Categories
Links

Anti-Virus and Windows Vista

From Ben Farthi:

In my role as the head of Microsoft security, I personally spent many years explaining to antivirus vendors why we would no longer allow them to “patch” kernel instructions and data structures in memory, why this was a security risk, and why they needed to use approved APIs going forward, that we would no longer support their legacy apps with deep hooks in the Windows kernel — the same ones that hackers were using to attack consumer systems. Our “friends”, the antivirus vendors, turned around and sued us, claiming we were blocking their livelihood and abusing our monopoly power! With friends like that, who needs enemies? They just wanted their old solutions to keep working even if that meant reducing the security of our mutual customer — the very thing they were supposed to be improving.

Anti-virus programs remain a problem in terms of the attack surface they can open up. This surface, combined with the failure of many products to effectively identify and act on malware signatures, means that consumers tend to put far too much trust in products that often function poorly at best.

Categories
Roundup Writing

The Roundup for January 6-12, 2018 Edition

The Descent
The Descent by Christopher Parsons

I was listening to ‘Tips from the Top Floor’ this week and, in response to the question of where a listener should consider posting their photos online, Chris Marquardt launched into a good series of questions about why people share news, photos, and other media online. Is it to draw attention to things? Is it to generate likes? Is it to elicit feedback? Or is it for some other reason?

It’s not the first time that I’ve thought about why I, personally, produce and share materials. And there are very different reasons for how and why I write and share in different mediums. Some venues, like Twitter, are where I and my professional colleagues tend to share information with one another while also engaging in (limited) conversations. My professional website, today, is a space where I publish mostly- or totally-complete work to make it accessible to colleagues who are interested in my longer-form materials. My personal website, Excited Pixels, is largely for me: I write, and collect information, because doing so helps me think about the issues and products that I find interesting or noteworthy. I’d be lying if I said I always shared or linked material here that I thought was interesting but my goal is to at least have some material to go back through.

Other places, like Flickr when I used it, was where I stored my photos in the case of a serious data disaster like a hard drive crash or house fire. Earlier social networks were really used to share information with my friends (as opposed to colleagues), though I’ve largely stopped publicly writing about deeply personal or day-to-day content at this point.

There was one major new social network service that I regularly used last year: Instagram. It was very, very helpful in forcing me to take more photos and get a lot more comfortable with my cameras and some basic editing software. I can see a difference in the photos I take a year later but, equally as important, I can get the kinds of photos I want faster because I understand my gear a lot better today. I did enjoy looking at really amazing photos on a regular basis but found that the site both takes a lot of time, in part because the almost daily curation of content was a pain in the bum. Furthermore, the time that I spent there meant I wasn’t spending time elsewhere, such as here, or engaging in any number of other pursuits.

This year my ‘new’ social network to try out is micro.blog. And to be honest I don’t know exactly what I think about it. As a plus, the people who are currently using it produce a lot of signal and not a lot of noise, and the blogging tends to be more personal than is common today. It feels like a community of people who have, and are, coming together. It’s a new network and so there are UI things that are still being developed, and the actual way that it works remains a borderline mystery to me,1 but it’s interesting to watch. And why do I post there? I…don’t entirely know. In part because I’m curious to see how the network develops: it’s sort of like watching Twitter, back when I joined, but where most of the users are more mature and self-aware and mindful of what is being posted.

I’ve always tended to delete almost as much content as I post, not so much because I self-censor2 as because I want to be careful and mindful in what I permanently add to the Internet. One of the benefits of blogging in different venues since the early aughts is that I lived through the blowback that can arise when the stakes were relatively low and consequences minimal. That’s less the case today as a result of the memory of the ‘net combined with the speed at which errors can spin out of control. What once could be forgotten, even online, is now likely semi-permanent at best, and the speed at which an error can go viral, today, is unlike almost any other time in history. Still, the questions raised by Chris apply as much to text-based social media and content production and sharing as they do to photography. It’s helpful to be reminded periodically that the best content is that with which we deliberately engage.


Related to photography, one of my personal goals for this year is to print more of my stuff! The last time I did a lot of printing of my own material was in 2016 and I really want to refresh my frames!

There are a few different ways I’m planning on making my photos a little more physical. First, I’m going to be printing a ‘best of’ album for 2017. I imposed a 50 photo limit to make me cull, cull, and then cull a lot more. In my initial analysis what’s most striking is that while I might not think that the photos are necessarily the best technical shots I took, they all possess similar kinds of tension and drama. So over the next few months I think that I’m going to consider what went into getting the ‘best of’ shots and then seeing if there are interesting or novel ways to better fill my shots with more drama.

Second, I’m going to be printing a bunch of photos on canvass for the first time! At the moment I’m thinking I’ll try printing a bunch of 8×8” black and white photos and, above them, 2-3 much larger colour prints (likely in gold frames) to draw some contrast on the empty wall that I have available to me.

Third, I’m going to probably print a bunch of 4×6 shots for the purpose of sending them to family members. I’d like to include a short message on each of the photos; it gives a nice thing to put up on a fridge or wall3 and also a physical artifact with my thoughts about the recipient or whatever is on my mind at the time. I’d actually intended to print and send these to my dad and stepmother last year, in an effort to start repairing our relationship, but sadly wasn’t able to. But I don’t see why a good idea can’t be recycled and used to maintain the relatively good relationships I have with my surviving family members!


Quotation That Resonated With Me

“Belief, as I use the word here, is the insistence that the truth is what one would ‘lief’ or wish it to be. The believer will open his mind to the truth on condition that it fits in with his preconceived ideas and wishes. Faith, on the other hand, is an unreserved opening of the mind to the truth, whatever it may turn out to be. Faith has no preconceptions; it is a plunge into the unknown. Belief clings, but faith let’s go.”

-Alan Watts

Amazing Videos

https://m.youtube.com/watch

Great Photography Shots

I really appreciated Helena Georgiou’s portfolio, where she captures ordinary people passing by interesting and vibrant parts of the urban landscape.

Person walking across bridge

Black and white umbrella on yellow grid

Woman in blue and White walking along a yellow, blue, and white wall.

Music I’m Digging

Neat Podcast Episodes

Good Reads for the Week


Footnotes

  1. Little things like…I have no idea what I’m paying a monthly fee for, exactly. I think I need to pay to be a member of the network, or to post to the network, or something? But I really have no idea and the support documentation when you sign up is utterly unclear just how things work, or why, which makes sense given its relative youth and the technical sophistication of a lot of its early members. I have faith this will improve as its user numbers grow. ↩
  2. Or, at least I don’t self-censor too often. Except when I need to do so to avoid legal jeopardy. ↩
  3. Some of my family have almost entirely bare walls…so I can imagine these photos migrating onto at least one person’s walls. ↩
Categories
Links Videos

Oprah Winfrey’s 2018 Golden Globes Speech

I have no idea whether or not this speech might herald Oprah’s potential entry into politics as a candidate, or as an effort to leverage her reputation and power to equalize power imbalances in the media and entertainment space, or as part of another activity that she plans on undertaking. What I do know is that her speech is amazingly powerful and has parallels with some of the best speeches of Obama that launched him as a candidate: if this was her political ‘coming out’ speech then it’s remarkably impressive in its accessibility to the general public and depth of meaning and importance to the public writ large.

Categories
Roundup Writing

The Roundup for December 30 – January 5, 2017 Edition

Climb
Climb by Christopher Parsons

I’ve long planned a lot in my personal and professional life. I keep financial roundups so that I can see how I’m faring through and across years, periodic emotional evaluations, and live by my weekly and quarterly professional schedules.1 But what I’m doing is only kinda-working. So I’ve been casting about for a new process to not just hold myself to account but to hold myself to better set goals and accomplish my tasks at hand.

I’m considering adopting shortened planning periods (e.g. 10 week planning cycles, with a 2 week ‘buffer’ for recollection, learning, evaluation, and next-cycle planning) and will likely experiment with this approach to professional goal setting and project completion. But I also want to get better at reflecting on my annual themes and goals. To that end, I was interested in what Michael Karnjanaprakorn (of Skillshare) wrote about planning his ‘ideal’ year.

Specifically I was interested in how he reviews his monthly and weekly goals. In writing about monthly goals, at the end of each month he evaluates:

  1. From 0–10, how do you feel you are doing?
  2. What were the highlights and lowlights?
  3. What were the biggest lessons learned?
  4. Review your goals and assess your progress. Did you spend your time on the right things? If not how will you improve next month?
  5. Write down goals for the upcoming month.

I’ve been really bad at reviewing my monthly (and quarterly) goals but that’s a result of why I’ve historically set and logged professional goals: I’m just really bad at remembering all that I’ve done in any given year, and so fall into deep funks if I can’t periodically go through the past year and realized ‘oh, hey! I’m actually doing a hella lot of work, and am advancing both my own projects and those of colleagues and partners!’ After years of doing this kind of goal-tracking I want to get better at longer-term tracking that is less done for just mental health reasons and more for organizational accountability reasons.

So, to try and get better at reviewing longer-term goals I want to try something like what Michael has outlined. But, at the same time, I want to figure out a way of nicely presenting this information a glanceable digital format; all of my weekly tracking is on paper and so it’s not particularly conducive to understanding longer-term trends that exceed a month or two.

With regards to weekly updates, Michael evaluates progress on monthly and weekly goals. Specifically:

  • Review annual & monthly goals
  • Review last week’s progress
  • Review habits
  • Plan weekly priorities (3 personal & 3 work)

I’ve been good at reviewing my last week’s progress and thinking about weekly priorities but less good at either thinking about habits or how activities really advance my longer-term goals. So I want to adopt some of these kinds of reviews as well.

But the area that I most need to focus on surrounds setting longer-term personal life goals. I’m pretty good at professional goal setting: I’ve been setting and hitting the big ticket items over the past decade or so. But I don’t have really good visions for what I want to happen in my personal life.2

To this end, I’ve adopted a series of personal goals this year that aren’t just about reforming habits but are more focused towards longer-term aspirations. I’m going to be curious as to how those really work out but, to be honest, I just want to try and envision what my non-technical personal goals might be.3 If I can spend a year thinking through what I want to do with my personal life over the next 5, 10, and 20 years, and have some discrete strong ideas, then I’ll really be happy regardless of how well I accomplish the more technical personal goals I’ve set for myself this year.


Companies are doing everything they can to ensure that you own a speaker and/or microphone device that is hooked into their virtual assistant. Microsoft is trying to do it with Cortana. Google with, well, Google. Amazon with Alexa. And Apple with Siri.

For a long time it’s seemed like the assistant that comes with your chosen smartphone would act as the pathway into any given virtual assistant. While some might have multiple assistants on the same device — by way of installing the assistant in a separate application — it was unlikely that the secondary assistants would ‘take over’ your daily operations. And given the failure of Amazon’s Fire Phone, Amazon was likely out of the running for establishing the most dominant assistant in the United States.

But then along came Amazon’s smart speakers and the landscape of smart speakers and Alexa in the continental United States has changed dramatically. As noted by M.G. Siegler:

Amazon is winning this battle because they’re putting Alexa everywhere. Some of this is thanks to third-parties, but a larger part is the strategy to sell devices such as the Echo Dot for $29. At such prices, it’s not only a no-brainer to get one to at least try out — it’s a no-brainer to get a few of them to place all around your house. If this is the winning strategy — which I believe it to be — Apple cannot compete with this because it’s not in Apple’s DNA to run this type of playbook.

I think that one the one hand Siegler is very correct: Amazon is fast becoming a dominant player in the United States. But there are a few limitations to his (admittedly brief) analysis:

  1. Amazon’s Alexa, by being as cheap as it is, lacks the prestige of Apple’s brand and, by extension, Siri’s exclusivity;
  2. Apple’s ‘moat’ which is created around their infrastructure by only letting Siri be the default virtual assistant means that a lot of non-price conscious users will keep waiting and using Apple products;
  3. Alexa is a very United States-focused product; the speakers are cheap by not essential to conducting daily life or business. Contrast with smartphones which are requirements for daily life in many areas of the world; this means that even as Alexa floods the U.S. market the emerging economic regions of the world will continue to adopt Android (i.e. Google) and, to a far lesser extent, Cortana and Siri.

While the ‘threat’ to Apple of Alexa’s spread-by-speaker is linked to people buying them in droves I think that Amazon’s smart speakers are fundamentally poised to intrude into Google’s market and less Apple’s. Moreover, while people tend to only buy speakers once in a few years4 that tends to be the case because they’re expensive. So if people are only spending $100 or so on speakers…will that mean they’re disincentivized to buy ones that sound significantly better to play music? For consumers that purchase the HomePod they’re unlikely to replace the one or two they buy every few years, whereas if someone dropped $60 on Amazon speakers they might be tempted to just shift over to Google’s own (equivalently priced) offering or even to Apple’s or Sonos’ more expensive, and better sounding, premium offerings.

I think that the real threat to Apple or to Google will come as consumers purchase the more expensive and, by extension, better sounding, speakers. Those kinds of devices are unlikely to be replaced and will function as another kind of ‘moat’ that will contain consumers in a given virtual assistant ecosystem. Though it would be pretty amazing to see a world where people, when selling their phones second-hand, also end up selling their speaker sets alongside them to truly switch ecosystems…


Great Photography Shots

I’m absolutely loving some of the 100 best iPhone photos of 2017 which have been collated by iPhone Photography School. A few examples:

Music I’m Digging

Neat Podcast Episodes

Good Reads for the Week

Cool Things

  1. Ok, so I sometimes blow the quarterly schedules but I hold myself to account for why they get blown. ↩
  2. To some extent my ‘success’ in planning long-term professional goals has been tightly linked to a historical failure to balance my work and life: my work entirely dominated everything I did and who I was. ↩
  3. Technical goals being things like reduce student loan debt by X or learn Y new recipes. ↩
  4. I’ve been using the same 2.1 speakers attached to my TV for over a decade at this point and not really tempted to replace a perfectly good set of speakers for something else that would be equally perfectly good. Except for maybe a pair of Apple HomePods… ↩
Categories
Links

Meltdown/Spectre Explained To The Public

Robert Graham has helpfully explained what the Meltdown and Spectre vulnerabilities mean for most end-users. In short: patch now and things should be ok. But chipmakers and OS vendors are going to have to rethink some baseline ways of doing business.

Categories
Links Writing

WordPress Supply Chain Attacks

Per Wordfence there are four reasons for supply-chain (i.e. plugin-based) attacks on WordPress installations:

The first reason is simply scale. According to w3techs, WordPress powers 29.2% of all websites – a massive user base to go after. In addition, at the time of this writing there were 53,566 plugins available for download in the official WordPress.org plugin repository. That is a lot to work with on both fronts.

Secondly, the WordPress.org plugin directory is an open, community-driven resource. According to the plugin guidelines page, “It is the sole responsibility of plugin developers to ensure all files within their plugins comply with the guidelines.” This means that while there is a small team tasked with managing the plugin repository and another small team focused on security, ultimately users rely on plugin developers to keep them safe.

Thirdly, most WordPress sites are managed pretty casually. Making a change to a website at a larger company might include code review, testing and a formal change control process. But that’s probably not happening consistently, if at all, on most smaller websites. In addition, many site owners don’t monitor their WordPress sites closely, which means malware can often remain in place for many months without being discovered.

Lastly, the WordPress plugin repository has a huge number of abandoned plugins. When we looked back in May, almost half of the available plugins hadn’t been updated in over two years. This represents a great opportunity for ne’er do wells looking to con unsuspecting plugin authors into selling something they created years ago and have moved on from.

The aforementioned points outline why acquiring and infecting WordPress plugins is a reasonable way of penetrating WordPress installs. However, I think that Wordfence is missing the most important reason that such attacks succeed: few actual users of WordPress are technically component to monitor what, exactly, their plugins are doing. Nor are the shared hosting services particularly good at identifying and alerting technically-illiterate users that their sites are compromised and what the site owners need to do to remediate the intrusion.

Trying to get individual users to more carefully monitor how their plugins work is a fool’s errand. What’s needed is for hosts to provide a community service and actively not just identify hijacked plugins (and sites) but, also, provide meaningful remediation processes. User education and alerts aren’t enough (or even moderately sufficient): companies must guide site owners through the process of cleaning their sites. Otherwise malware campaigns aimed at WordPress will persist and grow over time.

Categories
Links Photography

Photographic Rules and Human Physiology

Ming Thein:

We’ve touched on the cliches, we’ve touched on the physiology (much more detail in this and this article) but we haven’t touched on some things that generally make sense; I use the term ‘generally’ because as always there are exceptions dependent on the subject, scene and communicative intent of the photographer. Whilst for instance hard shadows usually make for interesting architectural images, they aren’t always so good for senior portraits or product photography. But this can be simplified into a logical statement like “shadows can assist with spatial orientation of a composition, and enhancing texture” – which I think is legitimate. But ultimately, the photographer has to decide if they actually want an obvious spatial orientation or not – they may not, for instance, if the intention is to make an extremely abstract composition. The example images given deliberately violate at least one, sometimes more, of the commonly bandied photographic rules – yet to my eyes at least, they still work.

I hadn’t really considered how the human body helps to dictate or guide the ‘rules’ of photography. While Ming Thein’s discussion is brief it’s perhaps useful for opening up new ways of thinking about the photos that we choose to take, and how deliberate shots vary from snapshots.

Categories
Roundup Writing

The Roundup for December 23-29, 2017 Edition

Bright Fathers by Christopher Parsons

It’s the time of year when people reflect on past annual resolutions while beginning to think about what resolutions they’ll ‘commit’ to in the coming year. I enjoy the idea of establishing annual targets and goals. Not just because it’s fun to imagine how great life would be if you hit them all, but because it provides an ongoing sense of direction in what is often a rote world. More than that, resolutions, goal setting, or whatever else you call it are helpful for providing a lens through which to reflect on a year gone by.

I had one standard resolution, which I absolutely failed to make possible, and a host of them that were far more successful. I fully exited consumer debt hell, increased monthly student loan payments, photographically documented many of the major events in my life, dealt with the last administrative aspects of my last relationship, and mostly righted my financial ship. All of those were major life accomplishments and have done things like change how I visually see the world every day, how I experience my relationships with money, and how I approach my relationships today. It’s not just that I finished something but that in the course of undertaking a series of activities I’ve opened up entirely new (and, arguably, healthier) ways of seeing the world.

But there were other things that I accomplished that I think are as important as those goals that were set last year. I think I’m most proud of the fact that I can see ways in which I’ve grown emotionally. In specific, in my desire to avoid some of the mistakes of my last relationship I’ve had honest and oftentimes painful conversations that were based on what I believe to be right for me; rather than subsuming myself to make life easier I’ve just been me, even when doing so might cause challenges in my relationships. Such challenges, however, are healthy insofar as strong areas of disagreement aren’t indications of a lack of love but, instead, of a healthy set of egos that simply must come to a consensual agreement on how to proceed. Learning how to love in a healthy way has been scary while also amplifying my ability to be present and with others in ways I never understood as possible.

I’ve also managed to overcome some long held fears that were the result of bullying I experienced while growing up. The result is that I can make healthy choices for my body without having a voice in the back of my head that sabotages my efforts to be fitter, eat better, and be happier in my own body. Getting over those particular demons is especially important, in my situation, given that I’m creeping up on the age when coronary diseases start to take the lives of the men in my family.

In the coming days I’ll be thinking through the kinds of resolutions and thematics that I want to carry forward into the coming year. Centrally, I think I’m going to have ‘testable’ objectives, insofar as I’ll be able to actually measure whether or not I’ve advanced in some of the hobbies that I’m involved in, while also trying to find ways of deprioritizing activities that are pleasurable but don’t really do much to advance my physical, intellectual, artistic, professional, or emotional wellbeing.


I spent a significant amount of time thinking about the implications of path dependency in socio-technical systems over the course of my doctoral degree. For my work, I hypothesized that similar kinds of technologies in a path-dependent system would unfold in similar ways cross-jurisdictionally. This common unfolding would take place because once technological development began down a particular path, other paths would be foreclosed and a common end would be reached regardless of regulation, policy, or law.

In the work I did, this dependency wasn’t actually evidenced with much regularity. But some of that was because the technologies I was looking at were heavily socialized: they were used for a range of different tasks and, as such, their development impetuses were often decidedly non-technical. In contrast, the development of Transport Level Security (TLS) has a kind of path dependency that is notably challenging to deviate from, not just because clients and servers must implement new versions of the protocol but because developers of middle boxes simply assume technology will unfold in a given way and have developed their own technologies based on those assumptions. In reaction, the Internet community has spent a considerable amount of time trying to ameliorate the difficulties that arise when implementing new versions of the protocol, difficulties linked to assumptions as to how the protocol would, and will, develop.

Cryptographers are increasingly talking about the problems associated with adopting new versions of TLS as ‘joints’ ‘rusting shut.’ As discussed by Cloudflare, in the context of middleboxes:

Some features of TLS that were changed in TLS 1.3 were merely cosmetic. Things like the ChangeCipherSpec, session_id, and compression fields that were part of the protocol since SSLv3 were removed. These fields turned out to be considered essential features of TLS to some of these middleboxes, and removing them caused connection failures to skyrocket.

If a protocol is in use for a long enough time with a similar enough format, people building tools around that protocol will make assumptions around that format being constant. This is often not an intentional choice by developers, but an unintended consequence of how a protocol is used in practice. Developers of network devices may not understand every protocol used on the internet, so they often test against what they see on the network. If a part of a protocol that is supposed to be flexible never changes in practice, someone will assume it is a constant. This is more likely the more implementations are created.

It would be disingenuous to put all of the blame for this on the specific implementers of these middleboxes. Yes, they created faulty implementations of TLS, but another way to think about it is that the original design of TLS lent itself to this type of failure. Implementers implement to the reality of the protocol, not the intention of the protocol’s designer or the text of the specification. In complex ecosystems with multiple implementers, unused joints rust shut.

To some extent, the lesson to be taken from the efforts to update to TLS 1.3 is to have protocols which are simpler in nature and with fewer moving parts.1 Another lesson is that it takes years to actually shift the global population of Internet devices en masse to more secure ways of communicating. But perhaps the most fundamental lesson — to my mind — is that the security of the Internet is still trying to mediate and resolve problems which were initially seeded many, many years ago and which may mean it takes up to a decade to fix the specific problems to TLS 1.2.

Built infrastructure such as middleboxes isn’t updated on a regular basis because the infrastructure represents a capital cost. And so even as new protocols struggle to come to terms with the past, they do so by comforming to the paths sets down by previously deployed protocols. Even as TLS 1.3 is deployed and made usable, it will be done so based on how earlier versions of the protocol were designed and then implemented. So the questions that linger include: how will implementers of TLS 1.3 make decisions, and how will their decisions direct the development and implementation of future versions of TLS? In effect: how much will the paths of the past continue to affect how future versions of TLS can be practically — as opposed to hypothetically — developed??


Inspirational Quotation

“Generosity is the most natural outward expression of an inner attitude of compassion and loving-kindness.”

– Dalai Lama

Great Photography Shots

I’ve really fallen in love with some of the shots which were submitted to this year’s Sony Wold Photography Awards.

The Horns at sunrise. © Vincent Chen, China, Entry, Open, Landscape & Nature (2018 Open competition), 2018 Sony World Photography Awards.
The Horns at sunrise. © Vincent Chen, China, Entry, Open, Landscape & Nature (2018 Open competition), 2018 Sony World Photography Awards.
Little Indian. © Virgilio Liberato, Philippines, Entry, Open, Portraiture (Open competition), 2018 Sony World Photography Awards
Little Indian. © Virgilio Liberato, Philippines, Entry, Open, Portraiture (Open competition), 2018 Sony World Photography Awards.
Lunch Break. © Omer Faidi, Turkey, Entry, Open, Street Photography (Open competition), 2018 Sony World Photography Awards.
Lunch Break. © Omer Faidi, Turkey, Entry, Open, Street Photography (Open competition), 2018 Sony World Photography Awards.

Intriguing Video Art

Music I’m Digging

Neat Podcast Episodes

Good Reads for the Week

Cool Product Advice

  1. Per Cloudflare: David Benjamin proposed a way to keep the most important joints in TLS oiled. His GREASE proposal for TLS is designed to throw in random values where a protocol should be tolerant of new values. If popular implementations intersperse unknown ciphers, extensions and versions in real-world deployments, then implementers will be forced to handle them correctly. GREASE is like WD-40 for the Internet. ↩
Categories
Links

A Deep Dive Into Russian Surveillance In The Silicon Valley Area

Via Foreign Policy:

This focus on signals and technical intelligence persisted until much more recently, multiple former U.S. intelligence officials told me. “It was almost like everyone they had there was a technical guy, as opposed to a human-intelligence guy,” one former official recalled. “The way they protected those people — they were rarely out in the community. It was work, home, work, home. When they’d go out and about, to play hockey or to drink, they’d be in a group. It was hard to penetrate.” The same official also noted that San Francisco was integral to the discovery by U.S. intelligence of a new class of Russian “technical-type” intelligence officer, working for the rough Russian equivalent of the National Security Agency, before this organization was eventually folded by Putin back into the FSB. This group, which was not based at the consulate itself, was identified via its members’ travel patterns — they would visit the Bay Area frequently — and the types of individuals, all in high-tech development, with whom they sought contact. According to this former U.S. official, these Russian intelligence officers were particularly interested in discussing cryptology and the Next Generation Internet program.

But it was the consulate’s location — perched high atop that hill in Pacific Heights, with a direct line of sight out to the ocean — that likely determined the concentration of signals activity. Certain types of highly encrypted communications cannot be transmitted over long distances, and multiple sources told me that U.S. officials believed that Russian intelligence potentially took advantage of the consulate’s location to communicate with submarines, trawlers, or listening posts located in international waters off the Northern California coast. (Russian intelligence officers may also have been remotely transmitting data to spy stations offshore, multiple former intelligence officials told me, explaining the odd behaviors on Stinson Beach.) It is also “very possible,” said one former intelligence official, that the Russians were using the San Francisco consulate to monitor the movements, and perhaps communications, of the dozen or so U.S. nuclear-armed submarines that routinely patrol the Pacific from their base in Washington state.

All in all, said this same official, it was “very likely” that the consulate functioned for Russia as a classified communications hub for the entire western United States — and, perhaps, the entire western part of the hemisphere.

There is a lot to this very long form piece, including descriptions of Russian intelligence operations and communications patterns, how lawful Russian overflights of American territory might be used for a variety of intelligence purposes, and the Trump administration’s likely cluelessness about why closing the Russian consulate in San Francisco was so significant. But most interestingly, for me, was how the consulate likely functioned as an outpost for Russian signals intelligence operations, both due to the depth of analysis in the article but also for what it tells us about how Western-allied consulates and diplomatic facilities are likely used.1 In effect, the concerns raised by former FBI and other American counter-intelligence officers speaks to how America and her allies may conduct their own forms of surveillance.

  1. In a provincial sense, the concerns and opinions espoused by American counter-intelligence officers also raises questions as to the role of Canada’s significant number of diplomatic facilities scattered throughout China and other regions where the United States is more challenged in building out State Department facilities. ↩
Categories
Links Writing

The Dangers of Policy Learning

Via the New York Times:

Seizing on immigration as the cause of countless social and economic problems, Mr. Trump entered office with an agenda of symbolic but incompletely thought-out goals, the product not of rigorous policy debate but of emotionally charged personal interactions and an instinct for tapping into the nativist views of white working-class Americans.

Donald Trump isn’t so much tapping into ‘nativist’ views as, instead, exploiting citizens’ unawareness of the benefits of both immigration and trade. Immigrants contribute to the tax base, take less time off, and their direct descendants also contribute more to the tax base than ‘long-term’ citizens. Immigration is a net gain for ‘regular’ American workers but they haven’t been told just how, and why, their own lives and the social benefits they draw on are significantly improved by immigration into America.

Even as the administration was engaged in a court battle over the travel ban, it began to turn its attention to another way of tightening the border — by limiting the number of refugees admitted each year to the United States. And if there was one “deep state” stronghold of Obama holdovers that Mr. Trump and his allies suspected of undermining them on immigration, it was the State Department, which administers the refugee program.

The State Department is a core centre of American soft power; it’s programs, educational efforts, international outreach, and more are responsible for spreading American values around the world.1 That the administration is hollowing out the department is the truest evidence that the Trump administration is unaware of how, and why, America has managed to maintain its position in the world. While American military might is significantly responsible for the development and maintenance of its imperial stature in the world, this stature is solidified and extended through an adoption of American values. Such values are more than those associated with the military; they’re linked with those spread by staff from State who promote American values in more formal diplomatic efforts as well as the other range of activities undertaken by consular and embassy staff throughout the world.

It is incredibly hard to believe that the Trump administration is barely one year into a four year term. Given the lasting damage the administration has already done to America’s ability to project power around the world, it’s hard to imagine just what America’s stature will be in a few more years. But what’s most significant is that his administration has learned so quickly how to engage in the deliberate hollowing out of the institutions which have long been hallowed to Americans. This kind of learning is indicative that the administration might be successful on more of its more outrageous campaign promises, promises which are being supported by the Congress and Senate, and thus indicative of a broader series of values (or lack thereof) which are held by many American politicians.

  1. In the interests in disclosure: I will personally be enrolled in the State Department’s International Visitor Leadership Program in the coming fall. ↩