Category Archives: Technology and Society

The OPM Data Breach

So, apparently they’ve been lying under oath about it.

I wish I were surprised. I’m old enough to remember a time when people actually got in trouble for that.

[Update a while later]

How and why the OPM got hit with the biggest hack of all time.

[Update a few minutes later]

From comments:

Oh, it’s worse than that, though I realize it’s hard to imagine.

Consider: root access doesn’t just let you read the information. It lets you replace valid information with whatever you want. It lets you insert records into the data. In other words, it lets you create an SF-86 and background investigation for anyone. It lets you insert your own agents into the security records.

Including, I might add, agents of yours who might be hired to work at OPM. Which means that not only is that database blown, it must be considered corrupt – the information in it can’t be trusted because it may have been altered. That in turn means it needs to get wiped and go back to bare metal, then be reloaded from paper records. If they still have those records. And even if they do that, they can’t necessarily trust the records of the people doing this reloading.

This is what happens when you put incompetent political hacks in positions of great responsibility. And there’s no accountability.

[Update a few minutes later]

Andy Weir On Elon Musk

Ashlee Vance had a conversation with him:

I love that NASA is working on new technologies and new stuff, but it just seems way more expensive than alternatives. You’re talking about spending $20 billion on a booster to put 150,000kg in orbit. Meanwhile, SpaceX intends to put 53,000kg into space for $100 million per booster. You could buy three of SpaceX’s Falcon Heavy rockets for $300 million, then spend $1 billion to assemble whatever heavy thing you wanted to put in space, and keep the other $8 billion. It just seems like this huge discrepancy in expenses. Governments don’t always do the economically viable thing, right? There’s a lot of politics involved.

You don’t say.

Science, Uncertainty And Advocacy

Judith Curry is attending an interesting conference in the UK, and has some formal comments:

Some people regard any engagement of a scientist with the policy process as advocacy – I disagree. The way I look at it is that advocacy involves forceful persuasion, which is consistent with the legal definition of advocacy.

In the code of ethics for lawyers, where forceful persuasion is part of their job description, they are ethically bound only not to state something that they know to be false. Lawyers are under no compunction to introduce evidence that hurts their case – that’s the other side’s job.

Unlike lawyers, scientists are supposed to search for truth, and scientific norms encourage disclosure of sources and magnitude of uncertainty. Now if you are a scientist advocating for a specific issue, uncertainty will get in the way of your forceful persuasion.

In principle, scientists can ethically and effectively advocate for an issue, provided that their statements are honest and they disclose uncertainties. In practice, too many scientists, and worse yet professional societies, are conducting their advocacy for emissions reductions in a manner that is not responsible in context of the norms of science.

Much of climate “science” abandoned science years ago, going back to Schneider.

Google

Oh, yes, we can totally trust the company:

Yes, Chromium is bypassing the entire source code auditing process by downloading a pre-built black box onto people’s computers. But that’s not something we care about, really. We’re concerned with building Google Chrome, the product from Google. As part of that, we provide the source code for others to package if they like. Anybody who uses our code for their own purpose takes responsibility for it. When this happens in a Debian installation, it is not Google Chrome’s behavior, this is Debian Chromium’s behavior. It’s Debian’s responsibility entirely.

Yes, we deliberately hid this listening module from the users, but that’s because we consider this behavior to be part of the basic Google Chrome experience. We don’t want to show all modules that we install ourselves.

If you think this is an excusable and responsible statement, raise your hand now.

Nothing evil about that at all. Nope.

I wonder if they’re pulling this stunt on the Fedora packages as well?

I don’t normally have a camera on my desktop, or a mike plugged in. I keep the camera taped on my laptop. Not sure if I can physically disable the mike, though.

[Update a while later]

I apologize for any confusion. The “quote” above is not a literal one. I just put it in quotes to distinguish from the blogger’s own commentary. It is his paraphrase of what Google says. I’ve changed it to italics.