Once the preserve of spies and their masters, cryptology – the science of keeping secrets – now affects us all.
Hardly a week goes by without news that one government has been spying on another, or that hackers have broken into a website and made off with client data.
Earlier this month the crowdfunding site Kickstarter became the latest high-profile victim of hacking. Customer information including usernames, email and postal addresses were stolen.
The company insists no credit card data was accessed, and that the security breach has been rectified. Even so, it has advised its five million-plus users to change their passwords “as a precaution”.
All of which prompts the question: why can’t these supposedly tech-savvy companies keep our secrets secret?
Bluntly, the fault largely lies not with them, but with us. Despite countless warnings, surveys suggest that about 80 per cent of the passwords we use are virtually hopeless.
Last month, online security company SplashData announced that “123456” now topped its annual Worst Password list – having beaten that long-standing champ “password” into second place.
It’s hardly a secret why such pathetic passwords are so common: most of us just can’t be bothered to devise and memorise individual, secure passwords for all the sites we access.
This highlights one of the enduring challenges of real-life cryptology: the compromise between security and convenience. And it’s one that a UAE-based cryptologist is trying to tackle. Dr Ziyad Al Salloum, of ZSS Research, Ras Al Khaimah, thinks the answer lies in pictures rather than words.
We all know we’re supposed to pick passwords made from long, complex character strings, such as 45Gh6%7hUklR9#3. With more permutations than there are particles in the universe, such a password is all but impossible to break.
But such passwords are also incredibly hard for humans to remember, and even cryptologists accept that for that reason they are never going to be widely used.
That’s led them to turn to a neat mathematical trick to make even “123456” a bit harder to break.
In school maths, we learn how to “undo” the operation of multiplication by using the reverse process of division. In the mid-1970s, cryptologists began investigating a means of keeping passwords secret using operations that are very hard to reverse.
They focused on so-called “hash functions” – ways of scrambling long strings of characters that can’t easily be reversed.
The idea was that companies would then store not the client passwords themselves, but only the scrambled versions.
Every time a user typed in a password, it would be scrambled according to the mathematical recipe and the outcome checked against the list of scrambled versions held by the company, which would have no idea what the original password actually is.
That solves the problem of both company insiders or outside hackers getting access to the original passwords – as the hashing process is very hard to undo.
Or at least, that was the theory. Like most clever ideas in cryptology, however, it quickly fell victim to the ingenuity of code-breakers. They found a neat trick for undermining the hashing process, called a dictionary attack.
This involves compiling a “dictionary” of the hashed version of likely passwords, and looking for these in the stolen records. As the same characters always produce the same hashed versions, the dictionary would then reveal the original password.
The cryptologists hit back by adding a long random number to every password before it gets hashed. Known as “salting”, this hides the connection between the password and the hashed version, preventing dictionary attacks.
This is the basic method used by many commercial companies – including Kickstarter – to keep client passwords safe.
Even with this extra security, clients using weak passwords are still much more vulnerable than others. That’s because hackers start with simple passwords, and then focus on removing the random number “salt” to see if they’re right.
So what can be done to get everyone to use better passwords? Making complex ones more memorable would be a start.
And that’s the approach being taken by Dr Al Salloum. He is developing a source of unguessable passwords based on the fact that we remember places far better than random character strings.
The idea is very simple: instead of picking passwords, we pick a place in the world that means something to us from an online atlas similar to Google Maps. Divided up into a grid of hundreds of billions of squares, this “password atlas” allows the location of our special place to be turned into a very long number-string. This can then be added to a long random number “salt”, and the combination converted via a hash function into a very secure password string. All we have to remember is the location – a building, say, or road junction – that we chose.
Describing his method in the current issue of the International Journal of Signal and Imaging Systems Engineering, Dr Al Salloum says it’s far more resistant to standard hacking techniques used to turn hash strings back into passwords.
Perhaps so, but it’s unclear whether it will stop people swapping their guessable passwords like “123456” for images of guessable locations like the Eiffel Tower or the Burj Khalifa.
And even if it does, you can be sure the hackers will find a way around it eventually. Cryptologists know they’re locked in a Darwinian war for supremacy that’s not going to stop any time soon.
In the meantime, there’s a trick anyone can use to create better passwords: use pass-phrases instead.
Think of a simple phrase – such as “Brad Pitt was born in Oklahoma in 1963” – and take the initials of each word, plus the number: “BPwbiOi1963”.
The result is not utterly unbreakable, but it’s easy to remember – and it’ll keep hackers out of your account for longer than it takes to type “123456”.
Robert Matthews is visiting reader in science at Aston University, Birmingham
More from Neighbourhood Watch
COMPANY PROFILE
Name: Xpanceo
Started: 2018
Founders: Roman Axelrod, Valentyn Volkov
Based: Dubai, UAE
Industry: Smart contact lenses, augmented/virtual reality
Funding: $40 million
Investor: Opportunity Venture (Asia)
Company Profile
Company name: Namara
Started: June 2022
Founder: Mohammed Alnamara
Based: Dubai
Sector: Microfinance
Current number of staff: 16
Investment stage: Series A
Investors: Family offices
COMPANY PROFILE
Company name: Klipit
Started: 2022
Founders: Venkat Reddy, Mohammed Al Bulooki, Bilal Merchant, Asif Ahmed, Ovais Merchant
Based: Dubai, UAE
Industry: Digital receipts, finance, blockchain
Funding: $4 million
Investors: Privately/self-funded
US households add $601bn of debt in 2019
American households borrowed another $601 billion (Dh2.2bn) in 2019, the largest yearly gain since 2007, just before the global financial crisis, according to February data from the New York Federal Reserve Bank.
Fuelled by rising mortgage debt as homebuyers continued to take advantage of low interest rates, the increase last year brought total household debt to a record high, surpassing the previous peak reached in 2008 just before the market crash, according to the report.
Following the 22nd straight quarter of growth, American household debt swelled to $14.15 trillion by the end of 2019, the New York Fed said in its quarterly report.
In the final three months of the year, new home loans jumped to their highest volume since the fourth quarter of 2005, while credit cards and auto loans also added to the increase.
The bad debt load is taking its toll on some households, and the New York Fed warned that more and more credit card borrowers — particularly young people — were falling behind on their payments.
"Younger borrowers, who are disproportionately likely to have credit cards and student loans as their primary form of debt, struggle more than others with on-time repayment," New York Fed researchers said.
The Afghan connection
The influx of talented young Afghan players to UAE cricket could have a big impact on the fortunes of both countries. Here are three Emirates-based players to watch out for.
Hassan Khan Eisakhil
Mohammed Nabi is still proving his worth at the top level but there is another reason he is raging against the idea of retirement. If the allrounder hangs on a little bit longer, he might be able to play in the same team as his son, Hassan Khan. The family live in Ajman and train in Sharjah.
Masood Gurbaz
The opening batter, who trains at Sharjah Cricket Academy, is another player who is a part of a famous family. His brother, Rahmanullah, was an IPL winner with Kolkata Knight Riders, and opens the batting with distinction for Afghanistan.
Omid Rahman
The fast bowler became a pioneer earlier this year when he became the first Afghan to represent the UAE. He showed great promise in doing so, too, playing a key role in the senior team’s qualification for the Asia Cup in Muscat recently.
Key changes
Commission caps
For life insurance products with a savings component, Peter Hodgins of Clyde & Co said different caps apply to the saving and protection elements:
• For the saving component, a cap of 4.5 per cent of the annualised premium per year (which may not exceed 90 per cent of the annualised premium over the policy term).
• On the protection component, there is a cap of 10 per cent of the annualised premium per year (which may not exceed 160 per cent of the annualised premium over the policy term).
• Indemnity commission, the amount of commission that can be advanced to a product salesperson, can be 50 per cent of the annualised premium for the first year or 50 per cent of the total commissions on the policy calculated.
• The remaining commission after deduction of the indemnity commission is paid equally over the premium payment term.
• For pure protection products, which only offer a life insurance component, the maximum commission will be 10 per cent of the annualised premium multiplied by the length of the policy in years.
Disclosure
Customers must now be provided with a full illustration of the product they are buying to ensure they understand the potential returns on savings products as well as the effects of any charges. There is also a “free-look” period of 30 days, where insurers must provide a full refund if the buyer wishes to cancel the policy.
“The illustration should provide for at least two scenarios to illustrate the performance of the product,” said Mr Hodgins. “All illustrations are required to be signed by the customer.”
Another illustration must outline surrender charges to ensure they understand the costs of exiting a fixed-term product early.
Illustrations must also be kept updatedand insurers must provide information on the top five investment funds available annually, including at least five years' performance data.
“This may be segregated based on the risk appetite of the customer (in which case, the top five funds for each segment must be provided),” said Mr Hodgins.
Product providers must also disclose the ratio of protection benefit to savings benefits. If a protection benefit ratio is less than 10 per cent "the product must carry a warning stating that it has limited or no protection benefit" Mr Hodgins added.
Zidane's managerial achievements
La Liga: 2016/17
Spanish Super Cup: 2017
Uefa Champions League: 2015/16, 2016/17, 2017/18
Uefa Super Cup: 2016, 2017
Fifa Club World Cup: 2016, 2017
The specs: 2018 Peugeot 5008
Price, base / as tested: Dh99,900 / Dh134,900
Engine: 1.6-litre turbocharged four-cylinder
Transmission: Six-speed automatic
Power: 165hp @ 6,000rpm
Torque: 240Nm @ 1,400rpm
Fuel economy, combined: 5.8L / 100km
Draw for Europa League last-16
Istanbul Basaksehir v Copenhagen; Olympiakos Piraeus v Wolverhampton Wanderers
Rangers v Bayer Leverkusen; VfL Wolfsburg v Shakhtar Donetsk; Inter Milan v Getafe
Sevilla v AS Roma; Eintracht Frankfurt or Salzburg v Basel; LASK v Manchester United
Mercer, the investment consulting arm of US services company Marsh & McLennan, expects its wealth division to at least double its assets under management (AUM) in the Middle East as wealth in the region continues to grow despite economic headwinds, a company official said.
Mercer Wealth, which globally has $160 billion in AUM, plans to boost its AUM in the region to $2-$3bn in the next 2-3 years from the present $1bn, said Yasir AbuShaban, a Dubai-based principal with Mercer Wealth.
“Within the next two to three years, we are looking at reaching $2 to $3 billion as a conservative estimate and we do see an opportunity to do so,” said Mr AbuShaban.
Mercer does not directly make investments, but allocates clients’ money they have discretion to, to professional asset managers. They also provide advice to clients.
“We have buying power. We can negotiate on their (client’s) behalf with asset managers to provide them lower fees than they otherwise would have to get on their own,” he added.
Mercer Wealth’s clients include sovereign wealth funds, family offices, and insurance companies among others.
From its office in Dubai, Mercer also looks after Africa, India and Turkey, where they also see opportunity for growth.
Wealth creation in Middle East and Africa (MEA) grew 8.5 per cent to $8.1 trillion last year from $7.5tn in 2015, higher than last year’s global average of 6 per cent and the second-highest growth in a region after Asia-Pacific which grew 9.9 per cent, according to consultancy Boston Consulting Group (BCG). In the region, where wealth grew just 1.9 per cent in 2015 compared with 2014, a pickup in oil prices has helped in wealth generation.
BCG is forecasting MEA wealth will rise to $12tn by 2021, growing at an annual average of 8 per cent.
Drivers of wealth generation in the region will be split evenly between new wealth creation and growth of performance of existing assets, according to BCG.
Another general trend in the region is clients’ looking for a comprehensive approach to investing, according to Mr AbuShaban.
“Institutional investors or some of the families are seeing a slowdown in the available capital they have to invest and in that sense they are looking at optimizing the way they manage their portfolios and making sure they are not investing haphazardly and different parts of their investment are working together,” said Mr AbuShaban.
Some clients also have a higher appetite for risk, given the low interest-rate environment that does not provide enough yield for some institutional investors. These clients are keen to invest in illiquid assets, such as private equity and infrastructure.
“What we have seen is a desire for higher returns in what has been a low-return environment specifically in various fixed income or bonds,” he said.
“In this environment, we have seen a de facto increase in the risk that clients are taking in things like illiquid investments, private equity investments, infrastructure and private debt, those kind of investments were higher illiquidity results in incrementally higher returns.”
The Abu Dhabi Investment Authority, one of the largest sovereign wealth funds, said in its 2016 report that has gradually increased its exposure in direct private equity and private credit transactions, mainly in Asian markets and especially in China and India. The authority’s private equity department focused on structured equities owing to “their defensive characteristics.”
Nepotism is the name of the game
Salman Khan’s father, Salim Khan, is one of Bollywood’s most legendary screenwriters. Through his partnership with co-writer Javed Akhtar, Salim is credited with having paved the path for the Indian film industry’s blockbuster format in the 1970s. Something his son now rules the roost of. More importantly, the Salim-Javed duo also created the persona of the “angry young man” for Bollywood megastar Amitabh Bachchan in the 1970s, reflecting the angst of the average Indian. In choosing to be the ordinary man’s “hero” as opposed to a thespian in new Bollywood, Salman Khan remains tightly linked to his father’s oeuvre. Thanks dad.
Recent winners
2002 Giselle Khoury (Colombia)
2004 Nathalie Nasralla (France)
2005 Catherine Abboud (Oceania)
2007 Grace Bijjani (Mexico)
2008 Carina El-Keddissi (Brazil)
2009 Sara Mansour (Brazil)
2010 Daniella Rahme (Australia)
2011 Maria Farah (Canada)
2012 Cynthia Moukarzel (Kuwait)
2013 Layla Yarak (Australia)
2014 Lia Saad (UAE)
2015 Cynthia Farah (Australia)
2016 Yosmely Massaad (Venezuela)
2017 Dima Safi (Ivory Coast)
2018 Rachel Younan (Australia)
Results
6.30pm Al Maktoum Challenge Round-3 Group 1 (PA) US$100,000 (Dirt) 2,000m, Winner Bandar, Fernando Jara (jockey), Majed Al Jahouri (trainer).
7.05pm Meydan Classic Listed (TB) $175,000 (Turf) 1,600m, Winner Well Of Wisdom, William Buick, Charlie Appleby.
7.40pm Handicap (TB) $135,000 (T) 2,000m, Winner Star Safari, Mickael Barzalona, Charlie Appleby.
8.15pm Handicap (TB) $135,000 (D) 1,600m, Winner Moqarrar, Fabrice Veron, Erwan Charpy.
8.50pm Nad Al Sheba Trophy Group 2 (TB) $300,000 (T) 2,810m, Winner Secret Advisor, William Buick, Charlie Appleby.
9.25pm Curlin Stakes Listed (TB) $175,000 (D) 2,000m, Winner Parsimony, William Buick, Doug O’Neill.
10pm Handicap (TB) $135,000 (T) 2,000m, Winner Simsir, Ronan Whelan, Michael Halford.
10.35pm Handicap (TB) $175,000 (T) 1,400m, Winner Velorum, Mickael Barzalona, Charlie Appleby.
Naga
Director: Meshal Al Jaser
Starring: Adwa Bader, Yazeed Almajyul, Khalid Bin Shaddad
Rating: 4/5
Crops that could be introduced to the UAE
1: Quinoa
2. Bathua
3. Amaranth
4. Pearl and finger millet
5. Sorghum
Abandon
Sangeeta Bandyopadhyay
Translated by Arunava Sinha
Tilted Axis Press
Prop idols
Girls full-contact rugby may be in its infancy in the Middle East, but there are already a number of role models for players to look up to.
Sophie Shams (Dubai Exiles mini, England sevens international)
An Emirati student who is blazing a trail in rugby. She first learnt the game at Dubai Exiles and captained her JESS Primary school team. After going to study geophysics at university in the UK, she scored a sensational try in a cup final at Twickenham. She has played for England sevens, and is now contracted to top Premiership club Saracens.
----
Seren Gough-Walters (Sharjah Wanderers mini, Wales rugby league international)
Few players anywhere will have taken a more circuitous route to playing rugby on Sky Sports. Gough-Walters was born in Al Wasl Hospital in Dubai, raised in Sharjah, did not take up rugby seriously till she was 15, has a master’s in global governance and ethics, and once worked as an immigration officer at the British Embassy in Abu Dhabi. In the summer of 2021 she played for Wales against England in rugby league, in a match that was broadcast live on TV.
----
Erin King (Dubai Hurricanes mini, Ireland sevens international)
Aged five, Australia-born King went to Dubai Hurricanes training at The Sevens with her brothers. She immediately struck up a deep affection for rugby. She returned to the city at the end of last year to play at the Dubai Rugby Sevens in the colours of Ireland in the Women’s World Series tournament on Pitch 1.
The biog
Name: Timothy Husband
Nationality: New Zealand
Education: Degree in zoology at The University of Sydney
Favourite book: Lemurs of Madagascar by Russell A Mittermeier
Favourite music: Billy Joel
Weekends and holidays: Talking about animals or visiting his farm in Australia
FA Cup fifth round draw
Sheffield Wednesday v Manchester City
Reading/Cardiff City v Sheffield United
Chelsea v Shrewsbury Town/Liverpool
West Bromwich Albion v Newcastle United/Oxford United
Leicester City v Coventry City/Birmingham City
Northampton Town/Derby County v Manchester United
Southampton/Tottenham Hotspur v Norwich City
Portsmouth v Arsenal
THE BIO
Favourite car: Koenigsegg Agera RS or Renault Trezor concept car.
Favourite book: I Am Pilgrim by Terry Hayes or Red Notice by Bill Browder.
Biggest inspiration: My husband Nik. He really got me through a lot with his positivity.
Favourite holiday destination: Being at home in Australia, as I travel all over the world for work. It’s great to just hang out with my husband and family.
In the Land of Saints and Sinners
Director: Robert Lorenz
Starring: Liam Neeson, Kerry Condon, Jack Gleeson, Ciaran Hinds
Rating: 2/5
SPEC SHEET: APPLE IPHONE 15 PRO MAX
Display: 6.7" Super Retina XDR OLED, 2796 x 1290, 460ppi, 120Hz, 2000 nits max, HDR, True Tone, P3, always-on
Processor: A17 Pro, 6-core CPU, 6-core GPU, 16-core Neural Engine
Memory: 8GB
Capacity: 256/512GB / 1TB
Platform: iOS 17
Main camera: Triple: 48MP main (f/1.78) + 12MP ultra-wide (f/2.2) + 12MP 5x telephoto (f/2.8); 5x optical zoom in, 2x optical zoom out; 10x optical zoom range, digital zoom up to 25x; Photonic Engine, Deep Fusion, Smart HDR 4, Portrait Lighting
Main camera video: 4K @ 24/25/30/60fps, full-HD @ 25/30/60fps, HD @ 30fps, slo-mo @ 120/240fps, ProRes (4K) @ 60fps; night, time lapse, cinematic, action modes; Dolby Vision, 4K HDR
Front camera: 12MP TrueDepth (f/1.9), Photonic Engine, Deep Fusion, Smart HDR 4, Portrait Lighting; Animoji, Memoji
Front camera video: 4K @ 24/25/30/60fps, full-HD @ 25/30/60fps, slo-mo @ 120/240fps, ProRes (4K) @ 30fps; night, time lapse, cinematic, action modes; Dolby Vision, 4K HDR
Battery: 4441mAh, up to 29h video, 25h streaming video, 95h audio; fast charge to 50% in 30min (with at least 20W adaptor); MagSafe, Qi wireless charging
Connectivity: Wi-Fi, Bluetooth 5.3, NFC (Apple Pay), second-generation Ultra Wideband chip
Biometrics: Face ID
I/O: USB-C
Durability: IP68, water-resistant up to 6m up to 30min; dust/splash-resistant
Cards: Dual eSIM / eSIM + eSIM (US models use eSIMs only)
Colours: Black titanium, blue titanium, natural titanium, white titanium
In the box: iPhone 15 Pro Max, USB-C-to-USB-C woven cable, one Apple sticker
Price: Dh5,099 / Dh5,949 / Dh6,799
COMPANY PROFILE
Company name: Revibe
Started: 2022
Founders: Hamza Iraqui and Abdessamad Ben Zakour
Based: UAE
Industry: Refurbished electronics
Funds raised so far: $10m
Investors: Flat6Labs, Resonance and various others
COMPANY PROFILE
Company: Eco Way
Started: December 2023
Founder: Ivan Kroshnyi
Based: Dubai, UAE
Industry: Electric vehicles
Investors: Bootstrapped with undisclosed funding. Looking to raise funds from outside
The biog
Name: Sari Al Zubaidi
Occupation: co-founder of Cafe di Rosati
Age: 42
Marital status: single
Favourite drink: drip coffee V60
Favourite destination: Bali, Indonesia
Favourite book: 100 Years of Solitude
The specs
Engine: 3.9-litre twin-turbo V8
Power: 620hp from 5,750-7,500rpm
Torque: 760Nm from 3,000-5,750rpm
Transmission: Eight-speed dual-clutch auto
On sale: Now
Price: From Dh1.05 million ($286,000)
MATCH INFO
Wales 1 (Bale 45+3')
Croatia 1 (Vlasic 09')
SPECS
Engine: 1.5-litre turbo
Power: 181hp
Torque: 230Nm
Transmission: 6-speed automatic
Starting price: Dh79,000
On sale: Now
Our legal consultants
Name: Hassan Mohsen Elhais
Position: legal consultant with Al Rowaad Advocates and Legal Consultants.
MATCH INFO
Uefa Champions League semi-finals, second leg:
Liverpool (0) v Barcelona (3), Tuesday, 11pm UAE
Game is on BeIN Sports
The Great Derangement: Climate Change and the Unthinkable
Amitav Ghosh, University of Chicago Press
Kill
Director: Nikhil Nagesh Bhat
Starring: Lakshya, Tanya Maniktala, Ashish Vidyarthi, Harsh Chhaya, Raghav Juyal
Rating: 4.5/5