Home Blog Page 8344

Signals in the noise: Peter Wayner’s new book on steganography

Author: JT Smith

By Joab Jackson

When Peter Wayner wrote a book on the practice of steganography in 1996, the
term seemed so arcane, so daunting, that his publisher insisted he not use
that word in the title.
That changed in the days after Sept. 11, however. Among the many rumors
floating around after the attacks, one held that Osama Bin Laden’s minions
communicated with one another via messages embedded in digital photographs
that they sent around the Internet. Or something along those lines. The story
was never verified, Wayner says, although the idea brought to light the
little-known and ancient art of steganography. As luck would have it, Wayner
was updating Disappearing Cryptography (the 1996 version was subtitled
Being and Nothingness on the Net) at the time.

Steganography has long been a sort of lonely stepchild to encryption. At its
simplest, encryption is the art of scrambling a written message so that the
resulting seemingly random collection of characters cannot be easily
deciphered by another party. Steganography is the art of hiding of a message
within another message, such that a passer-by is unaware of the concealed
meaning.

Digital photographs are a particularly good medium for steganography.
“Digitized photos or sounds are represented by numbers that encode the
intensity at a particular moment in space and/or time,” Wayner writes in the
new edition of his book Disappearing
Cryptography — Information Hiding: Steganography and Watermarking
.

Even a small digital photograph can hide a lot of information.
Disappearing Cryptography shows a before-and-after series of seemingly
identical photographs of bridges, city skylines, and deserts that were
encoded with messages. It takes very careful work to find the difference, if
it can be seen at all. Many of the photographs contain the text of an entire
chapter of the book itself, yet the most careful observer will only see a bit
of loss in the picture’s color as the binary digits that represent those
colors are intermingled with the binary digits carrying the words.

“We want to believe that if there’s anything real and true in the world, it’s
the meaning of numbers like zero and one,” Wayner says in an email
interview. “But after steganography, even bits can offer multiple readings
and misreadings.”

After reading the newly released second edition of Disappearing
Cryptography
, it’s hard not to look around for hidden messages that may
be buried in handbills, menus, Billboard‘s album charts. Everything
becomes a potential carrier for surreptitious information. Even Wayner’s book
may be suspect, though he insists this isn’t the case.

“For the record, I didn’t really put any [hidden codes of my own] in the
book,” he says. “If anything, the math and the metaphors are tricky enough
the first time.”

Steganography is hardly a computer-age phenomenon. As another
cryptography-obsessed writer, Simon Singh, pointed out in his 1999 history of
encryption, The
Code Book
, the practice dates back at least a few centuries, when
Chinese messengers swallowed secret notes sealed in wax to carry to their
intended recipients. More recently, James Bamford’s profile of the National
Security Agency, The
Puzzle Palace
, tells of how gangsters used to communicate with one
another by the number of shirts they sent to Las Vegas to be dry cleaned. The
basic idea behind steganography is the same — finding ways to transport data
within other forms.

Wayner, 38, has long been one of the most respected writers on computer
technology, having done stints as a technology correspondent for The New York Times and the newsstand
version of Byte magazine. He has
also written a number of books such as 1999’s Compression
Algorithms for Real Programmers
and the also newly released Translucent
Databases
.

Judging from a recent lunch interview, Wayner seems uninterested in the usual
book-promotion rigamarole. When asked how he became so entranced with
steganography, Wayner says only that it started when a friend asked if it was
possible to hide one message within another. Asked about where to get more
information about Disappearing Cryptography‘s rerelease, he randomly
muses about Congress and the entertainment industry’s ham-fisted attempts to
utilize encryption as a method of copyright control. A Princeton-trained
mathematician, Wayner loathes the idea of outlawing the act of
circumnavigating digital copyright-protection schemes. In the heart of such
legislation, he writes in the book, is an attempt “add security by
prohibiting knowledge.”

The field of computer-technology writing teems with writers who lose
themselves and their readers in thickets of directionless arcana and
technical terms. Wayner is one of those rare tech scribes who can get the
details right and shape a story. While much of Disappearing
Cryptography
gets into the nitty-gritty of writing and using computer
programs to hide information, it also revels in the philosophical and
cultural underpinnings of its subject matter.

In the book, Wayner asks whether this tool can be used for good or for evil. The answer is, of course, both. He admits that steganography holds obvious allure for the child pornographers and terrorists of the world. But he also
notes that the technique can be used by freedom fighters to safely
communicate beneath the radar of corrupt governments, by law enforcement to
pass messages back and forth to undercover agents, and by whistle-blowers to
pass on secrets about corporate malfeasance.

Steganography can even be fun. Wayner’s Web
site
features a section on how to use a random collection of just about
any object — a shopping list, a tally of favorite disco records — as a way to
embed secret messages.

“Life often reduces to formulas,” Wayner writes in the book. Formulas
identify the redundancies, or the noise, of daily life that falls just under
our perceptions, then simplifies them. Steganography exploits those
redundancies, most often without us ever noticing.

With thinking like that, it’s easy to imagine that Wayner sees patterns
everywhere. Does he look for hidden messages in the world around him? He
shrugs it off.

“In most cases, the best algorithms are good enough to be virtually
unbreakable. So I don’t try to look for messages encoded with the best
algorithms,” he emails. “But vanity license plates can be a real game.”

Category:

  • Programming

Retail therapy (with Linux)

Forbes.com: “Harry Roberts says he is not anti-Windows, he’s just “anti-spending-money.” That’s why the chief information officer at Boscov’s , a $1 billion department store chain based in Pennsylvania, is slowly moving big chunks of its technology operations onto Linux.


In March 2001 the 91-year-old, privately held company determined that its server farm (its collection of servers that run its applications) was expanding at the rate of one new major server per month. Roberts says these Windows servers required significant manual administration. “For every ten to 12 servers, we had to allocate one full-time person.”

Checking email on Linux

Forbes.com: “Checking e-mail on a Linux operating system offers a variety of choices, ranging from e-mail clients resembling Windows applications (such as Outlook) to shell-based clients that don’t look anything like what you’d find in the world’s most popular operating system. Of the three e-mail clients we tried, we still like Pine, the old, all-text standby. But if you want something more like Microsoft’s Outlook, Ximian’s Evolution is a great choice.”

Category:

  • Linux

Mandrake Linux Community Newsletter #51

This Week’s Summary: Mandrake/Microtel systems at WalMart.com; Mandrake
in the News; Financial Corner; Latest MandrakeClub Activities; Business
Case of the Week; Software Updates; Headlines from MandrakeForum.

Top Story
----------------------------------------
New Mandrake/Microtel systems now at WalMart.com.
WalMart.com has released a range of PCs that come pre-loaded with the 
Mandrake Linux 8.2 operating system. These new Mandrake/Microtel 
systems are pre-installed with hundreds of the best Open Source 
applications *plus* the complete StarOffice® 6.0 office suite.
Read the complete announcement at MandrakeSoft.com:
http://www.mandrakesoft.com/company/press/pr?n=/pr/products/2315

The new systems range from a 900MHz Duron with 128MB RAM for $391, up 
to a 2.0GHz Pentium 4 with 256MB RAM for $648. See the "Desktop PC" 
section of WalMart.com for all the details:
http://www.walmart.com/catalog/catalog.gsp?cat=41937&dept=3944&path=0%3A3944%3A3951%3A41937


Mandrake in the News
----------------------------------------
Several news outlets covered the WalMart.com story, including:

Newsforge.com -- Mandrake PCs are now online at Walmart.com.
"NewsForge broke the news last month that Microtel was putting together 
Mandrake-Linux PCs for Walmart.com, the online division of the giant 
American retailer. If you were beginning to think those PCs were never 
going to make their way online, you were wrong. As of Sunday evening, 
they're online in the desktop computer section of Walmart.com."
http://newsforge.com/article.pl?sid=02/07/15/0147230&mode=thread&tid=23

Slashdot.org -- Mandrake Hits Wal-Mart(.com)
"So now walmart.com customers seeking a pre-installed Free OS aren't 
limited to Lindows. I wonder if any Wal-Mart manager is brave enough to 
actually set up a few machines in-store."
http://slashdot.org/article.pl?sid=02/07/15/1352249&mode=nested&tid=147

--

TuxReports.com -- Ximian Desktop Installer, Red Carpet, and MoneyTalk.
TuxReports has a nice overview of the Ximian installer (with plenty of 
screenshots) which the author used with Mandrake Linux 8.2:
"Earlier I wrote about using the Ximian Desktop go-gnome installer to 
download and install Ximian Desktop onto a Mandrake Linux 8.2 box. Now, 
I'd like to share some of the images as well as some thoughts about the 
script, red carpet, and moneytalk."
http://www.tuxreports.com/xim_slashdot.html


Financial Corner
----------------------------------------
The "MandrakeSoft Shareholder Newsletter" for June 19th has been 
released. This latest edition discusses the Company's consolidated 
results for the first half of fiscal year 2001/2002. Highlights 
include:
   * an increase in revenue of 36%
   * an increase in gross margins
   * cost-cutting measures have reduced losses by half
http://www.mandrakesoft.com/company/investors/newsletter/sn020716


Increase of capital continues.
MandrakeSoft board members recently voted to extend the Warrants (BSA) 
operation until August 14th. The extension will provide extra time to 
shareholders - particularly foreign investors - who would like to
participate but need additional time to finalize their subscriptions. 
If you would like to become a company shareholder, there's still time 
to act.
http://www.mandrakesoft.com/company/investors/bsa


MandrakeClub
----------------------------------------
More about Club RPMs
"The recent proposal for an interactive system where Club members can 
ask for RPMs, and volunteers may build them, has apparently hit the 
right note: The interest of both club members and volunteers has been 
above expectations, and it looks as if everyone has 'just been waiting 
for something like this'." The following article provides a summary of 
what's happening with the idea right now, and the first draft of a 
club-RPMs FAQ.
http://www.mandrakeclub.com/article.php?sid=49

Not yet a Mandrake Club member? To learn more, please visit:
http://mandrakelinux.com/en/club/


Business Case of the Week
----------------------------------------
Education/Research: Mandrake used for PROIMES project.
The 'PROIMES' project is sponsored by the Secretary of Science and 
Technology in Argentina. The project was created to work with small and 
medium-sized companies and the government to decrease costs and improve 
productivity. To reach this objective, they now use Free Software and 
provide training and education.

Pedro Marcelo Di Santi, Coordinator of PROIMES, writes: "Our interest 
in Mandrake started when we were using version 7.0. Since then, we have 
replaced our other systems, because Mandrake is the only one that 
provides an acceptable result for the end user."
http://www.mandrakebizcases.com/article.php?sid=334

Every "bizcase" counts; please share your story by submitting it to 
MandrakeBizcases.com
http://www.mandrakebizcases.com/submit.php


Software Updates
----------------------------------------
Software updates have been released for:

lsb -- New lsb packages provide LSB 1.2 compliance

View the complete list at:
http://www.mandrakesecure.net


Headlines from MandrakeForum
----------------------------------------
Linux Journal's 2002 Readers Choice poll.
The Annual Linux Journal "Readers Choice poll" is officially underway 
and waiting for your votes!!! Topics include Favorite Distribution, 
Favorite Desktop Environment, Favorite Word Processor, Favorite E-mail 
Client, and lots more.
http://www.mandrakeforum.com/article.php?lang=en&sid=2318

Internal PCI Modems.
Mandrake user 'Wakey' asks: "Does anybody know if a driver exists for 
the US Robotics 56K Voice Internal PCI Modem?" Tom points out many 
resources for good information about this and related topics.
http://www.mandrakeforum.com/article.php?lang=en&sid=2316

PengAOL (AOL Client for Linux) pre-compiled for Mandrake Linux 8.2.
An Anonymous reader discusses 'PengAOL' -- an AOL client for Linux.
http://www.mandrakeforum.com/article.php?lang=en&sid=2314

X, Window Managers, Desktop Environments? Oh my ...
Tom provides a very informative overview of the Graphical User 
Interface used with Linux.
http://www.mandrakeforum.com/article.php?lang=en&sid=2289

Read these and other stories at MandrakeForum.
http://www.MandrakeForum.com/

Category:

  • Linux

Is Linux a good bet for investors?

From Forbes.com “If, as President George W. Bush suggests, this post-boom period is like a collective hangover for investors, then they can look back on the Linux IPO mania as the last drink they consumed before passing out.”

Category:

  • Linux

Open Source and the next boom

Author: JT Smith

by Jack Bryar

With the stock market taking a dive, and business pessimism setting new
records, are there any hot prospects left in all of high tech, let alone those
beleaguered remnants of the Open Source business community? Actually, yes. At least
one Open Source company is at the center of one of the hottest developments
in technology. Another is being rescued by companies in what was
supposed to be the one business sector in worse shape than the computer
industry.
In fact, despite a pounding by so-called stock experts, many Open
Source firms have ridden out the last couple of weeks in surprisingly good
shape and may be in a great strategic position in the near future. There’s a
surprising reason for this.

The last week or two have been simply hideous for anyone whose life
savings are tied up in 401k accounts. The tech sector has borne the brunt of the stock
market’s “irrational pessimism.” The valuations of firms like Cisco, Sun
Microsystems and Oracle have all taken a hammering. Much of the pounding has been
the inevitable backlash from a decade featuring a hyped market, immature
management, lax regulations, creative accounting and bloated executive
payrolls.

As the panic has escalated, even innocent companies are being
downgraded by so-called investment pros.

Take Red Hat. Despite having enjoyed an almost uniformly favorable
press, and having garnered over half the commercial Linux operating system market, the
financial analyst community has been trashing the firm over the last 10 days.
Although there was little in the company’s recent Analysts Day and Earnings forecast to justify it, last week the company landed on the analysts’
collective dung heap. Few analyst’s cheat sheets are followed more closely than
the First Call “Consensus Recommendations List.” The list measures those
companies showing the greatest swing in sentiment among investment analysts. This
week, Red Hat found itself placed on the list, as one of the lowest rated,
least promising of all publicly traded stocks. This is the current list that includes
firms such as WorldCom and U.S. Airways. It is hardly a place any company
wants to find itself.

Unfair? More mindless piling on by the same clowns who hyped up this
stock and lots of others during the the dot-com bubble? Probably all that.
Nevertheless, critics are complaining that generous executive pay and stock options
have kept the company from being consistently profitable, and the remarks
have some merit. Despite such sentiments, Red Hat’s stock price has stayed
relatively stable over the last few weeks, especially compared to many other IT
firms.

Perhaps all the panic-prone investors had already run away during the
company’s stock swoon of last winter. However, Red Hat’s recent experience has
been mirrored by other Linux firms, including some firms in real financial
trouble. For example, in the past two months, Caldera has replaced its CEO and CTO and
hacked away better than 15% of its workforce. Key investors pulled
out. Despite all this, Caldera’s stock has actually been going up over the
last three weeks.

This may be a sign that the bear market of 2000-2002 is be coming to a
close. Near the end of such markets, the most undervalued businesses see a rise
in the valuations as bottom feeders look for cheap stock. Several Open
Source companies may look particularly cheap to these so-called “value”
investors. Borland Software is a good case in point. It bothers many investment
pros that Borland does such a large percentage of its business with the
major telephone companies, a sector generally given up for dead. However,
several institutions have noted that the company’s current stock price works
out to less than the company’s annual revenues, and not much more than
twice the cash Borland has in the bank. They have also noted that Borland
continues to be profitable every quarter. That’s something few IT firms not named
Microsoft can claim these days.

There appears to be more going on than just bottom fishing for
bargains. Another reason some strategic investors have renewed their interest in
Open Source is the dawning realization that Open Source companies don’t have
the same basic strategic problem that faces most of their competitors.
Unlike nearly everyone else in high tech, they aren’t seeing their business
plans damaged by … Open Source.

It is one of the great untold stories of the computer industry. Open
Source has grown to become a classic disruptive technology. Firms such as
Oracle, Dell, and Sun have yet to formulate a coherent response to the
challenges of Linux. As a consequence, they face increasing levels of uncertainty
and doubt from business purchasers. Many business customers still hesitate to
embrace open platforms but refuse to do business as usual with their
traditional, proprietary vendors until everyone has figured out how to incorporate
Open Source into their business environments. Some of this Open Source FUD
has been fueled by marketing practices of firms like IBM, which have hyped
Open Source to beat up its competitors. InfoWorld’s Michael Vizard has been particularly critical of IBM’s strategy and motives, but such doubt and paralysis is natural to any market undergoing radical change.

New technologies spawned by the Open Source movement are even more
disruptive. Take grid and cluster server technology. Some time back, Irving
Wladawsky-Berger, IBM’s strategy guru, predicted that grid systems and cluster server
technology would revolutionize the IT market. There’s
plenty of evidence to suggest he is right. As part of a project at my day job,
I have been tracking wire service press releases concerning
businesses and institutions that are setting up grid or cluster systems. The
stories are now coming in at the rate of two to three a day.

One recent article concerned the monster Linux cluster system being
constructed for Lawrence Livermore National Laboratory. When complete, the cluster will combine 1,920 Xeon CPUs into a system capable of generating 9.2
trillion calculations a second. Unfortunately for chip makers like Intel, grid
and cluster architecture means that the fastest way to improve overall
performance may not involve paying big money to buy the next generation of
Itanium 2 CPUs. The Xeon chip was new in 1998.

Every disruptive technology has winners and losers. Among the winners
appear to be firms betting heavily on cluster server technology. Perhaps the
most focused of these firms is Linux
NetworX
. Spawned by Glen Lowry’s Alta Technology Corporation, and underwritten by
Wasatch Ventures, Linux NetworX is building systems for governments, institutions
and an increasing number of engineering and pharmaceuticals
companies. The company’s finances are private. Its management has been shaky. The
company is unlikely to go public any time soon until the markets stabilize.
However, the success of Linux NetworX and the technical advances being made by
other Open Source firms have attracted a new round of interest from a species
of investor thought to be extinct, the venture capitalist.

It may be counterintuitive, but a crash of the type seen on Wall Street
this week tends to flush money back into venture funds. When blue chip
stocks begin to crash, there are few safe havens, and almost no other high-growth opportunities outside of new start-ups. As a result, money is starting
to come back into the venture markets. The Boston Globe recently covered
the expanded activities of Orange
Ventures
, a venture capital team with a quarter billion dollars worth of
spending money underwritten by a European wireless firm. Another European
wireless company just set up a similar fund in Manhattan.

These firms are all looking for companies capable of providing wireless
Web services, collaborative computing environments and improved back-end
systems architecture. These are all businesses areas where Open Source ventures
should do particularly well. So, if the current stock market bust marks the
beginning of the next boom, Open Source developers face an interesting challenge. The
technology is there. The money is starting to show up. The market is beginning to
stabilize. Will businesses be ready?

Crackers to corporate America: you’re lazy

From Computer World: “When a group of Web vandals hacked into the Web site of USA Today on July 11 and inserted fraudulent news stories, the Internet security community got
a taste of just how serious Web page defacements can be.”

Category:

  • Security

Will alternative web browsers ever unseat Microsoft?

From E-Commerce Times: “Some analysts scoff at the very idea of alternative Web browsers — any alternative, that is, to the dominant Microsoft Internet Explorer. However, other browsers offer users some attractive features in addition to freedom from Microsoft, including speed, versatility, reduced hard drive
footprint and ease of use.”

Comparing MenuetOS, SkyOS and AtheOS

dotMac writes “There seems to be life beyond Linux, BSD, Mac or even Windows. OSNews features a comparison article regarding the ‘big three’ of the truly alternative OS scene: MenuetOS, AtheOS and SkyOS.”

New Linux supercomputer coming to Livermore national lab

IDG.net: ” Lawrence Livermore National Laboratory will soon be getting a heavyweight new Linux supercomputer that will be one of the most powerful Linux-based supercomputers on earth. The machine will theoretically be capable of 9.2 trillion floating-point operations per second (TFLOPS) and will be used to help the Livermore, Calif.-based lab as it conducts ever more complex scientific experiments involving climate, earthquakes and other physical phenomena. “

Category:

  • Migration