Bonum Certa Men Certa

This Remembrance Sunday We Must Also Remember That Some 'Security Companies' Want More Cyberwar

posted by Roy Schestowitz on Nov 09, 2024

Richard M. Stallman

Remembrance Sunday 2024: Manchester to commemorate our Armed Forces

Remember the young(er) Richard Stallman? Around the time I was born he was working to eliminate computer passwords. No, not breaking into accounts, just making passwords obsolete. His underlying rationale (or his personal motivation) was, passwords would not serve security but ultimately partition computers and keep some people out of necessary access, sometimes for immoral business reasons. The goal was to make hacks like, empty passwords or trivial passwords would let you in, bypassing the demands otherwise imposed by nontechnical bureaucrats.

One can find videos about it. In 1986 he said: "I use my login name as my password." Wikipedia said: "Stallman found a way to decrypt the passwords and sent users messages containing their decoded password, with a suggestion to change it to the empty string (that is, no password) instead, to re-enable anonymous access to the systems. Around 20% of the users followed his advice at the time, although passwords ultimately prevailed. Stallman boasted of the success of his campaign for many years afterward."

Security and access control aren't the same thing, albeit the concepts aren't entirely unrelated. If I let my wife access my computers (and vice versa), for instance, that's possibly an access control problem, but I trust her with my computers, so it's not a security problem and I never lock my screens. It would be futile and self-defeating to lock the screens. It might do more harm than good in case of emergencies. Trust and access control aren't the same concept. In the same vein, we share house keys with other people, sometimes even neighbours who possess "spares". Whether it's Alice and Bob or Roy and Rianne, the idea that people share some accounts isn't an aberration.

Looking at the bigger picture, should we accept the vision of universal back doors as a model of "national security"? That's pretty much what we have right now and therefore the World Wars aren't just kinetic anymore. Hospitals don't need to be bombed or shelled; British hospitals can be destroyed from a distant North Korea without a single ICBM, only Microsoft Windows.

Remembrance Day/Sunday is fast approaching, so I wanted to say a few words, as well as recommend (again) "After Cyberwar" - the latest article by Dr. Andy Farnell, a man whom my wife and I - not to mention Techrights associates - grew fond of because of his writings (he last published here yesterday).

Under the section "Blame games" Andy said: "The same is true for civilians in a war zone. They do not care whose missiles just landed on their farm. Their lot is no better for knowing they were "friendly" ones, or that they were the victim of "necessity" to drive out an enemy."

A few hours ago I said: "We need to reject headlines that say Iran or North Korea or China or Russia compromised some system and instead ask what it was that let them break in. Whose fault was it? Why were holes present? Very often it turns out to have been Microsoft's fault, but the mainstream media stops short of saying that or does not even bother to investigate the real cause (culprit). Headlines that blame Putin and Kim probably attract more clicks and offer political fodder."

The blame game or "attribution" spiel/ritual does not matter much to the so-called "civilians", which in the case of technology means ordinary users who don't dwell in datacentres, deploy code/programs, and write code.

Let's change the attitude we have towards computer security and security journalism. A lot of so-called 'journalism' in this domain is utter trash (example from days ago and another from a few weeks ago). We recently blacklisted some sites that claim to cover security issues because their quality and integrity had been long gone. They'd post obvious lies and peddle "snake-oil" for companies that don't purse security and instead seek to profit from insecurity.

Our goal, overall, should be real security, not ongoing (and prolonged) war. Some companies profit from the cyberwar; hence, their objective is not to end the war.

Other Recent Techrights' Posts

Brittany Day Can Rest and Let Microsoft/Chatbots Write Fake 'Articles' About "Linux" This Christmas
Who said people don't work on Christmas? Chatbots or plagiarism-as-a-service work 24/7, every day of the year except during Microsoft downtimes
 
2025 Will be Fought and Fraught With LLM Slop or Fake 'Articles' (Former Media/News Sites Turning to Marketing Spam)
The elephant in the room?
Links 26/12/2024: Ukraine's Energy Supplies Bombed on Christmas Day, Energy Lines Cut/Disrupted in the Baltic Sea Again
Links for the day
Gemini Links 26/12/2024: Rot Economy, Self-hosted Tinylogs
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, December 25, 2024
IRC logs for Wednesday, December 25, 2024
[Meme] Time to Also Investigate Bill Gaetz
Investigation overdue
Microsoft Openwashing Stunts Initiative (OSI) is A Vulture in "Open" Clothing
it's quite telling that the OSI isn't protecting the Open Source Definition
IBM Has Almost Obliterated or Killed the Entire Fedora Community (Not IBM Staff)
Remaining Fedora insiders are well aware of this, but bringing this up (an "accusation" against IBM) might be a CoC violation
Links 25/12/2024: Fentanylware (TikTok) Scams and "Zelle Scams Lead to $870M Loss"
Links for the day
Links 25/12/2024: Windows TCO Brought to SSH, Terence Eden 'Retires'
Links for the day
Gemini Links 25/12/2024: Reality Bites and Gopher Thanks
Links for the day
Links 25/12/2024: Latest Report Front Microsoft Splinter Group, War Updates
Links for the day
Links 25/12/2024: Hong Kong Attacks Activists During Holidays, Xerox to Buy Lexmark
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, December 24, 2024
IRC logs for Tuesday, December 24, 2024
Gemini Links 25/12/2024: Open Source Social and No Search
Links for the day
Brittany Day Connects Windows Ransomware to "Linux" Using Microsoft LLMs (FUD Galore, Zero Effort, No Accountability)
FUD and misinformation made by Microsoft LLMs again?
Links 24/12/2024: Labour Strikes and TikTok Scrambling to Prop Up Radical Politicians That Would Protect TikTok
Links for the day
Where the Population is Controlled by Skinnerboxes Inside People's Pockets (or Purses)
A very small fraction of mobile users practise or exercise freedom/control over the skinnerbox
[Meme] Coin-Operated Publishers (Gaming the Message, Buying the Narrative)
Advertise (sponsor) to 'play'
Advertisers and Their Covert Impact on Publications' Output (or Writers' Topics of Choice, as Assigned or Approved by Editors)
It cannot be trivially denied that sponsorship in the form of "advertising" impacts where publishers go (or don't go, won't go)
Terrible Year for Microsoft Windows in Cyprus
down from 86% to 72% since January
[Meme] How to Kill Unions (Staff on Shoestring Budget Cannot Afford Lawyers)
What next for the EPO? "Gig economy"?
The EPO's Staff Union (SUEPO) Takes Legal Action to Rectify the Decrease in Wages (Lessening of Purchasing Power)
here is what the union published
Gemini Links 24/12/2024: Deedum Gemini Client Gets Colour Support, Advent of Code 2024
Links for the day
Microsoft Windows Slides to New Lows in Colombia
Now Windows is at an all-time low
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, December 23, 2024
IRC logs for Monday, December 23, 2024