Technology Issues January 2002

Bookmark and Share
TAG:  workbench project 
Filetype: pdf
Filesize: 119189
Click Here To Download...
Technology Issues January 2002

1/ Kourosh Kenneth Hamidi plans to continue fighting for his right to blast thousands of e-mail messages at Intel employees. A California appeals court this week ruled against Hamidi, who was fired
by the computer chip giant and replied by airing his grievances in an e-mail campaign that targeted up
to 35,000 Intel employees at a time. In a 2-1 decision, the court said Hamidi's blast-messaging was
unlawful trespassing.

Hamidi was fired by Intel in 1995 in a dispute over work-related injuries. He responded by founding an
organization, Former and Current Employees of Intel, which urges employees to join in class action
suits for unpaid overtime and for injuries sustained in the company's overseas factories.
(Wired News 15/12/01)

2/ Modern technology has given Britons a glimpse of life at the turn of the last century with the online publication of the national census for 1901. Doomed Antarctic explorer Robert Falcon Scott,
silent movie actor Charlie Chaplin, nurse Florence Nightingale and "The Lord of the Rings" author
J.R.R. Tolkien are among notable citizens whose details are recorded on the census.

A spokeswoman for the Public Records Office -- which on Wednesday made the entire 1901 census for
England and Wales available online at www.census.pro.gov.uk -- said the site had taken two years to
complete and would be an invaluable resource for genealogists and historians. "The database contains
details of over 32 million individuals," she told BBC radio. "It is a snapshot of the family at the time --
ages, place of birth, occupations and also ... who else was in the household at the time."

The census was conducted a few weeks after the death of Queen Victoria as Britain was beginning a
new era under the rule of King Edward VII. As well as the famous names, it also lists 90,000 "lunatics,
imbeciles and feeble-minded people."

Project manager Alison Webster said census returns were the Public Record Office's most popular
documents. By mid-morning the site was temporarily unavailable due to heavy demand. The Public
Records Office has already begun work on building a similar site for the 1891 census, which is
expected to be available to the public next year, she said.
(CNN 2/1/02)

3/ An FBI spokesman confirmed Wednesday that the U.S. government is working on a controversial Internet spying technology, code-named "Magic Lantern," which could be used to
eavesdrop on computer communications by suspected criminals. "It is a workbench project" that has
not yet been deployed, said FBI spokesman Paul Bresson. "We can't discuss it because it's under
development." The FBI has already acknowledged that it uses software that records keystrokes typed
into a computer to obtain passwords that can be used to read encrypted e-mail and other documents as
part of criminal investigations.

Magic Lantern reportedly would allow the agency to plant a Trojan horse keystroke logger on a target's
PC by sending a computer virus over the Internet, rather than require physical access to the computer,
as is now the case. Malicious hackers have been known to use e-mail or other remote methods for
installing spying technology, security experts said. When word of Magic Lantern leaked out in
published reports in November, civil libertarians said the program could easily be abused by
overzealous law enforcement agencies.

When asked if Magic Lantern would require a court order for the FBI to use it, as existing keystroke
logger technology does, Bresson said: "Like all technology projects or tools deployed by the FBI it
would be used pursuant to the appropriate legal process." Major anti-virus vendors this week said they
would not voluntarily cooperate with the FBI and said their products would continue to be updated to
detect and prevent viruses, regardless of their origin, unless there was a legal order otherwise. Doing so
would anger customers and alienate non-U.S. customers and governments, they said, adding that there
had been no requests by the FBI to ignore any viruses.

The FBI set a precedent in a similar case by asking Internet service providers to install technology in
their networks that allows officials to secretly read e-mails of criminal investigation targets. While the FBI requires a court order to install its technology, formerly called "Carnivore," some service
providers reportedly comply voluntarily, while court orders are relatively easy to get, civil libertarians
argue. Given the hijacking attacks of Sept. 11, it is also conceivable that the U.S. government would
enlist the aid of private companies to combat terrorism and help its war effort, said Michael Erbschloe,
vice president of research at Computer Economics, which analyzes the impact of viruses.

"In previous wars, including World War II, the government had the power to call on companies to help;
to commandeer the technology," said Erbschloe, author of Information Warfare: How to Survive Cyber
Attacks. "If we were at war the government would be able to require technology companies to
cooperate, I believe, in a number of ways, including getting back door access to information and
computer systems."
(Wired News 12/12/01)

4/ A quick outline of the Privacy Act. From a listserv operated by successis at www.successis.co.nz) quoting Brant Pridmore of the Federal Privacy Commission.

Q Do I need to comply?
A Yes if you:
· Have more than 3 million in turnover per annum · Are related to a non-small business · Trade in personal information (list broker for example) · Are a contracted service provider for a Commonwealth contract · Provide a health service and holds health records
Q Which records are covered by the act?
A Basically customer records
Q Which records are not covered by the act?
· Employee records are not covered - but it must be an employment relationship · Journalism · Political process
National Privacy Principles (NPP) and codes (i.e. the default rules) that in relation to email, direct
marketing to your own client base is okay; you are required to give the recipients the ability to "opt-
out", to leave your list.


1. NPP 1 - Collection of Information
a. The information must be necessary for the functioning of your business
b. Lawful, fair and not unreasonably intrusive
c. Tell them why you want it and what you'll do with it
d. Collect directly if you can
e. If collecting indirectly take reasonable steps to let them know


2. NPP 2 - Use and Disclosure

You can't use or disclose for a secondary purpose unless:
a. Within reasonable expectations; or
b. Individual has consented; or
c. Direct marketing with opt-out; or
d. Necessary for health research; or
e. Threat to life or health; or
f. Required or authorised by law; or
g. Reasonably necessary for law enforcement.
3. NPP 3 - Data Quality

You must take reasonable steps to ensure information is:

a. Accurate
b. Complete
c. Up-to-date

4. NPP 4 - Security

You must take reasonable steps to protect personal information from:

a. Misuse
b. Loss
c. Unauthorised access, modification or disclosure
d. Destroy when no longer of use


5. NPP 5 - Openness
a. You must have a business policy/procedure on handling personal information (Make available
on request)
b. You must take reasonable steps to let people know how the organisation handles personal
information

6. NPP 6 - Access and correction

You must provide access unless:

a. Threat to life or health
b. Other people's privacy
c. Frivolous or vexatious
d. Legal proceedings
e. Prejudice to negotiations
f. Access would be unlawful
g. Denying access is required or authorised by law
h. Prejudice investigation of unlawful activity
i. Prejudice law enforcement
j. National security
· If you deny access you must explain why
· You can charge fees for access, but it cannot be excessive
7. NPP 7 - Identifiers

You cannot adopt a Commonwealth government identifier as your organisation’s identifier, but you can
still use the identifier to establish identity

8. NPP 8 - Anonymity

a. Where lawful and practicable, must do business with people without requiring identification
b. If they just want a burger, just sell them a burger
c. They'll just lie anyhow (42% give misinformation)


9. NPP 9 - Transborder Data Flows

You can't send personal information out of the country unless:
a. Recipient is subject to information privacy law, scheme or contract substantially the same as the
NPPs
b. The individual consents
c. Necessary to perform contract between individual and organisation
d. For the individual's benefit, can't seek consent, individual likely to agree; or
e. Reasonable steps to ensure recipient will deal with the information in line with the NPPs

10. NPP 10 - Sensitive Information

You can only collect sensitive information if:

a. The individual has consented
b. Collection required by law
c. Threat to life or health d. Where collected by non-profit organisation and information relates only to members or
associates; and organisation agrees not to disclose without consent e. Legal proceedings

There are some exceptions for health information.


5/ There's not much needed to build a snow mound in Antarctica: just a spade and relentless, arm-aching shoveling. It takes about five hours to build a mound that will sleep six people. If you're
outside in Antarctica, without a tent, heaping the local raw material into a small hill and then hollowing
it out is still the best way to provide shelter. In a place with the harshest climate in the world, simple
technologies are often the best. "New stuff isn't necessarily better," said Lisa Holliday, a field training
instructor and member of US-New Zealand Antarctic Search and Rescue Team. "Just because it's
expensive and shiny doesn't mean to say it's better."

To survive out in the Antarctic landscape, it pays to stick to tried-and-true methods. To check the
thickness of sea ice, travelers still use a traditional ice auger: an oversized corkscrew and tape measure.
The pyramid -shaped tents that withstand Antarctic blizzards are much the same as ones used by early
polar explorers. And one of the leftover artifacts cluttering Robert Falcon Scott's first Antarctic home,
built almost a hundred years ago, is a gas camping stove. The design is little changed from those tucked
into the ever-present survival bags of visitors to the Antarctic continent.

Scientists working out in the field rely on a mixture of the old and the new. "Sometimes we use fancy
equipment and really expensive instruments but a lot of the practicalities of it are really simple," said
Dr. Alf Norkko, who is part of a team from New Zealand that is examining organisms on the Antarctic
sea floor. "When you're diving in this kind of environment it's really cold," said Norkko. "It's minus 2
(Celsius) in the water. And you have a lot of gear that you put on. What insulates us is, of course, the
air trapped." To allow air into their gloves to help keep their hands warm, the divers rely on something
very simple. "What we have is a piece of string that goes in between the wrist seal and the glove,"
Norkko said.

Up at Arrival Heights, where atmosphere-monitoring equipment is kept, science technician Dan Smale
admires the ozone-measuring Dobson machine. "It's all cast iron," said Smale. "It's really
craftsmanship. I like this instrument. It's like an art, a skill." The machine is one designed by George
Dobson in the '50s, and is still the standard. "I've never had a problem with this instrument. It's got no
computers in it at all," Smale said.

In Antarctica, the enemy of all electrical equipment is static electricity, which builds up constantly
because of the dry air. Slapping your hands on metal as you walk around inside soon becomes an
ingrained habit: you're punished with a shock if you don't. To avoid damaging expensive equipment
with static discharges, the Crary Lab is humidified to 30 percent. It is the only humidified building at
McMurdo Station.

The local legend is that, per square foot, the Crary Lab -- 46,500 square feet, three floors and 19
laboratories -- is the most expensive in the world. Given its size, and the distance everything has to travel, it's easy to believe. The manager of the Crary Lab, Robbie Score, said for really specialized
equipment, scientists either take their work home or bring the equipment along.
Nonetheless, this summer, 80 science teams will work on the ice, attracted in part by the Crary Lab.
"It's the quantity of the equipment we have here, the quality of the equipment we have here, and the
fact it can be used in cold temperatures," she said.

Outside the lab, computers and telephones provide everyone living on Ross Island with an easy link
home. That's in stark contrast to early explorers and their families. Kathleen Scott, en route south, only
learned of the death of her husband, Robert Scott, after his memorial service had already been held in
London. For Keith and Annette Roberts, who are working at Scott Base for a whole year, the main
communication problem these days is encouraging their four-year-old grandson to talk. Despite the
great strides in Antarctic technologies, their weekly phone conversation with their grandson in New
Zealand often lasts as little as 30 seconds. "Sometimes he doesn't want to talk," said Annette Roberts.
(Wired News 1/1/02)

6/ Four Israeli teenagers were placed under house arrest on Monday after admitting they wrote and spread the "Goner" worm that wreaked havoc on computers worldwide, police said. Tel Aviv's
juvenile court accepted a police request to confine the youths, aged 15 and 16, to their houses pending
five days of investigation, said Meir Zohar, head of the Israeli police computer crimes squad. The virus
deleted files and clogged e-mail inboxes around the world, appearing as an e-mail message with the
subject "Hi" and a screensaver attachment. Officials said North America, Australia and Western Europe
were hardest hit.

The youths, from the same school in the northern Israeli city of Nahariya, had never been arrested
before, Zohar said. One teenager admitted to writing the worm, while the other three confessed to
spreading it, Zohar added. Lawyers for the youths were not immediately available for comment. "They
are not bandits, they are regular kids. They are not computer geniuses, although one of them could
write a program," Zohar told Reuters. "I don't think they fully understood what they were doing."

Security experts called for stern punishment of the teens, insisting the damage went beyond a children's
prank. Under Israeli law, creating and spreading computer viruses is a crime punishable with a
maximum jail sentence of five years. But for juveniles – the majority of those who send viruses --
maximum jail time is only 2-1/2 years.
Police acted on a tip from Israeli intelligence officials before arresting the youths late last week. Police
searched their homes and confiscated computers and other material, Zohar said.

"After five days they will be released unless we find something," he said, adding that their admissions
of writing and spreading the virus might not be enough. Early predictions put Goner in a league with
last year's infamous "Love Bug," which experts say caused $8.75 billion of damage worldwide. By late
last week Goner was expected to inflict about $5 million in damages. Zohar said the suspects told
investigators that Goner was supposed to be an updated version of the fast-spreading 1999 "Melissa" e-
mail virus, which caused about $1.2 billion in damage.
(Wired News 10/12/01)


7/ The two "mystery" cases of anthrax in the US may have been caused by spores blown on the wind from Trenton, New Jersey where anthrax-laced letters were processed in October. If true, the fear
that anthrax was carried widely across North America by contaminated mail may be unfounded. Two
of the five US anthrax deaths so far had no known association with contaminated mail. The two women
lived in the Bronx in New York City, and in Oxford, Connecticut. But both places lie on a straight line
running 47 degrees northeast from Trenton.

Martin Furmanski, a researcher based in Newport Beach, California, says this exactly matches the wind
bearing on 9 October - 220 and 230 degrees - the day the anthrax-laced letters were processed in
Trenton. The wind was also "brisk", he says, between 11 and 21 kilometres per hour. There was also a
major temperature inversion that night, which would have trapped air masses close to the ground and
prevented turbulence and vertical mixing. He estimates that contaminated air under these conditions
should have covered a band about four kilometres wide - like the plume that killed more than 100
people in Sverdlovsk, Siberia in 1979 after anthrax escaped from a bioweapons plant. If so, 3.6 million
people in New Jersey, New York and Connecticut could have been exposed.
Military experiments using safe bacilli similar to anthrax have found bacteria 725 kilometres
downwind of release sites, says Furmanski. "Exposures so far downwind would almost certainly be
limited to a single spore," he admits. "But there is good evidence that a single inhaled anthrax spore is
capable of causing fatal disease, especially if a large population is exposed”. Although there were four
different strains in the mixture that escaped at Sverdlovsk, seven of the 11 cases in which the anthrax
was genetically analysed were stricken with bacilli of only one strain. This suggests, says Furmanski,
that the infections stemmed from only one inhaled spore.

Martin Hugh-Jones of Louisiana State University at Baton Rouge, who analysed the release at
Sverdlovsk, calls the theory "a long shot". He observes that Furmanski's calculations predict that the
contaminated plume would have arrived in Oxford, Connecticut between 0400 and 0600 - when Ottilie
Lundgren, the 94-year-old victim, was unlikely to be outdoors. But there was almost certainly an
aerosol of anthrax spores released at Trenton. Two workers there contracted inhalational anthrax, and a
woman working at an unrelated office nearby developed cutaneous disease. Furmanski suggests that
the medical records of people downwind of Trenton might show if any more cases were missed.
(New Scientist 14/12/01)

8/ The Queen, or at least her new Web hosting company, has dumped GNU/Linux in favor of Microsoft IIS Web servers, ending the royal family's two-year flirtation with the open-source operating
system.

In 1999, the administrator hosting royal.gov.uk -- the official site for the British royal family --
switched from Sun's Solaris operating system to Dell servers running Linux and Apache server
software, citing better performance. But last Thursday Linux's reign ended when the site relaunched
with its new service provider, CCG.XM (a division of Cordiant Communications Group). "CCG.XM
works with Microsoft Internet Information Server as standard," explained a palace spokeswoman. She
also said that Linux is easier to administer, and that IIS was easier to configure in the case of royal
family's site.

Linux is considered one of the few challengers to Microsoft's operating system crown, and has shown
particular strength in the server market, where it is popular for its low price, stability and flexibility.

The site was obliged to switch to a new service provider after the former host, a government
communications agency, ended its hosting operations. IIS has received a great deal of bad press over
security, since it has recently been the target of viruses like Code Red and Nimda, but the palace says it
has shored up the defences against hackers. "We are confident that we have taken every precaution to
ensure a secure site," said the spokeswoman.

Unfortunately, the palace couldn't stop someone from severing a cable, which it says resulted in the site
crashing on Tuesday.
(ZDNet 5/12/01)

9/
a/ THE WEB TURNS TEN
Enter particle physicist Paul Kunz, who happened to be visiting CERN from the Stanford Linear
Accelerator Center (SLAC). Upon receiving a demo of the Web application, Kunz realized it would
enable him to build a friendly interface to a database at SLAC. After returning home, he installed
Berners-Lee's web server software at SLAC, and created a web page that would allow physicists all
over the world to query a database of high-energy physics papers via the Internet.

Exactly ten years ago today, Kunz created the first website in the United States. But more importantly,
it was the first useful application of the Web. At a conference in France in January 1992, Berners-Lee
did a demonstration for 200 physicists from around the world, who were stunned when they saw how
easy it was to access the SLAC database 6000 miles away.

From that point on, the number of web users and websites began to grow exponentially.
b/ Surely you've heard of the Nobel Prize, which is awarded for great achievements in Physics, Chemistry, Medicine, Literature and Peace. What I meant to discuss was The IG NOBEL Prize, which
honors individuals whose achievements "cannot or should not be reproduced." The Igs, which are
sponsored by the science humor magazine Annals of Improbable Research, are intended to celebrate
the unusual, honor the imaginative, and take a good-natured poke at some remarkably goofy things
done in the name of science. This year's winners were announced in October and included the
following:

PHYSICS: David Schmidt for his $28000 partial solution to the question of why shower curtains
billow in and stick to your leg.

BIOLOGY: Buck Weimer for inventing airtight underwear with a replaceable charcoal filter that
removes bad-smelling gases.

TECHNOLOGY: John Keogh for patenting the wheel. The Australian Patent Office shared the honors
for granting Patent #2001100012.

PUBLIC HEALTH: Chittaranjan Andrade and B.S. Srihari of Bangalore, India, for their probing
medical discovery in the field of Rhinotillexomania (a.k.a. nose picking) among adolescents.

You can read all about the IG NOBEL prizes, listen to highlights of the ceremony, and peruse the
archives of past winners here:

http://www.improbable.com/ig/ig-top.html </A>
(Wired News 10/12/01)

10/ Well, a few months ago a nefarious netizen took the "honor system" virus joke, rewrote it, and created an equally fake virus warning that many newbies have taken seriously. The new warning asks
you to scan your hard drive for a file named SULFNBK.EXE and, if you find it, to delete it from your
system.

<SIGH>

What the virus warning fails to tell you is that SULFNBK.EXE is *NOT* a virus, it is a Windows
utility used to restore long file names in the case of a catastrophic crash. DON'T DELETE THIS FILE,
FOLKS.

Fortunately, SULFNBK.EXE isn't an *essential* Windows file -- you can actually live with out it -- but
you'll never catch *ME* saying that out loud. Why let the newbies off the hook so easily when this is
such a wonderful "teachable moment?"

Long story short: if someone sends you an email that asks you to do
*ANYTHING* -- invest money, sign an online petition, warn your friends about a new virus threat,
delete files from your Windows system folder, forward information to everyone you know, yadda
yadda yadda -- take two seconds to verify the contents of the email before you do ANYTHING! It is
so simple to do, and it keeps you from making a fool of yourself in front of the entire planet.

For example, a simple search at http://www.google.com/ for "SULFNBK.EXE" results in 13,800 hits,
and EVERY ONE of the first
10 hits shows you that that the SULFNBK.EXE virus warning is a hoax. Two seconds of work and you
keep from damaging your system.

Something that *ISN'T* a hoax, however, is the fact that Microsoft Internet Explorer has recently been
plagued with over a dozen rather severe security holes. We have talked about most of these security
holes -- and how to patch them -- in previous TOURBUS posts.

Earlier this week Microsoft released a "cumulative patch that, when installed, eliminated all previously
discussed security vulnerabilities affecting IE 5.5 and IE 6. In addition, it eliminates three newly
discovered vulnerabilities."
Microsoft considers this patch to be critical and recommends that all
"[c]ustomers using IE should install the patch immediately," partly because of the severity of the three
newly discovered vulnerabilities that the patch eliminates.

This patch is only for Windows-based versions of Internet Explorer. If you have a PC, you *NEED*
this patch. If you have a Mac, you don't need this patch -- these security holes exist only in the
Windows versions of Internet Explorer.

You can download Microsoft's uber-patch at
http://www.microsoft.com/windows/ie/downloads/critical/Q313675/default.asp

If that address doesn't work, you can find a link to the uber-patch at http://netsquirrel.com/ </A>.

By the way, Microsoft no longer supports *ANY* PC versions of Internet Explorer other than IE 5.5
SP2 and IE 6. From what I can gather, many of the security holes that this uber-patch fixes exist in
older versions of Internet Explorer, but this patch will not update those older browsers. If you have an
older, unsupported browser and try to download the patch, Microsoft will ask you to update your
browser first, either by downloading a service pack for Internet Explorer 5.5 or upgrading to Internet
Explorer 6. [If I were you, I'd skip the service pack and upgrade to 6.]

Once you have upgraded your browser to IE 5.5 SP2 or IE 6, you'll need to download and install the
uber-patch.

(Tourbus 21/12/01)

11/ The convenience of e-mail allows Marines sent overseas and their spouses left waiting at home to communicate almost routinely. But sometimes, that's not enough.

E-mail can't replace the feel of a handwritten letter, the taste of Christmas cookies or the scent of a
card, say spouses around Camp Lejeune. "You can't spray perfume on an e-mail," said Jeanette Frick,
38, whose husband Col. Andrew Frick is commander of the 2,200 Marines of the 26th Marine
Expeditionary Unit.

The unit sailed to the Mediterranean on Sept. 20, on a six-month deployment scheduled long before the
Sept. 11 attacks. It was diverted to the Arabian Sea about a month later when the United States began
to wage war on terrorism, and now some of its members are in Afghanistan guarding the reopened U.S.
Embassy in Kabul.
E-mail is enormously popular for loved ones of members of the 26th MEU. The ships that carry Marine
Corps expeditionary units from Morehead City every six months have had e-mail capability for nearly
three years.

But like Frick, many spouses consider e-mail just a supplement to the personal touches of telephone
calls, tapes, letters and packages. Some even say e-mail is too convenient, too much like a kitchen
conversation on a mundane household topic. "Sometimes, you want to separate yourself. If you're
talking to them every day it's almost more depressing," said Jo Koziuk, married to the MEU's Maj.
Greg Koziuk. Words can't make up for the simple presence of her husband of 14 years.

Sometimes, Koziuk pulls from her purse a card he soaked with cologne and mailed to her. "I thought
only girls did that," the 38-year-old Koziuk said. "When I miss him, I pull it out and smell it."

Still, e-mail does serve a purpose on topics such as where to get the car repaired, or how the children
are doing in school, said Brenda Horne, married to Chief Warrant Officer Phil Horne. "It can be little
things," Horne said. "What's going on on a daily basis, things you might not put in a letter. It's
wonderful because the response is so quick."

Carrie Bostick's husband, Sgt. Deric Bostick, uses e-mail -- but to ask for things to be sent via regular
mail. "The last package was a book," Bostick said. "He collects science fiction. And a CD player,
cashews, things like a toothbrush and toothpaste. I'll put little things in there like pictures my daughter
draws." Families that don't have their own computers can use machines available at the USO.
Twenty-five to 30 people a day use the agency's PCs, said USO Director Joe Houle. Houle, a former
sergeant major who retired a year ago after 32 years in the corps, said it's a big change from his early
career, when he communicated with his family via ham radio.
The conversations went like "'I love you. Over. How are the kids? Over.' Everything was in the open
and nothing was sacred," Houle said.
(Wired News 25/12/01)

12/ Virus writers often act as if the Internet, the most public forum in the world, is their very own private playground. Law enforcement officials are amused and amazed by the many virus writers who
carefully include identifying comments or credits in their code, and who often are found bragging about
their skills and latest creations in newsgroups or on Internet Relay Chat channels.
"
Cyber criminals are like idiot Hansel and Gretels, scattering electronic breadcrumbs that lead straight to
them," said retired New York City detective Pete Angonasta. "You just don't see this sort of behavior in
other criminals. I've never seen a burglar leaving cute notes crediting the crime to himself. And I've
never run across a burglar who puts up a self-promotional website or goes into a chat room to discuss
the night's activities."

But their high profiles seemingly do not make virus writers easier to apprehend. Virtually all captured
coders either confessed or were arrested only after techies discovered their identities and informed
authorities. Overworked and under-funded law enforcement officials rely heavily on tips from
computer security experts to identify virus writers. But many computer experts are now too busy
scrambling to survive in a tight economy to play cyber sleuth. Providing products that protect against
security holes and viruses can be a profitable business, but discovering the identities of virus writers is
always charity work.

So even though many viruses do contain laughably clear clues that could lead law enforcement agents
directly to their writers, the authors of such electronic evils as Code Red, Nimda and SirCam probably
won't be caught unless a curious geek with some spare time decides to do a good deed and track down
the worm writers.

The latest busted worm writers are four Israeli teenagers who have confessed to creating the Goner
worm. According to credits in its code, Goner was called "Pentagone" by its creators. Israeli newspaper
Ha'aretz Daily reported that DALnet IRC network administrators quickly discovered the virus writers
chatting on a channel that the teenagers had cleverly named "Pentagone" and turned over the
information to Israeli police.

"Security people often run a search on the clues in a virus' code. The Pentagone channel was pretty
easy to find and people were soon in there calling these guys idiots and assholes," said Sam Silverman,
a systems administrator who checked the channel to find out more about the worm. "They admitted
they wrote the worm, but said they didn't expect it to spread so far and fast."

Jan de Wit, author of the Anna Kournikova worm, also said that he watched in growing alarm as the
worm he released spread wildly on hard drives around the world. Hours after he released the worm, and
shortly after releasing a PR statement on his website, de Wit turned himself in to local police.

Onel de Guzman, the suspected author of the Love Bug, was caught when a teacher at the AMA
Computer College in Manila realized that the worm was remarkably similar to a thesis project
submitted by a student who dropped out after the thesis was rejected. The teacher contacted local
authorities who, thanks to a tip from a group of cybersleuths, had already narrowed their search to
AMA.

"I know it looks like the feds are slacking off and waiting for these guys to be delivered to them, but it's
the same with any crime," detective Angonasta said. "Despite the popular image of detectives cleverly
ferreting out suspects, most cases -- from murder to mugging -- are solved because someone was really
stupid and someone else noticed and told us about it. Detectives don't discover information as much as
we collate it."

Debra Weierman of the FBI's National Infrastructure Protection Center acknowledged that the NIPC
works with thousands of computer security people around the world to track down worm writers, an activity she likens to "assembling a complex jigsaw puzzle." Weierman also said the FBI and other law
enforcement agencies specifically ask computer users to report incidences of viruses to them, so that
agents can track the origin and spread of the code. But few users report viruses to the NIPC, said
Weierman, who assumes that businesses are afraid of bad publicity, and home users think that a single
computer virus doesn't merit contacting the FBI.

Some law enforcement officers also said that while viruses aren't considered to be a trivial problem,
they aren't highest on the list of crime concerns either. "Essentially, unless someone hands the smoking
gun to the police, they normally won't go out and try to find these (virus writers) unless they do a lot of
damage," said Ian McCormick from the Canadian Police Information Centre. "Cybercrime squads are
spread thin and are often mandated to follow up on issues like computer fraud crimes or kiddie porn
traders rather then virus writers."

Some security experts feel that law enforcement needs to begin taking virus writing far more seriously.
"We need to do this, if for no other reason than to show it's possible (to track virus writers)," Russ
Cooper, editor of security news list NTBugtraq, said. "Forget that it may be problematic to extradite the
individual, or that they may be young, or claim to be doing 'research.' We need to catch them, and place
them in a position whereby they are seen for what they are -- a terrorist," Cooper said. "The cost to our
businesses, not to mention our way of life, is simply too high to not pursue these individuals."

But even when writers are caught and brought to trial, the legal system often doesn't know what to do
with them. De Guzman was released because the Philippine government had no laws specifically
dealing with computer crime, and was unable to develop a case against him. De Wit was found guilty at
his trial, and was ordered to serve 150 hours of community service. He was also offered a job managing
his hometown's computer systems by the mayor.

David Smith, author of the Melissa virus, pleaded guilty in December 1999 and still hasn't been
sentenced. Six court dates have come and gone, and Smith remains out on $100,000 bail. His lawyer,
Edward Borden, did not return calls requesting comment.

"We're sending a mixed message," Graham Cluley, senior technology consultant for Sophos Anti-
Virus, said. "On the one hand, we say virus writing is a crime; on the other, we don't really pursue it.
These guys get fame, and often even job offers, after releasing a virus. We have to send a consistent
message that virus writing is not a good thing, before it totally spirals out of control."

Love Bug, AnnaK and Melissa were coded to spread quickly, but did no physical damage to systems.
But over the past year, nastier worms like Nimda and Code Red have opened infected systems to attack
by malicious hackers. The coders of the more malicious worms rarely leave clear clues in their code.
But security experts like Richard Smith, who was instrumental in tracking down the authors of the
Love Bug and Melissa, said it's not impossible to track down more surreptitious worm writers. "But it
wouldn't be easy," said Smith. "For Code Red and Nimda, you'd probably need to examine the server
logs of infected computers to track all the way back to where the worm started. You'd need to find out
who got it first, and from where. It would be a horrendous job."

SirCam, the e-mail virus that clogged networks this summer, might be easier to track. SirCam contains
this text in its code: "SirCam Version 1.0 Copyright 2001 2rP Made in / Hecho en - Cuitzeo,
Michoacan Mexico." Smith has a hunch that the author of SirCam is or was in Cuitzeo, and is probably
a student. Cuitzeo is located 16 miles from Morelia City, which boasts a large university.
The NIPC's Weierman said that all leads are being pursued.
(Wired News 27/12/01)

13/ XML is fast becoming the Esperanto, or common language, of the e-commerce world. It can help trading partners exchange information, whether they're customers or suppliers. And it can help a
company glean tidbits from many internal sources to share with its employees over an intranet, or help
integrate several applications.

It's important to remember, though, that XML is not a "magic bullet." XML stands for "Extensible
Markup Language," which means it's a language -- a tool that helps create other things. So, for
example, companies can use XML to define how multiple trading partners will deal with the concept of
"customer name" -- whether it's last name first, if honorifics like "Dr." or "Ms." will be included, and how many total spaces the name will be allowed to take up. Once those parameters have been agreed
upon, companies can exchange those customer names in a common format for use in multiple
applications.

"Folks who want to do business online think XML is wonderful," said Guy Creese, a research director
at the Aberdeen Group, Inc., a consultancy in Boston. As one example, it allows someone to go to a
Web site and query across several back-end systems about what types of metric wrenches are in stock,
their cost and delivery date, he explained.

There are also industry-specific dictionaries that are based on XML. Two examples are PRISM for the
publishing industry and RosettaNet for certain types of e-commerce applications.


"XML is a language for creating specific industry vocabularies and specific descriptions of particular
processes," said Linda Burman, president and CEO of L. A. Burman Associates Inc., a metadata
consultancy in Toronto. "XML by itself does absolutely nothing." XML can define an invoice, or the
structure of a book -- sections, chapters, etc. -- or it can define the structure of a Web page to include
text, graphics, video, and so on.

But, she cautioned, XML isn't necessarily appropriate for everything. If you're trying to do something
that is entirely within the purview of one application, and you don't have plans for sharing that
information widely, it might be easiest to just handle it within the structure of the application instead of
converting it to XML.

Virtually all current software on the market supports XML in some context, whether the package is for
customer relationship management (CRM), enterprise resource planning (ERP) or for accounts
payable. Because XML is a widely accepted standard, most suppliers support it to some degree.

What is less ubiquitous, however, is support for a specific vocabulary or process that someone has
defined with XML. That may require a bit more searching, and places like XML.com or w3.org (the
home page of the World Wide Web Consortium, creator of the XML standard) can help find specific
types of applications.

Some applications have more built-in XML support than others. Software to help manage Web content,
for instance, usually has a great degree of XML already in the package. Some go so far as to
automatically create XML "tags" for the Web content that is managed by the package. This helps serve
up more customized content for visitors that have typed some keywords into the search engine, for
instance.

XML also helps to repurpose content for different uses. Christopher Klanac, content management
specialist at mutual-funds provider Morningstar Inc. in Chicago, explained that his company uses XML
to "make syndication a breeze." It allows the company to share content among different sites, both
internally among different business units and externally at Morningstar Japan and Morningstar Canada.

Rob Perry, a senior analyst at the Yankee Group in Boston, says that XML really shines as a means of
integration among different applications. To help make that even easier, a new group of XML
databases are being developed, he said, which can help track the different definitions and processes
used by applications at various partners or internally. Vendors working on XML databases include
Software AG, NeoCore Inc., Ipedo Inc., XYZFind Corp. and IXIA Inc.
(TechTarget 4/1/02)

14/ New counter-terrorism measures pushed by a government "run out of control" will see more Australian agencies able to intercept e-mails for routine investigations, according to civil liberties
group Electronic Frontiers of Australia (EFA).

In a review of Australia’s ability to meet the challenges of “the new terrorist environment,” a raft of
proposals, including amendments to the Telecommunications (Interception) Amendment Act 1979,
were put forward at a Cabinet meeting today, according to the Department for the Attorney General.
However amendments to the Act, which was originally only used when police were investigating “top
end criminality”, broadens the number of people able to order a telecommunications interception from the usual “uniformed police and trench-coat spooks” to agencies such as the Australian Securities and
Investment Commission (ASIC) and the Australian Competition and Consumer Commission (ACCC)
which themselves have prosecution powers, EFA chairman Kim Heitman told ZDNet Australia.

“It’s a government run completely out of control here,” Heitman said. “The government is obviously in
a panic about terrorist acts and in the meantime they’ve forgotten why there are checks and boundaries
on government surveillance.” According to Heitman, the original Telecommunications Interception Act
once placed a very high value on personal privacy -- something that differentiated Australian
legislation from that of European states. However, it has evolved to the stage now that police are using
telecommunications networks as part of routine investigations, such as petty fraud, he said.

EFA’s position has consistently been that what’s needed is more “coppers on the beat” than new
powers but instead “we’ve got a creep of police powers under the shadow of September 11 but not
exactly in direct response to it,” Heitman said. “We don’t think you can counteract terrorism by
becoming more of a dictatorship,” he added. Although mere proposals as present, Heitman believes the
amendments are a “fait-accompli” and once increased powers are granted they’ll never be called back.
“The threat of terrorism might pass but the threat to civil liberties will be set in concrete,” he said

The review, headed by Attorney General's department secretary Robert Cornall, found that "the
profound shift in the international security environment has meant that Australia's profile as a terrorist
target has risen and our interests abroad face a higher level of terrorist threat. While there remains no
known specific threat of terrorism in Australia, Cabinet has endorsed a raft of measures to enhance our
ability to meet the challenges of the new terrorist environment," a statement issued from the Attorney
General's department said. Cabinet will give further consideration to additional issues arising out of the
review in the New Year.
ZDNet 18/12/01)

Reports since January 1999 are being placed on the NSW page of the Records Management
Association of Australia Web page at http://www.rmaa.com.au . Any comments or ideas about these reports should be referred to the author at geoffsm@naa.gov.au . If people want copies of the reports e-mailed to them, please contact the author.

If readers are interested in records management matters, then a useful developing forum for
discussion is the Australian Records Management Listserv. Check the following Web
address: http://echidna.stu.cowan.edu.au/mailman/listinfo/rmaa-list
If readers are interested in technology matters, then a useful forum for discussion is the
Economic, Legal and Social Implications Committee (ELSIC) of the Australian Computer
Society e-mail list. For further information contact Andrew Freeman at afreeman@pcug.org.au or check the following Web address: http://www.acs.org.au/index- lists.htm
Geoff Smith
Chair, Industry Technology and Standards
8 January 2002



Download Technology Issues January 2002.pdf
Comments
Your Name:
Your Email:
Your Talk:
Google Search
Google