Imaginative failure and Ebola

Like many people, I’m wondering what one could do to help the people dealing with Ebola on the ground in Africa. So far, the only answer I’ve come up with is to donate money to the Disasters Emergency Committee. But when I see the modelling predictions coming from the CDC in Atlanta — which predict that if things go on as they are, Ebola will be hitting the 1.4 million mark by January in those countries, I wonder whether most people in the UK or the US are aware of how serious this could be for the world.

Dave Winer pointed me to a must-read piece in Wired, which in turn pointed me to an extraordinary blog post by two risk-communication experts, Jody Lanard and Peter Sandman. They write:

The possibility of an Ebola pandemic throughout the developing world is the scenario that keeps us up nights. We think it must keep many infectious disease experts up as well. But few are sounding the alarm. The two of us are far less worried about sparks landing in Chicago or London than in Mumbai or Karachi. We wish Dallas had served as a teachable moment for what may be looming elsewhere in the world, instead of inspiring knee-jerk over-reassurance theater about our domestic ability to extinguish whatever Ebola sparks come our way. We are glad that Dallas at least led to improvements in CDC guidelines for personal protective equipment and contact tracing, and belatedly jump-started front-line medical and community planning and training. But it doesn’t seem to have sparked the broader concern that is so vitally needed.

Americans are having a failure of imagination – failing to imagine that the most serious Ebola threat to our country is not in Dallas, not in our country, not even on our borders. It is on the borders of other countries that lack our ability to extinguish sparks.

That metaphor of jumping sparks seems to me to be prophetic.

Here’s what they think would be necessary to stop Ebola becoming endemic. Call this the Optimistic Scenario:

The people of West Africa and the governments of West Africa rise to the occasion, radically altering deeply embedded cultural practices, from political corruption to the way they bury their dead.

The epidemic stops spreading exponentially, so the gap between needs and resources stops getting wider every day than the day before.

The world’s nations actually fill that gap, providing enough money, supplies, and people to outrace the epidemic.

Treatment, isolation, contact tracing, and contact monitoring reach the percentage of cases needed to “break the epidemic curve.”

Meanwhile the epidemic doesn’t cross into too many more countries. And all the sparks that land in other countries are extinguished with minimal collateral damage, as has been the case so far in Nigeria, Senegal, Spain, and the United States. (As of the evening of October 23, the U.S. now has a second index case to cope with.)

Fears that sparks will travel more widely and launch new epidemics in Asia, Latin America, and elsewhere prove unfounded.

Or, alternatively, a spectacularly successful vaccine is quickly discovered, tested, mass-produced, and mass-distributed.

Having read it, you can see why I call it the optimistic scenario. It looks implausible, I’m afraid. So what’s the outlook if it turns out to be indeed too optimistic?

What would it be like, Lanard and Sandman ask…

if there are dozens of sparks landing in the U.S. and other developed countries, not just from West Africa but from all over the world?

if healthcare workers won’t come to work?

if cancer patients and HIV-infected persons and children with asthma can’t get their medicines because 40 percent of generic drugs in the U.S. come from India, where production and shipping have halted?

if refugees, under pressure from civil unrest, insurrection, famine, and economic collapse, are pouring across every border – some sick, some healthy, some incubating?

if Ebola in the developing world launches the next Global Financial Crisis?

if the Holy Grail, the deus-ex-machina – a successful Ebola vaccine – cannot be developed, produced, and distributed before all this happens?

OK. So what would it be like? And might it be worth taking the threat more seriously than we are doing? You can see why the markets are spooked by Ebola.

And what are the pharmaceutical giants doing? They previously ignored Ebola because it was a disease that only affected poor people and therefore offered little prospect of commercial reward. (Not a criticism, just a fact.) Are the governments of the world now leaning on them?

Surveillance and its implications

Yesterday I participated in a panel discussion on surveillance in the Cambridge Festival of Ideas. My fellow-panellists were the anthropologist Caroline Humphrey, the computer scientist Jon Crowcroft and John Rust, the Director of the university’s Psychometrics Centre. The session was ably chaired by Charles Arthur, who until recently was the Technology Editor of the Guardian and still writes regularly for the paper.

We each gave a short talk and then there was a fairly lively Q&A session with a large audience. Here are the notes for my talk.

Although this is ostensibly about technology, in my opinion it is actually about politics, and therefore about democracy. Here’s why.

Whatever one thinks about Edward Snowden, he deserves respect for revealing to the general public the hidden reality of our networked age — which is that “surveillance is the business model of the Internet” as Bruce Schneier puts it. The spooks do intensive surveillance without our consent (and, until recently, without most of us knowing.) The companies (Google, Facebook et al ) claim that they do it with our consent (all those EULAs we clicked ‘Agree’ to in the distant past) in return for the ‘free’ services that they provide and we apparently crave. What Snowden has shown is the extent to which we have been sleepwalking into a nightmare.

Because I think that the problem is, ultimately, political in origin and nature, demonising the agencies doesn’t address the problem. If they are collecting the whole goddam haystack (and they are), then it’s because of the pressure placed on them by their political masters — the ‘war on terror’, the political pressure to ‘join the dots’ and the injunction (e.g. from Vice President Cheney after 9/11) to ensure that “this must never happen again”. In that sense, the NSA, GCHQ etc. are just rational actors trying to meet impossible political demands.

If there is going to be any way out of this nightmare, it is effective, muscular, publicly-credible, and technologically-informed democratic oversight. To date, all we have had since 9/11 is what I call oversight theatre. So the existential question for democracies is whether it is possible to do oversight properly and credibly?

One of the most striking aspects of this new ‘national security’ syndrome is the absence of any rational debate about both its effectiveness (Does all this haystack-collecting actually work in terms of preventing major terrorist outrages?) and its cost-effectiveness (Do we get value for money? And how would we know?). These questions seem to be currently off-limits in our democracies. So we have endless debates about the worth and cost-effectiveness of, say, the proposed High-Speed rail line from London to Birmingham, but no such debate about whether the huge sums spent on the NSA or GCHQ are actually delivering value for money. In that context, there’s an interesting paper from the CATO Institute which makes this point well. “Terrorism”, it says, “is a hazard to human life,

“and it should be dealt with in a manner similar to that applied to other hazards—albeit with an appreciation for the fact that terrorism often evokes extraordinary fear and anxiety. Although allowing emotion to overwhelm sensible analysis is both understandable and common among ordinary people, it is inappropriate for officials charged with keeping them safe. To do so is irresponsible, and it costs lives.

Risk analysis is an aid to responsible decision making that has been developed, codified, and applied over the past few decades—or in some respects centuries. We deal with four issues central to that approach and apply them to the hazard presented by terrorism: the cost per saved life, acceptable risk, cost–benefit analysis, and risk communication. We also assess the (very limited) degree to which risk analysis has been coherently applied to counterterrorism efforts by the U.S. government in making or evaluating decisions that have cost taxpayers hundreds of billions of dollars.

At present, the process encourages decision making that is exceptionally risk averse. In addition, decision makers appear to be overly fearful about negative reactions to any relaxations of security measures that fail to be cost-effective and also about the consequences of failing to overreact.

If other uses of the funds available would more effectively save lives, a government obliged to allocate money in a manner that best benefits public safety must explain why spending billions of dollars on security measures with very little proven benefit is something other than a reckless waste of resources.

Our governments have not done this and so far show no inclination to change their ways.

What are the long-term implications of comprehensive surveillance. What happens to human behaviour in a networked goldfish bowl? Psychologists have shown that people’s behaviour changes when they know they are being watched. What happens to entire societies when intensive surveillance becomes absolutely ubiquitous? Here the experience of East Germans or the wretched citizens of North Korea become relevant.

hen there’s the mystery of public acceptance of surveillance — at least in some societies. One of the things that really baffles me is why have the Snowden revelations not caused more disquiet? Which of course then raises the question of whether there is any real hope of ameliorating the situation in the absence of massive public disquiet? Democracies only change course when there’s public sense of a major crisis. My gloomy conclusion is that not much is going to change. Governments and the security services will see little reason for giving ground on this.

I am also puzzled about why there is not more scepticism of the philosophical underpinnings of the “if you have nothing to hide then you have nothing to fear” argument. This seems to me to be pure cant because what it means is that the State is asserting the right to surveill all of your communications. And the contention that bulk ‘collection’ does not infringe your privacy is bogus for the same reason that Google’s claim that it doesn’t read your mail is bogus: it overlooks the capabilities of the digital technology that both Google and the agencies employ. For without automated pattern-matching and machine learning the security agencies would not be be able to ‘select’ targets for what legal pedants regard as true ‘collection’, namely inspection by a human agent. Related to this is the fact that if, for perfectly legitimate reasons, you take positive steps to protect your communications from official (or any other kind of) snooping by encrypting your email or by using Tor for anonymous browsing, then that is seen as grounds for selecting you for further investigation. So protecting yourself from state surveillance for perfectly innocent reasons becomes grounds for suspicion. This not so much Orwellian as Kafkaesque.

Privacy is both an individual and a social good. Yet we treat it as if it were exclusively a private matter. So an individual can ‘trade’ some of her privacy to Google in return for ‘free’ services like Gmail. Gmail then (machine-) reads her mail in order to target ads at her. But if she writes to someone who has not signed up to Gmail and that person writes back, then his/her email is also read by Google, and his/her privacy has been eroded. Jon Crowcroft knows a researcher who will blacklist anybody who writes to him using a webmail address for that reason.

And then there’s the ultimate question: what will be the political response when, despite all the surveillance, the next terrorist outrage occurs? Because we will have other outrages: after all, the NSA and GCHQ did not see ISIS coming. What then? What will our politicians demand? Even more surveillance? It’s hard to see any logical end-point to this. Or at any rate, any end-point that looks good for democracy.

Forthcoming: Constitutional chaos

Yesterday’s YouGov poll suggesting that Labour will lose 30 of the 40 Westminster seats that it currently holds in Scotland means that after the general election in May the balance of power in the UK will be held by UKIP and the Scottish National Party — i.e. two parties which do not accept the current constitutional settlement of the UK.

Interesting prospect.

After Snowden, what?

This morning’s Observer column.

Many moons ago, shortly after Edward Snowden’s revelations about the NSA first appeared, I wrote a column which began, “Repeat after me: Edward Snowden is not the story”. I was infuriated by the way the mainstream media was focusing not on the import of what he had revealed, but on the trivia: Snowden’s personality, facial hair (or absence thereof), whereabouts, family background, girlfriend, etc. The usual crap, in other words. It was like having a chap tell us that the government was poisoning the water supply and concentrating instead on whom he had friended on Facebook.

Mercifully, we have moved on a bit since then. The important thing now, it seems to me, is to consider a new question: given what we now know, what should we do about it? What could we realistically do? Will we, in fact, do anything? And if the latter, where are we heading as democracies?

I tried to put some of these questions to Snowden at the Observer Ideas festival last Sunday via a Skype link that proved comically dysfunctional. The comedy in using a technology to which the NSA has a backdoor was not lost on the (large) audience — or on Snowden, who coped gracefully with it. But it was a bit like trying to have a philosophical discussion using smoke signals. So let’s have another go.

First, what could we do to curb comprehensive surveillance of the net?

Read on…

Value for money in the surveillance business

Has anyone in government done a cost-benefit analysis on bulk surveillance? I mean to say, we’re spending fortunes on this stuff (in the US something like $100B a year ). Does anyone have any idea of whether it’s really worth it? Could we be spending all that dosh more wisely and getting better anti-terrorist results?

Which is why I found this exchange between a questioner and William Binney, the former Technical Director of the NSA fascinating.

Question: Other than making money off of like these NSA contracts, what capabilities do these companies [i.e. defence contractors like Booz Allen Hamilton — Snowden’s employers] *have, what other value are they generating for themselves?

William Binney: Nobody does return on investment at NSA. They don’t.

I mean, if they did return on investment, they would throw away everything except TRAFFICTHIEF and maybe some graphing programs out of MAINWAY– they’d throw all of this away. They wouldn’t have built Bluffdale [Utah], that $2.3B or whatever it is– facility to store data. This is all the data from PINWALE and MARINA and all that stuff is going out there, being stored. So they wouldn’t have to buy that at all. They’d be more effective, because they wouldn’t be buried. So at any rate, that’s what they’re doing.

The exchange comes from an absolutely riveting report of a presentation that Binney gave in which he explained some of the Snowden material.

Bruce Schneier’s next book

Title: Data and Goliath: The Hidden Battles to Collect Your Data and Control Your World

Publisher: WW Norton

Publication date: March 9, 2015

Table of Contents

Part 1: The World We’re Creating
Chapter 1: Data as a By-Product of Computing
Chapter 2: Data as Surveillance
Chapter 3: Analyzing our Data
Chapter 4: The Business of Surveillance
Chapter 5: Government Surveillance and Control
Chapter 6: Consolidation of Institutional Surveillance

Part 2: What’s at Stake
Chapter 7: Political Liberty and Justice
Chapter 8: Commercial Fairness and Equality
Chapter 9: Business Competitiveness
Chapter 10: Privacy
Chapter 11: Security

Part 3: What to Do About It
Chapter 12: Principles
Chapter 13: Solutions for Government
Chapter 14: Solutions for Corporations
Chapter 15: Solutions for the Rest of Us
Chapter 16: Social Norms and the Big Data Trade-Off

Something to be pre-ordered, methinks.

Joe Nye: the Empire ain’t dead yet

Slightly rosy view by the author of the theory of ‘soft’ power.

Over the last several decades, public confidence in many influential institutions has plummeted. From 1964-1997, the share of Americans who trusted universities fell from 61% to 30%, while trust in major companies fell from 55% to 21%. Trust in medical institutions dropped from 73% to 29%, and in journalism from 29% to 14%. Over the last decade, confidence in educational institutions and the military has recovered, but trust in Wall Street and large corporations has continued to fall.

But these ostensibly alarming figures can be misleading. In fact, 82% of Americans still consider the US to be the world’s best place to live, and 90% like their democratic system of government. Americans may not be entirely satisfied with their leaders, but the country is certainly not on the brink of an Arab Spring-style revolution.

The state we’re in

In thinking about the state we’re in, I sometimes gloomily conclude that we need a theory of incompetent systems — i.e. systems that can’t fix themselves. Last night I participated in an interesting discussion about whether perspectives from network theory might be useful in improving public making. As the conversation proceeded over dinner I kept my mouth shut and made some notes in an attempt to sort out the jumble in my head. Here they are, for what they’re worth.

Why are democratic states like Britain struggling to cope with the challenges that now face them?

Some relevant factors:

  • A dysfunctional electoral cycle that makes it impossible to do long-term strategy. Exacerbated by rolling news cycle and tabloid media which make deliberative democracy more or less impossible.
  • The accelerating gap between the speed of technological advance and the pace of legislative and regulatory adaptation.
  • The fact that we have a world that is increasingly dominated by networking and related technologies that few people understand. (“The Internet is the first thing that humans have built that humans do not understand.” – Eric Schmidt)
  • This is exacerbated by the fact that the technology has affordances that make it different from earlier general-purpose technologies. These are: zero marginal costs; powerful network effects; the dominance of power-law distributions; and the possibility of technological lock-in.
  • The tensions between democracy’s need for openness, oversight and accountability and the security state’s need for surveillance and secrecy.
  • The apparent inability of legislatures to devise credible methods of democratic oversight of security services. Analog mindsets trying to cope with digital realities.
  • Law-making that is unduly influenced by corporate (or, in the case of surveillance laws, security agency) interests.
  • Enfeebled or corrupted democratic institutions at all levels: policy and political elites captured by neoliberal ideology and corporate interests; hollowed-out legislatures unable to impose effective control over the executive; apathetic, cynical and disaffected electorates.

Path dependency

  • The options available to us at any given moment are determined by decisions and choices we made (explicitly or implicitly) at earlier points in time. An example: we now live in a networked world the business model of which is intensive surveillance by both state agencies and corporations. The state does it because (supposedly) it is necessary to protect society from terrorism, crime etc. Corporations do it because it enables advertising-funded business models. But those business models were a response to (i) the fact that Internet users from the beginning were implacably opposed to paying for online services; and (ii) that since the key to online success was to get quickly to the point where network effects kicked in, the quickest way to get to that point was to provide ‘free’ services. So we are now coping with the consequences of choices that Internet users made in the 1990s.

Ideological capture

  • Governing elites in most democracies appear to have been captured by neoliberal philosophies which devalue public services and over-value private enterprise. This leads to a failure to appreciate the importance of the state in fostering and enabling long-term technological innovation and development. (All of the prosperity of our current Internet companies is built on a network that was built by the state. The history of most general purpose technologies shows the importance of state funding in various stages in the evolution of the technology.) Yet the idea of “the entrepreneurial state” (to use Mazzucato’s term) is regarded by governing elites as an oxymoron. (Like “military intelligence”?)

How democracies change

  • Reluctantly, slowly and generally only in response to serious crises, of which the most common historically has been the trauma of war. In general (cf David Runciman’s books) they muddle through. But muddling through takes time. The big questions about our current challenges (climate change, managing the networked society) is whether we will have enough time to muddle through.