DOCSLIB.ORG

09.Conference Reports Copy

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
09.Conference Reports Copy conference reports This issue’s report focusses on LISA LISA XVI only, so single failures aren’t fatal but only reduce capacity. XVI Sixteenth Systems Administration Conference To answer a query, the Web server (a custom package called gws) queries PHILADELPHIA, PENNSYLVANIA, index servers, document servers (cached USA pages), and ad servers, in parallel, and OUR THANKS TO THE SUMMARIZERS: NOVEMBER 3–8, 2002 keeps trying until it gets a response. KEYNOTE Each query may involve a dozen or more servers, using whichever reply comes in for LISA ’02 SCALING THE WEB: AN OVERVIEW OF the fastest (the average query time is .23 Josh Simon, who organized the collecting of GOOGLE (A LINUX CLUSTER FOR FUN seconds). Before the query reaches a the summaries AND PROFIT) Abiodun A. Alao Web server, however, it passes several Jim Reese, Chief Operations Engineer, Paul Anderson Google load balancers, both global and local, David Berg which use various methods (including Robert Beverly Summarized by J.D. Welch round-robin and least connections) to Kuzman Ganchev We all know, use, and love Google, but Jim Hickstein choose which servers to query. Rob Kolstad how do they make it work? In this Martin Krafft engaging talk, Jim Reese explained how “El Cheapo” PCs are used to maximize Renuka Nayak custom software, massive replication reliability through replication. Fault tol- James O’Kane and expendable, commodity hardware erance is kept very simple; timeouts are Will Partain have allowed Google to answer 150 mil- in the milliseconds, and machines are Peg Schafer restarted automatically and regularly J. D. Welch lion Web search queries a day. polled for their status. Racks of Steve Wormley The core technology that separates Garry Zacheiss machines are very dense, with 80 half- Google from other search services is the depth 1U boxes in each, along with PageRank system developed by founders paired switches, load balancers, and Larry Page and Sergey Brin while gradu- Gigabit uplinks to the routers. All disks ate students at Stanford University. This are local (100–120Gb/machine); large system aims to objectively rank Web fans are mounted atop the rack and heat content by popularity; according to is drawn from the space between the Reese, “a page’s importance is the sum of machines in the center of the rack. All the aggregate importance of the pages the machines run a “Googlized” distri- linking to it,”so a page linked to from bution of RedHat Linux as well as pro- the New York Times is given more weight prietary tools for serving content and than one linked to by a high-school system monitoring. newspaper. In addition to assessing pop- ularity, hypertext analysis is used to For comparison with the new, very quantify the importance of elements on organized racks, Reese showed photos of a page (e.g., larger text is probably more historical configurations, including a important). custom-built 1U machine with four motherboards, eight disks, eight NICs, To get a sense of scale of Google’s chal- and one power supply, which was con- lenge – there are 3.8 billion pages and figured with the disks mounted over the 256 million Web users, and 85% of them processors separated by a sheet of Plexi- use search services. Given this, any single glas (!). machine will always be too small for the task, so index and page data is divided up into pieces, called “shards,”which are distributed across many machines and multiple data centers. Thus, traffic is scalable by replication; the index is read- 64 Vol. 28, No. 1 ;login: INVITED TALKS deal about the specific component or first authenticating, and prevents the use SECURITY ON MACOS X service at work. of startup commands (which can make EPORTS the machine act like a FireWire disk or R John Hurley, Apple OS X makes a point of separating be booted into UNIX-permissions-free authorization from authentication, a Summarized by J.D. Welch OS 9, for example). Hurley began by saying that Apple is in move designed for next-generation ONFERENCE an interesting position to deal with secu- applications, including smart card This talk was a little marketing-heavy C rity issues, as they manufacture the access, for which they are developing an and didn’t delve into technical details of hardware, firmware, operating system, SDK (called Smart Card Services) in col- the various systems implemented in OS and often the end application, so a great laboration with HP, Intel, and other ven- X beyond their GUI expression, but it degree of integration is possible in OS X dors. did provide a good introduction to the various services available to the OS X security features. Out of the box, OS X is reasonably well user or administrator. Since OS X is based on BSD, many of the locked down: Services like SSH, HTTP OS X security tools are ports of standard are off by default (but are easy to enable ETHICS FOR SYSTEM ADMINISTRATORS: UNIX tools, oftentimes GUIfied with a – from GUI or command line – if you DILEMMAS FOR LISA 2002 ATTENDEES Cocoa (native OS X Objective-C frame- know what you’re doing), no ports are Lee Damon and Rob Kolstad open, and the root account is disabled work) front end. For example, the Shar- Summarized by Steve Wormley ing and Firewall control panels are a (sudo is used for administrative access). Unlike the medical profession, which has front end to ipfw. OS X also offers Ker- OS X honors UNIX user/group/file per- had thousands of years to develop ethi- beros, OpenSSH, OpenSSL, and other missions and is designed to be a multi- cal standards, system administration familiar UNIX tools in its default instal- user OS. ethics are new. The mapping of conven- lation. Obviously, the use of familiar, The Keychain is a cornerstone applica- tional communications such as paper often open source, packages is a depar- tion, and was given much play in this mail and the telephone do not work in ture from (and significant improvement talk. Accessible to all Cocoa, Carbon, the realm of email and Instant Messag- over) OS 9. and UNIX applications running under ing. The quantity of sensitive data online A primary goal in designing the OS X OS X, the Keychain provides an and issues such as identity theft con- security architecture was to make it easy encrypted environment to store pass- tribute to awareness of the need for to use these important features. Addi- words for Web sites and file servers, ethics and privacy guidelines in new tionally, although many tools are pre- encrypted disk volumes, and the like. technology. sented plainly for users, they are con- Users “unlock” the Keychain with a mas- Since computer ethics is a new area, figurable beyond what most users would ter password, and applications can store novel situations and their attendant bother with – good news for longtime and read data from the Keychain. Addi- problems now happen at “Internet UNIX users and security types. Also, tionally, all Keychain items include an speed.”We as system administrators Software Update encourages users to access control list for fine-grained con- need to have knowledge of ethics, pri- keep up-to-date with patches, as it auto- trol. vacy, and security so that we can protect matically polls for and delivers updates Another highlighted technology was the rights and still get work done. directly to end users. ability of Disk Copy, a utility available One definition of a professional is a per- OS X implements a Common Data on all installations of OS X, to create son who conforms to the technical and Security Architecture API, which pro- encrypted disk images. Once the image ethical standards of a profession. For vides an expandable set of crypto algo- is created, it can be mounted (with suc- system administration to be regarded as rithms to various applications, including cessful authentication) read/write, a profession by the outside world, there- the Keychain (encrypted user informa- burned on a CD for transfer, etc. fore, ethical standards need to be tion store) and Disk Copy (which can The physical security of Apple hardware addressed. encrypt disk volumes). These “layered has also been considered. The XServe 1U services” include file signing and certifi- rack mount server, for example, sends A distinction should be made between cate management as well as APIs for messages to the console when physical ethics and policies. Since policies are adding plug-in modules for additional security of the rack is compromised; well defined and generally not open to services. With this modular architecture, other Mac models can be “locked” with interpretation, establishing a site policy developers can make use of security ser- the Open Firmware Password, which will often eliminate many ethical prob- vices without having to know a great prevents booting the machine without lems. February 2003 ;login: LISA XVI G 65 Ethics in the context of computer net- delivered facts and ideas that, if nothing lion dollars made available to NASA works pertain to all privileged users, else, were entertaining. every year and the 300 million the RIAA including anyone with access to others’ loses to “piracy” per year, this figure He isn’t a lawyer – he stressed this fact information, even if that access is acci- clearly indicates there’s something several times – so he approached his dental; even help desk personnel, for severely wrong. Advertising isn’t evil, it’s topic from a “common-sense” angle. example, need to be included. necessary. Rather, the lack of regulation Spam, or Monty Python’s breakfast deli- and control is what constitutes the prob- Lee and Rob went on to present five sce- cacy, is all those emails you never asked lem.
Load more

Recommended publications
  • Security Applications of Formal Language Theory
    Dartmouth College Dartmouth Digital Commons Computer Science Technical Reports Computer Science 11-25-2011 Security Applications of Formal Language Theory Len Sassaman Dartmouth College Meredith L. Patterson Dartmouth College Sergey Bratus Dartmouth College Michael E. Locasto Dartmouth College Anna Shubina Dartmouth College Follow this and additional works at: https://digitalcommons.dartmouth.edu/cs_tr Part of the Computer Sciences Commons Dartmouth Digital Commons Citation Sassaman, Len; Patterson, Meredith L.; Bratus, Sergey; Locasto, Michael E.; and Shubina, Anna, "Security Applications of Formal Language Theory" (2011). Computer Science Technical Report TR2011-709. https://digitalcommons.dartmouth.edu/cs_tr/335 This Technical Report is brought to you for free and open access by the Computer Science at Dartmouth Digital Commons. It has been accepted for inclusion in Computer Science Technical Reports by an authorized administrator of Dartmouth Digital Commons. For more information, please contact [email protected]. Security Applications of Formal Language Theory Dartmouth Computer Science Technical Report TR2011-709 Len Sassaman, Meredith L. Patterson, Sergey Bratus, Michael E. Locasto, Anna Shubina November 25, 2011 Abstract We present an approach to improving the security of complex, composed systems based on formal language theory, and show how this approach leads to advances in input validation, security modeling, attack surface reduction, and ultimately, software design and programming methodology. We cite examples based on real-world security flaws in common protocols representing different classes of protocol complexity. We also introduce a formalization of an exploit development technique, the parse tree differential attack, made possible by our conception of the role of formal grammars in security. These insights make possible future advances in software auditing techniques applicable to static and dynamic binary analysis, fuzzing, and general reverse-engineering and exploit development.
    [Show full text]
  • Privacy Enhancing Technologies for the Internet III: Ten Years Later
    Privacy Enhancing Technologies for the Internet III: Ten Years Later Ian Goldberg David R. Cheriton School of Computer Science University of Waterloo Waterloo, ON [email protected] 1 Introduction In 1997 with Wagner and Brewer, and again in 2002, we looked at the then-current state of privacy-enhancing technologies (PETs) for the Internet. [27, 26] Now, in 2007, we take a third look. Technologies to help users maintain their privacy online are as important today as ever before—if not more so. Identity theft is the fastest-growing crime in the US today [47] and it is all too easy for would-be identity thieves to harvest personal information from the online trails Internet users leave every day. Losses of large databases of personal information are an almost daily occurrence [2]; for example, retailers’ servers are penetrated [44], databases are traded between government and private companies [36] and laptops containing social security numbers are stolen [35]. In 1997, we discussed the dossier effect: all available information about a person gets cross-referenced, and the resulting dossier ends up being used for many purposes, lawful and not. This practice has expanded over the years; the companies that compile and sell these dossiers are known as data brokers. Choicepoint is a prime example—in 2005, this data broker sold dossiers on over 150,000 Americans to a group of criminals. [10] The PETs we discuss here give people a way to control how much of their personal information is revealed when they use the Internet. By controlling the spread of this information, they can limit the size of the data brokers’ dossiers about them.
    [Show full text]
  • Studying the Anonymity Trilemma with a Discrete-Event Mix Network Simulator Ania M
    Studying the anonymity trilemma with a discrete-event mix network simulator Ania M. Piotrowska Nym Technologies ABSTRACT strategies on the example of Elixxir [2], HOPR [4] and Nym [1]. To In this work, we present a discrete event mix network simulator, the best of our knowledge, this is a first such empirical analysis of which allows analysing how anonymity, latency, and bandwidth those networking designs. overhead are affected by various scenarios of deployment and de- sign choices. These design choices include network topology, mix- 2 BACKGROUND ing technique, volume of traffic, latency requirements, packet size or use of cover traffic. To the best of our knowledge, this isthe The concept of an anonymous communication network was pio- first such simulator as work on it began in 2017 to analyze the neered by Chaum [7] to mitigate the threats of progressive com- Loopix mix network, and the code of our simulator is available munications surveillance. Their main security goal is to shield the under an open-source license. To demonstrate the capabilities of correspondence between senders and recipients by hiding the dis- our simulator, we perform an empirical analysis of the impact of tinctive characteristics of the network traffic, the so called metadata. core design choices on anonymity, scalability and latency in Elixxir, The principal concept of the Chaum’s anonymous communication HOPR and Nym, currently deployed mix network infrastructures network is the decentralized mix network in which the network that make a variety of different choices in their design. traffic is relayed via a set of independently operated cryptographic relays called mix nodes.
    [Show full text]
  • The Pynchon Gate
    The Pynchon Gate A Secure Method of Pseudonymous Mail Retrieval Len Sassaman Bram Cohen Nick Mathewson Katholieke Universiteit Leuven BitTorrent The Free Haven Project [email protected] [email protected] [email protected] ABSTRACT ter [48] or Mixminion [22]) to send authenticated requests to We describe the Pynchon Gate, a practical pseudonymous a nym server, which delivers outgoing messages to the email message retrieval system. Our design uses a simple distributed- network and handles administrative commands. The nym trust private information retrieval protocol to prevent ad- server also receives incoming messages and passes them to a versaries from linking recipients to their pseudonyms, even collator component, which encrypts the messages and peri- when some of the infrastructure has been compromised. This odically packages them into regular batches. These batches approach resists global traffic analysis significantly better are then replicated at a number of distributor servers, which than existing deployed pseudonymous email solutions, at the use a private information retrieval protocol to allow nym cost of additional bandwidth. We examine security concerns owners to receive mail while maintaining unlinkability be- raised by our model, and propose solutions. tween a message and its recipient. 1.0.1 Goals. Categories and Subject Descriptors First, our design must be secure: we want the Pynchon C.2.4 [Distributed Systems]: Client/server Gate to resist active and passive attacks at least as well as General Terms the state of the art for forward message anonymity. Thus, we should try to protect users’ identities from a global eaves- Design, Security dropper for as long as possible; to hinder active attackers Keywords who can delay, delete, or introduce traffic; and to resist an attacker who has compromised some (but not all) of the anonymity, mix networks, private information retrieval servers on the network.
    [Show full text]
  • Privacy and Data Protection by Design – from Policy to Engineering December 2014
    Privacy and Data Protection by Design – from policy to engineering December 2014 European Union Agency for Network and Information Security www.enisa.europa.eu Privacy and Data Protection by Design – from policy to engineering December 2014 About ENISA The European Union Agency for Network and Information Security (ENISA) is a centre of network and information security expertise for the EU, its member states, the private sector and Europe’s citizens. ENISA works with these groups to develop advice and recommendations on good practice in infor- mation security. It assists EU member states in implementing relevant EU legislation and works to improve the resilience of Europe’s critical information infrastructure and networks. ENISA seeks to enhance existing expertise in EU member states by supporting the development of cross-border com- munities committed to improving network and information security throughout the EU. More infor- mation about ENISA and its work can be found at www.enisa.europa.eu. Authors George Danezis, Josep Domingo-Ferrer, Marit Hansen, Jaap-Henk Hoepman, Daniel Le Métayer, Rodica Tirtea, Stefan Schiffner Contact For contacting the authors please use [email protected] For media enquires about this paper, please use [email protected]. Acknowledgements We have discussed this work with numerous people at various occasions; we thank for the valuable input we got from these discussions. While we cannot name all, we would like to thank Sébastien Gambs and Rosa Barcelo for their feedback on drafts of this report. Legal notice Notice must be taken that this publication represents the views and interpretations of the authors and edi- tors, unless stated otherwise.
    [Show full text]
  • Privacy Enhancing Technologies for the Internet III: Ten Years Later∗
    Privacy Enhancing Technologies for the Internet III: Ten Years Later∗ Ian Goldberg David R. Cheriton School of Computer Science University of Waterloo Waterloo, ON [email protected] 1 Introduction In 1997 with Wagner and Brewer, and again in 2002, we looked at the then-current state of privacy-enhancing technologies (PETs) for the Internet. [27, 26] Now, in 2007, we take a third look. Technologies to help users maintain their privacy online are as important today as ever before—if not more so. Identity theft is the fastest-growing crime in the US today [47] and it is all too easy for would-be identity thieves to harvest personal information from the online trails Internet users leave every day. Losses of large databases of personal information are an almost daily occurrence [2]; for example, retailers’ servers are penetrated [44], databases are traded between government and private companies [36] and laptops containing social security numbers are stolen [35]. In 1997, we discussed the dossier effect: all available information about a person gets cross-referenced, and the resulting dossier ends up being used for many purposes, lawful and not. This practice has expanded over the years; the companies that compile and sell these dossiers are known as data brokers. Choicepoint is a prime example—in 2005, this data broker sold dossiers on over 150,000 Americans to a group of criminals. [10] The PETs we discuss here give people a way to control how much of their personal information is revealed when they use the Internet. By controlling the spread of this information, they can limit the size of the data brokers’ dossiers about them.
    [Show full text]
  • 2013-07-08-Security Researchers Amicus.Pdf
    Case: 13-1816 Document: 003111316712 Page: 1 Date Filed: 07/08/2013 No. 13-1816 In the United States Court of Appeals for the Third Circuit United States of America, Plaintiff-Appellee, v. Andrew Auernheimer, Defendant-Appellant. Appeals from the United States District Court for the District of New Jersey, Case No. 11-CR-470, Judge Susan D. Wigenton Brief of Meredith Patterson, Brendan O’Connor, Sergey Bratus, Gabriella Coleman, Peyton Engel, Matthew Green, Dan Hirsch, Dan Kaminsky, Samuel Liles, Shane MacDougall, Brian Martin, C. Thomas, and Peiter Zatko as Amici Curiae Supporting Appellant Alex Muentz Adjunct Instructor Department of Criminal Justice Gladfelter Hall, 5th floor Temple University 1115 Polett Walk Philadelphia PA 19122 (215) 806-4383 Case: 13-1816 Document: 003111316712 Page: 2 Date Filed: 07/08/2013 Table of Contents Interest of Amici Curiae .......................1 Non-Party Statement .........................2 Consent to File ............................2 Summary of Argument.........................2 Argument................................3 1 Allowing a corporation to serve data publicly, then state after the fact that access was secretly restricted and thus impose criminal liability, amounts to a private criminal law, and may also violate the Ex Post Facto Clause. ...............................3 2 Criminalizing access to publicly-offered material is not in the public in- terest, because it prevents the security research community from exer- cising its consumer-protecting role. .................. 16 Conclusion............................... 21 Certificate of Bar Membership.................... 23 Certificate of Compliance With Word Count Requirements ... 23 Certificate of Service ........................ 23 Certificate of Identical Compliance of Briefs ........... 24 Certificate of Virus Check ...................... 24 ii Case: 13-1816 Document: 003111316712 Page: 3 Date Filed: 07/08/2013 Table of Authorities Cases Calder v.
    [Show full text]
  • Toward an Information Theoretic Secure Anonymous Communication Service the Pynchon Gate Pseudonymous Mail System
    Toward an Information Theoretic Secure Anonymous Communication Service The Pynchon Gate Pseudonymous Mail System Len Sassaman1, Nick Mathewson2, Brian Warner3, Bram Cohen4, and Bart Preneel1 1 Katholieke Universiteit Leuven Kasteelpark Arenberg 10, B-3001 Leuven-Heverlee, Belgium flen.sassaman,[email protected] 2 The Free Haven Project [email protected] 3 Allmydata, Inc. 555 De Haro Street, Suite 400, San Francisco CA, 94107 USA [email protected] 4 BitTorrent, Inc. 201 Mission Street, Suite 900, San Francisco, CA 94105 [email protected] Abstract. We describe the Pynchon Gate, a practical pseudonymous message retrieval system. Our design uses a simple distributed-trust pri- vate information retrieval protocol to prevent adversaries from linking recipients to their pseudonyms, even when some of the infrastructure has been compromised. This approach resists global traffic analysis sig- nificantly better than existing deployed pseudonymous email solutions, at the cost of additional bandwidth. This design improves upon previous versions by being resistant to Byzantine servers. We provide a review of related work, and evaluate it in comparison to our approach. We exam- ine security concerns raised by our model,and propose solutions. Special emphasis is placed on ease of implementation and deployment of the system, as well as end-user usability issues. 1 Introduction Over the last several decades, there have been numerous systems proposed which aim to preserve the anonymity of the recipient of some data. Some have involved trusted third-parties or trusted hardware; others have been constructed on top of link-layer anonymity systems or mix networks. Pseudonymous messaging services allow users to send messages that originate at a pseudonymous address (or \nym") unlinked to the user, and to receive mes- sages sent to that address, without allowing an attacker to deduce which users are associated with which pseudonyms.
    [Show full text]
  • Financial Technology
    Journal APEX 2016 AWARD WINNER FINANCIAL TECHNOLOGY Available to download at CAPCO.COM/INSTITUTE #44 11.2016 EMPOWERING THE [FINANCIAL] WORLD Pushing the pace of Financial Technology, together we’ll help our clients solve technology challenges for their business – whether it’s capital markets in Mumbai or community banking in Macon. We leverage knowledge and insights from our clients around the world: clients in towns everywhere are becoming 20,000 more efficient, modern and scalable. transactions processed help solve clients’ 27 billion challenges — big and small. moved across the globe in a single year $9 trillion empowers our clients’ communities to build storefronts, homes and careers. hearts and minds have joined forces to 55,000 bring you greater capabilities in even the smallest places. Empowering the Financial World FISGLOBAL.COM © 2016 FIS and/or its subsidiaries. All Rights Reserved. The Capco Institute Journal of Financial Transformation Recipient of the Apex Award for Publication Excellence Editor Shahin Shojai, Global Head, Capco Institute Advisory Board Christine Ciriani, Partner, Capco Chris Geldard, Partner, Capco Nick Jackson, Partner, Capco Editorial Board Franklin Allen, Nippon Life Professor of Finance, University of Pennsylvania Joe Anastasio, Partner, Capco Philippe d’Arvisenet, Adviser and former Group Chief Economist, BNP Paribas Rudi Bogni, former Chief Executive Officer, UBS Private Banking Bruno Bonati, Chairman of the Non-Executive Board, Zuger Kantonalbank Dan Breznitz, Munk Chair of Innovation Studies, University of Toronto Urs Birchler, Professor Emeritus of Banking, University of Zurich Géry Daeninck, former CEO, Robeco Stephen C. Daffron, CEO, Interactive Data Jean Dermine, Professor of Banking and Finance, INSEAD Douglas W.
    [Show full text]
  • Winter 2020 Vol
    ;login WINTER 2020 VOL. 45, NO. 4 : & Characterizations of Cloud Functions Workloads Mohammad Shahrad, Rodrigo Fonseca, Íñigo Goiri, Gohar Chaudhry, and Ricardo Bianchini & RLBox: Simplifying In-Process Sandboxing Tal Garfinkel, Shravan Narayan, Craig Disselkoen, Hovav Shacham, and Deian Stefan & BIBIFI Contests: Motivated Developers Still Make Security Mistakes Daniel Votipka, Kelsey R. Fulton, James Parker, Matthew Hou, Michelle L. Mazurek, and Michael Hicks & SRE Best Practices for Capacity Final Print Issue Specials Management Favorite Articles Luis Quesada Torres and Doug Colish Rik Farrow, Laura Nolan, and Arvind Krishnamurthy Interview with USENIX Member #7 Rik Farrow Interview with Kirk McKusick Columns Rik Farrow Review of Alex Hidalgo’s Book about SLOs Open Access Laura Nolan Laura Nolan Understanding Linux Containers Corey Lueninghoener BPF and Histograms Dave Josephsen Cryptographic Hash Functions Simson L. Garfinkel Software Supply Chain Security Dan Geer, Bentz Tozer, and John Speed Meyers Thanks to our USENIX Supporters! USENIX appreciates the financial assistance our Supporters provide to subsidize our day-to-day operations and to continue our non-profit mission. Our supporters help ensure: • Free and open access to technical information • Student Grants and Diversity Grants to participate in USENIX conferences • The nexus between academic research and industry practice • Diversity and representation in the technical workplace We need you now more than ever! Contact us at [email protected]. USENIX PATRONS USENIX BENEFACTORS USENIX PARTNERS We offer our heartfelt appreciation to the following sponsors and champions of conference diversity, open access, and our SREcon communities via their sponsorship of multiple conferences: Ethyca Equinix Metal Microsoft Azure Goldman Sachs LinkedIn Salesforce More information at www.usenix.org/supporters WINTER 2020 VOL.
    [Show full text]
  • Bitcoin Is Speech: Notes Towards Developing Conceptual Contours Of
    University of Miami Law Review Volume 74 Number 1 Article 6 11-22-2019 Bitcoin is Speech: Notes Toward Developing the Conceptual Contours of Its Protection Under the First Amendment Justin S. Wales Richard J. Ovelmen Follow this and additional works at: https://repository.law.miami.edu/umlr Part of the First Amendment Commons, Law and Economics Commons, and the Law and Society Commons Recommended Citation Justin S. Wales and Richard J. Ovelmen, Bitcoin is Speech: Notes Toward Developing the Conceptual Contours of Its Protection Under the First Amendment, 74 U. Miami L. Rev. 204 (2019) Available at: https://repository.law.miami.edu/umlr/vol74/iss1/6 This Article is brought to you for free and open access by the Journals at University of Miami School of Law Institutional Repository. It has been accepted for inclusion in University of Miami Law Review by an authorized editor of University of Miami School of Law Institutional Repository. For more information, please contact [email protected]. Bitcoin is Speech: Notes Toward Developing the Conceptual Contours of Its Protection Under the First Amendment JUSTIN S. WALES & RICHARD J. OVELMEN* Bitcoin permits users to engage in direct expressive act- ivity with one another without the need for centralized inter- mediaries. It does so by utilizing an open and community- managed global database called a blockchain. While much of the literature about Bitcoin has focused on its use as a form of digital payment, this Article suggests an expanded understanding by demonstrating its use as a protocol net- work, not unlike the internet, that can be used to extend the possible range of human expression.
    [Show full text]
  • Better Anonymous Communications
    Better Anonymous Communications George Danezis University of Cambridge Computer Laboratory Queens' College January 2004 This dissertation is submitted for the degree of Doctor of Philosophy Declaration This dissertation is the result of my own work and includes nothing which is the outcome of work done in collaboration except where speci¯cally indi- cated in the text and summarised in section 1.3. This dissertation does not exceed the regulation length of 600001 words, including tables and footnotes. 1using detex thesis.tex | wc Acknowledgements \No man is an island, entire of itself; every man is a piece of the continent, a part of the main." Meditation 17, Devotions Upon Emergent Occasions | John Donne I am deeply indebted to my supervisor and teacher Ross Anderson, for al- lowing me to join his research group, and helping me at key points during the last three years. I hope this document shows that his trust in me was justi¯ed. I am also grateful to Robin Walker, my director of studies, for his support during the last six years and for giving me the opportunity to study in Cambridge. These years of research would have been considerably less productive without the local scienti¯c community, my colleagues in the computer secu- rity group of the Computer Laboratory, but also my colleagues from around the world. I would like to specially thank my co-authors, Richard Clayton, Markus Kuhn, Andrei Serjantov, Roger Dingledine, Nick Mathewson and Len Sassaman. This research would not have been possible without my parents. At every stage of my academic life they acted as role models, provided moral and ¯nancial support.
    [Show full text]