Biometrics are inherently fallible

I used to work in biometrics. In the first few minutes of a biometrics class in about 2004 the instructor quoted numerous people, going back about 30 years, each saying biometrics would be reliable “in ten years”. When I actually looked at the data for various biometric systems I was rather shocked by the failure rates. And those were in cases where there was no deliberate attempt to defeat the system. I attended a conference on biometrics and I invented a new biometric system (no, I can’t talk about it—a certain government agency says that information is restricted). It became quite clear to me that every biometric system in existence could be defeated if you knew it was being used. And furthermore it was unlikely that any system could ever be undefeatable.

Hence, I am not surprised experts are coming to the same conclusion I did several years ago:

Biometric systems — designed to automatically recognize individuals based on biological and behavioral traits such as fingerprints, palm prints, or voice or face recognition — are “inherently fallible,” says a new report by the National Research Council, and no single trait has been identified that is stable and distinctive across all groups.

Major fail of the Jews in the Attic Test

Let’s just say, “There are ways to defeat this” but I’m not happy about having to do it. It would be MUCH better to defeat it at the legislative level rather than at the technological level:

Federal law enforcement and national security officials are preparing to seek sweeping new regulations for the Internet, arguing that their ability to wiretap criminal and terrorism suspects is “going dark” as people increasingly communicate online instead of by telephone.

Essentially, officials want Congress to require all services that enable communications — including encrypted e-mail transmitters like BlackBerry, social networking Web sites like Facebook and software that allows direct “peer to peer” messaging like Skype — to be technically capable of complying if served with a wiretap order. The mandate would include being able to intercept and unscramble encrypted messages.

James X. Dempsey, vice president of the Center for Democracy and Technology, an Internet policy group, said the proposal had “huge implications” and challenged “fundamental elements of the Internet revolution” — including its decentralized design.

“They are really asking for the authority to redesign services that take advantage of the unique, and now pervasive, architecture of the Internet,” he said. “They basically want to turn back the clock and make Internet services function the way that the telephone system used to function.”

But law enforcement officials contend that imposing such a mandate is reasonable and necessary to prevent the erosion of their investigative powers.

It is “Necessary to prevent the erosion of their investigative powers”?

What about the erosion of private communication? It used to be one could have a conversation in their home, while walking across the field or down the road and the conversation was technologically guaranteed to be just between those present. They are now demanding a technological guarantee to eavesdrop on any private conversation, anytime, anywhere.

You can have my crypto keys when you reanimate your cold dead hands.

Understand your Terms

I see this usage pretty often;

   “Maintains less than 1 1/2 minute of angle accuracy at 100 yards/meters – Guaranteed !”

What I want to know is; how does the rifle know the distances to your targets when there are no electronics involved?


If the inherent angular dispersion is 1.5 MOA at 100 yards, the underlying assumption would be that the inherent angular dispersion will somehow be different at some other distance, else they wouldn’t specify a distance.  Sure; the wind comes more into play farther out, but that’s a separate issue, no?  Or am I missing something?  Maybe for the sake of clarity they should say “…as tested at 100 yards.”  I at least would have more respect for them then, but maybe I don’t know squat.

More fun with statistics

From xkcd, of course. The title is “Conditional Risk” which is a morphing of “Conditional Probability” into the current situation.

I love watching lightening storms. But the most adventuresome I get while doing that is setting on my front step.

Fun with statistics

I can’t say why I needed to know but lets just say I have been a little distracted recently as I have been working on a problem. It turns out I could map my problem into the German tank problem.

I had actually kind of pulled an equation out of the air and proclaimed (to myself), “this looks and feels right”. But I needed something more than my gut telling me that. It turns out for a uniform distribution (which, for the most part, my problem is) the best estimate of the true population size based on a limited sample of the population numbers is:

N = m + m/k – 1

Where ‘N’ is the population estimate, ‘m’ is the largest serial number of the samples you have and ‘k’ is the number of samples you have.

This could be used, presuming the serial numbers are sequential, to estimate the number of iPhones or Androids sold. This is far, far, from my application but still a fun application of statistics.

In my application I could substitute in an expression for ‘m’ which made my problem identical to the German tank problem. After rearranging the resulting equation I came up with the exact equation I had, essentially, pulled out of the air!

I’m still marveling at the implications of that result. In a few days I have a meeting with people who may or may not be thrilled to know that much of the work they have done for the past couple of years is bogus and that I have the solution to make it all better.

Quote of the day—Steve Ballmer

I kiss the ground you walk on.


Steve Ballmer
September 10, 2010
Windows Phone 7 Ship Party
IMG_2845Web2010IMG_2848Web2010IMG_2852Web2010
[Click the pictures to see a higher resolution version.


He also said his trademark, “I love this company.” at the top of his lungs:


IMG_2833Web2010


He also talked about how important Window Phone 7 is to the company and how much he appreciated all the hard work and how much he really loves his Windows Phone 7 phone.


It is a really nice phone. I took three of them to the Boomershoot site this weekend and did some tests. With one of them I was able to pick up a Wi-Fi signal from an ordinary Linksys router from 1090 meters away. The other two were picking up signal from over 600 meters away. Try that with your iPhone.—Joe]

Al Gore, you’ve doomed us all!

Over the last few months on my twice monthly visits to Idaho there has been a bunch of wind turbines being erected near the Rye Grass rest area on I-90. When Barb came west on Tuesday of this week to visit me in my bunker she told me she stopped and took pictures of the turbines. “They look like something out of a science fiction movie”, she said.

Wow! It just so happens that on my return trip last Sunday I also took some pictures:

IMG_1887Web2010

IMG_1947Web2010

IMG_1954Web2010

Of course all this reminded me of something else:

Quote of the day–Terry Myerson

Today is the day that the Windows Phone team has been driving towards, and we’re very excited to say that we’ve reached the biggest milestone for our internal team – the release to manufacturing (RTM) of Windows Phone 7!  While the final integration of Windows Phone 7 with our partners’ hardware, software, and networks is underway, the work of our internal engineering team is largely complete. 

Windows Phone 7 is the most thoroughly tested mobile platform Microsoft has ever released.  We had nearly ten thousand devices running automated tests daily, over a half million hours of active self-hosting use, over three and a half million hours of stress test passes, and eight and a half million hours of fully automated test passes.  We’ve had thousands of independent software vendors and early adopters testing our software and giving us great feedback. We are ready.

Terry Myerson
September 1, 2010
Windows Phone 7 – Released To Manufacturing
[If you climb high enough on my work food chain you will find Myerson.

I can’t vouch for the exact numbers but they sound about right. We have some amazing automation. And if you think the half-million hours of active self-hosting is implausible think again. I first used a Windows Phone 7 about a year ago and started carrying one as my primary phone early this year. When I went on vacation to Missouri last May I took three (the rest were loaned out to co-workers for testing) of them with me and used them for navigation (I’m on the “Location Team”), traffic, lots of email, web browsing, pictures, video, and of course phone calls. Everyone I know on the team has a minimum of two phones and some have five. That adds up to a lot of hours. I actually suspect the half million hours is an understatement.

I am more proud of this product than anything I have worked on since Direct X 1.0. In terms of my primary reason for wanting to work for Microsoft  (to change the world) this is, by far, my largest contribution.

Technically it is great. It’s not perfect but it is much more than “good enough” to compete. Market acceptance is a question in our minds though.

Most of the people I associate with are engineers. We understand the technology but not people who are different from us. Will this phone be compelling for non-engineers? I’m sure I can configure one such that my wife (who always insists she just wants “a simple phone, nothing more”) can and would use it as a phone, camera, and for occasional navigation but I’m not so sure she would be interested in spending the money on one if I didn’t “twist her arm”. In many ways it is simpler to use than her current phone. Son James (also a software developer working at Microsoft) will get one. I’m not so sure about his girlfriend. I think my daughters and their spouses will give very serious consideration to one. But how does this translate into the market at large? I think it will be at least “good”. With a little bit of luck and a lot of awesome Microsoft marketing (I’ve seen some “concept ads” that look really good) it will do great.

We have some “ship parties” (not really my thing but it is nice to see others have a good time) in the next few days then we have to deliver on the next version. Yesterday I took care of four bugs on our next deliverable so don’t think we are sitting around to see how well this version does before deciding what to do next.—Joe]

All the easier to strip search you

So. You thought you could avoid those intrusive airport technological strip searches by not flying on a commercial plane? You thought they were just were doing that to “other people”? You thought it was okay to look the other way as your Fourth Amendment rights were violated when you flew on an airplane. It was all in the name of “safety”, right?

Via Andy Greenberg (via an email from Chet), coming to your neighborhood soon:

Gee, I wonder why they didn’t show any people in that video? Oh! Andy has some pictures of that too:

That is through vehicles. I would expect the walls of your home will be just as revealing. Imagine what you look like when you are just walking down the sidewalk.

Expect lots of “security sweeps” for the womens basketball and volleyball tournaments. We can’t be too careful with our precious women at risk.

The phrase “concealed means concealed” now means nothing. And since we let them get away with it at airports what’s so special about a public street now? Some terrorist could kill just as many people at the convention center as they could on an airplane. So why shouldn’t the convention center have the same security theater as the our airplanes?

I’ve pointed this out before but what Pastor Martin Niemöller said about the Nazi’s and what Sebastian observed, “What goes around comes around.” is very true.

You play a very risky game when you make exceptions to fundamental principles.

They say ‘Big Brother’–I say ‘Party Time’

Other bloggers say:

I say it’s Party Time.

There are many, many other options. Here is just a very small sample:

If I could get some custom made they would say “TSA = A Security Theater”.

Big Brother wants to spends millions on technology that can be defeated by $20 worth of plastic you can by online.

I have had mine for several years. Do you have yours?

Real Men…

…and women should have available, and know how to use, either a micrometer or a good caliper that reads in thousandths of an inch and/or hundredths of a millimeter.  I don’t see how a person could get through life without one.  They’re cheap and they last a long time.  A set of hole gauges and snap gauges is good also, but the calipers are essential.


That’s in my book.


Jeff Cooper wrote about some other things;



Before the young man leaves home, there are certain things he should know and certain skills he should acquire, apart from any state-sponsored activity. Certainly the youngster should be taught to swim, strongly and safely, at distance. And young people of either sex should be taught to drive a motor vehicle, and if at all possible, how to fly a light airplane. I believe a youngster should be taught the rudiments of hand-to-hand combat, unarmed, together with basic survival skills. The list is long, but it is a parent’s duty to make sure that the child does not go forth into the world helpless in the face of its perils. Shooting, of course, is our business, and shooting should not be left up to the state.


Or something like that.  I recall he had learning to handle a motorcycle in there too.


My son took it upon himself to row a boat across Hood Canal a few weeks ago without telling anyone.  We saw him heading over, until he disappeared from sight.


I was miffed.  That is, until I remembered some of the crazy things I did at that age (16) like piloting a canoe (two canoes, four people) up one side of Priest Lake in Idaho, by moonlight, and then navigating up the channel to Upper Priest Lake by starlight (after moondown) then landing and setting up camp on a low cliff.  We figured flashlights were for sissies, back then.  Nowadays I carry one.  Must be getting soft.


But I digress.  Being able to measure the difference between .678″ and .710″ can be pretty important, and it’s not complicated.  This sort of thing comes up often while talking to customers.  Most of them have the tools and the skill, but a disappointing minority do not.

I sucked all the bits out of this town

I’m in a small town in central Missouri. I’ve been accessing the Internet via Internet Sharing with my cell phone and that worked well for a while. Then the data transfer rate gradually went to zero. Rebooting the phone and computer didn’t help. I started “borrowing” wireless bandwidth from someone with a SSID of “Linksys” (it is my understanding they are the largest free Internet provider in the country). That went away about two hours ago and I’m back on the cell phone which gives me a few bits every once in a while before drying up.


It’s like I am pumping water from a well and I pulled the water table down below all the intake pipes in the town. I’m mostly sucking air now with just an occasional few spurts of water.


Another indication of the low bit table is that my new phone with the weak cell signal (known issue, we are working on it) runs its battery dead, even while plugged into USB power, trying to sync my email from work.


Until I leave town blogging and email responses will be marginal at best.

Encrypting mobile communication

This is very interesting to me:

More than a million BlackBerry users may have key services in Saudi Arabia and
the UAE cut off after authorities stepped up demands on smartphone maker
Research In Motion for access to encrypted messages sent over the device.

BlackBerry’s Messenger application has spread rapidly in the Gulf Arab region
but because the data is encrypted and sent to offshore servers, it cannot be
tracked locally.

“Certain BlackBerry services allow users to act without any legal
accountability, causing judicial, social and national security concerns,” the
United Arab Emirates’ Telecommunications Regulatory Authority (TRA) said in a
statement.

India raised similar security concerns last week, and Bahrain in April warned
against using BlackBerry Messenger to distribute local news. As far back as
2007, France cautioned officials about using the services.

Indian security officials were concerned that BlackBerry’s encrypted data
could be used to coordinate acts against the state. They have clamped down on
mobile phone operators in the wake of 2008 attacks that killed 166 people in
Mumbai.

Sure, secure communications can “be used to coordinate acts against the state”. But secure communications can be used to secure the Jews in your attic too.

There is a lot of secure communications that goes on with Windows Phone 7 too. I wonder if any of it will run afoul of repressive government laws.

I may have to write an app for defeating such laws if things progress to far in that direction. It consumes more bandwidth but it’s possible to create communication channels that are essentially invisible while in plain sight and encrypt them as well. I’ve done this before with another app but sort of lost interest when we started winning the gun rights war in this country. I might have to fire up that project again.

TSA blinders

I’ve been wondering when something like this would be publicized and available for sale.

If I had the time and didn’t mind missing my flight I would make myself a set of clothes that were lined with, or made of, aluminized Mylar. I pretty sure it would be hot and uncomfortable but it would also totally block the latest TSA body scanners.

If I had enough money that I didn’t have to work anymore I think I could entertain myself for years making (bigger) fools of the TSA on a weekly basis. Of course some of my jollies might bring commercial aviation to halt for a day or two and then I would feel bad for the hardship I had imposed on all the innocent people trying to travel.

Our universe is a black hole

I’ve been meaning to explain my black hole hypothesis for some time now but there is always something more important to do. But David and Say Uncle posted about it so it’s time I elaborated.

I tried to leave a comment on David’s post last night but the blog software rejected it as spam. David posted my comment in a separate post a few minutes ago. Here is the comment:

Actually my hypothesis was formed almost exactly 1.5 years ago.
See here and here.
I did a little bit of math on the topic but to say my cosmological math is weak would be a gross understatement. What results I did come up with seemed plausible though. That is–the “background radiation left over from the big bang” appears to have a similar temperature to that of the event horizon of a black hole composed of all the matter of our known universe.
I recently listened to the book Parallel Worlds and was surprised and pleased to hear that others had explored the same hypothesis–at least part of it anyway. No mention was made of the direction the black hole being on the time axis. This is a critical component and the easiest thing to prove as being consistent with the known facts.

I will now elaborate further.

My first “Ah hah!” moment was back in February of 2009 and I posted a couple of Tweets about it:

I’m listening to The Black Hole War. This inspired me to explore the hypothesis that our universe is a black hole.
We are rushing toward the singularity at the speed on light on the time axis.

Since then I have made casual references to my hypothesis on my blog (here, and here) and I think a comment or two on other people’s blogs.

Our experience with time dilation and length contraction is the best support for this hypothesis. Starting with the equation for time dilation we can rearrange it as follows (brother Doug pointed this out to me a couple decades ago, I have not read or heard it expressed this way before or since so a great deal of credit, or blame, for inspiring this hypothesis goes to Doug):

DeltaT’ = DeltaT/(SQRT(1 – v2/c2))  Where DeltaT’ is the elapsed time for the moving, at velocity ‘v’, object and DeltaT is the elapsed time for the stationary observer. ‘c’ is the speed of light.
SQRT(1 – v2/c2) = DeltaT/DeltaT’
1 – v2/c2 = (DeltaT/DeltaT’)2
1 = (DeltaT/DeltaT’)2 + v2/c2
c2 = c2 (DeltaT/DeltaT’)2 + v2

c2 (DeltaT/DeltaT’)2 is the square of a velocity. Hence we could substitute a symbol for this expression. Let’s let ‘t’ = c (DeltaT/DeltaT’).
c2 = t2 + v2

What this says is that as a moving objects velocity, ‘v’, increases the velocity ‘t’ must decrease such that the sum of t2 + v2 remains constant. This gives us time dilation. But what is the less obvious observation is that as ‘v’ goes to zero our velocity in the ‘t’ direction becomes the speed of light. Hence stationary objects in our frame of reference are actually traveling in the ‘t’ direction at the speed of light.

Inside the event horizon of a black hole all objects travel at the speed of light. If they move off of the straight line toward the center of the black hole the sum of their velocity components still must be precisely equal to the speed of light. Hence if they take on a velocity vector perpendicular to the straight line to the singularity they move slower in the direction of the singularity. This is exactly our experience with time. Our time “velocity” decreases when we increase our velocity in any other direction. Hence, I hypothesize that, we are inside the event horizon of a black hole moving toward the singularity which happens to be in the direction of the axis we call ‘time’.

Further support for this hypothesis is length contraction. We know that as the velocity of a moving object increases the observable length (it doesn’t actually contract, only observations of it’s length decrease) of an object decreases. At the speed of light the length of an object is zero (I suspect it actually becomes the Planck length, but this is just a guess on my part). Since we (according to my hypothesis) are traveling at the speed of light on the time axis we can only observe a single instant of time.

Of course the first question that comes to mind is, “When do we get ripped apart by tidal forces and our subatomic components get sucked into the singularity?”

I don’t know the answer to that, but it is something to think about isn’t it?

Have a nice day.

Another step closer to GATTACA

Entire human genome sequencing for $100.

My estimate is that the potential for GATTACA is only another decade away.

Gunnies be Patient

I’ve seen it before and let it go, but today I ran into several variations of, “Once you get the sights adjusted, this gun is very accurate” in different places on gun forums and product reviews.


Serious shooters should know the problem with that assertion, but not all shooters know it.  These were shooters making the assertion after all.


Accuracy and sight adjustment (or zero) are not the same thing.


(Joe uses the term “sight angle” or “indicated sight angle” which makes more sense when you think about, which of course he has)


Accuracy is the ability of the firearm system (the gun itself, the ammo and the sighting system) to place shots consistently.  The sights could be “off” considerably (bullets impacting far from the point of aim) and that gun is just as accurate as if it were putting your bullets exactly at the point of aim.


The difference is in sight adjustment, but that in itself has nothing to do with accuracy.  Accuracy = consistency.


It has been said that “Sometimes the first duty of intelligent men is the restatement of the obvious.”  — George Orwell  (Thank You, Walter Williams, for pointing that out)


You intelligent men have your assignment, then.  Carry on.

My first Windows Phone Seven video

I tried the video camera on my Windows Phone Seven (with a Samsung “Taylor”) with my daughters at lunch today. I’m impressed.





Full disclosure–I’m on the Microsoft Windows Phone Seven team but I had nothing to do with the video or camera portions of the phone.

Video glasses update II

Background post is here.

I picked up my glasses today. I don’t know how long they had been at the P.O. box waiting for me. I don’t check my snail mail very often.

It appears they sent me a brand new pair rather than repairing the old ones.

[shrug]

That works for me.

I’ll be more careful with them from now on.

You can make money without doing evil

Google is famously known for saying you can make money without doing evil. Aside from my belief this statement betrays an unspoken belief that most earning of money is inherently evil, good intentions are not enough.

What were they were thinking?

The authority revealed that as well as collecting SSID information (the
network’s name) and MAC addresses (the number given to Wi-Fi devices such as a
router), Google had also been collecting payload data such as emails or web page
content being viewed.

“The independent audit of the Google system shows that the system used for
the Wi-Fi collection intentionally separated out unencrypted content (payload
data) of communications and systematically wrote this data to hard drives,” said
Simon Davis from Privacy International.

Google said the error came after a piece of experimental code written in 2006
was included in the software used by its Street View cars by mistake.

However, Davis says Google’s explanation “doesn’t add up”.

“This is complex code and it must have been given a budget and been overseen.
Google has asserted that all its projects are rigorously checked,” said
Davies.

“It goes to the heart of a systematic failure of management and of duty of
care.”

I’m not going to say it could never happen at Microsoft but if my experience is any indication it would be a very, very safe bet.

I wrote the original code for an internal application used on Windows Mobile 6.x that has collected millions of SSIDs and BSSIDs (also known as MAC addresses). My officemate wrote the code that gathers the same information on Windows Phone 7. I know what we had to go through in terms of review by peers, lawyers, and management. Privacy was of paramount importance. There was never even a suggestion that connection traffic should be considered “fair game”. The information of the type Google is in trouble for storing on hard drives never even gets into RAM let alone is processed enough to hit persistent storage.

I’m not in a position to say that Google had evil intent but I have trouble imagining what they thought they could do with code that stored information gathered in that way that would not be considered “evil” or at least extremely unethical.