Newsletters Welcome, Guest Log In | Register

Data and Telecom

Companies’ communications strategies must be agile in a rapidly evolving market

About this Blogger RSS

Subscribe

Sign up now and get the best business technology insights direct to your inbox.

  • Daily Edge
  • CTO Edge Update
  • Business Tools & Templates
  • Aligning IT & Business Goals
  • Maximizing IT Investments

0

Does the One Laptop Per Child Project Pose a Security Risk?

Posted by Carl Weinschenk Oct 18, 2006 9:39:19 AM

It's hard to believe, but there is a downside to Nicholas Negroponte's One Laptop Per Child project. Of course, the project's intent -- to distribute millions of $100 laptops to poor kids throughout the world -- is beyond reproach. It's the feel-good project of the year.

 

The problem has nothing to do with the project's goal. It's technical: Flooding the world with so many identical machines is dangerous. It will create a monoculture, which is a scenario in which a huge number of organisms -- physical or cyber -- are at risk because they share a particular vulnerability. (Biological monoculturalism is a prime reason why European diseases decimated Native American populations.)

 

In the case of The One Laptop Per Child project, the situation is exacerbated by the fact that the Linux-based machines will link to each other by mesh networking and serve as each other's backup. That means that any problem will proliferate quickly. It's a bit frightening, since there will be so many of these devices floating around that, once compromised, a huge botnet could be formed.

 

The danger is so high that program sponsors have invited hackers to try to defeat the machines' security before they are released into the field. That's somewhat reassuring. What isn't reassuring is the slim odds that a device whose major design imperative was low price will be able to stand up, over the long haul, to the world of organized cyber crime. Sadly, these crooks won't leave these machines alone because they are the sole link between kids in undeveloped countries and the outside world.

 

The irony is that laptops are highly liable to monoculture problems while devices also carried around by travelers -- cell phones and smartphones -- are at the other end of the spectrum. The reason is simple: No one company dominates the cell phone operating system business. With the market divided between BlackBerry, Symbian, Linux, Microsoft and others, the odds of a concentration of vulnerabilities is far lower.

Add a comment Leave a comment on this blog post.

There are no comments on this post

Should You Install Messaging Security Software on Your Exchange Server?

This white paper discusses the detailed results of an Osterman Research survey on messaging security software and conclusions about administrators' attitudes regarding installing third-party software on the Exchange server.

Web Security SaaS: The Next Generation of Web Security

This white paper describes the next generation of Web security and identifies the critical elements that make for lower-cost and easier-to-manage Web security solutions.

Data Loss Protection

Data-loss prevention tactics, technologies and best practices to protect your sensitive and valuable company data.

Security Information and Event Management

Best practices, strategies and technologies to help you use security information and event log management efficiently and effectively in order to get business value in terms of increased security, reduced risk, regulatory compliance and increased business agility.

Security SaaS Solutions

Hosted security solutions that not only protect your data, but reduce your security management TCO, as well.

IT Security Manual Template

Immediately download a customizable set of documents and templates that covers every aspect of IT Security. These templates are compliant with ISO27000, HIPPAA and Sarbanes oxley standards.

Learn more >

The IT Governance and Compliance Toolkit

This Toolkit is a collection of templates and instructional documents that help you assess and establish the crucial policies that you need to operate a secure and compliant IT organization.

Learn more >