7 ms·

Google's half-truths, and a plea for perspective

78 points by andreyf 17y ago

ramidarigaz 17y ago
I'd never heard of FACS before. The Wikipedia page he links to doesn't contain much info. Wikipedia says nothing about which AUs correspond to which emotions. Does anyone know any good articles on this? It's interesting.
- mcobrien 17y ago
  Malcolm Gladwell's article for the New Yorker is a great start: http://www.newyorker.com/archive/2002/08/05/020805fa_fact_gladwell http://www.newyorker.com/archive/2002/08/05/020805fa_fact_gl...
- andreyf 17y ago
  Paul Ekman is the guy who popularized it. Here is a good overview of his life/work: http://www.youtube.com/watch?v=IA8nYZg4VnI http://www.youtube.com/watch?v=IA8nYZg4VnI Regarding reading expressions in particular, good start is "Emotions Revealed" [1], which was pretty comprehensive, but not as comprehensive (or as expensive) as his METT system: http://face.paulekman.com/products.aspx http://face.paulekman.com/products.aspx The half-smirk when talking about the other companies is contempt. The raised chin is shame. A lot of fear and sadness in the beginning, with exceptions of talking about the technical details of the attack and Google's desire to stay in China towards the end - lots of confidence there. If you watching him carefully with the sound off, I think you can pick up on the emotions intuitively. In a more cynical light, this is good to keep in mind as well: http://en.wikipedia.org/wiki/Facecrime http://en.wikipedia.org/wiki/Facecrime 1. http://www.amazon.com/Emotions-Revealed-Recognizing-Communication-Emotional/dp/080507516X/ http://www.amazon.com/Emotions-Revealed-Recognizing-Communic...
mcobrien 17y ago
Here's my guess. Google initially detected an attack coming from Chinese IP ranges and subsequently checked what other requests the IPs had made. This is what led to the accounts that were accessed not "through any security breach at Google, but most likely via phishing scams or malware placed on the users' computers". Although they mention gmail in the statement, the expansion to other industries is made on the Google Enterprise blog (mainly aimed at promoting Google Apps to large companies), so it seems likely the same Chinese IPs accessed users of Google Apps. So this isn't the Chinese government targeting other industries so much as dissidents that might work there. Google's statement still seems consistent to me, although they have shied away from mentioning Google Apps.
- est 17y ago
  > and subsequently checked what other requests the IPs had made. By how?
  - mcobrien 17y ago
    Gmail stores the last IP that accessed your account - it's shown at the bottom of your inbox: Last account activity: 14 minutes ago at X.X.X.X My guess is they used that.
    - lutorm 17y ago
      Yes but how do they get the other IP addresses that had been accessed without having that traffic go through Google?
      - mcobrien 17y ago
        Sorry, I could have made my original comment clearer. I don't think there were any other IP addresses accessed. The "other industries" that were involved were using Google Apps, so Google has access to those records. That's why they have to inform the other companies their security was breached: the traffic did go through Google so they're the only ones who know about it.
      - roc 17y ago
        That's the six hundred million dollar question in my mind. How exactly did Google know that those other institutions were under attack? Unless the attack resulted in rooted Google machines that then attacked outward, or all those institutions were running on Google Apps. Major institutions running on Google Apps seems unlikely (Are any major institutions outside of academia running Google Apps hosted by Google?). And attacking outward from a rooted box inside Google's network seems careless, unless the attackers were leveraging some dedicated pathways that made their job easier. Which suggests the breach was far more serious than indicated.
        17y ago
DanielBMarkham 17y ago
I read an interesting article yesterday about the news coverage of North Korea's drive towards nuclear weapons. Looking back on it now, it's obvious that the North started a nuclearization program in 1996 and pursued it each year no matter what was going on at the negotiating table. (Both political parties and the Clinton and Bush administration were taken to task in this article) Looking at the press coverage, however, was even more interesting. There were some quite prominent columnists who insisted that the North was misunderstood, that they weren't committed to continuing to develop weapons, and that the various tactics used by both administrations were really what was at the root of the North's belligerence. Sometimes pleas for perspective can be good, and sometimes they can all be so much noise. I'm not going to characterize this piece, but I'll note that there is a great similarity between how NK was covered with nukes and how China is being covered with CyberWarfare. I find it disconcerting.
- andreyf 17y ago
  Oops, is "plea for perspective" not the right phrase? I meant to say that a coordinated attack on a variety (probably all) major US corporations might be more significant than what Google does with their .cn properties...
  - DougBTX 17y ago
    I think you're after a "call for perspective". I didn't catch from the article exactly what the "Google half truths" actually are.
  - pohl 17y ago
    If that was your goal, your reference to "google half truths" was a big distraction. If what they do with their cn properties is less signifigant, then don't devote so many words to them, and instead focus on your message.
dtf 17y ago
What is this, an episode of Lie To Me? :-) Government spies in the Shanghai office stealing Google's source tree seems to have been the straw that broke the camel's back. I guess China will just build their own Google now...
- Estragon 17y ago
  Yeah, this guy's been watching too much TV. I've trained with Ekman's METT and SETT programs, and I didn't interpret his facial cues the same way. Those expressions looked like anger and sadness to me.
  - andreyf 17y ago
    Anger and sadness are certainly there, and with good reason. But the tension during some answers and not during others is there, as well. Not because he's lying, but because he's making sure not to say something he is not allowed to. The pre-rehearsed part about not claiming the attack to have been state-sponsored is a good control - the anger/sadness is there, but the tension is not.
    - scott_s 17y ago
      A corporate spokesperson giving an interview on television is nothing but an exercise in avoiding saying things that are not "allowed." It could just be that the times when you see tension is that those weren't scripted questions, and he had to come up with a response on the spot. The questions where he was more relaxed could be questions they anticipated, and had already formulated answers for.
      - deleted 17y ago
        [deleted]
      - andreyf 17y ago
        Right, I'm asking "when is he saying things close to that which is not allowed?", and "when is he saying things unrelated to what is unallowed?". For example, when he talks about the distinction between the attacks on GMail and the malware on user machines, he's very comfortable, even though he's clearly off-script. When he's talking about Google's desire to stay in China, he's downright confident.
rortian 17y ago
I don't think you could ever mine a chief council's interview for much information. However, human rights activists are certainly targeted but you are way off base to suggest companys are not. I am in a rush so I can't pull up a story I recent heard about where a foreign business man was brought into custody. A large portion of billionaires in China are children of party officials that were installed in those positions. The party very much wants to stay in power in China and they are not only worried about idealistic, which I am sympathetic to, and not so wealth opposition. They are worried about business leaders and all evidence indicates they are keeping an eye on them as well.
Femur 17y ago
Andreyf, is this original content you have written or was it borrowed in another social experiment? http://news.ycombinator.com/item?id=1049430 http://news.ycombinator.com/item?id=1049430
- andreyf 17y ago
  All original, just for you :) I'd appreciate it if you didn't hijack this conversation into another 30-comment unrelated thread, though.
chaostheory 17y ago
just speculation, Adobe might be on the list: http://www.dailytech.com/article.aspx?newsid=17387 http://www.dailytech.com/article.aspx?newsid=17387
- andreyf 17y ago
  Hm, the article seems to jump between "Adobe was attacked" and "Adobe software was used as attack vector", in a way that inspires the least of confidence. sigh
  - chaostheory 17y ago
    They were definitely attacked: http://blogs.adobe.com/conversations/2010/01/adobe_investigates_corporate_n.html http://blogs.adobe.com/conversations/2010/01/adobe_investiga... Both could be true
lr 17y ago
"How did Google find out the other companies were being targeted?" Google runs data centers, and probably sees a lot more traffic than for its own services. Also, who is to say these companies are not using Google products (Gmail, Docs, etc.)? In other words, I think Google might be in a position to know.
- madh 17y ago
  I read somewhere (probably here) that Google accounts for 5% of global internet traffic.
  - stanleydrew 17y ago
    Yes but that's all traffic to and from its datacenters. I don't touch Google if I request a page from bofa.com, e.g., except maybe through their public dns.
    - bunni 17y ago
      Analytics.
- jonknee 17y ago
  Google supposedly hacked the hackers and found evidence that they had infiltrated the other companies.
  - mahmud 17y ago
    Do you have any evidence for this?
    - jonknee 17y ago
      It was in MacWorld's report and I've seen it a few other places, but no first hand information.
natch 17y ago
I doubt that lie detection voodoo actually works when the person being interviewed is new to the whole being on TV thing.
- Groxx 17y ago
  That's pretty much accurate. Lie detection methods almost all base around detecting stress, and large amounts of stress (like being on TV for the first time) tend to throw them way off. In order to really have a baseline to compare lies against, you need to have a baseline. If they're not stable enough to do that, the science of it gets lost, and it's basically up to totally subjective methods.
xsmasher 17y ago
A quote in Macworld suggests it's Google's law enforcement backdoor that was compromised. Google didn't mention that in their press release, which is a mighty big omission. http://www.macworld.co.uk/digitallifestyle/news/index.cfm?newsid=28293 http://www.macworld.co.uk/digitallifestyle/news/index.cfm?ne...

78 points by andreyf 17y ago

I'd never heard of FACS before. The Wikipedia page he links to doesn't contain much info. Wikipedia says nothing about which AUs correspond to which emotions. Does anyone know any good articles on this? It's interesting.

mcobrien 17y ago
Malcolm Gladwell's article for the New Yorker is a great start: http://www.newyorker.com/archive/2002/08/05/020805fa_fact_gladwell http://www.newyorker.com/archive/2002/08/05/020805fa_fact_gl...
andreyf 17y ago
Paul Ekman is the guy who popularized it. Here is a good overview of his life/work: http://www.youtube.com/watch?v=IA8nYZg4VnI http://www.youtube.com/watch?v=IA8nYZg4VnI Regarding reading expressions in particular, good start is "Emotions Revealed" [1], which was pretty comprehensive, but not as comprehensive (or as expensive) as his METT system: http://face.paulekman.com/products.aspx http://face.paulekman.com/products.aspx The half-smirk when talking about the other companies is contempt. The raised chin is shame. A lot of fear and sadness in the beginning, with exceptions of talking about the technical details of the attack and Google's desire to stay in China towards the end - lots of confidence there. If you watching him carefully with the sound off, I think you can pick up on the emotions intuitively. In a more cynical light, this is good to keep in mind as well: http://en.wikipedia.org/wiki/Facecrime http://en.wikipedia.org/wiki/Facecrime 1. http://www.amazon.com/Emotions-Revealed-Recognizing-Communication-Emotional/dp/080507516X/ http://www.amazon.com/Emotions-Revealed-Recognizing-Communic...

mcobrien 17y ago

Here's my guess. Google initially detected an attack coming from Chinese IP ranges and subsequently checked what other requests the IPs had made. This is what led to the accounts that were accessed not "through any security breach at Google, but most likely via phishing scams or malware placed on the users' computers". Although they mention gmail in the statement, the expansion to other industries is made on the Google Enterprise blog (mainly aimed at promoting Google Apps to large companies), so it seems likely the same Chinese IPs accessed users of Google Apps. So this isn't the Chinese government targeting other industries so much as dissidents that might work there. Google's statement still seems consistent to me, although they have shied away from mentioning Google Apps.

est 17y ago
> and subsequently checked what other requests the IPs had made. By how?
- mcobrien 17y ago
  Gmail stores the last IP that accessed your account - it's shown at the bottom of your inbox: Last account activity: 14 minutes ago at X.X.X.X My guess is they used that.
  - lutorm 17y ago
    Yes but how do they get the other IP addresses that had been accessed without having that traffic go through Google?
    - mcobrien 17y ago
      Sorry, I could have made my original comment clearer. I don't think there were any other IP addresses accessed. The "other industries" that were involved were using Google Apps, so Google has access to those records. That's why they have to inform the other companies their security was breached: the traffic did go through Google so they're the only ones who know about it.
    - roc 17y ago
      That's the six hundred million dollar question in my mind. How exactly did Google know that those other institutions were under attack? Unless the attack resulted in rooted Google machines that then attacked outward, or all those institutions were running on Google Apps. Major institutions running on Google Apps seems unlikely (Are any major institutions outside of academia running Google Apps hosted by Google?). And attacking outward from a rooted box inside Google's network seems careless, unless the attackers were leveraging some dedicated pathways that made their job easier. Which suggests the breach was far more serious than indicated.
      - 17y ago

DanielBMarkham 17y ago

I read an interesting article yesterday about the news coverage of North Korea's drive towards nuclear weapons. Looking back on it now, it's obvious that the North started a nuclearization program in 1996 and pursued it each year no matter what was going on at the negotiating table. (Both political parties and the Clinton and Bush administration were taken to task in this article) Looking at the press coverage, however, was even more interesting. There were some quite prominent columnists who insisted that the North was misunderstood, that they weren't committed to continuing to develop weapons, and that the various tactics used by both administrations were really what was at the root of the North's belligerence. Sometimes pleas for perspective can be good, and sometimes they can all be so much noise. I'm not going to characterize this piece, but I'll note that there is a great similarity between how NK was covered with nukes and how China is being covered with CyberWarfare. I find it disconcerting.

andreyf 17y ago
Oops, is "plea for perspective" not the right phrase? I meant to say that a coordinated attack on a variety (probably all) major US corporations might be more significant than what Google does with their .cn properties...
- DougBTX 17y ago
  I think you're after a "call for perspective". I didn't catch from the article exactly what the "Google half truths" actually are.
- pohl 17y ago
  If that was your goal, your reference to "google half truths" was a big distraction. If what they do with their cn properties is less signifigant, then don't devote so many words to them, and instead focus on your message.

dtf 17y ago

What is this, an episode of Lie To Me? :-) Government spies in the Shanghai office stealing Google's source tree seems to have been the straw that broke the camel's back. I guess China will just build their own Google now...

Estragon 17y ago
Yeah, this guy's been watching too much TV. I've trained with Ekman's METT and SETT programs, and I didn't interpret his facial cues the same way. Those expressions looked like anger and sadness to me.
- andreyf 17y ago
  Anger and sadness are certainly there, and with good reason. But the tension during some answers and not during others is there, as well. Not because he's lying, but because he's making sure not to say something he is not allowed to. The pre-rehearsed part about not claiming the attack to have been state-sponsored is a good control - the anger/sadness is there, but the tension is not.
  - scott_s 17y ago
    A corporate spokesperson giving an interview on television is nothing but an exercise in avoiding saying things that are not "allowed." It could just be that the times when you see tension is that those weren't scripted questions, and he had to come up with a response on the spot. The questions where he was more relaxed could be questions they anticipated, and had already formulated answers for.
    - deleted 17y ago
      [deleted]
    - andreyf 17y ago
      Right, I'm asking "when is he saying things close to that which is not allowed?", and "when is he saying things unrelated to what is unallowed?". For example, when he talks about the distinction between the attacks on GMail and the malware on user machines, he's very comfortable, even though he's clearly off-script. When he's talking about Google's desire to stay in China, he's downright confident.

rortian 17y ago

I don't think you could ever mine a chief council's interview for much information. However, human rights activists are certainly targeted but you are way off base to suggest companys are not. I am in a rush so I can't pull up a story I recent heard about where a foreign business man was brought into custody. A large portion of billionaires in China are children of party officials that were installed in those positions. The party very much wants to stay in power in China and they are not only worried about idealistic, which I am sympathetic to, and not so wealth opposition. They are worried about business leaders and all evidence indicates they are keeping an eye on them as well.

Femur 17y ago

Andreyf, is this original content you have written or was it borrowed in another social experiment? http://news.ycombinator.com/item?id=1049430 http://news.ycombinator.com/item?id=1049430

andreyf 17y ago
All original, just for you :) I'd appreciate it if you didn't hijack this conversation into another 30-comment unrelated thread, though.

chaostheory 17y ago

just speculation, Adobe might be on the list: http://www.dailytech.com/article.aspx?newsid=17387 http://www.dailytech.com/article.aspx?newsid=17387

andreyf 17y ago
Hm, the article seems to jump between "Adobe was attacked" and "Adobe software was used as attack vector", in a way that inspires the least of confidence. sigh
- chaostheory 17y ago
  They were definitely attacked: http://blogs.adobe.com/conversations/2010/01/adobe_investigates_corporate_n.html http://blogs.adobe.com/conversations/2010/01/adobe_investiga... Both could be true

lr 17y ago

"How did Google find out the other companies were being targeted?" Google runs data centers, and probably sees a lot more traffic than for its own services. Also, who is to say these companies are not using Google products (Gmail, Docs, etc.)? In other words, I think Google might be in a position to know.

madh 17y ago
I read somewhere (probably here) that Google accounts for 5% of global internet traffic.
- stanleydrew 17y ago
  Yes but that's all traffic to and from its datacenters. I don't touch Google if I request a page from bofa.com, e.g., except maybe through their public dns.
  - bunni 17y ago
    Analytics.
jonknee 17y ago
Google supposedly hacked the hackers and found evidence that they had infiltrated the other companies.
- mahmud 17y ago
  Do you have any evidence for this?
  - jonknee 17y ago
    It was in MacWorld's report and I've seen it a few other places, but no first hand information.

natch 17y ago

I doubt that lie detection voodoo actually works when the person being interviewed is new to the whole being on TV thing.

Groxx 17y ago
That's pretty much accurate. Lie detection methods almost all base around detecting stress, and large amounts of stress (like being on TV for the first time) tend to throw them way off. In order to really have a baseline to compare lies against, you need to have a baseline. If they're not stable enough to do that, the science of it gets lost, and it's basically up to totally subjective methods.

xsmasher 17y ago

A quote in Macworld suggests it's Google's law enforcement backdoor that was compromised. Google didn't mention that in their press release, which is a mighty big omission. http://www.macworld.co.uk/digitallifestyle/news/index.cfm?newsid=28293 http://www.macworld.co.uk/digitallifestyle/news/index.cfm?ne...