Mostly discussed as flag-planting, which is a shame, because underneath it sits a specific engineering question: which capabilities could somebody outside your jurisdiction switch off, and what do you do then?
The UK has the power to issue a technical capability notice under the Investigatory Powers Act. Apple withdrew Advanced Data Protection for UK users rather than weaken it. Almost everything else about the case is secret, including whether the notice exists.
The internet was designed to route around failure. A large slice of it now routes through a handful of providers, and the failures that produces are not the ones the design had in mind.
Half the infrastructure in this notebook assumes it can ask the sky what time it is. Jamming and spoofing of satellite navigation are now routine over large parts of Europe and the Middle East, which turns a free, assumed-correct input into something an adversary writes. The engineering response is holdover, and almost nobody has specified it.
Seven years of relicensing, three forks with foundations behind them, two walk-backs and one proprietary vendor ending perpetual licences outright. Read as supply chain rather than as community drama, the pattern is consistent: the licence on a dependency is a commercial term, and commercial terms change.
Engineers read standards as technical documents. They're the written record of what a room full of competitors could agree to, which explains most of their stranger features and tells you exactly where to apply pressure.
Since October 2022 the specification of an accelerator you are permitted to buy has been written partly in Washington, in units of processing power and interconnect bandwidth. Export control used to be a legal department's problem. It is now a line in the architecture, and it is the first time in this notebook's span that a chip's spec sheet has been set by policy.
The asymmetry cliché is true, and it is usually wheeled out as grounds for despair. Read properly it argues for a particular kind of engineering: reduce what has to be defended rather than defending it better.
Two years of government documents ask vendors to stop writing new code in memory-unsafe languages and to publish roadmaps for the old code. None of it is law. The clearest production-scale evidence yet that the roadmap approach works arrived last month: five years of Android results, published by the vendor rather than demanded by a regulator.
The legislation deals with parts and manuals. The practical barrier has moved on to signed firmware, parts pairing and who gets to say a component is genuine.
A phrase that barely existed last year is now in ministerial speeches. It was introduced by the company that sells the accelerators, and the definition it carries makes buying those accelerators the proof of sovereignty.
Why public-sector IT keeps producing the same outcomes: the failure sits upstream of any engineering, in a procurement model that selects for the appearance of risk transfer.
Almost every useful security tool is also an attack tool. The question was never whether to build dual-use technology; it is what you owe the people downstream of it.
Every platform eventually works out that the boundary it controls is worth more than the product inside it. Which is the very reason the boundary should be the thing you specify.
A first-person-view quadcopter with a warhead taped to it costs a few hundred pounds and destroys a vehicle worth several million. The airframe is a toy, the radio is a toy, and the only component that was ever hard is now a model that fits on a board you can buy. That is a cost inversion, and cost inversions do not reverse.
A pacemaker, a cochlear implant and an insulin pump are embedded computers with firmware, update paths and signing keys. Every assumption this trade makes about patching, rollback and end-of-life was written for machines you can switch off, and none of them survives contact with a device that is inside somebody.
A neural network won CASP13 outright, and a sequencer that runs off a laptop's USB port costs less than a server. Biology is becoming a field where the expensive instrument is a model and the cheap instrument fits in a coat pocket, which changes who is able to do the work and who ends up holding the data.
