Monday, February 29, 2016

Ethics Assignment


       Privacy, Apple, and the FBI


If the authors of “The Right to Privacy” were alive today, I bet they would have a field day with the Apple and FBI case. In my opinion, the authors would completely disagree with the FBI in this case since requesting a backdoor be put in place is completely an invasion of privacy. It is a hacktivist’s political grenade. This request is a complete violation of the 4th amendment. Although the FBI claims they will only utilize this tool against criminals that break the law, how can we really trust that this would be the case given their history? We all know the NSA already spies on all U.S citizens. We are the most watched surveyed population in the world. The U.S completely unchained itself from the constitution. According to the Right to Privacy; The design of the law must be to protect those persons with whose affairs the community has no legitimate concern, from being dragged into an undesirable and undesired publicity and to protect all persons, whatsoever; their position or station, from having matters which they may properly prefer to keep private, made public against their will. It is the unwarranted invasion of individual privacy which is reprehended, and to be, so far as possible, prevented.” According to Wired “Apple is not being asked to unlock an iPhone; it’s being asked to create software that would help the FBI unlock it. After which, there’s every reason to expect Apple and every other tech company will be asked to create more software that could be used to diminish even more civil liberties.” Apple would cooperate if it was a targeted sort of thing where they felt it was very important to national security. Privacy has its limits and this case is not a matter of national security. The FBI used the San Bernardino case as an effective way to antagonize the public and try to win over the courts.

References:










Sunday, February 28, 2016

Social Engineering Task # 6

This task required that I go someplace where I am not supposed to be and get evidence of being there.
It had occurred to me that there are certain attractions that I might be able to gain entry to without paying admission. By going in under false pretenses and not paying, I would be someplace that I am not rightly supposed to be. For my target I chose a well know attraction in Boston. Days before my attempt I contacted someone from a corporation that is a major sponsor of the venue and asked if employees get reduced admission. To my delight I found out that employees can attend free by simply displaying their company identification badge. The next step was to get online to see if I could find out what an ID badge for that company looks like. I then had a friend take a photo of me, pasted it into Power Point along with the company logo. With a little work I had an authentic looking ID badge. I taped it to the back of a Charlie Card to make it look more realistic and give it some substance. I placed the badge in an ID holder with a lanyard that I got from a recent trade show I attended. Before attempting entry I observed the process of how people were gaining admission. Then I waited until there was a long line. That way the attendants would be more in a hurry to get people in. I entered like I was invisible. Now that I know I can do this I can find out what other places employee of certain companies can get into without paying. The best bet is to check their web site and find out what companies are corporate sponsors that donate large sums of money. I don't feel as though there are any moral stakes involved. I am not taking anything away from anyone or causing the venue to lose money. If I had to pay the $23.00 to get in I would not go anyway. I had absolutely no remorse or bad feelings doing this. In fact I enjoyed it because it required using various soft hacking skills such as reconnaissance and observation. There was little risk involved if the hack did
not work. I am wearing the ID badge backwards so that the company cannot be identified. If you recognize the venue send your guess to drbluninja@gmail.com

            

Social Engineering Task # 5

My task was to reach out to a fellow player and get them to tell me their address and then to get a picture of their front door. Since I no longer come to the classes in person this is a very difficult task. I do have the email address of several players. I could have tried to get their address via email but unless they had been drinking heavily at the time, they would have known that I was trying to hack them. I do know the city where two players live but that is a far cry from getting their address. If I had their address I could go to Google Maps street view and take a snip of their residence. There are not any moral stakes involved here. We all know it is a competition and in all fairness to all the other players, we should make each player earn their success and not hand it to them if we know we are being hacked. If I had gotten someone's address the only thing I could do with the skills I would have obtained is to send them an invitation to my graduation party in June. Assuming of course I complete my courses this semester.  

Ethics Written Assignment 4

For my article on what I think the authors opinion would be, I chose The Right to Privacy from the December 15, 1890 Harvard Law Review.

The authors begin by telling us that our rights have evolved from physical items such as the right to secure property, to intangible items such as the right to enjoy life and the right to be left alone.
They use the example of the press invading people’s privacy by publishing photos and spreading gossip. The authors state that newspapers have the ability to publish information that can cause more stress and emotional harm to people than physical harm can.

The authors seem to have very strong feelings concerning the right to privacy and do not feel that the laws of their time adequately protected ones privacy. During their time the only technology that exists to breach ones privacy was photography and newspapers. In 1890 they could never have imagined a world filled with mass media outlets, the internet, YouTube, Instagram, cell phones and texting where stories and photos could be spread throughout the world in seconds. Given people’s perception of what privacy should be, they would be appalled at how modern society has willingly allowed their privacy to slip through their fingers.

On page 23 the authors state that “to determine in advance of experience the exact line at which the dignity and convenience of the individual must yield to the demands of the public welfare or of private justice would be a difficult task”. It is here that the authors start to make the point that judging when privacy must yield to the public good is not an easy judgement.  

The authors go on to give an example of a person with the lack of certain abilities. They state that if it is an average person then it is no one’s business but that if the person was running for public office, then voters have the right to know. They are making a judgement when it is justified to make public certain information. In my opinion they are applying the principal of diminishing the right to privacy in favor of the greater good and protection of the public.

 Near the bottom of page 24 the authors write, “Any rule of liability adopted must have in it an elasticity which shall take account of the varying circumstances of each case”. In my opinion, here the authors are stating that as much as the right to privacy is important, privacy laws need to be flexible depending on the situation.

On the top of page 25 the authors sate, “In general, then, the matters of which the publication should be repressed may be described as those which concern the private life, habits, acts, and relations of an individual, and have no legitimate connection with his fitness for a public office which he seeks or for which he is suggested, or for any public or quasi-public position which he seeks or for which he is suggested, and have no legitimate relation to or bearing upon any act done by him in a public or quasi- public capacity.” If I were arguing the case of what the authors would think in the case of Apple versus the FBI the above quote would be the last sentence in my closing argument. Here they are specifically stating that a person has the right to privacy so long as that privacy does not concern any act that he has committed that effects the public. After reading that section I have absolutely no doubt, and you must agree, that the authors would be fully in favor of Apple conforming to the court order to decrypt information found on the cell phone of those that perpetrated this most heinous crime against the people of San Bernardino. People of the time that the article was written had little tolerance for criminals. Especially criminals that are anti American and whose sole purpose in life it to harm citizens of the United States. The more I read on from page 24 of the article, the more I am convinced by their statements, that the authors would be in favor of doing what is best for the public good. Keep in mind that they still feel strongly about one’s right to privacy and are not in favor of making public one’s information that does not affect society in anyway.

On page 28 the authors state, “Still, the protection of society must come mainly through a recognition of the rights of the individual.” This reminds us that although they are concerned with the common good, the protection of society starts with the right to privacy.  

In A Message to Our Customers Tim Cook, CEO Apple Inc. goes on about the depth of private information people store on their phones. People store the same kind of information in other forms such as hard copy, on their computers and tablets? Our information is also stored in countless databases at banks, hospitals and financial institutions. If probable cause exists, the fourth amendment allows law enforcement to obtain a warrant to gain access to that information. I’m sure that the authors of Why Privacy is Important would agree based on their statements, that once your actions effect the public, that information should become public domain.

In FBI director James B. Comey makes personal, passionate plea on Apple-San Bernardino controversy
Director Comey stated “It is a big problem for law enforcement armed with a search warrant when you find a device that can’t be opened even though the judge said there’s probable cause to open it”.
This simple statement reflects that fact that an iPhone is just another device that is subject to existing laws of the land. In their time, the authors of The Right to Privacy would never have imagined iPhone encryption but they were quite familiar with diaries which they referred to six times in their article. From reading their article I am left with the impression that the diary of a mass murderer should be made available to law enforcement. Comey more directly addresses that this is a matter of balance between privacy and safety that will effect Americans for a long time. The Right to Privacy article did address it in a les direct manner but appears to favor the safety of the public good over the privacy of an individual.

References:
·         Why Privacy is Important, James Rachels, Philosophy & Public Affairs. Vol. 4, No. 4 (Summer, 1975), pp. 323-333
·         The Right to Privacy, Author(s): Samuel D. Warren and Louis D. Brandeis. Source: Harvard Law Review, Vol. 4, No. 5 (Dec. 15, 1890), pp. 193-220.
·         A Message to Our Customers Tim Cook, CEO Apple Inc. February 16, 2016
·         FBI director James B. Comey makes personal, passionate plea on Apple-San Bernardino controversy By Justin Wm. Moyer February 22, 2016
·         Apple’s  Encryption Battle with the FBI has Implications. The Guardian, Sam Thielman February 20, 2016

·         Fight for the Future Press Release, Holmes Wilson February 17, 2016

Ethics Assignment #4

If James Rachels was alive today I feel like, he would disagree with FBI. The FBI wants Apple to help unlock the San Bernardino terrorists IPhone 5s. It may seem like a good idea but it’s truly an indiscretion. We rely on encryption heavily in today’s society and to potentially put everyone that owns an iPhone at a privacy risk is a troubling thing. There are a few key things that Rachels brings up that lead me to believe he would oppose the FBI's request. Rachels states 'Privacy is sometimes necessary to protect people's interests in competitive situations" Apple being a very well-known and respected company, they need to look out for their business interests. if users think their privacy can be easily unmasked they may get rid of their apple products. This was a part of a statement that was in Apples letter to its customers “access your health records or financial data, track your location, or even access your phone’s microphone or camera without your knowledge" Rachels thinks medical companies and financial companies should know the bare minimum. Rachels states "When people apply for credit (or for large amounts of insurance or for jobs of certain types) they are often investigated, and the result is a fat file of information about them" he goes on to say that the outing of certain personal data could ruin potential credit. Rachels doesn’t like the fact that the extra private information companies could get on you can impact you getting credit or not; he’s not closed minded and he acknowledges that companies need certain information on the person to make sure they are a good candidate. but he disagrees with the overreaching of some companies. If Apple did make this software for the FBI it would not be for "one-time use" once it’s made its out there and a lot of people can be exposed and taken advantage of. Rachels brings up social relationships and I think that’s a good talking point. Say you are someone who has naked pictures of you and your partner on your phone, personal journals, medical information, emails etc., and your phone gets broken into and exposed do you think your employer’s, coworkers, family, and friends are not going to be impacted by the information that has brought to light? there are some things that we keep close to us and only us and that’s the way it should be. I believe Rachels would think this situation with Apple and the FBI could be more destructive than helpful and take apples side. 

References
http://benjaminferguson.org/wp-content/uploads/2013/01/Rachels-1975-Philosophy-and-Public-Affairs.pdf
http://www.apple.com/customer-letter/
https://www.washingtonpost.com/news/morning-mix/wp/2016/02/22/fbi-director-urges-apple-to-help-unlock-killers-iphone-in-passionate-statement-its-about-the-victims-and-justice/

Saturday, February 27, 2016

Ethics Assignment #4




In light of the current situation involving Apple and the FBI, here I will be discussing about the topic “Why Privacy is Important” by James Rachels. I will try to quote, analyze the thought process of author, and then will try to interpret what he might have think about the current scenario.
I would start with the quote from Why Privacy is important, “…we have in being able to be free from certain kinds of intrusions. Since I agree that is the right place to begin, I shall begin there.” This shows the strong belief of author about the privacy issue.
The whole thing happening here looks like a power struggle between Apple and FBI as suggested by many people.  Apple CEO Tim Cook writes a letter to customers stating, “For many years ... We have even put that data out of our own reach, because we believe the contents of your iPhone are none of our business.” It can also be interpreted as customer’s data security and privacy is our responsibility none of FBI or Government’s job. If we quote here James Rachels from Why Privacy is important, “An adequate account of privacy should help us to understand what makes something “someone‟s business” and why intrusions into things that are “none of your business” are, as such, offensive.”  He basically says do not interfere with others affair, sounds similar to the stand taken by Apple right now.
Mr. Cook writes, “For years, cryptologists and national security experts have been warning against weakening encryption. Doing so would hurt only the well-meaning and law-abiding citizens who rely on companies like Apple to protect their data.”  That might be a genuine reason and also maintaining good relationship with customers-- here selling point is “greater privacy”. Similar expression we can read from James Rachels as well, which reads, “Thus we have good reason to object to anything that interferes with these relationships … one of the most important reasons why we value privacy.”
There are many claims and counterclaims by both side (FBI and Apple) regarding the privacy and security. Right now, it is hard for a common man to understand what’s going on behind the scene. Both side looking right in their own way. With above references, we can infer that James Rachels would have taken the side of the Apple (privacy and only privacy) in the current context.

References
http://public.callutheran.edu/~chenxi/Phil315_062.pdf
http://www.apple.com/customer-letter/

Social Engineering Task 5


My task for the week consisted of performing reconnaissance on a fellow player using the Internet. The challenge for me was the fact that I did not know any fellow’s last name to conduct simple Google or Facebook searches to see what I could come up with. I did however have a phone number pertaining to another player’s social engineering task against me, Jade Hacker. Initially, I felt creepy and just plain ol’disgusting for having to do this, but since she did target me the week before, I felt compelled to repay her in kind.

I began performing a reverse lookup of her phone number, which at first didn’t provide me with much, but it did provide her last name. After finding her full name, it all became easier and although I could’ve paid for a deeper analysis, I gathered what I needed for this assignment from free, publicly available sources. I will not share any of her information on this blog because privacy means a huge deal to me. But, I managed to find her age, address, and close relatives via white and yellow pages. Also, her resume from indeed.com provided me quite a bit of intel regarding all her current and former employers, there locations, and her level of technical expertise. The information I gathered, mind you for free, could’ve been disastrous, especially pertaining with credit fraud and other deviously natured motivations. Sowy Jadie, but you started it by lying and abusing my kindness! I promise to delete this stuff after I show you! LOL ;-)