Tuesday, May 01, 2012

Important dates #3

On May 1, 2012, I sent out a consolidated version of the first two letters to representatives from Nascar, Indy Racing, NFL ownership and the NFL Commissioner.

The content of the letter sent to all 32 NFL owners:

In 1913, 73 people were crushed to death in the Italian Hall Disaster in Calumet, Michigan.  This event is generally regarded as the basis for placing reasonable limitations on the First Amendment.  Most refer to it as "falsely shouting fire in a crowded theater."  Roughly a century later, allow me to pose a similar question.  Is it conceivable to text "fire" in a crowded NFL stadium?  If a significant number of individuals received a text message conveying IMMINENT DANGER and/or the NEED TO IMMEDIATELY EVACUATE, the consequences could be catastrophic.  It would likely result in an artificially generated stampede.

Following the Virginia Tech massacre in 2007, companies offering mass text alerts became more commonplace.  Many of these companies offer SMS (short message service) systems to anyone willing to pay for them.  It's just a matter of time before someone with a pernicious agenda opts to utilize this platform.  Furthermore, a perpetrator would probably seek maximum impact as it would likely be a one-time occurrence.  

While security and safety measures have been greatly enhanced in the last decade, there has never been a credible plan to safely evacuate an NFL stadium in the event of a sudden panic.  Why?  Because it's simply not logistically feasible.  We have already witnessed the evolution of flash mobs and the recent spread of dangerous viral text hoaxes.  The prospect of hacking and manipulating a text alert system or cellular service provider represents the gravest concern.  But it's simply the mere existence and availability of lengthy lists of cell phone numbers corresponding to individuals in a confined location.  This, combined with the established level of trust placed in emergency SMS communication, represents the underlying problem.  

While I doubt that I am the first person to conceive of this potential threat, I do suspect this is the first time you've heard about an artificially generated stampede.  Other than virally spread text hoaxes, I've seen nothing about deliberately transmitting false texts in an attempt to create a sudden, mass panic.  There seems to be no discussion of this asymmetric security issue in the public domain.  And if you connect the dots between large crowds and the potential misuse of SMS technology, I think you'll agree that my concerns are justified.  Please consider the following:

    •     The potential for hacking or intentional misuse of any relevant text notification or fan alert system.  Due to their wider accessibility, socially driven media platforms such as Twitter represent another area of concern.   
   
    •      The acquisition of cloned cell phone lists linked to season ticket holders and employees.  A spoofed (disguised) message could easily be configured to appear as though it was sent from an opt-in notification system.

    •      A message originating from a wireless carrier.  You may recall the December 12, 2011 "Civil Emergency: Take Shelter Now" alert sent to Verizon customers in central New Jersey.  Termed a "malicious hoax" by Monmouth County Sheriff Shaun Golden, the event remains unexplained.  Although an apology was issued, there has been no admission of negligence or responsibility.

Being a whistle blower for a hypothetical national security threat is not something I relish, but I cannot in good conscience remain silent.  So in accordance with the Department of Homeland Security's "If You See Something, Say Something" campaign, I have made a moral determination to send you this letter.  I would encourage you to research this issue and take preventative action.  And while this problem is well beyond my area of expertise, I do have some suggestions.

    •    Acknowledge and prepare for an unpleasant reality.  In the event of an artificially generated stampede, any emergency evacuation protocol would most certainly be rendered useless.

    •    Understand that your incident commander may not have ultimate control over the content, timing and delivery of an evacuation order.  This represents a profoundly changed dynamic in stadium security.

    •    Assess the security of any cell phone lists associated with season ticket holders and employees.        
   
    •    Be cognizant of the timing and context of official social media updates.

    •     Employ a looped message via the public address system warning fans of the possibility of an artificially generated stampede.          
   
    •     Include an assumption of risk disclaimer on the ticket stub similar to a foul ball or broken bat warning: Cellular communication devices can be used to create artificially generated stampedes.  If you receive a message demanding an immediate evacuation, wait for official confirmation from the public address system.

    •     Conduct general awareness campaigns as a matter of policy.  A simple slogan such as "Think before you run" could prove very effective in thwarting a text-induced stampede.     

While you may have sufficient confidence in your own stadium emergency evacuation protocol, your security could be compromised by mere association with the wider NFL community.  We live in an era of breaking news and instant, personalized communication.  Because many NFL games overlap, revelations of a stampede at one or more stadiums could trigger additional stampedes, creating a domino or cascade effect.

An event of this nature would likely not be a hoax or accident.  It would be executed with malicious intent.  National Football League stadiums provide one of the most easily recognizable targets.  As the leaders of the organizations that put people into these crowded and therefore potentially dangerous environments, you have a moral obligation to warn people about the dangers of panic-laden text messages.  We need to raise awareness before a catastrophe transpires.  There will be no dress rehearsal.

I believe that the federal government will not address this issue until after a disaster has occurred.  Therefore, I would implore you to work with each other and exercise your considerable influence with state and local governments.  It is imperative to devise a time-sensitive game plan.  I am willing to meet with you personally to review this matter.  Please contact me if you have any questions or concerns.

"There are risks and costs to a program of action, but they are far less than the long-range risks and costs of comfortable inaction." - John F. Kennedy


Respectfully,

Eric Saferstein
contact information omitted


cc:   National Football League ownership
        Commissioner Roger Goodell, National Football League

Letters with similar content have been sent to the following individuals.
   
    Secretary Janet Napolitano, Department of Homeland Security
    Chairman Julius Genachowski, Federal Communications Commission
    Secretary Arne Duncan, Department of Education       
    NCAA Division I university presidents and chancellors   
    Representatives of Indy Racing League, Inc.
    Representatives of National Association for Stock Car Auto Racing, Inc.


This letter was sent to the following individuals:

alex spanos, san diego chargers *
arthur blank, atlanta falcons
bill bidwill, arizona cardinals
bob mcnair, houston texans
bud adams, tennessee titans *
clark hunt, kansas city chiefs
dan rooney, pittsburgh steelers *
daniel snyder, washington redskins *
denise york, san fransisco 49ers
james irsay, indianapolis colts
jeffrey lurie, philadelphia eagles
jerry jones, dallas cowboys
jerry richardson, carolina panthers
john mara, new york giants *
john york, san fransisco 49ers
malcolm glazer, tampa bay buccaneers
mark davis, oakland raiders *
mark murphy, green bay packers *
mike brown, cincinnati bengals
pat bowlen, denver broncos *
paul allen, seattle seahawks
ralph wilson, buffalo bills
randy lerner, cleveland browns
robert kraft, new england patriots
shahid khan, jacksonville jaguars
stan kroenke, st. louis rams
stephen ross, miami dolphins
steve bisciotti, baltimore ravens *
tom benson, new orleans saints
virginia halas mccaskey, chicago bears
william clay ford, detroit lions
woody johnson, New York Jets *
zygi wolf, minnesota vikings
roger goodell, NFL Commissioner

* - 2 letters were sent due to multiple addresses.


The following letter was sent to those who oversee the Nascar and Indy Racing circuits:

In 1913, 73 people were crushed to death in the Italian Hall Disaster in Calumet, Michigan.  This event is generally regarded as the basis for placing reasonable limitations on the First Amendment.  Most refer to it as "falsely shouting fire in a crowded theater."  Roughly a century later, allow me to pose a similar question.  Is it conceivable to text "fire" at a crowded racing venue?  If a significant number of individuals received a text message conveying IMMINENT DANGER and/or the NEED TO IMMEDIATELY EVACUATE, the consequences could be catastrophic.  It would likely result in an artificially generated stampede.

Following the Virginia Tech massacre in 2007, companies offering mass text alerts became more commonplace.  Many of these companies offer SMS (short message service) systems to anyone willing to pay for them.  It's just a matter of time before someone with a pernicious agenda opts to utilize this platform.  Furthermore, a perpetrator would probably seek maximum impact as it would likely be a one-time occurrence.  

While security and safety measures have been greatly enhanced in the last decade, there has never been a credible plan to safely evacuate an auto racing facility in the event of a sudden panic.  Why?  Because it's simply not logistically feasible.  We have already witnessed the evolution of flash mobs and the recent spread of dangerous viral text hoaxes.  The prospect of hacking and manipulating a text alert system or cellular service provider represents the gravest concern.  But it's simply the mere existence and availability of lengthy lists of cell phone numbers corresponding to individuals in a confined location.  This, combined with the established level of trust placed in emergency SMS communication, represents the underlying problem.  

While I doubt that I am the first person to conceive of this potential threat, I do suspect this is the first time you've heard about an artificially generated stampede.  Other than virally spread text hoaxes, I've seen nothing about deliberately transmitting false texts in an attempt to create a sudden, mass panic.  There seems to be no discussion of this asymmetric security issue in the public domain.  And if you connect the dots between large crowds and the potential misuse of SMS technology, I think you'll agree that my concerns are justified.  Please consider the following:

    •     The potential for hacking or intentional misuse of any relevant text notification system.  Due to their wider accessibility, socially driven media platforms such as Twitter represent another area of concern.   
   
    •      The acquisition of cloned cell phone lists linked to racing fans and speedway employees.  A spoofed (disguised) message could easily be configured to appear as though it was sent from an opt-in notification system.

    •      A message originating from a wireless carrier.  You may recall the December 12, 2011"Civil Emergency: Take Shelter Now" alert sent to Verizon customers in central New Jersey.  Termed a "malicious hoax" by Monmouth County Sheriff Shaun Golden, the event remains unexplained.  Although an apology was issued, there has been no admission of negligence or responsibility.

Being a whistle blower for a hypothetical national security threat is not something I relish, but I cannot in good conscience remain silent.  So in accordance with the Department of Homeland Security's "If You See Something, Say Something" campaign, I have made a moral determination to send you this letter.  I would encourage you to research this issue and take preventative action.  And while this problem is well beyond my area of expertise, I do have some suggestions.

    •    Acknowledge and prepare for an unpleasant reality.  In the event of an artificially generated stampede, any emergency evacuation protocol would most certainly be rendered useless.

    •    Understand that your incident commander may not have ultimate control over the content, timing and delivery of an evacuation order.  This represents a profoundly changed dynamic in stadium security.

    •    Assess the security of any cell phone lists associated with fans and speedway employees.        
   
    •    Be cognizant of the timing and context of official social media updates.

    •     Employ a looped message via the public address system warning fans of the possibility of an artificially generated stampede.          
   
    •     Include an assumption of risk disclaimer on the ticket stub similar to a foul ball or broken bat warning: Cellular communication devices can be used to create artificially generated stampedes.  If you receive a message demanding an immediate evacuation, wait for official confirmation from the public address system.

    •     Conduct general awareness campaigns as a matter of policy.  A simple slogan such as "Think before you run" could prove very effective in thwarting a text-induced stampede.     

An event of this nature would likely not be a hoax or accident.  It would be executed with malicious intent.  Crowded auto racing facilities provide one of the most easily recognizable targets.  As the leaders of the organizations that put people into these crowded and therefore potentially dangerous environments, you have a moral obligation to warn people about the dangers of panic-laden text messages.  We need to raise awareness before a catastrophe transpires.  There will be no dress rehearsal.

I believe that the federal government will not address this issue until after a disaster has occurred.  Therefore, I would implore you to work with each other and exercise your considerable influence with state and local governments.  It is imperative to devise a time-sensitive game plan.  I am willing to meet with you personally to review this matter.  Please contact me if you have any questions or concerns.

"There are risks and costs to a program of action, but they are far less than the long-range risks and costs of comfortable inaction." - John F. Kennedy


Respectfully,

Eric Saferstein
contact information omitted

This letter was sent to the following individuals:

brian barnhart, irl
brian z. france, nascar
charles burns, irl
gerry cavis, nascar
mike helton, nascar
randy bernard, irl

No comments: