Open thread: smartphone security

There are masses of important recent news stories on the topic of smartphone security. I have been filing them below posts like this one, this one, and this one, but they really deserve a spot of their own.

First news story: Micro Systemation makes software that allows people to bypass the 4-digit lock code on an iPhone in seconds. This could be important for people crossing borders, people who get arrested at political protests, etc.

2012

No matter what else we achieve, if the generations alive now fail to prevent catastrophic climate change we will be seen as failures by the generations that will suffer after us. We will be remembered as the people who had all the knowledge and technology required to preserve a habitable Earth, but who were too ignorant or distracted or greedy to actually do it. We will be the generation that breaks the chain of inheritance – which has links extending back through all of human history – and that passes on a degraded and dangerous world after having received a promising and prosperous one.

It’s remarkable to read Bill McKibben’s The End of Nature, published in 1989 when I was six years old. In it, he describes everything that is happening now: the growing scientific certainty accompanying increasingly perceptible changes in the outside world, the body of scientific research and understanding being assembled over decades and centuries. And yet, despite how the message has been clear and compelling for decades, the world hasn’t even started moving in the right direction yet, much less started moving that way quickly enough to avoid disaster.

The stupidity of what we are doing is startling.

What to do about climate change

Recently, I suggested that perhaps there is a division between ethical questions that are hard to answer and those where the answers are merely deeply inconvenient.

Something a bit similar is probably true of climate change policies. There are a few things we should obviously do, but many large questions outstanding.

Something clear: carbon pricing

For example, I think it’s clear that we need an economy-wide price on carbon. Every activity that produces greenhouse gas (GHG) pollution causes harm that isn’t reflected in its price. When you buy a car, or gasoline, or a laptop, or airline tickets, the cost should include some reckoning of how much harm is being done by the GHG pollution you are causing. As I mentioned before, the purpose of this extra cost isn’t to pay compensation to the victims, but rather to discourage the harmful behaviour. As such, the price on carbon needs to be set high enough to drive people to change their behaviour.

There are those who object to the idea of pricing carbon at all – often because they distrust capitalism and market mechanisms. I can understand the sentiment, but I think the urgency of climate change obligates us to develop mechanisms that are capable of working within the general systems we have. Carbon pricing fits the bill. (More on my fantasy climate policy is here).

Something uncertain: nuclear power

One question with no clear answer is what ought to be done with nuclear power. In a weird reversal of their stereotypical roles, The Economist is now calling nuclear power “the dream that failed” while George Monbiot is emphatically encouraging the British government to stick with nuclear because of the importance of cutting GHG pollution.

I have written before about the tricky balance involved in the nuclear decision (PDF). I don’t think the answer is clear. Nuclear power stations have certainly played a role in making GHG pollution levels lower than they would have been in a world without nuclear power. At the same time, nuclear power stations are dangerous, both in terms of accidents and the proliferation of nuclear weapons. In terms of cost, I still think the figures that are available are too contradictory and untrustworthy to be used as the basis for sound decision-making.

One shot

In the end, humanity only has one shot at this. We have one planet that we will warm to a greater or lesser degree and one global civilization that we will power to a greater or lesser degree in one way or another. We have options with varying levels of risk and types of risk (risks of doing nothing, risks of geoengineering, etc). Finally, we have governments that have largely failed to appreciate the seriousness of the issue, and a powerful assortment of industries dependent on fossil fuels that have been very effective at pressuring governments to do nothing major about the problem of climate change.

One way or another, the people who are young today will probably live to see which way the world will go. If we keep burning fossil fuels in the way we are now, the best science suggests that we are headed for a world more than 4°C warmer with sea levels several metres higher and other serious unpredictable effects. Alternatively, if we get serious about the multi-decadal project of decarbonizing the global energy supply, people who are young today may live to see the emergence of a global civilization that runs on renewable forms of energy within a stable climate.

P.S. I think the question of what individuals can most productively do in response to climate change is pretty clear: lobby your elected representatives. If you really want to focus on reducing your personal impact instead of changing the system, the best choice may be to travel less, eat less meat, and avoid having children.

Ubiquitous surveillance

We now live in a world where it is highly likely that various web companies, your government, and your internet service provider are tracking your web browsing. Where facial recognition software identifies you at borders, airports, and subway stations. Where your DNA may be sampled if you are arrested. Where new face tracking software gets used with old photo archives and video camera footage. Where data on what you buy and how you repay your debts is sold between companies. Where cameras track your automobile license plate to build up a database of your movements. Where drones may watch you from the sky. Where computers transcribe your speech and handwriting into searchable text. Where you can be identified at a distance by the cards in your wallet. Where your emails, phone calls, and text messages are scanned for keywords, archived forever, and used to build up webs of your known associates. Where governments and private organizations use data mining techniques against you. Where your cell phone can easily be turned into a bug that passes on what you say and type, as well as where you are. Where your Google searches may be used as evidence against you. Where anyone can listen to your cell phone calls. Where the metadata in the photos and videos you make identifies you. Where the DNA of your family members may be used to incriminate you. Where anyone on your wireless network can archive and access all your web traffic, as well as steal website sessions. Where no encryption software you can acquire does much good. Where insecure means of communication are marketed as secure. Where archives containing your sensitive personal data can be broken into (or bought) by those who wish to cause you trouble. And where anything ill-considered you did as a teenager may re-emerge to cause embarrassment or worse decades later.

The appropriate responses to this are not clear. You can simply accept that your life is an open book that anyone who cares to can pretty easily read from. You can opt out of some services (like Facebook) and employ some available countermeasures. You can move to the remote countryside and become a technology-shunning subsistence farmer (which is not to imply that all farmers shun technology, nor manage only to subsist). You can try to drive legislative, regulatory, and technological changes that address some of the issues above. What else can you do?

Ethical questions: the unclear and the unpalatable

There are two kinds of difficult ethical problems: situations where it is genuinely hard to work out what the right course of action is, and situations where the right course of action is fairly clear but people are unwilling to do it.

Air travel is an example of the second type. I think it’s pretty unarguable that our excessive emissions of greenhouse gas pollution are unethical. Long flights produce excessive amounts of CO2, and many (perhaps most) of those long flights serve morally unimportant purposes. As such, people should fly less, because their decisions to fly harm innocent strangers. And yet, few people are willing to do that. They put their own preferences and convenience ahead of the interests of others. Eating most types of meat and dairy products probably falls into this category too – at least if you think the suffering of non-human animals has any moral importance.

The international distribution of the costs of dealing with climate change may be an ethical problem of the first type. It’s not entirely clear what the ethical status of historical emissions is, what the relevance of population is, the importance of per capita emissions, etc. While it may not be entirely clear who should pay exactly what, I do think it is clear that every country needs to take action – far more action than they are taking now.

Forms of address

One of the trickier aspects of corresponding with lots of relative strangers is never knowing quite what to call people.

This is all in relation to written communication. In one-on-one speech, I go out of my way not to call people anything at all.

Academic titles

To start with, there is the eternal question of how to refer to an academic who you don’t know. They probably have a title, which might be ‘Associate Professor’ or ‘Assistant Professor’ or just ‘Professor’. Do you call everyone ‘Professor X’? Or do you use the title on their website? What about people who are excessively quick to call themselves ‘professor’? I have seen it on the business card of a doctoral student.

My solution – call everybody with a doctorate ‘Dr. X’. It doesn’t matter if they just got their doctorate yesterday or whether they have won an armload of Nobel Prizes. ‘Dr. X’ is a perfectly polite form of address between strangers.

Exception: close friends and fellow former students. You may have worked half a decade to get that post-nominal P.H.D., but if we were in first year together I reserve the right to call you by your first name indefinitely.

Other titles

I basically ignore them. ‘Reverend X’ and ‘Lieutenant X’ and ‘Engineer X‘ and ‘Mayor X’ and ‘Prime Minister X’ are all liable to be referred to simply as “Mr. / Ms. X”.

Women

It’s a bit embarrassing that there even has to be a space for this, but such are the sexual double standards of our society. There is nothing as neutral as ‘Mr. Smith’ that you can call a woman. Every option carries a political message. Using ‘Miss Smith’ or ‘Mrs. Smith’ means buying into the somewhat absurd notion that a woman’s whole identity changes when she gets married (and when a man’s does not). I use ‘Ms. X’ anytime I can’t call someone ‘Dr. X’. That goes for any stranger, usually until they specifically tell me to call them something else.

Someone who you know nothing about

Say you discover that www.websitename.com has been horribly defaced. You want to contact ‘webmaster@websitename.com’ but you don’t know any part of their name, or whether they are male or female.

In this circumstance, I usually go with ‘Good [time of the day]’ if I am being less formal and ‘Sir or Madam’ if I am being more formal.

Referring to me

I am perfectly happy to have everybody call me ‘Milan’.

Whenever I see a letter for ‘Milan Ilnyckyj, BA’ I know it is UBC writing to ask for alumni donations.

Kim Jong-un and North Korea’s criminality

Sheena Chestnut – a friend and former Oxford classmate – recently had an article published in the Sunday Review section of The New York Times: A North Korean Corleone.

She has written some very interesting things about the illicit dabbling of the North Korean regime, including in terms of nuclear weapons proliferation.

Accelerating in the wrong direction

In terms of its actions, Canada continues to deeply misunderstand the nature, seriousness, and implications of climate change.

What we know about the history of the climate and the nature of greenhouse gases strongly suggests that the continuing build-up of greenhouse gas pollution in the atmosphere is highly dangerous.

Since burning fossil fuels is the major source of that pollution, both Canada and the world as a whole need to be talking about how to phase out fossil fuels.

Instead, we are talking about how to massively increase our production and exports of these dangerous substances. We should be winding down production of coal, oil, and gas – not continuing to dig and drill more and more, or building thick new export corridors for hydrocarbons that really ought to remain underground.

Twitter grabbing address books from phones

Here’s an example of what I mean about the internet creating all sorts of new security vulnerabilities. Twitter has recently confessed to grabbing entire address books from the smartphones of people using the service.

As well as being a violation of privacy, this is a practice that could seriously endanger people. Consider all those brave protestors in Egypt and other Middle Eastern countries, using Twitter to help organize a pro-democracy movement. If Twitter is grabbing their address books, it is assembling a perfect tool for the intelligence services of governments to round up everyone involved in protests. The same is true for people pressing for democracy in China, or doing anything else that is laudable but unpopular with the people in charge.

Technology companies need to recognize that there will be people who want to use their records and capabilities for nefarious purposes, and they need to design their technology and procedures to protect against such attacks and reduce how serious they are when they take place.

The companies that make operating systems for smartphones should also assume that applications can be ineptly designed or malicious, and should work to protect the data on the phone from potential eavesdroppers.

Ending drug prohibition

Earlier, I wrote about whether the phrase ‘greenhouse gas pollution’ is accurate, and whether it might be useful for building political will to do something about climate change. The phrase is accurate – CO2 is an unwanted by-product of various processes and it does harm to people all over the world – and it may be a useful way to remind people that ‘greenhouse gas emissions’ are a real problem that needs to be dealt with. It calls to mind phrases like “make the polluter pay [for the cost of cleaning up pollution]”.

I wonder whether a similar change in language might be helpful for opposing unreasonable drug laws. Mention ‘marijuana legalization’ and the eyes of the people around you will glaze over. They have heard the debate, they have their view, and they probably don’t care about it too strongly one way or the other.

Maybe we can do better by saying things like: “End marijauana prohibition” or “End the prohibition of drugs”.

People remember the prohibition of alcohol, the way it failed, and the problems it caused. It enriched organized crime and pushed alcohol use underground. It led to inferior and dangerous kinds of alcohol being sold. It cost tax revenues, crowded the prisons, and so on. All this is true of drug criminalization today. Most of the problems associated with drugs only exist because they are illegal, or are made much worse because they are illegal. Drug prohibition turns the drug trade into a violent, dangerous business and it turns ordinary people who use substances that are often more benign than alcohol or tobacco into criminals.

Al Capone was the natural consequence of alcohol prohibition. His successors created by the drug war may be less famous – and they may kill more people in Mexico than in Chicago – but their business has arisen for exactly the same reason, and operates according to the same logic. Stratfor describes what has been happening recently in Mexico as “a stalemate” “between the Sinaloa Federation, Los Zetas and the government” and argue that it has produced 50,000 deaths. That is more than 16 times the number of people killed in the terrorist attacks of September 11th, 2001. It’s about 6% of the number of deaths associated with the 1994 Rwandan genocide.

Ending drug prohibition just makes sense. It is both unethical and ineffective for governments to try to control what consenting adults do with their bodies. Their efforts to assert that control are doing demonstrable harm. Perhaps by speaking about the situation in terms of ‘ending prohibition’ rather than ‘legalizing’ this or that, the political debate can be moved forward just a little.