Jul 312009
 

Things I read that I found interesting and worthy of comment July 30th through July 31st:

  • Read This If You Hate Meetings – Good article as well as the one embedded upon which this article is based. This identifies the main source of actual stress in my work life as I have equal parts "maker" and "manager" elements in my schedule. I have a fair amount of reading and writing that are time consuming and require fairly long blocks of time to actually accomplish well and unavoidable meetings. The meetings are unavoidable as I support a relatively large sales team and when they can get a meeting and there is any room on my schedule, I pretty much have to make time for it as well. Makes my job fun in that there is always something new and different to do on any given day, but when there is a fair amount of stuff I need to produce on a time-table, it seems to take forever to get out even the simplest thought-requiring pieces.
  • You Have Three Sentences – Because the market wasn't "free". Too many non-market, (i.e. government) forces at work creating a hidden force with real (i.e. truly free) market reactions that created an unsustainable bubble all of which popped under what would be only slight downward pressure. Unfortunately the hidden force was also a hidden bubble and the fall was much larger as the real market components such as all of the bad-mortgage backed derivative paper also went south, creating the rapid asset evaporation and consequent "crash".

    Remember the folks that brought this crash now want to "fix" healthcare. Seems reasonable if you think they "fixed" housing for the uncreditworthy.

  • A Google Wave reality check (Tom Krazit/CNET News) – I really my multiple submissions to be a tester will be accepted as this sounds very intriguing.
  • FCC Takes On Apple And AT&T Over Google Voice Rejection (Jason Kincaid/TechCrunch) – If you know me, you know I'm not happy to see the government getting involved in this kind of thing. I prefer to see customers who care punish the stupidity of their would-be service providers. The market will fix this in short order. However, it is interesting to see how quickly this has gotten attention. Guess I was far from the only one seriously troubled by this idiotic decision taken by AT&T / Apple.

    Taking bets as to whether this decision gets reversed by AT&T / Apple by Weds or Fri of next week? Monday? We'll see.

  • Wii Classic Controller Pro Impressions – Two sticks?! The heck, you say! ('bout freakin' time)
  • QOTD: Hi, I’m a Rounding Error. And I’m a PC. – Moronic title on this quote as obviously for anyone with a 4th grade education in math knows that Apple is the rounding error. Is their share 7.8% or 8.7% who cares, they are a rounding error to MS. Thus sayeth the math and so noted the Ballmer.
  • I Quit The iPhone – I have loved the iPhone, but now I am quitting the iPhone. (Michael Arrington/TechCrunch) – Wow, Arrington really upset by the Google Voice debacle by Apple. He's leaving the iPhone entirely and I can completely understand. Having used Google Voice only a bit in testing on my BB with the GV app, its truly awesome. I can't wait till the phone # switch funtionality is turned on as I'll be doing that day 1.
  • Seriously, What is Going on with the App Store? Blocks, Delays, and Awful Apps Slipping Through – No Google Voice on the iPhone? Till that gets rectified, no iPhone in my future.
  • Send mail from another address without "on behalf of" (Gmail Blog) – Note to self to look up my various domain hosting service's SMTP info and make this change.
  • The New MySpace Mail Quietly Emerges As A Big-Time Email Competitor (MG Siegler/TechCrunch) – Under the category of things that make you go "Hmmmm….". One look at the screenshots with all the ads is certainly one reason I wouldn't consider leaving GMail for MySpace email, besides the fact that I really like GMail.
 Posted by at 10:00 pm
Jul 302009
 

Things I read today that I found interesting and worthy of comment July 30th:

  • Your GSM Phone is (Probably) Vulnerable to Malicious Text Messages (Andrew Brandt/Technologizer) – Am I the only one who hates SMS? Seems silly that on a smart phone, connected to the internet and hence access to IM of every kind that SMS isn't routable to the IM of your choice or something. I would turn it off on my BB if I knew how. Once I get a spare minute (hopefully late next week as the next several days are fully packed), I'll have to research turning it off or dig a bit deeper through the BB Advanced Settings menu.
 Posted by at 10:00 pm
Jul 242009
 

Things I read today that I found interesting and worthy of comment July 24th:

 Posted by at 10:00 pm
Jul 222009
 

Things I read that I found interesting and worthy of comment July 15th through July 22nd:

  • How One iPhone App Could Save Public Radio – All terrestrial radio is public. Oh, you mean the stations we all pay for so liberal orthodoxy can be espoused? If they can't compete in the public marketplace, they should be allowed to die.
  • Tech Rumor of the Day: Apple, Verizon Team Up on Tablet (Scott Moritz/TheStreet.com) – I haven't seen this yet, but one thought strikes me as I read this article; "Why not put a phone in it too?". I don't want to carry more devices and already am trained to using a headset with all my smartphones, why not have the device to it all? This would replace my laptop for travel, be my e-book (i.e. all books) reader, phone device and even my portable gaming platform. The only drawback I can see is caller ID / screening if I didn't have my phone out, but customizable ringtones would solve that.
  • If you try sometimes – you can get what you need – Cool idea.
  • Mayo Clinic throws cold water on Obamacare – There's nothing good about obamacare. Healthcare in the U.S. is the best in the world. The only problems with it are those created by how much the government is already involved in it. Getting them more involved will make things only worse. You do realize this is directly parallel to what happened in the housing market, the resulting derivatives and the impetus for the financial meltdown, right? That was because government interfered with otherwise free markets and this will do the same. I can't believe we even have to debate this given how terribly all other experiments in this area have gone throughout the world.
  • Breakfast Topic: What iPhone app should Blizzard release next? – Crafting, AH, cooking and fishing. Calendar and grouping functionality would be sweet too.
  • Massively Single-Player Gaming? – This is one huge reason WoW is king. You can group all you want, but there is a ton of content to mess with all by your lonesome. When you only have 15 – 30 minutes you don't have time to gather a group and get anything meaningful done, but you can accomplish quite a bit meaningful in the game in that time, all by yourself.
  • Amazon Says It Will Stop Deleting Kindle Books (Thomas Claburn/InformationWeek) – Too late. Going to be a while before I even contemplate the Kindle. Need a long bit of time to see if this type of overzealousness recurs.
  • AT&T Is A Big, Steaming Heap Of Failure (MG Siegler/TechCrunch) – Wow, I knew AT&T had problems and is one of the reasons I've held out on moving to the iPhone, but a phone company that can't get vmail right? Ouch. I feel really prescient and otherwise smug about resisting the allure of the iPhone.
  • Battle.net authenticator now available for other platforms – Bummer. No support for Verizon version BBs. Guess I have to wait a bit longer to get my authenticator on my phone and ditch the dongle.
  • Twitter: A Tragedy of Errors – Actual security practitioners are beginning to raise their own concerns around KBA, but at this point in my discussions with real world implementers, the business group still holds sway here arguing for convenience over security. It will take a while, probably quite a while, since the death of passwords has been foretold for a couple decades now, but still that's the 90%+ authentication mechanism still in use.
  • Laplace’s Demon, Santa Claus and TSA’s Secure Flight – Not sure how Laplace's Demon has been slain, but seems to me such an intellect with such complete knowledge would then know the nature of time and wouldn't have to complete any analysis, but as time's master be able to move through time to actually visit the future itself. No analysis needed which is good cuz CPU cycles can be expensive .
  • How Usable is the Mobile Web? – Much as I like to rag on Apple and the iPhone hype, this data is hard to argue with. If e-tailers get this information properly absorbed, they should probably start discounting the iPhone acquisition and build in incentives to shop their mobile sites with it. On completing online tasks, "iPhone owners had an average success rate of 75% while other smartphones averaged 55%".
  • Yahoo's front page makeover (Maggie Shiels/BBC) – Looks like the same old busy, ad-laden, news nonsense Yahoo homepage I've come to loathe and despise. I can't really pin it down, but going to Yahoo is like accidentally channel surfing into "Entertainment Tonight". I'm dazzled briefly by all the pretty flashing pix, feel ill and then surf away in both cases feeling like I need a bath. Probably just me and my anti-pop-culture nature.
  • Barnes & Noble partners with Plastic Logic; Opens up; Targets Kindle (Larry Dignan/Between the Lines) – Good to see more competition. I'd love to get a Kindle 2, but no way I'm paying $300 for yet another single purpose device and the latest DRM scrap really puts a damper on my enthusiasm. Want me to carry around a closed system device to use to pay you for more content, it better be dang near free.
  • Windows Home Server Power Pack 3 BETA … (Sleonard/Windows Home Server Team Blog) – Cool. Looks like I'll be able to have my home network ready for Windows 7 when it is released. Now just need to figure out which PC to use as Win7 guinea pig.
  • Tips on using Recount for tanks and others – Note to self: Contains "how to use Recount" link. Check it out
  • Mobile Search Gets a "Push": Aloqa's Location-Aware App Debuts – The "what's nearby" is a cool feature, but I still think all this "where I am" stuff is something several people are going to regret in a big way. No, I'm not making any threats, just observing that now stalkers don't need to stalk, just get on their target's Facebook or similar integrated page. Folks, stop and think about the implications to your real life before jumping into some of this "how cool is that?" stuff. What if today's work friend, who next week is competing for a promotion with you, happens to show your boss where you actually are some summer afternoon when you went to the "doctor"? Let your imagination run wild with scenarios from the sublime to the deadly and we will see them in the news in the next couple of years.
  • Another Security Tip For Twitter: Don't Use "Password" As Your Server Password (Robin Wauters/TechCrunch) – Yep, Twitter a toy built by and for kids.
  • Privacy Salience and Social Networking Sites – Interesting study. Worth a quick skim at least and think about your own usage habits on social networking sites, or not…
  • Twitter's Internal Strategy Laid Bare: To Be "The Pulse Of The Planet" (Erick Schonfeld/TechCrunch) – Wow! This has a lot of information and for me at least, it doesn't clarify for me at all what value Twitter has built. 20 million users vs. Facebook's 250 million? Who will be to 1 billion first? This really a question? Check the time spent on-site of FB vs. Twitter and ask yourself if it is easier for FB to build or adopt Twitter messaging functionality to itself or for Twitter to build a reason for me to actually go to Twitter.com? Twitter as a protocol for multi-casting may have a value, but given their inability to keep the service up for long periods of time and the number of features they've had to turn off to keep it up when it its, I doubt it can't be improved upon. I don't really see what defensive strategy they have beyond that of "first mover" with a base of only 20 million users, but then again I look at even MySpace, yesterday's darling and wonder if this is really a valid defense. I think not.
  • Ubisoft Releases Assassin's Creed: Bloodlines Trailer – Not sure what the knock is on AC on DS, but this looks like more AC goodness to me. May cause me to dust off my PSP.
  • Mac Shipments Up. Also, Mac Shipments Down. – I thought Apple had crossed over into double digit market-share. Guess I care less about them than I thought and suspect MS does as well.
  • Why an OAuth iframe is a Great Idea – Good explanation of a clear use case around the issues of "mashups" and inter-site trust.
  • Google Voice mobile app for Blackberry and Android (The Official Google Blog) – So I broke down today and got signed up. Will be interesting to see how this works in actual practice, but figured I'd better see how it works before they enable porting of your "real" / existing phone number to the service. I wouldn't want to do something that extreme and have it be a subpar experience.
 Posted by at 11:30 pm
Jul 222009
 

Researchers Bypass Secure Web Connections

EV SSL certificates are supposed to help people feel more secure online. But at Black Hat next week, two researchers plan to disclose a way around SSL protection.
http://www.informationweek.com/news/security/vulnerabilities/showArticle.jhtml?articleID=218501653&cid=nl_tw_security

Looks like EV SSL is proving no more secure as a presentation / pretty pictures scenario pushing authentication off on user’s powers of observation.

 Posted by at 1:42 pm
Jul 162009
 

Feb 2009 article regarding automated attacks on CAPTCHAs:  CAPTCHA Conundrum: Automated Attacks Trump Human-Entry Defenses:  http://www.bmighty.com/blog/main/archives/2009/02/captcha_cnondru.html?queryText=anti-spam

From April 2008: “Gone in 60 seconds: Spambot cracks Live Hotmail CAPTCHA needing only six seconds per attempt, and with a success rate of 10-15 percent, new anti-CAPTCHA bots are dismantling fraud protection systems at Gmail and Windows Live Hotmail, and they are flooding the tubes with spam. Is CAPTCHA finished?”  http://arstechnica.com/security/news/2008/04/gone-in-60-seconds-spambot-cracks-livehotmail-captcha.ars

Post on attack on Yahoo’s CAPTCHA indicating an automated attack of 35% accuracy and claiming that 15% is enough to prove more economical than paying for a human network to manually enter CAPTCHAs:  http://it.slashdot.org/it/08/01/30/0037254.shtml?tid=172

Detailed Feb 2008 article showing a CAPTCHA defeating attack on Gmail signup:  http://securitylabs.websense.com/content/Blogs/2919.aspx

=======================================

Other links of interest:

Schneier article with various links, many of which are below on CAPTCHAs:  http://www.schneier.com/blog/archives/2007/12/defeating_captc.html

WSJ article from 2007 on TicketMaster’s problems deploying a useful CAPTCHA: http://www.codinghorror.com/blog/archives/001001.html

Thinking of CAPTCHA paper looking at issues around CAPTCHA design and defeat-ability including costs of hiring humans to read.  http://www.ocr-research.org.ua/thinking.html

The economics of CAPTCHA assault / defeat in blog spam.  Imagine hwo much more the economics work in getting identity or bank account information / access?  http://nweaver.blogspot.com/2007/12/comment-spam-is-worth-real-money_1124.html

Spammers Using Porn to Break Captchas:  Show people porn pix in exchange for them filling out CAPTCHA fields for you against your site of choice.  Really, really cheap.  Remember the old new saying, “the internet is made of porn”.  ttp://www.schneier.com/blog/archives/2007/11/spammers_using.html

A site that uses math questions to check for “humanity” vs. machineness:  http://random.irb.hr/signup.php

 Posted by at 5:13 pm
Jul 112009
 

I mentioned in some post or other this week that I’ve really come to like Chrome.  One of the reasons is how completely spiffy quick it is not just to use once opened, but to open up.  It loads, no kidding here, 15 seconds faster than FF and 5 seconds faster than IE.  That got me to thinking so I loaded each browser up to the same three pages I have as my default tabs in Chrome and looked at the memory usage of each in Vista Taskmanager.  IE of course is the big hog at 124,000 with FF a close second at 94,000 and Chrome comes in at an anorexic 30,000.  Sheesh, no wonder its fast to load and causes me so much less trouble when shelling in and out of WoW with it open.

The only thing that FF has going for it is Ad Block Plus.  Why those guys haven’t made something for Chrome yet saddens me.  SelectView for IE is nice in that it blocks a lot of ads, but still leaves the “blocks” where they would appear as empty real estate.  Ad Block Plus completely removes the ad from the page leaving only what you’re there for.  Amazing.  Doesn’t make up enough for FFs other flaws including just being kinda ugly, even compared to IE.

 Posted by at 8:17 pm