Comment Of The Day: “Wait, WHAT? NOW They Tell There Are “Two Big Flaws” in Every Computer?”

The comments on this post about the sudden discovery that every computer extant was vulnerable to hacking thanks to two 20-year-old “flaws” were so detailed, informative and excellent that I had the unenviable choice of posting one representative Comment of the Day, or eight. Having just posted eight COTDs on another post last weekend, I opted for one, but anyone interested in the topic—or in need of education about the issues involved— should go to the original post and read all the comments. Forget the post itself—the comments are better.

Here is Extradimensional Cephalopod‘s Comment of the Day on the post, Wait, WHAT? NOW They Tell There Are “Two Big Flaws” in Every Computer?

This is not likely to be a popular opinion among professional programmers, but I feel it needs to be said.

The excuse that computers are complex and that testing to remove all of these flaws would take a prohibitive amount of time just doesn’t hold water. I understand that security vulnerabilities are different from outright bugs: security vulnerabilities are only problems because people deliberately manipulate the system in unanticipated ways. Bugs happen when people inadvertently manipulate the system in unanticipated ways. Some of these ways are incredibly sophisticated and may be infeasible to anticipate. However, having supported computers for the past few years, I’ve seen bugs that should have been anticipated, and zero testing would be required in order to do so.

The problem with testing is that the people testing usually understand the software well enough to know how it is supposed to work, or they are given a few basic things to try, but they don’t have time to test a program with heavy use. Luckily, testing is not the problem.

The problem is that in many cases I’ve seen (and I’ve come to suspect most cases across the software industry) the input and output footprints of code modules are not documented (and if your code contains comments laying out the pseudocode structure, I consider you very lucky). From an engineering standpoint, the input footprint of a system or subsystem describes the conditions the system assumes to be true in order to work effectively. The output footprint describes what effects (including side-effects) the system has or could have on its environment, including if the input footprint is not fulfilled. Those aren’t the official names; I’ve just been calling them that. Continue reading

Wait, WHAT? NOW They Tell There Are “Two Big Flaws” in Every Computer?

(That’s Meltdown on the left, Spectre on the right.)

From the New York Times:

Computer security experts have discovered two major security flaws in the microprocessors inside nearly all of the world’s computers. The two problems, called Meltdown and Spectre, could allow hackers to steal the entire memory contents of computers, including mobile devices, personal computers and servers running in so-called cloud computer networks.

There is no easy fix for Spectre, which could require redesigning the processors, according to researchers. As for Meltdown, the software patch needed to fix the issue could slow down computers by as much as 30 percent — an ugly situation for people used to fast downloads from their favorite online services. “What actually happens with these flaws is different and what you do about them is different,” said Paul Kocher, a researcher who was an integral member of a team of researchers at big tech companies like Google and Rambus and in academia that discovered the flaws.

Meltdown is a particular problem for the cloud computing services run by the likes of Amazon, Google and Microsoft. By Wednesday evening, Google and Microsoft said they had updated their systems to deal with the flaw.

Here’s the best part:

“Amazon told customers of its Amazon Web Services cloud service that the vulnerability “has existed for more than 20 years in modern processor architectures.”

We trust the tech giants and computer manufacturers to give us secure devices. We then entrust our businesses and lives to these devices.

That there were such massive “flaws” in every computer, and that it took 20 years for those whom we trusted to discover them, is an unprecedented breach of competence, trust and and responsibility. Imagine auto manufacturers announcing that every car in the world had a “flaw” that might cause a fatal crash. I see no difference ethically.

And why is this story buried in the Times’ Business Section, and not on the front page, not just of the Times, but of every newspaper?

 

Comment Of The Day Weekend Continues! Comment Of The Day : “Morning Ethics Warm-Up, 12/30/2017: Is Robert Mueller Biased? …Is President Trump A Robot?

A single line in this morning’s  Warm-Up sparked this fascinating exposition by Ash. Here was the context:

Jay Malsky, an actor who has appeared in drag as Hillary Clinton. Melsky, while watching  the Hall of Presidents attraction at Disney World, began shouting at the audio-animatronic Donald Trump. (The Huffington Post said he “mercilessly” heckled the robot, showing  derangement of its own. Robots don’t need mercy, and you can’t “heckle” one either.)

Here is Ash’s Comment of the Day, primarily a quote but a perfectly chosen one, on the post, Morning Ethics Warm-Up, 12/30/2017: Is Robert Mueller Biased? Are The Patriots Cheating Again? Is Larry Tribe Deranged? Is President Trump A Robot?: 

“Robots don’t need mercy, and you can’t “heckle” one either.”

You should date this and file it, because I guarantee you, the way you treat Siri and Alexa and Cortana and Ok Google is *already* being described as problematic.

“Sexual harassment: there are no limits…According to Dr Sweeney, research indicates virtual assistants like Siri and Amazon’s virtual assistant Alexa find themselves fending off endless sexual solicitations and abuse from users. But because humans don’t (yet) attach agency or intelligence to their devices, they’re remarkably uninhibited about abusing them. Both academic research and anecdotal observation on man/machine interfaces suggest raised voices and vulgar comments are more common than not. It’s estimated that about 10% to 50% of interactions are abusive, according to Dr. Sheryl Brahnam in a TechEmergence interview late last year. Continue reading

It’s A Comment Of The Day Weekend! First Up…Comment Of The Day (3): “An Ethics Alarms Holiday Challenge! Identify The Rationalizations, Logical Fallacies, Falsehoods And Outright Errors In This Essay…” AND, In Related News, Another Bakery Gets Slammed In Oregon

I’m not exaggerating: I have at least four Comments of the Day stacked up on the Ethics alarms runway after this one, and there are usually COTDs arriving on Saturdays. I can’t promise to get all of them up today, especially since I’m hacking away at the 2017 Ethics Alarms Awards, and this is a long working weekend at ProEthics. Still, I will get a lot of them to you, and it’s a provocative group, as you will soon see.

But first, a prelude and some context.

An Oregon appellate court this week upheld a ruling against the owners of the since-closed Sweetcakes by Melissa,  Aaron and Melissa Klein, forcing them to pay emotional-distress damages of $135,000 to Rachel and Laurel Bowman-Cryer, a lesbian couple for whom they refused to design and sell a wedding cake almost five years ago. The Klein’s argued that state Labor Commissioner Brad Avakian violated state and federal laws and their rights as artists to free speech, their rights to religious freedom and their rights as defendants to  due process.

The Oregon court ruled that the Kleins’ argument that their cakes entail an artistic expression is “entitled to be taken seriously,” but it’s not enough for the couple to assert their cakes are pieces of art:

“Although we accept that the Kleins imbue each wedding cake with their own aesthetic choices, they have made no showing that other people will necessarily experience any wedding cake that the Kleins create predominantly as ‘expression’ rather than as food.”

This mess commenced  when Rachel Bowman-Cryer went to the suburban Portland bakery with her mother in January of 2013. When Aaron Klein was told that the wedding did not involve a male partner,  he said that the bakery did not make cakes for same-sex weddings. They left, but soon the mother returned to argue with Klein as Rachel sat in the car, weeping. her mother went in to speak with Klein. The mother told Klein she had once thought like him, but having two gay children forced her to see the error of her ways.  Klein retorted with Leviticus: “You shall not lie with a male as one lies with a female; it is an abomination.”

The complaint and action by Oregon’s Bureau of Labor and Industries followed. You can read the opinion here.

Ugh.

This case is even worse than the one currently before the Supreme Court, discussed here. Continue reading

Morning Ethics Warm-Up, 12/29/2017: Daring The Alt-Right

GOOD Morning, Everyone!

1 Ethics Alarms Holiday Challenge! report: You did not disappoint  me. I have not read all the comments in detail yet, but the various evisceration of NBC’s jaw-droppingly stupid call for an end to freedom of speech produced at least five strong Comment of the Day candidates. I won’t re-post all of them, because Noah’s inept screed doesn’t warrant that much space, frankly. Good job!

On a related administrative note, I’m really going to try to get all the Ethics Alarms Best and Worst completed this year (having fallen short the last two), and would appreciate nominations in all categories. (Some examples are here and here, but don’t feel constrained. New categories are welcome.)

Use this post, please, or e-mail me at jamproethics@verizon.net.

2. Doesn’t help…President Trump couldn’t resist tweeting this:

‘In the East, it could be the COLDEST New Year’s Eve on record,’ he tweeted from Mar-a-Lago Thursday night, where it is currently a balmy 78 degrees Fahrenheit Perhaps we could use a little bit of that good old Global Warming that our Country, but not other countries, was going to pay TRILLIONS OF DOLLARS to protect against. Bundle up!’ 

Ugh.

  • These are the tweets that try men’s souls. It’s just never a good thing for the leader of the country to broadcast his ignorance and deficits of critical thought.
  • It would be a bit less annoying—but still unpresidential and self-destructive,  if the President were satirizing the climate change chorus, which despite the fact that the science they claim to revere so much says its nonsense to do so, still cite individual weather events as “proof” of global warming, most recently the 2017 hurricane season. Or if he were trolling his foes, which he is often masterful at doing, trying to lure them into hypocrisy. Predictably, journalists took the bait anyway, with many suddenly becoming sticklers for the key distinction between  climate change, and weather after years and years of intentionally blurring in in their interviews and reporting. Sadly, there is no reason to believe the President was doing anything but trumpeting his own scientific illiteracy.
  • I wonder what the President’s approval ratings would be if he had never sent a tweet after taking the oath of office?

Continue reading

Q: What Do You Get When You Cross Human Arrogance, Virtue Signalling, And Cruelty To Animals? A: A Vegan Animal Shelter

“You’re kidding, right? You don’t actually expect me to eat this crap. do you?”

Here’s my latest theory:  California progressives have decided that they can adopt any left-sounding idea, no matter how crazy, and get away with it, so sometimes they propose these things just to see if there’s nothing Californians won’t accept if it has the right progressive label.  That’s the only explanation I can come up with for this story.

A proposal pending before the Los Angeles City Board of Animal Services Commissioners would make the city’s animal shelters the first vegan system in the nation. That’s right: the dogs in the city’s care  would be placed on a strict vegan diet. Maybe the idea is to have the dogs beg to be euthanized.

Supporters  include musician and animal rights activist Moby and the most unethical feminist lawyer in captivity, Lisa Bloom, who want to make L.A. shelter dogs “the vanguard of a meat-free movement.” Commissioner Roger Wolfson, a Hollywood screenwriter, was the genius behind the proposal, which he justifies by his desire to bring down the meat industry and his belief the “feeding animals to animals” is unethical.

Yes, he’s an idiot.

“We have to embrace the fact that the raising and killing of animals for food purposes must only be done if we have absolutely no other choice,” Wolfson said at the council meeting debating the issue. meeting. “This is about the long-term survival of every man, woman and child in this room, and all of the people in our lives.”

In other words, screw the dogs, this is about politics and exploiting animals for a progressive human agenda. Got it.

Is it too late for me to propose feeding the dogs illegal immigrants? KIDDING! Jeez, nobody has a sense of humor about anything these days…. Continue reading

Morning Ethics Warm-Up, 12/14/2017: Climate Change Porn, Stupid Conservative Tricks, A Lifetime Ethics Dunce, And A Jumbo

Good Morning!

Still waiting for Christmas Spirit to kick in, because I need it…

1 Plus it gives too much power to John McCain...No major tax bill, indeed no major bill at all, should be passed without at least some bi-partisan participation and support. This isn’t democracy, but some kind of freakish distortion of it, created by incremental irresponsible acts over time by too many politicians to name. I have my own favorite culprits, Mitch McConnell and Harry Reid prominent among them, but assigning blame can be left to objective historians, if there are any. Right now, what the U.S. desperately needs is a leader with sufficient courage and credibility to force both parties not merely to a table but to a serious and dedicated colloquy, with the objective of signing the equivalent of a peace treaty.

I cannot imagine who such a unifying figure might be, or if one can even exist in a culture where the likes of Jimmy Kimmel is accorded moral authority by a disturbing large segment of the population.

2. Bart Simpson would be proud…no, confused, actually. The latest effort to poison every last public refuge from toxic politics comes from the Right, which is encouraging the jerks among them to troll Starbucks in a variation of the old House of Pancakes gag we used to pull in college when we were drunk. (It also was a running bit on “The Simpsons.”) Starbucks writes the customer’s name on the holiday cups of their ridiculously priced concoctions, so the idea is to force the baristas at the openly progressive coffee shops to place the phony name TRUMP MAGA in view and actually announce it OUT LOUD.

At least the IHop prank names were funny, if you had the sense of humor of a 12-year old. ” I have a reservation for a Hugh Jass!” Bart used that one on poor Moe, too.

Supposedly this is payback from conservatives for Starbucks eliminating religious Christmas imagery from their cups, and this year adding what have been called “lesbian hands,”

….further defiling the holiday. I’m not kidding. People are actually complaining about the hands.

I think I’m going back to bed. Continue reading

Morning Ethics Warm-Up, 12/2/17: Flying Morons, A Fake News Crash, Death By Bias, And Me

Good Morning!

1 Moron on board. Passengers can create personal wi-fi networks o and name them what they want while flying on some airlines, like Turkish Airlines.One passenger on a flight from Nairobi to Istanbul named his wi-fi network “bomb on board.”

Brilliant. Passengers could see that the network was in operation on the plane when they used their own devices, and became, ah, upset. In a statement, Turkish Airlines said the flight made an emergency landing at the Khartoum airport in Sudan, but the flight was safely resumed after security inspections on all passengers and the aircraft.

2. Terry McAuliffe for President! A 220-page report from Timothy Heaphy, a former U.S. attorney, was commissioned by the city council to find out what  happened in Charlottesville when a white nationalist group opposing the removal of a Robert. E. Lee statue was opposed by a group including violent antifa thugs. It was released yesterday, and USA Today reports that it concluded…

“This represents a failure of one of government’s core functions — the protection of fundamental rights. Law enforcement also failed to maintain order and protect citizens from harm, injury and death.”

Among the report’s other findings:

• Charlottesville police didn’t ensure separation between counter-protesters and so-called alt-right protesters upset with the city council’s decision to remove the Robert E. Lee statue from Emancipation Park.

• Officers weren’t stationed along routes to the park, but instead remained behind barricades in relatively empty zones.

• City police didn’t adequately coordinate with Virginia State Police, and authorities were unable to communicate via radio.

• State police didn’t share a formal planning document with city police, “a crucial failure.”

• Officers were inadequately equipped to respond to the clashes between the two groups, and tactical gear was not accessible to officers.

The handling of this episode by city and state officials was a warning about how tenuous support is for core American rights and values, though the news media didn’t cover it that way. Ethics Alarms did. Here is what I wrote at the time about the Governor of Virginia, now being prominently mentions as a possible Democratic Presidential nominee…after all, he is long-time Clinton loyalist, so why not?

[We] have Virginia’s governor Terry McAuliffe, who used the power and influence of his office to declare that people holding views he does not approve of are not welcome in the Old Dominion. In the midst of some patriotic grandstanding, he said…

“You are not wanted in this great commonwealth. Shame on you….There is no place for you here. There is no place for you in America.”

This is leftist fascism, by definition. Who is Terry McAuliffe, or Virginia, or anyone, to say who can or should have a “place” in the United States of America? How is this statement applied to white nationalists any different legally or ethically from applying it to Muslims, or lesbians, or abortion advocates, or Catholics, Jews or libertarians?

It isn’t. The entire point of the Bill of Rights is that the government does not get to tell us what to thing, what we can chant, what we can protest, and where we can live.

Charlottesville’s mayor made similar sentiments known, and the result was that the police obeyed the cues, and a riot resulted.

Then the news media blamed Steve Bannon and President Trump. Continue reading

The Unabomber, The Red Light, And Me [UPDATED!]

I ran a red light last night, and I’m feeling bad about it. Ted Kaczynski made me do it.

It was after midnight, and I was returning home after seeing the pre-Broadway production of the musical “Mean Girls,” based on the cult Lindsay Lohan comedy. I was late, my phone was dead, I knew my wife would be worried, and I was stopped at an intersection where I could see for many football fields in all directions. There were no cars to be seen anywhere.

Ted, , aka “The Unabomber” or “Snookums” to his friends, cited my exact situation as an example of how we have become slaves to our technology. Why do we waste moments of our limited lifespan because of a red light, when there is no reason to be stopped other than because the signal says to. Admittedly, this had bothered me before I read Ted’s complaint. Stop lights should start blinking by midnight, allowing a motorist to proceed with caution, as with a stop sign.  If one isn’t blinking, we should be allowed to treat it as if it is.

Last night, I ran the light. With my luck, there was a camera at the intersection, and I’ll get a ticket in the mail. But..

…whether I do or not doesn’t change the ethical or unethical character of my conduct. That’s just moral luck.

…it was still against the law to run the light, even it I was treating it as a blinking light, because it wasn’t

…breaking the law is unethical, even when the law is stupid, and

…there was no legitimate emergency that could justify my running the light as a utilitarian act.

So I feel guilty. Not guilty enough to turn myself in, but still guilty, since I am guilty.

But Ted wasn’t wrong.

Update: Let me add this; I was thinking in the shower.

On several occasions in the past, I have found myself stopped by a malfunctioning light that appeared to be determined to stay red forever. Is it ethical to go through the light then? The alternative is theoretically being stuck for the rest of my life. So we run such lights, on the theory the frozen stop light is not meeting the intent of the law or the authorities who placed it there, and to remain servile to the light under such circumstances is unreasonable. Yet running it is still breaking the law, and isn’t stopping for a light in the dead of night with no cars to be seen also not consistent with the intent of the law and the light? What’s the distinction?

Unethical Quote Of The Month: George Takei

That tweet—cynical, desperate, pathetic, ridiculous, hilarious—by the minor “Star Trek” supporting actor turned gay rights warrior turned pop celebrity pitch man turned Kevin Spacey—has been taken down, but it’ s too late. Poor George Takei has set a new mark for complex and creative virtue-signaling as an incompetent crisis management tactic. It’s interesting that this relatively new art form has become so popular for riders on the Harvey Weinstein Ethics Train Wreck, because it has backfired every time.

It’s gratifying that these Hollywood types are beginning to grasp the cognitive dissonance scale, but the damn thing can’t work miracles.

First Harvey announced that he was going to go after the NRA as he sort of apologized for assaulting, abusing, intimidating and raping actresses, because Weinstein gambled that this would make Hollywood say, “Oh,  you’re a good guy then! We’ll ignore the rapes, as long as your enemy is our enemy.” I can see how he may have thought this would work; after all, it had worked with Democratic politicians his whole career. When Kevin Spacey’s protective Wall of Silence  was starting to crumble, he tried the “I’m gay! Love me!” version of this tactic, figuring that he would more than double his support in the show business community. This did not go well.

Takei had come out long ago, so he couldn’t try that, and he hadn’t been giving millions to the Democratic Party, so a pledge to destroy Ted Cruz or Roy Moore or some conservative organization that he thought people hated more than they have problems with gay sexual predators wasn’t likely to work. What do do? Wait…wait! People blame the Russians for electing Trump! I can’t say I’m going to go after Russia, but I can say that Russia’s going after ME! Sure, that can work! I’ll blame the whole Scott Brunton “Sulu molested me” accusation on Russian bots! Then I’ll take a heroic stand, explain the Putin’s out to get me because I called him out on Russia’s anti-gay policies and proclaim that I won’t be silenced! It’s perfect!”

Uh…no. Continue reading