Computers, Society, and the Lawsmb%c2%a0%c2%a0%c2%a0%c2%a0... · 2017-04-13 · Recording...

Computers,Society,andtheLawStevenM.Bellovin

DepartmentofComputerScience,ColumbiaUniversityhttps://www.cs.columbia.edu/~smb

TheSpaceShuttleChallengerl NASAwantedtolaunchtheshuttleonacoldJanuaryday

l ThecrucialO-ringshadneverbeentestedatlowtemperatures,butsomeThiokolengineerssuspectedaprobleml RogerBoisjoly hadwarnedofitsixmonthsearlier

l AllanMcDonald,directorofthesolidrocketprogramatThiokol,opposedthelaunch

l NASA:“MyGod,Thiokol,whendoyouwantmetolaunch,nextApril?”

Engineersoftenknowthingsthatmanagersdon’tknowbutneedto

SomeCasesareEasylVolkswagenandthe“defeatdevice”softwaretofoolemissionstests

lPrenda Lawanditsboguscopyrightinfringementlawsuitsl AjudgehearingonecasereferredthemattertotheFBI…

lViruses,ransomware,andthelike

VotingMachinesl There’slongbeeninterestincomputerized(“DRE”—DirectRecordingElectronic)votingmachinesandInternetvoting

l Virtuallyallcomputerscientistsopposetheidea:“Don’tuseourtechnology!”

l But:“Webankonline;whycan’twevotethatway?”

(PhotobyEdFelten)

ComputerScientistsandVotingSystemsl We knowhowbuggyandinsecuresoftwarecanbe

l We knowthatATMs,etc.,canhavelogfilesand(insomecases)wecan“unwind”problematictransactions

l But—anonymityandresultintegrityareextremely importantinvoting

l (Rerunningelectionsisproblematic.Iflastyear’selectionwerererunaweeklaterbecauseofcomputerproblems,whatwouldtheresultshavelookedlike?)

Howdowecommunicatethesoftwareissuestolegislators?smb

Encryptionl TheFBIclaimsthatthey’re“goingdark”becauseofincreasinguseofencryption

l Theywantsomesortof“exceptionalaccess”toletthemgetattheplaintext

l Mostcryptologiststhinkthatthisisdangerous,thatcryptographicprotocolsandmechanismsarefartoohardtogetright

l Why?

HistoricalExample:TheWorldWarIIEnigmaMachine

Photo:publicdomainsmb

Youselecttheproperrotors

Adjusttherotorstotheir“groundsetting”

Settheplugboard

Photo:BobLord,viaWikiMedia Commonssmb

Photo:PaulHudson,viaFlickr

• Pickthreerandomlettersandencryptthemtwice,andsendthosesixlettersasthestartoftheencryptedmessage

• Resettherotorstothosethreeletters

WhatCouldGoWrong?lSendingthesame,simplemessageeverydaywasafatalflaw

lPickingnon-randomletterswasafatalflaw

lSendingamessageconsistingofnothingbuttheletter“L”wasafatalflaw

lEncryptingthethreeletterstwice wasafatalflaw

TheThreeLettersl Imaginethat“XJM”wasencryptedto“AMRDTJ”

l ThecryptanalystsrealizedthatA andD representedthesameletter,M andT werethesame,andR andJ werethesame

l Thisgaveawayvaluablecluestotherotorwiringandtherotororder!

Cryptographyishard…

LegalIssuesl Sometimes,therearelegalissuesinvolvingcomputertechnologyl Today,almosteverythinginvolvescomputertechnology…

l Mostlegislatorsandjudgesknownothingofcomputers

l Howcantheyreachtherightanswer?

l Wemayknowtheanswers—butwehavetolearntospeaktheirlanguage:thelaw

Example:WiretapLawandtheInternetl UnderUSlaw,phoneandemailconversationsarestronglyprotected—policeneedasearchwarrantbasedon“probablecause”toobtainthem

l However,informationthatisvoluntarilygiventoa“thirdparty”isonlyweaklyprotected;itcanbeobtainedifitis“likelytoberelevant”toanongoingcriminalinvestigation

l Phonenumbersarethird-partydata,obtainedbya“penregister”or“trap-and-tracedevice”

l Whataboutemailaddresses?

SendingEmail

ISP ISP

OutboundMailServer

InboundMailServer

Email(Simplified)lMailgoesfromasender’sdevicetoan“outboundmailserver”

l Fromthere,itissenttotherecipient’s“inboundmailserver”

l Therecipientdownloadsitfromthatmachine

l ThemailserversaregenerallyISP- orenterprise-operated

It'sTooComplicated

SendingMyselfEmail19

220machshav.com ESMTPExim4.82Tue,11Mar201419:43:03+0000HELOeloi.cs.columbia.edu250machshav.com Helloeloi.cs.columbia.edu [2001:18d8:ffff:16:12dd:b1ff:feef:8868]MAILFROM:<smb@eloi.cs.columbia.edu>250OKRCPTTO:<smb@machshav.com>250AcceptedDATA354Entermessage,endingwith"."onalinebyitselfFrom:BarackObama<president@whitehouse.gov>To:<smb2132@columbia.edu>Subject:Test

Thisisatest.250OKid=1WNSaS-0001z5-1dQUIT221machshav.com closingconnection

Message

ConversationWithAThirdParty20

Message

WhattheRecipientSees21

Message

CourtsHaveGottenThisWrong‘Thatportionofthe“header”whichcontainstheinformationplacedintheheaderwhichrevealsthee-mailaddressesofthepersonstowhomthee-mailissent,fromwhomthee-mailissentandthee-mailaddress(es)ofanyperson(s)“cc’d”onthee-mailwouldcertainlybeobtainableusingapenregister and/oratrapandtracedevice.’

(InreApplicationofUnitedStates,396F.Supp.2d45)

l Butthe“header”isn’tthird-partydata;it’scontent,whichcannotbeobtainedwithapen/traporder

l Ifyouthinkthat’shardtoexplaintoajudge,whataboutTCPportnumbers?

Paper:http://jolt.law.harvard.edu/assets/articlePDFs/v30/30HarvJLTech1.pdf

TheInternet:ALayeredArchitecture

It'sTooComplicated

IsaSearchWarrantNeededtoTrackSomeone’sLocationviatheirCellPhone?l Lawenforcement:“No,you’reinpublic,andyou’vegivenyourlocationtothephonecompany”

l But—theFourthAmendmentbars“unreasonable”searches

l Legalacademics:ifyoutracksomeonefortoolong,youcanbuildupaveryfullpictureoftheirlife,whichis unreasonable(called“mosaictheory”)

l Rejoinder:Howlongis“toolong”?Howwillpoliceknowwhentheyneedawarrant?

CanBigDataProvideanAnswer?lUsemachinelearningtomakepredictionsbasedonlocationdata

lWhenpredictionsareaccurateenough,amosaicexists

l Inotherwords,usecomputersciencetoanswerthequestion

l Thetechnicalliteraturesupportsthebasicpremise:withenoughpoints,thewholeisgreaterthanthesumofitsparts

l Notethejumpinaccuracyat5weeksand28weeks

Figure 9. Predicting Significant Other over Time – we chose the significant other as the node with the maximum strength.

Figure 10. Predicting ethnicity using SMS social network over time (65 weeks) – after every week we analyze the graph with the same method as described at 3.4 (Louvain Algorithm). Figure 11 demonstrates the correlations among the learning process dynamics of several features. It was calculated using the Pearson product-moment correlation coefficient (a measure of the linear dependence between two variables X and Y, giving a value between +1 and −1). The correlation is defined as the covariance of the two variables divided by the product of their standard deviations. In general, variables of correlation higher than 0.5 are usually considered strongly correlated.

Figure 11. Pearson correlation between the learning process dynamics for three of the properties we predict. As might be expected, there are some strong correlation between the different evolution trajectories of the learning processes of the three features. However, notice that while some are very highly correlated (e.g. Origin \ Significant other), which might point out a strong correlation in the underlying data itself (i.e. people tend to get married more within the same ethnic group), other display lower correlation (e.g. Origin \ Is student).

5. DISCUSSION AND FUTURE WORK As reviewed in section 3.4, the Gompertz function is a well-known technique that has been used to model processes over time. Our analysis confirms that the evolving learning of social and individual features, as mobile phone sensing data accumulates over time, can also be fitted to the form of a Gompertz function. We see that this result is true for the prediction of different features, both social and individual, and for a set of different prediction methodologies, using a varying number of input signals, all collected via mobile phones in a field deployment.

Correlations between the evolution trends of the different learning process, as depicted in Figure 11, may imply underlying correlation between the raw data itself, and can hence be used as additional validation for correlated features and observations (such as the suggestion that people might have a higher tendency to marry within their own ethnic group, as has been widely observed [33,34]). In addition, this information could be used for informing the design of data collection configuration for an ongoing or future data collection initiative. For example, if we know of two features that are highly correlated in the same experiment, but one of them is very “cheap” to gather from a processing or battery power perspective, while the other is very expensive, we might decide that the cheaper one is sufficient (e.g. one requires just reading the phone’s built-in call-log database while the other requires battery-intensive GPS scanning). Alternatively, we might want to make sure that two correlated values are gathered in order to strengthen the result and help deal with noise.

MachineLearningand MosaicTheory

(GraphfromAltshuler etal.)

4/13/17

OneWeekisthelimitlExperimentsshowthatweek-to-weekmovementsareverypredictable(Sadilek &Krumm)

lWeekendmovementsaremore predictable,thoughofcoursedifferentthanweekdaymovement

lWithsevendaysofobservation,youhaveaverygoodpictureofsomeone’slife

4/13/17

WhereAreWe?

4/13/17

lFromatechnicalperspective,mosaictheoryiscorrect:youreallycanbuildaveryfullpictureofsomeonewithenoughdatapoints

lThelimitshouldbeaboutoneweek

lBut—movementsarestillinpublic

lBut—thereareotherlegalissuesthatmightariseinspecificcases,suchasthethirdpartydoctrine

ResultslThesciencealoneisn’tenough

lFundamentally,thisisalegalquestion,notatechnicalone.Wecansupplyfactsbutthecourtsdeterminethelaw.Gettingtherightanswerrequiresbothkindsofinput,legalandtechnical.

Paper:http://lawandlibertyblog.com/s/Hutchins.pdf

4/13/17

WhatDoWeDo?l Firstandforemost:decide tobeinvolved

l Beawareofsocietalissuesl Makeethicalchoicesaboutcareerpathsandon-the-jobbehavior

l Learnthelanguageoflawandpolicyl Youdon’thavetobealawyer—I’mnot—butyoudoneedtounderstandhowtotalktopolicymakers

l Getinvolved—spendtimeinTrentonorWashington

l Ifyoudon’tspeak,theycan’tlisten,eveniftheywantto

Computers, Society, and the Lawsmb%c2%a0%c2%a0%c2%a0%c2%a0... · 2017-04-13 · Recording...

Documents

Yahoo! Mail Applicationsopenhacklondon.pbworks.com/f/Yahoo%C2%A0-%C2%A0OHDL%C2%A...2009 ¼HOO! MAIL O Offline Hi, rckenned Sign Out What's New Mall Classic Home Inbox I mesa ge From:

The Crypto Warssmb%c2%a0%c2%a0%c2%a0%c2%a0...The American Black Chamber The US originally did little of this, but learned rapidly during World War I (During the Civil War, the Union

Encryp’on, Security, and Privacysmb%c2%a0%c2%a0%c2%a0%c2%a0… · Examples l Incorrectly padding a short message to match the encryp’on algorithm’s requirements has resulted

Preparing Your Google Cloud VM for W4187smb%c2%a0%c2%a0%c2%a0%c2%a0… · 7. Select No for \Please email me updates ..." unless you actually want email updates on new o erings. 8

Internet Security: Then and Nowsmb%c2%a0%c2%a0%c2%a0...13 SSL To some extent, a fig leaf: “it's safe to shop here, because your traffic is encrypted” 99.999% of consumers don't

Viruses, Trojan Horses, and Wormssmb%c2%a0%c2%a0%c2%a0%c2%a0… · Worms in Science Fiction “Let me put it another way. You have a computer with an auto-dial phone link. You put

A Introduction to Modern Cryptographysmb%c2%a0%c2%a0%c2%a0...on the history of cryptography. The Code Book: The Science of Secrecy from Ancient Egypt to Quantum Cryptography, Simon

C2%A0… · Created Date: 12/11/2018 2:39:08 PM

Cancionero Tuna Filosof%80%a0%a0%Eda y Letras m%80%a0%a0%e1laga

A0 · 2018. 4. 12. · A0 Name: Lindsey Millns A0 Title: Assistant Director A0 Office: Institutional Research A0 Mailing Address: TCU Box 297020 A0 City/State/Zip/Country: Fort Worth,

Block Diagram Pin Description (Top-side view)C1+ C1-B2+ B2-C2+ C2-B3+ B3-C3+ C3-V DD A0+ A0-D0+ D0-A1+ A1-D1+ D1-A2+ A2-D2+ D2-A3+ A3-D3+ D3-SEL1 SEL2 PI3PCIE3413A 3.3V, PCI Express®

Frank Miller’s Codebooksmb%c2%a0%c2%a0%c2%a0%c2%a0… · Lots of Google and Google books searches; ... memory of it in 1912 when he formulated his maxim? Does the evidence exist

Biometrics; Authentication as a Systems Problemsmb%c2%a0%c2%a0%… · · 2013-09-26the problmes are likely to remain difﬁcult issues for system designers? Steven M. Bellovin

Doing History in the Internet Agesmb%c2%a0%c2%a0%c2%a0... · the Freemasons (1829), the Templars (1867), and the Ku Klux Klan (1872) Neither of these two meanings is listed in the

Viruses, Worms, and Trojan Horsessmb%C2%A0%C2%A0%C2%A0%C2%A0%… · How do they spread? What can be done about them? Steven M. Bellovin February 9, 2020 2. Worms in Science Fiction

Identity, Security, and Privacysmb%c2%a0%c2%a0%c2%a0%c2%a0%c2%a0/tal… · Reputation should adhere to the real identity A bad guy should not be able to discard a bad reputation by

Authentication - cs.columbia.edusmb%c2%a0%c2%a0%c2%a0%c2%a0… · password as the key + This is where the 8-character limit comes from Any decent cryptosystem can resist ﬁnding

Wireless Security - cs.columbia.edusmb%c2%a0%c2%a0%c2%a0%c2%a0… · Wireless Security Wireless Security Conﬁdentiality Integrity Wireless Architecture Access Points Which AP? The

STAINES AP-PLANS PHDD C2-A0 HVAC MECH

Con%80%A0%A0%F3cete a Ti Mismo (Omraam Mikha%80%A0%A0%EBl A