The Future Has a Kill Switch
palegray.net writes "Bruce Schneier brings us his perspective on a future filled with kill switches; from OnStar-equipped automobiles and city buses that can be remotely disabled by police to Microsoft's patent-pending ideas regarding so-called Digital Manners Policies. In Schneier's view, these capabilities aren't exactly high points of our potential future. From the article: 'Once we go down this path — giving one device authority over other devices — the security problems start piling up. Who has the authority to limit functionality of my devices, and how do they get that authority? What prevents them from abusing that power? Do I get the ability to override their limitations? In what circumstances, and how? Can they override my override?' We recently discussed the Pentagon's interest in kill switches for airplanes. At what point does centralizing and/or delegating operational authority over so much of our lives become a dangerous practice of its own?"
"At what point does centralizing and/or delegating operational authority over so much of our lives become a dangerous practice of its own?" ... From that point onwards, the battle between the controllers of the kill switches, and everybody who wants to gain control of them starts. Of course the normal user is left back in the middle.
Already at day 1, as soon as the slippery slope is hit
When I bought a GM vehicle for my wife a couple years ago, the FIRST order of business was to disconnect the antenna to the OnStar box. I don't need big brother being privy to conversations in the car, or tracking my movements. I'm normally not a tin foil fedora kind of guy, but there has already been evidence of police improperly using OnStar to bug vehicles.
"Sir, I believe you just dropped 29 planes from the sky instead of hitting the EasyButton for more toner. How do you want me to handle this with the press ?"
As was discussed in the airplane kill switch thread, this gives new difficulties. A terrorist now just has to threaten to block communication from the plane and make it fly in a weird pattern, and then the pentagon will kill the 200+ passengers on board with an F-16 rather than the terrorists.
Regarding the Onstar system, this is known about by their company, and they are being quite responsible IMHO -- the switch has many, many security levels to be activated, and gradually starves the engine of fuel so that one would coast to a stop rather than suddenly switching off. Of course, this is a bigger problem for an airplane.
Slashdotter, ID #101. UIDs are in binary, right?
Awesome, now terrorists won't need to hijack airplanes. All they have to do is hijack the means of controlling the killswitches.
So then, your two reasons for thinking this is a good thing pretty much boil down to "fear of terrorism" and "people are stupid and need to be protected from themselves".
Wow. You got me there!
Caveat Utilitor
I think the lesson of the privacy of phone conversations is an example of what will happen. They will use the information first secretly and later pass a law to hold themselves harmless for doing so. It is strictly an issue of who controls life, me or someone I don't know. I trust my own motives. I would rather not spend 2 years in court trying to explain how someone stole my identity.
This has the effect of turning us all into renters. Which is fine, I don't want the title, I don't want to carry insurance, I don't want to maintain the vehicle and so on. As long as I don't have the rights of ownership, I don't want to pay for ownership. And when it's time to get rid of said asset just bring it back to the dealer and let them deal with it. I am fine with being treated like a criminal under those conditions.
sometimes, I wish my wife had a kill switch. Nag, nag, nag.
http://twitter.com/OLDTELEGRAM
How about a kill switch to prevent a First Post? Of course, the problem is how to get posts starting from second if there's no first. Always unanticipated problems when one tries to implement those security measures some politicians seem to want so much.
I'd love to see "digital manners" enforcement in theaters, restaurants, buses, etc. If mobile phones are so important that people cannot turn them off, then how did people live thirty years ago? Haven't you seen those old movies, where the detective had to stop at a public phone to send instructions to his associates? Yes, I'd love to see a way to enforce manners in public places.
However, a kill switch is no answer. If people abuse cell phones by using them in obnoxious ways, how long would it take them to abuse the kill switch? History has shown us, and it should be clear by now, that any sort of digital key is subjected to abuse.
Even assuming a perfect implementation, that mythical unbreakable code, there's still social engineering. A criminal could buy an old theatre just to get the phone kill switch installed there, if it were necessary for him to silence a phone. And there's always the risk that terrorists could find ways to crack a plane's kill switch in mid-air. When the plane is approaching JFK, wait until it is headed towards Manhattan and then immobilize the pilot's controls.
Like many medicines of old that have been abandoned because of their side-effects, kill switches are a solution that's much worse than the problem they are trying to solve.
The same sentiment can be applied to new technologies.
Have you been touched by his noodly appendage?
The first time someone launches a mass shutdown order in a metropolitan area during rush hour, will be all it takes to turn the public wildly against this.
Comment removed based on user account deletion
As long as the pilot doesn't nose down, the plane can glide to the ground. That is assuming the controls are still working. The only reason you need the engines is to remain at an altitude or climb. The plane can act as a glider for as long as it has enough forward air speed to produce the lift required.
So then, your two reasons for thinking this is a good thing pretty much boil down to "fear of terrorism" and "people are stupid and need to be protected from themselves".
Off course that's the reason. Why else would people give up their hard earned freedom ?
Slipping shoelaces ?
In any case without legislation making this mandatory the solution is very simple: Use only stuff that is built on open architectures, using only open source SW. Mod anything that limits your freedom.
I don't know that much about aerodynamics, but I suspect at 30,000FT that might result in an uncontrolled decent.
Clearly, you don't. An airplane will glide just fine, thank you. Here's an example of an A330 losing all power and covering 100 km in 19 minutes, to a successful dead-stick landing: http://www.iasa.com.au/folders/Safety_Issues/others/azoresdeadstick.html
This sort of training is among the most basic of fundamentals, and taught to every pilot before he first solos.
"Make it ten--I am only a poor corrupt official."
--Captain Louis Renault (Claude Rains), Casablanca
I like how this article bring out all the negatives, but never the positives.
You have an excellent point here, and I'd like to start listing positives first, and then negatives from now on. Sometimes it's not very clear to me how great things are if looked at in this fairer light.
Positives:
1. You lose a little bit of weight.
2. The voices stop.
3. You don't have to worry about paying off those credit cards anymore.
4. It will definitely "show her"
Negatives:
1. You're dead.
Act in question:
Blowing the back of your head out with a shotgun. ...
The only negative that needs to be pointed out is that we will completely lose our freedom. But see, people are too dumb to figure out how that happens and give responses like "oh you're overreacting, it'll never come to that!" Then people with a little more foresight start to panic, since they realize that these morons who think the world will be so great with the new kill switches are the majority and will vote this sort of thing in.
That's when we start with the examples, and when it all falls apart. Giving examples is the worst thing you can ever do when the target is too stupid to understand a concept, since then they forget that they're failing to comprehend a concept, and they instead think that you're trying to barrage them with bullshit. That's when you lose time and again, and in enough time society becomes completely unbearable.
Then again, there really are people out there that like the TSA because they feel safer with minimum wage employees bossing them around, confiscating their water, and smugly apprehending their deodorant.
The moral of the story - my argument sucks because it's just a bunch of examples. Feel free to disregard it.
I don't know that much about aerodynamics, but I suspect at 30,000FT that might result in an uncontrolled decent.
That happens every day, but there's nothing "uncontrolled" about it. A standard descent from cruise in an airliner involves pulling the throttles to idle and letting the aircraft come down. Ideally (for greatest efficiency), the engines would stay at idle until you're lining up on final and the gear/flaps come out. Then you have to spool them back up to hold the proper airspeed and glidepath. Up till recently, however, the ATC system and the limitations of aircraft autopilots couldn't handle this, and there would be periods where you level off for a bit, then "step" down again, and so on. But FedEx, UPS, and others are now working on implementing this in the real world. Look up Continuous Descent Arrival.
As a pilot, I do not trust automated systems as far as I can throw them. Granted, I only fly small airplanes that don't have fancy autopilots and flight management systems... but I've also worked avionics development and test for airplanes that do (my day job is engineering). Autopilots do not replace thinking. They take some of the load off the pilots' hands so they can concentrate on other, more complicated things, such as planning a new course around thunderstorms or handling ATC and other traffic. There is no AI component to autopilots, they simply follow a programmed course.
The meek may inherit the earth, but the strong shall take the stars.
There's one "kill switch" they'll have to pry from my cold, dead hands.
There exists no way of exchanging information without making judgments. --Bene Gesserit Axiom
If I own it, I'm allowed to modify it.
Not anymore, especially if the code/design of the "kill switch" is protected under copyright law. DMCA makes you a criminal if you tamper with it.
Seven puppies were harmed during the making of this post.
> At what point does centralizing and/or delegating operational authority over so much of
> our lives become a dangerous practice of its own?
At the very beginning.
Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
3) In the event you have a serious accident and are unconscious or hurt in the middle of nowhere, they can still contact help for you (unlikely?)
Very likely for those of us that live:
Not every one lives in a city and not every road is in a heavily traveled suburban area. Not convinced, count the number of cars that pass by you during a January night on Alaska-1 (one of the busiest Alaskan highways) near Denali. I bet you will only need one hand.
Three killswitches for the airplanes under the sky,
Seven for the iPhones in the lesser phones,
Nine for OnStar drivers doomed to die,
One for the Dark Lord on his dark throne
In the Land of California where the Shadows lie.
One Killswitch to rule them all, One Killswitch to find them,
One Killswitch to bring them all and in the darkness bind them
I like to place meaningful quotes in my sig, so people will know that I know what meaningful quotes are.
Who has the authority to limit functionality of my devices, and how do they get that authority?
The laws will be written in a way that appears to limit their application, but the reality will be that loopholes will be woven into the rules, or that people like the CIA just plain don't care about laws and will do whatever they please. There will be no accountability. If someone does get their balls in a vice someone higher up will swoop in and "grant them immunity". (where have we heard that recently?)
What prevents them from abusing that power?
Given the above legal scene, nothing. That which can be abused, will be abused. We've been down that road so many times my shoes wore out. We're always promised that it's ok to make the laws a little overly broad just to "make sure we get them all", and then as a result the laws are always abused. It's not can be, it's not might be, it's will be. "Can be abused" always ends up "was abused". Unless you write the law without the wiggle room, it will be abused, guaranteed. End of story.
History tends to show that loopholes that crop up in new laws were introduced by those who made the law, for those that made the law. Things like congress passing telemarketing rules, that they are conveniently exempt from. (where was the justification? they didn't even bother trying to justify it) People that are already in a position of power just assume the laws don't (or shouldn't) apply to them. Nixon was a hilarious example. He was totally convinced it was OK for the president to ignore the laws. He just didn't get around to making himself legally exempt from them in time. Modern equivalents exist, they just learned from his experience and make sure they have an "out" and then proceed in the same manner.
Do I get the ability to override their limitations? In what circumstances, and how?
Just like CSS, you can override their limits, but then they'll make it illegal to do so.
Can they override my override?
No (what they tell you) Yes. (the actual practice)
We recently discussed the Pentagon's interest in kill switches for airplanes. At what point does centralizing and/or delegating operational authority over so much of our lives become a dangerous practice of its own?
Take a look where we are now. Wouldn't you say we passed that point looong ago?
I work for the Department of Redundancy Department.
My in-laws live on a rural mountain road with a cell phone tower just across the river. A while back, someone with an Onstar equipped vehicle drove off the road, and down a bank. The brush closed behind them, and their vehicle didn't make any noticeable marks on the side of the road. The ONLY reason the authorities found them was because Onstar told them exactly where to find their car.
The fact that they were drunk, and trying to avoid the authorities is another matter.
Sounds like maybe Socialism is indistinguishable from Capitalism for an sufficiently non-capitalized individual.
When you have an unaccountable central government with nearly omnipotent control over those under their authority, what you have can't be described with only the words 'socialism' or 'capitalism'. What you have in such a case is authoritarianism. It's authoritarian governments that we need to worry about - not necessarily socialist or capitalist ones. Authoritarian socialism (communism) has proven to be every bit as dangerous to its citizens as authoritarian capitalism (fascism). People need to be less concerned with the socialism/capitalism axis and more concerned with the libertarian/authoritarian axis because that's the one that really counts if you're worried about monster police states.
Program was suspended in early June in Dallas after the bait (I'll call it entrapment) car struck someone before they disabled the car. Months earlier, I watched a youtube vid of a "successful" bait car incident. They let this guy steal the car and drive away, then started chasing him. It turns out the whole time they could have remotely locked the doors and killed the engine. But they had their fun chasing this guy around for a while, and even shooting at him, before disabling the vehicle. When I saw that earlier video, I knew someone would get hurt eventually. That's definitely abuse: they could have disabled the car and locked the guy in for apprehension before he even left the parking lot. Worst outcome? Maybe a little fender bender. Instead, they had all sorts of fun with high speed chases, shooting at the guy, etc. before they bothered to use it. And some old lady got killed because the cops needed their fun with a rigged high-speed chase. Disgusting.
All pass beyond reach of medicine. None pass beyond the reach of love.
Look, even if you live in Israel, you're still 10X more likely to die in a car accident than as a result of an act of terrorism. So I'm not sure 'fear of terrorism' is a valid reason for doing, um, anything different.
Let's keep risks in perspective, ok?
The plural form of "anecdote" is "anecdotes", not "evidence".
You can bet your bottom dollar that as the kill switch idea penetrates further and further into society, bean-counters will ensure that a lot of people who decide when to use one will be about the same pay grade as airport screeners. That is, minimum wage drones who are bored beyond endurance by their job. So we'll all have to put up with being late for appointments and getting cop-shop phone calls from teenage kids who found some stupid but harmless way to get a bunch of cars stopped in the middle of a major intersection, while genuine security threats skate around the system with impunity.
So once again, our quality of life will be compromised, our freedom will be diminished and the net effect on security will be, at best, zero.
I've calculated my velocity with such exquisite precision that I have no idea where I am.
Except those Scientology ones a while back...
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz
It's called a pair of pliers, which I will use to rip out any of that crap out of any vehicle I own, and hope everyone else will eventually evolve enough to have the balls to do the same thing. I've hated OnStar from the start, could see the implications immediately, and have NOT been quiet about it, telling whoever may have the ears to hear. If anyone is insane enough to be buying a car in this particular time in history, they should be explicit in that NO ONSTAR or any such technology be included, and that the buyer not be made responsible for the cost of that in any way. Revolution, people. It's what is needed now, and has been for quite some time. Lock and load, and LET'S GO!