Download - Future of the Internet – And how to stop it.

Notes to Pages 51–54 265
84. See Paul Ohm, The Myth of the Superuser, 41 U. C. DAVIS L. REV. (forthcoming 2008).
85. Susannah Fox et al., The Future of the Internet: In a Survey, Technology Experts and
Scholars Evaluate Where the Network Is Headed in the Next Few Years, at i (Jan. 9,
2005), available at http://www.pewinternet.org/PPF/r/145/report_display.asp.
86. See Scott Berinato, The Future of Security, COMPUTERWORLD, Dec. 30, 2003, http://www
.computerworld.com/printthis/2003/0,4814,88646,00.html (attributing the first use
of “digital Pearl Harbor” to D. James Bidzos in 1991, later taken up by U.S. cybersecurity
czar Richard Clarke); see also David Farber, Balancing Security and Liberty, 5 IEEE
INTERNET COMPUTING 96 (2001) (discussing the possibility of a terrorist attack over the
Internet in tandem with conventional terrorist attacks).
87. Mike Reiter & Pankaj Rohatgi, Homeland Security, 8 IEEE INTERNET COMPUTING 16,
(2004), available at http://csdl2.computer.org/persagen/DLAbsToc.jspresourcePath
/dl/mags/ic/&toccomp/mags/ic/2004/06/w6toc.xml&DOI10.1109/MIC
.2004.62; see also Drew Clark, Computer Security Officials Discount Chances of ‘Digital
Pearl Harbor,’ NAT’L J. TECH. DAILY, June 3, 2003, available at www.govexec.com/
dailyfed/0603/060303td2.htm (reporting on experts’ discounting of Internet viruses as
a mode of terrorism, while acknowledging some of the risks of more run-of-the-mill security
compromises).
88. E-mail from Christina Olson, Project Manager, StopBadware.org, to Jonathan Zittrain
(Mar. 16, 2007, 22:12:20 EDT) (on file with the author, who is a principal investigator
of the StopBadware project).
89. Niels Provos et al., The Ghost in the Browser (2007), http://www.usenix.org/events/
hotbots07/tech/full_papers/provos/provos.pdf.
90. The sheer magnitude of phishing activities suggests it is effective at seizing sensitive information.
As one study monitoring a widely used antispam system reported, “In 2006
Symantec’s Brightmail system blocked 2,848,531,611 phishing emails. Of these,
323,725 were unique phishing messages. On average, therefore, in 2006 there were 7.8
million blocked phishing attempts and 887 unique phishing messages each day.” Zulfikar
Ramzan & Candid Wüest, Phishing Attacks: Analyzing Trends in 2006 (2007),
www.ceas.cc/2007/papers/paper-34.pdf (emphasis added).
91. Some early versions of two-factor authentication, such as identifying a preselected picture
on a bank’s Web site customized to the customer, are in fact not very secure. See Jim
Youll, Why SiteKey Can’t Save You (Aug. 24, 2006), http://www.cr-labs.com/publications
/WhySiteKey-20060824.pdf. More promising versions require new hardware such as
USB dongles or biometric readers on PCs—a fingerprint or retina scanner that can be
used in addition to a password to authenticate oneself to a bank. It remains difficult to
unambiguously authenticate the bank to the user.
92. StopBadware.org, Report on Jessica Simpson Screensaver, http://www.stopbadware
.org/reports/reportdisplayreportnamejessica (last visited June 1, 2007).
93. StopBadware.org, Report on FunCade, http://www.stopbadware.org/reports/reportdisplayreportnamefuncade
(last visited June 1, 2007). For many programs, including
FunCade and KaZaA, uninstalling the main program does not uninstall all the undesirable
software originally installed along with it. Users must be knowledgeable enough to
identify and remove the software manually.