<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
	<id>https://homeostasis.scs.carleton.ca/wiki/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=Cha0s</id>
	<title>Soma-notes - User contributions [en]</title>
	<link rel="self" type="application/atom+xml" href="https://homeostasis.scs.carleton.ca/wiki/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=Cha0s"/>
	<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php/Special:Contributions/Cha0s"/>
	<updated>2026-06-13T15:17:37Z</updated>
	<subtitle>User contributions</subtitle>
	<generator>MediaWiki 1.42.1</generator>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=9101</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=9101"/>
		<updated>2011-04-05T12:51:44Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Local Implementation (Justice Web) */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=Members=&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
=Abstract=&lt;br /&gt;
&lt;br /&gt;
The goal of this article is to investigate the feasibility of implementing a system of justice on a distributed computing environment. Although directly applying human concepts related to justice, for example intent, is not possible in the realm of computers, we can use these concepts to construct a justice system that helps maintain the stability and efficiency of the distributed environment. To provide this functionality, the justice system requires a reporting mechanism as well as a mechanism for guaranteed attribution of transactions such that members of the distributed society can flag deviant behaviour and proper punishment may be exacted based on collected evidence. &lt;br /&gt;
&lt;br /&gt;
This article is divided into two main sections; the first is a discussion on theories of human justice and how concepts from the human example may be used within the scope of computers. The second section describes the components necessary to create a justice system for a distributed computing society and how these components would be used in four malicious acts; comment spam, denial of service, and phishing attacks.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=Can Justice be Implemented on a Distributed Computing System: Discussion=&lt;br /&gt;
&lt;br /&gt;
In this section we present definitions of human justice and punishment. It is important to understand these concepts so that we can use them as a template to create a system of justice for a distributed computing environment. This section also includes definitions of key concepts related to justice and how they relate to potential justice in the realm of computers.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Theory of Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
John Rawls provides a definition of the purpose of justice as providing two primary functions; first, justice assigns rights and duties for the basic institutions of society, and second, justice describes the best way to distribute the benefits and burdens of society. [1] Essentially justice must ensure that a society is able to operate efficiently and with sufficient stability. This view fits well within the scope of justice for a distributed computing system as there are very clear roles which can be assigned and there are finite resources which can be used to manage the “benefits and burdens” of society. &lt;br /&gt;
&lt;br /&gt;
In order for a society to uphold justice it must possess the ability to punish those who behave in a deviant manner. From a philosophical point of view, there are three main categories of punishment; &#039;&#039;&#039;Teleologic, Retributive,&#039;&#039;&#039; and &#039;&#039;&#039;Teleologic Retributive&#039;&#039;&#039;. [3]&lt;br /&gt;
&lt;br /&gt;
====Teleologic View of Punishment:====&lt;br /&gt;
The teleologic view of punishment is that any punishment should always be accompanied by some beneficial effect. Even though the act of punishing someone may itself be considered “evil”, the overall punishment will be considered “good” if it provides some form of social benefit to the society. For example, if a criminal is punished for a crime and this punishment serves to dissuade potential criminals from committing future crimes, then the overall social value of the punishment is positive.[3]&lt;br /&gt;
&lt;br /&gt;
Punishment from this perspective provides a good model for computer systems as any criminal act will be handled such that punishment is beneficial for the system. A simple example of such a transaction can be visualized through the management of bandwidth. If there is a particular computer who is deemed to be a criminal bandwidth hog, using more resources than it is allowed, the perpetrator’s network connection may be throttled. This punishment would correct the deviant computer while free the resources for other computers in the system to utilize.&lt;br /&gt;
&lt;br /&gt;
====Retributive View of Punishment:====&lt;br /&gt;
Retributive punishment is defined by the belief that punishment itself is either just or intrinsically valuable even if there is social benefit to the punishment. This view is probably best characterised by the phrase “eye for an eye”. Essentially punishment is dispensed because it is necessary to inflict harm on those who do bad things but society may not get any benefit from the punishment.[3] The point of view of retributive punishment is that it is better to punish someone who commits a crime regardless of the severity of the punishment.[2]&lt;br /&gt;
&lt;br /&gt;
It is also important to discuss retributive punishment in comparison to retaliation. Although they both incorporate the concept punishment as a just, and necessary, act, they have very different goals. Retribution focuses on the wrongdoing of the criminal whereas retaliation is based on the right of the victim to seek punishment. Retaliation is based on the concept of deterrence; if you are convicted of a crime then someone will get to exact revenge and thus you will pay a price. Retribution requires a criminal to pay a price for the crime committed and thus he should internalize how the crime has a negative effect on society. [1] &lt;br /&gt;
&lt;br /&gt;
Although the necessity of punishment is certainly true, it is hard to see a situation where truly retributive punishment is beneficial for a computer system. Since computers on a distributed system are sharing finite resources, inflicting punishment on criminal computers, without considering the benefit/harm to the society, may result in further negative effects on the system. If a crime has been committed, the effects of that crime have already had an effect on the computing system. Punishing the perpetrator of the criminal act will not reverse the effect of the act, and it may adversely affect the system. &lt;br /&gt;
&lt;br /&gt;
For example, suppose a computer is caught conducting spam attacks on other computers and the punishment for this act is to remove the computer from the network. It may be the case that the criminal computer had previously provided a very efficient connection to some data set but now there is no way to communicate with this computer. As a result, members of the remaining network must use a less efficient connection to reach the same data, thus the punishment had a negative effect on the system.&lt;br /&gt;
&lt;br /&gt;
====Teleologic Retributive View of Punishment:====&lt;br /&gt;
This third view of punishment combines the concept of the need to punish within the limits of what is considered reasonable punishment for the crime. From this perspective, punishment is necessary and provides a valuable service to society but it is only enforced within acceptable limits.&lt;br /&gt;
&lt;br /&gt;
To illustrate this view of punishment, consider the spam attack example from the retributive section above. If the punishment is reduced from being removed from the network to simply blocking a specific type of communication originating from the criminal computer, then it would be considered a teleological retributive punishment. This new punishment would match the severity of the crime but also still allows the other computers on the network to utilize the efficient network path through the criminal computer.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Structure of Punishment&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
To maintain a stable and efficient distributed system, punishment requires structure, or more accurately, there needs to be some power imbalance designed within the system such that some computers can hand out punishments upon other, criminal computers. Here we will briefly discuss a few methods which may be used to implement a penal system into a society.&lt;br /&gt;
&lt;br /&gt;
====Sovereign Rule:====&lt;br /&gt;
In the 1600s, Thomas Hobbes wrote a dissertation on how government and society should be structured. Within this work Hobbes discusses how punishment should be handled by a sovereign ruler. In this system, there is a known set of laws which originate from a single entity which exists above the law. This sovereign ruler is the highest authority of the law, but he may assign lesser judges who may carry out punishment in accordance to the laws.[4]&lt;br /&gt;
 &lt;br /&gt;
In this system, breaking the law is never excusable as the law is known to all members of the society. The exception to this are any members of society that are without reason, for example “children and madmen”. Punishment is a necessary evil and the sovereign has the right to punish any criminal in order to protect the “commonwealth”. The sovereign can even order other subjects to punish criminals but he may not order a criminal to punish himself as this violates the law of self preservation. To balance the system the sovereign may also reward individuals and thus the balance of punishment and reward are the “nerves and joints which move the limbs of a commonwealth.”[4]&lt;br /&gt;
&lt;br /&gt;
Essentially, sovereign rule is one overall leader of justice who determines what is right and wrong in order to best serve the needs of a system. &lt;br /&gt;
&lt;br /&gt;
====Corporal Punishment. Economic Punishment, and Prison:====&lt;br /&gt;
Human punishment commonly falls into three overlapping categories; corporal punishment, economic punishment, and prison. Corporal punishment involves inflicting pain or possibly disfiguring a criminal in response to the crime committed. The main idea is that the criminal should serve as a demonstration of the terrible things that befall those who break the law. Furthermore, any criminal who is disfigured must live with a visual reminder of the act they committed, thus imparting shame upon the perpetrator and allowing others in society to form a conceptual model of the type of person that individual is.[5]&lt;br /&gt;
&lt;br /&gt;
Economic punishment is forcing a criminal to pay a fine for the act committed. The main idea is to make criminals internalize the social costs of the crime they committed. The penalty fine imposed upon the criminal may not be equal to the social cost of the crime committed but it should cause the criminal the same amount of distress as the crime that was committed. [1] &lt;br /&gt;
Prison is a modern method of punishment by which criminals are forced to exist under the watch of professionals and it is up to the discretion of the professionals as to when the punishment is complete. For example, it is up to lawyers, judges, psychologists and prison guards determine when a criminal’s prison sentence has ended.[5]&lt;br /&gt;
 &lt;br /&gt;
These three methods are not mutually exclusive as commonly criminals may be asked to pay a penalty fine as well as serve a prison sentence; however they all serve different purposes. All three punishment types serve as a deterrent to future criminals but each method has a different active agent; corporal punishment uses shame, economic punishment uses monetary handicapping, and prison focuses on reducing personal freedoms. These three concepts may be very useful to a distributed computer justice system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Addition Concepts Related to Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
====Morality:====&lt;br /&gt;
&lt;br /&gt;
For a system of justice to be effective, a known moral code must exist within the society. Friedrich Nietzsche provides one interpretation of morality based on social position which is divided into two categories; “master-morality” and “slave-morality”. Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic. Slave-morality, on the other hand, is based on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.[6] &lt;br /&gt;
&lt;br /&gt;
Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam attacks) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
&lt;br /&gt;
If morality was introduced to a distributed computer system that already has a reliable reputation mechanism, then all computers would be able to know how other computers behave &amp;quot;socially”. This would further allow punishment methods based on shame, to be exacted based on how &amp;quot;bad&amp;quot; a computer’s moral code is. An offending would then have to rebuild a positive moral reputation before it could participate in more trusted social interactions.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
====Intent:====&lt;br /&gt;
=====Mens Rea - state of the mind:=====&lt;br /&gt;
&lt;br /&gt;
It is said that a crime consists of two elements, the actus reus, and the mens rea. The actus reus defines the action of the crime, and the mens rea defines the mental state. The mental state of a person is highly regarded as being relevant to the punishment of crimes and the Model Penal Code (“MPC”) is used to categorize the mens rea into four levels: purposely, knowingly, recklessly, and negligently. These levels rank from being the highest is acting upon a crime on purpose, and the lowest is being part of a crime negligently. An example of such a case would be when one distinguishes between whether a car hitting someone had been done intentionally, or by accident.[7]&lt;br /&gt;
&lt;br /&gt;
For a computer, there is no such thing as &amp;quot;intent&amp;quot;, there is only computation. As such, discovering the intent of a computer is a meaningless task. To handle this issue a system of justice for computers can take one of two approaches; it can attempt to discover the intent of the user of the computer before distribution of punishment, or it can punish all perpetrators of an act with the same severity regardless of intent. If a computer justice system attempts to discover the intent of the human operating a computer then this system must involve a human who can decipher human reason. This would create a justice system that would have a bottleneck at the human investigation point. For our purposes, we propose that all perpetrators of a deviant act are punished with the same severity to prevent the need for human interventions/investigations.&lt;br /&gt;
&lt;br /&gt;
=====Computer Fraud and Abuse Act:=====&lt;br /&gt;
&lt;br /&gt;
The digital age has brought on many new kinds of crimes on the Internet in computers. An example of preventative measures for these crimes was created in  1984 by the United States of America’s congress called the Computer Fraud and Abuse Act(“CFAA”). This criminal statute was built under the ideas of mens rea, and the MPC. After being first implemented, there has had to be many changes to it because of unspecific instances of how different crimes were categorized based on the mens rea. The change between “knowingly” and “intentionally” doing an act would change in degrees of punishment as well as accessing a system and damaging a system had to be more specified over time.[8]&lt;br /&gt;
&lt;br /&gt;
One well know case is of Robert Tappan Morris, who was a 1st year graduate student in Cornell University who attempted to demonstrate the inadequacies of current security measures on the computer networks(INTERNET) by releasing a worm virus. The virus had propagated faster than he had intended and attempted to release the instructions on how to kill the worm, but it had been too late, and many computers across the INTERNET had been affected. The government had to try and prove that it was his intent to access unauthorized computers, which he did, and they also tried to prove that it was his intent to damage the machines, but at that point damaging machines had no category in mens rea.[9]&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
===Applying justice to computers===&lt;br /&gt;
&lt;br /&gt;
The first issue arises from the discussion of the mens rea. Some might say that the computer executes commands that is inputted by the user, so this would mean that everything that the computer does, must be on purpose, because it is just following instructions. This may be true except in the following case that an error has occurred in the system, or a bit has gone missing and the address to which sensitive information was to be sent has now been sent to an incorrect address. If this error created many losses to some entity, would the user be blamed for this error or would the computer be blamed for negligently sending to the wrong address?  This type of situation seems similar to how humans may be charged for killing someone, the difference  between murder and manslaughter is the intent.[12] With the current structure of how computers are set up, it is difficult to map a mens rea scheme to it’s inner workings.&lt;br /&gt;
(*perhaps if the computer was running some genetic programming to create a program which it deemed good, and then intentionally used it, then that intent to use differs from it continually creating new programs until it decides one is suitable)&lt;br /&gt;
&lt;br /&gt;
Assuming that the state of mind of a computer has been decided, the next thing to consider would be how would one prevent a computer from doing malicious actions. Attempting to follow in the footsteps of the general deterrence theory, we would try to instill some sort of fear of consequences/shame that would come from causing malicious actions. The problem with this approach to justice is difficult because of the idea that computers do not have feelings, and doing any kind of work such as word processing to a denial of service attack would be equal in aspects to what it prefers to do. Deterring possible criminals only works if they are afraid of the consequences and can not accept the ratio of profit over penalty that they will procure from a malicious act. If a punishment for a computer was to execute many functions for a long period of time, the computer itself would not care any less if it were doing those functions or standing by idle. However, for the human that might force it’s computer to do such malicious actions may be deterred from doing so because of the consequences that might follow from the law, or the possible performance drop from his own computer. The penalties set in place are currently only going to affect a human, whether it be sentenced to jail or confiscation of the physical computer, the human aspect of the problem will be removed from the computer element. Had it been that the computer itself was the only one punished for such malicious actions, then it would not prevent further malicious actions from occurring on a computer network by the human  user using another computer terminal.[13]&lt;br /&gt;
&lt;br /&gt;
Since a distributed system would want to one day grow to a global scale, the laws and punishments can not be enforced in a legal sense because of jurisdiction issues, therefore, the implementation of a new system must be done so that computers on the system will be deterred from malicious actions. Implementing a morality system that has every node on the system with their personal morality rating will allow for nodes to communicate with other nodes based on how low or high the rating is. From lowering in morality because of malicious actions and raising it by being more helpful to the system will allow for computers to &amp;quot;care&amp;quot; for who they are communicating with, and to also feel shame for when their morality is so low that they can barely communicate with others.(Lowest level might equal to expulsion) Based on this simulated feeling of care and shame, this might allow for a justice system to be implemented onto computers.&lt;br /&gt;
&lt;br /&gt;
=Possible Implementations=&lt;br /&gt;
Designing a complete justice system implementation is far beyond the scope of this project. This does not mean it is not important to describe the important features that a fully functional system would require and outline the potential benefits and shortcomings of the system. In fact, we were unable to come up with one unique system that would be feasible; instead we propose two potential implementations each with its own advantages and downsides. Although the implementations have different (and somewhat mutually exclusive) modes of operation, they both take a teleologic-retributive approach to justice. This means that punishments are viewed as necessary but they are imposed immediately if doing so would result in negatively impacting the performance or stability of the overall system. &lt;br /&gt;
&lt;br /&gt;
The remainder of this section details the two justice system implementations at a high level and describe how each system could handle three deviant behaviour scenarios; Comment Spam, Denial of Service Attacks and Phishing.&lt;br /&gt;
&lt;br /&gt;
==Local Implementation (Justice Web) ==&lt;br /&gt;
&lt;br /&gt;
===Overview===&lt;br /&gt;
&lt;br /&gt;
The implementation described in this section takes the above discussion involving justice, and applies it to the management of a computer network. The implementation is designed to be incrementally-deployable, so that it would be realistic for a network to use the proposed system. The implementation is entitled the “Justice Web”. &lt;br /&gt;
&lt;br /&gt;
The purpose of the Justice Web is to protect public-facing services from attacks coming from outside the network. This is accomplished by keeping a record of the criminal acts made by connections, and allowing the services access to these records. Criminal acts in this case are actions done by a connection that is considered harmful to the network. The record kept by the network is a “Morality Rating”, which is an integer meant to reflect the severity of the crime committed.&lt;br /&gt;
&lt;br /&gt;
===Assumptions===&lt;br /&gt;
&lt;br /&gt;
Certain assumptions must be made regarding the other class projects in order for this implementation to be deployable. Most importantly, it is assumed that there is some way in which the network can uniquely identify a computer that connects to the network. This allows the Justice Web to keep a criminal log of clients, and recognize if an offender is attempting to connect.&lt;br /&gt;
&lt;br /&gt;
===Morality Rating===&lt;br /&gt;
&lt;br /&gt;
Morality Rating (MR) is an integer assigned to computers that have connected to a service within the Justice Web. The purpose of the MR is to keep track of a computer’s past offenses, and allow services to restrict access using thresholds. For instance, a service within the Justice Web could restrict access to those above -100 MR.&lt;br /&gt;
&lt;br /&gt;
While the primary purpose of the Justice Web is to protect against attackers from outside the network, every node in the Justice Web is assigned an MR, which increases and decreases based on their actions within the network. Ideally, those with higher MR are allowed access to more shared resources, though this would be implementation specific.&lt;br /&gt;
&lt;br /&gt;
The MR assigned to a computer is local to the Justice Web that assigned the rating. For example, if two separate networks deploy a Justice Web, the ratings they assign do not affect the other network’s ratings.&lt;br /&gt;
&lt;br /&gt;
===Judges===&lt;br /&gt;
&lt;br /&gt;
In order to assign MR to offenders, an authority figure is needed to declare if a crime has been committed. In the Justice Web, this role is taken by the Judges, who may be one or more computers within the network. It is the Judges’ responsibility to create the rules of the network, gather the evidence when a claim is made, declare if a crime has been committed, and assign a new MR based on the ruling.&lt;br /&gt;
&lt;br /&gt;
How a Judge is picked isn’t set in stone, but in general it would be the node(s) in the network with the highest MR. Alternatively, the Judges could be picked through some democratic process.&lt;br /&gt;
&lt;br /&gt;
The judgments made are mostly automated, based on the rules of the network. However, it can be specified that certain crimes, such as a claim of a phishing scam being committed, be dealt with by a human.&lt;br /&gt;
&lt;br /&gt;
===Master List===&lt;br /&gt;
&lt;br /&gt;
The Justice Web is a virtual network, in that the nodes are not necessarily connected or even anywhere near each other. Because of this, it would be inconvenient and potentially harmful to have services look up a computer’s MR on every connection attempt. To prevent this, MR will be stored in a central location, but propagated throughout the network.&lt;br /&gt;
&lt;br /&gt;
This is done using a master-slave approach to database replication. The Judges of the network store the “Master List”, and propagate the data to the “Slave Lists” stored by the services within the network. The records stored by the Slave Lists is decided by the thresholds that the specific service has put in place. As mentioned in the Morality Rating subsection, a service can set thresholds to determine if a computer should be allowed access. In the example, an MR of -100 would be blocked from the service. If a service were to have only this threshold in place, it would only need to be aware of computers with -100 MR, and so would only store that data in its Slave List. Other approaches to distributing the list could leverage existing research in distributed file systems [15, 16].&lt;br /&gt;
&lt;br /&gt;
===Rules===&lt;br /&gt;
&lt;br /&gt;
Judges define and use rules to determine whether a crime has been committed. A rule consists of three parts: The offense, the proof needed, and the severity of the punishment. The offense is a name assigned to the crime, which services can claim has been committed. The proof is the required information for the judges to be able to make a conviction. The severity of the punishment is an integer value to negate from the offender’s current MR.&lt;br /&gt;
&lt;br /&gt;
Each network deploying a Justice Web specifies their own set of rules. These rules are made available to the public so that services within the network are aware of the crimes they can report. This is akin to a human justice system, where everyone under that legal system can see what actions constitute a crime (e.g., [http://laws-lois.justice.gc.ca/eng/acts/C-46/ the criminal code of Canada]).&lt;br /&gt;
&lt;br /&gt;
===Evidence===&lt;br /&gt;
&lt;br /&gt;
Evidence is used by the Justice Web to determine if a crime has been committed. Evidence is stored in encrypted logs located on a service’s computer, and submitted to the judges when a claim is made.&lt;br /&gt;
&lt;br /&gt;
Evidence logs are required to prove the occurrence of a rule violation. The Justice Web therefore requires hosts to keep logs of recent network (e.g., packet captures) and application layer activity (e.g., web server logs). We require these logs to be digitally signed or encrypted to ensure that the computer making the claim or any other system in the chain of custody does not tamper with evidence. When evidence is received by judges, the logs are decrypted and reviewed.&lt;br /&gt;
The type of evidence required is varied, and is defined by the Judges of a network. For a DDoS attack, the Justice Web would potential be able to look at the evidence logs and determine which computers were actively involved in the attack, and which was legitimate traffic through the analysis of statistical evidence[17].&lt;br /&gt;
&lt;br /&gt;
===Membership===&lt;br /&gt;
&lt;br /&gt;
Membership of a Justice Web would be primarily public-facing services seeking protection from attacks. However, because there is the capability of sharing resources based on a node’s MR, there is reason for computers to join the network simply for accessing to these resources.&lt;br /&gt;
&lt;br /&gt;
==Global Implementation==&lt;br /&gt;
===Overview===&lt;br /&gt;
Extrapolating the concept of the local Justice Web to a multi-network environment is non-trivial. The Internet as we know it today is built by millions of interconnected local networks (hence the term &#039;&#039;Internet&#039;&#039;). If we attempt to replicate the properties of the local Justice Web at a larger scale, we notice a few important issues:&lt;br /&gt;
&lt;br /&gt;
*&#039;&#039;&#039;Where should the master morality list be stored?&#039;&#039;&#039; - Distributed storage at a global level is possible, but is subject to tampering or simply denial of service (refusal to respond with the morality rating of a given host). &lt;br /&gt;
&lt;br /&gt;
*&#039;&#039;&#039;How are judges elected?&#039;&#039;&#039; - Self-governing entities often have a common set of laws. However, these laws are not necessarily the same laws as different self-governing entities. In the real world, cross-jurisdiction legal systems are known to exist. For example, the United Nations (UN) and the North Atlantic Treaty Organization (NATO) are organizations where countries participate in so-called &amp;quot;global councils&amp;quot;. Generally in these types of councils, each participating member country appoints one or more people to represent the country&#039;s interests in the council.  &lt;br /&gt;
&lt;br /&gt;
Due to these restrictions, we do not believe there is a possible incrementally deployable implementation such as the Justice Web, where hosts opt-in. This section briefly discuss a different approach to the Justice Web that attempts to deal with some of the restrictions mentioned above, at the expense of losing incremental deployability.&lt;br /&gt;
&lt;br /&gt;
=== Morality Rating ===&lt;br /&gt;
&lt;br /&gt;
The global implementation still requires the existence of a morality rating, but in a global setting, we require that all hosts have a morality rating built-in. By having each host store its own morality rating, we obsolete the concept of a &amp;quot;master list&amp;quot; or a &amp;quot;slave list&amp;quot; or morality ratings. The obvious requirement for a built-in morality rating is that the host itself should not be able to arbitrarily modify the value. One possible mechanism could be the use of a Trusted Platform (http://www.trustedcomputinggroup.org/developers/ TPM]) which allows encryption and decryption of data, but noes not allow the extraction of the private encryption key. Indeed, storing the morality rating within hosts rather than on external lists alleviates the need for distributed storage and allows better scalability, but also requires all hosts to be compliant with the mechanism. &lt;br /&gt;
&lt;br /&gt;
=== Connection management ===&lt;br /&gt;
&lt;br /&gt;
Due to the modified morality rating storage, there is no longer the need to look-up the morality rating of a host upon incoming connections. We therefore need a way to transmit the morality rating on each outgoing connection, so that the destination host (i.e., the server) can decide whether or not to allow the connection. A change of this type would mean changing underlying networking protocols to include a new field (the morality rating). If morality ratings are stored locally and transmitted as part of the network protocol, there would be far less overhead than in the Justice Web. &lt;br /&gt;
&lt;br /&gt;
=== Rules and Judges ===&lt;br /&gt;
&lt;br /&gt;
Similar to the Justice Web, there would need to be a standard set of rules that all hosts agree to. In the global implementation, agreeing upon a standard set of rules might prove to be difficult, since not all hosts/users at the global level have the same views on justice. The problem of judge election also becomes difficult at a global level. We leave this problem to future research. &lt;br /&gt;
&lt;br /&gt;
In summary, the global implementation could offer the same benefits as the Justice Web with much less overhead, but would require a full reboot of the Internet as well a new hardware, making it a realistically unlikely solution.&lt;br /&gt;
&lt;br /&gt;
==Use Cases==&lt;br /&gt;
&lt;br /&gt;
This section reviews three common attacks and describes how the computer-based justice system would deal with them &lt;br /&gt;
&lt;br /&gt;
===Case 1: Comment Spam===&lt;br /&gt;
The first deviant act we investigate is comment spam. This type of spam is typically generated by automated scripts which insert comments on blogs or other sites. Posted comments will generally contain links to other websites which attempt to sell a product or trick the user into revealing banking credentials. Although usually annoying, these comments can direct users to locations where malicious code may be downloaded, even if the original site hosting the comment was initially trusted. &lt;br /&gt;
&lt;br /&gt;
==== Solution ====&lt;br /&gt;
Web servers that allow open comments can adjust the required minimum morality rating to post a comment. Additionally, if comment spam is detected by another user or the site administrator, the message and the ID of the host that posted the comment is reported. This results in a host losing morality rating for posting comment spam which may limit its ability to post in the future. In the global implementation, web servers would reject access to the service altogether from the first initial connection. &lt;br /&gt;
&lt;br /&gt;
===Case 2: Denial of Service===&lt;br /&gt;
Denial of service is the act in which a service that is normally available is accessed by a large number of hosts, or a small number of hosts with high frequency. Services under a denial of service (DoS) or distributed denial of service (DDoS) attack are no longer able to serve legitimate requests [14].&lt;br /&gt;
&lt;br /&gt;
==== Solution ====&lt;br /&gt;
&lt;br /&gt;
In the Justice Web, the server will have to look up the morality rating for each host that is participating in the attack which may further increase the load on the server. The global implementation would see the morality ratings of each incoming connection and could filter (for e.g., at a firewall level) hosts that have a certain rating. While Dos is generally regarded as a very difficult problem to solve, the morality rating of hosts participating would be lowered, possibly limiting their ability to perform an attack in the future. &lt;br /&gt;
&lt;br /&gt;
===Case 3: Phishing===&lt;br /&gt;
Phishing provides an interesting challenge for a justice system as the deviant act involves a website that is perfectly legal. A phishing attack occurs when a malicious site pretends to be a legitimate site, tricking users into revealing banking or personal information.&lt;br /&gt;
&lt;br /&gt;
==== Solution ====&lt;br /&gt;
Similar to the comment spam attack, once a phishing site is reported and verified by the judges, the morality rating of the hosting node is lowered.&lt;br /&gt;
&lt;br /&gt;
=Resources=&lt;br /&gt;
[1] Posner, Richard A., &#039;&#039;Retirbution and Related Concepts of Punishment&#039;&#039;, The Journal of Legal Studies Vol. 9 No. 1, University of Chicago Press, 1980. [http://www.econ.brown.edu/fac/glenn_loury/louryhomepage/teaching/Ec%20222/posner_punishment.pdf PDF]&lt;br /&gt;
&lt;br /&gt;
[2] Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[3] Ezorsky, Gertrude, &#039;&#039;Philosophical Perspectives on Punishment&#039;&#039;, State University of New York Press, 1972. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=Jba2lFg3KOMC&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+punishment&amp;amp;ots=LuzbsNmWlg&amp;amp;sig=KTvWhaWMxIRslk38tZmucty-jNw#v=onepage&amp;amp;q=concepts%20of%20punishment&amp;amp;f=false HTML] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[4] Hobbes, Thomas, &#039;&#039;The Leviathon&#039;&#039;, first published 1651, republished by Forgotten Books, 2008. [http://books.google.ca/books?id=-Q4nPYeps6MC&amp;amp;pg=PR7&amp;amp;lpg=PR7&amp;amp;dq=the+leviathan&amp;amp;source=bl&amp;amp;ots=_vZA8CpLY0&amp;amp;sig=Wn_1z_Sqsx3-YA2dml2A458M_xU&amp;amp;hl=en&amp;amp;ei=V0R6TZT_D8XwrAGiz8zxBQ&amp;amp;sa=X&amp;amp;oi=book_result&amp;amp;ct=result&amp;amp;resnum=9&amp;amp;sqi=2&amp;amp;ved=0CFAQ6AEwCA#v=onepage&amp;amp;q&amp;amp;f=false HTML]&lt;br /&gt;
&lt;br /&gt;
[5] Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[6] Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[7]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part A)&lt;br /&gt;
&lt;br /&gt;
[8]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part B)&lt;br /&gt;
&lt;br /&gt;
[9] 928 F. 2d 504 - Court of Appeals, &#039;&#039;US v. Morris&#039;&#039;, 2nd Circuit 1991, [http://scholar.google.com/scholar_case?case=551386241451639668 HTML] (case file)&lt;br /&gt;
&lt;br /&gt;
[10] Charles F. Horne(1915),Claude Hermann Walter Johns, The Encyclopaedia Britannica, 11th ed 1910-, &#039;&#039;Ancient History Sourcebook:Code of Hammurabi, c. 1780 BCE&#039;&#039;, Translated by L. W. King, Paul Halsall March 1998, [http://www.fordham.edu/halsall/ancient/hamcode.html HTML] (Internet History Sourcebook)&lt;br /&gt;
&lt;br /&gt;
[11] Scott D. Sagan, &#039;&#039;Review: History, Analogy, and Deterrence Theory&#039;&#039;, The MIT Press, 1991, [http://www.jstor.org.proxy.library.carleton.ca/stable/204567?&amp;amp;Search=yes&amp;amp;searchText=history%2Canalogy%2CAND&amp;amp;searchText=deterrence&amp;amp;list=hide&amp;amp;searchUri=%2Faction%2FdoBasicSearch%3Facc%3Don%26Query%3Dhistory%252Canalogy%252Cand%2Bdeterrence%26gw%3Djtx%26acc%3Don%26prq%3D204567%26Search%3DSearch%26hp%3D25%26wc%3Don%26acc%3Don&amp;amp;prevSearch=&amp;amp;item=1&amp;amp;ttl=5&amp;amp;returnArticleService=showFullText HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[12]Rollin M. Perkins, &#039;&#039;A Rationale of Mens Rea&#039;&#039;, Harvard Law Review, 1939, [http://www.jstor.org/pss/1334184 HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[13] Marquis Beccaria, &#039;&#039;Of Crimes and Punishments&#039;&#039;, Translated by: Edward D. Ingraham, Philip H. Nicklin: A. Walker, 1819, [http://www.constitution.org/cb/crim_pun12.htm HTML] (essay translation)&lt;br /&gt;
&lt;br /&gt;
[14] Roger.M.Needham, &#039;&#039;Denial of Service&#039;&#039;,ACM, New York, USA ,1993,[http://portal.acm.org/citation.cfm?id=168607 PDF]&lt;br /&gt;
&lt;br /&gt;
[15] C.A. Thekkath, T. Mann, and E.K. Lee, &#039;&#039;Frangipani: A scalable distributed file system&#039;&#039;, in Proceedings of ACM SIGOPS Operating Systems Review 1997.&lt;br /&gt;
&lt;br /&gt;
[16] S. Ghemawat, H. Gobioff, and S.T. Leung, &#039;&#039;The Google File System&#039;&#039;, in Proceedings of the ACM SIGOPS Operating Systems Review. 2003&lt;br /&gt;
&lt;br /&gt;
[17] S. Yu, W. Zhou, R. Doss, &#039;&#039;Information theory based detection against network behavior mimicking DDoS attacks&#039;&#039;, IEEE, April 2008, [http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1]. Last visited April 2011.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=9100</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=9100"/>
		<updated>2011-04-05T12:50:29Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=Members=&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
=Abstract=&lt;br /&gt;
&lt;br /&gt;
The goal of this article is to investigate the feasibility of implementing a system of justice on a distributed computing environment. Although directly applying human concepts related to justice, for example intent, is not possible in the realm of computers, we can use these concepts to construct a justice system that helps maintain the stability and efficiency of the distributed environment. To provide this functionality, the justice system requires a reporting mechanism as well as a mechanism for guaranteed attribution of transactions such that members of the distributed society can flag deviant behaviour and proper punishment may be exacted based on collected evidence. &lt;br /&gt;
&lt;br /&gt;
This article is divided into two main sections; the first is a discussion on theories of human justice and how concepts from the human example may be used within the scope of computers. The second section describes the components necessary to create a justice system for a distributed computing society and how these components would be used in four malicious acts; comment spam, denial of service, and phishing attacks.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=Can Justice be Implemented on a Distributed Computing System: Discussion=&lt;br /&gt;
&lt;br /&gt;
In this section we present definitions of human justice and punishment. It is important to understand these concepts so that we can use them as a template to create a system of justice for a distributed computing environment. This section also includes definitions of key concepts related to justice and how they relate to potential justice in the realm of computers.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Theory of Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
John Rawls provides a definition of the purpose of justice as providing two primary functions; first, justice assigns rights and duties for the basic institutions of society, and second, justice describes the best way to distribute the benefits and burdens of society. [1] Essentially justice must ensure that a society is able to operate efficiently and with sufficient stability. This view fits well within the scope of justice for a distributed computing system as there are very clear roles which can be assigned and there are finite resources which can be used to manage the “benefits and burdens” of society. &lt;br /&gt;
&lt;br /&gt;
In order for a society to uphold justice it must possess the ability to punish those who behave in a deviant manner. From a philosophical point of view, there are three main categories of punishment; &#039;&#039;&#039;Teleologic, Retributive,&#039;&#039;&#039; and &#039;&#039;&#039;Teleologic Retributive&#039;&#039;&#039;. [3]&lt;br /&gt;
&lt;br /&gt;
====Teleologic View of Punishment:====&lt;br /&gt;
The teleologic view of punishment is that any punishment should always be accompanied by some beneficial effect. Even though the act of punishing someone may itself be considered “evil”, the overall punishment will be considered “good” if it provides some form of social benefit to the society. For example, if a criminal is punished for a crime and this punishment serves to dissuade potential criminals from committing future crimes, then the overall social value of the punishment is positive.[3]&lt;br /&gt;
&lt;br /&gt;
Punishment from this perspective provides a good model for computer systems as any criminal act will be handled such that punishment is beneficial for the system. A simple example of such a transaction can be visualized through the management of bandwidth. If there is a particular computer who is deemed to be a criminal bandwidth hog, using more resources than it is allowed, the perpetrator’s network connection may be throttled. This punishment would correct the deviant computer while free the resources for other computers in the system to utilize.&lt;br /&gt;
&lt;br /&gt;
====Retributive View of Punishment:====&lt;br /&gt;
Retributive punishment is defined by the belief that punishment itself is either just or intrinsically valuable even if there is social benefit to the punishment. This view is probably best characterised by the phrase “eye for an eye”. Essentially punishment is dispensed because it is necessary to inflict harm on those who do bad things but society may not get any benefit from the punishment.[3] The point of view of retributive punishment is that it is better to punish someone who commits a crime regardless of the severity of the punishment.[2]&lt;br /&gt;
&lt;br /&gt;
It is also important to discuss retributive punishment in comparison to retaliation. Although they both incorporate the concept punishment as a just, and necessary, act, they have very different goals. Retribution focuses on the wrongdoing of the criminal whereas retaliation is based on the right of the victim to seek punishment. Retaliation is based on the concept of deterrence; if you are convicted of a crime then someone will get to exact revenge and thus you will pay a price. Retribution requires a criminal to pay a price for the crime committed and thus he should internalize how the crime has a negative effect on society. [1] &lt;br /&gt;
&lt;br /&gt;
Although the necessity of punishment is certainly true, it is hard to see a situation where truly retributive punishment is beneficial for a computer system. Since computers on a distributed system are sharing finite resources, inflicting punishment on criminal computers, without considering the benefit/harm to the society, may result in further negative effects on the system. If a crime has been committed, the effects of that crime have already had an effect on the computing system. Punishing the perpetrator of the criminal act will not reverse the effect of the act, and it may adversely affect the system. &lt;br /&gt;
&lt;br /&gt;
For example, suppose a computer is caught conducting spam attacks on other computers and the punishment for this act is to remove the computer from the network. It may be the case that the criminal computer had previously provided a very efficient connection to some data set but now there is no way to communicate with this computer. As a result, members of the remaining network must use a less efficient connection to reach the same data, thus the punishment had a negative effect on the system.&lt;br /&gt;
&lt;br /&gt;
====Teleologic Retributive View of Punishment:====&lt;br /&gt;
This third view of punishment combines the concept of the need to punish within the limits of what is considered reasonable punishment for the crime. From this perspective, punishment is necessary and provides a valuable service to society but it is only enforced within acceptable limits.&lt;br /&gt;
&lt;br /&gt;
To illustrate this view of punishment, consider the spam attack example from the retributive section above. If the punishment is reduced from being removed from the network to simply blocking a specific type of communication originating from the criminal computer, then it would be considered a teleological retributive punishment. This new punishment would match the severity of the crime but also still allows the other computers on the network to utilize the efficient network path through the criminal computer.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Structure of Punishment&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
To maintain a stable and efficient distributed system, punishment requires structure, or more accurately, there needs to be some power imbalance designed within the system such that some computers can hand out punishments upon other, criminal computers. Here we will briefly discuss a few methods which may be used to implement a penal system into a society.&lt;br /&gt;
&lt;br /&gt;
====Sovereign Rule:====&lt;br /&gt;
In the 1600s, Thomas Hobbes wrote a dissertation on how government and society should be structured. Within this work Hobbes discusses how punishment should be handled by a sovereign ruler. In this system, there is a known set of laws which originate from a single entity which exists above the law. This sovereign ruler is the highest authority of the law, but he may assign lesser judges who may carry out punishment in accordance to the laws.[4]&lt;br /&gt;
 &lt;br /&gt;
In this system, breaking the law is never excusable as the law is known to all members of the society. The exception to this are any members of society that are without reason, for example “children and madmen”. Punishment is a necessary evil and the sovereign has the right to punish any criminal in order to protect the “commonwealth”. The sovereign can even order other subjects to punish criminals but he may not order a criminal to punish himself as this violates the law of self preservation. To balance the system the sovereign may also reward individuals and thus the balance of punishment and reward are the “nerves and joints which move the limbs of a commonwealth.”[4]&lt;br /&gt;
&lt;br /&gt;
Essentially, sovereign rule is one overall leader of justice who determines what is right and wrong in order to best serve the needs of a system. &lt;br /&gt;
&lt;br /&gt;
====Corporal Punishment. Economic Punishment, and Prison:====&lt;br /&gt;
Human punishment commonly falls into three overlapping categories; corporal punishment, economic punishment, and prison. Corporal punishment involves inflicting pain or possibly disfiguring a criminal in response to the crime committed. The main idea is that the criminal should serve as a demonstration of the terrible things that befall those who break the law. Furthermore, any criminal who is disfigured must live with a visual reminder of the act they committed, thus imparting shame upon the perpetrator and allowing others in society to form a conceptual model of the type of person that individual is.[5]&lt;br /&gt;
&lt;br /&gt;
Economic punishment is forcing a criminal to pay a fine for the act committed. The main idea is to make criminals internalize the social costs of the crime they committed. The penalty fine imposed upon the criminal may not be equal to the social cost of the crime committed but it should cause the criminal the same amount of distress as the crime that was committed. [1] &lt;br /&gt;
Prison is a modern method of punishment by which criminals are forced to exist under the watch of professionals and it is up to the discretion of the professionals as to when the punishment is complete. For example, it is up to lawyers, judges, psychologists and prison guards determine when a criminal’s prison sentence has ended.[5]&lt;br /&gt;
 &lt;br /&gt;
These three methods are not mutually exclusive as commonly criminals may be asked to pay a penalty fine as well as serve a prison sentence; however they all serve different purposes. All three punishment types serve as a deterrent to future criminals but each method has a different active agent; corporal punishment uses shame, economic punishment uses monetary handicapping, and prison focuses on reducing personal freedoms. These three concepts may be very useful to a distributed computer justice system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Addition Concepts Related to Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
====Morality:====&lt;br /&gt;
&lt;br /&gt;
For a system of justice to be effective, a known moral code must exist within the society. Friedrich Nietzsche provides one interpretation of morality based on social position which is divided into two categories; “master-morality” and “slave-morality”. Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic. Slave-morality, on the other hand, is based on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.[6] &lt;br /&gt;
&lt;br /&gt;
Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam attacks) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
&lt;br /&gt;
If morality was introduced to a distributed computer system that already has a reliable reputation mechanism, then all computers would be able to know how other computers behave &amp;quot;socially”. This would further allow punishment methods based on shame, to be exacted based on how &amp;quot;bad&amp;quot; a computer’s moral code is. An offending would then have to rebuild a positive moral reputation before it could participate in more trusted social interactions.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
====Intent:====&lt;br /&gt;
=====Mens Rea - state of the mind:=====&lt;br /&gt;
&lt;br /&gt;
It is said that a crime consists of two elements, the actus reus, and the mens rea. The actus reus defines the action of the crime, and the mens rea defines the mental state. The mental state of a person is highly regarded as being relevant to the punishment of crimes and the Model Penal Code (“MPC”) is used to categorize the mens rea into four levels: purposely, knowingly, recklessly, and negligently. These levels rank from being the highest is acting upon a crime on purpose, and the lowest is being part of a crime negligently. An example of such a case would be when one distinguishes between whether a car hitting someone had been done intentionally, or by accident.[7]&lt;br /&gt;
&lt;br /&gt;
For a computer, there is no such thing as &amp;quot;intent&amp;quot;, there is only computation. As such, discovering the intent of a computer is a meaningless task. To handle this issue a system of justice for computers can take one of two approaches; it can attempt to discover the intent of the user of the computer before distribution of punishment, or it can punish all perpetrators of an act with the same severity regardless of intent. If a computer justice system attempts to discover the intent of the human operating a computer then this system must involve a human who can decipher human reason. This would create a justice system that would have a bottleneck at the human investigation point. For our purposes, we propose that all perpetrators of a deviant act are punished with the same severity to prevent the need for human interventions/investigations.&lt;br /&gt;
&lt;br /&gt;
=====Computer Fraud and Abuse Act:=====&lt;br /&gt;
&lt;br /&gt;
The digital age has brought on many new kinds of crimes on the Internet in computers. An example of preventative measures for these crimes was created in  1984 by the United States of America’s congress called the Computer Fraud and Abuse Act(“CFAA”). This criminal statute was built under the ideas of mens rea, and the MPC. After being first implemented, there has had to be many changes to it because of unspecific instances of how different crimes were categorized based on the mens rea. The change between “knowingly” and “intentionally” doing an act would change in degrees of punishment as well as accessing a system and damaging a system had to be more specified over time.[8]&lt;br /&gt;
&lt;br /&gt;
One well know case is of Robert Tappan Morris, who was a 1st year graduate student in Cornell University who attempted to demonstrate the inadequacies of current security measures on the computer networks(INTERNET) by releasing a worm virus. The virus had propagated faster than he had intended and attempted to release the instructions on how to kill the worm, but it had been too late, and many computers across the INTERNET had been affected. The government had to try and prove that it was his intent to access unauthorized computers, which he did, and they also tried to prove that it was his intent to damage the machines, but at that point damaging machines had no category in mens rea.[9]&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
===Applying justice to computers===&lt;br /&gt;
&lt;br /&gt;
The first issue arises from the discussion of the mens rea. Some might say that the computer executes commands that is inputted by the user, so this would mean that everything that the computer does, must be on purpose, because it is just following instructions. This may be true except in the following case that an error has occurred in the system, or a bit has gone missing and the address to which sensitive information was to be sent has now been sent to an incorrect address. If this error created many losses to some entity, would the user be blamed for this error or would the computer be blamed for negligently sending to the wrong address?  This type of situation seems similar to how humans may be charged for killing someone, the difference  between murder and manslaughter is the intent.[12] With the current structure of how computers are set up, it is difficult to map a mens rea scheme to it’s inner workings.&lt;br /&gt;
(*perhaps if the computer was running some genetic programming to create a program which it deemed good, and then intentionally used it, then that intent to use differs from it continually creating new programs until it decides one is suitable)&lt;br /&gt;
&lt;br /&gt;
Assuming that the state of mind of a computer has been decided, the next thing to consider would be how would one prevent a computer from doing malicious actions. Attempting to follow in the footsteps of the general deterrence theory, we would try to instill some sort of fear of consequences/shame that would come from causing malicious actions. The problem with this approach to justice is difficult because of the idea that computers do not have feelings, and doing any kind of work such as word processing to a denial of service attack would be equal in aspects to what it prefers to do. Deterring possible criminals only works if they are afraid of the consequences and can not accept the ratio of profit over penalty that they will procure from a malicious act. If a punishment for a computer was to execute many functions for a long period of time, the computer itself would not care any less if it were doing those functions or standing by idle. However, for the human that might force it’s computer to do such malicious actions may be deterred from doing so because of the consequences that might follow from the law, or the possible performance drop from his own computer. The penalties set in place are currently only going to affect a human, whether it be sentenced to jail or confiscation of the physical computer, the human aspect of the problem will be removed from the computer element. Had it been that the computer itself was the only one punished for such malicious actions, then it would not prevent further malicious actions from occurring on a computer network by the human  user using another computer terminal.[13]&lt;br /&gt;
&lt;br /&gt;
Since a distributed system would want to one day grow to a global scale, the laws and punishments can not be enforced in a legal sense because of jurisdiction issues, therefore, the implementation of a new system must be done so that computers on the system will be deterred from malicious actions. Implementing a morality system that has every node on the system with their personal morality rating will allow for nodes to communicate with other nodes based on how low or high the rating is. From lowering in morality because of malicious actions and raising it by being more helpful to the system will allow for computers to &amp;quot;care&amp;quot; for who they are communicating with, and to also feel shame for when their morality is so low that they can barely communicate with others.(Lowest level might equal to expulsion) Based on this simulated feeling of care and shame, this might allow for a justice system to be implemented onto computers.&lt;br /&gt;
&lt;br /&gt;
=Possible Implementations=&lt;br /&gt;
Designing a complete justice system implementation is far beyond the scope of this project. This does not mean it is not important to describe the important features that a fully functional system would require and outline the potential benefits and shortcomings of the system. In fact, we were unable to come up with one unique system that would be feasible; instead we propose two potential implementations each with its own advantages and downsides. Although the implementations have different (and somewhat mutually exclusive) modes of operation, they both take a teleologic-retributive approach to justice. This means that punishments are viewed as necessary but they are imposed immediately if doing so would result in negatively impacting the performance or stability of the overall system. &lt;br /&gt;
&lt;br /&gt;
The remainder of this section details the two justice system implementations at a high level and describe how each system could handle three deviant behaviour scenarios; Comment Spam, Denial of Service Attacks and Phishing.&lt;br /&gt;
&lt;br /&gt;
==Local Implementation (Justice Web) ==&lt;br /&gt;
&lt;br /&gt;
===Overview===&lt;br /&gt;
&lt;br /&gt;
The implementation described in this section takes the above discussion involving justice, and applies it to the management of a computer network. The implementation is designed to be incrementally-deployable, so that it would be realistic for a network to use the proposed system. The implementation is entitled the “Justice Web”. &lt;br /&gt;
&lt;br /&gt;
The purpose of the Justice Web is to protect public-facing services from attacks coming from outside the network. This is accomplished by keeping a record of the criminal acts made by connections, and allowing the services access to these records. Criminal acts in this case are actions done by a connection that is considered harmful to the network. The record kept by the network is a “Morality Rating”, which is an integer meant to reflect the severity of the crime committed.&lt;br /&gt;
&lt;br /&gt;
===Assumptions===&lt;br /&gt;
&lt;br /&gt;
Certain assumptions must be made regarding the other class projects in order for this implementation to be deployable. Most importantly, it is assumed that there is some way in which the network can uniquely identify a computer that connects to the network. This allows the Justice Web to keep a criminal log of clients, and recognize if an offender is attempting to connect.&lt;br /&gt;
&lt;br /&gt;
===Morality Rating===&lt;br /&gt;
&lt;br /&gt;
Morality Rating (MR) is an integer assigned to computers that have connected to a service within the Justice Web. The purpose of the MR is to keep track of a computer’s past offenses, and allow services to restrict access using thresholds. For instance, a service within the Justice Web could restrict access to those above -100 MR.&lt;br /&gt;
&lt;br /&gt;
While the primary purpose of the Justice Web is to protect against attackers from outside the network, every node in the Justice Web is assigned an MR, which increases and decreases based on their actions within the network. Ideally, those with higher MR are allowed access to more shared resources, though this would be implementation specific.&lt;br /&gt;
&lt;br /&gt;
The MR assigned to a computer is local to the Justice Web that assigned the rating. For example, if two separate networks deploy a Justice Web, the ratings they assign do not affect the other network’s ratings.&lt;br /&gt;
&lt;br /&gt;
===Judges===&lt;br /&gt;
&lt;br /&gt;
In order to assign MR to offenders, an authority figure is needed to declare if a crime has been committed. In the Justice Web, this role is taken by the Judges, who may be one or more computers within the network. It is the Judges’ responsibility to create the rules of the network, gather the evidence when a claim is made, declare if a crime has been committed, and assign a new MR based on the ruling.&lt;br /&gt;
&lt;br /&gt;
How a Judge is picked isn’t set in stone, but in general it would be the node(s) in the network with the highest MR. Alternatively, the Judges could be picked through some democratic process.&lt;br /&gt;
&lt;br /&gt;
The judgments made are mostly automated, based on the rules of the network. However, it can be specified that certain crimes, such as a claim of a phishing scam being committed, be dealt with by a human.&lt;br /&gt;
&lt;br /&gt;
===Master List===&lt;br /&gt;
&lt;br /&gt;
The Justice Web is a virtual network, in that the nodes are not necessarily connected or even anywhere near each other. Because of this, it would be inconvenient and potentially harmful to have services look up a computer’s MR on every connection attempt. To prevent this, MR will be stored in a central location, but propagated throughout the network.&lt;br /&gt;
&lt;br /&gt;
This is done using a master-slave approach to database replication. The Judges of the network store the “Master List”, and propagate the data to the “Slave Lists” stored by the services within the network. The records stored by the Slave Lists is decided by the thresholds that the specific service has put in place. As mentioned in the Morality Rating subsection, a service can set thresholds to determine if a computer should be allowed access. In the example, an MR of -100 would be blocked from the service. If a service were to have only this threshold in place, it would only need to be aware of computers with -100 MR, and so would only store that data in its Slave List. Other approaches to distributing the list could leverage existing research in distributed file systems [15, 16].&lt;br /&gt;
&lt;br /&gt;
===Rules===&lt;br /&gt;
&lt;br /&gt;
Judges define and use rules to determine whether a crime has been committed. A rule consists of three parts: The offense, the proof needed, and the severity of the punishment. The offense is a name assigned to the crime, which services can claim has been committed. The proof is the required information for the judges to be able to make a conviction. The severity of the punishment is an integer value to negate from the offender’s current MR.&lt;br /&gt;
&lt;br /&gt;
Each network deploying a Justice Web specifies their own set of rules. These rules are made available to the public so that services within the network are aware of the crimes they can report. This is akin to a human justice system, where everyone under that legal system can see what actions constitute a crime (e.g., [http://laws-lois.justice.gc.ca/eng/acts/C-46/ the criminal code of Canada]).&lt;br /&gt;
&lt;br /&gt;
===Evidence===&lt;br /&gt;
&lt;br /&gt;
Evidence is used by the Justice Web to determine if a crime has been committed. Evidence is stored in encrypted logs located on a service’s computer, and submitted to the judges when a claim is made.&lt;br /&gt;
&lt;br /&gt;
Evidence logs are required to prove the occurrence of a rule violation. The Justice Web therefore requires hosts to keep logs of recent network (e.g., packet captures) and application layer activity (e.g., web server logs). We require these logs to be digitally signed or encrypted to ensure that the computer making the claim or any other system in the chain of custody does not tamper with evidence. When evidence is received by judges, the logs are decrypted and reviewed.&lt;br /&gt;
The type of evidence required is varied, and is defined by the Judges of a network. For a DDoS attack, the Justice Web would be able to look at the evidence logs and determine which computers were actively involved in the attack, and which was legitimate traffic, as described in \\link paper here.&lt;br /&gt;
&lt;br /&gt;
===Membership===&lt;br /&gt;
&lt;br /&gt;
Membership of a Justice Web would be primarily public-facing services seeking protection from attacks. However, because there is the capability of sharing resources based on a node’s MR, there is reason for computers to join the network simply for accessing to these resources.&lt;br /&gt;
&lt;br /&gt;
==Global Implementation==&lt;br /&gt;
===Overview===&lt;br /&gt;
Extrapolating the concept of the local Justice Web to a multi-network environment is non-trivial. The Internet as we know it today is built by millions of interconnected local networks (hence the term &#039;&#039;Internet&#039;&#039;). If we attempt to replicate the properties of the local Justice Web at a larger scale, we notice a few important issues:&lt;br /&gt;
&lt;br /&gt;
*&#039;&#039;&#039;Where should the master morality list be stored?&#039;&#039;&#039; - Distributed storage at a global level is possible, but is subject to tampering or simply denial of service (refusal to respond with the morality rating of a given host). &lt;br /&gt;
&lt;br /&gt;
*&#039;&#039;&#039;How are judges elected?&#039;&#039;&#039; - Self-governing entities often have a common set of laws. However, these laws are not necessarily the same laws as different self-governing entities. In the real world, cross-jurisdiction legal systems are known to exist. For example, the United Nations (UN) and the North Atlantic Treaty Organization (NATO) are organizations where countries participate in so-called &amp;quot;global councils&amp;quot;. Generally in these types of councils, each participating member country appoints one or more people to represent the country&#039;s interests in the council.  &lt;br /&gt;
&lt;br /&gt;
Due to these restrictions, we do not believe there is a possible incrementally deployable implementation such as the Justice Web, where hosts opt-in. This section briefly discuss a different approach to the Justice Web that attempts to deal with some of the restrictions mentioned above, at the expense of losing incremental deployability.&lt;br /&gt;
&lt;br /&gt;
=== Morality Rating ===&lt;br /&gt;
&lt;br /&gt;
The global implementation still requires the existence of a morality rating, but in a global setting, we require that all hosts have a morality rating built-in. By having each host store its own morality rating, we obsolete the concept of a &amp;quot;master list&amp;quot; or a &amp;quot;slave list&amp;quot; or morality ratings. The obvious requirement for a built-in morality rating is that the host itself should not be able to arbitrarily modify the value. One possible mechanism could be the use of a Trusted Platform (http://www.trustedcomputinggroup.org/developers/ TPM]) which allows encryption and decryption of data, but noes not allow the extraction of the private encryption key. Indeed, storing the morality rating within hosts rather than on external lists alleviates the need for distributed storage and allows better scalability, but also requires all hosts to be compliant with the mechanism. &lt;br /&gt;
&lt;br /&gt;
=== Connection management ===&lt;br /&gt;
&lt;br /&gt;
Due to the modified morality rating storage, there is no longer the need to look-up the morality rating of a host upon incoming connections. We therefore need a way to transmit the morality rating on each outgoing connection, so that the destination host (i.e., the server) can decide whether or not to allow the connection. A change of this type would mean changing underlying networking protocols to include a new field (the morality rating). If morality ratings are stored locally and transmitted as part of the network protocol, there would be far less overhead than in the Justice Web. &lt;br /&gt;
&lt;br /&gt;
=== Rules and Judges ===&lt;br /&gt;
&lt;br /&gt;
Similar to the Justice Web, there would need to be a standard set of rules that all hosts agree to. In the global implementation, agreeing upon a standard set of rules might prove to be difficult, since not all hosts/users at the global level have the same views on justice. The problem of judge election also becomes difficult at a global level. We leave this problem to future research. &lt;br /&gt;
&lt;br /&gt;
In summary, the global implementation could offer the same benefits as the Justice Web with much less overhead, but would require a full reboot of the Internet as well a new hardware, making it a realistically unlikely solution.&lt;br /&gt;
&lt;br /&gt;
==Use Cases==&lt;br /&gt;
&lt;br /&gt;
This section reviews three common attacks and describes how the computer-based justice system would deal with them &lt;br /&gt;
&lt;br /&gt;
===Case 1: Comment Spam===&lt;br /&gt;
The first deviant act we investigate is comment spam. This type of spam is typically generated by automated scripts which insert comments on blogs or other sites. Posted comments will generally contain links to other websites which attempt to sell a product or trick the user into revealing banking credentials. Although usually annoying, these comments can direct users to locations where malicious code may be downloaded, even if the original site hosting the comment was initially trusted. &lt;br /&gt;
&lt;br /&gt;
==== Solution ====&lt;br /&gt;
Web servers that allow open comments can adjust the required minimum morality rating to post a comment. Additionally, if comment spam is detected by another user or the site administrator, the message and the ID of the host that posted the comment is reported. This results in a host losing morality rating for posting comment spam which may limit its ability to post in the future. In the global implementation, web servers would reject access to the service altogether from the first initial connection. &lt;br /&gt;
&lt;br /&gt;
===Case 2: Denial of Service===&lt;br /&gt;
Denial of service is the act in which a service that is normally available is accessed by a large number of hosts, or a small number of hosts with high frequency. Services under a denial of service (DoS) or distributed denial of service (DDoS) attack are no longer able to serve legitimate requests [14].&lt;br /&gt;
&lt;br /&gt;
==== Solution ====&lt;br /&gt;
&lt;br /&gt;
In the Justice Web, the server will have to look up the morality rating for each host that is participating in the attack which may further increase the load on the server. The global implementation would see the morality ratings of each incoming connection and could filter (for e.g., at a firewall level) hosts that have a certain rating. While Dos is generally regarded as a very difficult problem to solve, the morality rating of hosts participating would be lowered, possibly limiting their ability to perform an attack in the future. &lt;br /&gt;
&lt;br /&gt;
===Case 3: Phishing===&lt;br /&gt;
Phishing provides an interesting challenge for a justice system as the deviant act involves a website that is perfectly legal. A phishing attack occurs when a malicious site pretends to be a legitimate site, tricking users into revealing banking or personal information.&lt;br /&gt;
&lt;br /&gt;
==== Solution ====&lt;br /&gt;
Similar to the comment spam attack, once a phishing site is reported and verified by the judges, the morality rating of the hosting node is lowered.&lt;br /&gt;
&lt;br /&gt;
=Resources=&lt;br /&gt;
[1] Posner, Richard A., &#039;&#039;Retirbution and Related Concepts of Punishment&#039;&#039;, The Journal of Legal Studies Vol. 9 No. 1, University of Chicago Press, 1980. [http://www.econ.brown.edu/fac/glenn_loury/louryhomepage/teaching/Ec%20222/posner_punishment.pdf PDF]&lt;br /&gt;
&lt;br /&gt;
[2] Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[3] Ezorsky, Gertrude, &#039;&#039;Philosophical Perspectives on Punishment&#039;&#039;, State University of New York Press, 1972. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=Jba2lFg3KOMC&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+punishment&amp;amp;ots=LuzbsNmWlg&amp;amp;sig=KTvWhaWMxIRslk38tZmucty-jNw#v=onepage&amp;amp;q=concepts%20of%20punishment&amp;amp;f=false HTML] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[4] Hobbes, Thomas, &#039;&#039;The Leviathon&#039;&#039;, first published 1651, republished by Forgotten Books, 2008. [http://books.google.ca/books?id=-Q4nPYeps6MC&amp;amp;pg=PR7&amp;amp;lpg=PR7&amp;amp;dq=the+leviathan&amp;amp;source=bl&amp;amp;ots=_vZA8CpLY0&amp;amp;sig=Wn_1z_Sqsx3-YA2dml2A458M_xU&amp;amp;hl=en&amp;amp;ei=V0R6TZT_D8XwrAGiz8zxBQ&amp;amp;sa=X&amp;amp;oi=book_result&amp;amp;ct=result&amp;amp;resnum=9&amp;amp;sqi=2&amp;amp;ved=0CFAQ6AEwCA#v=onepage&amp;amp;q&amp;amp;f=false HTML]&lt;br /&gt;
&lt;br /&gt;
[5] Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[6] Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[7]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part A)&lt;br /&gt;
&lt;br /&gt;
[8]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part B)&lt;br /&gt;
&lt;br /&gt;
[9] 928 F. 2d 504 - Court of Appeals, &#039;&#039;US v. Morris&#039;&#039;, 2nd Circuit 1991, [http://scholar.google.com/scholar_case?case=551386241451639668 HTML] (case file)&lt;br /&gt;
&lt;br /&gt;
[10] Charles F. Horne(1915),Claude Hermann Walter Johns, The Encyclopaedia Britannica, 11th ed 1910-, &#039;&#039;Ancient History Sourcebook:Code of Hammurabi, c. 1780 BCE&#039;&#039;, Translated by L. W. King, Paul Halsall March 1998, [http://www.fordham.edu/halsall/ancient/hamcode.html HTML] (Internet History Sourcebook)&lt;br /&gt;
&lt;br /&gt;
[11] Scott D. Sagan, &#039;&#039;Review: History, Analogy, and Deterrence Theory&#039;&#039;, The MIT Press, 1991, [http://www.jstor.org.proxy.library.carleton.ca/stable/204567?&amp;amp;Search=yes&amp;amp;searchText=history%2Canalogy%2CAND&amp;amp;searchText=deterrence&amp;amp;list=hide&amp;amp;searchUri=%2Faction%2FdoBasicSearch%3Facc%3Don%26Query%3Dhistory%252Canalogy%252Cand%2Bdeterrence%26gw%3Djtx%26acc%3Don%26prq%3D204567%26Search%3DSearch%26hp%3D25%26wc%3Don%26acc%3Don&amp;amp;prevSearch=&amp;amp;item=1&amp;amp;ttl=5&amp;amp;returnArticleService=showFullText HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[12]Rollin M. Perkins, &#039;&#039;A Rationale of Mens Rea&#039;&#039;, Harvard Law Review, 1939, [http://www.jstor.org/pss/1334184 HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[13] Marquis Beccaria, &#039;&#039;Of Crimes and Punishments&#039;&#039;, Translated by: Edward D. Ingraham, Philip H. Nicklin: A. Walker, 1819, [http://www.constitution.org/cb/crim_pun12.htm HTML] (essay translation)&lt;br /&gt;
&lt;br /&gt;
[14] Roger.M.Needham, &#039;&#039;Denial of Service&#039;&#039;,ACM, New York, USA ,1993,[http://portal.acm.org/citation.cfm?id=168607 PDF]&lt;br /&gt;
&lt;br /&gt;
[15] C.A. Thekkath, T. Mann, and E.K. Lee, &#039;&#039;Frangipani: A scalable distributed file system&#039;&#039;, in Proceedings of ACM SIGOPS Operating Systems Review 1997.&lt;br /&gt;
&lt;br /&gt;
[16] S. Ghemawat, H. Gobioff, and S.T. Leung, &#039;&#039;The Google File System&#039;&#039;, in Proceedings of the ACM SIGOPS Operating Systems Review. 2003&lt;br /&gt;
&lt;br /&gt;
[17] S. Yu, W. Zhou, R. Doss, &#039;&#039;Information theory based detection against network behavior mimicking DDoS attacks&#039;&#039;, IEEE, April 2008, [http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1]. Last visited April 2011.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=9083</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=9083"/>
		<updated>2011-04-04T06:14:34Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Local Implementation (Justice Web) */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=Members=&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
=Abstract=&lt;br /&gt;
&lt;br /&gt;
The goal of this article is to investigate the feasibility of implementing a system of justice on a distributed computing environment. Although directly applying human concepts related to justice, for example intent, is not possible in the realm of computers, we can use these concepts to construct a justice system that helps maintain the stability and efficiency of the distributed environment. To provide this functionality, the justice system requires a reporting mechanism as well as a mechanism for guaranteed attribution of transactions such that members of the distributed society can flag deviant behaviour and proper punishment may be exacted based on collected evidence. &lt;br /&gt;
&lt;br /&gt;
This article is divided into two main sections; the first is a discussion on theories of human justice and how concepts from the human example may be used within the scope of computers. The second section describes the components necessary to create a justice system for a distributed computing society and how these components would be used in four malicious acts; comment spam, unauthorized access, denial of service, and phishing attacks.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=Can Justice be Implemented on a Distributed Computing System: Discussion=&lt;br /&gt;
&lt;br /&gt;
In this section we present definitions of human justice and punishment. It is important to understand these concepts so that we can use them as a template to create a system of justice for a distributed computing environment. This section also includes definitions of key concepts related to justice and how they relate to potential justice in the realm of computers.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Theory of Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
John Rawls provides a definition of the purpose of justice as providing two primary functions; first, justice assigns rights and duties for the basic institutions of society, and second, justice describes the best way to distribute the benefits and burdens of society. [1] Essentially justice must ensure that a society is able to operate efficiently and with sufficient stability. This view fits well within the scope of justice for a distributed computing system as there are very clear roles which can be assigned and there are finite resources which can be used to manage the “benefits and burdens” of society. &lt;br /&gt;
&lt;br /&gt;
In order for a society to uphold justice it must possess the ability to punish those who behave in a deviant manner. From a philosophical point of view, there are three main categories of punishment; &#039;&#039;&#039;Teleologic, Retributive,&#039;&#039;&#039; and &#039;&#039;&#039;Teleologic Retributive&#039;&#039;&#039;. [3]&lt;br /&gt;
&lt;br /&gt;
====Teleologic View of Punishment:====&lt;br /&gt;
The teleologic view of punishment is that any punishment should always be accompanied by some beneficial effect. Even though the act of punishing someone may itself be considered “evil”, the overall punishment will be considered “good” if it provides some form of social benefit to the society. For example, if a criminal is punished for a crime and this punishment serves to dissuade potential criminals from committing future crimes, then the overall social value of the punishment is positive.[3]&lt;br /&gt;
&lt;br /&gt;
Punishment from this perspective provides a good model for computer systems as any criminal act will be handled such that punishment is beneficial for the system. A simple example of such a transaction can be visualized through the management of bandwidth. If there is a particular computer who is deemed to be a criminal bandwidth hog, using more resources than it is allowed, the perpetrator’s network connection may be throttled. This punishment would correct the deviant computer while free the resources for other computers in the system to utilize.&lt;br /&gt;
&lt;br /&gt;
====Retributive View of Punishment:====&lt;br /&gt;
Retributive punishment is defined by the belief that punishment itself is either just or intrinsically valuable even if there is social benefit to the punishment. This view is probably best characterised by the phrase “eye for an eye”. Essentially punishment is dispensed because it is necessary to inflict harm on those who do bad things but society may not get any benefit from the punishment.[3] The point of view of retributive punishment is that it is better to punish someone who commits a crime regardless of the severity of the punishment.[2]&lt;br /&gt;
&lt;br /&gt;
It is also important to discuss retributive punishment in comparison to retaliation. Although they both incorporate the concept punishment as a just, and necessary, act, they have very different goals. Retribution focuses on the wrongdoing of the criminal whereas retaliation is based on the right of the victim to seek punishment. Retaliation is based on the concept of deterrence; if you are convicted of a crime then someone will get to exact revenge and thus you will pay a price. Retribution requires a criminal to pay a price for the crime committed and thus he should internalize how the crime has a negative effect on society. [1] &lt;br /&gt;
&lt;br /&gt;
Although the necessity of punishment is certainly true, it is hard to see a situation where truly retributive punishment is beneficial for a computer system. Since computers on a distributed system are sharing finite resources, inflicting punishment on criminal computers, without considering the benefit/harm to the society, may result in further negative effects on the system. If a crime has been committed, the effects of that crime have already had an effect on the computing system. Punishing the perpetrator of the criminal act will not reverse the effect of the act, and it may adversely affect the system. &lt;br /&gt;
&lt;br /&gt;
For example, suppose a computer is caught conducting spam attacks on other computers and the punishment for this act is to remove the computer from the network. It may be the case that the criminal computer had previously provided a very efficient connection to some data set but now there is no way to communicate with this computer. As a result, members of the remaining network must use a less efficient connection to reach the same data, thus the punishment had a negative effect on the system.&lt;br /&gt;
&lt;br /&gt;
====Teleologic Retributive View of Punishment:====&lt;br /&gt;
This third view of punishment combines the concept of the need to punish within the limits of what is considered reasonable punishment for the crime. From this perspective, punishment is necessary and provides a valuable service to society but it is only enforced within acceptable limits.&lt;br /&gt;
&lt;br /&gt;
To illustrate this view of punishment, consider the spam attack example from the retributive section above. If the punishment is reduced from being removed from the network to simply blocking a specific type of communication originating from the criminal computer, then it would be considered a teleological retributive punishment. This new punishment would match the severity of the crime but also still allows the other computers on the network to utilize the efficient network path through the criminal computer.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Structure of Punishment&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
To maintain a stable and efficient distributed system, punishment requires structure, or more accurately, there needs to be some power imbalance designed within the system such that some computers can hand out punishments upon other, criminal computers. Here we will briefly discuss a few methods which may be used to implement a penal system into a society.&lt;br /&gt;
&lt;br /&gt;
====Sovereign Rule:====&lt;br /&gt;
In the 1600s, Thomas Hobbes wrote a dissertation on how government and society should be structured. Within this work Hobbes discusses how punishment should be handled by a sovereign ruler. In this system, there is a known set of laws which originate from a single entity which exists above the law. This sovereign ruler is the highest authority of the law, but he may assign lesser judges who may carry out punishment in accordance to the laws.[4]&lt;br /&gt;
 &lt;br /&gt;
In this system, breaking the law is never excusable as the law is known to all members of the society. The exception to this are any members of society that are without reason, for example “children and madmen”. Punishment is a necessary evil and the sovereign has the right to punish any criminal in order to protect the “commonwealth”. The sovereign can even order other subjects to punish criminals but he may not order a criminal to punish himself as this violates the law of self preservation. To balance the system the sovereign may also reward individuals and thus the balance of punishment and reward are the “nerves and joints which move the limbs of a commonwealth.”[4]&lt;br /&gt;
&lt;br /&gt;
Essentially, sovereign rule is one overall leader of justice who determines what is right and wrong in order to best serve the needs of a system. &lt;br /&gt;
&lt;br /&gt;
====Corporal Punishment. Economic Punishment, and Prison:====&lt;br /&gt;
Human punishment commonly falls into three overlapping categories; corporal punishment, economic punishment, and prison. Corporal punishment involves inflicting pain or possibly disfiguring a criminal in response to the crime committed. The main idea is that the criminal should serve as a demonstration of the terrible things that befall those who break the law. Furthermore, any criminal who is disfigured must live with a visual reminder of the act they committed, thus imparting shame upon the perpetrator and allowing others in society to form a conceptual model of the type of person that individual is.[5]&lt;br /&gt;
&lt;br /&gt;
Economic punishment is forcing a criminal to pay a fine for the act committed. The main idea is to make criminals internalize the social costs of the crime they committed. The penalty fine imposed upon the criminal may not be equal to the social cost of the crime committed but it should cause the criminal the same amount of distress as the crime that was committed. [1] &lt;br /&gt;
Prison is a modern method of punishment by which criminals are forced to exist under the watch of professionals and it is up to the discretion of the professionals as to when the punishment is complete. For example, it is up to lawyers, judges, psychologists and prison guards determine when a criminal’s prison sentence has ended.[5]&lt;br /&gt;
 &lt;br /&gt;
These three methods are not mutually exclusive as commonly criminals may be asked to pay a penalty fine as well as serve a prison sentence; however they all serve different purposes. All three punishment types serve as a deterrent to future criminals but each method has a different active agent; corporal punishment uses shame, economic punishment uses monetary handicapping, and prison focuses on reducing personal freedoms. These three concepts may be very useful to a distributed computer justice system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Addition Concepts Related to Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
====Morality:====&lt;br /&gt;
&lt;br /&gt;
For a system of justice to be effective, a known moral code must exist within the society. Friedrich Nietzsche provides one interpretation of morality based on social position which is divided into two categories; “master-morality” and “slave-morality”. Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic. Slave-morality, on the other hand, is based on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.[6] &lt;br /&gt;
&lt;br /&gt;
Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam attacks) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
&lt;br /&gt;
If morality was introduced to a distributed computer system that already has a reliable reputation mechanism, then all computers would be able to know how other computers behave &amp;quot;socially”. This would further allow punishment methods based on shame, to be exacted based on how &amp;quot;bad&amp;quot; a computer’s moral code is. An offending would then have to rebuild a positive moral reputation before it could participate in more trusted social interactions.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
====Intent:====&lt;br /&gt;
=====Mens Rea - state of the mind:=====&lt;br /&gt;
&lt;br /&gt;
It is said that a crime consists of two elements, the actus reus, and the mens rea. The actus reus defines the action of the crime, and the mens rea defines the mental state. The mental state of a person is highly regarded as being relevant to the punishment of crimes and the Model Penal Code (“MPC”) is used to categorize the mens rea into four levels: purposely, knowingly, recklessly, and negligently. These levels rank from being the highest is acting upon a crime on purpose, and the lowest is being part of a crime negligently. An example of such a case would be when one distinguishes between whether a car hitting someone had been done intentionally, or by accident.[7]&lt;br /&gt;
&lt;br /&gt;
For a computer, there is no such thing as &amp;quot;intent&amp;quot;, there is only computation. As such, discovering the intent of a computer is a meaningless task. To handle this issue a system of justice for computers can take one of two approaches; it can attempt to discover the intent of the user of the computer before distribution of punishment, or it can punish all perpetrators of an act with the same severity regardless of intent. If a computer justice system attempts to discover the intent of the human operating a computer then this system must involve a human who can decipher human reason. This would create a justice system that would have a bottleneck at the human investigation point. For our purposes, we propose that all perpetrators of a deviant act are punished with the same severity to prevent the need for human interventions/investigations.&lt;br /&gt;
&lt;br /&gt;
=====Computer Fraud and Abuse Act:=====&lt;br /&gt;
&lt;br /&gt;
The digital age has brought on many new kinds of crimes on the Internet in computers. An example of preventative measures for these crimes was created in  1984 by the United States of America’s congress called the Computer Fraud and Abuse Act(“CFAA”). This criminal statute was built under the ideas of mens rea, and the MPC. After being first implemented, there has had to be many changes to it because of unspecific instances of how different crimes were categorized based on the mens rea. The change between “knowingly” and “intentionally” doing an act would change in degrees of punishment as well as accessing a system and damaging a system had to be more specified over time.[8]&lt;br /&gt;
&lt;br /&gt;
One well know case is of Robert Tappan Morris, who was a 1st year graduate student in Cornell University who attempted to demonstrate the inadequacies of current security measures on the computer networks(INTERNET) by releasing a worm virus. The virus had propagated faster than he had intended and attempted to release the instructions on how to kill the worm, but it had been too late, and many computers across the INTERNET had been affected. The government had to try and prove that it was his intent to access unauthorized computers, which he did, and they also tried to prove that it was his intent to damage the machines, but at that point damaging machines had no category in mens rea.[9]&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
===Applying justice to computers===&lt;br /&gt;
&lt;br /&gt;
The first issue arises from the discussion of the mens rea. Some might say that the computer executes commands that is inputted by the user, so this would mean that everything that the computer does, must be on purpose, because it is just following instructions. This may be true except in the following case that an error has occurred in the system, or a bit has gone missing and the address to which sensitive information was to be sent has now been sent to an incorrect address. If this error created many losses to some entity, would the user be blamed for this error or would the computer be blamed for negligently sending to the wrong address?  This type of situation seems similar to how humans may be charged for killing someone, the difference  between murder and manslaughter is the intent.[12] With the current structure of how computers are set up, it is difficult to map a mens rea scheme to it’s inner workings.&lt;br /&gt;
(*perhaps if the computer was running some genetic programming to create a program which it deemed good, and then intentionally used it, then that intent to use differs from it continually creating new programs until it decides one is suitable)&lt;br /&gt;
&lt;br /&gt;
Assuming that the state of mind of a computer has been decided, the next thing to consider would be how would one prevent a computer from doing malicious actions. Attempting to follow in the footsteps of the general deterrence theory, we would try to instill some sort of fear of consequences/shame that would come from causing malicious actions. The problem with this approach to justice is difficult because of the idea that computers do not have feelings, and doing any kind of work such as word processing to a denial of service attack would be equal in aspects to what it prefers to do. Deterring possible criminals only works if they are afraid of the consequences and can not accept the ratio of profit over penalty that they will procure from a malicious act. If a punishment for a computer was to execute many functions for a long period of time, the computer itself would not care any less if it were doing those functions or standing by idle. However, for the human that might force it’s computer to do such malicious actions may be deterred from doing so because of the consequences that might follow from the law, or the possible performance drop from his own computer. The penalties set in place are currently only going to affect a human, whether it be sentenced to jail or confiscation of the physical computer, the human aspect of the problem will be removed from the computer element. Had it been that the computer itself was the only one punished for such malicious actions, then it would not prevent further malicious actions from occurring on a computer network by the human  user using another computer terminal.[13]&lt;br /&gt;
&lt;br /&gt;
Since a distributed system would want to one day grow to a global scale, the laws and punishments can not be enforced in a legal sense because of jurisdiction issues, therefore, the implementation of a new system must be done so that computers on the system will be deterred from malicious actions. Implementing a morality system that has every node on the system with their personal morality rating will allow for nodes to communicate with other nodes based on how low or high the rating is. From lowering in morality because of malicious actions and raising it by being more helpful to the system will allow for computers to &amp;quot;care&amp;quot; for who they are communicating with, and to also feel shame for when their morality is so low that they can barely communicate with others.(Lowest level might equal to expulsion) Based on this simulated feeling of care and shame, this might allow for a justice system to be implemented onto computers.&lt;br /&gt;
&lt;br /&gt;
=Possible Implementations=&lt;br /&gt;
Designing a complete justice system implementation is far beyond the scope of this project. This does not mean it is not important to describe the important features that a fully functional system would require and outline the potential benefits and shortcomings of the system. In fact, we were unable to come up with one unique system that would be feasible; instead we propose two potential implementations each with its own advantages and downsides. Although the implementations have different (and somewhat mutually exclusive) modes of operation, they both take a teleologic-retributive approach to justice. This means that punishments are viewed as necessary but they are imposed immediately if doing so would result in negatively impacting the performance or stability of the overall system. &lt;br /&gt;
&lt;br /&gt;
The remainder of this section details the two justice system implementations at a high level and describe how each system could handle three deviant behaviour scenarios; Comment Spam, Denial of Service Attacks and Phishing.&lt;br /&gt;
&lt;br /&gt;
==Local Implementation (Justice Web) ==&lt;br /&gt;
&lt;br /&gt;
===Overview===&lt;br /&gt;
&lt;br /&gt;
The implementation described in this section takes the above discussion involving justice, and applies it to the management of a computer network. The implementation is designed to be incrementally-deployable, so that it would be realistic for a network to use the proposed system. The implementation is entitled the “Justice Web”. &lt;br /&gt;
&lt;br /&gt;
The purpose of the Justice Web is to protect public-facing services from attacks coming from outside the network. This is accomplished by keeping a record of the criminal acts made by connections, and allowing the services access to these records. Criminal acts in this case are actions done by a connection that is considered harmful to the network. The record kept by the network is a “Morality Rating”, which is an integer meant to reflect the severity of the crime committed.&lt;br /&gt;
&lt;br /&gt;
===Assumptions===&lt;br /&gt;
&lt;br /&gt;
Certain assumptions must be made regarding the other class projects in order for this implementation to be deployable. Most importantly, it is assumed that there is some way in which the network can uniquely identify a computer that connects to the network. This allows the Justice Web to keep a criminal log of clients, and recognize if an offender is attempting to connect.&lt;br /&gt;
&lt;br /&gt;
===Morality Rating===&lt;br /&gt;
&lt;br /&gt;
Morality Rating (MR) is an integer assigned to computers that have connected to a service within the Justice Web. The purpose of the MR is to keep track of a computer’s past offenses, and allow services to restrict access using thresholds. For instance, a service within the Justice Web could restrict access to those above -100 MR.&lt;br /&gt;
&lt;br /&gt;
While the primary purpose of the Justice Web is to protect against attackers from outside the network, every node in the Justice Web is assigned an MR, which increases and decreases based on their actions within the network. Ideally, those with higher MR are allowed access to more shared resources, though this would be implementation specific.&lt;br /&gt;
&lt;br /&gt;
The MR assigned to a computer is local to the Justice Web that assigned the rating. For example, if two separate networks deploy a Justice Web, the ratings they assign do not affect the other network’s ratings.&lt;br /&gt;
&lt;br /&gt;
===Judges===&lt;br /&gt;
&lt;br /&gt;
In order to assign MR to offenders, an authority figure is needed to declare if a crime has been committed. In the Justice Web, this role is taken by the Judges, who may be one or more computers within the network. It is the Judges’ responsibility to create the rules of the network, gather the evidence when a claim is made, declare if a crime has been committed, and assign a new MR based on the ruling.&lt;br /&gt;
&lt;br /&gt;
How a Judge is picked isn’t set in stone, but in general it would be the node(s) in the network with the highest MR. Alternatively, the Judges could be picked through some democratic process.&lt;br /&gt;
&lt;br /&gt;
The judgments made are mostly automated, based on the rules of the network. However, it can be specified that certain crimes, such as a claim of a phishing scam being committed, be dealt with by a human.&lt;br /&gt;
&lt;br /&gt;
===Master List===&lt;br /&gt;
&lt;br /&gt;
The Justice Web is a virtual network, in that the nodes are not necessarily connected or even anywhere near each other. Because of this, it would be inconvenient and potentially harmful to have services look up a computer’s MR on every connection attempt. To prevent this, MR will be stored in a central location, but propagated throughout the network.&lt;br /&gt;
&lt;br /&gt;
This is done using a master-slave approach to database replication. The Judges of the network store the “Master List”, and propagate the data to the “Slave Lists” stored by the services within the network. The records stored by the Slave Lists is decided by the thresholds that the specific service has put in place. As mentioned in the Morality Rating subsection, a service can set thresholds to determine if a computer should be allowed access. In the example, an MR of -100 would be blocked from the service. If a service were to have only this threshold in place, it would only need to be aware of computers with -100 MR, and so would only store that data in its Slave List. Other approaches to distributing the list could leverage existing research in distributed file systems [15, 16].&lt;br /&gt;
&lt;br /&gt;
===Rules===&lt;br /&gt;
&lt;br /&gt;
Judges define and use rules to determine whether a crime has been committed. A rule consists of three parts: The offense, the proof needed, and the severity of the punishment. The offense is a name assigned to the crime, which services can claim has been committed. The proof is the required information for the judges to be able to make a conviction. The severity of the punishment is an integer value to negate from the offender’s current MR.&lt;br /&gt;
&lt;br /&gt;
Each network deploying a Justice Web specifies their own set of rules. These rules are made available to the public so that services within the network are aware of the crimes they can report. This is akin to a human justice system, where everyone under that legal system can see what actions constitute a crime (e.g., [http://laws-lois.justice.gc.ca/eng/acts/C-46/ the criminal code of Canada]).&lt;br /&gt;
&lt;br /&gt;
===Evidence===&lt;br /&gt;
&lt;br /&gt;
Evidence is used by the Justice Web to determine if a crime has been committed. Evidence is stored in encrypted logs located on a service’s computer, and submitted to the judges when a claim is made.&lt;br /&gt;
&lt;br /&gt;
Evidence logs are required to prove the occurrence of a rule violation. The Justice Web therefore requires hosts to keep logs of recent network (e.g., packet captures) and application layer activity (e.g., web server logs). We require these logs to be digitally signed or encrypted to ensure that the computer making the claim or any other system in the chain of custody does not tamper with evidence. When evidence is received by judges, the logs are decrypted and reviewed.&lt;br /&gt;
The type of evidence required is varied, and is defined by the Judges of a network. For a DDoS attack, the Justice Web would be able to look at the evidence logs and determine which computers were actively involved in the attack, and which was legitimate traffic, as described in \\link paper here.&lt;br /&gt;
&lt;br /&gt;
===Membership===&lt;br /&gt;
&lt;br /&gt;
Membership of a Justice Web would be primarily public-facing services seeking protection from attacks. However, because there is the capability of sharing resources based on a node’s MR, there is reason for computers to join the network simply for accessing to these resources.&lt;br /&gt;
&lt;br /&gt;
==Global Implementation==&lt;br /&gt;
===Overview===&lt;br /&gt;
Extrapolating the concept of the local Justice Web to a multi-network environment is non-trivial. The Internet as we know it today is built by millions of interconnected local networks (hence the term &#039;&#039;Internet&#039;&#039;). If we attempt to replicate the properties of the local Justice Web at a larger scale, we notice a few important issues:&lt;br /&gt;
&lt;br /&gt;
*&#039;&#039;&#039;Where should the master morality list be stored?&#039;&#039;&#039; - Distributed storage at a global level is possible, but is subject to tampering or simply denial of service (refusal to respond with the morality rating of a given host). &lt;br /&gt;
&lt;br /&gt;
*&#039;&#039;&#039;How are judges elected?&#039;&#039;&#039; - Self-governing entities often have a common set of laws. However, these laws are not necessarily the same laws as different self-governing entities. In the real world, cross-jurisdiction legal systems are known to exist. For example, the United Nations (UN) and the North Atlantic Treaty Organization (NATO) are organizations where countries participate in so-called &amp;quot;global councils&amp;quot;. Generally in these types of councils, each participating member country appoints one or more people to represent the country&#039;s interests in the council.  &lt;br /&gt;
&lt;br /&gt;
Due to these restrictions, we do not believe there is a possible incrementally deployable implementation such as the Justice Web, where hosts opt-in. This section briefly discuss a different approach to the Justice Web that attempts to deal with some of the restrictions mentioned above, at the expense of losing incremental deployability.&lt;br /&gt;
&lt;br /&gt;
=== Morality Rating ===&lt;br /&gt;
&lt;br /&gt;
The global implementation still requires the existence of a morality rating, but in a global setting, we require that all hosts have a morality rating built-in. By having each host store its own morality rating, we obsolete the concept of a &amp;quot;master list&amp;quot; or a &amp;quot;slave list&amp;quot; or morality ratings. The obvious requirement for a built-in morality rating is that the host itself should not be able to arbitrarily modify the value. One possible mechanism could be the use of a Trusted Platform (http://www.trustedcomputinggroup.org/developers/ TPM]) which allows encryption and decryption of data, but noes not allow the extraction of the private encryption key. Indeed, storing the morality rating within hosts rather than on external lists alleviates the need for distributed storage and allows better scalability, but also requires all hosts to be compliant with the mechanism. &lt;br /&gt;
&lt;br /&gt;
=== Connection management ===&lt;br /&gt;
&lt;br /&gt;
Due to the modified morality rating storage, there is no longer the need to look-up the morality rating of a host upon incoming connections. We therefore need a way to transmit the morality rating on each outgoing connection, so that the destination host (i.e., the server) can decide whether or not to allow the connection. A change of this type would mean changing underlying networking protocols to include a new field (the morality rating). If morality ratings are stored locally and transmitted as part of the network protocol, there would be far less overhead than in the Justice Web. &lt;br /&gt;
&lt;br /&gt;
=== Rules and Judges ===&lt;br /&gt;
&lt;br /&gt;
Similar to the Justice Web, there would need to be a standard set of rules that all hosts agree to. In the global implementation, agreeing upon a standard set of rules might prove to be difficult, since not all hosts/users at the global level have the same views on justice. The problem of judge election also becomes difficult at a global level. We leave this problem to future research. &lt;br /&gt;
&lt;br /&gt;
In summary, the global implementation could offer the same benefits as the Justice Web with much less overhead, but would require a full reboot of the Internet as well a new hardware, making it a realistically unlikely solution.&lt;br /&gt;
&lt;br /&gt;
==Use Cases==&lt;br /&gt;
&lt;br /&gt;
This section reviews three common attacks and describes how the computer-based justice system would deal with them &lt;br /&gt;
&lt;br /&gt;
===Case 1: Comment Spam===&lt;br /&gt;
The first deviant act we investigate is comment spam. This type of spam is typically generated by automated scripts which insert comments on blogs or other sites. Posted comments will generally contain links to other websites which attempt to sell a product or trick the user into revealing banking credentials. Although usually annoying, these comments can direct users to locations where malicious code may be downloaded, even if the original site hosting the comment was initially trusted. &lt;br /&gt;
&lt;br /&gt;
==== Solution ====&lt;br /&gt;
Web servers that allow open comments can adjust the required minimum morality rating to post a comment. Additionally, if comment spam is detected by another user or the site administrator, the message and the ID of the host that posted the comment is reported. This results in a host losing morality rating for posting comment spam which may limit its ability to post in the future. In the global implementation, web servers would reject access to the service altogether from the first initial connection. &lt;br /&gt;
&lt;br /&gt;
===Case 2: Denial of Service===&lt;br /&gt;
Denial of service is the act in which a service that is normally available is accessed by a large number of hosts, or a small number of hosts with high frequency. Services under a denial of service (DoS) or distributed denial of service (DDoS) attack are no longer able to serve legitimate requests [14].&lt;br /&gt;
&lt;br /&gt;
==== Solution ====&lt;br /&gt;
&lt;br /&gt;
In the Justice Web, the server will have to look up the morality rating for each host that is participating in the attack which may further increase the load on the server. The global implementation would see the morality ratings of each incoming connection and could filter (for e.g., at a firewall level) hosts that have a certain rating. While Dos is generally regarded as a very difficult problem to solve, the morality rating of hosts participating would be lowered, possibly limiting their ability to perform an attack in the future. &lt;br /&gt;
&lt;br /&gt;
===Case 3: Phishing===&lt;br /&gt;
Phishing provides an interesting challenge for a justice system as the deviant act involves a website that is perfectly legal. A phishing attack occurs when a malicious site pretends to be a legitimate site, tricking users into revealing banking or personal information.&lt;br /&gt;
&lt;br /&gt;
==== Solution ====&lt;br /&gt;
Similar to the comment spam attack, once a phishing site is reported and verified by the judges, the morality rating of the hosting node is lowered.&lt;br /&gt;
&lt;br /&gt;
=Resources=&lt;br /&gt;
[1] Posner, Richard A., &#039;&#039;Retirbution and Related Concepts of Punishment&#039;&#039;, The Journal of Legal Studies Vol. 9 No. 1, University of Chicago Press, 1980. [http://www.econ.brown.edu/fac/glenn_loury/louryhomepage/teaching/Ec%20222/posner_punishment.pdf PDF]&lt;br /&gt;
&lt;br /&gt;
[2] Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[3] Ezorsky, Gertrude, &#039;&#039;Philosophical Perspectives on Punishment&#039;&#039;, State University of New York Press, 1972. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=Jba2lFg3KOMC&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+punishment&amp;amp;ots=LuzbsNmWlg&amp;amp;sig=KTvWhaWMxIRslk38tZmucty-jNw#v=onepage&amp;amp;q=concepts%20of%20punishment&amp;amp;f=false HTML] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[4] Hobbes, Thomas, &#039;&#039;The Leviathon&#039;&#039;, first published 1651, republished by Forgotten Books, 2008. [http://books.google.ca/books?id=-Q4nPYeps6MC&amp;amp;pg=PR7&amp;amp;lpg=PR7&amp;amp;dq=the+leviathan&amp;amp;source=bl&amp;amp;ots=_vZA8CpLY0&amp;amp;sig=Wn_1z_Sqsx3-YA2dml2A458M_xU&amp;amp;hl=en&amp;amp;ei=V0R6TZT_D8XwrAGiz8zxBQ&amp;amp;sa=X&amp;amp;oi=book_result&amp;amp;ct=result&amp;amp;resnum=9&amp;amp;sqi=2&amp;amp;ved=0CFAQ6AEwCA#v=onepage&amp;amp;q&amp;amp;f=false HTML]&lt;br /&gt;
&lt;br /&gt;
[5] Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[6] Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[7]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part A)&lt;br /&gt;
&lt;br /&gt;
[8]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part B)&lt;br /&gt;
&lt;br /&gt;
[9] 928 F. 2d 504 - Court of Appeals, &#039;&#039;US v. Morris&#039;&#039;, 2nd Circuit 1991, [http://scholar.google.com/scholar_case?case=551386241451639668 HTML] (case file)&lt;br /&gt;
&lt;br /&gt;
[10] Charles F. Horne(1915),Claude Hermann Walter Johns, The Encyclopaedia Britannica, 11th ed 1910-, &#039;&#039;Ancient History Sourcebook:Code of Hammurabi, c. 1780 BCE&#039;&#039;, Translated by L. W. King, Paul Halsall March 1998, [http://www.fordham.edu/halsall/ancient/hamcode.html HTML] (Internet History Sourcebook)&lt;br /&gt;
&lt;br /&gt;
[11] Scott D. Sagan, &#039;&#039;Review: History, Analogy, and Deterrence Theory&#039;&#039;, The MIT Press, 1991, [http://www.jstor.org.proxy.library.carleton.ca/stable/204567?&amp;amp;Search=yes&amp;amp;searchText=history%2Canalogy%2CAND&amp;amp;searchText=deterrence&amp;amp;list=hide&amp;amp;searchUri=%2Faction%2FdoBasicSearch%3Facc%3Don%26Query%3Dhistory%252Canalogy%252Cand%2Bdeterrence%26gw%3Djtx%26acc%3Don%26prq%3D204567%26Search%3DSearch%26hp%3D25%26wc%3Don%26acc%3Don&amp;amp;prevSearch=&amp;amp;item=1&amp;amp;ttl=5&amp;amp;returnArticleService=showFullText HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[12]Rollin M. Perkins, &#039;&#039;A Rationale of Mens Rea&#039;&#039;, Harvard Law Review, 1939, [http://www.jstor.org/pss/1334184 HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[13] Marquis Beccaria, &#039;&#039;Of Crimes and Punishments&#039;&#039;, Translated by: Edward D. Ingraham, Philip H. Nicklin: A. Walker, 1819, [http://www.constitution.org/cb/crim_pun12.htm HTML] (essay translation)&lt;br /&gt;
&lt;br /&gt;
[14] Roger.M.Needham, &#039;&#039;Denial of Service&#039;&#039;,ACM, New York, USA ,1993,[http://portal.acm.org/citation.cfm?id=168607 PDF]&lt;br /&gt;
&lt;br /&gt;
[15] C.A. Thekkath, T. Mann, and E.K. Lee, &#039;&#039;Frangipani: A scalable distributed file system&#039;&#039;, in Proceedings of ACM SIGOPS Operating Systems Review 1997.&lt;br /&gt;
&lt;br /&gt;
[16] S. Ghemawat, H. Gobioff, and S.T. Leung, &#039;&#039;The Google File System&#039;&#039;, in Proceedings of the ACM SIGOPS Operating Systems Review. 2003&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8987</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8987"/>
		<updated>2011-03-29T16:55:41Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Local &amp;quot;Justice Web&amp;quot; Implementation */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=Members=&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
=Abstract=&lt;br /&gt;
&lt;br /&gt;
The goal of this article is to investigate the feasibility of implementing a system of justice on a distributed computing environment. Although directly applying human concepts related to justice, for example intent, is not possible in the realm of computers, we can use these concepts to construct a justice system that helps maintain the stability and efficiency of the distributed environment. To provide this functionality, the justice system requires a reporting mechanism as well as a mechanism for guaranteed attribution of transactions such that members of the distributed society can flag deviant behaviour and proper punishment may be exacted based on collected evidence. &lt;br /&gt;
&lt;br /&gt;
This article is divided into two main sections; the first is a discussion on theories of human justice and how concepts from the human example may be used within the scope of computers. The second section describes the components necessary to create a justice system for a distributed computing society and how these components would be used in four deviant acts; comment spam, unauthorized access, denial of service, and phishing attacks.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=Can Justice be Implemented on a Distributed Computing System: Discussion=&lt;br /&gt;
&lt;br /&gt;
In this section we present definitions of human justice and punishment. It is important to understand these concepts so that we can use them as a template to create a system of justice for a distributed computing environment. This section also includes definitions of key concepts related to justice and how they relate to potential justice in the realm of computers.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Theory of Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
John Rawls provides a definition of the purpose of justice as providing two primary functions; first, justice assigns rights and duties for the basic institutions of society, and second, justice describes the best way to distribute the benefits and burdens of society. [1] Essentially justice must ensure that a society is able to operate efficiently and with sufficient stability. This view fits well within the scope of justice for a distributed computing system as there are very clear roles which can be assigned and there are finite resources which can be used to manage the “benefits and burdens” of society. &lt;br /&gt;
&lt;br /&gt;
In order for a society to uphold justice it must possess the ability to punish those who behave in a deviant manner. From a philosophical point of view, there are three main categories of punishment; &#039;&#039;&#039;Teleologic, Retributive,&#039;&#039;&#039; and &#039;&#039;&#039;Teleologic Retributive&#039;&#039;&#039;. [3]&lt;br /&gt;
&lt;br /&gt;
====Teleologic View of Punishment:====&lt;br /&gt;
The teleologic view of punishment is that any punishment should always be accompanied by some beneficial effect. Even though the act of punishing someone may itself be considered “evil”, the overall punishment will be considered “good” if it provides some form of social benefit to the society. For example, if a criminal is punished for a crime and this punishment serves to dissuade potential criminals from committing future crimes, then the overall social value of the punishment is positive.[3]&lt;br /&gt;
&lt;br /&gt;
Punishment from this perspective provides a good model for computer systems as any criminal act will be handled such that punishment is beneficial for the system. A simple example of such a transaction can be visualized through the management of bandwidth. If there is a particular computer who is deemed to be a criminal bandwidth hog, using more resources than it is allowed, the perpetrator’s network connection may be throttled. This punishment would correct the deviant computer while free the resources for other computers in the system to utilize.&lt;br /&gt;
&lt;br /&gt;
====Retributive View of Punishment:====&lt;br /&gt;
Retributive punishment is defined by the belief that punishment itself is either just or intrinsically valuable even if there is social benefit to the punishment. This view is probably best characterised by the phrase “eye for an eye”. Essentially punishment is dispensed because it is necessary to inflict harm on those who do bad things but society may not get any benefit from the punishment.[3] The point of view of retributive punishment is that it is better to punish someone who commits a crime regardless of the severity of the punishment.[2]&lt;br /&gt;
&lt;br /&gt;
It is also important to discuss retributive punishment in comparison to retaliation. Although they both incorporate the concept punishment as a just, and necessary, act, they have very different goals. Retribution focuses on the wrongdoing of the criminal whereas retaliation is based on the right of the victim to seek punishment. Retaliation is based on the concept of deterrence; if you are convicted of a crime then someone will get to exact revenge and thus you will pay a price. Retribution requires a criminal to pay a price for the crime committed and thus he should internalize how the crime has a negative effect on society. [1] &lt;br /&gt;
&lt;br /&gt;
Although the necessity of punishment is certainly true, it is hard to see a situation where truly retributive punishment is beneficial for a computer system. Since computers on a distributed system are sharing finite resources, inflicting punishment on criminal computers, without considering the benefit/harm to the society, may result in further negative effects on the system. If a crime has been committed, the effects of that crime have already had an effect on the computing system. Punishing the perpetrator of the criminal act will not reverse the effect of the act, and it may adversely affect the system. &lt;br /&gt;
&lt;br /&gt;
For example, suppose a computer is caught conducting spam attacks on other computers and the punishment for this act is to remove the computer from the network. It may be the case that the criminal computer had previously provided a very efficient connection to some data set but now there is no way to communicate with this computer. As a result, members of the remaining network must use a less efficient connection to reach the same data, thus the punishment had a negative effect on the system.&lt;br /&gt;
&lt;br /&gt;
====Teleologic Retributive View of Punishment:====&lt;br /&gt;
This third view of punishment combines the concept of the need to punish within the limits of what is considered reasonable punishment for the crime. From this perspective, punishment is necessary and provides a valuable service to society but it is only enforced within acceptable limits.&lt;br /&gt;
&lt;br /&gt;
To illustrate this view of punishment, consider the spam attack example from the retributive section above. If the punishment is reduced from being removed from the network to simply blocking a specific type of communication originating from the criminal computer, then it would be considered a teleological retributive punishment. This new punishment would match the severity of the crime but also still allows the other computers on the network to utilize the efficient network path through the criminal computer.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Structure of Punishment&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
To maintain a stable and efficient distributed system, punishment requires structure, or more accurately, there needs to be some power imbalance designed within the system such that some computers can hand out punishments upon other, criminal computers. Here we will briefly discuss a few methods which may be used to implement a penal system into a society.&lt;br /&gt;
&lt;br /&gt;
====Sovereign Rule:====&lt;br /&gt;
In the 1600s, Thomas Hobbes wrote a dissertation on how government and society should be structured. Within this work Hobbes discusses how punishment should be handled by a sovereign ruler. In this system, there is a known set of laws which originate from a single entity which exists above the law. This sovereign ruler is the highest authority of the law, but he may assign lesser judges who may carry out punishment in accordance to the laws.[4]&lt;br /&gt;
 &lt;br /&gt;
In this system, breaking the law is never excusable as the law is known to all members of the society. The exception to this are any members of society that are without reason, for example “children and madmen”. Punishment is a necessary evil and the sovereign has the right to punish any criminal in order to protect the “commonwealth”. The sovereign can even order other subjects to punish criminals but he may not order a criminal to punish himself as this violates the law of self preservation. To balance the system the sovereign may also reward individuals and thus the balance of punishment and reward are the “nerves and joints which move the limbs of a commonwealth.”[4]&lt;br /&gt;
&lt;br /&gt;
Essentially, sovereign rule is one overall leader of justice who determines what is right and wrong in order to best serve the needs of a system. &lt;br /&gt;
&lt;br /&gt;
====Corporal Punishment. Economic Punishment, and Prison:====&lt;br /&gt;
Human punishment commonly falls into three overlapping categories; corporal punishment, economic punishment, and prison. Corporal punishment involves inflicting pain or possibly disfiguring a criminal in response to the crime committed. The main idea is that the criminal should serve as a demonstration of the terrible things that befall those who break the law. Furthermore, any criminal who is disfigured must live with a visual reminder of the act they committed, thus imparting shame upon the perpetrator and allowing others in society to form a conceptual model of the type of person that individual is.[5]&lt;br /&gt;
&lt;br /&gt;
Economic punishment is forcing a criminal to pay a fine for the act committed. The main idea is to make criminals internalize the social costs of the crime they committed. The penalty fine imposed upon the criminal may not be equal to the social cost of the crime committed but it should cause the criminal the same amount of distress as the crime that was committed. [1] &lt;br /&gt;
Prison is a modern method of punishment by which criminals are forced to exist under the watch of professionals and it is up to the discretion of the professionals as to when the punishment is complete. For example, it is up to lawyers, judges, psychologists and prison guards determine when a criminal’s prison sentence has ended.[5]&lt;br /&gt;
 &lt;br /&gt;
These three methods are not mutually exclusive as commonly criminals may be asked to pay a penalty fine as well as serve a prison sentence; however they all serve different purposes. All three punishment types serve as a deterrent to future criminals but each method has a different active agent; corporal punishment uses shame, economic punishment uses monetary handicapping, and prison focuses on reducing personal freedoms. These three concepts may be very useful to a distributed computer justice system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Addition Concepts Related to Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
====Morality:====&lt;br /&gt;
&lt;br /&gt;
For a system of justice to be effective, a known moral code must exist within the society. Friedrich Nietzsche provides one interpretation of morality based on social position which is divided into two categories; “master-morality” and “slave-morality”. Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic. Slave-morality, on the other hand, is based on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.[6] &lt;br /&gt;
&lt;br /&gt;
Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam attacks) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
&lt;br /&gt;
If morality was introduced to a distributed computer system that already has a reliable reputation mechanism, then all computers would be able to know how other computers behave &amp;quot;socially”. This would further allow punishment methods based on shame, to be exacted based on how &amp;quot;bad&amp;quot; a computer’s moral code is. An offending would then have to rebuild a positive moral reputation before it could participate in more trusted social interactions.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
====Intent:====&lt;br /&gt;
=====Mens Rea - state of the mind:=====&lt;br /&gt;
&lt;br /&gt;
It is said that a crime consists of two elements, the actus reus, and the mens rea. The actus reus defines the action of the crime, and the mens rea defines the mental state. The mental state of a person is highly regarded as being relevant to the punishment of crimes and the Model Penal Code (“MPC”) is used to categorize the mens rea into four levels: purposely, knowingly, recklessly, and negligently. These levels rank from being the highest is acting upon a crime on purpose, and the lowest is being part of a crime negligently. An example of such a case would be when one distinguishes between whether a car hitting someone had been done intentionally, or by accident.[7]&lt;br /&gt;
&lt;br /&gt;
For a computer, there is no such thing as &amp;quot;intent&amp;quot;, there is only computation. As such, discovering the intent of a computer is a meaningless task. To handle this issue a system of justice for computers can take one of two approaches; it can attempt to discover the intent of the user of the computer before distribution of punishment, or it can punish all perpetrators of an act with the same severity regardless of intent. If a computer justice system attempts to discover the intent of the human operating a computer then this system must involve a human who can decipher human reason. This would create a justice system that would have a bottleneck at the human investigation point. For our purposes, we propose that all perpetrators of a deviant act are punished with the same severity to prevent the need for human interventions/investigations.&lt;br /&gt;
&lt;br /&gt;
=====Computer Fraud and Abuse Act:=====&lt;br /&gt;
&lt;br /&gt;
The digital age has brought on many new kinds of crimes on the Internet in computers. An example of preventative measures for these crimes was created in  1984 by the United States of America’s congress called the Computer Fraud and Abuse Act(“CFAA”). This criminal statute was built under the ideas of mens rea, and the MPC. After being first implemented, there has had to be many changes to it because of unspecific instances of how different crimes were categorized based on the mens rea. The change between “knowingly” and “intentionally” doing an act would change in degrees of punishment as well as accessing a system and damaging a system had to be more specified over time.[8]&lt;br /&gt;
&lt;br /&gt;
One well know case is of Robert Tappan Morris, who was a 1st year graduate student in Cornell University who attempted to demonstrate the inadequacies of current security measures on the computer networks(INTERNET) by releasing a worm virus. The virus had propagated faster than he had intended and attempted to release the instructions on how to kill the worm, but it had been too late, and many computers across the INTERNET had been affected. The government had to try and prove that it was his intent to access unauthorized computers, which he did, and they also tried to prove that it was his intent to damage the machines, but at that point damaging machines had no category in mens rea.[9]&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
===Applying justice to computers===&lt;br /&gt;
&lt;br /&gt;
The first issue arises from the discussion of the mens rea. Some might say that the computer executes commands that is inputted by the user, so this would mean that everything that the computer does, must be on purpose, because it is just following instructions. This may be true except in the following case that an error has occurred in the system, or a bit has gone missing and the address to which sensitive information was to be sent has now been sent to an incorrect address. If this error created many losses to some entity, would the user be blamed for this error or would the computer be blamed for negligently sending to the wrong address?  This type of situation seems similar to how humans may be charged for killing someone, the difference  between murder and manslaughter is the intent.[12] With the current structure of how computers are set up, it is difficult to map a mens rea scheme to it’s inner workings.&lt;br /&gt;
(*perhaps if the computer was running some genetic programming to create a program which it deemed good, and then intentionally used it, then that intent to use differs from it continually creating new programs until it decides one is suitable)&lt;br /&gt;
&lt;br /&gt;
Assuming that the state of mind of a computer has been decided, the next thing to consider would be how would one prevent a computer from doing malicious actions. Attempting to follow in the footsteps of the general deterrence theory, we would try to instill some sort of fear of consequences/shame that would come from causing malicious actions. The problem with this approach to justice is difficult because of the idea that computers do not have feelings, and doing any kind of work such as word processing to a denial of service attack would be equal in aspects to what it prefers to do. Deterring possible criminals only works if they are afraid of the consequences and can not accept the ratio of profit over penalty that they will procure from a malicious act. If a punishment for a computer was to execute many functions for a long period of time, the computer itself would not care any less if it were doing those functions or standing by idle. However, for the human that might force it’s computer to do such malicious actions may be deterred from doing so because of the consequences that might follow from the law, or the possible performance drop from his own computer. The penalties set in place are currently only going to affect a human, whether it be sentenced to jail or confiscation of the physical computer, the human aspect of the problem will be removed from the computer element. Had it been that the computer itself was the only one punished for such malicious actions, then it would not prevent further malicious actions from occurring on a computer network by the human  user using another computer terminal.[13]&lt;br /&gt;
&lt;br /&gt;
Since a distributed system would want to one day grow to a global scale, the laws and punishments can not be enforced in a legal sense because of jurisdiction issues, therefore, the implementation of a new system must be done so that computers on the system will be deterred from malicious actions. Implementing a morality system that has every node on the system with their personal morality rating will allow for nodes to communicate with other nodes based on how low or high the rating is. From lowering in morality because of malicious actions and raising it by being more helpful to the system will allow for computers to &amp;quot;care&amp;quot; for who they are communicating with, and to also feel shame for when their morality is so low that they can barely communicate with others.(Lowest level might equal to expulsion) Based on this simulated feeling of care and shame, this might allow for a justice system to be implemented onto computers.&lt;br /&gt;
&lt;br /&gt;
=Possible Implementation=&lt;br /&gt;
Designing a complete justice system implementation is far beyond the scope of this project. This does not mean it is not important to describe the important features that a fully functional system would require and outline the potential benefits and shortcomings of the system. In fact, our team could not come up with one complete system that would be feasible; instead we have two potential implementations each with there own positives and negatives. Although the implementations have separate modes of operation, they both take a teleologic-retributive approach to punishment; by this we mean punishment is necessary but we will not inflict punishmnets that will negatively affect the performance or stability of the distributed system.&lt;br /&gt;
&lt;br /&gt;
The remainder of this article will detail the two justice system implementations at a high level and describe how each system could handle three deviant behaviour scenarios; Comment Spam, Denial of Serice Attacks and Phishing.&lt;br /&gt;
&lt;br /&gt;
==Local &amp;quot;Justice Web&amp;quot; Implementation==&lt;br /&gt;
* provide details of implementation here.&lt;br /&gt;
&lt;br /&gt;
===Overview===&lt;br /&gt;
&lt;br /&gt;
The implementation described in the following sections takes into consideration the above discussion involving justice, and applying it to the management of a computer network. The implementation is an incrementally-deployable justice system currently entitled the &amp;quot;Justice Web&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
The Justice Web is essentially a computer network that applies a morality rating to those inside the network, as well as connections coming from outside the network. The morality rating is based on previous actions taken by the entity in question, and the rating is decided by the leader(s) of the network. It is up to the individual nodes within the network to enforce restrictions based on the morality rating master list, which is distributed throughout the network.&lt;br /&gt;
&lt;br /&gt;
In order to implement the Justice Web, certain assumptions must be made:&lt;br /&gt;
&lt;br /&gt;
* All computers attempting a connection to the network must be able to be authentically identified whether they are inside or outside of the Justice Web.&lt;br /&gt;
* Probably more.&lt;br /&gt;
&lt;br /&gt;
===Morality Rating===&lt;br /&gt;
&lt;br /&gt;
In the Justice Web, &amp;quot;Morality Rating&amp;quot; (MR) is assigned by the Judge or Judges of the network. The morality rating determines a user&#039;s access to a server, based on that server&#039;s rulings. For example, a server within the Justice Web could have a rule that any connections below MR: -100 are not allowed to connect. In addition, users within the Justice Web use their MR to gain access to resources publicly available to those within the network.&lt;br /&gt;
&lt;br /&gt;
Morality ratings are local to each network running the Justice Web, so a computer that has a bad MR in one network might have a good MR in another. &lt;br /&gt;
&lt;br /&gt;
===Master List===&lt;br /&gt;
&lt;br /&gt;
The &amp;quot;Master List&amp;quot; is a database that stores the morality ratings of a Justice Web, and is maintained by the judges. servers within the network store a &amp;quot;Slave List&amp;quot; which mirrors a subset of the entries in the master list. The subset is dependent on the rules implemented by the server. For instance, if a server decides to deny any connections with an MR: -100, all entries that have MR: -100 would be stored in the slave list.&lt;br /&gt;
&lt;br /&gt;
===Judges===&lt;br /&gt;
&lt;br /&gt;
A Justice Web needs one or more judges to function. When an offense occurs, a node in the network submits a claim, along with an encrypted evidence log and ID of the offender. If the evidence is sufficient, the judge changes the MR of the offender based on the severity of the offense.&lt;br /&gt;
&lt;br /&gt;
A judge is appointed by default as the node in the network with the highest MR (Usually the owner), though this option is implementation specific. Alternatively, a ring of judges is appointed and given the power to lower the MR of other judges, but the evidence must be validated by a majority of the judges. This would be implemented as an attempt to keep the judges in check.&lt;br /&gt;
&lt;br /&gt;
===Rules===&lt;br /&gt;
&lt;br /&gt;
Each Justice Web specifies its own set of rules. A rule consists of three parts: the offense, what level of proof is needed, and the severity of the punishment. The creation of these rules is by default left up to the judges. As stated above, the rules are used by the system during the judgement of claims.&lt;br /&gt;
&lt;br /&gt;
===Evidence Logs===&lt;br /&gt;
&lt;br /&gt;
Evidence logs are stored on each node of the Justice Web, and they keep track of the most recent network activity of that computer. the logs are encrypted to ensure that the computer making the claim did not tamper with the evidence. Upon being retrieved by the Judges, the logs are decrypted and processed. Depending on the network, the evidence made available may or may not be sufficient to justify the claim.&lt;br /&gt;
&lt;br /&gt;
===Membership===&lt;br /&gt;
&lt;br /&gt;
There are three possible reasons for joining a Justice Web. You could either be:&lt;br /&gt;
* A server looking for protection from illegitimate traffic and other computers with dispositions of malcontent.&lt;br /&gt;
* A client looking for protection from phishing attacks and network viruses. (Though this might contradict with the Slave-Master List concept)&lt;br /&gt;
* A server or client looking for access to distributed resources within the network.&lt;br /&gt;
&lt;br /&gt;
When joining a Justice Web, a computer retains its MR from when it was outside of the network. In other words, you can&#039;t reset your score just by joining the network.&lt;br /&gt;
&lt;br /&gt;
===Jurisdictions===&lt;br /&gt;
&lt;br /&gt;
As a Justice Web grows, it would become infeasible for a ring of judges to handle every single claim. If the network is sufficiently large, it would make sense to implement hierarchy so that the less severe claims are handled by lower rungs. Again, this would be implementation specific, but it would especially make sense in the case of multiple Justice Webs joining or forming some sort of alliance.&lt;br /&gt;
&lt;br /&gt;
==Global Implementation==&lt;br /&gt;
* provide details of implementation here.&lt;br /&gt;
&lt;br /&gt;
==Use Case Investigation==&lt;br /&gt;
&lt;br /&gt;
===Case 1: Comment Spam:===&lt;br /&gt;
The first deviant act we will investigate is comment spam. The type of spam we are focusing on are usually automated scripts which insert the same comment, usually including links to other destination websites, on forums of public sites. Although usually annoying, these comments can direct users to locations where malicious code may be introduced to unsuspecting users who trust the content of the original site where the forum was hosted. &lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Local Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Global Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
===Case 2: Denial of Service:===&lt;br /&gt;
Denial of service is the act in which a service that is normally available is being accessed by either numerous ip&#039;s through ip spoofing or a distributed DoS attack which has multiple valid ip&#039;s, which in turn, bog down the system because the service capacity is being constrained. By either maxing out or flooding a service by multiple requests, a system will either be shutdown or very difficult to use, regardless, the outcome is a denial of that service. We have come up with some solutions to how to punish the computers that participate in such an attack, voluntary or not.[14]&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Local Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Global Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
===Case 3: Phishing:===&lt;br /&gt;
Phishing provides an interesting challenge for a justice system as the deviant act involves a website that is perfectly legal. A phishing attack occurs when a user visits a website and enters information/clicks on a link expecting the site he/she is visiting to be secure. Unfortunately the site they have been directed to has been designed to imitate the appearance and behaviour of the site the user wishes to visit, but it is not actually the real webpage. As a result, a user may expose private information to parties that are not legally entitled to view the data. Although it is not illegal for the &amp;quot;fake site&amp;quot; to exist, the usage of the site is an act that must be addressed by the justice system.&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Local Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Global Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
=Resources=&lt;br /&gt;
[1] Posner, Richard A., &#039;&#039;Retirbution and Related Concepts of Punishment&#039;&#039;, The Journal of Legal Studies Vol. 9 No. 1, University of Chicago Press, 1980. [http://www.econ.brown.edu/fac/glenn_loury/louryhomepage/teaching/Ec%20222/posner_punishment.pdf PDF]&lt;br /&gt;
&lt;br /&gt;
[2] Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[3] Ezorsky, Gertrude, &#039;&#039;Philosophical Perspectives on Punishment&#039;&#039;, State University of New York Press, 1972. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=Jba2lFg3KOMC&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+punishment&amp;amp;ots=LuzbsNmWlg&amp;amp;sig=KTvWhaWMxIRslk38tZmucty-jNw#v=onepage&amp;amp;q=concepts%20of%20punishment&amp;amp;f=false HTML] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[4] Hobbes, Thomas, &#039;&#039;The Leviathon&#039;&#039;, first published 1651, republished by Forgotten Books, 2008. [http://books.google.ca/books?id=-Q4nPYeps6MC&amp;amp;pg=PR7&amp;amp;lpg=PR7&amp;amp;dq=the+leviathan&amp;amp;source=bl&amp;amp;ots=_vZA8CpLY0&amp;amp;sig=Wn_1z_Sqsx3-YA2dml2A458M_xU&amp;amp;hl=en&amp;amp;ei=V0R6TZT_D8XwrAGiz8zxBQ&amp;amp;sa=X&amp;amp;oi=book_result&amp;amp;ct=result&amp;amp;resnum=9&amp;amp;sqi=2&amp;amp;ved=0CFAQ6AEwCA#v=onepage&amp;amp;q&amp;amp;f=false HTML]&lt;br /&gt;
&lt;br /&gt;
[5] Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[6] Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[7]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part A)&lt;br /&gt;
&lt;br /&gt;
[8]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part B)&lt;br /&gt;
&lt;br /&gt;
[9] 928 F. 2d 504 - Court of Appeals, &#039;&#039;US v. Morris&#039;&#039;, 2nd Circuit 1991, [http://scholar.google.com/scholar_case?case=551386241451639668 HTML] (case file)&lt;br /&gt;
&lt;br /&gt;
[10] Charles F. Horne(1915),Claude Hermann Walter Johns, The Encyclopaedia Britannica, 11th ed 1910-, &#039;&#039;Ancient History Sourcebook:Code of Hammurabi, c. 1780 BCE&#039;&#039;, Translated by L. W. King, Paul Halsall March 1998, [http://www.fordham.edu/halsall/ancient/hamcode.html HTML] (Internet History Sourcebook)&lt;br /&gt;
&lt;br /&gt;
[11] Scott D. Sagan, &#039;&#039;Review: History, Analogy, and Deterrence Theory&#039;&#039;, The MIT Press, 1991, [http://www.jstor.org.proxy.library.carleton.ca/stable/204567?&amp;amp;Search=yes&amp;amp;searchText=history%2Canalogy%2CAND&amp;amp;searchText=deterrence&amp;amp;list=hide&amp;amp;searchUri=%2Faction%2FdoBasicSearch%3Facc%3Don%26Query%3Dhistory%252Canalogy%252Cand%2Bdeterrence%26gw%3Djtx%26acc%3Don%26prq%3D204567%26Search%3DSearch%26hp%3D25%26wc%3Don%26acc%3Don&amp;amp;prevSearch=&amp;amp;item=1&amp;amp;ttl=5&amp;amp;returnArticleService=showFullText HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[12]Rollin M. Perkins, &#039;&#039;A Rationale of Mens Rea&#039;&#039;, Harvard Law Review, 1939, [http://www.jstor.org/pss/1334184 HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[13] Marquis Beccaria, &#039;&#039;Of Crimes and Punishments&#039;&#039;, Translated by: Edward D. Ingraham, Philip H. Nicklin: A. Walker, 1819, [http://www.constitution.org/cb/crim_pun12.htm HTML] (essay translation)&lt;br /&gt;
&lt;br /&gt;
[14] Roger.M.Needham, &#039;&#039;Denial of Service&#039;&#039;,ACM, New York, USA ,1993,[http://portal.acm.org/citation.cfm?id=168607 PDF]&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8986</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8986"/>
		<updated>2011-03-29T16:51:22Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Local &amp;quot;Justice Web&amp;quot; Implementation */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=Members=&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
=Abstract=&lt;br /&gt;
&lt;br /&gt;
The goal of this article is to investigate the feasibility of implementing a system of justice on a distributed computing environment. Although directly applying human concepts related to justice, for example intent, is not possible in the realm of computers, we can use these concepts to construct a justice system that helps maintain the stability and efficiency of the distributed environment. To provide this functionality, the justice system requires a reporting mechanism as well as a mechanism for guaranteed attribution of transactions such that members of the distributed society can flag deviant behaviour and proper punishment may be exacted based on collected evidence. &lt;br /&gt;
&lt;br /&gt;
This article is divided into two main sections; the first is a discussion on theories of human justice and how concepts from the human example may be used within the scope of computers. The second section describes the components necessary to create a justice system for a distributed computing society and how these components would be used in four deviant acts; comment spam, unauthorized access, denial of service, and phishing attacks.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=Can Justice be Implemented on a Distributed Computing System: Discussion=&lt;br /&gt;
&lt;br /&gt;
In this section we present definitions of human justice and punishment. It is important to understand these concepts so that we can use them as a template to create a system of justice for a distributed computing environment. This section also includes definitions of key concepts related to justice and how they relate to potential justice in the realm of computers.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Theory of Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
John Rawls provides a definition of the purpose of justice as providing two primary functions; first, justice assigns rights and duties for the basic institutions of society, and second, justice describes the best way to distribute the benefits and burdens of society. [1] Essentially justice must ensure that a society is able to operate efficiently and with sufficient stability. This view fits well within the scope of justice for a distributed computing system as there are very clear roles which can be assigned and there are finite resources which can be used to manage the “benefits and burdens” of society. &lt;br /&gt;
&lt;br /&gt;
In order for a society to uphold justice it must possess the ability to punish those who behave in a deviant manner. From a philosophical point of view, there are three main categories of punishment; &#039;&#039;&#039;Teleologic, Retributive,&#039;&#039;&#039; and &#039;&#039;&#039;Teleologic Retributive&#039;&#039;&#039;. [3]&lt;br /&gt;
&lt;br /&gt;
====Teleologic View of Punishment:====&lt;br /&gt;
The teleologic view of punishment is that any punishment should always be accompanied by some beneficial effect. Even though the act of punishing someone may itself be considered “evil”, the overall punishment will be considered “good” if it provides some form of social benefit to the society. For example, if a criminal is punished for a crime and this punishment serves to dissuade potential criminals from committing future crimes, then the overall social value of the punishment is positive.[3]&lt;br /&gt;
&lt;br /&gt;
Punishment from this perspective provides a good model for computer systems as any criminal act will be handled such that punishment is beneficial for the system. A simple example of such a transaction can be visualized through the management of bandwidth. If there is a particular computer who is deemed to be a criminal bandwidth hog, using more resources than it is allowed, the perpetrator’s network connection may be throttled. This punishment would correct the deviant computer while free the resources for other computers in the system to utilize.&lt;br /&gt;
&lt;br /&gt;
====Retributive View of Punishment:====&lt;br /&gt;
Retributive punishment is defined by the belief that punishment itself is either just or intrinsically valuable even if there is social benefit to the punishment. This view is probably best characterised by the phrase “eye for an eye”. Essentially punishment is dispensed because it is necessary to inflict harm on those who do bad things but society may not get any benefit from the punishment.[3] The point of view of retributive punishment is that it is better to punish someone who commits a crime regardless of the severity of the punishment.[2]&lt;br /&gt;
&lt;br /&gt;
It is also important to discuss retributive punishment in comparison to retaliation. Although they both incorporate the concept punishment as a just, and necessary, act, they have very different goals. Retribution focuses on the wrongdoing of the criminal whereas retaliation is based on the right of the victim to seek punishment. Retaliation is based on the concept of deterrence; if you are convicted of a crime then someone will get to exact revenge and thus you will pay a price. Retribution requires a criminal to pay a price for the crime committed and thus he should internalize how the crime has a negative effect on society. [1] &lt;br /&gt;
&lt;br /&gt;
Although the necessity of punishment is certainly true, it is hard to see a situation where truly retributive punishment is beneficial for a computer system. Since computers on a distributed system are sharing finite resources, inflicting punishment on criminal computers, without considering the benefit/harm to the society, may result in further negative effects on the system. If a crime has been committed, the effects of that crime have already had an effect on the computing system. Punishing the perpetrator of the criminal act will not reverse the effect of the act, and it may adversely affect the system. &lt;br /&gt;
&lt;br /&gt;
For example, suppose a computer is caught conducting spam attacks on other computers and the punishment for this act is to remove the computer from the network. It may be the case that the criminal computer had previously provided a very efficient connection to some data set but now there is no way to communicate with this computer. As a result, members of the remaining network must use a less efficient connection to reach the same data, thus the punishment had a negative effect on the system.&lt;br /&gt;
&lt;br /&gt;
====Teleologic Retributive View of Punishment:====&lt;br /&gt;
This third view of punishment combines the concept of the need to punish within the limits of what is considered reasonable punishment for the crime. From this perspective, punishment is necessary and provides a valuable service to society but it is only enforced within acceptable limits.&lt;br /&gt;
&lt;br /&gt;
To illustrate this view of punishment, consider the spam attack example from the retributive section above. If the punishment is reduced from being removed from the network to simply blocking a specific type of communication originating from the criminal computer, then it would be considered a teleological retributive punishment. This new punishment would match the severity of the crime but also still allows the other computers on the network to utilize the efficient network path through the criminal computer.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Structure of Punishment&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
To maintain a stable and efficient distributed system, punishment requires structure, or more accurately, there needs to be some power imbalance designed within the system such that some computers can hand out punishments upon other, criminal computers. Here we will briefly discuss a few methods which may be used to implement a penal system into a society.&lt;br /&gt;
&lt;br /&gt;
====Sovereign Rule:====&lt;br /&gt;
In the 1600s, Thomas Hobbes wrote a dissertation on how government and society should be structured. Within this work Hobbes discusses how punishment should be handled by a sovereign ruler. In this system, there is a known set of laws which originate from a single entity which exists above the law. This sovereign ruler is the highest authority of the law, but he may assign lesser judges who may carry out punishment in accordance to the laws.[4]&lt;br /&gt;
 &lt;br /&gt;
In this system, breaking the law is never excusable as the law is known to all members of the society. The exception to this are any members of society that are without reason, for example “children and madmen”. Punishment is a necessary evil and the sovereign has the right to punish any criminal in order to protect the “commonwealth”. The sovereign can even order other subjects to punish criminals but he may not order a criminal to punish himself as this violates the law of self preservation. To balance the system the sovereign may also reward individuals and thus the balance of punishment and reward are the “nerves and joints which move the limbs of a commonwealth.”[4]&lt;br /&gt;
&lt;br /&gt;
Essentially, sovereign rule is one overall leader of justice who determines what is right and wrong in order to best serve the needs of a system. &lt;br /&gt;
&lt;br /&gt;
====Corporal Punishment. Economic Punishment, and Prison:====&lt;br /&gt;
Human punishment commonly falls into three overlapping categories; corporal punishment, economic punishment, and prison. Corporal punishment involves inflicting pain or possibly disfiguring a criminal in response to the crime committed. The main idea is that the criminal should serve as a demonstration of the terrible things that befall those who break the law. Furthermore, any criminal who is disfigured must live with a visual reminder of the act they committed, thus imparting shame upon the perpetrator and allowing others in society to form a conceptual model of the type of person that individual is.[5]&lt;br /&gt;
&lt;br /&gt;
Economic punishment is forcing a criminal to pay a fine for the act committed. The main idea is to make criminals internalize the social costs of the crime they committed. The penalty fine imposed upon the criminal may not be equal to the social cost of the crime committed but it should cause the criminal the same amount of distress as the crime that was committed. [1] &lt;br /&gt;
Prison is a modern method of punishment by which criminals are forced to exist under the watch of professionals and it is up to the discretion of the professionals as to when the punishment is complete. For example, it is up to lawyers, judges, psychologists and prison guards determine when a criminal’s prison sentence has ended.[5]&lt;br /&gt;
 &lt;br /&gt;
These three methods are not mutually exclusive as commonly criminals may be asked to pay a penalty fine as well as serve a prison sentence; however they all serve different purposes. All three punishment types serve as a deterrent to future criminals but each method has a different active agent; corporal punishment uses shame, economic punishment uses monetary handicapping, and prison focuses on reducing personal freedoms. These three concepts may be very useful to a distributed computer justice system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Addition Concepts Related to Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
====Morality:====&lt;br /&gt;
&lt;br /&gt;
For a system of justice to be effective, a known moral code must exist within the society. Friedrich Nietzsche provides one interpretation of morality based on social position which is divided into two categories; “master-morality” and “slave-morality”. Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic. Slave-morality, on the other hand, is based on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.[6] &lt;br /&gt;
&lt;br /&gt;
Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam attacks) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
&lt;br /&gt;
If morality was introduced to a distributed computer system that already has a reliable reputation mechanism, then all computers would be able to know how other computers behave &amp;quot;socially”. This would further allow punishment methods based on shame, to be exacted based on how &amp;quot;bad&amp;quot; a computer’s moral code is. An offending would then have to rebuild a positive moral reputation before it could participate in more trusted social interactions.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
====Intent:====&lt;br /&gt;
=====Mens Rea - state of the mind:=====&lt;br /&gt;
&lt;br /&gt;
It is said that a crime consists of two elements, the actus reus, and the mens rea. The actus reus defines the action of the crime, and the mens rea defines the mental state. The mental state of a person is highly regarded as being relevant to the punishment of crimes and the Model Penal Code (“MPC”) is used to categorize the mens rea into four levels: purposely, knowingly, recklessly, and negligently. These levels rank from being the highest is acting upon a crime on purpose, and the lowest is being part of a crime negligently. An example of such a case would be when one distinguishes between whether a car hitting someone had been done intentionally, or by accident.[7]&lt;br /&gt;
&lt;br /&gt;
For a computer, there is no such thing as &amp;quot;intent&amp;quot;, there is only computation. As such, discovering the intent of a computer is a meaningless task. To handle this issue a system of justice for computers can take one of two approaches; it can attempt to discover the intent of the user of the computer before distribution of punishment, or it can punish all perpetrators of an act with the same severity regardless of intent. If a computer justice system attempts to discover the intent of the human operating a computer then this system must involve a human who can decipher human reason. This would create a justice system that would have a bottleneck at the human investigation point. For our purposes, we propose that all perpetrators of a deviant act are punished with the same severity to prevent the need for human interventions/investigations.&lt;br /&gt;
&lt;br /&gt;
=====Computer Fraud and Abuse Act:=====&lt;br /&gt;
&lt;br /&gt;
The digital age has brought on many new kinds of crimes on the Internet in computers. An example of preventative measures for these crimes was created in  1984 by the United States of America’s congress called the Computer Fraud and Abuse Act(“CFAA”). This criminal statute was built under the ideas of mens rea, and the MPC. After being first implemented, there has had to be many changes to it because of unspecific instances of how different crimes were categorized based on the mens rea. The change between “knowingly” and “intentionally” doing an act would change in degrees of punishment as well as accessing a system and damaging a system had to be more specified over time.[8]&lt;br /&gt;
&lt;br /&gt;
One well know case is of Robert Tappan Morris, who was a 1st year graduate student in Cornell University who attempted to demonstrate the inadequacies of current security measures on the computer networks(INTERNET) by releasing a worm virus. The virus had propagated faster than he had intended and attempted to release the instructions on how to kill the worm, but it had been too late, and many computers across the INTERNET had been affected. The government had to try and prove that it was his intent to access unauthorized computers, which he did, and they also tried to prove that it was his intent to damage the machines, but at that point damaging machines had no category in mens rea.[9]&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
===Applying justice to computers===&lt;br /&gt;
&lt;br /&gt;
The first issue arises from the discussion of the mens rea. Some might say that the computer executes commands that is inputted by the user, so this would mean that everything that the computer does, must be on purpose, because it is just following instructions. This may be true except in the following case that an error has occurred in the system, or a bit has gone missing and the address to which sensitive information was to be sent has now been sent to an incorrect address. If this error created many losses to some entity, would the user be blamed for this error or would the computer be blamed for negligently sending to the wrong address?  This type of situation seems similar to how humans may be charged for killing someone, the difference  between murder and manslaughter is the intent.[12] With the current structure of how computers are set up, it is difficult to map a mens rea scheme to it’s inner workings.&lt;br /&gt;
(*perhaps if the computer was running some genetic programming to create a program which it deemed good, and then intentionally used it, then that intent to use differs from it continually creating new programs until it decides one is suitable)&lt;br /&gt;
&lt;br /&gt;
Assuming that the state of mind of a computer has been decided, the next thing to consider would be how would one prevent a computer from doing malicious actions. Attempting to follow in the footsteps of the general deterrence theory, we would try to instill some sort of fear of consequences/shame that would come from causing malicious actions. The problem with this approach to justice is difficult because of the idea that computers do not have feelings, and doing any kind of work such as word processing to a denial of service attack would be equal in aspects to what it prefers to do. Deterring possible criminals only works if they are afraid of the consequences and can not accept the ratio of profit over penalty that they will procure from a malicious act. If a punishment for a computer was to execute many functions for a long period of time, the computer itself would not care any less if it were doing those functions or standing by idle. However, for the human that might force it’s computer to do such malicious actions may be deterred from doing so because of the consequences that might follow from the law, or the possible performance drop from his own computer. The penalties set in place are currently only going to affect a human, whether it be sentenced to jail or confiscation of the physical computer, the human aspect of the problem will be removed from the computer element. Had it been that the computer itself was the only one punished for such malicious actions, then it would not prevent further malicious actions from occurring on a computer network by the human  user using another computer terminal.[13]&lt;br /&gt;
&lt;br /&gt;
Since a distributed system would want to one day grow to a global scale, the laws and punishments can not be enforced in a legal sense because of jurisdiction issues, therefore, the implementation of a new system must be done so that computers on the system will be deterred from malicious actions. Implementing a morality system that has every node on the system with their personal morality rating will allow for nodes to communicate with other nodes based on how low or high the rating is. From lowering in morality because of malicious actions and raising it by being more helpful to the system will allow for computers to &amp;quot;care&amp;quot; for who they are communicating with, and to also feel shame for when their morality is so low that they can barely communicate with others.(Lowest level might equal to expulsion) Based on this simulated feeling of care and shame, this might allow for a justice system to be implemented onto computers.&lt;br /&gt;
&lt;br /&gt;
=Possible Implementation=&lt;br /&gt;
Designing a complete justice system implementation is far beyond the scope of this project. This does not mean it is not important to describe the important features that a fully functional system would require and outline the potential benefits and shortcomings of the system. In fact, our team could not come up with one complete system that would be feasible; instead we have two potential implementations each with there own positives and negatives. Although the implementations have separate modes of operation, they both take a teleologic-retributive approach to punishment; by this we mean punishment is necessary but we will not inflict punishmnets that will negatively affect the performance or stability of the distributed system.&lt;br /&gt;
&lt;br /&gt;
The remainder of this article will detail the two justice system implementations at a high level and describe how each system could handle three deviant behaviour scenarios; Comment Spam, Denial of Serice Attacks and Phishing.&lt;br /&gt;
&lt;br /&gt;
==Local &amp;quot;Justice Web&amp;quot; Implementation==&lt;br /&gt;
* provide details of implementation here.&lt;br /&gt;
&lt;br /&gt;
===Overview===&lt;br /&gt;
&lt;br /&gt;
The implementation described in the following sections takes into consideration the above discussion involving justice, and applying it to the management of a computer network. The implementation is an incrementally-deployable justice system currently entitled the &amp;quot;Justice Web&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
The Justice Web is essentially a computer network that applies a morality rating to those inside the network, as well as connections coming from outside the network. The morality rating is based on previous actions taken by the entity in question, and the rating is decided by the leader(s) of the network. It is up to the individual nodes within the network to enforce restrictions based on the morality rating master list, which is distributed throughout the network.&lt;br /&gt;
&lt;br /&gt;
In order to implement the Justice Web, certain assumptions must be made:&lt;br /&gt;
&lt;br /&gt;
* All computers attempting a connection to the network must be able to be authentically identified whether they are inside or outside of the Justice Web.&lt;br /&gt;
* Probably more.&lt;br /&gt;
&lt;br /&gt;
===Morality Rating===&lt;br /&gt;
&lt;br /&gt;
In the Justice Web, &amp;quot;Morality Rating&amp;quot; (MR) is assigned by the Judge or Judges of the network. The morality rating determines a user&#039;s access to a server, based on that server&#039;s rulings. For example, a server within the Justice Web could have a rule that any connections below MR: -100 are not allowed to connect. In addition, users within the Justice Web use their MR to gain access to resources publicly available to those within the network.&lt;br /&gt;
&lt;br /&gt;
Morality ratings are local to each network running the Justice Web, so a computer that has a bad MR in one network might have a good MR in another. &lt;br /&gt;
&lt;br /&gt;
===Master List===&lt;br /&gt;
&lt;br /&gt;
The &amp;quot;Master List&amp;quot; is a database that stores the morality ratings of a Justice Web, and is maintained by the judges. servers within the network store a &amp;quot;Slave List&amp;quot; which mirrors a subset of the entries in the master list. The subset is dependent on the rules implemented by the server. For instance, if a server decides to deny any connections with an MR: -100, all entries that have MR: -100 would be stored in the slave list.&lt;br /&gt;
&lt;br /&gt;
===Judges===&lt;br /&gt;
&lt;br /&gt;
A Justice Web needs one or more judges to function. When an offense occurs, a node in the network submits a claim, along with an encrypted evidence log and ID of the offender. If the evidence is sufficient, the judge changes the MR of the offender based on the severity of the offense.&lt;br /&gt;
&lt;br /&gt;
A judge is appointed by default as the node in the network with the highest MR (Usually the owner), though this option is implementation specific. Alternatively, a ring of judges is appointed and given the power to lower the MR of other judges, but the evidence must be validated by a majority of the judges. This would be implemented as an attempt to keep the judges in check.&lt;br /&gt;
&lt;br /&gt;
===Rules===&lt;br /&gt;
&lt;br /&gt;
Each Justice Web specifies its own set of rules. A rule consists of three parts: the offense, what level of proof is needed, and the severity of the punishment. The creation of these rules is by default left up to the judges. As stated above, the rules are used by the system during the judgement of claims.&lt;br /&gt;
&lt;br /&gt;
===Evidence Logs===&lt;br /&gt;
&lt;br /&gt;
Evidence logs are stored on each node of the Justice Web, and they keep track of the most recent network activity of that computer. the logs are encrypted to ensure that the computer making the claim did not tamper with the evidence. Upon being retrieved by the Judges, the logs are decrypted and processed. Depending on the network, the evidence made available may or may not be sufficient to justify the claim.&lt;br /&gt;
&lt;br /&gt;
===Membership===&lt;br /&gt;
&lt;br /&gt;
There are three possible reasons for joining a Justice Web. You could either be:&lt;br /&gt;
* A server looking for protection from illegitimate traffic and other computers with dispositions of malcontent.&lt;br /&gt;
* A client looking for protection from phishing attacks and network viruses.&lt;br /&gt;
* A server or client looking for access to distributed resources within the network.&lt;br /&gt;
&lt;br /&gt;
When joining a Justice Web, a computer retains its MR from when it was outside of the network. In other words, you can&#039;t reset your score just by joining the network.&lt;br /&gt;
&lt;br /&gt;
==Global Implementation==&lt;br /&gt;
* provide details of implementation here.&lt;br /&gt;
&lt;br /&gt;
==Use Case Investigation==&lt;br /&gt;
&lt;br /&gt;
===Case 1: Comment Spam:===&lt;br /&gt;
The first deviant act we will investigate is comment spam. The type of spam we are focusing on are usually automated scripts which insert the same comment, usually including links to other destination websites, on forums of public sites. Although usually annoying, these comments can direct users to locations where malicious code may be introduced to unsuspecting users who trust the content of the original site where the forum was hosted. &lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Local Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Global Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
===Case 2: Denial of Service:===&lt;br /&gt;
Denial of service is the act in which a service that is normally available is being accessed by either numerous ip&#039;s through ip spoofing or a distributed DoS attack which has multiple valid ip&#039;s, which in turn, bog down the system because the service capacity is being constrained. By either maxing out or flooding a service by multiple requests, a system will either be shutdown or very difficult to use, regardless, the outcome is a denial of that service. We have come up with some solutions to how to punish the computers that participate in such an attack, voluntary or not.[14]&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Local Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Global Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
===Case 3: Phishing:===&lt;br /&gt;
Phishing provides an interesting challenge for a justice system as the deviant act involves a website that is perfectly legal. A phishing attack occurs when a user visits a website and enters information/clicks on a link expecting the site he/she is visiting to be secure. Unfortunately the site they have been directed to has been designed to imitate the appearance and behaviour of the site the user wishes to visit, but it is not actually the real webpage. As a result, a user may expose private information to parties that are not legally entitled to view the data. Although it is not illegal for the &amp;quot;fake site&amp;quot; to exist, the usage of the site is an act that must be addressed by the justice system.&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Local Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Global Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
=Resources=&lt;br /&gt;
[1] Posner, Richard A., &#039;&#039;Retirbution and Related Concepts of Punishment&#039;&#039;, The Journal of Legal Studies Vol. 9 No. 1, University of Chicago Press, 1980. [http://www.econ.brown.edu/fac/glenn_loury/louryhomepage/teaching/Ec%20222/posner_punishment.pdf PDF]&lt;br /&gt;
&lt;br /&gt;
[2] Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[3] Ezorsky, Gertrude, &#039;&#039;Philosophical Perspectives on Punishment&#039;&#039;, State University of New York Press, 1972. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=Jba2lFg3KOMC&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+punishment&amp;amp;ots=LuzbsNmWlg&amp;amp;sig=KTvWhaWMxIRslk38tZmucty-jNw#v=onepage&amp;amp;q=concepts%20of%20punishment&amp;amp;f=false HTML] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[4] Hobbes, Thomas, &#039;&#039;The Leviathon&#039;&#039;, first published 1651, republished by Forgotten Books, 2008. [http://books.google.ca/books?id=-Q4nPYeps6MC&amp;amp;pg=PR7&amp;amp;lpg=PR7&amp;amp;dq=the+leviathan&amp;amp;source=bl&amp;amp;ots=_vZA8CpLY0&amp;amp;sig=Wn_1z_Sqsx3-YA2dml2A458M_xU&amp;amp;hl=en&amp;amp;ei=V0R6TZT_D8XwrAGiz8zxBQ&amp;amp;sa=X&amp;amp;oi=book_result&amp;amp;ct=result&amp;amp;resnum=9&amp;amp;sqi=2&amp;amp;ved=0CFAQ6AEwCA#v=onepage&amp;amp;q&amp;amp;f=false HTML]&lt;br /&gt;
&lt;br /&gt;
[5] Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[6] Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[7]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part A)&lt;br /&gt;
&lt;br /&gt;
[8]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part B)&lt;br /&gt;
&lt;br /&gt;
[9] 928 F. 2d 504 - Court of Appeals, &#039;&#039;US v. Morris&#039;&#039;, 2nd Circuit 1991, [http://scholar.google.com/scholar_case?case=551386241451639668 HTML] (case file)&lt;br /&gt;
&lt;br /&gt;
[10] Charles F. Horne(1915),Claude Hermann Walter Johns, The Encyclopaedia Britannica, 11th ed 1910-, &#039;&#039;Ancient History Sourcebook:Code of Hammurabi, c. 1780 BCE&#039;&#039;, Translated by L. W. King, Paul Halsall March 1998, [http://www.fordham.edu/halsall/ancient/hamcode.html HTML] (Internet History Sourcebook)&lt;br /&gt;
&lt;br /&gt;
[11] Scott D. Sagan, &#039;&#039;Review: History, Analogy, and Deterrence Theory&#039;&#039;, The MIT Press, 1991, [http://www.jstor.org.proxy.library.carleton.ca/stable/204567?&amp;amp;Search=yes&amp;amp;searchText=history%2Canalogy%2CAND&amp;amp;searchText=deterrence&amp;amp;list=hide&amp;amp;searchUri=%2Faction%2FdoBasicSearch%3Facc%3Don%26Query%3Dhistory%252Canalogy%252Cand%2Bdeterrence%26gw%3Djtx%26acc%3Don%26prq%3D204567%26Search%3DSearch%26hp%3D25%26wc%3Don%26acc%3Don&amp;amp;prevSearch=&amp;amp;item=1&amp;amp;ttl=5&amp;amp;returnArticleService=showFullText HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[12]Rollin M. Perkins, &#039;&#039;A Rationale of Mens Rea&#039;&#039;, Harvard Law Review, 1939, [http://www.jstor.org/pss/1334184 HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[13] Marquis Beccaria, &#039;&#039;Of Crimes and Punishments&#039;&#039;, Translated by: Edward D. Ingraham, Philip H. Nicklin: A. Walker, 1819, [http://www.constitution.org/cb/crim_pun12.htm HTML] (essay translation)&lt;br /&gt;
&lt;br /&gt;
[14] Roger.M.Needham, &#039;&#039;Denial of Service&#039;&#039;,ACM, New York, USA ,1993,[http://portal.acm.org/citation.cfm?id=168607 PDF]&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8985</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8985"/>
		<updated>2011-03-29T16:39:00Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Overview */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=Members=&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
=Abstract=&lt;br /&gt;
&lt;br /&gt;
The goal of this article is to investigate the feasibility of implementing a system of justice on a distributed computing environment. Although directly applying human concepts related to justice, for example intent, is not possible in the realm of computers, we can use these concepts to construct a justice system that helps maintain the stability and efficiency of the distributed environment. To provide this functionality, the justice system requires a reporting mechanism as well as a mechanism for guaranteed attribution of transactions such that members of the distributed society can flag deviant behaviour and proper punishment may be exacted based on collected evidence. &lt;br /&gt;
&lt;br /&gt;
This article is divided into two main sections; the first is a discussion on theories of human justice and how concepts from the human example may be used within the scope of computers. The second section describes the components necessary to create a justice system for a distributed computing society and how these components would be used in four deviant acts; comment spam, unauthorized access, denial of service, and phishing attacks.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=Can Justice be Implemented on a Distributed Computing System: Discussion=&lt;br /&gt;
&lt;br /&gt;
In this section we present definitions of human justice and punishment. It is important to understand these concepts so that we can use them as a template to create a system of justice for a distributed computing environment. This section also includes definitions of key concepts related to justice and how they relate to potential justice in the realm of computers.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Theory of Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
John Rawls provides a definition of the purpose of justice as providing two primary functions; first, justice assigns rights and duties for the basic institutions of society, and second, justice describes the best way to distribute the benefits and burdens of society. [1] Essentially justice must ensure that a society is able to operate efficiently and with sufficient stability. This view fits well within the scope of justice for a distributed computing system as there are very clear roles which can be assigned and there are finite resources which can be used to manage the “benefits and burdens” of society. &lt;br /&gt;
&lt;br /&gt;
In order for a society to uphold justice it must possess the ability to punish those who behave in a deviant manner. From a philosophical point of view, there are three main categories of punishment; &#039;&#039;&#039;Teleologic, Retributive,&#039;&#039;&#039; and &#039;&#039;&#039;Teleologic Retributive&#039;&#039;&#039;. [3]&lt;br /&gt;
&lt;br /&gt;
====Teleologic View of Punishment:====&lt;br /&gt;
The teleologic view of punishment is that any punishment should always be accompanied by some beneficial effect. Even though the act of punishing someone may itself be considered “evil”, the overall punishment will be considered “good” if it provides some form of social benefit to the society. For example, if a criminal is punished for a crime and this punishment serves to dissuade potential criminals from committing future crimes, then the overall social value of the punishment is positive.[3]&lt;br /&gt;
&lt;br /&gt;
Punishment from this perspective provides a good model for computer systems as any criminal act will be handled such that punishment is beneficial for the system. A simple example of such a transaction can be visualized through the management of bandwidth. If there is a particular computer who is deemed to be a criminal bandwidth hog, using more resources than it is allowed, the perpetrator’s network connection may be throttled. This punishment would correct the deviant computer while free the resources for other computers in the system to utilize.&lt;br /&gt;
&lt;br /&gt;
====Retributive View of Punishment:====&lt;br /&gt;
Retributive punishment is defined by the belief that punishment itself is either just or intrinsically valuable even if there is social benefit to the punishment. This view is probably best characterised by the phrase “eye for an eye”. Essentially punishment is dispensed because it is necessary to inflict harm on those who do bad things but society may not get any benefit from the punishment.[3] The point of view of retributive punishment is that it is better to punish someone who commits a crime regardless of the severity of the punishment.[2]&lt;br /&gt;
&lt;br /&gt;
It is also important to discuss retributive punishment in comparison to retaliation. Although they both incorporate the concept punishment as a just, and necessary, act, they have very different goals. Retribution focuses on the wrongdoing of the criminal whereas retaliation is based on the right of the victim to seek punishment. Retaliation is based on the concept of deterrence; if you are convicted of a crime then someone will get to exact revenge and thus you will pay a price. Retribution requires a criminal to pay a price for the crime committed and thus he should internalize how the crime has a negative effect on society. [1] &lt;br /&gt;
&lt;br /&gt;
Although the necessity of punishment is certainly true, it is hard to see a situation where truly retributive punishment is beneficial for a computer system. Since computers on a distributed system are sharing finite resources, inflicting punishment on criminal computers, without considering the benefit/harm to the society, may result in further negative effects on the system. If a crime has been committed, the effects of that crime have already had an effect on the computing system. Punishing the perpetrator of the criminal act will not reverse the effect of the act, and it may adversely affect the system. &lt;br /&gt;
&lt;br /&gt;
For example, suppose a computer is caught conducting spam attacks on other computers and the punishment for this act is to remove the computer from the network. It may be the case that the criminal computer had previously provided a very efficient connection to some data set but now there is no way to communicate with this computer. As a result, members of the remaining network must use a less efficient connection to reach the same data, thus the punishment had a negative effect on the system.&lt;br /&gt;
&lt;br /&gt;
====Teleologic Retributive View of Punishment:====&lt;br /&gt;
This third view of punishment combines the concept of the need to punish within the limits of what is considered reasonable punishment for the crime. From this perspective, punishment is necessary and provides a valuable service to society but it is only enforced within acceptable limits.&lt;br /&gt;
&lt;br /&gt;
To illustrate this view of punishment, consider the spam attack example from the retributive section above. If the punishment is reduced from being removed from the network to simply blocking a specific type of communication originating from the criminal computer, then it would be considered a teleological retributive punishment. This new punishment would match the severity of the crime but also still allows the other computers on the network to utilize the efficient network path through the criminal computer.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Structure of Punishment&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
To maintain a stable and efficient distributed system, punishment requires structure, or more accurately, there needs to be some power imbalance designed within the system such that some computers can hand out punishments upon other, criminal computers. Here we will briefly discuss a few methods which may be used to implement a penal system into a society.&lt;br /&gt;
&lt;br /&gt;
====Sovereign Rule:====&lt;br /&gt;
In the 1600s, Thomas Hobbes wrote a dissertation on how government and society should be structured. Within this work Hobbes discusses how punishment should be handled by a sovereign ruler. In this system, there is a known set of laws which originate from a single entity which exists above the law. This sovereign ruler is the highest authority of the law, but he may assign lesser judges who may carry out punishment in accordance to the laws.[4]&lt;br /&gt;
 &lt;br /&gt;
In this system, breaking the law is never excusable as the law is known to all members of the society. The exception to this are any members of society that are without reason, for example “children and madmen”. Punishment is a necessary evil and the sovereign has the right to punish any criminal in order to protect the “commonwealth”. The sovereign can even order other subjects to punish criminals but he may not order a criminal to punish himself as this violates the law of self preservation. To balance the system the sovereign may also reward individuals and thus the balance of punishment and reward are the “nerves and joints which move the limbs of a commonwealth.”[4]&lt;br /&gt;
&lt;br /&gt;
Essentially, sovereign rule is one overall leader of justice who determines what is right and wrong in order to best serve the needs of a system. &lt;br /&gt;
&lt;br /&gt;
====Corporal Punishment. Economic Punishment, and Prison:====&lt;br /&gt;
Human punishment commonly falls into three overlapping categories; corporal punishment, economic punishment, and prison. Corporal punishment involves inflicting pain or possibly disfiguring a criminal in response to the crime committed. The main idea is that the criminal should serve as a demonstration of the terrible things that befall those who break the law. Furthermore, any criminal who is disfigured must live with a visual reminder of the act they committed, thus imparting shame upon the perpetrator and allowing others in society to form a conceptual model of the type of person that individual is.[5]&lt;br /&gt;
&lt;br /&gt;
Economic punishment is forcing a criminal to pay a fine for the act committed. The main idea is to make criminals internalize the social costs of the crime they committed. The penalty fine imposed upon the criminal may not be equal to the social cost of the crime committed but it should cause the criminal the same amount of distress as the crime that was committed. [1] &lt;br /&gt;
Prison is a modern method of punishment by which criminals are forced to exist under the watch of professionals and it is up to the discretion of the professionals as to when the punishment is complete. For example, it is up to lawyers, judges, psychologists and prison guards determine when a criminal’s prison sentence has ended.[5]&lt;br /&gt;
 &lt;br /&gt;
These three methods are not mutually exclusive as commonly criminals may be asked to pay a penalty fine as well as serve a prison sentence; however they all serve different purposes. All three punishment types serve as a deterrent to future criminals but each method has a different active agent; corporal punishment uses shame, economic punishment uses monetary handicapping, and prison focuses on reducing personal freedoms. These three concepts may be very useful to a distributed computer justice system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Addition Concepts Related to Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
====Morality:====&lt;br /&gt;
&lt;br /&gt;
For a system of justice to be effective, a known moral code must exist within the society. Friedrich Nietzsche provides one interpretation of morality based on social position which is divided into two categories; “master-morality” and “slave-morality”. Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic. Slave-morality, on the other hand, is based on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.[6] &lt;br /&gt;
&lt;br /&gt;
Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam attacks) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
&lt;br /&gt;
If morality was introduced to a distributed computer system that already has a reliable reputation mechanism, then all computers would be able to know how other computers behave &amp;quot;socially”. This would further allow punishment methods based on shame, to be exacted based on how &amp;quot;bad&amp;quot; a computer’s moral code is. An offending would then have to rebuild a positive moral reputation before it could participate in more trusted social interactions.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
====Intent:====&lt;br /&gt;
=====Mens Rea - state of the mind:=====&lt;br /&gt;
&lt;br /&gt;
It is said that a crime consists of two elements, the actus reus, and the mens rea. The actus reus defines the action of the crime, and the mens rea defines the mental state. The mental state of a person is highly regarded as being relevant to the punishment of crimes and the Model Penal Code (“MPC”) is used to categorize the mens rea into four levels: purposely, knowingly, recklessly, and negligently. These levels rank from being the highest is acting upon a crime on purpose, and the lowest is being part of a crime negligently. An example of such a case would be when one distinguishes between whether a car hitting someone had been done intentionally, or by accident.[7]&lt;br /&gt;
&lt;br /&gt;
For a computer, there is no such thing as &amp;quot;intent&amp;quot;, there is only computation. As such, discovering the intent of a computer is a meaningless task. To handle this issue a system of justice for computers can take one of two approaches; it can attempt to discover the intent of the user of the computer before distribution of punishment, or it can punish all perpetrators of an act with the same severity regardless of intent. If a computer justice system attempts to discover the intent of the human operating a computer then this system must involve a human who can decipher human reason. This would create a justice system that would have a bottleneck at the human investigation point. For our purposes, we propose that all perpetrators of a deviant act are punished with the same severity to prevent the need for human interventions/investigations.&lt;br /&gt;
&lt;br /&gt;
=====Computer Fraud and Abuse Act:=====&lt;br /&gt;
&lt;br /&gt;
The digital age has brought on many new kinds of crimes on the Internet in computers. An example of preventative measures for these crimes was created in  1984 by the United States of America’s congress called the Computer Fraud and Abuse Act(“CFAA”). This criminal statute was built under the ideas of mens rea, and the MPC. After being first implemented, there has had to be many changes to it because of unspecific instances of how different crimes were categorized based on the mens rea. The change between “knowingly” and “intentionally” doing an act would change in degrees of punishment as well as accessing a system and damaging a system had to be more specified over time.[8]&lt;br /&gt;
&lt;br /&gt;
One well know case is of Robert Tappan Morris, who was a 1st year graduate student in Cornell University who attempted to demonstrate the inadequacies of current security measures on the computer networks(INTERNET) by releasing a worm virus. The virus had propagated faster than he had intended and attempted to release the instructions on how to kill the worm, but it had been too late, and many computers across the INTERNET had been affected. The government had to try and prove that it was his intent to access unauthorized computers, which he did, and they also tried to prove that it was his intent to damage the machines, but at that point damaging machines had no category in mens rea.[9]&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
===Applying justice to computers===&lt;br /&gt;
&lt;br /&gt;
The first issue arises from the discussion of the mens rea. Some might say that the computer executes commands that is inputted by the user, so this would mean that everything that the computer does, must be on purpose, because it is just following instructions. This may be true except in the following case that an error has occurred in the system, or a bit has gone missing and the address to which sensitive information was to be sent has now been sent to an incorrect address. If this error created many losses to some entity, would the user be blamed for this error or would the computer be blamed for negligently sending to the wrong address?  This type of situation seems similar to how humans may be charged for killing someone, the difference  between murder and manslaughter is the intent.[12] With the current structure of how computers are set up, it is difficult to map a mens rea scheme to it’s inner workings.&lt;br /&gt;
(*perhaps if the computer was running some genetic programming to create a program which it deemed good, and then intentionally used it, then that intent to use differs from it continually creating new programs until it decides one is suitable)&lt;br /&gt;
&lt;br /&gt;
Assuming that the state of mind of a computer has been decided, the next thing to consider would be how would one prevent a computer from doing malicious actions. Attempting to follow in the footsteps of the general deterrence theory, we would try to instill some sort of fear of consequences/shame that would come from causing malicious actions. The problem with this approach to justice is difficult because of the idea that computers do not have feelings, and doing any kind of work such as word processing to a denial of service attack would be equal in aspects to what it prefers to do. Deterring possible criminals only works if they are afraid of the consequences and can not accept the ratio of profit over penalty that they will procure from a malicious act. If a punishment for a computer was to execute many functions for a long period of time, the computer itself would not care any less if it were doing those functions or standing by idle. However, for the human that might force it’s computer to do such malicious actions may be deterred from doing so because of the consequences that might follow from the law, or the possible performance drop from his own computer. The penalties set in place are currently only going to affect a human, whether it be sentenced to jail or confiscation of the physical computer, the human aspect of the problem will be removed from the computer element. Had it been that the computer itself was the only one punished for such malicious actions, then it would not prevent further malicious actions from occurring on a computer network by the human  user using another computer terminal.[13]&lt;br /&gt;
&lt;br /&gt;
Since a distributed system would want to one day grow to a global scale, the laws and punishments can not be enforced in a legal sense because of jurisdiction issues, therefore, the implementation of a new system must be done so that computers on the system will be deterred from malicious actions. Implementing a morality system that has every node on the system with their personal morality rating will allow for nodes to communicate with other nodes based on how low or high the rating is. From lowering in morality because of malicious actions and raising it by being more helpful to the system will allow for computers to &amp;quot;care&amp;quot; for who they are communicating with, and to also feel shame for when their morality is so low that they can barely communicate with others.(Lowest level might equal to expulsion) Based on this simulated feeling of care and shame, this might allow for a justice system to be implemented onto computers.&lt;br /&gt;
&lt;br /&gt;
=Possible Implementation=&lt;br /&gt;
Designing a complete justice system implementation is far beyond the scope of this project. This does not mean it is not important to describe the important features that a fully functional system would require and outline the potential benefits and shortcomings of the system. In fact, our team could not come up with one complete system that would be feasible; instead we have two potential implementations each with there own positives and negatives. Although the implementations have separate modes of operation, they both take a teleologic-retributive approach to punishment; by this we mean punishment is necessary but we will not inflict punishmnets that will negatively affect the performance or stability of the distributed system.&lt;br /&gt;
&lt;br /&gt;
The remainder of this article will detail the two justice system implementations at a high level and describe how each system could handle three deviant behaviour scenarios; Comment Spam, Denial of Serice Attacks and Phishing.&lt;br /&gt;
&lt;br /&gt;
==Local &amp;quot;Justice Web&amp;quot; Implementation==&lt;br /&gt;
* provide details of implementation here.&lt;br /&gt;
&lt;br /&gt;
===Overview===&lt;br /&gt;
&lt;br /&gt;
The implementation described in the following sections takes into consideration the above discussion involving justice, and applying it to the management of a computer network. The implementation is an incrementally-deployable justice system currently entitled the &amp;quot;Justice Web&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
The Justice Web is essentially a computer network that applies a morality rating to those inside the network, as well as connections coming from outside the network. The morality rating is based on previous actions taken by the entity in question, and the rating is decided by the leader(s) of the network. It is up to the individual nodes within the network to enforce restrictions based on the morality rating master list, which is distributed throughout the network.&lt;br /&gt;
&lt;br /&gt;
In order to implement the Justice Web, certain assumptions must be made:&lt;br /&gt;
&lt;br /&gt;
* All computers attempting a connection to the network must be able to be authentically identified whether they are inside or outside of the Justice Web.&lt;br /&gt;
* Probably more.&lt;br /&gt;
&lt;br /&gt;
===Morality Rating===&lt;br /&gt;
&lt;br /&gt;
In the Justice Web, &amp;quot;Morality Rating&amp;quot; (MR) is assigned by the Judge or Judges of the network. The morality rating determines a user&#039;s access to a server, based on that server&#039;s rulings. For example, a server within the Justice Web could have a rule that any connections below MR: -100 are not allowed to connect. In addition, users within the Justice Web use their MR to gain access to resources publicly available to those within the network.&lt;br /&gt;
&lt;br /&gt;
Morality ratings are local to each network running the Justice Web, so a computer that has a bad MR in one network might have a good MR in another. &lt;br /&gt;
&lt;br /&gt;
===Master List===&lt;br /&gt;
&lt;br /&gt;
The &amp;quot;Master List&amp;quot; is a database that stores the morality ratings of a Justice Web, and is maintained by the judges. servers within the network store a &amp;quot;Slave List&amp;quot; which mirrors a subset of the entries in the master list. The subset is dependent on the rules implemented by the server. For instance, if a server decides to deny any connections with an MR: -100, all entries that have MR: -100 would be stored in the slave list.&lt;br /&gt;
&lt;br /&gt;
===Judges===&lt;br /&gt;
&lt;br /&gt;
A Justice Web needs one or more judges to function. When an offense occurs, a node in the network submits a claim, along with an encrypted evidence log and ID of the offender. If the evidence is sufficient, the judge changes the MR of the offender based on the severity of the offense.&lt;br /&gt;
&lt;br /&gt;
A judge is appointed by default as the node in the network with the highest MR (Usually the owner), though this option is implementation specific. Alternatively, a ring of judges is appointed and given the power to lower the MR of other judges, but the evidence must be validated by a majority of the judges. This would be implemented as an attempt to keep the judges in check.&lt;br /&gt;
&lt;br /&gt;
===Rules===&lt;br /&gt;
&lt;br /&gt;
Each Justice Web specifies its own set of rules. A rule consists of three parts: the offense, what level of proof is needed, and the severity of the punishment. The creation of these rules is by default left up to the judges.&lt;br /&gt;
&lt;br /&gt;
==Global Implementation==&lt;br /&gt;
* provide details of implementation here.&lt;br /&gt;
&lt;br /&gt;
==Use Case Investigation==&lt;br /&gt;
&lt;br /&gt;
===Case 1: Comment Spam:===&lt;br /&gt;
The first deviant act we will investigate is comment spam. The type of spam we are focusing on are usually automated scripts which insert the same comment, usually including links to other destination websites, on forums of public sites. Although usually annoying, these comments can direct users to locations where malicious code may be introduced to unsuspecting users who trust the content of the original site where the forum was hosted. &lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Local Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Global Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
===Case 2: Denial of Service:===&lt;br /&gt;
Denial of service is the act in which a service that is normally available is being accessed by either numerous ip&#039;s through ip spoofing or a distributed DoS attack which has multiple valid ip&#039;s, which in turn, bog down the system because the service capacity is being constrained. By either maxing out or flooding a service by multiple requests, a system will either be shutdown or very difficult to use, regardless, the outcome is a denial of that service. We have come up with some solutions to how to punish the computers that participate in such an attack, voluntary or not.[14]&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Local Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Global Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
===Case 3: Phishing:===&lt;br /&gt;
Phishing provides an interesting challenge for a justice system as the deviant act involves a website that is perfectly legal. A phishing attack occurs when a user visits a website and enters information/clicks on a link expecting the site he/she is visiting to be secure. Unfortunately the site they have been directed to has been designed to imitate the appearance and behaviour of the site the user wishes to visit, but it is not actually the real webpage. As a result, a user may expose private information to parties that are not legally entitled to view the data. Although it is not illegal for the &amp;quot;fake site&amp;quot; to exist, the usage of the site is an act that must be addressed by the justice system.&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Local Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Global Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
=Resources=&lt;br /&gt;
[1] Posner, Richard A., &#039;&#039;Retirbution and Related Concepts of Punishment&#039;&#039;, The Journal of Legal Studies Vol. 9 No. 1, University of Chicago Press, 1980. [http://www.econ.brown.edu/fac/glenn_loury/louryhomepage/teaching/Ec%20222/posner_punishment.pdf PDF]&lt;br /&gt;
&lt;br /&gt;
[2] Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[3] Ezorsky, Gertrude, &#039;&#039;Philosophical Perspectives on Punishment&#039;&#039;, State University of New York Press, 1972. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=Jba2lFg3KOMC&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+punishment&amp;amp;ots=LuzbsNmWlg&amp;amp;sig=KTvWhaWMxIRslk38tZmucty-jNw#v=onepage&amp;amp;q=concepts%20of%20punishment&amp;amp;f=false HTML] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[4] Hobbes, Thomas, &#039;&#039;The Leviathon&#039;&#039;, first published 1651, republished by Forgotten Books, 2008. [http://books.google.ca/books?id=-Q4nPYeps6MC&amp;amp;pg=PR7&amp;amp;lpg=PR7&amp;amp;dq=the+leviathan&amp;amp;source=bl&amp;amp;ots=_vZA8CpLY0&amp;amp;sig=Wn_1z_Sqsx3-YA2dml2A458M_xU&amp;amp;hl=en&amp;amp;ei=V0R6TZT_D8XwrAGiz8zxBQ&amp;amp;sa=X&amp;amp;oi=book_result&amp;amp;ct=result&amp;amp;resnum=9&amp;amp;sqi=2&amp;amp;ved=0CFAQ6AEwCA#v=onepage&amp;amp;q&amp;amp;f=false HTML]&lt;br /&gt;
&lt;br /&gt;
[5] Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[6] Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[7]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part A)&lt;br /&gt;
&lt;br /&gt;
[8]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part B)&lt;br /&gt;
&lt;br /&gt;
[9] 928 F. 2d 504 - Court of Appeals, &#039;&#039;US v. Morris&#039;&#039;, 2nd Circuit 1991, [http://scholar.google.com/scholar_case?case=551386241451639668 HTML] (case file)&lt;br /&gt;
&lt;br /&gt;
[10] Charles F. Horne(1915),Claude Hermann Walter Johns, The Encyclopaedia Britannica, 11th ed 1910-, &#039;&#039;Ancient History Sourcebook:Code of Hammurabi, c. 1780 BCE&#039;&#039;, Translated by L. W. King, Paul Halsall March 1998, [http://www.fordham.edu/halsall/ancient/hamcode.html HTML] (Internet History Sourcebook)&lt;br /&gt;
&lt;br /&gt;
[11] Scott D. Sagan, &#039;&#039;Review: History, Analogy, and Deterrence Theory&#039;&#039;, The MIT Press, 1991, [http://www.jstor.org.proxy.library.carleton.ca/stable/204567?&amp;amp;Search=yes&amp;amp;searchText=history%2Canalogy%2CAND&amp;amp;searchText=deterrence&amp;amp;list=hide&amp;amp;searchUri=%2Faction%2FdoBasicSearch%3Facc%3Don%26Query%3Dhistory%252Canalogy%252Cand%2Bdeterrence%26gw%3Djtx%26acc%3Don%26prq%3D204567%26Search%3DSearch%26hp%3D25%26wc%3Don%26acc%3Don&amp;amp;prevSearch=&amp;amp;item=1&amp;amp;ttl=5&amp;amp;returnArticleService=showFullText HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[12]Rollin M. Perkins, &#039;&#039;A Rationale of Mens Rea&#039;&#039;, Harvard Law Review, 1939, [http://www.jstor.org/pss/1334184 HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[13] Marquis Beccaria, &#039;&#039;Of Crimes and Punishments&#039;&#039;, Translated by: Edward D. Ingraham, Philip H. Nicklin: A. Walker, 1819, [http://www.constitution.org/cb/crim_pun12.htm HTML] (essay translation)&lt;br /&gt;
&lt;br /&gt;
[14] Roger.M.Needham, &#039;&#039;Denial of Service&#039;&#039;,ACM, New York, USA ,1993,[http://portal.acm.org/citation.cfm?id=168607 PDF]&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8984</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8984"/>
		<updated>2011-03-29T16:38:43Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Local &amp;quot;Justice Web&amp;quot; Implementation */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=Members=&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
=Abstract=&lt;br /&gt;
&lt;br /&gt;
The goal of this article is to investigate the feasibility of implementing a system of justice on a distributed computing environment. Although directly applying human concepts related to justice, for example intent, is not possible in the realm of computers, we can use these concepts to construct a justice system that helps maintain the stability and efficiency of the distributed environment. To provide this functionality, the justice system requires a reporting mechanism as well as a mechanism for guaranteed attribution of transactions such that members of the distributed society can flag deviant behaviour and proper punishment may be exacted based on collected evidence. &lt;br /&gt;
&lt;br /&gt;
This article is divided into two main sections; the first is a discussion on theories of human justice and how concepts from the human example may be used within the scope of computers. The second section describes the components necessary to create a justice system for a distributed computing society and how these components would be used in four deviant acts; comment spam, unauthorized access, denial of service, and phishing attacks.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=Can Justice be Implemented on a Distributed Computing System: Discussion=&lt;br /&gt;
&lt;br /&gt;
In this section we present definitions of human justice and punishment. It is important to understand these concepts so that we can use them as a template to create a system of justice for a distributed computing environment. This section also includes definitions of key concepts related to justice and how they relate to potential justice in the realm of computers.&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
&amp;lt;br/&amp;gt;&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Theory of Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
John Rawls provides a definition of the purpose of justice as providing two primary functions; first, justice assigns rights and duties for the basic institutions of society, and second, justice describes the best way to distribute the benefits and burdens of society. [1] Essentially justice must ensure that a society is able to operate efficiently and with sufficient stability. This view fits well within the scope of justice for a distributed computing system as there are very clear roles which can be assigned and there are finite resources which can be used to manage the “benefits and burdens” of society. &lt;br /&gt;
&lt;br /&gt;
In order for a society to uphold justice it must possess the ability to punish those who behave in a deviant manner. From a philosophical point of view, there are three main categories of punishment; &#039;&#039;&#039;Teleologic, Retributive,&#039;&#039;&#039; and &#039;&#039;&#039;Teleologic Retributive&#039;&#039;&#039;. [3]&lt;br /&gt;
&lt;br /&gt;
====Teleologic View of Punishment:====&lt;br /&gt;
The teleologic view of punishment is that any punishment should always be accompanied by some beneficial effect. Even though the act of punishing someone may itself be considered “evil”, the overall punishment will be considered “good” if it provides some form of social benefit to the society. For example, if a criminal is punished for a crime and this punishment serves to dissuade potential criminals from committing future crimes, then the overall social value of the punishment is positive.[3]&lt;br /&gt;
&lt;br /&gt;
Punishment from this perspective provides a good model for computer systems as any criminal act will be handled such that punishment is beneficial for the system. A simple example of such a transaction can be visualized through the management of bandwidth. If there is a particular computer who is deemed to be a criminal bandwidth hog, using more resources than it is allowed, the perpetrator’s network connection may be throttled. This punishment would correct the deviant computer while free the resources for other computers in the system to utilize.&lt;br /&gt;
&lt;br /&gt;
====Retributive View of Punishment:====&lt;br /&gt;
Retributive punishment is defined by the belief that punishment itself is either just or intrinsically valuable even if there is social benefit to the punishment. This view is probably best characterised by the phrase “eye for an eye”. Essentially punishment is dispensed because it is necessary to inflict harm on those who do bad things but society may not get any benefit from the punishment.[3] The point of view of retributive punishment is that it is better to punish someone who commits a crime regardless of the severity of the punishment.[2]&lt;br /&gt;
&lt;br /&gt;
It is also important to discuss retributive punishment in comparison to retaliation. Although they both incorporate the concept punishment as a just, and necessary, act, they have very different goals. Retribution focuses on the wrongdoing of the criminal whereas retaliation is based on the right of the victim to seek punishment. Retaliation is based on the concept of deterrence; if you are convicted of a crime then someone will get to exact revenge and thus you will pay a price. Retribution requires a criminal to pay a price for the crime committed and thus he should internalize how the crime has a negative effect on society. [1] &lt;br /&gt;
&lt;br /&gt;
Although the necessity of punishment is certainly true, it is hard to see a situation where truly retributive punishment is beneficial for a computer system. Since computers on a distributed system are sharing finite resources, inflicting punishment on criminal computers, without considering the benefit/harm to the society, may result in further negative effects on the system. If a crime has been committed, the effects of that crime have already had an effect on the computing system. Punishing the perpetrator of the criminal act will not reverse the effect of the act, and it may adversely affect the system. &lt;br /&gt;
&lt;br /&gt;
For example, suppose a computer is caught conducting spam attacks on other computers and the punishment for this act is to remove the computer from the network. It may be the case that the criminal computer had previously provided a very efficient connection to some data set but now there is no way to communicate with this computer. As a result, members of the remaining network must use a less efficient connection to reach the same data, thus the punishment had a negative effect on the system.&lt;br /&gt;
&lt;br /&gt;
====Teleologic Retributive View of Punishment:====&lt;br /&gt;
This third view of punishment combines the concept of the need to punish within the limits of what is considered reasonable punishment for the crime. From this perspective, punishment is necessary and provides a valuable service to society but it is only enforced within acceptable limits.&lt;br /&gt;
&lt;br /&gt;
To illustrate this view of punishment, consider the spam attack example from the retributive section above. If the punishment is reduced from being removed from the network to simply blocking a specific type of communication originating from the criminal computer, then it would be considered a teleological retributive punishment. This new punishment would match the severity of the crime but also still allows the other computers on the network to utilize the efficient network path through the criminal computer.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Structure of Punishment&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
To maintain a stable and efficient distributed system, punishment requires structure, or more accurately, there needs to be some power imbalance designed within the system such that some computers can hand out punishments upon other, criminal computers. Here we will briefly discuss a few methods which may be used to implement a penal system into a society.&lt;br /&gt;
&lt;br /&gt;
====Sovereign Rule:====&lt;br /&gt;
In the 1600s, Thomas Hobbes wrote a dissertation on how government and society should be structured. Within this work Hobbes discusses how punishment should be handled by a sovereign ruler. In this system, there is a known set of laws which originate from a single entity which exists above the law. This sovereign ruler is the highest authority of the law, but he may assign lesser judges who may carry out punishment in accordance to the laws.[4]&lt;br /&gt;
 &lt;br /&gt;
In this system, breaking the law is never excusable as the law is known to all members of the society. The exception to this are any members of society that are without reason, for example “children and madmen”. Punishment is a necessary evil and the sovereign has the right to punish any criminal in order to protect the “commonwealth”. The sovereign can even order other subjects to punish criminals but he may not order a criminal to punish himself as this violates the law of self preservation. To balance the system the sovereign may also reward individuals and thus the balance of punishment and reward are the “nerves and joints which move the limbs of a commonwealth.”[4]&lt;br /&gt;
&lt;br /&gt;
Essentially, sovereign rule is one overall leader of justice who determines what is right and wrong in order to best serve the needs of a system. &lt;br /&gt;
&lt;br /&gt;
====Corporal Punishment. Economic Punishment, and Prison:====&lt;br /&gt;
Human punishment commonly falls into three overlapping categories; corporal punishment, economic punishment, and prison. Corporal punishment involves inflicting pain or possibly disfiguring a criminal in response to the crime committed. The main idea is that the criminal should serve as a demonstration of the terrible things that befall those who break the law. Furthermore, any criminal who is disfigured must live with a visual reminder of the act they committed, thus imparting shame upon the perpetrator and allowing others in society to form a conceptual model of the type of person that individual is.[5]&lt;br /&gt;
&lt;br /&gt;
Economic punishment is forcing a criminal to pay a fine for the act committed. The main idea is to make criminals internalize the social costs of the crime they committed. The penalty fine imposed upon the criminal may not be equal to the social cost of the crime committed but it should cause the criminal the same amount of distress as the crime that was committed. [1] &lt;br /&gt;
Prison is a modern method of punishment by which criminals are forced to exist under the watch of professionals and it is up to the discretion of the professionals as to when the punishment is complete. For example, it is up to lawyers, judges, psychologists and prison guards determine when a criminal’s prison sentence has ended.[5]&lt;br /&gt;
 &lt;br /&gt;
These three methods are not mutually exclusive as commonly criminals may be asked to pay a penalty fine as well as serve a prison sentence; however they all serve different purposes. All three punishment types serve as a deterrent to future criminals but each method has a different active agent; corporal punishment uses shame, economic punishment uses monetary handicapping, and prison focuses on reducing personal freedoms. These three concepts may be very useful to a distributed computer justice system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Addition Concepts Related to Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
====Morality:====&lt;br /&gt;
&lt;br /&gt;
For a system of justice to be effective, a known moral code must exist within the society. Friedrich Nietzsche provides one interpretation of morality based on social position which is divided into two categories; “master-morality” and “slave-morality”. Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic. Slave-morality, on the other hand, is based on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.[6] &lt;br /&gt;
&lt;br /&gt;
Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam attacks) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
&lt;br /&gt;
If morality was introduced to a distributed computer system that already has a reliable reputation mechanism, then all computers would be able to know how other computers behave &amp;quot;socially”. This would further allow punishment methods based on shame, to be exacted based on how &amp;quot;bad&amp;quot; a computer’s moral code is. An offending would then have to rebuild a positive moral reputation before it could participate in more trusted social interactions.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
====Intent:====&lt;br /&gt;
=====Mens Rea - state of the mind:=====&lt;br /&gt;
&lt;br /&gt;
It is said that a crime consists of two elements, the actus reus, and the mens rea. The actus reus defines the action of the crime, and the mens rea defines the mental state. The mental state of a person is highly regarded as being relevant to the punishment of crimes and the Model Penal Code (“MPC”) is used to categorize the mens rea into four levels: purposely, knowingly, recklessly, and negligently. These levels rank from being the highest is acting upon a crime on purpose, and the lowest is being part of a crime negligently. An example of such a case would be when one distinguishes between whether a car hitting someone had been done intentionally, or by accident.[7]&lt;br /&gt;
&lt;br /&gt;
For a computer, there is no such thing as &amp;quot;intent&amp;quot;, there is only computation. As such, discovering the intent of a computer is a meaningless task. To handle this issue a system of justice for computers can take one of two approaches; it can attempt to discover the intent of the user of the computer before distribution of punishment, or it can punish all perpetrators of an act with the same severity regardless of intent. If a computer justice system attempts to discover the intent of the human operating a computer then this system must involve a human who can decipher human reason. This would create a justice system that would have a bottleneck at the human investigation point. For our purposes, we propose that all perpetrators of a deviant act are punished with the same severity to prevent the need for human interventions/investigations.&lt;br /&gt;
&lt;br /&gt;
=====Computer Fraud and Abuse Act:=====&lt;br /&gt;
&lt;br /&gt;
The digital age has brought on many new kinds of crimes on the Internet in computers. An example of preventative measures for these crimes was created in  1984 by the United States of America’s congress called the Computer Fraud and Abuse Act(“CFAA”). This criminal statute was built under the ideas of mens rea, and the MPC. After being first implemented, there has had to be many changes to it because of unspecific instances of how different crimes were categorized based on the mens rea. The change between “knowingly” and “intentionally” doing an act would change in degrees of punishment as well as accessing a system and damaging a system had to be more specified over time.[8]&lt;br /&gt;
&lt;br /&gt;
One well know case is of Robert Tappan Morris, who was a 1st year graduate student in Cornell University who attempted to demonstrate the inadequacies of current security measures on the computer networks(INTERNET) by releasing a worm virus. The virus had propagated faster than he had intended and attempted to release the instructions on how to kill the worm, but it had been too late, and many computers across the INTERNET had been affected. The government had to try and prove that it was his intent to access unauthorized computers, which he did, and they also tried to prove that it was his intent to damage the machines, but at that point damaging machines had no category in mens rea.[9]&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
===Applying justice to computers===&lt;br /&gt;
&lt;br /&gt;
The first issue arises from the discussion of the mens rea. Some might say that the computer executes commands that is inputted by the user, so this would mean that everything that the computer does, must be on purpose, because it is just following instructions. This may be true except in the following case that an error has occurred in the system, or a bit has gone missing and the address to which sensitive information was to be sent has now been sent to an incorrect address. If this error created many losses to some entity, would the user be blamed for this error or would the computer be blamed for negligently sending to the wrong address?  This type of situation seems similar to how humans may be charged for killing someone, the difference  between murder and manslaughter is the intent.[12] With the current structure of how computers are set up, it is difficult to map a mens rea scheme to it’s inner workings.&lt;br /&gt;
(*perhaps if the computer was running some genetic programming to create a program which it deemed good, and then intentionally used it, then that intent to use differs from it continually creating new programs until it decides one is suitable)&lt;br /&gt;
&lt;br /&gt;
Assuming that the state of mind of a computer has been decided, the next thing to consider would be how would one prevent a computer from doing malicious actions. Attempting to follow in the footsteps of the general deterrence theory, we would try to instill some sort of fear of consequences/shame that would come from causing malicious actions. The problem with this approach to justice is difficult because of the idea that computers do not have feelings, and doing any kind of work such as word processing to a denial of service attack would be equal in aspects to what it prefers to do. Deterring possible criminals only works if they are afraid of the consequences and can not accept the ratio of profit over penalty that they will procure from a malicious act. If a punishment for a computer was to execute many functions for a long period of time, the computer itself would not care any less if it were doing those functions or standing by idle. However, for the human that might force it’s computer to do such malicious actions may be deterred from doing so because of the consequences that might follow from the law, or the possible performance drop from his own computer. The penalties set in place are currently only going to affect a human, whether it be sentenced to jail or confiscation of the physical computer, the human aspect of the problem will be removed from the computer element. Had it been that the computer itself was the only one punished for such malicious actions, then it would not prevent further malicious actions from occurring on a computer network by the human  user using another computer terminal.[13]&lt;br /&gt;
&lt;br /&gt;
Since a distributed system would want to one day grow to a global scale, the laws and punishments can not be enforced in a legal sense because of jurisdiction issues, therefore, the implementation of a new system must be done so that computers on the system will be deterred from malicious actions. Implementing a morality system that has every node on the system with their personal morality rating will allow for nodes to communicate with other nodes based on how low or high the rating is. From lowering in morality because of malicious actions and raising it by being more helpful to the system will allow for computers to &amp;quot;care&amp;quot; for who they are communicating with, and to also feel shame for when their morality is so low that they can barely communicate with others.(Lowest level might equal to expulsion) Based on this simulated feeling of care and shame, this might allow for a justice system to be implemented onto computers.&lt;br /&gt;
&lt;br /&gt;
=Possible Implementation=&lt;br /&gt;
Designing a complete justice system implementation is far beyond the scope of this project. This does not mean it is not important to describe the important features that a fully functional system would require and outline the potential benefits and shortcomings of the system. In fact, our team could not come up with one complete system that would be feasible; instead we have two potential implementations each with there own positives and negatives. Although the implementations have separate modes of operation, they both take a teleologic-retributive approach to punishment; by this we mean punishment is necessary but we will not inflict punishmnets that will negatively affect the performance or stability of the distributed system.&lt;br /&gt;
&lt;br /&gt;
The remainder of this article will detail the two justice system implementations at a high level and describe how each system could handle three deviant behaviour scenarios; Comment Spam, Denial of Serice Attacks and Phishing.&lt;br /&gt;
&lt;br /&gt;
==Local &amp;quot;Justice Web&amp;quot; Implementation==&lt;br /&gt;
* provide details of implementation here.&lt;br /&gt;
&lt;br /&gt;
===Overview===&lt;br /&gt;
&lt;br /&gt;
The implementation described in the following sections takes into consideration the above discussion involving justice, and applying it to the management of a computer network. The implementation is an incrementally-deployable justice system currently entitled the &amp;quot;Justice Web&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
The Justice Web is essentially a computer network that applies a morality rating to those inside the network, as well as connections coming from outside the network. The morality rating is based on previous actions taken by the entity in question, and the rating is decided by the leader(s) of the network. It is up to the individual nodes within the network to enforce restrictions based on the morality rating master list, which is distributed throughout the network.&lt;br /&gt;
&lt;br /&gt;
In order to implement the Justice Web, certain assumptions must be made:&lt;br /&gt;
&lt;br /&gt;
** All computers attempting a connection to the network must be able to be authentically identified whether they are inside or outside of the Justice Web.&lt;br /&gt;
** Probably more.&lt;br /&gt;
&lt;br /&gt;
===Morality Rating===&lt;br /&gt;
&lt;br /&gt;
In the Justice Web, &amp;quot;Morality Rating&amp;quot; (MR) is assigned by the Judge or Judges of the network. The morality rating determines a user&#039;s access to a server, based on that server&#039;s rulings. For example, a server within the Justice Web could have a rule that any connections below MR: -100 are not allowed to connect. In addition, users within the Justice Web use their MR to gain access to resources publicly available to those within the network.&lt;br /&gt;
&lt;br /&gt;
Morality ratings are local to each network running the Justice Web, so a computer that has a bad MR in one network might have a good MR in another. &lt;br /&gt;
&lt;br /&gt;
===Master List===&lt;br /&gt;
&lt;br /&gt;
The &amp;quot;Master List&amp;quot; is a database that stores the morality ratings of a Justice Web, and is maintained by the judges. servers within the network store a &amp;quot;Slave List&amp;quot; which mirrors a subset of the entries in the master list. The subset is dependent on the rules implemented by the server. For instance, if a server decides to deny any connections with an MR: -100, all entries that have MR: -100 would be stored in the slave list.&lt;br /&gt;
&lt;br /&gt;
===Judges===&lt;br /&gt;
&lt;br /&gt;
A Justice Web needs one or more judges to function. When an offense occurs, a node in the network submits a claim, along with an encrypted evidence log and ID of the offender. If the evidence is sufficient, the judge changes the MR of the offender based on the severity of the offense.&lt;br /&gt;
&lt;br /&gt;
A judge is appointed by default as the node in the network with the highest MR (Usually the owner), though this option is implementation specific. Alternatively, a ring of judges is appointed and given the power to lower the MR of other judges, but the evidence must be validated by a majority of the judges. This would be implemented as an attempt to keep the judges in check.&lt;br /&gt;
&lt;br /&gt;
===Rules===&lt;br /&gt;
&lt;br /&gt;
Each Justice Web specifies its own set of rules. A rule consists of three parts: the offense, what level of proof is needed, and the severity of the punishment. The creation of these rules is by default left up to the judges.&lt;br /&gt;
&lt;br /&gt;
==Global Implementation==&lt;br /&gt;
* provide details of implementation here.&lt;br /&gt;
&lt;br /&gt;
==Use Case Investigation==&lt;br /&gt;
&lt;br /&gt;
===Case 1: Comment Spam:===&lt;br /&gt;
The first deviant act we will investigate is comment spam. The type of spam we are focusing on are usually automated scripts which insert the same comment, usually including links to other destination websites, on forums of public sites. Although usually annoying, these comments can direct users to locations where malicious code may be introduced to unsuspecting users who trust the content of the original site where the forum was hosted. &lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Local Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Global Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
===Case 2: Denial of Service:===&lt;br /&gt;
Denial of service is the act in which a service that is normally available is being accessed by either numerous ip&#039;s through ip spoofing or a distributed DoS attack which has multiple valid ip&#039;s, which in turn, bog down the system because the service capacity is being constrained. By either maxing out or flooding a service by multiple requests, a system will either be shutdown or very difficult to use, regardless, the outcome is a denial of that service. We have come up with some solutions to how to punish the computers that participate in such an attack, voluntary or not.[14]&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Local Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Global Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
===Case 3: Phishing:===&lt;br /&gt;
Phishing provides an interesting challenge for a justice system as the deviant act involves a website that is perfectly legal. A phishing attack occurs when a user visits a website and enters information/clicks on a link expecting the site he/she is visiting to be secure. Unfortunately the site they have been directed to has been designed to imitate the appearance and behaviour of the site the user wishes to visit, but it is not actually the real webpage. As a result, a user may expose private information to parties that are not legally entitled to view the data. Although it is not illegal for the &amp;quot;fake site&amp;quot; to exist, the usage of the site is an act that must be addressed by the justice system.&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Local Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
====&amp;lt;u&amp;gt;&amp;lt;i&amp;gt;Global Implementation Solution:&amp;lt;/i&amp;gt;&amp;lt;/u&amp;gt;====&lt;br /&gt;
* provide details&lt;br /&gt;
&lt;br /&gt;
=Resources=&lt;br /&gt;
[1] Posner, Richard A., &#039;&#039;Retirbution and Related Concepts of Punishment&#039;&#039;, The Journal of Legal Studies Vol. 9 No. 1, University of Chicago Press, 1980. [http://www.econ.brown.edu/fac/glenn_loury/louryhomepage/teaching/Ec%20222/posner_punishment.pdf PDF]&lt;br /&gt;
&lt;br /&gt;
[2] Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[3] Ezorsky, Gertrude, &#039;&#039;Philosophical Perspectives on Punishment&#039;&#039;, State University of New York Press, 1972. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=Jba2lFg3KOMC&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+punishment&amp;amp;ots=LuzbsNmWlg&amp;amp;sig=KTvWhaWMxIRslk38tZmucty-jNw#v=onepage&amp;amp;q=concepts%20of%20punishment&amp;amp;f=false HTML] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[4] Hobbes, Thomas, &#039;&#039;The Leviathon&#039;&#039;, first published 1651, republished by Forgotten Books, 2008. [http://books.google.ca/books?id=-Q4nPYeps6MC&amp;amp;pg=PR7&amp;amp;lpg=PR7&amp;amp;dq=the+leviathan&amp;amp;source=bl&amp;amp;ots=_vZA8CpLY0&amp;amp;sig=Wn_1z_Sqsx3-YA2dml2A458M_xU&amp;amp;hl=en&amp;amp;ei=V0R6TZT_D8XwrAGiz8zxBQ&amp;amp;sa=X&amp;amp;oi=book_result&amp;amp;ct=result&amp;amp;resnum=9&amp;amp;sqi=2&amp;amp;ved=0CFAQ6AEwCA#v=onepage&amp;amp;q&amp;amp;f=false HTML]&lt;br /&gt;
&lt;br /&gt;
[5] Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[6] Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[7]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part A)&lt;br /&gt;
&lt;br /&gt;
[8]  Haeji Hong, &#039;&#039;Hacking Through the Computer Fraud and Abuse Act&#039;&#039;, originally published in 24 U.C. DAVIS L. REV. 283 (1998), [http://www.lawtechjournal.com/archives/blt/i3-hh.html#N_18_ HTML] (part B)&lt;br /&gt;
&lt;br /&gt;
[9] 928 F. 2d 504 - Court of Appeals, &#039;&#039;US v. Morris&#039;&#039;, 2nd Circuit 1991, [http://scholar.google.com/scholar_case?case=551386241451639668 HTML] (case file)&lt;br /&gt;
&lt;br /&gt;
[10] Charles F. Horne(1915),Claude Hermann Walter Johns, The Encyclopaedia Britannica, 11th ed 1910-, &#039;&#039;Ancient History Sourcebook:Code of Hammurabi, c. 1780 BCE&#039;&#039;, Translated by L. W. King, Paul Halsall March 1998, [http://www.fordham.edu/halsall/ancient/hamcode.html HTML] (Internet History Sourcebook)&lt;br /&gt;
&lt;br /&gt;
[11] Scott D. Sagan, &#039;&#039;Review: History, Analogy, and Deterrence Theory&#039;&#039;, The MIT Press, 1991, [http://www.jstor.org.proxy.library.carleton.ca/stable/204567?&amp;amp;Search=yes&amp;amp;searchText=history%2Canalogy%2CAND&amp;amp;searchText=deterrence&amp;amp;list=hide&amp;amp;searchUri=%2Faction%2FdoBasicSearch%3Facc%3Don%26Query%3Dhistory%252Canalogy%252Cand%2Bdeterrence%26gw%3Djtx%26acc%3Don%26prq%3D204567%26Search%3DSearch%26hp%3D25%26wc%3Don%26acc%3Don&amp;amp;prevSearch=&amp;amp;item=1&amp;amp;ttl=5&amp;amp;returnArticleService=showFullText HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[12]Rollin M. Perkins, &#039;&#039;A Rationale of Mens Rea&#039;&#039;, Harvard Law Review, 1939, [http://www.jstor.org/pss/1334184 HTML] (book link)&lt;br /&gt;
&lt;br /&gt;
[13] Marquis Beccaria, &#039;&#039;Of Crimes and Punishments&#039;&#039;, Translated by: Edward D. Ingraham, Philip H. Nicklin: A. Walker, 1819, [http://www.constitution.org/cb/crim_pun12.htm HTML] (essay translation)&lt;br /&gt;
&lt;br /&gt;
[14] Roger.M.Needham, &#039;&#039;Denial of Service&#039;&#039;,ACM, New York, USA ,1993,[http://portal.acm.org/citation.cfm?id=168607 PDF]&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8874</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8874"/>
		<updated>2011-03-22T16:03:52Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Local Implementation */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 08&amp;lt;/u&amp;gt;===&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 10&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
* Offender Registration: Global list of morality registered for perusal of other networks.&lt;br /&gt;
* Encrypted logs on client-side&lt;br /&gt;
** Reporting with tangible evidence&lt;br /&gt;
* Compensation for crimes&lt;br /&gt;
* virus notification&lt;br /&gt;
* detrimental to attacker buying a new computer, rather than total prevention&lt;br /&gt;
** assumption that computer can always be identified&lt;br /&gt;
* virus as umbrella group for mobile code&lt;br /&gt;
** active attackers punished differently from passive attackers&lt;br /&gt;
* Research Topics:&lt;br /&gt;
** What is Justice?&lt;br /&gt;
*** Mike&lt;br /&gt;
** Justice in terms of computers.&lt;br /&gt;
*** Matthew&lt;br /&gt;
** Crime and Punishment.&lt;br /&gt;
*** David&lt;br /&gt;
** Justice Web&lt;br /&gt;
*** Thomas McMahon&lt;br /&gt;
&lt;br /&gt;
===Mar 17===&lt;br /&gt;
&lt;br /&gt;
==Research Documentation==&lt;br /&gt;
&lt;br /&gt;
===Virtual Punishment===&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
===Theory of Justice===&lt;br /&gt;
&lt;br /&gt;
Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===The Birth of Prison===&lt;br /&gt;
Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===Ecce Homo &amp;amp; The Anarchist===&lt;br /&gt;
Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
=== Crime and Punishment ===&lt;br /&gt;
This is just a little placeholder for some thoughts before I post them to the main page. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Limiting capabilities&#039;&#039;&#039;&lt;br /&gt;
Anil mentioned in class the possibility of revoking or limiting capabilities if a user/computer has been found to be guilty of a crime. For example, the computer could somehow lose its ability to perform encryption or secure communications. Somewhat related is the idea of cpu-throttling by performing additional work (explained in the section below). &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Proof-of-Work&#039;&#039;&#039;&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Unique identifiers&#039;&#039;&#039; &lt;br /&gt;
How are machines identified? Although this problem is related to attribution and there&#039;s another team working on it, we can make some basic assumptions that each machine is identifiable. This identifier should be able to survive a reformat, but buying a new machine would get you a new identifier. We might argue that this is fine, because all we&#039;re trying to do is raise the price an attacker has to pay to commit a crime (i.e., buy more machines).&lt;br /&gt;
&lt;br /&gt;
===Gathering Evidence===&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. &lt;br /&gt;
Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;br /&gt;
&lt;br /&gt;
===CFAA Computer Fraud and Abuse Act===&lt;br /&gt;
&lt;br /&gt;
In terms of justice, there has been an act that has specifications to what cyber crimes and of what caliber they should be categorized in. One fundamental idea that is followed is the mens rea, which is defined as the &amp;quot;mental state&amp;quot; of a crime. &amp;quot;The Model Penal Code (&amp;quot;MPC&amp;quot;) lists four levels of mens rea -- purposely, knowingly, recklessly, and negligently. The MPC categories range from the highest level, purposely, to the lowest level, negligently. These mens rea levels are further divided into high and low mens rea requirements. The high mens rea levels include acts criminals do intentionally and knowingly. The low mens rea levels include acts criminals do recklessly, negligently, and with strict liability. Criminals have a higher level of mens rea when their intent is more specific; therefore, they are more blameworthy. With these differing mens rea categories in mind, Congress drafted CFAA to address computer crimes occurring on the Internet.&amp;quot;[http://www.lawtechjournal.com/archives/blt/i3-hh.html]&lt;br /&gt;
&lt;br /&gt;
Reading into the decisions they have made to update the CFAA brings up topics of how users who &amp;quot;intentionally&amp;quot; do harm, as well as users unknowingly participating, or even attempting to help the system by hurting it and fixing it ([http://scholar.google.com/scholar_case?case=551386241451639668 Morris]).&lt;br /&gt;
&lt;br /&gt;
Another note is that how there are laws and rules being made for humans to be penalized for such negative cyber actions, but even before penalty, it is important to setup a secure enough system that will try to mitigate such negative actions that can take place.Just as how workers in a business must be educated on detecting malicious software and other vulnerabilities in order to further secure the system. By setting up stand alone protection on each system would prevent the need to punish certain acts since they would be impossible to occur. [http://www.witsa.org/papers/McConnell-cybercrime.pdf Law is only part of the answer]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;br /&gt;
&lt;br /&gt;
The Justice Web is a possible implementation that uses the research we have done so far. It is essentially an incrementally-deployable network system that shares resources with users within the same Justice Web, based on a morality rating. Evidence is logged so that those within the Web may be held accountable, and those without may be recorded and watched for future misbehaviour.&lt;br /&gt;
&lt;br /&gt;
===What it is===&lt;br /&gt;
&lt;br /&gt;
The Justice Web is an implementation that treats a network as a distributed system. Resources are shared among the users, based on some measure of trust. As the web grows, more computers become linked to each other within the web, making it harder to manage trust given to each member of the Web. Also, the Web should provide some shared protection for those within the network against external attacks.&lt;br /&gt;
&lt;br /&gt;
Because of this, some sort of Justice System is needed to process evidence and sentence malicious computers. The Justice Web would need a computer or computers to act as the judge. After the judgement, the Justice Web would then need to enforce a penalty on the offender.&lt;br /&gt;
&lt;br /&gt;
===What it does===&lt;br /&gt;
&lt;br /&gt;
The Justice Web links multiple computers together to act as a distributed system. the amount of resources allotted to a member is dependent on their moral rating and trust. The most trusted computer would possibly be the leader of the Web, acting as the judge. To gather evidence a log is kept at each implementation node. This evidence is encrypted so that the user cannot tamper with it. &lt;br /&gt;
&lt;br /&gt;
The evidence is collected by the Justice Web, and handled by members with high level of trust. That is to say, the high computers within the system would essentially be able to define how much evidence is needed, as well as what punishment is to be handed out. The power high members are not absolute, but are capable of influencing a standard set of rules. Rulings are handled using common law, with a punishment handled in the same way as previous ones, unless explicitly changed by the high members. &lt;br /&gt;
&lt;br /&gt;
After the evidence is processed, and a ruling is made by the high members, the Justice Web must then enforce the punishment. For threats coming from outside the Web, each member of the Web is warned about the offender. Continued communication with the offender will be allowed, but if an infection does occur, the punishment for becoming infected would be more severe.&lt;br /&gt;
&lt;br /&gt;
As for offenders within the system, the morality rating attached to that member is affected, and the amount of trust is decreased. From a practical standpoint, the punishment would involve the restriction of resources accessible to the member, while increasing the workload of the member. The amount of trust increases over time, allowing the member to slowly gain more and more access to resources, but the morality rating would be kept the same so that it is made aware that the member has done wrong in the past.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
[http://www.computer.org/portal/web/csdl/doi/10.1109/ICDCS.2006.78 Prevent DOS by preventing spoofing]&lt;br /&gt;
&lt;br /&gt;
Also looking at Ingress filtering is also another good method to prevent users on a network from spoofing ips for DOS attacks. [http://delivery.acm.org.proxy.library.carleton.ca/10.1145/350000/347560/p295-savage.pdf?key1=347560&amp;amp;key2=5289230031&amp;amp;coll=DL&amp;amp;dl=ACM&amp;amp;ip=134.117.10.200&amp;amp;CFID=14033754&amp;amp;CFTOKEN=82498533 link]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
==Implementation Section Notes==&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;All computers have a unique ID&#039;&#039;&#039; - &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;There exists some form of morality reputation that is public knowledge.&#039;&#039;&#039; - It should be clear to everyone how you can lose morality. There should also be a clear process to follow in case of disputes. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Website administrators will limit site usage based on the morality/reputation rating.&#039;&#039;&#039; &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Morality history.&#039;&#039;&#039; - The current morality value is useful for quick validation. More complicated scenarios (e.g., buying something from ebay) might merit a more detailed explanation of why a computer has a particular morality value, so it should be possible to see the history. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
=== Local Implementation ===&lt;br /&gt;
&lt;br /&gt;
* Each implementation stores an encrypted log of accesses.&lt;br /&gt;
* Using statistics (as described in the network criminology) to create evidence logs to detect such things as DDoS.&lt;br /&gt;
* A leader or group of leaders stores a master list of offenders, using the same style of moral rating.&lt;br /&gt;
* The master list is propagated to nodes within the network, each website using the moral rating in a default or custom manner.&lt;br /&gt;
* Network is used specifically for providers of services. Members of the network can provide shared services based on the network configuration (outside of our scope).&lt;br /&gt;
* The leader or group of leaders would gather evidence logs when an offense is made, and update the master list.&lt;br /&gt;
* network designed for prevention of outside attackers, instead of within.&lt;br /&gt;
&lt;br /&gt;
*http://delivery.acm.org/10.1145/360000/356846/p185-bernstein.pdf?key1=356846&amp;amp;key2=3639080031&amp;amp;coll=DL&amp;amp;dl=ACM&amp;amp;ip=134.117.254.250&amp;amp;CFID=14736879&amp;amp;CFTOKEN=22326715&lt;br /&gt;
**Paper discussing ways to handle a distributed database in this sort of setup.&lt;br /&gt;
&lt;br /&gt;
===Comment Spam===&lt;br /&gt;
&amp;lt;u&amp;gt;Evidence&amp;lt;/u&amp;gt;&lt;br /&gt;
*Need to detect the bots and the origin of the spam.&lt;br /&gt;
*should include:&lt;br /&gt;
**the comment itself.&lt;br /&gt;
**a link to the page the comment exists on.&lt;br /&gt;
**the unique ID of the perpetrator.&lt;br /&gt;
**justification of why it is spam.&lt;br /&gt;
&amp;lt;u&amp;gt;investigating computer&amp;lt;/u&amp;gt;&lt;br /&gt;
*has access to the transaction/communication data of the perpetrating computer.&lt;br /&gt;
*compares the reported message to other ommunications to detect if spam has occurred.&lt;br /&gt;
&amp;lt;u&amp;gt;Currently deployed solutions&amp;lt;/u&amp;gt;&lt;br /&gt;
*CAPTCHAS - try to detect if the comment submission came from a human or a bot. &lt;br /&gt;
*Filtering - scan for and block specific keywords (pharmaceutical terms, porn terms, etc)&lt;br /&gt;
*Rate limiting - only allow N comments in X time from the same source.&lt;br /&gt;
&lt;br /&gt;
===Denial of Service===&lt;br /&gt;
Use the unique ID to trace back all traffic from the DoS attack to originating machines.&lt;br /&gt;
*if a certain percent of the traffic originates from a single ID (say 60%), then a DoS has occurred.&lt;br /&gt;
*only the computer conducting the DoS is penalized.&lt;br /&gt;
&amp;lt;u&amp;gt;Current solutions&amp;lt;/u&amp;gt;&lt;br /&gt;
*Blacklists - Don&#039;t allow incoming connections from specific IP addresses&lt;br /&gt;
*Routing/configuration - Ingress filtering, ACL, firewalls, syn-cookies&lt;br /&gt;
*Dynamic over-provisioning - When you detect a surge in traffic (legitimate or attack), increase the amount of bandwidth available. &lt;br /&gt;
*Null routing - Refuse to route traffic being sent to the victim for a period of time (upstream)&lt;br /&gt;
&lt;br /&gt;
===Phishing===&lt;br /&gt;
Send the original website link as well as the phishing site link in the report so that the investigating computer can compare.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8873</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8873"/>
		<updated>2011-03-22T15:50:50Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Implementation Section Notes */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 08&amp;lt;/u&amp;gt;===&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 10&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
* Offender Registration: Global list of morality registered for perusal of other networks.&lt;br /&gt;
* Encrypted logs on client-side&lt;br /&gt;
** Reporting with tangible evidence&lt;br /&gt;
* Compensation for crimes&lt;br /&gt;
* virus notification&lt;br /&gt;
* detrimental to attacker buying a new computer, rather than total prevention&lt;br /&gt;
** assumption that computer can always be identified&lt;br /&gt;
* virus as umbrella group for mobile code&lt;br /&gt;
** active attackers punished differently from passive attackers&lt;br /&gt;
* Research Topics:&lt;br /&gt;
** What is Justice?&lt;br /&gt;
*** Mike&lt;br /&gt;
** Justice in terms of computers.&lt;br /&gt;
*** Matthew&lt;br /&gt;
** Crime and Punishment.&lt;br /&gt;
*** David&lt;br /&gt;
** Justice Web&lt;br /&gt;
*** Thomas McMahon&lt;br /&gt;
&lt;br /&gt;
===Mar 17===&lt;br /&gt;
&lt;br /&gt;
==Research Documentation==&lt;br /&gt;
&lt;br /&gt;
===Virtual Punishment===&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
===Theory of Justice===&lt;br /&gt;
&lt;br /&gt;
Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===The Birth of Prison===&lt;br /&gt;
Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===Ecce Homo &amp;amp; The Anarchist===&lt;br /&gt;
Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
=== Crime and Punishment ===&lt;br /&gt;
This is just a little placeholder for some thoughts before I post them to the main page. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Limiting capabilities&#039;&#039;&#039;&lt;br /&gt;
Anil mentioned in class the possibility of revoking or limiting capabilities if a user/computer has been found to be guilty of a crime. For example, the computer could somehow lose its ability to perform encryption or secure communications. Somewhat related is the idea of cpu-throttling by performing additional work (explained in the section below). &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Proof-of-Work&#039;&#039;&#039;&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Unique identifiers&#039;&#039;&#039; &lt;br /&gt;
How are machines identified? Although this problem is related to attribution and there&#039;s another team working on it, we can make some basic assumptions that each machine is identifiable. This identifier should be able to survive a reformat, but buying a new machine would get you a new identifier. We might argue that this is fine, because all we&#039;re trying to do is raise the price an attacker has to pay to commit a crime (i.e., buy more machines).&lt;br /&gt;
&lt;br /&gt;
===Gathering Evidence===&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. &lt;br /&gt;
Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;br /&gt;
&lt;br /&gt;
===CFAA Computer Fraud and Abuse Act===&lt;br /&gt;
&lt;br /&gt;
In terms of justice, there has been an act that has specifications to what cyber crimes and of what caliber they should be categorized in. One fundamental idea that is followed is the mens rea, which is defined as the &amp;quot;mental state&amp;quot; of a crime. &amp;quot;The Model Penal Code (&amp;quot;MPC&amp;quot;) lists four levels of mens rea -- purposely, knowingly, recklessly, and negligently. The MPC categories range from the highest level, purposely, to the lowest level, negligently. These mens rea levels are further divided into high and low mens rea requirements. The high mens rea levels include acts criminals do intentionally and knowingly. The low mens rea levels include acts criminals do recklessly, negligently, and with strict liability. Criminals have a higher level of mens rea when their intent is more specific; therefore, they are more blameworthy. With these differing mens rea categories in mind, Congress drafted CFAA to address computer crimes occurring on the Internet.&amp;quot;[http://www.lawtechjournal.com/archives/blt/i3-hh.html]&lt;br /&gt;
&lt;br /&gt;
Reading into the decisions they have made to update the CFAA brings up topics of how users who &amp;quot;intentionally&amp;quot; do harm, as well as users unknowingly participating, or even attempting to help the system by hurting it and fixing it ([http://scholar.google.com/scholar_case?case=551386241451639668 Morris]).&lt;br /&gt;
&lt;br /&gt;
Another note is that how there are laws and rules being made for humans to be penalized for such negative cyber actions, but even before penalty, it is important to setup a secure enough system that will try to mitigate such negative actions that can take place.Just as how workers in a business must be educated on detecting malicious software and other vulnerabilities in order to further secure the system. By setting up stand alone protection on each system would prevent the need to punish certain acts since they would be impossible to occur. [http://www.witsa.org/papers/McConnell-cybercrime.pdf Law is only part of the answer]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;br /&gt;
&lt;br /&gt;
The Justice Web is a possible implementation that uses the research we have done so far. It is essentially an incrementally-deployable network system that shares resources with users within the same Justice Web, based on a morality rating. Evidence is logged so that those within the Web may be held accountable, and those without may be recorded and watched for future misbehaviour.&lt;br /&gt;
&lt;br /&gt;
===What it is===&lt;br /&gt;
&lt;br /&gt;
The Justice Web is an implementation that treats a network as a distributed system. Resources are shared among the users, based on some measure of trust. As the web grows, more computers become linked to each other within the web, making it harder to manage trust given to each member of the Web. Also, the Web should provide some shared protection for those within the network against external attacks.&lt;br /&gt;
&lt;br /&gt;
Because of this, some sort of Justice System is needed to process evidence and sentence malicious computers. The Justice Web would need a computer or computers to act as the judge. After the judgement, the Justice Web would then need to enforce a penalty on the offender.&lt;br /&gt;
&lt;br /&gt;
===What it does===&lt;br /&gt;
&lt;br /&gt;
The Justice Web links multiple computers together to act as a distributed system. the amount of resources allotted to a member is dependent on their moral rating and trust. The most trusted computer would possibly be the leader of the Web, acting as the judge. To gather evidence a log is kept at each implementation node. This evidence is encrypted so that the user cannot tamper with it. &lt;br /&gt;
&lt;br /&gt;
The evidence is collected by the Justice Web, and handled by members with high level of trust. That is to say, the high computers within the system would essentially be able to define how much evidence is needed, as well as what punishment is to be handed out. The power high members are not absolute, but are capable of influencing a standard set of rules. Rulings are handled using common law, with a punishment handled in the same way as previous ones, unless explicitly changed by the high members. &lt;br /&gt;
&lt;br /&gt;
After the evidence is processed, and a ruling is made by the high members, the Justice Web must then enforce the punishment. For threats coming from outside the Web, each member of the Web is warned about the offender. Continued communication with the offender will be allowed, but if an infection does occur, the punishment for becoming infected would be more severe.&lt;br /&gt;
&lt;br /&gt;
As for offenders within the system, the morality rating attached to that member is affected, and the amount of trust is decreased. From a practical standpoint, the punishment would involve the restriction of resources accessible to the member, while increasing the workload of the member. The amount of trust increases over time, allowing the member to slowly gain more and more access to resources, but the morality rating would be kept the same so that it is made aware that the member has done wrong in the past.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
[http://www.computer.org/portal/web/csdl/doi/10.1109/ICDCS.2006.78 Prevent DOS by preventing spoofing]&lt;br /&gt;
&lt;br /&gt;
Also looking at Ingress filtering is also another good method to prevent users on a network from spoofing ips for DOS attacks. [http://delivery.acm.org.proxy.library.carleton.ca/10.1145/350000/347560/p295-savage.pdf?key1=347560&amp;amp;key2=5289230031&amp;amp;coll=DL&amp;amp;dl=ACM&amp;amp;ip=134.117.10.200&amp;amp;CFID=14033754&amp;amp;CFTOKEN=82498533 link]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
==Implementation Section Notes==&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;All computers have a unique ID&#039;&#039;&#039; - &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;There exists some form of morality reputation that is public knowledge.&#039;&#039;&#039; - It should be clear to everyone how you can lose morality. There should also be a clear process to follow in case of disputes. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Website administrators will limit site usage based on the morality/reputation rating.&#039;&#039;&#039; &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Morality history.&#039;&#039;&#039; - The current morality value is useful for quick validation. More complicated scenarios (e.g., buying something from ebay) might merit a more detailed explanation of why a computer has a particular morality value, so it should be possible to see the history. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
=== Local Implementation ===&lt;br /&gt;
&lt;br /&gt;
* Each implementation stores an encrypted log of accesses.&lt;br /&gt;
* Using statistics (as described in the network criminology) to create evidence logs to detect such things as DDoS.&lt;br /&gt;
* A leader or group of leaders stores a master list of offenders, using the same style of moral rating.&lt;br /&gt;
* The master list is propagated to nodes within the network, each website using the moral rating in a default or custom manner.&lt;br /&gt;
* Network is used specifically for providers of services. Members of the network can provide shared services based on the network configuration (outside of our scope).&lt;br /&gt;
* The leader or group of leaders would gather evidence logs when an offense is made, and update the master list.&lt;br /&gt;
* network designed for prevention of outside attackers, instead of within.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===Comment Spam===&lt;br /&gt;
&amp;lt;u&amp;gt;Evidence&amp;lt;/u&amp;gt;&lt;br /&gt;
*Need to detect the bots and the origin of the spam.&lt;br /&gt;
*should include:&lt;br /&gt;
**the comment itself.&lt;br /&gt;
**a link to the page the comment exists on.&lt;br /&gt;
**the unique ID of the perpetrator.&lt;br /&gt;
**justification of why it is spam.&lt;br /&gt;
&amp;lt;u&amp;gt;investigating computer&amp;lt;/u&amp;gt;&lt;br /&gt;
*has access to the transaction/communication data of the perpetrating computer.&lt;br /&gt;
*compares the reported message to other ommunications to detect if spam has occurred.&lt;br /&gt;
&amp;lt;u&amp;gt;Currently deployed solutions&amp;lt;/u&amp;gt;&lt;br /&gt;
*CAPTCHAS - try to detect if the comment submission came from a human or a bot. &lt;br /&gt;
*Filtering - scan for and block specific keywords (pharmaceutical terms, porn terms, etc)&lt;br /&gt;
*Rate limiting - only allow N comments in X time from the same source.&lt;br /&gt;
&lt;br /&gt;
===Denial of Service===&lt;br /&gt;
Use the unique ID to trace back all traffic from the DoS attack to originating machines.&lt;br /&gt;
*if a certain percent of the traffic originates from a single ID (say 60%), then a DoS has occurred.&lt;br /&gt;
*only the computer conducting the DoS is penalized.&lt;br /&gt;
&amp;lt;u&amp;gt;Current solutions&amp;lt;/u&amp;gt;&lt;br /&gt;
*Blacklists - Don&#039;t allow incoming connections from specific IP addresses&lt;br /&gt;
*Routing/configuration - Ingress filtering, ACL, firewalls, syn-cookies&lt;br /&gt;
*Dynamic over-provisioning - When you detect a surge in traffic (legitimate or attack), increase the amount of bandwidth available. &lt;br /&gt;
*Null routing - Refuse to route traffic being sent to the victim for a period of time (upstream)&lt;br /&gt;
&lt;br /&gt;
===Phishing===&lt;br /&gt;
Send the original website link as well as the phishing site link in the report so that the investigating computer can compare.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8641</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8641"/>
		<updated>2011-03-17T17:09:44Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 08&amp;lt;/u&amp;gt;===&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 10&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
* Offender Registration: Global list of morality registered for perusal of other networks.&lt;br /&gt;
* Encrypted logs on client-side&lt;br /&gt;
** Reporting with tangible evidence&lt;br /&gt;
* Compensation for crimes&lt;br /&gt;
* virus notification&lt;br /&gt;
* detrimental to attacker buying a new computer, rather than total prevention&lt;br /&gt;
** assumption that computer can always be identified&lt;br /&gt;
* virus as umbrella group for mobile code&lt;br /&gt;
** active attackers punished differently from passive attackers&lt;br /&gt;
* Research Topics:&lt;br /&gt;
** What is Justice?&lt;br /&gt;
*** Mike&lt;br /&gt;
** Justice in terms of computers.&lt;br /&gt;
*** Matthew&lt;br /&gt;
** Crime and Punishment.&lt;br /&gt;
*** David&lt;br /&gt;
** Justice Web&lt;br /&gt;
*** Thomas McMahon&lt;br /&gt;
&lt;br /&gt;
===Mar 17===&lt;br /&gt;
&lt;br /&gt;
==Research Documentation==&lt;br /&gt;
&lt;br /&gt;
===Virtual Punishment===&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
===Theory of Justice===&lt;br /&gt;
&lt;br /&gt;
Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===The Birth of Prison===&lt;br /&gt;
Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===Ecce Homo &amp;amp; The Anarchist===&lt;br /&gt;
Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
=== Crime and Punishment ===&lt;br /&gt;
This is just a little placeholder for some thoughts before I post them to the main page. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Limiting capabilities&#039;&#039;&#039;&lt;br /&gt;
Anil mentioned in class the possibility of revoking or limiting capabilities if a user/computer has been found to be guilty of a crime. For example, the computer could somehow lose its ability to perform encryption or secure communications. Somewhat related is the idea of cpu-throttling by performing additional work (explained in the section below). &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Proof-of-Work&#039;&#039;&#039;&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Unique identifiers&#039;&#039;&#039; &lt;br /&gt;
How are machines identified? Although this problem is related to attribution and there&#039;s another team working on it, we can make some basic assumptions that each machine is identifiable. This identifier should be able to survive a reformat, but buying a new machine would get you a new identifier. We might argue that this is fine, because all we&#039;re trying to do is raise the price an attacker has to pay to commit a crime (i.e., buy more machines).&lt;br /&gt;
&lt;br /&gt;
===Gathering Evidence===&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. &lt;br /&gt;
Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;br /&gt;
&lt;br /&gt;
===CFAA Computer Fraud and Abuse Act===&lt;br /&gt;
&lt;br /&gt;
In terms of justice, there has been an act that has specifications to what cyber crimes and of what caliber they should be categorized in. One fundamental idea that is followed is the mens rea, which is defined as the &amp;quot;mental state&amp;quot; of a crime. &amp;quot;The Model Penal Code (&amp;quot;MPC&amp;quot;) lists four levels of mens rea -- purposely, knowingly, recklessly, and negligently. The MPC categories range from the highest level, purposely, to the lowest level, negligently. These mens rea levels are further divided into high and low mens rea requirements. The high mens rea levels include acts criminals do intentionally and knowingly. The low mens rea levels include acts criminals do recklessly, negligently, and with strict liability. Criminals have a higher level of mens rea when their intent is more specific; therefore, they are more blameworthy. With these differing mens rea categories in mind, Congress drafted CFAA to address computer crimes occurring on the Internet.&amp;quot;[http://www.lawtechjournal.com/archives/blt/i3-hh.html]&lt;br /&gt;
&lt;br /&gt;
Reading into the decisions they have made to update the CFAA brings up topics of how users who &amp;quot;intentionally&amp;quot; do harm, as well as users unknowingly participating, or even attempting to help the system by hurting it and fixing it ([http://scholar.google.com/scholar_case?case=551386241451639668 Morris]).&lt;br /&gt;
&lt;br /&gt;
Another note is that how there are laws and rules being made for humans to be penalized for such negative cyber actions, but even before penalty, it is important to setup a secure enough system that will try to mitigate such negative actions that can take place.Just as how workers in a business must be educated on detecting malicious software and other vulnerabilities in order to further secure the system. By setting up stand alone protection on each system would prevent the need to punish certain acts since they would be impossible to occur. [http://www.witsa.org/papers/McConnell-cybercrime.pdf Law is only part of the answer]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;br /&gt;
&lt;br /&gt;
The Justice Web is a possible implementation that uses the research we have done so far. It is essentially an incrementally-deployable network system that shares resources with users within the same Justice Web, based on a morality rating. Evidence is logged so that those within the Web may be held accountable, and those without may be recorded and watched for future misbehaviour.&lt;br /&gt;
&lt;br /&gt;
===What it is===&lt;br /&gt;
&lt;br /&gt;
The Justice Web is an implementation that treats a network as a distributed system. Resources are shared among the users, based on some measure of trust. As the web grows, more computers become linked to each other within the web, making it harder to manage trust given to each member of the Web. Also, the Web should provide some shared protection for those within the network against external attacks.&lt;br /&gt;
&lt;br /&gt;
Because of this, some sort of Justice System is needed to process evidence and sentence malicious computers. The Justice Web would need a computer or computers to act as the judge. After the judgement, the Justice Web would then need to enforce a penalty on the offender.&lt;br /&gt;
&lt;br /&gt;
===What it does===&lt;br /&gt;
&lt;br /&gt;
The Justice Web links multiple computers together to act as a distributed system. the amount of resources allotted to a member is dependent on their moral rating and trust. The most trusted computer would possibly be the leader of the Web, acting as the judge. To gather evidence a log is kept at each implementation node. This evidence is encrypted so that the user cannot tamper with it. &lt;br /&gt;
&lt;br /&gt;
The evidence is collected by the Justice Web, and handled by members with high level of trust. That is to say, the high computers within the system would essentially be able to define how much evidence is needed, as well as what punishment is to be handed out. The power high members are not absolute, but are capable of influencing a standard set of rules. Rulings are handled using common law, with a punishment handled in the same way as previous ones, unless explicitly changed by the high members. &lt;br /&gt;
&lt;br /&gt;
After the evidence is processed, and a ruling is made by the high members, the Justice Web must then enforce the punishment. For threats coming from outside the Web, each member of the Web is warned about the offender. Continued communication with the offender will be allowed, but if an infection does occur, the punishment for becoming infected would be more severe.&lt;br /&gt;
&lt;br /&gt;
As for offenders within the system, the morality rating attached to that member is affected, and the amount of trust is decreased. From a practical standpoint, the punishment would involve the restriction of resources accessible to the member, while increasing the workload of the member. The amount of trust increases over time, allowing the member to slowly gain more and more access to resources, but the morality rating would be kept the same so that it is made aware that the member has done wrong in the past.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
[http://www.computer.org/portal/web/csdl/doi/10.1109/ICDCS.2006.78 Prevent DOS by preventing spoofing]&lt;br /&gt;
&lt;br /&gt;
Also looking at Ingress filtering is also another good method to prevent users on a network from spoofing ips for DOS attacks. [http://delivery.acm.org.proxy.library.carleton.ca/10.1145/350000/347560/p295-savage.pdf?key1=347560&amp;amp;key2=5289230031&amp;amp;coll=DL&amp;amp;dl=ACM&amp;amp;ip=134.117.10.200&amp;amp;CFID=14033754&amp;amp;CFTOKEN=82498533 link]&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8496</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8496"/>
		<updated>2011-03-14T07:20:30Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Managing Justice */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
To understand how justice can be incorporated into a distributed computer system it is critical to understand what justice is. In this section we discuss key concepts related to justice and provide some thoughts on how human justice theory can be related to justice in terms of computing.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Theory of Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
For our purposes, we will discuss justice as it relates to punishment. From a philosophical point of view, there are 3 main categories of punishment; &#039;&#039;&#039;Teleologic, Retributive,&#039;&#039;&#039; and &#039;&#039;&#039;Teleologic Retributive&#039;&#039;&#039;. [3]&lt;br /&gt;
====Teleologic:====&lt;br /&gt;
The teleologic view of punishment is that any punishment should always be accompanied by some beneficial effect. Even though the act of punishing someone may itself be considered “evil”, the overall punishment will be considered “good” if it provides some form of social benefit to the society. For example, if a criminal is punished for a crime and this punishment serves to dissuade potential criminals from committing future crimes, then the overall social value of the punishment is positive.[3]&lt;br /&gt;
&lt;br /&gt;
Punishment from this perspective provides a good model for computer systems as any criminal act will be handled such that punishment is beneficial for the system. A simple example of such a transaction can be visualized through the management of bandwidth. If there is a particular computer who is deemed to be a criminal bandwidth hog, using more resources than it is allowed, the perpetrator’s network connection may be throttled. This punishment would correct the deviant computer while free the resources for other computers in the system to utilize.&lt;br /&gt;
&lt;br /&gt;
====Retributive:====&lt;br /&gt;
Retributive punishment is defined by the belief that punishment itself is either just or intrinsically valuable even if there is social benefit to the punishment. This view is probably best characterised by the phrase “eye for an eye”. Essentially punishment is dispensed because it is necessary to inflict harm on those who do bad things but society may not get any benefit from the punishment.[3] The point of view of retributive punishment is that it is better to punish someone who commits a crime regardless of the severity of the punishment.[2]&lt;br /&gt;
&lt;br /&gt;
It is also important to discuss retributive punishment in comparison to retaliation. Although they both incorporate the concept punishment as a just, and necessary, act, they have very different goals. Retribution focuses on the wrongdoing of the criminal whereas retaliation is based on the right of the victim to seek punishment. Retaliation is based on the concept of deterrence; if you are convicted of a crime then someone will get to exact revenge and thus you will pay a price. Retribution requires a criminal to pay a price for the crime committed and thus he should internalize how the crime has a negative effect on society. [1] &lt;br /&gt;
&lt;br /&gt;
Although the necessity of punishment is certainly true, it is hard to see a situation where truly retributive punishment is beneficial for a computer system. Since computers on a distributed system are sharing finite resources, inflicting punishment on criminal computers, without considering the benefit/harm to the society, may result in further negative effects on the system. If a crime has been committed, the effects of that crime have already had an effect on the computing system. Punishing the perpetrator of the criminal act will not reverse the effect of the act, and it may adversely affect the system. &lt;br /&gt;
&lt;br /&gt;
For example, suppose a computer is caught conducting spam attacks on other computers and the punishment for this act is to remove the computer from the network. It may be the case that the criminal computer had previously provided a very efficient connection to some data set but now there is no way to communicate with this computer. As a result, members of the remaining network must use a less efficient connection to reach the same data, thus the punishment had a negative effect on the system.&lt;br /&gt;
&lt;br /&gt;
====Teleologic Retributive:====&lt;br /&gt;
This third view of punishment combines the concept of the need to punish within the limits of what is considered reasonable punishment for the crime. From this perspective, punishment is necessary and provides a valuable service to society but it is only enforced within acceptable limits.&lt;br /&gt;
&lt;br /&gt;
To illustrate this view of punishment, consider the spam attack example from the retributive section above. If the punishment is reduced from being removed from the network to simply blocking a specific type of communication originating from the criminal computer, then it would be considered a teleological retributive punishment. This new punishment would match the severity of the crime but also still allows the other computers on the network to utilize the efficient network path through the criminal computer.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Structure of Punishment&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
To maintain a stable and efficient distributed system, punishment requires structure, or more accurately, there needs to be some power imbalance designed within the system such that some computers can hand out punishments upon other, criminal computers. Here we will briefly discuss a few methods which may be used to implement a penal system into a society.&lt;br /&gt;
&lt;br /&gt;
====Sovereign Rule:====&lt;br /&gt;
In the 1600s, Thomas Hobbes wrote a dissertation on how government and society should be structured. Within this work Hobbes discusses how punishment should be handled by a sovereign ruler. In this system, there is a known set of laws which originate from a single entity which exists above the law. This sovereign ruler is the highest authority of the law, but he may assign lesser judges who may carry out punishment in accordance to the laws.[4]&lt;br /&gt;
 &lt;br /&gt;
In this system, breaking the law is never excusable as the law is known to all members of the society. The exception to this are any members of society that are without reason, for example “children and madmen”. Punishment is a necessary evil and the sovereign has the right to punish any criminal in order to protect the “commonwealth”. The sovereign can even order other subjects to punish criminals but he may not order a criminal to punish himself as this violates the law of self preservation. To balance the system the sovereign may also reward individuals and thus the balance of punishment and reward are the “nerves and joints which move the limbs of a commonwealth.”[4]&lt;br /&gt;
&lt;br /&gt;
Essentially, sovereign rule is one overall leader of justice who determines what is right and wrong in order to best serve the needs of a system. &lt;br /&gt;
&lt;br /&gt;
====Corporal Punishment. Economic Punishment, and Prison:====&lt;br /&gt;
Human punishment commonly falls into three overlapping categories; corporal punishment, economic punishment, and prison. Corporal punishment involves inflicting pain or possibly disfiguring a criminal in response to the crime committed. The main idea is that the criminal should serve as a demonstration of the terrible things that befall those who break the law. Furthermore, any criminal who is disfigured must live with a visual reminder of the act they committed, thus imparting shame upon the perpetrator and allowing others in society to form a conceptual model of the type of person that individual is.[5]&lt;br /&gt;
&lt;br /&gt;
Economic punishment is forcing a criminal to pay a fine for the act committed. The main idea is to make criminals internalize the social costs of the crime they committed. The penalty fine imposed upon the criminal may not be equal to the social cost of the crime committed but it should cause the criminal the same amount of distress as the crime that was committed. [1] &lt;br /&gt;
Prison is a modern method of punishment by which criminals are forced to exist under the watch of professionals and it is up to the discretion of the professionals as to when the punishment is complete. For example, it is up to lawyers, judges, psychologists and prison guards determine when a criminal’s prison sentence has ended.[5]&lt;br /&gt;
 &lt;br /&gt;
These three methods are not mutually exclusive as commonly criminals may be asked to pay a penalty fine as well as serve a prison sentence; however they all serve different purposes. All three punishment types serve as a deterrent to future criminals but each method has a different active agent; corporal punishment uses shame, economic punishment uses monetary handicapping, and prison focuses on reducing personal freedoms. These three concepts may be very useful to a distributed computer justice system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Addition Concepts Related to Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
====Purpose of Justice:====&lt;br /&gt;
John Rawls provides a definition of the purpose of justice as providing two primary functions; first, justice assigns rights and duties for the basic institutions of society, and second, justice describes the best way to distribute the benefits and burdens of society. [1] This view fits well within the scope of justice for a distributed computing system as there are very clear roles which can be assigned and there are finite resources which can be used to manage the “benefits and burdens” of society. These roles will be further discussed later in this article.&lt;br /&gt;
&lt;br /&gt;
====Morality====&lt;br /&gt;
&lt;br /&gt;
For a system of justice to be effective, a known moral code must exist within the society. Friedrich Nietzsche provides one interpretation of morality based on social position which is divided into two categories; “master-morality” and “slave-morality”. Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic. Slave-morality, on the other hand, is based on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.[6] &lt;br /&gt;
&lt;br /&gt;
Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam attacks) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
&lt;br /&gt;
If morality was introduced to a distributed computer system that already has a reliable reputation mechanism, then all computers would be able to know how other computers behave &amp;quot;socially”. This would further allow punishment methods based on shame, to be exacted based on how &amp;quot;bad&amp;quot; a computer’s moral code is. An offending would then have to rebuild a positive moral reputation before it could participate in more trusted social interactions.&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
How Justice applies to the realm of computers. This includes how a computer can be exposed to Justice vs. how the user would be involved in the Justice applied.&lt;br /&gt;
&lt;br /&gt;
==Crime and Punishment==&lt;br /&gt;
&lt;br /&gt;
A broad description of possible crimes committed within the scope of the class, and punishments for those within the system and attackers from without.&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;br /&gt;
&lt;br /&gt;
The Justice Web is a possible implementation that uses the research we have done so far. It is essentially an incrementally-deployable network system that shares resources with users within the same Justice Web, based on a morality rating. Evidence is logged so that those within the Web may be held accountable, and those without may be recorded and watched for future misbehaviour.&lt;br /&gt;
&lt;br /&gt;
===What it is===&lt;br /&gt;
&lt;br /&gt;
The Justice Web is an implementation that treats a network as a distributed system. Resources are shared among the users, based on some measure of trust. As the web grows, more computers become linked to each other within the web, making it harder to manage trust given to each member of the Web. Also, the Web should provide some shared protection for those within the network against external attacks.&lt;br /&gt;
&lt;br /&gt;
Because of this, some sort of Justice System is needed to process evidence and sentence malicious computers. The Justice Web would need a computer or computers to act as the judge. After the judgement, the Justice Web would then need to enforce a penalty on the offender.&lt;br /&gt;
&lt;br /&gt;
===What it does===&lt;br /&gt;
&lt;br /&gt;
The Justice Web links multiple computers together to act as a distributed system. the amount of resources allotted to a member is dependent on their moral rating and trust. The most trusted computer would possibly be the leader of the Web, acting as the judge. To gather evidence a log is kept at each implementation node. This evidence is encrypted so that the user cannot tamper with it. &lt;br /&gt;
&lt;br /&gt;
The evidence is collected by the Justice Web, and handled by members with high level of trust. That is to say, the high computers within the system would essentially be able to define how much evidence is needed, as well as what punishment is to be handed out. The power high members are not absolute, but are capable of influencing a standard set of rules. Rulings are handled using common law, with a punishment handled in the same way as previous ones, unless explicitly changed by the high members. &lt;br /&gt;
&lt;br /&gt;
After the evidence is processed, and a ruling is made by the high members, the Justice Web must then enforce the punishment. For threats coming from outside the Web, each member of the Web is warned about the offender. Continued communication with the offender will be allowed, but if an infection does occur, the punishment for becoming infected would be more severe.&lt;br /&gt;
&lt;br /&gt;
As for offenders within the system, the morality rating attached to that member is affected, and the amount of trust is decreased. From a practical standpoint, the punishment would involve the restriction of resources accessible to the member, while increasing the workload of the member. The amount of trust increases over time, allowing the member to slowly gain more and more access to resources, but the morality rating would be kept the same so that it is made aware that the member has done wrong in the past.&lt;br /&gt;
&lt;br /&gt;
==Resources==&lt;br /&gt;
[1] Posner, Richard A., &#039;&#039;Retirbution and Related Concepts of Punishment&#039;&#039;, The Journal of Legal Studies Vol. 9 No. 1, University of Chicago Press, 1980. [http://www.econ.brown.edu/fac/glenn_loury/louryhomepage/teaching/Ec%20222/posner_punishment.pdf PDF]&lt;br /&gt;
&lt;br /&gt;
[2] Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[3] Ezorsky, Gertrude, &#039;&#039;Philosophical Perspectives on Punishment&#039;&#039;, State University of New York Press, 1972. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=Jba2lFg3KOMC&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+punishment&amp;amp;ots=LuzbsNmWlg&amp;amp;sig=KTvWhaWMxIRslk38tZmucty-jNw#v=onepage&amp;amp;q=concepts%20of%20punishment&amp;amp;f=false HTML] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[4] Hobbes, Thomas, &#039;&#039;The Leviathon&#039;&#039;, first published 1651, republished by Forgotten Books, 2008. [http://books.google.ca/books?id=-Q4nPYeps6MC&amp;amp;pg=PR7&amp;amp;lpg=PR7&amp;amp;dq=the+leviathan&amp;amp;source=bl&amp;amp;ots=_vZA8CpLY0&amp;amp;sig=Wn_1z_Sqsx3-YA2dml2A458M_xU&amp;amp;hl=en&amp;amp;ei=V0R6TZT_D8XwrAGiz8zxBQ&amp;amp;sa=X&amp;amp;oi=book_result&amp;amp;ct=result&amp;amp;resnum=9&amp;amp;sqi=2&amp;amp;ved=0CFAQ6AEwCA#v=onepage&amp;amp;q&amp;amp;f=false HTML]&lt;br /&gt;
&lt;br /&gt;
[5] Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[6] Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8495</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8495"/>
		<updated>2011-03-14T07:20:10Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* What it does */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
To understand how justice can be incorporated into a distributed computer system it is critical to understand what justice is. In this section we discuss key concepts related to justice and provide some thoughts on how human justice theory can be related to justice in terms of computing.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Theory of Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
For our purposes, we will discuss justice as it relates to punishment. From a philosophical point of view, there are 3 main categories of punishment; &#039;&#039;&#039;Teleologic, Retributive,&#039;&#039;&#039; and &#039;&#039;&#039;Teleologic Retributive&#039;&#039;&#039;. [3]&lt;br /&gt;
====Teleologic:====&lt;br /&gt;
The teleologic view of punishment is that any punishment should always be accompanied by some beneficial effect. Even though the act of punishing someone may itself be considered “evil”, the overall punishment will be considered “good” if it provides some form of social benefit to the society. For example, if a criminal is punished for a crime and this punishment serves to dissuade potential criminals from committing future crimes, then the overall social value of the punishment is positive.[3]&lt;br /&gt;
&lt;br /&gt;
Punishment from this perspective provides a good model for computer systems as any criminal act will be handled such that punishment is beneficial for the system. A simple example of such a transaction can be visualized through the management of bandwidth. If there is a particular computer who is deemed to be a criminal bandwidth hog, using more resources than it is allowed, the perpetrator’s network connection may be throttled. This punishment would correct the deviant computer while free the resources for other computers in the system to utilize.&lt;br /&gt;
&lt;br /&gt;
====Retributive:====&lt;br /&gt;
Retributive punishment is defined by the belief that punishment itself is either just or intrinsically valuable even if there is social benefit to the punishment. This view is probably best characterised by the phrase “eye for an eye”. Essentially punishment is dispensed because it is necessary to inflict harm on those who do bad things but society may not get any benefit from the punishment.[3] The point of view of retributive punishment is that it is better to punish someone who commits a crime regardless of the severity of the punishment.[2]&lt;br /&gt;
&lt;br /&gt;
It is also important to discuss retributive punishment in comparison to retaliation. Although they both incorporate the concept punishment as a just, and necessary, act, they have very different goals. Retribution focuses on the wrongdoing of the criminal whereas retaliation is based on the right of the victim to seek punishment. Retaliation is based on the concept of deterrence; if you are convicted of a crime then someone will get to exact revenge and thus you will pay a price. Retribution requires a criminal to pay a price for the crime committed and thus he should internalize how the crime has a negative effect on society. [1] &lt;br /&gt;
&lt;br /&gt;
Although the necessity of punishment is certainly true, it is hard to see a situation where truly retributive punishment is beneficial for a computer system. Since computers on a distributed system are sharing finite resources, inflicting punishment on criminal computers, without considering the benefit/harm to the society, may result in further negative effects on the system. If a crime has been committed, the effects of that crime have already had an effect on the computing system. Punishing the perpetrator of the criminal act will not reverse the effect of the act, and it may adversely affect the system. &lt;br /&gt;
&lt;br /&gt;
For example, suppose a computer is caught conducting spam attacks on other computers and the punishment for this act is to remove the computer from the network. It may be the case that the criminal computer had previously provided a very efficient connection to some data set but now there is no way to communicate with this computer. As a result, members of the remaining network must use a less efficient connection to reach the same data, thus the punishment had a negative effect on the system.&lt;br /&gt;
&lt;br /&gt;
====Teleologic Retributive:====&lt;br /&gt;
This third view of punishment combines the concept of the need to punish within the limits of what is considered reasonable punishment for the crime. From this perspective, punishment is necessary and provides a valuable service to society but it is only enforced within acceptable limits.&lt;br /&gt;
&lt;br /&gt;
To illustrate this view of punishment, consider the spam attack example from the retributive section above. If the punishment is reduced from being removed from the network to simply blocking a specific type of communication originating from the criminal computer, then it would be considered a teleological retributive punishment. This new punishment would match the severity of the crime but also still allows the other computers on the network to utilize the efficient network path through the criminal computer.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Structure of Punishment&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
To maintain a stable and efficient distributed system, punishment requires structure, or more accurately, there needs to be some power imbalance designed within the system such that some computers can hand out punishments upon other, criminal computers. Here we will briefly discuss a few methods which may be used to implement a penal system into a society.&lt;br /&gt;
&lt;br /&gt;
====Sovereign Rule:====&lt;br /&gt;
In the 1600s, Thomas Hobbes wrote a dissertation on how government and society should be structured. Within this work Hobbes discusses how punishment should be handled by a sovereign ruler. In this system, there is a known set of laws which originate from a single entity which exists above the law. This sovereign ruler is the highest authority of the law, but he may assign lesser judges who may carry out punishment in accordance to the laws.[4]&lt;br /&gt;
 &lt;br /&gt;
In this system, breaking the law is never excusable as the law is known to all members of the society. The exception to this are any members of society that are without reason, for example “children and madmen”. Punishment is a necessary evil and the sovereign has the right to punish any criminal in order to protect the “commonwealth”. The sovereign can even order other subjects to punish criminals but he may not order a criminal to punish himself as this violates the law of self preservation. To balance the system the sovereign may also reward individuals and thus the balance of punishment and reward are the “nerves and joints which move the limbs of a commonwealth.”[4]&lt;br /&gt;
&lt;br /&gt;
Essentially, sovereign rule is one overall leader of justice who determines what is right and wrong in order to best serve the needs of a system. &lt;br /&gt;
&lt;br /&gt;
====Corporal Punishment. Economic Punishment, and Prison:====&lt;br /&gt;
Human punishment commonly falls into three overlapping categories; corporal punishment, economic punishment, and prison. Corporal punishment involves inflicting pain or possibly disfiguring a criminal in response to the crime committed. The main idea is that the criminal should serve as a demonstration of the terrible things that befall those who break the law. Furthermore, any criminal who is disfigured must live with a visual reminder of the act they committed, thus imparting shame upon the perpetrator and allowing others in society to form a conceptual model of the type of person that individual is.[5]&lt;br /&gt;
&lt;br /&gt;
Economic punishment is forcing a criminal to pay a fine for the act committed. The main idea is to make criminals internalize the social costs of the crime they committed. The penalty fine imposed upon the criminal may not be equal to the social cost of the crime committed but it should cause the criminal the same amount of distress as the crime that was committed. [1] &lt;br /&gt;
Prison is a modern method of punishment by which criminals are forced to exist under the watch of professionals and it is up to the discretion of the professionals as to when the punishment is complete. For example, it is up to lawyers, judges, psychologists and prison guards determine when a criminal’s prison sentence has ended.[5]&lt;br /&gt;
 &lt;br /&gt;
These three methods are not mutually exclusive as commonly criminals may be asked to pay a penalty fine as well as serve a prison sentence; however they all serve different purposes. All three punishment types serve as a deterrent to future criminals but each method has a different active agent; corporal punishment uses shame, economic punishment uses monetary handicapping, and prison focuses on reducing personal freedoms. These three concepts may be very useful to a distributed computer justice system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Addition Concepts Related to Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
====Purpose of Justice:====&lt;br /&gt;
John Rawls provides a definition of the purpose of justice as providing two primary functions; first, justice assigns rights and duties for the basic institutions of society, and second, justice describes the best way to distribute the benefits and burdens of society. [1] This view fits well within the scope of justice for a distributed computing system as there are very clear roles which can be assigned and there are finite resources which can be used to manage the “benefits and burdens” of society. These roles will be further discussed later in this article.&lt;br /&gt;
&lt;br /&gt;
====Morality====&lt;br /&gt;
&lt;br /&gt;
For a system of justice to be effective, a known moral code must exist within the society. Friedrich Nietzsche provides one interpretation of morality based on social position which is divided into two categories; “master-morality” and “slave-morality”. Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic. Slave-morality, on the other hand, is based on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.[6] &lt;br /&gt;
&lt;br /&gt;
Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam attacks) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
&lt;br /&gt;
If morality was introduced to a distributed computer system that already has a reliable reputation mechanism, then all computers would be able to know how other computers behave &amp;quot;socially”. This would further allow punishment methods based on shame, to be exacted based on how &amp;quot;bad&amp;quot; a computer’s moral code is. An offending would then have to rebuild a positive moral reputation before it could participate in more trusted social interactions.&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
How Justice applies to the realm of computers. This includes how a computer can be exposed to Justice vs. how the user would be involved in the Justice applied.&lt;br /&gt;
&lt;br /&gt;
==Crime and Punishment==&lt;br /&gt;
&lt;br /&gt;
A broad description of possible crimes committed within the scope of the class, and punishments for those within the system and attackers from without.&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;br /&gt;
&lt;br /&gt;
The Justice Web is a possible implementation that uses the research we have done so far. It is essentially an incrementally-deployable network system that shares resources with users within the same Justice Web, based on a morality rating. Evidence is logged so that those within the Web may be held accountable, and those without may be recorded and watched for future misbehaviour.&lt;br /&gt;
&lt;br /&gt;
===What it is===&lt;br /&gt;
&lt;br /&gt;
The Justice Web is an implementation that treats a network as a distributed system. Resources are shared among the users, based on some measure of trust. As the web grows, more computers become linked to each other within the web, making it harder to manage trust given to each member of the Web. Also, the Web should provide some shared protection for those within the network against external attacks.&lt;br /&gt;
&lt;br /&gt;
Because of this, some sort of Justice System is needed to process evidence and sentence malicious computers. The Justice Web would need a computer or computers to act as the judge. After the judgement, the Justice Web would then need to enforce a penalty on the offender.&lt;br /&gt;
&lt;br /&gt;
===What it does===&lt;br /&gt;
&lt;br /&gt;
The Justice Web links multiple computers together to act as a distributed system. the amount of resources allotted to a member is dependent on their moral rating and trust. The most trusted computer would possibly be the leader of the Web, acting as the judge. To gather evidence a log is kept at each implementation node. This evidence is encrypted so that the user cannot tamper with it. &lt;br /&gt;
&lt;br /&gt;
The evidence is collected by the Justice Web, and handled by members with high level of trust. That is to say, the high computers within the system would essentially be able to define how much evidence is needed, as well as what punishment is to be handed out. The power high members are not absolute, but are capable of influencing a standard set of rules. Rulings are handled using common law, with a punishment handled in the same way as previous ones, unless explicitly changed by the high members. &lt;br /&gt;
&lt;br /&gt;
After the evidence is processed, and a ruling is made by the high members, the Justice Web must then enforce the punishment. For threats coming from outside the Web, each member of the Web is warned about the offender. Continued communication with the offender will be allowed, but if an infection does occur, the punishment for becoming infected would be more severe.&lt;br /&gt;
&lt;br /&gt;
As for offenders within the system, the morality rating attached to that member is affected, and the amount of trust is decreased. From a practical standpoint, the punishment would involve the restriction of resources accessible to the member, while increasing the workload of the member. The amount of trust increases over time, allowing the member to slowly gain more and more access to resources, but the morality rating would be kept the same so that it is made aware that the member has done wrong in the past.&lt;br /&gt;
&lt;br /&gt;
===Managing Justice===&lt;br /&gt;
&lt;br /&gt;
==Resources==&lt;br /&gt;
[1] Posner, Richard A., &#039;&#039;Retirbution and Related Concepts of Punishment&#039;&#039;, The Journal of Legal Studies Vol. 9 No. 1, University of Chicago Press, 1980. [http://www.econ.brown.edu/fac/glenn_loury/louryhomepage/teaching/Ec%20222/posner_punishment.pdf PDF]&lt;br /&gt;
&lt;br /&gt;
[2] Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[3] Ezorsky, Gertrude, &#039;&#039;Philosophical Perspectives on Punishment&#039;&#039;, State University of New York Press, 1972. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=Jba2lFg3KOMC&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+punishment&amp;amp;ots=LuzbsNmWlg&amp;amp;sig=KTvWhaWMxIRslk38tZmucty-jNw#v=onepage&amp;amp;q=concepts%20of%20punishment&amp;amp;f=false HTML] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[4] Hobbes, Thomas, &#039;&#039;The Leviathon&#039;&#039;, first published 1651, republished by Forgotten Books, 2008. [http://books.google.ca/books?id=-Q4nPYeps6MC&amp;amp;pg=PR7&amp;amp;lpg=PR7&amp;amp;dq=the+leviathan&amp;amp;source=bl&amp;amp;ots=_vZA8CpLY0&amp;amp;sig=Wn_1z_Sqsx3-YA2dml2A458M_xU&amp;amp;hl=en&amp;amp;ei=V0R6TZT_D8XwrAGiz8zxBQ&amp;amp;sa=X&amp;amp;oi=book_result&amp;amp;ct=result&amp;amp;resnum=9&amp;amp;sqi=2&amp;amp;ved=0CFAQ6AEwCA#v=onepage&amp;amp;q&amp;amp;f=false HTML]&lt;br /&gt;
&lt;br /&gt;
[5] Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[6] Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8494</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8494"/>
		<updated>2011-03-14T06:54:43Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* What it is */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
To understand how justice can be incorporated into a distributed computer system it is critical to understand what justice is. In this section we discuss key concepts related to justice and provide some thoughts on how human justice theory can be related to justice in terms of computing.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Theory of Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
For our purposes, we will discuss justice as it relates to punishment. From a philosophical point of view, there are 3 main categories of punishment; &#039;&#039;&#039;Teleologic, Retributive,&#039;&#039;&#039; and &#039;&#039;&#039;Teleologic Retributive&#039;&#039;&#039;. [3]&lt;br /&gt;
====Teleologic:====&lt;br /&gt;
The teleologic view of punishment is that any punishment should always be accompanied by some beneficial effect. Even though the act of punishing someone may itself be considered “evil”, the overall punishment will be considered “good” if it provides some form of social benefit to the society. For example, if a criminal is punished for a crime and this punishment serves to dissuade potential criminals from committing future crimes, then the overall social value of the punishment is positive.[3]&lt;br /&gt;
&lt;br /&gt;
Punishment from this perspective provides a good model for computer systems as any criminal act will be handled such that punishment is beneficial for the system. A simple example of such a transaction can be visualized through the management of bandwidth. If there is a particular computer who is deemed to be a criminal bandwidth hog, using more resources than it is allowed, the perpetrator’s network connection may be throttled. This punishment would correct the deviant computer while free the resources for other computers in the system to utilize.&lt;br /&gt;
&lt;br /&gt;
====Retributive:====&lt;br /&gt;
Retributive punishment is defined by the belief that punishment itself is either just or intrinsically valuable even if there is social benefit to the punishment. This view is probably best characterised by the phrase “eye for an eye”. Essentially punishment is dispensed because it is necessary to inflict harm on those who do bad things but society may not get any benefit from the punishment.[3] The point of view of retributive punishment is that it is better to punish someone who commits a crime regardless of the severity of the punishment.[2]&lt;br /&gt;
&lt;br /&gt;
It is also important to discuss retributive punishment in comparison to retaliation. Although they both incorporate the concept punishment as a just, and necessary, act, they have very different goals. Retribution focuses on the wrongdoing of the criminal whereas retaliation is based on the right of the victim to seek punishment. Retaliation is based on the concept of deterrence; if you are convicted of a crime then someone will get to exact revenge and thus you will pay a price. Retribution requires a criminal to pay a price for the crime committed and thus he should internalize how the crime has a negative effect on society. [1] &lt;br /&gt;
&lt;br /&gt;
Although the necessity of punishment is certainly true, it is hard to see a situation where truly retributive punishment is beneficial for a computer system. Since computers on a distributed system are sharing finite resources, inflicting punishment on criminal computers, without considering the benefit/harm to the society, may result in further negative effects on the system. If a crime has been committed, the effects of that crime have already had an effect on the computing system. Punishing the perpetrator of the criminal act will not reverse the effect of the act, and it may adversely affect the system. &lt;br /&gt;
&lt;br /&gt;
For example, suppose a computer is caught conducting spam attacks on other computers and the punishment for this act is to remove the computer from the network. It may be the case that the criminal computer had previously provided a very efficient connection to some data set but now there is no way to communicate with this computer. As a result, members of the remaining network must use a less efficient connection to reach the same data, thus the punishment had a negative effect on the system.&lt;br /&gt;
&lt;br /&gt;
====Teleologic Retributive:====&lt;br /&gt;
This third view of punishment combines the concept of the need to punish within the limits of what is considered reasonable punishment for the crime. From this perspective, punishment is necessary and provides a valuable service to society but it is only enforced within acceptable limits.&lt;br /&gt;
&lt;br /&gt;
To illustrate this view of punishment, consider the spam attack example from the retributive section above. If the punishment is reduced from being removed from the network to simply blocking a specific type of communication originating from the criminal computer, then it would be considered a teleological retributive punishment. This new punishment would match the severity of the crime but also still allows the other computers on the network to utilize the efficient network path through the criminal computer.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Structure of Punishment&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
To maintain a stable and efficient distributed system, punishment requires structure, or more accurately, there needs to be some power imbalance designed within the system such that some computers can hand out punishments upon other, criminal computers. Here we will briefly discuss a few methods which may be used to implement a penal system into a society.&lt;br /&gt;
&lt;br /&gt;
====Sovereign Rule:====&lt;br /&gt;
In the 1600s, Thomas Hobbes wrote a dissertation on how government and society should be structured. Within this work Hobbes discusses how punishment should be handled by a sovereign ruler. In this system, there is a known set of laws which originate from a single entity which exists above the law. This sovereign ruler is the highest authority of the law, but he may assign lesser judges who may carry out punishment in accordance to the laws.[4]&lt;br /&gt;
 &lt;br /&gt;
In this system, breaking the law is never excusable as the law is known to all members of the society. The exception to this are any members of society that are without reason, for example “children and madmen”. Punishment is a necessary evil and the sovereign has the right to punish any criminal in order to protect the “commonwealth”. The sovereign can even order other subjects to punish criminals but he may not order a criminal to punish himself as this violates the law of self preservation. To balance the system the sovereign may also reward individuals and thus the balance of punishment and reward are the “nerves and joints which move the limbs of a commonwealth.”[4]&lt;br /&gt;
&lt;br /&gt;
Essentially, sovereign rule is one overall leader of justice who determines what is right and wrong in order to best serve the needs of a system. &lt;br /&gt;
&lt;br /&gt;
====Corporal Punishment. Economic Punishment, and Prison:====&lt;br /&gt;
Human punishment commonly falls into three overlapping categories; corporal punishment, economic punishment, and prison. Corporal punishment involves inflicting pain or possibly disfiguring a criminal in response to the crime committed. The main idea is that the criminal should serve as a demonstration of the terrible things that befall those who break the law. Furthermore, any criminal who is disfigured must live with a visual reminder of the act they committed, thus imparting shame upon the perpetrator and allowing others in society to form a conceptual model of the type of person that individual is.[5]&lt;br /&gt;
&lt;br /&gt;
Economic punishment is forcing a criminal to pay a fine for the act committed. The main idea is to make criminals internalize the social costs of the crime they committed. The penalty fine imposed upon the criminal may not be equal to the social cost of the crime committed but it should cause the criminal the same amount of distress as the crime that was committed. [1] &lt;br /&gt;
Prison is a modern method of punishment by which criminals are forced to exist under the watch of professionals and it is up to the discretion of the professionals as to when the punishment is complete. For example, it is up to lawyers, judges, psychologists and prison guards determine when a criminal’s prison sentence has ended.[5]&lt;br /&gt;
 &lt;br /&gt;
These three methods are not mutually exclusive as commonly criminals may be asked to pay a penalty fine as well as serve a prison sentence; however they all serve different purposes. All three punishment types serve as a deterrent to future criminals but each method has a different active agent; corporal punishment uses shame, economic punishment uses monetary handicapping, and prison focuses on reducing personal freedoms. These three concepts may be very useful to a distributed computer justice system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Addition Concepts Related to Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
====Purpose of Justice:====&lt;br /&gt;
John Rawls provides a definition of the purpose of justice as providing two primary functions; first, justice assigns rights and duties for the basic institutions of society, and second, justice describes the best way to distribute the benefits and burdens of society. [1] This view fits well within the scope of justice for a distributed computing system as there are very clear roles which can be assigned and there are finite resources which can be used to manage the “benefits and burdens” of society. These roles will be further discussed later in this article.&lt;br /&gt;
&lt;br /&gt;
====Morality====&lt;br /&gt;
&lt;br /&gt;
For a system of justice to be effective, a known moral code must exist within the society. Friedrich Nietzsche provides one interpretation of morality based on social position which is divided into two categories; “master-morality” and “slave-morality”. Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic. Slave-morality, on the other hand, is based on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.[6] &lt;br /&gt;
&lt;br /&gt;
Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam attacks) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
&lt;br /&gt;
If morality was introduced to a distributed computer system that already has a reliable reputation mechanism, then all computers would be able to know how other computers behave &amp;quot;socially”. This would further allow punishment methods based on shame, to be exacted based on how &amp;quot;bad&amp;quot; a computer’s moral code is. An offending would then have to rebuild a positive moral reputation before it could participate in more trusted social interactions.&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
How Justice applies to the realm of computers. This includes how a computer can be exposed to Justice vs. how the user would be involved in the Justice applied.&lt;br /&gt;
&lt;br /&gt;
==Crime and Punishment==&lt;br /&gt;
&lt;br /&gt;
A broad description of possible crimes committed within the scope of the class, and punishments for those within the system and attackers from without.&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;br /&gt;
&lt;br /&gt;
The Justice Web is a possible implementation that uses the research we have done so far. It is essentially an incrementally-deployable network system that shares resources with users within the same Justice Web, based on a morality rating. Evidence is logged so that those within the Web may be held accountable, and those without may be recorded and watched for future misbehaviour.&lt;br /&gt;
&lt;br /&gt;
===What it is===&lt;br /&gt;
&lt;br /&gt;
The Justice Web is an implementation that treats a network as a distributed system. Resources are shared among the users, based on some measure of trust. As the web grows, more computers become linked to each other within the web, making it harder to manage trust given to each member of the Web. Also, the Web should provide some shared protection for those within the network against external attacks.&lt;br /&gt;
&lt;br /&gt;
Because of this, some sort of Justice System is needed to process evidence and sentence malicious computers. The Justice Web would need a computer or computers to act as the judge. After the judgement, the Justice Web would then need to enforce a penalty on the offender.&lt;br /&gt;
&lt;br /&gt;
===What it does===&lt;br /&gt;
&lt;br /&gt;
===Managing Justice===&lt;br /&gt;
&lt;br /&gt;
==Resources==&lt;br /&gt;
[1] Posner, Richard A., &#039;&#039;Retirbution and Related Concepts of Punishment&#039;&#039;, The Journal of Legal Studies Vol. 9 No. 1, University of Chicago Press, 1980. [http://www.econ.brown.edu/fac/glenn_loury/louryhomepage/teaching/Ec%20222/posner_punishment.pdf PDF]&lt;br /&gt;
&lt;br /&gt;
[2] Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[3] Ezorsky, Gertrude, &#039;&#039;Philosophical Perspectives on Punishment&#039;&#039;, State University of New York Press, 1972. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=Jba2lFg3KOMC&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+punishment&amp;amp;ots=LuzbsNmWlg&amp;amp;sig=KTvWhaWMxIRslk38tZmucty-jNw#v=onepage&amp;amp;q=concepts%20of%20punishment&amp;amp;f=false HTML] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[4] Hobbes, Thomas, &#039;&#039;The Leviathon&#039;&#039;, first published 1651, republished by Forgotten Books, 2008. [http://books.google.ca/books?id=-Q4nPYeps6MC&amp;amp;pg=PR7&amp;amp;lpg=PR7&amp;amp;dq=the+leviathan&amp;amp;source=bl&amp;amp;ots=_vZA8CpLY0&amp;amp;sig=Wn_1z_Sqsx3-YA2dml2A458M_xU&amp;amp;hl=en&amp;amp;ei=V0R6TZT_D8XwrAGiz8zxBQ&amp;amp;sa=X&amp;amp;oi=book_result&amp;amp;ct=result&amp;amp;resnum=9&amp;amp;sqi=2&amp;amp;ved=0CFAQ6AEwCA#v=onepage&amp;amp;q&amp;amp;f=false HTML]&lt;br /&gt;
&lt;br /&gt;
[5] Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[6] Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8493</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8493"/>
		<updated>2011-03-14T06:43:53Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Concept: Justice Web */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
To understand how justice can be incorporated into a distributed computer system it is critical to understand what justice is. In this section we discuss key concepts related to justice and provide some thoughts on how human justice theory can be related to justice in terms of computing.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Theory of Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
For our purposes, we will discuss justice as it relates to punishment. From a philosophical point of view, there are 3 main categories of punishment; &#039;&#039;&#039;Teleologic, Retributive,&#039;&#039;&#039; and &#039;&#039;&#039;Teleologic Retributive&#039;&#039;&#039;. [3]&lt;br /&gt;
====Teleologic:====&lt;br /&gt;
The teleologic view of punishment is that any punishment should always be accompanied by some beneficial effect. Even though the act of punishing someone may itself be considered “evil”, the overall punishment will be considered “good” if it provides some form of social benefit to the society. For example, if a criminal is punished for a crime and this punishment serves to dissuade potential criminals from committing future crimes, then the overall social value of the punishment is positive.[3]&lt;br /&gt;
&lt;br /&gt;
Punishment from this perspective provides a good model for computer systems as any criminal act will be handled such that punishment is beneficial for the system. A simple example of such a transaction can be visualized through the management of bandwidth. If there is a particular computer who is deemed to be a criminal bandwidth hog, using more resources than it is allowed, the perpetrator’s network connection may be throttled. This punishment would correct the deviant computer while free the resources for other computers in the system to utilize.&lt;br /&gt;
&lt;br /&gt;
====Retributive:====&lt;br /&gt;
Retributive punishment is defined by the belief that punishment itself is either just or intrinsically valuable even if there is social benefit to the punishment. This view is probably best characterised by the phrase “eye for an eye”. Essentially punishment is dispensed because it is necessary to inflict harm on those who do bad things but society may not get any benefit from the punishment.[3] The point of view of retributive punishment is that it is better to punish someone who commits a crime regardless of the severity of the punishment.[2]&lt;br /&gt;
&lt;br /&gt;
It is also important to discuss retributive punishment in comparison to retaliation. Although they both incorporate the concept punishment as a just, and necessary, act, they have very different goals. Retribution focuses on the wrongdoing of the criminal whereas retaliation is based on the right of the victim to seek punishment. Retaliation is based on the concept of deterrence; if you are convicted of a crime then someone will get to exact revenge and thus you will pay a price. Retribution requires a criminal to pay a price for the crime committed and thus he should internalize how the crime has a negative effect on society. [1] &lt;br /&gt;
&lt;br /&gt;
Although the necessity of punishment is certainly true, it is hard to see a situation where truly retributive punishment is beneficial for a computer system. Since computers on a distributed system are sharing finite resources, inflicting punishment on criminal computers, without considering the benefit/harm to the society, may result in further negative effects on the system. If a crime has been committed, the effects of that crime have already had an effect on the computing system. Punishing the perpetrator of the criminal act will not reverse the effect of the act, and it may adversely affect the system. &lt;br /&gt;
&lt;br /&gt;
For example, suppose a computer is caught conducting spam attacks on other computers and the punishment for this act is to remove the computer from the network. It may be the case that the criminal computer had previously provided a very efficient connection to some data set but now there is no way to communicate with this computer. As a result, members of the remaining network must use a less efficient connection to reach the same data, thus the punishment had a negative effect on the system.&lt;br /&gt;
&lt;br /&gt;
====Teleologic Retributive:====&lt;br /&gt;
This third view of punishment combines the concept of the need to punish within the limits of what is considered reasonable punishment for the crime. From this perspective, punishment is necessary and provides a valuable service to society but it is only enforced within acceptable limits.&lt;br /&gt;
&lt;br /&gt;
To illustrate this view of punishment, consider the spam attack example from the retributive section above. If the punishment is reduced from being removed from the network to simply blocking a specific type of communication originating from the criminal computer, then it would be considered a teleological retributive punishment. This new punishment would match the severity of the crime but also still allows the other computers on the network to utilize the efficient network path through the criminal computer.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Structure of Punishment&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
To maintain a stable and efficient distributed system, punishment requires structure, or more accurately, there needs to be some power imbalance designed within the system such that some computers can hand out punishments upon other, criminal computers. Here we will briefly discuss a few methods which may be used to implement a penal system into a society.&lt;br /&gt;
&lt;br /&gt;
====Sovereign Rule:====&lt;br /&gt;
In the 1600s, Thomas Hobbes wrote a dissertation on how government and society should be structured. Within this work Hobbes discusses how punishment should be handled by a sovereign ruler. In this system, there is a known set of laws which originate from a single entity which exists above the law. This sovereign ruler is the highest authority of the law, but he may assign lesser judges who may carry out punishment in accordance to the laws.[4]&lt;br /&gt;
 &lt;br /&gt;
In this system, breaking the law is never excusable as the law is known to all members of the society. The exception to this are any members of society that are without reason, for example “children and madmen”. Punishment is a necessary evil and the sovereign has the right to punish any criminal in order to protect the “commonwealth”. The sovereign can even order other subjects to punish criminals but he may not order a criminal to punish himself as this violates the law of self preservation. To balance the system the sovereign may also reward individuals and thus the balance of punishment and reward are the “nerves and joints which move the limbs of a commonwealth.”[4]&lt;br /&gt;
&lt;br /&gt;
Essentially, sovereign rule is one overall leader of justice who determines what is right and wrong in order to best serve the needs of a system. &lt;br /&gt;
&lt;br /&gt;
====Corporal Punishment. Economic Punishment, and Prison:====&lt;br /&gt;
Human punishment commonly falls into three overlapping categories; corporal punishment, economic punishment, and prison. Corporal punishment involves inflicting pain or possibly disfiguring a criminal in response to the crime committed. The main idea is that the criminal should serve as a demonstration of the terrible things that befall those who break the law. Furthermore, any criminal who is disfigured must live with a visual reminder of the act they committed, thus imparting shame upon the perpetrator and allowing others in society to form a conceptual model of the type of person that individual is.[5]&lt;br /&gt;
&lt;br /&gt;
Economic punishment is forcing a criminal to pay a fine for the act committed. The main idea is to make criminals internalize the social costs of the crime they committed. The penalty fine imposed upon the criminal may not be equal to the social cost of the crime committed but it should cause the criminal the same amount of distress as the crime that was committed. [1] &lt;br /&gt;
Prison is a modern method of punishment by which criminals are forced to exist under the watch of professionals and it is up to the discretion of the professionals as to when the punishment is complete. For example, it is up to lawyers, judges, psychologists and prison guards determine when a criminal’s prison sentence has ended.[5]&lt;br /&gt;
 &lt;br /&gt;
These three methods are not mutually exclusive as commonly criminals may be asked to pay a penalty fine as well as serve a prison sentence; however they all serve different purposes. All three punishment types serve as a deterrent to future criminals but each method has a different active agent; corporal punishment uses shame, economic punishment uses monetary handicapping, and prison focuses on reducing personal freedoms. These three concepts may be very useful to a distributed computer justice system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Addition Concepts Related to Justice&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
====Purpose of Justice:====&lt;br /&gt;
John Rawls provides a definition of the purpose of justice as providing two primary functions; first, justice assigns rights and duties for the basic institutions of society, and second, justice describes the best way to distribute the benefits and burdens of society. [1] This view fits well within the scope of justice for a distributed computing system as there are very clear roles which can be assigned and there are finite resources which can be used to manage the “benefits and burdens” of society. These roles will be further discussed later in this article.&lt;br /&gt;
&lt;br /&gt;
====Morality====&lt;br /&gt;
&lt;br /&gt;
For a system of justice to be effective, a known moral code must exist within the society. Friedrich Nietzsche provides one interpretation of morality based on social position which is divided into two categories; “master-morality” and “slave-morality”. Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic. Slave-morality, on the other hand, is based on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.[6] &lt;br /&gt;
&lt;br /&gt;
Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam attacks) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
&lt;br /&gt;
If morality was introduced to a distributed computer system that already has a reliable reputation mechanism, then all computers would be able to know how other computers behave &amp;quot;socially”. This would further allow punishment methods based on shame, to be exacted based on how &amp;quot;bad&amp;quot; a computer’s moral code is. An offending would then have to rebuild a positive moral reputation before it could participate in more trusted social interactions.&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
How Justice applies to the realm of computers. This includes how a computer can be exposed to Justice vs. how the user would be involved in the Justice applied.&lt;br /&gt;
&lt;br /&gt;
==Crime and Punishment==&lt;br /&gt;
&lt;br /&gt;
A broad description of possible crimes committed within the scope of the class, and punishments for those within the system and attackers from without.&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;br /&gt;
&lt;br /&gt;
The Justice Web is a possible implementation that uses the research we have done so far. It is essentially an incrementally-deployable network system that shares resources with users within the same Justice Web, based on a morality rating. Evidence is logged so that those within the Web may be held accountable, and those without may be recorded and watched for future misbehaviour.&lt;br /&gt;
&lt;br /&gt;
===What it is===&lt;br /&gt;
&lt;br /&gt;
===What it does===&lt;br /&gt;
&lt;br /&gt;
===Managing Justice===&lt;br /&gt;
&lt;br /&gt;
==Resources==&lt;br /&gt;
[1] Posner, Richard A., &#039;&#039;Retirbution and Related Concepts of Punishment&#039;&#039;, The Journal of Legal Studies Vol. 9 No. 1, University of Chicago Press, 1980. [http://www.econ.brown.edu/fac/glenn_loury/louryhomepage/teaching/Ec%20222/posner_punishment.pdf PDF]&lt;br /&gt;
&lt;br /&gt;
[2] Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[3] Ezorsky, Gertrude, &#039;&#039;Philosophical Perspectives on Punishment&#039;&#039;, State University of New York Press, 1972. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=Jba2lFg3KOMC&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+punishment&amp;amp;ots=LuzbsNmWlg&amp;amp;sig=KTvWhaWMxIRslk38tZmucty-jNw#v=onepage&amp;amp;q=concepts%20of%20punishment&amp;amp;f=false HTML] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[4] Hobbes, Thomas, &#039;&#039;The Leviathon&#039;&#039;, first published 1651, republished by Forgotten Books, 2008. [http://books.google.ca/books?id=-Q4nPYeps6MC&amp;amp;pg=PR7&amp;amp;lpg=PR7&amp;amp;dq=the+leviathan&amp;amp;source=bl&amp;amp;ots=_vZA8CpLY0&amp;amp;sig=Wn_1z_Sqsx3-YA2dml2A458M_xU&amp;amp;hl=en&amp;amp;ei=V0R6TZT_D8XwrAGiz8zxBQ&amp;amp;sa=X&amp;amp;oi=book_result&amp;amp;ct=result&amp;amp;resnum=9&amp;amp;sqi=2&amp;amp;ved=0CFAQ6AEwCA#v=onepage&amp;amp;q&amp;amp;f=false HTML]&lt;br /&gt;
&lt;br /&gt;
[5] Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
&lt;br /&gt;
[6] Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8400</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8400"/>
		<updated>2011-03-10T18:45:36Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Mar 10 */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 08&amp;lt;/u&amp;gt;===&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 10&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
* Offender Registration: Global list of morality registered for perusal of other networks.&lt;br /&gt;
* Encrypted logs on client-side&lt;br /&gt;
** Reporting with tangible evidence&lt;br /&gt;
* Compensation for crimes&lt;br /&gt;
* virus notification&lt;br /&gt;
* detrimental to attacker buying a new computer, rather than total prevention&lt;br /&gt;
** assumption that computer can always be identified&lt;br /&gt;
* virus as umbrella group for mobile code&lt;br /&gt;
** active attackers punished differently from passive attackers&lt;br /&gt;
* Research Topics:&lt;br /&gt;
** What is Justice?&lt;br /&gt;
*** Mike&lt;br /&gt;
** Justice in terms of computers.&lt;br /&gt;
*** Matthew&lt;br /&gt;
** Crime and Punishment.&lt;br /&gt;
*** David&lt;br /&gt;
** Justice Web&lt;br /&gt;
*** Thomas McMahon&lt;br /&gt;
&lt;br /&gt;
==Research Documentation==&lt;br /&gt;
&lt;br /&gt;
===Virtual Punishment===&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
===Theory of Justice===&lt;br /&gt;
&lt;br /&gt;
Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===The Birth of Prison===&lt;br /&gt;
Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===Ecce Homo &amp;amp; The Anarchist===&lt;br /&gt;
Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
===Proof-of-Work===&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
===Gathering Evidence===&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. &lt;br /&gt;
Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8399</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8399"/>
		<updated>2011-03-10T18:41:50Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Mar 10 */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 08&amp;lt;/u&amp;gt;===&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 10&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
* Offender Registration: Global list of morality registered for perusal of other networks.&lt;br /&gt;
* Encrypted logs on client-side&lt;br /&gt;
** Reporting with tangible evidence&lt;br /&gt;
* Compensation for crimes&lt;br /&gt;
* virus notification&lt;br /&gt;
* detrimental to attacker buying a new computer, rather than total prevention&lt;br /&gt;
** assumption that computer can always be identified&lt;br /&gt;
* virus as umbrella group for mobile code&lt;br /&gt;
** active attackers punished differently from passive attackers&lt;br /&gt;
&lt;br /&gt;
==Research Documentation==&lt;br /&gt;
&lt;br /&gt;
===Virtual Punishment===&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
===Theory of Justice===&lt;br /&gt;
&lt;br /&gt;
Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===The Birth of Prison===&lt;br /&gt;
Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===Ecce Homo &amp;amp; The Anarchist===&lt;br /&gt;
Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
===Proof-of-Work===&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
===Gathering Evidence===&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. &lt;br /&gt;
Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8396</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8396"/>
		<updated>2011-03-10T18:30:20Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Mar 10 */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 08&amp;lt;/u&amp;gt;===&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 10&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
* Offender Registration: Global list of morality registered for perusal of other networks.&lt;br /&gt;
* Encrypted logs on client-side&lt;br /&gt;
** Reporting with tangible evidence&lt;br /&gt;
* Compensation for crimes&lt;br /&gt;
* virus notification&lt;br /&gt;
* detrimental to attacker buying a new computer, rather than total prevention&lt;br /&gt;
** assumption that computer can always be identified&lt;br /&gt;
&lt;br /&gt;
==Research Documentation==&lt;br /&gt;
&lt;br /&gt;
===Virtual Punishment===&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
===Theory of Justice===&lt;br /&gt;
&lt;br /&gt;
Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===The Birth of Prison===&lt;br /&gt;
Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===Ecce Homo &amp;amp; The Anarchist===&lt;br /&gt;
Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
===Proof-of-Work===&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
===Gathering Evidence===&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. &lt;br /&gt;
Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8394</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8394"/>
		<updated>2011-03-10T18:19:05Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Mar 10 */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 08&amp;lt;/u&amp;gt;===&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 10&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
* Offender Registration: Global list of morality registered for perusal of other networks.&lt;br /&gt;
* Encrypted logs on client-side&lt;br /&gt;
** Reporting with tangible evidence&lt;br /&gt;
* Compensation for crimes&lt;br /&gt;
&lt;br /&gt;
==Research Documentation==&lt;br /&gt;
&lt;br /&gt;
===Virtual Punishment===&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
===Theory of Justice===&lt;br /&gt;
&lt;br /&gt;
Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===The Birth of Prison===&lt;br /&gt;
Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===Ecce Homo &amp;amp; The Anarchist===&lt;br /&gt;
Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
===Proof-of-Work===&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
===Gathering Evidence===&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. &lt;br /&gt;
Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8393</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8393"/>
		<updated>2011-03-10T18:12:05Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Mar 10 */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 08&amp;lt;/u&amp;gt;===&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 10&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
==Research Documentation==&lt;br /&gt;
&lt;br /&gt;
===Virtual Punishment===&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
===Theory of Justice===&lt;br /&gt;
&lt;br /&gt;
Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===The Birth of Prison===&lt;br /&gt;
Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===Ecce Homo &amp;amp; The Anarchist===&lt;br /&gt;
Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
===Proof-of-Work===&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
===Gathering Evidence===&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. &lt;br /&gt;
Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8392</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8392"/>
		<updated>2011-03-10T18:11:50Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 08&amp;lt;/u&amp;gt;===&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 10&amp;lt;/u&amp;gt;===&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;br /&gt;
&lt;br /&gt;
==Research Documentation==&lt;br /&gt;
&lt;br /&gt;
===Virtual Punishment===&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
===Theory of Justice===&lt;br /&gt;
&lt;br /&gt;
Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===The Birth of Prison===&lt;br /&gt;
Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===Ecce Homo &amp;amp; The Anarchist===&lt;br /&gt;
Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
===Proof-of-Work===&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
===Gathering Evidence===&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. &lt;br /&gt;
Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8391</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8391"/>
		<updated>2011-03-10T18:06:43Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Concept: Justice Web */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
The concept of Justice as an abstact sense, without the implications of justice at the computer level.&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
How Justice applies to the realm of computers. This includes how a computer can be exposed to Justice vs. how the user would be involved in the Justice applied.&lt;br /&gt;
&lt;br /&gt;
==Crime and Punishment==&lt;br /&gt;
&lt;br /&gt;
A broad description of possible crimes committed within the scope of the class, and punishments for those within the system and attackers from without.&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;br /&gt;
&lt;br /&gt;
A description of the Justice Web implementation discussed by our group.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8390</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8390"/>
		<updated>2011-03-10T18:05:40Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Crime and Punishment */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
The concept of Justice as an abstact sense, without the implications of justice at the computer level.&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
How Justice applies to the realm of computers. This includes how a computer can be exposed to Justice vs. how the user would be involved in the Justice applied.&lt;br /&gt;
&lt;br /&gt;
==Crime and Punishment==&lt;br /&gt;
&lt;br /&gt;
A broad description of possible crimes committed within the scope of the class, and punishments for those within the system and attackers from without.&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8389</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8389"/>
		<updated>2011-03-10T18:04:27Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Justice Involving Computers */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
The concept of Justice as an abstact sense, without the implications of justice at the computer level.&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
How Justice applies to the realm of computers. This includes how a computer can be exposed to Justice vs. how the user would be involved in the Justice applied.&lt;br /&gt;
&lt;br /&gt;
==Crime and Punishment==&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8388</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8388"/>
		<updated>2011-03-10T18:03:23Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* What is Justice? */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
The concept of Justice as an abstact sense, without the implications of justice at the computer level.&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
==Crime and Punishment==&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8384</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8384"/>
		<updated>2011-03-10T18:00:19Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Potential for Punishment */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera (late addition, sorry guys)&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
==Crime and Punishment==&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8378</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8378"/>
		<updated>2011-03-10T17:04:33Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 08&amp;lt;/u&amp;gt;===&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;br /&gt;
&lt;br /&gt;
==Research Documentation==&lt;br /&gt;
&lt;br /&gt;
===Virtual Punishment===&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
===Theory of Justice===&lt;br /&gt;
&lt;br /&gt;
Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===The Birth of Prison===&lt;br /&gt;
Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
===Ecce Homo &amp;amp; The Anarchist===&lt;br /&gt;
Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
===Proof-of-Work===&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
===Gathering Evidence===&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. &lt;br /&gt;
Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8377</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8377"/>
		<updated>2011-03-10T17:01:04Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Meetings */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 08&amp;lt;/u&amp;gt;===&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;br /&gt;
&lt;br /&gt;
==Matthew==&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
==Resources==&lt;br /&gt;
&lt;br /&gt;
[1]Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
[2]Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
[3]Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
=Proof-of-work=&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
=Gathering Evidence=&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8376</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8376"/>
		<updated>2011-03-10T17:00:41Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;March 8&amp;lt;/u&amp;gt;===&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
==Matthew==&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
==Resources==&lt;br /&gt;
&lt;br /&gt;
[1]Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
[2]Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
[3]Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
=Proof-of-work=&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
=Gathering Evidence=&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8375</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8375"/>
		<updated>2011-03-10T16:57:17Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
==Matthew==&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera (late addition, sorry guys)&lt;br /&gt;
&lt;br /&gt;
==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
==Resources==&lt;br /&gt;
&lt;br /&gt;
[1]Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
[2]Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
[3]Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
=Proof-of-work=&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
=Gathering Evidence=&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;br /&gt;
&lt;br /&gt;
=March 8=&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8374</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8374"/>
		<updated>2011-03-10T16:56:36Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Members */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera (late addition, sorry guys)&lt;br /&gt;
&lt;br /&gt;
Note: research so far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
==Potential for Punishment==&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8373</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8373"/>
		<updated>2011-03-10T16:54:41Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera (late addition, sorry guys)&lt;br /&gt;
&lt;br /&gt;
Note: Discussion thus far moved to Discussion section.&lt;br /&gt;
&lt;br /&gt;
==What is Justice?==&lt;br /&gt;
&lt;br /&gt;
==Justice Involving Computers==&lt;br /&gt;
&lt;br /&gt;
==Potential for Punishment==&lt;br /&gt;
&lt;br /&gt;
==Concept: Justice Web==&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8372</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8372"/>
		<updated>2011-03-10T16:51:40Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: Replaced content with &amp;quot;==Members==
* Matthew Chou
* Mike Preston
* Thomas McMahon
* David Barrera (late addition, sorry guys)

Note: Discussion thus far moved to Discussion section.&amp;quot;&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera (late addition, sorry guys)&lt;br /&gt;
&lt;br /&gt;
Note: Discussion thus far moved to Discussion section.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8369</id>
		<title>Talk:DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=Talk:DistOS-2011W_Justice&amp;diff=8369"/>
		<updated>2011-03-10T16:29:45Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Discussion== &lt;br /&gt;
Put any notes or links you might have that you are currently reading or might want to read later so others can read them too!&lt;br /&gt;
&lt;br /&gt;
=Matthew=&lt;br /&gt;
I am currently reading a part of this book for some details on virtual punishment and a bit of history that this guy wrote about, but not sure if there is much there yet. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=KacfpI0zYAUC&amp;amp;oi=fnd&amp;amp;pg=PA206&amp;amp;dq=punishing+computers&amp;amp;ots=YhI8lfMo1F&amp;amp;sig=c7MqOVjR-9QKjj5_ANi0yyxYiAA#v=onepage&amp;amp;q=punishing%20computers&amp;amp;f=false link] --[[User:Mchou2|Mchou2]] 03:29, 3 March 2011 (UTC)&lt;br /&gt;
&lt;br /&gt;
[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.2723&amp;amp;rep=rep1&amp;amp;type=pdf Responsible Computers?]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera (late addition, sorry guys)&lt;br /&gt;
&lt;br /&gt;
==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
==Resources==&lt;br /&gt;
&lt;br /&gt;
[1]Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
[2]Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
[3]Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
=Proof-of-work=&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
=Gathering Evidence=&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;br /&gt;
&lt;br /&gt;
=March 8=&lt;br /&gt;
*&#039;&#039;&#039;Definition of Justice&#039;&#039;&#039; - Can we separate the computer punishment from the user punishment?&lt;br /&gt;
*&#039;&#039;&#039;Transparency&#039;&#039;&#039; - keeping &amp;quot;rap sheets&amp;quot; on what systems are doing/have done. If you were wrongfully accused for participating in a malicious attack, this can be clarified&lt;br /&gt;
*&#039;&#039;&#039;Punishment&#039;&#039;&#039; - Computational puzzles for fighting unsolicited inbound traffic. &lt;br /&gt;
*&#039;&#039;&#039;Morality rating&#039;&#039;&#039; - Systems get a &amp;quot;moral rating&amp;quot; that can go up or down. Based on this rating, more or less trust can be given to that system.&lt;br /&gt;
&lt;br /&gt;
Capital punishment? &lt;br /&gt;
Financial sanction or imprisonment are our current way of punishment. they&#039;re expensive (maintain databases, keeping state, paying for prisons). &lt;br /&gt;
&lt;br /&gt;
bodily harm - limited time to perform. the fact that they&#039;ve been punished is visible. losing hands, losing eyes, people can see that. information propagates because the authorities make an example of someone. &lt;br /&gt;
&lt;br /&gt;
maybe the solution is to restrict protocols if you have a low morality rating. for e.g., you can restrict encryption and compression, which means anything you do will be publicly visible.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8243</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8243"/>
		<updated>2011-03-08T17:38:10Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Gathering Evidence */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera (late addition, sorry guys)&lt;br /&gt;
&lt;br /&gt;
==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
==Resources==&lt;br /&gt;
&lt;br /&gt;
[1]Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
[2]Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
[3]Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
=Proof-of-work=&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
=Gathering Evidence=&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=01219052&lt;br /&gt;
&lt;br /&gt;
Above is a paper that discusses the idea of computer forensics, and what is needed in order to gather and manage evidence. Although it is meant to be applied to a human level of judgement, computers may be capable of processing this evidence effectively. Logs maintained by routers and local devices may be used as evidence, provided that there be a way to encrypt the data in a way that preserves the original form. It also discusses the challenge of presenting computer related evidence to non-technical jurors, but this is not a concern for computer level management. All that is required for computer forensics to work is additional software being run on select computers to process and preserve any evidence gathered.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8237</id>
		<title>DistOS-2011W Justice</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Justice&amp;diff=8237"/>
		<updated>2011-03-08T16:51:18Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;==Members==&lt;br /&gt;
* Matthew Chou&lt;br /&gt;
* Mike Preston&lt;br /&gt;
* Thomas McMahon&lt;br /&gt;
* David Barrera (late addition, sorry guys)&lt;br /&gt;
&lt;br /&gt;
==Meetings==&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 01&amp;lt;/u&amp;gt;===&lt;br /&gt;
Early discussions on how we would define justice:&lt;br /&gt;
* what are the components of justice?&lt;br /&gt;
* should justice involve preventative measure or should it be strictly reactive?&lt;br /&gt;
&lt;br /&gt;
How would evidence be collected and logged?&lt;br /&gt;
&lt;br /&gt;
Discussions on what &amp;quot;punishment&amp;quot; means when referring to computers:&lt;br /&gt;
* What can we do to punish or penalize computers?&lt;br /&gt;
* Does it make sense to punish computers?&lt;br /&gt;
&lt;br /&gt;
Discussions on how human penal systems work:&lt;br /&gt;
* do we want computer justice to be used to dissuade deviant behaviour or should it be used to punish those who have committed &amp;quot;bad&amp;quot; acts?&lt;br /&gt;
* should we implement a system that catches/punishes all bad acts or just punish reported acts?&lt;br /&gt;
* how will we classify deviant behaviour?&lt;br /&gt;
** by the act itself &lt;br /&gt;
** by the results of the act&lt;br /&gt;
&lt;br /&gt;
Discussed how there would need to be some sort of hierarchical justice system with figure heads who manage justice activities for their specific region:&lt;br /&gt;
* collective internet justice: &amp;lt;b&amp;gt;Justice Web&amp;lt;/b&amp;gt; or &amp;lt;b&amp;gt;JLA&amp;lt;/b&amp;gt; (Justice Link Assessment)&lt;br /&gt;
* each region patrolled by a justice managing unit:&lt;br /&gt;
** Internet Batman (Gotham), Internet Superman (Metropolis), etc.&lt;br /&gt;
&lt;br /&gt;
Divided the task of finding research papers into 3 sections:&lt;br /&gt;
* current ways to &amp;quot;punish&amp;quot; computers (Matthew)&lt;br /&gt;
* ways to collect, log, categorize evidence of inappropriate behaviour (Thomas)&lt;br /&gt;
* human methods of justice, various penal systems in our current and historical societies (Mike)&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
===&amp;lt;u&amp;gt;Mar 03&amp;lt;/u&amp;gt;===&lt;br /&gt;
Initial discussions focused on how we were having difficulty finding papers related to the concept of justice in computers, so we focused on trying to determine exactly what justice should be in the realm of distributed computing:&lt;br /&gt;
* punishing computers is difficult as computers do not care what task they are given, they just complete computations.&lt;br /&gt;
* punishing people is not really the focus we need as that is what human laws are for.&lt;br /&gt;
* if there is some way to punish a computer, does it make sense to punish computers that are being used for &amp;quot;bad&amp;quot; actions if the owner of the computer is unaware of this activity.&lt;br /&gt;
** does this punishment really have a greater effect on the owner of the computer than the computer itself?&lt;br /&gt;
&lt;br /&gt;
Our new focus is to try and narrow down if the concept of justice actually has a place in distributed computing:&lt;br /&gt;
* determine what purpose justice would serve...why would we have it?&lt;br /&gt;
** if we decide justice is a necessary concept, the focus will become what is a &amp;quot;fair&amp;quot; way to apply punishment for &amp;quot;bad&amp;quot; actions.&lt;br /&gt;
** if justice does not have a useful purpose then we must detail the reason that it is not beneficial.&lt;br /&gt;
&lt;br /&gt;
==Resources==&lt;br /&gt;
&lt;br /&gt;
[1]Rawls, John, &amp;lt;i&amp;gt;A Theory of Justice: Revised Edition&amp;lt;/i&amp;gt;, Harvard University Press, 2003. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=kvpby7HtAe0C&amp;amp;oi=fnd&amp;amp;pg=PR11&amp;amp;dq=concepts+of+justice&amp;amp;ots=tggvx5zc67&amp;amp;sig=s4OHDBhkpDzumtlH0mIUO7cbCys#v=onepage&amp;amp;q=concepts%20of%20justice&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* This book provides a view of Justice that may serve the purpose of distributed computing. Rawls describes justice as serving two primary functions;      &lt;br /&gt;
       1. Assign rights and duties for the basic institutions of society.&lt;br /&gt;
       2. Describe the best way to distribute the benefits and burdens of society.&lt;br /&gt;
*If we take this view of justice, as opposed to a penalty-centric view, then justice may have a place in distributed computing. For our purposes, justice could be the basic guidelines to which all members of a distributed society must conform in order for the system to be stable and efficient. Obviously this view is an &amp;quot;all-in&amp;quot; type approach and may be more difficult to describe in terms of being incrementally deployable.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
[2]Foucault, Michel, &amp;lt;i&amp;gt;Discipline &amp;amp; Punish: The Birth of the Prison&amp;lt;/i&amp;gt;, Random House, New York, 1995. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=pWv1R2o_PWsC&amp;amp;oi=fnd&amp;amp;pg=PP9&amp;amp;dq=discipline+and+punish&amp;amp;ots=tL8pS67AAh&amp;amp;sig=L9PEOPaNiLAxYCkqF627K1la5Hw#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* Foucault&#039;s book focuses on how punishment evolved from medevil methods &amp;quot;draw and quarter&amp;quot; to modern prison methods. These two methods of justiceare differentiated by the way in which punishment is carried out. For medevil, or &amp;quot;Monarchical Punishment&amp;quot;, the population is discouraged from doing bad acts by the public, and brutal, way that punishment is exacted. The punishments included torture and executions. On the other hand, Foucault discusses &amp;quot;Disciplinary Punishment&amp;quot; where there are people deemed as experts who have power over the perpetrator of a &amp;quot;bad&amp;quot; act and handle the punishment of the individual. An example of this is a prison guard who determines how long a prisoner stays in jail.&lt;br /&gt;
*For a distributed computing system, this provides a couple of ways that justice could be enforced. If we think of the general distributed system as a free zone in which computers can act how they wish but there are laws in place to describe &amp;quot;bad&amp;quot; acts. If a computer is caught and convicted of doing something against the described laws, then the computer could be tortured (forced to provide more resources to other computers), executed (completly removed from the system) or potentially placed under the care of a supervisor computer who will allow the &amp;quot;bad&amp;quot; computer to continue to participate in certain, restricted actions until the professional (supervisor) computer approves of releasing the &amp;quot;bad&amp;quot; computer back to the general system. The supervisor computer may actually be controlled by a human who is trying to resolve the issue on the offending computer.&lt;br /&gt;
* Another concept worth investigating is that of Foucault&#039;s &amp;quot;Panopticon&amp;quot; which is a prison in which everything can be seen. This can also be extended from the strictly prison sense to the level of daily interactions between people and the idea of shame. Most rules are followed because of the knowledge that those around you will see what you have done and their view of you will change, you will have a social stygma. If this is adopted by the computers, through some reputation mechanism, then maybe distributed computing relationships could be formed and altered based on the actions conducted by individual computers.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;br\&amp;gt;&amp;lt;br\&amp;gt;&lt;br /&gt;
&lt;br /&gt;
[3]Nietzsche, Friedrich, &amp;lt;i&amp;gt;Ecce Homo &amp;amp; The Anarchist&amp;lt;/i&amp;gt; translated by Thomas Wayne, New York, 2004. [http://books.google.ca/books?hl=en&amp;amp;lr=&amp;amp;id=xx6IfcqRvbwC&amp;amp;oi=fnd&amp;amp;pg=PA1&amp;amp;dq=ecce+homo&amp;amp;ots=44YGJlQ3Hb&amp;amp;sig=nzwX1IBP-Qj-TOnlmBOqGWUk810#v=onepage&amp;amp;q&amp;amp;f=false PDF] (preview copy)&lt;br /&gt;
* If we were going to add shame/stygma to computers, there would need to be some mechanism to manage what is good and what is bad. Nietzsche&#039;s work could provide a basis for this computer moral code as he describes two different forms of morality based on two different social position: &amp;quot;master-morality&amp;quot; and &amp;quot;slave-morality&amp;quot;.&lt;br /&gt;
** Master-morality is split based on good vs. bad, for example, good would be things like wealth, strength, health, and power, while bad is associated terms like poor, weak, sick, and pathetic.&lt;br /&gt;
** Slave-morality is split on good vs. evil, for example, good would be terms like charity, piety, restraint, meekness, submission, while evil terms are worldly, cruel, selfish, wealthy, and aggressive.&lt;br /&gt;
* Although some of these terms make no sense in the realm of computers, others certainly could work as a basis for computer morality. For example, if there were measure of strength, health, wealth based on network and data concepts like bandwidth, latency, data integrity, etc. than certain computers could be more &amp;quot;good&amp;quot; than others. Similarly, if computers were acting selfishly, cruelly or aggressively (say DoS or spam) then those computers would be considered as morally &amp;quot;bad&amp;quot;. Based on these moral evaluations, computers could have relationships created or destroyed. Moreover, relationship parameters could be given to computers so that if you don&#039;t care how something gets accomplished (whether it is morally good or not) then you could tell your computer to allow less moral interactions to occur.&lt;br /&gt;
*If this morality was tied to the reputation component, then all computers would be able to know how other computers &amp;quot;socially&amp;quot; behave. This would further allow punishment methods, as described in the above Foucault section, to be handed out based on how &amp;quot;bad&amp;quot; a computer is and the affending computer can only be released when it&#039;s morality is deemed appropriate by the supervising (professional) computer.&lt;br /&gt;
&lt;br /&gt;
=Proof-of-work=&lt;br /&gt;
There has been a lot of research done in the area of computational puzzles to fight spam. The idea is that there is currently very little cost associated with sending spam (much less than .01c per email), so we want to make it a bit more &amp;quot;expensive&amp;quot; for spammers to achieve their goal. One solution is to have any email-sending computer perform some type of computational puzzle every time an email is sent. The result of the computation is appended to the email and can be verified by the recipient. One example is to find a string that when hashed gives a result smaller or larger than a specific value. You can statistically predict how long such a computation would take, and you could tweak it to be some particular value (10s, 1m, etc). &lt;br /&gt;
&lt;br /&gt;
I see this as being related to justice, because each self-governing entity can set up these proof-of-work requirements and adjust the difficulty for &amp;quot;trusted&amp;quot; entities and &amp;quot;untrusted&amp;quot; ones. The difficulty can also be increased for entities that misbehave, resulting in a kind of punishment. These punished systems would have to do more computation (e.g., 10m, 1hr) before they&#039;re allowed to communicate with someone else. &lt;br /&gt;
&lt;br /&gt;
I have some ideas on how you could technically do this, which we can discuss in class. And now some links:&lt;br /&gt;
&lt;br /&gt;
[https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6 https://tools.ietf.org/html/draft-jennings-sip-hashcash-06#page-6]&lt;br /&gt;
[http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx http://research.microsoft.com/en-us/projects/pennyblack/spam-com.aspx]&lt;br /&gt;
&lt;br /&gt;
=Gathering Evidence=&lt;br /&gt;
&lt;br /&gt;
http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4489680&amp;amp;tag=1&lt;br /&gt;
&lt;br /&gt;
Above is a paper that proposes using statistical data to differentiate between legitimate and illegitimate traffic during a DDoS attack. While the paper proposes the statistics to be used for blocking bad traffic, the same logic can be applied to gathering evidence against the attackers of a DDoS. It gets pretty heavy into the statistical analysis, so it&#039;d probably be better to read the paper than me attempting to explain it. Basically, it&#039;s meant to detect a DDoS that is purposefully disguised as a traffic flood. This means that Justice can be properly served to malicious computers as opposed to too many computers wanting your resources.&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7873</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7873"/>
		<updated>2011-03-03T12:16:19Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=cha0sPod=&lt;br /&gt;
cha0sPod is currently offline, as I am setting a pod up on a remote server rather than a home server to improve performance. Link will be posted in this section upon it going live.&lt;br /&gt;
==Introduction==&lt;br /&gt;
For my implementation report, I will be setting up and using a server running Diaspora. Diaspora is a distributed social network meant to directly compete with centralized social networks such as Facebook and Twitter. My report will focus on my personal experience with Diaspora, both as an administrator as well as a client. Due to time constraints, most of the administrator reporting will involve setting up the pod, while the client portion will focus on the interactions of two test user accounts.&lt;br /&gt;
&lt;br /&gt;
Section 2 describes the specifics of Diaspora, particularly how it functions from the client&#039;s perspective, Section 3 covers my experience in setting up a Diaspora pod, Section 4 includes additional details in regards to the management of the cha0sPod, Section 5 covers my experience in using Diaspora as a client, Section 6 contains my conclusion, and Section 7 includes all references made in the document.&lt;br /&gt;
&lt;br /&gt;
==What Is Diaspora?==&lt;br /&gt;
===Diaspora: Distributed Social Networking===&lt;br /&gt;
Diaspora is designed to decentralize social networks, so that privacy can more easily be managed by the individual user. With a centralized social network, all information, messages, and pictures posted are effectively owned by the corporation hosting the network. The idea of sacrificing all of your privacy in exchange for a service is exactly what Diaspora hopes to prevent [http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. This section is pretty straight forward, it&#039;s just installing packages from command line. These instructions can be found on the wiki setup page for Diaspora, linked above.&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
&lt;br /&gt;
             gem install passenger&lt;br /&gt;
             passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: Poddery [https://poddery.com]. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: Diasperse [https://the.diasperse.com]. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. As of right now, setting up a personal pod can be fairly tricky, as there are a few odd bugs that will hinder your progress unless you figure out what is going wrong. I myself had to manually create one of the datbases, along with opting to use a different server package than the default. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent Diaspora from being used as a legitimate social network at this point in time. Specifically, there appears to be an issue with communication between pods at this moment. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods [https://github.com/diaspora/diaspora/wiki/Security-Architecture-Proposal]. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
[1] Jim Dwyer (May 11, 2010). &#039;&#039;Four Nerds and a Cry to Arms Against Facebook&#039;&#039;. February 26, 2011, http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1&lt;br /&gt;
&lt;br /&gt;
[2] &#039;&#039;Diaspora Home Page&#039;&#039;. January 31, 2011, https://joindiaspora.com/&lt;br /&gt;
&lt;br /&gt;
[3] &#039;&#039;Aspect FAQ&#039;&#039;. February 16, 2011, https://github.com/diaspora/diaspora/wiki/Aspects-FAQ&lt;br /&gt;
&lt;br /&gt;
[4] &#039;&#039;Installing an Running Diaspora&#039;&#039;. February 16, 2011, https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora&lt;br /&gt;
&lt;br /&gt;
[5] Randall Munroe. &#039;&#039;xkcd: Sandwich&#039;&#039;. February 28, 2011, http://xkcd.com/149/&lt;br /&gt;
&lt;br /&gt;
[6] &#039;&#039;Installing on Ubuntu Apache&#039;&#039;. February 22, 2011, https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache&lt;br /&gt;
&lt;br /&gt;
[7] &#039;&#039;Diaspora: Poddery&#039;&#039;. February 25, 2011, https://poddery.com/&lt;br /&gt;
&lt;br /&gt;
[8] &#039;&#039;Diaspora: Diasperse&#039;&#039;. February 25, 2011, https://the.diasperse.com/&lt;br /&gt;
&lt;br /&gt;
[9] &#039;&#039;Diaspora Security Architecture Proposal&#039;&#039;. February 28, 2011, https://github.com/diaspora/diaspora/wiki/Security-Architecture-Proposal&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7698</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7698"/>
		<updated>2011-03-01T14:29:32Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Attaching Pod to Apache */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=cha0sPod=&lt;br /&gt;
cha0sPod is currently offline, as I am setting a pod up on a remote server rather than a home server to improve performance. Link will be posted in this section upon it going live.&lt;br /&gt;
==Introduction==&lt;br /&gt;
For my implementation report, I will be setting up and using a server running Diaspora. Diaspora is a distributed social network meant to directly compete with centralized social networks such as Facebook and Twitter. My report will focus on my personal experience with Diaspora, both as an administrator as well as a client. Due to time constraints, most of the administrator reporting will involve setting up the pod, while the client portion will focus on the interactions of two test user accounts.&lt;br /&gt;
&lt;br /&gt;
Section 2 describes the specifics of Diaspora, particularly how it functions from the client&#039;s perspective, Section 3 covers my experience in setting up a Diaspora pod, Section 4 includes additional details in regards to the management of the cha0sPod, Section 5 covers my experience in using Diaspora as a client, Section 6 contains my conclusion, and Section 7 includes all references made in the document.&lt;br /&gt;
&lt;br /&gt;
==What Is Diaspora?==&lt;br /&gt;
===Diaspora: Distributed Social Networking===&lt;br /&gt;
Diaspora is designed to decentralize social networks, so that privacy can more easily be managed by the individual user. With a centralized social network, all information, messages, and pictures posted are effectively owned by the corporation hosting the network. The idea of sacrificing all of your privacy in exchange for a service is exactly what Diaspora hopes to prevent [http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
&lt;br /&gt;
             gem install passenger&lt;br /&gt;
             passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: Poddery [https://poddery.com]. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: Diasperse [https://the.diasperse.com]. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods [https://github.com/diaspora/diaspora/wiki/Security-Architecture-Proposal]. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
[1] Jim Dwyer (May 11, 2010). &#039;&#039;Four Nerds and a Cry to Arms Against Facebook&#039;&#039;. February 26, 2011, http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1&lt;br /&gt;
&lt;br /&gt;
[2] &#039;&#039;Diaspora Home Page&#039;&#039;. January 31, 2011, https://joindiaspora.com/&lt;br /&gt;
&lt;br /&gt;
[3] &#039;&#039;Aspect FAQ&#039;&#039;. February 16, 2011, https://github.com/diaspora/diaspora/wiki/Aspects-FAQ&lt;br /&gt;
&lt;br /&gt;
[4] &#039;&#039;Installing an Running Diaspora&#039;&#039;. February 16, 2011, https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora&lt;br /&gt;
&lt;br /&gt;
[5] Randall Munroe. &#039;&#039;xkcd: Sandwich&#039;&#039;. February 28, 2011, http://xkcd.com/149/&lt;br /&gt;
&lt;br /&gt;
[6] &#039;&#039;Installing on Ubuntu Apache&#039;&#039;. February 22, 2011, https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache&lt;br /&gt;
&lt;br /&gt;
[7] &#039;&#039;Diaspora: Poddery&#039;&#039;. February 25, 2011, https://poddery.com/&lt;br /&gt;
&lt;br /&gt;
[8] &#039;&#039;Diaspora: Diasperse&#039;&#039;. February 25, 2011, https://the.diasperse.com/&lt;br /&gt;
&lt;br /&gt;
[9] &#039;&#039;Diaspora Security Architecture Proposal&#039;&#039;. February 28, 2011, https://github.com/diaspora/diaspora/wiki/Security-Architecture-Proposal&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7697</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7697"/>
		<updated>2011-03-01T14:26:03Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=cha0sPod=&lt;br /&gt;
cha0sPod is currently offline, as I am setting a pod up on a remote server rather than a home server to improve performance. Link will be posted in this section upon it going live.&lt;br /&gt;
==Introduction==&lt;br /&gt;
For my implementation report, I will be setting up and using a server running Diaspora. Diaspora is a distributed social network meant to directly compete with centralized social networks such as Facebook and Twitter. My report will focus on my personal experience with Diaspora, both as an administrator as well as a client. Due to time constraints, most of the administrator reporting will involve setting up the pod, while the client portion will focus on the interactions of two test user accounts.&lt;br /&gt;
&lt;br /&gt;
Section 2 describes the specifics of Diaspora, particularly how it functions from the client&#039;s perspective, Section 3 covers my experience in setting up a Diaspora pod, Section 4 includes additional details in regards to the management of the cha0sPod, Section 5 covers my experience in using Diaspora as a client, Section 6 contains my conclusion, and Section 7 includes all references made in the document.&lt;br /&gt;
&lt;br /&gt;
==What Is Diaspora?==&lt;br /&gt;
===Diaspora: Distributed Social Networking===&lt;br /&gt;
Diaspora is designed to decentralize social networks, so that privacy can more easily be managed by the individual user. With a centralized social network, all information, messages, and pictures posted are effectively owned by the corporation hosting the network. The idea of sacrificing all of your privacy in exchange for a service is exactly what Diaspora hopes to prevent [http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
gem install passenger&lt;br /&gt;
&lt;br /&gt;
passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: Poddery [https://poddery.com]. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: Diasperse [https://the.diasperse.com]. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods [https://github.com/diaspora/diaspora/wiki/Security-Architecture-Proposal]. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
[1] Jim Dwyer (May 11, 2010). &#039;&#039;Four Nerds and a Cry to Arms Against Facebook&#039;&#039;. February 26, 2011, http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1&lt;br /&gt;
&lt;br /&gt;
[2] &#039;&#039;Diaspora Home Page&#039;&#039;. January 31, 2011, https://joindiaspora.com/&lt;br /&gt;
&lt;br /&gt;
[3] &#039;&#039;Aspect FAQ&#039;&#039;. February 16, 2011, https://github.com/diaspora/diaspora/wiki/Aspects-FAQ&lt;br /&gt;
&lt;br /&gt;
[4] &#039;&#039;Installing an Running Diaspora&#039;&#039;. February 16, 2011, https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora&lt;br /&gt;
&lt;br /&gt;
[5] Randall Munroe. &#039;&#039;xkcd: Sandwich&#039;&#039;. February 28, 2011, http://xkcd.com/149/&lt;br /&gt;
&lt;br /&gt;
[6] &#039;&#039;Installing on Ubuntu Apache&#039;&#039;. February 22, 2011, https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache&lt;br /&gt;
&lt;br /&gt;
[7] &#039;&#039;Diaspora: Poddery&#039;&#039;. February 25, 2011, https://poddery.com/&lt;br /&gt;
&lt;br /&gt;
[8] &#039;&#039;Diaspora: Diasperse&#039;&#039;. February 25, 2011, https://the.diasperse.com/&lt;br /&gt;
&lt;br /&gt;
[9] &#039;&#039;Diaspora Security Architecture Proposal&#039;&#039;. February 28, 2011, https://github.com/diaspora/diaspora/wiki/Security-Architecture-Proposal&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7696</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7696"/>
		<updated>2011-03-01T14:17:27Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* References */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;[http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
gem install passenger&lt;br /&gt;
&lt;br /&gt;
passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: Poddery [https://poddery.com]. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: Diasperse [https://the.diasperse.com]. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods [https://github.com/diaspora/diaspora/wiki/Security-Architecture-Proposal]. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
[1] Jim Dwyer (May 11, 2010). &#039;&#039;Four Nerds and a Cry to Arms Against Facebook&#039;&#039;. February 26, 2011, http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1&lt;br /&gt;
&lt;br /&gt;
[2] &#039;&#039;Diaspora Home Page&#039;&#039;. January 31, 2011, https://joindiaspora.com/&lt;br /&gt;
&lt;br /&gt;
[3] &#039;&#039;Aspect FAQ&#039;&#039;. February 16, 2011, https://github.com/diaspora/diaspora/wiki/Aspects-FAQ&lt;br /&gt;
&lt;br /&gt;
[4] &#039;&#039;Installing an Running Diaspora&#039;&#039;. February 16, 2011, https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora&lt;br /&gt;
&lt;br /&gt;
[5] Randall Munroe. &#039;&#039;xkcd: Sandwich&#039;&#039;. February 28, 2011, http://xkcd.com/149/&lt;br /&gt;
&lt;br /&gt;
[6] &#039;&#039;Installing on Ubuntu Apache&#039;&#039;. February 22, 2011, https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache&lt;br /&gt;
&lt;br /&gt;
[7] &#039;&#039;Diaspora: Poddery&#039;&#039;. February 25, 2011, https://poddery.com/&lt;br /&gt;
&lt;br /&gt;
[8] &#039;&#039;Diaspora: Diasperse&#039;&#039;. February 25, 2011, https://the.diasperse.com/&lt;br /&gt;
&lt;br /&gt;
[9] &#039;&#039;Diaspora Security Architecture Proposal&#039;&#039;. February 28, 2011, https://github.com/diaspora/diaspora/wiki/Security-Architecture-Proposal&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7695</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7695"/>
		<updated>2011-03-01T14:17:11Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* References */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;[http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
gem install passenger&lt;br /&gt;
&lt;br /&gt;
passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: Poddery [https://poddery.com]. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: Diasperse [https://the.diasperse.com]. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods [https://github.com/diaspora/diaspora/wiki/Security-Architecture-Proposal]. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
Give references in proper form (not just URLs if possible, give dates of access).&lt;br /&gt;
&lt;br /&gt;
[1] Jim Dwyer (May 11, 2010). &#039;&#039;Four Nerds and a Cry to Arms Against Facebook&#039;&#039;. February 26, 2011, http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1&lt;br /&gt;
&lt;br /&gt;
[2] &#039;&#039;Diaspora Home Page&#039;&#039;. January 31, 2011, https://joindiaspora.com/&lt;br /&gt;
&lt;br /&gt;
[3] &#039;&#039;Aspect FAQ&#039;&#039;. February 16, 2011, https://github.com/diaspora/diaspora/wiki/Aspects-FAQ&lt;br /&gt;
&lt;br /&gt;
[4] &#039;&#039;Installing an Running Diaspora&#039;&#039;. February 16, 2011, https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora&lt;br /&gt;
&lt;br /&gt;
[5] Randall Munroe. &#039;&#039;xkcd: Sandwich&#039;&#039;. February 28, 2011, http://xkcd.com/149/&lt;br /&gt;
&lt;br /&gt;
[6] &#039;&#039;Installing on Ubuntu Apache&#039;&#039;. February 22, 2011, https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache&lt;br /&gt;
&lt;br /&gt;
[7] &#039;&#039;Diaspora: Poddery&#039;&#039;. February 25, 2011, https://poddery.com/&lt;br /&gt;
&lt;br /&gt;
[8] &#039;&#039;Diaspora: Diasperse&#039;&#039;. February 25, 2011, https://the.diasperse.com/&lt;br /&gt;
&lt;br /&gt;
[9] &#039;&#039;Diaspora Security Architecture Proposal&#039;&#039;. February 28, 2011, https://github.com/diaspora/diaspora/wiki/Security-Architecture-Proposal&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7694</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7694"/>
		<updated>2011-03-01T14:16:56Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Future Work */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;[http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
gem install passenger&lt;br /&gt;
&lt;br /&gt;
passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: Poddery [https://poddery.com]. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: Diasperse [https://the.diasperse.com]. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods [https://github.com/diaspora/diaspora/wiki/Security-Architecture-Proposal]. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
Give references in proper form (not just URLs if possible, give dates of access).&lt;br /&gt;
&lt;br /&gt;
[1] Jim Dwyer (May 11, 2010). &#039;&#039;Four Nerds and a Cry to Arms Against Facebook&#039;&#039;. February 26, 2011, http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1&lt;br /&gt;
&lt;br /&gt;
[2] &#039;&#039;Diaspora Home Page&#039;&#039;. January 31, 2011, https://joindiaspora.com/&lt;br /&gt;
&lt;br /&gt;
[3] &#039;&#039;Aspect FAQ&#039;&#039;. February 16, 2011, https://github.com/diaspora/diaspora/wiki/Aspects-FAQ&lt;br /&gt;
&lt;br /&gt;
[4] &#039;&#039;Installing an Running Diaspora&#039;&#039;. February 16, 2011,&lt;br /&gt;
 https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora&lt;br /&gt;
&lt;br /&gt;
[5] Randall Munroe. &#039;&#039;xkcd: Sandwich&#039;&#039;. February 28, 2011, http://xkcd.com/149/&lt;br /&gt;
&lt;br /&gt;
[6] &#039;&#039;Installing on Ubuntu Apache&#039;&#039;. February 22, 2011, https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache&lt;br /&gt;
&lt;br /&gt;
[7] &#039;&#039;Diaspora: Poddery&#039;&#039;. February 25, 2011, https://poddery.com/&lt;br /&gt;
&lt;br /&gt;
[8] &#039;&#039;Diaspora: Diasperse&#039;&#039;. February 25, 2011, https://the.diasperse.com/&lt;br /&gt;
&lt;br /&gt;
[9] &#039;&#039;Diaspora Security Architecture Proposal&#039;&#039;. February 28, 2011, https://github.com/diaspora/diaspora/wiki/Security-Architecture-Proposal&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7693</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7693"/>
		<updated>2011-03-01T14:16:50Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* References */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;[http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
gem install passenger&lt;br /&gt;
&lt;br /&gt;
passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: Poddery [https://poddery.com]. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: Diasperse [https://the.diasperse.com]. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
Give references in proper form (not just URLs if possible, give dates of access).&lt;br /&gt;
&lt;br /&gt;
[1] Jim Dwyer (May 11, 2010). &#039;&#039;Four Nerds and a Cry to Arms Against Facebook&#039;&#039;. February 26, 2011, http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1&lt;br /&gt;
&lt;br /&gt;
[2] &#039;&#039;Diaspora Home Page&#039;&#039;. January 31, 2011, https://joindiaspora.com/&lt;br /&gt;
&lt;br /&gt;
[3] &#039;&#039;Aspect FAQ&#039;&#039;. February 16, 2011, https://github.com/diaspora/diaspora/wiki/Aspects-FAQ&lt;br /&gt;
&lt;br /&gt;
[4] &#039;&#039;Installing an Running Diaspora&#039;&#039;. February 16, 2011,&lt;br /&gt;
 https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora&lt;br /&gt;
&lt;br /&gt;
[5] Randall Munroe. &#039;&#039;xkcd: Sandwich&#039;&#039;. February 28, 2011, http://xkcd.com/149/&lt;br /&gt;
&lt;br /&gt;
[6] &#039;&#039;Installing on Ubuntu Apache&#039;&#039;. February 22, 2011, https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache&lt;br /&gt;
&lt;br /&gt;
[7] &#039;&#039;Diaspora: Poddery&#039;&#039;. February 25, 2011, https://poddery.com/&lt;br /&gt;
&lt;br /&gt;
[8] &#039;&#039;Diaspora: Diasperse&#039;&#039;. February 25, 2011, https://the.diasperse.com/&lt;br /&gt;
&lt;br /&gt;
[9] &#039;&#039;Diaspora Security Architecture Proposal&#039;&#039;. February 28, 2011, https://github.com/diaspora/diaspora/wiki/Security-Architecture-Proposal&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7692</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7692"/>
		<updated>2011-03-01T14:15:09Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Stage Three: Communication Between Two Established Pods */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;[http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
gem install passenger&lt;br /&gt;
&lt;br /&gt;
passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: Poddery [https://poddery.com]. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: Diasperse [https://the.diasperse.com]. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
Give references in proper form (not just URLs if possible, give dates of access).&lt;br /&gt;
&lt;br /&gt;
[1] Jim Dwyer (May 11, 2010). &#039;&#039;Four Nerds and a Cry to Arms Against Facebook&#039;&#039;. February 26, 2011, http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1&lt;br /&gt;
&lt;br /&gt;
[2] &#039;&#039;Diaspora Home Page&#039;&#039;. January 31, 2011, https://joindiaspora.com/&lt;br /&gt;
&lt;br /&gt;
[3] &#039;&#039;Aspect FAQ&#039;&#039;. February 16, 2011, [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7691</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7691"/>
		<updated>2011-03-01T14:13:30Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Stage One: Communication Within Established Pod */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;[http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
gem install passenger&lt;br /&gt;
&lt;br /&gt;
passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: Poddery [https://poddery.com]. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: the.diasperse.com. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
Give references in proper form (not just URLs if possible, give dates of access).&lt;br /&gt;
&lt;br /&gt;
[1] Jim Dwyer (May 11, 2010). &#039;&#039;Four Nerds and a Cry to Arms Against Facebook&#039;&#039;. February 26, 2011, http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1&lt;br /&gt;
&lt;br /&gt;
[2] &#039;&#039;Diaspora Home Page&#039;&#039;. January 31, 2011, https://joindiaspora.com/&lt;br /&gt;
&lt;br /&gt;
[3] &#039;&#039;Aspect FAQ&#039;&#039;. February 16, 2011, [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7690</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7690"/>
		<updated>2011-03-01T14:08:49Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* References */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;[http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
gem install passenger&lt;br /&gt;
&lt;br /&gt;
passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: www.poddery.com. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: the.diasperse.com. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
Give references in proper form (not just URLs if possible, give dates of access).&lt;br /&gt;
&lt;br /&gt;
[1] Jim Dwyer (May 11, 2010). &#039;&#039;Four Nerds and a Cry to Arms Against Facebook&#039;&#039;. February 26, 2011, http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1&lt;br /&gt;
&lt;br /&gt;
[2] &#039;&#039;Diaspora Home Page&#039;&#039;. January 31, 2011, https://joindiaspora.com/&lt;br /&gt;
&lt;br /&gt;
[3] &#039;&#039;Aspect FAQ&#039;&#039;. February 16, 2011, [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7689</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7689"/>
		<updated>2011-03-01T14:08:24Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;[http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
gem install passenger&lt;br /&gt;
&lt;br /&gt;
passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: www.poddery.com. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: the.diasperse.com. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
Give references in proper form (not just URLs if possible, give dates of access).&lt;br /&gt;
&lt;br /&gt;
Jim Dwyer (May 11, 2010). &#039;&#039;Four Nerds and a Cry to Arms Against Facebook&#039;&#039;. February 26, 2011, [http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1]&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Diaspora Home Page&#039;&#039;. January 31, 2011, [https://joindiaspora.com/]&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Aspect FAQ&#039;&#039;. February 16, 2011, [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7688</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7688"/>
		<updated>2011-03-01T14:07:48Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=cha0sPod=&lt;br /&gt;
cha0sPod is currently offline, as I am setting a pod up on a remote server rather than a home server to improve performance. Link will be posted in this section upon it going live.&lt;br /&gt;
==Introduction==&lt;br /&gt;
For my implementation report, I will be setting up and using a server running Diaspora. Diaspora is a distributed social network meant to directly compete with centralized social networks such as Facebook and Twitter. My report will focus on my personal experience with Diaspora, both as an administrator as well as a client. Due to time constraints, most of the administrator reporting will involve setting up the pod, while the client portion will focus on the interactions of two test user accounts.&lt;br /&gt;
&lt;br /&gt;
Section 2 describes the specifics of Diaspora, particularly how it functions from the client&#039;s perspective, Section 3 covers my experience in setting up a Diaspora pod, Section 4 includes additional details in regards to the management of the cha0sPod, Section 5 covers my experience in using Diaspora as a client, Section 6 contains my conclusion, and Section 7 includes all references made in the document.&lt;br /&gt;
&lt;br /&gt;
==What Is Diaspora?==&lt;br /&gt;
===Diaspora: Distributed Social Networking===&lt;br /&gt;
Diaspora is designed to decentralize social networks, so that privacy can more easily be managed by the individual user. With a centralized social network, all information, messages, and pictures posted are effectively owned by the corporation hosting the network. The idea of sacrificing all of your privacy in exchange for a service is exactly what Diaspora hopes to prevent &amp;lt;ref&amp;gt;http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1&amp;lt;/ref&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below &amp;lt;ref&amp;gt;https://joindiaspora.com/&amp;lt;/ref&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
gem install passenger&lt;br /&gt;
&lt;br /&gt;
passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: www.poddery.com. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: the.diasperse.com. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
Give references in proper form (not just URLs if possible, give dates of access).&lt;br /&gt;
&lt;br /&gt;
Jim Dwyer (May 11, 2010). &#039;&#039;Four Nerds and a Cry to Arms Against Facebook&#039;&#039;. February 26, 2011, [http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1]&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Diaspora Home Page&#039;&#039;. January 31, 2011, [https://joindiaspora.com/]&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Aspect FAQ&#039;&#039;. February 16, 2011, [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7687</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7687"/>
		<updated>2011-03-01T14:05:48Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* References */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=cha0sPod=&lt;br /&gt;
cha0sPod is currently offline, as I am setting a pod up on a remote server rather than a home server to improve performance. Link will be posted in this section upon it going live.&lt;br /&gt;
==Introduction==&lt;br /&gt;
For my implementation report, I will be setting up and using a server running Diaspora. Diaspora is a distributed social network meant to directly compete with centralized social networks such as Facebook and Twitter. My report will focus on my personal experience with Diaspora, both as an administrator as well as a client. Due to time constraints, most of the administrator reporting will involve setting up the pod, while the client portion will focus on the interactions of two test user accounts.&lt;br /&gt;
&lt;br /&gt;
Section 2 describes the specifics of Diaspora, particularly how it functions from the client&#039;s perspective, Section 3 covers my experience in setting up a Diaspora pod, Section 4 includes additional details in regards to the management of the cha0sPod, Section 5 covers my experience in using Diaspora as a client, Section 6 contains my conclusion, and Section 7 includes all references made in the document.&lt;br /&gt;
&lt;br /&gt;
==What Is Diaspora?==&lt;br /&gt;
===Diaspora: Distributed Social Networking===&lt;br /&gt;
Diaspora is designed to decentralize social networks, so that privacy can more easily be managed by the individual user. With a centralized social network, all information, messages, and pictures posted are effectively owned by the corporation hosting the network. The idea of sacrificing all of your privacy in exchange for a service is exactly what Diaspora hopes to prevent [http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
gem install passenger&lt;br /&gt;
&lt;br /&gt;
passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: www.poddery.com. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: the.diasperse.com. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
Give references in proper form (not just URLs if possible, give dates of access).&lt;br /&gt;
&lt;br /&gt;
Jim Dwyer (May 11, 2010). &#039;&#039;Four Nerds and a Cry to Arms Against Facebook&#039;&#039;. February 26, 2011, [http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1]&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Diaspora Home Page&#039;&#039;. January 31, 2011, [https://joindiaspora.com/]&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Aspect FAQ&#039;&#039;. February 16, 2011, [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7686</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7686"/>
		<updated>2011-03-01T14:05:43Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Aspects */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=cha0sPod=&lt;br /&gt;
cha0sPod is currently offline, as I am setting a pod up on a remote server rather than a home server to improve performance. Link will be posted in this section upon it going live.&lt;br /&gt;
==Introduction==&lt;br /&gt;
For my implementation report, I will be setting up and using a server running Diaspora. Diaspora is a distributed social network meant to directly compete with centralized social networks such as Facebook and Twitter. My report will focus on my personal experience with Diaspora, both as an administrator as well as a client. Due to time constraints, most of the administrator reporting will involve setting up the pod, while the client portion will focus on the interactions of two test user accounts.&lt;br /&gt;
&lt;br /&gt;
Section 2 describes the specifics of Diaspora, particularly how it functions from the client&#039;s perspective, Section 3 covers my experience in setting up a Diaspora pod, Section 4 includes additional details in regards to the management of the cha0sPod, Section 5 covers my experience in using Diaspora as a client, Section 6 contains my conclusion, and Section 7 includes all references made in the document.&lt;br /&gt;
&lt;br /&gt;
==What Is Diaspora?==&lt;br /&gt;
===Diaspora: Distributed Social Networking===&lt;br /&gt;
Diaspora is designed to decentralize social networks, so that privacy can more easily be managed by the individual user. With a centralized social network, all information, messages, and pictures posted are effectively owned by the corporation hosting the network. The idea of sacrificing all of your privacy in exchange for a service is exactly what Diaspora hopes to prevent [http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with [https://github.com/diaspora/diaspora/wiki/Aspects-FAQ]. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
gem install passenger&lt;br /&gt;
&lt;br /&gt;
passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: www.poddery.com. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: the.diasperse.com. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
Give references in proper form (not just URLs if possible, give dates of access).&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
	<entry>
		<id>https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7685</id>
		<title>DistOS-2011W Diaspora</title>
		<link rel="alternate" type="text/html" href="https://homeostasis.scs.carleton.ca/wiki/index.php?title=DistOS-2011W_Diaspora&amp;diff=7685"/>
		<updated>2011-03-01T14:04:17Z</updated>

		<summary type="html">&lt;p&gt;Cha0s: /* Diaspora: Distributed Social Networking */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=cha0sPod=&lt;br /&gt;
cha0sPod is currently offline, as I am setting a pod up on a remote server rather than a home server to improve performance. Link will be posted in this section upon it going live.&lt;br /&gt;
==Introduction==&lt;br /&gt;
For my implementation report, I will be setting up and using a server running Diaspora. Diaspora is a distributed social network meant to directly compete with centralized social networks such as Facebook and Twitter. My report will focus on my personal experience with Diaspora, both as an administrator as well as a client. Due to time constraints, most of the administrator reporting will involve setting up the pod, while the client portion will focus on the interactions of two test user accounts.&lt;br /&gt;
&lt;br /&gt;
Section 2 describes the specifics of Diaspora, particularly how it functions from the client&#039;s perspective, Section 3 covers my experience in setting up a Diaspora pod, Section 4 includes additional details in regards to the management of the cha0sPod, Section 5 covers my experience in using Diaspora as a client, Section 6 contains my conclusion, and Section 7 includes all references made in the document.&lt;br /&gt;
&lt;br /&gt;
==What Is Diaspora?==&lt;br /&gt;
===Diaspora: Distributed Social Networking===&lt;br /&gt;
Diaspora is designed to decentralize social networks, so that privacy can more easily be managed by the individual user. With a centralized social network, all information, messages, and pictures posted are effectively owned by the corporation hosting the network. The idea of sacrificing all of your privacy in exchange for a service is exactly what Diaspora hopes to prevent [http://www.nytimes.com/2010/05/12/nyregion/12about.html?_r=1].&lt;br /&gt;
&lt;br /&gt;
How it accomplishes this is the utilization of user-owned servers, called &amp;quot;pods&amp;quot;. Pods are used to host content, such as status updates and pictures, and communicate with other pods so that the content is available across the network. Users may either create a pod, join an associate&#039;s, or sign up in a pod open to the public. In any case, Diaspora prioritizes user privacy using a number of methods, which are described below [https://joindiaspora.com/].&lt;br /&gt;
&lt;br /&gt;
===Aspects===&lt;br /&gt;
Aspects are used to maintain multiple identities in the social network. By default, every user starts with the &amp;quot;Home&amp;quot;, &amp;quot;Family&amp;quot;, and &amp;quot;Work&amp;quot; aspects. When the user posts, they can specify which aspects to post to. For example, if the user posts to the home aspect, only friends associated with the home aspect will see the post. When a friend is added, the user specifies which aspects the friend should be associated with. &lt;br /&gt;
&lt;br /&gt;
New aspects can be created at any time, so that users can customize the privacy of their content on a per-update basis. This means that a user may have &amp;quot;Employees&amp;quot; and &amp;quot;Supervisors&amp;quot; aspects, so that messages can be sent to a manager&#039;s employees based on the level of privacy the message needs.&lt;br /&gt;
&lt;br /&gt;
===Content Ownership===&lt;br /&gt;
Users maintain ownership of all content posted, including pictures. This means that the user has control over how photos are distributed. Again, this is done through the aspect system, so that photos are only seen by the people you want them to.&lt;br /&gt;
&lt;br /&gt;
==Setting Up Diaspora==&lt;br /&gt;
===Preparation===&lt;br /&gt;
For the purposes of evaluating a Diaspora implementation, I have opted to set up a home server. The home server in question is an old Dell Dimension 3000 running Ubuntu 10.04 and an Apache server. After registering the domain cha0sNet.com and configuring my router, my server was online. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;Steps used in setting up cha0sPod can be found at Diaspora&#039;s main site.&#039;&#039;[https://github.com/diaspora/diaspora/wiki/Installing-and-Running-Diaspora]&lt;br /&gt;
&lt;br /&gt;
The next step is installing some additional software. The following section includes the title of the software, a brief explanation of what it does, and the command for installing it in Ubuntu.&lt;br /&gt;
&lt;br /&gt;
Build Tools: Specific Build Tools used to compile the other software packages.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install build-essential libxslt1.1 libxslt1-dev libxml2&lt;br /&gt;
&lt;br /&gt;
Ruby: A programming language.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install ruby-full&lt;br /&gt;
&lt;br /&gt;
MySQL: A database for the server.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install mysql-server libmysqlclient-dev libmysql-ruby&lt;br /&gt;
&lt;br /&gt;
OpenSSL: An open-source (durr) encryption library.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install libssl-dev&lt;br /&gt;
&lt;br /&gt;
ImageMagick: Image processing library used to compress and resize uploaded images.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install imagemagick libmagick9-dev&lt;br /&gt;
&lt;br /&gt;
Git: A version control system used to download and update Diaspora.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install git-core&lt;br /&gt;
&lt;br /&gt;
Redis: key-value store used for background job processing.&lt;br /&gt;
&lt;br /&gt;
             sudo apt-get install redis-server&lt;br /&gt;
&lt;br /&gt;
RubyGems:  Package manager for the Ruby programming language. Used to install “library” gems.&lt;br /&gt;
&lt;br /&gt;
             sudo add-apt-repository ppa:maco.m/ruby&lt;br /&gt;
             sudo apt-get update&lt;br /&gt;
             sudo apt-get install rubygems&lt;br /&gt;
&lt;br /&gt;
Bundler:  Manages gems.&lt;br /&gt;
&lt;br /&gt;
             sudo gem install bundler&lt;br /&gt;
&lt;br /&gt;
With all the prep work completed, my system is ready to host a new Diaspora pod. The details of that are outlined in the next section.&lt;br /&gt;
&lt;br /&gt;
===Setting up the Pod===&lt;br /&gt;
&lt;br /&gt;
The first obvious step is to actually download Diaspora from the git repository, which can be done with the following command:&lt;br /&gt;
&lt;br /&gt;
             git clone http://github.com/diaspora/diaspora.git&lt;br /&gt;
&lt;br /&gt;
Next, change directories so that you are in the diaspora root directory. The diaspora directory is located wherever you ran the git command, unless specified otherwise. Not realizing this, I ended up installing it in my home directory, before eventually moving it to /var. &lt;br /&gt;
Successfully switching to the diaspora directory (tricky I know), running the command:&lt;br /&gt;
&lt;br /&gt;
             bundle install&lt;br /&gt;
&lt;br /&gt;
will install Diaspora’s gem dependencies.&lt;br /&gt;
 &lt;br /&gt;
The next step is starting MySQL, which I had previously set up while configuring my Apache server. It says to run&lt;br /&gt;
&lt;br /&gt;
             sudo service mysql start&lt;br /&gt;
&lt;br /&gt;
to get the database started, but for me it started automatically on installation.&lt;br /&gt;
&lt;br /&gt;
With all this out of the way, it’s time to configure Diaspora so that it actually works (An important feature).&lt;br /&gt;
&lt;br /&gt;
===Configuring cha0sPod===&lt;br /&gt;
&lt;br /&gt;
Up to this point, everything was going fine. I followed each step outlined by the main site, and more or less it all went smoothly. This is the moment where it stopped going smoothly.&lt;br /&gt;
&lt;br /&gt;
The first bout with configuration comes in the app_config file. To create it, run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/app_config.yml.example config/app_config.yml&lt;br /&gt;
&lt;br /&gt;
and then change certain values within the file. The only field I changed during my initial configuration was:&lt;br /&gt;
&lt;br /&gt;
             pod_url: http://www.cha0sNet.com&lt;br /&gt;
&lt;br /&gt;
though, I’m not really sure if that was necessary. So, everything fine here.&lt;br /&gt;
&lt;br /&gt;
Configuring the database comes next, a process similar to the above configuration. Run the code:&lt;br /&gt;
&lt;br /&gt;
             cp config/database.yml.example config/database.yml&lt;br /&gt;
&lt;br /&gt;
The values in this file are more important, since this is where you configure the user/password Diaspora uses to access your MySQL database. Just enter username/password used for the test, development, and production databases. I used the same account for each one, because I’m risky I guess. Obviously the user account needs to be created before or at this stage, unless you just used root. But that’s probably I bad idea, which is why I went ahead and created a new user account for Diaspora purposes. &lt;br /&gt;
&lt;br /&gt;
With the database information all properly configured, it’s time to create the databases and tables. Luckily Diaspora automates this, and initializes the databases with the following code:&lt;br /&gt;
&lt;br /&gt;
             bundle exec rake db:create&lt;br /&gt;
             bundle exec rake db:migrate&lt;br /&gt;
&lt;br /&gt;
Of course, this is all works theoretically and there must not be many people struggling with this step, otherwise there would be some sort of warning. Despite that, this is the first instance of something going wrong.&lt;br /&gt;
&lt;br /&gt;
Diaspora uses three databases, one for each stage of development. For whatever reason, the diaspora_production table was never created. I didn’t discover this until much later, as prior to my launching my pod into the internet, Diaspora used the first two databases.&lt;br /&gt;
&lt;br /&gt;
The fix was simple enough; I simply copied diaspora_test and named the copy diaspora_production. Overall, this was the easiest obstacle to overcome.&lt;br /&gt;
&lt;br /&gt;
===Running cha0sPod (First Attempt)===&lt;br /&gt;
&lt;br /&gt;
Now, prior to deciding to run it on my Apache server, I attempted to run the server using the default configuration using thin. To do this, run the code:&lt;br /&gt;
&lt;br /&gt;
             ./script/server&lt;br /&gt;
&lt;br /&gt;
while I was able to access my local instance, I was unable to access it neither through the local area network nor over the internet. Eventually I figured out that it was because I wasn’t running it as root [http://xkcd.com/149/]. The command to get it running is thus:&lt;br /&gt;
&lt;br /&gt;
             sudo ./script/server&lt;br /&gt;
&lt;br /&gt;
And it appeared to work. At least, the command line showed no errors. However, accessing through the LAN and WAN resulted in a blank page being rendered client-side, and an error I couldn’t really find much documentation on. In search of a solution, I ventured beyond the basic setup page, and found one detailing how a Diaspora instance can be run through Apache[https://github.com/diaspora/diaspora/wiki/Installing-on-Ubuntu-Apache]. Since I already had a server set up, I decided to try this option out.&lt;br /&gt;
&lt;br /&gt;
===Attaching Pod to Apache===&lt;br /&gt;
&lt;br /&gt;
As I already have an Apache server set up, the first step to attaching my Diaspora instance to my Apache server is to install the passenger module. The passenger module allows Apache to serve Ruby on Rails applications, such as Diaspora. The code to install passenger is as follows:&lt;br /&gt;
gem install passenger&lt;br /&gt;
&lt;br /&gt;
passenger-install-apache2-module&lt;br /&gt;
&lt;br /&gt;
The guide says to load the module into Apache Config, but it did this automatically for me, so I just skipped that step.&lt;br /&gt;
&lt;br /&gt;
All that’s left to do is create a new virtual host for the Diaspora instance, which is fairly simple. I simply used the default Apache virtual host file and changed it to reflect this:&lt;br /&gt;
&lt;br /&gt;
             &amp;lt;VirtualHost *:80&amp;gt;&lt;br /&gt;
             ServerAdmin webmaster@localhost&lt;br /&gt;
             DocumentRoot &amp;quot;/var/diaspora/public&amp;quot;&lt;br /&gt;
             &amp;lt;Directory &amp;quot;/var/diaspora/public&amp;quot;&amp;gt;&lt;br /&gt;
             Allow from all&lt;br /&gt;
             AllowOverride None&lt;br /&gt;
             Options -MultiViews &lt;br /&gt;
             &amp;lt;/Directory&amp;gt;&lt;br /&gt;
&lt;br /&gt;
And then ran the following code:&lt;br /&gt;
&lt;br /&gt;
             sudo a2dissite 000-default&lt;br /&gt;
             sudo a2ensite default&lt;br /&gt;
             sudo /etc/init.d/apache2 reload&lt;br /&gt;
&lt;br /&gt;
To activate my Diaspora server. This is of course when the fact that diaspora_production didn’t actually exist came to light, but the problem was solved easily using the method described earlier. And thus, cha0sPod was online.&lt;br /&gt;
&lt;br /&gt;
==Managing The Pod==&lt;br /&gt;
After setting up the pod, there are additional options available to the administrator. Much of Diaspora is automated, so this section is mostly about managing the pod as a stand-alone server.&lt;br /&gt;
&lt;br /&gt;
===Customizing The Pod===&lt;br /&gt;
An interesting part of Diaspora is that each pod is an independent system, and so a user&#039;s experience may differ greatly from one pod to another. For instance, cha0sPod does not currently support certain features that the major pods do, such as finding friends and posting to a Facebook account.&lt;br /&gt;
&lt;br /&gt;
Besides services, each page (referred to as a view) may be customized visually using the HAML markup language. I had never heard of this mark-up language before this point, and so opted not to mess with the website pages, with the exception of my welcome page.&lt;br /&gt;
&lt;br /&gt;
===Managing Sign Ups===&lt;br /&gt;
There are two distinct classes of pods: public and private. Public pods allow anyone to go to their website and sign up for an account, while private pods requires an invitation. This can be set in the &amp;quot;config/app_config.yml&amp;quot; file, which of course would require a server restart afterwards. cha0sPod is a private pod, and will remain in this state as it is mainly for personal use.&lt;br /&gt;
&lt;br /&gt;
==Using Diaspora As A Client==&lt;br /&gt;
Diaspora is still in it&#039;s early stages of testing, being in an open &amp;quot;Alpha&amp;quot; stage currently, so it&#039;s understandable that things aren&#039;t going to work perfectly. I created two user accounts to test the capabilities of Diaspora as a sort of messenger between two contacts. These two accounts are:&lt;br /&gt;
&lt;br /&gt;
*cha0s: Thomas McMahon&lt;br /&gt;
*adm1n: Aurora Rhys&lt;br /&gt;
&lt;br /&gt;
It&#039;s important to note that user accounts are local to a pod, so the same username can be used across multiple pods. A global username is created by appending the domain name to the username (i.e. cha0s@cha0sNet.com).&lt;br /&gt;
&lt;br /&gt;
My testing of the Diaspora service involved four stages:&lt;br /&gt;
&lt;br /&gt;
===Stage One: Communication Within Established Pod===&lt;br /&gt;
As a sort of control test, I registered cha0s and adm1n as users on an already established server: www.poddery.com. The purpose of this test was to observe the communication between two users within the same pod, which has a reputation for being reliable. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot; and finds her profile page.&lt;br /&gt;
#cha0s adds Aurora to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Work&amp;quot; aspect.&lt;br /&gt;
#adm1n sees salutation, and responds.&lt;br /&gt;
#cha0s receives response.&lt;br /&gt;
&lt;br /&gt;
As expected, there were no problems communicating within the same pod. The next test was to determine if cha0sPod is capable of the same interaction.&lt;br /&gt;
&lt;br /&gt;
===Stage Two: Communication Within cha0sPod===&lt;br /&gt;
This test more or less mirrored the first test, except executed on the cha0sPod server. The purpose of this test was to ensure cha0sPod behaved normally with internal communication when compared to an established server. The results of the test were the same as above, showing that cha0sPod could achieve internal communication between two users.&lt;br /&gt;
&lt;br /&gt;
===Stage Three: Communication Between Two Established Pods===&lt;br /&gt;
To test how well pods are able to communicate with each other, I registered adm1n on a different pod: the.diasperse.com. By testing the communication between two established pods, I would be able to compare how well my pod is able to communicate in contrast. The sequence of events were as follows:&lt;br /&gt;
#cha0s searches for &amp;quot;Aurora Rhys&amp;quot;, but cannot find the one on diasperse.com&lt;br /&gt;
#adm1n logs out of diasperse.com, and logs back in.&lt;br /&gt;
#cha0s is now able to see Aurora Rhys, and adds her to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n receives a notification that &amp;quot;Thomas McMahon&amp;quot; has requested to add her. adm1n adds Thomas to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s posts &amp;quot;Hello.&amp;quot; to his &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#adm1n does not receive message.&lt;br /&gt;
#adm1n posts &amp;quot;Hello?&amp;quot; to her &amp;quot;Family&amp;quot; aspect.&lt;br /&gt;
#cha0s does not receive message.&lt;br /&gt;
&lt;br /&gt;
As you can see from above, there was a failure to communicate between the two pods. The strange part is that cha0s was able to find adm1n, but unable to receive messages from her. Even after logging in and out, there were no messages. Obviously, this didn&#039;t bode well for cha0sPod.&lt;br /&gt;
&lt;br /&gt;
===Stage Four: Communication Between cha0sPod and Established Pod===&lt;br /&gt;
The final test I ran was to see if cha0sPod would be able to communicate with an established pod. To do this, I had cha0s (logged in to the cha0sPod) search for adm1n (logged in to the poddery pod). cha0s was able to find adm1n, but like above, was unable to do anything more than that.&lt;br /&gt;
&lt;br /&gt;
===Results===&lt;br /&gt;
As far as communication goes, it appears as though Diaspora may be in a temporary rough patch. However, there are many reports of successful pod-to-pod communications online, so it&#039;s possibly just a recent bug that needs to be fixed, or else an issue with pods running different versions.&lt;br /&gt;
&lt;br /&gt;
I will continue testing once the official cha0sPod is established on a remote server, and hopefully the communication issue is solved by then. But right now I would recommend waiting before switching from Facebook to Diaspora, unless you enjoy submitting bug reports.&lt;br /&gt;
&lt;br /&gt;
==Conclusion==&lt;br /&gt;
&lt;br /&gt;
===Personal Review===&lt;br /&gt;
Diaspora aims to create a social network that prioritizes privacy, and it does just that. Through the usage of servers owned by the clients, and the concept of aspects, information posted can only be accessed by the users it&#039;s intended for. The Diaspora interface abstracts the individual pods so as to appear as a single system successfully, though there are major bugs that prevent the Diaspora from being used as a legitimate social network at this point in time. These results are hardly surprising, given that Diaspora is still in its &amp;quot;Alpha&amp;quot; stage of testing. &lt;br /&gt;
&lt;br /&gt;
Diaspora has shown a lot of promise from my usage of it, and will only get better as more services are integrated into it. Overall, this experience has been a positive one, even though there were a few difficulties trying to get the server to run, and I plan on creating a legitimate pod on a remote server for my personal usage.&lt;br /&gt;
&lt;br /&gt;
===Future Work===&lt;br /&gt;
As far as future plans go, the wiki suggests that the main changes that are occurring at the moment involve securing messages sent between pods. Beyond that, launching Diaspora as a full-fledged social network competitor would be the ultimate goal.&lt;br /&gt;
&lt;br /&gt;
==References==&lt;br /&gt;
&lt;br /&gt;
Give references in proper form (not just URLs if possible, give dates of access).&lt;/div&gt;</summary>
		<author><name>Cha0s</name></author>
	</entry>
</feed>