Forgot your password?
typodupeerror
IBM Patents

IBM Seeks Patent On Digital Witch Hunts 136

Posted by Soulskill
from the everyone-sees-a-unique-version-of-this-story dept.
theodp writes "Should Mark Zuckerberg want to identify a snitching Facebook employee, Elon Musk wish to set a trap for loose-lipped Tesla employees, or Steve Jobs want to 'play Asteroid,' they'll be happy to know that a new IBM 'invention' makes it easier than ever to be paranoid. In a newly-disclosed patent application for Embedding a Unique Serial Number into the Content of an Email for Tracking Information Dispersion (phew!), Big Blue describes how it's automated the creation of Canary Traps with patent-pending software that makes ever-so-slight changes to e-mail wording to allow you to spy on the unsuspecting recipients of your e-mail."
This discussion has been archived. No new comments can be posted.

IBM Seeks Patent On Digital Witch Hunts

Comments Filter:
  • What an advance! (Score:5, Insightful)

    by WindowlessView (703773) on Friday July 24, 2009 @07:11PM (#28814817)
    Anyone get the feeling that lately technology is increasingly about chasing our technological tails rather than actually doing much of anything?
  • by girlintraining (1395911) on Friday July 24, 2009 @07:13PM (#28814841)

    Security through obscurity doesn't work. I don't know how many stupid asinine ideas like this I'll have to see before I quit this career, but I suspect the number will be higher than I care to contemplate. This is ridiculously easy to subvert -- just run it through the thesaurus algorithm a few more times. Viola, new unique copies, that don't match what they have on record.

    Next on the docket -- "Why you can read your coworkers e-mail but not the NSA's. Explorations in the bleedingly obvious."

  • by cryfreedomlove (929828) on Friday July 24, 2009 @07:18PM (#28814879)
    You should assume, while in the office, that there is a camera on you and that any content you produce on an employer provided computer will be available for inspection. That's just a simple reality these days. I keep personal information I don't want to share on my own personal computer at home.
  • finally (Score:2, Insightful)

    by Anonymous Coward on Friday July 24, 2009 @07:23PM (#28814907)

    I thought that this sort of thing was a fairly standard thing to do if you really cared about the document. (this sort of thing was describe in The Hunt for Red October, the concept isn't new, automating it _may_ be)

    I hope this sort of thing becomes common.

    it will let people track down who distributes things _without_ any need for DRM and that sort of nonsense. if you really can show that a document (mp3, video, etc) came from user X you should have a fairly straightforward case against them, and if you know that this sort of thing can be done you are not going to send out copies of things to everyone.

  • Double plus good (Score:1, Insightful)

    by Anonymous Coward on Friday July 24, 2009 @07:32PM (#28814957)

    I guess the subtleties of word choice are becoming an old-fashioned concern.

  • by SilverHatHacker (1381259) on Friday July 24, 2009 @07:34PM (#28814965)
    Everyone knows witches are made of wood.
  • by Gnavpot (708731) on Friday July 24, 2009 @07:35PM (#28814977)

    1. How can this be patent worthy? Individual changes to documents to make them traceable have been performed for years - even in anonymous questionnaires...

    2. Patented. Good. Perhaps that will prevent others from using this method. If we are really lucky, IBM won't use it either.

  • Re:Not new (Score:4, Insightful)

    by kpainter (901021) on Friday July 24, 2009 @07:39PM (#28815009)

    Each persons copy of whatever paperwork has different sets of typos, so if there are any leaks, they know exactly who it came from.

    For those that don't know, for each new 'typo', they add a few more zeros in the contract dollar amount. That is also why a government contract for armored vehicles would be Top Secret.

  • by conlaw (983784) on Friday July 24, 2009 @07:55PM (#28815117)

    The next time you send an "infelicitously worded" email, you can just blame it on IBM.

    Speaking of "infelicitously worded," did you notice that the all of the changed examples (i.e., the second through fourth) start to sound like an instruction manual that has been poorly translated into English?

  • How long . . . (Score:3, Insightful)

    by DrMrLordX (559371) on Friday July 24, 2009 @08:06PM (#28815205)
    How long will it be until Apple patents goading a supplier into assassinating employees responsible for losing sensitive product prototypes?
  • by fuzzyfuzzyfungus (1223518) on Friday July 24, 2009 @08:11PM (#28815231) Journal
    Planning for a descent into totalitarian dystopia is like making money on a stock bubble.

    A stock bubble will, sooner or later, go up in a giant pile of fake-money smoke(taking a whole lot of people's real money with it); but, until it does so, it offers the best returns in town. If you drop out too early, your returns will be secure; but pitiful. If you drop out too late, you'll get soaked.

    In your case, if you drop out early, you'll be the penniless guy living in a shack and trying to make guns out of discarded tin cans. If you drop out too late, you'll have a bunch of shiny CNC gear that you don't know how to use show up about the same time Big Brother's jackbooted minions do.

    The trick, of course, is finding the right time...
  • by Cajun Hell (725246) on Friday July 24, 2009 @08:37PM (#28815351) Homepage Journal

    just run it through the thesaurus algorithm a few more times

    But do leakers do that? Always?

    People get caught when their guard is down. People fuck up. People think, "nobody's out to get me."

    Sometimes they're wrong. Every single day, people die by that principle. They won't get mugged. They can drive home drunk and probably not crash. They can forgo the condom this time. It's true they're not guaranteed to lose. But sometimes they still do.

    You're right that it's not a general solution that you can count on, to find your opponent. But at the same time, you know plenty of damn fools will get caught by it.

    It's not security through obscurity; it's advantage through security.

  • by Dhalka226 (559740) on Friday July 24, 2009 @08:45PM (#28815409)

    In your rush to bash people for not having an infallible solution, you're making two awfully big assumptions:

    1. That they're intending this to have any effect whatsoever on people actively trying to disguise the source of the leak; and,
    2. That a solution isn't worthwhile if it doesn't survive whatever geek-haxxor workarounds you can come up with.

    This is exceptionally poor security for classified information. That's not its intent. It's poor security against people actively disguising themselves by "run[ning] it through the thesaurus algorithm a few more times." So be it.

    It's still going to catch that guy who wants to show how in the know he is and forwards it to his buddies who post it on a website, and I'm sure there are far higher incidences of that than industrial espionage or whatever it is you're maligning them for not tackling.

    I wouldn't personally implement a system like this, but the fact that it doesn't cover all potential circumstances doesn't mean it's worthless. I don't know why Slashdotters always have such a hard time grasping that.

  • by girlintraining (1395911) on Friday July 24, 2009 @08:50PM (#28815435)

    It's not security through obscurity; it's advantage through security.

    Pardon me for being a purist. But anything this easily thwarted also has no legal value, and my understanding here is that it's a punitive measure against the "leaker". If the document got leaked in the first place, chances are good the "leaker" in question can form an affirmative defense that a third party acquired the copy. Worse, if the algorithm is limited to a finite set of permutations, and anything that sticks to words and phrases is a very finite space (cryptographically speaking), the argument could be made that the document was leaked through a different source, run through the algorithm, and coincidentally matched the "signature" of the leaker's copy.

    It's completely bogus. If they want to keep data private, then use real cryptography, and validated software/hardware combinations that make the cost of extracting the data in a usable format more expensive than the data it's protecting. The military does it, as to certain businesses, and intelligence agencies around the world. The technology is there, it works, and it's real security.

  • Why is this new ? (Score:3, Insightful)

    by mbone (558574) on Friday July 24, 2009 @09:00PM (#28815469)

    This has been used for years - for example, back in Maggie Thatcher's day they caught a mole this way. What, exactly, is new about this ? That it's in software ?

  • by techno-vampire (666512) on Friday July 24, 2009 @09:32PM (#28815635) Homepage
    the argument could be made that the document was leaked through a different source, run through the algorithm, and coincidentally matched the "signature" of the leaker's copy.

    It's not enough to show that there's another possible explanation, you have to show that your story is just as reasonable as the DA's. Your lawyer has to raise reasonable doubt in the minds of the jury to get them to vote not guilty. And, do you really think the jury's going to find your claim reasonable? I sure don't!

  • by darkmeridian (119044) <william@chuang.gmail@com> on Friday July 24, 2009 @09:49PM (#28815711) Homepage

    That's what the digital witches want you to believe.

  • by Anonymous Coward on Saturday July 25, 2009 @12:33AM (#28816403)

    What's new is that it's done automatically, which presumably means it can be done on a regular basis instead of only when an investigation is already in process

  • Re:Not new (Score:3, Insightful)

    by Ralph Spoilsport (673134) on Saturday July 25, 2009 @02:01AM (#28816631) Journal
    So? You just copy and paste it into Word and fix all the typos.

    Then ,whoever has the "typo free" version gets blamed.

    What a dumb way to do things.

  • by maxwell demon (590494) on Saturday July 25, 2009 @03:31AM (#28816931) Journal

    Well, they'll stop blindly using it the first time it creates a slight, but disastrous modification of the meaning.

"Out of register space (ugh)" -- vi

Working...