It’s About the Rush

Quote

Watters had spent his entire career working for money. Hackers, McManus explained, aren’t in it for money. At least, not in the beginning. They are in it for the rush, the one that comes with accessing information never meant to be seen. Some do it for power, knowledge, free speech, anarchy, human rights, “the lulz,” privacy, piracy, the puzzle, belonging, connection, or chemistry, but most do it out of pure curiosity. The common thread is that they just can’t help themselves. At their core, hackers are just natural tinkerers. They can’t see a system and not want to break it down to its very last bit, see where it takes them, and then build it back up for some alternate use. Where Watters saw a computer, a machine, a tool, McManus saw a portal.

This is How They Tell Me The World Ends: The Cyberweapons Arms Race, Nicole Perlroth

World’s Largest Attack Surface

Quote

What had saved Ukraine is precisely what made the United States the most vulnerable nation on earth. Ukraine wasn’t fully automated. In the race to plug everything into the internet, the country was far behind. The tsunami known as the Internet of Things, which had consumed Americans for the better part of the past decade, had still not washed up in Ukraine. The nation’s nuclear stations, hospitals, chemical plants, oil refineries, gas and oil pipelines, factories, farms, cities, cars, traffic lights, homes, thermostats, lightbulbs, refrigerators, stoves, baby monitors, pacemakers, and insulin pumps were not yet “web-enabled.”

In the United States, though, convenience was everything; it still is. We were plugging anything we could into the internet, at a rate of 127 devices a second. We had bought into Silicon Valley’s promise of a frictionless society. There wasn’t a single area of our lives that wasn’t touched by the web. We could now control our entire lives, economy, and grid via a remote web control. And we had never paused to think that, along the way, we were creating the world’s largest attack surface.

This is How They Tell Me The World Ends: The Cyberweapons Arms Race, Nicole Perlroth

Cyberwar Power Move

Quote

There was no financial profit to be gleaned from turning off the power. It was a political hit job. In the months that followed, security researchers confirmed as much. They traced the attack back to a well-known Russian intelligence unit and made their motives known. The attack was designed to remind Ukrainians that their government was weak, that Russia was strong that Putin’s digital forces were so deep into Ukraine’s every digital nook and cranny that Russia could turn the lights off at will. And just in case that message wasn’t clear, the same Russian hackers followed up one year later, turning off Ukraine’s power again in December 2016. Only this time they shut off heat and power to the nation’s heart—Kyiv—in a display of nerve and skill that made even Russia’s counterparts at the National Security Agency headquarters in Fort Meade, Maryland, wince.

This is How They Tell Me The World Ends: The Cyberweapons Arms Race, Nicole Perlroth

Solving Extreme Poverty

The video presentation Solving Extreme Poverty and Homelessness in the USA can be seen on YouTube:

Commentary on Quora can be accessed here: https://qr.ae/pG5f5w

PDF of all slides in the presentation:

Presentation Text:

Solving Extreme Poverty and Homelessness in the USA

This presentation describes a potential solution from a big picture perspective. These ideas are being presented as a starting point for discussions on poverty and homelessness. I am inviting fellow poverty survivors – people with lived experience surviving poverty, particularly homelessness – to participate in this discussion. If you have never experience poverty directly, your support is appreciated but please be respectful and allow people with lived experience take the lead in this conversation.

Big Picture, Big Steps

Three (3) different plans with overlapping goals implemented simultaneously. This presentation covers the objectives of all three plans and then looks at the five-year plan in more detail.

5-Year Plan

The 5-year plan.

The objective is to meet the immediate needs of people currently surviving extreme poverty or homelessness, those in danger of slipping into poverty and people escaping catastrophic events, 

To this end, the 5-year plan focuses on providing emergency support to those surviving poverty, universal support to everyone and the establishment of emergency facilities and basic infrastructure to support providing for a large population a catastrophic event.

50-Year Plan

The 50-year plan.

The objective is to address the root causes of social inequality, financial inequality, global warming and environmental destruction.

This requires digging deep into complicated issues like systemic racism, global warming, environmental destruction and crumbling infrastructure.

500-Year Plan

The objective is to address long-term problems through multigenerational planning.

The 500-year plan lays the groundwork for making changes while fostering a culture of identifying and evaluating potential risks and consequences across many generations.

5 Year Plan

Now for a more detailed look at the five-year plan.

On its own, this is an ambitious band-aid for out-of-control homelessness and poverty in the United States, designed to keeps people alive while facilitating a transition into the 50-year plan.

Emergency Support

Emergency support is a lifeboat, not a final destination.  It consists of an expansion of both the resources available and the number of people eligible, while simplifying the process for accessing necessary resources.

Government Benefits

Food, housing, transportation and childcare make up the most basic benefits already available. They also address some of the most basic necessities.

Modifying the existing program is simple:

1) increase the amount of all resources made available to each person,

2) increase the annual income requirements to include the middle class,

3) simplify access – For example: automatically enrolling everyone whose tax returns indicate eligibility, and

4) Expand benefits to cover more key issues faced by people surviving poverty, such as student loan forgiveness and free legal assistance

Universal Support

As the title implies, these resources would be immediately available to everyone.

Universal Basic Income (UBI)

Universal Basic Income or UBI checks providing a reliable monthly payment to everyone over a certain age, regardless of income, living status or participation in other government assistance programs. Cash in hand goes a long way towards establishing nationwide financial stability and ensuring the basic needs of the population are met.

Universal Health Care

Five (5) years of Universal health care, covering all aspects of mental and physical health care at no cost to the patient, including medical programs normally addressed outside of hospitals, like dental, eye and chiropractic care.

Universal Photo IDs

The universal ID would be designed to be entirely free of charge, reasonably easy to create, centrally managed and regularly updated. To that end, a new ID could be based on anything from standard identification documentation to information provided by the individual verbally or select biometric data types.

The objective is to get everyone into the official universal photo ID system, including people who already have other forms of government ID, thereby making it commonly available and useful.

This may require connecting it to a specific purpose, such as voter identification, a centralized medical records system, or the universal medical benefits program.

Emergency Facilities

Emergency facilities are distinctly different from existing resources available to people during a crisis. They are designed to provide refuge to a very large population of people, pets and property during anything from a personal emergency to a catastrophic event or a mass evacuation.

Facility Formats

The resources currently available have three (3) possible formats: 1) a cold site, 2) a warm site, and 3) a hot site.

Cold Site

A cold site takes time and effort to set up and may require additional supplies to get up and running. Examples include bomb shelters, remote summer cabins or an RV only used for vacations.

Warm Site

A warm site is used on a limited basis or has a primary purpose that makes it reasonably easy to modify quickly. Either way it is partially up and running and mostly operational. Examples include schools, community centers, churches and stadiums.

Hot Site

A hot site is fully functioning and continually operating. Examples include hospitals, hotels and homeless shelters. Unfortunately, currently operating hot sites are not equipped to handle a large-scale emergency.

Homeless shelters struggle to meet the needs of people surviving poverty on an average day.

Hospitals and hotels are neither designed nor equipped to handle a large population for an extended time.

Emergency Facilities are hot sites specifically designed to handle the worst-case-scenario by meeting the long-term needs of an extremely large population during a crisis – whether that crisis affects a single person or involves a mass-evacuation.

Basic Requirements

Emergency facilities provide a place to live, a place to die, the resources necessary to live, and the ability to access at least one facility from anywhere in any state in the country.

Handicap Accessible

They are 100% handicap accessible because an evacuation event requires fast and simple processes. Able bodied people can used handicapped accessible housing without modification or difficulty. The same cannot be said about people who are handicapped or injured being placed in standard non-accessible housing.

A facility that is 100% handicapped accessible can provide housing and basic resources to anyone at any time – without delay. Simple. Fast. Efficient.

Known Population

The facilities, supplies and the public transportation connecting them MUST be designed to meet the needs of 150% of the total known population of the entire state.

That number includes the housed, unhoused, and temporary residents.

Why 150%? First, it’s an emergency facility. During an evacuation, everyone is moved out of the danger zone and into a safe place no questions asked – there MUST NEVER be a moment when people are stopped and evaluated for access.

Second, if the entire population is evacuated to these facilities at the same time and the total population count is off by 10%-25% or more, then there’s still plenty of room for everyone, including emergency transfers from other facilities.

Emergency Transfer

Which brings us to Emergency transfers. These are pre-established plans for moving people to different emergency facilities when the local facility is compromised, destroyed or at capacity.

To illustrate, try to imagine the states of California, Oregon and Washington on a map. All three states share an ocean coastline and problems with regular natural disasters, such as earthquakes, wildfires, floods and drought.

In this fictitious scenario…California has three (3) emergency facilities, Oregon has one (1) and Washington State has two (2). A wildfire rips through Oregon, forcing the evacuation of a large portion of its population to the emergency facility. This works until the fire changes course and starts heading for the facility itself

Despite planning, prevention and firefighting efforts, the fire gets dangerously close, and the Oregon facility must be evacuated. Per the plans already in place, the entire displaced population is sent to emergency facilities in California and Washington State via specially designed public transportation, such as a high-speed rail.

When transfers arrive, they are immediately provided living arrangements and access to all resources. Housing and assistance continue for as long as each person or family needs.

When the Oregon facility re-opens, those who remain at the emergency transfer locations are given the option of being transferred back to Oregon. Transfers are always free of charge and, outside of an emergency evacuation, they are voluntary.

Medical

An emergency facility requires comprehensive medical resources. Because this is a continuously operating facility, those resources are available – free of charge – to anyone who needs them 24 hours a day 7 days a week.

Nursing Homes and Hospice Care

A mass evacuation event is going to generate serious injuries, some of them fatal and others requiring long-term care. Evacuations also include nursing home residents and hospice patients in other regions of the state. Therefore, the emergency facility must be prepared to handle the needs of these patients.

Homelessness among the elderly is becoming more and more common. Serious illness often causes financial ruin that leaves individuals and families at the mercy of the welfare system and homeless shelters. Therefore, facilities must be prepared to continuously accommodate the needs of people dealing with a family or personal crisis.

Political

Catastrophic events do not adhere to a political calendar. Citizens evacuated to an emergency facility still have the right to vote in all elections – local and national. Voting options must, by necessity, be made available to all citizens residing at a facility for any length of time.

Communications

Basic communication resources include reliable high speed internet connections and universal cell phone towers designed to allow the entire population the ability to contact family and friends, or to remotely connect to work and school.

This facilitates communication between individuals, families and government agencies during a disaster. It also helps to encourage people to leave an area in anticipation of a known pending disaster, like a hurricane.

Education and More

Getting back to normal after a disaster takes time. Most likely, people forced to rely on an emergency facility will live there for several months or even years. Life continues.

Children must be educated, and college students need to finish school.

There are religious events and cultural holidays to observe.

Athletes and arm-chair warriors alike need to continue their training.

Opportunities to participate in both sports and the arts relieves stress, builds community and helps people continue living their lives. Which, in turn, helps people recover from a traumatic experience and get their lives back on track.

Legal System

Laws and policies governing emergency facilities must be consistent across the entire network to ensure that a flood of people traveling between facilities during an emergency transfer can complete the move as smoothly as possible. The fewer details people are trying to figure out during an emergency, the better.

Community and Culture

Many people will stay at a facility temporarily. Some will take a job and settle down permanently. There will be students who come seeking a free education and individuals who simply choose to remain long-term – these are all good things.

Anticipating the establishment of a permanent community and actively working to foster a culture that is conducive to the unique nature of life at an emergency facility will help ensure smooth operation over the long-term.

Big Picture, Big Steps

That’s the basic overview of the primary components of the five-year plan à Emergency support, universal support and emergency facilities.

Solving Extreme Poverty and Homelessness in the USA

Thank you for listening!

Bragging Rights: Social Media Policy Development

This course is designed to help Small Business Owners, Human Resources and Marketing Executives understand some of the legal ramifications in dealing with workplace social media issues. 

I completed The Legal Implications of Social Media in the Workplace Regulatory and Case Law Considerations for Employers’ Social Media Policy Development course on Udemy.com.

It provides a good overview of the laws most commonly relied upon in Social Media policy development.There are several case studies that provide excellent insight into the potential consequences of implementing a poorly written or unenforced policy.

For Information Security policy Analysts who have extensive experience researching and writing security policy, most of this will be review. But an examination of the basics is often useful.

Security Breach Notification Laws

The National Conference of State Legislatures (NCSL) has provided a complete list of security breach notification laws implemented at the state level (USA):

All 50 states, the District of Columbia, Guam, Puerto Rico and the Virgin Islands have enacted legislation requiring private or governmental entities to notify individuals of security breaches of information involving personally identifiable information.

This link provides links to each and every law: Security Breach Notification Laws

 

Nonpublic Personal Information (NPI)

Gramm-Leach-Bliley Act (GLBA), 15 U.S.C. § 6801-6809 (2002). Available at: https://www.law.cornell.edu/uscode/text/15/6809

(4)Nonpublic personal information
(A)The term “nonpublic personal information” means personally identifiable financial information—
(i)provided by a consumer to a financial institution;
(ii)resulting from any transaction with the consumer or any service performed for the consumer; or
(iii)otherwise obtained by the financial institution.
(B)Such term does not include publicly available information, as such term is defined by the regulations prescribed under section 6804 of this title.
(C)Notwithstanding subparagraph (B), such term—
(i)shall include any list, description, or other grouping of consumers (and publicly available information pertaining to them) that is derived using any nonpublic personal information other than publicly available information; but
(ii)shall not include any list, description, or other grouping of consumers (and publicly available information pertaining to them) that is derived without using any nonpublic personal information.

(GLBA, 15 U.S.C. § 6809(4)(B))

 

Personally Identifiable Financial Information (PIFI)

PIFI is defined in Securities and Exchange Commission (SEC), Final Rule: Privacy of Consumer Financial Information (Regulation S-P) 17 CFR Part 248 (2000). Available at: https://www.sec.gov/rules/final/34-42974.htm

Both the GLBA and the regulations define NPI[5] in terms of PIFI.
The GLBA does not define PIFI but the FTC regulations define the term to mean any information:
(i) A consumer provides to you [the financial institution] to obtain a financial product or service from you;
(ii) About a consumer resulting from any transaction involving a financial product or service between you and a consumer; or
(iii) You otherwise obtain about a consumer in connection with providing a financial product or service to that consumer.

Bragging Rights: NITTF Insider Threat Training

The office of the Director of National Intelligence (DNI), National Insider Threat Task Force (NITTF), has provided access to several Insider Threat training resources. I completed the Insider Threat Training Module.

The module just covers the basics, but it’s well made and clearly explains key topics. It’s a good introduction to understanding insider threats and it provides this nifty certificate upon completion:

Radioactive Experiments on Orphans

Vanderbilt University physicians administered radioactive cocktails to pregnant women in Nashville. The University of Chicago fed the radioactive elements strontium and cesium to 102 unwitting patients at state schools. One Dickensian institution, the Fernald School in Waltham, Massachusetts, added radioactive oatmeal to the menus of thirty orphans in a program sponsored by the AEC with the support of the Quaker Oats Company. Old videotapes reveal that some of these Fernald boys were African American, but no records with racial identifiers were ever released. When victims died, government scientists obtained their bodies and autopsied them carefully, measuring the levels of radioactivity and biological damage. To enable large numbers of these grim assessments, at least fifteen thousand bodies were exposed and collected for one project alone: Operation Sunshine. Until the mid-1980s and without the knowledge of patients or their next of kin, this program shipped the bodies and body parts of radiation experiment victims to be dissected at headquarters in Los Alamos, New Mexico.

Medical Apartheid: The Dark History of Medical Experimentation on Black Americans from Colonial Times to the Present by Harriet A. Washington