Tactical Leadership

The philosophy, art and science of software project leadership
Wednesday Jan 09, 2008

COMDEX 1996

A friend of mine makes an annual pilgrimage to CES in Las Vegas each year. The last trade show I went to in Las Vegas was Comdex. OK, it was a while ago, 11+ years I think, but still I went.

Bill Gates was the keynote speaker that year (as usual). He talked about a brave new world where your PC would be your personal slave, and something called Bob(tm) would do your every bidding. The example was something like... you ask Bob to get you tickets to the opera, and while you're off living your life, Bob finds the best priced tickets, in your preferred section of the Opera Hall, and while he's there, he also books dinner reservations at your favorite restaurant in the Theater District. I recall walking out of the auditorium and wondering if I, a Bob myself, had to worry about paying Microsoft royalties whenever I signed my name. Thanks goodness Bob never took off; as it is, I hate that stupid little paperclip person who tells me I'm using Microsoft Word all wrong -- what an annoying little pest he is!

One of the hot technologies that year was the DVD. It promised to provide 2.5 hours of video, in multiple languages, all in the form factor of a CD. Of course, back then, DVD players cost hundreds, if not thousands of dollars. But after watching a demo of a DVD on a big-screen TV, I was sold. I ran right out and got a DVD player within five years, when they cost $200. Last year I bought a DVD player for my mother-in-law for 35 bucks. Of course, now the video technology is Blu-Ray vs HD-DVD, and the future isn't as clear.

Another new technology being promoted that year was digital cameras. Why in the world would anyone want a digital camera, I wondered. They were huge -- bigger than my old Fujica ST605N SLR (which I still have and use), low resolution (2 megapixels was the norm, not enough for a crisp 8x10 color glossy with circles and arrows and a paragraph on the back of each one), and expensive, easily costing over $1000 for most models. I think it was another 6 or 7 years before I went digital myself.

At the time, I went to the show representing PictureTel, a major high-end videoconferencing vendor at the time. We were telling everyone how video would change the world, business travel would be a thing of the past, and life would be better. Life is better, for me at least -- I quit PictureTel before they went bankrupt and their hollow husk was bought by Polycom. Of course, maybe the people at PictureTel were right, video is changing the world. It's just being done using commodity webcams on laptops and PCs. Seeing the future, and capitalizing on your vision are clearly two different things.

Tuesday Jan 08, 2008

American Community Survey: Big Brother or Scam?

A couple of months ago, we received a mailing, purportedly from the US Census Bureau, called "The American Community Survey." It's more than a census; it asks detailed personal and financial questions which, quite frankly, include things I wouldn't tell my own mother, let alone the US Census Bureau.

Besides asking the address, the names of everyone who lives here, and their birthdays (ideal information for identify theft), it asks questions like:

  • Race of each person in the home. (I didn't even think that was legal to ask!).
  • How many bedrooms are in this house. (What, are they planning on moving in?)
  • Does the house have running water? Hot water? A flush toilet? (Obviously they plan on staying for a while!)
  • How many vehicles are kept at the home? (They must be bringing their own car.)
  • Last month, what was the cost of electricity for this home? (I hope they plan on splitting the cost of utilities while they're staying with us.)
  • Is this a house, apartment or mobile home? (Beggars can't be choosers, I say!)
  • Does the monthly rent include meals? (It's a house, not a B&B!)
  • What were your wages, salary, commisions, bonuses or tops from all jobs, interest, dividends and rental income, accurate to the nearest dollar. (Do they promise not to compare with the IRS?)

The instructions state "The law requires that you provide the information asked in this survey to the best of your knowledge." (emphasis not added by me). On the other hand, I got an email recently that required me to provide my name, credit card number and mother's maiden name to some eBay-look-alike web site; I didn't fall for that one either. So I read the survey carefully, then tossed it in the recycling bin.

Then I started to get the phone calls.

Of course, I get phone calls all the time, from people claiming to be with the government, with the UK National Lottery Commission, a Swiss probate lawyer for my late, apparently estranged great uncle Harold Steinman who recently died and named me as his sole heir, and even representatives from God himself (why they need to use a phone, I'll never understand). This is what caller ID is for.

After two more postcards, and another copy of the survey, I started thinking, hey, even if this does look phony and smell of a scam, maybe this really is legit. So I went to the US Census Bureau web site to see if there was anything about an "American Community Survey" for 2007. Nope, nothing. There was a survey in 2006, but no mention of a survey in 2007. No way to confirm that this survey is legit.

I checked the address on the postage-paid envelop:

    DIRECTOR
    U.S. CENSUS BUREAU
    PO BOX 5240
    JEFFERSONVILLE, IN 47199-5240
Clearly, these spoofers don't know that the US Census Bureau is in Washington, DC! Plus the all-caps style is a dead giveaway of spammers. I also checked the Census Bureau web site, and they don't even list an office in Indiana; the midwest regional office is:
    U.S. Census Bureau
    Chicago Regional Office
    1111 W. 22nd Street, Suite 400
    Oak Brook, IL. 60523-1918
Even if the survey is real, maybe some scammer repackaged it with their own self-addressed envelop? Maybe all of the questions are real, but I'm sending the information to some theif in Indiana.

The instructions include an 800 phone number. But I learned long ago that if you call an 800 number, your phone number is transmitted to the callee, even if you have caller id blocking set up. Telemarketers use this to capture your phone number, and map street addresses to phone numbers. (I know; I had a friend, a software engineer, who worked for a company that did just that. Her specific software project was designed to call people at all times of the day, just to find out when you answer your phone. That way, they could sell your phone number and the times you're most likely to answer to other telemarketers. She eventually quit her job out of guilt.) And if I did call the 800 number and the guy on the other end said, "Ah, yeah, sure, this is the government. Please send us all your info stuff.", should I really believe them?

At this point, I'm starting to think that maybe, just maybe, this survey thing is legit, but the goverment is entirely inept and clueless about authentication and identify theft. If they really want me to fill out this survey, or the 2010 census in two years, they really should:

  • Provide a way I can authenticate that the survey came from the US government. Giving me a phone number is useless; anyone can get a phone number these days. Instead, the instructinos should provide something more authentic, like the URL of a web page, based off of census.gov, that confirms the survey is authentic.
  • Provide a way I can ensure that my data is really going to the right authorities, for example, on the web site list the address that should be on the return envelop.
  • Encourage, no mandate that everyone visit the web site, and verify the address on the envelop before they mail their response! Anything less is just encouraging people to believe whatever they get in the mail with an official-looking seal; it's tantamount to abetting identity theft.
  • Allow people to fill out the survey on the web. Personally, I trust ssl encryption far more than I trust my local mail carrier. On the other hand, I don't really trust the government to secure their servers, so maybe that's a bad idea, too.

Finally, I thought to google '"po box 5240" jeffersonville', and got a hit. Looks like this is a real survey from the Census Bureau, albeit conducted in one of the most shady, disreputable, and hard-to-authenticate manners possible.

In an age where identify theft is a serious business, the US Census Bureau should be keenly aware that the information they process is highly confidential, and a ripe area for theives to exploit. Clearly, based on my personal experience, they haven't gotten that message yet.


Archives
Links
Referrers