Researchers at Georgia Tech have come up with a technology for preventing video cameras from working. The setup uses sensors to detect cameras from the reflectivity and shape of CCD sensors (or is it actually detecting the lens?), then directs a beam of light (potentially a laser) at the CCDs to prevent it from recording images. The prospective uses they suggest include prevention of piracy in movie theaters and as a countermeasure against espionage. Their small-area technology is apparently close to ready for commercialization, but the large-area version still has a ways to go. The camera-neutralization technology “may never work against single-lens reflex cameras." Let’s hope it doesn’t become a technology used to prevent the documentation of abuses, governmental or otherwise.

Salon.com has a new article on a room in an AT&T facility in Bridgeton, MO (a St. Louis suburb) that may be an NSA interception facility. The room is protected by a man trap and biometric security, and the AT&T employees who are permitted to enter it had to get Top Secret security clearances. The work orders for setting up a similar room in a San Francisco AT&T office, reported by former AT&T worker Mark Klein, came from Bridgeton. The Electronic Frontier Foundation has an ongoing class-action lawsuit against AT&T over its involvement in illegal NSA wiretapping.

Back on January 8, I wrote a posting titled “Cell phone call records available online." In that post, I wrote about sites on the Internet where you can pay a fee and get the calling records for cell phones and long distance call records for land lines. The companies providing these services are typically private investigators who use “pretexting”–pretending to be the legitimate owner of the phone–in order to con phone companies into turning over the data. Some also used social engineering or exploited server security flaws to gain access to phone provider online web portals. Subsequent to the publicity around that story, there was a brief attempt to pass a law making “pretexting” illegal for telephone records as it already is for financial records. Frankly, I think unauthorized use of someone’s phone provider web portal account should already be illegal under most state computer crime statutes, and obtaining phone records through misrepresentation should constitute theft by deception or violation of identity theft statutes, but I am not a lawyer. Now, we are learning who some of the major users of these services are: various offices of the Department of Homeland Security and the Department of Justice, including the FBI; police departments in California, Colorado, Florida, Georgia, and Utah, and most likely hundreds of other police departments. These agencies are bypassing legal processes to obtain private phone records without warrants from private companies engaged in highly unethical if not illegal activity. Hat tip: Ed Brayton at Dispatches from the Culture Wars.

The original claim of a Cox “blacklist” originated from a statement by Tom Foremski at Silicon Valley Watcher. Foremski originally wrote: Back on February 23rd Authentium acknowledged that their software is blocking Craigslist but it still hasn’t fixed the problem, more than three months later. That’s a heck of long time to delete some text from their blacklist.Now, he says (quoted by George Ou at ZDNet): I assumed there was a blacklist - I have no idea how Craigslist is being blockedIn fact, we know now that it’s a combination of a bug in a firewall driver produced by Authentium software and unusual (but not incorrect) behavior by the Craigslist webserver setting the initial TCP window size to 0. The facts of the problem came out (at least between Craigslist, Cox, and Authentium) at the time the problem was first reported, was fixed in a beta release within weeks, and has only affected Cox customers who use Authentium’s security suite. BTW, I disagree with Richard Bennett and George Ou’s remarks which attribute the problem entirely or largely to Craigslist–the behavior of the server is not contrary to the RFC. The initial SYN packet from the client to Craigslist is responded to by Craigslist with a SYN-ACK packet with window size of zero, which means don’t send me any data, only an ACK. The client then sends an ACK (completing the three-way TCP handshake), at which point Craigslist sends an ACK packet with a larger window size which the pre-fix version of the Authentium software fails to process. The initial response of the Authentium software to slow down is a reasonable and apparently desired response by Craigslist–they want new clients to hold off transmitting data (an HTTP request) until they give the OK. Authentium took full responsibility for the problem, and they were right to do so. The story from Foremski was uncritically repeated by Matt Stoller at MyDD, Timothy Karr at Save the Internet (and a couple of other blogs), and now in a Wall Street Journal op-ed piece by Sen. Ron Wyden (D-OR), in a lapse from his normally good judgment about Internet-related matters (e.g., the Cox/Wyden Internet Freedom Act of 1995 and the Cox/Wyden Internet Tax Freedom Act of 1998). Stoller and Karr went on to repeat the “blacklist” claim even after having the full story, and I don’t believe either of them has retracted the claim that this issue is relevant to the network neutrality debate. Craig Newmark complains that he didn’t get good responsiveness from Authentium, which Authentium disputes, but he has indicated satisfaction with Cox. The story has been picked up by George Ou at ZDNet (here and here) and by Glenn Harlan Reynolds at Instapundit (here, here, and here). This issue was a user software application issue that had no more to do with network neutrality than a browser incompatibility issue, a webserver disk failure, or a fiber cut. Each of these things can prevent a user from reaching some specific content, but none is imposed by the network provider or remedied by act of Congress or the FCC. Those who continue to treat it otherwise even after knowing the details are demonstrating questionable judgment and integrity. UPDATE: Craig Newmark has now stated that there was no deliberate blocking here and the Authentium explanation is correct. I’ve exchanged a few emails with him asking whether the behavior of the Craigslist.org webserver is specifically intended to regulate the rate of new HTTP connections (and whether the behavior is coming from something like an application-layer switch negotiating the TCP handshake); he said he’s passed that on to his technical team and I’ll report here if I get confirmation or refutation on that point. One puzzling paragraph of his latest blog post is this one: One good outcome of this is that we flushed out a swiftboater (in the generic sense), and this helps me understand the way disinformation gangs operate. Unfortunately, in some blogs, a good guy has been linked with the swiftboater, which isn’t fair, and hopefully, we can do something about that.I’m not sure who he’s calling a swiftboater, who he’s calling a good guy, and who he’s calling a disinformation gang. So far as I can see, the disinformation gang in this incident has been the “Save the Internet” crowd, who still have yet to admit the clear facts of the matter. I asked for clarification, but Craig declined to identify who he’s referring to (except that he’s not referring to Matt Stoller or Timothy Karr). UPDATE: July 12, 2006: The Craigslist.org webserver has changed its behavior and no longer sends a SYN-ACK packet with a window size of 0; it now gives a window size of 4380. This change by Craigslist.org works as a fix to the Authentium issue. I wonder why they only made the change now. ...

BLDGBLOG has some photos and information about China’s mobile execution chambers, used to bring state lethal injection capability to poor localities that can’t afford to build their own execution facilities. Amnesty International says they have evidence that Chinese police, courts, and hospitals are engaged in the organ trade, and suggest that the mobile death vans may be involved. BLDBLOG cites USA Today reporting that there are 68 different crimes punishable by death in China, more than half of which are non-violent offenses such as tax evasion and drug smuggling. All executions are recorded on audio and video, and shown live to the local law enforcement authorities. The only other country which had mobile death vans that I’m aware of was Germany under Adolf Hitler. The Einsatzgruppen’s mobile killing units were known as “death vans,” which used carbon monoxide gas for execution.

P.Z. Myers at Pharyngula has put together an excellent starting point for anyone who would like to see the overwhelming evidence that supports evolution, contrary to Ann Coulter’s claim in her new book, Godless, that there is no evidence to support it. 20 science journal articles published per day, a new book published every other day, statements from scientific societies, online tutorials, blogs by scientists, and more. He also requests that if you can find a single paragraph anywhere in chapters 8-11 of her book that is at all competent or accurate in its description of science, to send it to him.

Matt Stoller has a post up at MyDD dated June 14 titled (with ironic accuracy) “Please lie to me about Net Neutrality” in which he gives the following as an example of unwarranted site blocking that shows the need for net neutrality regulations: There’s a pervasive myth that there has been no discrimination on the internet against content companies. That is simply untrue. For one, Craigslist has been blocked for three months from Cox customers because of security software malfunctions. ...

I plugged all the previous data into Excel and generated this graph: I wonder what happened in December and early January. The trend is amazingly linear, otherwise. When do we start considering Phoenix a buyer’s market? Now? When inventory hits 6oK? When the trend shows clear signs it has reversed? As I said in the comments to the previous housing inventory post, I think I want to start making lowball offers when I get back there!

Yet another rock formation has been misidentified as Noah’s Ark by evangelical Christian explorers (“Arkeologists”). They apparently forgot to bring a geologist or archaeologist with them, but they did bring “some of America’s leading businessmen, an attorney who has argued several cases before the U.S. Supreme Court, and two leading apologists” and take some incredibly unimpressive photographs. The expedition was led by former Costa Mesa, CA police officer turned “international explorer and author,” Bob Cornuke, who runs something called the BASE (Bible Archaeology Search and Exploration) Institute. I hope his ethics are better than those of former nurse-anesthetist turned international explorer and author Ron Wyatt, who found a profitable career by claiming to find virtually every possible biblical site and artifact. (Wyatt, a Seventh-Day Adventist, was best debunked in a book by his fellow SDA members Russell R. Standish and Colin D. Standish, Holy Relics or Revelation, a book I highly recommend.) Ed Brayton has done a good job of dissecting the claims in the announcement article. As he notes, this is far from the first such claimed discovery of Noah’s Ark. This one is in Iran rather than the usual location of Agri Dagi in Turkey. I actually give them credit for not looking on Agri Dagi (Mt. Ararat), since the Bible only says that the Ark landed in a region called Ararat, not a mountain of that name (2 Kings 19:37, Jeremiah 51:27). For a review of some previous claimed Noah’s Ark sightings, see my 1993-1994 articles from Skeptic magazine, “Sun Goes Down in Flames: The Jammal Ark Hoax” and “Update on the Ark Hoax”.

USA Today technology columnist Andrew Kantor has changed his mind, and no longer supports net neutrality regulations: Not too long ago, I was very much on their side. “Imagine you make a phone call to a friend,” I wrote then, “but instead of hearing it ring, you get a recording: We’re sorry, but the person you are calling has not paid Verizon to carry his or her conversations. But I was wrong. ...