<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Emergent Chaos &#187; books</title>
	<atom:link href="http://emergentchaos.com/archives/category/books/feed" rel="self" type="application/rss+xml" />
	<link>http://emergentchaos.com</link>
	<description>The Emergent Chaos Jazz Combo</description>
	<lastBuildDate>Sun, 12 Feb 2012 08:00:00 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Book Review: Cloud Security Rules</title>
		<link>http://emergentchaos.com/archives/2012/02/book-review-cloud-security-rules.html</link>
		<comments>http://emergentchaos.com/archives/2012/02/book-review-cloud-security-rules.html#comments</comments>
		<pubDate>Thu, 09 Feb 2012 18:01:03 +0000</pubDate>
		<dc:creator>arthur</dc:creator>
				<category><![CDATA[books]]></category>

		<guid isPermaLink="false">http://emergentchaos.com/?p=4093</guid>
		<description><![CDATA[A while back, Kai Roer graciously sent me an electronic copy of the book Cloud Security Rules that he co-authored with an all-start cast including luminaries Wendy Nather and our very own New School&#8217;s Alex Hutton. All in all, it&#8217;s &#8230; <a href="http://emergentchaos.com/archives/2012/02/book-review-cloud-security-rules.html">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p><a href="http://emergentchaos.com/wp-content/uploads/2012/02/cloud-security-rules.png"><img class="alignright size-full wp-image-4094" title="cloud-security-rules" src="http://emergentchaos.com/wp-content/uploads/2012/02/cloud-security-rules.png" alt="" width="188" height="267" /></a>A while back, <a href="http://www.kairoer.com/">Kai Roer</a> graciously sent me an electronic copy of the book <a href="http://www.thecloudsecurityrules.com/">Cloud Security Rules</a> that he co-authored with an all-start cast including luminaries <a href="http://idoneous-security.blogspot.com/">Wendy Nather</a> and our very own New School&#8217;s <a href="http://newschoolsecurity.com/">Alex Hutton</a>. All in all, it&#8217;s a solid read covering the gamut of topics from Risk and Compliance to technology versus the human factor and finishes nicely with a section on business models. A few chapters about more about security without being a particular focus on the cloud(tm), but that&#8217;s not particularly a problem.</p>
<p>My only real complaint about the book is that with so many authors, things don&#8217;t always flow as smoothly as they could when moving from chapter to chapter. This is however made up for by the general high quality of the work. In particular, un addition to the authors mentioned above, you&#8217;ll also want to make sure to read the sections by<a href="http://devcentral.f5.com/weblogs/macvittie/"> Lori MacVittie</a>, <a href="https://twitter.com/BrianHonan">Brian Honan</a> and <a href="https://twitter.com/kriggins">Kevin Riggins</a>.</p>
<p>This book is targeted at decision makers, managers and othesr who need to understand cloud from business view, so if that&#8217;s you, I encourage you to read this book. Definitely worth the price.</p>
]]></content:encoded>
			<wfw:commentRss>http://emergentchaos.com/archives/2012/02/book-review-cloud-security-rules.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Lady Ada books opening May 11</title>
		<link>http://emergentchaos.com/archives/2010/06/lady-ada-books-opening-may-11.html</link>
		<comments>http://emergentchaos.com/archives/2010/06/lady-ada-books-opening-may-11.html#comments</comments>
		<pubDate>Fri, 04 Jun 2010 15:00:28 +0000</pubDate>
		<dc:creator>adam</dc:creator>
				<category><![CDATA[books]]></category>
		<category><![CDATA[Science]]></category>
		<category><![CDATA[Software Engineering]]></category>
		<category><![CDATA[startups]]></category>

		<guid isPermaLink="false">http://emergentchaos.com/?p=3496</guid>
		<description><![CDATA[Ada&#8217;s Technical Books is Seattle&#8217;s only technical book store located in the Capitol Hill neighborhood of Seattle, Washington. Ada&#8217;s specifically carries new, used, &#038; rare books on Computers, Electronics, Physics, Math, and Science as well as hand-picked inspirational and leisure &#8230; <a href="http://emergentchaos.com/archives/2010/06/lady-ada-books-opening-may-11.html">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<blockquote><p>
Ada&rsquo;s Technical Books is Seattle&rsquo;s only technical book store located in the Capitol Hill neighborhood of Seattle, Washington. Ada&rsquo;s specifically carries new, used, &#038; rare books on Computers, Electronics, Physics, Math, and Science as well as hand-picked inspirational and leisure reading, puzzles, brain teasers, and gadgets geared toward the technically minded customer.
</p></blockquote>
<p>From the store&#8217;s blog, &#8220;<a href="http://blog.seattletechnicalbooks.com/?p=25">Grand Opening: June 11th</a>&#8221;</p>
<p>
I&#8217;ve been helping David and Danielle a little with book selection because they&#8217;re good folks and I love great bookstores.  I encourage Seattle readers to stop by.
</p></p>
]]></content:encoded>
			<wfw:commentRss>http://emergentchaos.com/archives/2010/06/lady-ada-books-opening-may-11.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Today in Tyrranicide History</title>
		<link>http://emergentchaos.com/archives/2010/01/today-in-tyrranicide-history.html</link>
		<comments>http://emergentchaos.com/archives/2010/01/today-in-tyrranicide-history.html#comments</comments>
		<pubDate>Sat, 30 Jan 2010 18:40:39 +0000</pubDate>
		<dc:creator>adam</dc:creator>
				<category><![CDATA[books]]></category>
		<category><![CDATA[history]]></category>

		<guid isPermaLink="false">http://emergentchaos.com/?p=3331</guid>
		<description><![CDATA[On January 30th, 1649, Charles I was beheaded for treason. He refused to enter a defense, asserting that as monarch, he was the law, and no court could try him. That same defense is raised today by Milo&#353;evi&#263;, Hussien and &#8230; <a href="http://emergentchaos.com/archives/2010/01/today-in-tyrranicide-history.html">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>On January 30th, 1649, Charles I was beheaded for treason.  He refused to enter a defense, asserting that as monarch, he was the law, and no court could try him.  That same defense is raised today by Milo&#353;evi&#263;, Hussien and other tyrants.</p>
<p>
The story of how John Cooke built his arguments against that claim is told in entertaining and accessible depth in &#8220;<a href="http://www.amazon.com/Tyrannicide-Brief-Story-Charles-Scaffold/dp/0307386376/ref=sr_1_3?ie=UTF8&#038;s=books&#038;qid=1264876206&#038;sr=8-3">The Tyrannicide Brief</a>&#8221; by <a href="http://www.geoffreyrobertson.com/">Geoffrey Robertson</a>.
</p>
<p>
As his website says, &#8220;Geoffrey Robertson QC has been counsel in many landmark cases in constitutional, criminal and media law in the courts of Britain and the commonwealth and he makes frequent appearances in the Privy Council and the European Court of Human Rights.&#8221;  So he knows what he&#8217;s talking about, and he knows how to tell an engaging story.
</p>
<p>
The principle that no one is above the law is an important one.  So today raise a glass and remember John Cooke.
</p></p>
]]></content:encoded>
			<wfw:commentRss>http://emergentchaos.com/archives/2010/01/today-in-tyrranicide-history.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The Lost Books of the Odyssey</title>
		<link>http://emergentchaos.com/archives/2010/01/the-lost-books-of-the-odyssey.html</link>
		<comments>http://emergentchaos.com/archives/2010/01/the-lost-books-of-the-odyssey.html#comments</comments>
		<pubDate>Thu, 28 Jan 2010 15:41:06 +0000</pubDate>
		<dc:creator>adam</dc:creator>
				<category><![CDATA[books]]></category>

		<guid isPermaLink="false">http://emergentchaos.com/?p=3317</guid>
		<description><![CDATA[You should go read The Lost Books of the Odyssey. You&#8217;ll be glad you did. I wrote this review in April of 2008, and failed to post it. Part of my reason is that I have little patience for, and &#8230; <a href="http://emergentchaos.com/archives/2010/01/the-lost-books-of-the-odyssey.html">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p><img src="http://emergentchaos.com/wp-content/uploads/2010/01/images10janLost-books-odyssey.jpg" alt="Lost-books-odyssey.jpg" border="0" width="310" height="310" align="right" /><br />
You should go read <a href="http://www.amazon.com/Lost-Books-Odyssey-Novel/dp/0374192154/ref=httpwwwemer04-20">The Lost Books of the Odyssey</a>.  You&#8217;ll be glad you did.</p>
<p>
I wrote this review in April of 2008, and failed to post it.  Part of my reason is that I have little patience for, and less to say about most experimental fiction.  I am in this somewhat like a luddite, unwilling to tolerate experiments which ought to have been kept confined to a laboratory.  And so, knowing that this book won a prize worried me greatly, but for reasons which I&#8217;ll get to in a moment, I persevered, and I&#8217;m glad that I did.
</p>
<p>
The &#8220;lost books&#8221; consist of very short stories, usually of a few pages or so.  The context, is of course, the Odyssey, and the actions of its heros and villians.
</p>
<p>
It falls into that class of writing which is simply a delight to read.  The stories are beautifully crafted, surprising and casting new lights on old stories.
</p>
<p>
The richness and character of the writing is exceptional and engaging, all the more so for the origin and nature of the work.  As Zachary Mason explains in the introduction, &#8220;<a href="http://www.amazon.com/Lost-Books-Odyssey-Novel/dp/0374192154/ref=httpwwwemer04-20">The Lost Books of the Odyssey</a>&#8221; were in fact lost and recovered, in a feat perhaps nearly as impressive for its cryptanalytic acumen as for its literary importance.
</p>
<p>
It is entirely worth reading, and since I first read it, it has been winning substantial literary prizes, and the New York Times calls it &#8220;<a href="http://www.nytimes.com/2010/01/28/books/28book.html">dazzling</a>.&#8221;
</p>
<p>
Finally, I should mention that Zachary and I were roommates at Miss Hall&#8217;s School for Precocious Youth in Arkham, Mass.  I would like to offer my most sincere apologies for anything he remembers.
</p>
<p>[Updated, fixed a spelling error]</p>
]]></content:encoded>
			<wfw:commentRss>http://emergentchaos.com/archives/2010/01/the-lost-books-of-the-odyssey.html/feed</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Visual Notetaking</title>
		<link>http://emergentchaos.com/archives/2009/11/visual-notetaking.html</link>
		<comments>http://emergentchaos.com/archives/2009/11/visual-notetaking.html#comments</comments>
		<pubDate>Tue, 10 Nov 2009 09:09:12 +0000</pubDate>
		<dc:creator>Richard</dc:creator>
				<category><![CDATA[art]]></category>
		<category><![CDATA[books]]></category>
		<category><![CDATA[conferences]]></category>

		<guid isPermaLink="false">http://emergentchaos.com/?p=3247</guid>
		<description><![CDATA[I&#8217;m a big fan of the book &#8220;Back of the Napkin&#8221; which is all about using pictures to help with problem solving. Yesterday, I was introduced to a related concept &#8220;visual notetaking&#8221; where you use images to support other notes &#8230; <a href="http://emergentchaos.com/archives/2009/11/visual-notetaking.html">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>I&#8217;m a big fan of the book &#8220;<a href="http://www.thebackofthenapkin.com/">Back of the Napkin</a>&#8221; which is all about using pictures to help with problem solving. Yesterday, I was introduced to a related concept &#8220;<a href="http://www.google.com/search?q=visual+note+taking&#038;ie=utf-8&#038;oe=utf-8&#038;aq=t&#038;rls=org.mozilla:en-US:official&#038;client=firefox-a">visual</a> <a href="http://college.cengage.com/collegesurvival/wong/essential_study/5e/students/weblinks/11.html">notetaking</a>&#8221; where you use images to support other notes you are taking during a meeting. I&#8217;m at a two day workshop and we have a professional notetaker who is using this. It really makes the notes much more powerful and useful then just text. Imagine having notes with visual cues to (including but not limited to network diagrams) help you remember what happened. I&#8217;m sitting here looking at the posters, the notetaker made in real time with our discussions and it&#8217;s amazing how much more useful they are.</p>
]]></content:encoded>
			<wfw:commentRss>http://emergentchaos.com/archives/2009/11/visual-notetaking.html/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Detecting Malice</title>
		<link>http://emergentchaos.com/archives/2009/11/detecting-malice.html</link>
		<comments>http://emergentchaos.com/archives/2009/11/detecting-malice.html#comments</comments>
		<pubDate>Mon, 02 Nov 2009 14:16:08 +0000</pubDate>
		<dc:creator>Richard</dc:creator>
				<category><![CDATA[books]]></category>

		<guid isPermaLink="false">http://emergentchaos.com/?p=3243</guid>
		<description><![CDATA[I just finished reading RSnake&#8217;s new book Detecting Malice and I can say without a doubt that it is one of the best technical books I have ever read. Furthermore, I can tell you that it is, without a doubt, &#8230; <a href="http://emergentchaos.com/archives/2009/11/detecting-malice.html">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>I just finished reading <a href="http://www.sectheory.com/">RSnake&#8217;s</a> new book <a href="http://ha.ckers.org/blog/20091026/detecting-malice-ebook/">Detecting Malice</a> and I can say without a doubt that it is one of the best technical books I have ever read. Furthermore, I can tell you that it is, without a doubt, the best web security book I have ever had the pleasure to read. Imagine a book that is as engaging as <a href="http://ha.ckers.org/blog">RSnake&#8217;s</a> or <a href="http://jeremiahgrossman.blogspot.com/">Jeremiah&#8217;s</a> blog, but even more so.<br />
This is not a book on how to build secure websites, there are plenty of those already. This is a book for security practitioners who get to deal with the site after it&#8217;s been built and deployed. It is full of great advice and information about not just how to detect attacks, but also how to distinguish between human attackers, regular users, bots and spiders.<br />
This book should be on the purchase list of every security geek and if Rob hadn&#8217;t graciously given me a copy, I&#8217;d have already sent him my $40. Send him your money and make him a rich man.</p>
]]></content:encoded>
			<wfw:commentRss>http://emergentchaos.com/archives/2009/11/detecting-malice.html/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Tetraktys is the Best Cryptographic Novel Ever</title>
		<link>http://emergentchaos.com/archives/2009/10/tetraktys-is-the-best-cryptographic-novel-ever.html</link>
		<comments>http://emergentchaos.com/archives/2009/10/tetraktys-is-the-best-cryptographic-novel-ever.html#comments</comments>
		<pubDate>Wed, 07 Oct 2009 12:09:13 +0000</pubDate>
		<dc:creator>adam</dc:creator>
				<category><![CDATA[books]]></category>
		<category><![CDATA[Liberty]]></category>

		<guid isPermaLink="false">http://emergentchaos.com/?p=3226</guid>
		<description><![CDATA[I&#8217;ve been remiss in not posting a review of Tetraktys, by Ari Juels. Short review: It&#8217;s better written and has better cryptographers than the ones in any Dan Brown novel, but that&#8217;s really damning it with faint praise, which it &#8230; <a href="http://emergentchaos.com/archives/2009/10/tetraktys-is-the-best-cryptographic-novel-ever.html">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>I&#8217;ve been remiss in not posting a review of <a href="http://www.amazon.com/Tetraktys-Ari-Juels/dp/0982283709/ref=sr_1_1?ie=UTF8&#038;s=books&#038;qid=1254796216&#038;sr=8-1-catcorr">Tetraktys</a>, by Ari Juels.    Short review: It&#8217;s better written and has better cryptographers than the ones in any Dan Brown novel, but that&#8217;s really damning it with faint praise, which it doesn&#8217;t deserve.</p>
<p>
It&#8217;s a highly readable first novel by Ari Juels, who is Chief Scientist at RSA Labs.  The story is about a cryptographer who discovers an ancient plot involving a secret conspiracy.  The ending is a little Stephenson-esque, insofar as it&#8217;s abrupt, but I got the feeling that that was authorial intent, not accident.<br />
<P><br />
I enjoyed it, but since I don&#8217;t review a lot of fiction, I&#8217;m a bit unsure what to say about it.  Is it better than Cryptonomicon?  It depends how you weigh value per word. I was jolted into writing a short review by the new FTC rules, because I both bought a copy and was given one.  I read the one I bought when Ari launched the book at RSA last year, and after I&#8217;d read it (but months ago) his publisher sent me a copy.  Oh, and Ari&#8217;s employer has bought me dinner, but not in the last year.  Finally, the link to the book is a non-affiliate link as far as I know.  But given the complex messiness of Amazon linkage mechanisms, I&#8217;m actually unsure.</p>
<p>
Since I haven&#8217;t read the copy I was given, and I already had a copy, was I really given anything?</p>
<p>
As regular readers know, I regularly disclose such things and have since I started this blog.  But as this example shows, putting long and complex rules in place will never cover the messy and emergent chaos which is the world in all its glory.</p>
<p>
Anyway, you should buy a copy and read Tetrktys.</p>
<p>
]]></content:encoded>
			<wfw:commentRss>http://emergentchaos.com/archives/2009/10/tetraktys-is-the-best-cryptographic-novel-ever.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Podcasts with Amrit</title>
		<link>http://emergentchaos.com/archives/2009/09/podcasts-with-amrit.html</link>
		<comments>http://emergentchaos.com/archives/2009/09/podcasts-with-amrit.html#comments</comments>
		<pubDate>Fri, 25 Sep 2009 10:46:08 +0000</pubDate>
		<dc:creator>adam</dc:creator>
				<category><![CDATA['The New School']]></category>
		<category><![CDATA[blogging]]></category>
		<category><![CDATA[books]]></category>

		<guid isPermaLink="false">http://emergentchaos.com/?p=3217</guid>
		<description><![CDATA[I had fun recording Beyond the Perimiter Episode 48 and 49 with Amrit. I think Amrit asked some of the broadest, most complex questions I&#8217;ve been asked, and it was hard to keep the episodes short. Go have a listen!]]></description>
			<content:encoded><![CDATA[<p>I had fun recording <a href="http://blogs.bigfix.com/beyondtheperimeter/2009/09/11/episode-48-overcoming-the-it-security-crisis/">Beyond the Perimiter Episode 48</a> and <a href="http://blogs.bigfix.com/beyondtheperimeter/2009/09/15/episode-49-do-we-need-to-regulate-software-development/">49</a> with Amrit.</p>
<p>
I think Amrit asked some of the broadest, most complex questions I&#8217;ve been asked, and it was hard to keep the episodes short.</p>
<p>
Go have a listen!</p>
<p>
]]></content:encoded>
			<wfw:commentRss>http://emergentchaos.com/archives/2009/09/podcasts-with-amrit.html/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>The Myths of Security: What the Computer Security Industry Doesn&#8217;t Want You to Know</title>
		<link>http://emergentchaos.com/archives/2009/08/the-myths-of-security-what-the-computer-security-industry-doesnt-want-you-to-know.html</link>
		<comments>http://emergentchaos.com/archives/2009/08/the-myths-of-security-what-the-computer-security-industry-doesnt-want-you-to-know.html#comments</comments>
		<pubDate>Thu, 06 Aug 2009 14:09:16 +0000</pubDate>
		<dc:creator>Richard</dc:creator>
				<category><![CDATA[books]]></category>
		<category><![CDATA[information security]]></category>

		<guid isPermaLink="false">http://emergentchaos.com/?p=3186</guid>
		<description><![CDATA[John Viega recently published a new book: The Myths of Security: What the Computer Security Industry Doesn&#8217;t Want You to Know. It&#8217;s a great read, especially if you are new to or are interested in the security industry as a &#8230; <a href="http://emergentchaos.com/archives/2009/08/the-myths-of-security-what-the-computer-security-industry-doesnt-want-you-to-know.html">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>John Viega recently published a new book: <a href="http://www.amazon.com/Myths-Security-Computer-Industry-Doesnt/dp/0596523025">The Myths of Security: What the Computer Security Industry Doesn&#8217;t Want You to Know</a>.<br />
It&#8217;s a great read, especially if you are new to or are interested in the security industry as a whole. However, even if you are a long term security veteran, you will find it enjoyable.<br />
The book is a series of essays addressing a range of topics from &#8220;The Cloud&#8221; to the state of the AV industry and everything in between. The essays aren&#8217;t long, but they are very thorough. This makes it easy to pick up the book become engaged and learn something quickly.<br />
My only complaint is that the essays around privacy and anonymity. They weren&#8217;t nearly as deep as I was either hoping nor on par with the rest of the book. Despite this, the book is excellent and well worth reading. I highly encourage you to pick up a copy.</p>
]]></content:encoded>
			<wfw:commentRss>http://emergentchaos.com/archives/2009/08/the-myths-of-security-what-the-computer-security-industry-doesnt-want-you-to-know.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Kindle Brouhaha Isn&#8217;t About DRM</title>
		<link>http://emergentchaos.com/archives/2009/07/kindle-brouhaha-isnt-about-drm.html</link>
		<comments>http://emergentchaos.com/archives/2009/07/kindle-brouhaha-isnt-about-drm.html#comments</comments>
		<pubDate>Sat, 18 Jul 2009 22:28:39 +0000</pubDate>
		<dc:creator>arthur</dc:creator>
				<category><![CDATA[Amusements]]></category>
		<category><![CDATA[art]]></category>
		<category><![CDATA[books]]></category>
		<category><![CDATA[information security]]></category>
		<category><![CDATA[Privacy]]></category>

		<guid isPermaLink="false">http://emergentchaos.com/?p=3169</guid>
		<description><![CDATA[In case you haven&#8217;t heard about it, there is a brouhaha about Amazon un-selling copies of two Orwell books, 1984 and Animal Farm. There has been much hand-wringing, particularly since it&#8217;s deliciously amusing that that it&#8217;s Orwell. The root cause &#8230; <a href="http://emergentchaos.com/archives/2009/07/kindle-brouhaha-isnt-about-drm.html">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>In case you haven&#8217;t heard about it, there is a brouhaha about Amazon un-selling copies of two Orwell books, 1984 and Animal Farm. There has been much hand-wringing, particularly since it&#8217;s deliciously amusing that that it&#8217;s Orwell.</p>
<p>The root cause of the issue is that the version of the Orwell novels available on the Kindle weren&#8217;t authorized editions. When contacted by the owners of Orwell&#8217;s copyrights, they deleted the books and refunded customers&#8217; money.</p>
<p>All things considered, Amazon did something approximating a right thing in this matter. They didn&#8217;t have the right to sell the novels, and so they pulled the novels from the store and customers, and gave the customers a refund. About the only thing they could have done righter was to give something to the people who thought they had the books. The best thing to give them would have been authorized copies of the books, but store credit would be nice, too.</p>
<p>You can find a <a href="http://www.nytimes.com/2009/07/18/technology/companies/18amazon.html">New York Times article</a> on it, as well as a <a href="http://news.cnet.com/8301-13512_3-10290133-23.html">CNET article</a>, as well as a <a href="http://www.techdirt.com/articles/20090717/1559425587.shtml">Tech Dirt article</a> that brings up the very good point that deleting the books was very likely against the Kindle terms of service, which is why Amazon likely should offer those people something.</p>
<p>Among all the handwringing, there are a number of stupid people — or perhaps people who should just know better — who somehow mutter dark things about how this serves people right for getting a device that has DRM in it. (As if they&#8217;ve never owned a DVD.)</p>
<p>Some of these people who should know better might think that I&#8217;m somehow in favor of DRM, so let me say that I am not. I am against DRM. I am also against nuclear war, swine flu, totalitarian governments, and bad service in restaurants. I&#8217;m also against one or two other things. None of them had anything to do with this little contretemps.</p>
<p>The issue is caused not by DRM, but by cloud computing. The problem is that Amazon has a cloud service in which Kindle customers can keep their e-books on Amazon&#8217;s shelf, and shuffle them around to any Kindle-enable device they have (like a Kindle proper, or an iPhone running the Kindle app). Customers can even delete a book from their Kindle and get it back from the cloud at a later date.</p>
<p>The event is that Amazon removed the book from the cloud, not that it had DRM in it. If you are concerned by this, you should be concerned by the cloud service. The cloud service enabled Amazon to respond to a legal challenge by removing customers&#8217; data from the cloud. They didn&#8217;t need DRM to do it. In contrast, if iTunes store or the Sony e-book store had improperly sold a book, they wouldn&#8217;t be able to revoke it because they don&#8217;t have a cloud service as part of the store. (eMusic, incidentally, regularly adds and removes music from their store with the waxing and waning of desire to sell it.)</p>
<p>This is why we need to look at it for what it is, a failure in a business model and in the cloud service. Interestingly, the newly-formed <a href="http://cloudsecurityalliance.org/">Cloud Security Alliance</a> predicts similar issues in which outside parties cause a cloud provider to shaft its customers. Not bad.</p>
<p>Their prescience is a bit limited because the proposed solution to this problem is to encrypt the cloud data with some fancy key management. That wouldn&#8217;t work here for the same reason that DRM isn&#8217;t an issue. If I know you have a resource, it doesn&#8217;t matter if magic fairies protect it, if I can delete it. It&#8217;s still good advice, it just wouldn&#8217;t have worked here.</p>
<p>What&#8217;s needed is some sort of legal protection for the customers, not technical protection. There are many potential warts here. If the owners of Orwell&#8217;s copyrights do not desire any ebooks of his works, it&#8217;s hard for Amazon to go buy legal copies for their customers (which would have been the most right thing to do). And it&#8217;s hard to argue that the seller shouldn&#8217;t do everything in their power to undo a sale they shouldn&#8217;t have made.</p>
<p>The correct way to deal with this is through some sort of contract arrangement to protect the customer. (The Cloud Security Alliance is prescient on this, as well.) That contract should be the Terms Of Service between the cloud provider and its customers. As TechDirt pointed out, this was likely a breach of Amazon&#8217;s TOS. They&#8217;re not supposed to delete books. They said they wouldn&#8217;t. Because of this, they owe something to their customers who were on the losing end of this breach of contract beyond the refund. I think ten bucks store credit is fine, myself.</p>
<p>They really need to do something, however, because without doing something, then someday someone will violate their TOS with Amazon and defend it with this breach of the TOS.</p>
<p>However, if you want to cluck your tongue, it should not be about buying goods with DRM, it should be about goods stored in the cloud. Everyone who offers cloud services ought to be clarifying now what they will do to protect their customers against lawsuits from outside parties. It can be crypto or contracts, it doesn&#8217;t matter, it just needs to work. This may be the first major cloud-based customer service failure, but it won&#8217;t be the last.</p>
]]></content:encoded>
			<wfw:commentRss>http://emergentchaos.com/archives/2009/07/kindle-brouhaha-isnt-about-drm.html/feed</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
	</channel>
</rss>

