What About KRACK?

It seems some marketing wonks at Norton have noticed the publicity around KRACK, a recently discovered vulnerability in the main wi-fi standard, and have decided to spread some FUD (fear, uncertainty and doubt) in the hope of generating a few extra sales for their VPN package.

I've been contacted by customers who have received scary emails from Norton telling them:

"All Wi-Fi connection points and devices could be vulnerable—your local coffee shop, home, or workplace connection.

KRACK can allow attackers access to important information like credit card numbers, passwords, and emails transmitted over Wi-Fi networks. This vulnerability can also allow attackers to potentially infect your devices with malware or ransomware."

Then comes the sales pitch:

"HIGHLY RECOMMENDED - Consider using a secure Virtual Private Network (VPN) such as Norton WiFi Privacy*, to help protect your data against this new threat."

Personally the last people I would trust to protect my wi-fi would be those who deliberately spread misleading information for gain, but that's a matter of personal (dis)taste.

So what is KRACK? Most wi-fi networks these days are encrypted to protect against eavesdropping, with the commonest form of encryption being something known as WPA2 (Wi-fi Protected Access 2). KRACK (Key Reinstallation Attacks) is a newly discovered way of breaking into WPA2-protected wi-fi networks. It targets the devices on the network, rather than the wi-fi as such, so changing your password doesn't help.

So far, so scary ... why am I suggesting Norton's email was more marketing FUD than engineering reality?

The way Microsoft and Apple implemented WPA2 on their PCs and laptops happens to be resistant to this particular attack, and both have released patches to fix remaining issues, so up-to-date Windows, iOS, macOS, tvOS and watchOS devices should be fine.

If you are sending credit card numbers and the like over the internet, I very much hope you are checking that the website you are sending them to uses https - every major vendor that I am aware of does. Https encrypts your details before they ever get near the wi-fi, so anyone breaking into the wi-fi would only get gobbledegook. Similarly with most passwords; and the vast majority of email providers support something similar (https, SSL or TLS) for email messages.

There are genuine concerns about smartphones. About half of smartphones being used were thought to be vulnerable when the problem was discovered (ironically, the newer ones with an Android version greater than 6.0). Apple phones should already be fixed, and Google's own phones should be updated with a fixed version of Android fairly quickly, but other manufacturers can be slow distributing updates. The comments above about https and other end-to-end encryption methods still apply though.

There are also concerns about the 'Internet of Things' - smart kettles, baby monitors used over the internet, and the like. To be honest, these have such a bad reputation for insecurity that I'm not sure KRACK makes much odds - although hopefully it will increase pressure on manufacturers to get a grip and take security seriously.

There are things that you should do as a result of this scare (under most circumstances buying a VPN service is NOT one of them):-

• Make sure your Windows/macOS/iOs is up-to-date with its scheduled updates;
• If you have an Android smart phone and its Android version is 6 or greater (or you cannot see what the version is), contact your phone supplier to ask if it is patched against KRACK;
• If your printer software asks to patch your printer firmware (check the request comes from the printer software itself, not an email or a website pop-up) then let it.
• If your broadband router came from your broadband supplier (not all do), contact them to see if they have updated the router software against KRACK.
• If you are filling in personal information on a website, make sure the website address starts with https (sometimes this is indicated by a padlock) - if it doesn't, you can often add the 's' yourself and it will take you to a secure version of the page.
• It is a good idea to protect all PCs and laptops with a reputable antivirus (Norton Antivirus is one example), for all sorts of important reasons. I suggest you seriously consider also protecting your Android smartphone with its own antivirus.

KRACK is mostly a major problem for high-level technical infrastructure and in corporate environments. For home users it is largely common sense and not letting the marketeers panic you. 

"Jesus Might Have Been Gay"

That made me blink!

The context was a book promotion, by its three Dutch authors, of a new book called Re-imagining The Bible For Today. It was advertised as being about engaging people from around the fringes of faith with the Bible, which was enough to drag me across to Salisbury on my scooter one slightly chilly Friday afternoon.

One of the areas they talked about in their presentation was times they had encouraged special-interest groups to question and interact with the text: feminists, environmentalists and gay groups included. I must admit my 'political correctness' alarm was ringing at this point, but the discussions actually seem to have been carefully structured and focused to genuinely provoke a different way of looking at well-known texts.

One example Bert Dicou spoke about was a time he led a discussion on the story of the disciples on the road to Emmaus, with a gay activist group. It seems they related easily to ideas about travelling and eating together and so growing a relationship, but one of the young men had a question: might Jesus have been gay? It seems Dicou (or maybe someone else involved) told him that he might have been. The young man found himself freed to start attending his local church, for the first time since childhood.

That has to be a good thing, surely, but I must admit the answer given brought me up short - it was, for me, such an unexpected idea. Which I guess is the idea of such discussions, they help us think the unthinkable. I find it raises two main extra questions of its own.

The first is the obvious one: might Jesus have been gay ... really?

I am not aware of anything in the Gospels which so much as hints that Jesus was sexually active: contextually it seems plausible to assume that he was not. Which leaves his sexuality - in the sense of any romantic or sexual attractions - a completely blank page. Within the constraints of what we are told, the rest we tentatively assume for ourselves. So it is genuinely reasonable to say that Jesus might have been gay - although also reasonable to say that he probably wasn't.

The other question I find myself wondering is why that 'might' made such a difference to the young man?

I suspect it could be to do with being part of a community which has long been discriminated against: an 'us and them' with Jesus assumed to be part of the excluding majority. A session engaging with Jesus as a companion and  a traveller helps to break down religious preconceptions, then even just the possibility that Jesus might have been part of the young man's community helps him to see that Jesus can accept and love him as he is. The rigid boundary just isn't there with Jesus.

That simple might leaves the understanding that, for him, Jesus really was 'one of us', therefore he can be one of Jesus' followers. He is free because he understands that Jesus is free, is another way to look at it.

Either way, a good excuse for an excellent song from Joan Osborne:

Vision & Seeing

At St John's over the next six months or so we will be exploring visions for our future as a 'community church', in partnership with a group from Greyfriars who, we hope, will be coming to join us. With a bit of luck we'll also be exploring in partnership with God ... there's not much point if not!

So this post is intended to be a quick (-ish) summary of where I'm at now, at the start of this shared process - obviously this is something we've been looking at ourselves for a while, so none of us are really starting from a blank sheet.

In the best church tradition, I'll do this as three points ... or maybe just three different angles.

The first part is simply the idea mentioned above: that St John's needs to be a community church. Not a church defined by it's walls, although they give a good local focus; nor by its churchgoers, although they are its lifeblood; but by the community it engages with, serves, and works with.

Churches just 'serving' their local community sometimes lose the plot, because that's not really how people work. It is in working in partnership with people that all grow and all can use their talents together in the most effective ways. I was listening to a lady from Greyfriars a couple of weeks ago who spoke of "a church without walls", which conveys the idea nicely.

The next point is about numbers. I think we need a decent sized core congregation to provide the foundation (in Jesus, of course), stability and direction for the work. I see that as being around 100 people over a couple of congregations. Any larger and the thing becomes an all-devouring monster, in my view. But we are within a community of over 9,000 people, so if we are to be really effective we will need to involve and include much more than that core congregation.

Currently we take part in a number of initiatives which are separate from the core of the church and are run in partnership with those who go to other churches or none: there's a 'cooking club' on the Amersham Road estate, which is intended to grow into a 'fresh expression' but needs resource to really progress; there is the 'community cafe' on Tuesdays, which could usefully run on other days of the week; there is a 'food for families' group using part of the church grounds. All of these involve us, are separate from the church organisation, and have great potential to grow and do much, much more if more people got involved.

I see this as the best model going forward: a kind of 'hub and satellites' picture. Something where people who 'don't go to church' can live and grow as enthusiastic followers of Jesus without getting bogged down in all the 'religious' stuff.

The final point is not about organisation or about models, but about who we are especially there for. Who we can work with to be life-giving and grace-transmitting. To my mind the priority should be those who are lonely and lost in our neighbourhoods; those who feel worthless and rejected; those with enormous creativity and love to bring to the table, but who don't feel they belong enough to have the right outlet. Those whom God especially loves because religious people have traditionally turned their backs on them.

The thought of partnering with people from Greyfriars to reach those in need of such life-giving inclusion and welcome is one I find concerning^*. But that is the nature of God's Kingdom: it moves forward through the most unexpected people.

To finish, the final verse and chorus from the Bad Pollyanna song above, which I think says a lot about what churches should be relaying to their communities:

Let me put my cards on the table
I've been where you are
I'll never see the stain of a label
Or a scar
You need to know that I won't reject you
Let's unbreak your heart
You are not the voices that shame you

When you are lost
I will find you
Through the dark
I can see you
And you are loved
You are worthy
You can't hide
All the beauty
I can see you

Because that's what Jesus says ... to you and to those around you.

* NB 'Concern' does not equal rejection, more an appreciation that God's way sometimes involves a degree of surprise. It seems likely that those considering moving to St John's will have concerns of their own, of course.

Lyriel's Road Not Taken

Two roads diverged in a yellow wood
And sorry I could not travel both
And be one traveler, long I stood
And looked down one as far as I could

Lyriel's Leverage album is sometimes seen as a transitional work between their earlier 'folk metal' and the heavier more Gothic metal of Skin and Bones. A good track to illustrate this, perhaps, is The Road Not Taken with its journey from acoustic guitar and strings to full-band metal for the final chorus.

Be that as it may, this is an interesting track lyrically, based as it is on the apparently deliberate (and possibly fatal) ambiguity of Robert Frost's 1915 poem.

Both song and poem end on the phrase, "Two roads diverged in a wood, and I - I took the one less travelled by, and that has made all the difference". 

In our time of celebration of difference and our felt right to make our own choices, this lyric is often seen as telling us to walk our own distinct way and choose our own unique destiny. Yet, according to Frost's biographer, Lawrance Thompson, the poem is based on Frost's indecisive friend Edward Thomas, who "whichever road he went, would be sorry he didn't go the other." So the original poem is about the waste of energy in pointless regret, always looking back and worrying about "what if".

Which way does the Lyriel song lean? It is, of course, hard to tell as they retain the ambiguity in their selection of lines from the poem.

But there may be a pointer in the final song on the Leverage album, Repentance. This features the following lyric:

"Repentance is a path that we can not walk for long, my dear. ... Come with me and I will show you how to choose a side."

So maybe their take is that you can only waste energy worrying about the past for so long, before you need to commit to one path or the other.

Of course I may just be projecting my own views onto this - it is easily done.

Because I have undoubtedly wasted time and energy myself second-guessing choices already made. Somewhere there is a balance between flexibility and commitment and I don't always hit it, I know.

From a Christian point of view, our calling is to serve God through Jesus wherever we are, in whatever circumstance. It makes sense to seek God's will for the future perhaps, but not to stress too much about it. He is with us wherever we are and, I think, he most appreciates working with us on the choices that we ourselves make and are fully committed to.

So our calling is to commit to our path with God, here and now. Not to worry overmuch about either past or future, but to be fully present in, well, the present. That's where we can make a difference.

Frost's indecisive friend, Edward Thomas, finally decided to commit to signing up for the First World War shortly after, where he was duly killed on the first day of the Battle of Arras. The story is told in this rather interesting article in the Guardian. After finally enlisting he sat down with a friend and told her that he was glad to have made the decision, he didn't know why but he was glad.

Things will happen which will trample and pierce, but I shall go on, something that is here and there like the wind, something unconquerable, something not to be separated from the dark earth and the light sky, a strong citizen of infinity and eternity.

It's All Greek To Me

I had an interesting conversation today with a lady who seemed convinced that if she can only know the Greek original of a word in Scripture then understanding what it says is easy.

The context was the story of Jesus' crucifixion, where we had just heard a version read out which spoke of Jesus being crucified between two 'revolutionaries' rather than 'thieves', as in the King James translation, or 'robbers'/'bandits' as used in most modern versions of the story.

So which translation is 'true'?

Well, the original Greek is lestes, which my big book of words tells me means "robber, highwayman, bandit, revolutionary'. Which covers pretty much all of the modern translations. One point being that simple one-to-one translations between languages and cultures hardly ever exist.

Fortunately my book of words also gives context and background - which is why I use it.

Lestes generally refers to one who robs with violence, as opposed to a kleptes, who would typically be a thief who steals by stealth. One complication is that being a lestes doesn't necessarily imply being dishonest or illegal: a soldier was legally entitled to seize plunder whilst performing his duties, in so doing he would be a lestes.

But the big confusion comes from the rabbis of the day calling zealots 'lestes' - the zealots were violent anti-Roman (and by implication anti-collaborator) freedom fighters ... or terrorists.

Crucifixion was a deliberately horrific way of torturing a person to death, used by the Romans as a way of imposing their control over a region. It was used to 'discourage the others' on people who the Romans really didn't want anyone to emulate: especially rebels.

So, 'robbers' would be a simplistically literal rendering of the Greek word used. But at this time and in this context it is much more likely that the word meant 'rebels' or (more clumsily) 'revolutionaries'.

Can I back this up from the Bible itself? Actually, in this case, yes: John 18:40 tells us that Barabbas was a leptes, whilst Mark 15:7 expands on this to tell us that Barabbas was amongst the rebels in prison for murder committed during an insurrection. So here we do indeed have a violent rebel described as a leptes.

Why might this matter? One point is that when it comes to the Bible the question 'is this translation of the passage  true?' is the wrong question: a better question is 'does this translation help me see the truth in this Bible passage?'

Jesus was crucified between two rebels because the authorities of the day saw the things he said and did as rebellion. Even though Jesus had no army and harmed nobody they saw him as a threat against their world order, just as much as armed revolutionaries were.

When Jesus rose from the dead, ascended into heaven, and sent his Spirit to empower his followers the authorities and powers of the day carried on trying to stamp them out by force ... and carried on failing. It turned out that the power of Jesus, working in peace, was far greater and more long lasting than the violent might of the religious and secular rulers combined.

Today, some groups claiming to follow Jesus have actually turned into those religious and secular authorities, still trying to stamp out followers of the Son Of Man; whilst other groups turn to the ways of Barabbas and the other men of violence, seeking to change the world through force and terror, but just perpetuating hatred and injustice.

Yet Jesus is still here, amongst those at the bottom of the heap. Still changing the world, still setting people free, even on a Good Friday when it all looks really grim.