Dec 082010
 

If anyone has been following the news closely over the last few days, they will be aware of the attempt that the Swedish authorities are making to extradite Julian Assange to face an assortment of sex charges including rape. Even by itself, there is enough suspicion about the timing of this given previous history of the charges to cause any neutral observer to wonder just what is going on here.

For those who have not dug into the details, the charges were first investigated in August 2010 and then dropped before being re-opened. All the while Julian Assange was either in Sweden, or willing to talk to the prosecutor although not prepared to travel to Sweden at his own expense. The escalation to a request for extradition was unfortunately timed happening at the same time as the latest WikiLeaks (linking to a mirror as the main site is mysteriously down) publications.

By itself it is just about enough to cause a sensible to person to say to themselves … “I wonder … Nah!”, but there are other things happening to WikiLeaks.

WikiLeaks appears to be under a continual distributed denial of service attack where many computers are used to send traffic to the WikiLeak servers. There are two sets of servers involved in hosting the WikiLeaks sites – the actual web servers themselves, and the DNS servers hosting the name.

In the case of the web servers, the servers were first moved to the Amazon cloud service in the middle of a denial of service attack – so Amazon can hardly complain about this as it was known about at the time. Yet after less than a week, the site was booted off the Amazon cloud without a public explanation. The suspicion is that political pressure was brought to bear especially given one of the earliest statements about the issue was from a certain Joseph Lieberman – a US Senator.

WikiLeaks then went to a French hosting company – OVH – who have stated that they will honour their contract. Presumably providing that the French courts do not insist that they terminate the contract, which is possible given that the case is under review.

Separately to this, the Wikileaks domain (or “name”) has itself been under attack. Large scale distributed denial of service attacks took place against the EveryDNS infrastructure servers that provide the name wikileaks.org, and every other name hosted by the same infrastructure. EveryDNS took the step of terminating their domain hosting. As of now, the domain wikileaks.org is not available via the DNS servers I run, indicating that either they have not found another hosting company for the name, or their alternative arrangements are under sufficiently serious attack.

Those are the technical attacks.

In addition, a number of financial companies have frozen WikiLeaks accounts preventing funds from being used, or donations being made – PayPal (who admit that their decision was influenced by the US Government) and Mastercard amongst them.

Add all the attacks together and you start to think that there is some kind of conspiracy behind all this – perhaps the US government is waging cyberwar against WikiLeaks. It is almost certain that they have this capability and there are indications that they are annoyed enough with WikiLeaks to do this.

However it is still more probable that this is a combination of :-

  1. Annoyed US (and possibly other) “hackers” making denial of service attacks against the WikiLeaks infrastructure and the associated infrastructure.
  2. Various commercial organisations deciding that it is too much hassle to “help” WikiLeaks and deciding to terminate their contracts.

Probably the harshest criticism should be directed at PayPal who have just said in a TV interview that they received advice from the US State Department that the WikiLeaks site was probably illegal under US law. Well the opinion of a government in a free society should not be enough to condem an organisation, and the directors of PayPal could deservedly be called chickenshit arse-lickers for their actions.

Perhaps you do not believe that WikiLeaks is in the right here. I’m not entirely sure myself – leaking US diplomatic cables is one thing, but perhaps publishing a list of potential targets the US government feels are critical to its security was a step too far. But there is a bigger issue here than “merely” WikiLeaks itself. We are seeing a situation where a website that has not been condemned for their actions in any court of law has been pushed around and to some extent off the Internet by the actions of a few – both people engaged in illegal activities (denial of service attacks) and people making commercial decisions (terminating contracts).

Imagine if you will, this website is something controversial in a country that is considered a pariah by most of the world – Iran perhaps; perhaps they publish allegations with evidence of widespread government crimes and corruption. Iran and supporters of Iran undertake to destroy that website with “cyberwarfare”. Wouldn’t we want that website to be protected in some way ? Perhaps you are thinking that Iran doesn’t have the resources to undertake such an attack; well think again. Many of the largest botnets capable of carrying out widespread denial of service attacks are under the control of organised criminals (spammers) who have less resources than any government – it takes little more than a spotty teenager in a basement to control tens of thousands of compromised machines and target whatever they like.

In such a situation, it would seem to make sense to provide a hosting service of last resort. Presumably a volunteer effort as it would have to be immune to commercial interests, and presumable massively parallel to ensure that there are many servers providing service so that a distributed denial of service attack would fail to hit everywhere.

Lastly, the US reaction to WikiLeaks seems to me to be a little over the top. And I am not talking about the lunatic fringe who are likely to jump and down screaming at the slightest criticism of the US, but at more respected figures. Some of the reactions verge on coming close to events such as the Fatwwā against Salman Rushdie way back in the 1980s.

For example :-

  • Jeffrey T Kuhner wrote in an editorial in the Washington Times that Julian Assange should be treated “the same way as other high-value terrorist targets” and be assassinated.
  • Gordon Liddy has suggested that Julian Assange should be added to a “kill list” of terrorists to be assassinated without trial.
  • Mitch McConnell has called Julian Assange a “high-tech terrorist”.
  • Newt Gingrich has stated “and Julian Assange is engaged in terrorism. He should be treated as an enemy combatant.”. Well it would be a start to treat any terrorist as an enemy combatant (the US doesn’t as enemy combatants have rights).

Calling for the assassination of Julian Assange is no better than a radical Islamist calling for the assassination of Salman Rushdie – we’re supposed to be better than the knuckle dragging fundamentalists frothing at the mouth. Seems that some in the US aren’t. A reminder to those people – we supposedly live in countries where the rule of law is supposed to be followed, and nobody has tried and convicted Julian Assange of anything in relation to WikiLeaks.

As for calling Julian Assange a terrorist, that is blatantly ridiculous. However annoyed you may be with him, none of his actions equate to driving a truck packed with explosives into a crowded shop entrance, or hijacking a plane and flying it into a large city killing thousands. Even if any information published by WikiLeaks has led to the death of anybody (and nobody has managed to demonstrate this – merely raised ill-founded concerns about the possibility), the responsibility for those deaths belongs to those carrying out the killings and not WikiLeaks. At most (in such circumstances), WikiLeaks might be guilty of incitement to murder – and in a much less obvious way than those calling for the head of Julian Assange to be delivered to them on a platter.

The US is beginning to look like the fool in all of this – their information security is a joke, and their reaction to their inability to keep secrets is to shoot the messenger in a way that makes them look no better than those rogue regimes they complain so much about.

Dec 062010
 

A few photos from a few weeks ago … difficult to process so I’ve been lazy in keeping them back until now …

A Sign In The Sky

A Sign In The Sky

Darkening Island

Darkening Island

Sandy Southsea

Sandy Southsea

Walking The Beach

Walking The Beach

Nothing To Say

Nothing To Say

Dec 062010
 

This was supposed to be a trip to Rowland’s Castle, but the railways let me down – sure there was a replacement bus service which I’m sure would get me to Rowland’s Castle, but back again ? Anyway instead of heading off there, I ended up in Havant with the best option there being a quick trip to Hayling Island :-

Post Interference

Post Interference

The “interference” here is the interference patterns in the water breaking up the mirror image of the post.

Distant Oak

Distant Oak

Time for a pint ?

Bridge Fastening

Bridge Fastening

Dec 042010
 

If you look down the side of this post, you will see some sort of advertisement, and like the majority of people I took the easy way out and chose Google to supply the ads. Of course as this blog site is a personal site of somebody who comes a long way from being famous, the amount of money that comes in is negligible. In fact I have not received a single payment as yet.

Nothing wrong with that of course – it is stated quite plainly that payments are only made when the level reaches a certain level – who needs a cheque for £0.99 ? It would cost Google more to send them out than the payments themselves are worth.

But the interesting thing is what happens to all those negligible amounts of money ? Don’t forget that morally, that money does not belong to Google: Someone who wants to advertise something online, pays Google, and Google in turn pays whoever provides online “space” to allow the advertisements to appear. As soon as the adverts appear on my (or your) blog, Google owes me money.

The interest on my queued payments is pretty negligible, but how many other sets of negligible payments are there in Google’s bank accounts ? And how much interest is Google earning ?

Or should I say “stealing” ? Don’t forget that money is owed for services rendered – it doesn’t belong to Google at all, and if Google is making any money at all through interest, then it is morally obliged to do something with that interest other than add it to the bottom line.

Now personally I’m not interested in receiving the interest on the money Google owes me – it’s a trivial amount to me. But added up together with the trivial amounts owed to thousands of others, it may well make a difference to some charity or other. What I would like to see is an extra tab on my Adsense console letting me choose which charity Google should pay the interest to.

Dec 022010
 

Almost the very first thing that gets mention in the media when snow descends on the UK is the travel chaos preventing people from getting into work. Employers are worried that their employees are skiving; employees are worried that they won’t get paid because they can’t travel into work.

First of all, skiving is relatively rare not simply because people don’t want to let their employers down, but also because they know that those who do manage to get in will have to work harder because of the lack of people. They don’t want to let their colleagues down.

Of course this is one time when as many people as possible should be working from home. Again skiving isn’t very likely; as someone who has had occasion to work from home myself, you tend to work harder from home than you do from work. There is perhaps less clock-watching and more goal orientated work. This doesn’t work for all kinds of work, but sometimes employers are just a little too reluctant to allow this.

In addition working from home needs practice – you need to make appropriate arrangements so that people can do their work from home, and test those arrangements. As an example, there are places that have arrangements to allow working from home which rely on systems sized for normal levels of working from home – these will often get overloaded during adverse weather. Plus people need to be confident that they can do their work from home, and find out what works and what does not – for that they need practice.

One thing that gets left out from the usual discussion is what about the people who do make it into work ? We hear that most employers do not penalise those who cannot make it in, which is fair enough. But what reward do those who do struggle in get for going the extra mile ? Don’t we deserve a little reward for making it in ?

Lastly there is an interesting assumption that if you have to travel any distance by car or train, you may need to leave early to travel home safely. That is undoubtedly the case when you are talking about fresh snow falls. But what gets overlooked is that walking to and from work becomes far more dangerous after pavements have had the snow trampled down into sheet ice. In some cases it should be those who live locally encouraged to leave early to travel home safely!