Hell on wheels


USA Today has a report on the new mobile execution chambers being gradually introduced in China to replace the older execution method of shooting people in the back of the head with something more humane. By installing the lethal injection equipment in a slick looking bus they can perform executions right at the location of the trial, without having to transport prisoners all the way to a central execution facility or set up equipment in each locality. As a bonus, they can also send the bus to drive around your house at night as a subtle reminder to stay on the right path.

Reason fails again in US government

No sooner do I write about the misinformed campaign against Chinese PCs being carried out by certain members of the US Congress then the State Department announces that none of the 16,000 machines being purchased from Lenovo will be connected to any high security networks or used to process any classified data.

As the NYT article says:

Long story short, an influential member of Congress played the China card, and the State Department folded.

It was a drama that reached a conclusion late last week, when the State Department, responding to fears that its security might be breached by a secretly placed device or hidden software, agreed to keep personal computers made by Lenovo of China off its networks that handle classified government messages and documents.

The damage to Lenovo is more to its reputation than to its pocketbook. The State Department will use the 16,000 desktop computers it purchased from Lenovo, just not on the computer networks that carry sensitive government intelligence.

I previously mentioned the absurdity of even trying to find computer constructed outside of China, as well as the somewhat unlikely prospect that Chinese trojans could be hidden in the systems without being located. Well, naturally Lenovo agrees with me about that, but there’s more. Jeffrey Carlisle, vice president of government relations for Lenovo, describes

the worry that the Chinese government might secretly slip spying hardware or software on Lenovo computers shipped to the State Department as “a fantasy.” The desktop machines, he said, will be made in Monterrey, Mexico, and Raleigh, N.C., at plants purchased from I.B.M.

“It’s the same places, using the same processes as I.B.M. had,” Mr. Carlisle said. “Nothing’s changed.”

So despite everything, by going to a company partially owned by the Chinese government (and not incidentally, also partly owned by IBM, and by other American and non-governmental foreign investors) they are actually getting one of the few sources of computers NOT made in China! Do they now think that the former IBM executives and engineers that run the Mexican and Raleigh plants are now agents of the Chinese government just because of who owns some of the stock? This notion of Communist Party control over Lenovo just seems so overblown. According to Wikipedia the actual breakdown is “as of May 1, 2005 35.2% of Lenovo was owned by public shareholders, 45.9% by Legend Holdings Limited, and 18.9% by IBM.”

Furthermore, the headquarters of the company is located in New York State and is planning to relocate to Raleigh, where the Thinkpad group is based. Yes, the Chinese government owns a large chunk of Lenovo through Legend Holdings Limited. While the corporate entity known as Lenovo may have originated in China with government backing, it has transmuted into a very 21st century transnational company, in which the Chinese government is merely a stockholder. Certainly with the force of authoritarian Chinese law behind them the CCP could do much to control operations within China, but I find very little credible reason to believe that a minority stockholder would be able to exert the level of influence necessary to illegally alter the designs of systems in a way that would be economically suicidal if uncovered at a factory in Raleigh N.C. formerly owned by IBM and managed from the Purchase, NY headquarters.

I have a Mac Classic in my attic that you could use

It has been just about two months since I last discussed the Congressional revolt against Chinese manufactured computers and for a while I thought that perhaps the story was dead, but leave it to a Congress member to not merely flog, but actually hitch his wagon to a dead horse. Washingtonpost.com is running an AP story saying that the State Department has declared that the 16,000 computers they purchased from Lenovo will not be used for classified work. This followed a complaint by Virgina Representative Frank Wolf, who while he may have been elected to represent the good people of Virgina, seems unlikely to qualify for a job setting up internet connections at people’s homes.
Red IBM

The government, Griffin wrote, is committed to making sure the purchase from Lenovo, the world’s No. 3 PC maker, will not “compromise our information and communication channels.”

Wolf, R-Va., chairman of the House subcommittee that finances State Department operations, said he raised alarms after he discovered that officials planned to use at least 900 of the computers in classified work and at U.S. embassies and consulates abroad. That, he said, possibly could give China access to sensitive U.S. information.

While there may in fact be a miniscule theoretical possiblity of a security breach resulting from some sort of clever trojan hidden deep in the firmware of a China manufactured computer (such as if State were stupid enough to use the Lenovo security chip), there is something unaccounted for by Mr. Wolf that would prevent them from buying computers entirely manufactured inside the United States. Namely, there aren’t any.

As a chart in this piece at DailyTech.com illustrates, over the past several years every single PC manufacturer, whether Chinese, Taiwanese, Japanese or even American, has come to do at least some of their manufacturing and basically all of their final assembly in China.

Unfortunately for Representative Wolf, banning the purchase of computers manufactured in China essentially means banning the purchase of computers. At least, unless he wants the government to trove attics and garage sales to collect 1980s models like my old Mac Classic.

But as for the real issue of whether or not manufacturing in China is a security risk. I would have to say, not particularly. While the computers may be “made” in China, they aren’t designed there. Just because a piece of electronics has “Made in China” stamped on its outer shell does not mean that the entire contents was made in China, only that the case was. But while the system may have been assembled and some of the components manufactured there, virtually none of the highest tech components responsible for the actual processing of the computer are made there.

Does it seem likely that it is possible to add a trojan to imported AMD chips made in Germany, or modify the design of an Nvidia chipset, designed in California and manufactured in Shenzhen, China by a Taiwanese company, so that it stealthily transmits keystrokes over the internet to Chinese servers?

Regardless of where the hardware is from, while the systems are preconfigured by the maker, we can assume the State’s IT department will wipe the hard drive and reinstall their own carefully tweaked (hopefully) secure disk image, and then replace the BIOS and firmware with vetted software written by the American or Taiwanese companies that actually designed the components.

Aiful dog to be put to sleep? One can only hope!

It’s about damned time the FSA did something about legal loan-sharking in Japan:

Friday, April 14, 2006

FSA To Slap Business Suspension Order On All Aiful Outlets

TOKYO (Nikkei)–The Financial Services Agency has decided to impose a business suspension order of up to 25 days on all domestic outlets of consumer credit firm Aiful Corp. (8515) as punishment for aggressive collection tactics, The Nihon Keizai Shimbun learned Thursday.

This administrative punishment, unusual in its harshness, will be the first-ever disciplinary action by the FSA against a major consumer credit company. The measure is likely to have a major impact on calls for tougher regulations for the sector.

The decision may be formally announced as early as Friday. In addition, Aiful was allegedly obtaining powers of attorney from clients without their consent. The suspension will be 20-25 days for the Hokkaido and Kyushu branches where improper activities took place, and three days for all other locations. Aiful operates nearly 1,700 outlets across Japan.

But here’s the kicker: Aiful plans to cancel all advertising for the time being. Rejoice!

Aiful is deepening its equity and business ties with banks through mergers and acquisitions. It has also been cooperating with several regional financial institutions in the business of loan guarantees.

The firm will rush to clean up its act by cutting management salaries and reviewing management practices. It will also cancel all advertising, at least for the time being.

The ads were extremely annoying – a man sees a cute chiuahua at a pet store, imagines himself in all kinds of whimsical situations with the dog, and apparently decides to go heavily into debt to get the little dog. Another tactic used by most of the companies is to use attractive spokeswomen to showcase the “good service” they offer. I, for one, will not miss the cloying fabrications.

Of course, the practice of super-high-interest loaning is still legal – the loan sharks are just not allowed to start acting like Scientologists in their collections policies.

This practice of usurious lending has humongous social ramifications in Japan. Just about every other story on ZAKZAK is about some schmuck with a pachinko habit who started embezzling or robbing people to pay back “consumer debt.” Ads for the numerous companies block the mountains, and one can find “ATMs” which are actually unmanned loan application terminals, on city streetcorners, never far from a pachinko establishment. Meanwhile, the founders of these companies have made themselves billionaires.
Continue reading Aiful dog to be put to sleep? One can only hope!

Imperialist cuff links

I bought these on a hanami (flower viewing) excursion to Yasukuni Shrine last weekend. Tie pins aren’t quite my style, but the cuff links are great. (And Lady Curzon, a true aristocrat, gives her approval.)

Other items on sale at Yasukuni:

* Japanese flag cuff links. I didn’t buy these because they seemed too loud. I now regret that decision, and plan to purchase them the next time I visit.
* An authentic-looking Imperial Rescript on Education you can put up in your home for that classic fascist feeling. (Framed with a portrait of Hirohito: ¥9,000. Unframed: ¥1000.)
* Special manju, packaged with a caricature of Koizumi on the box and parodies of LDP slogans. Here’s a photo, because I love you:

Anyway, if you see a honky walking around Tokyo wearing chrysanthemum cuff links, you’ll know it’s me, so be sure to say hi.

Yahoo still beats Google for mapping Japan

I made a big deal when Google Maps added data for Japan, but now Yahoo Japan has introduced a Java-based clone of Google Maps, complete with aerial photos. Check out this shot of the Defense Agency headquarters in Ichigaya…

And the area map, slightly zoomed out:

It’s still beta, but it kicks Google’s ass (and for that matter, everything Google makes is still in beta anyway). If you’re “nihongo OK,” do check it out.

Google Earth: leading cause of aircraft collisions

On my favorite aviation gossip site, airliners.net, someone posted this Google Earth image of Heathrow Airport in London:

It looks like there are two planes on the same runway, and a third about to land on top of them. In reality, this is just an optical illusion of sorts caused by the way the composite is made: multiple photos are put together, and each photo is taken at a different point in time, resulting in what looks like too many planes on the runway. You can see similar effects around many other major airports. Or you might end up like this guy, who found an Airbus right over his house:

And the resolution is good enough to read the name of the airline!

Congressmembers accuse Lenovo of spying for China

About two weeks ago I wrote a post about the security implications of buying a Lenovo, or any other brand of PC, manufactured inside China for the domestic market, following reports that Lenovo was including a government approved encryption module on their system motherboards. While I recommended caution when buying a domestic Chinese computer, I was not particularly concerned about the possibility that machines manufactured for the foreign market would be so compromised.

Well, it turns out that the US Congress is a little bit more suspicious of China than I am. (Gee, who would have thought?) The New York Times today is reporting that a number of Congressmembers from both parties are in an uproar over an announcement that Chinese-owned Lenovo computers has won a bid to supply 15,000 machines to the US State Department.
Red IBM

The critics warn that the deal could help China spy on American embassies and American intelligence-gathering activities, using hardware and software planted in the computers.

“The opportunities for intelligence gains by the Chinese are phenomenal,” said Michael R. Wessel, a member of the United States-China Economic and Security Review Commission, which was created by Congress to monitor and report on the bilateral relationship. Larry M. Wortzel, the commission’s chairman, said in an interview two weeks ago that while he would not be concerned if Airbus moved an aircraft production line to China, he would be worried if Lenovo ever started to sell computers to American government agencies involved in foreign affairs. Responding on Thursday to the Lenovo deal, he predicted that, “Members of Congress, I think, will react very strongly when they see a deal like this come through.”

The opposition seems to be a combination of misguided economic nationalism, mixed with a vague but real appreciation of possible security concerns. Surprisingly, this article does not mention the security chip Lenovo has been installing on their domestic models. Now, it would of course be trivial to see whether nor not that chip is installed on the machines being purchased by the State Department, but doing a full-blown security audit would probably be enough trouble so that it would become more economical to just go to the next lowest bidder instead.

The real question is this: are the possibly security concerns serious enough to justify the panic? Supporters of the deal point out that the computers will be used only for unclassified work, but honestly that shouldn’t do anything to relieve you. Most of the government’s paperwork is unclassified, but still not public-think of things like personnel records and so on that would be of great usefulness as intelligence.

Now, how possible is it that Lenovo could build a back door into the systems, that routine security procedurs (and let’s assume, perhaps incorrectly, that the government follows correct security procedure) would not stop? The security chip mentioned in my earlier post would probably not be used for encryption, in favor of a standard software solution. There could be some sort of back door hidden in the BIOS, but on modern operating systems, the BIOS code is no longer running once the OS starts. (Note, EFI is a whole other kettle of worms, but let’s not get into that now.) And I would hope that standard procedure is to do a clean install of all software of of a disk image file prepared by government IT personnel, so as to make sure that all security settings are correct, and there is no possibility of a disk resident trojan.

What is the final conclusion? I don’t have a firm answer, not having nearly enough information or time to analyze it, but I would be interested to hear other thoughts on the matter.

The beauty of the warranty

Over the past couple of weeks I have had the fortune of testing the warranty services of three different companies.

First, my 200GB SATA Seagate hard drive began developing bad sectors. Knowing full well that this is always a preliminary stage of drive failure (the variable is how preliminary-it could be hours or months) I hastened to move all of my files onto other avaliable hard drives, of which only a small number of mp3s and (hopefully) unimportant photos were unrecoverable. This first occured during my last week in Taiwan, the last time at which I wanted to be bothered with such irritating tripe, so although the file backup was unavoidable, I waited to call Seagate until a couple of days after I returned home to Jersey.


Continue reading The beauty of the warranty