Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Tuesday, January 01, 2019

Egregious Billing Practices by USA Health Care Organizations

Taking Surprise Medical Bills To Court Under the Theory of “Mutual Assent”

Consumers are increasingly vulnerable to... so-called balance bills, which represent the difference between what insurers pay and hospitals’ list prices. List prices can be several times higher than what they accept from Medicare or in-network insurers.

Congress is considering bipartisan legislation to limit balance billing. But some legal scholars say that patients should already be protected against some of the highest, surprise charges under long-standing conventions of contract law.

That’s because contract law rests on the centuries-old concept of “mutual assent,” in which both sides agree to a price before services are rendered, said Barak Richman, a law professor at Duke University.

Thus, many states require, and consumers expect, written estimates for a range of services before the work is done — whether by mechanics and plumbers or lawyers and financial planners.

But patients rarely know upfront how much their medical care will cost, and hospitals generally provide little or no information.

While consumers are obligated to pay something, the question is how much? Hospitals generally bill out-of-network care at list prices, their highest charges.

Without an explicit price upfront, contract law would require medical providers to charge only “average or market prices,” Richman said.

In several recent cases, for example in New York and Colorado, courts have stepped in to mediate cases where a patient received a big balance bill from an out-of-network provider. They ordered hospitals to accept amounts far closer to what they agree to from in-network private insurers or Medicare.

I strongly believe congress should pass a law outlawing the existing practices. And it is good to know the most egregious, and increasingly common, practices of the USA hospitals are already illegal. If you state hasn't already taken hospitals using such practices to court and required refunding all ill gotten gains, contact your attorney general to make sure they do so. And contact you state legislators to make sure they act also. Several states have been much more concerned with protecting their citizens from being abused by large health care providers but most states have not.

The existing practices are unethical and it is unconscionable that our elected representatives have allowed such egregious practices to continue and even become more common.

Related: Democrats and Republicans Have Failed the USA on Health Care for Decades (2015) - USA Health Care System Remains Broken, Neglected (2011) - The USA Should be Ashamed of Who We have Elected - Decades of Failure by Those Responsible for USA Health Care System Needs to be Addressed (2012)

Sunday, January 29, 2017

The Continued Fall of the USA's Political Leaders that We Give Power To

A few days into the new President's administration and it is as bad as anyone paying attention would have expected. It is very sad the USA elected Trump and the Senators and Representatives standing with him. The consequences of electing Trump and the others that support his actions and that are choosing not to protect the USA constitution will be very damaging.



Photo of the White House by John Hunter. This house should be a place worthy of respect (even for those with political differences) but the current occupants are straining that hope.

As a kid in high school I couldn't understand how the USA could fail as badly as McCarthyism; Japanese internment; Nixon's enemies list, watergate etc.. Other failures I would witness later, while a shockingly abhorrent, such as the Iran-Contra scandal flaunting of the rule of law and the failure to do anything about it I saw as sad but not surprising.

The USA we created isn't a binary no-Trump = good v. yes-Trump = bad. The current situation was created by us voting for who we did for decades. The actions of the people we put in power, created the system where Trump could be elected and have huge support from the others we elected.

There were many warning signs of how bad it was during the last 2 administrations. True, it is much worse now, but we were on the path here. But we have created a toxic system that was intentionally shaped by those we granted political power. They shaped a system that ignore facts, devolve discussion into 1984 News Speak, ignore the rule of law when it was convenient for whoever was on your side in the battle for power, pretend complex realities have simple solutions, badly distorted democracy with unconscionable gerrymandering, etc..

The current president and his leadership team certainly are taking the toxic situation created by those we elected for the last few decades and are taking it extremes even more damaging than those that designed it wished for it to be. But when you create and promote a dumpster fire in order to get whatever your short term desires are you can't disown responsibility for the damage that dumpster fire continues to do after you.



Photo of the USA capital by John Hunter. If those elected officials voting in this building the next few years continue as they have done in the few decades we are going to suffer greatly for the mistake of electing them.

The kids of kids today are going to be wondering the same thing about us that I did about our McCarthyism, Japanese internment... supporting ancestors. It is devastating that for decades we allowed our political parties to destroy the fundamental aspects of what the USA should stand for.

The challenges we face as a society are great enough without continuing to put in power the people that have lead the USA to the extremely sad state of affairs we see today with the actions of the current president and his supporters in the White House, on Capital Hill and in the State houses and legislatures around the country.

Sure the current president is a huge mistake we will suffer greatly for voting into office. But the problem is much deeper than just him. The political leadership has been allowed to rot to the core. He is merely a symptom of how bad we have allowed things to get.

We need to fundamentally change who we give power to if we want change. We need to provide power to those that seek to fix problems. We need to give power to those that acknowledge scientific and economic reality. We need to elect people that appose hate. We need to elect people that care more for the country than for personal aggrandizement and reward. We need to elect people that care more for the country than following the orders of their party.

Things are much worse today than a year ago but if we believe the problem is the current president we will fail to address the real problem. He is just a symptom of how messed up our country is. Replace him with his Vice President or most of the other leadership of his party and maybe a few of the most extreme embarrassments to the country would go away but the core of what they stand for doesn't change. The president is not a King or Dictator. The Courts, House and Senate can (and the Constitution depends on them doing so) block actions that damage the country. But the House and Senate are not doing so.

As the current system has evolved the politicians state a few words about they believe in such and such and don't support this other thing and then they go ahead and vote for this other thing while undermining such and such. They have created a system in order to promote the belief that what they actually do isn't what matters but what they say. That way they can fully support actions that they claim to not support. Sure the current president is even less concerned with the truth but he is just extending the policy of News Speak that became the standard practice for both parties over the last few decades.

If we are lucky a few Republicans will stand with the USA and the Constitution and join Democrats that mainly will appose just because the current president isn't from their party and we will avoid some of the worst of what we can expect. But we may very well not be lucky for a several years. Being stuck in a position where we have to hope for a few politicians to be courageous is not a good position to be in given the poor performance of our politicians the last few decades.


Related: Living Through Your Society Becoming a Police State (2013) - Security Theatre Thinking is Damaging the USA (2013) - Freedom Increasingly at Risk (2008) - The Aim of Modern Day Political Parties is To Scare Donors Into Giving Cash (2014) - Selling Out the Country: We are Electing the Wrong People to Control Our Government (2015) - SWAT Raids – Systemic Failures? (2007) - Anti-Market Policies from Our Talking Head and Political Class (2011) - We Need to be More Capitalist and Less Cronyist (2011) - Preaching False Ideas to Men Known to be Idiots (2010) - Adding More Banker and Politician Bailouts is not the Answer (2012) - Failure to Regulate Financial Markets Leads to Predictable Consequences (2009) - Don't Excuse Immoral Looters (2009) - Lobbyists Keep Tax Off Billion Dollar Private Equities Deals and On For Our Grandchildren (2007)

Sunday, February 28, 2016

An Advocate for Open Access and Privacy Has Been Nominated to be the Librarian Of Congress

The Librarian Of Congress sounds like an unimportant position but it actually is very important for the influence they have over copyright policy in the USA (and the world because of how the USA prioritizes copyright over important national interests).

President Obama Nominates New Librarian Of Congress Who Supports Open Access, Fights Against Surveillance

Hayden was one of the leading voices speaking out against surveillance. As President of the American Library Association at the time when the PATRIOT Act was being debated, she was vocal in opposition, especially to Section 215, which was used to create the phone metadata program that Ed Snowden revealed. What many people forget is that it was the librarians who were most vocal about Section 215 when it was first proposed, as many people thought it would be used to demand things like library records to see what was being checked out -- and librarians are big supporters of privacy.

She's also spoken out for years about the value of free access to information. Here's a 2003 profile of Hayden in Ms. Magazine (where she was named Woman of the Year) in which she notes:
“Libraries are a cornerstone of democracy—where information is free and equally available to everyone. People tend to take that for granted,” says Hayden. “And they don’t realize what is at stake when that is put at risk.”

This is very good news. The broken copyright system is a deadly diseases for the USA economy and has done great damage for a long time. This is a one small step that could reduce the damage that is done. It is good to see President Obama taking a good step in this direction given how much damage he has done with his many other policy decisions, including Trans-Pacific Partnership (TPP) and TTIP.

Not blackballing someone because they believe in privacy is also somewhat remarkable given the consistent efforts of President Obama to greatly enhance the survailence state in the USA.

In President Obama's statement he says

Her understanding of the pivotal role that emerging technologies play in libraries will be essential in leading the Library of Congress as it continues to modernize its infrastructure and promote open access and full participation in today's digital world.

This is a good step. I hope she is confirmed. But it is one decision moving the right direction compared to a huge number of initiatives making copyright more damaging to the USA and globaly economy. So while I am glad for this one step, it doesn't come close to erasing all the damage his adminstration has done.

Related: Why Copyright Extension is a Very Bad Idea (2009) - Librarians Standing Up to the Madness (2009) - Library of Congress in Washington DC - I Strongly Support Elizabeth Warren and the Consumer Financial Protection Bureau

Sunday, November 01, 2015

Security - Verification of Change

Many web sites will now notify you if a change is made to various aspects of your account, say you change your address or email or phone... Every one I have ever received says if you made the change do nothing, if you didn't then call us.

My guess is this is because it provides some security and is super easy for them. But if security were the priority I think you would do more. Why not require them to affirmatively agree to the change? The main reason I can see is that it would create more work. You would need a process for the case where they failed to affirmatively agree to the change.

Still for very important matters it seems like this would be wise. Yet I have never seen anyplace do this.

One thing I can think of does has this process in place. For a long time (15 years?) if you get a new credit card you have to call and activate it (usually they use caller ID to auto approve if you call from the phone number on file, if the call isn't made from such a number you are asked other details to verify who you are).

Such a system could be opt-in, so only people concerned about security could participate and someone that didn't want to bother could continue as things are today.

Related: Protecting Your Privacy and Security (Curious Cat Investing blog) - Protect Yourself from Credit Card Fraud - Governments Shouldn't Prevent Citizens from Having Secure Software Solutions - Making Credit Cards More Secure and Useful (2014) - Bad Security on Government Required RFID e-passports

Tuesday, February 03, 2015

Help Evaluating Server Co-Location Sites

Online security does get a fair amount of attention but it is still paid too little attention. Everyone should be using password manager to create long passwords, unique for them (not duplicating across sign ons) for our online accounts. And when possible using two factor authentication.

Part of the reason we need to be extra careful is to make up for less than ideal security practices at companies. I wrote about something that is similar to how Apple Pay works before they announced: a method to secure your credit card even in the event the store fails to protect their computer systems.

Since most businesses outsource hosting their web sites to network operations centers run by others this is another area that must be addressed. Evaluating co-location hosts is a complex task and companies such as Colocation Authority provide expertise in this area.

The factors in choosing a host for your servers are complex. Essentially you want a reliable connection to the servers either to access by your network (almost certainly tunneled over the internet) or to host content available directly via the internet. Physical security is one important factor but there are many others including redundant power supply, redundant connections to the internet, sensible infrastructure within the operations center and often security code at the network operation center level to aid in blocking things like denial of service attacks.

For even fairly large businesses having expertise to evaluate the best co-location options is difficult and would be expensive. Therefore using specialized experts is wise.

Related: Site Owner Impressed with FBIs Response to The Theft of Their Domain - Don't Lock Your Content Inside a Proprietary System

Thursday, January 01, 2015

Terrorism Response by the USA is Society’s Immune System Attacking Itself

Simon Phipps states very well and concisely what the results of the reaction to terrorism driven by the USA in his post On Terrorism

Terrorism isn’t just performing a terrifying act. It’s provoking society’s immune system into attacking itself, making its defence systems attack the values and people they are supposed to be defending. Terrorism is an autoimmune disorder of democracy. You don’t fight terrorism by attacking the virus; you fight it by strengthening the immune system.

Related: Living Through Your Society Becoming a Police State (2013) - USA Encouraging Governments Worldwide to Spy and Hack Globally is Very Dangerous - Freedom Increasingly at Risk (2008) - What Principles Does the USA Government Still Honor? - Liberty and Support or Control and Hate - Disregard for the Rule of Law by Government - Anti Liberty Sentiment in Congress (2012) - Liberty Again Denied - It is Sad How Little We Seem to Care (2011)

Tuesday, April 01, 2014

Site Owner Impressed with FBIs Response to The Theft of Their Domain

My Website Was Stolen By A Hacker. And I Got It Back.
The morning after I found out about the unauthorized transfer, I also called the FBI. I felt silly and dramatic making the phone call, but the reality is that this is an international cyber crime issue, and that’s FBI territory. And this is my business. It’s how I support my family, and it may be a “small matter” in the grand scheme of things, but it is not a small matter to me.

And let me tell you: of all the surprises I’ve had over the past week or so, most surprising of all has been the FBI. They responded immediately, with follow-up phone calls and emails, an in-person interview with two special agents at my own home within 24 hours, and a follow-up visit from two agents yesterday. Beyond that, each and every agent I have interacted with over the past week has been, without fail, compassionate, thoughtful, invested, respectful, and committed to action…in addition to treating me not like a case number, but like a human.

What I expected was to leave a message with a general mailbox and at some point receive a form letter; I certainly did not expect to see an active investigation opened immediately. I’m not going to write more about the investigation because it’s still ongoing (although I did ask for and receive permission to write about this), but I think it’s important to say how absolutely blown away I have been by the FBI’s response.
This is great news. The FBI needs to do a better job of stopping online crime. It is a difficult task, but the damage done is great and the criminals don't seem very concerned with the level of law enforcement effort so far. The task is very challenging and requires international cooperation. We should be funding a great deal more of that and a great deal less spying.

The companies she relied on did not do as well in your review of the situation

And once I reached people who could help me – who could literally make a single phone call or push a single button and return my property to me (or simply freeze it so that it could not be sold or destroyed) – they would not. They hid behind their legal departments and refused to do anything, knowing full well that their inaction would force me to either interact with and pay off a criminal, or lose an essential component of my business.

And hackers know that these companies will do this.

They rely on it.

There is a serious problem when a criminal enterprise not only exists “despite” a company’s policies, but actually thrives as a direct result of that company’s prioritization of their own interests over the security of the clients they allegedly “protect”. Do I understand why companies like HostMonster and GoDaddy are focused on protecting themselves against lawsuits? Of course I do. But the fact is that they not only do not “help” their customers, but actively contribute to creating situations that threaten small businesses and the families that they support.
The solution for this is that we need to support companies that prioritize doing right over those that decide to follow lawyers that could care less about illegal activity and the customers of their companies being defrauded. We need to move our sites to those companies with a history of doing what is right. To this we need to learn about what companies do so, which I am not sure of (Gandi might be a good registrar). Also, of course, use strong password, and use 2 factor-authentication if possible (with all your email account and other accounts - such as your registrar). The person that had their domain stolen believes the initial theft occurred due to a stolen email account (without 2 factor authentication).

Related: It is Refreshing to See Our Government Protecting Us - Bad Security on Government Required RFID e-passports - We Should Build Secure Software Systems

Wednesday, March 05, 2014

Banks Failed Management Practices Never Seem to Stop

I can't believe how constantly there are news stories about corruption and bad practices so deep that banks have to hand over hundreds of millions of dollars. To say nothing of crashing the world economies and requiring bailouts from taxpayers across the globe not just to stay in business but to limit the damage their immoral and unethical consequences of their practices. All the while the executives continue to act just as kleptocrates surrounding tinpot dictators - as everyone else is horrified by both groups behavior each dips into the treasury they have access to and takes all they can. And consumers suffer due to the failure to adopt sensible security practices in the USA for credit cards that the rest of the world has adopted.

What is the disclosure today of pointy haired boss banking behavior? 95% of ATMs rely on Windows 95 which is a poor security risk to begin with and Microsoft ends support for it on April 8th, 2014. How do we even allow these executives to remain in positions of authority (in businesses where security is so important)? And we go beyond that and allow these people to lavish cash upon themselves out of the funds held by the bank?
security experts have chastised the financial industry for putting ATMs on a PC operating system in the first place. They argue ATMs should be using software that is scaled down and less buggy, such as Linux.
No kidding, plus Linux versions are much more secure from the ground up.
Ironically, bank customers have less to worry about from those nondescript ATMs found in malls, bars and tiny convenience stores. Those 208,000 independently-run kiosks, built by Triton, Genmega and Nautilus Hyosung, make up the other half of the nation's ATMs. And nearly all of them run on an even older, simpler operating system called Windows CE -- which Microsoft still supports.
Jeez I don't know what to say about this. It is better I guess, but hardly any good, but maybe it is less horrible (I am not really sure).

Dealing with criminals attacking credit cards, ATMs, banking web sites and banking apps is a challenging business. The governments are not doing consumers any favors by lavishing funds on spying when those funds would be much better directed to stopping financial crimes (of this sort - and also the sort engaged in by banking executives - from which those continuing avalanche of fines for hundreds of millions of dollars stem). But since governments are choosing to spy while neglecting crime prevention it is even more important for banks to make credit card, ATM and online security a priority. Instead they are making a priority buying special favors from governments of straight welfare and subsidizing/allowing risk taking (and subsidizing any failed risk taking with taxpayer funds) to give lavish gifts to executives so they can build castles and the like. It is quite a sad system.

Related: CEOs Plundering Corporate Coffers for Personal Gain - Losses Covered Up to Protect Bonuses - Obscene CEO Pay - The Best Way to Rob a Bank is as An Executive at One

Tuesday, February 04, 2014

USA Encouraging Governments Worldwide to Spy and Hack Globally is Very Dangerous

I think as bad as just the USA governments global spying and actions shredding the US constitution are the even greater damage is the encouragement the USA government policy gives for every other country to spy on every person, business and government across the globe.

I do believe the USA government is unlikely to have a huge amount of criminal information security spun off their massive spying efforts. But you can just look at all the examples of TSA agents (and others - that have been cleared by the TSA to work jobs inside the "security bubble") stealing from people forced to go through security theatre to see it is certainly possible for the USA governments actions are aid criminal enterprises including those by USA government employees.

Those risks are real. They will lead to damage to USA citizens. But they are small, I believe, compared to the damage USA citizens will suffer due to the mass increase in the global surveillance culture the USA has spearheaded the last 10+ years. Granted few countries have government so rich that they can afford to spend so much money on global internet surveillance and hacking (as the USA has done).

But there are at least 10 that have money and or resources that can do a huge amount of damage if they follow the USA's lead (lets just list a few China, UK, Germany, Japan, Korea, Brazil, India, Russia, Turkey, Taiwan). Some countries have more cash, some have large hacking (not just criminal hacking or government sponsored hacking but just software hacking talent in general wether for good, questionable good and/or questionably legal or downright bad definitely illegal) talent pools, some have large experience with large scale surveillance operations. and/or Certainly the USA has no justification to argue that any country can't do what the USA claims it not wrong for it to do. And the number of countries that could do a huge amount of damage with focused global surveillance and hacking is very large indeed and will grow going forward.

The result of the risks to everyone globally, including those in the USA, to the practice of massive government intrusion into private communications, internet activity, etc. of everyone is extremely damaging.

Related: Watching the Watchmen - Disregard for the Rule of Law by Government - NSA Spying on Apps Shows Perils of Google+, ‘Candy Crush’ - Little Watchmen - Freedom Increasingly at Risk

Friday, January 10, 2014

Don't Let the Need to Blame Prevent Safety Improvements

Reaction to - Motor Mouth: Who’s liable when a self-driving car crashes?

While I agree we need to come up with an answer within the context of our legal system, I really see the bigger problem as the false responsibility claims our legal system encourages.

Many times there are negative results that should not result in wasteful legal proceedings but our system is so focused on pining the blame on someone to write a check that it accepts blaming x person because there isn't anyone else to blame. Often that is a bad outcome. I would welcome us examining the assumptions about everything needing to be blamed on specific parties.

I do agree there is a benefit to accessing pentalites to culpable parties. I think our current system needs to accept that complex systems often have bad results that should not be handled the way we do now. The whole issue is very complex but I think there is a need for much better decisions about blame being made in our legal system. It requires much more understanding of science, engineering, statistics etc.. And less overly simplistic blaming based on over simplified models.

My father was a professor of statistics/industrial engineering/chemical engineering and worked some trying to get a better understanding of cause and effect into the legal system decades ago, for example: Statistics, Science, Law and the Environment (The American Statistician, 1983). I think we need to do much better in this area.

Another question this raises is if 20,000 lives a year could be saved by self-driving cars and people didn't use that safety advantage are they liable for choosing a dangerous option (person driven car) even if they were not specifically negligent as far as the facts of the specific case are concerned. If we know drunk driving is more dangerous we pass laws and you can't drive drunk. Even without any proof your actions were at fault your state of being drunk makes you liable. Well, if drive less cars are much safer what is the difference, logically (I realize given the current laws there is a legal difference)?

Related: Blame the Road, Not the Driver - Separated Bike Lanes Reduced Injuries by 45% and Increased Retail Sales 49% (for nearby stores) - TPP Transparency Confirms the Worst: USA Government Still Trying to Strip Away Rights of Citizens in USA and Elsewhere - Traffic Congestion and a Non-Solution - System Improvement to Respond to the Dynamics of Crowd Disasters

Article looks at insurance companies reaction and predicts insurance rates could decline 60% with improved safety of autonomous cars.

Friday, December 13, 2013

Quick Thoughts on the Risks of Violence while Traveling

Just a quick response I posted on Reddit that I am also sharing here (to Defending yourself abroad):

Not getting drunk at bars likely proactively addresses a significant portion of issues.

Second, if you are coming from the USA or many other fairly high personal crime countries there are many places you are much safer while traveling. If you are coming from Japan, Singapore, Scandinavia you probably are much more likely to be the victim of crime than at home.

If you are not drunk the most likely crime is theft, while not good, it is much better than being attacked in my opinion (at least much better than being attacked by someone who is the equivalent of your still ineffective kid brother :-)

The biggest concern in a new environment is that you don't pick up on the clues of danger that you would in your home environment. This means to be safe you are wise to try and develop the ability to be more skeptical and more attuned to what is going on around you. You may also be the target as you may be more visible, may be seen as rich, may be seen as a jerk (often being drunk helps boost this impression).

There is danger everywhere. But we often exaggerate the danger of new place (new to us). Being careful makes sense, but the dangers away from home are often statistically less though are unfamiliarity may lead us to be less aware and able to avoid situations we find in unfamiliar surroundings. Also, being on your own (instead of in a city with lots of friends that help keep you in line, give you protection in numbers in some situations...) can increase the risk to you, especially again in unfamiliar surroundings.

I doubt learning fighting skills makes much sense. Outside of drunken brawls most places are not that violet and if they are many times it is guns and such things (though most often that level of violence is aimed at other criminals or family and friends).

There is other violence (between people) of course and it is sad and something to avoid. I would be amazed if car and bus deaths (of travelers) and injury don't exceed by a long way any person on person violence against travelers.

Related: Curious Cat Travel Destinations - Travel Photos blog - A Tourist in Singapore - Curious Cat Australia Travel -

Wednesday, November 13, 2013

TPP Transparency Confirms the Worst: USA Government Still Trying to Strip Away Rights of Citizens in USA and Elsewhere

TPP Leak Confirms the Worst: US Negotiators Still Trying to Trade Away Internet Freedoms by the EFF

The leaked text, from August 2013, confirms long-standing suspicions about the harm the agreement could do to users’ rights and a free and open Internet. From locking in excessive copyright term limits to further entrenching failed policies that give legal teeth to Digital Rights Management (DRM) tools, the TPP text we’ve seen today reflects a terrible but unsurprising truth: an agreement negotiated in near-total secrecy, including corporations but excluding the public, comes out as an anti-user wish list of industry-friendly policies.
The anti-liberty policies of those we elect continues. They continue to sell out basic rights to provide favors for those giving them lots of cash. The extent to which our elected officials go to hide their actions from public scrutiny is despicable. But the real damage is the consistent march to reduce liberty while providing favors for those providing politicians cash. The damage to society by this consistent pattern is enormous.

It was easy to predict the massive effort to stop SOPA would only temporarily delay the politicians anti-liberty policies. And sadly that prediction has proven accurate (not just TPP but many attempts, some successful already, to pass SOPA's provisions when the public isn't shining the light on the terrible actions congress and the administration are pursuing). They merely keep trying to implement SOPA, SOPA-like and even much worse policies than even were in SOPA over and over. TPP is just one of the most egregious examples of anti-liberty policies and the governments attempts to hide their actions from the public.

Related: Society is being shaped for us while we are busy making other plans - We Continue to Vote for Those that Sell Out the Country for Cash Gifts - Good Journalism Aids Society by Shining the Light on Corruption (and government trying to hide their policies from public debate) - Cash for votes subreddit (links to politicians sellout out their country for cash)

Monday, November 11, 2013

Continued Refusal to Address Abuse of the Constitution by Government

McCain: If you believe that Mr. Snowden didn't give the Russians information that he has, then you believe that pigs can fly.
From: UK spies continue “quantum insert” attack via LinkedIn, Slashdot pages

If you believe the political and government administration leadership in the USA are not abusing the constitution and making false statements to cover up that behavior and ignoring evidence that has been made public of such abuses then you believe pigs can fly.

It is pitiful how far our political leaders and talking heads have fallen (the exceptions are few, sadly). They would have been cheering on the House committee on un-American activities. It is so incredibly sad what is happening to our country.

Related: Disregard for the Rule of Law by Government - The People We Elect Recently Are Dramatically Falling Us - Living Through Your Society Becoming a Police State - Security Theatre Thinking is Damaging the USA - Freedom Increasingly at Risk (2008), the abuses have been apparent for quite a long time

Saturday, July 20, 2013

SWAT Culture

Too Many Cops Are Told They’re Soldiers Fighting a War. How Did We Get Here?
The numbers are staggering. In the early 1980s, there were about 3,000 SWAT "call-outs" per year across the entire country. By 2005, there were an estimated 50,000. In New York City alone, there were 1,447 drug raids 1994. By 2002, eight years later, there were 5,117 -- a 350 percent increase. In 1984, about a fourth of towns between 25,000-50,000 people had a SWAT team. By 2005, it was 80 percent.

Today, the use of this sort of force is in too many jurisdictions the first option for serving search warrants instead of the last. SWAT teams today are used to break up poker games and massage parlors, for immigration enforcement, even to perform regulatory inspections.
This is a very sad state of affairs. Our police departments have lost a view of themselves as members of society aimed at promoting peace and liberty. The SWAT militarization is one outcome of this cultural mindset. Infringing on photographers rights (even violently at times) and destroying evidence of criminal action in doing so is all too common. There are still a majority of police that have not adopted the burnt earth mentality of enforcement but the overwhelming reliance on militaristic thinking has damaged the good will that good efforts provide. This cultural change is extreme and very damaging to society.

We need police to return to the thinking that makes them an important aid to society. The best work in this area that I know of is: Improving Police by the former police chief of Madison, Wisconsin.

Related: The System is Broken: SWAT Raids - Failure to Address Systemic SWAT Raid Failures - More SWAT Failures - Tired of Incompetent Government Harassment - Police Failing to Enforce Law If Lawbreaker is a Police Officer - Security Theatre Thinking is Damaging the USA

Thursday, July 04, 2013

I Can Spy on You, But You Can't Spy on Me

It seems to me there are numerous essentially vassal states of the USA that adopt largely whatever measures the USA really presses them on - for security or enforcing extremely long and counterproductive copyrights (the system doesn't do what it was suppose to do - instead has been turned into a system to help a few big business copyright cartel companies that give USA politicians lots of cash) but he USA has pretty much dictated legislation to numerous other nations that have capitulated.

I don't have much info but my impression is that states like Canada, UK, Germany and Australia are pretty much going to let the USA have whatever it wants. If they seek to avoid being vassal states to the USA it seems to me you have to chose a legal system and government that have shown some ability to stand up to USA pressure. I have thought this would be a smart thing for some countries to do for years but I haven't noticed any countries interested in taking on this role.

Germans accuse U.S. of Stasi tactics before Obama visit. My guess is Germany does nothing, other than making a few harmless noises. Pretty much Europe has been limited to voicing a bit of displeasure occasionally but for anything that requires action they act like a vassal state and go along with the USA (which often means big USA campaign contributors). Maybe Germany, or others, will want to step out from the shadow they have been in basically since the end of World War II, but I doubt it. There just haven't been any significant examples.

My guess is eventually some nations will, but my guess it will be nations that are not so tied to the USA and that can play the USA and China against each other to refuse to be a vassal to either one (but that is just a wild guess). How much longer it will take is the question. Or maybe people will just end up choosing between which police state policies they want to accept USA, China or some other one. Maybe countries like Canada will be like flavors of Linux so Canada is USA vassal but actually refuses to go along with a couple minor points here or there (and if you care most about those minor points you chose Canada).

It will be interesting to see if any nation stands up to the USA spying on their citizens. It doesn't seem too likely - other than a few oddballs that don't expect the USA the USA could do anything more to them, short to attacking the country militarily, and figure that isn't likely. It is odd to hear the USA talk about China tech companies facilitating Chinese government spying and then give secret order that the USA tech companies (or librarians) are not allowed to disclose that result in spying on citizens of other countries (and citizens of the USA).

Other than might makes right I don't exactly understand the philosophical system the idea that "you can't spy on us but we of spy on whoever we want"?

Here is one example of the perniciousness of the spying: U.S. officials sent back to German Facebook-mails. If you want to argue that we have to ignore Jefferson, Franklin, Patrick Henry, etc. due to big huge scary risks you must not abuse the spying for trivial matters. Yes, government agencies get caught up in their own fear mongering and grabs for power (which is one reason most sensible people and bright people don't trust government to gain absolute power to spy on citizens) and start to believe silly things like their security theatre is related to what they said the constitution needed to be abandoned to protect us from big scary things. If you use the abdication of liberty to block people from violating minor rules (such as working without a permit - the link above) in my mind you forfeit the right to claim your constitution defying actions are needed for a more important purpose.

Related: Governments Shouldn't Prevent Citizens from Having Secure Software Solutions - Freedom Increasingly at Risk - Liberty Again Denied, It is Sad How Little We Seem to Care - Security Theatre Thinking is Damaging the USA (May 2013)

Saturday, June 08, 2013

We Should Build Secure Software Systems

Once again Bruce Schneier is insightful and provides much more sensible advice than that given by the homeland-security-complex that spends billions to provide massively inconvenient and ineffective security theatre.

It's impossible to build a communications system that allows the FBI surreptitious access but doesn't allow similar access by others.
The FBI wants a new law that will make it easier to wiretap the Internet. Although its claim is that the new law will only maintain the status quo, it's really much worse than that. This law will result in less-secure Internet products and create a foreign industry in more-secure alternatives. It will impose costly burdens on affected companies. It will assist totalitarian governments in spying on their own citizens. And it won't do much to hinder actual criminals and terrorists.
...
When it comes to security, we have two options: We can build our systems to be as secure as possible from eavesdropping, or we can deliberately weaken their security. We have to choose one or the other.


Related: Governments Shouldn't Prevent Citizens from Having Secure Software Solutions - The last thing you want to do is increase the amount of hay you have to search through - Bad Security on Government Required RFID e-passports

Sunday, May 19, 2013

Governments Shouldn't Prevent Citizens from Having Secure Software Solutions

It has always seen obvious to me if you force a system to be designed to have a backdoor (to allow spying) that you have created a security hole. It seems to me these security holes are being misused all over the world by governments and others. How the FBI’s online wiretapping plan could get your computer hacked
They make it easier for the U.S. government to spy on the bad guys. But they also make it easier for the bad guys to hack our computers and spy on us. And, the researchers say, the Internet’s decentralized architecture makes it particularly hard to build effective and secure wiretapping capabilities online.
The track record of governments worldwide using these backdoors properly seems very poor to me. They make up tiny exceptions for when they will supposedly spy and then use the backdoor they created far more often. Then you have funny situations where the different governments expect their spying to be respected by everyone but don't like it if other governments want to have backdoors to allow spying themselves.

Certainly in the USA I can't see any reason why we should accept insecure software solutions because the government wants to be able to spy more readily. If they governments track record showed a respect for citizens rights maybe I would consider the tradeoff worth debating but given the realities of how poorly the government has explained their spying so far I don't see any reason to even consider crippling the security of USA citizens.

I am not as familiar with other countries - if their constitution have liberty as secondary and authoritarianism is accepted then sure crippling citizens security to make the state have an easier time of spying would be consistent. I don't see how it is arguably consistent with the US constitution.

I said, after 9-11, that if the government actually believes terrorism is a critical threat they had to extremely careful to not use fear as an excuse for non-terrorist related restrictions on liberty. Human history has shown governments abuse power. The US Constitution was created with this in mind. If you want to have citizens except restrictions on liberty their is an huge duty to provide evidence you are not just going to be like almost every other instance where government abused the power. Failing to do so, would mean people have to restrict government abuse, even at the risk of security.

The obligation was on government to show how seriously they took the risk to behave differently and not abuse the power they had. Instead the last two administration have been worse than any other (with the possible exception of the Nixon administration) with respect to abusing the liberty of citizens. This is a very sad state of affairs. They have chosen to rely on the ability of fear mongering, hiding behind false claims of "necessary secrecy" and the ability so many previous governments have had to take away liberty and get away with it (McCarthyism, KGB, all sorts of dictators that either the USA supported or apposed over the last 50 years and many many more). The problem with this option is that the citizens suffer while the bureaucracies get what they want. This isn't a good model. And it means thinking people should appose the government as they attempt to impose such models on their country.

Both administrations have done an absolutely atrocious job of making the case they would avoid political and authoritarian abuse while claiming terrorist justify the governments actions (Orwellian "Free Speech Zones" violate the constitution, Systemic SWAT RAID Failures, Watching the Watchmen, 2/3rd of USA Population Lives in Limited Constitutional Rights Zone According the Obama Administration - the DoJ is secretly enabling AT&T and others to evade wiretapping laws, Bikinis For Liberty, Our Internet Surveillance State, Justice Department Subpoena of AP Journalists Shows Need to Protect Calling Records). They consistently abuse liberty, using fear mongering and have lost any reasonable claim that their claims should treated as trust-worthly without much more evidence than they have been providing. Sadly it is not surprising that neither administration could put the security of the country before their personal interests, but the evidence is clear that they did not do so.

That evidence means we risk further losses to liberty without any evidence that security (rather than politics and the frequent tendency for bureaucracies to desire absolute power) will be enhanced.

I do think lots of great things are done to fight real threats. And those had been done for decades prior to 9-11. Some of the additional measures after 9-11 were wise. Huge amounts of the efforts are mainly about security theatre and gaining bureaucrats power at the expense of the liberty of citizens. This path is not one we should continue to reward. Sadly we currently are mainly going along with the politicians who have a long track record of being anti-liberty.

Relying on demagoguery and people accepting the government taking away their liberty does have a long history of working for governments. Relying on that risks the citizens getting so tired of government abuse of liberty that the citizens react by not only taking away the governments power to judiciously use power but take away significant sensible powers from government also. I fear that is where we are headed. This is the result of two administrations failing to take security seriously and instead just behaving as so many governments have in the past to amass bureaucratic power at the expense of citizens and the country.

It is a lot to ask those in government to put the well being of the country above the human nature to abuse power. It has certainly been far too much for the last two administrations to make it a priority to prevent abuse because the risks of doing so were so high.

The anti-liberty side is definitely winning. I hope we turn it around before I have to see how people must have felt as they experienced similar failures of will in the past (such as McCarthyism). But I think we may well have already past that point. It is just a matter of time before we have the distance of time to acknowledge and accept how horribly we have failed yet again to prevent abuse of power to go to extremes that are nearly incomprehensible looking back on them later. I remember thinking how unbelievably pitiful it was that the USA allowed McCarthyism to take place, yet not much later we are well on our way to repeating the same types of failures (though, as always, the exact clothing the abuse of power takes is somewhat different).

Related: Librarians Standing Up to the Madness - Preaching False Ideas to Men Known to be Idiots - Freedom Increasingly at Risk - Liberty Again Denied, It is Sad How Little We Seem to Care

Friday, May 03, 2013

The last thing you want to do is increase the amount of hay you have to search through

Continually growing the "security-inustrial-complex" decreases safety. Bruce Schneier again explains the insecurity our leaders are creating with their poor understanding of how to make society safer.
Piling more data onto the mix makes it harder, not easier. The best way to think of it is a needle-in-a-haystack problem; the last thing you want to do is increase the amount of hay you have to search through. ... Before we start blaming agencies for failing to stop the Boston bombers, and before we push "intelligence reforms" that will shred civil liberties without making us any safer, we need to stop seeing the past as a bunch of obvious dots that need connecting.
Sadly it is not only security we sacrifice due to our leaders failures but also the core principles our nation supposedly stands for: "life, liberty and the pursuit of happiness."

It also wastes huge amounts of money to create security theatre that we don't have to waste. That we allow so many billions to be used to deny our liberty and decrease our safety is disastrous.

Related: The TSA doesn’t give a hoot about security - Society is being shaped for us while we are busy making other plans - Liberty Again Denied, I am Sad at How Little We Seem to Care - Anti Liberty Sentiment in Congress

Wednesday, April 17, 2013

Good Journalism Aids Society by Shining the Light on Corruption

Journalists do a great deal of good, even if much of what their employers publish is useless (or worse). In this example, Journalists at the Sun Sentinel wrote a 3 part series documenting

the shocking behavior of law enforcement officers behind the wheel. The reporters found nearly 800 officers who reached speeds of 90-130 mph, many of them while off duty. The accidents caused by officers driving at high speeds had caused at least 320 crashes since 2004, killing or maiming 21 people.

That police departments cover up abuse by their own to the public is pitiful. So many good police officers serve these systems that are failing to stop criminal behavior against the public. It shouldn't fall to journalist to protect the public, but when the police perpetrate such bad practices journalists are a potential protection to the public. If we don't support real journalism we risk great damage to our society.

Related: Real Journalism Exposes Bail Bond Corruption - Tired of Incompetent Government Harassment - SWAT Raids are Failing Society Systemic - Watching the Watchmen - Society is being shaped for us while we are busy making other plans - USA Falls to 47th in Press Freedom Ranking

Wednesday, January 18, 2012

Anti Liberty Sentiment in Congress

Written for my management blog blackout in support of those fighting SOPA and PIPA:


This site is participating in the SOPA/PIPA blackout day. Sadly I don't have a simple way to just have this page for the USA and I decided having it show for everyone was better than not showing it.

As this is a management blog, I would like to explain my analysis of this situation. The SOPA and PIPA bills are not special cause results. They are the natural outcome of the current anti-liberty system in place in Washington DC. As such the proper counter-measure is not to band-aid this negative outcome and think you have done well. If you need a band-aid counter measure immediately, that is fine. But if you don't then look at the system creating that result: the bad result will just reappear.

My belief on the systemic cause is the anti-liberty sentiment in congress. This creates the conditions where lots of extremely bad anti-liberty laws are proposed and passed. SOPA and PIPA happened to be so horrible that an huge outcry they couldn't ignore and push through (most likely, it is still possible they might). But that is all. SOPA and PIPA are the natural result of the current system. They are not some special outlier that you can block and then be confident the system is working.

There are a few other systemic issues that contribute to the extremely bad law that SOPA and PIPA would be. A profound lack of basic understanding of technology. A profound lack of understanding of copyright. Those are compounded by a profound lack of respect of knowledge (so ignorance is not seen as any reason to act cautiously or seek expertise). A system where large amounts of cash seem to drive policy much more than anything else. Add those to the anti-liberty agenda of the last decade and you will continue to get SOPAs and PIPAs.

Where we are today
"Eternal vigilance is the price of liberty" - Wendell Phillips
which is often quoted as "The price of freedom is eternal vigilance" and attributed to Thomas Jefferson

Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety. - Richard Jackson (maybe)

Those outside the USA
Several other countries have already had the USA coerce their governments into adopting legislation desired by those who "donated" (in other words gave cash to) American politicians. I am surprised none of those countries has reversed the decision to harm their citizens as a favor to those paying American politicians cash but I don't think any have. If you live in one of those countries maybe you should see about getting rid of the people that do such things to your country. And the State Department may well be pressuring for SOPA like laws right now.

The USA's Anti-Liberty Agenda
Sadly the USA has been on a kick to reduce liberty and increase government and corporate power over liberty of citizens. I have written about the attacks on liberty on another of my blogs.

SOPA and PIPA are the recent outcome of this mindset of those in congress today. The attempts to payoff a few of the lobbyists that give them large amounts of cash has resulted in many bills; SOPA and PIPA being the current examples. They have become so used to egregious anti-liberty legislation being ignored that they allowed the lobbyists to go so far in writing SOPA and PIPA that even the normal apathy was overcome.

It appears they realize the price of their favors to those giving them lots of cash (for their campaigns) is too high in this case. People actually noticed how egregious the attacks on liberty were. And the reactions by those people have made it seem that the consequences to the politicians of passing the law (that they wanted to pass before the consequences to themselves was made obvious) are now too high.

Given past conduct I would expect them to bow to the current pressure and just sneak in most of the bad policy (to pay back those giving them cash) into future bills. They also seem to be trying to say by getting rid of a couple of the most vile parts of the laws that the rest of the payoffs to those giving them cash should be ok.

I was amazed when the politicians were able to withstand the maelstrom of criticism about he security theater/anti-liberty practices of TSA. So how far they are willing to fight in order to pay off contributors and further the anti-liberty agenda I am not sure. But the evidence seems to be pretty far. I would expect they will not learn from this and continue their normal conduct, which will mean continued attempts to pass similar measures.

Until we refuse to elect people that are willing to sacrifice liberty for their personal short term interests we have risks of such laws passing. Only extraordinary efforts seem capable of rolling back small pieces of the anti-liberty agenda currently being pushed by both parties in Washington DC. But it is only because the public lets them get away with it. So it is really our problem. If we want to stop the anti-liberty agenda (of which SOPA and PIPA are a minor, though dramatically flawed example) we need to stop electing those that support it.

There is an App to Help You Avoid Supporting Companies Actively Undermining Your Rights through their support for SOPA and PIPA.

Librarians Standing Up to the Madness

"First they came for the communists, and I did not speak out - because I was not a communist;
Then they came for the socialists, and I did not speak out - because I was not a socialist;
Then they came for the trade unionists, and I did not speak out — because I was not a trade unionist;
Then they came for the Jews, and I did not speak out — because I was not a Jew;
Then they came for me — and there was no one left to speak out for me."
Martin Niemoeller



SOPA/PIPA resources:


PROTECT IP / SOPA Breaks The Internet from Fight for the Future on Vimeo.