image

The real meaning of Comcast generosity

 

In the old days –

10 years ago, I entered the "broadband" world as a DSL customer with GTE.  I started at 768 kbit/s service, and it was about $35/mo.  A lot has happened since then, GTE spat out Verizon, and eventually offered more speed for the same money.  Cable modem service was pretty lousy until Insight Communication unleashed their 10 mbit/s service in my area.  I have been a cable modem user ever since.

I do IT work, as well as independent graphics and filmmaking work (bit of a hobby), so my life is tied very tightly to the internet and I don't mind paying a little more for extra capacity.

However, I live in one of those "effective monopoly" areas where there's effectively only one cable provider, only one phone provider, and most of the independent ISPs have been run out of business.  My cable provider, Insight, eventually gave way to Comcast, which brings us to today.  Comcast's service didn't start out "too bad", the only thing I noticed is that all in all, performance went down a bit.

The loss of Net Neutrality –

In addition to Comcast's secret, but well known practice of shutting off service to those who exceed a secret amount of bandwidth per month, it was also discovered that Comcast was secretly and arbitrarily slowing down specific kinds of network traffic, at their discretion.  The FCC told them not to, Comcast said they stopped, but of course, it was discovered that this was not entirely (nor partly) true.  But NOW they say they've stopped, for reals. 

The FCC of the last 8 years hasn't exactly been consumer-focused.  But surprisingly, even they saw Comcast's secret bandwidth manipulation for what it was – anti-competitive behavior.  I'm not sure how much of that was FCC fortitude and how much of it was political pressure, but at least it was something. 

The New (double) Deal –

Comcast, theoretically, gave up its secret manipulation of your internet traffic, deciding instead on taking a different course.  They announced plans to implement a new two-pronged scheme that they publicly claimed was aimed at both curbing internet usage preventing congestion on their network.  A plan they call "generous".

This has been implemented as of January. 

Prong #1 – Comcast now has a publicly stated limit of 250 Gigabytes of downloaded data per month.  You are not currently allowed to know how much bandwidth Comcast thinks you've used, but if you use more, and if Comcast chooses to, they will call you to and ask you to curb your usage.  If you don't, you may be disconnected for 6-months.  Seems pretty straight forward.

Prong #2 – This is more interesting.  If you use more than 70% of your bandwidth for 15 minutes or more, your data may be delayed or dropped.  Theoretically, this only happens during times of congestion, but details on how it specifically works are sparse, so knowing what Comcast is really doing is, how to put it, "a matter of faith".

Generosity or something just a tad more selfish? –

On the surface, these two rules might appear to be part of a new, data-neutral Comcast, just trying to to relieve clogged network traffic on behlf of their customers.  But the curious mind would naturally ask –

  • What kinds of data are likely to put someone over 250 Gigabyte limit each month?
  • What kinds of data are likely to utilize 70% of one's bandwidth for 15 minutes or more, tripping the delay/drop switch?
  • Why isn't the data that Comcast sends to me part of the data limit?
  • If Comcast is having throughput problems that necessitate these bandwidth constrictions, why did they just announce and implement 50 mbit/s service?

Never presume stupidity when greed is a possibility –

This is better said with an analogy.  Let's say you buy everything from various online vendors and have it shipped to your house via FedEx, because it's the only courier who delivers to your house.  Amazon is a vendor that depends on a delivery service, so they buy FedEx.  Now Amazon is both a distributor and controls the means of delivery for all other vendors.  Then, Amazon says "we'll ship as many boxes of Amazon goods to your house as you want, for a monthly fee.  We'll still ship boxes from other companies, but you can only receive 100 lbs. of boxes per month, and if you try to send a lot of boxes at once, we reserve the right to delay or lose them at our discretion.  It should only affect 1% of our customers, it is very generous.  It will help ease shipping/delivery congestion."

Comcast is a content distributor, and they rely on sending their data to your home like other content distributors.  Now that they are in the ISP business, they control the means of delivery for all content providers who need to send their data to you, but their goal is, of course, to protect the profits of their own content distribution business. 

So, naturally, they would seek to arrange things so that their services supersede all other vendors.

So, why a 250 GB cap?  Because the media content Comcast competes with is big.  4 gigs or more for a standard full-quality DVD.  A Blu-ray HD movie in its native format could technically be up to 50 GB (though usually around 25 at the moment).  Add a few movies on top of all the little crap you download every day, with windows updates, maybe you have a few remote desktop sessions open 24/7 like I do, internet radio, maybe you downloaded the Windows 7 beta, you watch a lot of netflix streams,  webcams,  etc, it all adds up. Comcast is well aware that the few who get their media from other vendors today will multiply over time, because cable service just isn't very competitive compared to the on-demand, wide variety, internet world.

So, why a delay/drop if one uses 70% of bandwidth for 15 minutes?  Let's say you download a movie from one of Comcast's competitors, Vudu, which is sort of a Netflix for HD video.  Vudu movies take a long time to download, even at 100% of your bandwidth.  Disrupting such services would be in Comcast's interest.  If your download keeps dropping, you may give up and just use Comcast's competing services instead.

So, why isn't the data that Comcast sends to me part of the data limit?  Because Comcast makes the rules and you're lucky you even have internet service in this town, chump.  When it comes down to it, your digital cable service is essentially video streamed over the network, but you can watch Comcast HD all day with no penalty or restriction, the restriction only applies to the stuff you get from other distributors.  If this doesn't underline anti-competitive practice, I don't know what does.

So, If Comcast is having throughput problems that necessitate these bandwidth constrictions, why did they just announce and implement 50 Mbit/s service?  Well this is an interesting one:

As I said, I started in the broadband world 10 years ago with 768 Kbit/s monthly plan.  One would assume that 10 years later, Comcast would have a network backbone that's a little more substantial.  So let's do the math:

Today, I pay for 10 Mbit/s service:

10 Mbit/s = 3240 GB/Month

but Comcast tells me I'm not allowed to use 92% of it, leaving me with 250 GB/Month:

250 GB/Month = 771 kbit/s.

image

On a monthly basis, everyone on Comcast, whether they have 1mbit or 50mbit service actually has a maximum of 771 kbit/s of service over the course of the month, period.  No different than the DSL I had 10 years ago –  except that no one was secretly deciding whether my data was important enough to actually make it to my desktop, and there was no threat of being cut off for actually using bandwidth that was paid for and made available to my connection. If Comcast's network is as frail, outdated, and oversold as it claims – such that it can barely stay up with a decade old level of bandwidth – something seems very wrong.

So, in short, I struggle to find any logic to the notion that Comcast's primary interest is in preventing network congestion.

You might say "Other ISPs have used download caps and speed throttling in the past. What makes Comcast different?" Well, this is an issue for the FCC to figure out. It can be argued that the independent ISP is largely a thing of the past, and capping downloads contributed to the demise of many. But Comcast is not just an ISP, it has a vested interest in pushing you toward services it, as a content distributor, provides. In many areas it carries monopoly weight, sitting on cable infrastructure embedded into just about every home. So the question isn't about the rights of an ISP to set its terms of service… it's about whether Comcast, as a content distributor/infrastructure/ISP hybrid, can align its ISP terms of service and operational practices in such a way that discriminates against competing internet based services.

 

A New FCC, a New Hope –

I actually wrote this article in October, but sat on it until now because yesterday's FCC just didn't give me a lot of confidence (to put it very, very nicely).  But as of today, the FCC is new, hopefully has a new direction, and will hopefully take a more critical look at the conflicts of interest posed by Comcast and other media vendor/ISP hybrids.  In fact, today they are taking a look at Comcast's VOIP policy with the same lens.

There are three critical principles that I think should govern the behavior of any company that wishes to engage in ISP-like business (and yes, these are broad generalizations, not necessarily worded as I might word them in a final regulation, and I recognize that there must be some nuance).

  1. Data is sold as throughput only, not as a cap or combination of factors.  If you pay for a gym membership, you can be at the gym as much or as little as you like.  If you pay monthly for 10Mbit/s, you should get up to 10Mbit/s ALL MONTH LONG.
  2. It is up to the ISP to provide sufficient throughput to reasonably support the levels of service they have sold.
  3. Packets sent or requested by a subscriber are routed BLINDLY.  They are not inspected, parsed, subject to delay, unless there is a warrant or external evidence that the machine in question is engaged in an intentionally malicious activity against the function of another machine. 

Or some facsimile thereof.

As for Comcast itself, I actually have to give them a hand.  Other companies tend to hide their contempt for the customers as a general rule.  But in providing real-world, straightforward and crude examples of why we need it, Comcast has done more to progress the cause of net neutrality than the EFF.

184665954_6e032f5ac8[1]

ID Theft, Good for Business

On their web site, the FTC estimates that "as many as 9 million Americans have their identities stolen each year."  There are 300 million people in the US… you can do the math.  On average, they say, you will likely be impacted by identity crime several times during your life.

In the IT world, we’ve known this for a long time.  Everyone’s basic information, including your SSN is readily available, cheaply and in a full spectrum of legal and illegal ways.  We also know that the real failing isn’t the fact that the information is out there and available, it’s the fact that such information is easy to use that constitutes the danger.

So, you may wonder why credit card ID theft commercials are en vogue, reporting on how much consumers and companies lose to ID theft each year… yet you never hear about the credit, medical, insurance, or any other industry lobbying congress to change the situation…

Could it be that ID theft is good for business?

Of course it is, and it all revolves around one word, “liability”.

Simplifying the problem –
People get confused about ID theft because it’s not a simple act, but for the sake of clarity, I will break it down to the major parts, Privacy and Crime.

184665954_6e032f5ac8[1]

Privacy is simple, you give company A your information, and suddenly company B, or criminal C has it.  Doesn’t matter how it happened, this is an invasion of your privacy.  The Crime portion comes when someone decides to use this information in a criminal manner.  This can be as simple as someone using your credit information to buy a TV, or when HP’s private investigators get your phone records to prove you were leaking info to the press.

So, which is worse, having your information out there, or having it be easily misused?  It’s a very simple answer.  People want your information BECAUSE it can be easily misused, in both criminal and non-criminal-but-should-be ways.  If there’s no profit in stealing your identity, or if the risks outweigh the benefits, then the privacy situation returns to the non-, or small issue it had been for hundreds of years.

Of Crime and Jengo –
ID Crime relies on one fundamental building block, absence of liability.  No one has to steal anything from you to get a credit agency to extend a line of credit in your name, nor is anyone liable by default, for the damages done… so it happens every day.  Making personal information more difficult to use – or to improve the “Authentication” of those conducting transactions of all kinds is the only thing that will bring the ID theft tower down, but without liability, no business will take on the messy task of pulling that block.

For example, it is entirely possible that a 10 year old kid in America already has a mortgage… it’s entirely plausible that his identity was stolen years ago, used for lines of credit ending in a home loan that the criminal has skipped out on.

Did the mortgage agency commit a crime?  No, they did all they were required to do.  They will likely take the loss and help the kid restore his credit.  He is after all, 10 years old, and it would be a tough court case to win… but they could try to make the case to a judge if they chose.  So imagine how much harder it is for a 30 year old who may have to spend his life savings just to prove that he didn’t spend his life savings. 

Nowhere to turn –
It’s perfectly legal for a crediting agency to issue a line of credit to anyone claiming to be you; they set their own authentication procedures.  It is also legal for the crediting agency to hold you responsible for a line of credit given to the wrong person.  Credit reporting agencies are also not required to validate or authenticate information provided to them by creditors.  There simply is no minimum requirement for authenticating transactions of any kind, so you really have no recourse, it’s just your word against theirs.

THAT is the pillar upon which ID Theft is built.

Your misfortune is a good way to turn a buck –
What’s more, credit and insurance agencies have found out that the fear of ID theft is a pretty good money maker… and makes a pretty entertaining commercial to boot.  Now all credit cards offer some kind of premium anti-fraud service you can pay for… or you can get anti-ID theft insurance for yourself or your business.

You may recognize that racket in mobster movies.  In the old days, you paid the mafia protection money… protection from whom?  The mafia.  Today, you pay money to protect your identity to the people who lobby to ensure your identity isn’t protected.

Seems an apt analogy.

The public is confused about the issue and hounding legislators for action.  Legislators on the other hand, have been given very clear message from business:  Fo’gettabboddit!

Self-Solving Riddles –
We do not have to regulate the means of authentication to make things right… all we have to do is hold companies liable for costs and damages associated with providing credit or conducting transactions (financial or informational) with the wrong individual.  Let the free market figure out how to deal with that. 

Any massively centralized Federal effort, like a National ID card would be fraught with loopholes and corruption.  Personally, I think that private industry can offer far more elegant, varied and secure solutions.  All I am saying is that right now, what’s good for business is also good for criminals, so much so that it’s difficult to distinguish the two.  Business needs a reason to join the fight, and the best way to do that is to make it cheaper to do the right thing.

"Here’s your dorm key and your RIAA bill…"

RIAA institutes collective billing practices? –

If you managed to miss this week’s RIAA wrangling, you probably don’t use the internet.  Here’s the skinny: The RIAA has sent 405 so-called “pre-litigation” e-mails in various quantities to a group of 23 selected universities.  The RIAA has asked each university to identify and pass on the appropriate e-mail to the appropriate student.

As I thought about this, a couple questions have come to mind.  One, what is the difference between a letter that specifies a fiscal responsibility and a “bill”?  Two, is a public institution legally allowed to serve a bill on behalf of an outside party?

Is it a settlement, or a bill? –

The RIAA calls the e-mail a “pre-litigation letter”… I call it a “bill”.  There could be a special legal definition here I am unaware of, but to me, it seems like a bill.  You could say that your electric bill is a “pre-litigation letter”… if you choose not to pay, they have the right to sue you.

But if the RIAA notices are a “bill”… that may put the RIAA into a whole new legal frying pan.  It’s one thing to litigate on behalf of a group, it’s another to engage in collective billing.  Does this make the RIAA a company in and of itself?  Who chooses the prices?  How does it pay taxes, etc…

We’ll let the lawyers figure it out.

“I am not pleased that taxpayer money is being used to deliver bills on behalf of the RIAA.”

Compelling students to comply –

Universities have to deal with a little thing called FERPA, or the Family Education Rights and Privacy Act.  This is the law that requires institutions to protect student information.  A university cannot, for example, disclose the name of a student who was using a particular IP address at a particular time without a valid subpoena or permission of the student.  Now note, universities have not been complicit in file sharing activities, despite the assertions of the RIAA… they have simply been dealing with the problem as the RIAA sends complaints about specific activity they believe is infringing.  Usually, this results in threats of expulsion for misusing university resources as stipulated by university policy.

This time, however, the stage is set for some unusual legal wrangling.

Let’s say that a university delivers an e-mail from the RIAA to a student.  The letter instructs the student to contact a 3rd party and identify themselves.  They will have the option to pay the “bill” by credit card or other mechanism.  By the university legitimizing such instructions to identify oneself to a 3rd party, it seems reasonable to think that a university would be in a bit of a FERPA quagmire.  Perhaps not in specific breach, but at least in breach of the spirit of the law.

Again, we’ll let the lawyers figure it out.

Doing the right thing? –

Two of the universities on the list have made bold moves.  The University of Wisconsin gave the RIAA the collective finger by choosing to not forward such emails on to the students without a valid subpoena, as has always been the accepted practice.  The University of Nebraska, on the other hand, is exercising its right… nay… responsibility… to charge the RIAA for the processing work incurred by delivering the RIAA’s bills… and has notified the RIAA that it does not keep records of which computer uses which IP address past 30 days.  The assumption, of course, is that if the RIAA’s information is a little stale, most of the e-mails will not be able to be served as there will be no way to identify the infringer.

These two universities, currently, are the exception… but that may change with the first student who receives a notice, particularly if it’s by mistake, and feels that a university has overstepped its bound by compelling them to call the RIAA and identify themselves.

Sympathies, not empathies –

As someone who creates copyrighted content, I am not condoning copyright infringement… I would like to be paid for my work like anyone else.  This position, however, is NOT in conflict with my stance against the practices of the RIAA, which I’m not sure can be characterized in any other way than “anti-competitive” and “extortionist”.  This has resulted in legal actions that aren’t just “innocent accidents”, but some of the most ludicrously moronic abuses of the legal system in this, or any other age.  The RIAA is getting a free ride to harass the public with impunity, where other copyright holders have to meet a higher standard to protect their content.  Getting public institutions to bill for you is just one of the ways this is expressed.

I am not pleased that taxpayer money is being used to deliver bills on behalf of the RIAA.  As such I am pleased with the University of Wisconsin’s responsibility in the matter…. and that the University of Nebraska is making sure there is at least some cost recovery in response to the abuse.

Of course, if you’re really pissed, consider Gizmodo’s RIAA Boycott. 

Should be an interesting couple months.

Tech Moronique: Identity theft, the HP way.

I was thinking to myself about how many setbacks the industry has had in the last few years, and how all those setbacks have a face… so I want to take a quick break, and celebrate the poster children of retrograde progress. 

This month, Patricia Dunn.  

I truly wish I could have been a fly on the wall, watching her brush her hair, put on the makeup, dressing for success… as thoughts of securing her success at HP danced in her head.  She’s about to become the hero of HP, the one who called out the whistleblower, the one who weeded out the unfaithful, the disloyal.

Confident beyond smug, she laid out the framework of her heroics to the Board of Directors, proudly pointing out that the villain who had plagued HP for so long had been ratted out, by his own phone company.

What a coup!  She had proven that she could get the job done where Carly failed… that she would go the extra mile and make sure HP was safe from espionage… errr… except her own.  She did what she truly believed was right, using only the logic in her head.  Only, like dozens of Aggressive Self-Starters (A.S.S.)s before her, she failed to pick up on the obvious reason why it’s more difficult for other leaders to get tough jobs done.  People who have character… morals… and even semblance of adherence to the law… simply won’t consider certain options.

Many organizations value loyalty above character.  A liability the organization ultimately pays for, in true Galactic Empire style.  While it is true that those of good character also possess loyalty, it is not the more valued trait.  One need only look to the government to find a superb example of an organization composed of those with superior loyalty, matched with the character of a… hmmm… let’s just say that it would be something spineless, slimy, without eyes or particularly useful brain.  Dunn, Bush, Palpatine… all examples of how Loyalty is the cornerstone of every successful empire.

“Dunn, Bush, Palpatine… all examples of how Loyalty is the cornerstone of every successful empire.”

Which brings us back to HP’s predicament.  Dunn made a bold move, (bold and stupid and with any luck, illegal) but this type of behavior is seldom disconnected from the organization’s culture.  She made it to a high level with her particular (particularly low) level of character, which says something about HP in general.  Allowing someone with little candor and even less respect for personal privacy into high office doesn’t happen in a vacuum, those kinds of traits are hard to conceal.  The new HP way has congress interested, (ex-)employees angry, and the rest of the population disgusted. 

Was HP in a worse state when their long-range visions were being relayed to the media, which made HP look like a company confident in its in-your-face business strategy… or now, that its leadership has admitted to the use of identity theft and impersonation as a mechanism to sew shut the loose lips?  The HP way sure doesn’t sound too appealing these days.  That’s a shame, I have always preferred HP machines myself… I have visited the HP campus a couple times… and frankly, I have a whole new perspective on the company as a whole.

Of course, I hold out little hope that she actually comprehends how in the wrong she was, but I have little doubt that she’ll be back.  Hard to keep a major A.S.S. down, ya know.  HP is under new leadership, but not different leadership.  Hurd has been up at the top with the others for a very long time… he had a big hand in putting Dunn in charge, so how different can he be?