Enrico Zini: Meet the Italian income agency
Meet the Italian income agency
The Italian income agency decided
to publish online all the income levels for each and every single
citizen and company in the country.
I did not manage to see the actual data, because the entire
income agency website was swamped with request and timing out all
the time. You should have heard the comments of my accountant, who
every day needs to access other parts of the website for work.
That service is supposed to have been taken offline now, after
the Italian privacy watchdog issued a polite What The Fuck! Why
Didn't You Tell Us Anything About This? sort of note. The
minister defended himself by saying "I can't see what is the
problem, it's the same in all the world: if you want proof
just watch any American TV series". What a wise
man. I should watch some of The Greatest American
Hero again.
Since I could not see the actual data, I could not verify if
what people were saying was actually true, that is that income
information were published together with the full home address,
providing a nice shopping list for house robbers, kidnappers and
the other kind of professionals that would politely wait next to
your door for you to come home late in the night.
But fear not, the website was protected from bots: it used
a captcha.
Not only that: in order to comply with standard accessibility
rules, the website used a perfectly accessible
captcha:
You can't get more accessible than that: the captcha is
displayed in plain text, so any accessibility
technology will be able to read it. Plus, anyone can easily copy
and paste it into the text box. And if someone needs to do it
often, it's even trivial to write a script that does it for
you!
But it's unfair to say that it was just plain text: it was
cleverly encrypted:
You can't get more accessible than that: the captcha is
displayed in plain text, so any accessibility
technology will be able to read it. Plus, anyone can easily copy
and paste it into the text box. And if someone needs to do it
often, it's even trivial to write a script that does it for
you!
But it's unfair to say that it was just plain text: it was
cleverly encrypted:
<div class="educaptcha"><label for="educaptcha">I<!-- id9113507 -->nser<span>ire </span><span>nel c</span><span>ampo</span> di <!-- id5058508 -->v<span>erific</span><span>a suc</span><!-- id2643358 -->ces<span>sivo i</span><!-- id2500023 -->l valore <span>695</span><span>8571</span>4<!-- id3588853 -->:</label>
<input id="educaptcha" type="text" name="ucaptcha" value="" maxlength="10" size="20" /></div>
For your convenience, here is the version
cracked with a malicious
:%s/<[^>]\+>//g in vim. If you do not speak
Italian, you can still look for this phrase in the screenshot
above:
Inserire nel campo di verifica successivo il valore 69585714:
The meaning is of course:
Insert the value 69585714 in the following verification field:
It's been a fun day for Italians online.
I gave Brenda a
It s easy to disassemble the connector. Take a close look at the attaching plastic hooks there are four of them: two outside, near the pins, and two inside near the cable. Last two are harder to detach, but once you ve detached the first ones, just hold the two pieces of the connector and easily shear them: one side will detach first.
The microphone have two terminals that already hold enough soldering tin. Beware to solder the blue cable (the one that goes with pin 16
I have dissolded the charging cables from pins 1, 3, 5, and 8, but that is up to you (you can just cut the main cable and leave the pins untouched). Also, while soldering the microphone cables to the connector, beware of using as little tin as possible. It ll be even easier if you remove the pin from the connector it s easy to do if you have small pliers and careful fingers. Try first with one of the other pins that will not be used. Solder the red one to pin 17 and the blue one to pin 16.
I cut a piece of an old earphone cushion to close the charging cable hole (and to protect the microphone). Here is the final result:
Now, for the recording software, there s a nice free software that does that perfectly for PalmOS:
With Hans Reiser
Here's a nice toy I added to
In the last week, Nicholas Negroponte gave
I installed Debian upon a new desktop machine yesterday, via a PXE network boot.
It was painless.
Getting xen up and running, with a 32-bit guest and a 64-bit guest each running XDMCP & VNC was also pretty straightforward.
There is a minor outstanding problem with the 32-bit xen guest though; connecting to it from dom0, via XDMCP, I see only a blank window - no login manager running.
GDM appears painlessly when I connect via VNC.
The relevent configuration file looks like this:
When I heard that there will be a miniseries based on “The Andromeda Strain” book, I was very exited. That was one of my favorite sci-fi books in my childhood. After watching the miniseries I must conclude that this is another book perverted and trivialized by Hollywood. SPOILERS AHEAD!
They created some crazy pseido-sci-fi idea that humans from the future sent Andromeda back from the future via a wormhole in a container that contained a message which was then picked up by a satellite that was sent up to investigate the wormhole. No wormhole was there in the book. The book had a much more modest idea - a Scoop satellite was to skim the outer layers of the atmosphere for mutations of common Earth bacteria for military purposes when it was impacted my a micrometeorite carrying the Andromeda. Much more probable, no need to involve wormholes, time travel, ASCII messages, eco-terrorists and a sub-plot on conservation of marine species.
Due to extreme modernization of the script, the whole subplot of the teletype mechanical failure was omitted. Andromeda was made sentient instead and communicated via ’some kind of inductive field’ to shoot down a fighter jet and activate a nuke.
The survivors and their pH levels got barely a glance. Also the amount of destruction was obviously too low for the movie, so the Andromeda was made to mutate more, spread out of containment easily and even make a flock of birds attack a squad of solders ‘Hitchcock style’. Disgustingly cheap scriptwriting.
Huge chunks of plot were ripped out (searching for the micro-meteorite impact crater with different lenses, central core security) and the two hours were filled with Rembo style journalism vs. black ops, selfless president and scenes of animals eating each other and dieing. At the end they ran out of budget and just made it look like presence of Andromeda made air and water bright red so that people would have something to run away from in fear. Oh and the scientists are allowed to freely talk about the event after it’s done. Yeah, right.
In my book this movie rates very close to the infamous “The Core” with the only difference that they managed to fuck up a really good book. Do not watch it and read the book instead.

Ira Pramanick talks in
I've got most of the build system / packaging stuff done for estron now. There's a basic Yelp manual pending completion of the Estron GNOME application, there are some refreshed screenshots, updated the website CSS and added an icon, updated Glade files using Gtk stock items for the buttons.
Just a quick note: I've updated my sid kernel repository (the one which the only change of enabling the old firewire stack along with the new one) to 2.6.24-6, the old
I hope someone will upload it to experimental by the moment and see how works, in the meanwhile you can find it
I'm currently facing a problem I just can't solve, involving pango and GMarkup's glib API.
I currently use
Since I didn't find a similar tool for Linux, I've hacked together a tiny tool
to do BPM counting. The usual stuff: tap any key with the music to get a BPM
estimation. There is no music analysis done.
To achieve better results, my tool uses an exponentially weighted average. It
also computes a confidence interval. So if the song changes tempo (and quite
some jazz songs do) or doesn't keep the tempo constantly (live music with human
drummers often shows some tempo drift. It's just the drum computers that keep
their speed very well...) - the tool can handle that quite well, while also
not being overly sensitive to tapping errors (as you can see in the image).I figure there might be even better estimation tricks (e.g. doing some error
detection and removing them), but this one was just very simple to implement.
And by looking at the graph and the error interval it's quite easy to check
that you didn't any recent mistakes and the result is okay.The Python code is about 158 lines SLOC, and a small UI description generated
with Glade. It's built with PyGTK and uses Cairo for the plots, so it should be
very platform independant and even run on Windows.Download will be available sometime when I get around to clean it up a little.
There is for example still the code in there to compute plain averages, which
can't handle songs with multiple tempos at all.[Update: it now also has a tiny 'flasher' icon that will show you the current
tempo estimation. This is great for checking the quality of the result - if it
keeps on flashing in sync with the music after you've stopped tapping, it's
good. I was also pointed to