Crashing and Hacking the Smart City – Jiaqi

“Buggy, Brittle and Bugged,” Smart Cities

  • “Today, we routinely send anonymous bug reports to software companies when our desktop crashes.” If this is a portable model to debug smart cities in the future, will smart citizens be prepared? Although we report these bugs, it is maybe too late because the bugs may have already lead to a crashing of the system. In this situation, should we rethink a new way to build a smart city? It may not be top- bottom or bottom- top that simple. Maybe we could start to build smart citizens first?
  • As the book mentioned, in the parts of the world, different countries face the same issue – surveillance, but they have different feedbacks. It brings the idea- situated smart cities. When smart cities are crashing, and every smart cities are different. Should we make all back-up ways all the same or we must situate back-up ways for specific smart cities in the world when smart cities face the same bug?

An Emerging US (and World) Threat

  • The author mentioned “Cyber Security Problems” and also gave “Recommendations” for basic problems of smart cities. Maybe there will be disastrous If we change all cities in this world to be smart cities one day, would we have the possibility to change them back to current? When we think about how to back up our technology masterpiece – the smart cities, should we think throughout for years how could we make a smart city(test bed) without bugs before we make the second one or we could predict and solve these bugs at least?

W11 Interdepndence and Overreliance – Nida Ali

Interdependence and Overreliance

 

1)  “ We are weaving technologies into our homes, our communities, even our bodies- but even experts have become disturbingly complacent about their shortcomings. The rest of us rarely question them at all…. But what if it’s the harbinger of bigger problems? What is the seed of smart cities own destruction are already built into their DNA? –Buggy, Brittle and Bugged – Smart Cities. Anthony Townsend

“In our research at IOActive Labs, we constantly find very vulnerable technology being used across different industries. This same technology also is used for critical infrastructure without any security testing. Although cities usually rigorously test devices and systems for functionality, resistance to weather conditions, and so on, there is often little or no cyber security testing at all, which is concerning to say the least.”

“When either wireless or wired communications security is poor, an attacker can easily intercept and hijack communications and take control of devices and networks. We see this all the time; most such communications are insecure”. –  Active Hacking – Cesar Cerrudo

 

If smart cities contain bugs within their systems, before these systems are plugged into cities, how do you find the bug or error without plugging it into a city? How can they be tested before they are integrated into a network that effects not just the infrastructure but people as well? Is the system or method of testing prone to flaws as well? Aren’t security systems set up to prevent cyber hacking prone to hacking as well? They may defend the network better but they are also susceptible to attacks and are vulnerable too. How effective are cyber security systems? There are new virus developed everyday, how effective are cyber security softwares and systems? What are their limitations and parameters?

 

2) “The sheer size of city-scale smart systems comes with its own set of problems. Cities and their infrastructure are already the most complex structures humankind has ever created. Interweaving them with equally complex information processing can only multiply the opportunities for bugs and unanticipated interactions.”

“ The pervasiveness of bugs in smart cities is disconcerting. We don’t have a clear grasp of where the biggest risks lie, when and how they will cause systems to fail, or what the chain reaction consequences will be. Who is responsible when a smart city crashes? And how will citizens help debug the city?”

Buggy, Brittle and Bugged – Smart Cities. Anthony Townsend

“There is a huge and unknown attack surface on smarter cities. With so much complexity and interdependency, it is difficult to know what and how everything is exposed. Therefore, simple problems could cause a big impact due to interdependency and chain reactions.20 This is what makes threat modeling so important…Has anyone seen a threat model for a city? Maybe these exist, but I haven’t seen one. Some larger software and services vendors have issued general documents about cyber security in cities but nothing very specific.”

 

“The current attack surface for cities is huge and wide open to attack. This is a real and immediate danger. The more technology a city uses, the more vulnerable to cyber attacks it is, so the smartest cities have the highest risks.”

 

–  Active Hacking – Cesar Cerrudo

City smart systems consist of the physical infrastructure and a digital one, both come with their own set of complications and problems, What approach can lead to this integration, to be less riskier and better fitting? How would one test this integration? Does it depend on the context or the issue, whether a bottom up or top down approach is effective, it also depends on which infrastructure is effected? What type of prototype or model should be built or an actual neighborhood would be taken as a prototype to test such technologies first? Can these systems, which are interdependent on each other, function better if when one is effected it shuts down so as not to effect other systems and back up system takes its place? (parallel circuit and not a series circuit). The malfunction of one network would replace itself with a back up system to prevent the other systems dependent on it to not malfunction. System such as the internet, cloud computing, cellular networks, GPS, sensors, etc. How can these chain reactions be addressed and what countermeasures need to be made or taken in order to prevent a complete system shutdown or malfunction?

 

3) “ In our rush to build smart cities on a foundation of technologies for sensing and control of the world around us, should we be at all surprised when they are turned around to control us?’

“ Thinking about the unthinkable dictated a whole new approach to building cities. By concentrating population, infrastructure, and industrial capacity in nice, big juicy, megaton sized targets they had become a liability in the nuclear age.” …Norbert Weiner, “The decentralization of our cities on the spots on which they stand, plus the release of our whole communications system from the threat of a disastrous tie-up, are reforms which are long overdue… For a city is primarily a communications center serving the same purpose as a nerve center in the body.”

“We will never know if the negative impacts could have been avoided, but it would not have cost much to try. We might have even avoided the very unintended consequences we now invent smart technologies.”

Buggy, Brittle and Bugged – Smart Cities. Anthony Townsend

 

“It’s extremely important: Technologies used by cities must be properly security audited to make certain that they are secure before they are implemented. …. When we see that the data that feeds smart city systems is blindly trusted and can be easily manipulated, that the systems can be easily hacked, and there are security problems everywhere, that is when smart cities become Dumb Cities.”

“The nature of the impact depends on the extent to which a city relies on the services affected.”

–  Active Hacking – Cesar Cerrudo

 

By overseeing and managing the data being fed into and out of smart city systems, how effective would this solution of managing the data be when it comes to the structure of the system? If the system itself has bugs then does the data processing through it matter? To what extent?

If these consequences, (Townsend mentions) were addressed, would they only effect the problem in the short run or the long run? Is the patch, for solving the issue to let the system continue working rather than actually finding the core root of the problem?

Does the weakness or problems in the smart city infrastructure lead to it being called dumb city or does the existence of dumb citizens (participatory) lead to it being called a dumb city? Or the existence of both define the existence of dumb cities? What effects smart cities more, currently: citizens that effect the infrastructure of the city or do the networks or systems integrated in these cities. Can citizens take security into their own hands? How so ? Or do we need specialized companies like IOactive labs to secure our systems? How involved do citizens need to be when addressing such problems?

 

 

 

 

 

Crashing and Hacking the Smart City

Cerrudo, “An Emerging US (and World) Threat: Cities Wide Open to Cyber Attacks,” White Paper

-Sadly cities are implementing new technologies without first testing cyber security, there is often little or no cyber security testing at all, vendors with little or no experience in implementing security features, Many vendors implement custom wireless and wired communication protocols with either very poor security or no security…. Who is responsible or at fault for such lack of knowledge or being carless while implementing technologies in smart city, the government, other private organizations or vendors who designs these devices and technology?

– In our research at IOActive Labs, we constantly find very vulnerable technology being used across different industries. This same technology also is used for critical infrastructure without any security testing. Although cities usually rigorously test devices and systems for functionality, resistance to weather conditions, and so on, there is often little or no cyber security testing at all, which is concerning to say the least (pg.no: 08). Is it always possible to test technology completely and assure that there is no bug? Sometimes a hardware failure can also cause system to fail.

Townsend, “Buggy, Brittle and Bugged,” Smart Cities

-The sheer size of city-scale smart systems comes with its own set of problems. Cities and their infrastructure are already the most complex structure humankind has ever created. Interweaving them with equally complex information processing can only multiply the opportunity for bugs an unanticipated interactions (pg.no:256). Will the bottom up process of building smart cities have minimal chances for bugs and unanticipated interactions?

 

 

Crashing and Hacking the Smart City–Yumeng Chen

Buggy, Brittle and Bugged

–In the case Y2K, the reality is very like the division of labour in society today, people just pay attention to their own duty, which relevance their own benefit only. However, if there’s a issue which brings no benefit or benefit others as well, who will have the motivation to do it?

 

An Emerging US (and World) Threat: Cities Wide Open to Cyber Attacks 

–In page 8, author talks about encryption issues, test process is really big issue. Because it is really depends on specific situation where this system placed. Kind like architecture, why we say it is irreproducible, because even we got the same drawings, we can’t build the same building in 2 places due to the different of weather, environment and even the workers. Same, I think the test should be in the specific location. How do we think about this idea which relates to the cost increasing and the time increasing?

 

–Another thing always comes to my mind is, in order to keep the city security, we have to keep improving the firewall in order to defend the hackers, same like the chip card technology. It’s kind like an abime, since we start with the big data, open source, we start to fight against the hackers. When we began to build smart city, did we consider about the cost of the follow up cost?

Crashing and Hacking the Smart City

Buggy, Brittle and Bugged – Townsend

It becomes clear that as technology attempts to automate tasks the design for which fails to encapsulate uncertainties and preferences, we will be surrounded with “buggy” infrastructures. This begs the question, Will the smart city have a manual flush option? Or will we be subjects of frequent bugs and glitches at ever growing scales of complexity and relative consequences?

In describing the “First actual case of a bug being found”, Townsend highlights that bugs can be software glitches resultant of coding or physical wear and tear of hardware due to lack of maintenance or unforeseen accidents. Although the public persists to call for an “exposed smart city infrastructure” where citizens can more easily perceive and understand their smart city grid, do they understand the implications doing so could have in increasing the probability of bugs and failures due to tampering?

Is it worth considering that interlacing of the entire city into a centralized smart city infrastructure (due to software interdependencies) vs more analogous, fragmented structures deployed today, that the risk and relative cost of attacks/failures effectively underscores corporations’ promise of increasing efficiency and profitability?

Will fear of tampering with the smart city infrastructure delay / effectively abolish the hope of DIY citizens’ access to smart city “walled gardens”? How can we increase the smart city infrastructure’s resilience against bugs and attacks without walling out citizens and their potential contributions to the infrastructure?

If hacking is considered an expression of agency manifesting in contingent use (exploitation) of certain technologies can we think of hacking in and of itself as a form of citizen participation that prompts constant evolution adding layers of sophistication and resilience to the smart city? Are attacks, bugs and glitches the vaccine to larger scale threats? Much like viral infections are to our immune systems? Consider a group of ethical hacking activists that aim to highlight and expose areas susceptible to infiltration much like citizens report “bugs” in the physical infrastructure (potholes etc) to local authorities today

An emerging US (and World) Threat – Cesar Cerrudo

“What would commuting look like with non functioning traffic control systems” Non technologically-mediated infrastructures have been implemented in a number of areas around Europe and the UK (shared space initiative) and have had “positive” effects – It is feasible to consider where technology should be implemented vs where is can be. In doing so can we preserve our state of functionality more so than if we surrendered everything to a floating buggy infrastructure? Or would we, by doing so, omit seemingly unnecessary technologies from contributing to a larger picture that is yet to be realized?

“How would citizens respond to an inadequate supply of electricity”..etc. Consider the plausibility of a smart city backup structure that is surrendered to the citizens. The equivalent of citizen generators and independently owned and run street lights that kick in in the event of a superstructure bug or attack. Will doing so allow DIY activists to understand the system and actively contribute/inspire future implementations with regards to security and functionality, adding resilience to the smart city infrastructure and concretizing the dialogue between top down implementation and bottom up innovation?

“The public needs to see to believe. Cities are not spurred into action by discussions about suspected vulnerable products and threats” – This reiterates that bugs and hacking are a critical component to strengthening the smart city’s immune system – making it more resilient to devastating attacks and or failures.

An investigation of the weakness of sub structural infrastructures’ security systems begs the question: could their weakness be due to a general under-estimation of the public’s understanding and will to hack, manipulate and repurpose infrastructures in addition to a general complacency with regards to maintenance and upkeep with current technological processes? Is there simply less room for such complacency now?

W10 Open Source Urbanism

These alternatives in software, Free, Libre and Open Source Software (FLOSS), are highly pragmatic, doing the work required of them but also reinventing forms of production in ways that set up real possibilities for freedom.  (Page no 13)

The Free Software Definition3 states that free software contains the following freedoms:

  • The freedom to run the program, for any purpose (freedom 0).
  • The freedom to study how the program works, and adapt it to your needs (freedom 1).
  • The freedom to redistribute copies so you can help your neighbor (freedom2).
  • The freedom to improve the program, and release your improvementsTo the public, so that the whole community benefits (freedom 3).

 Access to the source code is a precondition for this. (Page no 16)

Thoughts —

The author compares the idea of architecture development with software development and its related system types and freedoms working with it. Particularly open source software with access to source code and data. Is this saying about architectural data like building designs, city plans and collected data from people time to time?

(Freedom 0)– Architecture and spaces are the mostly static physical thing, requires lots of resources to make it happen a trial and error is not possible in terms architecture. How this freedom will be possible in terms of architecture and building space.

(Freddom1)(freedom2) — Architecture design and data to study is already available, one can modify according to needs. But most of the time modification won’t work completely, factors like climate, location, rules and resources don’t go with an idea. Also personal choice and requirement of investor play a major role. Source code, in this case, is design drawings and authenticity of creation could be an issue in this situation. Creativity comes with one’s pride and it’s a push force to create next. In open source scenario city will might look like monotonous and fewer creations will be there.

(Freedom3)—Freedom to involve and improve is a really fantastic idea. But in another perspective it might not end up with that great achievement, public opinions and feedbacks come in large numbers and with lots of glitches. Needs lots of time to gather data and participants also need a lot of time to involve which they don’t want to give for free. Evaluating them is issue and result might disappoint many participants. Participation in architectural problems needs professional skill sets to think and it’s not common. Giving inputs for free is opposite sometimes to its professional behavior.

—————————————————————————————-

 Architecture is merely an epiphenomenon of the political, monetary and material requirements of certain dominant fractions of society, perhaps all such an open aesthetics of organization would tend to do is to render such processes “democratic.”  (Page no 18)

  Architecture is epiphenomenon could have another perspective looking toward it. Architecture is in Harmony one could say. That doesn’t mean its byproduct of political, monetary and material requirements of certain dominant fractions of society. Political, monetary and material requirements or restrictions are planned set of rules by the scholar in that field. Otherwise, cityscape could look like chaos. For example, an old roman city used to have similar kind of architecture which was built under political, monetary and material conditions. It’s about Freedom but the result could be Harmony or Chaos.

 

 

 

 

 

W-10 Open Source Urbanism – Nida

Both the readings seem to emphasize the idea of users being designers or a part of the design process.

 

Urban Versioning System 1.0 ,Matthew Fuller and Usman Haque

 

1) ‘In the coming decades computers will increasingly be a part of the architecture itself, enabling user-

centered interaction systems for configuring environmental conditions.’

To design or produce user- centric spaces, can the integration of technology designed by users and designers help aid architectural experience (physically, mentally or spiritually)? Computer scientists seem to be building technologies that are creating people centered architectural interfaces, why are architects not a part of the desing process or consulted upon designing such interfaces? Isn’t the environment we interact in just as important as the technology that helps to create it?  Can the production of such interaction systems lead to a more collaborate effort amongst multidisciplinary fields or does it hinder the creative process? Does it take into account users willingness to adapt to such systems?

 

2) ‘It might be argued that cities are already developed analogously to the ways that a CVS (concurrent versioning system- means for software developer to collaborate) aids in the construction of software. This may be so, unconsciously; however buildings, streets and neighborhoods are still regarded as static, immutable end-products rather than dynamic states within a progression. In an architectural context, a CVS would need to achieve two goals. First, it would enable the processes of development, testing and inhabitation to occur concurrently. Second, it would

provide an infrastructure for different granularities of participation for each designer/participant.‘

 

Even though such systems would encourage collaboration and participation what would the parameters or limitations to such systems be? If the design process is “open” but the results are structurally, “closed” and there is no distinction between design and habitation, what issues would this bring about? Not only in the design process but also in its construction process? Does such a distinction need to exist? If softwares like CVS help software develops collaborate better, can similar systems be adapted to architecture and if so how different would its structure be that from CVS?

 

3 “The problem is that architectural design can often simply be a process of predicting problems, removing obstacles and resolving all possible contradictions: the best situation, from the perspective of such an architect, is to have project documentation that is so complete that every aspect of the construction process has been articulated and specified so that the eventual building construction contractor needs to make no on-site decisions and simply has to follow orders to the letter. The first was raised by cybernetician Gordon Pask (particularly in association with Joan Littlewood and Cedric Price’s “Fun Palace” structure.) Here, they emphasized the quality of underspecification.The notion of architecture as a system with underspecified goals suggests an architecture that evolves (and which is, therefore, never “complete”). Apart from making it clear that design and production are simultaneous activities, this conception also helps erase any pre-existing distinction between a building and its environment: it presupposes that a building creates an environment (which includes both our conventional understanding of ecological “environment” as well as all the constituent players, such as its occupants), and carries on creating an environment as it attempts to specify itself. In truly underspecified buildings, architecture can’t help but be ecological,not necessarily for the better, in the sense that all crucial input and output sources inherently become part of the architectural system.”

 

In Cedric Price’s Fun Palace, the idea was to create an architectural system that constantly evolved an dnever ‘complete’. How does this constant evolution of space psychologically effect the user within that space? How does the constantly evolving environment effect the occupants within that space and how does it effect the relationship amongst spaces within such an environment? What are parameters and limitations of such systems? Would this integration of software, hardware and architecture be considered a bottom-up approach where this building can be seen as a prototype before implementing such technologies at an urban scale?

 

 

 

 

Smart cities, ‘The Open Source Metropolis’, Anthony Townsend

Cable era giving way to the internet:

1) “William Gibson explained: “ The street finds its own uses for things- uses the manufactures never imagined. The microcassette recorder, originally intended for on-the-jump executive dictation, becomes the revolutionary medium of magnizdat, allowing the covert spread of suppressed political speeches in Poland and China. The beeper and cellular phone become tools in an increasingly competitive market in illicit drugs. Other technological artifacts unexpectedly become means of communication, either through opportunity or necessity,”….With little to lose, the grass roots readily adapts flexible and abundant technologies to pressing problems- spreading dissent, eluding law enforcement or distributing music. The stuff of smart cities- networked, programmable, modular, and increasingly ubiquitous on the streets themselves- may prove the ultimate medium for Gibsonian appropriation.”

Technological artifacts are considered to be in a sense immortal, because it is constantly changing and evolving and present in our society in one form or another. Does technology only become a means of communication through opportunity or necessity? Is there a distinction still present between the two? Top down or grass roots ( bottom up approach) support the idea of technology being a means for communication through opportunity or necessity? Would the collaboration of science fiction writers and technology developers lead to a creative and innovative design process? Why isn’t such collaboration considered when designing new technologies?

 

2) “ITP’s ambition was to challenge top-down thinking about technology….their focus of interest is obvious- cost effectiveness, However in concentrating… on the bottom line, they have neglected the process through which people harness the technology to create a system.”

“stop paying attention to technology, and start paying attention to people…..Because users are intimidated by the technology and do not have a hand in its design.”

“The Death and life of Great American Cities, by Jane Jacob’s, “glorified how good streets create opportunities for people to meet by chance.” – Dodgeball

Apps such as Dodgeball and writers such as Jane Jacobs, all point towards a bottom up approach as opposed to ITP’s top down approach, would these different approaches be considered successful in the context and scenario they are applied in as opposed to adopting one approach over the other. Maybe different stages of the development of such technologies require either one of those approaches or it depends on the technology? Marketing departments carry out surveys or user testing of products when they are in its prototype phase, wouldn’t this integration which may be a top-down approach is still considering users in its design process?

 

3) “ Arduinos are becoming cheap enough to stick almost anywhere in the city, and could be the raw material for a kudzu-like explosion of a citizen- built infrastructure of urban sensing and actuation. …suggest a future where citizens decide what is connected to the Internet of Things, and why. Instead of being merely a system for remote monitoring and management, as industry visionaries see it today, the Internet of Things could become a platform for local, citizen microcontrol of the physical world…..Arduino gives us the tools to thoughtfully structure intelligence into the intimate, everyday, human-scale spaces and objects we live in. .. Instead of big data, it lets us collects and spread a few bits that really matter. The promise is that we’ll build the hardware of smart cities just like we build the web, by empowered users one little piece at a time”.

Arduinos, “becomes an excuse to build relationships with people” – Arduino share code ask someone for help.  “social lubricant”.

Would technologies such as Ardunios decrease the distinction amongst different professions when designing and lead to a more open and collaborative design process? Would the integration of such hardware and software into the citys current infrastructure be accepted and adapted more willingly, since users have a say in the design process? Freedom and opportunity of choice for users help aid in well integrated infrastructures and design of technology?

Open Source Urbanism

When Haque and Fuller affirm that “just as with any non-human entity, we collectively construct our ecological and architectural frameworks, and these frameworks tend to overlap with those of others. These overlaps have consequences. The difference is (or should be) that we consciously recognize our interdependence and thus must consciously act upon it.”, when it comes to tha Smart City, how can this be applied to people which is not necessarily involved in architecture? can new ways of fabrication be utilized to open new ways of agency in the building of the city? How this overlaps can be negotiated and by whom?

Also Haque and Fuller affirm that “This has specific impact on the role of the architect. It suggests a new focus on enabling, generating and engaging, adopting a role similar to the one an operating system designer performs in the world of software. This does not necessarily confer equal responsibility to all participants in a system but instead presumes that while hierarchies formed by experience, skill and aptitude are inevitable, they are not immutable. Equally, such an approach changes the site of the aesthetics in architecture to one not of form but of organization. The aesthetics of organization have yet to be decisively […] various interests. More important is to concentrate on widening people’s spheres of responsibility, and hence motivation, commitment and agency with regard to the design and inhabitation of the urban environment.” In this sense, up to what extent can this be achieved regarding the material limitations of architecture in relation to the design of open development in the digital realm? Up to what scale can this metaphor by applied to the physical world? Also which is the role of the architect in this context? Which is his responsability on enabiling a larger engagement on the design of the city?

In Townsend perspective, “The technology giants building smart cities are mostly paying attention to technology, not people, mostly focused on cost effectiveness and efficiency, mostly  ignoring the creative process of harnessing technology at the grass roots [, but] truly disruptive application of new information technology have almost always come from the bottom up […] When you start paying attention to what people actually do with technology, you find innovation everywhere”. In this sense, how can we shift the values trough which c technology is being developed, thinking about new ways of considering values such as efficiency? How can we assure that that the innovation developed from the bottom-up is not mis-appropriated by the techology companies or the government to its own ends? and how can we assure that this development remain open for future participation and engagement?

 

Open Source Urbanism

Urban Versioning System 1.0

The architectural profession remains relatively steadfast in a distinction that divides designers from users, even though technology increasingly provides grounds for diminishing that distinction – What are these distinct features that divides designer from user, as a designer thinks to from user end perspective.

A pragmatic rst step would be to develop infrastructures that enable supposed non-designers to participate more closely in the design and construction process. Involving non designers in a process for feedback would work to resolve design oriented issues but will it not slower down the process of designing and execution.

 

 

 

Open Source Urbanism – Jiaqi

The Open-Source Metropolis

  • From this chapter of the book, author’s main argument is coming from “The technology giants building smart cities are mostly paying attention to technology, not people, mostly focused on cost effectiveness and efficiency, mostly ignoring the creative process of harnessing technology at the grass roots.” Does he mean technology is not important or to say technology should not be the most issues for the construction processes of smart cities? Even if we move the concerned eyes to the people, we cannot really care about them without proper technology. In other words, people are the foundations of smart cities as the grass roots, but technology is water and nutrition.
  • In this book, “Pie in the sky” which means free WIFI. There is a competition between hackers and big monitored companies who both are building WIFI but one is free one is need to be paid. Who will win in the end? We don’t know yet. Smart city belongs to be open and free for people. But we still need governments who are manager currently, companies who are “making money for themselves” currently and free hackers of people who are fighting for smart cities. If all companies and governments are disappeared, do hackers really manage and create smart city successfully?

Urban Versioning System 1.0

  • “ The first consequence because of distinct the process of design from construction is a basic assumption that building only begins once the design process is complete.” This is a very interesting view for smart cities. The smart cities are very different from normal architectural view. The construction process and design process are almost moving forward together. When we use Arduino to making LEDs becoming a signal for detecting water temperature in the mean time we could engage in build the configuration by sensor and LEDs. Does this consequence change the way to build smart city? Does the way should be designing first and constructions later when we engage in the process of constructing a smart city?