Little Brother, Cory Doctorow [first e reader TXT] 📗

one thing to sell another is what they call a "razor blade business" -- companies like Gillette give you free razor-blade handles and then stiff you by charging you a small fortune for the blades. Printer cartridges are the worst for that -- the most expensive Champagne in the world is cheap when compared with inkjet ink, which costs all of a penny a gallon to make wholesale.

Razor-blade businesses depend on you not being able to get the "blades" from someone else. After all, if Gillette can make nine bucks on a ten-dollar replacement blade, why not start a competitor that makes only four bucks selling an identical blade: an 80 percent profit margin is the kind of thing that makes your average business-guy go all drooly and round-eyed.

So razor-blade companies like Microsoft pour a lot of effort into making it hard and/or illegal to compete with them on the blades. In Microsoft's case, every Xbox has had countermeasures to keep you from running software that was released by people who didn't pay the Microsoft blood-money for the right to sell Xbox programs.

The people I met didn't think much about this stuff. They perked up when I told them that the games were unmonitored. These days, any online game you play is filled with all kinds of unsavory sorts. First there are the pervs who try to get you to come out to some remote location so they can go all weird and Silence of the Lambs on you. Then there are the cops, who are pretending to be gullible kids so they can bust the pervs. Worst of all, though, are the monitors who spend all their time spying on our discussions and snitching on us for violating their Terms of Service, which say, no flirting, no cussing, and no "clear or masked language which insultingly refers to any aspect of sexual orientation or sexuality."

I'm no 24/7 horn-dog, but I'm a seventeen year old boy. Sex does come up in conversation every now and again. But God help you if it came up in chat while you were gaming. It was a real buzz-kill. No one monitored the ParanoidXbox games, because they weren't run by a company: they were just games that hackers had written for the hell of it.

So these game-kids loved the story. They took the discs greedily, and promised to burn copies for all of their friends -- after all, games are most fun when you're playing them with your buddies.

When I got home, I read that a group of parents were suing the school board over the surveillance cameras in the classrooms, but that they'd already lost their bid to get a preliminary injunction against them.

I don't know who came up with the name Xnet, but it stuck. You'd hear people talking about it on the Muni. Van called me up to ask me if I'd heard of it and I nearly choked once I figured out what she was talking about: the discs I'd started distributing last week had been sneakernetted and copied all the way to Oakland in the space of two weeks. It made me look over my shoulder -- like I'd broken a rule and now the DHS would come and take me away forever.

They'd been hard weeks. The BART had completely abandoned cash fares now, switching them for arphid "contactless" cards that you waved at the turnstiles to go through. They were cool and convenient, but every time I used one, I thought about how I was being tracked. Someone on Xnet posted a link to an Electronic Frontier Foundation white paper on the ways that these things could be used to track people, and the paper had tiny stories about little groups of people that had protested at the BART stations.

I used the Xnet for almost everything now. I'd set up a fake email address through the Pirate Party, a Swedish political party that hated Internet surveillance and promised to keep their mail accounts a secret from everyone, even the cops. I accessed it strictly via Xnet, hopping from one neighbor's Internet connection to the next, staying anonymous -- I hoped -- all the way to Sweden. I wasn't using w1n5ton anymore. If Benson could figure it out, anyone could. My new handle, come up with on the spur of the moment, was M1k3y, and I got a lot of email from people who heard in chat rooms and message boards that I could help them troubleshoot their Xnet configurations and connections.

I missed Harajuku Fun Madness. The company had suspended the game indefinitely. They said that for "security reasons" they didn't think it would be a good idea to hide things and then send people off to find them. What if someone thought it was a bomb? What if someone put a bomb in the same spot?

What if I got hit by lightning while walking with an umbrella? Ban umbrellas! Fight the menace of lightning!

I kept on using my laptop, though I got a skin-crawly feeling when I used it. Whoever had wiretapped it would wonder why I didn't use it. I figured I'd just do some random surfing with it every day, a little less each day, so that anyone watching would see me slowly changing my habits, not doing a sudden reversal. Mostly I read those creepy obits -- all those thousands of my friends and neighbors dead at the bottom of the Bay.

Truth be told, I was doing less and less homework every day. I had business elsewhere. I burned new stacks of ParanoidXbox every day, fifty or sixty, and took them around the city to people I'd heard were willing to burn sixty of their own and hand them out to their friends.

I wasn't too worried about getting caught doing this, because I had good crypto on my side. Crypto is cryptography, or "secret writing," and it's been around since Roman times (literally: Augustus Caesar was a big fan and liked to invent his own codes, some of which we use today for scrambling joke punchlines in email).

Crypto is math. Hard math. I'm not going to try to explain it in detail because I don't have the math to really get my head around it, either -- look it up on Wikipedia if you really want.

But here's the Cliff's Notes version: Some kinds of mathematical functions are really easy to do in one direction and really hard to do in the other direction. It's easy to multiply two big prime numbers together and make a giant number. It's really, really hard to take any given giant number and figure out which primes multiply together to give you that number.

That means that if you can come up with a way of scrambling something based on multiplying large primes, unscrambling it without knowing those primes will be hard. Wicked hard. Like, a trillion years of all the computers ever invented working 24/7 won't be able to do it.

There are four parts to any crypto message: the original message, called the "cleartext." The scrambled message, called the "ciphertext." The scrambling system, called the "cipher." And finally there's the key: secret stuff you feed into the cipher along with the cleartext to make ciphertext.

It used to be that crypto people tried to keep all of this a secret. Every agency and government had its own ciphers and its own keys. The Nazis and the Allies didn't want the other guys to know how they scrambled their messages, let alone the keys that they could use to descramble them. That sounds like a good idea, right?

Wrong.

The first time anyone told me about all this prime factoring stuff, I immediately said, "No way, that's BS. I mean, sure it's hard to do this prime factorization stuff, whatever you say it is. But it used to be impossible to fly or go to the moon or get a hard-drive with more than a few kilobytes of storage. Someone must have invented a way of descrambling the messages." I had visions of a hollow mountain full of National Security Agency mathematicians reading every email in the world and snickering.

In fact, that's pretty much what happened during World War II. That's the reason that life isn't more like Castle Wolfenstein, where I've spent many days hunting Nazis.

The thing is, ciphers are hard to keep secret. There's a lot of math that goes into one, and if they're widely used, then everyone who uses them has to keep them a secret too, and if someone changes sides, you have to find a new cipher.

The Nazi cipher was called Enigma, and they used a little mechanical computer called an Enigma Machine to scramble and unscramble the messages they got. Every sub and boat and station needed one of these, so it was inevitable that eventually the Allies would get their hands on one.

When they did, they cracked it. That work was led by my personal all-time hero, a guy named Alan Turing, who pretty much invented computers as we know them today. Unfortunately for him, he was gay, so after the war ended, the stupid British government forced him to get shot up with hormones to "cure" his homosexuality and he killed himself. Darryl gave me a biography of Turing for my 14th birthday -- wrapped in twenty layers of paper and in a recycled Batmobile toy, he was like that with presents -- and I've been a Turing junkie ever since.

Now the Allies had the Enigma Machine, and they could intercept lots of Nazi radio-messages, which shouldn't have been that big a deal, since every captain had his own secret key. Since the Allies didn't have the keys, having the machine shouldn't have helped.

Here's where secrecy hurts crypto. The Enigma cipher was flawed. Once Turing looked hard at it, he figured out that the Nazi cryptographers had made a mathematical mistake. By getting his hands on an Enigma Machine, Turing could figure out how to crack any Nazi message, no matter what key it used.

That cost the Nazis the war. I mean, don't get me wrong. That's good news. Take it from a Castle Wolfenstein veteran. You wouldn't want the Nazis running the country.

After the war, cryptographers spent a lot of time thinking about this. The problem had been that Turing was smarter than the guy who thought up Enigma. Any time you had a cipher, you were vulnerable to someone smarter than you coming up with a way of breaking it.

And the more they thought about it, the more they realized that anyone can come up with a security system that he can't figure out how to break. But no one can figure out what a smarter person might do.

You have to publish a cipher to know that it works. You have to tell as many people as possible how it works, so that they can thwack on it with everything they have, testing its security. The longer you go without anyone finding a flaw, the more secure you are.

Which is how it stands today. If you want to be safe, you don't use crypto that some genius thought of last week. You use the stuff that people have been using for as long as possible without anyone figuring out how to break them. Whether you're a bank, a terrorist, a government or a teenager, you use the same ciphers.

If you tried to use your own cipher, there'd be the chance that someone out there had found a flaw you missed and was doing a Turing on your butt, deciphering all your "secret" messages and chuckling at your dumb gossip, financial transactions and military secrets.

So