![]()
By Jon Newton
The RIAA attack on p2p file sharers is serious, but it's far from being the worse danger confronting the online community.
That's the opinion of Samuel Carpentier from Quebec in Canada.
Far more threatening is the Trusted [
that's a joke] Computing Platform Alliance (TCPA) which will, "change the face of the internet," says Carpentier, a 24-year-old computer programming student.
"Your biggest concern should be Microsoft with their Palladium, Intel processors and the 'Fritz' chip.
"Don’t get me wrong - I even own a hub on the Direct Connect Network. But times change and the RIAA are a drop in the bucket. They are nothing compared to this new so-called 'technology'."
I think Samuel has it right.
I wrote the story below last year. But nothing has changed.
>>>>>>>>>>>>>>>>>>>>>>>>>>>>
This June [2002] Microsoft started talking publicly about "Palladium," a system that combines software and hardware controls for "trusted" computing and which it hopes to have in operation by 2004.
In Microsoft terms, 'trusted' means total system control for Byll and the Boyz and in fact, Palladium looks a lot like a variation on the
Broadcast Flag scheme through which the movie, electronics and record companies want to use purpose-built technology to make sure consumers [you] can't see, hear or use anything not owned, or approved, by them.
If Broadcast Flag ever gets beyond the Hollywood Wet Dream stage, and you have the temerity to go over the bounds set by the entertainment industry, your computer will both go on strike AND turn you, and your transgression, in.
Microsoft and, of course, the developers who love Microsoft, say Palladium is GOOD and will allow them to tenderly look after you by keeping those bad old hackers out and defeating those evil on- and offline pirates.
Because, cut to the bone, PPC (Palladium Personal Computer) police technologies wouldn't allow PPCs to run unauthorised applications or do unauthorised things.
The Big Question is: Why should you trust "trusted computing" technologies, or the companies which develop and/or use them?
To say these same PPCs could easily be configured to allow public (and private, for that matter) agencies and vendors access to private and personal data on your computer, and/or to report back to them every time you do something that isn't on the 'officially approved' list, isn't paranoid.
It's the way things could, and almost certainly will, be.
Bill Gates was talking to business school students at the University of Washington and was quoted in the the July 20, 1998, Fortune Magazine as saying:
"Although about three million computers get sold every year in China, people don't pay for the software. Someday they will, though. And as long as they're going to steal it, we want them to steal ours. They'll get sort of addicted, and then we'll somehow figure out how to collect sometime in the next decade."
The next decade is now.
Cambridge University professor Ross Anderson has a fantastic TCPA / Palladium FAQ
here and in it, says:
"Making the Chinese pay for software' has been a big thing for Bill; with Palladium, he can tie each PC to its individual licenced copy of Office, and with TCPA he can tie each motherboard to its individual licenced copy of Windows. TCPA will also have a worldwide blacklist for the serial numbers of any copies of Office that get pirated.
"Finally, Microsoft would like to make it more expensive for people to switch away from their products (such as Office) to rival products (such as OpenOffice). This will enable them to charge more for upgrades without making their users jump ship."
Right. And does anyone think Byll and the Boyz will restrict their attentions solely to people in China?
And while you're worrying, don't forget the TCPA (Trusted Computing Platform Alliance), an oxymoron if ever there was one. It's the hardware Microsoft will build on.
Formed by Compaq, HP, IBM, Intel and Microsoft in 1999, its mission statement says, "Through the collaboration of HW [hardware], SW [software], communications, and technology vendors, drive and implement TCPA specifications for an enhanced HW and OS based trusted computing platform that implements trust into client, server, networking, and communication platforms."
Naturally, you need a password to find out who the current TCPA member companies and advisors are. However, if by some chance you could leaf through their address book, it would probably look a lot like like the list at the end of this piece.
And the TCPA BOA (Board of Advisors), a "voluntary, independent group that reviews the TCPA specification and establishes confidence in the output of the TCPA", could well resemble the BOA's of November 22, 2002, who were:
Professor Dan Boneh, Stanford University; Professor David J. Farber, University of Pennsylvania, Alfred S Fitler Moore Professor of Telecommunications Systems; Professor Bart Preneel, Katholieke Universiteit Leuven; and, Professor Vijay Varadharajan, University of Western Sydney. [NOTE: Boa - large snake.]
OK. And where would the TCPA be without Senator Fritz Hollings of South Carolina? He's been going blue trying to get the US Congress to make TCPA mandatory in all consumer electronics.
"At the heart of TCPA is a new chip added to motherboards, which have been affectionately dubbed 'Fritz chips' after the good Senator," posts Dr John on
FreeRepublic.com, going on, "But there is a double meaning here, since you can expect computers based on TCPA technology to go on the fritz far more often than their non-TCPA counterparts. Eventually, Intel and AMD say they will incorporate TCPA into future processors. Lucky us.
"Palladium is the software end of the business, and will be built-into future versions of Windows. The basic idea is that the Fritz chip will constantly check the machine state, and the 'authorizations' for the OS and each application on the machine. The OS will only boot if nothing is 'amiss', that means no 'unauthorized components or content'. The spin they are putting on this draconian move is that 'PCs won't necessarily get faster, just more secure'.
The bottom line is this, adds Dr John:
"Computer and software makers are desperate to lock down the ability of modern computers until they are nothing more than paid content providing systems. This is not what computers were made for, they were made to be multifunctional, programmable devices with almost unlimited capabilities. Capabilities that the MPAA (motion picture assoc. of America) and RIAA (recording industry assoc. of America) want eliminated ASAP.
"Finally, will TCPA create a black market for Fritz-less motherboards, or will it just make the last, fastest, Fritz-less computers the most popular on earth? I can imagine a big run on the last round on non-TCPA hardware as soon as it becomes known that all motherboards after a certain date must have the Fritz chip installed."
Right, Dr J. But there may be a lot more to it.
Rather than leading to a Big Brother World, as a lot of people fear, the agonized posturing from the conglomerates as they desperately, but hopelessly, try to hang on and hang in is instead driving the development of brand new, highly innovative technologies and systems from independents.
Millions of individuals from around the world - not groups, but individuals, and many of them still in school, or even younger - are doing something no one has ever done before. They're literally compelling the private and public sectors to re-think operational models that have kept them in power and kept them rich for all these years.
Consumers of all ages are now in the driving seat. They're calling the shots and Hollywood rises or falls on how well it listens. But so far, it's making too much noise to hear anything but itself.
But that's good because while the RIAA, MPAA and the other dinosaurs struggle to maintain the status quo, the rest of world is moving ahead in exciting new directions.
Nature does indeed abhor a vacuum.
TCPA members:
360 Degree Web; 3Com Corporation; Access360; Acer; ActivCard Inc; Adhaero Technologies; Adobe
Systems Inc; Advanced Micro Devices (AMD); æSec Corporation; Aladdin Knowledge Systems; Algorithmic Research Ltd; American Express Company; American Megatrends Inc; Argus Security Corporation; Atmel Corporation; ATMEL Rousset; Authentium, Inc; Autotrol Uruguaya S.A.;
timore Technologies Ltd; BERGDATA AG; BindView Development; Blueice Research; Broadcom Corporation;
Craig Ltd; Caveo Technology LLC; CE-Infosys Pte Ltd; Cerberus Information Security Limited; Certicom Corp; Check Point Software Technologies Ltd; CHECKFLOW; Chrysalis-ITS; Cimarron Systems Incorporated; CipherKey Exchange Corporation; Cloakware Corporation; Communication Intelligence Corporation; Compagnie Européenne de Développement SA; Compal Electronics, Inc; Compaq Computer Corporation; Computer Elektronik Infosys GmbH; Crypto AG; Cygate ESM Oy; CYLINK Corporation;
Dell Computer Corporation; DICA Technologies Inc; DigiGAN, Inc; Digital Innotech Co; Digital Persona Inc; Discretix Technologies Ltd;
e-PCguard.com, Inc; eCryp, Inc; Eltan Comm B.V.; Enova Technology Corporation; Ensure Technologies; Entrust Technologies Ltd; ERACOM Pty Ltd; Ethentica; Excalibur Solutions, Inc;
FARGOS Development, LLC; FINGLOQ AB; First Access, Inc; Fortress Technologies In; Fujitsu Limited; Fujitsu-Siemens-Computers;
Gateway, Inc; Gemplus Corporation; GLOBEtrotter Software; Hewlett-Packard Company; Hitachi, Ltd. PC Div;
HyperSecur Corporation;
I/O Software, Inc; ICSA.net; ID Tech; IdentAlink Limited; Infineer Inc; Infineon Technologies Corporation; Infineon Technologies Asia Pacific Pte Ltd; InfoCore, Inc; Insyde Software Corp; Integrity Sciences, Inc; Intel Corporation; Interlok Technologies L.L.C.; International Business Machines (IBM) International Service Consultants Ltd; Internet Dynamics, Inc; Internet Security Systems; InterTrust Technologies; Iomega Corporation;
Kasten Chase Applied Researc; Keycorp Ltd; Keyware Technologies, Inc;
Lanworks Technologies Co; Legend (SHENZHEN) R&D Center, Legend Group Ltd; Lexign; Liquid Audio, Inc; Litronic Inc; LOGISIL Consulting;
M-Systems Flash Disk Pioneers; M3S Enterprises Mike and Marc; Macrovision Corporation; Massive Media Group; Media DNA Incorporated; Medialogic Co., Ltd; Miaxis Biometrics Co; Micron Electronics, Inc; Microsoft Corporation; Mitac International Corporation; Mobile-Mind, Inc; Motorol;
National Semiconductor; nCipher Inc; NDS Limited; NEC Corporation; Net Nanny Software International; NetActive Inc; NetAtmosphere Inc; NetOctave, Inc; NetSecure Software Canada; Network Associates, Inc; New Trend Technology Inc; Novell, Inc; nVidia;
O2Micro; Open Source Asia;
PC Guardian; Philips Semiconductors; Phoenix Technologies, Ltd; Pijnenburg Custom Chips B.V.; Precision Digital Hardware; Pricewaterhouse Coopers; Prism Resources, Inc; Pro-Team Computer Corp; Protect Data Security Inc;
Rainbow Technologies, Inc; Raytheon Company; Raz-Net Inc; Redstrike B.V.; RSA Security, Inc;
SafeNet, Inc; SAFLINK Corporation; SAGEM MORPHO, Inc; SAGRELTO Enterprises, Inc; SAMSUNG ELECTRONICS CO; SAS Institute; Schlumberger, Smart Cards; Science Applications International C; Scienton Technologies Inc; SCM Microsystems; Sectra Communications AB; Securant Technologies (RSA Security); Secure Computing Corporation; Siemens A; Softex, Inc; SPYRUS, Inc; SSH Communications Security, Inc; Standard Microsystems Corporation; STMicroelectronics; Symantec Corporation; Symbol Technologies, Inc;
Texar Software Corp; Thales e-Security, Inc; TimeCertain, LLC; Titan Systems; Toshiba Corporation; Trend Micro, Inc; Tripwire, Inc; Trispen Technologies; TrueTime Inc; TruSec Solutions; Trustpoint Corporation; TVN Entertainment Corporation;
Ubizen; Utimaco Safeware AG;
ValiCert Inc; VeraSafe, Inc; Veridicom, Inc; Verisign, Inc; Viewpoint Engineering; Voltaire Advanced Data Security Lt; and,
Wave Systems Corp; Wincor Nixdorf; WinMagic, Inc; WinVista Corporation.