Having everything in your life connected could be great or could be a giant disaster
Personal assistants sound like so much fun, don’t they? At least, if you believe the commercials they do.
“Siri, find me a Japanese restaurant in Riyadh.”
“Alexa, turn down the lights and turn up the music.”
“Google, what’s theweather forecast for her heart?” (Stormy, apparently, if one is married to a popular country musician.)
Chances are pretty high by now that you’ve seen the commercial. Google and Amazon are both being especially aggressive this season in selling various styles of their different personal assistant devices. The commercials do a very good job of showing the positive side of having as much of your life plugged in as possible. Unlocking the door so you don’t have to fumble for keys in the rain. Checking how to say “hello” in an obscure language just before meeting a guest from a foreign country. Reading your grandmother’s cookie recipe to you while you’re hands are covered with flour. There’s even a refrigerator whose contents you can check while at the grocery store. All of that sounds absolutely wonderful, doesn’t it?
Welcome to the Internet of Things, a growing atmosphere where, increasingly, every part of our lives, from what’s in our closet to the temperature setting on a slow cooker, are potentially available for control either by voice command or an app on your phone. Everything is right there, waiting for you to tell it what to do, or perhaps following previous instructions. Welcome to the future. The world looks extremely comfortable from this viewpoint.
Wait, though. Before you introduce Alexa or Cortana or Google to every aspect of your home, you might want to stop and think about the consequences.
Only In The Movies
Well, television, actually. The show is CBS’s political drama, Madame Secretary, wherein actress Tea Leoni plays Secretary of State Elizabeth McCord. One of the subplots this season came with the theft of her son’s laptop. There were threats and some suspicious activity here and there, resulting in increased security for the family.
Their real vulnerability was exposed, however, when a hacker takes over all the “smart” appliances in their home, turning them all off and on at random. The scene was almost comical as the ice maker in the refrigerator kept spitting ice at family members. For the family, however, the event was terrifying. They quickly became aware of the fact that the Internet of Things isn’t quite ready for prime time yet. There are still a number of bugs to be worked out before the system can be trusted with the finer points of our lives.
How close was the episode to reality? Probably closer than most of us would consider comfortable. While the ice throwing might have been a bit of a stretch, the rest of that scene is pretty accurate. There are a number of “smart” devices available on the market now that allow those devices to be controlled remotely, usually through an app on your phone. While the ice throwing part might be a bit of a stretch, the rest is entirely possible. Even “dumb” appliances can be made “smart” by plugging them into a connected outlet. If you have something that runs on electricity, it can, in theory at least, be connected to the Internet.
While that might sound convenient, the problem is that the Internet is not a terribly safe place to store things that are valuable. No matter how secure you might think the cloud is, there is someone out there right now trying to hack it.
Warning from the FBI
The dangers that come with the personal assistants and the Internet of Things are inherent to the beast. Everyone knows about them. The question is how to mitigate those risks down to reasonable levels. Last September, the Federal Bureau of Investigation released a rather lengthy Public Service Announcement addressing some of the more urgent and frequent security concerns. Here’s an excerpt from that statement.
The main IoT risks include:
- An exploitation of the Universal Plug and Play protocol (UPnP) to gain access to many IoT devices. The UPnP describes the process when a device remotely connects and communicates on a network automatically without authentication. UPnP is designed to self-configure when attached to an IP address, making it vulnerable to exploitation. Cyber actors can change the configuration, and run commands on the devices, potentially enabling the devices to harvest sensitive information or conduct attacks against homes and businesses, or engage in digital eavesdropping;
- An exploitation of default passwords to send malicious and spam e-mails, or steal personally identifiable or credit card information;
- Compromising the IoT device to cause physical harm;
- Overloading the devices to render the device inoperable;
- Interfering with business transactions.
A couple of things here are worth noting immediately. Anything that is “universal” is universally at risk. That means that the device is open to accepting information from any number of potential sources, making it especially easy for hackers to access the system. Anything with a “default” password is vulnerable even before it’s shipped. Passwords that provide access to multiple objects in your home places your whole family at risk. While security has improved since these guidelines were released, there is still a very high probability that putting one’s home online is putting one’s home at risk.
Even systems you thought were safe can be risky. Remember that huge Target hack that happened last year? The hackers were able to get into the system by using credentials stolen from an HVAC worker. That’s right, Target’s HVAC is online. Not only is it online, when the hack occurred, none of the system’s default passwords had been changed. For hackers to break into the entire system was as easy as possible.
We should also probably mention that anything app controlled can be easily blocked, either by a person or by one’s ISP or by another app. There are myriad ways in which access to your control app could be blocked.
Improvement still requires caution
A lot has improved since the FBI’s warning came out last year. With each new iteration of a product, developers are getting infinitely better at building security into their devices. However, it is going to take a while before all connected services are totally safe.
A 2014 article from digital security provider TrendMicro contains some very valuable advice if you want to make your home both smart and safe.
- Ensure that smart devices are secure – (ex: Username/password)
- Regularly change smart device access credentials
- Check/replace batteries in devices and sensors
- Diagnose and Resolve device operational issues
- Monitor device manufacturer notifications (ex: web sites, feeds, e-mail, devices) for notifications of device operational issues and firmware updates
- Perform firmware updates, as required to ensure continued device security and operation
- Perform device management app updates on smart phones/tablets of family members
- Reconfigure existing devices to grant additional access by other family members
- Identify new household convenience scenarios and configure/test devices accordingly
- Assist other members of the household with smart device related issues
Those are very important consideration to remember before making anything in your home accessible through the Internet.
I was talking with a friend yesterday about this very topic and she raised the fear of losing her entire music collection. I countered that perhaps even worse than losing the collection would be having it corrupted. Imagine saying, “Hey Alexa, play Zeppelin.” and what you get is a familiar-sounding dinosaur singing, “I love you, you love me …” That is exactly the kind of horror to which we make ourselves available.
Not everything about the Internet of Things is bad, mind you. The potential for both convenience and learning are significant (Alexa, what sound does a whale make?). However, if we’re going to put more and more of our lives online, we have to understand the risks and, perhaps most importantly, be willing to accept the consequences.
Think before you connect yourself or someone else this holiday season.
5 Things You Need To Know: 12/10/16
It’s cold out, so watch where you put your tongue.
https://youtu.be/d7_qSdp3jss
Good frosty morning to ya’. It is 4:30 AM EST as we start looking at the news this morning. We have a wind chill of 15° as we let the dog out. I was careful to warn him to not stick his tongue against the fence post, which raises the question whether dogs, or any animal for that matter, have the same danger when they stick their tongue against metal as humans do. I’ve never seen a dog’s tongue stuck to a flagpole.
Either way, this is our first attempt at gathering news and comment in the morning. I’ll admit that my model here is the late Paul Harvey, whose morning news and comment on the radio was a staple of our mornings when I was a child. I hated having to watch television news with Poppa, but I enjoyed Paul Harvey. Not that we’ll actually emulate the master. I’m not that witty, nor that friendly, actually. What we want to do is make sure you have the facts with just a touch of opinion. We’ll include our sources and you can take it from there.
First up, the CIA has confirmed Russia interfered in the election to help Trump win
We’ve been reading since October about allegations the Russians were behind hacks into the DNC servers resulting in sometimes damaging information being published on Wikileaks. What we’re finding out now, according to a story in the Washington Post 1 is that the CIA believes Russians also hacked the RNC but held on to the information in an attempt to influence the outcome of the election. Outside influence of a national election is kind of a big deal, so it’s getting a lot of attention.
However, this isn’t the first time that the issue has come up. In announcing an investigation of foreign hacking of US elections, President Obama said they would be looking at the 2014 elections as well2 because of allegations that China was behind hacks to both the major parties during the off-year elections. Lisa Monaco, White House homeland security advisor, said on Friday:
“It is incumbent upon us to take stock of that, to review, to conduct some after action, to understand what this means, what has happened and to impart those lessons learned, and that’s what we’re going to go about doing.”
There’s no question that this is new ground and it is highly possible that laws concerning this sort of spying and influence are insufficient to actually support any real retaliation should the incoming administration and/or Congress actually have the guts to do anything about it.
However, the signs are that neither the president-elect nor Republican leadership in Congress is quite ready to blame Russia for anything. Senate Majority Leader Mitch McConnell questioned the accuracy of the CIA report3 as did the Trump transition team who tweeted the statement: “These are the same people that said Saddam Hussein had weapons of mass destruction”. Granted, the CIA still has egg on its face from that massive foul-up. But that was 15 years ago. Methods of investigation have improved and this is a very different field of operation.
Nothing any investigation finds changes the outcome of the election. Influenced or not, you are still responsible for casting your own vote and we all have to live with the outcome.
1. Washington Post: “Secret CIA assessment says Russia was trying to help Trump win White House” By Adam Entous, Ellen Nakashima and Greg Miller December 9 at 10:45 PM
2. National Public Radio: “Obama Orders Sweeping Review Of International Hacking Tied To U.S. Elections“ By Tamara Keith December 9, 2016
3. Business Insider: “The top Senate Republican had a defiant response to intelligence on Russia’s alleged involvement in the election” By Bryan Logan December 10
Meanwhile, killing people peacefully apparently isn’t easy
Robert Bert Smith, Jr. was convicted of brutally murdering an Alabama store clerk in 1994. There’s no question about that and no one is challenging that conviction. Smith was sentenced to death and after all the necessary appeals that sentence was carried out this past Thursday at 11:00 PM. However, things didn’t go as smoothly as everyone would have liked. According to a report from the Associated Press1, 13 minutes into the process Smith coughed and heaved his chest. His arms then appeared to move twice after two tests.
This is a problem and there’s going to be a lot of arguing about it. The eighth amendment of the Constitution specifically states: “Excessive bail shall not be required, nor excessive fines imposed, nor cruel and unusual punishments inflicted.” That is why the method of execution has changed so often over the years. Our definition of “cruel and unusual punishment” has changed along with our understanding of how people die. We want people, even those convicted of horrendous crimes, to die quickly and painlessly. In Mr. Smith’s case, that does not seem to be what happened.
At the center of the controversy is a drug called midazolam which has been called into question in other states. Part of a three-drug cocktail, midazolam is supposed to render a person unconscious so that they don’t feel anything through the rest of the process. However, multiple incidents like this one question the drug’s effectiveness.
Where we ultimately end up, though, yet again, is questioning whether the death penalty is a valid punishment for capital crimes. There are plenty of arguments on both sides of the question2, 3 and the topic quickly becomes very emotional when the families of victims are questioned on the matter. The frequency with which these incidents are happening, though, demand that we take a hard look at a subject that forces us to assess our entire philosophy of crime and punishment.
1. Associated Press: “CRITICS: ALABAMA EXECUTION HELPS CASE AGAINST SEDATIVE“ By Kim Chandler Dec 9, 5:41 PM EST
2. Internet Journal of Criminology: Reasons for Supporting and Opposing Capital Punishment in the USA: A Preliminary Study By ERIC G. LAMBERT, ALAN CLARKE & JANET LAMBERT, 2004
3. “The Impact of Incentives on Human Behavior: Can We Make It Disappear? The Case of the Death Penalty,” The Economics of Crime: Lessons For and From Latin America, 2010” By H. Naci Mocan, Professor and Chair of Economics at Louisiana State University
What are you drinking this morning?
Whether you’re drinking coffee, tea, juice, or bottled water, chances run pretty high that the Coca-Cola company had something to do with it. They are the most diverse beverage company in the world with holdings and products in every conceivable form of beverage that can possibly be marketed. So, when Coke CEO Muhtar Kent says he’s resigning1, it’s a rather big deal. Not only could this affect your morning beverage, but everything else you drink throughout the day.
Taking Kent’s place is chief operating officer James Quincey. Quincey has been an executive with Coke for a very long time so there’s little question he knows the business. What’s important is that Quincey is a strong advocate for cutting the company’s dependence on sugary drinks. He was the power behind the recent plan to reduce in the amount of sugar in soft drinks. More importantly, it is his strategy to put more emphasis behind “still” drinks, which is anything not carbonated, that is seen as the company’s best move forward.
Why is Coke moving away from soda? Because it’s not profitable. Soda sales are flat, at best, and have been declining over recent years. Meanwhile, last quarter Coca-Cola’s still beverages rose 3% mainly on higher bottled water and sports drinks volumes2. If this is where the profit is, be sure that Coke is going to emphasize those products more.
This doesn’t mean we’ll stop seeing soda on store shelves anytime soon, but with cities imposing taxes on sugary drinks and doctors warning of health implications, there’s little question we need to consider better alternatives.
1. Reuters: “Coke CEO Muhtar Kent hands reins to Quincey in widely expected move” By Siddharth Cavale and Sruthi Ramakrishnan Dec 9,2016, 1:58pm EST
2. Market Realist: “Coca-Cola’s Growth Strategy for Soda and Still Beverages” By Sharon Bailey | Oct 31, 2016, 3:35 pm EST
Have you tried getting tickets to a concert lately?
There’s no question that concert tickets, even for relatively minor and unknown acts, are expensive. As long as Live Nation and Ticketmaster hold the ticketing rights to the vast majority of concert venues across the United States, that little detail is only going to get worse. Ticketmaster has already had to pay out a $400 million settlement two years ago and there’s absolutely no sign that they’ve learned their lesson. This is what a monopoly does to prices, folks. We need more players in the game.
At the same time, though, it’s difficult to get tickets to some concerts at all when they sell out within minutes, or even seconds, of those tickets becoming available. How the hell does that happen?
Bots. Unscrupulous scalpers use special software to get around ticket limits and buy up as many tickets as they possibly can. Then, they sell those tickets to you at even higher prices than Live Nation or Ticketmaster was offering them. If you want to go to the show, you have to buy your ticket through a scalper.
However, that practice is now illegal. Congress passed what is known as the Better Online Ticket Sales Act of 2016 this week1 and it seems certain the president will sign the bill. The new law makes it illegal to try and get around set limits on ticket sales or to sell tickets obtained by such means. While no one expects the use of bots to stop overnight, this gives law enforcement new clout in going after resellers who don’t play by the rules.
While this still doesn’t change the monopoly on venue rights, it should make a difference in how much one actually pays for concerts. Unfortunately, even at list price, most concerts are still priced out of reach for the average person.
1. National Public Radio: “Bots-B-Gone? Congress Bans Ticket-Scalpers’ Tool Blamed For Quick Sell-Outs” By Bill Chappell December 8, 2016, 1:27 PM ET
Finally, A Bit Of Good News
H.W. Good Elementary School in Herminie, Pennsylvania had a visit from a Secret Santa this week. An anonymous donor decided to pay all the outstanding meal charges for all the students with overdue accounts1. There is no mention as to exactly how much the generous donor paid to settle the accounts, nor how many of the school’s students were affected. I’m sure, however, that this gift put smiles on the faces of a lot of parents who struggle to keep their children fed.
School meal programs are especially critical in a number of towns and cities across the United States. Indianapolis is fortunate in that the school system here has resolved the problem by providing free meals, both breakfast and lunch, to all its students2. However, there is always some jackass who just doesn’t get it and wants to end or reduce the program3. They don’t seem to understand that the quality of our educational system is directly linked to student nutrition. Moreover, theses same elected jackasses are so out of touch they don’t realize that for many of these students their school meals are the only food they get all day.4
So, when someone steps up and gives to students like this, it is a gift of unparalleled reward. We can only wish that every school had a secret Santa like this.
1. Associated Press: “‘SECRET SANTA’ PAYS OFF MEAL ACCOUNTS AT PENNSYLVANIA SCHOOL“ Dec 9, 9:06 AM EST
2. WFYI: “IPS Offering Free Meals” By SAM KLEMET MAY 28, 2014
3. Indianapolis Star: “Rep. Todd Rokita wants to restrict free school lunches” Maureen Groppe and Chelsea Schneider, IndyStar Washington Bureau6:26 p.m. EDT May 18, 2016
4. The Washington Post: “Majority of U.S. public school students are in poverty” By Lyndsey Layton January 16, 2015
That’s all we’ve got for this morning. Please do us a favor and subscribe to all our posts. This undertaking is a huge effort involving several hours of research and writing. Knowing that we have your support helps keep my coffee warm. You’ll see the place to add your email just below this article if you’re on a mobile device, or at the top of the right hand column if you’re old like me and still use a desktop computer.
Here’s hoping your day is a good one.
Share this:
Like this: