Slashdot Mirror


Fiber-Optic Map: A Classified Dissertation?

An anonymous reader writes "So you spent all that time researching, compiling and formatting your dissertation ... now what if it became classified information? That's exactly what may end up happening to Sean Gorman's dissertation. He's compiled a detailed map of American companies and the networks that bind it all together, right down to the very last fibre connection. The government wants it classified in the interest of national security. Large financial institutions want it classified/destroyed in the interest of economic security. But terrorists would love for this to be published ... it would make their job so much easier." If Gorman can map the fiber network though, doesn't that mean someone else could do the same? Update: 07/09 13:06 GMT by T : Sorry, I blinked past the story as posted yesterday.

59 of 299 comments (clear)

  1. Whoops by General+Ishmoo · · Score: 4, Funny

    Seems awfully familiar. Slashdot should look into applying some AI to submissions to see if it shares a high number of key words with a recent submisison.

    --
    ----------
    (define (.sig) (cons 'my (list 'other 'car 'is 'a 'cdr)))
    http://4horsemen.net
    1. Re:Whoops by garcia · · Score: 3, Insightful

      the on-duty editor should read the e-mail that subscribers send to him about duplicate stories.

      Someone is sleeping.

  2. Well... by dereklam · · Score: 5, Funny
    So you spent all that time researching, compiling and formatting your dissertation ... now what if it became classified information?

    Once it's posted to /., the dupes will ensure it never goes away!

  3. You can read more about this... by Black+Parrot · · Score: 5, Funny


    You can read more about this here.

    --
    Sheesh, evil *and* a jerk. -- Jade
  4. A dupe, but so what ? by Anonymous Coward · · Score: 2, Insightful

    Quick, everyone. Post as many redundant comments as possible about a story being a dupe. It makes for some great reading.

    Morons.

  5. Classified? by shr3k · · Score: 2, Funny

    I'm sure technology for detecting duplicate Slashdot stories is classified as well. Slashdot editors want it to stay secret. Trolls would like to see it stay secret as well else they'd have less to troll on about.

    Only die-hard Slashdot readers would like to see such a technology because it would make our lives much easier.

  6. not suprising by linuxislandsucks · · Score: 5, Interesting

    Not suprising considering that its well known little secrete that half of the scientists at Livermore labs did their disserrtations and had them classifeid on basis of National security..

    In some Universities in US it happens every year regularly..

    --
    Don't Tread on OpenSource
    1. Re:not suprising by GMontag · · Score: 5, Interesting

      After reading the DT Washington Post article yesterday, I fail to see what the problem in this case is.

      Actually, the problem I see is that it looks more like a scam.

      Every bit of the information this guy is using is publically available, but they have a fancy "security" setup, go through all the motions to have a poor-man's SCIF, they smash old HDDs and degauss them, etc. BUT, every bit of the information they have is available to anybody that wants to dig it up themselves.

      They have taken this information and made maps of it. WOW! Whoopee! Yes, they spent the same amount of time, maybe more, that any modern cartogropher would take to map the same thing.

      The article did not mention that you can get your basic US maps free, in electronic format, from various government agencies. Just check the various OSS GPS projects. Above ground power lines appear there. Link this to a list of power company addresses and vola! a beginners map of the power system. Underground lines, pipes, fiber, etc all appear on some sort of map someplace.

      Want to add wireless points to the mix? Go to the wardriver websites and add their maps to yours. Poof! Another infrastructure layer!

      Want to add the "command structure"? Go get that GIA project (or whatever it is called) that was announced the other day, add that layer, TA DA! more crap on your map!

      How this even counts as something to get a degree in is beyond me. Yes, it is very useful in general but it is nothing ground breaking, it is basic, classic mapmaking and he uses a computer instead of an offset press.

    2. Re:not suprising by Wyatt+Earp · · Score: 5, Insightful

      Yea, just like how building the first atomic pile was simple. Why hand out Ph.Ds for that?

      Stack a bunch of graphite, throw in some uranium and graphite rods with some controls to raise and lower then and vola! an atomic pile.

      And the first antibiotics...bread mold in a dish...

      Often a breakthrough simply comes from someone organizing what has been out there for years.

    3. Re:not suprising by Ronin+Developer · · Score: 4, Interesting

      I once asked the very same question since, as a former naval officer, I'd see classified material that often cited public references. I asked the question during one of my training sessions and received a very direct answer.

      It isn't the fact the material is publicly available; It's how this information is assembled and the determinations/conclusions that makes it classified.

      The classification level, "confidential", "secret", "top secret", "top secret compartmented", etc, is determined based upon the impact this information could have on national interests or an ongoing operation.

    4. Re:not suprising by Wyatt+Earp · · Score: 2, Insightful

      Alot of academic research isn't revolutionary or unprecedented. I see that every time I walk past the Geology department and glance at some of the research projects on the wall.

      A earthquake danger chart for the Portland OR metro area is just a map and other data but it's a research project. Low temprature rock formations of Eastern Oregon aren't that revolutionary or unprecedented.

      From the articles I've read on this guy and this subject he is the first one to put it all togeather in one place, sounds unprecedented to me.

    5. Re:not suprising by fubar1971 · · Score: 2, Insightful

      They have taken this information and made maps of it. WOW! Whoopee!

      So apparently you missed the part in the Washington Post that states...

      Using mathematical formulas, he probes for critical links, trying to answer the question "If I were Osama bin Laden, where would I want to attack?"

      What he has done is to probe and test the layers of infrastructure for weakness and try to determine the econominc impact if those weaknesses were to be exploited. Any boob can use GIS software to layer all of the different infrastructures on a pretty map. To analyze all of the layers and then tie them together so as to come up with the mathmatical formulas to determine what would happen if.... Now that sounds like it would take some smarts.

    6. Re:not suprising by banzai51 · · Score: 2, Funny

      Payback for speaking out against the collective can be a bitch.

    7. Re:not suprising by cluckshot · · Score: 2, Insightful

      I really think that this security stuff is getting out of hand. Suppose a man with a backhoe just digs by accident. Its a daily occurance. Nobody except the liablity issues for the digger has any fit over it because there are so many redundant channels for data.

      This is classic foolishness to classify such a map. The Internet was invented out of US DOD efforts to make communications web linked to make destruction of single or many routes irrelevant.

      Terrorists attacking key nodes at the 50 top sites at the same time would probably not even slow stuff down much. Americans really need to be looking at the real reasons for such classification. The reasons probably are more terristic than the terrorists intentions.

      --
      Never Politically Correct ~ I prefer the facts If you don't like what I say, get a life, or comment yourself.
    8. Re:not suprising by fubar1971 · · Score: 3, Insightful

      Bin Laden wants to KILL PEOPLE

      Bin Laden does not want to kill people, what he wants is to destroy any threat to Islamic beliefs that he may perceive. Since he sees the USA (and other nations)as a threat to Islam, he has declared jihad against this country. The Islamic faith is against killing just like any other religion, but also like any other religion, killing can/is rationalized for the perceived greater good of the religous community and beliefs. So when you make an assinine statement like Bin Laden wants to KILL PEOPLE, you just make yourself sound like an idiot. As for the "hacker terroist", where does the Washington post article say anything about hacking? I do recall another section of the Washington post article that states:

      He can drill into a cable trench between Kansas and Colorado and determine how to create the most havoc with a hedge clipper.

      Gee I need to dump all of my electronic equipment and go out and get me one of those new hi-tech hedge clippers. Boy can I do some seriuos hacking then. I'll be the envy of all the l33t haX0rs everywhere. His disertation has nothing to do with hacking and anyone who reads that into it, needs to get out of their mommy and daddy's basement a little more often. It is all about finding weak points in the various infrastructures, and what the economic impacts would be if they were to be exploited. The reasons people are concerned are also stated in the article. Even your reply hinted at it:

      he real motives are hinted at in the news story -- executives want the fragility of their systems kept secret because it's embarrassing.

      Not only is it embarassing, but imagine how much it will cost to fix, or even how much it will cost if somebody (like a terrorist or even a competitor) were to take advantage of that vulnerablity. Now multiply that by every single organization that utilizes all of the different infrastructures. Now you might begin to understand the chaos it may create. That is in all probability why the Feds want to classify it. If Terrorist or religous zealots were to be able to have access to all of this data in a nice neat package then they would have a hell of a war plan. One of the most important rules of warfare is to attack economic centers. To oversimplify it, No money = No threat. So in response to your statement:

      He doesn't care about interrupting your porn download, or even bank transactions

      In actuality Bin Laden does care. The Pr0n industry is a multi-billion dollar industry that feeds many other industries, especially in the banking and Credit Card transaction areas. Any business, bank, or finacial organization that process Pr0n transactions would be effected if Bin Laden was to knock out any portion of that industry (or any multi-billion dollar industry that requires electronic banking and CC transactions). It's called a domino effect. So now if Bin Laden can knock down other industries on top of the Pr0n industry, then the dominos will fall faster. The faster you can take the money away, the faster you will win the war. Why do you think the Federal government has been working deligently to shutdown the "money" network of Al-Quada? Don't get me wrong, I do not believe the disertation should be classified. I mean if it was all built from legally obtained public information, then there is nothing stopping someone else (Especially well funded religous zealots that know how to take better advantage of the government beuarcracies than most Americans do) from doing the same. That would then lead to the next question, what other information should be classified? Should we classify everything? Where do you draw the line? I hope he gets to publish, and make a boat load of cash going to companies and the government to point out their weak spots so they can be fixed. If this doesn't scare the sh*t out of the companies and government to fix the problems, then nothing will ever convince them to corret them.

      So no

  7. Classified dissertations.. by Anonymous Coward · · Score: 5, Interesting

    Not the first time it has happened. It is only the latest example. I had my thesis classified (1972) - to this day I still can't distribute the damn thing. I did my work on image enhancements through atmospheric perturbations. Being an amateur astronomer I wanted to be able to see images more clearly and the subject seemed natural for my thesis. In under a year I found it classified. Little did I realize what it was going to be used for.

    1. Re:Classified dissertations.. by soulsteal · · Score: 3, Funny

      Get back in the basement, Lazlo!

    2. Re:Classified dissertations.. by Anonymous Coward · · Score: 2, Interesting

      I had a similarish experience. My honours thesis (mechanical engineering) was not classified, but confidential. The work I did was looking into quantifying losses in a mineral extraction and purification process. The copy of my thesis in the public domain is highly edited (to the point of being essentially useless). Nobody except the company has a copy of the full thesis ... well, OK, I'll admit I have an encrypted version just for my own posterity. All of my examiners had to sign confidentiality agreements.

      I can't honestly see why the information was confidential, although I could see that it might have stock market influences, but the company deemed this so that's what happened.

  8. Does he have to keep anything secret? by irving47 · · Score: 4, Interesting

    Aren't the government and big business pretty much stuck asking him to be 'patriotic' about the whole thing? Isn't it a pointless argument unless he's taken a security oath of some sort?

    --
    I had a sucky sig.
    1. Re:Does he have to keep anything secret? by Chexum · · Score: 4, Insightful

      The weird thing is when some random guy compiles a lot of traditionally public domain data, he's almost threatened to not do it, but when a business compiles customer data, and can tell what is the last fart of mine composed of, every "patriot" is silent? I hate this country... Oh wait, I'm a dumb foreign guy, phew.. :)

      --
      "Ten years from now, they could do it in a few seconds." -- The Racketeer of the Hellfire Club, 1993, Phrack 42
    2. Re:Does he have to keep anything secret? by Rogerborg · · Score: 4, Funny

      The difference is that businesses patriotically keep it proprietary, and only sell it to rich terrorists. This guy is giving poor terrorists a chance. That's a downright Un American Activity.

      --
      If you were blocking sigs, you wouldn't have to read this.
  9. That's why it must be classified. by NetDanzr · · Score: 5, Insightful
    If Gorman can map the fiber network though, doesn't that mean someone else could do the same?

    And this is exactly why his work must be classified or destroyed. Remember, kids, most recent laws are here not to prevent the bad guys from doing something (by deffinition, they are bad and thus expected to break those laws), but to prevent the average citizen from doing something.

  10. Reminds me of... by PS-SCUD · · Score: 4, Interesting

    When John A. Phillips designed an A-Bomb using unclassified info for is dissertation at Princeton.

    --


    "Much work is lost, for the lack of a little more." -Edward H. Harriman
  11. He can publish AND not go to jail by SleezyG · · Score: 4, Insightful

    Having just finished an advanced degree in Computer Engineering, I feel that I may have a little more experience than Mr. Gorman in the matter of PhD-worthy work. I'd like to point out that a computer program, whether in source or binary form, is not enough to earn a PhD. A dissertation, to earn one's PhD, is a written work that documents the research and describes the methodologies used to arrive at the final product (the fiber map program, in this case). Often, when the product is a computer program, the source is included as an appendix.

    Considering that it's the data in the program that is sensitive and was time-consuming to compile, the algorithms themselves are pretty harmless. Why not call his dissertation "A Method for Mapping National-Scale Fiber Optic Networks," get his degree, feed the source to his dog, and get a job with the NSA?

    1. Re:He can publish AND not go to jail by Onanismous+Coward · · Score: 5, Interesting

      It is easy enough for anybody to find out anything that they want about the US, but it is not due to ease of access. It is that we are a hetergenous society. Anybody can move easily here and simply look. This article, and some of people act like this info is difficult to obtain. It isn't. Want to locate fiber optics? Follow the rail system, the high tension power lines, and the highways. The installation involved obtaining ROWs which were almost always easier to follow other ROWs. As to finding out a set of central offices, simply get a job at a rboc or a power company. Once inside the company, the info is freely available.
      For those who think this is bad, look at the old soviet union. Even for all their hard security (which seems to be the direction that we are headed), we knew most of their soft spots. So even if we truely implement the same society that Soviet Union had, we would still be a main target. Any time you have fixed assets, it is a target. period.

    2. Re:He can publish AND not go to jail by Dun+Malg · · Score: 2, Insightful
      Want to locate fiber optics? Follow the rail system, the high tension power lines, and the highways.

      Yep. And for any other location, dial up the number on the "call before you dig" sign and you can sometimes even get a telco to send you a fairly detailed map.

      --
      If a job's not worth doing, it's not worth doing right.
  12. Subscribers Supposed to Catch? by tarsi210 · · Score: 2, Interesting

    Uhm....aren't subscribers supposed to help catch these things? I mean, after all, you get to see the damned article BEFORE it's published and if you see problems, email daddypants@slashdot.org. Or are there just not enough people awake when the stories are previewed to catch them? Just a thought. No, it's not our responsibility to be editors, but a little help couldn't hurt anything.

    1. Re:Subscribers Supposed to Catch? by RobotRunAmok · · Score: 5, Funny

      No, it's not our responsibility to be editors, but a little help couldn't hurt anything.

      Spoken with the youthful zeal of a subscriber whose never reported an egregious error to daddypants pre-publication, only to be ignored, and see a good thirty percent of the subsequent posts wail on off-topic about the [avoidable] error.

      I've reached the conclusion that the /. editors are actually smarter than all of us, and knowingly post the dupes and wacky errors because we will all go on and on posting and talking about it anyway, like a bad Seinfeld episode, while they rack up pageviews because of, and not despite, their lack of effort.

      timothy: "Hey, Rob, I was about to release this when that Robot guy send me this; he says 'Architecting' is not a verb. We use it that way in the subject of the release."

      cmdr_taco: He's right. It's not. Drives me crazy when I hear people use it that way, too."

      timothy: "So... change it....?"

      cmdr_taco: "NO! Whaddyou, kidding? They'll go wacky bat-shit with this one. Good for a hundred Grammar-Nazi posts, easily. Then they'll be some poor ex-dot-com-er who'll try to say it *is* a word, and they'll all pile on for another thirty or fifty, at least."

      timothy: "Wow! 150 posts, God-knows how many pageviews, just because we *don't* expend any effort to correct something? That's amazing..."

      cmdr_taco: "You've a lot to learn about building a Web Community, young padawan..."

  13. Hopefully ... by Onanismous+Coward · · Score: 4, Insightful

    He's able to leverage the data so that he can see gains (I'm thinking an entire career) while the folks that have lots to lose (banks, utilities, transportation, US gov) pay for him to help show their achilies heels and bottlenecks. If 25 telcos happen to be sharing the same 'pipe' of fibre, it may not be a terrorist that breaks that connection... regardless of who severs that line, it ain't good for the telcos -- and the telcos should be using his data to reduce risks. Insurance companies and actuaries for corporations and governments love this kind of stuff, as do operations research people. Tell me how much it'll cost to reduce risk to this level, or: I have $10,000,000 -- how can I spend it to ensure that the worst case scenario isn't as bad. Hopefully the information doesn't become classified; hopefully, it's used over the next few years to sure up the bottlenecks and other weak points, making the infrastructure far more robust in the following years.

  14. Missing Links by dasuridai · · Score: 2, Funny

    The article conspicuously lacks any link to the website of John Young, although it references it in the article. So the two that I found are here and here.

  15. What About Australia? by femto · · Score: 2, Insightful
    I would like to see a similar map for Australia. Unlike the US, it has about a dozen large cities with hardly anything in between (apologies to all those outback towns).

    I reckon the continent is spanned by a couple of (a few if you're lucky) fibre optic cables. Chances are you don't even need a map to find them. Just follow the line of solar powered repeaters, one of the handful of roads or the single railway line. Alternatively, just look for the line of brightly coloured posts marking the cables, in an attempt to stop people accidentally digging them up!

    Take your ditch digger into a remote area, carve a 100 metre ditch perpendicular to the road and bingo, one severed optical fibre cable.

    1. Re:What About Australia? by Craigj0 · · Score: 2, Interesting

      I remeber the outrage that by taking out one telephone exchange you could sever the east and west coasts of Australia during the olypics. And IIRC taking out another 4 centres would disconnect Australia from the world.

  16. Dupe.. but... by Anonymous Coward · · Score: 2, Interesting

    A point i'd like to make:

    I'd much rather America's infrastructure was resilient, so that it was near-unbreakable even when the details are known, like a good crypto algo, than to have government and financial institutions cowering behind the false security of secrecy.

    The report should be published, along with weekly updates!

  17. Dupe? What's your point, people? by Mikey-San · · Score: 4, Insightful

    The majority of Slashdotters, I imagine, are not subscribers, so I'm not directing this toward those of you who are. You guys are paying for duplicate stories (not that major papers don't do this, too, but still). That kinda sucks, and I can understand why you'd be upset.

    But to everyone else bitching to hell and back about duplicate posts (in redundant, duplicate posts to begin with), I say:

    Big. Freaking. Deal.

    If you don't like it sooooo much--if you have such a problem with the content of Slashdot--STOP READING SLASHDOT. You're not paying anything, you're not forced to read any of the sections, and no one here owes you anything.

    I don't understand why people who are pissed off so much by typos and accidental duplicate story posts (it's not like it's done on purpose) would continue coming here just to bitch about it in the comment threads. Oh, wait, this is /Slashdot/ ...

    --
    Mikey-San
    Karma: +Eleventy billion (mostly affected by watching Celebrity Jeopardy)
    1. Re:Dupe? What's your point, people? by Dixie_Flatline · · Score: 2, Insightful

      For what it's worth, the description and headline on this posting were far better than yesterday's. I hardly glanced at yesterday's post (in fact, I couldn't remember it at all, and had to follow Timothy's 'apology' link), but this one really caught my eye.

      Maybe instead of complaining that this one is a dupe, we should be complaining that yesterday's headline and description were lacklustre and ignorable.

  18. Backhoes == Terroist by Farmboy · · Score: 2, Funny

    Here in Ohio we had a backhoe hit one of UUnet's main fiber backbone knocking out service for most of the state for 3 hours.

    I think that his thesis should be published and given to all the fine backhoe operators out there who thought that "that cable didn't look it was being used".

    Just your average farmer.

    --
    Just your average Farmer
  19. Another one for our ass, people by Onanismous+Coward · · Score: 2, Interesting
    The law was written the way it was to keep the people in government from abusing its power, and it was done with great insite and forthought. It is not a principal that changes with the times, it is what should be a universal right. While the world is changing such that its easier for the public to use Free Speech in a dangerous way, its also changing such that abusers in government can abuse censorship more easily. If the govermnet can just say: "Sorry, what you are saying threatens national security" then where does the line get drawn and by whom? If the line is subjective, it WILL be abused or misused! Do you want a for instance that isnt too far fetched?

    Here, lets say I was speaking up about the fact that there is public information available that would allow terrorist attacks on our country by means of cutting our data communcations. Simply by saying this publicly I could reasonably be causing a risk to national security. My statement might cause a terrorist to become aware that the information is available,and cause him/her to go looking where they otherwise wouldnt have. The government with the power to shut me up might censor me to avoid this risk. By doing so, however, they might put the country more at risk because now the problem will not get the attention, and may not get fixed before someone wishing to do harm stumbles on it by themselves.

    What if Im a person with communist ideas? May I speak about them? Speaking about them might insite some group of people to riot or attack some US interest. Am I a risk to national security. What if I speak up against war? Am I a risk to national security. What if I speak publicly and ask the postal service to strike, and that causes a national mail crisis. Am I a risk to national security?

    Maybe you havent been paying attention to the news. Have you heard about Hong Kong, and how the Chinese Govt. wants to instate their "Subversion, and National Security laws" in HK just like there is in main land China? Do you think our country would be better with if we were reduced to the pittiful lack of free speach rights they have in China? Have you heard of the Great Firewall of China that protects Chinese "National Security" ? It will never be the right of the government to say who has the right to speak. Not on the basis of their 6th grade education. Not on the basis of National Security, not on the basis of "subversion", not on the basis of "Lewdness", not on the basis of "Morality". Any line drawn on the basis of an unclear or subjective measure will necessarily result in abuse and the eventual erosion of the most wonderful freedom available. (for those of you who are dense :) thats free speech)

  20. Tom Clancy, too by jazman_777 · · Score: 2, Informative
    If Gorman can map the fiber network though, doesn't that mean someone else could do the same?

    I worked once with a guy who had worked in anti-sub warfare in the USN. He said Clancy was onto all sorts of classified stuff (_and_ a lot of baloney, too). Seems he was able to piece together a number of unclassified bits into a (synergistically) classified piece.

    --
    Slashdot: Failed Car Analogies. Amateur Lawyering. Anecdote Battles.
  21. Mapping the network by jdhouse4 · · Score: 3, Insightful
    Having been a graduate student in a previous life (earned a MS in aerospace engineer), it is possible for someone to replicate Gorman's work. However, unlike Gorman, that person will be operating in an environment where information will not flow so easially as it perhaps did to Gorman. Technically, everything about everything is on public record. Fishing it out is another matter. And by the time you're finished, the network has likely changed enough that a good part of your work is then invalidated. Gorman was doing this as his graduate research, meaning he probably spent most of his day working on this under his graduate research funding.

    So, now anyone wanting to replicate Gorman's work will need to take the next 4-6 years off, have an advisor who will keep you from going down dead ends as Gorman's advisor probably did, get paid by someone (Mr. Bin Laden?) during that time, work in a newly, informational hostile environment, and keep updating your map even as you map new areas. Not a piece of cake.

    --
    Let us go to the stars, dream new dreams, and renew the embers of hope that have long since grown cold.
    1. Re:Mapping the network by Rogerborg · · Score: 2, Interesting

      Spurious assumption. Here's the differences:

      1. We know this can already be done, so it's now an implementation problem.
      2. "newly information hostile environment"? All I'm reading here is that this project is being stifled, not that the sources it draws on are. Also, if they're available in the USA, they're almost certainly available outside the USA. Go ahead, firewall .com and .org from the rest of the world.
      3. If Gorman is a "typical grad student", he probably worked two hours a day on this, tops, and spent the rest surfing for porn. I'm not saying you did, just that I've been there as well, and it wasn't exactly the most strenuous work environment I've ever been in.
      4. Achmed the Attacker doesn't have to document his solution. Nor does he even have to replicate Gorman's. He just has to implement a "good enough" kludge, and can build on it over time while the lights go off on Wall Street.
      5. Saddam bin Laden (or whatever) has a hell of a lot more money available than a grad student, and he only needs to fund one person to do this.

      On the bright side, the typical Achmed the Attacker seems to be pretty handy with an AK or RPG, but he doesn't appear to be the sharpest implement in Allah's toolbox. But then again, that's what we were saying about India and China a few years before we started outsourcing all of our tech work there.

      I still maintain that the best strategy (mid to long term) is to actually start acting like the good guys instead of just blowing shit up all over the planet and then pretending to be amazed that the natives don't understand that it was for their own good. Perhaps if we spent a little less on security and a little more on aid, our kids won't have to reap the legacy of Bush's $500 billion dollar a year and rising defence budget, and all those Men In Black who pop out of the woodwork at times like this can take early retirement and go fishing. Wouldn't that be a nice world?

      --
      If you were blocking sigs, you wouldn't have to read this.
  22. Internet Durability? by Jerk+City+Troll · · Score: 4, Insightful

    I have asked this question a number of times, but I am still confused.

    The Internet was designed to be durable. It is built with many points of failure and it is supposed to function even with many of those points disabled.

    Why is it then that a backhoe operator in California can knock out Internet access or at least cripple traffic for the entire country?

    Is it simply that there is not enough redundancy to make this possible? If that is the case, forget about supressing research like Gorman's and increase the infrastructure.

    Regrettably, I must agree that spilling this information out into the public domain is not the best. Computer security concerns should be publicized, but physical security issues should not. They differ insofar as the means of resolving security issues. If some operating system has a vulnerability, it is repaired once and the patch gets disseminated to all affected systems. You cannot simply build a stronger door and pass that door around to all affected sites.

    Nevertheless, we should make efforts to nullify the vulnerability so that when this information becomes public, the point is moot and a few bombs destroying some fiber will do nothing.

    1. Re:Internet Durability? by Anonymous Coward · · Score: 2, Interesting

      http://www.computerworld.com/networkingtopics/netw orking/story/0,10801,75539,00.html

      Scale free networks. A network that fits this characteristic can be significantly degraded by removing well-connected nodes.

    2. Re:Internet Durability? by Detritus · · Score: 2, Insightful
      Fast, Cheap, Reliable. Pick two.

      It takes time, money and engineering to build a reliable network. Back in the days of the Bell System, a great deal of effort was expended in improving the reliability of the hardware and the network. There were redundant paths, load balancing and excess capacity built into the network. Huge amounts of money were spent on making electronic switching systems, and the associated software, extremely reliable.

      The Bell monopoly is gone. So are the economic conditions that made it possible to spend all that money on reliability. Today, the emphasis is on fast, cheap and disposable. Telephones are no longer designed to last decades. Single points of failure are acceptable if they result in consolidation and costs savings. Experienced workers have been downsized and replaced with cheap contractors.

      Many of the people who design IP networks have no interest in reliability beyond "it works most of the time". Single points of failure abound in their networks, which are usually built from mediocre hardware running software that is in perpetual beta test.

      Look at the popularity of VOIP and PC based switches. People are eager, even if they don't think about it, to trade reliability for cash. Why spend big bucks on a purpose-built PBX when we can do it on a PC running Windows with some add-ons? Why spend money on backup power, redundancy and failure tolerance?

      Reliability costs money and there are damn few people who are willing to pay the price. That is reflected in the marketplace for hardware, software and communications services.

      --
      Mea navis aericumbens anguillis abundat
  23. PhD quality research? by acorn · · Score: 4, Insightful

    The most puzzling aspect of this story is that the job of mapping the US internet is sufficient to earn a Ph.D. Of course, it is possible that there are aspects of the author's thesis that go beyond what is advertised above.

    I admit that this author is not alone--in the CS department where I work, "experimental" Ph.D. theses featuring poorly designed experiments or no scientific work at all (which appears to be the case above) are a constant problem.

    Perhaps this is an accident of the youth of the field.

  24. Security Through Obscurity by kmilani2134 · · Score: 5, Insightful
    As other posters have pointed out, secrecy is not going to help with security especially since it would be just as easy for an adversary to use the same sources to reconstruct the work.

    Instead, the work should be used to increase our knowledge of our infrastructure so that we can know our own weaknesses. If we are aware of our weaknesses, we can then do something to protect them.

    There are probably many legitimate applications that can be built using this knowledge. For instance, my company is launching a Web service which may someday have millions of users worldwide. It would be very nice to be able to analyze our nation's infrastructure for the most secure and reliable places to co-lo our servers.

    --
    Those who trade freedom for security will lose both, and deserve neither" -- Ben Franklin
  25. incognito by siskbc · · Score: 4, Funny
    Not the first time it has happened. It is only the latest example. I had my thesis classified (1972) - to this day I still can't distribute the damn thing. I did my work on image enhancements through atmospheric perturbations. Being an amateur astronomer I wanted to be able to see images more clearly and the subject seemed natural for my thesis. In under a year I found it classified. Little did I realize what it was going to be used for.

    Is your identity classified too, AC? ;)

    --

    -Looking for a job as a materials chemist or multivariat

  26. That's okay... by ryanvm · · Score: 4, Interesting

    Sorry, I blinked past the story as posted yesterday.

    That's okay - the writeup was much better this time.

  27. Time to classify thinkgeek! by Archon-X · · Score: 4, Funny

    ..time to classify think geek's internet map!

    Terrorist training: "Attack the purple bit..no no the one above the orange spidery bit..

  28. Since when.. by shatfield · · Score: 5, Insightful

    Since when did we become a nation of wimps? If it were up to our current government, the biology of the human body would be suppressed, so that "terrorists" wouldn't know where to shoot us in order to kill us. Just like this case - if we can figure it out, so can they. This information is just like any other information -- it can be used for good or evil. Obviously there is information that is more pertinent than other information, the size of Jenna Bush's bra, for instance, would be considered by most to be unimportant. How that information was obtained; however, would be a little more important. In what way is our government censoring this information any different than what the Chinese government does? Perhaps he should release this onto Freenet. It would finally validate what Ian Clarke has been saying for the last few years. Censorship must be eliminated if we are to have a democratic society.

    --
    "To make a mistake is only human; to persist in a mistake is idiotic." Cicero
  29. Ministry of Truth, Rule #3 by Rogerborg · · Score: 3, Insightful
    --
    If you were blocking sigs, you wouldn't have to read this.
  30. My guess as to how he did it. by Samir+Gupta · · Score: 3, Insightful

    It's likely he used the traceroute utility, and correlated hostnames with domain name records, combined that with geolocation systems.

    Not too novel or ingenious, just tedious. Will the US ban traceroute now?

    --
    -- Samir Gupta, Ph. D. Head, New Technology Research Group, Nintendo Co. Ltd., Kyoto, Japan.
  31. What about the proliferation of knowledge? by openbear · · Score: 4, Insightful

    This quote really disturbs me ...

    "He should turn it in to his professor, get his grade -- and then they both should burn it," said Richard Clarke, who until recently was the White House cyberterrorism chief.

    Knowledge should be used to empower. Knowledge should be passed along from generation to generation. It is our knowledge that makes this (or any country) worthy of defending.

    How about finding ways to better secure our national infrastructure instead of "persecuting" researchers. What's next? The Bush administration will outlawing thinking?

    Maybe I am just overreacting, but the above quote from this article reminds me of The Burning of the Library of Alexandria.

  32. Security through obscurity by Mac+Degger · · Score: 2, Interesting

    Does not work.

    This is yet another case of groups wanting to keep the public dumb, supposedly for security. But what they seem to forget is that that way lies...no, that just IS a fascist cencorship.

    Not only is it useless (as the blurb states, what has been done once can be done again), but the map itself can be very usefull for purposes of statistical analysis, extrapolation, troubleshooting, and it also just makes a cool map :)

    An analogy would be classifying a map of all the universities in a country. Trust me, blow them up (and the students/prof's in them, of course), and that country will be in deep shit in a year's time, even more so than blowing up the government/some financial centre/some computers.

    --
    -- Waht? Tehr's a preveiw buottn?
  33. easy killer - a bit ot but relevant.. by SubtleNuance · · Score: 5, Insightful

    But terrorists would love for this to be published ... it would make their job so much easier

    yes, isnt their *just a little* paranoia in that statement? What is more likely, that A) the World-trade-center event was rather isolated and abhorent or B) There are vast numbers of Evil Terrorists(tm) plotting from within America just waiting -- literally foaming at the mouth in breathless anticipation -- of this kind of information in order to plot their Next Terrorist Attack(tm).

    Really, you yanks need to get out more. The rest of the world deals with these kinds of criminals ALL THE TIME(!) and you dont see them in a paranoid funk do you? Your wife/mother/daughter is more likely to be raped and killed by your husband/father/son than they are to die bc of the Next Terrorist Attack(tm). You gonna lock up anyone who looks cross-eyed?

    I understand the world trade center was a very tragic and emotional event, but really -- CALM THE HELL down and start to think rationally again. Your government/military has your nation whipped in such a lather that *YOU* are *really* a greater threat to World Peace than any Evil Terrorist(tm).
    It was not OK for the US to invade Afghanistan because they cant/wont extradite osama binladen*. It was not OK for the US to invade Iraq because they didnt like sadam hussein*. It will not be OK the next time the US decides to invade %somewhere%.

    *setting up these straw-men, and demonizing them was a propaganda tactic meant to shift the public's views of these events... instead of understanding the events as Germany->Poland style invasions, justifying them as "go after this Real Evil Dude(tm)" is pretty straight-forward propaganda... the fictional rationale is irrelvant really. The bottom line is that the USA just invaded/occupied two nations in the last few years. These subtleties may be lost on the domestic audience, but the rest of the world A) doesnt buy it and B) sees the USA as a rogue nation... but I digress.

    PS to the Brits amoungst us; please toss Blair out of office for this misdead - but dont elect the god-darn conservatives in his place, they will only be worse.

  34. spies collect public info by nano-second · · Score: 3, Informative

    This is exactly the sort of thing that real world spies do. They don't generally get tuxedo's and cool gadgets ... they get papers and magazines and trade publications and they spend their time clipping things out and cross referencing. It has long been known that you can find out secrets by putting together lots of public information.

    --
    I hope you're not pretending to be evil while secretly being good. That would be dishonest.
  35. Re:This part by DavittJPotter · · Score: 2, Insightful

    What's more frightening is that this man is so adamant about taking information away from his customers and shareholders. This information has been public domain for several years - long enough for Mr. Gorman to do his research. If some so-called terrorist wanted to do some damage, the information is there. I doubt your ShadowyFigure(TM) will say, "Damn! Now that this is all correlated, I have the perfect spot to plan my attack!" Right. From the terrorist angle, hitting the World Trade Center was a high-profile, symoblic target. It also helped our current situation by inciting mass hysteria, civil liberties problems, and to help our slide into recession, since we're all afraid of going anywhere or spending money because the Terrorists may be hiding somewhere. Nobody knows for sure, mind you, but they're 'out there...'

    The public should have every right to know what is in their neighborhoods. "Does all that openness still make sense?" Yup, sure does - as soon as you start hiding facts from the public, you start weakening the country. Our government supposedly couldn't stop the attacks in New York with advance information - now you expect them to police every supposed 'weak point' in the country, while classifying that information?

    The less we know, the more hysteria and crap we can be fed.

    --
    "If there's hope, it lies in the proles..."
  36. Re:Classified dissertations.. Defenses, clearances by securitas · · Score: 3, Interesting


    I'm not going to repeat my comments from yesterday's topic here, but instead invite you to read my thoughts on Defending disserations and visionaries and Part 2 of the same. Please read both links since they are part of the same post (split due to a mis-clicked Submit instead of Preview button).

    I had my thesis classified (1972) - to this day I still can't distribute the damn thing.

    The question I have for you is are you cleared to read your own disseration? You wrote it, but have you received government clearance to access your thesis. I'm also curious which department determined it should be classified. The NRO?

    The other issue in Sean Gorman's case that is slightly different from yours is that your thesis was (presumably) classified after it was published since you haven't mentioned anything about not receiving your degree. Sean Gorman is faced with being denied his degree because his work has been classified before he can complete his disseration.

  37. Thesis not Data by Martin+S. · · Score: 2, Interesting
    If you read the article carefully you will find it is not the publicly accessible data that is 'secret'. It is the thesis and associated software that analyses the data to find the most vulnerable points of the various networks that is 'secret'. Even so, the article leaks enough information about this this thesis to judge that it is based on the application of weighted graph theory.

    What I found interesting is that a 30 year old CS theory is leading edge Cartography.

  38. Re:The only thing Orwell got wrong was the year... by psykocrime · · Score: 2

    How about finding ways to better secure our national infrastructure instead of "persecuting" researchers. What's next? The Bush administration will outlawing thinking?


    Welcome to 1984, my friend. I've been saying it and saying it until I'm blue in the face... the only thing Orwell was wrong about was the year... the world (well, the USA at least) *is* evolving towards something like what he described...

    The sad thing is, there's still time to do something about it... but the problem is, most Americans are lazy, apathetic and "Fat, dumb and happy." As long as the economy doesn't go *completely* to shit (I mean, like, the Great Depression), and there's food on the table, and the telephone and cable TV work, most Americans seem to not give a fuck, about what's going on here.

    It's time for us as American citizens to top standing idly by and watching our basic Constitutional rights get eroded away by power-mad, corrupt politicians, in the name of "War on Terrorism", "War on Drugs," "War on Communism," or whatever the fuck the flavor of the day is.

    Let's vote these fucking major party fuckers OUT of office, and end this cycle of politicians who get elected and then do nothing but work to establish their own power base.... demand term limits, increased governmental accountability, the restoration of Constitutional rights that have been raped and pillaged by these fuckers.

    --
    // TODO: Insert Cool Sig