Ged Carroll

Category: security | 保衛 | 정보 보안 | 情報セキュリティー

According to Wikipedia security can be defined:

Security is protection from, or resilience against, potential harm (or other unwanted coercive change) caused by others, by restraining the freedom of others to act. Beneficiaries (technically referents) of security may be of persons and social groups, objects and institutions, ecosystems or any other entity or phenomenon vulnerable to unwanted change. Security mostly refers to protection from hostile forces, but it has a wide range of other senses: for example, as the absence of harm (e.g. freedom from want); as the presence of an essential good (e.g. food security); as resilience against potential damage or harm (e.g. secure foundations); as secrecy (e.g. a secure telephone line); as containment (e.g. a secure room or cell); and as a state of mind (e.g. emotional security).

Back when I started writing this blog, hacking was something that was done against ‘the man’, usually as a political statement. Now breaches are part of organised crime’s day to day operations. The Chinese government so thoroughly hacked Nortel that all its intellectual property was stolen along with commercial secrets like bids and client lists. The result was the firm went bankrupt. Russian ransomware shuts down hospitals across Ireland. North Korean government sanctioned hackers robbed 50 million dollars from the central bank of Bangladesh and laundered it in association with Chinese organised crime.

Now it has spilled into the real world with Chinese covert actions, Russian contractors in the developing world and hybrid warfare being waged across central Europe and the middle east.

  • Amazon returns + more things

    Hidden cameras and secret trackers reveal where Amazon returns end up | CBC News – interesting aspect of Amazon’s business model. It does make me wonder how much of a drag is returns on Amazon’s business? Retail returns are usually running at 10 percent of products bought. With e-tailing; this rate is thought to be as high as 40 percent according to the programme. That sounds like an extremely high rate of returns. Back when I was in college 25 percent was quoted as a returns rate for catalogue businesses.

    Inside Palantir, Silicon Valley’s Most Secretive Unicorn – “Where you get into trouble is when the software gets so complicated that you have to send people in to manage it,” said one former CIA official who is complimentary of Palantir. “The moment you introduce an expensive IT engineer into the process, you’ve cut your profits.” Palantir, it turns out, has run headlong into the problem plaguing many tech firms engaged in the quest for total information awareness: Real-world data is often too messy and complex for computers to translate without lots of help from humans – to be fair enterprise software companies have always sold a good deal of smoke and mirrors in terms of over-exaggerated claims – sounds a lot like IBM’s Watson in this respect

    Apple’s New 5G IPhones May Be Left on the Shelf | Yahoo! Finance – 5G lacks a killer app for consumers

    Exposure to TV ads up 15% during height of lockdown – Even children were watching more broadcast TV and exposed to a greater volume of advertising in the weeks following the lockdown in March.

    Alibaba Group – investors day presentations – some interesting insight into Chinese e-tailing, retailing and internationalisation of these models

    Blockbuster Chinese games said to boycott Huawei and Xiaomi app stores over revenue tax | South China Morning Post – two Chinese gaming startups, Lilith Games and miHoYo, said they won’t sell their would-be autumn hits via app stores pre-installed on smartphones made by Huawei and Xiaomi. Instead, they’ve opted for stores charging smaller fees or none at all—including Apple’s App Store, which levies the same 30% charge in China as it does everywhere else. While the duo didn’t say outright they were unhappy about the 50% rule set by the Chinese Android stores, many gamers and developers see them as the good guys stepping up against tech’s behemoths

    How to Monitor Facebook Pages – Meltwater Help Center – now allows users to monitor Facebook pages that they’re in charge of. The limit is 50 specific Facebook pages. It pulls out the Facebook analytics data into a Meltwater interface

    European Semiconductor Sales Drop, Global Sales Rise – EE Times Europe – not surprising given the disruptions to manufacturing

    Google Chrome remains China’s most popular web browser, even with Google search and other apps blocked | South China Morning Post – consumer backlash against some domestic browsers can be attributed to their aggressive user acquisition tactics, such as being deliberately difficult to uninstall. But he said that a shift in consumer tastes might also play a role. When Chinese internet companies first started designing websites and applications in the late 90s, the minimalist aesthetic was unpopular, he said a friend told him at the time. “Chinese consumers wanted stores where all the merchandise was crammed onto the shelves at maximum capacity, with narrow aisles where people were just bumping into one another,” he said. “It felt like plenitude.” “Those early design preferences endured for a surprisingly long time online, and I think there’s still a much higher tolerance for it than we’d see in the US or other Western countries,” he added. “I think as consumers get more sophisticated, though, they’re looking for a retail experience that doesn’t feel like a fire sale all the time.”

    Opinion: How Can Luxury Brands Successfully Price In The Post-COVID World? – In these challenging times of lockdowns and demand contraction, luxury brands have increased – even more than usual – the prices of their bestselling products to offset part of the compression of margins due to the pandemic. Take for instance, Chanel which earlier this year confirmed it had brought the prices up of its iconic handbags (11.12, 2.55, Boy, Gabrielle) ranging between 5 and 17 percent in euros and Louis Vuitton which also raised the prices of some of its products in March and May. It is not a surprise that brands like Chanel, Louis Vuitton, Hermès and Dior, whose handbags are products that are considered iconic and perceived by consumers as investment pieces, can be more bold in increasing prices to protect their margin. But not all companies have such strong brand positioning and therefore cannot raise their prices so easily.

    Bulgari CEO Jean-Christophe Babin: “Millennials Don’t Want Formal Luxury.” | Luxury Society – I suspect that this is across age cohorts but the blend of streetwear and luxury is a key sign of it

    Is online advertising subprime? Contagious – interesting thought experiment

    South Korean Activists Accuse China of Using Huawei to Hack Their Election | Daily Beast – of course Samsung is looking to pick up 5G smartphone and infrastructure sales from Huawei….

    New info about Facebook-Instagram deal delays antitrust report: source | CNBC – it will be interesting to see what comes out

    Axios China – Top German official hushed up report on China’s influence – not terribly surprising when you read books like Hidden Hand. More China related posts here.

    The end of the American internet — Benedict Evans – more precisely. The end of Americans being the dominant users and culture on the internet

    Brussels drafts rules to force Big Tech to share data | Financial Times – grab the popcorn

    State of AI Report 2020 – interesting report on the hype

    The great uncoupling: one supply chain for China, one for everywhere else | Financial Times – Untangling supply chains that have built up over a generation is a complex and difficult task and the multinational companies which sell into the Chinese market will stay and even expand. But if companies that once used the mainland to make goods for export do decide to depart in significant numbers, it will represent a major reversal of five decades of economic integration between the US and China

  • Antitrust investigation into Google + more

    Exclusive: China preparing an antitrust investigation into Google – sources | Reuters – it would be interesting to see how a Chinese antitrust investigation into Google would play out. I could understand an antitrust investigation being put on the table of the politburo, I am less sure how it would work. Chinese companies need Google advertising, whereas Google is shut out of the Chinese market already. Google could turn around and tell them to do one; it would lose one R&D centre. A bigger issue might be the forced rejigging of its Google Home | Nest product supply chain. I suspect an antitrust investigation into Google is more likely to happen in the US than China

    Behind China’s Decade of European Deals, State Investors Evade Notice – WSJ – the EU needs to wise up

    Are Luxury Brands Losing The Battle Against Alibaba’s Counterfeiters? | Jing Daily – of course Alibaba can’t be trusted (and neither can Amazon)

    The perils of life in Beijing’s backyard | Financial Times – while it is all too easy to stereotype China and its companies as pantomime villains, Hiebert is skilled at teasing out the nuances and ambiguities, including local elites who have welcomed Chinese money, sometimes under corrupt circumstances. For south-east Asian countries, Beijing has proved a more predictable partner than the US, continuing business as usual with Myanmar when it faced isolation under its former military dictatorship, then more recently when it faced international condemnation for the military crackdown on the Rohingya. Beijing continued military sales to Thailand after the most recent coup in 2014

    American Engagement Advocates Sold a Dream of Changing China – efforts to downplay the missionary impulse of engagement with China amount to historical gaslighting, an attempt to retcon the record to conceal the extent of failure. During the Cold War, American leaders justified engagement with China as reining in China’s revolutionary foreign policy, establishing a stable bilateral relationship, and countering the Soviet threat—all reasonable goals. But for the first 20 years of the post-Cold War era, American leaders, backed by their advisors and strategists, unambiguously sold engagement with China on the basis of fostering a democratic and responsible government in Beijing

    Daring Fireball: Apple Is Removing Feed Readers From Chinese App Store – this doesn’t surprise me in the least. I used to use an RSS reader app when I would go to China. It’s interesting that RSS is now undergoing that much of a focus in China though as the audience will be distinctly niche. More on my RSS adventures in China here.

    When coffee makers are demanding a ransom, you know IoT is screwed | Ars Technica – Security problems with Smarter products first came to light in 2015, when researchers at London-based security firm Pen Test partners found that they could recover a Wi-Fi encryption key used in the first version of the Smarter iKettle. The same researchers found that version 2 of the iKettle and the then-current version of the Smarter coffee maker had additional problems, including no firmware signing and no trusted enclave inside the ESP8266, the chipset that formed the brains of the devices. The result: the researchers showed a hacker could probably replace the factory firmware with a malicious one. The researcher EvilSocket also performed a complete reverse engineering of the device protocol, allowing remote control of the device. Two years ago, Smarter released the iKettle version 3 and the Coffee Maker version 2, said Ken Munro, a researcher who worked for Pen Test Partners at the time. The updated products used a new chipset that fixed the problems. He said that Smarter never issued a CVE vulnerability designation, and it didn’t publicly warn customers not to use the old one. Data from the Wigle network search engine shows the older coffee makers are still in use – the bit I don’t understand is why you would need these appliances connected to the internet in the first place

    Apple vs Epic may go to jury; Google finally speaks on Fortnite ban – While Judge Rogers merely upheld her previous position, and didn’t dismiss Epic’s case outright, she was very obviously skeptical of their claims. Actually, that might be an understatement — she outright said that Epic lied, and, regarding the separate payment apparatus Epic insists on calling a “hotfix,” she said, “Lots of people use hotfixes. That’s not the issue. The issue is that you were told, and you knew explicitly because of your contractual relations, that you could not have that, and you did. It’s really pretty simple.” She was also rather unimpressed with Epic’s repeated claims that they were being denied access to large market of gamers who play Fortnite only on iOS, saying there are many other avenues through which those players can access the game.”

    Ai Weiwei: ‘Too late’ to curb China’s global influence – BBC News – “The West should really have worried about China decades ago. Now it’s already a bit too late, because the West has built its strong system in China and to simply cut it off, it will hurt deeply. That’s why China is very arrogant.”

    China’s Leaders Can’t Be Trusted by Chris Patten – Project Syndicate – interesting read. It gives you a sense of the uphill battle China now faces with political elites

    China under Xi Jinping feels increasingly like North Korea – The Washington Post – across China, it has become extremely difficult to have conversations with ordinary folk. People are afraid to speak at all, critically or otherwise. Students and professors, supermarket workers and taxi drivers, parents and motorists have all waved me away this year

    Wong Kar-wai is back making films: here are some of his best | Dazed – great summary of Wong Kar-wai’s work

    Fashion brands design ‘waist-up’ clothing for video calls – BBC News – this makes a lot of sense

  • Hair Growth Helmet + more things

    LG Launches Hair Growth Helmet to Combat Hair Loss | HYPEBAE – this looks totally legit. NOT. Yes, the FDA has certified other hair growth helmet treatments, but that was to indicate that they wouldn’t harm you or interfere with medications. It doesn’t validate the hair growth helmet actually working. But on the other hand lasers in the helmet….. More beauty category related content here.

    Why loneliness fuels populism | Financial Times – depicting loneliness solely in terms of how connected we feel to our friends, neighbours and colleagues risks occluding its other potent forms. Loneliness is political as well as personal, economic as well as social. It is also about feeling disconnected from our fellow citizens and political leaders, and detached from our work and our employer.

    “Buy British”: The viability of a nationalist commercial policy | VOX, CEPR Policy Portal – attempts by successive UK governments in the 1970s and early 1980s to initiate such import substitution policies were fraught with economic and legal difficulties. Indeed, accelerating globalisation and the rapid growth of imports in intermediate products for assembly into ‘British’ goods raise significant problems in defining a ‘national’ product – and the growth of tradable services (such as insurance, education and healthcare) presents an even more intractable problem

    Arkady Bukh: Man in the Middle | CyberScoop – go-to lawyer for hackers

    China bans Australian academics in apparent tit-for-tat retaliation | South China Morning Post – this has followed soon after a good report by Alex Joske and book by Clive Hamilton on China’s influence activities abroad

    Facebook removes fake accounts with links to China and Philippines | The Guardian – Facebook says it has removed hundreds of coordinated fake accounts with links to individuals in China and in the Filipino military that were interfering in the politics of the Philippines and the US – not very surprising. More details in the South China Morning Post – How a Chinese network of fake Facebook accounts influenced online debate on South China Sea, US politics | South China Morning Post 

    Ebay ex-CEO, PR head shared texts about taking down critics: DOJ – Business Insider – probably one of the most disturbing and bizarre things that I’ve read in a while

    China has the upper hand in corporate proxy wars with US | Financial Times – Mr Trump gave Mr Xi what he wanted on ZTE — a reprieve in the form of a new US commerce department settlement that allowed it to stay in business — and mistakenly assumed that this concession would smooth over the other matters. China quickly pocketed the ZTE present but continued to withhold approval of the Qualcomm-NXP deal. When the trade talks later started to unravel, Mr Xi let Qualcomm-NXP languish in regulatory limbo, where it eventually died. – Trump gave a concession too early

    How a local messaging app defeated WhatsApp in Vietnam – messaging app Zalo has been taking the country by storm for nearly a decade now. Zalo’s got a pretty firm grip on Vietnamese consumers. And now that it’s integrated mobile payment service ZaloPay into its messaging app, there’s plenty of potential for it to expand beyond being just a means of communication.

    The landlords are back – The families of China’s pre-Communist elite remain privileged | China | The Economist – The old elite began to suffer almost as soon as the Communist Party won the Chinese civil war in 1949. China’s new rulers quickly set about seizing land from people in the countryside, redistributing it among the landless, confiscating private businesses and executing many rural landlords and people who had worked for the overthrown Nationalist regime

    Listen to an unheard Steve Jobs NeXT keynote from 1988 – “But why it matters is that those explorations and that fun were in the end quite significant. It’s always useful to look back and to realize that even though the tech itself might seem quite primitive today, the people were already sophisticated. We know a lot more facts, and we can do more things, but I’m not sure we have gotten that much wiser.”

  • Science, Strategy and War by Frans P.B. Osinga

    Science, Strategy and War isn’t a book that would have normally made it on to my reading list, but we’re living in strange times. The book is an analysis of the history and strategic theory created over time by John Boyd.

    Boyd’s thinking led to the development of post-Vietnam, pre-stealth fighter aircraft that dominated the world’s skies. Boyd employed his experience and the insight that a ‘Swiss Army knife’ approach seldom provided an adequate design solution. A lesson that the US failed to learn when it created the F-35.

    Boyd was also responsible for creating the ideas that encouraged the US to move war into the IT space. Boyd’s thinking on strategy has shaped military thinking on tools, structure, integration and responsibility. What military-types call network-centric warfare. This seeks to translate an information advantage, enabled in part by information technology, into a competitive advantage.

    We saw the potential of this thinking in the first Gulf War when sensors, missiles and satellite imagery changed the face of modern warfare. What was less appreciated at the time by commentators is that this form of warfare was uniquely aided by Iraq’s flat terrain; which aided remote sensors and wireless networks. But the network-centric aspect really came into its own with William Owens’ paper on the system-of-systems which was emerging as the military followed Boyd’s approach.

    Ok, whilst there is some crossover with technology concepts such as Kevin Kelly’s ‘mirrorworld‘; where AR knits together networked information with location this is all pretty arcane stuff.

    Boyd breaks out of military circles

    John Boyd is particularly famous for a model called OODA which has broken out from its military origins. Probably the most high profile fan at the moment is Dominic Cummings – the special advisor to Boris Johnson and political activist.

    Cummings has talked about Boyd in terms of disruption and marketing of his political messages – through getting inside their OODA loop.

    Boyd’s ideas have also been picked up by sports coaches and even litigation teams in the US.

    OODA

    OODA or observe–orient–decide–act, is often described as a ‘loop’ and shown that way. However this deceives the audience of its true nature. As Osinga correctly points out; observe and orient are continual flows of information that feed into the decide and act functions. Strategists talk about ‘getting inside the enemies OODA loop’; that is disrupting their intelligence, understanding of their situational awareness and ability to act.

    Osinga’s critique of Boyd

    In Science, Strategy and War, Osinga sets out to do achieve a number of things with regards John Boyd’s ideas.

    First of all Osinga provides context, by providing a history of Boyd’s career in military service and as a retired service member and academic. Osinga brings a great deal of understanding to this part of the book as he also served in an air force and is an academic.

    John Boyd Climbing out of F-86 Cockpit, circa 1953

    Secondly, he explains how Boyd developed and honed his ideas over time. Boyd’s OODA model was borne out of empirical experience as a combat pilot. It was first used to change fighter pilots about engaging with the enemy. Use of it then expanded to encompass bigger strategic outlooks.

    Boyd read widely and had a deep understanding fo scientific principles due to his engineering background. He applied meta analysis to the great strategies and military campaigns of history and the literature describing them. He drew on his understanding of science to try and provide analogies for the many areas of uncertainty in implementing a strategy. He drew on the social sciences and concepts like post-modernism.

    Whilst Boyd was technical; Science, Strategy and War makes it clear that he wasn’t technocratic in nature. Boyd was keenly aware of human factors including the different aspect of moral power. I think that this one of the least understood aspects of Boyd’s thinking.

    I don’t think that Osinga’s book is essential reading for marketing. It was never meant to be. Instead, it provides a good insight into how many of our thinkers operate only at the surface level without truly understanding the concepts they talk about. Boyd was not a surface player, he thought deeply about things and read widely. In that respect I think he can be an example to us all. Osinga did a really good job at bringing this to light in an accessible way.

    More on strategy here, more strategy related book reviews here.

  • Dual circulation strategy + more

    China’s inward-facing ‘dual circulation’ strategy leaves many wondering where domestic demand will come from | South China Morning Post – dual circulation faces an uphill struggle. some structural issues. Finances in China are designed to benefit the state and the uber rich. China’s Gini co-efficient shows an astonishing gap between rich and poor. COVID-19 has meant that Chinese consumers have even less money to spend. This means that the domestic demand aspect of the dual circulation strategy won’t work as desired. More on China here.

    Forget TikTok. China’s Powerhouse App Is WeChat. – The New York Times – It has even extended Beijing’s reach beyond its borders. When secret police issue threats abroad, they often do so on WeChat. When military researchers working undercover in the United States needed to talk to China’s embassies, they used WeChat, according to court documents. The party coordinates via WeChat with members studying overseas – I loved the descriptor of WeChat as a super filter bubble. I am continually surprised by how nationalistic Chinese friends have become over my nine years using WeChat

    Jaron Lanier Thinks Things May Have Gotten Better, or Facebook ‘Might Have Won Already’ – Slashdot – interesting takeouts from an interview with GQ. This wouldn’t have made GQ five years ago, which goes to show how online privacy has become more important to the general public

    The True Story of Lee Kuan Yew’s Singapore | Palladium Magazine 

    The User Always Loses | Hacker News – fascinating Silicon Valley discussion on user-hostile companies

    How Did the Internet Get So Bad? | The Nation – “Search strings used to be phrased like ingredients: ‘revolution AND french OR russian NOT american,’” McNeil writes. But in the past two decades, the language and tone of our search queries have become more baroque and confessional. “When I search for information now, I feel like I should add ‘please’ and ‘thank you’ to every request. There is no way around it, talking to the Google search bar like a human generates more relevant results.” This feels anecdotally true; I’ve certainly gotten into the habit of phrasing my searches, as McNeil notes, along the lines of “‘how do i download a printer driver for mac’ rather than ‘download printer driver mac.’” – one of my biggest frustrations is the lack of depth that ‘human language’ search allows versus the previous use of boolean terms

    ‘Is PR structurally ageist? Sadly, I think it is’ – PR leaders respond to Mark Read’s comments on age | PR Week – when the realisation you’re old hits you in PR, you have six options. You can set up your own shop (if you haven’t already). You can go in-house for breadth. You can run an agency (or help someone run theirs). You can become a functional ‘guru’ (a strategist, for example). You can fully embrace freelance consulting. Or you can go full side hustle and open a gin still

    Apple Watch Podcasts App Found to Falsely Inflate Listener Numbers – MacRumors – interesting, I wonder if this will change as we go ‘post-smartphone’?

    TikTok ads have pushed scams about apps, diet pills, other products, report says – CNET – to be fair most of Facebook and Instagram ads sourced from Chinese merchants and drop-shippers are just as bad. Given the continued export focus of China’s dual circulation strategy I can’t see TikTok changing this at all

    SoftBank unmasked as ‘Nasdaq whale’ that stoked tech rally | Financial Times – this almost sounds like a desperate gambler

    The Big Tesla Hack: A hacker gained control over the entire fleet, but fortunately he’s a good guy – Electrek – but what happens if its the GRU, the MSS or North Korea who find the next hack?

    ‘The Man in the White Suit’: What Will We Do When We’ve Nothing to Make? — Jim Carroll’s Blog – Should science pursue innovation that improves people’s lives regardless of the impact it may have on industry and employment? How do we deal with the concentration of capital that results from such disruptive change? How do we accommodate the workers who have lost their jobs? What will we do when we’ve nothing to make?

    WePresent | Mong Tong are an ambient psychedelic group from Taipei – Taiwanese krautrock?

    Harrods’s bold new bet: Suburbia | Vogue Business – in Essex and Milton Keynes. Surprised at this, I would have thought branches in Singapore and Berlin would make more sense?

    Dive action hero: meet the new Rolex Submariner | Financial Times – still the cleanest design of dive watch. The 70-hour power reserve is impressive

    Hong Kong cardinal warns priests to ‘watch your language’ in homilies – Catholic Herald – The priest, who asked not to be named because of concerns he could be prosecuted under the National Security Law, told CNA on Tuesday that many local Catholics were dismayed by Cardinal Tong’s actions. “The youth of the Church is for democracy, they simply are,” he told CNA. “They are looking for leadership, and I doubt you would find any Catholic under 35 here who is not angry and does not see the chancery as siding with the people tear-gassing them in the streets.”

    A TALE OF TWO NIKE ADS: MARKETING’S UNHEALTHY OBSESSION WITH “INSPIRATION” – BBH Labs – Generally speaking, ordinary folks are just much more chilled out than marketers. They are far less preoccupied with their careers, their personal fitness, keeping up with technology and looking at social media. They look for good deals and use coupons and loyalty programs but they are less likely to consult “expert opinion” before a purchase. They are much more interested in books and literature than they are in business. They are unashamed about their love of television. In fact they just love to be entertained.

    ‘We May Be Losing The Race’ For AI With China: Bob Work – US defence establishment think that they may be losing the race for AI with China.