Category Archives: History

Malware attacks on virtual world greater than on real world

MetaSecurity’s latest post cites McAfee:

McAfee now sees more malware programmed to steal passwords for World of Warcraft now than trojans aiming for banking information, said Craig Schumager of the McAfee research labs.

This is highly misleading, I say. Banking is not just a brick-and-mortar building with furniture from the 1980s, bad art, and air-conditioning in overdrive. The exchange of funds in the virtual world, in online forums, etc. is now reaching proportions that it rivals or even replaces more traditional forms of access. Call it a back-door to the same assets, if you will. MetaSecurity hints at this perspective in the same post:

In talks with Erik Larkin at PCWorld.com, he outlined why fake game gold is more attractive than real money. Primarily, there’s less risk of getting caught and easier punishments for hacking World of Warcraft than Bank of America, but the gold is still easily commutable to real-world dollars and cents.

It goes deeper than that, as they point out in terms of a “secondary” market:

As Brock Pierce of Affinity Media (formerly IGE), put it “Fraud in the secondary market is rampant. On eBay, secondary sales were resulting in 10 percent fraud at one point I think. Someone in Russia could login through a proxy to a server in the US and make a purchase with a stolen card, turn around and resell it on the secondary market, and sell it for 75 percent in a matter of minutes. Organized crime is involved, and it’s anonymous.“

Or as Raph Koster put it: “I described this years ago at a social policy conference. And they [the government representatives] said, ‘Well it’s not drug money, but it is terrorist money.’ The government will get interested.�

Good for Koster.

I see the core of the story as malware aimed at finance is shifting to the newer less regulated methods of banking. This is not really about a move from banking to non-banking, but a move from attacking bank A to bank B, and that is a big difference in security perspective if you are a bank.

I remember arguing in political science classes about what the lifetime would be for the nation-state and its boundaries (as introduced by the medieval Italians). Will virtual worlds be dragged back into the constructs that we use today (real-world banks operating virtual-world branches) in order for us to make sense of how to regulate them, or is a whole new paradigm needed (real-world banks displaced by virtual-world challengers)?

OS Bloat and History Repeating Itself

Chalk this Infoworld writer up as yet another victim of history:

Twenty yeas from now a new generation of computer users will look back on the operating systems of today with the same bemused smile we look back at the cars of the late 1950s and early 60s. They had huge fins, were the size of a small yacht and burned up just about as much gas.

That’s right, I’m comparing Apple OS X 10.5, or Leopard, and Microsoft’s Windows Vista to those old behemoths — big and flashy and totally unnecessary.

Sorry, cars today are bigger and just as inefficient. Who needs fins when you can carry hundreds of pounds of roof-rack rails around. Hello, chrome spinners?

Conversely, as I’ve mentioned before, in raw terms cars of a hundred years ago were more efficient than those today:

“In 1908 Ford autos got 28 miles per gallon and today fuel efficiency for automobiles averages 25 miles per gallon. Is that progress?� asked Allen Hershkowitz, PhD, a senior scientist with the Natural Resources Defense Council during a Nov. 9 lecture at the New Jersey Institute of Technology (NJIT).

So what does that tell you about the future of OS design? America needs Vista like a soccer mom needs an SUV, but we’re talking want here. Want is a whole different ballgame.

A Microsoft security executive released data Thursday showing that, six months after shipping Windows Vista, his company has left more publicly disclosed Vista bugs unpatched than it did with Windows XP.

Can we assume the unnamed executive is looking back with a bemused smile?

Tall Tales of Texans

I have been stuck arguing with a friend from Texas about government. He is a big fan of less regulation, less government, less interference…the usual vapid tall tales of woe you can expect from stereotypical Texans.

I have just been trying to convince him, in my best Kansan conservative fashion, that his position is actually very anti-graft yet pro-regulation. In fact, as he complained about the manner in which legislators are able to spend money, I asked him “so, it seems you think they need more guidance, perhaps some regulation, on the allocation of funds?” Even more ironic is the fact that he is working with companies to help them navigate security regulations — he is making a living consulting with companies on how to abide by data protection regulations, and he is a hardliner at that.

My revelation of these contradictions to him seemed to have slowed things down a little, but then he countered with the argument that a legislator stealing money should not be considered corrupt if they do it in the open. Er, curve ball. I actually think he means that no one should be accused of breaking the law if they say they do not recognize the laws they are breaking, or there is “insufficient” evidence as determined by the accused. Hmmm, who does that remind me of…?

The logical twists and turns he has taken in order to find a way to argue against government makes me think his eventual position will be more like an overly salted pretzel rather than the well seasoned meal he thinks he is serving.

If I remember correctly, the last time I saw him he tried to convince me that the US was actually winning the Vietnam War but were defeated by liberals at home. More recently he has tried to suggest that there is no conclusive evidence that cigarettes cause cancer, based on the premise that a lack of absolute certainty means scientific proof is inherently insufficient. He said this means we must accept prejudice as a natural condition and stop trying to make it seem like a bad thing. I told him that empiricism is certainly no proof that prejudice is natural, but rather the opposite when coupled with a value system, and to try and spin the two into a meaningless blend was to take a painfully shallow position. What possible point could someone have in trying to claim the word “prejudice” as a positive and natural human condition?

Alas, the one thing we seem to agree on is that diesel is the future transportation energy source of choice.

And that says a lot to me, given the distance of opinion we have on everything else.

Bush may intentionally violate data-retention laws

It’s not just about explaining how/when the President does not have to honor seatbelt laws. Now it’s about data retention violations too:

“Given the heavy reliance by White House officials on RNC e-mail accounts, the high rank of the White House officials involved, and the large quantity of missing e-mails,” the report said, “the potential violation of the Presidential Records Act may be extensive.”

Republicans said there is no evidence that the law was violated or that the missing e-mails were of a government rather than political nature.

The records act requires presidents to assure that “the activities, deliberations, decisions, and policies that reflect the performance” of their duties are “adequately documented … and maintained,” the report said.

Of course there is no evidence. That was destroyed too, along with the definition of government.