Slashdot Log In
Bruce Schneier Weighs in on IT Lock-in Strategies
Posted by
Zonk
on Thu Feb 07, 2008 05:23 PM
from the lock-and-key dept.
from the lock-and-key dept.
dhavleak writes "Wired has an article from Bruce Schneier on the intersection of security technologies and vendor lock-ins in IT. 'With enough lock-in, a company can protect its market share even as it reduces customer service, raises prices, refuses to innovate and otherwise abuses its customer base. It should be no surprise that this sounds like pretty much every experience you've had with IT companies: Once the industry discovered lock-in, everyone started figuring out how to get as much of it as they can.'"
Related Stories
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Build-your-own systems are starting to look good.. (Score:2, Interesting)
Does anyone have a link to some resources on how one might build one's own processor? How much does it cost to do that sort of thing?
Re:Build-your-own systems are starting to look goo (Score:5, Informative)
As far as the cost of getting one of those built, I'd like to know that myself... Reminds me when I was part of the crew dismantling the old fabs responsible for the Z80 [wikipedia.org]... Shoulda paid one of the drivers to deliver one of those Canon machines to my garage...
Parent
Re:Build-your-own systems are starting to look goo (Score:2, Informative)
Re:Build-your-own systems are starting to look goo (Score:5, Funny)
Parent
Re:Build-your-own systems are starting to look goo (Score:5, Funny)
Parent
Re:Build-your-own systems are starting to look goo (Score:5, Funny)
Parent
Re:Build-your-own systems are starting to look goo (Score:4, Interesting)
Parent
Re:Build-your-own systems are starting to look goo (Score:4, Insightful)
Parent
Symantec (Score:5, Insightful)
Re: (Score:3, Insightful)
Oh! so you are one of those that still own in operating conditions half-inch open-reel tapers?
Or else, your argument is moot, you know...
This is true, but on the other hand (Score:2)
Re:This is true, but on the other hand (Score:5, Insightful)
Parent
Re: (Score:2)
Re:This is true, but on the other hand (Score:4, Insightful)
Parent
Urgh... some worse than others. (Score:4, Interesting)
Hell, my management fears vendor lock-in more than they fear Death itself (which probably explains why we're a very heavy Linux shop)...
I realize that a lot of PHB's couldn't care less (and an alarming # of CIO's and IT management don't either), but we're far enough along now that it's starting to bite a lot of accountants and IT critters square in the ass.
IMHO, it does matter, and it explains why a lot of shops are moving away from proprietary solutions, going to Linux/BSD and such.
Now if only we can definitively tackle the two biggest examples of attempted vendor lock-in alive (Exchange and MS Office), we'd be set.
Re: (Score:3, Interesting)
The beauty of using Linux is that you get the source code. ALL the source code. Even the code that implements the IOCTL function for "tell me my interface's MAC address".
Re: (Score:2)
Re: (Score:2)
There's not a single new thing about lock-in (Score:4, Insightful)
Everyone wants a revenue stream not a revenue pond.
That doesn't justify boorish behavior, but it explains how companies want to stay in existence, and few other models exist that allow them to do this. Once again, Bruce thinks we were born yesterday.
Re: (Score:2, Insightful)
Power connectors. There's a perfectly good international standard but your manufacturer chooses to modify the connector making it 1mm smaller than it should be, so you have to buy their power supplies.
Batteries. There are scores of standard sizes for ever possible device. But your manufacturer decided to create one that doesn't fit anything else and nothin
Re: (Score:3, Insightful)
Re: (Score:2)
Maybe he's found his own "celebrity lock-in", where he's getting headlines for stating what's basically f**cking obvious. I think he should stick with security.
This has *always* been the case... (Score:5, Interesting)
But I digress...
Everybody dreams of being Ma Bell, where even putting a plastic cone on a headset could "damage the network". A lot of companies have had their turn too. We all think of Microsoft as being the king of lock-in, but for my money, it would still be IBM, where their mainframes and mid-range machines were so locked down that you had to get approval to install *anything*. At least with a PC or even a Mac, you can install another OS and you're free and clear. With IBM equipment, they could shut you down remotely if you missed a single "usage" payment (which was calculated *by* *the* *processor* *cycle*!!).
I cannot think of a single company that wouldn't want total lock-in of its users, regardless of industry. Some are just more capable of doing it than others.
I got lockwd in... (Score:3, Funny)
I did manage to escape the MS compound dodging flying chairs!
The car analogy strikes again (Score:3, Interesting)
BUSINESS = LOCK-IN (Score:3, Interesting)
Eventhough the government talks about being all for fair competition in an open market, their behavior and the law which they help create says otherwise. Intellectual property law, anti-trust law, and much of the consitution is comprised of lock-in catalysts. Mergers and aquisitions heavily support lock-ins as well.
Whether you are selling iPhones at Apple Stores or hotdogs at an intersection in Manhattan, you are still trying to lock-in your customers. And the better you do it, the more the United States of America will reward you.
What's so sad about lock-in... (Score:4, Interesting)
Makes sense if you're a capitalist (Score:4, Interesting)
Product unreliability ordinarily doesn't benefit manufacturers, because most consumers are smart enough not to buy the same make next time; but the situation is inverted when the manufacturer of the unreliable products holds a monopoly. And sometimes it doesn't even need to be a full monopoly: you can have several players ostensibly competing in a free market. But that freedom is often just an illusion.
Think about it: If John Thomas's Panasonic stereo breaks, and he already has lots of CDs, he might buy a Philips next time -- after all, it will plug into the same mains socket and play all the same discs. If John Thomas's Glow-worm boiler packs up in the middle of winter, he might replace it with a Worcester or Baxi boiler -- which will use the same gas and electricity, and plumb in just fine to his existing radiators and hot water system. If John Thomas's Ford Focus breaks down one time too many, he might trade it in for a Vauxhall Astra -- it will use the same fuel and can be driven on the same roads.
But if John Thomas's Wii breaks, and he already owns several Wii games, he has precious little choice but to buy another one from Nintendo. The games may well have cost more than the console -- it would be a waste not to have anything on which to play them.
Despite outward appearances, Nintendo, Sony and Microsoft aren't really competing in a free market; because their products are not interchangeable in practice -- unlike CD players, gas boilers or cars. Once you have invested in a game on one platform, it can only be used on that platform -- you can't replace your Wii with a PS3 and take your games across. And if you ask the vendors to replace your Wii games with PS3 equivalents, they'll laugh at you. (A store will probably exchange a few unopened games bought in ignorance as a gift for someone who has a different console than you thought; but even then it's technically ex gratia, not a statutory right.)
And if John Thomas's copy of Microsoft Word pisses him off one time too many, and he has many documents already in .doc format that he needs to be able to access, he can't replace it with anything else and still be sure that his documents will render correctly. Even worse, if his sister Fanny buys a brand new computer that comes with a brand new version of Word, John's copy now most probably won't be able to read documents saved by Fanny in future (unless she saves them as an older version, which is deliberately made awkward and throws up dire warnings) -- so he is all but forced to buy his own new copy of Microsoft Word.
Re:As in... (Score:5, Informative)
Nope.
Lock-in is anything that creates barriers to moving to a competitor. For example, file formats. Or email address non-portability between different ISPs (or freemail providers, for that matter). Or (in the case of telecoms) number non-portability.The subscription model is one of the ways to milk extra bucks from lock-in, but it isn't itself a "lock-in."
Parent
Re: (Score:3, Interesting)
so is a gun to the head... (Score:2)
Of course - I in no way declared there was a singular definition, but thanks for expanding the subject, none-the-less
Re:As in... (Score:4, Informative)
This being an unintentional form a lock-in, of course. You wouldn't actually expect an email address to be portable, would you?
-matthew
Parent
Re: (Score:3)
Re: (Score:3, Informative)
You need to read up on how the internet naming works before you make such ridiculous assertions.
In the GP's defense, telephone numbers worked like that at one point, too. It was basically a hierarchical system, where all the numbers beginning with a certain exchange would be physically connected to that CO. It just would not have been possible to take the same number from one part of a city to another, because the infrastructure didn't support it.
Telephone number portability only became possible when the telcos added an additional level of abstraction into the call-routing systems. This wasn't tri
Re: (Score:3, Insightful)
The domain system is much different. There are hundreds of thousands of domains owned by almost as many individuals and companies. It is not politically or technically feasible to force some sort of email portability across domains
Re:They said the same thing about cell phone numbe (Score:5, Insightful)
When you use an @domain symbol your dns server directs the query to the server that is responsible for that domain. ie, the server operated by (or on behalf of) the owner of the domain.
If you want email portability then you can register your own domain . It's really quite simple.
If you don't want to do that then guess what, you can get an email address on somebody elses domain. If you choose to move from their domain you don't retain any rights to continue using a domain name that you don't own
How is that difficult to understand?
Honestly, sometimes I think we need a better class of geeks on slashdot. Is Digg down at the moment?
* Yes, I realise that you can do a temporary mail redirect but this costs money and is very resource intensive. If *everyone* tried to do this in perpetuity then the system would be completely unworkable, both logistically as well as inuitively.
Parent
Re:As in...Lock-in Backfires (Score:5, Interesting)
Often lock-in is the driving force to open standards and the proprietary vendors have to change or die. The most recent example of this that I can point to is the theatrical lighting industry. Martin, Strand, MSI, and other inteligent lighting manufactures all had their own standard for running lighting. Touring companies found it difficult to interface with all the lighting systems. A committie was formed to produce a standard that wasn't any of the already established standards to avoid any patent and royalty bias toward any one manufacture.
The birth of the DMX-512 standard came out. Now it is almost impossible to sell any lighting system that doesn't support the standard.
http://www.usitt.org/standards/DMX512.html [usitt.org]
"This standard is intended to provide for interoperability at both communication and mechanical levels with controllers made by different manufacturers."
Almost everything now uses the new standard from Drama, Dance, and Club Nightlife. If you buy an intelligeht moving light, It's almost guaranteed to use the DMX-512 signal, even if the connector isn't the standard 5 pin XLR. An exception to the DMX standard is the one for architectural using multiple wall stations for building lights. Even these control systems often output DMX-512 signals to use standard dimmers.
In some specialty fields some still try with something other than the standard. As an example the animated Christmas lights often use the Lights-o-Rama system which is incompatible with everything else.
http://www.lightorama.com/ [lightorama.com]
It is a cheaper alternative with a lower cost per dimmer, but it is limited to dimmers only. It won't run all the disco and concert moving color changing lights. And of course you can only use their software and interface to run the dimmers.
Parent
Re:Be Creative! (Score:4, Insightful)
"Windows, like a newspaper, only has value in context and for a limited time. Your old copy of MSDOS is worthless today as are most of every copy of software you have released before 2001. It only had value in context and the sooner you lose that context the better off you are."
It still does whatever you had to do in times past. For example, SimCity 4 runs fine on Windows 98. A lot of places refuse to dump their Win2k setups, or they have software that still requires DOS.
Heck, I know one place that runs their financials on a Win 3.1 program. Its been doing everything they need for 15 years, and they're not going to change. It works, it runs fine under xp, and why fix what ain't broke?
Parent
Re: (Score:3, Interesting)
Then they're very lucky indeed. I've seen a lot of accounting/financial software that I can only conclude is intentionally busted in places, and where these bugs are addressed with "Don't worry AccountingMegaWonderPro 2008 will fix this problem", which it does, of course, but opens up new ones
Re:As in... (Score:4, Informative)
Over time, telephone call routing got more flexible. I'm not familiar with exactly how it works today, but there is obviously another layer, probably many layers, beneath the "phone number" you use and remember. That has been abstracted away from the actual 'hardware' and can be assigned arbitrarily.
Email addresses are currently hierarchical, in the same way that phone numbers used to be (under exchanges). If you want to send it to bob@company.com, you first send it to the mailserver for "company.com" and then it sends it on to Bob. But that's sort of an arbitrary design consideration. If you wanted to have a different MX record for "bob@company.com" than "joe@company.com", there's no fundamental reason why you couldn't, provided you were willing to completely trash and rewrite the DNS servers and MTAs.
More usefully, rather than screwing around with DNS, the best way to accomplish email portability would be to build another layer of abstraction on top of email as it currently exists. Instead of remembering people's emails, remember their real names or handles, and then have your email program consult some sort of global distributed database in order to find their email address (which would change whenever they moved ISPs or networks). Then you could change emails whenever you wanted and the people sending you mail would never know; it would all be hidden below the user level. And in fact there are some electronic-mail systems (e.g. Lotus Notes) that don't operate using user and domain names, and have their own systems allowing for more flexibility.
Parent
Re:As in... (Score:5, Informative)
A company that runs on a subscription-based business model would *benefit* from lock-in (to keep subscriptions going), but it doesn't have to do it. Magazines don't lock you in, neither do websites with subscription-based access (e.g. IGN, or newspapers), etc. You're always free to cancel and subcribe to something else if you wish.
Parent
Re: (Score:2)
Re: (Score:3, Insightful)
Now, granted, that's unlikely to be the case. However, it is the inability to move your data to a competing system which creates the lock-in. The subscription aspect has noth
Re: (Score:2)
Re:As in... (Score:5, Insightful)
Not everyone who wants a free market is doing it for the evil reasons you paint, and not everyone who doesn't want the programs you mention is a greedy bastard who wants to be better than poor people.
Parent
Re:Let me guess (Score:5, Funny)
Parent
Re:Let me guess (Score:5, Funny)
Parent
Re:Monopoly is the goal of capitalism (Score:4, Interesting)
Parent
Re: (Score:3, Insightful)
Another contradiction of capitalism that is an observation in Marxist theory is the desire of an individual firm to pay its employees as little as possible, but that depends on well-paid consumers having enough money to buy their products.
All that is is negative feedback. If you want to create a system capable of optimizing itself to changing conditions without a very complicated model and detailed control system (with attendant long, involved tuning process), be it an economy or a simple industrial pr
Re: (Score:3, Insightful)
What is termed "contradictions" here is merely conflicting interests. One of the nice properties of a market system is the ability to resolve these conflicts of interest via the market.
Capitalism doesn't really solve the "low wage" vs "high consumer spending" contradiction it usually tries to defer the problem (much like the way US communities defer maintennce) by outsourcing the "low wage" to a country where everyone is poor and not counted on to spend the company's products and assuming that thier will be "high wage" buyers from somewhere else to be it's market. The inevitable problems arise when everyone has outsourced the same way and there simply isn't anyone left in the "high