Hacking an unencrypted connection?

Once upon a time, the word "hacker" was meant to indicate a programmer capable of neat programming tricks that earned the admiration of his peers. (Read Steven Levy's book Hackers for a chronicle of that time, which ended in the early 1980s.)

Over the years, the word mutated to mean "someone who breaks into other people's computers." However, there was still a connotation of skill in the term.

Now, apparently, the word means "someone who borrows someone else's open wireless connection." And this, according to the Gujarat police, is not easy to do: they suspect a "techie", a Wipro engineer of having done it.

To recapitulate this story: an e-mail sent before the bomb blasts in Ahmedabad was sent from an IP address traced to a block of flats where an American, Ken Haywood, lived. The building had wireless internet, unencrypted. You could argue this is foolish, but it is not illegal. The police nonetheless have been making Haywood's life difficult (no word about the other residents of the building complex). At the same time, they think a Wipro "techie" could have "hacked" the connection.

Here's a news flash for our police and our equally moronic media: ANYONE with a laptop within a few tens of metres from the building in question could have used the internet connection, if it was unencrypted. It is not even clear that it is illegal to do so.

(Most internet connections that are encrypted use a discredited scheme called WEP, which can be broken in minutes. I think Haywood should consider himself lucky that his wireless connection did not use WEP. The police would have been totally convinced that he was the terrorist mastermind, since obviously nobody in the world could have "hacked" his connection: after all, it takes a Wipro "techie" to "hack" an unencrypted wireless connection.)

Now, it seems, Haywood has fled these morons and this country. Good for him. Good for the immigration authorities in Delhi for letting him through.

Wikiality

Wikipedia is often clubbed together with open-source software (such as Linux) or open-access publishing (such as the PLoS journals) as an example of how information wants to be free. But, as many have pointed out, there is an enormous difference. Open-source software such as Linux, and scholarly journals such as PLoS, are rigorously peer-reviewed.

You can take Linux code and do what you like with it, such as adding a device driver for your own obscure hardware, within the restrictions of its licence: the GNU General Public License. You can reproduce PLoS articles and use their content in other ways, within the restrictions of their licence: a Creative Commons licence. What you cannot do, without satisfying extremely high standards of quality, is have your own code included in the Linux sources distributed by Linus Torvalds, or have your own research published by PLoS.

With Wikipedia, however, anyone may edit an article, and it is instantly readable by millions.

Surely the difference is glaringly obvious, but defenders of Wikipedia have claimed for years that mischievous edits are quickly reverted by editors. And this is often true, but I suspect that it is now much less true than formerly. Where it used to be rare to find a Wikipedia article, on a subject of even slight general interest, that had glaring errors or obvious "ego" additions, it is now rare to find an article that does not have such defects.

A couple of years I found Wikipedia a useful and largely reliable resource. Now I find it a useful resource that must be double-checked on every point, no matter how minor.

Here is a list of recent examples:

• Some time ago Slashdot linked to a Donald Knuth interview, where he talked of, among other things, literate programming -- and linked to the Wikipedia article on it. Unfortunately, as of that date, that article was so incorrect as to be worse than useless (and sparked an ill-informed flamewar on Slashdot too). After the Slashdot link appeared, an "edit war" ensued and it seems to have been restored to a somewhat informative state; but the incorrect version was what was available for months earlier. It used to be that one could trust Wikipedia on technical subjects, but that seems no longer to be true.
  
  
• When I checked Wikipedia for "semolina" some months ago, the following sentence [UPDATE 18/08: link fixed] caught my eye (and it was in the references section of the article!) "Semolina in India is known as "Sooji". Various delicious preparations are made with Sooji. Sooji Halwa is the most famous which is a sweet item. Among Bengali's also this is very popular and used for preparing various sweet items. One of them in Bengali cuisine is known as Soojir Payesh, which is prepared by boiling sooji balls in sweetened milk." Not incorrect, but hardly very professional-looking, and not in the appropriate section; but this text survived from March 25 until May 12.
  
  
• Some time ago Rahul Basu observed, with amusement, that there was a Wikipedia entry for the name Rahul; and regretted that he did not qualify for the list of famous Rahuls. What he did not notice was that several others had had the same regret, and attempted to amend matters; the edit history of that page is rather interesting, and the current choice of "famous" Rahuls is quite strange. (Any such list seems rather pointless.)
  
  
• And finally, my most recent peeve and the one that provoked this post: in the article on the Wodehouse character R. Psmith, Wikipedia (as of today) claims that his name, in the last book (Leave it to Psmith), was changed from Rupert to Ronald Eustace. The "Ronald Eustace" appellation dates from Wikipedia's very first entry on the subject, in March 2005. Now, the second question to ask is, "why did Wodehouse do this?" and Wikipedia suggests that it was to avoid confusion with another Rupert in the book (Rupert Baxter).
  But the first question to ask is, "is this true?" Leafing through my copy of the book, the only evidence I can see to back this claim is the following exchange towards the end of the book, between Eve (who had been taken in by Psmith's impersonation of the Canadian poet Ralston McTodd) and Psmith:
  

  "Mr..." She stopped. "I can't call you Mr McTodd. Will you please tell me your name?"
  "Ronald," said Psmith. "Ronald Eustace."
  "I suppose you have a surname?" snapped Eve. "Or an alias?
  ...
  "There's not much sense in pretending now, is there? What is your name?"
  "Psmith. The p is silent."
  

  Personally I cannot see how this could be read as indicating that Psmith's given names were "Ronald Eustace": he was obviously "pretending". But this bit of folk wisdom seems to have become replicated all over the internet, never to be stamped out.
  

Colbert was right: soon our reality will be defined by Wikipedia.

Big blue screen

Some years ago, I saw the biggest Windows error I'd ever seen at the Toys'R'Us store at Times Square, New York.

But it seems the Chinese do these things on a much bigger scale.

Putin them in their place

After its coverage of Nandigram and Tibet (note: those links are to my previous blog posts on the subject, and perhaps not very edifying), The Hindu is at it again. While most of the world press, that I have seen, is castigating the imperialist aggression of Russia (still believed to be led, despite his having stepped down, by Vladimir Putin) against small, harmless, democratic Georgia, The Hindu headlined its Sunday edition (which I saw, since we still buy the paper on Sundays) "Russian forces stop Georgian offensive against South Ossetia", and lest any doubt on its stance remain, published a stinging editorial on Georgia's "adventurism" today.

But this time I think the Hindu may have a point: if they are not actually themselves balanced, they may at least be balancing out the rest of the media.

Even the most pro-Georgia articles do agree that South Ossetia and Abkhazia are separatist with a pro-Russian population. They also agree that Georgia was the initial aggressor in sending in troops into South Ossetia. If separatism supported by the population is good in Chechnya, Tibet, and (for much of the western media, until recently) Kashmir, why is it bad in Georgia?

I am nowhere near sufficiently informed to draw a conclusion. But here are two relatively balanced-sounding Western articles (not surprisingly, both are from The Guardian): James Poulos and Mark Almond.

(PS: a nugget for those who were pained at my title. The former Russian president's name is spelled "Poutine" by the French, which is closer by French phonetic rules to the actual pronunciation; as it happens, "poutine" is a harmless Quebecois snack but "Putin", if pronounced phonetically in French, sounds like a rather impolite word. So I wonder what sort of headlines the pun-happy French have concocted on this occasion.)

The biggest ever translation error

Here. (Spotted on Slashdot)

Fighting the terrorists

It is about a week since the bomb blasts in Ahmedabad and Bangalore, and a few days since the reports of 18 bombs being defused in Surat. India Today, among others, screams on its cover that India is soft on Islamic terrorism. Here are several thoughts:

Protecting planes is hard, and India seems to be doing that pretty successfully: the last "incident" was the Kandahar hijack, for which the security loopholes occurred in Nepal. Airport security in India seems pretty thorough but much more efficient and less intrusive than, say, in the US. I don't have to take off my shoes or my belt. I don't have to send my wallet or keys through the X-ray machine. They don't confiscate my shower gel or even my twin-blade razor -- both of which would be seen as lethal weapons in the US. (They did once make me check in a bottle of wine, though.) Subsequent to the recent attacks, I went through security checks in Chennai, Delhi and Bangalore airports and noticed no heightened security: clearly what is in place is felt to be adequate.

Protecting trains is much harder. They do routinely scan you and search your bag in the Delhi metro (again, not terribly timeconsuming, I found). But yesterday, at the (old) Delhi Junction railway station, was the first time I had to go through a metal detector to reach the railway platform. Still, given the sheer size of our rail network, there hasn't been much terrorist activity there either. On one recent occasion, I observed that the toll was as much due to lack of emergency exits -- and the practice, on that particular train, of locking all doors at night (for "security", of course), converting it into a steel jail -- as due to lack of security. If terrorists were to target, say, a cinema hall, this will be equally true: despite the Uphaar tragedy, the need for emergency exits is just not taken seriously.

Protecting public, open places is impossible. And public places were what were targeted in Bangalore and Ahmedabad. Unless one puts up entry barriers for the entire city and vets each one of the several million residents of the city. The cost of that -- and I don't mean monetary -- would be unacceptable. This is true not just in India. One can bomb an open market anywhere in the world. In airports abroad, it would be easy to bomb the departure lounge. It's not so long ago that a terrorist with Indian origins tried to ram a blazing vehicle into Glasgow Airport. Terrorism is always a cowardly thing, but I suspect the reason this sort of thing isn't more common is that, even to the terrorists, targetting civilians in public places is too easy, too cowardly.

Yet reading all the rants in the Indian media and blogosphere, one would imagine that the recent acts are a catastrophic failure of intelligence and security. To listen to the BJP, one would think either that a draconian act like POTA would magically stop such acts of terror, or that this is so hard to do that the government must have conjured it to distract attention from the BJP's recent antics in Parliament. Nobody wants to point out the obvious: not only is such "terrorism" easy, it signifies the desperation of the terrorists who, unable to strike at even medium-security targets, are forced to hit the defenceless.

These are acts that will earn them only contempt, even from their "supporters", and they know it.

Ali's World

When my brother and I were growing up in Delhi, among our closest friends were our neighbours the Mukhopadhyay brothers. Each was a year junior to us, and it would seem natural that the elder siblings would form a close friendship and the younger would form a close friendship too. But the closeness extended with all pairs. Though the age gap between the oldest (me) and the youngest (Arpan Mukhopadhyay, a.k.a. Ali) was five years -- a significant difference when you are ten and five respectively -- we had a great deal of fun together. We ceased to be neighbours when Ali was in his teens, and I left Delhi soon after, but the memory of watching him evolve from an impossibly cute child to a somewhat problematic student to a talented footballer to an extraordinary artist remains fresh. And the memory is all that remains. Ali died, shockingly, in January 1999 at the age of 20, leaving behind bittersweet memories and several astonishing canvases.

Now, almost ten years later, Ali's parents, brother, family and well-wishers have brought out a book, "Ali's World", published by Roli Books, available online here and soon to be available at bookshops across India, consisting of biographical notes and memories interspersed with nearly four dozen of his artworks. As part of its release, they are holding a two-day exhibition of 28 of his works at the India Habitat Centre, Delhi, on July 26 and 27, 2008. (I am typing this after having attended the first day.)

Looking through the exhibition and the prints in the book brought home to me, once again, what this young man had achieved at twenty. But I am probably too close to the picture to see it objectively, so let me quote an unbiased judge instead:

When I see Ali's work I am mesmerised. I feel moved by what I see. His paintings engage and enrich me... I just loved his work. It gets you in the gut and speaks to you, moves
you.

So says actor and director Aamir Khan, in the foreword to the book; he clarifies that he had this reaction on first seeing the pictures, before knowing the personal story of Ali.

Why did Aamir Khan write the foreword? There one needs to get into the personal story. As I said above, Ali had a problematic childhood in many ways: partly his propensity to get into innumerable accidents (though nobody could have foreseen the one that eventually claimed him), and partly his very erratic performance in school: a mixture of immense talent and mediocre results. As his parents say in the book, though he was eventually diagnosed with dyslexia, awareness of such problems was not as common in those days as now. Thankfully, they followed their instincts in letting him choose his own path in life.

When this book was nearly ready, they say, they watched Aamir's movie Taare Zameen Par and were immensely moved by the story of a dyslexic child who is encouraged by his teacher to become an artist. "On an impulse", they sent Aamir a pre-publication copy of the book. Though he gets vast quantities of such unsolicited material, something about these paintings struck him, and on reading the text, he responded by writing the foreword.

Reading the text of the book was a little disconcerting: it showed me how little I really knew Ali in some ways, and how much his parents had to contend with in bringing him up. But at the end of the day it is an inspiring story -- not just to me, but, I think, even to those who never knew Ali.

I will upload a couple of images of the paintings, that I snapped at the exhibition today, when I get a chance. But if you read this early enough and are nearby, do try and make it on the second day: July 27 at the Convention Foyer of the India Habitat Centre, Lodi Road, New Delhi.

---

UPDATE: Pictures from the exhibition.

"Believe me, it's torture"

At the request of Vanity Fair editor Graydon Carter, Christopher Hitchens (one of the most consistent cheerleaders of the Iraq war and the Bush regime) undergoes "waterboarding", a technique being used by the Bush regime who claim it is not torture. His conclusion? "Believe me, it's torture."

He adds,

You may have read by now the official lie about this treatment, which is that it “simulates” the feeling of drowning. This is not the case. You feel that you are drowning because you are drowning—or, rather, being drowned, albeit slowly and under controlled conditions and at the mercy (or otherwise) of those who are applying the pressure. The “board” is the instrument, not the method. You are not being boarded. You are being watered. This was very rapidly brought home to me when, on top of the hood, which still admitted a few flashes of random and worrying strobe light to my vision, three layers of enveloping towel were added. In this pregnant darkness, head downward, I waited for a while until I abruptly felt a slow cascade of water going up my nose. Determined to resist if only for the honor of my navy ancestors who had so often been in peril on the sea, I held my breath for a while and then had to exhale and—as you might expect—inhale in turn. The inhalation brought the damp cloths tight against my nostrils, as if a huge, wet paw had been suddenly and annihilatingly clamped over my face. Unable to determine whether I was breathing in or out, and flooded more with sheer panic than with mere water, I triggered the pre-arranged signal and felt the unbelievable relief of being pulled upright and having the soaking and stifling layers pulled off me. I find I don’t want to tell you how little time I lasted.

This is because I had read that Khalid Sheikh Mohammed, invariably referred to as the “mastermind” of the atrocities of September 11, 2001, had impressed his interrogators by holding out for upwards of two minutes before cracking....

And here's the video.

Incidentally, even while cheering the war Hitchens has previously spoken out against torture, for example here. But it seems to me that his language then was deliberately obscure and clouded with rhetorical and irrelevant questions. (I say "deliberately" because he is a master of prose and certainly knows how to make his meaning clear when he chooses to.) This time, he couldn't have put things more plainly.

More on the Pen Pricks

An inside look at the "Johann Bach" hoax is here. Very nicely done.

The fake "press release" that conned almost the entire Indian media is linked there, and I can't believe anyone fell for it. Leaving aside the amateurish logo, the suspicious names, the bumpy language and so on, here's a minor detail on the top right of the letterhead: the address of the police, which they say is "a slight variation of the official address of Berlin police":

Perus Narkp
13/108
Town Berlin Polize
Shede Road
Berlin VT 05602
802-223-4409
802-223-4415

Yes, that's a slight variation -- of the address of the police at Berlin, Vermont. (Says so right there, if you're familiar with US state abbreviations.)

Via Abi, here's Siddharth Varadarajan's take on the affair. He notes that "Even if the journalists did not know there was no concentration camp with the name ‘Marsha Tikash Whanaab,’ a quick search on the Internet might have at least triggered a warning light", and sanctimoniously lists the several media organisations that failed to perform such a check; but he omits the story from his own newspaper, who, though it (to its credit) displays some skepticism, does not seem to have benefited from the quick Internet search he suggests.

Wildlife protection, Indian style

Man rescues abandoned bear cub and brings her up with his daughter. Man put in jail. cub put in jail zoo. Way to go, forest department.