Profile

Larawan sa cover:
Liz Fong-Jones
Nagtatrabaho sa Google
Nag-aaral sa Massachusetts Institute of Technology
Nakatira sa Somerville, MA
Nilagay siya ng 13,470 sa mga lupon
TungkolMga PostMga LarawanMga Video

Stream

Liz Fong-Jones

Ibinahagi sa publiko  - 
 
Senior thesis is in, meaning all of my work for this term is turned in. One paper to resolve an incomplete, and a pile of transfer credit to resolve, and I'll actually be on the graduation list for February. XD
 ·  Isalin sa
60
Larawan sa profile ni Lauren CampbellLarawan sa profile ni Aaron BallLarawan sa profile ni Liz Fong-JonesLarawan sa profile ni ekate K.
6 (na) komento
 
Yeah Liz!
 ·  Isalin sa
Magdagdag ng komento...

Liz Fong-Jones

Ibinahagi sa publiko  - 
 
NSA fuckers, seriously, not okay. Go the fuck away. Leave my users alone.
 ·  Isalin sa
45
5
Larawan sa profile ni Shava NeradLarawan sa profile ni Derric AtzrottLarawan sa profile ni Liz Fong-JonesLarawan sa profile ni Murali Suriar
15 (na) komento
 
When I was at CFP2013, a former NSA officer was talking to me about how the whole Google machine room worked, and how stuff was not encrypted between servers, in a very matter of fact way.  He had not worked at the NSA since 2002-ish I believe, and was one of the architects of the systems that is a precursor to the Prism system.  It sure sounded like he had had a guided tour.

There's this thing called a National Security Letter.  If folks at Google have had to give the NSA a guided tour of their architecture and machine room, they are not able to talk about it.  Ever.  The ACLU took the feds to court over this with Nick Merrill of Calyx Internet and a bunch of librarians back some years ago when it was ACLU v Ashcroft, and at least won the right to challenge the NSL at all.  Google and the other cloud companies have hinted that they want to talk more about the government interference that they can't talk about.

If the government is taking Google's data on you, they are paying for it -- full un-anonymized data.  They don't have to "hack" it.  They can requisition it, and take it under an NSL.  They can pay for it through a front company -- these were standard for the CIA, to the point where a prominent operative for the CIA got his obit in The Economist when he died just for operating front companies for the CIA.  (http://www.economist.com/node/21563687)  This is not conspiracy theory crap, this is just the way the government bureaucracy works.   You can't have stuff on the books that shows payments from certain organizations.

So when Schmidt is publishing op/eds in the WSJ saying they are "shocked I tell you, shocked!" at the violation of user privacy -- a complete turn around from his prior stance on user privacy, frankly, where he's said that if you aren't willing to do something in public you really shouldn't be doing it at all, and the whole nymwars crap and all -- what he's doing is asking the government not to muscle in on his and the other cloud companies' businesses, and raise too much alarm.

The whole house of cards could come down on them rather badly if this gets investigated and it turns out that they've been getting paid to hand over full unanonymized data, even if it were not voluntary.  It could be bad for GOOG and bad for staffing and really a clusterf***.

There are a few control freaks in my government who I'd like to really have a special prosecutor hang out to dry -- but there is a culture of elites in SV who are not any better, and Schmidt and Gundotra are among them, who I would love for people to realize how they are being exploited by these folks and pushed into a culture of passivity masquerading as content engagement -- very much The Matrix.  Art has always been a tool of revolutionaries.

SV are culture-war profiteers.  And hey, I've lived in that world, I know it pretty intimately.

Our real world is going to hell on the ground while we are presented with kittens on the Internet and crap for sale to keep us anesthetized, and the convergence of transmedia into marketing, politics, and entertainment.  

Pretty soon, we'll have the Eloi vote -- all of us liberal intellectuals in our ergonomic chairs with bright collar jobs and good incomes and futile intellectual votes and gated communities -- and the Morlock vote with people manipulated by fear in their conservative or right wing or service jobs, voting for whomever the war on terror tells them to.  The Morlocks are meant to win, shortly, just as they did in Germany or Iran or other places where a cynical leadership saw a disaffected populace detached from the social contract, ready to be organized -- to be honest, usually those people saw a chaos ready to boil over in fear, and justified their actions by feeling they were restoring order, securing borders and strength, and reaffirming their nation's security in the world.

It's all neuromarketing, now, it's long since stopped being about issues.  Issues stopped being the competitive edge -- they're just window dressing.  It's a competitive market, politics, after all.

But omg, not here, please.  I am not ready for Eisenhower's MIC "peaceful insurgent" coup, and that's pretty much what we're looking at. (http://www.npr.org/2011/01/17/132942244/ikes-warning-of-military-expansion-50-years-later).  

Our nation was constituted so as to never have a military that could rule itself, to preclude a military coup.  But now, with half a percent of the population with top secret clearances, most of them private contractors without meaningful oversight with blackline projects itching for greater budgets, the "beltway" is wagging the dog.  

Follow the money.  The Bush administration moved the focus of warfare dollars from hard goods to cyberwarfare and dropped it in the cloud's lap to wrestle with the Intelligence Community -- moved Bush's director of national intel, Mike McConnell, to head up Booz Allan (that makes him Snowden's boss' boss' boss or somesuch) to supervise the revolving door of the transition -- and here we are.

This is what the Snowden stuff is about -- not privacy issues, much as I'd want it to be (and you know I would!) about civil liberties in that regard, but about waking up my dear sleeping giant to the effective hawkish coup in DC.

And you know, the world is wearing peril sensitive sunglasses -- or they would have seen nearly everything that was in the Snowden leaks years ago since nearly NOTHING in the leaks is really news.  Nearly all of it was in EFF newsletters or Wired or somewhere easily accessible -- hell, USA TODAY ffs! -- going back as far as the Reagan administration in some cases, but mostly since 9/11, and in many cases making headlines since 2007, or as recently as December of last year, or even a month before Snowden bolted.

And unless we can bust that open in some positive way, we have no real democracy to speak of going forward.  So how do we even start to talk about these things?

But it takes adrenaline, not C-SPAN or the geek pages of Wired's Threat Level column or the EFFector newsletter to get people pumped.  And now, people are milling about buzzing, but are they doing anything?  Not clear.  The tech companies are doing something -- but will they do more than the minimum to protect their businesses?  To make it clear that they want to protect their aphids so they can continue to harvest honeydew in peace, without scandal?  No questions arising whether privacy is truly dead, please, we can't afford it?  Don't make our users question as to whether we are safeguarding their privacy or look too closely.  And ffs don't let this go to special hearings -- we do not want dirty laundry aired.  Do you want another freaking crash?

Bad for business.

http://www.shava.org/2013/10/22/a-retrospective-on-nymwars-google-as-the-identity-network-and-the-nsa/
 ·  Isalin sa
Magdagdag ng komento...

Liz Fong-Jones

Ibinahagi sa publiko  - 
 
The United States has declared war on Google and its users, in my personal opinion. Doing shit like this is definitely a very clear trespass, and an act of war in the sphere of the internet. Once again, fuck you, NSA.
 ·  Isalin sa
Orihinal na ibinahagi ni Mike Hearn ang:
 
The packet capture shown in these new NSA slides shows internal database replication traffic for the anti-hacking system I worked on for over two years. Specifically, it shows a database recording a user login as part of this system:

http://googleblog.blogspot.ch/2013/02/an-update-on-our-war-against-account.html

Recently +Brandon Downey, a colleague of mine on the Google security team, said (after the usual disclaimers about being personal opinions and not speaking for the firm which I repeat here) - "fuck these guys":

https://plus.google.com/108799184931623330498/posts/SfYy8xbDWGG

I now join him in issuing a giant Fuck You to the people who made these slides. I am not American, I am a Brit, but it's no different - GCHQ turns out to be even worse than the NSA.

We designed this system to keep criminals out. There's no ambiguity here. The warrant system with skeptical judges, paths for appeal, and rules of evidence was built from centuries of hard won experience. When it works, it represents as good a balance as we've got between the need to restrain the state and the need to keep crime in check. Bypassing that system is illegal for a good reason.

Unfortunately we live in a world where all too often, laws are for the little people. Nobody at GCHQ or the NSA will ever stand before a judge and answer for this industrial-scale subversion of the judicial process. In the absence of working law enforcement,  we therefore do what internet engineers have always done - build more secure software. The traffic shown in the slides below is now all encrypted and the work the NSA/GCHQ staff did on understanding it, ruined.

Thank you Edward Snowden. For me personally, this is the most interesting revelation all summer.
 ·  Isalin sa
32
2
Larawan sa profile ni Aaron BallLarawan sa profile ni Gregg LantzLarawan sa profile ni Oren HaziLarawan sa profile ni Ted Hahn
3 (na) komento
 
This should be titled "How we know we can no longer trust private cables running between our offices" or "A Business case for using Corning's Bend In-Sensitive Fiber"
 ·  Isalin sa
Magdagdag ng komento...

Liz Fong-Jones

Ibinahagi sa publiko  - 
 
I can't tell whether this is a legit sign from the City or not. It mysteriously appeared in front of my house next to my car, but I didn't put it there, and it doesn't have the usual City of Somerville logo and phone number and such. The notice certainly doesn't give a specific time it's valid for so...
 ·  Isalin sa
1
Larawan sa profile ni Emma CatingLarawan sa profile ni Liz Fong-JonesLarawan sa profile ni Steve HarlowLarawan sa profile ni Sai
14 (na) komento
Sai
 
+Liz Fong-Jones Maybe ask also whether posting such a fake sign is illegal? :-)
 ·  Isalin sa
Magdagdag ng komento...

Liz Fong-Jones

Ibinahagi sa publiko  - 
 
See if you can spot the animal in this picture.
 ·  Isalin sa
2
Larawan sa profile ni christopher rizzoLarawan sa profile ni Joe LancasterLarawan sa profile ni Liz Fong-JonesLarawan sa profile ni Sam Hopewell
12 (na) komento
 
Weasel?
Magdagdag ng komento...
Isinama siya sa mga lupon
13,470 (na) tao

Liz Fong-Jones

Ibinahagi sa publiko  - 
 
So in belated fashion, I need to beg help with my senior thesis project for MIT, which is due tomorrow (urk). I promised I'd do a user study, and the app is only today ready to use in the wild, so meep.

I made an accessibility/security app for Android that replaces the available default unlock mechanisms on Android with a code-based unlock that uses haptic feedback instead of passcodes or patterns which can be shouldersurfed, overheard when read aloud, or recovered via smudge attacks. Your help would greatly be appreciated in testing my prototype, whether you are sighted or blind. It should work on ICS and above, and should work with Talkback off, Talkback on but Touch-to-explore off, and Touch-to-explore on.

Steps to install:
1.) Disable your OS keyguard. Settings -> Security -> Screen lock -> none. If you are a Googler PLEASE do not do this to a device that has your corp account; Device Policy Manager and secops will be sad at you.
2.) Install Haptic Unlock via the link below, or find it in the store by searching 'edu.mit.lizfong.android.hapticunlock'. I uploaded version 1.01alpha an hour ago which supercedes 1.0. Please don't install 1.0 if it shows it to you as it's buggy; it may be a few hours until 1.01alpha appears in the store :/
3.) Once installed, press the 'home' icon on your phone. You'll be prompted which launcher to use. Check 'use by default' and choose "Haptic Unlock".

You'll now be in the Haptic Unlock locker, and will be dumped into the lock screen. The labels of the correct sequence of password elements is 02143 (because proof of concept). When you successfully input the password, you'll be returned to your normal home screen and able to use the device as normal. Should your screen turn off due to inactivity, the lock will be re-engaged and will appear when you power your screen back on. You should in most cases be returned to your most recent activity, but sometimes the detection is buggy and dumps you at the home screen. If that happens, just use recent apps to return to where you were. The lock screen will also be launched on boot.

How to unlock: With touch-to-explore off, pick up individual password elements to feel the vibration, and set them down if they're incorrect; drag them to the right and let go if you want to select an element. The behavior is slightly different with Touch-to-explore on -- swipe up and down to feel each vibration, and simply double-tap when you've found the next pattern you want to enter as an element. It's confirmed working with the KitKat launcher on Nexus 5, and the TouchWiz launcher on Galaxy Tab 10.1. It ought to work with stock launchers, but may not work with weird shit like motoblur; if it detects that case it will automatically disable itself and return you to your launcher after first successful unlock.

Missing:
* The ability to set your own password (the default is 02143 because go Somerville). It's a proof of concept, after all. And obviously with the ability to set your own password, the visual/auditory hints of labeling each element will no longer be needed, but for training's sake it will show you the vibration and the identifier of each element for now.
* It's possible to evade the lock screen by opening the notifications bar, or by very careful timing of the 'recent apps' button. This is a proof of concept and functionally equivalent to no security; if it's successful I'll try rewriting it as an ordinary base OS lockscreen with all the associated proper protections.
 ·  Isalin sa
Replaces homescreen and unlock screens with haptic unlock mechanism.
10
18
Larawan sa profile ni Amber YustLarawan sa profile ni Liz Fong-JonesLarawan sa profile ni Andrew DalgleishLarawan sa profile ni Liz Fong-Jones
31 (na) komento
 
Works ok on my HTC One X running CM 10.1, but the vibrate is way too long.
 ·  Isalin sa
Magdagdag ng komento...

Liz Fong-Jones

Discussion  - 
 
My wife wrote a guide to soloing by using kiting to break formidable enemy gangs into more digestible engagements.
 ·  Isalin sa
10
Larawan sa profile ni Liz Fong-JonesLarawan sa profile ni Adam MorreyLarawan sa profile ni Alvaro IsornaLarawan sa profile ni Christian Haas
4 (na) komento
 
A great read even though I'm a new player and only skilled with t1 frigates right now 
 ·  Isalin sa
Magdagdag ng komento...

Liz Fong-Jones

Ibinahagi sa publiko  - 
 
!@#$!@#$!@#$!@#$ is all I have to say about this.

Oh, and fuck you, NSA. No thanks for undermining the work that I and my coworkers do to keep Google's users safe.
 ·  Isalin sa
Orihinal na ibinahagi ni Todd Underwood ang:
 
Following up on this story, it's clear that Google's worries were substantive.  The NSA has been sniffing Google (and Yahoo! and other) traffic and the previously disclosed plan ( http://www.washingtonpost.com/business/technology/google-encrypts-data-amid-backlash-against-nsa-spying/2013/09/06/9acc3c20-1722-11e3-a2ec-b47e45e6f8ef_story.html ) to encrypt that was clearly necessary.

My favorite quote:  "Two engineers with close ties to Google exploded in profanity when they saw the drawing."

So, to sum up:  the NSA are bad.  Google and others are working to prevent them from being effective at their invasive activities.  This story is not yet done.
 ·  Isalin sa
33
6
Larawan sa profile ni Aaron BallLarawan sa profile ni David GuildLarawan sa profile ni george olooLarawan sa profile ni Liz Fong-Jones
12 (na) komento
 
+Jay Blanc According to http://www.google.com/about/datacenters/inside/locations/index.html Google has no major datacenters in Canada. But why bother with Canada when there are multiple juicy targets in the EU?
 ·  Isalin sa
Magdagdag ng komento...

Liz Fong-Jones

Ibinahagi sa publiko  - 
 
New month, new dog related griping. An adult that walked up to Misty on the subway and just started petting without asking or even making eye contact with me. A parent that watched her child tease Flurry by ruffling her fur with a stick, and just let the kid do the same exact thing to Misty as well, at which point I snapped at her to tell her that was definitely not okay.

The former was at least not dangerous and only discourteous, but the latter could have been hazardous to the child given a less tolerant dog.
 ·  Isalin sa
3
Larawan sa profile ni Bridget SpitznagelLarawan sa profile ni Michael LeuchtenburgLarawan sa profile ni Michel Fitos
3 (na) komento
 
+Michael Leuchtenburg suddenly I'm seeing a Venn diagram with "pregnant dog" in the intersection.
 ·  Isalin sa
Magdagdag ng komento...

Liz Fong-Jones

Ibinahagi sa publiko  - 
 
Catch-22, part 2:

So my car was hit by a neighbor on August 14. She nicely left me a note and called her insurance and the police. Despite the fact that I was parked well away from the street corner, the helpful police officer ticketed me for "being within 20 feet of the intersection". I was very plainly well away from the intersection, with photo proof.

So I try to appeal or worst-case pay the citation online, and discover that I can't, because it was written by a police officer rather than a parking control officer, and the police ticketing system is not hooked up to the parking control system and tickets must be hand-transcribed, a process which City Hall said takes "several weeks" despite the fact that there's a 21-day deadline to pay the ticket or file an appeal. So for handwritten tickets, they won't appear in the system until after the deadline has passed. Lovely.

So I'm stuck printing out my photos and snail mailing them to the City of Somerville, because I can't just upload the photos online. Rawrgh. At least the Progressive insurance claim was simple, easy, and took less than 3 minutes to submit online.

Just argh. Way too much dealing with bureaucracy for me today :(
 ·  Isalin sa
2 (na) mga larawan
3
Larawan sa profile ni Kee HinckleyLarawan sa profile ni Lauren CampbellLarawan sa profile ni Jessica MatthewsLarawan sa profile ni Sai
5 (na) komento
Sai
 
File an appeal anyway. Their fault if they can't follow due process. 
 ·  Isalin sa
Magdagdag ng komento...
Mga Tao
Isinama siya sa mga lupon
13,470 (na) tao
Trabaho
Trabaho
Site Reliability Engineer
Pagtatrabaho
  • Google
    Senior Software Engineer (part-time), 2012 - narito
  • Massachusetts Institute of Technology
    TA (6.035/Sp2012, 6.172/Fa2012), LA (6.042/Sp2012), UROP (Su2012), 2012 - 2012
  • Google
    Senior Site Reliability Engineer, 2011 - 2012
  • Google
    Site Reliability Engineer, 2008 - 2011
  • Three Rings Design
    Technical Operations Manager, 2005 - 2007
  • College Preparatory Mathematics
    Systems Administrator, 2003 - 2005
Mga Lugar
Mapa ng mga lugar kung saan nanirahan ang user na itoMapa ng mga lugar kung saan nanirahan ang user na itoMapa ng mga lugar kung saan nanirahan ang user na ito
Sa kasalukuyan
Somerville, MA
Nakaraan
Oakland, CA - Pasadena, CA - Santa Clara, CA
Mga Link
Taga-ambag sa
Mga Link
Kuwento
Tagline
and her trusty daemon Misty
Panimula
I make your intertubes work (or more specifically, bits and pieces of Google). Also a feminist, trans rights advocate, disability rights ally, social justice activist, and occasionally a sex-positive blogger and poster of vegan food porn. Veteran of the #nymwars.

Obligatory disclaimer: opinions expressed here are strictly my own and do not necessarily reflect those of my employer.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

My GPG key fingerprint is 0xFBDDD2A4 and my Google Profile can be found at:
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJOD29pAAoJEAHNO+NH5tfJgoEIAJJVXKSI1tYRkFgJk31qS9n/
2wdC4pwEw0HHfuMcIx0JKQDVgw793JhsB+dlwWXTEcxOAY/gjyEewVbPZgfmzrDW
TVGFl21Rr5debOZbozC4uZd2yvUOSGfcxY4INA+6bp7QQB9mhzG5fci70rluTeQ/
kwV9m22GYzTPw3FLZL2LlduJ6L1TtTBufLTsjSHaViENnvx3ykV4k3tef0t1SBmQ
LUlN+2lIoZ30U5nYWo09mDo+we2c1wZiUAi9X5gIvxL8eKaLOlyiprigOIiq3E7x
STn4+XXgCkziuIRVy21I9Z1UR7IMfyr+sOVQa/k8Iy3iZz/Cg0HhOb0aBaahryc=
=X4Ys
-----END PGP SIGNATURE-----

Mga pinagmamalaki
Dropped out of Caltech. To work at Google.
Edukasyon
  • Massachusetts Institute of Technology
    Course 6-3, 2012 - narito
  • Massachusetts Institute of Technology
    Special Student (Course 6), 2010 - 2011
  • California Institute of Technology
    Bio/CS, 2005 - 2008
Pangunahing Impormasyon
Kasarian
Babae
Pakikipagrelasyon
May-asawa
Iba pang mga pangalan
Elizabeth Fong, Zhen Fong, Lizthegrey