<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0">
   <channel>
      <title>net.wars</title>
      <link>http://WWW.pelicancrossing.net/netwars/</link>
      <description></description>
      <language>en</language>
      <copyright>Copyright 2010</copyright>
      <lastBuildDate>Fri, 05 Mar 2010 12:50:57 +0000</lastBuildDate>
      <generator>http://www.sixapart.com/movabletype/?v=4.32-en</generator>
      <docs>http://blogs.law.harvard.edu/tech/rss</docs> 

      
      <item>
         <title>The surveillance chronicles</title>
         <description><![CDATA[<p>There is a touching moment at the end of the new documentary <a href="http://www.erasingdavid.com">Erasing David</a>, which had an early screening last night for some privacy specialists. In it, Katie, the wife of the film's protagonist, filmmaker <a href="http://www.greenlions.com">David Bond</a>, muses on the contrast between the England she grew up in and the "ugly" one being built around her. Of course, many people become nostalgic for a kinder past when they reach a certain age, but Katie Bond is probably barely 30, and what she is talking about is the engorging <a href="http://www.jrrt.org.uk/uploads/Database%20State.pdf">Database State (PDF)</a>. </p>

<p>Anyone watching this week's House of Lords debate on the <a href="http://services.parliament.uk/bills/2009-10/digitaleconomy.html">Digital Economy Bill</a> probably knows how she feels. (The <a href="http://www.openrightsgroup.org/blog/2010/confirmed-web-blocking-in-digital-economy-bill">Open Rights Group has advice on appropriate responses</a>.) </p>

<p>At the beginning, however, Katie's biggest concern is that her husband is proposing to "disappear" for a month leaving her alone with their toddler daughter and her late-stage pregnancy. </p>

<p>"You haven't asked," she points out firmly. "You're leaving me with all the child care." Plus, what if the baby comes? They agree in that case he'd better un-disappear pretty quickly. </p>

<p>And so David heads out on the road with a Blackberry, a rucksack, and an increasingly paranoid state of mind. Is he safe being video-recorded interviewing privacy advocates in Brussels? Did "they" plant a bug in his gear? Is someone about to pounce while he's sleeping under a desolate Welsh tree? </p>

<p>There are real trackers: <a href="http://www.cerberusip.com/">Cerberus</a> detectives Duncan Mee and Cameron Gowlett, who took up the challenge to find him given only his (rather common) name. They try an array of approaches, both high- and low-tech. Having found the Brussels video online, they head to St Pancras to check out arriving Eurostar trains. They set up a Web site to show where they think he is and send the URL to his Blackberry to see if they can trace him when he clicks on the link. </p>

<p>In the post-screening discussion, Mee added some new detail. When they found out, for example, that David was deleting his Facebook page (which he announced on the site and of which they'd already made a copy), they set up a dummy "secret replacement" and attempted to friend his entire list of friends. About a third of Bond's friends accepted the invitation. The detectives took up several party invitations thinking he might show.</p>

<p>"The Stasi would have had to have a roomful of informants," said Mee. Instead, Facebook let them penetrate Bond's social circle quickly on a tiny budget. Even so, and despite all that information out on the Internet, much of the detectives' work was far more social engineering than database manipulation, although there was plenty of that, too. David himself finds the material they compile frighteningly comprehensive. </p>

<p>In between pieces of the chase, the filmmakers include interviews with an impressive array of surveillance victims, politicians (David Blunkett, David Davis), and privacy advocates including <a href="http://www.no2id.net">No2ID's Phil Booth</a> and <a href="http://www.archrights.org.uk">Action on Rights for Children's Terri Dowty</a>. (Surprisingly, no one from <a href="http://www.privacyinternational.org">Privacy International</a>, I gather because of scheduling issues.)</p>

<p>One section deals with the corruption of databases, the kind of thing that can make innocent people unemployable or, in the case of <a href="http://www.guardian.co.uk/technology/2007/apr/19/hitechcrime.money">Operation Ore</a>, destroy lives such as that of <a href="http://ore-exposed.obu-investigators.com/Innocent%20Man%20In%20Ore%20Nightmare.html">Simon Bunce</a>. As Bunce explains in the movie, 98.2 percent of the Operation Ore credit card transactions were fraudulent. </p>

<p>Perhaps the most you-have-got-to-be-kidding moment is when former minister David Blunkett says that collecting all this information is "explosive" and that "Government needs to be much more careful" and not just assume that the public will assent. Where was all this people-must-agree stuff when he was <a href="http://www.newswireless.net/index.cfm/article/453">relentlessly championing the ID card</a> ? Did he - my god! - learn something from having his <a href="http://news.bbc.co.uk/1/hi/uk_politics/4057715.stm">private life exposed</a> in the press?</p>

<p>As part of his preparations, Bond investigates: what exactly do all these organizations know about him? He sends out more than 80 subject access requests to government agencies, private companies, and so on. Amazon.com sends him a pile of paper the size of a phone book. <a href="http://www.tfl.gov.uk/roadusers/congestioncharging/">Transport for London</a> tell hims that even though his car is exempt his movements in and out of the charging zone are still recorded and kept. This is a very English moment: after bashing his head on his desk in frustration over the length of his wait on hold, when a woman eventually starts to say, "Sorry for keeping you..." he replies, "No problem".</p>

<p>Some of these companies know things about him he doesn't or has forgotten: the time he "seemed angry" on the phone to a customer service representative. "What was I angry about on November 21, 2006?" he wonders. </p>

<p>But probably the most interesting journey, after all, is Katie's. She starts with some exasperation: her husband won't sign this required form giving the very good nursery they've found the right to do anything it wants with their daughter's data. "She has no data," she pleads. </p>

<p>But she will have. And in the Britain she's growing up in, that could be dangerous. Because privacy isn't isolation and it isn't not being found. Privacy means being able to eat sand without fear.</p>

<p><i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of all the earlier columns in this series</a>. </i></p>

<p><br />
</p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2010/03/the_surveillance_chronicles.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2010/03/the_surveillance_chronicles.html</guid>
         <category>Events</category>
         <pubDate>Fri, 05 Mar 2010 12:50:57 +0000</pubDate>
      </item>
      
      <item>
         <title>The community delusion</title>
         <description><![CDATA[<p>The court clerk - if that's the right term - seemed slightly baffled by the number of people who showed up for <a href="http://jackofkent.blogspot.com/2010/02/good-day-in-court.html">Tuesday's hearing</a> in <i>Simon Singh v. British Chiropractic Association</i>. There was much rearrangement, as the principals asked permission to move forward a row to make an extra row of public seating and then someone magically produced eight or ten folding chairs to line up along the side. Standing was not allowed. (I'm not sure why, but I guess something to do with keeping order and control.)</p>

<p>It was impossible to listen to the arguments without feeling a part of history. Someday - ten, 50, 150 years from now - a different group of litigants will be sitting in that same court room or one very like it in the same building and will cite "our" case, just as counsel cited precedents such as <a href="http://law.jrank.org/pages/12749/Reynolds-v-Pegler.html">Reynolds</a> and <a href="http://www.pressgazette.co.uk/story.asp?storyCode=27564&sectioncode=1">Branson v Bower</a>. If <a href="http://www.amazon.co.uk/exec/obidos/search-handle-url/ref=ntt_athr_dp_sr_1?_encoding=UTF8&search-type=ss&index=books-uk&field-author=Simon%20Singh">Singh's books</a> don't survive, his legal case will, as may the effects of the <a href="http://libelreform.org/">campaign to reform libel law (sign the petition!)</a> it has inspired and the <a href="http://www.scribd.com/doc/27373790/Culture-Media-and-Sport-Select-Committee-report-into-press-standards-privacy-and-libel">Culture, Media, and Sport report (Scribd)</a> that was published on Wednesday. And the sheer stature of the three judges listening to the appeal - Lord Chief Justice Lord Judge (to Americans: I am not making this up!), Master of the Rolls Lord Neuberger, and Lord Justice Sedley - ensures it will be taken seriously.</p>

<p>There are plenty of <a href="http://www.guardian.co.uk/science/2010/feb/25/simon-singh-silencing-scientists-libel-law">write-ups</a> of what happened in court and better-informed <a href="http://crispian-jago.blogspot.com/2010/02/singh-bca-appeal-23rd-feb-2010.html">analyses</a> than I can muster to explain what it means. The gist, however: it's too soon to tell which pieces of law will be the crucial bits on which the judges make their decision. They certainly seemed to me to be sympathetic to the arguments Singh's counsel, Adrienne Page QC, made and much less so to the arguments the BCA's counsel, Heather Rogers QC. But the case will not be decided on the basis of sympathy; it will be decided on the basis of legal analysis. "You can't read judges," David Allen Green (aka jackofkent) said to me over lunch. So we wait.<br />
But the interesting thing about the case is that this may be the first important British legal case to be socially networked: here is a libel case featuring no pop stars or movie idols, and yet they had to turn some 20 or 30 people away from the courtroom. Do judges read Twitter?</p>

<p>Beginning with <a href="http://www.smartmobs.com">Howard Rheingold's 1993 book <a href="http://www.amazon.co.uk/Virtual-Community-Homesteading-Electronic-Frontier/dp/0262681218/ref=sr_1_1?ie=UTF8&s=books&qid=1267191250&sr=8-1">The Virtual Community</a>, it was clear that the Net's defining characteristic as a medium is its enablement of many-to-many communication. Television, publishing, and radio are all one-to-many (if you can consider a broadcaster/publisher a single gatekeeper voice). Telephones and letters are one-to-one, by and large. By 1997, business minds, most notably John Hagel III and Arthur Armstrong in <a href="http://www.amazon.co.uk/Net-Gain-Expanding-Markets-Communities/dp/0875847595/ref=sr_1_1?ie=UTF8&s=books&qid=1267191438&sr=1-1">net.gain</a>, had begun saying that the networked future of businesses would require them to build communities around themselves. I doubt that Singh thinks of his libel case in that light, but today's social networks (which are a reworking of earlier systems such as Usenet and online conferencing systems) are enabling him to do just that. The leverage he's gained from that support is what is really behind both the challenge to English libel law and the increasing demand for chiropractors generally to provide better evidence or shut up. </p>

<p>Given the value everyone else, from businesses to cause organizations to individual writers and artists, places on building an energetic, dedicated, and active fan base, it's surprising to see <a href="http://www.richarddawkins.net">Richard Dawkins</a>, whose supporters have apparently spent <a href="http://realityismyreligion.wordpress.com/2010/02/23/locked-entry-will-open-soon/">thousands of unpaid hours curating his forums for him</a>, toss away what by all accounts was an extraordinarily successful <a href="http://www.guardian.co.uk/commentisfree/andrewbrown/2010/feb/25/atheism-dawkins-meltdown-comments">community supporting his ideas and his work</a>. The more so because apparently Dawkins has managed to <a href="http://realityismyreligion.wordpress.com/2010/02/25/update-on-dawkins-forum-closure/">attract that community</a> without ever noticing what it meant to the participants. He also apparently has failed to notice that some people on the Net, some of the time, are just the teeniest bit rude and abusive to each other. He must lead a very sheltered life, and, of course, never have moderated his own forums. </p>

<p>What anyone who builds, attracts, or aspires to such a community has to understand from the outset is that if you are successful your <a href="http://realityismyreligion.wordpress.com/2010/02/25/update-on-dawkins-forum-closure/">users will believe they own it</a>. In some cases, they will be right. It sounds - without having spend a lot of time poring over Dawkins' forums myself - as though in this case in fact the users, or at least the moderators, had every right to feel they owned the place because they did all the (unpaid) work. This situation is as old as the Net - in the days of per-minute connection charges CompuServe's most successful (and economically rewarding to their owners) forums were built on the backs of volunteers who traded their time for free access. And it's always tough when users rediscover the fact that in each individual virtual community, unlike real-world ones, there is always a god who can pull the plug without notice.</p>

<p>Fortunately for the causes of libel law reform and requiring better evidence, Singh's support base is not a single community; instead, it's a group of communities who share the same goals. And, thankfully, those goals are bigger than all of us.</p>

<p><i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of all the earlier columns in this series</a>.  I would love to hear (net.wars@skeptic.demon.co.uk) from someone who could help me figure out why this blog vapes all non-spam comments without posting them.</i><br />
</p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2010/02/the_community_delusion.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2010/02/the_community_delusion.html</guid>
         <category>Events</category>
         <pubDate>Fri, 26 Feb 2010 16:09:43 +0000</pubDate>
      </item>
      
      <item>
         <title>Death doth make hackers of us all</title>
         <description><![CDATA[<p>"I didn't like to ask him what his passwords were just as he was going in for surgery," said my abruptly widowed friend.</p>

<p>Now, of course, she wishes she had.</p>

<p>Death exposes one of the most significant mismatches between security experts' ideas of how things should be done and the reality for home users. Every piece of advice they give is exactly the opposite of what you'd tell someone trying to create a disaster recovery plan to cover themselves in the event of the death of the family computer expert, finance manager, and media archivist. If this were a business, we'd be talking about losing the CTO, CIO, CSO, and COO in the same plane crash.</p>

<p>Fortunately, while he was alive, and unfortunately, now, my friend was a systems programmer of many decades of expertise. He was acutely aware of the importance of good security. And so he gave his Windows desktop, financial files, and email software fine passwords. Too fine: the desktop one is completely resistant to educated guesses based on our detailed knowledge of his entire life and partial knowledge of some of his other PINs and passwords. </p>

<p>All is not locked away. We think we have the password to the financial files, so getting access to those is a mere matter of putting the hard drive in another machine, finding the files, copying them, installing the financial software on a different machine, and loading them up. But it would be nice to have direct as-him access to his archive of back (and new) email, the iTunes library he painstakingly built and digitized, his Web site accounts, and so on. Because he did so much himself, and because his illness was an 11-day chase to the finish, our knowledge of how he did things is incomplete. Everyone thought there was time.</p>

<p>With backups secured and the financial files copied, we set to the task of trying to gain desktop access.</p>

<p>Attempt 1: <a href="http://ophcrack.sourceforge.net/download.php?type=livecd">ophcrack</a>. This is a fine piece of software that's easy to use as long as you don't look at any of the detail. Put it on a CD, boot from said CD, run it on automatic, and you're fine. The manual instructions I'm sure are fine, too, for anyone who has studied Windows SAM files.</p>

<p>Ophcrack took a happy 4 minutes and 39 seconds to disclose that the computer has three accounts: administrator, my friend's user account, and guest. Administrator and guest have empty passwords; <user>'s is "not found". But that's OK, said the security expert I consulted, because you can log in as administrator using the empty password and change the user account. Here is a helpful command. Sure. No problem.</p>

<p>Except, of course, that this is Vista, and Vista hides the administrator account to make sure that no brainless idiot accidentally got into the administrator account and ran around the system creating havoc and corrupted files. By "brainless idiot" I mean: the user-owner of the computer. Naturally, my friend had left it hidden. </p>

<p>In order to unhide the administrator account so you can run the commands to reset <user>'s password, you have to run the command prompt in administrator mode. Which we can't do because, of course, there are only two administrator accounts and one is hidden and the other is the one we want the password for. Next.</p>

<p>Attempt 2: <a href="http://www.password-changer.com">Password Changer</a>. Now, this is a really nifty thing: you download the software, use it to create a bootable CD, and boot the computer. Which would be fine, except that the computer doesn't like it because apparently command.com is missing...</p>

<p>We will draw a veil over the rest. But my point is that no one would advise a business to operate in this way - and now that computers are in (almost) every home, homes are businesses, too. No one likes to think they're going to die, still less without notice. But if you run your family on your computer you need a disaster recovery plan - fire, flood, earthquake, theft, computer failure, stroke, and yes, unexpected death, </p>

<p>- Have each family member write down their passwords. Privately, if you want, in sealed envelopes to be stored in a safe deposit box at the bank. Include: Windows desktop password, administrator password, automated bill-paying and financial record passwords, and the list of key Web sites you use and their passwords. Also the passwords you may have used to secure phone records and other accounts. Credit and debit card PINs. Etc. </p>

<p>- Document your directory structure so people know where the important data - family photos, financial records, Web accounts, email address books - is stored. Yes, they can figure it out, but you can make it a lot easier for them. </p>

<p>- Set up your printer so it works from other computers on the home network even if yours is turned off. (We can't print anything, either.)</p>

<p>- Provide an emergency access route. Unhide the administrator account.</p>

<p>- Consider your threat model. </p>

<p>Meanwhile, I think my friend knew all this. I think this is his way of taking revenge on me for never letting him touch *my* computer.</p>

<p><br />
<i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of all the earlier columns in this series</a>.</i><br />
</p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2010/02/death_doth_make_hackers_of_us.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2010/02/death_doth_make_hackers_of_us.html</guid>
         <category>Security</category>
         <pubDate>Fri, 19 Feb 2010 15:55:23 +0000</pubDate>
      </item>
      
      <item>
         <title>Light year</title>
         <description><![CDATA[<p>This year is going to be the first British general election in which blogging is going to be a factor, someone said on Monday night at the event organized by the <a href="http://jackofkent.blogspot.com/2010/02/origin-of-westminster-skeptics.html">Westminster Skeptics</a> on the subject of <a href="http://jackofkent.blogspot.com/2010/02/group-hug-of-political-bloggers.html">political blogging</a>: does it make any difference? I had to stop and think: really? Things like the <a href="http://www.dailykos.com">Daily Kos</a> have been part of the American political scene for so long now - Kos was founded in 2002 - that they've been through two national elections already.</p>

<p>But there it was: "2005 was my big break," said Paul Staines, who blogs as <a href="http://www.order-order.com">Guido Fawkes</a>. "I was the only one covering it. 2010 is going to be much tougher." To stand out, he went on to say, you're going to need a good story. That's what they used to tell journalists.</p>

<p>Due to the wonders of the Net, you can <a href="http://www.spalpeen.co.uk/2010/02/08/video-and-audio-westminster-skeptics-asks-how-influential-are-political-blogs/">experience the debate for yourself</a>. The other participants were Sunny Hundal (<a href="http://liberalconspiracy.org/">Liberal Conspiracy</a>), Mick Fealty (<a href="http://www.sluggerotoole.com">Slugger O'Toole</a>), Jonathan Isaby (<a href="http://www.conservativehome.com">Conservative Home</a>), and the <i>Observer</i> journalist <a href="http://www.nickcohen.net">Nick Cohen</a>, there to act as the token nay-sayer. (I won't use skeptic, because although the popular press like to see a "skeptic" as someone who's just there to throw brickbats, I use the term rather differently: <a href="http://www.skeptic.org.uk">skepticism</a> is inquiry and skeptics ask questions and examine evidence.) </p>

<p>All four of political bloggers have a precise idea of what they're trying to do and who they're writing for. Jonathan Isaby, who claims he's the first British journalist to leave a full-time newspaper job (at the <a href="http://www.telegraph.co.uk">Telegraph</a>) for new media, said he's read almost universally among Conservative candidates. Paul Staines aims Guido Fawkes at "the Westminster bubble". Mick Fealty uses Slugger O'Toole to address a "differentiated audience" that is too small for TV, radio, and newspapers. Finally, Sunny Hundal uses Liberal Conspiracy to try to "get the left wing to become a more coherent force". </p>

<p>Despite their various successes, Cohen's basic platform defended newspapers. Blogging, he said, is not replacing the essential core of journalism: investigation and reporting. He's right up to a point. But some do exactly that. Westminster Skeptics convenor <a href="http://jackofkent.blogspot.com">David Allen Green</a>, then standing approximately eight inches away, is one example. But it's probably true that for every blogger with sufficient curiosity and commitment to pick up a phone or bang on someone's door there are a couple of hundred more who write blog postings by draping a couple of hundred words of opinion around a link to a story that appeared in the mainstream media. </p>

<p>Of course, as Cohen didn't say, plenty of journalists\, through lack of funding, lack of time, or lack of training, find themselves writing news stories by draping a couple of hundred words of rewritten press release around the PR-provided quotes - and soul-destroying work it is, too. My answer to Cohen, therefore, is to say that commercial publishers have contributed to their own problems, and that one reason blogs have become such an entrenched medium is that they cover things that no newspaper will allow you to write about in any detail. And it's hard to argue with Cohen's claim that almost any blogger finding a really big story will do the sensible thing and sell it to a newspaper.</p>

<p>If you can. Arguably the biggest political story of 2009 was MPs' expenses. That material was released because of the relentless efforts of <a href="http://www.yrtk.org">Heather Brooke</a>, who took up the 2005 arrival into force of the UK's Freedom of Information Act as a golden opportunity. It took her nearly five years to force the disclosure of MPs' expenses - and when she finally succeeded the <i>Telegraph</i> wrote its own stories after poring over the details that were disclosed. </p>

<p>The fact is that political blogging has been with us for far longer than one five-year general election cycle. It's just that most of it does not take the same form as the "inside politics" blogs of the US or the traditional Parliamentary sketches in the British newspapers. The push for Libel reform began with <a href="http://jackofkent.blogspot.com">Jack of Kent</a> (David Allen Green); the push to get the public more engaged with their MPs began with MySociety's <a href="http://www.faxyourmp.com">Fax Your MP</a>. It was clear as long ago as <a href="http://www.theregister.co.uk/2006/06/29/mp_guardian_tech_comp/">2006</a> that MPs were expert users of <a href="http://www.theyworkforyou.com">They Work For You</a>: it's how they keep tabs on each other. MySociety's sites are not blogs - but they are the source material without which political blogging would be much harder work.</p>

<p>I don't find it encouraging to hear Isaby predict that in the upcoming election (expected in May) blogging "will keep candidates on their toes" because "gaffes will be more quickly reported". Isn't this the problem with US elections? That everyone gets hung up on calumnies such as <a href="http://web.archive.org/web/20001027190912/http://www.wired.com/news/politics/0,1283,39301,00.html"> that Al Gore claimed to have invented the Internet</a>. Serious issues fall by the wayside, and good candidates can be severely damaged by biased reporting that happens to feed an eminently quotable sarcastic joke. Still: anything for a little light into the smoke-filled back rooms where British politics is still made. Even with smoking now banned, it's murky back there.</p>

<p><i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of all the earlier columns in this series</a>.  </i><br />
</p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2010/02/light_year.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2010/02/light_year.html</guid>
         <category>Events</category>
         <pubDate>Fri, 12 Feb 2010 14:36:26 +0000</pubDate>
      </item>
      
      <item>
         <title>Getting run down on the infobahn</title>
         <description><![CDATA[<p>It's not going out on much of a limb to predict that 2010 is, finally, the year of the ebook. A lot of electrons are going to be spilled trying to predict the winners on this frontier; the most likely, I think, are Apple (iPhone, iPad), Amazon (Kindle), Google (Books), and Ray Kurzweil (Blio). Note something about all those guys? Yes: none of them are publishers. Just like the music industry, publishers have left it to technology companies to invent their new medium for them.</p>

<p>Note something else about what those guys are not? Authors. Almost everything that's created in this world - books, newspapers, magazines, movies, games, advertising, music, even some industrially designed products - eventually goes back to one person sitting in a room with a blank sheet of paper trying to think up a compelling story. </p>

<p>Authors - and writers generally - used to have a hard but easy job: deliver a steady stream of publishable work, and remuneration will probably happen. Publishers sold books; authors just wrote them. One of my friends, a science fiction writer contractually bound to HarperCollins, used to refer to Rupert Murdoch as "the little man who publishes my books for me". That happy division of labor did not, of course, provide all, or even most writers with a full-time living. But the most important thing authors want is for their work to be noticed; publishers could make that happen.</p>

<p>Things have been changing for some time. It's fifteen  years since authors of my acquaintance began talking about the need to hire your own publicist because unless you had a very large (six figures and up) advance most mainstream publishers would not consider your book worth spending money and effort to market it much beyond sending out a press release. Even copy-editing is falling by the wayside, as a manuscript submitted electronically can now feed straight into a typesetting system without the human intervention that gave pause for rethought. </p>

<p>"Everyone's been seeing their royalty statements shrink," a friend observed gloomily last week. He made, 20 years ago, what then seemed an intelligent career decision: to focus on writing reference books because they had a consistent market among people who really needed them, and they would have a continuing market in regular updates. And that worked great until along came Wikipedia online dictionaries and translation engines and government agency Web sites and blogs and picture galleries, and now, he says, "People don't buy reference books any more." I am no exception: all the reference books on the shelves behind my desk are at least 15 years old. About 10 percent are books I'd buy today if I didn't already have them.</p>

<p>So this is also the year in which the more far-seeing authors get to figure out what their future business models are going to be. An author with a business plan? Who ever heard of such a thing? The nearest thing to that in my acquaintance is the science fiction writer Charles Stross; he is smarter about the economic and legal workings of publisher than anyone I've ever met or heard speak at a conference. And even he <a href="<a href="http://www.antipope.org/charlie/blog-static/2010/01/the-monetization-paradox-or-wh.html">is asking for suggestions</a>.</p>

<p>First of all, there's the Google Books settlement, which is so complicated that I imagine hardly any of the authors whose works the settlement is a settlement of can stand to read the whole thing. The legal scholar and MacArthur award winner Pamela Samuelson has written a <a href="http://radar.oreilly.com/2009/04/legally-speaking-the-dead-soul.html">fine explanation of the problems</a>; authors had until January 28 to <a href="http://nwubook.org/">opt out</a> or <a href="http://thepublicindex.org/documents/responses">object</a>. This isn't over yet: the US Justice Department still <a href="http://www.businessweek.com/news/2010-02-04/u-s-says-issues-remain-in-google-books-settlement-update1-.html">doesn't like the terms</a>.</p>

<p>We can also expect more demarcation disputes like this week's spat between Amazon and Macmillan, discussed intelligently by Stross <a href="http://www.antipope.org/charlie/blog-static/2010/01/amazon-macmillan-an-outsiders.html">here</a>, <a href="http://www.antipope.org/charlie/blog-static/2010/01/amazonmacmillan-other-perspect.html">here</a>, and <a href="http://www.antipope.org/charlie/blog-static/2010/02/amazon-surrenders.html">here</a>, with an analysis of the scary economics of the Kindle <a href="http://www.antipope.org/charlie/blog-static/2009/10/news_from_the_ebook_dimension.html">here</a>. The short version: Macmillan wants Amazon to pay more for the Kindle versions of its books, and Amazon threw Macmillan's books out of its .com pram. Caught in the middle are a bunch of very pissed-off <a href="http://www.guardian.co.uk/books/2010/feb/04/authors-fight-macmillan-battle-amazon">authors</a>, who are exercising their rights in the only way they can: by removing links to Amazon and substituting links to the competition: <a href="http://www.bn.com">Barnes and Noble</a> and independent booksellers including the wonderful Portland, Oregon stalwart, <a href="http://www.powells.com">Powells</a>. </p>

<p>To be fair, removing the "buy new" button from all of the Macmillan listings on Amazon.com (Amazon.co.uk seems to be unaffected) doesn't mean you can't buy the books. In general, you simply click on a different link and buy the book from a marketplace seller rather than Amazon itself. Amazon doesn't care: according to its <a href="http://yahoo.brand.edgar-online.com/displayfilinginfo.aspx?FilingID=7010284-108409-149089&type=sect&dcn=0001193125-10-016098">SEC filings</a>, the company makes roughly the same profit whoever sells the book via its site. </p>

<p>It's times like these when you want to remember the Nobel Laureate author Doris Lessing's advice to all writers: "And it does no harm to repeat, as often as you can, 'Without me, the literary industry would not exist: the publishers, the agents, the sub-agents, the sub-sub agents, the accountants, the libel lawyers, the departments of literature, the professors, the theses, the books of criticism, the reviewers, the book pages - all this vast and proliferating edifice is because of this small, patronized, put-down, and underpaid person.'" </p>

<p><i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of the earlier columns in this series</a>.</i><br />
</p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2010/02/getting_run_down_on_the_infoba.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2010/02/getting_run_down_on_the_infoba.html</guid>
         <category>Media</category>
         <pubDate>Fri, 05 Feb 2010 14:48:19 +0000</pubDate>
      </item>
      
      <item>
         <title>Game night</title>
         <description><![CDATA[<p>Why can't computer games get any serious love? The maverick Labour MP <a href="http://www.tom-watson.co.uk">Tom Watson</a> convened a <a href="http://www.tom-watson.co.uk/2010/01/taking-video-games-seriously/">meeting</a> this week to ask just that. (Watson is also pushing for the creation of an advocacy group, <a href="http://www.facebook.com/group.php?gid=189974734041&ref=mf">Gamers' Voice (Facebook)</a>.) From the dates, the meeting is not in response to <a href="http://www.tom-watson.co.uk/2010/01/video-gamesricketsnewspapers-and-headline-writers/">claims that playing computer games causes rickets</a>. </p>

<p>Pause to go, "Huh?" </p>

<p>We all know what causes rickets in the UK. <b>Winter</b> at these crazy high latitudes causes rickets in the UK. Given the amount of atmosphere and cloud it has to get through in the darker months, sunlight can't muster enough oomph to make Vitamin D on the skins of the pasty, blue-white people they mostly have here. The real point of the <a href="http://www.bmj.com/cgi/content/extract/340/jan11_1/b5664">clinical review paper</a> that kicked off this round of media nonsense, Watson rants, is that half of all UK adults are deficient in Vitamin D in the winter and spring. Well, duh. Wearing sunscreen has made it worse. So do clothes. And this: to my vast astonishment on arrival here they don't put Vitamin D in the milk. But, hey, let's blame computer games!</p>

<p>And yet: games are taking over. In December Chart-Track market research<a href="http://www.rpgrank.com/role-playing-games-4277-news.html">found that the UK games industry is now larger than its film industry</a>. Yesterday's game-playing kids are today's game-playing parents. One day we'll all be <a href="http://www.firesigntheatre.com/albums/album.php?album=bozos">gamers on this bus</a>. Criminals pay more for stolen World of Warcraft accounts than for credit card accounts (according to Richard Bartle), and the real-money <a href="http://virtuallyblind.com/files/Deenihan_LeavetheOrcsAloneFinal.pdf">market for virtual game world props is worth billions (PDF)</a>. But the industry gets <a href="http://www.guardian.co.uk/technology/2009/dec/02/britain-games-industry-tax-breaks">no government support</a>. Hence Watson's meeting.</p>

<p>At this point, I must admit that net.wars, too, has been deficient: I hardly ever cover games. As a freelance, I can't afford to be hooked on them, so I don't play them, so I don't know enough to write about them. In the early-to-mid 1990s I did sink hours into Hitchhiker's Guide to the Galaxy, Minesweeper, Commander Keen, Lemmings, Wolfenstein 3D, Doom, Doom 2, and some of Duke Nukem. At some point, I decided it was a bad road. When I waste time unproductively I need  to feel that I'm <b>about</b> to do something useful. I switched the mouse to the left hand, mostly for ergonomic reasons, and my slightly lower competence with it was sufficient to deter further exploration. The other factor: Quake made it obvious that I'd reached my theoretical limit.</p>

<p>I know games are different now. I've watched a 20-something friend play World of Warcraft and Grand Theft Auto; I've even traded deaths with him in one of those multiplayer games where your real-life best friends are your mortal enemies. Watching him play The Sims as a recalcitrant teenager (is there any other kind?) was the most fun. It seemed like Cosmic Justice to see him shriek in frustration at the computer because the adults in his co-op household were *refusing to wash the dishes*. Ha!</p>

<p>For people who have jobs, games are a (sometimes shameful) hobby; for people who are self-employed they are a dangerous menace. Games are amateur sports without the fresh air. And they are today's demon medium, replacing TV, comic books (my parents believed these rotted the brain), and printed multi-volume novels. All of that contributes to why games get relatively little coverage outside of specialist titles and writers such as <a href="http://www.toastkid.com">Aleks Krotoski</a> and are studied by rare academics like <a href="http://www-rcf.usc.edu/~douglast/bio1.shtml">Douglas Thomas</a> and <a href="http://www.mud.co.uk/richard">Richard Bartle</a>. </p>

<p>Except: it's arguable that the structure of games and the kind of thinking they require - logical, problem-solving, exploratory, experimental - does in fact inspire a kind of mental fitness that is a useful background skill for our computer-dominated world. There are, as Tom Chatfield, one of the evening's three panelists and an editor at <a href="http://www.prospectmagazine.co.uk/search/magazine?s=%22tom-chatfield%22&search_fields=author_only">Prospect</a>, says in his new book <a href="http://www.amazon.co.uk/Fun-Inc-Centurys-Serious-Business/dp/0753519852/ref=sr_1_1?ie=UTF8&s=books&qid=1264704703&sr=8-1">Fun, Inc</a>, many valuable things people can and do learn from games. (I once watched an inveterate game-playing teen extract himself from the maze at Hampton Court in 15 seconds flat.)</p>

<p>And in fact, that's the thought with which the seminal game cum virtual world was started: in writing <a href="http://www.mud.co.uk">MUD</a>, Bartle wanted to <a href="http://www.theinquirer.net/inquirer/news/1034705/man-who-wanted-to-change-the-world-built-virtual-ones-instead">give people the means to explore their identities by creating different ones</a>. </p>

<p>It's also fun. And an escape from drab reality. And a challenge. And active, rather than passive, entertainment. The critic <a href="http://www.journalisted.com/sam-leith">Sam Leith</a> (who has <a href="http://www.guardian.co.uk/technology/2009/nov/29/world-of-warcraft-sam-leith">compared World of Warcraft to Chartres Cathedral</a>) pointed out that the violent shoot-'em-up games that get the media attention are a small, stereotyped sector of the market that deliberately insert shocking violence recursively to get media attention and increase sales. Limiting the conversation to one stereotypical theme is the problem, not games themselves. </p>

<p>Philip Oliver, founder and CEO of the UK's large independent games developer, Blitz Games, listed some cases in point: in their first 12 weeks of release his company sold 500,000 copies of its <a href="http://www.biggestloserthegame.com">The Biggest Loser</a> TV and 3.8 million copies of its Burger King advertising game. And what about that wildly successful Wii Fit? </p>

<p>If you say, "That's different", there is the problem. </p>

<p>Still, if game players are all going to be stereotyped as violent players shooting things...I'm not sure who pointed out that the Houses of Parliament are a fabulous gothic castle in which to set a shoot-'em-up, but it's a great idea. Now, that would really be government support!</p>

<p><i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of all the earlier columns in this series</a>.  Readers are welcome to post here, follow on <a href="http://twitter.com/wendyg">, or send email to netwars@skeptic.demon.co.uk (but please turn off HTML).</i><br />
</p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2010/01/game_night.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2010/01/game_night.html</guid>
         <category></category>
         <pubDate>Fri, 29 Jan 2010 13:34:47 +0000</pubDate>
      </item>
      
      <item>
         <title>Music night</title>
         <description><![CDATA[<p>Most corporate annual reports seek to paint a glowing picture of the business's doings for the previous year. By law they have to disclose anything really unfortunate - financial losses, management malfeasance, a change in the regulatory landscape. The <a href="http://www.ifpi.org">International Federation of the Phonographic Industry</a> was caught in a bind writing its <a href="http://www.ifpi.org/content/library/DMR2010.pdf">Digital Music Report 2010 (PDF)</a> (or see the <a rhef="http://www.ifpi.org/content/section_resources/dmr2010.html">press release</a>). Paint too glowing a picture of the music business, and politicians might conclude no <a href="http://paidcontent.co.uk/article/419-digital-economy-bill-rightsholders-will-shoulder-most-three-strikes-cos/">further legislation</a> is needed to bolster the sector. Paint too gloomy a picture, and ministers might conclude theirs is a lost cause, and better to let <a href="http://www.locusmag.com/Features/2008/11/cory-doctorow-why-i-copyfight.html">dying business models die</a>.</p>

<p>So IFPI's annual report veers between complaining about "competing in a rigged market" (by which they mean a market in which file-sharing exists) and stressing the popularity of music and the burgeoning success of legally sanctioned services. Yay, Spotify! Yay, Sky Songs! Yay, iTunes! You would have to be the most curmudgeonly of commentators to point out that none of these are services begun by music companies; they are services begun by others that music companies have been grudgingly persuaded to make deals with. (I say grudgingly; naturally, I was not present at contract negotiations. Perhaps the music companies were hopping up and down like Easter bunnies in their eagerness to have their product included. If they were, I'd argue that the existence of free file-sharing drove them to it. Without file-sharing there would very likely be no paid subscription services now; the music industry would still be selling everyone CDs and insisting that this was the consumer's choice.)</p>

<p><a href="http://www.washingtonpost.com/wp-dyn/content/article/2010/01/21/AR2010012102077.html">The basic numbers</a> showed that song downloads increased by 10 percent - but total revenue including CDs fell by 12 percent in the first half of 2009. The top song download: Lady Gaga's "Poker Face".  </p>

<p>All this is fair enough - an industry's gotta eat! - and it's just possible to read it without becoming unreasonable. And then you hit this gem:</p>

<blockquote><i>Illegal file-sharing has also had a very significant, and sometimes disastrous, impact on investment in artists and local repertoire. With their revenues eroded by piracy, music companies have far less to plough back into local artist development. Much has been made of the idea that growing live music revenues can compensate for the fall-off in recorded music sales, but this is, in reality, a myth. Live performance earnings are generally more to the benefit of veteran, established acts, while it is the younger developing acts, without lucrative careers, who do not have the chance to develop their reputation through recorded music sales.</i></blockquote

<p>So: digital music is ramping up (mostly through the efforts of non-music industry companies and investors). Investment in local acts and new musicians is down. And overall sales are down. And we're blaming file-sharing? How about blaming at least the last year or so of declining revenues on the recession? How about blaming bean counters at record companies who see a higher profit margin in selling yet more copies of back catalogue tried-and-tested, pure-profit standards like Frank Sinatra and Elvis Presley than in taking risks on new music? At some point, won't everyone have all the copies of the Beatles albums they can possibly use? Er, excuse me, "consume". (The report has a disturbing tendency to talk about "consuming" music; I don't think people have the same relationship with music that they do with food. I'd also question IFPI's whine about live music revenues: all young artists start by playing live gigs, that's how they learn; *radio play* gets audiences in; live gigs *and radio play* sell albums, which help sell live gigs in a virtuous circle, but that's a topic for another day.)</p>

<p>It is a truth rarely acknowledged that all new artists - and all old artists producing new work - are competing with the accumulated back catalogue of the past decades and centuries. </p>

<p>IFPI of course also warns that TV, book publishing, and all other media are about to suffer the same fate as music. The not-so-subtle underlying message: this is why we must implement ferocious anti-file-sharing measures in the <a href="http://services.parliament.uk/bills/2009-10/digitaleconomy.html">Digital Economy Bill</a>, amendments to which, I'm sure coincidentally, were discussed in committee this week, with more to come next Tuesday, January 26.</p>

<p>But this isn't true, or not exactly. As a <a href="http://www.pelicancrossing.net/netwars/2009/03/the_camcorder_conundrum.html">Dutch report on file-sharing</a> (original <a href="http://www.vrijschrift.org/serendipity/index.php?/archives/37-Economische-en-culturele-gevolgen-van-file-sharing.html">in Dutch</a>) pointed out last year, file-sharing, which it noted goes hand-in-hand with buying, does not have the same impact on all sectors. People listen to music over and over again; they watch TV shows fewer but still multiple times; if they don't reread books they do at least often refer back to them; they see most movies only once. If you want to say that file-sharing displaces sales, which is debatable, then clearly music is the least under threat. If you want to say that file-sharing displaces traditional radio listening, well, I'm with you there. But IFPI does not make that argument.</p>

<p>Still, some progress has been made. Look what IFPI says here, on page 4 in the executive summary right up front: "Recent innovations in the à-la-carte sector include...the rollout of DRM-free downloads internationally." Wha-hey! That's what we told them people wanted five years ago. Maybe five years from now they'll be writing how file-sharing helps promote artists who, otherwise, would never find an audience because no one would ever hear their work.</p>

<p><br />
<i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of all the earlier columns in this series</a>.  Readers are welcome to post here, follow on <a href="http://twitter.com/wendyg">Twitter</a>, or send email to netwars@skeptic.demon.co.uk.</i><br />
</p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2010/01/music_night.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2010/01/music_night.html</guid>
         <category>Intellectual Property</category>
         <pubDate>Fri, 22 Jan 2010 16:15:52 +0000</pubDate>
      </item>
      
      <item>
         <title>The once and future late-night king</title>
         <description><![CDATA[<p>On the face of it, the unexpected renewal of the late-night TV wars is a pretty trivial matter. As <a href="http://www.tonightshowwithconanobrien.com/">The Tonight Show with Conan O'Brien</a> itself points out, there is a lot of real news that's a lot more important - health care, Haiti, Google versus China, network neutrality, and discussions of the Digital Economy bill (my list, not theirs). O'Brien wrote in an open  <a href="http://gothamist.com/2010/01/12/conan_3.php">letter</a> a couple of days ago that he has been "absurdly lucky". Even so.</p>

<p>But Conan-versus-Leno is personalization; at heart this story is about the future of broadcasting and its money. Given today's time-shifting choices, few things lure viewers to a particular TV channel at a precise time. Two are live sports and breaking news. A third is the run of talk-variety shows that start in most parts of the US at 11:35pm (10:35 Central) and run until around 2am.</p>

<p>The kingpin of all of these is <i>The Tonight Show</i>, broadcast on NBC every night following the 11 o'clock news for nearly 60 years. For 30 of those years it was presented by a single host, <a href="http://www.imdb.com/name/nm0001992/">Johnny Carson</a>, probably the biggest star television has ever had - and quite possibly the biggest television ever will have. They make talent like Carson's very infrequently; they don't make broadcasting like that any more. According to Bill Carter in his book  <i>The Late Shift: Letterman, Leno, and the Network Battle for the Night</i>, many years Carson's apparently effortless comedy and guest interviews generated 15 to 20 percent of the network's profits.</p>

<p>Every one of today's late-night hosts grew up watching Carson, and probably all of them dreamed of one day having his job. Carson's job, on <i>The Tonight Show</i> on NBC, not a similar job on a similar show at the same time on another network.</p>

<p>The roots of today's mess go back to 1991, when Carson announced he would retire in May 1992. At the time, David Letterman was hosting NBC's 12:30 show, while Jay Leno was Carson's regular substitute host. In a move that seemed to surprise everyone, NBC appointed Leno Carson's successor, fatally assuming that Letterman wouldn't mind. He did mind. The net result was months of uncertainty, politics, and legal wrangling, not least because Leno's early months in the job were unpromising. By 1993, Letterman had begun a <a href="http://www.cbs.com/late_night/late_show/">competing show at CBS</a> and every other network had tried putting up an 11:30 talk-variety show, most of them dreadful and quickly canned. Since then, Leno has usually won the ratings - but Letterman the <a href="http://www.imdb.com/name/nm0001468/awards">awards</a>. Arguably the biggest beneficiary was O'Brien, who landed Letterman's old 12:30 job with barely any performing experience. After following Leno for 16 years, late last year, as per an agreement announced in 2005 and intended to avoid a repeat of 1992, O'Brien got <i>The Tonight Show</i>. </p>

<p>Now, NBC is doing to O'Brien almost exactly what it did to Letterman, apparently filled with panic over declining revenues and shrinking ratings and completely self-destructing (just as <a href="http://www.marketwatch.com/story/why-is-jeff-zucker-still-running-nbc-2010-01-15?reflink=MW_news_stmp">Comcast is trying to buy it from GE</a>). As Kansas City critic <a href="http://blogs.kansascity.com/tvbarn/2010/01/2things.html">Aaron Barnhart writes</a>, late-night is about the long haul. In restoring Leno, NBC is hanging onto its past and at best a couple of years of present at the expense of its future. All hosts - almost all entertainers - eventually find their audience is aging along with them. Even Carson seemed old-fashioned to younger viewers by the time he retired at 66: my parents watched Carson; I watch Letterman and Conan; my 20-something friends watch Conan and <a href="http://www.thedailyshow.com/">Jon Stewart</a>.</p>

<p>In his letter, O'Brien says holding <i>The Tonight Show</i> to 11:35 is vital. He is almost certainly right: people go to bed, watch the news and the opening monologue, and progressively drift off to sleep during the guests. By midnight, half of the <i>Tonight Show</i>'s viewers are gone; the latest shows are seen by insomniacs and people without kids and early-morning commutes. </p>

<p>Most likely NBC will shortly find out there is no way back to Leno's ratings of 2008. Diehard Leno fans will stick with him but Conan fans will tune out in protest; if they watch anyone it will be Letterman or Stewart. The younger people the network needs for the future watch online. </p>

<p>You may think none of this matters very much outside the US. The shows themselves have never traveled very well, though the format has been widely copied throughout the world. But of all the businesses having to cope with the digital revolution, in television it may be the broadcast networks who are most under threat. Those who copy and share TV shows buy DVDs; they do not return to watch the broadcast versions or consume advertising. Shows have fans; networks don't. The focus on file-sharing ignores the wide variety of streams copied live from broadcasters all over the world that are readily accessible if you know where to look. It is far cheaper to subscribe directly to the <a href="http://www.tennistv.com">tennis tours</a> than to pay Sky Sports or Eurosport, for example - and often free to pick up a <a href="http://www.livescorehunter.com/Livescores/Livescore-Tennis.html">stream</a>.</p>

<p>When the history of the digital revolution is written, historians may pinpoint the day Carson announced his retirement as the broadcasting equivalent of Peak Oil.</p>

<p><i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of all the earlier columns in this series</a>.  Readers are welcome to post here, at net.wars <a href="http://www.pelicancrossing.net/netwars">home</a>, follow on <a href="http://twitter.com/wendyg">Twitter</a>, or send email to netwars@skeptic.demon.co.uk.</i></p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2010/01/the_once_and_future_late-night.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2010/01/the_once_and_future_late-night.html</guid>
         <category>Media</category>
         <pubDate>Fri, 15 Jan 2010 14:29:50 +0000</pubDate>
      </item>
      
      <item>
         <title>Car talk</title>
         <description><![CDATA[<p>The most interesting thing I've heard all week was a snippet on CNBC in which a commentator talked about cars going out of style. The story was that in 2009 the <a href="http://www.peopleandplanet.net/doc.php?id=3709">US fleet of cars shrank by four million</a>. That is, four million cars were scrapped without being replaced. </p>

<p>The commentator and the original story have a number of reasons: increasing urbanization, uncertainty about oil prices, frustration about climate change, and so on. But the really interesting trend is a declining interest in cars on the part of young people. (Presumably these are the same young people who don't watch enough TV.)</p>

<p>A pause to reminisce. In 1967, when I was 13, my father bought a grey Mercedes 230SL with a red interior. It should tell you something when I say that I don't like sports cars, have always owned Datsuns/Nissans (including a pickup truck and two <a href="http://t1.gstatic.com/images?q=tbn:DhmJaHVgvuRN9M%3Ahttp://upload.wikimedia.org/wikipedia/commons/4/43/Nissan_Prairie_1982_Sawston.JPG">Prairies</a>), and am not really interested in cars that aren't mine but I still remember the make and model number of <a href="http://t3.gstatic.com/images?q=tbn:ijuPjpOCsKInlM%3Ahttp://www.americanconcours.org/Portals/0/Mercedes/1966%2520Mercedes%2520230SL%25207126.JPG">this car</a> from 42 years ago. I remember hoping he wouldn't trade it in before I turned 16 and was old enough to drive. (He did. Nerts.)</p>

<p>When, at 21, I eventually did get my own first car (a medium blue Nissan 710 station wagon with a white leather-like interior), it felt like I had finally achieved independence. Having a car meant that I could leave my parents' house any time I wanted. The power of that was shocking; it utterly changed how I felt about being in their home. </p>

<p>In London, I hardly drive. The public transportation is too good and the traffic too dense. There are exceptions, of course, but the fact is that it would be cheaper for me to book a taxi every time I needed a car than it is to own one. And yet, the image of being behind the wheel on the open road, going nowhere and everywhere retains its power.</p>

<p>People think of the US as inextricably linked to car culture, but the fact is that our national love affair with the car is quite recent and was imposed on us. The 1988 movie <a href="http://www.imdb.com/title/tt0096438/">Who Framed Roger Rabbit?</a> had it right: at one time even Los Angeles had a terrific public transportation system. But starting in 1922, General Motors, acting in concert with a number of oil companies, most notably Chevron, <a href="http://www.lovearth.net/gmdeliberatelydestroyed.htm">deliberately set out to buy up and close down thousands of municipal streetcar systems</a>. The scheme was not popular: people did not want to have to buy cars.</p>

<p>CNBC's suggestion was that today's young people find their independence differently: through their cell phones and the Internet. He has a point. As children, many baby boomers shared bedrooms with siblings. Use of the family phone was often restricted. The home was most emphatically not a place where a young adult could expect any privacy. </p>

<p>Today, kids go out less, first because their parents worry about their safety, later because their friends and social lives are on tap from the individual bedrooms they now tend to have. And even if they have to share the family computer and use it in a well-trafficked location, they can carve themselves out a private space inside their phones, by text if not by voice. </p>

<p>The Internet's potential to destroy or remake whole industries is much discussed: see also newspapers, magazines, long-distance telecommunications, music, film, and television. The "Google decade" so many commentators say is ending is, according to <a href="http://www.thebigmoney.com/articles/0s-1s-and-s/2009/12/31/google-decade-ends?page=full">Slate</a>, just the beginning of how Google, all by itself, will threaten industries: search portals, ad agencies, media companies, book publishers, telephone companies, Mapquest, soon smart phone manufacturers, and then the big man on campus, Microsoft.</p>

<p>But if there's one thing we know, it's that technology companies are bad bets because they can be and are challenged when the next wave comes along. Who thought ten years ago that Microsoft wouldn't kill everyone else in its field? Twenty years ago, IBM was the unbeatable gorilla.</p>

<p>The happening wave is mobile phones, and it isn't at all clear that Google will dominate, any more than Microsoft has succeeded in dominating the Internet. But the interesting thing is what mobile phones will kill. So far, it's made a dent in the watchmaking industry (because a lot of people carrying phones don't see why they need a watch, too). Similarly, smart phones have subsumed MP3 players, pocket televisions. Now, cars. And, if I had to guess, smart phones will be the most popular vehicles for ebooks, too, and for news. Tim O'Reilly, for example, says that <a href="http://www.theinquirer.net/inquirer/news/1050973/meet-book-bloke-web">ebooks really began to take off with the iPhone</a>. Literary agents and editors may love the Kindle, but consumers reading while waiting for trains are more likely to choose their phones. Ray Kurzweil is very likely <a href="http://news.cnet.com/8301-13860_3-10428479-56.html">right on track</a> with his <a href="http://education.zdnet.com/?p=3533">cross-platform ereader software, Blio</a>. </p>

<p>All this seems to me to validate the questions we pose whenever we're asked to <a href="http://www.pcworld.com/article/186356/president_sarkozy_adds_his_support_to_french_google_tax_plan.html">subsidize the entertainment industry</a> in its struggle to find its feet in this new world. Is it the right business model? Is it the right industry? Is it the right time?</p>

<p><i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of all the earlier columns in this series</a>.  Readers are welcome to post here, follow on <a href="http://twitter.com/wendyg">Twitter</a>, or send email to netwars@skeptic.demon.co.uk.</i><br />
</p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2010/01/car_talk.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2010/01/car_talk.html</guid>
         <category>New tech, old knowledge</category>
         <pubDate>Sat, 09 Jan 2010 01:28:38 +0000</pubDate>
      </item>
      
      <item>
         <title>Privacy victims</title>
         <description><![CDATA[<p>Frightened people often don't make very good decisions. If I were in charge of aviation security, I'd have been pretty freaked out by the Christmas Day crotch bomber - failure or no failure. Even so, like all of us Boxing Day quarterbacks, I'd like to believe I'd have had more sense than to demand that airline passengers stay seated and unmoving for an hour, laps empty. </p>

<p>But the locking-the-barn elements of the TSA's post-crotch rules are too significant to ignore: the hastily implemented rules were very specifically drafted to block exactly the attack that had just been attempted. Which, I suppose, makes sense if your threat model is a series of planned identical, coordinated attacks and copycats. But as a method of improving airport security it's so ineffective and irrelevant that even the normally rather staid <a href="http://www.economist.com/blogs/gulliver/2009/12/the_latest_on_flight_253">Economist accused the TSA of going insane</a> and Bruce Schneier called the new rules<a href="http://www.schneier.com/blog/archives/2009/12/separating_expl.html">magical thinking</a>.</p>

<p>Consider what actually happened on Christmas Day: </p>

<p>- Intelligence failed. Umar Farouk Abdulmutallab was on the watch list (though not, apparently, the no-fly list), and his own father had warned the US embassy. </p>

<p>- Airport screening failed. He got through with his chunk of explosive attached to his underpants and the stuff he needed to set it off. (As the flyer boards have noted, anyone flying this week should be damned grateful he didn't stuff it in a condom and stick it up his ass.) </p>

<p>- And yet, the plan failed. He did not blow up the plane; there were practically no injuries, and no fatalities.</p>

<p>That, of course, was because a heroic passenger was paying attention instead of snoozing and leaped over seats to block the attempt. </p>

<p>The logical response, therefore, ought to be to ask passengers to be vigilant and to encourage them to disrupt dangerous activities, not to make us sit like naughty schoolchildren being disciplined. We didn't do anything wrong. Why are we the ones who are being punished?</p>

<p>I have no doubt that being on the plane while the incident was taking place was terrifying. But the answer isn't to embark upon an arms race with the terrorists. Just as there are well-funded research labs churning out new computer viruses and probing new software for vulnerabilities, there are doubtless research facilities where terrorist organizations test what scanners can detect and in what quantity.</p>

<p><a href="http://www.crypto.com/blog/random/">Matt Blaze has a nice analysis</a> of why this approach won't work to deter terrorists: success (plane blown up) and failure (terrorist caught) are, he argues, equally good outcomes for the terrorist, whose goal is to sow terror and disruption. All unpredictable screening does is drive passengers nuts and, in some cases, put their health at risk. Passengers work to the rules. If there are no blankets, we wear warmer clothes; if there is no bathroom access, we drink less; if there is no in-flight entertainment, we rearrange the hours we sleep. </p>

<p>As Blaze says, what's needed is a correct understanding of the threat model - and as Schneier has often said, the most effective changes since 9/11 have been reinforcing the cockpit doors and the fact that passengers now know to resist hijackers. </p>

<p>Since the incident, much of the talk has been about whole-body scanners - "nudie scanners" Dutch privacy advocates have dubbed them - as if these will secure airplanes for once and for all. I think if people think that whole-body scanners are the answer they have misunderstood the problem.</p>

<p>Or problems, because there is more than one. First: how can we make air travel secure from terrorists? Second: how can we make air travelers feel secure? Third: how can we accomplish those things while still allowing travelers to be comfortable, a specification which includes respecting their right to privacy and civil liberties? If your reaction to that last is to say that you don't care whose rights are violated, all that matters is perfect security I'm going to guess that: 1) you fly very infrequently; 2) you would be happy to do so chained to your seat naked with a light coating of Saran wrap; and 3) that your image of the people who are threats is almost completely unlike your own. </p>

<p>It is particularly infuriating to read that we are  <a href="http://www.skatingonstilts.com/skating-on-stilts/2009/12/are-you-a-privacy-victim.html">privacy victims</a>: that the opposition of <a href="http://www.privacyinternational.org">privacy advocates</a> to invasive practices such as whole-body scanners are the reason this <a href="http://nielsenhayden.com/makinglight/archives/012063.html#012063">clown</a> got as close as he did. Such comments are as wrong-headed as Jack Straw claiming after 9/11 that <a href="http://www.theinquirer.net/?article=1458">opponents of key escrow were naïve</a>. </p>

<p>The most rational response, it seems to me, is for TSA and airlines alike to solicit volunteers among their most loyal and committed passengers. Elite flyers know the rhythms of flights; they know when something is amiss. Train us to help in emergencies and to spot and deter mishaps. </p>

<p>Because the thing we should have learned from this incident is that we are never going to have perfect security: terrorists are a moving target. We need fallbacks, for when our best efforts fail. </p>

<p>The more airport security becomes intrusive, annoying, and visibly stupid, the more motive passengers will have to find workarounds and the less respect they will have for these authorities. That process is already visible. Do you feel safer now?</p>

<p><br />
<i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of the earlier columns in this series</a>.  Readers are welcome to post here, at net.wars <a href="http://www.pelicancrossing.net/netwars">home</a>, follow on <a href="http://twitter.com/wendyg">Twitter</a>, or send email to netwars@skeptic.demon.co.uk.<br />
</p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2010/01/privacy_victims.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2010/01/privacy_victims.html</guid>
         <category>Privacy</category>
         <pubDate>Fri, 01 Jan 2010 18:31:27 +0000</pubDate>
      </item>
      
      <item>
         <title>Second acts</title>
         <description><![CDATA[<p>Reviewing the big names of 2009 versus the big names of 1999 for <a href="http://resources.zdnet.co.uk/articles/0,1000001991,39931677,00.htm">ZDNet UK</a> last week turned up some interesting trends there wasn't space to go into. Also worth noting: still unpublished is the reverse portion, looking at what the names who are Internet-famous in 2009 were doing in 1999. These were: Mark Zuckerberg (Facebook), Sergey Brin and Larry Page (Google), Rupert Murdoch, Barack Obama, and Jimmy Wales (Wikipedia).</p>

<p>One of the trends, of course, is the fact that there were so many women making technology headlines in 1999: Kim Polese (Marimba), Martha Lane Fox (Lastminute.com), Carly Fiorina (running - and arguably nearly destroying - HP), Donna Dubinsky (co-founder of Palm), and Eva Pascoe (a media darling for having started the first Internet café, London's Cyberia, and writing a newspaper column). It isn't easy now to come up with names of similar impact in 2009. </p>

<p>You can come up with various theories about this. For example: the <a href="http://www.xent.com/FoRK-archive/august98/0085.html">shrinking pipeline</a>  reported ten years ago by both the <a href="http://www.acm.org">ACM</a> and the <a href="http://www.bcs.org">BCS</a> has borne fruit, so that there are actually fewer women available to play the prominent parts these women did. As against that (as a female computer scientist friend points out) one of the two heads of Oracle is female. </p>

<p>The other obvious possibility is the opposite: that women in prominent roles in technology companies have become so commonplace that they don't command the splashy media attention they did ten years ago. I doubt this; if they're commonplace, you'd expect to see some of their names in common use. I will say, though, that I know quite a <a href="http://www.skimlinks.com">few</a> <a href="http://www.globalsecuritychallenge.com">start-ups</a> founded or co-founded by women. It was interesting to learn, in looking up Eva Pascoe's current whereabouts, that part of her goal in starting Cyberia was to educate women about the Internet. She was, of course, right: at the time, particularly in Britain, the attitude was very much that computers were boys' toys and few women then had found the confidence to navigate the online world.</p>

<p>The other interesting thing is the varying fortunes of the technologies the names represent. Some, such as Napster (Shawn Fanning), Netscape (Marc Andreesen) and Cyberia, live on through their successors. Others have changed much less: HP (Fiorina) is still with us, and Palm (Dubinsky and Jeff Hawkins) may yet manage a comeback. Symbian has achieved pretty much everything Colly Myers hoped. </p>

<p>Several of the technologies present the earliest versions of the hot topics of 2009, most notably Napster, which kicked off the file-sharing wars. If I were a music industry executive, I'd be thinking now that I was a numb-nut not to make a deal with the original Napster: it was a company with a central server. Suing it out of existence begat the distributed Gnutella, the even more distributed eDonkey, and then the peer-to-peer BitTorrent and all the little Torrents. Every year, more material is available online with or without the entertainment industry's sanction. This year's destructive industry proposal, three strikes, will <a href="http://www.publications.parliament.uk/pa/ld200910/ldbills/001/amend/am001-h.htm">hurt all sorts of people if it becomes law</a> - but it will not stop file-sharing. </p>

<p>Of course, Napster's - and contemporary MP3.com's - mistake was not being big enough. The Google Books case, one of the other big stories of the year, shows that size matters: had Brin and Page, still graduate students with an idea and some venture capital funding, tried scanning in library books in 1999 Google would be where Napster is now. Instead, of course, it's too big to fail.</p>

<p>The AOL/Time-Warner merger, for all that it has failed utterly, was the first warning of what has become a long-running debate about network neutrality. At the time, AOL was the biggest conduit for US consumer Internet access; merging with Time-Warner seemed to put dangerous control over that access in the hands of one of the world's largest owners of content. In the event, the marriage was a disastrous failure for both companies. But AOL, now divorced, may not be done yet: the "walled garden" approach to Internet content is finding new life with sites like Facebook. If, of course, it doesn't get run over by the juggernaut of 2009, <a href="http://twitter.com/wendyg">Twitter</a>.</p>

<p>If AOL does come back into style, it won't be the only older technology finding new life: the entire history of technology seems to be one of constant rediscovery. What, after all, is 2009's <b>cloud computing</b> but a reworking of what the 1960s called <a href="http://en.wikipedia.org/wiki/Time-sharing">time-sharing</a>?</p>

<p>Certainly, a revival of the walled garden would make life much easier for the <a href="http://www.pelicancrossing.net/netwars/2009/03/threat_model.html">>deep packet inspectors</a> who would like to snoop intensively on all of us. Phorm, Home Office, it doesn't much matter: computers weren't really fast enough to peek inside data packets in real time much before this year. </p>

<p>One recently resurfaced name from the Net's early history that I didn't flag in the ZDNet piece is Sanford ("Spamford") Wallace, who in the late 1990s was widely blacklisted for sending spam email. By 1999, he had supposedly quit the business. And yet, this year he was convicted of 14,214,753  violations of the CAN-SPAM anti-spam act and told to pay Facebook more than $711 million. How times do not change.</p>

<p><i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of all the earlier columns in this series</a>.  Readers are welcome to post here, follow on <a href="http://twitter.com/wendyg">Twitter</a>, or send email to netwars@skeptic.demon.co.uk.</i></p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2009/12/second_acts.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2009/12/second_acts.html</guid>
         <category>New tech, old knowledge</category>
         <pubDate>Fri, 25 Dec 2009 21:55:19 +0000</pubDate>
      </item>
      
      <item>
         <title>Little black Facebook</title>
         <description><![CDATA[<p>Back in 2004, the Australian privacy advocate and consultant Roger Clarke warned about the growth of social networks. In his paper <a href="http://www.rogerclarke.com/DV/ContactPITs.html">Very Black 'Little Black Books'</a> he warned of the privacy implications inherent in posting large amounts of personal data to these sites. The primary service Clarke talks about in that paper is <a href="http://www.plaxo.com">Plaxo</a>, though he also mentions the Google's then newly-created Orkut, as well as Tribe.net, various dating sites, and, on the business side, LinkedIn.</p>

<p>The gist: posting all that personal data (especially in the case of Plaxo, to which users upload their entire address books) is a huge privacy risk because the business models for such sites are still unknown.</p>

<p>"The only logical business model is the value of consumers' data," he told me for a <a href="http://www.independent.co.uk/news/science/friends-like-these-559861.html">piece I wrote on social networks in 2004</a>. "Networking is about viral marketing, and that's one of the applications of social networking. It's social networks in order to achieve economic networks."</p>

<p>In the same interview, Clarke predicted the future for such networks and their business models: "My expectation would be that if they were rational accumulators of data about individuals they wouldn't be caught out abusing until they had a very nice large collection of that data. It doesn't worry me if they haven't abused yet; they will abuse."</p>

<p>Cut to this week, when Facebook - which wouldn't even exist until two years after that interview - suddenly changed its privacy defaults to turn the service inside out. Gawker calls the change a <a href="http://gawker.com/5426176/facebooks-great-betrayal">great betrayal</a>, and says, "The company has, in short, turned evil." </p>

<p>The change in a nutshell: Facebook changed the default settings on its privacy controls, so that information that was formerly hidden by default is now visible to default - and not just to people on Facebook but to the Internet at large. The first time I logged on after the change, I got a confusing screen asking me to choose among the privacy options for each of a number of different types of data - open, or "old settings". I stared at it: what were the old settings? </p>

<p>Less than a week after the changes were announced, <a href="http://online.wsj.com/article/SB20001424052748704238104574602262735234366.html">ten privacy organizations</a>, led by the <a href="http://www.epic.org">Electronic Privacy Information Center</a> and including the American Library Association, the Privacy Rights Now Coalition, and the Bill of Rights Foundation, <a href="http://epic.org/privacy/inrefacebook/EPIC-FacebookComplaint.pdf">filed a complaint with the Federal Trade Commission (PDF)</a> asking the FTC to enjoin Facebook's "unfair and deceptive business practices" and compel the company to restore its earlier privacy settings and allow complete opt-out, as well as give users more effective control over their data.</p>

<p>The "walled garden" approach to the Net is typically loathed when it's applied to, say, general access to the Internet. But the situation is different when it's applied to personal information; Facebook's entire appeal to its users is based on the notion that it's a convenient way to share stuff with their friends that they don't want to open up to the entire Internet. If they didn't care, they'd put it all on blogs, or family Web sites. </p>

<p>"I like it," one friend told me not long ago, "because I can share pictures of my kids with my family and know no one else can see them."</p>

<p>My guess is that Facebook's owners have been confused by the success of Twitter. On Twitter, almost everything is public: what you post, who you follow, who follows you, and the replies you send to others' messages. All of that is easily searchable by Google, and Tweets show up with regularity in public search results.</p>

<p>But Twitter users know that everything is public, and (one hopes) moderate their behavior accordingly. Facebook users have populated the service with personal chatter and photos of each other at private moments precisely because they expected that material to remain private. (Although: Joseph Bonneau at the University of Cambridge noticed last May that <a href="http://www.lightbluetouchpaper.org/2009/05/20/attack-of-the-zombie-photos/">even deleted photos didn't always remain private</a>.) You can understand Facebook's being insecure about Twitter. Twitter is the fastest-growing social network and the one scooping all the media attention (because if ever there were a service designed for the butterfly mentality of journalists, this is it). The fact that Tweets are the same length as Facebook status updates may have led Facebook founding CEO Mark Zuckerberg <i>et al</i> to think that competing with Twitter means implementing the same features that make Twitter so appealing.</p>

<p>Of course, Facebook has done this in a typically Facebookish sort of way, in that the interface is typically clunky and unpleasant (the British journalist Andrew Brown, once commented that the Facebook user interface could < a href="http://www.guardian.co.uk/commentisfree/andrewbrown/2009/aug/03/religion-catholicism-vincent-nichols-suicide">drive one to suicie</a>.) Hence the need for a <a href="<a href="http://gawker.com/5427077/the-valleywag-guide-to-restoring-your-privacy-on-facebook">guide</a> to reprivatizing your account.</p>

<p>But <a href="http://www.facebook.com/mobile/">adding mobile phone connections</a> is one thing; upending users' expectations of your service is another. There is a name for selling a product based on one description and supplying something different and less desirable: bait and switch. </p>

<p>It is as Roger Clarke said five years ago: sooner or later, these companies have to make money. Social networks have only two real assets: their users' desire to keep using their service, and the mass of data users keep giving them. They're not charging users. What does that leave as a business strategy? </p>

<p><i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of the earlier columns in this series</a>.  Readers are welcome to post here, follow on <a href="http://twitter.com/wendyg">Twitter</a>, or send email to netwars@skeptic.demon.co.uk.</i><br />
</p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2009/12/little_black_facebook.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2009/12/little_black_facebook.html</guid>
         <category>Net life</category>
         <pubDate>Sat, 19 Dec 2009 00:25:53 +0000</pubDate>
      </item>
      
      <item>
         <title>One ring to rule them all</title>
         <description><![CDATA[<p><br />The heat of the discussions of file-sharing - which a little too often are boiling down to "it's evil" versus "no, it isn't" - tend to obscure the fact that there are very real decisions to be made about the future of copyright. On Monday, there was a <a href="http://www.ipo.gov.uk/policy-notices-reflection.htm">Intellectual Property Office</a> to consider these kinds of questions. How best, asked the <a href="http://ec.europa.eu/avpolicy/docs/other_actions/col_2009/reflection_paper.pdf">European Commission paper (PDF)</a> the meeting was convened to discuss, can a single market for creative content online be created?</p>

<p>It was an interesting group - a couple of us sent (as advisory council members) by the <a href="http://www.openrightsgroup.org">Open Rights Group</a> alongside representatives of the collection society <a href="http://www.ppluk.com">PPL</a>, <a href="http://www.consumerfocus.org.uk">Consumer Focus</a>, several from the IPO itself, and six or seven more whose affiliations I didn't catch. We hear a lot about the smoke-filled rooms in which policy is formed; I can say no one was smoking, but have no idea how much influence the discussion will have on policy. However, the IPO is <a href="http://www.ipo.gov.uk/policy-notices-reflection.htm">accepting comments on the paper until January 5</a>.</p>

<p>One of the key themes that kept resurfacing is the fundamental mismatch between the way intellectual property law is devised and rights are exercised and the way digital data behaves. Laws and business models are national; digital data is everywhere. Usually, thinking about that mismatch ushers in a discussion of "evil" file-sharers, but on this occasion the questions were more to do with how to create a framework that would enable commercial services to function across all of Europe. It says something about the extreme difficulties now posed by copyright law even for professionals that part of the discussion revolved around the acknowledged desire of new businesses to be able clear all the rights for a particular work in one go. Even something as apparently simple as a single recorded song may have a whole bundle of rights holders: the songwriter/composer, arranger, performer, and broadcaster. Music already has <a href="http://www.droit.ulg.ac.be/ieje/fileadmin/IEJE/Word/Hughes_Calvet.ppt">centralized clearing for mechanical licenses and standard rates across Europe and there is something similar for satellite broadcasting (PPT)</a>. The pending European Court of Justice ruling in the <a href="http://www.twobirds.com/English/News/Articles/Pages/European_Developments.aspx">CISAC case</a>, however, is expected to determine the availability of pan-European licenses.</p>

<p>But such agreement is a rarity: another common theme was the wide variation across Europe. In Germany, for example, creators cannot legally be required to waive their <a href="http://cyber.law.harvard.edu/property/library/moralprimer.html">moral rights</a>; in most other EU countries (including the UK), they can. A work may be <a href="http://www.copyright.gov/orphan/">orphaned</a> in one territory but not in another. In five EU countries (one of which is the UK) there is no <a href="http://ec.europa.eu/internal_market/copyright/documents/2003-speech-reinbothe_en.htm">private copying levy</a>; in Germany such levies are being applied to larger and larger classes of hardware. </p>

<p>This huge thicket of cross-border disharmonies and conflicts poses serious difficulties in deciding the way forward: no matter what you do, someone is going to lose something. New business models sound like a great idea, but if the idea is to bundle up large amounts of content for greatly reduced license fees, are we creating these new businesses at the expense of artists and creators? Of course, if you follow that argument to its logical conclusion you would never do anything at all. The IPO's view seems to be that you make the best decisions you can and then solve the problems they raise as needed. Which is fine, as long as the problems you create don't all disadvantage the same group of people. At the moment, artists and creators are being squeezed from all sides, and the public seems to be the least represented in the decisions that eventually get made.</p>

<p>The PPL's representative argued that one barrier to a competitive market was competition law, intended to prevent cartels from forming, that blocks the four major record companies from talking jointly to ISPs. Instead, all four have the same conversations with the ISPs. </p>

<p>But all of this was leading up the day's key question: is it a good or bad thing to bring in a single, Europe-wide copyright? On the pro side, for rights holders, such an arrangement would eliminate forum-shopping and leveraging competing legal systems. For artists and new businesses, it would lead, hopefully, to a much simpler regime for clearing rights and paying licensing fees. On the other hand: it would wipe away the traditional business models and notions of artistic control, all of which rely, as already noted, on parceling up rights according to national boundaries (as well as types of usage). </p>

<p>It would also remove control at the national government level: the arguments now taking place over the powers conferred by the Digital Economy Bill, for example, would very likely be happening at EU level. Are artists and creators likely to be better served by copyright law that's created in such a centralized way? It's not clear to me that the answer to that is yes; it seems more likely that today's grass-roots lobbying would become much harder. The EU government is structurally arcane and difficult to penetrate, even though it's true that anti-software patent campaigners <a href="http://www.nosoftwarepatents.com/en/m/about/founder.html">had some success</a>. But overall and in general harmonization has not been kind to public access rights because typically "harmonization" has meant adopting the most restrictive of the existing regimes. </p>

<p><i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of all the earlier columns in this series</a>.  Readers are welcome to post here, follow on <a href="http://twitter.com/wendyg">Twitter</a>, or send email to netwars@skeptic.demon.co.uk.</i><br />
</p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2009/12/one_ring_to_rule_them_all.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2009/12/one_ring_to_rule_them_all.html</guid>
         <category></category>
         <pubDate>Sat, 12 Dec 2009 15:18:08 +0000</pubDate>
      </item>
      
      <item>
         <title>Which lie did I tell?</title>
         <description><![CDATA[<p><br />
"And what's your mother's maiden name?"</p>

<p>A lot of attention has been paid over the years to the quality of passwords: how many letters, whether there's a sufficient mix of numbers and "special characters", whether they're obviously and easily guessable by anyone who knows you (pet's name, spouse's name, birthday, etc.), whether you've reset them sufficiently recently. But, as <a href="http://www.chiark.greenend.org.uk/pipermail/ukcrypto/2009-December.txt">someone noted this week on UKCrypto</a>, hardly anyone pays attention to the quality of the answers to the "password hint" questions sites ask so they can identify you when you eventually forget your password. By analogy, it's as though we spent all our time beefing up the weight, impenetrability, and lock quality on our front doors while leaving the back of the house accessible via two or three poorly fitted screen doors.</p>

<p>On most sites it probably doesn't matter much. But the question came up after the BBC broadcast an interview with the journalist <a href="http://www.manchestereveningnews.co.uk/news/s/1184794_opinion_angela_epstein">Angela Epstein</a>, the loopily eager first registrant for the ID card, in which she apparently mentioned having been asked to provide the answers to five rather ordinary security questions "like what is your favorite food". Epstein's column gives more detail: "name of first pet, favourite song and best subject at school". Even Epstein calls this list "slightly bonkers". This, the UKCrypto poster asked, is going to protect us from terrorists?</p>

<p><a href="http://www.chyp.com">Dave Birch</a> had some logic to contribute: "Why are we spending billions on a biometric database and taking fingerprints if they're going to use the questions instead? It doesn't make any sense." It doesn't: she gave a photograph and two fingerprints.</p>

<p>But let's pretend it does. The UKCrypto discussion headed into technicalities: has anyone studied challenge questions?</p>

<p>It turns out someone has: <a href="http://homepages.inf.ed.ac.uk/mjust/">Mike Just</a>, described to me as "the world expert on challenge questions". Just, who's delivered two papers on the subject this year, at the <a href="http://groups.inf.ed.ac.uk/security/KBA/Trust2009Presentation.pdf">Trust (PDF)</a> and <a href="http://groups.inf.ed.ac.uk/security/KBA/SOUPSJuly2009.pdf">SOUPS (PDF)</a> conferences, has studied both the usability and the security of challenge questions. There are problems from both sides. </p>

<p>First of all, people are more complicated and less standardized than those setting these questions seem to think. Some never had pets; some have never owned cars; some can't remember whether they wrote "NYC", "New York", "New York City", or "Manhattan". And people and their tastes change. This year's favorite food might be sushi; last year's chocolate chip cookies. Are you sure you remember accurately what you answered? With all the right capitalization and everything? Government services are supposedly thinking long-term. You can always start another Amazon.com account; but ten years from now, when you've lost your ID card, will these answers be valid? </p>

<p>This sort of thing is reminiscent of what biometrics expert James Wayman has often said about designing biometric systems to cope with the infinite variety of human life: "People never have what you expect them to have where you expect them to have it." (Note that Epstein <a href="http://www.thejc.com/news/uk-news/24563/angela-epstein-uks-first-id-card-holder">nearly failed the ID card registration because of a burn on her finger</a>.)</p>

<p>Plus, people forget. Even stuff you'd think they'd remember and even people who, like the students he tested, are young. </p>

<p>From the security standpoint, there are even more concerns. Many details about even the most obscure person's life are now public knowledge. What if you went to the same school for 14 years? And what if that fact is thoroughly documented online because you joined its Facebook group?</p>

<p>A lot depends on your threat model: your parents, hackers with scripted dictionary attacks, friends and family, marketers, snooping government officials? Just accordingly came up with three types of security attacks for the answers to such questions: blind guess, focused guess, and observation guess. Apply these to the often-used "mother's maiden name": the surname might be two letters long; it is likely one of the only 150,000 unique surnames appearing more than 100 times in the US census; it may be eminently guessable by anyone who knows you - or about you. In the Facebook era, even without a <a href="http://en.wikipedia.org/wiki/Wendy_M._Grossman">Wikipedia entry</a> or a history of Usenet postings many people's personal details are scattered all over the online landscape. And, as Just also points out, the answers to challenge questions are themselves a source of new data for the questioning companies to mine.</p>

<p>My experience from <a href="http://www.skeptic.org.uk">The Skeptic</a> suggests that over the long term trying to protect your personal details by not disclosing them isn't going to work very well. People do not remember what they tell psychics over the course of 15 minutes or an hour. They have even less idea what they've told their friends or, via the Internet, millions of strangers over a period of decades or how their disparate nuggets of information might match together. It requires effort to lie - even by omission - and even more to sustain a lie over time. It's logically easier to construct a relatively small number of lies. Therefore, it seems to me that it's a simpler job to construct lies for the few occasions when you need the security and protect that small group of lies. The trouble then is documentation.</p>

<p>Even so, says Birch, "In any circumstance, those questions are not really security. You should probably be prosecuted for calling them 'security'."</p>

<p><i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of all the earlier columns in this series</a>.  Readers are welcome to post here, follow on <a href="http://twitter.com/wendyg">Twitter</a>, or send email to netwars@skeptic.demon.co.uk.</i><br />
</p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2009/12/which_lie_did_i_tell.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2009/12/which_lie_did_i_tell.html</guid>
         <category>Security</category>
         <pubDate>Fri, 04 Dec 2009 18:24:09 +0000</pubDate>
      </item>
      
      <item>
         <title>Women and children first</title>
         <description><![CDATA[<p>The Irish author <a href="http://www.timpatcoogan.com">Tim Pat Coogan</a> has commented that Ireland was colonized twice: once by the British, and once by the Catholic church. I was reminded of that yesterday when reading that the leader of the Irish Catholic church, <a href="http://news.bbc.co.uk/1/hi/world/europe/8382042.stm">Cardinal Sean Brady, the Irish government, and the commissioner of the Irish police have all apologized</a> for decades of systematically covering up child abuse by Catholic priests, uncovered in the damning <a href="http://www.irishtimes.com/newspaper/frontpage/2009/1127/1224259548021.html">report of a three-year inquiry into the Archdiocese of Dublin from 1975 to 2004</a>. It seems that the cover-up went, like Watergate, <a href="http://www.belfasttelegraph.co.uk/news/local-national/abuse-why-did---the-vatican-remain--quiet-14578332.html">all the way to the top</a>.</p>

<p>When I was living in Ireland in the late 1980s few people talked about abuse by priests. One who did was Frank Crummey, whom I interviewed for one of my first-ever published pieces, for the <a href="http://www.guardian.co.uk">Guardian</a>'s women's page about the prosecution of the Irish Family Planning Association for giving away condoms at Virgin's Dublin Megastore. (Richard Branson funded the IFPA's defense, and flew in for the court hearing.) The chain of contacts led to Margaret Gaj, a veteran of contraceptive campaigns, and she sent me to Crummey.</p>

<p>He told me that his interest in contraception began as a campaign to redress the imbalance in subsidies between the Gaeltacht - Irish-language - and English-speaking agricultural areas. Working on that got him into the schools, where he saw that children were being abused - he mentioned in particular the Christian Brothers. But trying to engage their mothers on the issue failed: they were too poor and too dependent on their priests for help and charity to risk confrontation. Often, he told me, the priests would divulge even to abusive husbands what their wives said in the supposedly safe confessional. As the Irish writer <a href="http://coislife.ie/Authors/CLauthors/SeanMhacMathuna2.htm">Seán Mac Mathúna</a> asked in one of his short stories, "Who'd be a woman in Ireland?" The situation with respect to child abuse seems not to have been much different: <a href="http://www.independent.co.uk/news/world/europe/church-had-immunity-to-conceal-sex-abuse-says-report-1828168.html">clergy and police cooperated to protect the guilty</a>. </p>

<p>Unable to interest the authorities in the problems he was finding in the schools - a problem he encountered again, reportedly, in  <a href="http://studiesirishreview.wordpress.com/2009/06/02/the-ryan-report-why-was-father-flanagan-ignored/">Ireland's industrial schools</a> - Crummey concluded that the underlying problem was that too many children consigned them to poverty and powerlessness. That's when he began <a href="http://www.wsm.ie/story/3390">smuggling contraceptives into Ireland</a> and, with his family's help, distributing them by post. The letters he got from desperate women telling their stories to beg for help, he said, were heart-rending.</p>

<p>It is hard to convey to anyone who didn't live in Ireland in or before the 1980s how deeply embedded the Church was. It owned 90 percent of the primary schools and most of the hospitals. The Irish Constitution, although it includes a US-like clause guaranteeing the separation of church and state clearly intended "freedom of religion" to mean "freedom to be Catholic". The late Leslie Shepard, editor of <i>The Encyclopedia of Occultism and Parapsychology</i> and an early supporter of <a href="http://www.skeptic.org.uk">The Skeptic</a> frequently talked about the unique position of priests in rural villages in earlier times. Often, he noted, they were the only people who could read and write. </p>

<p>In fact, the village priest figured heavily in one of the topics covered in the early issues of <i>The Skeptic</i> (and revisited in the soon-to-be forthcoming <i>Why Statues Weep: the Best of <b>The Skeptic</b></i> from Philosophy Press). The <a href="http://www.tcd.ie/Philosophy/staff/berman.htm">Trinity College Dublin professor David Berman</a> had discovered new documents showing that the local priest was behind the <a href="http://en.wikipedia.org/wiki/Knock_Shrine">Knock Apparitions</a>. (Shepard always vehemently disputed that any village priest could be so deceptive.) I'm not sure a similar strategy will <a href="http://www.independent.co.uk/news/world/europe/row-is-brewing-with-catholic-church-over-visionary-claims-at-shrine-1813427.html">work now</a>.</p>

<p>Noticeable change had begun while I was living there, often attributed to economic improvement that meant that many of Ireland's emigrants could afford to return, bringing with them experiences of life in other countries. A few of these founded the Campaign to Separate Church and State; others banded together to build non-denominational charter schools for their kids. In the 1990s, of course, then along came the technology boom which, at least for a time, charged the economy.</p>

<p>The Church was already in trouble before the scandals broke. Writing in <i>Disillusioned Decades: Ireland 1966-1987</i> (Gill and Macmillan, 1987), Coogan noted that, "...though the presence of the church is all-pervasive there has been a diminution of the grip which it is able to maintain on an increasingly well-educated society. Increasing affluence (of a sort) and mobility mean that people can move in and out of the purview of the church without permitting it to have any great influence on their conduct (unless, of course, they want an abortion or a divorce)." From 1970 to 1985, the numbers entering the priesthood dropped by a quarter.</p>

<p>Now, according to the <a href="http://www.independent.co.uk/news/world/europe/irish-church-has-suffered-dramatic-fall-from-grace-1828349.html">Independent</a>, the abuse scandals have not only dramatically accelerated the already notable decline in numbers applying to enter the priesthood but is emptying the churches. For a country that only a little over 20 years ago could be persuaded through the power of the pulpit to vote down a constitutional amendment allowing divorce, it's staggering. The change may be less of a hard road for Ireland than it appears: one of the key messages the CSCS tried to impart in the late 1980s and early 1990s was that the church paid for less than people thought, since the religious-owned schools and hospitals had and have considerable State funding. </p>

<p><br />
<i>Wendy M. Grossman's <a href="http://www.pelicancrossing.net">Web site</a> has an extensive archive of her books, articles, and music, and an <a href="http://www.pelicancrossing.net/nwcols.htm"> archive of all the earlier columns in this series</a>.  Readers are welcome to post here, at net.wars <a href="http://www.pelicancrossing.net/netwars">home</a>, follow on <a href="http://twitter.com/wendyg">Twitter</a>, or send email to netwars@skeptic.demon.co.uk.</i><br />
</p>]]></description>
         <link>http://WWW.pelicancrossing.net/netwars/2009/11/women_and_children_first.html</link>
         <guid>http://WWW.pelicancrossing.net/netwars/2009/11/women_and_children_first.html</guid>
         <category>Skepticism</category>
         <pubDate>Fri, 27 Nov 2009 14:09:46 +0000</pubDate>
      </item>
      
   </channel>
</rss>
