<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Guan</title>
	<atom:link href="http://guan.dk/feed" rel="self" type="application/rss+xml" />
	<link>http://guan.dk</link>
	<description></description>
	<lastBuildDate>Sat, 31 Dec 2011 01:32:19 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
<atom:link rel="hub" href="http://pubsubhubbub.appspot.com"/><atom:link rel="hub" href="http://superfeedr.com/hubbub"/><atom:link rel="hub" href="http://guan.superfeedr.com"/>		<item>
		<title>Hitchens</title>
		<link>http://guan.dk/hitchens</link>
		<comments>http://guan.dk/hitchens#comments</comments>
		<pubDate>Sat, 31 Dec 2011 01:32:19 +0000</pubDate>
		<dc:creator>Guan Yang</dc:creator>
				<category><![CDATA[Politics]]></category>

		<guid isPermaLink="false">http://guan.dk/hitchens</guid>
		<description><![CDATA[Saifedean Ammous: This was post-2001 Hitchens. The over-riding directive of his life was to make money by pleasing American right-wingers by dressing up their idiotic nationalism, chauvinism, and jingoism with Big Words and an English accent. It was a highly rewarding career, because he sold to morons who watch Sean Hannity the illusion that they [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.antiwar.com/blog/2011/12/16/christopher-hitchens-fundamentalist-exemption-for-zionism/">Saifedean Ammous</a>:</p>
<blockquote><p>This was post-2001 Hitchens. The over-riding directive of his life was to make money by pleasing American right-wingers by dressing up their idiotic nationalism, chauvinism, and jingoism with Big Words and an English accent. It was a highly rewarding career, because he sold to morons who watch Sean Hannity the illusion that they are not complete cretins, and they pay top dime for that sort of intellectual deceit.</p></blockquote>
<p>Okay then.</p>
]]></content:encoded>
			<wfw:commentRss>http://guan.dk/hitchens/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>LBJ!</title>
		<link>http://guan.dk/passage-of-power-pub</link>
		<comments>http://guan.dk/passage-of-power-pub#comments</comments>
		<pubDate>Tue, 22 Nov 2011 18:37:32 +0000</pubDate>
		<dc:creator>Guan Yang</dc:creator>
				<category><![CDATA[History]]></category>
		<category><![CDATA[Politics]]></category>

		<guid isPermaLink="false">http://guan.dk/?p=248</guid>
		<description><![CDATA[UPDATE: The LBJ Book Club starts December 1. Fans of The Years of Lyndon Johnson, Robert A. Caro’s magisterial biography of LBJ, will be happy to learn that the fourth installment, The Passage of Power (1958–1964), will be published on May 1, 2012. The fifth, and most likely final, volume will take another two to [...]]]></description>
			<content:encoded><![CDATA[<p><b>UPDATE</b>: The <a href="http://www.lbjbookclub.com/">LBJ Book Club</a> starts December 1.</p>
<p>Fans of <em>The Years of Lyndon Johnson</em>, Robert A. Caro’s magisterial biography of LBJ, will be happy to learn that the fourth installment, <em>The Passage of Power</em> (1958–1964), <a href="http://www.google.com/hostednews/ap/article/ALeqM5hYrNdxMgR6s6xnGc8x6GcHmhrxjw?docId=5b3c3fcacee848a9a8f9891bcc7ec0e1">will be published on May 1, 2012</a>. The fifth, and most likely final, volume will take another two to three years.</p>
<blockquote><p>Caro has conducted countless interviews, but now he seeks survivors. So many have passed away. Just since “Master of the Senate,” such family members and top officials as Valenti, Sen. Edward Kennedy, Arthur M. Schlesinger Jr. and Theodore Sorensen have died.</p>
<p>“Every time I walk home at night, that hits me in the face. My apartment is on Central Park West and my office is in Columbus Circle, so on my way home I pass Ted Sorensen’s house,” Caro says. “I used to be able to pick up the phone and call (LBJ aide) Horace Busby and ask him, ‘Where was Johnson sitting? On the sofa or the rocking chair?’ So often I reach for the phone these days and there’s nobody to call.”</p></blockquote>
<p>In other Caro news, <em>The Path to Power</em> and <em>Means of Ascent</em> will be available as e-books tomorrow and Audible now has an <a href="http://www.audible.com/pd/ref=sr_1_1?asin=B0051JH67K&amp;qid=1321986946&amp;sr=1-1">unabridged audiobook of <em>The Power Broker</em></a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://guan.dk/passage-of-power-pub/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Meeting nonviolence with violence</title>
		<link>http://guan.dk/meeting-nonviolence-with-violence</link>
		<comments>http://guan.dk/meeting-nonviolence-with-violence#comments</comments>
		<pubDate>Sun, 20 Nov 2011 05:14:53 +0000</pubDate>
		<dc:creator>Guan Yang</dc:creator>
				<category><![CDATA[Politics]]></category>

		<guid isPermaLink="false">http://guan.dk/meeting-nonviolence-with-violence</guid>
		<description><![CDATA[Ari Kelman and Eric Rauchway: Americans have known for decades it is both immoral and ineffective to meet nonviolence with violence. UC Berkeley and its Chancellor, Robert Birgeneau, provided us a reminder of this lesson last week. But we forget nothing and learn nothing. Ronald Reagan, after all, met UC protesters with tear gas. Which [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://edgeofthewest.wordpress.com/2011/11/19/bad/">Ari Kelman and Eric Rauchway</a>:</p>
<blockquote><p>Americans have known for decades it is both immoral and ineffective to meet nonviolence with violence. UC Berkeley and its Chancellor, Robert Birgeneau, provided us a reminder of this lesson last week. But we forget nothing and learn nothing. Ronald Reagan, after all, met UC protesters with tear gas. Which can help you get attention so you can run for higher office. But it is no way to run a campus.</p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://guan.dk/meeting-nonviolence-with-violence/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Scary sentence of the day</title>
		<link>http://guan.dk/scary-sentence-of-the-day</link>
		<comments>http://guan.dk/scary-sentence-of-the-day#comments</comments>
		<pubDate>Thu, 17 Nov 2011 16:01:19 +0000</pubDate>
		<dc:creator>Guan Yang</dc:creator>
				<category><![CDATA[Finance/Economics]]></category>

		<guid isPermaLink="false">http://guan.dk/scary-sentence-of-the-day</guid>
		<description><![CDATA[Matthew Yglesias: If people think the ECB won’t rescue a country from panics and bank runs, then Finland and Austria and the Netherlands are just as vulnerable as Spain and Portugal and Italy.]]></description>
			<content:encoded><![CDATA[<p><a href="http://thinkprogress.org/yglesias/2011/11/17/370819/the-collapse-of-italys-money-supply/">Matthew Yglesias</a>:</p>
<blockquote><p>If people think the ECB won’t rescue a country from panics and bank runs, then Finland and Austria and the Netherlands are just as vulnerable as Spain and Portugal and Italy.</p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://guan.dk/scary-sentence-of-the-day/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The other debt ceiling</title>
		<link>http://guan.dk/other-debt-ceiling</link>
		<comments>http://guan.dk/other-debt-ceiling#comments</comments>
		<pubDate>Fri, 05 Aug 2011 13:32:49 +0000</pubDate>
		<dc:creator>Guan Yang</dc:creator>
				<category><![CDATA[Finance/Economics]]></category>

		<guid isPermaLink="false">http://guan.dk/?p=239</guid>
		<description><![CDATA[It turns out that Denmark is the only other country in the world to have a fixed, numerical debt limit on the government’s debt. I had never heard of this and decided to check this out. Article 43 of the Danish constitution states that Ingen skat kan pålægges, forandres eller ophæves uden ved lov; ej [...]]]></description>
			<content:encoded><![CDATA[<p>It turns out that Denmark is the only other country in the world to have a fixed, numerical debt limit on the government’s debt. I had never heard of this and decided to check this out.</p>
<p>Article 43 of the Danish constitution states that</p>
<blockquote><p>Ingen skat kan pålægges, forandres eller ophæves uden ved lov; ej heller kan noget mandskab udskrives eller noget statslån optages uden ifølge lov.</p>
<p><em>No taxes shall be imposed, altered, or repealed except by statute; nor shall any man be conscripted or any public loan be raised except by statute.</em></p></blockquote>
<p>The <a href="https://www.retsinformation.dk/Forms/R0710.aspx?id=132765">current borrowing authority</a> is very simple:</p>
<blockquote><p>§ 1. Finansministeren kan optage lån inden for et samlet gældsmaksimum på 2.000 mia. kr.</p>
<p><em>The Minister of Finance may borrow within a combined maximum debt of 2,000 billion kroner.</em></p></blockquote>
<p>2,000 billion kr. is about 115% of GDP in 2010. Total government debt (gross of the government’s deposit at Danmarks Nationalbank, which is how the debt ceiling is applied) is currently 762.6 billion kr., so 38% of the debt ceiling has been used. The highest it’s been in modern times was  808.3 billion kr. at the end of June 1997. (<em>Net</em> debt is currently 22% of GDP and was 53% of GDP in 1997.)</p>
<p>The debt ceiling was last raised in October 2010. Before that it stood at 950 billion kr. since 1993. When the bill was <a href="http://www.ft.dk/dokumenter/tingdok.aspx?/samling/20091/lovforslag/L141/som_fremsat.htm">introduced</a>, the Minister of Finance estimated that if the debt ceiling were not raised, we would reach 83% utilization by 2011.</p>
<p>The debt ceiling was <a href="http://webarkiv.ft.dk/?/Samling/19931/lovforslag_oversigtsformat/L111.htm">first introduced in 1993</a> as a way of simplifying and combining all the laws authorizing public debt, instead of the previous method of passing laws that authorized new debt issue. It was also the first time that authority for domestic and foreign borrowing was combined. When the bill was passed in December 1993, 76.6% of the debt ceiling was used.</p>
<p>Before 1993, the Minister of Finance would regularly receive authority to borrow certain amounts of money, without an overall debt ceiling. The earliest such authorization I could find is <a href="https://www.retsinformation.dk/Forms/R0710.aspx?id=5117">from 1984</a>, when he was authorized to issue 75 billion kr. in domestic bonds. At the same time, previous domestic borrowing authority from 1982 was cancelled. <a href="https://www.retsinformation.dk/Forms/R0710.aspx?id=57064">This law from 1993</a> allows him to borrow 50 billion kr. abroad.</p>
]]></content:encoded>
			<wfw:commentRss>http://guan.dk/other-debt-ceiling/feed</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Downloading large Backblaze restores</title>
		<link>http://guan.dk/backblaze-download</link>
		<comments>http://guan.dk/backblaze-download#comments</comments>
		<pubDate>Wed, 13 Jul 2011 14:36:08 +0000</pubDate>
		<dc:creator>Guan Yang</dc:creator>
				<category><![CDATA[Computing]]></category>

		<guid isPermaLink="false">http://guan.dk/?p=232</guid>
		<description><![CDATA[My computer was recently destroyed from water damage in a thunderstorm, so I had to recover my backups. In addition to my Time Machine and SuperDuper! backups, I use Backblaze for online backup. I wanted to make sure I have all my backups in order, which meant restoring my Backblaze backup too. I have about [...]]]></description>
			<content:encoded><![CDATA[<p>My computer was recently destroyed from water damage in a thunderstorm, so I had to recover my backups. In addition to my Time Machine and SuperDuper! backups, I use <a href="http://www.backblaze.com/">Backblaze</a> for online backup. I wanted to make sure I have all my backups in order, which meant restoring my Backblaze backup too.</p>
<p>I have about 215 GB of data on Backblaze. For sizes up to 400 GB, they offer to mail you a USB hard drive for $199, but I didn’t want to pay that much when downloading a Zip file is much cheaper. They recommend splitting your restores up into chunks of about 20 GB, but that’s a big hassle because you can only have 2 active restores at a time, and I didn&#8217;t want to risk missing anything in my manual splitting procedure. This means actually downloading a 215 GB file from them.</p>
<p>Backblaze cannot reliably serve you files larger than 60 GB or so. I’ve tried it: the connection is always dropped after a few hours. So you will need the Backblaze Downloader, a truly shitty Windows program that is able to resume downloads. (I wasn&#8217;t able to resume in any other way, they don’t seem to accept HTTP byte ranges.) Which means downloading on a Windows machine.</p>
<p>I don’t happen to have a Windows box on a fast internet connection with enough disk space, so I set up an Amazon EC2 instance for this. After much experimenting with multiple regions and settings, here is my advice:</p>
<ol>
<li>Start a large instance with the ami-67095822 image (Windows Server 2003, instance storage), in the US West region. Your instance will be closer to Backblaze in the Bay Area and the instances there offer gigabit connections. Large instances are expensive but will download your files much faster.</li>
<li>In your security group, allow all ICMP.</li>
<li><del>Install Backblaze Downloader and start downloading into either the D: or E: drive. Monitor the download frequently, it’s not smart enough to resume after a disconnection.</del> Backblaze Downloader is too slow. Just download in a regular browser like <del>Chrome</del> Firefox, and pray. You should be able to get speeds of at least 4 MB/s. If not, terminate your instance and start a new large instance.</li>
<li>Optional: Install <a href="http://www.tightvnc.com/">VNC</a> (remember to open up port 5900 in the firewall settings, preferably limited to your IP address). You will want to log in frequently and monitor the download, and VNC usually connects faster than RDP.</li>
<li>Inbound traffic to EC2 is free, but outbound is expensive. Test the archive with <a href="http://www.7-zip.org/">7-Zip</a> before you transfer, it will go through all the checksums. This shouldn&rsquo;t take too long on a large instance.</li>
</ol>
]]></content:encoded>
			<wfw:commentRss>http://guan.dk/backblaze-download/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Estimating market value of equity with CRSP and Compustat</title>
		<link>http://guan.dk/market-value-equity</link>
		<comments>http://guan.dk/market-value-equity#comments</comments>
		<pubDate>Sat, 04 Jun 2011 22:46:08 +0000</pubDate>
		<dc:creator>Guan Yang</dc:creator>
				<category><![CDATA[Finance/Economics]]></category>

		<guid isPermaLink="false">http://guan.dk/?p=217</guid>
		<description><![CDATA[Estimating a firm’s market value of common equity (MVE) at a given point in time is something that a finance researcher does quite often. It can be surprisingly hard using only the two commonly available datasets for financial and stock information, CRSP and Compustat. The most foolproof way is to use the prcc_f and csho [...]]]></description>
			<content:encoded><![CDATA[<p>Estimating a firm’s market value of common equity (MVE) at a given point in time is something that a finance researcher does quite often. It can be surprisingly hard using only the two commonly available datasets for financial and stock information, CRSP and Compustat.</p>
<p>The most foolproof way is to use the <strong>prcc_f</strong> and <strong>csho</strong> fields in Compustat Fundamentals Annual file (or their counterparts <strong>prccq</strong> and <strong>cshoq</strong>), which are the closing stock price and the number of shares outstanding (in millions of shares) on the balance sheet date.</p>
<p>For example, here are the values and corresponding market value of equity for Apple, Berkshire Hathaway and the New York Times Company on the latest datadate in my local copy of Compustat:</p>
<p>[nohang width="550"]</p>
<table width="550">
<thead>
<tr>
<th>Company</th>
<th>Date</th>
<th>GVKEY</th>
<th>PERMCO</th>
<th>csho (m)</th>
<th>prcc_f</th>
<th>MVE ($m)</th>
</tr>
</thead>
<tbody>
<tr>
<td>Apple</td>
<td>2010-09-30</td>
<td>001690</td>
<td align="right">7</td>
<td align="right">915.97</td>
<td align="right">283.75</td>
<td align="right">259,906</td>
</tr>
<tr>
<td>Berkshire Hathaway</td>
<td>2009-12-31</td>
<td>002176</td>
<td align="right">540</td>
<td align="right">1.552</td>
<td align="right">99,200</td>
<td align="right">153,958</td>
</tr>
<tr>
<td>New York Times Co.</td>
<td>2009-12-31</td>
<td>007866</td>
<td align="right">21280</td>
<td align="right">144.513</td>
<td align="right">12.36</td>
<td align="right">1,786</td>
</tr>
</tbody>
</table>
<p>[/nohang]</p>
<p>I can tell you that these numbers are, at least in my opinion, correct. This method is fine if you happen to need MVE on the annual balance sheet date, or the quarterly balance sheet date for firms that are in the Fundamentals Quarterly file, but what if you need MVE at the end of a different month or some arbitrary date? For example, you may want to construct portfolios sorted by book-to-market, and since accounting information is not released on <strong>datadate</strong>, you want to make sure you are not using information that is not available to outsider investors.</p>
<p>The simplest way is, of course, to look in the CRSP Monthly (or Daily) Stock File. The PERMNO for Apple common stock is 14593, so we could multiply abs(<strong>prc</strong>) (because bid/ask midpoint prices are reported as negative numbers in CRSP, don’t forget that!) and <strong>shrout</strong>, shares outstanding in thousands. For Apple on 2010-09-30, this gives us 283.75×915,970=$259.9 billion, the same result as Compustat.</p>
<p>What about Berkshire Hathaway? Remember that Berkshire Hathaway has two share classes traded on the New York Stock Exchange, A shares (PERMNO 17778) and B shares (PERMNO 83443). We simply have to multiply price and shares outstanding for each class and sum them. The generic way to do this is to start with a PERMCO, get every security that has share code 10 or 11 (common stock), and multiply price with shares outstanding. Here’s sample SAS code for this, in this case hard coded for Berkshire, but you can figure out how to merge with a separate list of PERMCOs and dates (and properly use <code>group by</code>):</p>
<pre>proc sql;
select
    sum(abs(prc)*shrout/1000) as mve
from
    crsp.msf m,
    crsp.msenames n
where
    '31DEC2009'd ge namedt and '31DEC2009'd le nameendt
and shrcd in (10, 11)
and n.permno = m.permno
and n.permco = 540
and m.date = '31DEC2009'd;
quit;</pre>
<p>How come we had to use 4 different figures to calculate Berkshire’s market value using CRSP data, and only two figures with Compustat data? This is because <strong>csho</strong> and <strong>prcc_f</strong> are stated in terms of only a single class of stock. Berkshire Hathaway had 1.552 million class A <em>equivalent</em> shares outstanding, weighted by the relative economic interest of the different share classes, a number that the poorly paid S&amp;P research assistants probably found in Item 6, “Class A equivalent common shares outstanding, in thousands” in the <a href="http://www.sec.gov/Archives/edgar/data/1067983/000119312510043450/d10k.htm#toc49005_8">Berkshire 10-K</a>. (Some companies make this a lot harder to find, especially on the balance sheet date rather than reporting date.)</p>
<p>Now if you do this for the Times Company on 2009-12-31, you would find only one share class on CRSP, PERMNO 47466, and a market value of 12.36×143,715=$1,776 million. This is almost $10 million less than what Compustat has. What happened?</p>
<p>If you looked very closely at the CRSP names file, you would notice that PERMNO 47466 represents class A common stock. Some companies have only a single class of common stock that is still designated class A, but the Times Company has a separate class B that is not traded on any exchange and is not on the CRSP tape.</p>
<p>So how do we estimate MVE for the Times Company at the end of January 2010, which is not in Compustat? My solution is to multiply the CRSP market value with the last known ratio of Compustat to CRSP market value. This ratio was 1,786/1,776=1.0056. CRSP market value on 2010-01-29 was 12.92×143,715=$1,858 million. Multiplied with our ratio, this gives an estimate of total market value of equity of $1,867 million. This estimate doesn’t account for the special voting rights of class B stock, but it is probably the best practical value we can assign to Times Company equity at market prices.</p>
<p>My adjustment may not be such a huge deal for the Times Company, but I can tell you that at the end of 2002, Ascent Media Group (PERMNO 88354, GVKEY 006948) had a total market value of equity, as implied by issues on CRSP, that was <strong>11.7 times</strong> the market value of issues on the CRSP tape.</p>
]]></content:encoded>
			<wfw:commentRss>http://guan.dk/market-value-equity/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Interesting claims</title>
		<link>http://guan.dk/latin-renaissance</link>
		<comments>http://guan.dk/latin-renaissance#comments</comments>
		<pubDate>Wed, 25 May 2011 21:07:43 +0000</pubDate>
		<dc:creator>Guan Yang</dc:creator>
				<category><![CDATA[Miscellany]]></category>

		<guid isPermaLink="false">http://guan.dk/?p=214</guid>
		<description><![CDATA[From a James Fallows correspondent: Medieval Latin is a much simpler form of Latin than classical, Roman Latin because it was everyone’s second language. Over centuries, Irish, Italians, and Norwegians all speaking to one another in the same language simplified and streamlined it, to make it easier for everyone to understand. It was a working [...]]]></description>
			<content:encoded><![CDATA[<p>From <a href="http://www.theatlantic.com/international/archive/2011/05/even-more-on-second-languages/239075/">a James Fallows correspondent</a>:</p>
<p style="padding-left: 30px;">Medieval Latin is a much simpler form of Latin than classical, Roman Latin because it was everyone’s second language. Over centuries, Irish, Italians, and Norwegians all speaking to one another in the same language simplified and streamlined it, to make it easier for everyone to understand. It was a working language, the language of the church and professional elites everywhere. One aspect of understanding what Renaissance was and <strong>why it happened was that Petrarch and others like him noticed how much more complex, sophisticated, and, to their ears, beautiful, the classical Latin of Cicero and Ovid was.</strong> They then tried to recreate that flowery, rhetorical style in their own day and time, in large part because they thought that the beauty and sophistication of the language also helped it convey beautiful and sophisticated ideas.</p>
<p>Emphasis added.</p>
]]></content:encoded>
			<wfw:commentRss>http://guan.dk/latin-renaissance/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cloud security</title>
		<link>http://guan.dk/cloud-security</link>
		<comments>http://guan.dk/cloud-security#comments</comments>
		<pubDate>Thu, 19 May 2011 18:45:16 +0000</pubDate>
		<dc:creator>Guan Yang</dc:creator>
				<category><![CDATA[Computing]]></category>

		<guid isPermaLink="false">http://guan.dk/?p=210</guid>
		<description><![CDATA[There has been a lot of recent discussion in the blogosphere on Dropbox security and cloud security in general. GF has a good overview, Susan Orlean has a post on some of the scarier implications. I can sympathize with people who feel they have been received, but I personally don’t think their original wording constitutes [...]]]></description>
			<content:encoded><![CDATA[<p>There has been a lot of recent discussion in the blogosphere on <a href="http://www.dropbox.com/">Dropbox</a> security and cloud security in general. GF has a <a href="http://www.economist.com/blogs/babbage/2011/05/internet_security">good overview</a>, Susan Orlean has a post on <a href="http://www.newyorker.com/online/blogs/susanorlean/2011/05/dropbox-privacy.html">some of the scarier implications</a>. I can sympathize with people who feel they have been received, but I personally don’t think their original wording constitutes a lie. I never read it before all the current brouhaha, but as someone who is a little familiar with practical security, I always suspected from Dropbox’s features that, in principle, they had access to my files. Indicia:</p>
<ol>
<li>All your files are available on different platforms (desktop, web, iPhone) without much hassle or delay.</li>
<li>While the various clients (desktop, iPhone, etc) could probably do per-user encryption, the web interface doesn’t spend a lot of time decrypting files in JavaScript (or Java or Flash or some other way of doing it).</li>
<li>Even large files can be instantly moved to “Public”.</li>
<li>The fact that it’s possible to instantly share an entire folder with someone else.</li>
</ol>
<p>There’s probably some way to do each of these with proper encryption. For the last point, they could perhaps have a separate key for each folder, then give others access to that key when a folder is shared. And with some creativity there are probably ways to implement every Dropbox feature in a fully secure way. But my guess was always that it would be a huge hassle to have that level of security with a service like Dropbox.</p>
<p>All in all, Dropbox just “feels” like a service where they have access to everything (with proper access controls of course). Kind of like I always knew that authorized Google employees could read my email even though I never read the terms of use.</p>
<p>Different kinds of cloud services will always have different security tradeoffs. I won’t encrypt everything in my Dropbox because I want easy web and phone access to the kinds of documents I use Dropbox for. My <a href="http://agilebits.com/onepassword">1Password</a> files are in Dropbox, but they have their own iPhone app that can decrypt them, and I can live without web access to my passwords.</p>
<p>I encourage everyone to be careful about their Dropbox use and there are certainly things I wouldn’t include in my Dropbox, but that I would include in my <a href="http://www.backblaze.com/">Backblaze</a> backups. And I don’t even trust Backblaze fully.</p>
<p>GF describes a different kind of balance:</p>
<blockquote><p>SpiderOak, by contrast, cannot disclose its customers’ files, even if it wanted to. That is because it lacks tools to tap any of the data it stores on behalf of users. However, this “zero knowledge” means that if a user loses his key, he can never again access those data.</p></blockquote>
<p>This is more secure and somewhat less practical than CrashPlan’s tradeoff, also described in GF’s post, but you are still reliant on SpiderOak’s application. They could easily be compelled by a court to introduce a back door that sends your encryption keys back to the bad guys. What, I’m paranoid? <a href="http://www.wired.com/threatlevel/2007/11/hushmail-to-war/">It happened</a>.</p>
<p>I believe there are ways to use the cloud in a fully secure way, but you can’t rely on the cloud vendor’s software. If you use open source software to encrypt your files and then upload them to Amazon S3, it would be very difficult for baddies to read your files. <a href="http://duplicity.nongnu.org/">Duplicity</a> is an open source backup program that can use this security model.</p>
<p>(This is based on some of my comments on Hacker News.)</p>
]]></content:encoded>
			<wfw:commentRss>http://guan.dk/cloud-security/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Agency theory of nonprofits</title>
		<link>http://guan.dk/agency-theory-nonprofits</link>
		<comments>http://guan.dk/agency-theory-nonprofits#comments</comments>
		<pubDate>Sat, 23 Apr 2011 17:53:57 +0000</pubDate>
		<dc:creator>Guan Yang</dc:creator>
				<category><![CDATA[Finance/Economics]]></category>
		<category><![CDATA[Miscellany]]></category>

		<guid isPermaLink="false">http://guan.dk/?p=204</guid>
		<description><![CDATA[Last month Felix Salmon urged people not to donate to Japan in the wake of the earthquake, and if you do wish to do something, to make unrestricted donations to major charities like MSF. You should then trust MSF to allocate donations to countries and particular causes and to deliver help effectively or partner with [...]]]></description>
			<content:encoded><![CDATA[<p>Last month Felix Salmon urged people <a href="http://blogs.reuters.com/felix-salmon/2011/03/14/dont-donate-money-to-japan/">not to donate to Japan</a> in the wake of the earthquake, and if you do wish to do something, to make unrestricted donations to major charities like <a href="http://www.msf.org">MSF</a>. You should then trust MSF to allocate donations to countries and particular causes and to deliver help effectively or partner with a local organization that can do so. I guess the idea is that most people are unable to judge the relative merits of various causes, or don’t have enough information or are too biased to do so, and that if you just chase the latest cause célèbre a lot of your donations will be wasted.</p>
<p>This sounds quite reasonable, but it makes me wonder about the governance of nonprofits. <a href="http://papers.ssrn.com/sol3/papers.cfm?abstract_id=94034">Fama and Jensen (1983)</a>, the definitive work on separation of ownership and control, stress the importance of residual claims. Owners of residual claims on the firm—shareholders in the case of a corporation—are in the best position to monitor the firm because as residual claimants they stand to benefit, in most cases, from improved governance.</p>
<p>Nonprofits don’t have residual claimants. This is a more fundamental definition of “nonprofits” since many nonprofits actually have profits, but almost all nonprofits are subject to a <em>non-distribution</em> requirement, meaning that profits cannot be distributed to members or anyone else. There are no residual claims on nonprofits by design.</p>
<p>In nonprofits that are primarily funded by endowments, especially those with self-perpetuating boards as is common in the United States, governance is more or less hopeless because there is no external governance mechanisms. Governance will be good if the board members happen to behave well. Fama and Jensen point out that some nonprofits have very extreme bonding mechanisms, such as the poverty and celibacy vows in the Catholic Church, as additional governance mechanisms.</p>
<p>In the case of nonprofits without large endowments that are mostly funded by current donations, you might expect monitoring to be done by donors. If the nonprofit doesn’t behave well, donors will stop donating and the managers will lose their jobs (“private benefits” in the governance jargon), so managers will tend to behave well.</p>
<p>It seems to me that this model of governance would work best if donors actually earmark and target their donations quite narrowly. Maybe your favorite charity should spend more money in Haiti than Japan, or perhaps move resources away from Haiti to more worthy countries. You could trust that the charity’s managers will do this, but why not force their hand by earmarking your donations to the most worthy country (not Japan)? Donors, acting through the market for donations, will then have maximum control over how charity is directed and delivered.</p>
<p>What, then, is the agency theory of nonprofits that is consistent with Felix’s (and others’) recommendation that you give unrestricted donations to large, well-known charities? How can unrestricted donations be good for governance, and how can it be good simply to give to the most reputable large charity?</p>
<p>I think that first of all you need relatively large information acquisition costs at the individual donor level, so it’s costly to judge whether Haiti or Darfur or some third country is most worthy. Second, there has to be some mechanism (and enough information) for choosing the “best” charity, which right now seems to be MSF. I know that outfits such as <a href="http://www.guidestar.org/">Guidestar</a> claim to do this. So the assumption is that Guidestar is able to tell you “give to MSF but not <a href="http://en.wikipedia.org/wiki/Wyclef_Jean#Y.C3.A9le_Haiti">Yéle</a>,” but not how to earmark your donation. Is this plausible? Is there a better theory out there?</p>
]]></content:encoded>
			<wfw:commentRss>http://guan.dk/agency-theory-nonprofits/feed</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>

