Search Results: "ema"

10 February 2006

Uwe Hermann: Forensic Discovery - a (free) book by Wietse Venema and Dan Farmer about forensic techniques for gathering digital evidence

I accidentally stumbled over this today: the book Forensic Discovery, written by two security gurus — Wietse Venema and Dan Farmer - has been published by Addison-Wesley. Which is nice and all, but even nicer is the fact that the book is freely available for online reading. There's also a ZIP-file, if you want to get the whole thing. This should make for some interesting reading during the next few weeks...

Michael Janssen: Pet peeve number 1

Okay, something bugs me, and it's somewhat irrational, and somewhat rational. I totally hate really long URLs needed to "verify" that the sign-up is valid. There are more than one type of these, sometimes they are required to continue into the site, sometime just for extra features, but they are more often that not, very long. Now, I don't like long URLs in general in emails, because there are many services which allow you to shorten them for public use. Recently I signed up for 30 boxes and they sent me this monstrosity:

http://30boxes.com/signup.php?action=finishSignup&d=aSDFJKLa43da
safjdAL5RLKj4afjrafa45J5kljtyTGJrALKJgFKLsaj5klJ4jkljakljdkalflk
fASJKjdfa4r23890fdfjskl342390fakjlei309dk390ujkal39032kd03j9djd9

Okay, so lets look at this rationally for a bit. How many unique strings can they have from that huge behemoth of an identifier. There are 145 characters. They are using the entire uppercase (26), lowercase (26) and numbers (10), so there are a total of 62 unique symbols for each spot. That gives us a total of 62145 different strings. That's

78848779858160540639233408124436328679807474352650645474403652978
77812230999983634922053904324829205441837830921209410767866820350
39259149646534571887966722870103317751633817974743087029882020930
78213775489032524047364643001443429901072761743321026356976812032

different combinations. In scientific notation, thats 7.8 × 10259. Just for comparison, the entire number of atoms in the universe is high-balled at 6 × 1079 (on this page). That's more than a googol of identifiers for EACH ATOM, EVERYWHERE. Isn't naming each atom once enough? Then you would only need 45 characters, which would nicely fit in one line of my email client if you just shortened your "finishSignup" to "fS" and action to "a". As a bonus, it also saves you approximately 117 bytes of bandwidth per email. UPDATE: Apparently it has ALL the information, in addition to being completely too long. I replaced it with random crap.

9 February 2006

Ian Murdock: Yahoo?

Lily Tomlin As regular readers of my blog should know by now, I’m a big fan of SaaS (software-as-a-service). I’d go so far as to say it’s the future of software. Like all things, though, SaaS has its drawbacks, the biggest of which are questions of reliability, as the recent outages of salesforce.com have made painfully clear to its customers. It’s great if your data lives on the network, but what happens when your data isn’t available, either because the network isn’t available or because the servers it lives on are down? (The rhetorical question brings to mind Leslie Lamport’s famous observation that “a distributed system is one in which the failure of a computer you didn’t even know existed can render your own computer unusable”.) Security and trust are important too. Prime example: saleforce.com’s less than forthright acknowledgment of the recent outages. Another: Just today, Google launched version 3.0 of its desktop search software, which gives users the incredibly useful ability to search their local documents from any computer in the world. Of course, it does this by storing the index (and, apparently, the documents themselves) on Google servers. Hmm. Do I really want my business plans stored somewhere on the web outside of my direct control? Then again, an increasing number of people keep their email on the web, so chances are, if I’m collaborating with someone, they’re already there. As much time as I’ve spent thinking about SaaS, though, this was a new one: A friend of mine managed to get himself locked out of his Yahoo account, and after hours on the phone with Yahoo support, he seems unable to convince the Yahoo bureaucracy he is who he says he is so they will let him back in. He even offered to fly to Sunnyvale to present his driver license. Apparently, the zip code Yahoo has on file is different than the zip code he’s had his entire life, and the support staff say they can’t unlock his account until he gives them the right answer, which he’s already doing. (Apparently, the best one particularly dim bulb in Yahoo customer service could come up with is that he call back each day with a different guess till he gets it right.) In short, there seems to be some sort of an immovable object/irresistible force thing going on, and he’s not sure how to break the deadlock so he can get back to his data. The most pressing problem is that he’s got some tax related information in his email account, and on the current path, there seems to be no way for him to get to it by April 15. So, I pose two questions here: First, if you work at Yahoo, how in the hell can my friend get his access back? As already stated, he’s spent hours on the phone to no avail. I’ve tried inquiries on the backchannel but have received no responses. Second, for the larger SaaS community, if our data lives on the network, what happens if Google, Yahoo and the like become the phone company?

Erich Schubert: I'm no longer a math student now.

Today I "quit" (formally) my math studies and became a computer science student instead. While my next term will officially be my 6th term in CS, I will be doing my finals and then start writing my thesis (which you usually do somewhere in your 9th-11th term). I have in fact been studying CS longer than that, but I also wanted to do math (mostly because CS was too boring for me most of the time, and math provided a higher challenge) - and instead of formally doing both (which would have required finding out specific formalities noone knows, and maybe paying some extra money) I went with math for a long time. Now that I was approaching final exams for both math and computer science, I had to decide: do math, do CS or do both. Being lazy (and wanting to finish as soon as possible now) I decided to pick the easiest - computer science. My diploma topic will be very mathematical, though - a special logic for reasoning on the web, so it's logic, web 3.0 and theoretical computer science combined. Sweet. I guess it really doesn't matter that I don't end up with two degrees, given all my other qualifications. :-)

Ian Murdock: Release early, release often is no panacea

Joel Spolsky: “Listen, I know that everybody is saying that the cool thing to do these days is Ship Early and Often, but when you ship half-baked ajax calendars that don’t do much and then get Scoble to go nuts about how great they are, well, you’re going to have a lot of people like me checking it out and realizing that, for example, no thought whatsoever has gone into printing, which is fine, it’s a 1.0 release, but you know what? I’m not going to look at 30 Boxes again — I’ve spent enough time evaluating it. G’bye. I’ve talked about this before — it’s the Marimba phenomenon — when you get premature publicity, lots of people check out your thing, and it’s not done yet, so now most of the people that tried your thing think it’s lame, and now you have two problems: your thing is lame and everybody knows it.” “Release early, release often” is a strategy that works because it allows for incremental improvement—you don’t have these “big bang” releases every few years where you try to anticipate what your users will want, because your users are telling you what they want every step of the way while the thing is coming together. That said, Joel makes some very good points, and companies following the “release early, release often” formula would do well to consider them. In short, for “release early, release often” not to backfire, its proponents need to do a better job differentiating between the users that want to actively participate in the development of a new product and the users that are simply looking to solve a problem, because that latter group is ultimately going to be disappointed if the thing isn’t fully baked.

8 February 2006

Ross Burton: Oh Dear Lord

This has quite amazing amounts of crack. It looks like someone thought, "Hey, some people like Muine and some other people like Rhythmbox. Let's glue them together!". Please make it stop. Update: apparently people think I'm mocking the author. Yeah, maybe a little. However, there are some serious cracky features in there, which I personally don't like, and as this is a personal blog this is where I get to say that sort of thing. Of course there is a hell of a lot of effort in this program (albeit in Python so its easier to get stuff working), but why is this another program? We already have music players. If I only count the blessed and pratically-blessed players, there is Totem, Rhythmbox and Muine, all with different UI designs. The author of Listen must have at least partially liked one of those (from the screenshots he liked the playlist of Muine but the overall design of Rhythmbox) and then worked on one of those, say adding a pane to Rhythmbox to do what he wanted instead of duplicating large amounts of non-trivial code. It's likely that the result of this would look nothing like Listen, as I still firmly believe that it is ugly. Of course what he does in his time is his choice and none of my business, so if he wants to write another music player he can, but if someone wants to make a real contribution to the community they should interact with the community in the first place. Otherwise it's just a pet project and if it duplicates existing programs, will likely remain a pet project. Maybe this comes down to centralised source code verses distributed source code (CVS vs Arch), but I doubt it. Downloading a tarball to start patching is easy, and for most people creating an Arch branch isn't exactly trivial. Update 2: This is a very amusing open letter.

7 February 2006

Edd Dumbill: Scripting for the Semantic Web

I have the honour of having been asked to be on the programme committee for the 2nd Workshop on Scripting for the Semantic Web. Whereas a lot of semantic web conferences are heavily academic, this workshop mixes the learned approach with real world deployment experience and sharp-end grassroots semweb hacking. The topics the workshop seeks to cover are close to my heart and represent the place where a lot of discovery and experimental deployment of the semantic web is taking place. So, you should consider submitting a paper to this workshop if you're doing serious implementation work around RDF, wikis, syndication, FOAF and related topics. I was a little flattered to see DOAP in the list of buzzwords in the call for participation too! The workshop also includes the Scripting Challenge, where an iPod nano is up for grabs for "the most innovative small scripting application or mashup. The application must be implemented using a scripting language and Semantic Web technologies. It should access, visualize or combine information from different sources in new unforeseen ways." You can find the call for participation online at semanticscripting.org. The workshop itself will be held on June 11 in Budva, Montenegro--the day before the 3rd European Semantic Web Conference.

Matthew Palmer: Microsoft Patent Indemnification Not Worth Squat

It seems that all of Microsoft's hoo-hah about patent indemnification and the associated attacks on Linux aren't even worth the electrons they're excited with. According to an article in The Register, a patent infringement suit brought by a Guatemalan inventor has resulted in all users of newer versions of Microsoft Office needing to install a new, presumably non-infringing, version of the software next time they reinstall. Users who fail to do so "will no longer be covered by Microsoft's guarantee against patent infringement liability." I don't see how this is any different to what you get with patent infringement in the FLOSS realm. Someone says "that code violates my patent rights", the developers reimplement to avoid infringing, users have to upgrade. I'm just not seeing the difference here.

David Welton: Conditional Compilation in Java

We've hit something of a stumbling block with Hecl, and it's proving tricky. Far from being "write once run anywhere", Java has many versions, when you take into considerations the wide array of devices that run one of several configurations roughly lumped together as "J2ME". My cell phone's implementation doesn't have floats, for instance. This necessitates that the J2ME and J2SE versions contain different code, but Java doesn't make this easy, because there are no macros or other ways of conditionally compiling code. The solution we've adapted so far is problematic because it's not very fine grained: we have two separate directories, one for 'core' Hecl (sans floats) and another that contains the exact same classes, but with floating point. For instance: BasicMathCmd.java - no floating point. BasicMathCmd.java - the floating point version. As you can imagine, this means that code is replicated in two places, and each change has to be done twice, carefully, keeping track of the actual differences between the two files. This can only get worse as the code grows. I've seen some hacky ways of doing macros and things like that, but they don't look very satisfying. I'm too much of a Java novice to think of anything better than what we've got, though.

MJ Ray: Blog moves: IMC-Tech quest for cool captcha

Indymedia Centre Tech recently reviewed available CAPTCHAs and alternatives. Please, if your blog uses these images:

  1. Make sure they work
  2. Offer an email address or email form too
  3. Get a blooming clue about accessibility (and maybe hire me to teach you...)

Kai Hendry: Debian doldrums

Kai participates in a snow fight Gotta love Debian sometimes. ;) My beloved mutt seems a little broken in unstable currently. I’m in the market for a new AM. 3rd time lucky? Ok, so I am packaging Aaron’s web.py library and so I check the license with debian-legal. “Vorlon”, the omnipresent and omniscient got back to me pretty quickly, saying no. Goddam! ;) I’m no legal expert and my brain hurts thinking about these distribution clauses, GPLv3 issues and controversies. I hope debian-legal reaches some agreement. At about 6pm I noticed the Ubuntu crowd were in Seoul. I emailed hastily asking about a meetup or something. Probably too late. Damn. I’m feeling quite alone in my Linux usage here in Korea. I see Mark has been in Japan. I have fond memories of Japan and the debian guys out there. Yeah, if any Korean devs are reading this, get in touch. Part asked me to get in contact with some mail administrators in order to curtail some of the massive amounts of spam coming out of Korea.

Clint Adams: He wore a hat

It was wintertime somewhere in the Ozarks, in the days before the Soft Scape. A young boy named Timmy was born unto a poor family that already had one son. When that brother was killed in an accident, the parents boxed up all his possessions and hid them deep within the attic, not wishing to be reminded of his former existence. Some said that it was the only healthy option open to them, and some said that it was an ill-fitting tribute. In any case, Timmy barely even found out that he had had a brother, and any memories he developed of him were false. As Timmy grew, he sprouted hair, and learned to speak, and learned to pray. Every night, before going to sleep, he petitioned God, Please keep mommy and daddy safe. If he had had a brother still, he would have prayed for him too. The years went by, and Timmy went to school, and someone surprised him with the claim that he had once had a brother. He asked his parents about this when he got home, and they rather loudly instructed him not to discuss such things. He dropped the matter, but remained perplexed and afraid to ask any more questions. It was a long time before his explorations of the attic yielded the discovery that precipitated a great big scene. When his father saw that he had retrieved some of his brother's possessions, he beat him, and his mother screamed that if he ever went up to the attic again, she would cut off his pee-pee , and everyone was upset for quite some time. Mistaking this parental love for abuse, he drew away from them, and began to wander and drift. In the summer of his fifteenth year, he learned that love was a hobo's hand. Then, that winter, he left his parents' house for the last time. Finding himself overwhelmed by the eternal struggle for food and shelter, he started turning tricks for small change. This proved to be a dangerous occupation, and Timmy's life was rife with anxiety for quite some time. Presently, Timmy came to a little town, and in that little town lived a fireman and his wife. The fireman felt that it was time to experiment, and and inquired if Timmy would accomodate him. Timmy was more than happy to oblige for a reasonable fee, and the fireman was more than happy to continue to pay it. His wife was less than happy about the whole affair, for she felt that it reflected poorly on her as a woman, and she feared that if word got out, she would be the laughingstock of the town. Timmy was unconcerned with such issues. Some said that he was morally bankrupt, and some said that he was a practical businessman. In truth, though, the money became utterly unimportant to him, as he spiraled toward a psychotic breakdown. He had developed a fantasy wherein the fireman would leave his wife and take Timmy away, maybe to somewhere like Alabama, where no one would oppress them. As he obsessed and clung to this dream, he pulled farther away from reality and other human beings. The fireman was relatively unconcerned, but the fireman's wife grew more worried by subtle nuances that she noticed over time. You must stop this! she insisted. Give me my space! he insisted. The ongoing argument devolved into citations of marriage vows and Biblical passages, which were conveniently inconclusive. The fireman's wife was a God-fearing woman, and she knew that she could not violate 'til death do us part without being struck down, and that she could not invoke the old 'til death do us part loophole without violating thou shalt not kill and being likewise smitten. Thus she was at an impasse. Some said that she was a victim of a bad situation, and some said that it was her own fault for letting it happen. Timmy's relationship with God was much more complex, though now almost completely forgotten. He had also almost completely forgotten the existence of the fireman's wife, else he might have thought to plot against her. This memory lapse was abruptly corrected when the fireman's wife threatened Timmy. Timmy was upset and distraught and threatened her back. The fireman announced that he was tired of them both, and moved to Alabama on his own. Some said that it was irony, and some said that it was an owmen of things to come.

6 February 2006

MJ Ray: Spammers Hall of Shame: AOL and Yahoo

A much dumber idea than Wouter's is charging senders for their emails, as a BBC report says AOL and Yahoo will do. AOL and Yahoo want some of that lovely spam profit?

Martin F. Krafft: Enabling comments on blogs

Uwe, you are not the first to request that I add a comment feature to my blog. Its consideration is on my to-do list, but I am somewhat against it already. Why? Because I do not want to deal with yet another point of attack for spam, and I am really not fond of web interfaces; there are probably nice ways to tell pyBlosxom to integrate comments well with the filesystem, allowing me to e.g. reply via SSH rather than a browser (or better yet: email), but as it stands, all I know are comment forms on the blogs' web interfaces, which require a browser and cookies enabled to be able to add one's opinions. As blog owner, I have to continuously check my blog for new comments with a browser, and leave answers to comments immediately as I am checking them, but tracking forums with browsers is a royal PITA. Thus, an RSS feed would be the right way to do it. However, RSS only alerts me of new comments; I then still have to fire up a browser (or a shell) to leave an answer. Anyway, I am already drowning in emails, I don't need another medium requiring attention and feedback. There's also another reason against comments on my blog: it's my blog. Apart from legal obligations in the EU, I have not fully grasped the pros and cons of giving other people a space to express themselves. If an entry of mine solicits feedback, I include an email address, and I summarise what I learn from the numerous responses I receive in a second blog entry. I will look into ways to integrate my blog with my email traffic, so that comments come in as emails, and replying to them publishes my response on the blog. Anything else I would not want, I think.

Uwe Hermann: /media vs. /mnt

Martin, you should enable comments in your blog instead of forcing me to resort to email or spamming Planet Debian :) Seriously though, while I know that the FHS recommends /media as a mount point for removable media (and it sure makes sense for Debian as a whole to use that), one of the first things I do on my own boxes upon a fresh install is "rmdir /media /cdrom /floppy /initrd". I don't want to have yet another directory cluttering my root, and I find /mnt is perfectly fine for any mount points, especially since I don't really care whether I mount removable media or not. For example, I have /mnt/cdrom, /mnt/usbstick, /mnt/win, /mnt/hda1, /mnt/hda2, ..., /mnt/ipod etc. etc.

Anthony Towns: Charles Plessy, Copyright Vigilante

Apparently a week’s mail is a 166MB these days for me; I may be on too many lists. In the past week, 1.9kB of that mail were a couple of missives from Charles Plessy, related to one of my blog posts from last month. Apparently he’s embarassed at being associated with what he wrote, and seems to think the best way to approach this is to assert absolute control over the text as his intellectual property and threaten to contact my ISP. Obviously, I disagree, both morally on the grounds that I don’t care for supposed supporters of free software that resort to insults and legal threats, and legally on the grounds I don’t think Charles has any reasonable case to disassociate himself from his own words. Just for the hell of it, his followup mails and mine are below the fold. Read the rest ...

5 February 2006

Aigars Mahinovs: On homosexuality Listening to some recordings of ...

On homosexuality

Listening to some recordings of the Howard Stern show got me thinking about homosexuality. I try not to have any prejudices, so I tried to view this phenomenon from a purely logical point of view with as little external data as possible, so help me if I'm wrong.

Close relationships between two persons are generally understood to contain four separate components: sex, legal matters, social matters and romantic matters.

First of all it is said that, while the percentage of homosexual people is low, many heterosexual people have had some kind of homosexual experience either as an experimentation or as an accidental exposure. It also is believed that if the person in question is not physiologically repulsed by the concept (i.e. homofobic) then they can experience sexual pleasure regardless of the gender of the partner, number of partners or even absence of such. In all we can basically conclude that while homofobia is a sexual disorder (it disorders sexual function), homosexuality is not about sex at all.

The legal perspective is very inconclusive - in some parts of the world even having homosexual relationships can be illegal, but in other parts of the world homosexual marriages are not uncommon. Also all the legal stuff is there to help people that can not help themselves, especially minorities. So the legal part should be all for the equalising homosexuality to heterosexuality unless that does direct and irreparable harm to the society (which it seemingly does not).

From social perspective homosexual couples look to be living the life very similar to the heterosexual couples - there are some that are going wild and there are some that honour strong and stable relationships for decades and love to go to theatre. It could even seem that homosexual people tend to have a higher percentage of creative people and intellectuals.

The only think left is love. Call it a quick romantic encounter or a the love of the lifetime, but that seems to be the major descriptive difference with homosexually oriented people - they just fall in love with types of people that tend to be of same gender as themselves. It could be related to behavioural predispositions or differences in hormonal perception, but ultimately we do not know enough about love to fully understand that difference.

So at this point I can only conclude that until we understand all the hormonal processes and that "love" thingy, we could just as well start counting homosexual males and homosexual females as two additional genders that can not be fully understood by other two genders, just like men can not fully understand women and the other way around. This difference is as real and as effective as the difference between male and female genders or (stretching the analogy a bit too far) like the difference between races and should be honoured just as much as these differences are honoured.

And now I coin the terms "omale" and "ofmale" as the new homosexual male and female gender descriptors and "oman", "omen", "owman" and "owmen" as terms for single homosexual male, multiple homosexual males, single homosexual female and multiple homosexual females respectively.

David Pashley: SQL::Translator

Today, I discovered SQL::Translator, which seems to have some very interesting use cases. Basically, it is a perl module for translating a database schema from one of a number of formats and turning it into another format. Parsers include: Output formats include: Several things spring to mind with this:
  1. Defining your Schema in XML and using SQL::Translator to convert it into SQL for several databases and a set of classes for Class::DBI, which would make your application immediately target any of the supported databases.
  2. Documenting an existing database for which you've lost existing documentation by pointing it at a running database instance and outputting HTML page and, thanks to the Diagram output module, visual representation of the structure.
  3. Convert one database from product to another. Point it at a MySQL database and generate SQL for postgresql. If you generated some Class::DBI stuff you could possibly quickly write a script to copy data too.
  4. Using the sqlt-diff script, compare you current SQL to what is running on the database and generate a SQL script to upgrade the database structure using ALTER TABLE etc. Presumably you'd need to convert any data yourself, but is still a time saver for large databases.
I'm sure other people could think of some interesting uses for this. Having looked at the Class::DBI stuff, I think it could do with some improvements. I can't see a way to set the class names, although I haven't spent that much time looking and it insists on having all the classes in one file. Also the XML and YAML formats generated are rather verbose and I haven't looked to see how much I could cut them down to use as the source definition. I suspect that I can make it a lot shorter and rely on sensible defaults. My initial reason for wanting to use SQL::Translator is that Class::DBI::Pg has a large start up time and isn't really suitable for CGI use if you have a complex database. This might be mitigated by using mod_perl, but in the mean time I was hoping I could speed up startup by telling Class::DBI my column names, rather than it querying the database. SQL::Translator should allow me to save duplicating the database structure, whilst allowing me to support multiple backend databases. If I get this working, I'll write up a short HOWTO.

Andreas Metzler: another notes story.

Today when I logged on at work I suddenly had 46 unread emails/notes-messages. Well actually I hadn't. It just happened that a person whom I had sent to and received from 46 mails had left the company and that her account had been deleted the night before. And Notes' account deletion seems to be quite thorough, this person's address was deleted from the Sender/Recipient fields of the messages I had received/sent. (Yes, I've now got lots of messages without any reference to a either Sender or recipient.) Notes now happily chose to flag the messages as unread because they were changed.

4 February 2006

Per-Arne Hellarvik: The burning of an embassy.

Tonight I find myself regretting to be openminded about religion and believes.
Islamic followers has burned the Danish and the Norwegian embassy in Syriah.
This seems to me like a direct treath to my way of thinking and the single most important right I as a human beeing have: The freedom of speech. You might say that even though you have freedom of speech you cannot harras people and their believes. This is not true, I can and I will speak up against any form of belief or religion which underminds my rights as a human to ridicule religions which are oppressing other humans and are decreasing my right to choose whichever religion I'm to follow.

As some demonstrants stated to the media in London: "The government must control the media".
And haven't we "non-believers" been called "sons of whores", dogs and pigs from the same people which demands respect?

This is _not_ right, this is madness........

Next.

Previous.