{"id":328,"date":"2004-11-17T04:24:51","date_gmt":"2004-11-17T04:24:51","guid":{"rendered":"\/?p=328"},"modified":"2012-11-01T13:37:12","modified_gmt":"2012-11-01T13:37:12","slug":"the-owner-decides","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=328","title":{"rendered":"The Owner Decides"},"content":{"rendered":"

Our last installment had us shivering on the edges of our seats with this scenario from Eric Norlin:<\/span><\/p>\n

you walk into a conference room; dial into a con call on the polycomm; the polycomm senses your bluetooth phone and (using a discovery service) looks at your personal attribute known as “music preferences”; thus your current favorite music (by how often you listen to it) is downloaded from your “federated” mp3 player — and the hold music while you wait for your fellow con-callers is *your* favorite music.<\/span><\/p>\n

sound a bit advanced? actually, you could (technically) do this right now with the Liberty Alliance specifications…<\/span><\/p>\n

To facilitate discussion, I have scratched out a pictorial representation of the components (to keep incredulous comments at bay, I won&#39t say this is a “diagram”).<\/span><\/span><\/p>\n

The little thing beside stick person is a phone, and interaction (1) uses Bluetooth to determine stick person&#39s identity by retrieving an identifier from the phone.The polycomm then interacts with a discovery service (2) to find out where stick person&#39s “federated mp3” server is located.Then it pulls down some music (3) conforming to stick person&#39s sense of what&#39s hip and appropriate. Note that the components are functional pieces only. At this point we are making no assumptions about how they are implemented or where they are located.<\/span><\/span><\/p>\n

<\/span><\/p>\n

Now there are a great many ways this polycomm scenario could be realized.I don&#39t want to make judgments about which realization is best.However I am interested in the underlying dynamics at work.To bring some of these out, I&#39ll posit a couple of realizations and discuss some of the implications.I&#39ve never discussed this scenario with Eric and don&#39t have a clue what he had in mind – so if I say something that bothers anyone, it&#39s not his fault!<\/span><\/p>\n

To start drilling, let&#39s look at the role of the polycomm. It senses my phone and uses Bluetooth to discover my identity.<\/span><\/p>\n

Issue:What and who is able to use Bluetooth to discover my identity, and what does that mean?<\/span><\/span><\/strong><\/p>\n

To what extent is Bluetooth like RFID?Is the identity discovered through Bluetooth an invariant tracking tag?Can any Bluetooth enabled device discover our identity as we approach it?What are the implications of this?<\/span><\/p>\n

When you first start asking questions like these, it seems unlikely that the designers wouldn&#39t have figured all this stuff out.And I certainly don&#39t yet know enough about Bluetooth to provide any definitive answers.But the <\/span>official Bluetooth website<\/a><\/span> didn&#39t really drive up my confidence <\/span>with this story<\/span><\/a>:<\/span><\/p>\n

The group of lanky tourists strolling through the Swedish capital&#39s old town never knew what hit them…As they admired handicrafts in a storefront window, one of their cell phones chirped with an anonymous note: “Try the blue sweaters. They keep you warm in the winter.” <\/span><\/span><\/p>\n

The tourist was “bluejacked” — surreptitiously surprised with a text message sent using a short-range wireless technology called Bluetooth.<\/p>\n

As more people get Bluetooth-enabled cell phones — both sender and recipient need them for this to work — there is bound to be more mischievous messaging of the unsuspecting.<\/p>\n

It&#39s a growing fad, this fun with wireless…<\/p>\n

But there&#39s more than bluejacking to consider, as these further quotes from the Bluetooth site tell us:<\/span><\/p>\n

What is bluebugging?<\/span><\/strong><\/p>\n


\n<\/span>Bluebugging allows skilled individuals to access the mobile phone commands using Bluetooth wireless technology without notifying or alerting the phone&#39s user. This vulnerability allows the hacker to initiate phone calls, send and read SMS, read and write phonebook contacts, eavesdrop on phone conversations, and connect to the Internet. As with all the attacks, the hacker must be within a 10 meter range of the phone. This is a separate vulnerability from bluesnarfing and does not affect all of the same phones as bluesnarfing.<\/span><\/span><\/span><\/p>\n

\n

What is bluesnarfing?<\/span><\/strong><\/p>\n

 <\/p>\n

Bluesnarfing allows hackers to gain access to data stored on a Bluetooth enabled phone using Bluetooth wireless technology without alerting the phone&#39s user of the connection made to the device. The information that can be accessed in this manner includes the phonebook and associated images, calendar, and IMEI (International Mobile Equipment Identity). By setting the device in non-discoverable, it becomes significantly more difficult to find and attack the device. Without specialized equipment the hacker must be within a 10 meter range of the device while running a computer with a Linux operating system and the specialized software<\/span><\/span><\/span><\/p>\n

\n

NOTE: None of this is intended as a criticism of Bluetooth. I am completely agnostic with respect to competing protocols – if any actually compete. I&#39m simply using Bluetooth as an example of the work we as an industry must do to get identity right.<\/em><\/span><\/span><\/span><\/span><\/p>\n

So in light of all this, it seems quite possible that Bluetooth protocols might giv<\/span>e out an invariant ID to any device which asks for it.And further, it looks like this is not the number one security issue the Bluetooth engineers are working on – at least until bluejacking, bluebugging and bluesnarfing are taken care of.<\/span><\/p>\n

 <\/p>\n

The point is that – when we get this right – a phone should only give out a user&#39s ID to devices the user wants it given to.<\/strong><\/span><\/span><\/p>\n

Let&#39s return to our scenario for an example.If the polycomm belongs to my employer, and if I&#39ve chosen to recognize my employer&#39s polycomms, then no problem – the phone should reveal my identity to the polycomm.But otherwise, it shouldn&#39t. We can codify this as one of the laws<\/em> of identity:<\/span><\/p>\n

The “Owner Decides” Law of identity:<\/span><\/span><\/strong><\/p>\n

<\/strong>Technical identity systems MUST only reveal information identifying a user with the user&#39s consent.<\/span><\/span><\/p><\/blockquote>\n

I will argue later that we who are technical servants of the “general will” need to obey the laws of identity.If we don&#39t, we will create a snarled mess of reinforcing side-effects that will undermine all the systems we put in place. Our ignoring a law of identity is analogous to<\/span> an engineer who decides not to obey the law of gravity.<\/span><\/p>\n

Ah, but we&#39re just beginning to get substantive. And I have a big day tomorrow (you know \u2013 that day-job thing), so I&#39m going to call it a night and drill into other aspects of this scenario next time.<\/span><\/p>\n

Apologies to Macpeople and End of Heightened RSS Alert<\/h5>\n

I got this note from Bill Tozier<\/a>, who has one of the most interesting bio&#39s<\/a> I&#39ve ever seen. He has a unique perspective from which to contribute to identity issues.<\/p>\n

No problems in Safari here. But I do note that there isn&#39t a big “I” in Macintosh. The tartan look went out some time back. Now it&#39s just silver and chrome and glowing white, uncapped.<\/p><\/blockquote>\n

Meanwhile Doc Searls<\/a> came through with what seems like a complete engineering report – it sounds like he has a control room going with ten or twenty consoles. Maybe that&#39s how he stays on top of everything.<\/p>\n

I just viewed the blog in Safari, and it looks fine. Same with Firefox. Both on OS X. On Linux, I just viewed it in Firefox and Konquerer, and it looks fine there, too. I&#39ll assume it looks cool in IE and Firefox on Windows.<\/p>\n

<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"

Our last installment had us shivering on the edges of our seats with this scenario from Eric Norlin: you walk into a conference room; dial into a con call on the polycomm; the polycomm senses your bluetooth phone and (using a discovery service) looks at your personal attribute known as “music preferences”; thus your current … Continue reading The Owner Decides<\/span><\/a><\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[2,1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/328"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=328"}],"version-history":[{"count":2,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/328\/revisions"}],"predecessor-version":[{"id":1236,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/328\/revisions\/1236"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=328"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=328"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=328"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}