Bonum Certa Men Certa

This Remembrance Sunday We Must Also Remember That Some 'Security Companies' Want More Cyberwar

posted by Roy Schestowitz on Nov 09, 2024

Richard M. Stallman

Remembrance Sunday 2024: Manchester to commemorate our Armed Forces

Remember the young(er) Richard Stallman? Around the time I was born he was working to eliminate computer passwords. No, not breaking into accounts, just making passwords obsolete. His underlying rationale (or his personal motivation) was, passwords would not serve security but ultimately partition computers and keep some people out of necessary access, sometimes for immoral business reasons. The goal was to make hacks like, empty passwords or trivial passwords would let you in, bypassing the demands otherwise imposed by nontechnical bureaucrats.

One can find videos about it. In 1986 he said: "I use my login name as my password." Wikipedia said: "Stallman found a way to decrypt the passwords and sent users messages containing their decoded password, with a suggestion to change it to the empty string (that is, no password) instead, to re-enable anonymous access to the systems. Around 20% of the users followed his advice at the time, although passwords ultimately prevailed. Stallman boasted of the success of his campaign for many years afterward."

Security and access control aren't the same thing, albeit the concepts aren't entirely unrelated. If I let my wife access my computers (and vice versa), for instance, that's possibly an access control problem, but I trust her with my computers, so it's not a security problem and I never lock my screens. It would be futile and self-defeating to lock the screens. It might do more harm than good in case of emergencies. Trust and access control aren't the same concept. In the same vein, we share house keys with other people, sometimes even neighbours who possess "spares". Whether it's Alice and Bob or Roy and Rianne, the idea that people share some accounts isn't an aberration.

Looking at the bigger picture, should we accept the vision of universal back doors as a model of "national security"? That's pretty much what we have right now and therefore the World Wars aren't just kinetic anymore. Hospitals don't need to be bombed or shelled; British hospitals can be destroyed from a distant North Korea without a single ICBM, only Microsoft Windows.

Remembrance Day/Sunday is fast approaching, so I wanted to say a few words, as well as recommend (again) "After Cyberwar" - the latest article by Dr. Andy Farnell, a man whom my wife and I - not to mention Techrights associates - grew fond of because of his writings (he last published here yesterday).

Under the section "Blame games" Andy said: "The same is true for civilians in a war zone. They do not care whose missiles just landed on their farm. Their lot is no better for knowing they were "friendly" ones, or that they were the victim of "necessity" to drive out an enemy."

A few hours ago I said: "We need to reject headlines that say Iran or North Korea or China or Russia compromised some system and instead ask what it was that let them break in. Whose fault was it? Why were holes present? Very often it turns out to have been Microsoft's fault, but the mainstream media stops short of saying that or does not even bother to investigate the real cause (culprit). Headlines that blame Putin and Kim probably attract more clicks and offer political fodder."

The blame game or "attribution" spiel/ritual does not matter much to the so-called "civilians", which in the case of technology means ordinary users who don't dwell in datacentres, deploy code/programs, and write code.

Let's change the attitude we have towards computer security and security journalism. A lot of so-called 'journalism' in this domain is utter trash (example from days ago and another from a few weeks ago). We recently blacklisted some sites that claim to cover security issues because their quality and integrity had been long gone. They'd post obvious lies and peddle "snake-oil" for companies that don't purse security and instead seek to profit from insecurity.

Our goal, overall, should be real security, not ongoing (and prolonged) war. Some companies profit from the cyberwar; hence, their objective is not to end the war.

Other Recent Techrights' Posts

Dictatorship Formalised: Python Software Foundation Violates Its Very Own Code Of Conduct (COC) or Code Of Censorship
Incoming Python Software Foundation Executive Director, Deb Nicholson, allegedly uses COCs to get ahead while violating COCs
It's FOSS? No, It's SPAM.
Another sellout
Another Massive Blow to the Web
This is awful news and it neatly relates to topics that we covered this morning
All the Latest Five Blog Posts at OSI's Blog Are Written by a Microsoft Operative Salaried by Microsoft
"Open Source" no longer means anything
 
Links 08/12/2024: Conflicts, Misinformation, and Gutting of the Media
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, December 07, 2024
IRC logs for Saturday, December 07, 2024
Czech Republic: GNU/Linux Jumps Above 4%
data from the Czech Republic for 2024
IBM Engagement Surveys "Are Usually Useful for the Executives So They Know Which Things to Ignore"
This impacts Red Hat as well
Did Microsoft 'Write' (by Chatbots) This 'Article' About WINE?
The Web is drowning in garbage
[Meme] 'Self-Checkout' (and Banking 'Apps'): Passing All Accountability to the Customers
Stealing
Gemini Links 07/12/2024: Leasehold and NNTP
Links for the day
Fun Statistics About Techrights (Almost a Quarter Million Files)
Here are some raw numbers
PIP (Performance Improvement Plan) as an Instrumental But Largely Hidden (From the Public) Extra Layer of IBM's Workforce Reductions
The morale at IBM is really bad
Microsoft Money: From Bribing Bloggers to SLAPPing Bloggers
Microsoft money, different strategy?
Belgium: Windows Falls to Quarter of the Market, Mobile Devices Outsell or Overtake Desktops/Laptops on the Web
Microsoft has no operating system for 'smartphones'
Links 07/12/2024: CALEA Back Doors Backfiring, Fentanylware's (TikTok) U.S. Ban a Step Closer
Links for the day
statCounter: GNU/Linux Rises Sharply to All-Time High in Republic of South Korea
Notice how sharp the rise is!
Legacy of a Dying World Wide Web
Many people truly believe they're "stars" in social control media
Google Does Not Have a Search Engine Anymore
Google wants to "retain" users for more "screen time" and influence over their minds; it does not save you time, it's manipulating you
[Meme] Automattic: Host With Automattic, We'll Handle Our Own Complexity for You
The RHEL modus operandi (more so with systemd)
Finding Peace With Less
There seems to be a growing consensus (speaking to other editors helps confirm this) that the Web is going in a very bad direction
Links 07/12/2024: DEI Chopped by University of Michigan, French and South Korean Governments in Turmoil
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, December 06, 2024
IRC logs for Friday, December 06, 2024
Links 06/12/2024: Meal Changes and Internet Nostalgia
Links for the day
Brittany Day (linuxsecurity.com) Reposing Linux Foundation/Microsoft FUD Using LLMs, Probably Controlled by Microsoft
Plagiarised FUD by LLMs
Three Months
Next week on Tuesday our sister site turns 20.5
Links 06/12/2024: Promotion of Fake and Illegal Patent 'Court' (UPC), South Korean Strikes, and More Bailouts at Taxpayers' Expense
Links for the day
Links 06/12/2024: Alarm Raised in EU Over Meddling and Destabilisation by TikTok, Strong Criticism of 'Open'AI
Links for the day
In France, Android Skyrockets to 52%, Windows Falls to 26%
even in rich countries across Europe Windows is rapidly losing "market share"
When News Sites Become Shopping Catalogues Disguised as 'Reviews' or 'Articles'
Sometimes Fagioli uses HEY HI (AI, LLMs actually) to make 'articles' about HEY HI
[Meme] Hit and Run with SLAPP
Microsoft staff versus Techrights
[Meme] When You Go Against Corporate Front Groups and Shills of Moneyed Interests (EDRi is Microsoft-Compromised Now)
The "golden rule" is, follow the gold
The Register Exposed Many IBM Scandals, Lawsuits, and Secret Layoffs. Now IBM Pays The Register.
Hush money?
IBM Told the Media the Secret Mass Layoffs Would Carry on Till End of November, But They Still Happen This Month
"My team of 9 people had 4 regulars and 5 contractors. All contractors gone."
All the Red Flags in New Linux Foundation Report
How telling...
Gemini Links 06/12/2024: Shrinkflation and Working at Google
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, December 05, 2024
IRC logs for Thursday, December 05, 2024