Tag Archives: CIA

In light of the evidence

We tend to accept facts and given situations whenever we have a reliable source and a decent level of evidence. The interesting side is that howling to the moon like a group of sheep hoping the lone wolf will not hear them is an equally weird revelation. The question becomes at that point, who is the lone wolf and who are the sheep, because neither position nor identity is a given. Now, for the first art, we have the Guardian article (at https://www.theguardian.com/politics/2017/may/27/eu-theresa-may-combat-terror-brexit-europol), with the expected title ‘We need deal with the EU to combat terror, experts tell Theresa May‘, which of course gets them the DGSE, yet the usefulness of the rest becomes a bit of an issue. For this part we need to look somewhere else, and we will do that after the given quote in the mentioned article “Although our partnership with the US for intelligence sharing is extremely important, the fact is that the current terrorist threat is very much a European dimension issue. The Schengen database and knowing about who has moved where are all intimately dependent on European systems and we have got to try to remain in them“. This could be a valid and valued statement, yet is that truly the case? For this we need to take a little gander to another place of intelligence and Intel interest. The Cyber monkeys, or is that the cyber-mercenaries? The difference is merely a moment when you WannaCry 1.4. You will have heard, or perhaps read regarding the NHS as it was struck, here again we see: “However, it instead appears to be down to organisations and individuals failing to run keep Windows up to date“, which was actually voiced by NHS Digital, the failure of policies as they were not adhered to by IT staff, or at least those responsible for keeping those PC’s up to date with patches. The second quote given much earlier in the IT article is ““To be abundantly clear, the recent speculation concerning WannaCry attributes the malware to the Lazarus Group, not to North Korea, and even those connections are premature and not wholly convincing,” wrote James Scott, a senior fellow at the Institute for Critical Infrastructure Technology (ICIT)“, which is where I have been all along. The one nation that has less computer and internet innovation than a Nintendo GameCube sets this level of hardship? It is just too whack for thought. It is the quote “At best, WannaCry either borrowed heavily from outdated Lazarus code and failed to change elements, such as calls to C2 servers, or WannaCry was a side campaign of a minuscule subcontractor or group within the massive cybercriminal Lazarus APT” that changes the game. In addition we see: “The publication referred to “digital crumbs” that the cyber security firm had traced to previous attacks widely attributed to North Korea, like the Sony Pictures hack in late 2014″, we will exclude the quote “Shadow health secretary Jon Ashworth has said Labour would invest an extra £5 billion into new IT infrastructure for the NHS, after hospitals and services were affected by the widespread Ransomware attack on Friday“, especially as Labour had in the previous government wasted £11.2 billion on an IT system that never worked, so keeping them away from it all seems to be an essential first.

The issue is now in several phases. Who got hit (those not updating their systems). It affected according to some sources thousands of systems, yet when it comes to backtracking to a point of origin, the Cyber Intelligence groups remain unclear. The IT article (at http://www.itpro.co.uk/security/28648/nhs-ransomware-north-korea-may-not-be-behind-wannacry), gives us a few things, yet the clear reference to the Guardians of Peace, the identity the hackers had given themselves in the Sony event gives a few additional worries. Either this is clearly a mercenary group without identity, or we have a common new issue on identity when it comes to Cyber criminals. You see, as we see more and more proclaiming the links between the Lazarus group and North Korea, we do not get to see a clear link of evidence. Many sources give us ‘could be linked‘, or ‘highly likely‘, which is an issue. It makes the evidence too shallow and circumstantial. The NY Times gives us (at https://www.nytimes.com/2017/05/22/technology/north-korea-ransomware-attack.html) yet they are basically stating what Symantec game us and mention that. My issue here is “But the hackers left behind a trail of digital crumbs that Mr Chien and his colleagues had traced to previous attacks by the Lazarus Group“, what if the crumbs were an intentional side? You see, the quote “another group of hackers that call themselves the Shadow Brokers published the details of National Security Agency hacking tools that the WannaCry hackers were able to use to add muscle to their attacks” give a different light. The fact that there is a team reengineering tools and flaws to get somewhere fast is one. We have seen the lack of actual cyberpower of North Korea in the past, the fact that they are regarded on the same level as Chinese Cyber forces is a bit silly. You see, any country has its own level of savants, yet the fact that North Korea, a nation as isolated as it is, gets to be on par with China, an actual superpower that has Cyber infrastructures, experts at the University of Shanghai (the white paper on cracking AES-256, 2001), as well as a growing IT technology base is just a little too whack.

This now reflects back to the European need of Schengen. The UK needs quality intelligence and with the US breaches of Manchester, the fact that no high quality evidence was ever given regarding the Sony Hack, the growing source of all kinds of hacker names and no validity or confirmable way to identify these groups leaves us with a mess that pretty much anyone could have done this. In light of the NSA flaw finders, there is now more evidence in the open giving the speculative hacker as one with skills that equal and surpass people graduating with high honours at MIT, than anything North Korea could produce. It does not put North Korea in the clear (well the fact that the generals there had no comprehension of a smartphone should be regarded as such), and as we see the entire Bitcoin go forward, we need to take more critical looks at the given evidence and who is giving that evidence. We all agree that places like Symantec and Kaspersky should be highly regarded, yet I get the feeling that their own interns know more about hacking then the sum of the population of all North Koreans do, which is saying a lot. We see supportive evidence in the Business Insider (at http://www.businessinsider.com/wannacry-ransomware-attack-oddities-2017-5). Here we see IBM with “IBM Security’s Caleb Barlow, researchers are still unsure exactly how the malware spread in the first place. Most cybersecurity companies have blamed phishing emails — messages containing malicious attachments or links to files — that download the ransomware. That’s how most ransomware finds its way onto victims’ computers. The problem in the WannaCry case is that despite digging through the company’s database of more than 1 billion emails dating back to March 1, Barlow’s team could find none linked to the attack“, one billion emails! That is what we call actual evidence and here IBM is claiming that the issue of HOW the malware spread remains a mystery. Now, can you see that the entire North Korean issue is out of touch with the reality of Common Cyber Sense and Actual Cyber Security? Two elements, both are essential in all this. It is the lack of actual evidence that seems to be the issue, giving us the question, who wants the North Korea issue propagated? Any answer here is more likely to be political than anything else, which now gives us additional questions on where for Pete’s sake the need of European Intelligence remains as they fall short of providing answers. In light of the Schengen database. Why would that not be shared? If the US has access as a non-European, non-EC nation, why would the UK, a clear European nation be barred from access? With all the flawed acts by the US, having actual professionals look at Schengen data, seems to be an elemental first, would you not agree?

An additional question would be on how these Bitcoins would be cashed, it is not like an isolated nation like North Korea ever had a flying business in Bitcoins in the first place. It is actually (yes, I am shocked too), that quality information comes from PwC. In this case Marin Ivezic, a cyber-security partner. He gives us “EternalBlue (the hacking tool) has now demonstrated the ROI (return on investment) of the right sort of worm and this will become the focus of research for cybercriminals“, which would be a clear focus for veteran cyber criminals, yet the entire re-engineering foundation gives another slice of circumstantial evidence that moves us actually away from North Korea. So in this we have two elements. As the FBI and CIA have been all about pointing towards North Korea, the question becomes, where do they not want us to look and whatever else do they not have a handle on? These points are essential because we are shown an elemental flaw in Intelligence. When the source is no longer reliable, why would they be around in the first place? We can agree that governments do not have the goods on Cyber criminals, because getting anything of decent value, tends to require inside knowledge, which is the hardest to get in any case, especially with a group as paranoid as cyber criminals. The second side is that China and Russia were on the list as one of the few abled parties to get through Sony, yet Russia has fallen of the map completely in the last case, that whilst they are actually strengthening ties with North Korea. That does not make them guilty, yet on the sale required Russia was one of the few with such levels of Cyber skills. The fact that we see in the NY Times that it is too early to blame North Korea is equally some evidence, it gives vision to the fact that there are too many unknowns and when IBM cannot give view of any mail that propagated the worm, gives additional consideration that there are other places who cannot claim or show correctly how the worm got started, which is now an additional concern for anyone altering the work for additional harm. As the point of infection is not known, stopping the infection becomes increasingly difficult, any GP can tell you that side of the virus. There is one more side I would like to raise. This comes from a source (at http://securityaffairs.co/wordpress/59458/breaking-news/wannacry-linguistic-analysis.html), it is not a journalistic source, or a verified source, so please take consideration that this news could be correct. It is however compelling. The quote ““The text uses certain terms that further narrow down a geographic location. One term, “礼拜” for “week,” is more common in South China, Hong Kong, Taiwan, or Singapore. The other “杀毒软件” for “anti-virus” is more common in the Chinese mainland.” Continues the analysis “Perhaps most compelling, the Chinese note contains substantial content not present in any other version of the note, is lengthier, and differs slightly in format.” The English note of the ransomware appears well written, but it contains a major grammar mistake that suggests its author is either not a native speaker or possibly someone poorly educated“, that would make sense, yet how was that source acquired?

The second quote: ““Given these facts, it is possible that Chinese is the author(s)’ native tongue, though other languages cannot be ruled out,” Flashpoint concluded. “It is also possible that the malware author(s)’ intentionally used a machine translation of their native tongue to mask their identity. It is worth noting that characteristics marking the Chinese note as authentic are subtle. It is thus possible, though unlikely, that they were intentionally included to mislead.” The Flashpoint analysis suggests attackers may have used the Lazarus code as a false flag to deceive investigators, a second scenario sees North Korean APT recruiting freelance Chinese hackers to conduct the campaign” gives us a few elements, the element of misdirection, which I had noted on from other sources and the element that North Korea is still a consideration, yet only if this comes from a freelance hacker, or someone trying to get into the good graces of Pyongyang, both options are not out of the question as the lack of Cyber skills in North Korea is a little too well set from all kinds of sources. The writer Pierluigi Paganini is a Cyber professional. Now even as Symantec’s Eric Chien is from California, did they not have access to this part and did no one else correctly pick up on this? As I stated, I cannot vouch for the original source, but as I had questions before, I have a few additional questions now. So, exactly how needed is European Intelligence for the UK? I think that data should be shared within reason. The question becomes, how is Schengen data not shared between governments? The Guardian gives us “After the Manchester attack, which killed 22 people and left dozens of others grievously injured, it was revealed that suicide bomber Salman Abedi had travelled back to England from Libya via Turkey and Dusseldorf four days before the attack“, so how reliable is Turkish intelligence in the first place? How could he have prepared the bomb and get the ingredients in 4 days? There is an additional view on ISIS support active in the UK, yet as we now see that this drew attention to him, why on earth was the trip made? Also, was Libya or Mecca the starting point (source: claim from the father in earlier Guardian article)? How would sharing have resolved this?

Now look at this in light of the US leaks and the Cyber Intelligence of a dubious nature. There is a growing concern that the larger players NSA, DGSE, GCHQ have flaws of their own to deal with. As they are relying more and more on industry experts, whilst there is a lack of clear communication and reliable intelligence from such sources, the thoughts now become that the foundation of fighting terror is created by having a quality intelligence system that recognises the need for Cyber expertise is becoming an increasing issue for the intelligence branch. Should you wonder than, then reconsider the quote: ‘demonstrated the ROI (return on investment) of the right sort of worm and this will become the focus of research for cybercriminals‘, if you think that cyber jihadists are not considering the chaos that they could create with this, then think again.  They will use any tool to create chaos and to inflict financial and structural damage. They might not have the skills, yet if there is any reliable truth to the fact that the Lazarus group is in fact a mercenary outfit, there would be enough critical danger that they will seek each other out, that is providing that ISIS could bring cash to that table. I have no way of telling how reliable or how certain such a union could be. What is a known is that Sir Hugh Orde is not answering questions, he is creating them, as I personally see it. The quote “UK membership of EU bodies such as Europol and Eurojust, which brokers judicial co-operation in criminal cases, not only allowed access to huge amounts of vital data, but also meant UK police could set up joint inquiries with German police or those from other national forces without delay“. You see, the UK remains part of Europe and Interpol existed before the EC, so as we now see the virtual creation of red tape, the question becomes why the EU has changed rules and regulations to the degree that the UK would fall out of the boat. Is it not weird that the EU is now showing to be an organisation of exclusion? Even if we laugh on the ridiculous promises that Corbyn is making, just to be counted shows that there is a larger problem in place. Why is there suddenly a need for 1,000 more intelligence staff? Can we not see that the current situation is causing more issues then resolve them? As such, is throwing money and staff on a non-viable situation nothing less than creating additional worries?

The last part is seen in “The Schengen database and knowing about who has moved where are all intimately dependent on European systems and we have got to try to remain in them“, yet this does require all players to enter the data accurately, in addition, that only applies to people entering Schengen, yet as has been shown in the past, after that getting locations on people is becoming an increasingly difficult problem. The fact that after the Paris attacks, some people of interest were found to be in Belgium is one side, the fact that these people could have met up with all kinds of contacts on the road is another entirely. The truth is that the intelligence branch has no way of keeping track in such details. In addition we have seen that the list of people of interest is growing way beyond normal means and organising such data streams and finding new ways not just to find the guilty, but to decrease the list by excluding the innocent is growing in complexity on a nearly daily basis. And that is before the cyber mess is added to the cauldron of nutrition. There is at least a small upside, as the technology stream will soon be more and more about non-repudiation, there will be additional sources of information that adds the branches by pruning the list of people of interest. The extent of pruning is not a given and time will tell how this is resolved.

It all affects the evidence that the parties hold and how it is applied, it remains a matter of time and the proper application of intelligence.

 

Leave a comment

Filed under Finance, IT, Law, Media, Military, Politics, Science

Where to focus?

This is an issue on the best of days, we are overwhelmed with information, real news, fake news and of course the Direct marketing waves that hit our internet eyes nearly 24:7. The internet is no longer some child, it is a grown adult and adults tend to lack a certain sense of humour, well the adult eyes of the beholder that is. Yet, what matters to us? When we move beyond the job that feeds you, the partner that … you and the family that gives you (usually) strength. When these things are dealt with, what matters next?

The fearful will look at North Korea, on how they are a threat and when we look at the Washington Post, a very respectable paper we see (at https://www.washingtonpost.com/opinions/the-north-korean-nuclear-threat-is-very-real-time-to-start-treating-it-that-way/2017/05/18/d60cbeec-39a4-11e7-8854-21f359183e8c_story.html) on how the threat is real. Even as we saw two failed launches, and in addition, we have yet to see anything from North Korea to get any missile that far (reaching the US), that an opinion piece states: “Stephen Rademaker, a principal with the Podesta Group, was an assistant secretary of state responsible for arms control and nonproliferation from 2002 to 2006“, so here we see the message, yet the core truth is: “The Podesta Group is a lobbying and public affairs firm based in Washington, D.C.. It was founded in 1988 by brothers John Podesta and Tony Podesta, it can be found at 1001 G Street, NW Suite 1000 W Washington, DC 20001“. Basically it is a marketing firm working a very niche market. Don’t get me wrong. I am not ‘attacking’ them, I would accept a position in such a firm any day of the week. Whether we call them marketeers, government strategy councillors or even diplomatic assistants, they are professionals and I do love working with professionals, especially in an environment I am not fully comprehensive of. You see, when you are out of your waters, most people tend to get to be a little apprehensive. Not me, it invigorates me, whether it is working as a document carrier for Faisal bin Abdullah, or Salman bin Abdulaziz Al Saud, doing work for google (which has been one of the most mentally intoxicating and invigorating environments ever) or merely finding new data solutions, working through data and solving the puzzle I see. So is North Korea a real threat or a perceived one? The safe bet is too see them as a real threat as they have access to Uraninite. You see, the world tends to be a little more complex than that. Having the stuff is not enough, getting the delivery method working correctly is an entirely different matter. It can be by having people from Pyongyang masked as South Koreans attending international universities in science and engineering would be a first, which is not that far a stretch. I literally (by accident) I told this Korean student “Does your family still have that bar in Pyongyang?“, he turned pale and said ‘How did you know that?‘, which was not the response I was going for, but OK, such is life, full of surprises. So as you ponder this, wonder on how China has little or no worry. If North Korea ever actually launches a missile towards America, do you think that the President of the USA would not instantly retaliate (especially the current one), what happens to places like Shenyang (in China), also consider whatever hits the water will make fishing no longer an option for decades, Japan learned that the hard way, so there you have it. In addition, we have seen the North Korea military look at systems like they were magical and those were computers the current European generation laughs at. That can be corroborated by the press as they were on a North Korean press tour a little over a year ago. The ‘minders‘ of those groups had NEVER seen a smart phone. I think that North Korea talks a lot, but for now has no real byte. Now the last part of that the Podesta group is a professional organisation. So was it merely an opinion piece or was the article their business, business they charge for? I will leave you with that thought.

The older American would look at the danger of pensions, which we also see in the Washington Post (athttps://www.washingtonpost.com/news/powerpost/wp/2017/05/18/trumps-budget-calls-for-hits-on-federal-employee-retirement-programs), the article ‘Trump’s budget calls for hits on federal employee retirement programs‘ describes on how it impacts. The article is a really good read and gives me the feeling that US retirement plans are an awful mess, with the additional danger that they seem to be running dry slightly too soon, which is what you get with a 20 trillion-dollar debt I reckon. The quote “A preliminary budget document released in March called for a domestic discretionary budget decrease of $54 billion, with an equal increase for defense, homeland security and veterans. Nineteen 19 small agencies would be eliminated, along with their workforces“, the additional “Increasing the FERS employee contribution would result in the average federal employee losing nearly $5,000 per year in take home pay, that’s per year after the phase-in is finished, he estimated. “Phasing this outrageous pension cut in over several years does not make it any more palatable. If this change is made, federal employees will no longer have a secure retirement. Period.”” is even more food for thought. The one equaliser in American business has for the longest time been that those people had a secure retirement, when this is off the table the one part of quiet governmental officials was that there was a long term benefit, with that off the table the environment in government positions will change. Now, we might think that this is not a bad thing, but it will result in chaos, and when we have seen and known that the American infrastructure has no real way to deal with chaos in its ranks, we will see different whirly waves of discontent, a few will leave marks on everyone. So when we read “The budget proposal President Trump plans to unveil Tuesday would give to federal employees with one hand, while taking away with five others” is an interesting one and I reckon that when the full paper is released this coming Tuesday, the US national papers will give it high visibility, because the United States federal civil service has a total of around 3 million people, which is 1% of the US population, making it decently important to cater to them. Perhaps those trying to sell the change might have been better off talking to the Podesta group first?

For me, the news was not in a newspaper. It was found in Digital health article. It re-iterated the issue of ‘urgent change‘ I voiced in my blog yesterday. In there I showed the NHS digital part regarding the endgadget quote “NHS digital had notified staff on patches” which would have diminished the Cyber attack gives us two sides. One, would there have been diminished damage, because that would suffice as evidence. Yet in Digital health we see: “a small team of developers is recommending the health service reduce its reliance on Microsoft“, which is overall not a bad idea, yet the NHS is too big to just make a shift in policy like that. I would be in favour of a shift towards something a lot safer like Linux, but that requires expertise. Another option is to rely on an android option where the NHS is all about apps, equally optional, but it will require massive amounts of resources on programmers, testers, upgraders and cyber monitoring. All these options require a drastic shift in IT operations. When we accept that in too many places there is no minding the NHS IT store (by not patching) the dangers will increase. As I quoted: “It is also my personal belief that in many cases the person claiming ‘urgent action is needed’ is also the person who wants the ‘victim’ to jump the shark so that they can coin in as large a way as possible“, which is what we see right here in the article. Now consider the quote: “To demonstrate that there is a licence-free alternative, GP Marcus Baw and technologist Rob Dyke have adapted the open source Linux-based Ubuntu operating system specifically for the NHS. They call it NHSbuntu“. So why not just use the foundation called Ubuntu? I cannot judge the intent (noble or not), but consider that technologist Rob Dyke has to pay for rent and so much, where is his interest? Do not get me wrong, we should not just dismiss any idea that might work, yet will it? You see any IT environment needs oversight and maintenance. The NHS is in no position to make such drastic changes as it is short on basic needs (nurses and doctors), I do agree that the IT needs to be addressed, yet two Labour governments wasted the IT budget of close to 10 years, lets leave it alone until we can actually address solutions. In this, one additional quote from Beta News. they give us “The report reveals that 12.8 percent of non-Microsoft programs were un-patched in the first quarter of this year“. If patching is so important, and it is, why give voice to 12.8% of additional risk? As stated, I am no Microsoft fan, but it does work in the current NHS environment and if we believe NHS Digital and the trusts do actually patch their stuff, the danger would have been a lot lower. As the evidence is at present, this issue would have been addressed by mere policy and replacing those not adhering to it might be the cheapest and best solution. In all this IT News gives us one more part, the fact that Microsoft is actually releasing a patch for operating systems that are no longer supported is also evidence. I do not see it as merely “to protect the company’s customer ecosystem“, which is a decent answer if you believe that. You see they could have merely told the customers to freely upgrade to Windows 10. I believe that, as they state it “to protect users against NSA-derived ransomware“. I believe that someone has evidence on a Microsoft-NSA cooperation in the beginning of the data snooping age and somehow the makers of the Ransomware (less and less likely to be North Korean) got access to the information needed. I reckon that anyone upgrading will be removing the digital evidence on their computers of that event. If you doubt me, consider the quote in that same article “Current versions of WannaCrypt use two exploits leaked by the ShadowBrokers hackers, who gained access to systems at The Equation Group, which is linked to the United States NSA, last year“, if that is true, how did North Korea get this? If they are good enough to be allegedly part of the NSA (source: Kaspersky), how come that the bulk of the cyber intelligence world has no knowledge of North Korea being such a threat against a player like that? It does not matter how it got out. Whether it was a disgruntled ex-employee. Some hacker that got sucked and suckered by a honey trap, there are enough options nowadays. The reality is that somehow the intel got out. It is being addressed and fixed. It does not make the issue go away, it merely tells us that remaining up to date and properly patched was the way to go. Urgently addressing does apply to systems being reasonable up to date, which does mean that there are costs, pushing yourself away from Microsoft (not the worst idea) comes with a cost, one that the NHS cannot afford, no matter how ambitious it seems and they got plenty of that, especially with non working systems. So, lets not make that error twice!

So when you wonder where you need to focus, I am merely suggesting that when your private house is in order, consider playing a video game or watch a nice blu-ray. It seems to me that a balanced life is the most important thing you can arrange for yourself, let the circus play its game and decide not to watch every show they offer, in the end it could just be merely Direct Marketing.

Get what you actually need, not what others state you need!

 

Leave a comment

Filed under Finance, IT, Media, Military, Politics, Science

Finger in a dike

We have all heard the story of the boy who stopped a flood by putting his finger in a dike; Robin Williams made a reference to it and women in comfortable shoes in the past (whatever that means). The story is known, the act sounds just too ridiculous, because any flood that can be stopped with a finger is one that will not amount to much flooding. Yet the story behind it is very different. You see, the story is about the dangerous Muskrats, who dig themselves boroughs in dikes. These boroughs have canals that can go for hundreds of feet and as the Muskrat population grows, the dikes and dams they are in could be damaged beyond normal repair and that is when the dangers start, because dikes are important in the Netherlands. A large part of it is vastly below sea level, meaning that such a loss could have impacted safe living in that place. Muskrats are also fierce fighters and feeders, meaning that as their population grows, the other animals become extinct. Even as that rat has a usual lifespan for a year, in that year it can reap damage that only people can match. So as we consider the damage a year brings, we need to now consider todays story in the Guardian (at https://www.theguardian.com/politics/2017/may/14/freedom-of-information-act-document-leaks-could-become-criminal), where we see: “criminalise passing on information discoverable under FOI requests“, so basically any news given, even when it can be obtained by an FOI request can become an issue that follows prosecution and even conviction? How is anyone allowed to pass this as law allowed in office, especially as he lives by the motto that was a Herman Brood hit (read: I’ll never be clever). There is a weighting here. I for one have spoken out against the non-accountability of the press. The one time they got scared (read: The Leveson enquiry), they started to scream foul and promise bettering themselves. A promise some of the press broke even before the ink of that promised dried. Yet there is in equal measure a need to keep the people correctly and decently informed. There is a need to get cybersecurity on a decent level and there is a need to hunt down hackers. In this places like Sony are feeling the brunt of hackers and until the authorities are willing to execute the parents (or children) of these hackers, depending of the age of the hacker in front of their eyes, they will not ever see the light and these issues will happen. In this, the entire whistle-blower thing is another hot potato and some politicians seem to think that the one will stop the other, which is even more delusional than my idea of executions to make a point. There is another side to all this that is linked. You see, in the military there is a strict need of secrecy. In that this Bradley Manning person is just a traitor who did not realise just how stupid he really was. The fact that he did not spend life in prison until death is another failing which has been covered by too many for too long and too often. Julian Assange is another matter. Basically he was a mere facilitator, we might seem to consider him a traitor but in the end he did not break any laws and the US knows this, they just have another need to address the ego of certain people. I see Snowden as a traitor, plain and simple. As we were misrepresented with a movie, a book and all kinds of stories, there is still the issue that things did not add up. The never did and never will. In this light a whistle-blower seems to be a very different needed person (I will get to that later).

The three names mentioned all have their own role to play in all this. In case of Manning, it is treason plain and simple, whomever got him off lightly did a stellar Law job, but in the end, he committed treason under war time conditions. Bloomberg (at https://www.bloomberg.com/view/articles/2013-08-02/bradley-manning-s-crime-is-smaller-than-treason) gives us the view of John Yoo, a legal expert, whose view I share: “His actions knowingly placed the lives of American soldiers, agents, and allies at grave risk. In the world of instant, world-wide communications and non-state terrorist groups, Manning committed the crime of aiding the enemy, and he is lucky to escape the death penalty“. As an operator, Manning had access to do his job and he abused the access he had endangering the lives of his ‘fellow’ soldiers. In this the less diplomatic view would be that he was more entitled to death by hanging than some of those executed at Nuremberg. So as we realise that Manning soon could have more rights than an optional member of the press is just a little too insane in my book. In all this, as we see that part in a little biased light, we need to realise that the press has a need to expose certain elements. Yet they too are biased and they are biased towards advertisers and stakeholders, which is why certain military documents are placed in a juicy sexy light, yet the issues of Microsoft, Sony and a few others that clearly food for thought for a generation of consumers seems to be misplaced. So how should we see the less responsible acts of the press in that light?

The second part is Snowden, again, as I see it a traitor, here the issue is severe on all sides, the Intelligence community failed miserably on several sides as one person has seemingly access to systems that should have been monitoring access on a few sides. I saw within two hours at least 3 issues for consideration of prosecution of certain heads of intelligence for mere gross negligence. The issues found with NSA contractor Harold Thomas Martin III just adds to the issues in Alphabet soup land. In this there would have been the need of a very different whistle blower, one that could have walked into the US supreme court stating that his nation is in serious danger giving evidence free from prosecution where an ‘uncle’ of the NSA walks into the office of Admiral Rogers (current director, not the director at that time) asking what the f**k he thinks he is doing on the farm. In a system that is about subterfuge and misdirection, those making errors are often chastised in unbalanced ways. As they are about deadlines and being flawless (which is a delusion all by itself) finding ways to clear issues, solve issues and give support in a place that is relying just a little too much on contractors is an essential need. In this the US is the most visible, but we can agree that the UK has its own demons, the most visible ones were in the 70’s, yet the cloud is now a dangerous place and in addition, I foresee that the near future will bring us more, because if a place like Sony cannot keep a lid on its data, do you actually believe that the cloud is secure? It is not, because some people were pushing too fast for a technology that has issues on several levels. As the cloud grows the customer is no longest charged per Gigabyte, but per Terabyte, so as the cost seems to be 0.1% of what was, they are all seeing the financial benefit and they are clearly ignoring the need to comprehends data sizes and what to put where. As the sales teams are giving nice presentations on security and no loss of data, they seem to be a little more silent on amount of data replicated somewhere else. Which in case of Intelligence is a bit of an issue under the best conditions. By the way that switch from GB to TB happened in the last 5 years alone, so this market is accelerated but in ways that seems to be a little too uncomfortable and I love tech and I embrace it whenever possible, so others should be a lot more mindful and worried than I am at present.

Last we get to Julian Assange, he is either loved or hated. I tried to remain in the balance of it as he basically broke no laws, but to shed the dirty laundry in the way he did was a little stupid. We read all the things on how certain stuff was removed and so on, but there is an issue. In all this we heard all the military stuff, yet when the mention and threats of bank presentations came, he went quiet and dark less than 48 hours later, so it seems that some issues are just not given to the people, especially certain facts that should have been brought out. Here we see another side of the whistle-blower. I get that certain events should not be allowed out, yet when I read: “We would expand the Freedom of Information act to stop ministers and departments from being able to block the publication of information they see as politically inconvenient“, which we get from Tom Brake, Liberal Democrat Foreign Affairs spokesperson. We see another part of the conversation, one that needs scrutiny on a few levels. The entire issue that a conviction is possible for releasing information that is readily available under the FOI is dodgy to say the least. There is a side in my that there should be a certain level of control on whistle-blowers, yet in that same light as we see too often that corporate whistle-blowers are refused the light of day by the press calls for questions marks on the earliest given Mondays of any week.

If the dike is to stop the people from drowning we need to make sure that the muskrat is stopped for various reasons, yet when that dike is also the road that facilitates for the shipment of toxic waste, we need to wonder what the basic need of that specific dike is. And that is before we see that the road facilitates for ‘Big Pharma’ to ship its medication, whilst the 1000’s of tonnes of pharmaceutical waste is left ignored, which is ignored by the media when Dr Who (read: World Health Organisation) is telling people that there is now a direct danger to newborns, with in India alone an estimated 56,000 deaths of newborns dying from resistant infections. So as we see very little of that in the news, what are those opposing the whistleblowing actions crying about? They themselves have become filters on what the people are allowed to learn about. Doesn’t that sound slightly too sanctimonious to you?

The issue that goes on is that these events are less and less an issue of rarity. The Times (at https://www.thetimes.co.uk/edition/news/600-tonnes-of-waste-dumped-under-road-dmttlzrkh), gives us, when you are subscripted, a view that “Up to 600 tonnes of household rubbish have been dumped under the A40 in Buckinghamshire, in one of Britain’s worst incidents of fly-tipping”, this is not some issue that is done with a simple truck, this took time and staff. This was deliberate and orchestrated. In this the whistle-blower would have been essential in dealing with such a crime, as it stands now, it made someone an easy £90,000 and the damage could end up being considerable larger and more expensive. It is anyone’s guess if the CPS will ever secure an arrest and conviction. So as we see the toxicity of the changes the UK and others could face. When we consider the final part “Thomas Hughes, the executive director of Article 19, said: “The Law Commission’s proposals would move the clock backwards, undoing improvements in the UK’s 1989 Official Secrets Acts, and setting a dangerous example of eroding freedom of expression protections, which may be copied by oppressive regimes globally”, we must ask what the devils own sugar did the Law Commission have in mind when these changes were proposed. By the way, the moment it gets adopted, there is every chance that any person with direct links to Wall Street will see other sides. This is what we get from the NY Post, “The Financial CHOICE Act 2.0, which passed the House Financial Services Committee last week, has provisions to keep corporate whistle-blowers involved in any wrongdoing from collecting awards. The act would also require the whistle-blower to try to stop violations from happening within their company — a stipulation that advocates fear would force employees to choose between being fired or not reporting anything at all”, we see this at http://nypost.com/2017/05/14/whistleblower-bill-sparks-fear-among-advocates/, so you tell me who this is all supposed to benefit. As I see it, we see a shift where those who have not are stronger and stronger segregated from those who have and those who continuously want to have. A mere adaption from the battle strategy segregation, isolation and assassination? Assassination needs not resolve in death, today we see how economic and financial death could at times be much worse than anything permanently offered, although the mothers in India might disagree on that. The question becomes where does the press truly stand, with informing the people or with the advertisers they rely on nowadays?

 

Leave a comment

Filed under Finance, IT, Law, Media, Military, Politics

The light of exposure

In France everything is going topsy turvy, we see people who claim to have no gains in any of it make certain that anybody is elected, except for Marine Le Pen, even the current President of France is on that boat, which is interesting as he is at present regarded as the biggest political failure since WW2. I myself would like to remain neutral, which is almost not possible as out of nowhere a former investment banker is suddenly the favourite runner with no real main political experience. The political marketing department might like the fact that he will be the youngest French President, which makes almost as much sense as it would be for me to take over the clandestine department of the CIA, with all those Korean challenges? I’m game!

Yet as I see it, Emmanuel Macron made a large blunder on LinkedIn as he wanted France to head all kinds of environmental and climate research, which sounds nice as the population at large is all about climate, but he seems to forget that France has a 2.25 trillion Euro debt to deal with and the current French President is leaving France in a dire, weakened and unhealthy state. Something that can not now, and not ever be cured by throwing money in anything but a growing economy move. Even I could have done better than that. Both players for the hefty seat will need to consider that a true quality investigation in the French healthcare system will be next on the list. It is at present regarded as one of the best, yet by 2019 their numbers will drastically change as France has one contributing element. As the retirement age has shifted by 2 years, there will be a spike in both physical and mental health care that will at that moment spike to different levels. France has the benefit of seeing how wrong inaction has left the British NHS close to death, and this is whilst the retirement age was at present not affected, so in France a think-tank will need to convene on a structured overhaul that does not leave a non working system in hands of consultants for 11 billion and at that point be a non-working system. The British Labour party left them with this example. If met with the proper adjustment, Huawei Technologies and Google could have optional solutions in theory before the end of 2018 and implemented 2 years later. The question becomes who will be the player and how will it be implemented. Questions that require serious consideration and in my view the youthful investment banker might not have the solution, in equal measure I am not certain whether Marine Le Pen will fit that bill either. Yet what has been shown is that the current president has made little effort towards that growing dilemma.

So why is Macron the bad choice? I am not sure he is, but the issues we have seen with investment bankers do not make me confident. Even as we should agree that he married the love of his life even though she is a few decades older, which implies that he does not care about the opinion of others gives the vibes that he is made of stern stuff, something the French people desperately need after one tour of Francois ‘the paperback’ Hollande (as I personally see it). Yet, what wrong has Emmanuel Macron done? That is the issue, for the mere reason that there is nothing that shows he had done anything but bend the law without breaking it in the Nestle acquisition deal. So basically, this proclaimed Mozart of Finance is getting soiled in soot for the mere title of being a former investment banker. That is as far as I can take it with reliable information. The Rothschild bank empire keeps it laundry hidden and dry, neither the NSA or the CIA has anything on them (FBI has nothing either). Whatever others can find is either hear say of overextended triviality. Again, as I personally see it the entire board of commissioners of PwC will be in jail long before Rothschild bankers get into the dock in court. I am happy, but unlikely to be wrong here.

Yet these elements are not the only ones in play. During the next French administration banks are moving their interests and their work environment all over the globe, France will see its share of new challenges. As the UK is dealing with Brexit and their set of new challenges, France will also deal with other issues. Even as both are not looking towards the frontiers of what will be possible with 5G, we will see new views on security and cyber issues, not just in the WiMAX and 5G environment, there will be additional dangers and risks with the new IBM hype word! As blockchain is heralded as a new solution, there are inherent risks with a system that has these abilities. Not just in managing the data, the attached data goes much further, there is the risk that any system has more than a mere ‘massive disintermediation of the financial system’. There is the risk that a hiatus in ‘non-repudiation’ could leave a dangerous leap in the ‘who done it’ realm where nobody can be held to account. The fact that blockchain has no form of regulations whatsoever will give French banking laws additional headaches down the line. This is not just assumption (well, it is a little), the Washington Post was all about ‘Russian hackers‘ in French elections. That does not prove that it is not so, there is merely a lack of concrete data evidence and the quote “the front-runner in France’s presidential race carried digital “fingerprints” similar to the suspected Russian hacking of the Democratic National Committee and others in the 2016 U.S. election” give food for thought. As present the cyber units cannot even get on par with the criminals, as blockchain evolves in all kinds of ‘personal’ dialects in every nation, we will witness a new level of data adjustment. This does not mean that blackchains are evil or that they are instigate criminal activities, the timing that blockchains bring just as the data traffic from 5G could sent a 500% data traffic spike from 2020 onwards through the global online cloud community leaves us with a boatload of issues and in that, France will have its share of issues to deal with, so as there might be opportunity, there is a more than equal risk of harmful dangers. Europe at large is not ready and in a lack of checks and balances, the dangers of another 2004 and 2008 investment collapse is not out of the question, especially as the laws are still not ready to deal with the recurring danger of a 2008 finance event. In this France is in too weak a condition (as is the UK by the way). So consider that if we relate this to the Bitcoin, its volatility is in its foundation the same volatility that blockchain could face, with a truckload of return on investment risks. In this we might consider that Macron is the better candidate, but I am not convinced, in this both are not great options, yet still better than the others. It almost a Churchill moment “Democracy is the worst form of government, except for all those other forms that have been tried“, we could replace the word Democracy with either ‘Blockchain’ ‘Emmanuel Macron’ and ‘Marine Le Pen’. Although in the first example, we would need to exchange ‘government’ with ‘data system’ as well. In this day and age governments can no longer keep up and until the spirit of the law gets clearly enforced the population of any nation is in trouble. In this danger is too harsh a word but there is a risk and the press at large has proven to be little or no help (apart from some actual newspapers, who are some help).

As France goes to vote there is little that I can offer to the voters, only that they need to know who and what they are voting for. They need to realise that their immediate choice is for themselves and their family. For some it is one candidate for others there is the other candidate. With France having an explosive growth in poverty, the social element seems the most pressing one, but its solution is in other elements not in solving poverty but in growing a dire economy, a dire situation grown by what I regard to be outsourcing and the bottom Euro of getting things done cheaply. It is that proper reform that herald change and options, which puts the initial premise in the hands of Marine Le Pen, yet no matter how her national pride is set, if she cannot build solutions she would be a one term president too. For Macron it seems simple in the way he talks and he talks like a salesperson, but in this he needs an engine to deliver on his promises, this is something he cannot walk away from, whether he realises it to the degree is not certain, his LinkedIn message made that clear.

So no matter where the exposure ends, there are dangers that all nations of Europe will face, the sudden ‘relaxed’ shift from Mario Draghi is making that clear (Source: Financial Times). I think that this temporary ease of situation is merely to ‘atone’ for French voters, I think that the message is a dangerous one. Several sources are talking on the dangers of joint bonds an in addition the fat that Reuters views that Mario Draghi could lose credibility is not a fab, it is a realistic danger which people seem to be dimming to low until after the French elections. This as I see it implies that there is heavy weather ahead. This is strictly my personal view, yet in that regard I have been correct a few times too many. See my other blog articles to compare on that regard. In this there is partial data, there is the claim that the IMF has dropped the pledge to resist all forms of protectionism. For me the issue whether they dropped it, or merely did not make mention of it. The result is very different and in this it is not just about clarity, it is about changing channels of commerce. It is more than a mere view of ‘good business is where you find it’ versus ‘we all should be allowed to do business’, which is the more direct issue that will impact France too. Even as I have an issue with the President Trump’s tax breaks, there is one sight that is adamant. The economies are now no longer in the hands of the fat cats of Wal-Mart and corporations alike, it is in the hands of small businesses and families in stores. They will reduce tensions on infrastructure pressures and make combined ripples in a starting wave of commerce. France is one of the more likely places to get that going, much more so that the UK at present. In this France’s biggest enemy is the French language.

When it overcomes that barrier, it could start a wave of trendsetting businesses from local to global, how it is done remains open to the people deciding walking that path, it will be a personal choice for all who endeavour that step, but they can get there, they just need the proper exposure and support.

 

Leave a comment

Filed under Finance, IT, Media, Politics

Life in USA less healthy now

You might not have thought it, but did you realise that your life, if you are in the USA is as per direct a lot less healthy? Did you know you are now intentionally endangering your health? You did not, then read on and learn how you have thrown your healthy life away. In the LA Times (at http://www.latimes.com/business/la-fi-broadband-privacy-senate-20170323-story.html), we see ‘Senate votes to kill privacy rules meant to protect people’s sensitive data from their Internet providers‘, you might wonder how this is a danger to your life, but it is, and it will hurt your pocket too no less. The first part is “overturn tough new privacy rules for Internet service providers, employing a rarely used procedure to invalidate restrictions that cable and wireless companies strongly opposed“, now this is not the FBI or the CIA spying on you, this is the option for internet providers to sell your actions and your privacy driven information to whomever wants to buy it.

One quote from Sen. John Cornyn (R-Texas) was “The FCC privacy rules are just another example of burdensome rules that hurt more than they help”. Now, this is not just something that started now, to his credit, he has ALWAYS been on the commercial bandwagon, some of that goes back years where he questioned the White House on the way the FCC’s set-top box proposal came down and what role the White House had in that, and other, FCC decisions. He is clearly a man of less governmental oversight and that is his right. The issue becomes when TV and internet usage is sold to health care providers and on the consequence of what those people call the ‘weighted classification of couch potato‘, in that with the rise of health care premiums. This actually goes further than merely health care. The fact that app use and geographic data becomes available is equally a concern. There is a secondary situation, Companies can now go via consultancy firms and avoid issues with that pesky Employment discrimination law. You see, “the elimination of artificial, arbitrary, and unnecessary barriers to employment” can now be circumvented. People who are too often on Boston South Side, East LA, or the SF Mission district, the use of Geo data would allow for a percentage analyses of this GeoData, giving some people who had hit on hard times even less able to fight for a decent future. And let me be clear, any ISP denying that will be lying to you. The data will be part of something else, like where were you when a certain app was used, which might seem nice, but if they check all apps than that picture gets to be pretty complete.

The reality goes further than this. Even as you read this, MIT is making great strides (at http://bpp.mit.edu/offline-data-collection/). Yet when you read: “Daily price indices, monthly, and annual inflation rates for Argentina and the US. Monthly data with annual inflation rates for Argentina, Brazil, China, Germany, Japan, South Africa, UK, US, 3 US sectors, and global aggregates (including Eurozone). Daily PPP series for Argentina and Australia. The data were used in the paper titled “The Billion Prices Project: Using Online Data for Measurement and Research” – Journal of Economic Perspectives, 31(1) (Spring 2016)“, a serious question comes to mind. You see, once you have this data, you can go into collaboration phases, after which you could raise minimum prices on hundreds of articles. It might be cents, but that raises your monthly costs in dollars, whilst the maker now gets millions in addition. So, yes everybody loves big data, yet will it love you? You get the impression from “Daily prices for all goods sold by 7 large retailers in Latin America and the US: 2 in Argentina, 1 in Brazil, 1 in Chile, 1 in Colombia, 1 in Venezuela, and 4 in the US. Used in the paper titled “Scraped Data and Sticky Prices”“, you just wonder if it is such a weird concept. Now, from an academic point of view, it is an amazingly interesting project. So was Dynamite, which Alfred Nobel learned the hard way, had a few optional uses which he never considered. Data is in that regard a whole lot more dangerous.

The biggest joke in all this is not President Trump, it is actually the FCC puppet Ajit Pai, who was appointed by President Obama in May 2012, he stated that the rules threatened to confuse consumers as they were different to those imposed on web firms such as Google and Facebook. You see, as I see it Ajit Varadaraj Pai is stupid, but he is not stupid, you hearing me? Let me explain this. When a person looks at an advertisement, or seeks something like ‘Gaming Chairs’ at PC Case Gear. That person looks and decided not to buy, the person is just browsing. Now, as this person looks for other things or browses the internet and visits websites. This person gets to a site that uses advertisement spaces. Now for example, Google AdWords will show things that interest you, or things from places you visited. So, even as this person is just going to any place that has advertisement spaces, Google AdWords would possibly show that person ‘Gaming Chairs’ that PC Case Gear had on sale, and Facebook will do exactly the same. In all this, that persons actions and seeks would have remained private, the advertiser does not have my details. They will get general aggregated data, like the gender and the age of the visitor (age is set in an age range). At no time does the advertiser have my complete details. This is why it actually works, now that the ISP can sell my specific data, the issue changes. My details will now get out to third parties and their lack of any ethics (not that the ISP has any mind you) will now endanger us. Ajit Pai knows all this! And he is very happy to facilitate the need for greed, even if it endangers lives, because at some point in the near future it actually will. The health care data need will take care of that, meaning that when your child could not get healthcare, because his browser data indicated an unhealthy life, when he needs that Bypass and the healthcare provider got a little too needy, just remember the name Ajit Pai for the tombstone of your child. Let me explain this a little more clearly. The NCSL (National Conference of State Legislatures) gives us “Yet for those buying insurance on an exchange or private market plan for 2017, the average increase before subsidies was a shocking 25 percent” When we consider that the annual premium for an average family was up to $18,142 (I know, what a weird number), 25% is $4535.50, That is $378 a month, when was the last time you got a raise that allowed for such payments?, let me be frank, with 3 university degrees, I have NEVER received an annual increase that much, so as such, you lose either your healthcare or you lose your quality of life. What will you choose? So as junior is data mined as a little larger risk, your premium takes a hit and as you had to let go of healthcare, your child dies, with the compliments of Ajit Varadaraj Pai, so please send him a ‘thank you’ note, the FCC can be found in Washington DC.

You think I am exaggerating? This is the path the US was always on, exploitation to the max before the collapse. USA Today gives us “Sears and Kmart might not have enough money to stock their shelves” merely 3 days ago, it can no longer fuel its existence, that whilst its CEO grew his fortune by $1 billion last year alone. Forbes voiced it as: ‘Sears Suffers — Eddie Lampert Wins‘, now this is related, as places like Sears and Kmart will be vying for YOUR details, your browser history and your privacy and once they have your data, they will merge it and sell it via for example an Australian subsidiary to whomever will buy it, China for example. That is how your data will bounce around the planet, decreasing you and the value you have with every transfer deal made.

As I stated often in the past, I love big data, yet I know that there is an increased need for ethics on how it is collected, applied and moulded into a new base of information. The USA has shown that it is not able to keep any level of ethics in play, which sucks for Americans and it in equal measure sucks for anyone considering trusting an American company, that is, until the Europeans and others get on board on cashing in on data for sale. Consider one last thing, now, this is pure speculation and there is no evidence that this would happen, yet what happens when ISIS figures out what the parameters of a desperate person are? What happens when they mine this data to see who to approach for extremist actions? There is no way this could happen, could it?

 

Leave a comment

Filed under Finance, IT, Law, Media, Politics, Science

The danger of Colbert and the Press

When we see an interview with General Michael Hayden and Stephen Colbert, it is hard to imagine, but it is actually Stephen Colbert who is endangering the lives of many. Did you realise that? First, the interview (at https://www.youtube.com/watch?v=buI8aO7nRDM) should be watched. It is a brilliant interview. Getting a former CIA and NSA director in view is always a little awesome and the man plays the audience brilliantly. Now, I say ‘play’ and I mean that in the best positive way. He is funny direct and answers the questions clearly. It is Hayden that gets the applause and it was an applause that was well deserved. He debunks conspiracy theorists and cuckoo cases all over America. Then something happens, suddenly Colbert does something dangerous and stupid. At 4:55 he plays the game regarding Smart TV’s spying on you, he plays us all as he is linking this to the CIA. What happened was that on February 6th the FTC fined Vizio $2.2 million for collecting viewing histories without users consent (at https://www.ftc.gov/news-events/press-releases/2017/02/vizio-pay-22-million-ftc-state-new-jersey-settle-charges-it), pretty much the same thing that Microsoft seems to be doing to its Xbox population at present and uploading their data into the Azure cloud (without consent).

This might seem like a nuisance, but it is a lot more than that. Large corporations have run out of spreadable funds and like any other corporations, they now need to optimise. It is almost the same situation that SPSS was selling when it offered companies a product called AnswerTree (back in 1997). Marketing firms had to get a certain quota, let’s say 4%, now to get there you could either throw more money on it, and going from 2% to 4% did not just mean a little over 100% more to get the growth. No, with their product AnswerTree, you could make an inventory of who you mailed and who responded and started to prune the tree of those who responded a lot below quota, so basically, the mailings became more efficient, a more clever path to the people buying and it is all perfectly legal and acceptable. That is what is happening now in new ways and Vizio got caught because it happened in an automated way without any level of consent. So who did not get caught? Because I can tell you right now that the bulk of the people with a smart TV have not considered where this data is being logged.

Now, I am going to ask you a question: ‘If marketing is harassment, is the marketing contact that you purchase from still a harasser?

If we have all the do not call registers, how long until these marketeers use other methods? Free games, free apps and free TV shows, all connected, you just have to agree to advertisements connected to them. It is a mere reward for exposure which is all perfectly valid. In all this the CIA was not a factor or a danger. It is the large corporations that are classifying you, more important, it is the links that they can resell that are a danger to your way of life, which is why at times smart TV’s are sold with 60% discount (speculation from my side).

In 2015 I would never have expected to be able to afford a 55 inch smart TV, it is huge (and I was happy with my 42 inch one) but it broke, I had a decent job, but the surprise that a brand new 100 Hz Sony 55 inch was priced down from $1900 to $800 (very lucky me), which was just ridiculous as the next TV (almost the same as my broken one) was a 40 inch at $699, which was perfectly decently priced for those days. Now, we can hang onto the idea that it was just a crazy sales, which does happen, but to flood the market with something almost twice the size, with much higher specifications at next to the same price as a small B-brand TV is too weird. It is almost like having a Canon 5D at the normal $2500 and offering next to it a Hasselblad X1D-50c at $3000, which would be awesome as these babies go for $13,000. It would be 20Mp versus 50Mp. As a photographer I can tell you that I would kill for a Hasselblad 50 Megapixel camera (and as I know the Evidence Act 1995, I might get away with it).

So, I hope you understand the weirdness of such good deals. And in all this, Sony has the ability to capture this data (I am not accusing them of doing this, I have no evidence of any kind that this is happening), but the threat to our privacy is real. Now you might not think that this is important. Yet consider that this data could be sold, how many hours are you not sporting, how many hours do you watch TV and what do you watch? How long until you suddenly get a 12% spike in health insurance? There is where the difference is! You see, these players are very very interested in that data, minimise their risk and charge extra to anyone that is a risk. In my case it does not matter, my smart TV is connected to my console and my Blu-ray player, so there is no ‘smart’ data to capture. What is important for these sales people that the 0.5% of the group that I represent is not the issue, their value is the 80%+ that does connect their TV for Netflix and other reasons, that is where their value is and it is potentially bringing in millions, so the 60% discount is a joke to them. That is the part Colbert smoothly walked over whilst he joked about the CIA and the press at large stayed away from that FTC ruling, so there is one of the dangers.

The other danger is organised crime. How long until people realise that being away from home means no TV? That means that the smart TV logs are not showing movement. How long until the criminals can connect smart TV usage and social media action into, which house is empty? Oh and as you advertise on Facebook that you are on Cuba, how long until you realise that you gave away the info that your house is unprotected? More important the quote “Oversharing on social media could not only leave you open to burglary but it could also invalidate your home insurance policy” is not a joke, this quote was given 2 years ago. Justice Gibson of the District Court of New South Wales raised the issue as early as 2014, the courts are not ready for this and for the most, they are only dealing with the fallout that Contract Law is giving them, more precisely the contracts that Insurance agencies have been working on. With currently well over 80% of Australians on social media (which is actually low compared to Scandinavian nations), the consideration of implementing certain risks is an essential need for any insurance agent. Yet, at what point can usage of social media be seen as evidence towards negligence? Mobile phones tells us where we are, smartphones tell everyone what we do (through our usage), and Smart TV’s give us what we watch, out interests and our activities, or lack thereof. At what point is any of this evidence to act, to surcharge to act as a penalty or as an option to nullify the security of insurance?

That is the part not considered and it gets even worse!

This is seen in the news that is hitting us now through what is marketed as Vault 7. CNN Money (at http://money.cnn.com/2017/03/09/technology/cia-smart-tv-wikileaks-public-hacks/) gives us the news on how the CIA is spying, although they do also mention “security researchers say the methods imitate exploits that were discovered — and made public years ago“, So when I see “Samsung warned users about exactly this type of susceptibility in 2015. The company told CNNTech this week that it is ‘urgently looking into the matter.’“, my question becomes: ‘How much data did you collect?‘, so as the warning is 2 years old, apart from making batteries explode, did you do anything to stop this threat? And as we see Dan Trentler, CEO of the Phobos Group security firm state: ‘That appears to be the same exploit he witnessed in action onstage at a security conference in 2013, he said‘, can we give accusation that there is nothing innocent going on and the level of negligence shown in one article spanning 3 years of events, that is enough to warrant a much larger investigation into privacy invasion by large corporations?

 

It is not about just consent, they are mining our choices and leaving us with less. You might not consider this or comprehend this, but it is an optimised way of American business. I have to explain this.

I was confronted with a larger group of board members of a large firm. As an ‘upper’ grunt I had two distinct jobs. One give the best service to my clients and protect them as much as possible from any negative event, which is what any good Technical consultant does. And I had to be faithful and supportive to my bosses, which is what a loyal employee does. Now consider the meeting where we get the premise: ‘What if you cannot service your client 100%, but only 80%, would that be acceptable?

Now, the danger here is that my answer would be a solid ‘No!’ A danger from the corporation side when we consider the introduction of service level agreements, the introduction that the client was unwilling to pay for the service given. How do you take a stand (driven by wisdom) at that point?

This is where you the consumer are at, but it comes from another direction. Places like Samsung, Sony, Microsoft, HP, IBM and Apple are all in the optimisation phase, because the economy is still not great and most of us would only be able to afford one of these devices, perhaps a second one for Christmas if we are lucky. So as we can get 2 out of 5, so how do corporations go about getting the largest share you can? Now we get to the AnswerTree part, you become smarter in how you get to your audience to choose you, not merely marketing but marketing to the most likely buying population. The question then becomes what options you have at your disposal. Do you sacrifice one device so you get an option to see 2 more options for alternative sale and get the contribution needed? The reasons is that in this day and age, it is not about revenue, when you are a listed company, when you have stakeholders, it will be about contribution (revenue minus costs), if you fail that, no great bonus, no mistress, no fast car and in the end no job.

So here we see the rundown on how Stephen Colbert became a danger to you, he made it into a CIA joke, whilst the bitter and solemn truth is that the real danger is the invitation you readily give out to all manner of freebie givers, only to learn the hard way that they get back what they gave out in tenfold, just by collecting your inactions and sell it to whomever can transform that into personal profit. So whilst some people are falling asleep reading (at http://searchhealthit.techtarget.com/essentialguide/Providers-adjusting-to-greater-use-of-social-media-in-healthcare) how social media is interacting in health care, consider what an insurer would give to know that you visited a free clinic for the third time this quarter. It might not cost them anything, but it will set a flag to raise premiums the next year. Did you consider that? And as we shrug at seeing “Social media analysis done with natural language processing has given care facilities a more efficient way to get patient feedback“, many will ignore, just like the previous example on raising premiums. Even as you consider a visit for planned parenthood to be perfectly natural and normal (which it is), but when the insurer realises that you will be needing to visit an OBGYN in the near future, you better realise that you are lucky if your premium rises with only 5%. That is the way business is done and the initial ‘risk’ numbers to which you were held at premium are 10 years old and you fall in a much higher group. Only the super healthy teenager who does not get sick gets the low increase, that whilst he was actually a 0% risk. How fair is that and why is the media not all over that on a daily basis?

The CIA was never worthy to be mentioned in this regard, for 99% of the Americans they are nothing as these 99% of Americans were harmless so the CIA never cared to begin with and that is the group Colbert was aiming for which is odd in one way and on the other hand, we do get that he is a comedian who is trying to entertain 100% of his clients, those who tune in on his version of humour. He cannot be faulted for that, the press at large however can be faulted and they should but they stay away from it for other reasons. Mainly because they want a slice of the Samsung $700 million advertisement budget (that is for the USA alone), Microsoft and Sony are in similar predicaments, which is why certain events will not make the front cover any day soon. The reason of data collection being the most obvious one, but at times it can be trivialised as they are only gamers, or it is only a console and consent is overrated. I’ll let you be the judge of what matters and what not, just remember, when you are no longer within the 80% of the group they cater for and you already bought the device, where will your rights be, or your service provider? Perhaps you get the same answer Microsoft gave me: ‘we have no control over uploads, that is all with your internet provider!‘ Interesting how my consent was manoeuvred around in all of this.

 

Leave a comment

Filed under Finance, IT, Law, Media, Politics, Science

In speculated anticipation

This is on a matter that is slippery like a promiscuous nymphomaniac lady contemplating monogamy. In a world where any person next to you could be a pimp, a whore or merely psychotic. Welcome to the cold war! Merely a few hours ago, the Guardian gave us ‘Obama orders sanctions on Russia after campaign hacking during US election’ (at https://www.theguardian.com/us-news/2016/dec/29/barack-obama-sanctions-russia-election-hack). Now, we have known the CIA and other parties to be blatantly incorrect when it came to Sony and North Korea. Yet, here in this case, there are a few elements in play where it is indeed more likely than not that if there was real interference that Russia would have been guilty, involved or at the very least privy to the events. In this China is a lot less likely, because as business deals go, they are a lot better of with the Ignorance of former State Secretary Hillary Clinton, than they will ever be with President elect Donald Trump, so as the calling of garden grooming spades, the one turning the soil is overly likely to be the Russian side.

There was an earlier article referred to in this one, where we see: “He dodged whether Putin personally directed the operations but pointedly noted “not much happens in Russia without Vladimir Putin”“, which is actually incorrect. You see, and President Barack Obama know this to be an absolute truth is that deniability is essential in some operations. Yet, in this even as President Vladimir Putin would have been kept in the dark (likely by his own request), it is less likely that Sergey Kuzhugetovich Shoygu is involved, yet if the GRU was involved than Igor Korobov would know for sure. You see, the FSB is the second option, yet for those who have seen some of the reports that Darknet has regarding investigative journalist Andrei Soldatov gives at some parts the inclination that the FSB funding on more advanced cyber actions was lacking making the GRU the opponent of choice. This comes with the assumption from my side that less advanced equipment would have given US cyber sides a lot more data to show earlier that Russia was intervening with the elections. The reports of a group called Fancy Bear gives way to the technology they get access to and the places they can access them at. There is another piece that I have not been able to confirm, it is speculative and even as it gives base to giggles of all matters, it remains a speculation. It is said that Fancy Bear operatives have been able to work from North Stockholm, if so, they might have accessed the IBM backbone there, which has a massive amount of data pushing power. Giving way that the US gave powers to enable hacking of the US election system, live is just too cynical at times.

Another quote is also linked to this, but not from the cyber point of view. “Obama repeatedly weighed in on what he saw as increased polarization in the United States. “Over a third of Republican voters approve of Vladimir Putin, the former head of the KGB. Ronald Reagan would roll over in his grave. How did that happen?”“, in that my response would be ‘Well Mr President, if you had gotten of your ass and actually do things instead of politicising things. If you would have actually kept a budget and not push the US into 20 trillion of national debt people might be less on the fence for the other side, right?‘ There will be no reply because not only as this administration been close to useless, the actions of the last few days where the new electorate gets an agenda pushed down its throat where a clear cooperation with terrorist organisations is seen is plenty of food for thought, yet that rave needs to seize as it does not completely apply to the case at hand!

There are however other matters for concern “In a conference call with reporters, senior White House officials said its actions were a necessary response to “very disturbing Russian threats to US national security”“, which beckons three things:

1. Why was it a conference call and not on every video or a live presentation?
2. Wow long has this been actually known?
3. Where is the actual evidence?

Like Sony, like other parts, the press wants to see evidence and NONE has been presented. No station, as far as I have been able to tell has shown any schematic on how the election could have been tampered with evidence. There are hundreds of anti-Clinton and anti-Trump conspiracy theorist videos, yet none form any reputable news channel. Which also now gives voice to the thought whether the US intelligence branch in this administration has been the biggest joke ever (North Korean accusations et al).

Still in all this, the US is pushing for a cold war, which might not be the worst thing, yet as the US is to be regarded as bankrupt, the upgrades that will involve a data centre and 4-6 billion in equipment and resources is something there will be no room for any day soon.

So what is this about? Is this about the Democrats being really sore losers? I am not sure what to think, yet the entire approach via conference calls, no presentation of evidence, there are a few too many issues here. In addition, if there was evidence, do you not think that President Obama would present it, to show at least that he is capable of publicly smiting President Putin? Let’s face it, he does need to brownie points. Yet, in light of some evidence not shown, the actions at the 11th hour, are they a sign that the Democratic Party will be relying on act that some could regard as Malfeasance in office? Of course these people will not need to give a second thought as they will be removed from office in a few weeks, yet to leave open the next public officials to added pressures to clean up not just their last 8 years of action, but in addition acts of impeding elected officials could have long term consequences. Let’s not forget that the Republican Party starts with both a Republican Senate and Congress, as well as their guy in the White House, so if the Democratic Party wants anything to happen, being nice is pretty much their only option.

In addition, when we look at the US recount (at https://www.theguardian.com/us-news/2016/dec/28/election-recount-hacking-voting-machines), we see first off ‘US recounts find no evidence of hacking in Trump win but reveal vulnerabilities‘, in addition we see “In Wisconsin, the only state where the recount was finished, Trump’s victory increased by 131 votes, while in Michigan, where 22 of 83 counties had a full or partial recount, incomplete data suggests was a net change of 1,651 votes, “but no evidence of an attack”“, which is not amounting to evidence in total, we do see that two places were not intervened with, still the system is setting the pace that there are future concerns. The message ““We didn’t conclude that hacking didn’t happen,” he told the Guardian, but “based on the little evidence we have, it is less likely that hacking influenced the outcome of the election” does clearly state that hacking did not happen, it is given with some clarity that any hacking if it happened, that the outcome was not influenced by hacking. This now gives rising concerns to James Comey and what is happening on his watch. More important, the responses that the Guardian had (at https://www.theguardian.com/technology/2016/dec/29/fbi-dhs-russian-hacking-report) where we see “The report was criticized by security experts, who said it lacked depth and came too late” as well as “Jonathan Zdziarski, a highly regarded security researcher, compared the joint action report to a child’s activity center“, which is not the first time we see it. More important is the quote “Tom Killalea, former vice-president of security at Amazon and a Capital One board member, wrote: “Russian attack on DNC similar to so many other attacks in past 15yrs. Big question: Why such poor incident response?”” is exactly the issue I had in the initial minute of the information being read by me and that is not the only part of it. The fact that the involved parties seem to be lacking more and more in advising actions as well as a clear cyber security pathway (the Clinton private mail server issues) that is correctly enforced and checked upon. The utter lack of proper ‘Common Cyber Sense‘ as seen for close to a decade at present all over official and governmental US is cause for a large amount of problems, yet the amount of evidence produced that there actually was Russian Cyber actions into changing the election results have not been brought and was brought was done in a very unconvincing way, in a way that top people had deniability of involvement in fingering the Russians. The PDF reads like something less serious in a few ways. You see, the techniques described are not wrong, but it leaves it open to who was the participating party. It could have been mere private hackers, the Russian Mafia is also a cyber-player. The fact that alleged actions from summer 2015 are only now coming into the light.  Is that not equally strange? By the way, the fact that Russian intelligence would try to ‘visit’ the files of the US Democratic Party is not that weird. Is there any indication that NSA, GCHQ and ANSSI would not have been accessing (or trying to) the United Russian party servers for intelligence is equally silly! Neither shows intent to influence an election. Let’s face it, Benghazi was a large enough mess to sway the vote in the first place and US insiders were all too happy to leak information, the Russian merely had to sit back, laugh and drink Vodka. In addition, the fact that malware was on the systems in not in question, it happens too often in too many places, yet clear evidence that APT28 or APT29 were the culprits implies router information, router data and clear information on when EXACTLY is happened (summer 2015 is a little too wide). More important, this also implies that proper malware defence was NEVER in place, so how shallow do these people want to get?

From page 8 we start seeing the true ability of the intelligence to envelope themselves into the realm of comedy. Items like ‘Update and patch production servers regularly‘ and ‘Use and configure available firewalls to block attacks‘ as well as ‘Perform regular audits of transaction logs for suspicious activity‘, these events should have been taking place for a long time, the fact that registered events from 2015 and now show that these mitigation elements are mentioned imply the fact that IT reorganisation has been essential is a larger issue and heavy on comedy if that has been absent for 2+ years. I think negligence becomes a topic of discussion at that point. The least stated on ‘Permissions, Privileges, and Access Controls‘ the better, especially if they haven’t been in place. So in retrospect, not having any ‘evidence’ published might have been better for the Democratic Party and especially for James B. Comey and Jeh Johnson. The main reason is that these events will have a longer term implications and certain parties will start asking questions, if they don’t, those people might end up have to answer a few questions as well.

In that regard the Guardian quote “The question hasn’t even been asked: ‘Did you take basic measures to protect the data that was on there?’“, a question that seems basic and was basically voiced by Sean Spicer on CNN. The fact that according to 17 intelligence agencies agree (as quoted by CNN), brings worry to those agreeing and the laughable bad quality PDF that was released. Consider that we are seeing the reaction of unanimous agreed intelligence without any clear presented evidence, actual evidence, so what are they agreeing on? As stated by Sean Spicer in the CNN interview, the burden of proof is on the intelligence community. Especially as there is an implied lack of due diligence of the Democratic National Committee to secure their IT systems. The fact that the implied lack of diligence should give view to the fact that there are plenty of American citizens that are anti democrats in the US alone to give worry on WHO have been jogging through the DNC servers.

A view that seems to have been overlooked by plenty of people as well.

In the act of anticipated speculation we should speculate that proper presentation of the evidence will be forthcoming. The presentation on a level that will give a positive response from security experts will be a lot to ask for, yet in all this, you should be asking yourself the one question that does matter, it is possible that the FBI got it wrong three times in a row? If so, in how much trouble is Cyber America?

 

Leave a comment

Filed under IT, Law, Media, Military, Politics