Category Archives: Security

Robots for wives

I was reading a BBC report on the ethics of mechanized automation in society and couldn’t help but notice two sentences that stood out from the rest. Although several paragraphs apart, somehow they seemed to encapsulate the whole story:

An ethical code to prevent humans abusing robots, and vice versa, is being drawn up by South Korea.

[…]

“Imagine if some people treat androids as if the machines were their wives,” Park Hye-Young of the ministry’s robot team told the AFP news agency.

Attack of the Korean android wives? Or attack on the Korean android wives.

Are the Koreans as worried about how the human wives are being treated? And what about android husbands? Somehow I just don’t see this kind of warning getting the same kind of attention: “some androids may treat people as if they were their husbands”.

Anyway, the story reminds me of the love poetry that sometimes appears in/around science…perhaps we should soon expect to see more examples similar to Sharon Hopkins’ work (from over a decade ago):

The Perl programming language has proved to be well suited to the creation of
poetry that not only has meaning in itself, but can also be successfully executed by a computer.

For example, she wrote:

#!/usr/bin/perl

APPEAL:

listen (please, please);

open yourself, wide;
    join (you, me),
connect (us,together),

tell me.

do something if distressed;

    @dawn, dance;
    @evening, sing;
    read (books,$poems,stories) until peaceful;
    study if able;

    write me if-you-please;

sort your feelings, reset goals, seek (friends, family, anyone);

        do*not*die (like this)
        if sin abounds;

keys (hidden), open (locks, doors), tell secrets;
do not, I-beg-you, close them, yet.

                            accept (yourself, changes),
                            bind (grief, despair);

require truth, goodness if-you-will, each moment;

select (always), length(of-days)

# listen (a perl poem)
# Sharon Hopkins
# rev. June 19, 1995

What will androids call it if they get a buffer overflow from a love poem? How will they look at injection attacks?

Dangerous Potatoes

Nothing like finding a pineapple grenade in your potatoes, as the BBC reports:

Olga Mauriello, from a small town near Naples, had put the potatoes into water to peel them when she discovered the mud-covered, pine cone-shaped grenade.

She alerted the neighbours, who in turn called the police.

Might have been more appropriate if she had found a potato masher, eh?

Strange how these horribly destructive things end up with such innocuous sounding names, like a sadly ironic form of combat poetry. The Greeks apparently use the term piggybank to describe grenades, adding yet another level of dark humor, which you can find explained relative to pineapples in the translation notes for ‘Bolivar’ on the Poetry International Web.

‘Bolivar’ was written in the winter of 1942-43. It originally circulated in manuscript form and was read at Resistance gatherings. It was first published by Ikaros in September 1944.

[…]

pineapple: Military slang for hand grenade. Greek has ‘koumbaras’, lit. ‘piggybank’.

Beating the SnoopStick

So I’ve been super busy, as many of you know, and I have a long list of poetry to post (soon), but in the meantime I felt I just had to point out this ridiculous advertisement for a monitoring “tool”:

Any time you want to see what web sites your kids or employees are visiting, who they are chatting with, and what they are chatting about, simply plug in your SnoopStick to any Windows based computer with an Internet connection and a USB port. SnoopStick will automatically connect to the target computer.

[…]

EASY TO USE! There are no commands to remember, no passwords to remember, just plug it in.

Who wants to guess how strong the authentication might be (I presume the USB device is sending its identity to a listener on the target computer) or how hard it is to have a one-to-many system to manage? Do you need a stick for every kid? Bad marketing, bad, bad…

Here are some more red-flags:

Completely secure.

[…]

SnoopStick is NOT a simple screen capturing or email alert product like everything else out there.

Finally, complete security. And because everything else out there is a simple screen capture and email alert product.

*sigh*

Bank sends woman 75,000 statements

How big do you think the envelopes were? The BBC reports:

An Aberdeen woman who asked for her bank statement was sent those of 75,000 other customers.

[…]

HBOS said in a statement: “We are treating this matter very seriously and are investigating in full.

“This is a very specific, isolated incident and we will take steps to ensure there is no security issue for customers as a result of this matter.

What control would be the best fit for this mistake? Match the account address to the mailing address? Require customer re-verification if the number exceeds a certain buffer of statements?

Perhaps what is most strange about this case is that it happened through the regular post. We all worry about exposing accounts in the digital world because the controls are virtual, so it seems hard to believe that a system could screw this up in the paper/physical world.