Bonum Certa Men Certa

Technology: rights or responsibilities? - Part III

posted by Rianne Schestowitz on Oct 09, 2024

By Dr. Andy Farnell

Back to Part I

Back to Part II

Rights and security

Whereas cybersecurity has traditionally been limited to businesses and organisations, what I call "civic cybersecurity" is concerned with obtaining and keeping a safe and fair digital world for everyone. So let's venture the idea that "digital rights" is something that makes sense when we broaden the purview of cybersecurity to include ordinary and everyday living.

In the media, civic cybersecurity tends to focus on the dramatic, on stopping planes being hacked to fall from the sky and power grids from melting down. The latest offering in the UK is the very entertaining Nightsleeper, a kind of British "Mr. Robot".

Though I teach in an area where we consider nasty and disturbing stuff from drone swarms terrorising stadiums to autonomous vehicles carrying bombs, these sorts of worst-case fantasies rarely happen for pragmatic psychological reasons rather than questions of possibility. Elaborate kinetic violence requires extraordinary levels of organisation, long term commitment and fanatical malice. Most of the civilian horror we see is more spontaneous and makes use of commonplace weapons like knives and vehicles. Stuxnet style terror stunts, like hackjacking the London Eye and centrifuging tourists into low Earth orbit requires Tom and Jerry levels of improbability.

For defenders, constantly worrying about marginal "what-ifs?" is sapping and distracts from the everyday attacks that are already commonplace. Ironically some of these less dramatic attack surfaces are less obvious to those with over-active imaginations.

imaginations

Most of what we deal with in civil cybersecurity is teenagers getting cyberbullied into a suicidal state, or old people who've been robbed of their life savings. These crimes are almost always outside the practical capacity of the police and so are seldom dealt with. Their root lies in awful software and systems designed to put profit, spying and domination ahead of safety and human values. It's not just that code is insecure, but that the design, protocols and features of the applications are hostile to users.

life savings

For a long time a "techlash" has been brewing against the handful of massive companies and unelected power centres that presume to tell us how to live our lives, causing harm to individuals and society in their own self-interest. Head of US Cybersecurity and Infrastructure Security Agency (CISA) Jen Easterly recently called-out BigTech for their criminally defective products and entitled "techno exceptionalism". The reality is that the accumulated negative impact of BigTech in its effects on health, wealth and happiness outweighs anything terrorists ever achieved on US or British soil - except indirectly by creating the money-pit of state surveillance and media circus of fear.

Let's take an seemingly innocuous example of being unable to obtain healthcare because your hospital only accepts Gmail addresses. This is a catastrophic failure of social security that has roots in bad technology and also insane policy. It is evil in it's sheer mundanity.

healthcare

email addresses

Or consider the betrayal of selling patient medical records to research companies (despite repeated opting-out) such that people no longer have confidence in their GP and avoid visits. These actions certainly cause deaths. Yet on the surface they seem inconsequential.

Or attacking the use of cash money and local economies so that small businesses and the rural poor are disadvantaged. This constant low-level technological violence is against the invisible fabric of society, not our visible symbols. It is the subversive craft that Yuri Bezmenov outlined following his defection in the 1970s. The cruel twist is to get our own people doing the dirty work so that Moscow and Beijing don't need to lift a finger. The truly poetic masterstroke is to have us dismantle our own society in the belief we are "building a better, more efficient world". I think our international enemies cheer every time our governments give a little more power to Microsoft, Amazon or Google.

These acts of social sabotage use technology which makes ordinary malice easy and convenient. Ordinary moral weakness, ignorance, greed and neglect, met by "convenient solutions", enable a witless many to have more impact than any dramatic spectacles perpetrated by a militant few. Planes flying into buildings are news, but hundreds of thousands of road deaths due to texting-and-driving is nothing to see or care about. What we confuse are "terror" and "sabotage". Whereas the terrorist likes to put on a show, the saboteur is happy if his corrosive work goes unnoticed.

Whatever uneducated and dishonest rationales might be offered, behind them is a devious policy decision in obvious contempt of basic rights. Surely each citizen has a right to be secure from capricious impositions? But who will champion and enforce such rights?

There is a clear conflict of interests around the idea that Microsoft, Amazon. Oracle or Meta can offer security to people whose very exploitation is their business model. BigTech cannot offer cybersecurity because BigTech is the cybersecurity problem. Who will protect people against the companies that want to take over their lives? Will we see organisations like CISA and the UK NCSC position themselves openly against BigTech? Will we ever see a (much needed) government warning against using Microsoft products?

But expensive open conflict is not a long-term solution. These problems need sorting out in law. So as a basis it seems much clearer if we re-frame such violations as a failure of responsibility. In the above case of a health provider it is a failure to ensure equality and universal healthcare. Unless of course their claim is that everybody is equally abused by technology and anyone who objects is free to choose dignity rather than life.

long-term solution

Shaming the NHS - who we cheered in weekly rituals banging pots and pans through the pandemic - for its betrayal of patient confidentiality, dignity and ancient Hippocratic Oaths suddenly doesn't feel so wrong or ungrateful. They should not be magically above the data protection laws that everybody else must observe. Now, instead of arguing over rights we should be able invoke the law. Can't deal with my email address? …get fined, go to jail and be forced to fix your system! Surely that's fairer than leaving the outliers to die?

So, framing problems around "responsibility" weighs heavier than any talk about "rights". Consider our responsibility to use cash money for the sake of societal bonds, to switch-off our phones when driving to protect pedestrians and other drivers, have the patience and social skills to speak to a human rather than a machine, take the stairs instead of the lift, use a stronger password, use paper and pencil instead of an "app"… these are all little things that add up to a better technological society with more long term security and resilience.

resilience

But not everybody can…

An objection sometimes levelled against a philosophy of humane responsibility is that it is "ableist". We hear; What about people who have discalcula and can't use money? What about those without legs to climb the stairs? Or people who have social anxiety and prefer robots to other people? What about folks who cannot remember a six digit number and were never taught to write with a pen?

Against this objection is the rather cruel and cavalier retort that society should not design itself around the needs of the lowest common factor. I won't make that, but what I personally hear from less-abled people is surprising agreement, that they experience being used as proxy justification insulting. Indeed I've heard anger when impositions ostensibly about accessibility are made in their name. This was identified many decades ago by disabilities groups as the "Does he take sugar?" phenomenon, and is now subject to a backlash against patronising UX in design. Technology that's inclusive must attend to both least and most able users, and put neither group in conflict with the other.

But perhaps more concerning is the irony that "convenient" technology causes debilitating human conditions. Technologically mediated isolation is a cause of social anxiety. Inactivity and easy motor transport is a cause of poor mobility. Calculators cause discalcula, etc. Being waited on hand and foot by computers and robots makes us scatterbrained and helpless. In its worst formulation this becomes an argument that; yes, technology is a crutch with which we must "limp before the lame", so as to become lame too.

Calculators

In reality almost the complete opposite is true. Digital technology harms the least able disproportionately more. I am exhausted hearing from older people how they cannot use their banking apps and just want to see a real human - but they shut the branch down and now it's a 10 mile drive in to the next town. People with poor education and learning difficulties are bewildered by the inhuman impositions of techno-bureaucracy. Sometimes they require a full-time helper/mentor just to navigate life and the social care system. People with poor eyesight and attention who are forced to use phone apps just give up. Systems are designed with dark patterns to confuse folks so they don't collect benefits or pay more for services than they should. These disproportionately harm poorer people with less education or additional needs.

poor education

Algorithms tuned for "efficiency" make this happen even if there is no direct human malice. Therefore the malice is deploying these algorithms in the first place. As coders we must question deeply what we are working on and refuse to participate in projects that raise controversial ethical questions.

And I say this coming from the UK where we actually have one of the best government web presences in the world, with high accessibility, bullet-proof availability, and plain English content. It is heartbreaking to see so much dedicated engineering go into something that underneath rests on a morally bankrupt ideology of gushing neophilia.

Our injury can often be traced to a failure of Law. The legal world has never really understood or kept pace with technology - which is praise not a criticism since Laws should be stable, steady and throughtful. However, most "cyberlaw" seems to have been written to protect those who are now the aggressors. For example the UK Computer Misuse Act 1990 (that now seems so naive and woolly as to be a crime in itself) defines misuse only in terms of "authorisation". Computers are misused in thousands of insidious ways to visit harms on peaceful, law-abiding citizens who just want to mind their own business.

failure of Law

As zero trust becomes the vogue security fad, explicit authorisation is practically dead as a concept in 2024. When was the last time you "authorised" BigTech to steal your personal information from your phone? As written, the 1990 Act is a charter for the powerful to abuse the helpless. It remains in place because of course there is a need to prevent violations of computing perimeters, but it now looks woefully inadequate, a speck in the landscape of digital harms that have evolved since that time. If reformed it will likely add nothing to redress the victims of daily corporate intrusion.

As we look around the world today we see that the unilateral imposition of digital technology on terms dictated by corporations and governments has led to a significant loss of basic rights, freedoms and psychological safety for the majority. That is not to say digital technology hasn't brought immense benefits, but one is not excused from inflicting injury by bundling it a priori with compensation (especially where there is no mutuality and the harms were unnecessary in the first place if you'd just been a little bit smarter).

inflicting injury

Much discussion of technology and security today is about balancing the needs of governments and business. Conspicuously missing from that discussion is any talk of "the people", the public, the hoi polloi. So "digital rights" might be a way of talking about the huge gap in that landscape, where ordinary folk are victims of " Police and thieves in the street", and whose voices are ignored.

ignored

So we must accept that not everyone can join in the "technological society". Not everybody should. Not everybody wants to even if they could, therefore any system that does not recognise those voices neither has nor deserves a future. "Responsibility" then is a much more complex tool than it first appears and does not easily fall to the ableist objection.

Responsibility

Other Recent Techrights' Posts

"Use Wayland" Isn't a Bugfix for X (X11 is Still Necessary)
They tell us X is "dead" and we must all be herded into Wayland ASAP
The New Head of OSI is an "Hey Hi" (AI) Obsessed Person
when Bryant says "AI" that doesn't mean AI
"Governments, local authorities, schools and hospitals can lead by example by procuring only Free Software"
Crossposted from Tux Machines
Cindy Cohn Leaving the Electronic Frontier Foundation While Its Co-founder John Gilmore, Whom She Apparently Helped Oust, Will Celebrate 40 Years of the Free Software Foundation, Inc.
EFF has been busy hoarding GAFAM money, whereas the latter is where all the real activism is done
"Google is Googlebombing KDE's Project Banana"
So is Google googlebombing KDE's Project Banana? You decide.
Some Very Large IRC Networks Are Growing
IRC will turn 38 next year
What Ruben Amorim and Stefano Maffulli Have in Common
Censors Wikipedia and Social Control Media
Microsoft Won't Cooperate in Trying to Tackle EPO Corruption (Microsoft Profits From This Corruption)
Use something like BigBlueButton, Jami, Ring, and Jitsi instead
We Are Sad to Hear the Story of Jonathan Riddell, Champion of KDE and GNU/Linux on Desktops/Laptops
I have enormous respect for Jonathan and everything he has done
 
Links 16/09/2025: Science, Security, and Conflicts
Links for the day
Gemini Links 16/09/2025: Command-line Options in POSIX Shell and Introducing Acre 0.9
Links for the day
Microsoft 'Secure' Boot Versus Dual Boot With GNU/Linux
they're meant to assume everything is OK
Links 16/09/2025: While Oracle Pretends to be Rich It's Firing About 70 MySQL Workers, "Oracle's Revenge" (Faking Demand With "AI")
Links for the day
Microsoft Has Just Published a New Web Page About "Secure Boot Update Process" (Microsoft Also Admits Issues; PCs Can Stop Booting)
Why was this page issued and published only hours ago?
Microsoft Lunduke: I Spread Hate and Then I Receive Hate
Cry us a river, Microsoft Lunduke
"Disable Secure Boot and Fast Boot. Wipe and Start Over."
At least they didn't say, buy a new computer...
The Oracle Ponzi Scheme
Oracle isn't doing well, but it's nowadays fashionable to say "clown" and "hey hi" to prop up one's stock, even based on nothing at all
Taking Out the Battery, Opening Up Your Computer, Just Like a "Normie" Would
At this stage, any person who still says "enable Secure Boot" is misguided or persuaded by companies that sell rootkits
Slopwatch: Serial Sloppers and Slopfarms Still Infesting Google News (Fake 'Articles' About "Linux" Spreading FUD)
searching for "Linux" today yields a lot of FUD
The Reach of Techrights Has Broadened
We nowadays cover a broader range of issues
Complicating Things for No Actual Benefit, Just Added Risk and More Difficulties Adding GNU/Linux and BSDs
Watch what it's like for people who wish to use BSDs
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, September 15, 2025
IRC logs for Monday, September 15, 2025
Links 16/09/2025: Autumn Party, RPG Planet, and Optical ROOPHLOCH
Links for the day
Geminispace Growing at Pace of Over 10% Per Year
Contrary to what some pessimists try to claim
Linux Mint Forums Today: Disable 'Secure Boot', It Doesn't Improve Security, It's Just a Microsoft Obstacle to GNU/Linux Users
They also mention MOK
Solved Less Than an Hour Ago: Trying to Escape Windows, 'Secure Boot' Gets in the Way
'Secure Boot' wasn't meant to even exist in the first place
Stefano Maffulli, Executive Director of the Open Source Initiative, Resigns or Gets Removed (We'll Continue Covering OSI Scandals)
A dozen mentions of "AI", not much about "Open Source"
Andy Has Just Nailed It (Regarding Complexity and Failure, a la UEFI)
The users no longer own or control what they buy
Compatibility Support Module (CSM) Versus GNU/Linux Simplicity
what Andy recently called "solutionism"
Links 15/09/2025: "Postal Traffic to US Down by Over 80%" and 'Smart' Spinozacampus Laundry Room Goes AWOL
Links for the day
Gemini Links 15/09/2025: Dungeon Hustle and Deleting Oneself From the Net
Links for the day
Breach of EPO's Duty of Care or Cigna Reimbursement Issues
This is the sort of thing that motivated Luigi Mangione to assassinate a CEO
Ask Ubuntu About "Secure Boot" Violation and Laptops That Don't Boot GNU/Linux
Does anyone still believe that "Secure Boot" has anything at all to do with security?
Talking About the Problem vs Talking to the Problem
Wanting an audience is never a good excuse for compromising one's values and principles
Focusing on Patents
The reason we cover the EPO so much is that it's close to home
"Secure Boot Violation": The 'Joys' of Fake Security Gone Wrong
Not everyone reboots every day
Links 15/09/2025: Russia Invades Romanian Airspace, Penske Media Sues Google Over LLM Slop
Links for the day
Links 15/09/2025: Bitcoin ATMs Scam and "Conservative Cryptography" (Backdoors Fantasies)
Links for the day
EPO Imitates Microsoft: "Three Days or More Per Week" Inside the Office to Get a Desk to Work on; "the Office Breaches Its Promise Towards Staff and Acts in Breach of Its Duty of Care"
The EPO serves no actual function in Europe
Links 15/09/2025: Political Affairs, Censorship, and Copyrights
Links for the day
Gemini Links 15/09/2025: Music Genres, Invisible Networks, and Akademy 2025
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, September 14, 2025
IRC logs for Sunday, September 14, 2025
Satya's Plan B: Try to Hide the Massive Extent/Scale/Scope of Microsoft Layoffs
fewer people buy Microsoft
Red Hat News About De Facto Mass Layoffs (Bluewashing) Gone From Reddit (Censored by Gatekeepers), Still Online in The Register
With RTOs, PIPs, relocation etc. expect IBM to "shed off" many Red Hatters
UEFI "Secure Boot Doesn’t Play Nice at the Moment"
UEFI "Secure Boot" does not improve security. It's an artificial obstacle in service of monopoly.
Gemini Links 14/09/2025: ROOPHLOCH, Music, and Reddit
Links for the day
If You Want to "make your 'Windows PC' lean, mean, and fast" You Will Install GNU/Linux or Some BSD
That kind of article says a lot about IDG
Slopwatch: Google News Infested With Slop (About Half of the Results for "Linux" Today)
This is the sort of junk one finds when looking for "Linux" in Google News these days
Links 14/09/2025: Ricky Hatton Dies and McDonald's Declares War on Tipping Culture
Links for the day
Links 14/09/2025: Disasters for CEOs Obsessed With Slop and Slop Companies School Like Fish
Links for the day
"Bad Shim Signature" (Microsoft 'Secure' Boot)
"Fresh install not booting"
What Microsoft Garrett and Microsoft Lunduke Have in Common
Similar tactics, different "wings"
Links 14/09/2025: US "Economy Sagging", "Michigan Economy Wobbles From Tariffs"
Links for the day
Gemini Links 14/09/2025: Minimalist Snippet Manager and Omarchy Linux
Links for the day
The Face of the Digital Far Right: Microsoft Lunduke
Microsoft Lunduke is an online extremist that belongs to and panders to the far right
20 Years Later and Academia Isn't the Same
"I never dreamed of being a professor"
'Cancel Culture' by the Right: Microsoft Lunduke Contacts People's Employers Trying to Get Them Fired
Microsoft Lunduke panders to extremists online
"Bad Shim Signature"; So 'Secure' That It Overrides Users' Preferences and Turns Itself Back on (Coercive Measure)
This was a few hours ago
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, September 13, 2025
IRC logs for Saturday, September 13, 2025