All posts by Paul Raven

Is there any truly secure personal identifier?

identity theft warning signIf there were any criminal elements unaware of the potential for brute-force guessing of United States Social Security numbers, we can be sure they know about it now, as the news is everywhere. Thankfully, it’s still not particularly easy to do and has a low success rate:

An SSN consists of nine digits, the first five of which are assigned by established criteria based in part on the zip code in which someone was born. Now Alessandro Acquisti and Ralph Gross of Carnegie Mellon University in Pittsburgh have shown that it is possible to predict the remaining four digits from someone’s birth date.

For 8.5 per cent people born between 1989 and 2003, the researchers were able to identify the complete SSN within less than 1000 attempts.

Obviously a rethink is required, as an SSN can be used to apply for credit cards – but what to replace it with? In this specific instance, preventing automated online credit card applications would be a wise move, incorporating the added bonus of making high-interest credit less easy to obtain on a whim. [image by TheTruthAbout]

But the SSN issue is symptomatic of the growing problem of identity theft. Are there any ID systems that can’t be hacked, spoofed, brute-forced or cloned? If not – and I rather suspect not – what do we do in situations where it’s necessary to conclusively confirm a person’s identity, especially in situations where the person isn’t present?

Perhaps some sort of localised bureau network would be of use, with every town having an office that could act as an identity clearing house for a multitude of different high-risk transactions, requiring the applicant or transactee to attend in person to confirm that they are who they claim to be. Sure, it’d add an extra layer of hassle to things like applying for credit cards, but that’s a small price to pay for a lower likelihood of having someone else apply for one in your name.

But then any national bureaucratic system will have the sort of baroque operational architecture that invites colonisation by corruption and good old fashioned human error… perhaps it would end up as a step sideways, or even backwards. Sounds like a problem for Bruce Schneier!

Perhaps it’s time to accept that in any large system where user convenience is increased, the risk of identity theft increases in proportion. But what will it take for us to give up quick credit and one-click ordering?

Is piracy irrelevent to authors?

Looks like book piracy will be one of this week’s genre blog hot topics after io9 had a chat with successful media tie-in novelist Michael Stackpole, who seems to have come round to Tom O’Reilly’s aphorism that obscurity is a bigger threat than piracy:

Writers still trying to break into the publishing world have an unprecedented chance to start their own websites, build an audience and create a market for their work without relying on major publishers at all, said Stackpole. Posting short fiction or even a serialized novel on a website won’t cause problems if a writer tries to sign a publishing deal at a later date because mainstream publishers don’t see digital publishing as a serious threat.

[As many other commenters have already pointed out, that’s not really the case… and certainly won’t remain the case for much longer. Still:]

Rather than simply changing the method of delivering stories to readers, Stackpole believes digital formats will change the nature of the stories themselves. At the very least, authors should tailor their work to these new mediums. He cited what he referred to as “the commuter market,” people who read two chapters per day on their half hour train ride to work. It’s an ideal market for fiction broken into 2,500 word chapters, and could presage a resurgence of serial fiction. “It’s kind of like a return to the Penny Dreadfuls,” he said. “But the readers today are more sophisticated, so we as writers need to put more work into it.”

Insert your own joke about skiffy media tie-ins and the word ‘dreadful’ here… šŸ˜‰

Still, the web’s ability to change the publishing game is a given (as we’ve discussed here many times before). What remains to be seen is how things will look when (or if) the dust settles. A commenter at BoingBoing has a summary that seems pretty plausible:

… I’ve been saying that in the future books will be either cheap and print-on-demand, electronic, or expensive beautifully designed and crafted art objects, and that publishers will soon become irrelevant but you will see the rise of superstar editors and designers.

Nobody has disagreed yet.

Anecdotal, sure, but it matches up with similar theories from a whole raft of people both within the publishing machine and without.

In related news, fiction isn’t the only printed medium that is finding a new (and more affordable) home online. The American Chemical Society plans to move its dozen-or-so scientific journals to being published online only, according to a leaked memo:

In it, the publisher lays out the basic facts: printing a hard-copy version of a journal is expensive, and researchers simply aren’t demanding one anymore. Advertisers are undoubtedly aware of the reduction in print readership, which means that the former calculus that made print valuable—more ads per journal than could possibly fit on a webpage—was reaching a point of diminishing returns. According to the Nature article, the journals publisher flatly stated, “Printing and distribution costs now exceed revenues from print journals.”

The person who finally cracks the online publishing business model is going to be a very rich man indeed. So let’s hope it isn’t Rupert Murdoch… he seems to be heading in the wrong direction, anyway.

32MB of code that’s worth billions is somewhere on the web

In what appears to be a very contemporary story of industrial espionage, we discover that 32MB of computer code could be the key to the success of one of the most powerful financial organisations on the face of the planet – and that someone may well have copied and uploaded itĀ  for purposes unknown. [via SlashDot]

While most in the US were celebrating the 4th of July, a Russian immigrant living in New Jersey was being held on federal charges of stealing top-secret computer trading codes from a major New York-based financial institution—that sources say is none other than Goldman Sachs.

The allegations, if true, are big news because the codes the accused man, Sergey Aleynikov, tried to steal is the secret code to unlocking Goldman’s automated stocks and commodities trading businesses. Federal authorities allege the computer codes and related-trading files that Aleynikov uploaded to a German-based website help this major ā€œfinancial institutionā€ generate millions of dollars in profits each year.

The platform is one of the things that apparently gives Goldman a leg-up over the competition when it comes to rapid-fire trading of stocks and commodities. Federal authorities say the platform quickly processes rapid developments in the markets and uses top secret mathematical formulas to allow the firm to make highly-profitable automated trades.

This is somewhat of a double bind for Goldman Sachs, as prosecuting the alleged theft will require them to reveal a certain amount of their business secrets at a time when people aren’t best disposed toward Wall Street profiteering. It also sheds a less than flattering light on the FBI’s investigative priorities:

What is probably most notable, in less than a month since Sergey’s departure from [Goldman?], the FBI was summoned to task and the alleged saboteur was arrested and promptly gagged: if anyone is amazed by the unprecedented speed of this investigative process, you are not alone. If only the FBI were to tackle cases of national security and loss of life with the same speed and precision as they confront presumed high-frequency program trading industrial espionage cases… especially those that allegedly involve Goldman Sachs.

I think this is going to be one of those stories that will grow with the telling, and Goldman Sachs are going to come out looking bad whether they win or lose the case. Couldn’t happen to a nicer bunch of people, AMIRITE?

Mandatory smile assessment

big fake smileDovetailing neatly as it does with yesterday’s mention of machines that can read emotion, I couldn’t resist mentioning this story about Japanese railway staff having their smiles scanned and rated out of 100 every morning before work:

For those with a below-par grin, one of an array of smile-boosting messages will op up on the computer screen ranging from “you still look too serious” to “lift up your mouth corners”, according to the Mainichi Daily News.

[…]

Workers at Keihin Electric Express Railway will receive a print out of their daily smile which they will be expected to keep with then throughout the day to inspire them to smile at all times, the report added.

Nothing looks more awkward – or alarming – than a forced smile. [via SlashDot; image by cutglassdecanter]

The Human Genre Project: mapping the genome with fiction

genesHere’s Ken MacLeod announcing a rather interesting science fiction project:

A while ago I was staring at a poster of the human genome produced by the US Dept of Energy, and I remembered Michael Swanwick’s Periodic Table of Science Fiction. Cue lightbulb moment.

Why not set up a website that displayed short pieces – stories, flash fictions, poems, and reflections – inspired by genes or genomics, and arranged them (as far as possible – I soon found myself applying for an artistic licence) according to the chromosome that carries the gene that inspired the piece?

[…]

Now, thanks to enthusiastic work from Emma Capewell and Claire Alexander at the Genomics Forum, and the creative skills of web designer Damien Noonan, The Human Genre Project has gone live. It’s early days yet, but it looks good and it’s just waiting to be filled up with new writing. If you have something you think might sit well behind one of those colourful chromosomes, here’s how to contribute.

That’s a very cool project – I’m half-tempted to put something together and submit itĀ  myself, though I have no doubt plenty of better writers will beat me to it. Maybe you’ll be one of them? [image by mtowber]