Security quotes of the week

And there's a new remote attestation technology making the rounds: Google's Web Environment Integrity, which will leverage Google's dominance over browsers to allow websites to block users who run ad-blockers:

https://github.com/RupertBenWiser/Web-Environment-Integrity

There's plenty else WEI can do (it would make detecting ad-fraud much easier), but for every legitimate use, there are a hundred ways this could be abused. It's a technology purpose-built to allow rent extraction by stripping us of our right to technological self-determination.

Releasing a technology like this into a world where companies are willing to make their products less reliable, less attractive, less safe and less resilient in pursuit of rents is incredibly reckless and shortsighted. You want unauthorized bread? This is how you get Unauthorized Bread:

https://arstechnica.com/gaming/2020/01/unauthorized-bread-a-near-future-tale-of-refugees-and-sinister-iot-appliances/amp/

And this brings us to the heart of the issue: If you're accused by a computer, are you entitled to review that computer's inner workings and potentially challenge its accuracy in court? What does cross-examination look like when the prosecutor's witness is a computer? How could you possibly access, analyze, and understand all microdirectives relevant to your case in order to challenge the AI's legal interpretation? How could courts hope to ensure equal application of the law? Like the man from the country in Franz Kafka's parable in The Trial, you'd die waiting for access to the law, because the law is limitless and incomprehensible.