Rand Report Says Geospatial Data Not Big Threat 167
scupper writes "An article in Federal Computer Week came out Monday that announced The Rand Corporation has published a report (sponsored by the National Geospatial-Intelligence Agency) concerning the threat that publicly available geospatial data on US Government web sites might pose in the hands of terrorists that 'found that less than one percent of the 629 federal data sets they studied appeared to have notable value to would-be attackers', according to the report titled: Mapping the Risks:Assessing the Homeland Security Implications of Publicly Available Geospatial Information. A curious 'finding' from page xxv of the summary not mentioned in the article states: 'However, we cannot conclude that publicly accessible federal geospatial information provides no special benefit to the attacker. Neither can we conclude that it would benefit the attacker.' The release of this report reminded me strangly of the Washington Post news story about a George Mason University graduate student, whose dissertation mapped critical fiber optic network infrastructure."
Rand?? As in the Rand Corporation?? (Score:4, Funny)
Holy Shit!!! We're through the looking glass here, people..
Re:Rand?? As in the Rand Corporation?? (Score:3, Informative)
Possibilities vs. Probabilities... (Score:5, Insightful)
In this case, we're falling for it. We're having an unrational fear of the unknown. We're worried that in everything we publish, there's a terrorist reading it and trying to use it to their advantage.
On 9-11-01, they did something we didn't expect. They hijacked planes and brought their on minimally trained pilots to fly them into buildings. We didn't think that was likely to happen... at that time, standard policy during a hijacking was to let the hijacker into the cockpit. We're never going to make that mistake again.
But think about that, in all of our past dealings with hijackers, we assumed the hijackers wanted to live, and therefore would not crash the plane, nevermind know how to crash the plane into something else. In every case prior to 9-11-01, that was a correct decision. In most cases, we were able to get a majority of the passengers and crew members off the plane alive.
If a hijacker were to take over a plane today, there'd be much more opposition given to them by the passengers and flight crews. However, if a hijacking team were ever to succeed... now the default response would not be to attempt to reason with them but instead shoot the plane down. 100% of the innocent passengers would be lost, but we would be relieved that the plane didn't crash into a building.
Hey, wait a second... we're playing the game not to get the maximum lives returned, but instead to avoid the worst-case senario that has only struck once. That's somewhat a broken logic.
And that's really the culture that's taking over the nation. We've gotten so risk-adverse at doing things that when there's a possiblity of information being used negatively, we're ignoring all of the more-likely probablities that the infromation could also be used for good causes that we'd want to support. It's easier to point at the fear of what could go wrong than the dream of what could go right.
When a player is at a casino, the lure of the possibilty of a big jackpot convinces them to play games where the probabity of coming out positive just isn't there. Again, it's a case of possibility of an positve extreme case causing the ignorance of a probablity of a negative result.
Somehow, the concept of multiplying odds by result values is something average people just can't comprehend because emotions get in the way of cold logic... we act based on the possible emotional outcome rather than more likely outcome that logic would lead us to look for.
Re:Possibilities vs. Probabilities... (Score:2, Insightful)
Have they considered the chance of a coordinated poisoning of all the US drinking water sources with the Ebola virus (or another virus that would survive the filtration process)?
I know that here in Australia that there are thousands of kilometres of exposed water pipes (Perth to Kalgoorlie is a good example) that can easily be accessed. With the right tools you could tap into the
Re:Possibilities vs. Probabilities... (Score:4, Insightful)
We're basically operating on the theory that public water supplies are safe even from the intentional attempt to poison them because of the theory of dilution. Since the average person's drinking water comes from more than one source, and any one source would take a huge-huge megadose of the toxin (that'd most likely be noticed) in order to survive being diluted. It's highly unlikely a fatal dose would make it into anybody's single glass of water before the alert got out.
Re:Possibilities vs. Probabilities... (Score:1)
Basically, I think we would be stuffed for a few weeks...
Re:Possibilities vs. Probabilities... (Score:2)
Re:Possibilities vs. Probabilities... (Score:2, Insightful)
Nobody need die, just the continual fear of something happening is more crippling to a population.
Re:Possibilities vs. Probabilities... (Score:2)
Why do you assume that the goal is to kill? Imagine if you could give the entire city of Chicago diarrhea for two weeks.
Cryptosporidiumparvum [t-online.de] is something that can be grown near the site of deployment. No need to go about sneaking huge volumes of it across the country.
Most of its victims make it not too much worse for the wear, but just think. If they could deliver it to a city like Chicago(I
Re:Possibilities vs. Probabilities... (Score:2)
Look, don't beat around the bush. If you're going to make a fart joke, just say it.
Re:Possibilities vs. Probabilities... (Score:2)
Re:Possibilities vs. Probabilities... (Score:1)
Doctor: "You should really try to drink at least 5 gallons of water a day with all the coffee you have been drinking!"
Me: "I'm trying doc, but the dragons are guarding the rainbow that leads to the well, and I can't feel my legs. Shhhh, did you hear that?"
Re:Possibilities vs. Probabilities... (Score:2)
Mod points go to Bruce Schneier - "Beyond Fear" (Score:3, Informative)
The above post, while the truth, is basically a summary of the first few chapters of Bruce Schneier's book, "Beyond Fear".
Re:Possibilities vs. Probabilities... (Score:3, Insightful)
Hey, wait a second... we're playing the game not to get the maximum lives returned, but instead to avoid the worst-case senario that has only struck once. That's somewhat a broken logic.
That all depends on how you gather the data set. How many hijackings of American planes since 2000 have resulted in the hijackers letting any/all of the hostages live?
We can't take the motive
Re:Possibilities vs. Probabilities... (Score:2)
Funny. When you say it, you get +1 Insightful.
When Congress says it, everybody freaks out.
And I can't decide which is worse.
Re:Possibilities vs. Probabilities... (Score:2)
Funny. When you say it, you get +1 Insightful.
When Congress says it, everybody freaks out.
Not quite. When congress says that hackers/crackers ARE terrorists, everyone freaks out. It's like saying that somebody manufacturing excstacy works like a chemist, vs saying chemists are drug manufacturers. Its not the same relationship, and the "is like" relationship as usually used in English isn't reflexive anyway.
Re:Possibilities vs. Probabilities... (Score:2)
Re:Possibilities vs. Probabilities... (Score:2)
Probably because it was taking an insane risk. If you don't care about takeoff, landing, or survival, and you're willing to wait until you can see the city you're aiming at before taking the controls, you can learn everything you need to know about flying from a book in about ten minutes. Some days I can't help thinking that these guys *
Re:Possibilities vs. Probabilities... (Score:2)
Security should be robust even if the attacker knows everything there is to know about the system.
Simon.
Re:Possibilities vs. Probabilities... (Score:3, Insightful)
Why do you feel repeating a line you read somewhere makes it correct in all scenarios? Obscurity has it's place in security. It can do a lot to improve security. One shouldn't *rely* on obscurity, but one shouldn't ignore it.
If you have a safe to keep your expensive things in, would you hide it in your house or keep it on the front porch?
Re:Possibilities vs. Probabilities... (Score:1)
Re:Possibilities vs. Probabilities... (Score:2)
Re:Possibilities vs. Probabilities... (Score:1)
Re:Possibilities vs. Probabilities... (Score:2)
Re:Possibilities vs. Probabilities... (Score:3, Insightful)
On the other hand, since the hijacking-a-plane-to-use-as-a-weapon was so spectacularly successful the first time around, you're much more likely to see it attempted again. A pretty good counterargument is that passengers wouldn't sit still for such a hijacking any more--then you get into questions of how well-armed the te
Re:Possibilities vs. Probabilities... (Score:2)
Bzzt! Wrong.
They can't comprehend it for a totally different reason - most of them being retarded and illiterate morons. Seriously, I would estimate that just a few percent of American adults understand what a weighted average is. I don't have a direct evidence for that, but consider that according to National Science Foundation only 9% of 2,000 peopl
I think it still is a threat (Score:1, Troll)
Re:I think it still is a threat (Score:3, Insightful)
It's the math, stupid! (Score:4, Funny)
Less than one percent of 629 is still 6. Granted, six isn't a large number when one considers it's relative relation, but it's still a number greater than zero.
(I'm not being paranoid, right?)
Re:It's the math, stupid! (Score:2)
(I'm not being paranoid, right?)
No, but you forgot to computer and discount for the number of reports in the 629 that if published could aid various anti-terror intersts in preventing attacks. If the number of attacks prevented by publication outnumbers the number aided by publication, we the people come out ahead in the long run.
This is not a terrorist problem (Score:5, Insightful)
Not long ago, you could finally get information from the government without spending several days and gobs of cash. It was brought to you via an innovative system called the Internet. If you were living next to a toxic waste dump, you could do a search on the 'web' and literally dozens of published reports were at your finger tips. At long last, public interest groups and individuals could see the reports the government was publishing about these sites, but were largely unavailable unless you lived near a library that qualified as a federal repository.
In short, there were damn few access points for information about what the government was doing with your money and the Internet made the barriers disappear.
Along came 911 and now everything is back to the old days. I publish scads of documents about cleaning up nuclear waste dumps and no one will see them unless they can convince the government that they are not a threat. You can pump your arms all over the place and tell me how "newclear stuff should be off the web 'cause its dangerous", but I'm not buying it. The stuff we are not allowed to discuss is so difficult to extract that even the US government is wondering what they are going to do with it. How the hell do you clean tritium out of groundwater?
What my colleages and I report on is soooo not a terrorist target that it is laughable. But the information is in geospatial coverages that are now considered off-limits (official use only) to the public. The 911 tragedy has been a coup for those who want to obstruct the public's access to information related to their own health and safety.
The government just uses terrorism as an excuse.
Re:This is not a terrorist problem (Score:2)
The government rarely thinks for itself. Special Interests on both sides of the asile are using terrorism as an excuse to pass laws that they always wanted to pass... not because it prevents terror, but because it secures their interest's goals.
Everybody's doing it. If you're a lobbiest and you can't explain how 9-11-01 is a reason why your bill-of-the-moment is needed, then you're in the wrong industry.
Re:This is not a terrorist problem (Score:3, Insightful)
Too true. If I hear the phrase "Now More Than Ever" one more time, I'm going to hurl.
Re:This is not a terrorist problem (Score:2)
Most/many of the free US Gov't datasets that were online have been taken offline for more same-old reasons. Politics & corporate lobbying.
One part "if someone can sell you a CD with gov't data on it, and their big parent company can make campaign contributions, we won't give it away for free anymore"; one part bandwidth costs (tiny fraction of data collection costs WRT satellite data for instance); and one part ideology driven governance (see rant below).
All this great data
Re:This is not a terrorist problem (Score:2)
Finally somebody who gets it! Terrorism may be some threat, but a government saying "Boo" every day is a much bigger threat.
I live in the area of Huntsville, Alabama. This city besides being home to much of Uncle Sam's "Whizz Bang Gun" development and management is also home to a substantial part of the US Space Effort.
Huntsville, Alabama is the home to a monument that tells just how much a lie "Homeland Security" and all this secrecy stuff is. The monument one block east of Monroe and Green Street int
Public/Private? (Score:5, Insightful)
Re:Public/Private? (Score:2)
My background involves working with GeoSpatial data and the types of datasets available on the web is really useful to the public. Data from USGS and NGA alone provide quite a bit of information on the US and the rest of the world. Anyone with a GIS application can perform spatial queries to locate ideal targets based
infrastructure (Score:4, Informative)
He who protects everything... (Score:5, Insightful)
If we spread our attention and resources too thinly, though, any target becomes accessible.
Terrorists have to have large-scale loss of life to generate the headlines they need for fundraising. I wouldn't worry about infrastructure (even vital infrastructure), since it's too hard to explain to uneducated fundamentalists why snarling up internet traffic is a victory for Allah.
Hard to explain (Score:2, Troll)
As difficult as explaining to the equally uneducated fundamentalist Americans that bombing the fuck out of people then complaining when some of them retaliate is hypocritical?
Re:Hard to explain (Score:1)
No amount of European-style cowering will make these people go away. Did that work after the embassy bombings in Africa? Did it work after the attack on the US
Re:Hard to explain (Score:2)
Re:Hard to explain (Score:2)
Re:He who protects everything... (Score:2)
Re:He who protects everything... (Score:2)
Re:He who protects everything... (Score:2)
Re:He who protects everything... (Score:2)
Re:He who protects everything... (Score:1)
If I dont refresh slashdot at least once every 3 hours I WILL die.
Hide those servers! (Score:1)
RAND, other stuff (Score:5, Insightful)
Fundamentally, I think they're right on this (and privatizing schools
It's also pretty unlikely that the punks will get their hands on a launchable ICBM or suchlike.
That being said, I'm trying to think of why I would need GPS coords for cabinet offices or suchlike. It's a pretty limited use, I'm not sure it would be worth doing, especially with My Tax Dollars (I know, pennies, but it's the principle).
Obviously if you have a sensitive (NSA, Weather mountain, Federal Brocolli Pricing Board, etc) site, don't put GPS coords on your website. Duh.
Re:RAND, other stuff (Score:1)
Re:RAND, other stuff (Score:2)
Right wing means whatever you want it to mean, which is why right/left is basically meaningless. In a sense I was just trying to be more specific.
As an example, most "Right Wingers" consider Libertarians to be "left", most "Left Wingers" consider Libertarians to be "right". Libertaians are not between the two. There's more than one political scale.
The "Far Right" is Definintely Not establishment, look to the John Birchers and protestant fundamentalists for examples.
And, at its core, the Establishment doe
Actually, it's common sense... (Score:5, Insightful)
"We find that this information isn't really important to terrorists"
>boom
"oops. uh... guess we were wrong..."
But after reading the article it sounds like they're making a perfectly valid statement. Sure, some information like large military bases off the beaten path shouldn't have their details published. But it makes no sense to remove maps of public utility Nuclear Reactors because that information is commonly available from about a dozen other sources. Like, street maps! So removing it from the federal records doesn't make it "secure". Or from the example in the article where the feds removed offshore oil sites from their public records. Turns out Scuba diving maps sold to divers were showing where those were ANYWAY. Rand is calling for the government to redefine what needs to be "secret" and it it does, work with local companies to have all sources removed.
Where is planet Kamino, anyway?
Say what? (Score:1)
Data Sets?!? (Score:4, Interesting)
Now, if they get their hands on a data set by the Parks Commisioner, indicating locations of forests with attributes relating to the trees, I highly doubt that would be threatening.
So a 1% possibility that a data set may be useful to terrorists is subjective, as it depends on their objective.
In the right hands, any data set can potentialy enhance the ability of terrorists. And of course, don't forget. Private companies are the ones that sell most of the data to the government (see US Census for example). Why bother going after government publication of data and not control to whom a company sells the data?
As for the fiber optic map... It was useful not because you can cut cables (redundancy does exist), but because you know the ends of cables are to where corporations are (that is why the dissertation did get credit in the first place). Also, you know that where the biggest bandwidth cable go to is a prime target, as it promises a network depended coproration/entity that could be damaged by loss of communications.
Re:Data Sets?!? (Score:2)
Noone is suggesting that all geo data should be taken offline. FEMA, for instance, isn't worried in the least about flood plain data. They are, however, slightly worried about critical infrastructure data such as highway bridges (silly), water pipelines, emergency care facilities, nuclear power facilities, and so on.
The fibre optic map was useful because it put glaring spotlights on massive concentrations of cables: Where to target if you wanted to inflict
Re:Data Sets?!? (Score:1)
Mapquest.com and MS Streets use the public domain data and resell it. So does every other mapping company.
Re:Data Sets?!? (Score:2)
These companies provide value added datasets based on TIGER data. TIGER data itself tends to be attribute rich, but geospatially generalized/inaccurate for most usages. Companies like MapQuest, Rand McNally, etc... often have arrangements with local governments to obtain more accurate information based on aerial photos, cadastral datasets (tax maps), site plans (future roads), e911 maps, etc.... T
Re:Data Sets?!? (Score:1)
I refer you to the Department of Commerce publication CB96-194 of 1996, which announces that the US Census Bureau would acquire data from GDT Inc. in a long term cooperation effort to have an up-to-date TIGER database.
Apparently,
Data Sets are bought from private companies (Score:1)
The question from where GDT Inc. acquired their data is further hidden, appart from the
Fibreoptic network story got me thinking (Score:3, Interesting)
I also remember several months later, massive power grid failures in the US and UK among others, all within a reasonably short timeframe.
I thought even back then, while the two aren't directly related, that there was a possibility that someone had figured out the electrical grid chokepoints sufficiently to do a test run of sorts, to see if it worked or not, possibly inspired by the fibreoptic story.
My point is this - if you were a terrorist and wanted to hit hard again, why not follow standard military doctrine and cut off the enemy's power grid first? After all, we do it, so why wouldn't they do it as well? In all the confusion, that's when you conduct your real strike.
Thankfully, since the information is public, we too can look for potential chokepoints and demand of governments that they fix them or mitigate the risk by building in redundancy. If we don't keep this information public, we will not be able to hold governments accountable when they don't make the effort and the system fails when it's most needed. And if you can no longer hold your government accountable when they screw up, because you don't have access to the information you need to do it, then you are no longer in control, and they are ruling you, not governing on behalf of you.
This comes on the heels... (Score:1)
Creativity (Score:2, Interesting)
I'm not saying that we should keep all of this info under lock and key(among dozens of other safeguards), but we should at least make a few more independent analysies(sp?) of the threat the data poses.
The thing that I think would be alot more interesting is to take the layouts of so
Re:Creativity (Score:1)
There's this little known web site called "google" (crazy name, crazy guys) where you can type in "definition:word" and it tells you what the word means!
Amazing.
Expulsitivity (Score:2)
Space Shuttle data + free mapping software (Score:2)
http://www2.jpl.nasa.gov/srtm/ [nasa.gov]
http://grass.ibiblio.org [ibiblio.org]
STRM is new, so get the CVS version if you want access to the latest auto-load & clean scripts. View with NVIZ.
cool stuff.
Dont hold it back (Score:3, Insightful)
If the US government really cared, they wouldn't have turned of the 'selective availability' distortion that used to reduce the accuracy of common GPS units from a nice 10m accuracy down to an annoying 100m.
I think history has proven that at least so far terrorists attacking the US have preferred large symbolic targets, the kind that you can't hide, where openly available geospatial data is irrelevant.
And consider that having as much data available as possible to the public enables all kinds of value added / data mining uses to crop up that the data owners might never think of themselves. There are many business models out there working right now, feeding families.
Open free exchange and full interoperability if geospatial data is the future. It is happening now through the Open GIS Consortium, GML, and through free open source programs such as Grass, and MapServer. Good things happen when the right people have easy access to your spatial data.
Do your part! set up a MapServer WMS server today, make your spatial data available to the world yet still maintain control (the server passes out raster map layers that become part of a user's raster map, no one gets your valuable vectors)
Re:Dont hold it back (Score:2)
Good to see another GIS person on
When will thinking be outlawed??? (Score:2)
Your tax dollars ar work...
Genda
New TerraServer data "cleansed" (Score:2, Insightful)
Re:New TerraServer data "cleansed" (Score:2, Insightful)
Or, how about pulling out a USGS topo sheet from 1983 and finding the buildings the old fashioned way.
But Keyhole data is fine (Score:2)
The Keyhole viewer is very impressive. They have the whole planet available. Resolution varies; for much of the world it's low-res satellite imagery. But for most urban areas in the developed world, the imagery is quite good. The imagery is overlaid on height data, so you can get a 3D view from any angle. The height data is too coarse to show buildings.
Security through obscurity? (Score:2)
We should assume that they will find whatever is of interest to them, and that security through obscurity is bound to fail. Given that, geospatial information should be free so citizens can point out weaknesses to the government.
In terms of cost for security... I recently asked for geospatial information from my city, an
We are NOT SAFE (Score:1)
OK, OK, So what??? Well, they could have just read a USGS topo sheet to get those Lat/Long coordinates. Or they could have used any GIS package.
This is really scary to think about b/c almost every county has GIS data on their webs
Your Point? (Score:1)
So getting coordinates from some GIS software will be easier...yet I'm somehow forced to think that if someone is really determined to make an event happen, taking away that simple convenience won't stop them.
Terrorists hope to induce shock and fear in as many people as possible...I really doubt that this is going to occur by driving a bus into your Town Hall or Baptist Church.
Re:We are NOT SAFE (Score:2)
They rather go post-card shopping (Score:3, Informative)
But seriously, the (US) governments totally gets the mind-set of these people wrong. They don't download multi-gigabyte maps [nga.mil] from the net before they attack, they simply and effectively pick so-called postcard targets [google.com], because they seek to attract media attention and these targets stand for what they resent.
Most terrorists are surprisingly low-tech, but that's actually why they can be difficult to track down: if you never use Web browsers, phones and credit cards you leave few traces.
If you read the recent intelligence 'success story' where they tracked some people because they used a Swiss pre-paid mobile phone SIM-card from somewhere in Pakistan, apparently swapping mobile phones and not SIM-cards instead of the other way round, this gives you an idea of what to expect.
No surprises here (Score:2)
Re:In other news... (Score:2)
Which puts us in a messy situation... just how do we keep information away from them in a culture based on the free flow of information?
Re:In other news... (Score:1, Troll)
The quick answer is: you don't... you can't... don't try.
The question to ask instead is this: Given that terrorists have full access to information, how do we prevent them from doing anything with it?
This is the same as computer security. Give everybody the source code so that everybody has full information and is on the same level playing field. Okay, now that we al
Re:In other news... (Score:1)
It's worse than that. Instead of users with system accounts, democratic countries have this:
# useradd -g root terrorist
And permissions are lax; maybe not everyone can execute malicious shell script, but they can read all scripts used by the sys admin.
>It's a real-life game of chess.
On the country level, it's chess, but for people/victims it's jackpot - if it hits you, you're going out forever.
It's hard to restrict flow of information when on the one side peop
Re:In other news... (Score:2)
# useradd -g root terrorist"
Oh, really. Try walking into SAC headquarters without a security clearance. Wasn't there a big flap the other day about someone who only asked for a map of the service tunnels under his school?
We hire a handful of stewards to hold the root passwords for us.
Re:In other news... (Score:1)
Simple answer: elect Dubyah! No more information gets out. Just meaningless gibberish and insultingly stupid generalisations.
Re:In other news... (Score:2)
Damn straight! Unlike $POLITITION who really speaks for the people[1]! $POLITITION has been for $POPULAR_ISSUE since the beginning and will continue to fight for what's right[2]!
$POLITITION won't make alll the mistakes the other guy has[3]!
[1] The people who give him/her money that is.
[2] Since (s)he found out it was a popular issue at least.
[3] Though (s)he's bound to make all new ones.
Re:In other news... (Score:2)
Re:In other news... (Score:2)
Unfortunately, the US seems to believe in technology so strongly that they have abandoned this way of gathering information, thinking inste
Re:In other news... (Score:1)
And we are no doubt going back in the direction of more spies being used. But it takes a long time to infiltrate a paranoid organization. Especially when the other lads aren't restricted to proving your spy is a spy - suspicion is enough to get him dumped into a shallow grave somewhere.
So, what do we do in the meantime?
PS. Security through obscuri
Re:In other news... (Score:2)
This is exactly the network security model. Assuming that the bad guys have
Re:In other news... (Score:2, Interesting)
--
Watch me be decapitated! [freecache.org]
Now that's just cold.
Re:In other news... (Score:2)
Re:In other news... (Score:2)
Nick Berg's Head (779033)
But what kind of a sadistic moron do you have to be to make 'sport' of some poor guy being decapicated slowly with a knife? I can't even imagine what in the world is wrong with you (and I'm happy I can't).
You sir, are an asshole.
Re:Rand? (Score:2, Troll)
Re:Rand? (Score:2, Informative)
Libertarians aren't "FAR right" by the way, but that's off topic.
Re:Rand? (Score:1)
Re:Rand? (Score:1)
I mean, look at the success of the public education system! How could they even think about privatizing it! Think of the children...
Re:Rand? (Score:1)
Re:Rand? (Score:1)
Re:Rand? (Score:4, Interesting)
What an organization researches is very different than bias towards the establishment. RAND advocates relaxing drug policy, especially for marijuana. They were the original group who said (and with evidence) that Vietnam was a bad idea. They said this even before we got involved in any significant way. Finally, RAND recommends a moderate Islamic state for middle eastern states we "liberate," which doesn't jive with the religious right's plans. Just because RAND researches for the military doesn't mean it's obligated to make things sound good to warmongers and Republicans (are they different?). RAND is damn objective for the politically sensitive work they perform.
Re:Keep all data away from Terrorists? Really? (Score:2)
The issue isn't necesarily just the geolocation of specific buildings. Consider features that may not be visible above ground and features that represent a generalization (i.e. population densities/make-up, religious data (might be interesting to locate islamic dense areas), etc...). Part of the problem with the availability of data is that it allows analysis to be done remotely. Picture a workstation with a GIS application (see ESRI's [esri.com] website