Submitting Patents Online

Yesterday's big project was submitting my patent application for the Delegate Key Exchange scheme I presented at RSA.

Working round the USPTO EFS system is still a real chore. One of the biggest problems being preparing the PDF to comply with their requirements. The Windows PDF generator is not listed as one of the ones that is acceptable so I first tried to install the distiller that the USPTO recommends. This turns out to not work at all on Windows 7.

Try number 2 was to try using Open Office. This was pretty much a disaster as OpenOffice couldn't parse the references in my Word document and lost all the reference numbers in the claims section and it didn't rotate the landscape diagrams to meet the PTO requirements.

To add insult to injury I remembered the reason that I uninstalled OpenOffice with prejudice last time I used it (on the provisional). It is one of those programs with an updater but the update invariably fails to retrieve the files it needs. Probably due to not having the right permissions. And unlike most other updaters it does not have a 'do not update' option. For the time being I have just disabled running the program on startup which is an obnoxious feature in itself. Why would I want to have over a Mb of code that always loads to support a program I am not running? If I get any more nag screens the whole Java system is going in the bin.

So anyway, after discovering that Word cannot rotate the diagrams I made I ended up having to recreate them using cut and paste into Powerpoint (which can handle rotation properly). First time round this was rejected by EFSWeb as well. Then I found an option to create standards compliant PDF.

I have the feeling I could have avoided the whole performance by just selecting that option in Word in the first place.

Salvador Dalek gets his exterminator gun.

Salvador is complete and has moved into my office.

Netdulino

I recently received my Netduino

Netdulino is a small computer designed for interfacing to hardware. It is very much like the Ardulino only with a faster processor (32 bit rather than 8) and supports the Microsoft .Net technology.

.Net is a really good match for this sort of board as the CLR is designed to allow for code to be compiled at deployment time for any processor with a CLR compiler. So in theory programs written in .NET could be moved from one Netdulino to another without the need to access the source code.

.Net also provides a full features programming environment (Visual Studio Express is free) and you can even choose between imperative (C# / Basic) or functional programming styles. These are full featured compilers with no compromises. You don't have to spend your time thinking about weird restrictions on integer sizes, register use or whatever. Any C# source will work fine without modification.

Getting started was pretty quick once the files were all installed. I had the LED blinking in about half an hour, most of which was spent downloading stuff.

The only drawback with this approach is that once you blink the LED there is not much more that can be done without getting some electronic components to interface to. I have ordered some LEDs, motors and a grab bag of other stuff from Jameco and Solarbotics.

Pakistan rejects complicity in bin Laden case - Central & South Asia - Al Jazeera English

So 'Pakistan rejects complicity in bin Laden case'

Well they would, wouldn't they? But the US press account seems determined to make this a dispute between the US and Pakistani governments when in reality it is a dispute between the democratically elected politicians and anti-democratic factions in the military.

Neither Bin Laden nor the Taleban were ever popular in Pakistan. Musharraf, their main supporter in Pakistan was never popular either, he seized power in a coup and lost it the first time there was a democratic election.

The reason the Pakistani government needs to tread cautiously and appear to resist certain types of US pressure is not fear of domestic Taleban/Al Qaeda supporters. Even though they do exist, they never voted for Benhazir Bhutto's party anyway. The reason they have to be cautious is the risk of a military coup.

So it probably suits the Pakistani government to appear to be under pressure from the US to perform a purge of the military. It gives them a pretext to 'reluctantly' do what they would like to in any case. Just as Pakistan has to officially appear affronted at the invasion of its sovereignty in the killing of Bin Laden while being rather glad he is eliminated. The Taleban imposed a far more humiliating infringement on Pakistani sovereignty when they occupied and effectively rulled the Swatt valley for a period.

Pa. suit: Furniture rental co. spies on PC users | ajc.com

Umm, what made someone think this would be legal?

Pa. suit: Furniture rental co. spies on PC users

The rental company appears to have a clueless lawyer who imagines attack is the best form of defense:

Aaron's, which bills itself as the nation's leader in the sales and lease ownership of residential furniture, consumer electronics and home appliances, said the lawsuit was meritless. It said it respects its customers' privacy and hasn't authorized any of its corporate stores to install the software described in the lawsuit.

It does not take a legal genius to see that the plaintif suffered an injury here. The only question is who is liable. Since the employee had knowledge of the spying software and the employee was acting for the store, it is very hard to see how Aaron's could not be liable.

Aaron's best chance to avoid class action status would be to persuade the court that this is an isolated incident and it is anxious to repair the damage. Describing the suit as meritless does not seem a good way to achieve that.

Authenticating Bin Laden's Body

Josh Marshall ponders the question of whether the US should release photos of Bin Laden's body.

That is a good question but one that at this stage probably has no good answer. Given the number of 'birthers' peddling a crackpot conspiracy theory about the President's place of birth I can well imagine members of Al Qaeda engaging in similar denial of the obvious. It is even possible, likely even that the same unscrupulous US politicians who saw advantage in pandering to birtherism will see benefit in claiming Bin Laden's death is a hoax.

So a better question would be how to provide proof beyond an unreasonable doubt that someone is dead.

One way to do this would be to use numbered, sealed tamper-evident bags. These are produced by several suppliers and were originally used for demonstrating that cash deposits have not been tampered with by couriers. A store keeper puts their takings in the bag notes the serial number and gives it to the courier. They then call the recipient and tell them the serial number of the bag. When the courier gives the bag to the recipient they check the serial number of the bag is correct and that it has not been tampered with.

The bags are made of a fairly durable but thin plastic and are self sealing with an incredibly strong glue that cannot be parted without leaving evidence. Some bags have a tamper evident strip in the glue so that the bag says 'void' if opened.

Tamper Evident Bag Provided by SecurityBag.com

These bags are used to establish the chain of custody for evidence in criminal trials.

So a basic protocol for establishing the death of BinLaden would be

1. Secure the area
2. Determine Bin Laden is dead
3. Cover most of body with sheet
4. Begin recording proceedings with video camera providing notarial authentication
5. Take tissue sample from body
6. Place tissue sample in evidence bag
7. Note serial number of bag
8. Seal bag
9. Stop recording
10. Place video camera in evidence bag
11. Transfer bags to laboratory
12. Begin recording of proceedings with video camera providing notarial authentication
13. Remove samples
14. Extract DNA
15. Print out DNA analysis
16. Stop recording
17. Publish all data

The serial numbers are unique but an unreasonable doubter could assert that the producer had been suborned into producing unnumbered bags and the number added later. So a way to provide additional proof that the evidence has not been tampered with would be to use two bags, one inside the other and put one or more bank notes, preferably from different countries inside the outer bag but not the inner. The serial numbers on the bank notes would then be used to provide additional proof that the evidence had not been tampered with.

It is my belief that the US government has already eliminated all reasonable doubt that Bin Laden has been killed. Does the protocol I propose eliminate unreasonable doubt as well? I would hope so but some people will dispute even the most indisputable facts.

Bin Laden in hiding

So bin Laden wasn't hiding in a cave after all. Who would have thought that?

Well quite a few people actually because a cave is not a particularly good place for a person needing daily medical treatment to hide. Bin Laden's kidney failure meant that he needed dialysis. That is difficult to perform in a cave and would require a constant flow of medical supplies.

Hiding in plain sight was probably Bin Laden's best option.

Why choose a military town? Well where else could you construct a fortified building without attracting attention?

Bin Laden's security precautions would be quite unusual by US suburban standards. But not so much in a garrison town close to Afghanistan and Kashmir. A lot of the buildings in the area have high walls to stop eyes looking at the womenfolk. The builders would not have known that they were building screens to hide a man rather than a woman.

Bin Laden also appears to have been pretty disciplined in keeping a low profile. He kept his personal contact with the outside world to the absolute minimum compatible with still maintaining some influence in Al Qaeda.

While he was bricked up in his hideout, Bin Laden was relatively safe. But being bricked up also meant that he could not recruit, plan or train. Some are claiming that this means that eliminating Bin Laden will have minimal impact on the ability of Al Qaeda to act and that the 'war on terror' is therefore going to continue.

This is a complete misreading of the situation in my view. Bin Laden was irrelevant to Al Qaeda's operations because there haven't been any since 9/11. Terrorist movements splinter and fracture constantly. The original goal of 9/11 was to get other jihadists to unite around Bin Laden's banner. If Al Qaeda exists in any meaningful sense it has been run by someone else for the past five years. Most likely Al Zawahiri. But I suspect that it is more than likely that when Zawahiri is eliminated he will be found in similar circumstances.

The attacks attributed to 'Al Qaeda' since 9/11 have all been planned and executed without any contribution from Bin Laden's organization. Some of the participants have ties to people who run in the same circles, but thats all. That is not a 'franchise', thats not a 'subsidiary', thats another group co-opting a brand that has already gained recognition.

Eliminating Bin Laden is a major blow in the 'War on Terror' because the whole concept was absurd and counterproductive. Bin Laden wanted to be taken seriously as an enemy. He wanted to be treated as an equal. And Bush and his administration obliged. Now they are claiming the credit for the elimination of Bin Laden, the Arab awakening in North Africa and everything else that is positive that has occurred since Obama took office. Not surprisingly there is not one thing that occurred during their watch that they have accepted blame for.

Bush's claim to have inspired the Arab awakening are as absurd as Bin Laden's. His goal was to perpetuate and extend US control of the region at any cost. He was entirely indifferent to the interests of the people living there and to the number of deaths he caused to achieve his goal.

Bin Laden did at least recognize that the region is ruled by regimes that are unrepresentative, brutal and corrupt. But his ultimate objective was of course to replace those regimes with one that would have no representation, be even more brutal and make the corruption absolute. Very few of the protesters in Egypt were calling for Bin Laden's vision of the future. Bin Laden's position provided Bush with convenient cover for his own. Opposition to the corrupt dictatorships of the region was automatically equated with support for Bin Laden's caliphate.

The removal of Bin Laden alone might not have ended the 'War on Terror', but it does give Obama the credibility to address this issue on his own terms without constant interference from the Republican party.

The removal of Bin Laden in combination with the events of the Arab Awakening have the potential to transform the region completely. Without the bogeyman Bin Laden, the dictators and despots are going to find it much harder to resist change.

The Dalek!

Salvador Dalek nears completion.

Now I have a Dalek, why not let him work in the workshop for me? He seems quite at home there.

Of course, that is how I made some of the parts. Printed by shapeways for $44.

Asking the wrong question

The New York Times debates Why didn't the US foresee the Arab revolts?

Why would this fact be a surprise? Mubarak, Ben Ali and Gaddafi failed to foresee the same revolts despite committing far greater resources to the task.

How do we even know if the premise of the question is correct? I am not on the President's reading list for Top Secret intelligence and neither is the New York Times. If the intelligence services had been predicting the collapse of these miserable dictatorships I would hope that they would keep it to themselves.

All six of the 'experts' asked to comment on the question assume that its premise must be correct and that had the US predicted the revolts they should have somehow acted to prevent them.

That was certainly the old model of US foreign policy: Propping up dictators in the name of 'stability'.

As the past four weeks proved, it didn't work.

Ahmedinejad's view

The Washington Post should really stop giving Ahmedinejad's shills space to write about the Middle East.

The Leverett's are a couple who used to do foreign policy for the neo-cons but for mysterious (ormore likely banal) reasons suddenly started spouting the Iranian government line in a series of tendentious opinion pieces.

According to the Leveretts, the Iranian elections were not stolen and Iran is poised to emerge more powerful as a regional player as Egypt defects from US control and thus submits to Iran's sphere of influence.

In European terms, this is like suggesting that Germany would be part of the sphere of influence of Ukraine. Egypt has a larger population than Iran, an economy that is diversified beyond oil and controls the Suez canal. In the highly unlikely event that Sunni Egypt would want to form an alliance with Shi'ia Iran under theocratic control, it is clear that Iran, not Egypt would be the junior partner.

While US influence in the region may have declined as a result of the changes of the past four weeks, the only point of having influence is to protect interests. And the interests of the US and the Western world in general are much better served by the spread of democracy than maintaining the rule of kelptocratic dictators.

As the largest remaining police state in the region, the sudden collapse of similar regimes in Egypt, Tunis and Libya must be a concern to the mullahs of Iran. And the process is far from complete. If Bahrain and Yemen fall, the regime in Saudi Arabia is going to come under further pressure. Should Saudi Arabia fall, Iran's system of government will become a glaring anomaly.

Shorter Gadhafi

Shorter Gadhafi: Claims in the foreign press that I am murdering opponents of my rule are lies and anyone who believes them is to be murdered. [Talking Points Memo]

The New Generation of MacBooks...

I was rather surprised by Apple's tagline for the new MacBook Air, 'The New Generation of MacBooks' (Apple - Mac).

As a means of selling MacBooks, fine. But what does it say about their other models?

I have the first generation MBA. It is a great design apart from the design fault on the hinges. But my original plan was to get the 17" model which is great unless you don't mind carting a large, heavy slab of aluminium round with you.

No doubt some of the people who go for the 15 and 17" models really do need the extra performance of a 2.5 GHz processor over 1.8. But some would surely find a smaller machine more than made up for a modest reduction in speed.

Stuxnet: After the hype

By now most readers of this blog will be aware of the now infamous Stuxnet virus that allegedly targeted the Iranian nuclear program, was allegedly written by Israel, Russia, China, the US and Iran itself, had no fewer than 4 zero day attacks, cost over a million dollars to write, but was clearly an amateur job, which succeeded and failed. It has disabled security systems throughout the world and there are no confirmed reports of it breaking anything.

As with many media firestorms, the analysis has tended to run in advance of the facts. And when the facts didn't fit it was the facts that were ignored rather than the analysis.

I have not looked at the Stuxnet code directly, but I have spoken with several experts who have and they all tell me the same story: The code consists of a distribution mechanism and a payload. Both are targeted to a particular group of machines but the distribution mechanism is set to infect particular groups of windows machines while the payload appears to be set to target one very specific installation.

The code appears to have been written in a modular fashion with different attacks being written by different hands. The code is layered and we are not sure that all its secrets have been revealed even now.

As with many high profile attacks, various parties have taken the distribution vector and repackaged it to attack targets of their own choice. Those parties may or may not include the original authors.

The only firm geographic information we have is that the code has employed signed code components signed under two separate code signing certificates, both issued to Taiwanese companies. I think this is a particularly significant piece of evidence since there are not very many code signing certificates in circulation. It is not something a hacker is likely to come across unless they are looking for it. And whoever was looking for the code signing certs was almost certainly able to read Chinese.

That said, the modular nature of the code suggests that the virus was written by many hands. I suspect that the task of writing the code was outsourced to several independent contractors, none of whom would have needed to know the ultimate purpose. They may well have outsourced the task of obtaining code signing certificates to Chinese or Taiwanese hackers to throw investigators off the trail.

Anyone with sufficient money and criminal connections could have written the distribution code. The payload is rather different. It appears to be very closely focused on one single target. This was initially suggested to be the Iranian centrifuge enrichment plant but my sources suggest that the Iranian Bushehr nuclear power plant is a more likely target.

One of the reasons for thinking that the target was Iran was that the Iranians themselves complained about being subjected to a Western cyber attack. Then they suddenly stopped complaining and denied that there had been any impact whatsoever.

Whatever the target was, we are pretty sure that the code did not target any major installation that the operators were willing to admit was the target. It is possible that Stuxnet targeted a European or US plant, but I very much doubt that this could have been kept secret. We are also fairly certain that whoever wrote Stuxnet had a very good reason for wanting to disable the plant, even though this was unlikely to succeed for more than a few months.

This last aspect of the attack makes it very unlikely that Israel or any Western country would be responsible. Whatever the target, it is highly unlikely that any cyber-attack against a well designed control system can achieve more than a temporary denial of service. Whoever wrote the Stuxnet code was revealing that they knew a very great deal about the design of the target. It is not very likely that any intelligence agency would want to put such a valuable strategic asset at risk for the sake of some casual vandalism that would be repaired in a few months.

Even more compelling is the fact that the Bushehr plant is not yet operational. Disabling a running plant is one thing, disabling a plant that is not yet commissioned would require considerably greater and more detailed inside knowledge.

If the target was the Iranian centrifuges, the knowledge could only have come from inside Iran itself. That is not impossible, there is certainly a complex power struggle going on within the regime. But it seems very unlikely.

The Iranian Bushehr reactor seems a much more likely target than the centrifuges. At least two parties had access to detailed knowledge of the plant's design - the Iranians and the Russian's who designed it. It is also possible that there are plants in other countries built to the same design and that a third party could have learnt some of the details from them. I find this unlikely however since respect for Russian nuclear engineering was severely damaged after Chernobyl. Other than the Iranians, it is unlikely that the Russians have had many recent customers.

Why would Russia sabotage a plant they built themselves? Well it used to be standard operating procedure during the days of the Soviet Union. Countries would buy all manner of technology from Russia and then learn that it was not so much an outright purchase so much as a lease. Selling the Iranians a power plant and then sabotaging it to force the Iranians to pay for repairs is the way the Soviet Union did business and is the way that Russia does business today - as European countries buying Russian natural gas have found to their cost.

We certainly do not have conclusive proof, but the Russia theory is the only one that fits all the facts we know and is the best fit to those facts. Russia has built its cyber-warfare capability through an alliance with organized crime, commissioning the deployment code is certainly well within the type of favor that Kremlin-sponsored criminal groups such as the Russian Business Network have performed in the past.  The payload was probably written separately and tested out on an actual Russian power plant with the identical control system - presumably with the plant shutdown or otherwise safe.

In conclusion, the Stuxnet attack appears to me to be a highly professional attack perpetrated by the Russian government on their ally to coerce Iran into agreeing to accept Russia's proposal to reprocess Iranian fuel. This would allow Russia to recoup the cost of the attack through revenues from the reprocessing and would ensure that Iran remained dependent on Russian technology in the future.

Iran agreed to the reprocessing deal in 2005 and then backed out. A few months ago Iran changed course again and agreed to honor their earlier agreement. The Bushehr Nuclear plant began to be loaded with fuel on 21st August and is scheduled to begin generating power in the near future.

Dalek Halloween

My halloween costume this year. It is a full scale dalek hero prop replica made from fiberglass, aluminium and rubber.

I did not quite manage to finish it on time due to a disaster with the trundling mechanism. The eyepiece is dodgy and dalek aficionados will not the absence of plunger and gun. Given that fitting them requires careful measurement and is a one time thing, I did not want to rush it.

The voice is produced by an authentic Moogerfooger ring modulator as used by the BBC that I bought off EBay. 

Red Cells

What is it about terrorism that makes US Commentators talk nonsense (Washington Post)?

Wikileaks recently obtained a document which asked what should be the rather unsurprising question 'Does the US export terrorism'.

Of course the US exports terrorism, for the simple reason that the US is a rich county with a very large population of second and third generation immigrants who can afford to engage in the irredentist politics of what they imagine to be their homeland.

The UK has the same problem. The causal nexus of the strife in the Punjab that led to the 1984 siege of the Golden Temple in Amritsar was almost entirely located in Birmingham England.

Until September 11, Rudy Giuliani would never pass up an opportunity to attend an IRA fundraiser. But support from New York City flowed to both sides of the sectarian conflict in Ireland, just as they do to both sides of the Israeli/Palestinian issue.

Expatriate irredentists are often the biggest obstacle to a peace process. They fund the conflicts but experience none of the consequences. They collect the money to buy bullets and bombs to murder and maim, but they only every acknowledge the injuries caused against their side. So the expatriates are always the last holdouts.

This is of course known to anyone who specialized in counter-terrorism before 9-11. But since then everyone in the security world has declared themselves an expert in counter-terrorism, most basing their models on the experience of the cold war era when the most visible terrorist groups were state sponsored.

How an Israeli attack on Iran might proceed.

Glenn Greenwald is engaged in another argument with Jeffrey Goldberg over the latter's article in the Atlantic in which he is very clearly beating a drum for a US war on Iran.

Greenwald initially pointed out that Goldberg had something of a credibility problem given his earlier role in peddling some of the stories used to claim a casus belli for the US invasion of Iraq. Since then it appears that he has caught Goldberg in an outright lie. Even so, Goldberg appears to have been largely successful in framing the debate on war with Iran as to whether the US should attack first or let Israel start the war.

The argument from Goldberg et. al. appears to be that if Israel attacks Iran, Iran will retaliate and that this will force the US to come to Israel's defense following Iran's inevitable retaliation. I find this a rather unlikely scenario as it leaves out of consideration the reaction of China, Russia and US public opinion and the fact that any US response would be constrained by time and logistics.

Planning for wars takes a considerable amount of time. Even if the US was minded to immediately declare war on Iran, it could not do so immediately and the costs of doing so would be rather obvious. The US public would wake up to the possibility of being drawn into a third neo-con war in defense of the country that was unambiguously the aggressor. It is doubtful that a majority of Republicans would support that proposition, let alone Obama's base.

When Obama addressed the nation from the oval office, his only real option would be to call on all sides to accept a cease fire on the basis of a US-Russian-Chinese plan being voted on by the UN security council and look to take credit for saving Israel from its own foolish leaders.

Netanyahu is no fool, he knows that he can't launch an attack against Iran and then go run crying to the US's skirt after the inevitable retaliation. Those are the tactics of cowards and schoolyard bullies. Netanyahu would only launch an attack if he is certain he knows where the nuclear material is and he is certain that Israel would win the inevitable war that would follow. Since only a lunatic would be certain of either proposition the prospects of an Israeli attack on Iran are rather small.

BadB and anti-Americanism

Its good to hear that Alleged Carder ‘BadB’ has been busted.

But take a look at his business card and remember that this is a Ukraine/Israeli citizen. Then ask yourself if the people who are doing Internet crime are purely in it for the money.

While the money is certainly a large part of their motivation, there is clearly a nationalist motivation as well. While the fall of the Soviet Empire was considered a very good think in the West, some people in the East were not so happy. And Horohorin, 27 was 8 when the communist system collapsed. He probably does not remember the secret police or the gulags.

It is strange but true that some people find the most bizarre, abominable things imaginable to idolize. When I was in college some students used to love to shock people by declaring their support for General Pinnochet, a man they knew to be responsible for several tens of thousands of murders.

How to bias a poll

Selection bias free, I am sure.

Take Our Obama Socialism Survey And Receive Free "Impeach Obama" Sticker | The Conservative Caucus

Spies amongst us

Yesterday I discovered I have been living near to a pair of Russian spies for the past ten years and never noticed. Today we start to discover just how lame those spies were. Shoddy tradecraft, falling for ridiculous ruses, what clowns!

I beg to differ.

Looking at the tradecraft described in the complaints it does not appear to be markedly different from the methods used by the KGB in the Soviet era. Some of the tools had changed, wireless laptops had replaced the old dead drops. But they were using the exact same methods that they had used in the Soviet era when the KGB successfully infiltrated both MI5 and the FBI.

And that for me is the real reason why the Russian spying antics were so pathetic: the times had changed, they had not. Which at root is the whole problem with the Putin crowd and its attempt to turn the clock back to the Breshniev era of 'Stalinism-Lite'.

First off, lets get the terminology right. The spies that were just caught were not agents, they were operatives. That is the field level spy masters. A real life James Bond does not go and steal the information himself, he recruits locals who have already have access to the information to act as agents. The division between operatives and agents is an important one in intelligence work: the agencies will generally do whatever they can to protect operatives, agents are generally considered expendable.

The Russian ten spies did not attempt to burrow into government agencies or perform classified work directly. Their covers were only designed to be good enough to fool immigration and would almost certainly have been exposed in a positive vetting process. To be effective as spies following the old KGB model the Russians would have to recruit agents with access to the information they wanted.

We yet don't know if the spies were successful in recruiting agents, though we may well find out if there are further arrests. While the tools of the operative are money, ideology and blackmail, it is only the last one that is practical with respect to cold-calling in a democratic society. Mercenaries such as Hanssen and Ames are typically walk-ins. They decide they are going to betray their country by themselves and then make contact. The same is typically true of ideologues.

Lets say you are an NSA employee and have been identified as a target by a Russian operative who approaches you with an offer of money in return for secrets. Even if the amount of money on offer is tempting (a million dollars say), the risks are enormous and the approach is very likely to be a trap. The competent traitor knows that they have to reject any unsolicited offers and be the party that makes contact themselves.

This leaves blackmail, which has always been the primary tool of the field operative. An offer of money is likely to be rejected and reported, an offer of money coupled with a threat is much less risky. Later this year the IETF will be holding a meeting in Beijing. As a somewhat senior information security professional I would consider it something of an insult if I was not targeted by a honey-trap operation. A few years back a police raid on an 'Asian massage parlor' in Silicon Valley uncovered hidden cameras in all the rooms. While it is possible that the owner was merely a pervert, many of the clients captured on the tapes would have access to technology that China would very much like to acquire.

In the Soviet era, the KGB could use a very powerful form of blackmail: reprisals against relatives still in their power. Co-operation might mean permission to live in Moscow for a parent or sibling, refusal might mean loss of a job, internal exile or being denied critical medical care.

Putin's modern day spies had much less to work with. The US is a far more open society than it was ten or twenty years ago. Exposure as an adulterer or homosexual might damage personal relationships but is not going to end a career or result in prison unless your job happens to be running an anti-gay bigotry association.

Its not just the tools that have changed, the objectives have as well. Twenty years ago an operative who obtained an internal telephone directory for a government agency would be a hero. Today the information is most likely up on a Web site (and more likely to be up to date). Want a background profile on the new assistant director for widget command? His kids are probably on Facebook, his classmates certainly are.

For the past couple of years I have been attending weekly seminars at MIT on cybernetic aspects of international relations. In a nutshell the Internet is having major effects on national security, diplomacy and the way that wars are fought in future. Russia, China and the US are each attempting to work out what military and foreign policy doctrine is going to be in the Internet age. The MIT/Harvard project funded by the Minerva Institute is looking into these issues.

Isn't this exactly the sort of stuff that Russia would want to send a spy to sit in on? Is it likely that any of them did? Well not if they were illegals unless they wanted to attract quite a bit of attention.

And here we get to the real incompetence of the whole affair. We do not know what the spies may have acquired but the fact that they were allowed to operate, observed for over a decade shows that they probably didn't acquire very much that was damaging. How much more could the Russians have acquired if they had spent the same amount of money on a room full of clerks searching Google?

The Chinese espionage activities leave me equally skeptical. I do not doubt that they exist, the documentation is conclusive. I just think that they are more likely harming the Chinese economy as helping it. As long as China focuses on stealing foreign innovation, development of their own technology base will suffer.

We do not yet know, we may never know the reason that the arrests happened now, but one possibility is that the spies were so incompetent that they were actually hurting US interests. This may sound odd to someone brought up with the notion that being spied on is a bad thing. But in international relations terms there is a real value in transparency. If I do not have anything to hide, I want my adversary to know that I do not have anything to hide. If I stop him from confirming that I have nothing to hide he is going to go off and invent an explanation for my refusal and plan against it. that is going to make his behavior more random (bad) and possibly more aggressive (very bad).

We may never know, but it does not look like the Russian ten were doing much to improve transparency. The Russians probably knew less as a result of their efforts than they would have without them.

Rand Paul: Worse than a racist.

Rand Paul's tortured explanation of his opposition to parts of the civil rights act is being taken by some to indicate that he is either a covert racist or wishes to send a covert signal to racists that he is on their side.

Rand Paul's supporters are attempting to show that Paul's interest in positions that have traditionally been shout out to racists is in fact due to his deep and sincere belief in the rights of the individual and not a continuation of the covert-racism that many GOP figures such as Trent Lott and Jesse Helms engaged in for decades.

While there are many reasons to be skeptical of these claims, the counter-claim that Rand Paul is a rigid ideologue rather than merely a racist is actually a lot worse.

If Rand Paul is taken at his word, he is such a rigid ideologue that he would have opposed the real improvement in personal liberty provided by the civil rights act in favor of an abstract, theoretical definition of liberty. In Paul's world only the government can threaten liberty. No action by a private citizen can ever threaten liberty unless it involves coercion. In Paul's world, liberty matters above all else, but the term liberty has a fluid meaning that can be adapted to any purpose.

In the real world of course, the private individuals in the South could only discriminate by calling in the force of the state to remove blacks from whites-only lunch counters. As with Paul's assertion that 'tort law', not government regulation is the answer to the Deepwater Horizon spill in the gulf, libertopia is only achieved by ignoring state involvement in the favored case. Tort law is created by government legislation and (in common law jurisdictions at any rate) the decisions of government courts. Paul is not insisting on an absence of government regulation, he is insisting that the government is only allowed to regulate through retribution.

Libertarians are fond of the notion that the political spectrum is two dimensional, with a libertarian/authoritarian axis in addition to the left-right divide. The claim being that authoritarianism rather than any particular economic theory was the common factor in the totalitarian governments that came to power in the 20th century.

Rand Paul would clearly like to be placed on the libertarian end of the spectrum. But if we look at the consequences of his ideology rather than his purported principles he starts to appear distinctly authoritarian. Like Lenin he insists on placing a theoretical liberty defined by his rigid ideology above actual liberty.

Libertarians like to claim that they had no part in the totalitarian regimes of the 20th century. But this is only true if we ignore Latin America where a series of generals insisted on the need to defend liberty by replacing the democratically elected government through a military coup. And the fact that stalwart 'libertarians' such as Milton Friedman could support such murderers in the name of 'liberty' is certainly proof strongly suggests that it is a rigid commitment to ideology that is the defining enabler of totalitarianism above all others.