Slashdot Mirror
Fiber-Optic Map: A Classified Dissertation?
An anonymous reader writes "So you spent all that time researching, compiling and formatting your dissertation ... now what if it became classified information? That's exactly what may end up happening to Sean Gorman's dissertation.
He's compiled a detailed map of American companies and the networks that bind it all together, right down to the very last fibre connection.
The government wants it classified in the interest of national security. Large financial institutions want it classified/destroyed in the interest of economic security. But terrorists would love for this to be published ... it would make their job so much easier." If Gorman can map the fiber network though, doesn't that mean someone else could do the same? Update: 07/09 13:06 GMT by T : Sorry, I blinked past the story as posted yesterday.
Seems awfully familiar. Slashdot should look into applying some AI to submissions to see if it shares a high number of key words with a recent submisison.
----------
(define (.sig) (cons 'my (list 'other 'car 'is 'a 'cdr)))
http://4horsemen.net
Once it's posted to /., the dupes will ensure it never goes away!
You can read more about this here.
Sheesh, evil *and* a jerk. -- Jade
Not suprising considering that its well known little secrete that half of the scientists at Livermore labs did their disserrtations and had them classifeid on basis of National security..
In some Universities in US it happens every year regularly..
Don't Tread on OpenSource
Not the first time it has happened. It is only the latest example. I had my thesis classified (1972) - to this day I still can't distribute the damn thing. I did my work on image enhancements through atmospheric perturbations. Being an amateur astronomer I wanted to be able to see images more clearly and the subject seemed natural for my thesis. In under a year I found it classified. Little did I realize what it was going to be used for.
Aren't the government and big business pretty much stuck asking him to be 'patriotic' about the whole thing? Isn't it a pointless argument unless he's taken a security oath of some sort?
I had a sucky sig.
And this is exactly why his work must be classified or destroyed. Remember, kids, most recent laws are here not to prevent the bad guys from doing something (by deffinition, they are bad and thus expected to break those laws), but to prevent the average citizen from doing something.
When John A. Phillips designed an A-Bomb using unclassified info for is dissertation at Princeton.
"Much work is lost, for the lack of a little more." -Edward H. Harriman
Having just finished an advanced degree in Computer Engineering, I feel that I may have a little more experience than Mr. Gorman in the matter of PhD-worthy work. I'd like to point out that a computer program, whether in source or binary form, is not enough to earn a PhD. A dissertation, to earn one's PhD, is a written work that documents the research and describes the methodologies used to arrive at the final product (the fiber map program, in this case). Often, when the product is a computer program, the source is included as an appendix.
Considering that it's the data in the program that is sensitive and was time-consuming to compile, the algorithms themselves are pretty harmless. Why not call his dissertation "A Method for Mapping National-Scale Fiber Optic Networks," get his degree, feed the source to his dog, and get a job with the NSA?
He's able to leverage the data so that he can see gains (I'm thinking an entire career) while the folks that have lots to lose (banks, utilities, transportation, US gov) pay for him to help show their achilies heels and bottlenecks. If 25 telcos happen to be sharing the same 'pipe' of fibre, it may not be a terrorist that breaks that connection... regardless of who severs that line, it ain't good for the telcos -- and the telcos should be using his data to reduce risks. Insurance companies and actuaries for corporations and governments love this kind of stuff, as do operations research people. Tell me how much it'll cost to reduce risk to this level, or: I have $10,000,000 -- how can I spend it to ensure that the worst case scenario isn't as bad. Hopefully the information doesn't become classified; hopefully, it's used over the next few years to sure up the bottlenecks and other weak points, making the infrastructure far more robust in the following years.
The majority of Slashdotters, I imagine, are not subscribers, so I'm not directing this toward those of you who are. You guys are paying for duplicate stories (not that major papers don't do this, too, but still). That kinda sucks, and I can understand why you'd be upset.
/Slashdot/ ...
But to everyone else bitching to hell and back about duplicate posts (in redundant, duplicate posts to begin with), I say:
Big. Freaking. Deal.
If you don't like it sooooo much--if you have such a problem with the content of Slashdot--STOP READING SLASHDOT. You're not paying anything, you're not forced to read any of the sections, and no one here owes you anything.
I don't understand why people who are pissed off so much by typos and accidental duplicate story posts (it's not like it's done on purpose) would continue coming here just to bitch about it in the comment threads. Oh, wait, this is
Mikey-San
Karma: +Eleventy billion (mostly affected by watching Celebrity Jeopardy)
So, now anyone wanting to replicate Gorman's work will need to take the next 4-6 years off, have an advisor who will keep you from going down dead ends as Gorman's advisor probably did, get paid by someone (Mr. Bin Laden?) during that time, work in a newly, informational hostile environment, and keep updating your map even as you map new areas. Not a piece of cake.
Let us go to the stars, dream new dreams, and renew the embers of hope that have long since grown cold.
I have asked this question a number of times, but I am still confused.
The Internet was designed to be durable. It is built with many points of failure and it is supposed to function even with many of those points disabled.
Why is it then that a backhoe operator in California can knock out Internet access or at least cripple traffic for the entire country?
Is it simply that there is not enough redundancy to make this possible? If that is the case, forget about supressing research like Gorman's and increase the infrastructure.
Regrettably, I must agree that spilling this information out into the public domain is not the best. Computer security concerns should be publicized, but physical security issues should not. They differ insofar as the means of resolving security issues. If some operating system has a vulnerability, it is repaired once and the patch gets disseminated to all affected systems. You cannot simply build a stronger door and pass that door around to all affected sites.
Nevertheless, we should make efforts to nullify the vulnerability so that when this information becomes public, the point is moot and a few bombs destroying some fiber will do nothing.
Join Tor today!
The most puzzling aspect of this story is that the job of mapping the US internet is sufficient to earn a Ph.D. Of course, it is possible that there are aspects of the author's thesis that go beyond what is advertised above.
I admit that this author is not alone--in the CS department where I work, "experimental" Ph.D. theses featuring poorly designed experiments or no scientific work at all (which appears to be the case above) are a constant problem.
Perhaps this is an accident of the youth of the field.
Instead, the work should be used to increase our knowledge of our infrastructure so that we can know our own weaknesses. If we are aware of our weaknesses, we can then do something to protect them.
There are probably many legitimate applications that can be built using this knowledge. For instance, my company is launching a Web service which may someday have millions of users worldwide. It would be very nice to be able to analyze our nation's infrastructure for the most secure and reliable places to co-lo our servers.
Those who trade freedom for security will lose both, and deserve neither" -- Ben Franklin
Is your identity classified too, AC? ;)
-Looking for a job as a materials chemist or multivariat
Sorry, I blinked past the story as posted yesterday.
That's okay - the writeup was much better this time.
No, it's not our responsibility to be editors, but a little help couldn't hurt anything.
/. editors are actually smarter than all of us, and knowingly post the dupes and wacky errors because we will all go on and on posting and talking about it anyway, like a bad Seinfeld episode, while they rack up pageviews because of, and not despite, their lack of effort.
Spoken with the youthful zeal of a subscriber whose never reported an egregious error to daddypants pre-publication, only to be ignored, and see a good thirty percent of the subsequent posts wail on off-topic about the [avoidable] error.
I've reached the conclusion that the
timothy: "Hey, Rob, I was about to release this when that Robot guy send me this; he says 'Architecting' is not a verb. We use it that way in the subject of the release."
cmdr_taco: He's right. It's not. Drives me crazy when I hear people use it that way, too."
timothy: "So... change it....?"
cmdr_taco: "NO! Whaddyou, kidding? They'll go wacky bat-shit with this one. Good for a hundred Grammar-Nazi posts, easily. Then they'll be some poor ex-dot-com-er who'll try to say it *is* a word, and they'll all pile on for another thirty or fifty, at least."
timothy: "Wow! 150 posts, God-knows how many pageviews, just because we *don't* expend any effort to correct something? That's amazing..."
cmdr_taco: "You've a lot to learn about building a Web Community, young padawan..."
..time to classify think geek's internet map!
Terrorist training: "Attack the purple bit..no no the one above the orange spidery bit..
Since when did we become a nation of wimps? If it were up to our current government, the biology of the human body would be suppressed, so that "terrorists" wouldn't know where to shoot us in order to kill us. Just like this case - if we can figure it out, so can they. This information is just like any other information -- it can be used for good or evil. Obviously there is information that is more pertinent than other information, the size of Jenna Bush's bra, for instance, would be considered by most to be unimportant. How that information was obtained; however, would be a little more important. In what way is our government censoring this information any different than what the Chinese government does? Perhaps he should release this onto Freenet. It would finally validate what Ian Clarke has been saying for the last few years. Censorship must be eliminated if we are to have a democratic society.
"To make a mistake is only human; to persist in a mistake is idiotic." Cicero
IGNORANCE IS STRENGTH
If you were blocking sigs, you wouldn't have to read this.
It's likely he used the traceroute utility, and correlated hostnames with domain name records, combined that with geolocation systems.
Not too novel or ingenious, just tedious. Will the US ban traceroute now?
-- Samir Gupta, Ph. D. Head, New Technology Research Group, Nintendo Co. Ltd., Kyoto, Japan.
This quote really disturbs me ...
"He should turn it in to his professor, get his grade -- and then they both should burn it," said Richard Clarke, who until recently was the White House cyberterrorism chief.
Knowledge should be used to empower. Knowledge should be passed along from generation to generation. It is our knowledge that makes this (or any country) worthy of defending.
How about finding ways to better secure our national infrastructure instead of "persecuting" researchers. What's next? The Bush administration will outlawing thinking?
Maybe I am just overreacting, but the above quote from this article reminds me of The Burning of the Library of Alexandria.
But terrorists would love for this to be published ... it would make their job so much easier
yes, isnt their *just a little* paranoia in that statement? What is more likely, that A) the World-trade-center event was rather isolated and abhorent or B) There are vast numbers of Evil Terrorists(tm) plotting from within America just waiting -- literally foaming at the mouth in breathless anticipation -- of this kind of information in order to plot their Next Terrorist Attack(tm).
Really, you yanks need to get out more. The rest of the world deals with these kinds of criminals ALL THE TIME(!) and you dont see them in a paranoid funk do you? Your wife/mother/daughter is more likely to be raped and killed by your husband/father/son than they are to die bc of the Next Terrorist Attack(tm). You gonna lock up anyone who looks cross-eyed?
I understand the world trade center was a very tragic and emotional event, but really -- CALM THE HELL down and start to think rationally again. Your government/military has your nation whipped in such a lather that *YOU* are *really* a greater threat to World Peace than any Evil Terrorist(tm).
It was not OK for the US to invade Afghanistan because they cant/wont extradite osama binladen*. It was not OK for the US to invade Iraq because they didnt like sadam hussein*. It will not be OK the next time the US decides to invade %somewhere%.
*setting up these straw-men, and demonizing them was a propaganda tactic meant to shift the public's views of these events... instead of understanding the events as Germany->Poland style invasions, justifying them as "go after this Real Evil Dude(tm)" is pretty straight-forward propaganda... the fictional rationale is irrelvant really. The bottom line is that the USA just invaded/occupied two nations in the last few years. These subtleties may be lost on the domestic audience, but the rest of the world A) doesnt buy it and B) sees the USA as a rogue nation... but I digress.
PS to the Brits amoungst us; please toss Blair out of office for this misdead - but dont elect the god-darn conservatives in his place, they will only be worse.
This is exactly the sort of thing that real world spies do. They don't generally get tuxedo's and cool gadgets ... they get papers and magazines and trade publications and they spend their time clipping things out and cross referencing. It has long been known that you can find out secrets by putting together lots of public information.
I hope you're not pretending to be evil while secretly being good. That would be dishonest.
I'm not going to repeat my comments from yesterday's topic here, but instead invite you to read my thoughts on Defending disserations and visionaries and Part 2 of the same. Please read both links since they are part of the same post (split due to a mis-clicked Submit instead of Preview button).
The question I have for you is are you cleared to read your own disseration? You wrote it, but have you received government clearance to access your thesis. I'm also curious which department determined it should be classified. The NRO?
The other issue in Sean Gorman's case that is slightly different from yours is that your thesis was (presumably) classified after it was published since you haven't mentioned anything about not receiving your degree. Sean Gorman is faced with being denied his degree because his work has been classified before he can complete his disseration.