Does China own your box?

There have been rumours going around that Microsoft has been cooperating with the US government to build secret backdoors into the upcoming edition of Windows known as Vista to allow easy government access to all of your private data. Well, Arstechnica yesterday did what I think is a pretty good job of putting that particular rumour to rest, primarily with this quote from one of Microsoft’s cryptography programmers.

Over my dead body.

Well, maybe not literally-I’m not ready to be a martyr quite yet-but certainly not in any product I work on. And I’m not alone in that sentiment. The official line from high up is that we do not create back doors. And in the unlikely situation that we are forced to by law we’ll either announce it publicly or withdraw the entire feature. Back doors are simply not acceptable. Besides, they wouldn’t find anybody on this team willing to implement and test the back door.

If you stop and think about it, it’s really a rather absurd idea for Microsoft to add a “feature” like that. It would provide them with no business advantage, since they’re already going to achieve high market penetration based on other features, without having to agree to the NSA’s Big Brother demands.

Now, on the other side we have China. Last year this brief article was published.

Lenovo Group on Monday in Beijing released China’s first security chip – “Hengzhi” which has been approved by the State Encryption Administration and independently developed by the company.

It means that China’s information security-sensitive departments in the government, military and research institutions can now purchase safe PCs independently developed and controlled by Chinese.

According to relevant regulations the design, development and manufacture of China’s encryption chips must rely on independent domestic ability and are forbidden from using relevant foreign products.

Safe Lenovo PCs installed with Hengzhi chips will provide security-sensitive departments in the government, military and research institutions with PC terminals completely developed and controlled by Chinese.

As learned Lenovo will officially launch safe PCs installed with Hengzhi security chips within this year.

hengzhi
A reporter is taking photo for Lenovo’s Hengzhi chip at the 8th Beijing International High-tech Expo.

You may remember Lenovo as the company that now own’s what was formerly IBM’s popular Thinkpad brand of notebook PCs. What you have probably never heard of, however, is the State Encryption Administration. Unfortunately, little information is avaliable in English about China’s encryption regularions (and I wouldn’t be surprised if much of it isn’t even publicly avaliable in Chinese.) We do know, however, that this group was first created in 2000, and while specifics are unclear, the basic framework implemented by the law was as follows:

Import into the PRC: The import of foreign encryption products will only be permissible if approval has been obtained from the State Encryption Administration

Sale/distribution: Encryption products can only be sold or distributed within the PRC by entities which have acquired special permits. Such permits are unlikely to be granted to non-PRC entities such as foreign invested enterprises.

Manufacture: Restrictions also apply to the type of entities which can manufacture encryption products, and such products will require approval.

End-users: Users of foreign encryption products, in use prior to the introduction of the new law, must have registered such use with the State Encryption Administration by last January 31 2000 in order to continue using such equipment. In addition, unlike PRC entities, foreign users must also obtain approval for the use of encryption products.

What this basically means is that any encryption product imported to, or sold in China requires government approval, and I think it is fairly safe to assume that said approval requires a backdoor of the very same type as the rumoured Microsoft one.

In a wonderful bit of double-speak, another news tidbit describes the hengzhi chip as a “significant breakthrough in the field of trusted computing technology.” I presume that the breakthrough in “trusted computing” would be knowing in advance that you cannot trust your own hardware to protect your secrets no matter what procedures you implement. Clearly this does, in the most pedantic sense, represent a breakthrough of a kind.

This article, also referenced by Ars, has a little more to say.

“Lenovo ships a lot of PCs inside China with a Chinese government chip instead of the TPM,” he says. “We don’t know what it does.”

The obvious fear is that the chip gives the Chinese government the ability to access any encrypted communications, something that seems particularly sinister in light of the recent allegations that American technology companies (in particular Yahoo) have helped the Chinese government locate dissidents. But Anderson emphasizes that these machines are only sold within China. “They’re completely unsuitable for the American market,” he says.

The last part is important. While many of are computers are assembled in China, I don’t think that there is any significant danger that secret Chinese spy chips are installed in your Dell, Apple, or even Lenovo computer. Were such a thing discovered, it would immediately trigger the highest level sanctions against the Chinese government, and probably cripple their subcontracted manufacturing industry overnight. However, it seems to be certain that any new computer you buy inside China will most likely have this chip installed, and even a moderately lower price is not, in my mind, enough to make up for inviting the secret police into your secret documents. It may sound paranoid, but I would strongly caution anyone to reconsider a decision to buy computer hardware in China, and if you want to get a cheaper but well made notebook PC, just save your money for a nice Taiwanese Asus or BenQ .

A question of national economic security

I’ve been posting recently on the global backlash against FDI. So, in scanning today’s news, this headline caught my eye: “INTERVIEW-China official slams foreign investment spree.”

Here’s a sample:

Li Deshui, head of the National Bureau of Statistics, called for legislation to curb “ill-willed” acquisitions of domestic companies by foreign firms… Echoing recent concerns over China’s sale of stakes in its major banks to foreign investors, Li said that unchecked acquisitions by foreign multinationals could pose a threat to China’s economic security.

Reading this latter remark made me wonder just how one nation’s “economic security” should be defined. Where does one draw the line? Borders are the obvious place to start, but everyone knows that this is no longer true. The same may be said of nationality.

Let’s face it, when it comes right down to it, when someone (be it a company or an individual investor) stands to lose millions or even billions of dollars on an investment, national economic security goes right out the window along with concern for everything else but one’s own ass.

Think about a bank run: are those people lining up to withdraw their deposits before the next guy concerned with national economic security? Of course not. They’re worried about their own damned money.

I don’t mean to downplay the seriousness of the issue. “Bank runs” on an international scale are exactly what governments are worried about. But they should consider other ways of preventing such things from happening (i.e. better policy or more effective regulation) than by prohibiting them altogether. You don’t deal with bank runs by outlawing banking; you deal with them by creating systems of deposit insurance, by providing lenders of last resort, and by requiring banks to keep a certain percentage of deposits on hand at all times.

OMG, more kabuki!

When I saw the editorial titled Kabuki Congress, I knew what the next blog post would be.

The question is whether the Bush administration broke the law by allowing the National Security Agency to spy on Americans and others in the United States without obtaining the required warrant. The White House wants Americans to believe that the spying is restricted only to conversations between agents of Al Qaeda and people in the United States. But even if that were true, which it evidently is not, the administration has not offered the slightest evidence that it could not have efficiently monitored those Qaeda-related phone calls and e-mail messages while following the existing rules.

In other words, there is not a shred of proof that the illegal program produced information that could not have been obtained legally, had the administration wanted to bother to stay within the law.

…Putting on face paint and pretending that illusion is reality is fine for Kabuki theater. Congress should have higher standards.

I mean, it’s the usual NYT line, but you gotta love the kabuki.

Say it with a nose

From the greatest magazine on Earth:

This Valentine’s Day in Shanghai, people said “I love you” not with roses but with noses. Business at Shanghai’s plastic surgery clinics has risen by 30% since the beginning of the month, a trend fuelled by Valentine’s Day and the Chinese New Year, when young people receive job bonuses and cash presents from relatives. Some clinics offered special Valentine’s Day packages, such as a 20% discount between February 14th and 17th. The most popular treatment was for couples to opt for matching noses, or to have their eyes reshaped.

Liu Yan, who is 24, was quoted in a newspaper as saying, “I suggested it [to my boyfriend] as a way of celebrating our relationship and bringing us closer together with a special kind of bond.” Miss Liu said her 28-year-old boyfriend “loved the idea of matching noses”, and readily paid the 10,000 yuan ($1,200) for the surgery.

When Robots Are Used for Evil, Nobody Wins (Except the robots)

Somehow, political robotic telemarketing seems even more annoying than robotic telemarketing that’s trying to sell me something. Thankfully, I haven’t gotten any of these calls:

Column: Just a bit of hypocrisy in Simmons’ attitude regarding robo calls


By RAY HACKETT
On Politics

Congressman Rob Simmons wants to share a phone number with his constituents in the 2nd Congressional District, and he’s urging people to call it: (202) 393-4352.

The number belongs to “American Family Voices,” the group behind the recent rash of the so-called robo calls — automated phone messages — that have flooded homes in Eastern Connecticut, urging residents to call Simmons’ office and tell him they don’t like his position against federal funding for port security.

Simmons has, in the past, claimed these calls have caused a major disruption of his staff’s ability to do its work as hundreds of constituents have called to complain about receiving the unwanted automated messages. So his solution to the problem is ask residents to call “American Family Voices” — and tell them to knock it off.

According to Simmons — and these are his words — American Family Voices is “notorious,” “a shadowy, partisan” organization using “these sleazy and deceptive” calls to distort his voting record.

I don’t recall the congressman being as equally outraged back in 2002 when another organization — United Seniors — flooded the homes of Eastern Connecticut with automated calls asking residents to call the congressman and “thank him” for passing a prescription-drug bill for seniors.
Continue reading When Robots Are Used for Evil, Nobody Wins (Except the robots)

It’s not just for Catholics anymore

Zakzak reports:

At Nagata Jinja in Nagatu-ku in Kobe city it was learned on the 4th of this month that a male priest(30) at the Shinto shrine (shrine head: Masakatsu Fujiwara) had installed a hidden video camera in the dressing room used by the shrine’s Miko and recorded them changing clothes. The shrine then fired him. The Nagata office of the Hyogo Prefectural police then filed charges with the Kobe District Prosecutor on suspicion of the minor offense of peeping.

According to the investigation, when on February 14th a worker was cleaning the shrine, they discovered that a video camera had been installed in an unused locker inside the girl’s changing room. Fujiwara shrine manager, along with reporting this to the Nagata police, also asked the 11 male staff about the situation, and one of the lower ranking male shrine priests known as “Gonnegi”
confessed to the crime.
The man made a statement that he had “made recordings on several occasionas.” The girl’s changing room was normally used by two Miko.

The Nagata shrine is said to have been built in the year 201 A.D. by Goshintaku(御神託). It is counted as one of the representative Shinto shrines of Kobe, along with Ikuta(生田) Jinja and Minatogawa(湊川) Jinja.

Note: Miko are so-called “shrine maidens” who assist in rituals, somewhat like an altar boy in Catholicism, but often with more responsibility and a wider range of dutied. They can be aged anywhere from early teens to mid-twenties, and despite the name virginity, or even marital status, is not a consideration in modern times.

Watch who you talk to

From today’s NYT article on the contents of newly released documents on the Guantanama Bay prisoners.

Another Saudi, Mazin Salih Musaid al-Awfi, was one of at least half a dozen men against whom the “relevant data” considered by the annual review boards included the possession at the time of his capture of a Casio model F-91W watch. According to evidentiary summaries in those cases, such watches have “been used in bombings linked to Al Qaeda.”

“I am a bit surprised at this piece of evidence,” Mr. Awfi said. “If that is a crime, why doesn’t the United States arrest and sentence all the shops and people who own them?”

Another detainee whose evidence sheet also included a Casio F-91W, Abdullah Kamal, was an electrical engineer from Kuwait who once played on his country’s national volleyball team. He was also accused of being a leader of a Kuwaiti militant group that collected money for Mr. bin Laden.

As for the Casio allegation, Mr. Kamal said the watch was a common one in Kuwait and had a compass that could be used to find the direction of Mecca for his prayers. “We have four chaplains” at Guantánamo, he said. “All of them wear this watch.”

Obviously the real issue is not are any of these men innocent, but how long as Casio been in league with the terrorists.

Real-life “super troopers” in Southwest Airlines prank

Fuerschbach v. Southwest Airlines has to be one of the most fun cases I’ve read in a while…

Several supervisors at Southwest Airlines convinced two Albuquerque police officers to stage an arrest of Marcie Fuerschbach, a Southwest Airlines employee, as part of an elaborate prank that included actual handcuffing and apparent arrest. This was a “joke gone bad,” and turned out to be anything but funny, as Fuerschbach allegedly suffered serious psychological injuries as a result of the prank. She sued the officers and the City of Albuquerque under 42 U.S.C. 1983, alleging violations of her Fourth and Fourteenth Amendment rights. Fuerschbach also asserted claims for various state torts against the officers, the city, her supervisors, and Southwest Airlines.

The full story after the jump…
Continue reading Real-life “super troopers” in Southwest Airlines prank

Now You Can Listen to anti-Japanese Rap Song “Fuck Zapan” Courtesy Mutant Frog Travelogue

DJ Doc
One of my first posts for Mutant Frog Travelogue concerned the strange case of an anti-Japanese rap song from Korean rap group DJ Doc (pictured above). In my infinite magnanimity, I translated the unintentionally hilarious lyrics:

Are you going to lie about your own history?! (Hai!) Go ahead and lie, you deceitful pigfeet!
Pussies! How much will you lie, pigfeet?! Keep on lying, Japs!
Lie to your mom and dad! Lie to your mom and dad!
Will you eat your mom? (Hai!) Is that OK? Yeah, that’s fine! That’s just fine!
Retard bitches! Go and have a seizure!
You barbarian, epileptic Japanese!
Mouse-dicked Jeps “Japan is our toilet!”… FUCK!
Pucking nation.. Chapan is a Pucking nation*4 (repeat 2x)

The post proved to be one of our most popular and generated comments that ranged from the merely curious (“Can’t we ALL just get ALONG?!”) to the downright deranged (“You’ll never look as good as the white man. so go eat some kemchi or sushi or shrimp fried rice you slit/slant eyed freaks.”).

Unfortunately, the site I originally linked to took down the audio clip, and I accidentally deleted the MP3 I had. But now I’m feeling generous again, so here it is again in all its amateurish glory! I’ve saved the file here, so this song will never again be lost to history. Try singing along using my English version of the lyrics!

(Thanks to ZMPK for making the song available again and Saru for taking the time to search for it)