U of L IT Security Hole

I found a bug in IT’s security this morning. I’m no security expert bit I’m pretty sure it’s a fairly serious one. The school computers have screen savers that advertise things going on at the university. They create the screen shots in Macromedia flash and therein lies the problem. Anyone – whether they are a student or not could come up to the screen and right click the flash screen savers. A small popup menu appears. They could then click on the menu item called “About Macromedia Flash 6” and an Internet Explorer browser window pops up. From there they can access any web page or more importantly the hard drives of the computer they are working on. Now that I think about it, it’s likely not that big of an issue because probably there aren’t any melicious hackers at the University just waiting to strike but then again that’s if there’s anything to be learned from TV, it’s that there are hundreds of people just waiting to get a shot at “the man”.

I might tell told someone in IT.

Update: They said there were aware of the problem and it was going to be fixed soon.

Maher Arar: Deadly Al Qaeda Terrorist or Innocent Computer Scientist?

Maher Arar, a dual Canadian-Syrian citizen who operated a computer consulting business — was arrested by US officials during a stopover at New York’s JFK airport, then and deported to Syria by the US government. The FBI flagged him as a “suspected terrorist.” Arar spent a year being tortured in Syrian prison, his was beaten with objects including shredded electrical cables, and living in a urine-filled, rat-infested 3’x6’x7′ “grave”. Then one day they seem to have just decided he was innocent and safe enough to ship back to Canada. From Joi Ito’s blog:

Obviously, it’s probably easier for a Syrian national to get on a “list” than a Japanese, but this really scary. They say he had had a relationship with another suspected terrorist who is also being imprisoned and tortured now in Syria. He says he barely knew the guy. So what does this mean for us? If we meet someone, we should not “become friendly” with them until we are certain that they are not a suspected terrorist. What does this mean? We need to make sure they don’t hang out with other suspected terrorists. So if you believe in six degrees, it’s likely at some point you will be a suspected terrorist.

How do they know if you hang out with someone? Friendster? LinkedIn? Your email? We need to be VERY careful about the privacy of not just the content of our communication, but the privacy of who we are in touch with, often called sigint, or signal intelligence. Seriously though, this will cause a chilling effect on meeting, calling, emailing or otherwise “being in touch with” anyone who you don’t know very well that could land you on the “suspected terrorist” list.

Among questions being raised by Arar’s advocates: why was he deported to Syria, notorious for violating the human rights of prisoners, instead of being returned back to Canada — where he lived for 15 years, and owned a technology company? There are now calls for an open investigation in Canada — and in the US.

Canadian Prime Minister, Jean Chrétien, blames the United States for Arar’s deportation. In Commons yesterday, and with his fists clenched he declared, “The people who are responsible for the deportation of this gentleman to Syria are in the government of the United States, not the government of Canada.”

As far as being a Canadian citizen is concerned, an article from Canada.com thinks it may have saved him from more severe punishment. Article has gone 404.

Update: Amnesty International has an updated brief on this story.

Calgary Swim Meet

Tomorrow is my swim meet at the University of Calgary. Gary and I are still not speaking so I doubt he’ll show up to watch, even though I imagine he needs photos of the meet for the Gauntlet. Maybe he will send one of his assistants to do it.

Anyway I’m hoping for a best time tomorrow. We’ll see what happens.

Most likely Friday night we will go to see Doug’s play, “Not About Heros” at the Pumphouse Theatres. Anna is leaving for Edmonton to go on tour for three weeks and then down to Utah for another two. It will be a long month.