Less haste, more security

This morning’s observer column:

I ran into my favourite technophobe the other day. “I see,” he chortled, “that your tech industry (he holds me responsible for everything that is wrong with the modern world) is in meltdown!” The annoying thing is that he was partly right. What has happened is that two major security vulnerabilities – one of them has been christened “Meltdown”, the other “Spectre” – have been discovered in the Central Processing Unit (CPU) chips that power most of the computers in the world.

A CPU is a device for performing billions of apparently trivial operations in sequences determined by whatever program is running: it fetches some data from memory, performs some operations on that data and then sends it back to memory; then fetches the next bit of data; and so on. Two decades ago some wizard had an idea for speeding up CPUs…

Read on

Meltdown and Spectre summarised

Lovely economical summary by the UK ICO’s Head of Technology Policy of the two vulnerabilities currently obsessing the CPU-design industry:

In essence, the vulnerabilities provide ways that an attacker could extract information from privileged memory locations that should be inaccessible and secure. The potential attacks are only limited by what is being stored in the privileged memory locations – depending on the specific circumstances an attacker could gain access to encryption keys, passwords for any service being run on the machine, or session cookies for active sessions within a browser. One variant of the attacks could allow for an administrative user in a guest virtual machine to read the host server’s kernel memory. This could include the memory assigned to other guest virtual machines.

Quote of the day

“People worry that computers will get too smart and take over the world, but the real problem is that they’re too stupid and they’ve already taken over the world.”

Pedro Domingos, The Master Algorithm1, (2015)

So what is Twitter really for?

This morning’s Observer column:

In a way, it’s no surprise that Trump should have taken to Twitter because it has the right bandwidth for his thought processes. Technically, bandwidth is the range of frequencies that a particular communications channel can transmit. The wider the bandwidth, the more information the channel can handle, which is why analog phone lines were OK for voice communication but hopeless for relaying music. Smoke signals are one of the oldest communication channels devised by humans and they were very good for communicating danger or summoning people to gatherings. But as the cultural critic Neil Postman once observed, they were lousy for philosophical discussions. The bandwidth is too low.

Same goes for Twitter. It’s great for transmitting news tersely, which is why an increasing amount of breaking news comes via it (and not just warnings from Trump about supposedly imminent nuclear exchanges, either)…

Read on

Drumbeats

Lest we get too optimistic about 2018, this from Eliot Cohen, Director of the Strategic Studies program at Johns Hopkins:

There are sounds, for those who can hear them, of the preliminary and muffled drumbeats of war. The Chinese are reported to be preparing refugee camps along the North Korean border. Resources are being shifted to observe and analyze the North Korean military. Mundane logistical processes of moving, stockpiling, and updating crucial items and preparing military personnel are under way. Only the biggest indicator—the evacuation of American dependents from South Korea—has yet to flash red, but, in the interest of surprise, that may not happen. America’s circumspect and statesmanlike secretary of defense, James Mattis, talks ominously of storm clouds gathering over Korea, while the commandant of the Marine Corps simply says, “I hope I’m wrong, but there’s a war coming.”

Maybe nothing will happen. Maybe Donald Trump, he of the five draft deferments during the Vietnam War, will flinch from launching a war as commander in chief, in which case the United States will merely suffer an epic humiliation as it retreats from as big a red line as a president has ever drawn. Still, lots of people have an interest in war. For Russia, the opportunity to set the United States and China against each other over Korea is a dream come true. For narrow-minded American strategists, it is the only way of cutting the North Korean nuclear Gordian knot. For Kim Jong Un peeking over the edge of the precipice may cause South Korea to break with the Americans, or the Chinese to fight them. For Donald Trump it may be a moment of glory, a dramatic vindication of campaign promises, and an opportunity to distract American minds from Robert Mueller’s investigation of his campaign’s ties to the Russians. And so threats and bluster may turn into violent realities. And if they do, not tomorrow or the next day, but some time in 2018, a Second Korean War could very well make it one of those years in which history swings on its hinge.