Infinite Monkey Theorems 20100709

Boxer might lose?!?!  In what has to be either a sign of the end times or a sign of our bright future, Senator Barbara Boxer is in a tight race against former HP CEO Carly Fiorina (via the Atlantic here):

The latest Field poll looks a bit troubling for Sen. Barbara Boxer: she leads her Republican opponent, former HP CEO Carly Fiorina, by just three percentage points (47% to 44%)…

San Fransisco’s City Council, in an attempt to prove themselves the absolutely dumbest people on Earth, might ban the sale of pets (via Huffington Post here):

…If the ordinance passes San Francisco could be the first city in the nation to ban the sale all pets except fish….

The IMF tells the US to slow down on spending (via the Hill here):

The United States must rein in its deficits sooner than President Barack Obama wants, the International Monetary Fund (IMF) said Thursday.

In an annual report on the U.S. economy, the IMF said the U.S. faces a “central challenge” in implementing a “credible fiscal strategy” to ensure that public debt is put on a sustainable path without putting the economic recovery in jeopardy….

The NSA responds to the WSJ article (posted here yesterday) concerning the “Perfect Citizen” program (via the Atlantic here):

Today’s Wall Street Journal article by Siobhan Gorman, titled “US Plans Cyber Shield for Utilities, Companies,” is an inaccurate portrayal of the work performed at the National Security Agency. Because of the high sensitivity surrounding what we do to defend our nation, it is inappropriate to confirm or deny all of the specific allegations made in the article. We will, however, provide the following facts: PERFECT CITIZEN is purely a vulnerabilities-assessment and capabilities-development contract. This is a research and engineering effort. There is no monitoring activity involved, and no sensors are employed in this endeavor. Specifically, it does not involve the monitoring of communications or the placement of sensors on utility company systems. This contract provides a set of technical solutions that help the National Security Agency better understand the threats to national security networks, which is a critical part of NSA’s mission of defending the nation. Any suggestions that there are illegal or invasive domestic activities associated with this contracted effort are simply not true. We strictly adhere to both the spirit and the letter of U.S. laws and regulations….

I’m not saying I automatically disagree that their statement is completely accurate, but we should not forget the NSA is the same agency who for years denied even having something like Echelon.

New Language: Transparency means secretly spying…

In other administration news, WSJ Online is reporting (here):

The federal government is launching an expansive program dubbed “Perfect Citizen” to detect cyber assaults on private companies and government agencies running such critical infrastructure as the electricity grid and nuclear-power plants, according to people familiar with the program….

As a concerned citizen, you might ask yourself… how will this work?

…The surveillance by the National Security Agency, the government’s chief eavesdropping agency, would rely on a set of sensors deployed in computer networks for critical infrastructure that would be triggered by unusual activity suggesting an impending cyber attack, though it wouldn’t persistently monitor the whole system, these people said….

& herein lies the problem…. the internet wasn’t designed to predict or prevent attacks, so the question becomes – how do they plan to do this?

Do they plan to redesign the internet?  Or do they plan to spy on all computers connected?  Combination of both?*

In this age of “transparency” I’m sure we can find out:

….Defense contractor Raytheon Corp. recently won a classified contract for the initial phase of the surveillance effort valued at up to $100 million, said a person familiar with the project.

An NSA spokeswoman said the agency had no information to provide on the program. A Raytheon spokesman declined to comment….

Ahhhh…. that clears it up.  The administration bent on transparency is implementing a secret program to monitor most internet activity without telling anyone what it is.

Please note: I do agree that say specific intrusion detection techniques and encryption would be left out of the public.

But for this administration, the transparent, no more Patriot Act administration, to task the world’s number one cyber-spy agency to secretly monitor internet activity of American citizens without telling those citizens exactly what it’s doing – well, whatever it is, it’s not transparent.

*side bar* To get an idea of cybersecurity threats, how difficult it is to detect without intruding on personal computers, and just an overall great article about a real life cyber-mystery, I highly recommend The Enemy Within published by The Atlantic:

When the Conficker computer “worm” was unleashed on the world in November 2008, cyber-security experts didn’t know what to make of it. It infiltrated millions of computers around the globe. It constantly checks in with its unknown creators. It uses an encryption code so sophisticated that only a very few people could have deployed it. For the first time ever, the cyber-security elites of the world have joined forces in a high-tech game of cops and robbers, trying to find Conficker’s creators and defeat them. The cops are failing. And now the worm lies there, waiting ……

The full article is well worth the time.