Google Engineers Refused to Build Security Tool to Win Military Contract

It’s ironic on so many levels. The first level is, of course, the irony of refusing to do military work at a company that only exists because of defense contractors working on a military project (ARPANET).

More generally, the irony is that the U.S. military has made a far greater positive contribution to the world than Google. Under the Pax Americana, we have seen the greatest number of people rise out of abject poverty in human history. The stable, liberal world order that has been beneficial to so many people has been bankrolled by the U.S. and backed by the U.S. military.

This world where people in India and Pakistan are using Gchat Facebook to talk to each other instead of waging nuclear war against each other is not the result of Google or Facebook. It’s not the result of humans evolving beyond their tendencies towards warfare. It’s because the U.S. military has made entire classes of armed conflicts untenable.

.. This country only exists because of Puritan persecution in England, but you don’t see me thanking the Anglican church for America. Bad means result in good ends all the time; that doesn’t mean we should celebrate bad means.I agree that the US military has made positive contributions to the world, but I don’t think it’s the main source of the Pax Americana — strong international bodies (NATO, UN, &c), the tendency for democratic nations (the dominant sort in the 20th century) to avoid wars with each other, and advancements in crop science are all individually more responsible for the relative global stability of the last 30 years.

I don’t deny that the military had a role (usually financial) in any or all of the above, but I wouldn’t call it a causal role: virtually all academic research funding hits the defense world eventually (“food security”, “ecological security”, &c), especially during the Cold War. That’s the result of political contrivances, not any sort of deep connection between the U.S. military and scientific progress.

Finally, I wonder about drawing comparisons between the past U.S. military and current ventures. The Google engineers in question probably wouldn’t be designing waterproof radios for fastboats; they’d be training models that “recognize” “terrorists” from afar and systems that pass that information to drones for remote killing. Put another way: the shift away from conventional warfare changes the moral dimensions of working for the military.

.. It’s not that NATO and the UN are powerful or effective as bodies independent of the US, it’s that their greatest achievements have occurred without direct US military intervention.NATO and the UN both benefit (and suffer) from the power and presence of the US military, but their proudest moments (the German economic miracle, smallpox eradication, historic decreases in child mortality and malnutrition) all stem from smart policy and liberal principles, not from the looming threat of American tanks.

.. The fact that people are spurred into action by violence doesn’t mean that we ought to be violent, or that violence is even the most effective way to get people to act in the way you want.

.. At the risk of sort of invoking Godwin, I’m curious if you’d apply the same logic to Stalin and the fall of Nazi Germany. What does the victory in the Battle of Berlin say about whether Stalin was good or bad?

..  an academic institution is a public institution focused on advancing science and teaching it to the public. A corporation or contractor is in it for the profit. Notably, the academics involved were able to publish their work as the TCP/IP standard (and others), and anyone was able to use it.If it had actually been military contractors we would not have the internet as it is today.

.. Cerf (Stanford) and Kahn (DARPA) designed TCP. But BBN (now a subsidiary of Raytheon) built ARPANET.
.. The best the military does is keep stability. Google changed everything. One is static; the other, change. I don’t see them as comparable at all.Anyway I’ve heard it said that the container ship has done more to lift the world standard up, than all the political action of the last 1000 years. By distributing goods to all the corners of the world at a cheap price.

..

Who ensures a Ship with South Korean flag which does not a solid Navy reaches its destination ?I understand the analogy of Container being an innovative idea. With out calm seas under-written by US Navy, its not so great.

Without US Navy and its 10 carriers, we will be back to 19th century mercantilism and how much fun colonialism which is its off-shoot has been.

.. > Under the Pax Americana, we have seen the greatest number of people rise out of abject poverty in human history. The stable, liberal world order that has been beneficial to so many people has been bankrolled by the U.S. and backed by the U.S. military.It’s perfectly coherent to support the overall ends (relative world peace) and oppose the means (extrajudicial drone strikes, invasion of Iraq, etc.)

Google Engineers Refused to Build Security Tool to Win Military Contracts

A work boycott from the Group of Nine is yet another hurdle to the company’s efforts to compete for sensitive government work.

.. Earlier this year, a group of influential software engineers in Google’s cloud division surprised their superiors by refusing to work on a cutting-edge security feature. Known as “air gap,” the technology would have helped Google win sensitive military contracts. The coders weren’t persuaded their employer should be using its technological might to help the government wage war, according to four current and former employees. After hearing the engineers’ objections, Urs Hölzle, Google’s top technical executive, said the air gap feature would be postponed, one of the people said. Another person familiar with the situation said the group was able to reduce the scope of the feature.

.. The act of rebellion ricocheted around the company, fueling a growing resistance among employees with a dim view of Google’s yen for multi-million-dollar government contracts. The engineers became known as the “Group of Nine” and were lionized by like-minded staff. The current and former employees say the engineers’ work boycott was a catalyst for larger protests that convulsed the company’s Mountain View, California, campus and ultimately forced executives to let a lucrative Pentagon contract called Project Maven expire without renewal.

The dots do matter: how to scam a Gmail user

More generally, the phishing scam here is:

  1. Hammer the Netflix signup form until you find a <span style="color: #000000;">gmail.com</span> address which is “already registered”. Let’s say you find the victim <span style="color: #000000;">jameshfisher</span>.
  2. Create a Netflix account with address <span style="color: #000000;">james.hfisher</span>.
  3. Sign up for free trial with a throwaway card number.
  4. After Netflix applies the “active card check”, cancel the card.
  5. Wait for Netflix to bill the cancelled card. Then Netflix emails <span style="color: #000000;">james.hfisher</span> asking for a valid card.
  6. Hope Jim reads the email to <span style="color: #000000;">james.hfisher</span>, assumes it’s for his Netflix account backed by <span style="color: #000000;">jameshfisher</span>, then enters his card <span style="color: #000000;">**** 1234</span>.
  7. Change the email for the Netflix account to <span style="color: #000000;">eve@gmail.com</span>, kicking Jim’s access to this account.
  8. Use Netflix free forever with Jim’s card <span style="color: #000000;">**** 1234</span>!

 

.. Actually, the blame lies with Gmail, and specifically Gmail’s “dots don’t matter” feature. The scam fundamentally relies on the Gmail user responding to an email with the assumption that it was sent to their canonical address, and not to some other address from their infinite address set.

.. Each Gmail user has one email address that they think of as theirs; all the others are mistakes.

.. Finally, Gmail users should be able to opt out of dots-don’t-matter. I wish for any mail sent to james.hfisher@gmail.com to bounce instead of reaching my inbox. The dots-don’t-matter feature should be disabled by default for any new Google accounts, and eventually retired.