Alex sez, "My colleague Chris Neary and filmmaker Nathan Fitch made this great short film about 11-year-old inventor Andrew Man-Hudspith, who was so intent on getting a 3D printer he made a PowerPoint presentation to convince his parents to help him get one."

An 11-year-old and his 3D printer (Thanks, Alex!)

In an urgent, important blog post, computer scientist and security expert Ed Felten lays out the case against rules requiring manufacturers to put wiretapping backdoors in their communications tools. Since the early 1990s, manufacturers of telephone switching equipment have had to follow a US law called CALEA that says that phone switches have to have a deliberate back-door that cops can use to secretly listen in on phone calls without having to physically attach anything to them. This has already been a huge security problem -- through much of the 1990s, AT&T's CALEA controls went through a Solaris machine that was thoroughly compromised by hackers, meaning that criminals could listen in on any call; during the 2005/6 Olympic bid, spies used the CALEA backdoors on the Greek phone company's switches to listen in on the highest levels of government.

But now, thanks to the widespread adoption of cryptographically secured messaging services, law enforcement is finding that its CALEA backdoors are of declining utility -- it doesn't matter if you can intercept someone else's phone calls or network traffic if the data you're captured is unbreakably scrambled. In response, the FBI has floated the idea of "CALEA II": a mandate to put wiretapping capabilities in computers, phones, and software.

As Felten points out, this is a terrible idea. If your phone is designed to secretly record you or stream video, location data, and messages to an adverse party, and to stop you from discovering that it's doing this, it puts you at huge risk when that facility is hijacked by criminals. It doesn't matter if you trust the government not to abuse this power (though, for the record, I don't -- especially since anything mandated by the US government would also be present in devices used in China, Belarus and Iran) -- deliberately weakening device security makes you vulnerable to everyone, including the worst criminals:

Our report argues that mandating a virtual wiretap port in endpoint systems is harmful. The port makes it easier for attackers to capture the very same data that law enforcement wants. Intruders want to capture everything that happens on a compromised computer. They will be happy to see a built-in tool for capturing and extracting large amounts of audio, video, and text traffic. Better yet (for the intruder), the capability will be stealthy by design, making it difficult for the user to tell that anything is amiss.

Beyond this, the mandate would make it harder for users to understand, monitor, and fix their own systems—which is bad for security. If a system’s design is too simple or its operation too transparent or too easy to monitor, then wiretaps will be evident. So a wiretappability mandate will push providers toward complex, obfuscated designs that are harder to secure and raise the total cost of building and operating the system.

Finally, our report argues that it will not be possible to block non-compliant implementations. Many of today’s communication tools are open source, and there is no way to hide a capability within an open source code base, nor to prevent people from simply removing or disabling an undesired feature. Even closed source systems are routinely modified by users—as with jailbreaking of phones—and users will find ways to disable features they don’t want. Criminals will want to disable these features. Ordinary users will also want to disable them, to mitigate their security risks.

Felten's remarks summarize a report [PDF] signed by 20 distinguished computer scientists criticizing the FBI's proposal. It's an important read -- maybe the most important thing you'll read all month. If you can't trust your devices, you face enormous danger.

CALEA II: Risks of wiretap modifications to endpoints

OXO has a serious presence in my kitchen, but the one- and two-cup adjustable measuring cups I added four months ago might be the last items I would sell. They are darned near perfect.

I’ve used other plunger-and-sleeve style adjustable measuring cups, and they were great for measuring odd quantities or volumes without using several different-sized cups (or one size several times), but sticky or oily stuff got in between the plunger and the sleeve, making reuse impossible without stopping to disassemble and clean the cup.

Jaime sez, "In honor of Children's Book Week, I'm sharing a link about a book written by 8-year old Griffin Hehmeyer. His mom tells the story of how Griffin wrote a book, enlisted his friends and classmates for help editing and illustrating it, and eventually published it. The book serves as a model for children interested in creating literature of their own, practicing skills like story-telling, writing, empathy, collaboration, and persistence in the process."

The story was inspired by a make-believe game Griffin had been playing for several years with a good friend of his named Maya. In the game he was the king of the wolves, just like Makamom is in the book. Griffin says of the writing process, “When I first started this book, I had a hard time thinking of ideas. As I got closer to the ending it was easier to think of what to say.”

At the end of each chapter Griffin would read what he had written to his classmates and incorporate their feedback into the draft. When the draft was complete, Griffin and his teacher then spent another month reading through the book and correcting any errors before sending it to me. I think the editing process was the most frustrating part for Griffin, since he was impatient to be done. I had told him we’d print it out and get it bound, so he was excited to have a real book-like copy to enjoy.

By April I knew of the book's existence, but I hadn’t yet read any of it. When I received the completed draft, I was somewhat hesitant to undertake the reading such a large chunk of text written by an 8 year old – even if that 8 year old was my own son. To my surprise, however, the book turned out to be really good. As a colleague said when I shared a draft with him, “The book kept me reading it until the end, in one pass. It is a very interesting, clever, and engrossing story.” I also enjoyed watching my husband read the book to our other three children each night before bed. They laughed and gasped at all the right places, and begged their dada to continue reading well after lights out.

Making the Marakon Ways (Thanks, Jaime!)