![]() |
US Secret Service helps you to have your Color-Laser printers serial number handy
http://www.eff.org/Privacy/printers/
Accordig to the EFF, the U.S. Secret Service admitted that the tracking information is part of a deal struck with selected color laser printer manufacturers. Now of course, there are all sorts of unfounded, anti-american political divagations in the EFF-texts we shall not look into anyway as this is a strictly technical board. But it is very interesting to examine how you can decode both date and printer serial number for Xerox DocuColor laser printers by simply looking closely at a page of whatever it printed: http://www.eff.org/Privacy/printers/docucolor http://www.eff.org/Privacy/printers/docucolor/guide.png Perhaps the printer sitting next to you is doing it right now, simply nobody found out about it yet... |
This is great!
I had always hoped such technology existed. Used appropriately – as I am sure it will be – this can help identify the source of written threats and extortion attempts, help identify spies, and perhaps even help identify the source of media leaks (be they from Apple or Microsoft). And to think that, tecnically, the system is so wonderfully simple. Amazing! With best regards, ArcticStones |
It could also be used to track and harass citizens for exercising their freedom of speech, and frankly I see no indication from either of the two parties currently running our country that they would stop short of such usage, if they could get away with it. And under the Patriot Act, they can.
All the good underground media will have to stay black and white or use inkjets for the time being, I suppose. And of course, this shows why the technology is useless for its intended (good) purpose - no one is going to print threats, extortion attempts, or media leaks on a color laser printer since this is now (has been for some time, actually) public knowledge. |
Quote:
|
I think we should stick to the technical side of this,
avoiding any reference whatsoever to politics. Seems to me this has a lot of legitimate uses. Besides, I think we should trust the powers-that-be. Isn’t this just like chemical signatures in ship oil cargoes, making it possible to trace an oil spill, for instance? In other words totally legit. No matter – technical aspects only, please. Best regards, ArcticStones |
I seem to remember that the same trick is done with colour photocopiers also
|
Quote:
|
Quote:
ShavenYak: It could also be used to track and harass citizens for exercising their freedom of speech, and frankly I see no indication from either of the two parties currently running our country that they would stop short of such usage, if they could get away with it. And under the Patriot Act, they can. Try, just try, dear forum members, to avoid steering into these kinds of generalizations that have already given offense to some who've PM'd me. There's an interesting topic, here, that has obvious political ramifications, but lots of others as well. Let's see if we can discuss it responsibly. |
Quote:
|
I think it is yet another perfect you-can't-keep-it-apart question where technical solutions are politcally motivated and cannot be discussed in a meaningful way by leaving essential aspects out.
However, just like Phil suggested, keeping it civil is key. We have already had long threads with lots of thoughtful posts on similar subjects and I would be very glad if we could examine the different aspects of this without shouting "anti-american leftist" and "neo-con" at one another. |
I took Arctic's point to be in the interest of discussion -- that you have to assume proper use of a technology in order to be able to even get into what its benefits might be. You can also acknowledge the dangers and pitfalls as well without slamming politicans, political parties, etc. Unfortunately, that calls for a certainly level of discipline and maturity that's generally been lacking in similar discussions, here, but let's see what happens.
|
I think it could be agreed that anonymous speech is an important foundation of this country's founding, since it was stated as such in many of the Founders' writings. We can probably also agree that anonymous speech is an important function in a free society, right?
This technology RIGHT NOW doesn't have a big impact on that as long as it is fully disclosed, and used only in color laser printers. However, how long until it gets into all printers? |
I would be annoyed at having my content tampered with. Even if the dots are "microscopic", yellow on blue in a pattern, as in the example might well turn up as a noticeable blemish. If they are there as a deterrent to counterfeiting, wouldn't they have to be present with a spacing such that every dollar bill-sized area of paper on the sheet would have to receive one? That could get really ugly. And if they only appear once or twice on a sheet, then what's the point?
|
biovizier has a point.
Once disclosed, the whole thing becomes pointless if you don't plaster the paper with repeating patterns close enough together to be at least once on the fake document this technique pretends to help avoid. Unless that is not the main purpose... It is also a lot more intrusive than what prevents newer color-copiers and for example Photoshop CS and higher (7 still works) to work with banknotes. Although that algo annoys people in charge of producing "cinema-money" to no end, it does not disclose any information, it just doesn't produce the expected output. And it is probably a world-wide problem as I don't see two different firmware versions being maintained depending whether or not the Secret Service considers a country "interesting". Hopefully the EFF will be able to come up with a list of manufacturers who implement such watermarking techniques and those who resisted the demand and see how the market reacts to yet another attempt to do things without the knowledge of the owner of the machine. As with everything that might make the life of the police easier, it needs to be carefully balanced against the losses in civil liberties. And I'm afraid the dot-pattern is a good candidate for elimination because it is both next to pointless for all but the most naive criminals while it tags extremely sensitive information on the vast majority of "innocent" output. And to complement Phils comment, it would be great if everybody posting remembered that there are big differences in the perception of political issues around the world and what seems completely normal to the average american might result in a european foaming at the mouth and vice-versa. I'm confident we'll be able to keep up a fair and polite debate here. |
Quote:
Quote:
My position on this would change if it transpires that inkjet printers also add dots but I think they are too crude (at present) for this to work. |
Quote:
Printers don't counterfeit, criminals do! |
The idea behind inserting the watermarks is not to trace the printer and owns it, but to be able to legally link a printer with its output.
A serious counterfeiter isn't worried about stolen goods - that's a misdemeanour in most jurisdictions. But being found with a printer who serial number has been found on fake dollar bills means a whole lot more time in the clink. That's the deterrent. |
Quote:
Best regards, ArcticStones |
Basically the same thing.
Just like any other form of registration; cars, guns, whatever, this will not affect any marginally smart criminals. |
Quote:
It's similar to computer security. You can't really stop a dedicated professional from breaking into your computer. But for most people, stopping the hordes of script kiddies is sufficient. |
This seems more like the kind of thing that's only going to be done by pros anyway, since it requires more than just a good printer. A close approximation of the paper is one requirement for example that makes it unlikely that the 99% who are less than marginally smart would be a problem anyway.
It seems likely that this will be more of a hinderance to legitimate users than real criminals. |
Actually, there have been quite a few instances of ridiculously bad counterfeits being passed off. One involved three dollar bills (wish I had the link here). I bet if I printed 20s on one of our $25k color laser printers, I could pass them off at least 1/4 of the time.
|
Yes, there are just as many less than marginally smart cashiers as there are criminals of the same intelligence level. Even so, I doubt that any of those instances involved large amounts of phony cash actually making it into circulation. This wouldn't be aimed at them anyway, since they're likely to be caught before the printer information can be used to track them down. ;)
|
I agree, and believe there are ulterior motives for the serial numbers, of course.
Arctic's post about sticking to a talk of the technology, not the politics, left me wondering. What technology? I mean, it's just the replacement of a single pixel in a sequence, not a lot of high-tech there. The other application could be as watermarking for copyright, but that doesn't seem so useful. |
I suppose there's some technology in the software that incorporates the grid into an image so that while it can be seen, it isn't obvious to the point that it interferes with the print out. That could be a bit tricky. As an example, bright yellow dots on a dark image would jump out. Since the grid needs to be printed repeatedly, the software would need to recalculate for each grid. I admit it isn't very difficult or sophisticated, but hey, if you can patent the iPod's hierarchical menus, why not this? :D
I think you're right though, it does seem that the ulterior motives are the ones driving this. |
Re: Technologies with "multiple applications"
Quote:
Allow me, for a moment and by example, to examine a far more innocuous technology… In Norway many road projects are financed by road tolls (as I’m sure they are many places). To catch the "cheaters", there is video surveillance installed. The recent version here in Bergen is based on pre-paid electronic chips read by sensors as you pass, and optical license plate readers (you get a giro in the mail if you don’t have a chip). This is an expensive set-up! Many have pointed out that there are far cheaper ways to collect the money – the most effective being a fee for all drivers in the area or a direct tax. A "side effect" is that this system renders most major towns into an electronic fortress, effectively keeping tabs on who enters and exits those town. (According to some – that is the prime motive behind its implementation. But of course those people are just paranoid, right?) In a number of recent court cases, the prosecution has tried to gain access to video footage that can help identify drivers and passengers. With varying degrees of success. (The Norwegian Data Inspectorate is a force to be reckoned with, often preventing "multi-use" of databases, electronic tracks, etc.) Now, what is what? What are motives and what are side effects? I would argue that it’s rarely possible to know. (Law-and-order afficionados and conspiracy buffs can argue until they’re blue in the face without getting any closer to agreement or bridging differences in perception.) But it is obvious that a wide range of technologies that have been implemented in recent years, or will be implemented in the near future, have "multiple applications". I certainly believe that revealing and analysing those "multiple applications" – preferably before implementation – is an important public service. The technological nuts and bolts, the possibilities, the risks and benefit are all intertwined. Provided we can discuss it as sensibly as here, those are valuable topics in this Forum. With best regards, ArcticStones |
Quote:
Not true. There is no central register of these printers. Ownership of these printers does not require that a government authority be notified. @Everybody Counterfeiters with ownership of a printing press must be linked to their product for a legal case to be successful. Normally, this is done by demonstrating that the press has a set of defects which are also on intercepted examples of funny money. The top range printers produced by Xerox, and other manufacturers, not only produce consistent accurate output over time, but are also practically clones of each other. i.e the output is capable of rendering paper money accurately - and printouts produced by different printers can't be distinguished. So the money couldn't be detected, and even if it could, it couldn't be proven to be from a given printer. Hence the watermarks ... Their purpose is to allow detection and to prove legally that a given printer was used to produce funny money. I would become concerned for civil liberties if I was required to register the printer. I realise that ownership data might be held by the manufacturer of the printer, which could be handed over to a government authority. But my perception of this issue is coloured by the different legal position of such data here in the UK (and, I suspect, from AS's post, Norway.) [EDIT - UK law is also governed by 'EC Data Protection Directive' which means all complaint EU countries will have similar legislation.] Such data in the UK is legally still my data, and would require a legal procedure, subject to my authority, to obtain. Penalties apply - even to the police. I can imagine that citizens of countries without any data protection laws (where ownership of data lies with its keeper) would have more concerns. Indeed, I am concerned enough to refuse to do business with a certain well-known online bookstore precisely because data obtained from me is stored outside UK jurisdiction. |
Quote:
Rights are rarely taken away all at once. They are whittled away until a critical point is reached, when too much power has been ceded. Then the rest are lost as well. Technologies like this one aren't very harmful by themselves, but taken together with other changes and technologies, one has to wonder where we are headed. |
Quote:
|
Quote:
|
Perceptions, threats and security measures
Quote:
I think it is worthwhile for each of us to ask where on that continuum we think our nation/society finds itself. And are we willing to admit that we just might be very wrong? Perhaps with today’s technologies and fascinatingly intertwined human networks, the "controls"/influences available to potential behind-the-scenes power players need neither be particularly overt – nor especially bothersome to the average citizen? I seem to recall a Pentagon report that in 2003 (I believe) the total numer of deaths in the world due to terrorism were at a 25 year low! Compared to deaths due to drunk driving, street violence, domestic violence, alcohol abuse, cigarette smoking or even the common flu – the total number of casualties due to terrorism is negligible. (But painful and real enough!) The media focus and the political focus act as a magnifying glass, grossly enlarging those threats. May I be permitted to say that some security measures will entail the destruction of the free society that I, for one, love – far more effectively than ongoing or threatened terrorist acts. With best regards, ArcticStones |
Quote:
|
Quote:
And the laws about privacy and procedure are unenforced here; who are you going to call, the police? There are plenty of documented cases of industry handing over private data to police without due process. Delta airlines giving up all of its passenger lists is just one example. |
Quote:
I think the issue is complex – and, as Phil points out, a balance must be sought. I see both sides of this. |
Quote:
Sometimes taking preventive measures to avert possible (not hypothetical) worst-case scenarios is in keeping with prudence. Ask the residents of New Orleans, who were only prepared to deal with a Cat. 3 hurricane. A Cat. 4 or 5 every 500 years is a low-probability occurrence, but when it finally does come and you're not prepared . . . :( Anyway . . . yeah, complicated, for sure, especially where to draw the lines when you're dealing with possible rather than hypothetical threats. |
Preparing for a worst case is always a compromise. It takes money and effort. If nothing happens, that money and effort is wasted. If it happens, it was worth it. Some would cry out that any human life is worth any amount of money, but realistically, that's simply not true or workable.
Money is not infinite. If NO were to be prepared for what happened, what would the cost have been? What would have others had to do without in order to free up that money? Housing, food, etc? |
Phil, I think prudence has helped, as I pointed out in my reply to cwtnospam. I am in no way arguing against measures and prudence!
Best regards, ArcticStones |
Quote:
What rights do you think you've lost, btw? I haven't lost any . . . none that I'm aware of, or experience to any significant degree. Not to say that vigilance re. government policies isn't called for, of course. |
Quote:
I'm not sure they want to gamble again, but the story's not yet over. ----- Edit: It takes money and effort. If nothing happens, that money and effort is wasted. Unless it actually helps entice people and businesses to settle in an area. That kind of influence is hard to measure monetarily, however. |
Quote:
This is essentially my point. As a US citizen, you have few if any rights over your personal data. There is no equivalent in US law to the UK's Data Protection Act. I feel that the lack of what I consider a basic right can't help but make Americans adopt a more negative attitude of the use of technology such as the little dots than myself because the possibility of its misuse is higher than in the UK. The possibility of its misuse is not zero here, just less. In the case of the printer, I am well within my rights to demand the printer manufacturer delete all records relating to myself, nor to pass on information to 3rd parties without my consent. Access (within limits) can be denied to the police. Civil and criminal remedies are available in the event of the printer manufacturer breaching these requirements. For me, the ramifications of having watermarked documents are limited to their stated purpose. |
Quote:
http://www.schneier.com/crypto-gram-0509.html where he discusses reacting to "movie-plot threats" and failures regarding Katrina. |
Quote:
|
Quote:
Some years ago, I wrote a proposal for a middle-of-the-road Norwegian political party. My idea was to put the military in charge of a broader spectrum of national threats, including non-military. Examples: oil spills, natural disasters, animal/human epidemics, etc. My point was that the military had the operational expertise and the ability to mobilise effectively. In case of an oil spill, for instance, the Norwegian Pollution Control Authority would have the expertise. In some regards Norway is a special case, since military duty is mandatory for all men, except conscientious objectors and those with a medical excuse. Besides, we’re regularly required to partake in re-training sessions. Relative to the size of our population, Norway can mobilise surprisingly large armed forces. More importantly, in terms of natural disasters and other threats, the highly organised nature of our society enables us to deal with various scenarios more effectively than we otherwise would. (I’m not comparing countries, mind you.) Many different types of threats are dealt with in different ways. Bruce Schneier surely has an important point in regards to NOT limiting preparedness and spending to whatever "movie-plot" threat happens to be popular this month. Another problem, however, is this: Western society is simply not structured to offer effective security against a no-holds-barred enemy without a territorial base. And I’m not sure such restructuring is desireable. So all measures necessitate a complex balance – cost/effectiveness, liberties/security, etc etc. The most effective measures that have been taken so fare are probably the ones that we don’t read about. But we also have to find ways to erode support for the terrorist position. Without going into detail (which would be inappropriate here), I’m not convinced that the decisions being made are achieving that. Quite the contrary. With best regards, ArcticStones |
Quote:
- http://www.voanews.com/english/2005-10-07-voa57.cfm (10 threats stopped mentioned, and verified by media and other sources.) Quote:
|
Quote:
|
Quote:
Technology used for political gains? Voting machines? But surely you don’t suggest... By the way, I don’t know what technology or intelligence the Spaniards used, but everyone involved there is either dead or in prison. And their ex head of state lost because he tried to blame the ETA (Basque separatists), even though that was highly inconsistent with preliminary intelligence findings. ;) |
Quote:
|
Quote:
Refocusing . . . The issue raised on the thread wasn't about using technology to influence public opinion, nor how technology can serve to distort information for politician's gain. Good heavens, every political advertisement does that, so you'd have to say that TV, radio, email, web sites, etc. are suspect. People need to read various sources to inform themselves on this matter. I understood the issue to pertain to technology and privacy issues, so how about we get back to that. Thanks. |
Yes Phil, I don't like or trust Bush, but I can't imagine a polititician, party, or government agency that I'd like having the ability to track down people who put up their own political posters.
I can only think of two reasons for not wanting your identity known: 1. You're doing something illegal and don't want to get caught. 2. You're doing something that is political in nature, and that could cost you in some way. By political I don't necessarily mean that you're running for office or even supporting some one who is. My point is, when you talk about privacy rights, you are talking about politics. |
3. You're doing something which has been made illegal but is or should be your right.
I'm from Cuba. I don't need to be reminded how important anonymous political speech is. As far as what rights the Patriot Act has abridged... Did you know it's illegal to discuss various parts of the law itself? So illegal that in a court challenge against it, the agrieved party could not actually file the text of the law it was fighting? A very important foundation of our system of law is that you can't be accused of violating a law that is unclear, and that trials are public. The PA has created secret laws and secret courts. That's contrary to our constitution. This technology makes it risky for someone to expose those illegal laws. |
The nature of the threat posed by serializing and dating printouts has been made a lot more obvious. Color Laser Printers might be just a test case. HP already tried (and stopped after consumer protest) to implement printer drivers phoning home and telling hp about ink consumption. That was presumably only for marketing (and getting reliable data about 3rd party refills), but still an intolerable intrusion.
Firmware-Watermarks and phone-home drivers (why not include document titles printed or even complete text dumps) could be the next step. The political dimension here is clearly about not tolerating the beginning of what looks more like a first step to control anonymous free speech. Remember what happened to the DVD-zoning scheme and how zone-free firmwares for about any drive you care to name can be found easily. Finding "anon"-firmware for snitching printers will probably become the next Big Thing should that trend really persist. Illegal or not doesn't matter much here, because whoever needs that kind of anon-printing has strong reasons to do so. Having a larger public debate about the balance between breached privacy versus crime-prevention and whether or not that is good enough to justify snitching printers has been pretty interesting so far. I'm grateful for the re-focusing last posts and all those who try to keep the discussion on-track. The diversity of political opinions and cultural differences is what can make a rich debate if everybody is careful to avoid provocative blanket statements like most of the participants have so far. |
Quote:
. |
I couldn't agree more.
|
Quote:
At least in free societies, the media, congressional oversight groups, and disclosure laws can help to preserve a certain degree of accountability. So can one's political opponents. Lots of good people don't want to run for public office any more because any dirt from your past will be dragged up for all the world to see by your opponent and journalists looking for "a story." In a way, that's a kind of corrective, too. As long as one has political opponents, you can be sure they will not let a slip pass unnoticed. But, OK, some of you are cynical about politicians, and with good reason, no doubt. The misuse of a technology by political leaders is a possibility, for sure, but that shouldn't put an end to the discussion, nor to the possibility that the positive uses can outweigh the dangers and can even be safeguarded somehow. |
Quote:
The terrible thing is that in the past, this state of affairs polluted the spirit of a town, region, maybe a continent, but today, there's enormous power in the hands of very few, and is so enormous, so big, that affect the lives of all humans and living things on this planet and beyond. Never before our planet as a whole was subject to this kind of manipulation. Quote:
Quote:
. |
In this case, I don't see how the positive can outweigh the negative. Catching a few counterfeiters isn't enough, but maybe I've missed something. Is there another positive?
|
| All times are GMT -5. The time now is 02:40 AM. |
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.
Site design © IDG Consumer & SMB; individuals retain copyright of their postings
but consent to the possible use of their material in other areas of IDG Consumer & SMB.