Is there any truly secure personal identifier?

identity theft warning signIf there were any criminal elements unaware of the potential for brute-force guessing of United States Social Security numbers, we can be sure they know about it now, as the news is everywhere. Thankfully, it’s still not particularly easy to do and has a low success rate:

An SSN consists of nine digits, the first five of which are assigned by established criteria based in part on the zip code in which someone was born. Now Alessandro Acquisti and Ralph Gross of Carnegie Mellon University in Pittsburgh have shown that it is possible to predict the remaining four digits from someone’s birth date.

For 8.5 per cent people born between 1989 and 2003, the researchers were able to identify the complete SSN within less than 1000 attempts.

Obviously a rethink is required, as an SSN can be used to apply for credit cards – but what to replace it with? In this specific instance, preventing automated online credit card applications would be a wise move, incorporating the added bonus of making high-interest credit less easy to obtain on a whim. [image by TheTruthAbout]

But the SSN issue is symptomatic of the growing problem of identity theft. Are there any ID systems that can’t be hacked, spoofed, brute-forced or cloned? If not – and I rather suspect not – what do we do in situations where it’s necessary to conclusively confirm a person’s identity, especially in situations where the person isn’t present?

Perhaps some sort of localised bureau network would be of use, with every town having an office that could act as an identity clearing house for a multitude of different high-risk transactions, requiring the applicant or transactee to attend in person to confirm that they are who they claim to be. Sure, it’d add an extra layer of hassle to things like applying for credit cards, but that’s a small price to pay for a lower likelihood of having someone else apply for one in your name.

But then any national bureaucratic system will have the sort of baroque operational architecture that invites colonisation by corruption and good old fashioned human error… perhaps it would end up as a step sideways, or even backwards. Sounds like a problem for Bruce Schneier!

Perhaps it’s time to accept that in any large system where user convenience is increased, the risk of identity theft increases in proportion. But what will it take for us to give up quick credit and one-click ordering?

Predicting future technologies with Eric Drexler

chipEric Drexler describes how you can apply scientific methods to assess the lower bounds of the capabilities of future technologies:

A subset of the potential capabilities of future levels of technology can be understood by means of a design process that can be described as exploratory engineering. This process resembles the first phase of standard design engineering (termed conceptual engineering, or conceptual design), but it serves a different purpose
…
In the early 20th century, a missing fabrication technology was the combination of engineering expertise and metalworking techniques (among others) that were required to build large aerospace vehicles. The physics of rocket propulsion, however, were well understood, and the strength and weight of large, well-made aluminum structures could be estimated with reasonable accuracy.

On the basis of exploratory engineering applied to this kind of knowledge, engineers who studied the matter were confident that orbital flight could be achieved by means of multistage chemically fueled rockets.

This was an element of Drexler’s Engines of Creation I found especially compelling: that we should base our ideas of future technologies not on what we already have, but what lies within the bounds of what is possible by physical laws as we understand them.

[image from quapan on flickr]

Is piracy irrelevent to authors?

Looks like book piracy will be one of this week’s genre blog hot topics after io9 had a chat with successful media tie-in novelist Michael Stackpole, who seems to have come round to Tom O’Reilly’s aphorism that obscurity is a bigger threat than piracy:

Writers still trying to break into the publishing world have an unprecedented chance to start their own websites, build an audience and create a market for their work without relying on major publishers at all, said Stackpole. Posting short fiction or even a serialized novel on a website won’t cause problems if a writer tries to sign a publishing deal at a later date because mainstream publishers don’t see digital publishing as a serious threat.

[As many other commenters have already pointed out, that’s not really the case… and certainly won’t remain the case for much longer. Still:]

Rather than simply changing the method of delivering stories to readers, Stackpole believes digital formats will change the nature of the stories themselves. At the very least, authors should tailor their work to these new mediums. He cited what he referred to as “the commuter market,” people who read two chapters per day on their half hour train ride to work. It’s an ideal market for fiction broken into 2,500 word chapters, and could presage a resurgence of serial fiction. “It’s kind of like a return to the Penny Dreadfuls,” he said. “But the readers today are more sophisticated, so we as writers need to put more work into it.”

Insert your own joke about skiffy media tie-ins and the word ‘dreadful’ here… šŸ˜‰

Still, the web’s ability to change the publishing game is a given (as we’ve discussed here many times before). What remains to be seen is how things will look when (or if) the dust settles. A commenter at BoingBoing has a summary that seems pretty plausible:

… I’ve been saying that in the future books will be either cheap and print-on-demand, electronic, or expensive beautifully designed and crafted art objects, and that publishers will soon become irrelevant but you will see the rise of superstar editors and designers.

Nobody has disagreed yet.

Anecdotal, sure, but it matches up with similar theories from a whole raft of people both within the publishing machine and without.

In related news, fiction isn’t the only printed medium that is finding a new (and more affordable) home online. The American Chemical Society plans to move its dozen-or-so scientific journals to being published online only, according to a leaked memo:

In it, the publisher lays out the basic facts: printing a hard-copy version of a journal is expensive, and researchers simply aren’t demanding one anymore. Advertisers are undoubtedly aware of the reduction in print readership, which means that the former calculus that made print valuable—more ads per journal than could possibly fit on a webpage—was reaching a point of diminishing returns. According to the Nature article, the journals publisher flatly stated, “Printing and distribution costs now exceed revenues from print journals.”

The person who finally cracks the online publishing business model is going to be a very rich man indeed. So let’s hope it isn’t Rupert Murdoch… he seems to be heading in the wrong direction, anyway.

32MB of code that’s worth billions is somewhere on the web

In what appears to be a very contemporary story of industrial espionage, we discover that 32MB of computer code could be the key to the success of one of the most powerful financial organisations on the face of the planet – and that someone may well have copied and uploaded itĀ  for purposes unknown. [via SlashDot]

While most in the US were celebrating the 4th of July, a Russian immigrant living in New Jersey was being held on federal charges of stealing top-secret computer trading codes from a major New York-based financial institution—that sources say is none other than Goldman Sachs.

The allegations, if true, are big news because the codes the accused man, Sergey Aleynikov, tried to steal is the secret code to unlocking Goldman’s automated stocks and commodities trading businesses. Federal authorities allege the computer codes and related-trading files that Aleynikov uploaded to a German-based website help this major ā€œfinancial institutionā€ generate millions of dollars in profits each year.

The platform is one of the things that apparently gives Goldman a leg-up over the competition when it comes to rapid-fire trading of stocks and commodities. Federal authorities say the platform quickly processes rapid developments in the markets and uses top secret mathematical formulas to allow the firm to make highly-profitable automated trades.

This is somewhat of a double bind for Goldman Sachs, as prosecuting the alleged theft will require them to reveal a certain amount of their business secrets at a time when people aren’t best disposed toward Wall Street profiteering. It also sheds a less than flattering light on the FBI’s investigative priorities:

What is probably most notable, in less than a month since Sergey’s departure from [Goldman?], the FBI was summoned to task and the alleged saboteur was arrested and promptly gagged: if anyone is amazed by the unprecedented speed of this investigative process, you are not alone. If only the FBI were to tackle cases of national security and loss of life with the same speed and precision as they confront presumed high-frequency program trading industrial espionage cases… especially those that allegedly involve Goldman Sachs.

I think this is going to be one of those stories that will grow with the telling, and Goldman Sachs are going to come out looking bad whether they win or lose the case. Couldn’t happen to a nicer bunch of people, AMIRITE?

Mandatory smile assessment

big fake smileDovetailing neatly as it does with yesterday’s mention of machines that can read emotion, I couldn’t resist mentioning this story about Japanese railway staff having their smiles scanned and rated out of 100 every morning before work:

For those with a below-par grin, one of an array of smile-boosting messages will op up on the computer screen ranging from “you still look too serious” to “lift up your mouth corners”, according to the Mainichi Daily News.

[…]

Workers at Keihin Electric Express Railway will receive a print out of their daily smile which they will be expected to keep with then throughout the day to inspire them to smile at all times, the report added.

Nothing looks more awkward – or alarming – than a forced smile. [via SlashDot; image by cutglassdecanter]

Presenting the fact and fiction of tomorrow since 2001