|By Jeremy Geelan||
|December 6, 2010 07:45 AM EST||
[Further updated to include advance word of Jay Rosen/Dave Winer "Rebooting the Media" podcast - #75 coming Monday Dec 6]
[Updated to include PayPal announcement of the closure of WikiLeaks' PayPal account.]
Is Web 3.0 maybe going to be less the utopia we've been envisaging and more like the real, physical world, with all the real-world limitations that follow along with it...?
The latest WikiLeaks ("Cablegate") affair, coming as it does at the very end of the first decade of the 21st Century, comes at an appropriate moment.
An undoubted political and diplomatic hornet's nest, the swirling discussions surrounding the organization's drip-drip release of (so far) 612 of the quarter of a million or so diplomatic cables in its possession are all grist to the mill of an "awakening" that in my view is likely going to mark the difference between the Web of 2000-1010 and that of 2011 onwards.
Viewing the world through the prism of Cloud Computing may seem to many to be a little arcane, but actually it is highly à propos. Because the same people who are failing to suppress the WikiLeaks documents are also in charge of U.S. cybersecurity in general. So one crucial thing we have learned - if for a moment we leave to one side the ethics or unethics of making the cables public - is that, if the rumors/allegations are true, a certain US private Bradley Manning somehow obtained access to far too *much* information for someone of his rank, in one go, before we even go into the question of its potential political and diplomatic sensitivity.
PAUL FREMANTLE has been very outspoken about this. "I place the blame directly on a lack of Governance and poor IT systems," he writes, adding:
"And the measures that have so far been announced - things like removing CD drives from classified systems - are simply the wrong approach. The real problem is why any one person - whatever level of clearance they had - should have access to all 250,000 cables."
Co-Founder and Chief Technology Officer at WSO2, Fremantle chairs the OASIS WS-RX TC that is standardizing WSRM. He knows his way around XACML, too - eXtensible Access Control Markup Language, a declarative access control policy language implemented in XML - and offers this piece of technical advice to the powers that be:
"Without going into the details of XACML and policy-based entitlement models, suffice it to say that the right approach is to base access not only on the person, but the reason they have for accessing the data. Using policy-based entitlement, it is possible to have a well-defined Governance model where a person is given access to just the right data at just the right time for just the right purpose, and that this can be managed in a process-driven, auditable and controlled manner."
But let us move from the question of the original security breach itself to the broader questions that have been snowballing since, as the authorities have sought to shut stable door after stable door, even while the rest of the Net-savvy world was fully aware that the horse would be on its way to a country like Switzerland.
- Door #1 was slammed shut thanks to Amazon Web Services.
- Door #2 was closed by EveryDNS.net.
- Door #3 was shut by Tableau Software - well, more of a skylight really.
- Door #4 was locked, and the key thrown away, by PayPal.
But the very nature of distributed computing is such that "doors" can be closed ad infinitum with very little effect on the flow of information through the system.
As Java expert and Cloud Computing pioneer ALAN WILLIAMSON puts it: "ThePirateBay is a classic example of a site that just won't die - they have even tried jailing the founders, yet it still happily serves up content every day, growing daily."
As Williamson points out:
"They keep moving their content to secure locations, and keep aligning themselves with bandwidth suppliers who believe in net neutrality."
ThePirateBay though is not cloud-related. In the case of WikiLeaks, it is. When Amazon's AWS team pulled the plug on its service to WikiLeaks - citing Terms of Service breaches - WikiLeaks had to scramble fast and suffered an outage.
"I think this highlights how important cloud neutrality is," says Williamson. "Vendor lock-in is now a major issue. How quickly can I move my enterprise to another vendor? Do I have to align myself with the political viewpoints of my cloud vendor in order to ensure a happy co-existence?"
This is merely a hoster-client relationship problem that existed long before the likes of Amazon/Google/Rackspace got into the cloud-hosting game, Williams reminds us. If your ISP didn't like what you published, they could turn you off. They were under the gun of their upstream bandwidth supplier too. So there was always accountability.
But for Williamson there is a bigger consideration:
"The Internet is open, we have to embrace that. I for one, am proud there are secure silos around the world that can host material and get it out to the people. Yes we have to take the rough with the smooth, and while we do not agree with what they publish, if we live in a free society then this is what we have to swallow if I am to be able to stand up to be heard without fear.
The Internet can keep governments honest...or at least more honest than historically allowed. We have to keep things open."
As WS02's Paul Fremantle expresses it:
"Here is a situation where the world’s biggest superpower wants to have a website erased from the face of the Web. Who will prevail? Given the distributed nature of the Internet, I know where my money is."
STOWE BOYD, self-declared social philosopher and "webthropologist," takes Williamson's "We have to keep things open" stance to another level.
"What WikiLeaks represents is civil disobedience channeled through an agenda of radical openness," declares Boyd. "The individuals involved on a personal level are deciding that laws that may or may not designate their activities as illegal are illegitimate, that our obedience to the state is coerced, and therefore can be morally opposed and countered."
Boyd goes on to explain this in more detail as follows: "Wikileaks is an example of direct action, like Greenpeace activists attempting to shut down the Knightsnorth power station, claiming that the laws against trespass and destruction of private property were outweighed by the need to counter global warming to prevent far greater property damage around the world. They were acquitted, the first time such a claim was used as a 'lawful excuse' for committing a crime (see http://en.wikipedia.org/wiki/Greenpeace)."
One form of "direct action," Boyd continues, is to expose secrets, especially when governments or large corporations are saying one thing publicly and doing another clandestinely.
"In some cases these exposés might involve criminal wrong-doing, or simply duplicitous behavior," says Boyd.
"Amazon or other hosting providers that opt to decline support for WikiLeaks or other activists may be acting because of alternate moral viewpoints, or through coercion, or fears of future repercussions when governments may decide that the hosts are culpable in some way," he adds.
For Boyd, the world needs WikiLeaks to be widened and strengthened, not abolished or suppressed:
"I think ultimately WikiLeaks should become a global non-profit like Greenpeace, specifically organized to accomplish certain goals for the sake of the world, like exposing who is funding political action when laws allow it to be concealed (as in the US), or exposing the inner workings of unregulated or barely regulated industries.
For example, it would have been great to have known prior to the Deepwater disaster how lax the regulatory agencies were, and how great the risks were. Had some whistle blowers disclosed that information to WikiLeaks, and it had been made public, we might have averted the disaster.
The world needs an omsbudsman, and the UN is not the answer, because it is used a tool of nationalist politics by the member countries. It is theater, not a check on the nations' excesses.
We need WikiLeaks - not necessarily as currently configured, and not necessarily with Julian Assange in control of it - but we need something like it to exist, as a counter to the architects of power."
In a follow-up note to Cloud Computing Journal Boyd pointed out that, since WikiLeaks is already an international non-profit, what he meant was that "it should be organized like Greenpeace, as a federation of non-profits in the various countries, supported by activists in the member countries."
"Wikileaks is not organized in that fashion today, and it should be," Boyd asserts.
If you accept - which many commentators evidently do not! - that someone can support the idea of government transparency outside of the context of the binary view of "conservative" or "liberal," then the Cablegate affair seemingly confirms the contention that the more secretive a government is, the less it serves the people. Because otherwise why are there so many ordinary law-abiding people, and not just Julian Assange's lawyer - whose hackles have been raised by the attempt to apprehend him and shutter his organization once and for all?
No fewer than 511,205 people "like" the WikiLeaks Official Facebook Page, and between 3AM and 11AM eastern time Friday morning, the #WikiLeaks hash tag was used in more than 7,304 new tweets on Twitter.
Let us not forget either that five highly reputable news groups accepted the chance to be the first to republish cables from the WikiLeaks cable-horde - The Guardian, The New York Times, Der Spiegel, Le Monde and El Pais. These are not underground radical pamphlets, these are world-class newspapers. It seems unlikely that Joe Lieberman's staffers will be telephoning them all asking them to close down the presses.
I am going to give the last word (for the moment, anyway) to the BBC. Or, rather, to BBC Technology Correspondent Rory Cellen-Jones. Without taking sides on whether or not AWS had discontinued its service to WikiLeaks because of pressure from American politicians - for the simple reason that "I've tried repeatedly over the last 24 hours to speak to the firm, with no success" - Cellan-Jones wrote a piece published this morning on the BBC's news site on the subject of what he called "the end of web innocence." Here was how he concluded the article:
"The innocent days when young web firms could pretend that they were simply agents of free expression based on neutral technology seem to be coming to an end. They have grown up into giant media empires, so they can expect every lobbyist, every politician and every pressure group to want to shape the way they do business."
On Monday Dec 6, 2010, "Rebooting The News" - a weekly podcast on news and technology with Jay Rosen and Dave Winer - will be covering the latest twists and turns in the WikiLeaks story. Winer needs no introduction to most readers of Cloud Computing Journal - or any other online journal for that matter. Rosen teaches journalism at NYU, directs the Studio 20 program there, critiques the press and tries to grok new media. Their joint take will be fascinating to hear.
What do you think? Let me know via Twitter (@jg21) or in the Feedback form below.
SYS-CON Events announced today that JFrog, maker of Artifactory, the popular Binary Repository Manager, will exhibit at SYS-CON's @DevOpsSummit Silicon Valley, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. Based in California, Israel and France, founded by longtime field-experts, JFrog, creator of Artifactory and Bintray, has provided the market with the first Binary Repository solution and a software distribution social platform.
Jul. 5, 2015 03:30 PM EDT Reads: 312
Internet of Things is moving from being a hype to a reality. Experts estimate that internet connected cars will grow to 152 million, while over 100 million internet connected wireless light bulbs and lamps will be operational by 2020. These and many other intriguing statistics highlight the importance of Internet powered devices and how market penetration is going to multiply many times over in the next few years.
Jul. 5, 2015 03:00 PM EDT Reads: 1,115
DevOps tends to focus on the relationship between Dev and Ops, putting an emphasis on the ops and application infrastructure. But that’s changing with microservices architectures. In her session at DevOps Summit, Lori MacVittie, Evangelist for F5 Networks, will focus on how microservices are changing the underlying architectures needed to scale, secure and deliver applications based on highly distributed (micro) services and why that means an expansion into “the network” for DevOps.
Jul. 5, 2015 03:00 PM EDT Reads: 1,510
17th Cloud Expo, taking place Nov 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA, will feature technical sessions from a rock star conference faculty and the leading industry players in the world. Cloud computing is now being embraced by a majority of enterprises of all sizes. Yesterday's debate about public vs. private has transformed into the reality of hybrid cloud: a recent survey shows that 74% of enterprises have a hybrid cloud strategy. Meanwhile, 94% of enterprises ar...
Jul. 5, 2015 03:00 PM EDT Reads: 399
In his session at 16th Cloud Expo, Simone Brunozzi, VP and Chief Technologist of Cloud Services at VMware, reviewed the changes that the cloud computing industry has gone through over the last five years and shared insights into what the next five will bring. He also chronicled the challenges enterprise companies are facing as they move to the public cloud. He delved into the "Hybrid Cloud" space and explained why every CIO should consider ‘hybrid cloud' as part of their future strategy to achie...
Jul. 5, 2015 02:30 PM EDT Reads: 439
SYS-CON Events announced today that Dyn, the worldwide leader in Internet Performance, will exhibit at SYS-CON's 17th International Cloud Expo®, which will take place on November 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. Dyn is a cloud-based Internet Performance company. Dyn helps companies monitor, control, and optimize online infrastructure for an exceptional end-user experience. Through a world-class network and unrivaled, objective intelligence into Internet condit...
Jul. 5, 2015 02:30 PM EDT Reads: 1,469
[video] Logging and Monitoring with @Sematext Founder @OtisG | @DevOpsSummit #DevOps #Logging #Monitoring
"We got started as search consultants. On the services side of the business we have help organizations save time and save money when they hit issues that everyone more or less hits when their data grows," noted Otis Gospodnetić, Founder of Sematext, in this SYS-CON.tv interview at @DevOpsSummit, held June 9-11, 2015, at the Javits Center in New York City.
Jul. 5, 2015 02:30 PM EDT Reads: 360
The basic integration architecture, as defined by ESBs, hasn’t changed for more than a decade. Most cloud integration providers still rely on an ESB architecture and their proprietary connectors. As a result, enterprise integration projects suffer from constraints of availability and reliability of these connectors that are not re-usable across other integration vendors. However, the rapid adoption of APIs and almost ubiquitous availability of APIs amongst most SaaS and Cloud applications are ra...
Jul. 5, 2015 02:30 PM EDT Reads: 342
[session] Dark Art of Container Monitoring By @Sysdig | @DevOpsSummit #DevOps #Docker #Containers #Microservices
Containers are revolutionizing the way we deploy and maintain our infrastructures, but monitoring and troubleshooting in a containerized environment can still be painful and impractical. Understanding even basic resource usage is difficult – let alone tracking network connections or malicious activity. In his session at DevOps Summit, Gianluca Borello, Sr. Software Engineer at Sysdig, will cover the current state of the art for container monitoring and visibility, including pros / cons and liv...
Jul. 5, 2015 02:15 PM EDT Reads: 525
[session] The Container New World By @KeGilpin | @DevOpsSummit #DevOps #Docker #Containers #Microservices
Containers are changing the security landscape for software development and deployment. As with any security solutions, security approaches that work for developers, operations personnel and security professionals is a requirement. In his session at DevOps Summit, Kevin Gilpin, CTO and Co-Founder of Conjur, will discuss various security considerations for container-based infrastructure and related DevOps workflows.
Jul. 5, 2015 02:00 PM EDT Reads: 258
"We have a tagline - "Power in the API Economy." What that means is everything that is built in applications and connected applications is done through APIs," explained Roberto Medrano, Executive Vice President at Akana, in this SYS-CON.tv interview at 16th Cloud Expo, held June 9-11, 2015, at the Javits Center in New York City.
Jul. 5, 2015 01:30 PM EDT Reads: 382
The cloud has transformed how we think about software quality. Instead of preventing failures, we must focus on automatic recovery from failure. In other words, resilience trumps traditional quality measures. Continuous delivery models further squeeze traditional notions of quality. Remember the venerable project management Iron Triangle? Among time, scope, and cost, you can only fix two or quality will suffer. Only in today's DevOps world, continuous testing, integration, and deployment upend...
Jul. 5, 2015 01:00 PM EDT Reads: 1,132
WebRTC converts the entire network into a ubiquitous communications cloud thereby connecting anytime, anywhere through any point. In his session at WebRTC Summit,, Mark Castleman, EIR at Bell Labs and Head of Future X Labs, will discuss how the transformational nature of communications is achieved through the democratizing force of WebRTC. WebRTC is doing for voice what HTML did for web content.
Jul. 5, 2015 01:00 PM EDT Reads: 340
"A lot of the enterprises that have been using our systems for many years are reaching out to the cloud - the public cloud, the private cloud and hybrid," stated Reuven Harrison, CTO and Co-Founder of Tufin, in this SYS-CON.tv interview at 16th Cloud Expo, held June 9-11, 2015, at the Javits Center in New York City.
Jul. 5, 2015 12:45 PM EDT Reads: 376
Containers have changed the mind of IT in DevOps. They enable developers to work with dev, test, stage and production environments identically. Containers provide the right abstraction for microservices and many cloud platforms have integrated them into deployment pipelines. DevOps and Containers together help companies to achieve their business goals faster and more effectively. In his session at DevOps Summit, Ruslan Synytsky, CEO and Co-founder of Jelastic, reviewed the current landscape of...
Jul. 5, 2015 12:45 PM EDT Reads: 1,211
Today air travel is a minefield of delays, hassles and customer disappointment. Airlines struggle to revitalize the experience. GE and M2Mi will demonstrate practical examples of how IoT solutions are helping airlines bring back personalization, reduce trip time and improve reliability. In their session at @ThingsExpo, Shyam Varan Nath, Principal Architect with GE, and Dr. Sarah Cooper, M2Mi’s VP Business Development and Engineering, will explore the IoT cloud-based platform technologies drivi...
Jul. 5, 2015 12:00 PM EDT Reads: 341
"Plutora provides release and testing environment capabilities to the enterprise," explained Dalibor Siroky, Director and Co-founder of Plutora, in this SYS-CON.tv interview at @DevOpsSummit, held June 9-11, 2015, at the Javits Center in New York City.
Jul. 5, 2015 11:30 AM EDT Reads: 451
The 17th International Cloud Expo has announced that its Call for Papers is open. 17th International Cloud Expo, to be held November 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA, brings together Cloud Computing, APM, APIs, Microservices, Security, Big Data, Internet of Things, DevOps and WebRTC to one location. With cloud computing driving a higher percentage of enterprise IT budgets every year, it becomes increasingly important to plant your flag in this fast-expanding bu...
Jul. 5, 2015 11:30 AM EDT Reads: 385
The last decade was about virtual machines, but the next one is about containers. Containers enable a service to run on any host at any time. Traditional tools are starting to show cracks because they were not designed for this level of application portability. Now is the time to look at new ways to deploy and manage applications at scale. In his session at @DevOpsSummit, Brian “Redbeard” Harrington, a principal architect at CoreOS, will examine how CoreOS helps teams run in production. Attende...
Jul. 5, 2015 11:15 AM EDT Reads: 359
"We provide a web application framework for building really sophisticated web applications that run on a browser without any installation need so we get used for biotech, defense, and banking applications," noted Charles Kendrick, CTO and Chief Architect at Isomorphic Software, in this SYS-CON.tv interview at @DevOpsSummit (http://DevOpsSummit.SYS-CON.com), held June 9-11, 2015, at the Javits Center in New York
Jul. 5, 2015 11:00 AM EDT Reads: 481