Tuesday, July 3, 2012

Something off the hat

It's been a while, so I'll just draw something off the mind, see where I end up..


Well, actually it's been a quite interesting couple of weeks with stuff going on everywhere.
As I pick stuff up I take note of my usual bane "NemId" and my settling with the freebie project.

So a quick update on the freebie project is that things doesn't quite change. I ended up running a series of Amarr missions with Theology Counsil finishing off with the usual Faction mission and to my bitter realization I notice that the counter being Brutor Tribe is located some 30 jumps away. so that's some 25 jumps from HQ. I've dragged my sorry arse there and prepare to start em up tonight. but that Amarr / Minmatar relation really is the drag to deal with. Giving it a month or 2, plus I don't think I'll take much heart in the offset with that distance. I'll hang around there for a while.
The Covetor training has essentially completed so back to drake training. I'm told that the Golem should be my goal and I'm already aligning for it with the torp + shield rather then drone + armor.
I'¨ll figure it out. Still L1 agents with my poor standings, and I won't be able to handle much more then L2, maybe easy L3 so this is the long haul and it won't bring the isk. Lucky my mining buddies are atoned to the challenge and keep the Plex income stable.

My bane "NemId"....
It's getting more and more interesting as the days go by.
I have little to no doubt in the end result, what intrest me more is when people realise what's going on and the effects it has on them for the future.
Sorry to do this to anyone, but I'll outline the setup to help anyone join the prober page. Think I better do that in sections:

Privacy?
I found recently that the proposed fix to keep control of the PSK with the setup has been not just delayed but will infact eventually be completely dropped + it will not co-exist with current banking system.
This is my main concern, and have always been so and the thing that holds me off, and let me explain to those that have no idea what PSK is.. PSK stands for Private Shared Key or Pre Shared Key. the importent aspects being the words "Shared Key".
To understand how encryption and privacy works, one must start by understanding the reason for "Keys" and what they are...
And that's not easy... okay any encryption expect would kill me for this still it'll make things more simple to understand...

You have a house of some sort. There's an entrance, with a lock...
 There's restricted access to the house..Let's asume you always lock the door :)
So who should have access and how do you make sure only certain people have access?
The first thing you do is you make keys for the lock.
You know default keys with he teeth?
Right. you then saw off the section with teeth and each person that needs to unlock the door is given a set of key teeth.
One set of teeth per user, and we must assume there is no way to copy them (that would be very technical and I don't even understand it myself, sooo).
The other part of the key you hang on the wall by the door. For everyone to use.

Now access to your house happens by someone bringing a set of keyteeth, use the Keyholder and unlock the door to enter.
That's weird and strange way to explain PSK, but it makes a point to those that doesn't know what it is.

Now the "NemId" model is called a PSK and used as a PSK too, but there's a little difference to the design:
When you want to enter your house you go the door, press the doorbell, and at a side window a guy will show up asking you for a name and password. If he is satisfied with your answer you are handed the key to the door, you unlock it, and give him back the key.

All in all it's okay, you get to enter your house. You can get help if need be, there's a guy at the window to ask if you fail to insert your key into the lock on the door. And access is restricted.

There's a few problems with it also:
How can you be sure that the guy doesn't enter your house and mess up things while you're out?
How can you be sure that the guy only hands out your key to you, and not your kids?

No big issue for most people until you suddenly become responsible for what's going on in your house.

I best cut this short, I'm starting to expand too much. I can always bring up other issues some other day.

I'll toy about more with the above analogy, and please provide some feedback to the problems I love to see the issue from more directions...

Anyway, so the guy that has your key, could potentially go to your house and set up a Pirate bay server somewhere you don't see it.
Sure he's not aloud to do so, and he will be fired if someone finds out he's done it. But he can still do it.
With current setup the legal approach on it ignores the fact that the key isn't personal and private, so in legal terms "anyone" using the key is YOU!
Therefore YOU! must have been the one setting up the Pirate Bay server.
Disclaimer: (I don't know the illegal file sharing stuff anymore, so let's assume a Piratebay server is illegal and punishable by fine and imprisonment)

The use of the key is proof itself that it is being used by you, as no-one can legally do so. This idea becomes very interesting when it's common knowledge. As I've told loads of people in on forums and in private. I'm walking around waiting to see this thing backfire on itself. thus far no one has been caught in the system and gone to court with it, and they are the only ones able to make a difference. on that mental state. It's like the funny notation that social security numbers are secret and thus only you have access to your social security number. You don't have to think long to point at someone else being able to have a copy of it. and when someone other then you have access to something is it then still your secret thing? Do you have any control of who knows it really? Is it private? Or how private is it really?

I'm rambling on while I shouldn't.... Please bring a comment on your privacy concerns or lack off.
You don't need to be concerned to have an opinion.


No comments:

Post a Comment