Category Archives: Security

BAHA – Call for Speakers

The Bay Area Hackers Association has a call out for speakers.

When: Sunday, January 9th, 2011
Where: Noisebridge, 2169 Mission St, San Francisco, CA

Charter:

…give those interested in learning and teaching about security topics a forum to do so. This is mostly about computer, application, network security and cryptology, but I don’t see a reason to strictly limit discussion to those topics. For example, there may be widespread interest in anonymity, privacy, relevant legislation, physical security, locksport, and so on.

Mailing List

Facebook Rips MIT Map of Social Networks

Odd, on December 9th I mentioned a story on the BBC about an MIT team who had spent considerable resources mapping social networks to geography.

[Carlo Ratti of the Massachusetts Institute of Technology’s] team used records of more than 12 billion anonymised landline telephone calls, to model who Britons frequently spoke to.

I added in a Wired map from 2007 to illustrate how the NSA likes to route communications through America so they can listen:

Now I see an intern at Facebook has tonight tried to replicate the same study using Facebook data:

I was interested in seeing how geography and political borders affected where people lived relative to their friends. I wanted a visualization that would show which cities had a lot of friendships between them.

That sounds an awful lot like the MIT study, which said:

A map created using those connections showed that people tended to communicate most with people that we geographically close to them, [Carlo Ratti of the Massachusetts Institute of Technology’s team] added.

I do not think the Facebook intern is really saying “I have a hypothesis that x,y cities have a lot of friendships”. No, I think he is saying “I set out to paint a picture of cities that have a lot of relationships between them”. It is kind of like he says he wants to do the exact same thing that the MIT study was doing, but skipping straight past the study part and to the pretty picture.

I began by taking a sample of about ten million pairs of friends from Apache Hive, our data warehouse. I combined that data with each user’s current city and summed the number of friends between each pair of cities. Then I merged the data with the longitude and latitude of each city.

Voila! Art.

Note that MIT’s study was on 12 billion anonymised connections.

Facebook intern project: not so many and not so anonymous, and no credit.

MIT had a team working on their study.

Facebook intern project: “a few minutes of rendering”

So here are millions of connections, probably not even random let alone anonymous, manipulated to look pretty in “enough shades of color for it to work the way I wanted”.

Pretty and artistic, but I will avoid making jokes about it being insecure, shallow and artificial, like Facebook. I would have to make the data work the way I want to support that…but seriously, there are barely any connections between France and French-speaking Africa. Is that a sign of weakness by Facebook or is it outside the data set of their millions, or is that asking the same question?

And here is the MIT study color map, from the BBC, for comparison:

This all takes me back to the link analysis tools I wrote about in June. It is extremely useful to incident responders and investigators to map suspect relationships to geography over time.

Updated: A reader pointed out the Facebook map is similar to a 1996 IEEE presentation called “Visualizing the Global Topology of the MBone

We present a case study of visualizing the global topology of the Internet MBone. The MBone is the Internet’s multicast backbone. […] We create a geographic representation of the tunnel structure as arcs on a globe by resolving the latitude and longitude of MBone routers.

US Protected Nazi War Criminals

The US National Archives has issued a report based on newly declassified material, which confirms that the US protected Nazi war criminals as early as 1946. I noticed it mentioned on German news, ironically.

The report, titled “Hitler’s Shadow: Nazi War Criminals, US Intelligence and the Cold War,” draws on information classified until 2005 and made available under the Nazi War Crimes Disclosure Act, an effort by Washington to shed more a critical light on its own secrets.

The report looks into a number of former SS and Gestapo members who escaped justice with the US either knowingly tolerating their escape or even helping them to flee.

The report is available at www.archives.gov (PDF). Here are some excerpts:

The CIA moved to protect Ukranian nationalist leader Mykola Lebed from criminal investigation by the Immigration and Naturalization Service in 1952.

[…]

…on October 15, 1959, only 10 days after the CIA Munich base made the request [for a US Visa], a KGB assassin named Bogdan Stashinskiy murdered Bandera with a special gun that sprayed cyanide dust into the victim’s face. The Soviets, who had penetrated Bandera’s organization and the BND years before, evidently decided that they could not live with another alliance between German intelligence officers and Ukrainian fanatics.

[…]

Once in the United States, Lebed was the CIA’s chief contact for AERODYNAMIC. CIA handlers pointed to his “cunning character,” his “relations with the Gestapo and … Gestapo training,” that the fact that he was “a very ruthless operator.”

US Navy Builds Schools in Africa

Earlier this year the U.S. Africa Command announced a successful construction project in the Comoros.

The ceremony marked the completion of a $500,000 project funded by U.S. Africa Command (AFRICOM), providing eight classrooms and 10 latrines.

“Today’s dedication represents the commitment and respect of our two nations towards the idea that education is a key to reaching our future goals and dreams,” Losey said to an auditorium full of local Comorians and U.S. military members. “For many, many months now, the Comorian military and elements of the U.S. military have worked together, side-by-side, and have persevered and prevailed through many challenges to bring this school to fruition.”

My math might be a little rusty, and I know schools need all facilities, but I hope the majority of money was not spent on toilets. Maybe the Navy means plumbing when they say latrines. I wonder what the many challenges were. I found a clue in a report by Captain Joe BluBaugh, several months after the school was finished:

Next we traveled to a government-run hospital to review a project the MCAT (Maritime Civil Affairs Team) members designed to provide the hospital laboratory with running water throughout the day as they normally only have water provided through the city distribution system for two hours a day. The project will use a cistern that will fill up when city water is available to supply water throughout the whole day.

Upon arrival, the director of the hospital took us to their main water line to show where it had broken. Furthermore, the pump that supplied water to the hospital through the main line had overheated and was no longer functional. The hospital did not have the resources or expertise to fix either of the problems. Now the entire hospital was without a basic necessity. Situations like this make me realize how much we take basic necessities for granted.

In my short time on the continent, maintaining equipment and basic infrastructure appears to be a significant challenge facing many East African countries. Military teams forward deployed from CJTF-HOA, similar to the MCAT in the Comoros, are working with our partner nations to provide knowledge and build capacity to help address these challenges.

The importance of AFRICOM efforts should not be understated. Terror groups like al Qaeda are infamous for recruiting disenfranchised youth from Islamic countries that offer them limited opportunities.

The school story shows a relatively inexpensive countermeasure. Hopefully the American military is intent on helping ensure there are good reasons to want to stay in school; it is nice to see evidence of the US thinking about international security in terms of graduations, health care and economic development. Now, if they could just take the same view for national security.