Information icon.svg Please vote in the 2017 board of trustees election. The cabal thanks you for your service.
Bronze-level article

Computing woo

From RationalWiki
Jump to: navigation, search
Style over substance
Pseudoscience
Icon pseudoscience.svg
Popular pseudosciences
Random examples
Gather 'round the campfire
Folklore
Icon folklore.svg
Folklore
Urban legends
Superstition

Computing woo refers to a range of pseudoscientific practices and urban legends associated with computing, especially computer security.

Technical support[edit]

The world of technical support is a magical place. User[Who?] beliefs include:

Programming[edit]

Technicians and software developers many of whom consider themselves rational logical thinkers are not immune from all kinds of sloppy thinking and superstitions:

  • HeisenbugsWikipedia's W.svg, issues that never seem the same when you attempt to study them
  • Cargo cult programmingWikipedia's W.svg
  • It works on my machine: some programmers and IT have a tendency to assume that because code will run on one computer, that if it doesn't run on another one, that the other one is broken. It's usually the opposite. If you have code that runs on your personal computer but not on other machines, it is probably doing something dangerous that should cause segmentation faults or similar, but somehow is being allowed to do it. Alternatively, it may be set up in a way that is peculiar to the settings and file system on your machine.
  • Name, time, addresses, maps, gender misconceptions and more![4][please explain]

And among most people there is little conception what's involved in programming, to the point that the moviegoing public can accept the idea that a sufficiently good programmer can write a virus for a completely alien operating system, in a completely alien language, and have it work right the first time.[5]

BadBIOS[edit]

BadBIOSWikipedia's W.svg is firmware malware that was created by Ruiu ... in his head. Individuals like Ruiu are extremely concerned about malicious firmware from hackers and the NSA to the point of literal paranoia.

Origin[edit]

According to Ruiu (@dragosr on twitter), BadBIOS is a rootkit that can infect computers without bluetooth, ethernet, or Wi-Fi. Instead it can infect other computers by emitting "ultrasonic sound [...] from the device's loudspeakers". Computers nearby somehow) pick up the sound via the speakers and thus get infected. Ruiu suspected his computers were infected with BadBIOS once his computers were acting strange.[6] Ruiu later provided data dumps of his BIOS only to have experts reveal it was normal data. Ruiu then countered stating that the malware probably erased itself whenever he tried to make a data dump.[7] While these claims are not outside the realm of science fiction, Ruiu has not provided a silver bullet, only speculation. Despite this, his reputation seems to be intact somehow.

Years later, Ruiu came to the conclusion that BadBIOS can also contaminate USBWikipedia's W.svg, through some way of knowing...[8]

The subreddit[edit]

Yep, /r/badBIOS/ is a subreddit for a malware that probably never existed! Unsurprisingly, it's inhabited by some users who think that one weird thing in a computer means infected malware. These people are generally paranoid, judging by the threads:

  • User thinks hackers infected his ... mp4 file because it got corrupted.[9] OP blatantly states they used a dirty electricity filter to evade hacking. Ironically, his means to evade being hacked is the reason why he thinks he got hacked — having poor connection to an external device can disconnect a device when it's not ready, resulting in corrupted file.[citation needed]
  • A user claims that they're picking up ultrasonic sound ... must be badBIOS![10] Ultrasonic sound is just high-frequency sound above the human hearing range. There are other (plausible) sources of such frequencies such as bats.
  • "Neuroimaging tech will soon be able to decode our thoughts"[11] An example of just how paranoid this subreddit is.

Truth to it[edit]

Despite Ruiu's paranoia, there is truth to the madness:

  • Through an "internal NSA catalog", the NSA performs firmware attacks through backdoors thus confirming proof that such attacks do exist. Unlike BadBIOS, these attacks are actually detectable and actually have documentation; however, certain tools in the catalog require tools priced as high as 250,000$USD, something not to be wasted on the average Joe. Despite this discovery, it doesn't confirm Ruiu's brain fart that has no evidence.[12][13][14][7]
  • In the paper Journal of Communication, Michael Hanspach and Michael Goetz showed that BadBIOS is possible but only at 20 bps.[15]

Deep web[edit]

See the main article on this topic: Deep web

Cargo cult paranoid computer security practices are often advocated by naive internet denizens and trolls towards even more naive newcomers. High profile attacks aimed at Tor hidden services Operation OnymousWikipedia's W.svg as well as large attacks on users such as the FBI's legally dubious network investigation malware[16] has created an association of insecurity and surveillance associated with what is in fact one of the most secure and surveillance-resistant networks ever created.

Prospective explorers often ask if they should put tape over their webcam or use TailsWikipedia's W.svg in order to 'safely' explore the dark web. They will fixate on how technological configurations can secure their machines, but are entirely clueless about vectors such as password reuse, identity segregation or how to verify safety of file downloads.

Such common misconceptions stem from limited public understanding of threat modellingWikipedia's W.svg, privacy and practical computer security. As such, there is a massive market for bloggers and YouTube charlatans such as Takedownman and SomeOrdinaryGamers to offer off-the-shelf tips which increase the user's feeling of security.

Every day, an intrepid dark web explorer will read that the US Navy founded the initial creation of the Tor network and fancy themselves the next Edward Snowden by disseminating this information.[17]

Hackers and viruses[edit]

Russian Orthodox Leader Sprays Holy Water on Government Computers to Magically Stop WannaCry Attack[18]
Criminal hackers don't wear balaclavas except when it's cold or they are being ironic.[citation NOT needed]

Due to the low understanding of what hackers do and how viruses and malware works, it has been a relatively accepted trope for someone to claim their account was hacked as a get-out-jail-free card in the event of certain drug-fuelled rants and dramas.[19]

Some computer users will attribute changes to their computer to malevolent forces in a method comparable to astrology when it comes to rationalising changing and intermittent issues.

Of course, in a video gaming context, anyone who is better than you is a hacker.

There is a small number of 'anti-updaters', a anti-vaccination movement-like contingent of people arguing against automatically updating applications due to the misplaced belief that significant numbers of people care to manually review and install all patches.[20][21]

Cryptography[edit]

See the main article on this topic: Cryptography

Depending on who you ask, encryption can be anything from the largest piece of social good modern mathematics has ever produced or a dangerous weapon utilised by terrorists[22] and child abusers[22] in order to evade justice which must be carefully controlled.

In the early days of strong cryptography, the US government attempted to issue export bans, classifying the technology as akin of munitions.[23] While such bans were overturned in 1992, it wasn't until the rise of ubiquitous personal computing that governments would once again characterize mathematics as a dangerous tool.

The 2010s saw an increased call from politicians[Who?] around the world to backdoorWikipedia's W.svg common encryption software.[24] From the encrypted-by-default iPhone[25] through to bans on WhatsAppWikipedia's W.svg[26] in Brazil[27] and proposed and later withdrawn in the UK,[28] governments around the world remain convinced they can create a secure back door into software to counter criminals; however, it's not like backdoors are only exclusive to government agencies.

Said statements could be considered rhetoric to coerce tech giants deeper into mass surveillance programs, and less charitably as mathematical denialism from senior elected officials.

Web filtering[edit]

Web filtering is a magical solution to all the world's problems. Simply by stopping people (particularly children, but also library patrons) reaching the wrong website you can prevent sexual depravity bringing about the fall of modern civilisation, and prevent terrorism. Companies including Impero, Future Digital, and Securus sell "anti-radicalisation software" which prevents children reading about Islamist terrorism'[29] according to online security company Akamai, British law requires schools and universities to consider the use of such software.[30] Whether Akamai are an unbiased source of legal advice is for you to judge.

The traditional use of such software is to block access to pornography online, but such filters are pathetically useless. A British newspaper report complained that one filter blocked searches for "sex education" but allowed explicit searches in Spanish; it concluded they provide false security and could be easily circumvented (as anybody who knows anything about children could tell you). More seriously, anti-porn filters may discourage children from talking to their parents and actually promote porn addiction: "Filters can also encourage secrecy, deception and shame – key conditions for nurturing dependency or even potential addiction."[31] Because the naughtiness is half of the reason why porn is appealing.

Web filters also rarely if ever consider the blocking of pornography or jihadism to be their first priority. The majority of their efforts go to the blocking of websites offering alternative proxies and websites offering translation software. The former because it allows people to easily and perhaps even unintentionally bypass these filters and the latter because they often allow for diverse translations of the thing that people want to be censored and thus increase exponentially the work required to censor everything. Even more worrying is that some have them by default, meaning that no matter what you do, you won't be able to access Babelfish. [32]

And the best in the business that have a firm place in the international market are currently selling their software to dictatorships that want to avoid their citizens reading about any information that might potentially harm the way the government is perceived by its citizens. [33] On the plus side, since these governments are spending their time with censoring internet traffic and they will never be able to fully do so anyway, this is often accompanied with a more uncensored traditional press and television. However, one might still question why democratic governments support something that is partially marketed to dictators.

Misc[edit]

Things that are not computing woo[edit]

Whilst common computing misconceptions are numerous, often too many serious issues are written off[citation needed][Who?] as such including:

See Also[edit]

External links[edit]

References[edit]

  1. i read your email
  2. Bastard Operator From Hell
  3. Bring your own device
  4. Falsehoods Programmers Believe
  5. As seen for instance in Independence Day.
  6. http://www.theregister.co.uk/2013/11/01/breaking_badbios
  7. 7.0 7.1 http://www.infoworld.com/article/2891692/security/does-the-latest-nsa-hack-prove-badbios-was-real.html
  8. http://arstechnica.com/security/2013/10/meet-badbios-the-mysterious-mac-and-pc-malware-that-jumps-airgaps/
  9. https://www.reddit.com/r/badBIOS/comments/5d02yn/hacking_of_a_mp4_song/
  10. https://www.reddit.com/r/badBIOS/comments/5a8rj7/sound_analyzer_pro_app_detected_near_ultrasound/
  11. https://www.reddit.com/r/Futurology/comments/55o2ua/neuroimaging_tech_will_soon_be_able_to_decode_our/
  12. http://www.spiegel.de/international/world/the-nsa-uses-powerful-toolbox-in-effort-to-spy-on-global-networks-a-940969.html
  13. http://www.spiegel.de/international/world/catalog-reveals-nsa-has-back-doors-for-numerous-devices-a-940994.html
  14. http://www.infoworld.com/article/2609678/security/nsa-s-backdoors-are-real----but-prove-nothing-about-badbios.html
  15. http://www.theregister.co.uk/2013/12/05/airgap_chatting_malware/
  16. FBI crack Tor and catch 1,500 visitors to biggest child pornography website on the dark web
  17. Tor: Overview
  18. http://www.patheos.com/blogs/friendlyatheist/2017/05/16/russian-orthodox-leader-sprays-holy-water-on-government-computers-to-stop-wannacry-attack/
  19. This Is The Most Epic Brand Meltdown On Facebook Ever
  20. https://alessandrorossini.org/anti-updaters-it-equivalent-anti-vaxxers/
  21. https://www.troyhunt.com/dont-tell-people-to-turn-off-windows-update-just-dont/
  22. 22.0 22.1 http://www.theverge.com/2016/1/12/10749806/encryption-debate-fbi-terrorism-going-dark
  23. Export of cryptography from the United States
  24. https://www.theguardian.com/technology/2015/jul/08/fbi-chief-backdoor-access-encryption-isis
  25. Here's Why Apple Is Going To War Over FBI 'Backdoor' Order
  26. http://www.nytimes.com/2015/11/17/world/europe/encrypted-messaging-apps-face-new-scrutiny-over-possible-role-in-paris-attacks.html?_r=0
  27. WhatsApp officially un-banned in Brazil after third block in eight months
  28. WhatsApp, Snapchat and iMessage could be banned in the UK: Should you be worried about the Communications Data Bill?
  29. Schools monitoring pupils' web use with 'anti-radicalisation software', The Guardian, 10 Jun 2015
  30. The Prevent Duty – What’s it all about?, Bloxx, Akamai
  31. Why online porn filters were doomed to failure, Martin Daubney, Telegraph, 25 Jul 2014
  32. http://sethf.com/anticensorware/smartfilter/greatestevils.php
  33. https://paper-bird.net/tag/blue-coat/
  34. Donald Trump thinks he can call Bill Gates to 'close up' the internet
  35. Did Target Really Predict a Teen’s Pregnancy? The Inside Story
  36. Facebook knows you’re gay before your mother does, IT World, International Data Group, March 12, 2013
  37. Ironic Windows Vulnerability Shows Why Backdoors Can’t Work
  38. Not in front of the telly: Warning over 'listening' TV
  39. Privacy fears over 'smart' Barbie that can listen to your kids
  40. Mandatory Kinect on Xbox One raises privacy concerns
  41. The price of free: how Apple, Facebook, Microsoft and Google sell you to advertisers
  42. Fake news can poison your computer as well as your mind
  43. https://en.wikipedia.org/wiki/Commission_on_Elections_data_breach
  44. https://en.wikipedia.org/wiki/2016_United_States_election_interference_by_Russia