US Federally Funded Research: Open Access, Folks

September 7, 2022

In a surprise announcement, reports Ars Technica, “US Government to Make All Research it Funds Open Access on Publication.” The new policy was issued by the Office of Science and Technology Policy (OSTP) at the end of August. We expect this will be a windfall for researchers—in and outside the US. Though the US government is believed to be the world’s largest funder of scientific research, only those paying for subscriptions to academic journals have had access to many (most?) publicly funded studies. Writer John Timmer notes this constraint has loosened in recent years as a result of increased open-access journals and, especially with COVID-19 research, a trend toward preprints. We learn:

“Some people involved in scientific publishing worried that these trends would undercut the finances of the entire publishing industry, while others hoped to push them to open up all scientific publishing. This tension played out in the halls of Congress, where competing legislation would mandate or block open access to federal research. A truce of sorts was reached during the Obama administration. For federally funded research, publishers had two choices: either make the publication open access from the start or have subscription-only access for a year before opening things up. Government-sponsored repositories were opened to host copies of papers that weren’t made open access on the publisher’s site. In the intervening time, there has been a lot of growth in open access journals, and many subscription journals allowed authors to pay a fee to immediately open published papers. Most subscription journals also offered COVID-related papers as open access without any additional fees. OSTP has apparently decided that these adjustments have prepared the industry to survive even greater access levels.”

One provision requires a digital identifier, like a DOI, for all data and documentation. The policy memorandum argues the benefits of open access became apparent during the pandemic, when it accelerated researchers’ understanding of the virus and the development of a vaccine. Acting head of the OSTP Alondra Nelson expects the change will lead to gains across society. She stated:

“When research is widely available to other researchers and the public, it can save lives, provide policymakers with the tools to make critical decisions, and drive more equitable outcomes across every sector of society.”

Publishers have some time to pivot—the policy goes fully into effect in 2026. The article notes they could still make a buck from these papers by creating versions with added features like integrated graphics / videos or cross-references to other studies. Will that be enough to sooth ruffled feathers?

Cynthia Murrell, September 7, 2022

Australia: Harbinger for Tech Giants and Their Exposed Quite Weak Spot?

August 31, 2022

The US technology giants color many discussions. Facebook seems to want everyone to live and work in a computer graphics generated world. Google allegedly wants to improve search. Yada yada yada.

The weak spot for most of these outfits is the perception that online provides a haven for bad actors. Among bad actors, one of the least salubrious niches is CSAM, jargon for child sexual abuse material. For some bad actors, the last couple of decades have been the digital equivalent of a Burning Man devoted to the heavy metal life of shadows.

True or false?

It depends on whom one asks. If you ask me and my team, the big technology outfits as well as the feeder modules like shadow Internet Service Providers have not taken enough positive steps to address the CSAM issue.

Australia Orders Tech Giants Apple, Microsoft, Snap and Meta to Step up Actions against Child Abuse Material” may be a harbinger of what’s coming from other countries in 2023. The article from the estimable Epoch Times reports:

Australian authorities have ordered global tech giants to report on the actions they have taken to stop the spread of child sexual exploitation materials on their platforms and will impose penalties on non-compliant companies.

What happens if New Zealand, the UK, Canada, the US, and other like minded companies follow in Australia’s footsteps?

CSAM is a problematic and troublesome issue. Why is Australia taking this action? The Wild West, “I apologize, senator” approach has worn thin.

CSAM is a weak spot, and big tech and its fellow travelers will have to do some fancy dancing in 2023 in my opinion. It’s time for the night club to close.

Stephen E Arnold, August 31, 2022

EU: Ahead of the US But Maybe Too Late Again

August 30, 2022

When making up for decades of inaction, just create more bureaucracy. That seems to be the approach behind the move revealed in Reuters‘ brief article, “EU Mulls New Unit with Antitrust Veterans to Enforce Tech Rules—Sources.” The European Commission seems to think it might be difficult to force tech giants to comply with the recently passed Digital Markets Act (DMA). Now where would they get that idea? The write-up tells us:

“The landmark rules, agreed in March, will go into force next year. They will bar the companies from setting their own products as preferences, forcing app developers to use their payment systems, and leveraging users’ data to push competing services. The new directorate at the Commission’s powerful antitrust arm may be headed by Alberto Bacchiega, director of information, communication and media, in charge of antitrust and merger cases involving the tech, media and consumer electronics industries, one of the people [familiar with the matter] said. Bacchiega could also be assisted by Thomas Kramler, head of the unit dealing with antitrust cases in e-commerce and data economy, and currently spearheading investigations into Apple and Amazon, the person said. Both officials are already liasing with those at the Commission’s Directorate-General for Communications Networks, Content and Technology which will jointly enforce the DMA, a third person said.”

Conveniently, both Bacchiega and Kramler were away on vacation and could not be reached for comment. A spokesperson stated the Commission is shuffling employees, assigning about 80 staff members to enforce the DMA. We wonder whether that is enough to counter Big Tech’s corporate resources, even with a pair of seasoned antitrust veterans at the helm.

Cynthia Murrell, August 29, 2022

Meta: What Does the Modern MySpace Do?

August 24, 2022

Frankly I don’t know what the Zuck and his team of wizards can do. I read “Teens, Social Media and Technology 2022.” The link leads to a study summary, a page of general info, and a summary of the Pew methodology.

One finding from the survey mavens at Pew Research caught my attention. If the methodology was on the money and the data processed in a way that kept the butcher’s thumb off the weighing pan, here’s a thrilling statement:

the share of teens who say they use Facebook, a dominant social media platform among teens in the Center’s 2014-15 survey, has plummeted from 71% then to 32% today.

In the span of 72 months, the Zuckbook watched teens who are considered a part of the future of the datasphere shift to short form videos. The write up included one of those charts colored in such a way to make legibility a bit of a joke. Here’s a screenshot with the bold blue line heading south. Note that despite the legibility, the other lines are heading up. YouTube is a floating dot at the top of the chart because, well, YouTube. Quasi-monopoly. Most popular online service in the “Stans.”

image

Should YouTube be worried? Not yet. The write up reports:

About three-quarters of teens visit YouTube at least daily, including 19% who report using the site or app almost constantly.

For more Pew data, follow the links in the cited article.

There’s not much analysis of the whys and wherefores, but the data are clear. The allegedly Chinese linked outfit TikTok has access to useful data from young people. What could a crafty person do with these data? Wait until one cluster identified as susceptible individuals and then approach or attempt to influence them.

Stephen E Arnold, August 24, 2022

Yandex: Has Russia Embraced the Chinese Approach to Social Media and Online?

August 23, 2022

The answer to the question “Has Russia Embraced the Chinese Approach to Technology?” is, “Seems like it.”

Like China, Russia has come to understand the power and threat online services represent to the entities holding nation state power. Technology companies which follow different rules than “regular” countries have to be brought under control or killed outright. Russia is into control.

Vkontakte top dog is the scion of Mr. Putin’s top dog. If you are into Russian names, the boss of Vkontakte is Vladimir Kirienko. Mr. Putin’s confidante and senior administrator is Sergei Kirienko. But a tame CEO  is not enough. Threats have to be put in a cage and made subject to a higher power, not people with mobile phones.

Vkontakte is a semi-Facebook, just in Russian. It has about 100 million users. The company’s properties include Mail.ru, the social network Odnoklassniki, and a food delivery outfit. According to “Yandex Reaches Binding Deal to Divest News Service, Homepage to VK”:

Yandex said it is pursuing a “strategic exit from its media businesses” with the sale of Yandex.News, Yandex.ru and the Yandex.Zen blogging tool to VK. The Yandex.ru domain will be renamed dzen.ru under VK’s control and further development. Yandex’s main page — with search, mail and non-media tools — will be renamed ya.ru.

What happens to Yandex email addresses? In addition to being read and analyzed by the watch dogs, the future of Yandex mail is fuzzy.

The key take away for me is that China and Russia recognize the threat social media and online information pose. If these nation states’ concerns are valid, will countries with uncontrolled social media operating without meaningful oversight and regulation tear themselves apart?

China’s and Russia’s strategic military thinkers could be anticipating this result. Which view is correct? Social media is the Zucker’s view of bringing people together or the opposite?

Interesting question to consider.

Stephen E Arnold, August 23, 2022

DARPA Works to Limit Open Source Security Threats

August 9, 2022

Isn’t it a little late? Open-source code has become an integral part of nearly every facet of modern computing, including military and critical infrastructure applications. Now, reports MIT Technology Review, “The US Military Wants to Understand the Most Important Software on Earth.” It seems military researchers have just realized there is no control over, or even accounting for, the countless contributors to open-source projects like the Linux kernel. That software alone underpins the operation of most computers. And yet the feature that makes open-source software free and, therefore, ubiquitous also makes it vulnerable to bad actors.

Since it cannot turn back the clock and consider security before open-source code got baked into critical software, DARPA will instead scrutinize the people and organizations behind open-source projects. The program, dubbed “SocialCyber,” will take 18 months and millions of dollars to implement. It will use a combination of the latest AI tech and good old-fashioned sociology to pinpoint potential threats. Reporter Patrick Howell O’Neill writes:

“The ultimate goal is to detect and counteract any malicious campaigns to submit flawed code, launch influence operations, sabotage development, or even take control of open-source projects. To do this, the researchers will use tools such as sentiment analysis to analyze the social interactions within open-source communities such as the Linux kernel mailing list, which should help identify who is being positive or constructive and who is being negative and destructive. The researchers want insight into what kinds of events and behavior can disrupt or hurt open-source communities, which members are trustworthy, and whether there are particular groups that justify extra vigilance. These answers are necessarily subjective. But right now there are few ways to find them at all. Experts are worried that blind spots about the people who run open-source software make the whole edifice ripe for potential manipulation and attacks. For Bratus, the primary threat is the prospect of ‘untrustworthy code’ running America’s critical infrastructure—a situation that could invite unwelcome surprises. …This kind of research also aims to find underinvestment—that is critical software run entirely by one or two volunteers.”

The program relies on partnerships between DARPA and several small cybersecurity research firms like New York’s Margin Research. These firms will ascertain who is working on what open-source projects. Margin will focus on Linux, considered the most urgent point of concern. Open-source programming language Python, which is often used in machine-learning projects, is another priority. SocialCyber is quite an undertaking—it is the pound of cure we could have avoided with an ounce of foresight several years ago.

Cynthia Murrell, August 9, 2022

TikTok: Is It a Helpful Service for Bad Actors?

August 9, 2022

Do you remember the Silicon Valley cheerleaders who said, “TikTok is no big deal. Not to worry.” Well, worry.

TikTok: Suspected Gangs Tout English Channel Migrant Crossings on Platform” states:

The Home Office [TikTok] said posts which “promote lethal crossings” were unacceptable, but there are calls for more to be done to stop people-smuggling being advertised online.

TikTok is allegedly taking the position that such criminal promotions “have no place” on the China-linked service. The BBC report includes this statement:

A spokesman for TikTok said: “This content has no place on TikTok. We do not allow content that depicts or promotes people smuggling…and have permanently banned these accounts. “We work closely with UK law enforcement and industry partners to find and remove content of this nature, and participate in the joint action plan with the National Crime Agency to help combat organized immigration crime online.”

I am skeptical about TikTok for these reasons:

  1. Data collection
  2. Analyses which permit psychological profiling so that potential “insiders” can be identified
  3. Injection of content which undermines certain social concepts; that is, weaponized information.

Net net: Delete the app and restrict access to the system. Harsh? Maybe too little too late, cheerleaders.

Stephen E Arnold, August 9, 2022

YouTube: Latent Power and a Potential Flash Point within Russia?

August 8, 2022

I read the estimable Murdoch write up called “How YouTube Keeps Broadcasting Inside Russia’s Digital Iron Curtain.” And how about this subtitle?

Access to the video site allows Russians access to one of the few sources of independent information about the Ukraine war

(Keep in mind that you will have to pay to view the article on the WSJ.com site.)

I have suggested that Russia’s regulators see the Google as a giant piggy bank with a ceramic head resembling Godzilla’s. How powerful is Google’s YouTube? The write up suggests that the Alphabet Google YouTube DeepMind thing is pretty powerful. Well, actually what’s powerful is YouTube and its millions upon millions of videos.

Here’s the key statement in the “real” news article:

“Some banks are too big to fail, and some apps are too big to be blocked,” stated Nu Wexler, a former coverage communications staffer at Google, Meta and Twitter. “The Russian government knows they would face a backlash if they were to block a popular app like YouTube in the country.”

Why not enjoy the videos on Rutube, Rumble, or the high quality streamgun.vod site? The reason, according to one attendee at a law enforcement, crime analyst, and intelligence professional centric conference boils down to YouTube being Number One with a bullet.

The idea is that in some of the cheerful outposts in Siberia as well as the toasty towns in Sochi, YouTube is the primary source of entertainment. Okay, but I suggested vodka was the big dog. Wrong, I learned. Despite the quality of Russian state television and the outstanding Russian motion pictures, YouTube kept the young folks busy.

I have yet to see credible data which suggests that YouTube, not Russia billboards, is the information gun in Russia. There is, of course, TikTok and some of the low cost pirate streaming services. YouTube has triumphed it is alleged.

Here’s a factoid from the write up I saw:

YouTube had greater than 85 million month-to-month distinctive viewers in Russia in June, in line with analytics firm.

And how about this allegedly accurate item?

The video website was utilized by 47% of a pattern of Russians surveyed in April by the unbiased Russian pollster Levada Center, making it the nation’s second-most common social community behind native service VKontakte.

Maybe Rutube can displace the GOOG’s YouTube? Maybe:

Russian officers have stated state cash could be invested into Rutube, a unit of the state-owned vitality big Gazprom PJSC that options pro-Moscow content material. It had 9.7 million month-to-month distinctive viewers in Russia in June, SimilarWeb stated.

Net net: No wonder the Alphabet Google YouTube DeepMind operation finds pesky laws enacted by nation-states annoying. YouTube is able to do what Ukraine cannot: Displace that which it finds annoying and a threat to its data collection and advertising efforts. Google is in a position to trigger social unrest in Russia by pulling out of the country’s datasphere. That’s power. What if YouTube were used to incite citizen unrest in Russia and maybe a couple of other countries?

Interesting idea and worth consideration by some I suppose.

Stephen E Arnold, August 8, 2022

Closing the COPPA Loophole

August 3, 2022

We need updated legislation to protect children from their own phones and tablets, according to the Washington Post, because “Your Kids’ Apps Are Spying on Them [paywall].” Reporter Geoffrey A. Fowler writes:

“Apps are spying on our kids at a scale that should shock you. More than two-thirds of the 1,000 most popular iPhone apps likely to be used by children collect and send their personal information out to the advertising industry, according to a major new study shared with me by fraud and compliance software company Pixalate. On Android, 79 percent of popular kids apps do the same. Angry Birds 2 snoops when kids use it. So do Candy Crush Saga and apps for coloring and doing math homework. They’re grabbing kids’ general locations and other identifying information and sending it to companies that can track their interests, predict what they might want to buy or even sell their information to others.”

The article elaborates on the problem with details from that Pixalate study and other research. It emphasizes:

“Children’s privacy deserves special attention because kids’ data can be misused in some uniquely harmful ways. Research suggests many children can’t distinguish ads from content, and tracking tech lets marketers micro-target young minds. This is why kids are at the center of one of America’s few privacy laws, the 1998 Children’s Online Privacy Protection Act, or COPPA. It said that companies aren’t supposed to gather personal information about kids under 13 without parental permission.”

So if COPPA prohibits this data grab, why is it happening? Because of the “actual knowledge” loophole. App makers must simply pretend they do not know children are using their software. Preschool-type games featuring cute cartoon animals? Grade 3 homework helpers? We are supposed to believe those are meant for ages 13 and up. To make matters worse, Apple’s and Google’s app stores make it difficult for parents to find apps that do comply with COPPA. Instead, due diligence means combing through each and every app’s obfuscatory privacy policies.

Fowler notes several ways tech companies could prohibit apps they sell from gathering data on children, if only they wanted to. Sadly, they are unlikely to put children over profits unless forced to by an updated COPPA. One has been proposed by Senator Ed Markey, one of original bill’s authors, and Representative Kathy Castor. Will this or a similar bill ever become law? Or have tech giants amassed so much power we cannot even protect our kids from data scroungers?

Cynthia Murrell,August 3, 2022

TikTok: Is Joe Rogan the Person to Blow the Whistle on Chinese Surveillance?

August 3, 2022

TikTok has been around since 2015 as A.me and Douyin. If you want to scrape below the shiny surface of the TikTok rags-to-riches story, there something called Musical.ly which surfaced in 2014. In 2018, the Musical.ly management team decided that selling to ByteDance was a super great idea. Then TikTok was created to entertain and log data. Few talk about the link to certain entities in the Chinese political structure. Even fewer think that short videos were bad. Sure, there were allegations of self harm, addiction, erosion of self worth, and students who preferred watching vids pumped at them by a magical algorithm. Nobody, including some Silicon Valley real news people with an inflated view of their intellectual capabilities said, “Yo, TikTok is a weaponized content delivery and surveillance system.” Nope. Just cute videos. What’s the problemo?

Who is now concerned about TikTok? The NSA? The CIA? The badge-and-gun entities in the US Federal government? Well, maybe. But the big voice is now a semi-real sports event announcer. “Joe Rogan Warns Americans about TikTok: China Knows Every … Thing You type.” Hey, Joe, don’t forget psychographic profiling to identify future insider operators, please.

The article reports:

Rogan listed the other data being collected by the popular platform. “‘User agent, mobile carrier, time zone settings, identifiers for advertising purpose, model of your device, the device system, network type, device IDs, your screen resolution and operating system, app and file names and types,’” he said. “So all your apps and all your file names, all the things you have filed away on your phone, they have access to that.” He continued: “‘File names and types, keystroke patterns or rhythms.’”

Hot intel, Mr. Rogan.

Where did this major news originate? From Mr. Rogan’s wellness infused research?

Nope. He read the terms of service.

The estimable newspaper pointed out:

… the tech news site Gizmodo reported that leaked internal documents from TikTok showed the extent to which the app sought to “downplay the China association.” The documents, labeled “TikTok Master Messaging” and “TikTok Key Messages,” detail the social media giant’s public relations strategy during a period of mounting scrutiny from regulators and lawmakers over its parent company ByteDance and its ties to the Chinese Community Party.

Gizmodo? Is this Silicon Valley type “real news” outlet emulating Cryptome.org?

According to the cited New York Post story:

TikTok has pledged to “publish insights about the covert influence operations we identify and remove from our platform globally to show how seriously we take attempts to mislead our community.”

That sounds good just like a cyber security firm’s PowerPoint deck. Talk, however, is not action.

Maybe Mr. Rogan can use his ring announcer voice to catch people’s attention? I am not sure some of the TikTok lovers will listen or believe what Mr. Rogan discovered in the super stealthy terms of service for TikTok.

That’s real open source intel. Put Mr. Rogan on a panel at the next OSINT conference, please. I mean TikTok has a 10 year history and it seems to be quite new to some folks.

Stephen E Arnold, August 3, 2022

« Previous PageNext Page »

  • Archives

  • Recent Posts

  • Meta