Offbeat

Science

People like convenience more than privacy – so no, blockchain will not 'decentralise the web'

It's our fault the Facebooks and Googles run everything


Comment In the same way it has become de rigueur to slag off Facebook for its many privacy sins while billions still dump their data into the service, it's also pretty trendy to pretend that blockchain, a digital ledger that records transactions publicly and permanently, offers answers to a new and improved decentralised web that leaves individuals, not Facebook, in charge of their data.

It is complete and utter rubbish.

It's not that a blockchain-based web isn't possible. After all, the original web was decentralised, too, and came with the privacy guarantees that blockchain-based options today purport to deliver. No, the problem is people.

As user interface designer Brennan Novak details, though the blockchain may solve the crypto crowd's privacy goals, it fails to offer something as secure and easy as a (yes) Facebook or Google login: "The problem exists somewhere between the barrier to entry (user-interface design, technical difficulty to set up, and overall user experience) versus the perceived value of the tool, as seen by Joe Public and Joe Amateur Techie."

Save us from ourselves, God Blockchain!

The early web was chaotic. Decentralised, yes, but chaotic. Finding one's way to new services was virtually impossible, leading to directory services (I distinctly remember buying a "yellow pages" index of all the known sites from a bookstore) and, eventually, to Google indexing the web for us so that we could use search to navigate around.

At the same time, services like Compuserve arose to give average humans a way to use the web, and services thereon. Compuserve eventually gave way to Facebook, Twitter, and (again) Google – a small corpus of companies that control much of what we see and do on the internet and make it straightforward for governments to keep a tight leash on what we do online, as Edward Snowden laid bare.

In the wake of this shockingly centralisation that now plagues our privacy and constrains choice, web revolutionaries like Tim Berners-Lee are conspiring to decentralise the web. Again.

Blockchain, in particular, has been put forward as the future of everything, from farmers selling eggs to publishers selling news. Instead of relying on servers, centrally managed blockchain depends upon "a peer-to-peer network built on a community of users", Adam Rowe writes. In this world, the "internet-connected devices would host the internet, not a group of more high-powered servers". This architecture theoretically makes the internet harder to hack or control since a website or one's data is strewn across a number of different devices.

It also shifts responsibility for the system to those individual nodes. To us, as it were. And that's where the problems start.

Technology hurdles to overcome

As much as blockchain advocates want us to believe it's our decentralised saviour, there are serious technical impediments. As Bluzelle Networks CEO Pavel Bains styles it: "The immutability of the data on the blockchain is one of the key dynamics at play here. While never removing or changing data has many positive aspects to it, it also poses a serious issue when you consider how it works within important regulatory frameworks."

That's the point! I hear you scream, but there is the world we live in, and the world blockchain revolutionaries want. I'm not sure the latter is demonstrably better.

Take GDPR, for example, the European Union's new rule on data protection. Under GDPR, an individual can ask that you remove their data from your systems. There's been much discussion, however, about how that would be impossible in blockchain. According to the theory, you cannot remove data – at least not easily – because the nature of the beast is such that follow-on transactions might rely on it. Remove the data and you create a blockchain-defeating fork.

A potential problem here comes in the way the blockchain stores data, which is seen as a virtue by privacy advocates, but that not only puts a crimp on corporate responsibility but could also introduce all sorts of inefficiencies. As Bains goes on: "In new decentralized file storage services [files are often]... broken up into chunks with the divisions made at arbitrary locations, demonstrating little regard for the data in the file.

"Trying to access data when the underlying storage mechanism does not understand the nature of it is inefficient and likely to be error prone. The reality is that, to read a simple mailing address from a relatively modest 10GB file on a storage service like IPFS would require the entire file to be downloaded and then searched for the relevant information. Even at download speeds of 1GB per second, it would take 80 seconds every time the file is accessed."

Safe? Probably. Annoying? Absolutely.

In a paper (PDF) written primarily by Stanford researchers, other, related issues are held out:

An architecture without a single point of data aggregation, management and control has several technical disadvantages. First is functionality: there are several types of computations that are hard or impossible without a unified view of the data. Detection of fraud and spam, search, collaborative filtering, identification of trending topics and other types of analytics are all examples.

Decentralized systems also suffer from inherently higher network unreliability, resulting in a tradeoff between consistency and availability (formalized as the CAP theorem); they may also be slower from the user’s point of view. The need for synchronized clocks and minimizing data duplication are other challenges.

And then there is the problem that a decentralised blockchain may not only be "crappy technology", as Kai Stinchcombe opines, but also "a bad vision for the future". As he notes: "It's true that tampering with data stored on a blockchain is hard, but it's false that blockchain is a good way to create data that has integrity." Indeed, the problem is that so-called trustless systems like the blockchain don't remove the need to check transactions; rather, they transfer that burden to the people least able to do so: us.

For example, in that blockchain peer-to-peer utopia of people selling things to each other without intermediaries, who's to say that the person or company on the other end of the transaction hasn't "hidden a recursion bug in their version to drain your Ethereum wallet of all your life savings", as Stinchcombe describes. In such a world, "it's not trustless," he continues, as "you're trusting in the software (and your ability to defend yourself in a software-driven world), instead of trusting other people."

This sounds nice for developers (maybe). It sounds terrible for everyone else.

And even for developers, it's not that brilliant. Why? Because no matter how good you are with code, someone else is better, and far less honest. Remember the Decentralized Autonomous Organization and its raising of $150m in cryptocurrency? As Stinchcombe points out: "The most heavily scrutinized smart contract in history had a small bug that nobody noticed – that is, until someone did notice it, and used it to steal $50m dollars. If cryptocurrency enthusiasts putting together a $150m investment fund can't properly audit the software, how confident are you" in your own ability to defend yourself in a decentralised world of software might making right?

The enemy is us

Of course, the primary problems with decentralisation aren't technical, just as the primary solutions to our privacy and security issues aren't technical, either.

The major problem with all this blockchain hype is that it completely mistakes the problem. In a summary of the Decentralized Web Conference, for example, it was reasoned that: "If people adapted the so-called ledger system by which digital currencies are used, a musician might potentially be able to sell records without intermediaries like Apple's iTunes.

"News sites might be able to have a system of micropayments for reading a single article, instead of counting on web ads for money. Such transactions might be more secure and more private with the blockchain, but that doesn't mean they'd be easier. iTunes, for example, makes discovery of music easier. Centralisation is a feature in this case, not a bug."

Therein lies the problem: people.

Web daddy Tim Berners-Lee pegs this perfectly: "The web is already decentralized. The problem is the dominance of one search engine, one big social network, one Twitter for microblogging. We don't have a technology problem, we have a social problem."

Put less politely nearly a decade ago, Larry Dignan said: "We're all Google-tethered zombies who go about life without a hoot for privacy."

In other words, we value convenience (and, yes, centralisation) over privacy and security. We may say we don't, but our actions belie our statements.

And as The Reg's Andrew Orlowski has pointed out: Google has "the power to identify the location of almost every individual instantly ... the power totalitarians dream about. The pertinent question is whether anyone should have so much power."

Are we doomed to live out our lives as Facebook's digital sheep, mindlessly dumping personal data into its highly centralised treasure trove? Definitely maybe.

Until we care enough about our privacy to unplug from centralised services that misuse it, no amount of technological engineering will change our fate. Ultimately, we need more social engineering, not infrastructure engineering. The problem isn't Facebook. The problem is us. ®

Send us news
43 Comments
Get our Weekly newsletter

You've got it down Pat: Intel boss says 2020 was so strong, a 20% drop in data center sales now is to be expected

Server chip business doldrums blamed on 'digestion'

Intel on Thursday reported first-quarter 2021 revenue of $19.7bn, which was better than analysts expected though not enough to prevent Chipzilla's share price slipping, the stock closed down 1.77 per cent and slipped still further in after-hours trading.

Analysts on average had been expecting a mere $17.5bn. That translates to GAAP earnings-per-share of $0.82 and non-GAAP EPS of $1.39, which came in $0.29 higher than company guidance at the start of the year.

Some of the market disappointment may be attributable to Intel's Q2 2021 EPS guidance of $1.05, which is less than the average anticipated figure of $1.09. Profits falling 41 per cent in Q1 on the back of weak data center demand was also not a good look.

Continue reading

If you have a QNAP NAS, stop what you're doing right now and install latest updates. Do it before Qlocker gets you

Storage box maker puts customers on red alert after outbreak in ransomware infections

QNAP has urged its customers to install and run its latest firmware and malware removal tools on their NAS boxes amid a surge in ransomware infections.

Two file-scrambling nasties, Qlocker and eCh0raix, are said to be tearing through vulnerable QNAP storage equipment, encrypting data and demanding ransoms to restore the information.

In response, QNAP said on Thursday users should do the following to avoid falling victim:

Continue reading

Exam-monitoring biz Proctorio tried to silence a critic using copyright law. Now EFF sues to put an end to this tactic

Tweets linking to source code were fair use, say digital-rights warriors

The Electronic Frontier Foundation on Wednesday sued Proctorio, a maker of academic surveillance software, to obtain judgement that a Miami University student's tweets linking to portions of Proctorio source code on Pastebin do not violate copyright law.

Proctorio in November last year had tweets from computer science student Erik Johnson removed from Twitter using a Digital Millennium Copyright Act (DMCA) takedown request, based on the company's claim that his posts violated its intellectual property rights. Twitter subsequently restored the tweets citing Proctorio's incomplete takedown request but the Pastebin code samples remain inaccessible.

Johnson has been critical of Proctorio, claiming that its invigilation or monitoring software violates students' privacy. The EFF argues that Proctorio has been trying to silence critics through the misapplication of copyright law.

Continue reading

US aviation regulator warns of mid-air collision risk if Garmin TCAS boxes are not updated

Software fixes available, says FAA

American aviation regulators have ordered private jet operators to install software updates for Garmin collision avoidance units after multiple reports of false alarms – raising the risk of a mid-air crash.

The affected Garmin products, its GTS 8000 series, generated seven false Traffic Collision Avoidance System (TCAS) warnings, said the US Federal Aviation Administration (FAA) in a formal Airworthiness Directive (AD) published [PDF] earlier this month.

GTS 8000 processing units, said the FAA, are known to be installed in a range of posh private jets including Cessna Citations, Learjet 45s and Embraer Phenoms – as well as the decidedly unsexy Shorts 360 passenger/cargo hauler.

Continue reading

Canonical and Microsoft get cosier with Active Directory integration in Ubuntu 21.04

SQL Server optimisations on way too, but 'Hirsute Hippo' not an LTS release so take-up may be tepid

Canonical's love-in with Microsoft has continued apace with the arrival of Ubuntu 21.04, replete with Active Directory integration. Optimisations for Microsoft's SQL Server are also inbound.

As if to ram the point home, Canonical CEO Mark Shuttleworth said: "Native Active Directory integration and certified Microsoft SQL Server on Ubuntu are top priorities for our enterprise customers."

What those beloved enterprises will make of something called "Hirsute Hippo" is anyone's guess and, since 21.04 is not a Long Term Support (LTS) emission, we're not sure how many corporates will be lining up. Last year's 20.04 LTS will likely reign supreme until next year's 22.04 emerges.

Continue reading

Adobe shareholders sign-off on exec raises, with CEO Shantanu Narayen winning a plush $7m pay rise

Once again, the cloud makes it rain

Adobe shareholders have approved an executive compensation package that handed CEO Shantanu Narayen a $7m pay bump during fiscal 2020, according to SEC documents.

The non-binding (and retrospective) vote was necessitated by the 2010 Dodd-Frank Act, which reformed financial regulation on a federal level, and required publicly traded companies to permit shareholders to periodically vote on executive compensation levels.

In total, Narayen earned $45.9m in 2020, up from $39.1m the previous year. Although the exec's base pay remained unchanged at $1m, he nonetheless enjoyed significant bumps on the amount of stock awarded as well as in performance-based cash bonuses.

Continue reading

Greener Windows? Microsoft previews EcoQoS and Task Manager Eco Mode for would-be power-sipping devs

Noble aim to curb energy-hungry apps, but needs willing souls to trade performance for efficiency

Microsoft is previewing a new Windows developer feature called EcoQoS for reducing power consumption, as well as adding Eco Mode to Task Manager.

As such, Microsoft has requested developers use an API, where appropriate, that asks Windows to trade performance for efficiency. According to program manager Raymond Li, the new Quality of Service (QoS) level means "higher clock speeds provide higher performance but with exponentially higher power consumption."

Essentially, an application can achieve the same work more efficiently by running slower. The API requires knowledge of the hardware and initial tuning will support Intel 10th and 11th generation mobile processors, AMD Ryzen 5000 mobile processors, and Qualcomm processors. Li said that support for desktop PCs will come later.

Continue reading

Qualtrics posts revenue, subscription rise after leaving SAP's bosom

Plus: UiPath and Teradata give investors reason for cheer. Yes, plenty of the wrong people happy on a Thursday in lockdown

Former SAP biz Qualtrics has beat expectations by posting a substantial revenue and subscriptions rise amongst three bits of upbeat tech-stock news that indicate fair winds for the market, putting smug smiles on the faces of investors.

The survey-Monkey-with-knobs-on company has posted total revenue of $238.6m for calendar Q1, up 36 per cent year-on-year. Subscriptions were up to 20,370 from 13,716.

Qualtrics, which was founded in 2002 with a vision for “experience management”, made an operating loss of $196.5m in the quarter, compared with a loss of £36.9m a year earlier, chalking most of that up to the cash settlement of the stock-based payment liabilities.

Continue reading

Origami... in spaaaaace: Inflatable folded objects discovery brings new meaning to blowing up buildings

Space-saving structures could work well in 'space missions'

An applied maths professor and her team have dreamed up inflatable origami structures they say could save time and energy in erecting emergency shelters, such as those vital to refugee camps.

Taking inspiration from the ancient Japanese paper-folding art, the team have designed and produced a structure that expands from a flat structure into a 3D construction and locks into place when pumped full of fluid, most likely air, according to a paper in Nature this week.

Katia Bertoldi, professor of applied mechanics at Harvard University, and her team showed a tent-like shelter of 2.5m × 2.6m × 2.6m in size can be produced from a folded form of 1.0m × 2.0m × 0.25m and be held in shape automatically with internal hinges without the need for continuous inflation. Applying a vacuum can then collapse the structure when necessary (watch the video for a demonstration).

Continue reading

MI5 wants to shed its cocktail-guzzling posho image – so it's opened an Instagram account

Lockdown's getting to everyone – even the social media monkeys

British domestic spy agency MI5 wants to dispel the idea it is staffed by martini-quaffing layabouts who spend implausible amounts of time lounging around top-end bars and hotels. It has therefore opened an Instagram account.

News of the agency's foray into the Facebook-owned platform, which shows you heavily filtered photographs from the perspective of somebody whose world consists of estate agents' marketing photoshoots and perfume ads, came this morning as part of a recruitment drive.

MI5 chief Ken McCallum said in a statement about @mi5official: "You can insert your own joke about whether we will be following you."

Continue reading

What links AMD CPU guru Jim Keller, an AI chip upstart, and SiFive? This vector-crunching 64-bit RISC-V processor

Stressing the ex in x86

Canadian AI chip startup Tenstorrent, which is headed by former top AMD engineers, has picked one of SiFive's latest RISC-V CPU designs for its unconventional machine-learning processors.

Specifically, Tenstorrent will license SiFive's Intelligence X280 processor cores to slot them into its homegrown AI training and inference chips alongside its own Tensix cores.

The X280 is a 64-bit multi-core-capable RISC-V CPU design that supports the open-source instruction set architecture's vector math extension. That extension is expected to prove useful in accelerating machine-learning applications.

Continue reading