iPhones and the Limits of Curated Security

Abstract: The Apple App store uses a curated model in which all applications must be approved by Apple before they are published. In has been argued that this provides better security than Android where applications are published immediately and only removed if they are found to be problematic. We study the cases of Smurf’s Village and similar applications and argue that the protection offered by this form of security is limited. We conclude that the image of Apple as a benevolent dictator acting as a neutral arbitrator to promote the best user experience is dangerously naive. Apple’s economic interests will often be different than their users’ security interests.

In the Apple App store for iOS devices such as the iPhone and iPad, all applications must be approved by Apple before they are published. That is in contrast to Android in which submitted applications are immediately published and only removed if they are determined to be problematic. The Apple approval process has been criticized as being arbitrary and confusing. Many accuse Apple of exercising excessive control. The App Store Review Guidelines are 8 pages. The introduction contains statements like the following:

  • We view Apps different than books or songs, which we do not curate. If you want to criticize a religion, write a book. If you want to describe sex, write a book or a song, or create a medical app.
  • We have over 350,000 apps in the App Store. We don’t need any more Fart apps.
  • [If] you’re trying to get your first practice App into the store to impress your friends, please brace yourself for rejection. We have lots of serious developers who don’t want their quality Apps to be surrounded by amateur hour.
  • If your app is rejected, we have a Review Board that you can appeal to. If you run to the press and trash us, it never helps.
  • If it sounds like we’re control freaks, well, maybe it’s because we’re so committed to our users and making sure they have a quality experience with our products.

The rest of the Guidelines contains specific rules about what is and is not allowed. It is generally acknowledged that all submissions are not reviewed equally. For example, Apple includes a ban on offensive or mean-spirited commentary but specifically exempts professional political satirists and humorists. Additionally, well known companies and organizations are thought to have an easier time getting their apps approved than individual developers.

Though many have criticized those restrictions as excessive, it has been argument that they will provide protection against malware. Indeed, Jonathan Zittrain, among others, has worried that the iPhone will be adopted because it provides increased security even though this security comes the cost of the freedom and flexibility that has led to significant innovation in the computer industry. But just how effectively will the Apple review process protect users? Software auditing is time consuming and expensive. There are a variety of technical measures that would allow malicious developers to hide unapproved functionality from Apple’s reviewers. I may discuss these techniques in another, geekier, post.

In this post, I use the existence of Smurf’s Village and similar apps to argue that a curated app store is not a security panacea. These type of apps, many of which are targeted at children, are free to download but have very expensive in app purchases for items. For example, Smurfs’ Village, which is is based on the Smurfs tv show, sold a wheel barrow of Smurf Berries for $99. Many children amassed huge bills playing these applications on their parents phones. One 8 year old girl amassed a $1400 phone bill playing Smurf’s Village. (See http://www.digitaltrends.com/mobile/publisher-greed-little-girl-amasses-1400-iphone-bill-playing-smurfs-village/ ) There have been allegations of similar spending on other games such as a 5 year old girl spending $99.99 in Fishies, a 9 year old boy spending $670 on virtual weapons for X-Mas Resort and F.A.S.T, and a 9 year-old girl spending $200 on Zombie Toxins and other items in Zombie Cafe. (http://newsandinsight.thomsonreuters.com/New_York/News/2011/05_-_May/Class_action_firms_go_after__free__Apple_apps/ ) Whether these type of applications should count as malware or badware, is a question of semantics that we will not attempt to address. However, it is worth noting that the financial harm suffered by the parents of these children is likely to be greater than those whose PCs or Android phones are infected with traditional malware.

Why does Apple allow these applications in their app store? An app like Smurfs’ Village might be justifiable based laissez-faire arguments in an open market but that argument makes no sense in the context of Apple’s curated market. It is impossible to know Apple’s exact motivation but economic incentives may provide the answer. Apple requires that all game items be purchased using their In APP Purchase API payment system and takes a 30% cut of any transaction. Thus Apple has an incentive for users to spend as much money as possible. Indeed Apple’s guidelines contained no restriction on excessive pricing of in game items even though they contained restrictions on just about everything else. (Apple’s 30% commission is much greater than the amount taken by credit card companies and consequently they have a much greater incentive to allow expensive purchases.)

Apple has since taken some steps to mitigate the problem. They now require a password to be entered before every purchase (previously the password would be cached for 15 minutes) and allow in-app purchases to be disabled in device settings. Whether or not these mechanisms are sufficient to protect parents from these specific type of applications, in app purchases are a rich target for exploitation. In the future, there will likely be new and different attempts to exploit it that are both creative and disturbing. In the media, there is the popular stereo type that undesirable software originates from super hackers who are either anti-social western males or Russian gangs. The danger of this myth is that it causes us to be overly trusting of corporate software. The extent to which Apple uses developer reputation in the approval process may make them more likely to approve unsavory software if it has the veneer of corporate legitimacy.

It is clear that Apple’s review process does not prevent users from being harmed by unsavory applications. Indeed the image of Apple as a benevolent dictator acting as a neutral arbitrator to promote the best user experience is dangerously naive. Apple’s economic interests will often be different than their users’ security interests.

Why Don’t Theatres Sell CDs of the Performance?

Theaters sell a wide variety of souvenirs and memorabilia: studio cd recordings, clothing, books, even stuffed animals. But theatres sell the thing that would most easily enable theaters goers to relive the experience: a copy of the audio of the evening’s performance.

The quality of a recording of a live show wouldn’t match a studio recording but the two serve different purposes. The studio recording is great for experiencing a musical in a pure form. However, a live recording would let you relive the experience you had as a theatre goer. Most people go to the theatre at the most a few times a year. Outside of the super rich, people can’t afford to spend $50 to $200 on a ticket more frequently than that. Splurging on tickets is often associated with sentimental events that people would like to remember such as a birthday or anniversary or as part of a vacation to a New York. What better souvenir than the actual recording?

How might this work?

Many shows already use microphones. These microphones could simply be tried into a recording device. Other shows could be recorded using microphones placed unobtrusively throughout the theatre. Afterwards the staff would announce that CDs of the evening’s performance were available for purchase in the lobby. Depending on the venue, CDs would either be printed on demand or customers would fill out of order forms to have the CDs sent to them. Alternatively, customers might instead be able to purchase and download MP3s. Theaters might also decide to sell the recording on-line on itunes or similar sites. After all, the young couple going to New York on their honeymoon might not decide to buy a recording immediate after the show but might wish to purchase it when their celebrating their anniversary a few years later.

Would this Hurt Tickets Sales?

Why would people buy tickets when they could just buy the live recording? There are plenty of alternatives right now to going to a live show. There are often studio recordings, many times Hollywood movies, and occasionally even video recordings of live performances. As far a I know, there is no evidence that these things lower demand for actually being in the theatre. Indeed, movies probably increase the demand for a show by raising its visibility. Wouldn’t a live recording be different? Not really. A live audio recording of a show you went to is great for reliving it nostalgically but is no better of a substitute for the live show than a studio recording. Indeed the availability of the live recording might actually increase demand for tickets. By keeping the show fresh in people’s minds they would be more likely to want to see that show again as opposed to something else. Also providing the option of buying a live recording after the show increases the value of the theatrical experience to consumers which would increase the demand for tickets.

(A quick Google search, turned up some mentions of Broadway bootlegs but a commenting on their legality, availability, or quality let alone their effect on official audio recordings would be outside the scope of this post.)

Road blocks

Below I online a few potential road blocks, that may prevent theaters from selling the performance audio. For some theaters, there may be a risk aversion and an unwillingness to try new things. Old practices may be continued out of shere inertia. There may also to concern that the audio production costs will be too great. However, these are generally fixed costs. Many like microphone setup are fixed costs over the length of the show. Others, such as sound editing engineers would be fixed costs to produce a recording of a single show. So the economics should work out well for long running shows with large audiences. Finally, there may be legal restrictions. One would hope that theaters and rights owners could negotiate an agreement to allow the sale of live performance recordings at the same time that they negotiate an agreement for live performance rights. But there may be further legal complications that I’m not aware of.

Conclusion

Selling recordings after a show would be a boon to both theater goers and theaters. Theater goers would be able to relive their experience. Theaters would benefit from an extra revenue source as well increased demand for tickets.

Here’s a list of things that I hope to do in 2012.

I’ve intentionally excluded some of my bigger goals from this list because there is evidence that telling people your goals makes you less likely to achieve them. This list is not in any particular order.
Play Portal: I’ve been out of the gaming scene for a while partly because of my busy schedule and partly because I run Linux. However, I’ve been meaning to give Portal a shot for a long time. Portal is an iconic game that is very well reviewed. More importantly it’s also short. People tell me that even as an out of practice gamer I should be able to finish it in a day.

Take Advantage of Winters in Boston: The cold weather in Boston starts to get a bit tiresome by the end of winter. I’ve learned to cope with it and I appreciate the beauty of snow but I’ve never really taken advantage of it. This year, I’d like to find an activity that will make me look forward to the winter weather rather than dread it. I went cross country skiing a couple of years ago in slushy snow on the Weston course in March. But I expect that cross country skiing on nicer trails in better weather would be a much more enjoyable experience.  I would also like to try ice skating and snow shoeing.

Go to Harvard’s Peabody Museum of Archaeology and Ethnology:
I’ve been to the Harvard Museum of Natural History three times but I’ve never been in the Harvard  Peabody Museum of Archaeology and Ethnology. Though the two museums are connected, I’ve only been to the HMNH during special evening events when the Peabody part was closed. However, I live less than a mile away and I get free admission as a Harvard employee, so 2012 should be the year that I finally visit.

Eat at New Boston Vegetarian Restaurants: There are some new vegetarian restaurants in the Boston area that I would like to try. Veggie Galaxy Diner just opened a few months ago in Central Square in Cambridge. It’s owned by the same people as Veggie Planet and has been well spoken of by people who’ve been there. Prana Café  has been around for a while but I’ve yet to visit perhaps because it’s in Newton and Cantabrigians rarely cross the river. Nevertheless, I’ve been meaning to go for a while and I just purchased a Groupon for it so I’ll definitely eat there in the next few months.

Read a Graphic Novel: I picked up the first two volumes of Girl Genius at Arisia and I’m looking forward to reading them. I also have The Watchmen, and Maus on my shelf.

Bike the W & OD Trail — The W & OD trail is a 30 mile bike trail in Northern Virginia along the former Washington and Old Dominion Railroad line see (http://en.wikipedia.org/wiki/Washington_%26_Old_Dominion_Railroad_Regional_Park). The trail travels within a mile of my family’s house where I grew up. I’ve walked and biked on small segments but have yet to explore most of the trail. The next time I’m visiting Northern Virginia, I would really like to bike the rest of the trail.

Go to this Year’s HOPE: HOPE (Hackers On Planet Earth) is a biannual computer and technology conference in New York. I’ve been to the previous 2 HOPE’s and found them to be both enjoyable and enlightening. I’m very much looking forward to this year’s HOPE.

Experience the Significant Internet Memes: I don’t have time to watch every video on Youtube. I don’t even have time to watch every video on Youtube that gets a minor following. What I do hope to do is catch the significant ones. What constitutes significance is of course open to debate and part of the challenge will be defining it. I plan to start by looking at the ROFL con guest list on the assumption that a video worth inviting someone to ROFL for is by definition significant.

Do the Salem SegGliders Tour: I’ve long been curious about riding a segway and the Salem SegGliders tour will be my chance to do that as well as to see Salem. I’ve purchased a Groupon for the tour that I’ll have to use up by May.

Procrastination, Forcing Functions and Deadlines

I’m been thinking a bit about the importance of forcing functions and deadlines. I’ve been considering whether to take a class this semester but sadly the class that would make the most sense for me to take isn’t being offered until 2013. I’ve been debating between taking a class on a less relevant (to me) topic or simply trying to study the material that will be most relevant to me on my own.

Classes offer many advantages over self-study. You have an expert in the subject who chooses the material, is able to answer your questions, and provides you with feed back on your work. Lectures provide a dimension that you can’t get by simply reading a book. Still, the more I think about it, the more I realize that classes also serve as a forcing function. Assignments have deadlines and in order to meet them, you have to carve out the time to work on them.

I’m seen a similar phenomena in other areas. Iron Blogger is a prime example. Almost every one of the Iron Blogger participants has been blogging more frequently since joining. Iron Blogger imposes a hard deadline and even though the cost of missing the deadline is small ($5) people still strive to meet it. Even if you make minimum wage, your time cost to write a blog post is probably going to be greater than $5. Ostensibly, if you believe that blogging is important you would be doing it frequently without the pressure of a deadline.

Last semester, I participated in a program at the Harvard Gym called the Group Exercise Triathlon which required participants to complete 34 group exercise classes in various categories by the end of the semester. The prize for doing this was a free T-shirt. Once I committed to the program, I did everything that I could to finish it. I probably got more exercise in the month of November than any other point in my life. Again the T-shirt itself was not the primary motivator it was a deeper desire to meet a deadline.

Why do deadlines and forcing functions work? Earliest deadline first is a simple and often optimal strategy but tends to neglect the important but not urgent tasks. Assigning hard deadlines to those tasks ensures that they are not neglected. Similarly deadlines also enable greater mental focus on a task.

Game theory can also provide insight into the effectiveness of deadlines. Deadlines irrevocably commit you to a course of action. In our society, they allow you to leave a social situation to work on a task when social obligations would have normally required a longer visit. Compare “I wish I could hang out longer but I have to finish X by tomorrow” to “I’d like to hang out longer but I want to finish X by tomorrow even though there will be no consequences if I finish it a day later.” (This may be why external deadlines are more effective, if you set your own deadline, you can usually give yourself an extension.) A Freudian psychologist might also see deadlines as a way of the ego and super ego committing you to doing something that the id will not enjoy.

The Dark Side of Forcing Functions

One danger is people gaming the system. In the case of a class, this may mean doing what will get you the best grade rather than what help you learn the most, e.g cramming, ignoring material that won’t be on the exam, avoiding interesting but risky projects. (I’ve found classes taken for no credit can actually be more stressful because while the deadlines are still there, grades are no longer the metric of whether I’ve put in enough time.) Within Iron Blogger, it means writing a post that can be finished by the deadline rather then working on the best possible post. (This post will not win a Pulitzer and there are other blog posts that I’ve been meaning to write. But the others would not have been finished by the deadline.) Within the Group Exercise Triathlon, it meant focusing on the classes that would most help meet my requirements rather than the ones that were the most enjoyable or the healthiest.

Deadlines have undeniable power to make people accomplish certain tasks. However, it remains to be seen whether there are limits to their power. Deadlines are often met by topics such as all nighters which are bad long term strategies and by procrastinating on other tasks. It’s possible that deadlines don’t increase overall productivity but merely reallocate it within a zero sum game. I plan to explore deadlines more and to look for a way to create self imposed deadlines that have the same motivational power as external ones.

Why Life is Too Short for Spiral Notebooks

One of the things that I learned in 2011 is that spiral notebooks should be avoid where ever possible. This post will detail why I’ve switched to using wireless bound notebooks exclusively.

Until this year, I had always used spiral notebooks due to habit and inertia — I started using them in Middle school and just continued. However, before my retreat this year, I recalled a friend’s dislike of spiral notebooks and decided to pack a wireless bound notebook in addition to a spiral one. I found that I greatly preferred the feel of the wireless notebook. Holding the notebook in my lap was more pleasant and writing was much easier without the metal coil to get in the way.

But the advantages of a wireless notebook are not limited to the feel of writing in it. Wireless notebook store better. They are a pleasant addition to a bookshelf. If you use a label maker to label the spine, the wireless notebooks contents can easily be determined at a glance. ( The calming effect of labeled file folders that David Allen talks about in Getting Things Done also applies to labeled notebooks.) The labeled wireless notebook conveys a sense of efficiency and minimalist design elegance. If pages are removed from the notebook, the space it requires shrinks accordingly. Compare this to a spiral notebook in the same bookcase. Its contents cannot be known without removing it from the shelf. Even if all its pages, the spiral notebook will still take up as much space as the metal spiral portion. Its appearance is neither pleasing nor calming. At best, a clean metal spiral looks out of place compared to other books on the shelf. At worst, the spiral is filled with the remnants of torn out pages and conveys a sense of disorder.

Another benefit of wireless notebooks is that the pages are easier to remove. In a spiral notebook without perforations the edges of the removed pages are a jagged mess. Perforations make page removal easier but there is still a cumbersome process of removing the jagged edges.

For these reasons, I will avoid spiral notebooks in the future and give away any empty spiral notebooks that I currently have.

E-books in Translation: The Possibility of Dynamic Rendering

E-books in Translation: The Possibility of Dynamic Rendering

 

Abstract: E-books could fundamentally transform translated works. We argue for a paradigm shift in the role of the translator. Instead of taking a foreign language work and producing a single rendering of it in the reader’s language, the translator would annotate the original work in order to provide data that could be used by different readers to electronically render different versions of the work according to their individual criteria. We focus mainly on the bible and discuss cases in which readers may disagree with the translator’s decision and wish for alternate renderings. We also discuss other works in which reader controlled rendering might be desirable such as anime.

 

Currently translators take a text in one language and create a rendering of it in a language that’s accessible to their readers. There will never be a perfect mapping from one language to another. As such, a text can be rendered in multiple ways. For example, there may be multiple ways a term can be translated. Each may have different connotations and there may be arguments in favor of each of these terms. In the print world, a book can only contain a single rendering, and thus a single choice must be made. The reader is left with that choice. Compromises will also need to be reached between literary flow and literal faithfulness. The translator makes this choice, and again the reader is stuck with it. Translators may try to mitigate this limitation by offering rationale for their decisions in introductions, including footnotes with alternate translations, or providing the original language term in parentheses, but a printed translation will always be very much a single rendering.

In the world of eBooks, things could be different. Instead of taking a foreign language work and producing a single rendering of it in the reader’s language, the translator could annotate the original work in order to provide data that could be used by different readers to render different versions of the work according to their individual criteria. Readers would be able to have their own bespoke translations.In this post, I use the bible as the primary example of a translated work. There are both technical and theatrical reasons to use the bible as our example. Firstly, if its various translations/editions are treated as a single book it is the best selling book of all time. Secondly, the bible is read and studied at a deeper level than most other books, as such translation decisions that would seem trivial in other cases are actively debated. The bible’s interpretation has been filled with political and religious controversy. Whether they intend to or not, its translators are arguably making a political and religious statement. Indeed, the first English translations of the bible altered the existing power structure in such a way that their mere existence was controversial and they were initially violently oppressed. Finally there are also some interesting technical aspects to bible translations: that are multiple source documents whose languages are no longer spoken, there is no living author to be consulted, and the source material is out of copyright.

An example of a biblical translation decision is the translation of the Hebrew יהוה. The Oxford Annotated Bible translates it as “The Lord”. In college, my religion professor disagreed with this translation and instead used the term “Yahweh” going so far as to say “Yahweh” when reading aloud even though the translation said “The Lord” on the printed page. Others have used “Jehovah”. Since a printed page can only contain a single term, he and his students were stuck with this rendering. Reading an alternate term was his only and somewhat Quixotic form of protest. Imagine instead that readers were free to choose whatever translation they desire — either one of the three terms above or something else of their own devising. If a book is electronic, there’s no reason an alternate term couldn’t be selected. ( See http://en.wikipedia.org/wiki/Yahweh for more discussion of the translation of  יהוה.)

Other examples might include aesthetic and stylistic decisions such as modern vs. archaic pronouns i.e. ‘you’ vs ‘thee’ and ‘thou’ and ‘your’ vs. ‘thine’ . Or the use of the phrase “become the father of” vs “begot”. The former uses modern conventional language while the latter is more concise and easier to read if used many times in the same paragraph. The decision to use archaic language (or not) is effectively a political and religious statement. The use of archaic language is a stylistic attempt to give the bible a status as an ancient and venerated text.

An interesting challenge of bible translations is that there’s no one authoritative original text. Different fragments come from different surviving documents. Translators must decide what source to use as the basis for the translation of a given passage if multiple sources contain it. However, if the translation is rendered electronically, readers could choose how different documents are weighted. For example, they might decide that the dead sea scrolls should be used where-ever possible or they might think the dead sea scrolls should be avoided.

Dynamic Translation for Other Works

Differing translations for a term is a common problem in many religious and philosophical texts. Sanskrit Śūnyatā though now usually translated as ‘emptiness’ was once translated as ‘void’ — a subtle but important difference that is thought to have led to confusion.

One decision that translators make is whether to use the original language terms instead of less exact translations. Scholars and serious connoisseurs are likely to prefer original language terms while the casual reader is likely to prefer translations. In the anime community Otaku (https://en.wikipedia.org/wiki/Otaku) often prefer fansubs to studio translations because they retain more Japanisms.  (A pet peeve of mine is movies that insist on translating the local currency into US dollars.)

Why not just have more print translations?

There are a few cases in which multiple print translations of a work exist. Though readers cannot create a bespoke translation, they can at least chose among the different static translations available. However, translating a work requires significant time and expertise. The number of different translations will always be limited. Additionally, with a copyrighted work, there may also be rights issues that limit the available translations. It is unlikely that a reader will find precisely the translation she’s looking for.

An objection is that readers do not want to make translation decisions. Indeed, many readers will happily accept a default rendering just as many users accept the default software settings. However, a set of translation decisions could be packaged by experts and shared with others. To make an analogy to web browsers, few users write their own add-ons but many use add-ons written by others.

Conclusion

E-books have the potential to change the nature of translations. The key is to effect a paradigm shift and shift power from the translator to the reader. Instead of being someone who produces a single rendering the translator would annotate the original word in such a way as to provide data. This data could then be used by the reader to create the precise rendering she desired.

Outputting to CSV in Postgresql

I was inspired to write my own blog post on generating CSV output in Postgresql after researching the topic and finding numerous posts with wrong answers. I hope that this post will be useful to others and also to myself the next time I want to create CSV output in Postgresql.

If you just want a CSV dump of an entire table and order is not important, then run:

psql -c "COPY TABLE_NAME TO STDOUT WITH CSV HEADER " > CSV_FILE.csv

where TABLE_NAME is the name of the table you want to dump.

If you can also dump the results of a more complicated query as follows:

psql -c "COPY ( QUERY ) TO STDOUT WITH CSV HEADER " > CSV_FILE.csv

where QUERY is the query you wish to dump. E.g.

psql -c "COPY ( SELECT * FROM TABLE ORDER BY id limit 10 ) TO STDOUT WITH CSV HEADER " > CSV_FILE.csv

What Not To Do

The typical naive suggestions involve attempting to generate CSV output using basic SQL. These approaches will generate broken CSV files in many cases such as when fields contain quotes and commas.  E.g.

psql -A -F ‘,’ -c ‘SELECT * from TABLE limit 10’ > CSV_FILE.csv

A CSV file (despite the name) is not simply a bunch of values separated by values. Generating proper CSV output requires handling a number of complicated corner cases. For example, you must handle the cases in which the values contain commas. Typically this is done by quoting these values. We might try quoting every field, but then what about fields that contain quotes? The point is that, generating proper CSV output is not something you’re going to be able to using a query standard SQL without incredible complexity (if at all).  Built in CSV output functionality exists for a reason. Use it!

 

Credits:

Many of the blog posts I found that suggested incorrect Postgresql CSV generation techniques contained comments describing the correct approach.

One such comment is listed below:

http://pookey.co.uk/wordpress/archives/51-outputting-from-postgres-to-csv#comment-206

Credit Card Storage Album

I tend to acquire a lot of cards that are used infrequently but are still worth keeping around for those few times they might be useful. For example, old credit cards, library cards for cities I no longer live in, frequent flyer cards, store loyalty cards, etc. It doesn’t make sense to try to cram all these cards in my wallet and carry them everywhere. I prefer a slimmer wallet both for comfort and aesthetic reasons. Additionally, having cards in my wallet that I never use makes it harder to find the one’s that I use frequently. Finally, my wallet space is finite so I couldn’t cram all my cards in it even if I wanted to. I initially resorted to storing cards in drawers. However, cards were difficult to locate when I needed them. Then I thought of a simple but elegant solution: a credit card storage album.

 

You can make a credit card album for under $10 using only 2 items that can be easily purchased on-line: sports card sheets and a 3 ring binder. Simple steps are given below:

  • Step 1: Open the 3 ring binder’s rings
  • Step 2: Insert the card album sheets
  • Step 3: Close the rings
  • Step 4: (Optional) Label the spine of the binder with the words ‘Credit Card Album’

Each sports card sheet stores 9 cards. (18 cards if you don’t need to see both sides.) So 20 sheets will be more than enough for most people. Note: Make sure you get sports card sheets not business card sheets. Business card sheets hold 10 business cards but won’t work for credit cards which are larger than credit cards.

 

Why even keep the cards around?

 

Some might object to keeping rarely used cards around at all. To this I have two responses. Firstly, there are some cards that are unambiguously necessary to keep but are very rarely used – most notably a social security card. Secondly, the amount of space that this card album requires is minimal – no more than a medium sized book. In all but the smallest sparsest dwellings, this is insignificant.