments

In the book, JZ discussed why it is that even tech-savvy, cautious users can’t avoid malware:

[S]urfing the World Wide Web often entails accepting and running new code. The Web was designed to seamlessly integrate material from disparate sources: a single Web page can draw from hundreds of different sources on the fly, not only through hyperlinks that direct users to other locations on the Web, but through placeholders that incorporate data and code from elsewhere into the original page. These Web protocols have spawned the massive advertising industry that powers companies like Google. For example, if a user visits the home page of the New York Times, he or she will see banner ads and other spaces that are filled on the fly from third-party advertising aggregators like Google and DoubleClick. These ads are not hosted at nytimes.com—they are hosted elsewhere and rushed directly to the user’s browser as the nytimes.com page is rendered. . . . Web pages are like fast food hamburgers, where a single patty might contain the blended meat of hundreds of cows spanning four countries. In the fast food context, one contaminated carcass is reported to be able to pollute eight tons of ground meat. For the Web, a single advertisement contaminated with bad code can instantly be circulated to those browsing tens of thousands of mainstream Web sites operated entirely in good faith.

And now we see this, from the NY Times:

Some NYTimes.com readers have seen a pop-up box warning them about a virus and directing them to a site that claims to offer antivirus software. We believe this was generated by an unauthorized advertisement and are working to prevent the problem from recurring. If you see such a warning, we suggest that you not click on it. Instead, quit and restart your Web browser.

The problem with predicting that bad things will happen is that it’s unsatisfying to be right.

On another note, the NY Times reports that Amazon is refusing to to locate or remotely disable stolen Kindles. It would actually be quite easy for Amazon to do so—the same technology that allows for remote software updates, or for jailbroken iPhones to be turned into iBricks, could be used here. A reader could simply report a Kindle lost or stolen and provide a serial number to Amazon, and Amazon could shut it down. (Presumably, this would really limit the market for stolen Kindles.) It’s interesting to ask why Amazon won’t make use of the technology and take advantage of it in marketing (“device can’t be stolen or lost!”). Did they take too much public criticism for remotely removing Orwell’s books from the Kindle? Is the theory just that it’s always easier to stand aside? Any ideas?

Responses

Feed
  1. Manuel Delgado says:

    September 21st, 2009 at 1:02 am (#)

    Amazon probably don’t want to deal with the trouble of authenticating reports of stolen devices. They face lawsuits if they remotely disable the wrong Kindle… or the Kindle of the wife of an angry husband.

  2. Michael Hills says:

    September 21st, 2009 at 11:25 am (#)

    I applaud Amazon for refusing to take unilateral action on disabling Kindles. They did take a lot of criticism for remotely removing books, and perhaps they have learned a lesson.

    Trying to decide what is an “appropriate” or “unappropriate” use is a slippery slope of any remote kill feature. Sure a thief should not be able to use a stolen Kindle, but what’s to stop those who love to send phony DCMA notices from sending fake stolen Kindle notices. Best not to have the feature at all, and if the feature already exists best to never use it.

    In the end the best philosophy is to give the user complete control over their devices. I’d accept a tool that would allow a user to install a program on their own computer that would allow the user to register and then remotely kill any Kindle they own, but Amazon should never take that power into their own hands.

  3. Catie says:

    September 24th, 2009 at 10:30 am (#)

    In some ways, I feel that Amazon is being unsympathetic here. However, in some ways, I don’t feel like they’re doing anything wrong. For example: if you buy a bike from a bike store, you don’t lock it up properly, and someone steals it, you don’t go back to the bike store and ask the previous owner to destroy its tires so the thief can’t ride it. Once you’ve purchased the bike, it stops being the property of the bike store and starts being your property. If it gets stolen, the responsibility is not on the bike store to recoup for your loss.

    Playing both sides of the argument, though, one could say that the Kindle doesn’t completely belong to the buyer once it is bought, because Amazon can still remotely alter it. If you have the power to change that, does it mean you still own it?

    I think Amazon is baulking for two reasons: 1, the kindle thief (or whomever they sell the stolen Kindle to) can still buy books. By disabling the stolen Kindles, Amazon loses revenue. 2. If you start here, where does it stop? Does Amazon become liable to send you another Kindle if yours is stolen? Will disabling stolen Kindles remotely be some kind of slippery slope for them?

    I think Amazon should disable stolen Kindles, but the consumer is stupid if they think that Amazon is going to be “nice” to them.

Blog

  • Controlling Cyberspace
  • This semester, we’re starting an exciting new class, aimed not at lawyers, but undergraduate CS students here at Harvard. It’s called CS42: Controlling Cyberspace – and we’re sharing the syllabus online.  Anything big we’re missing? Read more »

  • Computers Going Wild?
  • Computers Gone Wild: Impact and Implications of Developments in Artificial Intelligence on Society was an informal discussion that took place at Harvard Law School on December 8th, 2011. Hosted by Jonathan Zittrain, Marin Soljačić and the Berkman Center for Internet & Society, we brought together eighteen mostly local guests to discuss the ways that AI is changing society. Unlike futuristic predictions involving the Singularity or the underlying technology, this workshop explored current technology. Sessions included discussions on warfare, finance, education, and labor. Below is a list of attendees and a summary of the discussion.

    Read more »

  • Ideas for a Better Internet
  • Ideas for a Better Internet, or i4bi, is an interdisciplinary course at Harvard and Stanford that challenges students from law, computer science, and public policy to come up with novel and plausible ways to improve the Internet and its use. i4bi centers on immersing participants in Internet history, technologies, and politics, so that students can come up with ideas that help to build a better Internet — however they define “better.” Read more »
  • Microsoft Echoes Apple App Store Requirements
  • Here at Future of the Internet, we’ve already talked a little bit about Apple’s content requirements for both the iOS and Mac App Stores in JZ’s The PC is Dead post. As JZ said,

    “Pulitzer Prize-winning editorial cartoonist Mark Fiore found his iPhone app rejected because it contained “content that ridicules public figures.” Fiore was well-known enough that the rejection raised eyebrows, and Apple later reversed its decision. But the fact that apps must routinely face approval masks how extraordinary the situation is: tech companies are in the business of approving, one by one, the text, images, and sounds that we are permitted to find and experience on our most common portals to the networked world. Why would we possibly want this to be how the world of ideas works, and why would we think that merely having competing tech companies—each of which is empowered to censor—solves the problem?”

    Apple’s approach is an example of a larger phenomenon. Read more »

  • A SOPA compromise is floated
  • Last week several members of Congress — Senators Wyden, Cantwell, Moran, and Paul, and Reps. Issa, Lofgren and Chaffetz — floated a proposal to substitute for the contentious proposed Stop Online Piracy Act, previously discussed here.  Sen. Wyden’s office has commented on the compromise, and TechDirt has a writeup and a copy of the document here. The proposal omits the elements of SOPA that had run into the most resistance. Gone is tinkering with fundamental Internet architecture such as the use of the domain name system. Gone is the involvement of the Attorney General. Gone is the criminal copyright streaming provision that could, theoretically, make a teenage Justin Bieber a felon for streaming amateur videos featuring his renditions of songs by his favorite artists.In all these ways, the Wyden compromise is significantly better than SOPA. So what’s left? Read more »
About Jonathan Zittrain

jonathan zittrain

Jonathan Zittrain is Professor of Law at Harvard Law School and co-founder of the Berkman Center for Internet and Society at Harvard Law School

RSS Tweets from Z

  • An error has occurred; the feed is probably down. Try again later.

Blog Archives



Creative Commons BY-NC-SA Jonathan Zittrain unless otherwise noted.
Powered by WordPress using Gridline Lite.