Monthly Archives: September 2012

Security

Data Proves Local Support for Bike Lane

Leave a comment

A major political concern in campaigns for change is who is backing what side of the debate. Bike Nopa has posted survey results from the SF Planning Department on a recent proposal for Masonic — to remove parking and replace it with a bike lane — that supposedly shows locals were informed and supportive.

Vote Map

That’s a familiar-looking map to anyone who watched my RSA presentation last February on network attack source attribution using Smith’s 1860s Ghost-Map. It makes me wonder if anyone has calculated the distance to safe zones for non-vehicular travel for NOPA residents.

Despite 1400 notices sent by the city it appears only a handful of responses were recorded. Bike Nopa points out that those who did participate the most in meetings (86% in favor) were local rather than from advocacy groups or other neighborhoods.

It makes a lot of sense when you think about who would support bike and pedestrian improvements — people who are close enough to the area to bike or walk through it. Nonetheless, it’s an interesting use of data relative to safety studies.

Here’s the new design, reminiscent of urban plans common to Europe and Asia, which adds a buffer for pedestrians, many new trees and a raised bicycle lane:

Masonic Plan

Security

Active Defense: “We are the Government; We are here to help.” Well, not so much

Leave a comment

Over the last year I have been writing and speaking on hacking back in self-defense, and every time I poll an audience as to whether hacking back is legal I get a resounding NO! 

Then I walk the group through a theory of self-defense in cyberspace and re-ask the question with a slightly different spin. At that moment most agree that based on the manner in which the scenario and theory were presented it does not sound illegal; a ray of hope suddenly appears in their eyes. 

Is this a play on words? Am I mincing words and definitions with questions like “what is the definition of is?”  No, it is a real and workable theory; a new way of looking at the problem.

Let’s face it, if the government was going to and could help you they would. But like most companies they too are overwhelmed defending against a daily barrage of cyber-attacks. So, what‘s the answer? Continue to absorb escalating costs of operation caused by unrelenting hackers? Accept the loss of proprietary data, intellectual property or trade secrets and consequently millions of dollars and reputation?  At what point should the good guys declare enough is enough? 

We are currently in a “cyber-cold war” and the targets are anyone online with something to steal or disrupt. Three options exist:

  1. Continue with business as usual
  2. Do as some have and take matters into your own hands but try to stay below the radar and not get caught
  3. Or, plan an active defense similar to a military operation to defend your company and justify each and every decision made

At RSA Europe in London we will present a legal and workable framework for commercial companies to practice active defense.

History, Security

This Day in History: 1931 Mukden Incident

Leave a comment

An explosion on this day in 1931 impacted a section of railway track owned by the Japanese in north-eastern China near Mukden. The blast was weak and displaced less than 2m of track.

It was quite different from an explosion three years earlier, set by Japanese intelligence, which had assassinated the warlord of Manchuria. The 1928 explosion, also on Japanese-owned tracks, was intended to instigate a Japanese invasion. Instead it ended up having the reverse effect and received international condemnation. The large explosion and death led to Manchuria moving further from Japanese control instead of under it.

So, in 1931 after a far smaller explosion and with trains still passing over the damaged section of track, militant factions of government in Japan claimed the need for an emergency response. Invasion was launched under the pretense to secure Japan’s railway, their nationals and defend their colony in Korea against Russia. Economic interests were also obvious; a large market and source of resources was highly desireable to the Japanese after Western markets shutdown in 1929 with the start of the Great Depression.

The Chinese, weakened by civil-war, failed to bring forward any coordinated resistance. The Japanese army swiftly took hold of the entire region and declared a new autonomous state of Manchukuo. Western countries, unlike the 1928 incident, no longer were in a position to intervene or respond to Chinese requests for assistance.

Four days after the 1931 Mukden incident the US Minister in China reported by telegram to the US Secretary of State that the Japanese act was planned aggression.

According to all information available to me here, I am driven to the conclusion that the forceful occupation of all strategic points in South Manchuria, including the taking over and operation of public utilities, banks, and in Mukden at least the functions of civil government, is an aggressive act by Japan apparently long planned and when decided upon most carefully and systematically put into effect. I find no evidence that these events were the result of accident nor were they the acts of minor and irresponsible officials.

The US Secretary of State, based on advice from his ambassador in Japan, opposed the use of a formal League Commission of Inquiry due to fear of further emboldening hawks in the Japanese government. Instead he issued a diplomatic non-recognition statement, known as the Stimson Doctrine. This, similar to the League of Nations efforts that the Japanese simply walked away from, had little to no influence on the conflict.

While it was clear Japanese militant leaders had used false-pretense to breach the post-WWI agreements on peace, nonaggression and disarmament they also faced little tangible resistance and they flatly refused to stand down.

Occupation of Manchuria by Japan soon expanded in threat; the stage was set for escalation into the Second Sino-Japanese War in 1937 and destabilization/expansion into the region, which eventually led to the bombing of Pearl Harbor in 1941.

It’s all food for thought given the debate over premeditation of the recent incident in Libya and the rising territorial resource conflict between China and Japan.