Thursday, October 30, 2014

The Status of ORIGINAL Property

Original property is newly invented or newly discovered.  It had no previous owner.  In fact, it did not exist – or its existence was not perceived – until the original inventor created it or the original discoverer found it.  How do we recognize such property?  What rights does the inventor or discoverer hold?  Are some or all of those those objective, absolute, or conditional? 

A sailor finds an uninhabited island.  Can she claim the whole thing for herself?  An astronaut lands on an asteroid, a moon, or a planet.  Can she claim the whole thing for herself?  A physicist discovers a new form of energy. Can she claim it all for herself?  A radio hacker finds that 1100 KHz AM is owned by a broadcast company. Can she use a chopper to parcel out nanoscopic slices of the wavelength for herself, given that her presence will never be detected and her presence will never interfere with their existing use of the wavelength?
The Ether did not exist for George Washington.
You could have had it all to yourself for all he knew.
Library of Congress.

It could be argued that the 1100 KHz frequency already belongs to someone.  However, the property is actually the amplitude modulated (AM) use of that frequency.  In theory, frequency modulated (FM) and phase modulated broadcasts are both possible on 1100 KHz without interference.  They are just not technologically useful today.  This is not new.  

(Actually, the property status is limited in space, as well.  That, too, is a different problem, caused by a misperception of the potentials in technology. One of the nice features of 550 to 176 meter wavelengths is the way the waves bounce off the ionosphere.  That was discovered as a by-product, entertaining teenagers who listened to far-away stations.  It could have been commercially exploited.)  

Thomas Edison was a telegraph hacker.  He discovered how to multiplex and quadriplex messages on the same wire.  Granted that the wire was someone’s property, it could, nonetheless have been leased out to different people using different blocks of time-passage on the same wire.  Also, in theory, it could have evolved that the telegraph wires would have been the broadcast source for what we call radio.

When a direct current circuit is closed and opened, a magnetic field is created and collapsed.  That is an alternating field.  That field could have been used to transmit information, as in fact, the “ether” was used by actual radio (initially called “wireless”).  So, you could have paid the telegraph company its tariff for sending messages, but have no concern for the literal transmission but been sending “open” and “close” signals to create a carrier wave for transmissions of your own.  Who would have owned that ether?
The Personal Computer Revolution
 saw the use of voice grade telephone lines
for data transmission.

Lasers can carry messages.  It could have come that a network of  lasers made of ruby crystals doped with chromium and pumped by xenon flash would have been a continental system, point to point, with relays and amplifiers every 20 miles or so. Then, someone with a YAG (yttrium aluminum garnet) laser could have a network whose beams crossed those in space but without interference because the beams are of different frequencies.  Thus, no violation of property rights would have occurred. 

Original property brings a special challenge to the law because no previous legislation anticipated it.  Ayn Rand attempted to delineate the proper role of government in her essay "Property Status of the Airwaves."  Twenty years later, the Electronic Frontier Foundation was created to bring law and order to cyberspace.  Rand did not stray far from the mainstream.  Her essay never questioned the Federal Communications Commission - though she excoriated it in other writings - or the law that created it with power to rule by decree.  The EFF has been fighting a war of attrition while bunkered within the First Amendment.  The next new invention will leave them to defend an old technology without new ideas.

I believe that rather than looking to legislation or administration, these problems are best settled in courts.  The English system of justice works because of what American conservative complain about as "judicial activism."  The other way is the Continental theory of "civil law" in which the legislature spells out the law in detail and the courts only enforce it.  In other words, in the English system, the court fits the law to the case, making case law, whereas in the Continental system, the court fits the case to the law.  (In American today, the courts do both.  The court of original jurisdiction applies the law.  Appellate courts test the law.) The English system is better at protecting individual rights because those are the implicit foundation for judging the law and for making new rulings that create precedents.


Tuesday, October 28, 2014


This is Atlas Shrugged for children. Instead of a given world collapsing for lack of reality, reason, and rights, we have an established chaos coming to order as one girl uses her reason to deal with reality and even come to understand rights.

A plague kills all the adults, leaving children to fend for themselves. This is the story of how Lisa figures it all out, usually by trial and error. She has good insights, but does not anticipate the reactions of others.  So, she works again for each new solution. She attacks each problem in turn and ultimately ensures the survival of the group that clusters around her.

Lisa finds inspiration reading Atlas Shrugged, a book alluded to, but never mentioned. (Later republications of the book have the reference to Atlas Shrugged removed.) On the Rebirth of Reason website, Barbara Branden wrote (March 23, 2005): “I've read it, and it's a beautiful book which I would recommend for any child. It has to be inspiring for a child, because it focuses on how much he or she can accomplish. The writer is an Objectivist.”

This book contrasts well against Lord of the Flies and other presentations.  What happens to children without adults is an artificial problem, not much different than a book about robots or aliens.  With science fiction and related genres, the author can create a new test environment to explore questions of human nature.  The author engages the reader to ask and answer wider questions about good and evil.  In this book, human nature is essentially a potential. (These are, after all, children whose natures are not set by habit.)   These  people are good or bad according to the choices they make.

After 35 years, The Girl Who Owned a City remains popular with kids for obvious reasons. 
1977 Dell Paperback (Laurel leaf science fiction)
1995 Runestone Press Books
2003 Rebound by Sagebrush
An audio book was produced in 2009. (Johanna Parker reading for Recorded Books, LLC. ) Graphic Universe published a new version in 2012, drawn by Dan Jolley, JoĆ«lle Jones and Jenn Manley Lee. 

If you search YouTube you can find many trailers based on it, some of them recent.  
These are passable fan videos
This is a  fan skit
For being a Lego cast, this one is read well

Be an Engineer Day

Monday, October 27, 2014

Where the Only Law is Right

Back In The Saddle Again
Recorded by Gene Autry
Written by Ray Whitley and Gene Autry

C               G7      C    
I'm back in the saddle again
F                       C     
Out where a friend is a friend
Where the longhorn cattle feed
       C            A7            
On the lowly Jimson Weed
D7                     G7                  
I'm back in the saddle again

C          G7         C      
Riding the range once more
F               C     
Toting my old forty-four.
Where you sleep out every night
          C           A7  
And  the only law is right
D7          G7      C     
Back in the saddle again

Rocking to and fro
Back in the saddle again 
C      F               C 
Whoopi-ty-aye-yay I go own my way 
D7          G7      C  
Back in the saddle again

Chords for guitar from County Classic Song Lyrics
[Lyrics edited - MEM]

Friday, October 24, 2014


OWASP (the Open Web Application Security Project) sponsors LASCON, the Lonestar Application Security Conference.  This year's two-day assembly brought together cutting edge vendors, theoreticians, and developers.  It was my privilege to be the introductory speaker serving KUNAL ANAND of Prevoty and KSENIA DMITRIEVA of Cigital.  The general session guest speakers included Martin Hellman, co-inventor of Public Key Cryptography, and Kelley Misata, formerly of Tor, now with Suricata.
Martin Hellman (right)
"The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks." -

Ksenia Dmitrieva of Cigital answers questions
after her presentation
"Everyone is free to participate in OWASP and all of our materials are available under a free and open software license. You'll find everything about OWASP here on or linked from our wiki and current information on our OWASP Blog. OWASP does not endorse or recommend commercial products or services, allowing our community to remain vendor neutral with the collective wisdom of the best minds in software security worldwide. We ask that the community look out for inappropriate uses of the OWASP brand including use of our name, logos, project names and other trademark issues." -- OWASP.

Keynote Speaker Kelley Misata spoke on behalf of Tor.
Misata is now working with the CERIAS project of Purdue
and Suricata, an Open Source Foundation partner
Martin Hellman worked directly with Whitfield Diffie to realize public key cryptography. They then discovered that Ralph Merkle had independently submitted papers some months earlier.  Merkle's work was rejected for openly running contrary to the mainstream of cryptographic theory. ("Secure Communications over Insecure Channels" on his website here.) They published congruent ideas but under a less contrarian article title, "New Directions in Cryptography." (On his own pages here and archived widely, including here.).  Also,  Hellman was a professor. (Diffie was his doctoral student). On the other hand, Merkle was working on his doctorate; and he had no support for his theories from his own mentors.  So Hellman brought more social status to the supposedly impartial peer-review process.  He also brought Merkle to Stanford from Berkeley.

Kelley Misata had been cyber-stalked for eight years. She watched while her computer was taken over and worked remotely. Trashy emails were posted in her name from cuts and pastes from her own Facebook pages. She could not apply for a job without her stalker knowing it and intruding.  She figured out who he was.  However, the FBI said that they were powerless, and a judge refused to issue a restraining order, both because the stalker hid behind Tor and could not be identified.  So, she took her MBA and her experience in marketing to Tor where she advocated for privacy and security. She now helps the Center for Education and Research in Information Assurance and Security (CERIAS) while working on her doctorate at Purdue.

Appropriately, the front of the vendor's hall was held by White Hat Security of Santa Clara.  All of the sellers were satisfied to have made good contacts. While setting up his talk, Kunal Anand underscored for me the importance of qualified leads to a start-up looking to scale its services. 

OWASP co-founder and Contrast Security CTO Jeff Williams 
Among the fifteen sponsors set up in the vendor hall were HP (both local and national sales offices), Contrast Security of Palo Alto, Trustwave, F5 Networks (headquartered in Seattle), Checkmarx from Chicago, Qualys (Redwood City), and K2Share from College Station. Texas.
Wade Williamson from Shape Security of Mountainview. 
OWASP conventions always include several security challenges, such as "capture the flag" and locksporting.  The convention name tags were puzzles with imbedded clues.  (Decipher the Roman numerals into an IP address and go from there.)  Winners received a challenge coin. "Capture the flag" lets would-be hackers attack knowledgeable defenders of a target computer.  Of course, all the firewalls do you no good if someone can pop the lock on your server cage. 

Jgor taught me how to pick a four-wheel combination lock.
After I felt successfully for the solution, he showed a slide
with a cutaway view of the internals . 
Over 40 different breakout sessions provided expert presentations on application security, rugged development, agile development, cryptography, IoT and mobile platforms, and an array of special case studies.  The two-day conference ended with giveaways and drawings. The top prize was a Pwn Phone from Pwnie Express.

We enjoyed great guitar work from Chris Devore
at both lunches and the Thursday evening social.
B-Sides 2013
Open Secrets
Fortune Cookie in Hex Code
The Eurion Project
Securing Your Viper Against Cylons

Saturday, October 18, 2014

Securing Your Viper Against Cylons

If you have a late model car, someone could take control of it while you are driving.  They could disable the brakes, command the steering wheel, set the speed, open the doors, disable the airbags, or explode them.

Computers in cars go back to the 1978 Cadillac Seville.  The chip was a Motorola 6800, used also in early personal computers.  It ran the car’s onboard display that provided eleven outputs such as fuel economy, estimated time of arrival, and engine speed.  By the turn of the Millennium, upscale BMWs and Mercedes boasted 100 processors. Even the low-tech Volvo had 50. (Automotive Mileposts website and Embedded website.)
Commander Adama would not allow
the computers on the battlestar Galactica to be networked.
His ship successfully resisted cyber attacks.

The General Motors OnStar system was launched in 1995 and went from analog to completely digital in 2006.  (Wikipedia here.) 

Now, such radio systems are a standard feature on common makes and models. With that link someone can take control of your car.

The older your car, the safer you are.  A vehicle from the 1980s or 1990s will have electronic controls, but they will be less open to attack from the outside.

The Mark VII vipers were the newest and the best.
The Cylons destroyed them
by hacking their computers from the outside.

When the Cylons attacked, these museum relics were
pressed into action because they lacked computers
that could be jammed and compromised.
Two different security projects have been reported.  In both, “white hat hackers” investigated ways to take control of different models of automobile.

In 2011, Car and Driver told about the work of the Center for Automotive Embedded Systems Security, a collaboration between academics from the University of Washington and California State University at San Diego.  First, they plugged their own device under the dashboard to compromise the on-board diagnostic computer.  (Anyone who can get to your car could do that the next time you take it in for an oil change or other routine service.)  In the second phase, they figured out how to do that remotely.
Such breaches are possible because the dozens of independently operating computers on modern vehicles are all connected through an in-car communications network known as a controller-area-network bus, or CAN bus.
Even though vital systems such as the throttle, brakes, and steering are on a separate part of the network that’s not directly connected to less secure infotainment and diagnostic systems, the two networks are so entwined that an entire car can be hacked if any single component is breached.”“Hack to the Future”, Car and Driver, July 2011 by Keith Barry here.

In the words of the researchers:
 “We demonstrate that an attacker who is able to infiltrate virtually any Electronic Control Unit (ECU) can leverage this ability to completely circumvent a broad array of safety-critical systems. Over a range of experiments, both in the lab and in road tests, we demonstrate the ability to adversarially control a wide range of automotive functions and completely ignore driver input—including disabling the brakes, selectively braking individual wheels on demand, stopping the engine, and so on.”
 “Experimental Security Analysis of a Modern Automobile” by

 Karl Koscher, Alexei Czeskis, Franziska Roesner, Shwetak Patel, Tadayoshi Kohno, Stephen Checkoway, Damon McCoy, Brian Kantor, Danny Anderson, Hovav Shacham, Stefan Savage.
 IEEE Symposium on Security and Privacy, Oakland, CA, May 16–19, 2010. Available as a PDF from the authors here.
“Modern automobiles are pervasively computerized, and hence potentially vulnerable to attack. However, while previous research has shown that the internal networks within some modern cars are insecure, the associated threat model—requiring prior physical access—has justifiably been viewed as unrealistic. Thus, it remains an open question if automobiles can also be susceptible to remote compromise. Our work seeks to put this question to rest by systematically analyzing the external attack surface of a modern automobile. We discover that remote exploitation is feasible via a broad range of attack vectors (including mechanics tools, CD players, Bluetooth and cellular radio), and further, that wireless communications channels allow long distance vehicle control, location tracking, in-cabin audio exfiltration and theft. Finally, we discuss the structural characteristics of the automotive ecosystem that give rise to such problems and highlight the practical challenges in mitigating them.”
 “Comprehensive Experimental Analyses of Automotive Attack Surfaces” by Stephen Checkoway, Damon McCoy, Brian Kantor, Danny Anderson, Hovav Shacham, and Stefan Savage (University of California, San Diego) and Karl Koscher, Alexei Czeskis, Franziska Roesner, and Tadayoshi Kohno (University of Washington). Available as a PDF from the authors here.

Onboard diagnostics are integral to any sophisticated vehicle.
The computers on Galactica were not networked.
 Two years later, Andy Greenberg, who reports on technology for Forbes, filed a story about Charlie Miller and Chris Valasek who carried out their car hacking research with a government grant. 
“Miller, a 40-year-old security engineer at Twitter, and Valasek, the 31-year-old director of security intelligence at the Seattle consultancy IOActive, received an $80,000-plus grant last fall from the mad-scientist research arm of the Pentagon known as the Defense Advanced Research Projects Agency to root out security vulnerabilities in automobiles.”  Forbes, August 12, 2013 with embedded video here.

They took Greenberg for a ride that ended in a crash despite everything he could do to fight for control of the car. (The 5 mph roll out stopped in some high grass.)


Sunday, October 12, 2014

Anthropocene: bad name for a good thing

The Age of Man: humanity as a global culture; our cities a new environment, a new ecology, an invented eco-system.  It is inspiring.  But it is wrongly named. 

Recent articles from popular scientific literature delineate the problem.  “Is Civilization Natural?” by Adam Frank aired on NPR, September 26, 2014.  That is how I first learned the word in my car the following day.   

Reading the blog transcript, I followed the links and searched on my own.  I found a National Geographic story from 2011, “Enter the Anthropocene-Age of Man” by Elizabeth Kolbert.  In its January 2013 issue, Smithsonian Magazine asked rhetorically, “What is the Anthropocene; and are we in it?” by Joseph Stromberg. 

First, is the presence of human civilization remarkable in geologic time?  Second, if so, what is the proper name?  The second problem is only hinted at.  No one seems to have offered a better label.  As for the first, it depends on whom you ask. 
Earth from Space. Apollo 8.
No indication that it is inhabited.
According to National Geographic, the word “anthropocene” was invented spontaneously by Paul Crutzen, a Nobel laureate chemist. 
The conference chairman kept referring to the Holocene, the epoch that began at the end of the last ice age, 11,500 years ago, and that—officially, at least—continues to this day. "'Let's stop it,'" Crutzen recalls blurting out. "'We are no longer in the Holocene. We are in the Anthropocene.' Well, it was quiet in the room for a while." When the group took a coffee break, the Anthropocene was the main topic of conversation.”
 In truth, Crutzen has been thinking about this for about 40 years.  His first listing in JSTOR is “SST’s – A Threat to the Earth’s Ozone Shield” in Ambio, vol. 1 no. 2, April 1972.  SST refers to the Concorde supersonic transport, a commercial experiment that ran for 27 years, from 1976 until 2003.  Only 100 were ordered, 20 built, and seven put into service.  When Crutzen wrote in 1972, they were four years in the future.

Crutzen continued to research atmospheric chemistry, and was honored with a Nobel prize, in 1995, along with Mario Molina, and F. Sherwood Rowland, for his work on ozone depletion.  But he is not a geologist.

The –cene words all mean “recent.”  From the Tertiary Period through the Quaternary Period, the Epochs are called (oldest first):  Paleocene, Eocene, Oligocene, Miocene, Pliocene, Pleistocene, and Holocene.  They mean: oldest recent, dawn of the recent, slightly recent, more recent, most recent, and wholly recent.  (Idaho Museum of Natural History here.)
Earth at Night
Evidence is where you find it.
Stratigraphers define geologic layers by the rocks, of course, but also, more accurately, and precisely by the fossils.  (See The Map that Changed the World reviewed here on NecessaryFacts.) Some stratigraphers were not happy with the neologism “anthropocene” that popped up in the scientific literature.  Others may have settled themselves to it. It depends on whom you ask.  
“Many stratigraphers (scientists who study rock layers) criticize the idea, saying clear-cut evidence for a new epoch simply isn’t there. “When you start naming geologic-time terms, you need to define what exactly the boundary is, where it appears in the rock strata,” says Whitney Autin, a stratigrapher at the SUNY College of Brockport, who suggests Anthropocene is more about pop culture than hard science. The crucial question, he says, is specifying exactly when human beings began to leave their mark on the planet: The atomic era, for instance, has left traces of radiation in soils around the globe, while deeper down in the rock strata, agriculture’s signature in Europe can be detected as far back as A.D. 900. The Anthopocene, Autin says, “provides eye-catching jargon, but from the geologic side, I need the bare bones facts that fit the code.”  (Smithsonian Magazine.)
“At first most of the scientists using the new geologic term were not geologists. [Dr. Jan] Zalasiewicz, [University of Leicester] who is one, found the discussions intriguing. "I noticed that Crutzen's term was appearing in the serious literature, without quotation marks and without a sense of irony," he says. In 2007 Zalasiewicz was serving as chairman of the Geological Society of London's Stratigraphy Commission. At a meeting he decided to ask his fellow stratigraphers what they thought of the Anthropocene. Twenty-one of 22 thought the concept had merit.” (National Geographic)

(See, also, “The Anthropocene: a new epoch of geological time?” by Jan Zalasiewicz, Mark Williams, Alan Haywood, and Michael Ellis. Philosophical Transactions: Mathematical, Physical and Engineering Sciences, Vol. 369, No. 1938, (13 March 2011), pp. 1056-1084, by The Royal Society.)

Geologic stages are shorter than epochs and they tend to be named after the places where the layers were first explored, even if similar layers are found elsewhere: Piacenzian, Gelasian, Calabrian …  But the margins of error are still given as ± 0.005 million years, which means ± 5000 years, the time span of the so-called Anthropocene. 

Geologic time is not the only long wave.  The 1954 reference Earth as a Planet, edited by Gerard P. Kuiper, has no index entries for humans, animals, or plants.  About halfway through the 744-page work, in a chapter by G. E. Hutchinson of Yale, "The Biochemistry of the Terrestrial Atmosphere", is this passage:  “The carbon cycle, as it is commonly understood in biology, consists of the photosynthetic reduction of CO2 by green plants and a certain number of purple and green bacteria and the subsequent respiratory release by plants, bacteria, and a to a less extent of animals, of Co2 to the atmosphere.” (p. 379).

Man is the measure of all things.  But measurements must be appropriate.  The Moon is 384,403 km away, center to center, even though we do not travel from the center to the center.  Knowing that in millimeters does not give you much more information. 
Stars that have been touched by our
television signals
Anthropocene means “Man recent”.  It violates the rules of nomenclature and is gendered.  Why not call this the Gynocene?  The word “people” ultimately comes from a doubling for intensity of the first syllable of “poloi” which means “many.”  (Pepper is another example: achoo!)   Linguists who theorize a common source for all Afro-Asiatic languages use the word “Nostratic” ultimately from the Latin nos for “we” and, so, “nostras” for we-folks, countrymen, natives, etc.  Homo-words carry too many other meanings. We have enough problems with homo erectus.  Civilization may be sine qua non of who we are.  It is not clear when, measured by paleontology, we became rational and self-aware, versus just being smarter apes.  And those may be two different events.  The recent discovery of cave paintings  in Indonesia that are 40,000 years old and similar to equally old works in Europe suggests much, but answers little. 

We have been radiating electromagnetic signals into space since 1840.  Voyager 2 has been on an “interstellar mission” since 1990.  Even though the sun will expand and burn the planet, some of our descendants may witness that.  And, just as we know Paleozoic millimeter-sized plants from their fossils, they too, may have evidence of our having been here now.