Quotulatiousness

April 11, 2011

SSL is “just an illusion of security”

Filed under: Technology — Tags: , , , , — Nicholas @ 10:09

SSL (Secure Sockets Layer) is critically important to safe communications on the internet. It may also be “hopelessly broken“:

SSL made its debut in 1994 as a way to cryptographically secure e-commerce and other sensitive internet communications. A private key at the heart of the system allows website operators to prove that they are the rightful owners of the domains visitors are accessing, rather than impostors who have hacked the users’ connections. Countless websites also use SSL to encrypt passwords, emails and other data to thwart anyone who may be monitoring the traffic passing between the two parties.

It’s hard to overstate the reliance that websites operated by Google, PayPal, Microsoft, Bank of America and millions of other companies place in SSL. And yet, the repeated failures suggest that the system in its current state is hopelessly broken.

“Right now, it’s just an illusion of security,” said Moxie Marlinspike, a security researcher who has repeatedly poked holes in the technical underpinnings of SSL. “Depending on what you think your threat is, you can trust it on varying levels, but fundamentally, it has some pretty serious problems.”

Although SSL’s vulnerabilities are worrying, critics have reserved their most biting assessments for the business practices of Comodo, VeriSign, GoDaddy and the other so-called certificate authorities, known as CAs for short. Once their root certificates are included in Internet Explorer, Firefox and other major browsers, they can’t be removed without creating disruptions on huge swaths of the internet.

April 10, 2011

Canada’s peaceful submarines

Filed under: Britain, Cancon, Military, Technology, Weapons — Tags: , , — Nicholas @ 11:02

Apparently, the navy’s purchase of used British submarines has still not been completed: the boats are in our hands, but they’re still unarmed:

The country’s stock of second-hand submarines — already beleaguered with repairs and upgrades — is incapable of firing the MK-48 torpedoes they currently own.

When Canada purchased its current fleet of four submarines from Britain in 1998, they were fitted for British torpedoes. At the time, Canada was heavily invested with the modern MK-48 torpedo system and did not want to abandon it.

Like any shopper trying to justify a second-hand purchase in the face of an obstacle, they figured it was still a good deal. They “Canadianized” the submarines, but, 13 year later, they still haven’t got around to the “weaponization” part.

“The Canadian Forces has always intended for the Victoria Class submarines to carry and fire the Mark 48 torpedo,” wrote Denise LaViolette, the director of navy public affairs, in an email. “Initial weapons certification will be progressed early in 2012 in HMCS Victoria for Pacific operations followed that year by HMCS Windsor for Atlantic operations.”

I noted the lack of torpedo armament on the Canadian sub fleet back in 2004. I had no clue that they’d still be unarmed in 2011!

Later that same year, I said:

As I’ve said in other posts, I’m not a former Navy person, so my knowledge of the situation is neither broad nor deep. I’m moderately well-read on naval mattters, but that’s the limit. On that basis, I thought the purchase of the Upholder subs was a brilliant solution for both the Canadian and Royal Navies: we got a heck of a deal and they got the subs off their inventory. It really did look like a win-win, and both sides thought they’d gotten the better of the bargain.

In the long run, this may still turn out to be true. I certainly hope so.

As several others have noted, until we find out exactly what happened on HMCS Chicoutimi, we can’t make any determination about whether the subs are going to be safe and effective vessels for our navy. And, as Bruce R. pointed out the other day, if we want to retain any claims of sovereignty over the coastal waters of this huge country, we need those subs in the water now.

Well, the subs have been in the water for several years, but without torpedoes, they’re not fully functional.

Update, 12 April: Strategy Page has a useful summary of the history of the Upholder/Victoria class submarines:

It all began in the 1990s, when Canada wanted to replace its 1960s era diesel-electric subs. This did not seem possible, because the cost of new boats would have been about half a billion dollars each. Britain, however, had four slightly used Upholder class diesel-electric subs that it was willing to part with for $188 million each. Britain had built these boats in the late 1980s, put them in service between 1990 and 1993, but then mothballed them shortly thereafter when it decided to go with an all-nuclear submarine fleet.

So the deal was made in 1998, with delivery of the Upholders to begin in 2000. Canada decommissioned its Oberons in 2000, then discovered that the British boats needed more work (fixing flaws, installing Canadian equipment) than anticipated. It wasn’t until 2004 that the subs were ready, and that one year one of them was damaged by fire, while at sea. This boat is to be back in service next year. By the end of this year, three boats should be back in service. Maybe.

[. . .]

The problem is that the subs were bought without a through enough examination. It was later found that most major systems had problems and defects that had to be fixed (at considerable expense). Thus these boats have spent most of their time, during the last decade, undergoing repairs or upgrades. The final fix will be to get the torpedo tubes working. In any event, a Canadian [submarine] has never fired a torpedo in combat, mainly because the Canadian Navy did not get subs until the 1960s. Lots of Canadian surface ships have fired torpedoes in combat, but the last time that happened was in 1945. The sole operational Victoria class boat is on patrol in the Pacific, listening for trouble which, if found, will be reported to the proper authorities.

April 8, 2011

British study finds wind power even less economical than hoped

Filed under: Britain, Economics, Technology — Tags: , — Nicholas @ 09:56

The assumption was that wind farms would produce 30% of their theoretical maximum over time (the wind doesn’t blow all the time, so no wind farm will ever produce 100% for more than a short period of time). This number now appears to be too optimistic:

A new analysis of wind energy supplied to the UK National Grid in recent years has shown that wind farms produce significantly less electricity than had been thought, and that they cause more problems for the Grid than had been believed.

The report [. . .] was commissioned by conservation charity the John Muir Trust and carried out by consulting engineer Stuart Young. It measured electricity actually metered as being delivered to the National Grid.

[. . .]

In general, then, one should assume that a wind farm will generate no more than 25 per cent of maximum capacity over time (and indeed this seems set to get worse as new super-large turbines come into service). Even over a year this will be up or down by a few per cent, making planning more difficult.

It gets worse, too, as wind power frequently drops to almost nothing. It tends to do this quite often just when demand is at its early-evening peak:

At each of the four highest peak demands of 2010 wind output was low being respectively 4.72%, 5.51%, 2.59% and 2.51% of capacity at peak demand.

And unfortunately the average capacity over time is pulled up significantly by brief windy periods. Wind output is actually below 20 per cent of maximum most of the time; it is below 10 per cent fully one-third of the time. Wind power needs a lot of thermal backup running most of the time to keep the lights on, but it also needs that backup to go away rapidly whenever the wind blows hard, or it won’t deliver even 25 per cent of capacity.

April 7, 2011

Unmanned sub hunter

Filed under: Military, Technology, USA — Tags: , , , — Nicholas @ 10:25

Lewis Page looks at the Continuous Trail Unmanned Vessel (ACTUV):

No doubt regular readers will recall the US military’s cunning plan to develop unmanned submarine-hunting robotic frigates — warships which would prowl the oceans like automated Mary Celestes, remorselessly tracking enemy submarines regardless of how their pale, sweaty, malodorous captains might twist and turn.

The Anti-submarine warfare Continuous Trail Unmanned Vessel (ACTUV) project is intended to produce “an X-ship founded on the assumption that no person steps aboard at any point in its operating cycle”. The uncrewed frigate would have enough range and endurance for “global, months long deployments with no underway human maintenance”, being able to cross oceans and fight its battles largely without any human input — communications back to base would be “intermittent”, according to DARPA.

As you might imagine, there are lots of potential issues to sending an armed, unmanned ship out into the ocean, including how to handle interactions with other users of the sea lanes. It’d be worse than embarassing to the US Navy to have one of their fancy new ACTUV vessels get tangled up in a fishing net or get caught in the middle of a regatta.

Perhaps unsurprisingly, then, it has been decided that the best way to hammer out a set of tactics for ACTUVs is to develop a game-style simulation pitting ACTUV against submarine and get people to play it — so crowdsourcing the methods and tactical principles that will then be coded into the robo-frigates’ AIs.

The new game — from which these visuals are drawn — is called ACTUV Tactics. The game engine is used in various military sims and in the Dangerous Waters commercial release of 2005. [. . .]. In it, a player tries to find and track an enemy submarine while avoiding collisions with commercial vessels and the like. Various different proposed models of ACTUV robo-frigate are available: Gator, Remora, Seahorse, Shark and Triton.

April 6, 2011

A good example of what not to crowdsource

Filed under: Britain, Humour, Media, Technology — Tags: , , — Nicholas @ 12:16

The Guardian tried to enlist the brainpower of the crowd to solve the problems at Fukushima. As innovative as some of these solutions might be, it does demonstrate that there are things that cannot be crowdsourced:

Todd: “Build the worlds biggest tank over the whole site with pre-fab tilt slab concrete. […] I have done similar projects on a smaller scale but not with nuclear waste.”

Weston, Nuclear Radiologist: “repair the reacters befor any thing else bad happiens”

Andrew, Inventor: “water problem is un-fixable. Stop trying. Let it run off into the Pacific.”

Hugh, Geology Student: “I would use explosive materials to detach the Fukushima plant from the main land, use air-bags to float it 50km out into the pacific and then sink the whole lot 7000m down to the bottom of the Japan Trench.”

Max: “I suggest removing radioactive contamination there by using a small controlled explosion of a specially engineered nuclear device at the site of the stricken Fukushima plant”

OmegaSector: “IN FUTURE, ALL NEW NUCLEAR REACTOR MUST BE BUILT OVER A 1.2 km hole. Any out of control reactor, one press of a buttom and boom, the reactor will fail down 1.2 km and then seal up with soil.”

Denny, Assistant to Dr Strangelove: “Small scale nuclear strike.”

Kevin: “Japan has over 30,000 suicides per year — that’s over 80 per day. Since these people are planning to kill themselves anyway, how about the government asking for volunteers to go in, fix piping, visually inspect the damage, etc..?”

Not Einstein: “friendly radiation… to probably cancel out its effects. Its more like injecting good cholesterols to fight off bad ones in your body. I am not versed in these nuclear technicalities but I do understand philosophy of things, and sometimes you just need to fight fire with fire.”

Oscar. Mike. Golf.

XM-25 video released

Filed under: Military, Technology, USA, Weapons — Tags: , — Nicholas @ 07:14

XM25 from PEO Soldier on Vimeo.

If the field trials in Afghanistan go well, this could be a very useful addition to the US Army’s armament collection. As the video shows, however, firing a 25mm round means there’s quite a kick to the soldier firing the weapon. The capability the weapon provides, however, isn’t available at the squad level any other way, so just hand it to your biggest trooper . . .

April 5, 2011

China’s High Speed Railways: not for the masses

Filed under: China, Government, Technology — Tags: , , , , — Nicholas @ 12:07

Reports of corruption among top officials and soaring costs for China’s HSR network:

. . . question-marks have been raised over these plans after the sacking in February of Liu Zhijun, the minister responsible for building the high-speed network. He was accused of skimming off as much as 1 billion yuan ($152m) in bribes and of keeping as many as 18 mistresses. Zhang Shuguang, another top official in the railways ministry, was later dismissed for corruption. Separately, on March 23rd, state auditors reported that $28m had been embezzled from the 1,300km high-speed line between Beijing and Shanghai, the highest-profile of China’s many rail projects.

Public support for high-speed trains is muted. The trains may reach 350km per hour but fares are proportionately eye-watering. That is all right for well-heeled travellers, happy to have an alternative to flying. But tens of millions of poor migrants who work far afield and flock home for the Chinese new year are being priced out the rail market and have to go by bus (the number of bus journeys is soaring).

The sacking of top officials may be the result merely of one of China’s periodic anti-corruption campaigns. Or it may be the upshot of a high-level factional or personal battle, in which corruption charges are often a favourite weapon. If so, the dismissals would not necessarily affect railway development.

April 4, 2011

Totally underground band loses millions to illegal downloads…or do they?

Filed under: Cancon, Economics, Media, Technology — Tags: , , , — Nicholas @ 09:39

An interesting article looks at a claim by an obscure band that their debut CD had been pirated over 100,000 times:

Late last week, TorrentFreak was contacted by a guy called Wayne Borean who alerted to us to a somewhat heated debate he’d been participating in on the ‘Balanced Copyright For Canada’ Facebook page.

“There’s a Rock Band called One Soul Thrust. They have a debut album, which I like (bought it off iTunes). However the first I heard of the band was when there were complaints that the band had gone Platinum — because of illegal Torrent downloads!” Borean explained.

Indeed, according to a press release from the band’s manager, Cameron Tilbury, the situation is very serious.

“The Canadian Recording Industry Association (CRIA) states that, to achieve Platinum status, an album must achieve sales of 100,000 copies/downloads of an album. Sales…that’s the key. A random polling of several torrent site’s downloads — ILLEGAL downloads — has shown that 1ST, the debut cd by ONE SOUL THRUST has been downloaded over 100,000 times,” he wrote.

That’s really terrible, isn’t it? An obscure band, hoping to make it big by selling their CD have an illegal audience more than 300 times their number of Facebook fans? How did all these illegal downloaders even find out about the band? Well, perhaps they didn’t:

At this point, since we couldn’t find any torrents on any site (Borean tried everywhere too), we have to admit we were beginning to wonder if this 100K download claim was some kind of publicity stunt. Furthermore, since Wayne Borean and Tilbury were starting to publicly tear each other apart (and getting pretty personal at times) it seemed sensible to get to the bottom of this, particularly since the band’s manager claimed that the all-powerful CRIA is supporting the band’s stance.

[. . .]

As many readers will now be aware, there is a huge problem. These results are completely fake and are generated from user input to draw traffic to site advertisers. You can type anything in the search boxes on some of these torrent sites (these apparently came from LimeTorrents) and anyone can appear to be pirated into oblivion [. . .]

We wrote back to Tilbury and explained our findings. We also asked him to comment on how he feels now that he realizes that people aren’t downloading the band’s music at all. He hasn’t responded to that question which is a real shame, because personally I think this is the most important part of the whole story.

I’m absolutely confident that there was no attempt to mislead with the band’s ‘piracy problem’ press release and that the band and their manager sincerely believed that 100K people had downloaded their album without paying for it. However, it would be intriguing to know what happened, when emotions of supposedly being ripped off by 100,000 pirates were replaced by other, perhaps more confused feelings.

Update, 5 April: Apparently you have two choices in a situation like this. 1) Own up to being mistaken and apologize for making a stink about a non-issue. 2) Double-down on stupid:

A day after One Soul Thrust’s manager had the entire Internet explain to him that his band’s music wasn’t being downloaded 100,000 times on BitTorrent sites, he’s still in deep denial. Today’s post is all about how the pirates attacked him “[b]ecause a debut album by an independent Canadian band is listed on torrent sites around the world and we had the audacity to point that out.” Um, no it’s not. It’s not listed on any torrent sites. As far as anyone can tell, not one human being on this planet has torrented this band’s CD. Dude, you made a mistake, you freaked out, you looked a little naive. Now you’re looking like an ass. Quit while you’re ahead, maybe?

Creative comments to that last post include 1) someone, somewhere actually upload the album to a torrent site, just so the band doesn’t look quite as pathetic, and 2) replace each track with varying length versions of a certain Rick Astley tune.

April 3, 2011

Richard Glover: “the internet may bring about the death of human civilisation”

Filed under: Environment, Media, Technology — Tags: , , , — Nicholas @ 12:26

Mr. Glover, a professional broadcaster and columnist, has determined that the collapse of civilization will come from internet trolling denialists:

It’s increasingly apparent that the internet may bring about the death of human civilisation, beating out previous contenders such as nuclear holocaust and the election of George W. Bush.

The agents of this planetary death will be the climate-change deniers who, it’s now clear, owe much of their existence to the internet. Would the climate-change deniers be this sure of themselves without the internet?

Somehow I doubt it. They are so damn confident.

They don’t just bury their heads in the sand, they fiercely drive their own heads energetically into the nearest beachfront, their bums defiantly aquiver as they fart their toxic message to the world. How can they be so confident, in the face of so much evidence to the contrary?

It’s the internet, of course, and the way it has given climate-change deniers the perfect forum — one in which groups of quite dim people can swap spurious information, reassuring each other there’s no evidence on the other side, right up to the point they’ve derailed all efforts to save the planet. Call it ”mutually reassured destruction”.

King Edward II restored

Filed under: Britain, History, Railways, Technology — Tags: , — Nicholas @ 10:53

. . . to the rails, not the throne:

The King Edward II steam engine was first used by Great Western Railway in the 1930s, pulling trains between London Paddington and the west of England.

However, it had been left to rot in a scrapyard in Barry, Wales, until it was saved for preservation by the Great Western Society.

No 6023 King Edward II is one of only three surviving locomotives of its class, built by GWR in 1930 for taking express trains over the steep banks of South Devon.

It’s always nice to see successful restoration efforts by private groups and individuals, although this particular one drew this comment from “jackcade”:

King Edward II? The fireman better make sure he doesn’t let his poker get too hot or someone might get hurt.

Photo from the restoration website, showing the engine right after repainting:

H/T to Elizabeth for the link.

April 2, 2011

The high cost of modern combat aircraft

Filed under: Cancon, Military, Technology — Tags: , , — Nicholas @ 11:35

Many claims have been made about the actual cost to Canada for the small tranche of F-35 aircraft the Conservative government has agreed to buy. The opposition claimed that there were potentially huge savings from having a competition instead of ordering F-35’s. This may or may not be true, especially as the Department of National Defence still hasn’t made a clear statement about what role the new aircraft will be expected to fill (that is, we’re told the F-35 is the answer, but the question still hasn’t been specified).

Back when we bought the F-18, for example, one of the stated criteria was that the plane we bought had to have two engines, due to the potential risk of engine failure in the far north (where airfields are very few and very far apart). This ruled out the F-16, a single-engine plane. This time around, we’re buying a single-engine plane, but the reasons have not been spelled out. It may well be that the F-35 really is everything we need, but it does feel like we’re buying it because we were part of the original “team” during the early design phases.

Combat aircraft are not cheap, and the currently available crop show that well:

Despite the high expense all the electronic gear, the F-18G is not the most expensive combat aircraft out there. The F-22 costs $355 million each. The low budget F-18E costs $94 million each, while the F-18G goes for $105 million. The F-35 costs over $130 million (and growing). Even unmanned aircraft are pricy, with the Global Hawk costing $182 million each (with high end sensors). Older fighters, like the F-16, cost $60 million, and an F-15E goes for about $100 million. The price of the export EA-18G hasn’t been set yet, but it will probably be under $100 million.

These prices constantly fluctuate because of the need to incorporate a share of the development cost for each aircraft built. While most development expense occurs before mass production begins, there is sometimes considerable additional development expense, or major refurbishment, later in the lifetime of an aircraft. Many modern warplanes cost more than most warships, and have the same high maintenance (periodic refurbishment and development of new components) expenses.

Update: There’s another Strategy Page article of interest, this one talking about the decline of Canadian air power:

When the Canadian government decided to send some warplanes to assist in establishing the no-fly zone over Libya, they found out that sending six of their CF-18 fighters would amount to 20 percent of flyable Canadian fighters. That was a bit shocking to most Canadians. But not to those who run the Canadian Air Force, as they know quite well that the CF-18 is on the way out. For example, late last year, Canada awarded $700 million in contracts to two commercial firms (Harris and L3) to provide maintenance for its F-18 fleet of jet fighters over the next nine years. This type of contract is increasingly popular, as they provide a cheaper way to provide all the more complex maintenance, other than what the ground crews do on a daily basis. This involves major overhauls, management of spare parts and upgrades of equipment. This includes the airframe, engines and electronics. Canada expects to retire its remaining 79 CF-18s by 2020, and replace them with 65 F-35s. Meanwhile, only about 30 CF-18s are flyable, because so many aircraft are undergoing upgrades and extended maintenance.

[. . .] Canada plans to replace its CF-18s with the new 65 F-35s. The trend towards fewer, but more capable and expensive aircraft is a common one. Half a century ago, Canada had a fleet of nearly 600 fighters, including license built U.S. F-86s, and what would eventually amount to over 600 CF-100 fighters, the only Canadian designed fighter to enter mass production. The CF-100s were gradually retired over the next three decades. The last ones left service as the CF-18 entered service. But in between, Canada built, under license, several other U.S. fighter designs. Canada had become a major aircraft manufacturer during World War II (over 16,000 aircraft produced), and that provided the foundation for an aircraft industry that remains a major supplier of commercial aircraft to this day.

Why the F-22 was not deployed to Libya

Filed under: Africa, Military, Technology, USA — Tags: , , — Nicholas @ 11:12

I thought the answer to that question was simple: the F-22 is a pure fighter, and there’s no crying need for pure fighters to enforce the no-fly zone that can’t be met with older aircraft. Apparently, it’s a bit more complicated:

Conspicuously absent in the skies over Libya is the new American F-22. Despite modifying the F-22 to operate as a fighter-bomber, the F-22 was uniquely unsuited to operate as part of the international force assigned to stop Libya from attacking its own people. That job requires aircraft that can carry lots of smart bombs. Defeating the Libyan Air Force was not a major chore, and was easily handled by less capable (and cheaper to operate) air superiority fighters. Another problem was communications. The F-22 is not equipped to operate as part of an international aerial armada. The F-22 is a stealthy lone-wolf. Most of the time, the F-22 does not use its radio. To communicate with other F-22s, a special, short-range system is used. The F-22 does not have the full suite of communications equipment most NATO warplanes carry.

[. . .]

The 36 ton F-22 has internal bomb bays, like the F-117, to enhance stealthiness. Thus it can carry two half ton smart bombs, or eight 250 pound SDBs (ground penetrating Small Diameter Bombs) internally, in addition to a pair of air-to-air missiles. However, the F-22 is not yet modified to carry the SDB. The internal bays were originally designed to carry six air-to-air missiles, not bombs. Using the external hard points, which makes the aircraft more visible on radar, an F-22 can carry about four tons of bombs and missiles.

The F-22 has the most advanced radar and electronic warfare gear of any jet fighter. When you include the cost of research and development, each F-22 ends up costing nearly $400 million. But for pilots in certain types of combat, it’s money well spent. But not for what was needed over Libya, where most non-stealthy fighters can carry four or more tons of bombs and missiles.

April 1, 2011

XM-25 man-packable cannon moves into production

Filed under: Asia, Military, Technology, USA, Weapons — Tags: , , — Nicholas @ 09:55

I’ve updated the earlier report.

Google introduces “Gmail Motion”

Filed under: Humour, Technology — Tags: , , — Nicholas @ 07:35

Erasing your (digital) past

Filed under: Liberty, Media, Technology — Tags: , , — Nicholas @ 00:08

Eric Schmidt, former CEO of Google said: “I don’t believe society understands what happens when everything is available, knowable, and recorded by everyone all the time.” Privacy is dying, if not already clinically dead, in the online world. If you really want (or need) to airbrush yourself out of the picture, here are some suggestions on how to go about doing it.

The Internet has made our world a lot smaller. It has also made our histories a lot better-catalogued and more-searchable, and those developments — coupled with the weird phenomenon that people’s common sense tends to fly out the window when it comes to posting information and pictures — aren’t always beneficial to us.

[. . .]

Instead of popping you into a Witness Protection program — or changing your name — let us show you five steps on how to disappear from the Internet.

Step 1: Know Thine Enemy

Before you take any action, you need to know what you’re trying to get rid of. So first, do a search for your name — don’t just search Google, though, search online people search aggregation sites such as ZabaSearch, Intelius, Pipl, and Spokeo.

Here’s how to run an online background check (on yourself) for free.

« Newer Posts — Older Posts »

Powered by WordPress