Blog » security

Why is technology news not news?

The public is kept in the dark about today's important issues

July 17th 2008 16:57

Hello.

I’ve been wondering a bit about the way technology news is still ghettoised. I don’t mean news about the latest rubbish web 2.0 start-up with a ridiculous name. I mean quite important stuff. Security problems and the like.

Take what happened last week. A patch to fix a major flaw in the DNS was released. It is pretty important stuff. But the only mentions of it have been ghettoised in the darkest recesses of the technology sections, cordoned off in yellow and black tape with “warning: geeks only” written on it.

I don’t watch the television much these days, so I might be wrong. But I saw no mention of it on the news. I heard no mention of it on the radio. You certainly don’t hear people talking about it on the streets or in pubs.

You might think, “So what? Security update for X, Y and Z are released every day. You can’t have the news reporting it every day.” But something extra happened with that security update that was released last week: it crippled many users’ computers. Including my parents’ computer.

It is just as well I was still able to use my computer to try and find out what the problem was and how to workaround it. It turned out that ZoneAlarm threw a hissy-fit after Windows XP had updated and prevented users from accessing the internet.

In fairness, the BBC reported this on their website — but that’s not very useful if you’ve got no internet. Perhaps there are still people scratching their head about why they’ve not been able to access the internet for the past week.

The problem is twofold. One, the mainstream media seems quite averse to any technology story unless it’s to do with [say this like a caveman] “GOOGLE” or “APPLE”. Or “GOOGLE”. Simply, if you want to find out anything meaningful about technology you have to really know where to look for it.

And this brings me on to the second part of the problem. The people who don’t know where to look for information are also the most vulnerable users. There are people who, for whatever reason, can’t be motivated to take proactive measures to prevent themselves from the various security issues that inevitably arise when you use the internet.

I have a friend who bought a new computer a few weeks ago. The other day he complained to me that his new computer has already got spyware on it. The thing is that it’s not difficult to protect yourself really.

I’m not really a computer expert in the slightest, but I know the basics of how to protect myself — essentially keep all your software updated with the latest patches and don’t click any dodgy links. I don’t think it’s really a difficult concept. And — touch wood — these basics have worked for me. Since I got my own computer early last year I’ve never had anything worse than a tracking cookie on my computer (as far as I know — I just know that this is an invitation for my computer to explode under the weight of pop-ups tomorrow…).

But even simple measures like these that anyone can take are difficult to get through to some people. So many people still treat computers with awe. It is sometimes easy to forget how foreign computers are to many people.

I remember a couple of years ago when there was a really bad signalling failure on the train line into Edinburgh. Basically every train was cancelled. An old lady pointed to the automated departure monitor and asked why it said a list of trains towards the bottom of the screen were still listed as being on time.

This is what she said in protest (as though it would make her more likely to get on a train to Edinburgh): “I thought computers were wonderful things that never ever went wrong.” But even my basic knowledge of how computers work told me exactly why the trains were still listed as being ‘on time’ — because they hadn’t even departed from their start station, so hadn’t passed any sensors and weren’t technically late at all. The computer was none the wiser for obvious reasons.

This can be put down to the old issue that people in their thirties and younger have been using computers for almost all of their lives and understand what a computer is good for and what it isn’t. Youngsters who have lived with computers all their lives understand how a computer works, but for many people older than that computers just work by magic.

The thing is, that divide between young and old is not so clear cut as I used to think. I was listening to iPM yesterday and there was an interview with Clive Sinclair. He pointed out that back in the 1980s computer users really understood computers because they had to in order to get them to work. Today’s youngsters growing up with computers generally don’t understand computers at all.

So we come back to my friend who is the same age as me and has a problem with spyware. I have had a few conversations with him where I have tried to persuade him to use Firefox. For him, the internet is the internet and he doesn’t understand how one browser can be better than another. Even though I have told him about all the superior features and better security that a browser like Firefox or Opera can provide, he persists on using Internet Exploder version bum point poo.

Many people, through ignorance, don’t take the simple measures to keep themselves safe on the internet. I’ve had a look at the stats for this website to see what bad browsers visitors to this site are using.

In the past month, an amazing 20% of visitors used Internet Explorer 6. This is a web browser that was originally released seven years ago and last updated four years ago. It is notorious for its security problems. The more up-to-date Internet Explorer 7 was released almost two years ago.

You would expect Firefox users to be smarter, right? Not always. In the past month, 243 Firefox users that visited this website were using a version of the browser that is considered unsafe (which I defined as 2.0.0.14 and below). This included 19 people using 1.5.0.12, 11 using 1.0.7 and 8 using 1.5.0.3. Most amazingly, 4 visitors were using Firefox 0.9.1, a browser that has been out of date for four years. I dread to think what kind of security problems these users have been getting themselves in.

It got me wondering. If this many people are using dodgy browsers, how many people are still trying in vain to unsubscribe from spam emails? How many don’t know that even viewing an image in an email alerts a spammer that your email address is active? You could go on.

I don’t mean all this in a preachy kind of way. I completely understand why it is difficult for people to keep up to date with all the security issues that arise. I just find it really frustrating that simple awareness issues are not, well, made aware to people.

Things don’t get much more ubiquitous than the internet. It is impossible to imagine that someone growing up today will not be a regular internet user in some form or another. And there are real dangers on the internet that aren’t to do with [say this like a caveman] “PEDOPHILS” and “CYBER BULLIES”. But the media reports on made-up dangers like “KNIVES” and “YOOFS” and “KNIVES” as though we are on the verge of bladeageddon.

Yesterday I was listening to Digital Planet. They had a chap called Stefan Frei on reporting that around 60% of all internet users are using an out-of-date browser. He had a really smart way of thinking about software security. You should think of software as being perishable, just in the same way as foodstuffs. You wouldn’t eat a mouldy slice of bread, so why would you use a browser with a huge security hole in it?

It’s a really smart analogy that should be spread far and wide. It’s just frustrating that the place I heard it was on Digital Planet, which is probably listened to mainly by people who already know that they should be updating their browsers.

Rate: +1 (Votes: 1)
Loading ... Loading ...

Facebook Applications are great… (part 1 of 2)

June 2nd 2007 15:17. Updated: June 2nd 2007 22:35

Sorry I’ve not been posting for the past couple of days. I’ve been keeping myself busy at some other place. More on that later. I will get round to everything I said I would though!

In the meantime, I have some thoughts on Facebook, which seems to have become a phenomenon over the past couple of months. Two or three months back it seemed to reach a tipping point. It is now no longer the preserve or procrastinating students.

Now Facebook seems to have made itself the social network to be on for sensible grown-up types. I heard it mentioned on the 6 O’Clock News recently — and that really is a sign, I think (have you ever heard LiveJournal (except in the context of “suicidal mad gunman had a LiveJournal”) or even Flickr mentioned on the news?).

It is easy to see why Facebook attracts that kind of audience. MySpace and Bebo are a full-on assault on the eyes (and sometimes ears), not to mention near enough impossible to navigate sensibly. Facebook has your profile in a pleasant blue interface which has a sensible, easy-to-use navigation system. Tweenagers may cry because they can’t put stupid pink glittery things on their profiles — but the rest of us are rejoicing.

But Facebook are not resting on the laurels of their new-found mega-popularity. Because it seems to me as though, of all the social networks out there, Facebook is the only one that does much in the way of innovation — and it does it by the bucketload.

When Facebook opened its doors to everyone, its current members (ie. students) were up in arms. But it turned out to be the key to the site’s eventual popularity.

When Facebook introduced its news feeds, people shrieked about the privacy concerns. But that was a storm in a teacup if ever there was one, because Bebo has subsequently made a weak copy of it without anyone batting an eyelid.

Also, the “privacy concern” completely ignored the fact that Facebook has awesome privacy features that I have never seen anywhere else. For a start, your profile is completely private to anyone outside your “network” (ie. university or geographical region). Then it can be private to people even inside your network. And then you can even have a “limited profile” so that you can even choose which of your friends has access to which information.

In fact, I feel so safe on Facebook that it is the only place on the web where I have ever posted my phone number. Many others even put their address on Facebook, and it doesn’t feel like a concern. Could you imagine putting your postal address on MySpace? I hardly think so.

Facebook’s latest rabbit out of the hat is its brilliant Facebook Platform, and Facebook Apps. They’re a bit like widgets of the sort that you can find on MySpace and Bebo — but really smartly done.

MySpace is famously annoying for having profiles with a million songs and videos autoplaying. Facebook has very cleverly prevented this from happening by requiring visitors to click before anything annoying happens (and then it’s your own fault damnit!). Just in the same way as Facebook has stopped users from having colour schemes that are like daggers in your eyes, they have sensibly taken precautions to make widgets not get in your way.

Once the initial excitement about Facebook Apps died down, I became a bit worried that Facebook would become a bit like MySpace, with annoying widgets in your face everywhere. But now I have no such concerns. I know I will still be able to visit a profile without being confronted by ugliness (I don’t mean the profile pics, BTW).

The other clever thing that Facebook have done is opening up widgets to everyone. On Bebo, the choice of widgets is really weak. If you really love dodgy Flash photo slideshows, you will love Bebo widgets. But anything apart from that? No luck. This is no doubt because, rather bureaucratically (although understandably, given security concerns there might be), Bebo only allows widgets with “approved partners”.

Yet, Facebook has developed a secure “platform” that allows me to embed my information from other websites like Twitter, del.icio.us and (belatedly) Last.fm. In the space of a week, I have not got everything I’ve wanted Facebook allow me to put on my profile.

A bit bizarrely, Facebook gave websites of arse drizzle prominence over Last.fm, who were not given advance notice of the Facebook Platform. Meanwhile, iLike was. Unfortunately, iLike is the most popular Facebook app at the moment. Everytime I see that “one of my friends has added iLike”, I think of this.

Inexplicably, Mog was also given advance notice. Mog is like Last.fm, but it does everything in a much less efficient and more invasive way. And it’s brown.

Anyway, despite the fact that I was unable to put Last.fm on my profile straight away, there is no doubt that Facebook have already set the standard when it comes to widgets — mostly because they have managed to make it so that it isn’t annoying. Widgets are hardly revolutionary. But Facebook have implemented them with such class that it feels revolutionary.

I suppose Facebook also deserve kudos for calling them “applications” rather than the literally meaningless “widgets” (or, even worse, “gadgets” on Windows Vista). Mind you, this is because Facebook say that their applications are more fully-featured that standard widgets anyway, because they integrate into the social graph, whatever that is.

I see it, because the Last.fm application lets me compare my music profile to that of others on Facebook who also use the Last.fm app. Apparently RSSbook shows you what RSS feeds your friends are subscribed to, and suggests feeds that might interest you based on that information.

It is not quite perfect. I would like my Twitter status to automatically become my Facebook status. I would prefer my del.icio.us links to be imported into my “posted items”. But I can understand why they have not allowed this.

All-in-all, sitting here today, it is difficult to see why anyone would want to sign up to a social network that isn’t Facebook. I’ll have more on this in my next post (because this one is already long enough).

Update: Part two has been posted here.

Rate: No votes yet
Loading ... Loading ...

Given a bad name

October 8th 2006 18:51

Bobbie Johnson has found out why he is often asked questions at airports. But it seems as though Garry had better watch out aswell. Oo-er.

Rate: No votes yet
Loading ... Loading ...

You realise that everybody can read that?

September 17th 2006 17:19

I guess people are just really stupid. Time for people to wise up about the web. It’s dead easy. If you post something on the internet, people can see it. That means: authority figures, parents, current employers, potential future employers, everybody.

Top Law Student (down at the moment; mirror here) has a post reminding you that your MySpace page is available to anyone. (I guess even if you set your MySpace to ‘private’ it won’t really work because MySpace is crumbly and insecure.) There is also the discussion on Digg.

I had assumed that most people are aware of this. Employers do look up job applicants on Google. It’s a basic security check; common sense if you’re an employer. And when they search for you, they see all the shit you put on the web under your name. That includes all of the ridiculous embarrassing stuff you put on MySpace, Facebook, Bebo, everything.

If this scares you, then follow the advice on Top Law Student. Delete your MySpace page, or change it all so that you’re anonymous. Me? I will just be sensible about what I put on MySpace, this blog, and anywhere else on the internet. Obviously that limits what I can write about. But life isn’t perfect. If you wouldn’t put it on a billboard on the street, don’t put it on the internet. Simple as that.

It is an interesting issue though. I reckon the number of young people who have some kind of web presence — be it a blog like mine or a MySpace or a Bebo or whatever — is probably approaching something like 90–100%. The vast majority of them are written as though only friends can read them.

I guess employers would have to be really naive to expect all of their employees to be squeaky-clean. But it is obviously rather better for them not to be 100% aware of your debaucheries. But if everybody puts embarassing shit on their MySpace that could put potential employers off, employers will probably find themselves fast running out of good candidates. They will probably have to start choosing the least-worst person for the job instead of (in their eyes) a really good person.

Of course, now that I’ve given a big lecture on it, I will probably find myself being pwned by a potential employer for something I’ve written on my blog at some point. I’m half expecting one day to wake up and find an angry crowd of lone protesters, each one angry about something different I wrote in the dim and distant past. One despises me for recommending an Autechre album. Another thinks I’m an idiot for siding with Michelin in the US Grand Prix fiasco. A small cluster wants to burn me at the stake because I think the text function on my iRiver is useless.

But I’m willing to take responsibility for what I’ve written. I hope, when I am ready to enter the Big Bad World, I will be able to work in an environment where my blog won’t be an issue. Maybe that’s wishful thinking, but hey, I’m a blogger. That’s just who I am. I don’t see this as a reason to run scared of the internet. I hope my activity is a positive thing.

Obviously it is far too late for me to attempt to hide myself on the internet now. Early on I made a decision not to hide my identity. But at the same time I didn’t force it down people’s throats. For a period I never mentioned my name on this blog. But in the end I decided to actually push my identity a bit more, but to be sensible about what I write.

claimID is one way to do it, but the jury is out on whether or not it’s of any good use. I’ve also devised my own little way (it’s unfinished, by the way) to keep tabs on my internet activity. On the one hand it might seem a bit narcissistic, but hopefully it gives me a bit of control over my identity on the internet.

Rate: No votes yet
Loading ... Loading ...

Facebook fuss has an easy solution

September 6th 2006 16:38. Updated: September 6th 2006 18:45

You have to feel sorry for the folks at Facebook. Despite the fact that they have made no changes to privacy settings, the site’s users are offended, feeling as though their privacy has been invaded. This is despite the fact that Facebook’s new features don’t reveal any data that wasn’t already out in the open in the first place.

So what’s the gripe? Log in to the home page and you see a big list of pretty mundane data about what your friends have done. It’s not very interesting. “X is at home”, “Y removed walking from his interests”, things like that. Hardly earth-shattering stuff — and it’s all stuff that your friends would have seen anyway, just in a different place.

The ‘mini-feeds’ on each user’s profile have caused the greatest upset though. My mini-feed is pretty boring: there are only two entries so far (1. I’m at home, 2. I’ve added my religious views (another new feature) to my profile). But that’s mostly because I don’t use Facebook so much.

Look at somebody else’s mini-feed, and you’ll get a longer list, but it’s mostly things like “X wrote on Y’s wall” over and over again. And, vitally, this is all information that your friends would have seen anyway. So essentially we have all the same stuff, just put in a different place. And have you seen those little crosses next to each entry in your mini-feed? You can delete every single thing if you want anyway.

All this stuff about making Facebook “stalker-esque” is a bit overblown. For starters, only your friends can see all of this information about you. The same people can see the same information as they could before, just in a different place. And if you’re adding potential stalkers as friends on Facebook, then that’s your own sorry fault for treating the friends counter like a gameshow scoreboard.

Also, if you’re complaining about the new layout being too cluttered, did you not notice that you can actually now toggle everything so that it magically disappears? The little arrow next to every heading?

So the fuss is all a bit confusing for me. I guess students always feel as though they have to have something to rebel against. Makes them feel important.

Personally, I’m a big fan of Facebook’s new features. They allow you to keep tabs on your friends without having to traipse through their profile page all the time. And if you don’t want somebody to take an interest, why did you add them as a ‘friend’?

Article via Digg.

Update: Groups for people who are fed up with the complaints: Quit bitching about the Facebook feed! Its easy to fix!; stfu about new facebook features (via).

Rate: No votes yet
Loading ... Loading ...