Thursday 28 November 2019

Understanding the world of 'isms or how folks differ. Some thoughts.

The modern world is a very fractured place, blessed with instant world wide communications across social media platforms. This can lead to both very life enhancing dialogs but also some very ugly conversations and disagreements amongst groups of people. Everyone belongs to many groups: a race, a religion, a gender, a tribe, a nation, a soccer team or bicyclists; groups small and large. For each group, there are an accepted set of characteristics that mark group members from non-members (group boundary markers), characteristics that, often, in and of themselves are not necessarily controversial. Understanding the divisions in our fractured world can be helpful for conflict resolution and better understanding differences.

Lets have a look at some of the reasons folks hate ( or love ) other folks by reviewing the main 'isms that divide us and review a few more that may help us understand our fractured world. Listed in approximate order of impact.

Racism

Categorising folks based on physical appearance such as skin colour or face shape but also includes language or slang, dress or uniform, food and music preferences, where one chooses or is forced to live etc. It's healthy to have pride in one's racial characteristics but when people hold "the belief that all members of each race possess characteristics or abilities specific to that race, especially so as to distinguish it as inferior or superior to another race or races", racism rears its ugly head. This is the most widely known 'ism having caused much pain and suffering over the years in many societies.

Sexism

Categorising folks based on physically expressed or perceived emotional preferences. This used to be seen as binary area but now has many more sub divisions. The drivers behind personal choices in this area is sometimes determined by physical characteristics but best expressed as "Who you love is not always a choice." This is largely true but environmental and societal factors have an influence on outcomes causing internal conflict between feelings and doings. Many LGBT issues fall in this area.

Religism

Categorising folks based on professed religious practices. This new 'ism can separated from racism because religious beliefs are not inevitably tied to genetic or geographic background. It should be noted that most of the major religions have both factions and extremists that do not represent the religion as a whole. (see Bubbleism).

Stateism

Categorising folks based on their geographic country of origin. This new 'ism can separated from racism and religism because folks from various counties of origin are often incorrectly perceived to have certain stereotypes and characteristics. Usually this characterisation is based on the like or dislike of the political establishment of the country projected on to the individual people. Some nation states are controlled by unrepresentative minorities of the citizens and yet exert disproportionate control claiming supremacy of a religious or political ideologue. Criticism of such nation states should not be confused with religism.

Tribeism

Categorising folks based on their active social or working groups.  Outlaw bike gangs, specific professions such as doctor, farmer and keen sporting participants (but not just sporting club affiliation) are examples of tribes. Close family groups can also be seen as examples of a tribe group. A tribe is bound together by positive involvement in the activity which is more than just an idea.

Bubbleism

Categorising folks based on their affiliation for or against an idea. This new 'ism can separated from racism and religism because beliefs in an idea is voluntary, not pre-determined and can change over time. Examples of bubble ideas would be for or against Brexit, for and against being a vegan, belief or not in UFOs. Bubble idea groups are often seen as sub-divisions or choices within a bigger group such as "I practice religion X but only in this way". Some of the interwebs greatest flame wars have been driven by bubbliest ideas, more guns V less guns, Mac V PC, red dress V blue dress. Nation states that impose bubbliest ideas on citizens are generally seen as dictatorships.

Intolerance for folks with similar ideas

People have a basic human need ; that of a sense of belonging to something bigger than themselves (Karl Rogers) Everybody uses "boundary markers" to signify to themselves the demarkation is between the different groups they belong to. Dislike and intolerance can often be worse between different groups within same 'ism. Different sects of the same religion have often been the basis of conflicts both presently and in history. When viewed from outside, those unfamiliar with the details of the sects, would struggle to see the differences classing both sides under the same overarching banner. Violence between supporters of different sporting teams is disgraceful, but on examination, is often based on some other 'ism.

Crossover areas

The world is a complex and diverse place, some countries are occupied by multiple races and different religions all mingling with little resulting conflict. Other intolerant states have hunted and persecuted minorities demonstrating combinations of both racism and religism or institutionalised policies of sexism. Some country politicians choose to divide and antagonise their audiences based on the 'isms above. The really negative side where those attributes are weaponized and "prejudice, discrimination, or antagonism directed against someone of a different race based on the belief that one's own race is superior". Such views are not amenable to reason because they become part of a person's identity and an attack on the ideas is perceived as a very personal attack.

However for all the 'isms mentioned, there is a positive side that allows humans to feel part of something bigger that themselves, to feel pride and self-confidence, give themselves a feeling of belonging to guide their choices of behaviour . Every person constructs their own identity and their membership in a group is a matter of "self-ascription and ascription by others in interaction". That's an open avenue for change - and allows people to move across social boundaries and allows immigrants to become assimilated.

When examined many 'isms look like one thing but are in fact better understood under a different heading. For example to say "I hate folks from India" ( an example of stateism ) is meaningless when the country has multiple religions, multiple languages and multiple genetic heritages.

Some groups have been seen to claim legitimacy using the strength of religious bonds but in fact are just an idea bubble. This is very noticeable amongst religious fringe elements.

Some nation states use the very flawed logic such as "Most of the people in our country have the same race and therefor to criticise us is racism." or "Most of the people in our country have the same religion and therefor to criticise us is religism." When really the concern is about actions of the state like building/throwing bombs or persecuting minorities using the "they are not the same as us" intolerance.

Range of feelings

Any of the 'isms above can provoke the full range of feelings from passionate love to blind hatred from folks within and without each category of 'ism. The intensity of feeling is often what drives the expression of the 'isms.  Convincing arguments rarely overcome passionately held beliefs.

Changing the scale and point of view can help in reducing the internal conflicts generated by different factions of religions. Within many of the major religions there are factions and sects of belief with fierce conflict between opposing groups. From outside, each religion is classed as a single entity whereas inside there are usually a whole rainbow of beliefs and often conflicting ideas.

One way of de-escalating religious conflict is to think of religions as football teams. Each has many supporters who fervently believe they are the "one true team" but in the wider context of the world they have to compete to show the best performance and outcomes to their followers.  However the biggest problem with just about all religions is how they appear over the years to have suffered man-in-the-middle compromises.

Representation


Democratic representation is struggling to find consensus in the world of 'isms. Political parties often want to appeal to the strong bonds of religion and race when really they are just promoting a specific set of bubble ideas. Many organisations and groups would frame the world in for or against terms when really most folks either don't have strong feelings either way or like some bits but not others or just don't care enough about that thing.

Where there is a win/lose referendum on a complex political issue ( country direction or choosing a president) the don't cares or see parts of both sides are poorly under represented in the results. If really important decisions are made on the basis of the win/loose then any outcome should be convincing enough +/- 10% to carry the day. The best way to progress in the event of a close outcome is to reframe the choice into a win-win situation.

Call to action

The world's description was famously upgraded from "Harmless" to "Mostly harmless." (HHGTTG Douglas Adams) In global terms this reflects the modern spread of increasingly cheap and effective weaponry and the political swing towards single party dictatorships. Leadership examples of uncouth behaviour and language, with a open disregard for the rule of law, a typical demagogue uses differences to give a political group something to identify with and a THEM to turn their hostilities and anger against.

Recognise and resist such divisive behaviour at both the macro level of national politics and the micro level of group and club behaviours.

And finally this quote just about sums how to combat the dessrtuctive effects of 'isms in daily life.
"Respect your fellow human being, treat them fairly, disagree with them honestly, enjoy their friendship, explore your thoughts about one another candidly, work together for a common goal and help one another achieve it. No destructive lies. No ridiculous fears. No debilitating anger."    -   Bill Bradley


** Many thanks to DrMauri for review and contributions to the text above.



Is this Phishing or has HMRC re-located to the Caribbean ?

Had an email yesterday from HMRC and the included weblinks pointed to a domain in the Caribbean island of Granada .gd

Delivery-date: Tue, 26 Nov 2019 18:19:26 +0000

This had me scratching my head to tell if it was genuine or phishing. It has always been hard to tell truth from fakery on the internet and that daily task just keeps on getting harder.  With lots of companies outsourcing email handling to other organisations gmail, outlook etc the message journey from sender to received has got more complicated.

Some new processes (SPF & DKIM) have helped email programs and technical folks to tell if an email has originated from the stated source but widespread use of soft SPF configuration option ~all makes these processes less than a 100% solution.

Whilst the email turned out to be legitimate I decided to take a closer look at the contents of this email to see if my initial suspicions were founded.

Check origin and route 

The first task was to see if the source of the email, stated to be HMRC tax help and advice service, was the actual origin. Large senders of email often use separate companies to handle the email delivery and collection of responses from links inside those emails. UK HMRC helpfully has a page stating which types of communication come from what outsource organisations but does not provide much technical detail or explicit domain name. For example :
1.28 Help and support emailsHMRC will periodically send emails to customers to support their business life events. The emails will sometimes include links to relevant online digital education products, used to offer you help in relation to your business and the email will appear in your address bar as: no.reply@advice.hmrc.gov.uk.These emails will never ask you to provide personal or financial information.All emails issued from this address, are sent by Granicus (GovDelivery) our trusted email service provider.

Inside the text version of the email was

Sent on behalf of HMRC by GovDelivery GovDelivery logo [ https://subscriberhelp.granicus.com/ ]

and the source headers confirmed routing from govdelivery.com to mailhostbox.com where my inbound email arrives.
Received: from mailer086121.service.govdelivery.com (mailer086121.service.govdelivery.com [69.5.86.121])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by us2.mx.mailhostbox.com (Postfix) with ESMTPS id A68671500017
The SPF configuration appears to confirm this route and is correctly formatted.
Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=69.5.86.121; helo=mailer086121.service.govdelivery.comenvelope-from=no.reply@advice.hmrc.gov.ukreceiver={{email address redacted}}

The TXT record on the advice.hmrc.go.uk also confirms sender govDelivery is authorised.

$ dig advice.hmrc.gov.uk TXT
shows 
     "v=spf1 include:service.govdelivery.com -all"

Check links and content

The anti-phishing golden rule of "don't click on links that go to sites unrelated to the sender" stands the test of time but this can be compromised by poor choices of branding over security.

The email in question has the message in two formats text and html.

In the text version
Topic Unsubscribe [ https://public.govdelivery.com/accounts/UKHMRCED/subscriber/unsubscribe_from_topic?verification {{ reference redacted }} &topic_id=3DUKHMRCED_995 ] 
In the HTML version there is a similar unsubscribe link but this looks very different:
You can unsubscribe from these help and support emails using our one-click =91https://lnks.gd/l/ {{ Long verification code redacted}} /br/71900000088=-l?verification={{ Short code redacted}} &destination=3D {{Plain text email redacted}}"

This is is where alarm bells ring. The domain used for the links lnks.gd is using a domain name .gd that is from the sunny caribbean island of Granada. Whilst I like the idea that HMRC has it's mailing list clerks working from home in the caribbean I suspect that GovDelivery has snagged what it thinks as a nice branding domain name to use for the mailing list management server.

The use of plain text emails in the unsubscribe link is also a problem littering the web server logs and web traffic with copies of sensitive personally identifiable information. The use of a foreign domain name is also troubling as internet traffic hijacking could compromise this route.

Also seen in the text version
View in browser [ https://content.govdelivery.com/accounts/UKHMRCED/bulletins/26daccd]

In the HTML version
https://lnks.gd/l/{{ reference redacted }}
Having different links between the text and html version of the same email is error prone and probably bad practice.

Conclusions

Even thought it does look like this email has been subject to a URL injection attack the far more mundane explanation that "branding has triumphed over sensible security configuration" with an unhealthy side order of bad practice prevails. Some tips for future campaigns:

  • Use the same content (text and links) for all versions of the email ( text, html, rtf).
  • Use the same TLD domain name for links and extra content as the origin of the email.
  • Make it very clear if a "technical provider" is working on behalf of an organisation by notice on the source site and delivery site. Put this in the "Contact Us" part of the website. Mention specific domain names.
  • Don't use vanity TLD domains for really important stuff unless your whole org lives under that domain.
  • Set up TXT record on your DNS record to indicate trusted email senders.
  • Use -all (not ~all) to enforce your sender policy framework 

HMRC Response

noreply.phishing@notifications.hmrc.gov.uk confirmed that ....
"We can confirm the communication you have received is from HM Revenue & Customs."

Wednesday 27 November 2019

Why asking the over 75s to start paying for TV licences is a really really bad idea.

November 2019 The free TV licence for all over 75s is set to be withdrawn in 2020 under plans announced by TV Licensing and described by the BBC here.

This is a really bad idea for the following reasons:

1) The costs of doing business with this demographic will be high and is unlikely to return the expected value to BBC.  The plan announcement above already lists extra costs with the need for extra call centre staff and "outreach programme delivered by specially trained customer care field staff."

2) The decision to charge for the TVL will be based knowing if the customer is "in receipt" of pension credit. This will involve the delving into the finances of old folks, a notorious area for confusion and uncertainty.

3) Asking someone to pay for something that used to be free is a very tough ask especially when done without showing extra value.  Saying that the TVL supports iPlayer, Sounds and lots of websites is not a convincing sell to the over 75s.

4) There is a banner on the TVL  announcement page that says
"Watch out for scam emails and phone calls asking you to provide 
your bank, card or personal details. 
For more information, please check our  help and advice on scams.
Financial organisations world wide have a pitiful record of protecting elderly customers from financial cons, frauds and abuse even when large sums are involved. The chances of preventing cold calls about "You have not paid your TVL - pay by card now." will be the fraud challenge of 2020.

5) Recovery of non-payment of £157 + fine from over 75s via the courts will be a legal challenge too far. Any widespread attempts to take frail pensioners through the courts system for non-payments of TVL, a cause for which there is little public support, is just going to create noise and repetitional damage to the BBC. Remember the poll tax riots of the 80' ? An unpopular and badly thought out tax that eventually factored in the downfall of a government. Remember the RIAA suing downloaders ?

6) The outsourcing business partners who implement the TV Licensing collections will hide behind the skirts of the BBC transferring all the noise and upset potentially changing the BBC reputation from a "much loved auntie" into a rapacious beast.

7) The justification for scrapping the free licence scheme was based on a result of
"The BBC's consultation was announced in 
November last year. Nearly half of respondents (48%) 
said they were in favour of continuing concessions to over-75s."
This type of result is not consensus for scrapping something that will financially impact up to 3.7 million over 75s. The Brexit question has a similar result and look how divisive the fallout from that has been.


What comes next

TVLicence gift cards.