Blog - Bloglines - Jaiku - Ports - Wiki


(J)ack (O)f (A)ll (T)rades
Mostly Security, Some
Blogging, Misc. Admin,
and Bits of My Life.









December 2007
Sun Mon Tue Wed Thu Fri Sat
           
         

Wiki RSS

Blog Search

Categories

Archives


Recent Comments

























Del.icio.us


#

Wed, 19 Dec 2007

Port-Sec 19 Dec
I'd guess that what amounts to the Port-Sec (PSec? Portsmouth-Sec) dinner occurred tonight. Those of us that attend (or teach) the series of network security classes (instigated by Rob) at the local college get together twice a year to eat German food and enjoy each other's conversation. Because we're all geeks (Erika, if you deny it, we'll just call you geek-by-association), the conversation tends to center around computers, networks, and security. Thus my claim to the Port-Sec monicker.

The cool thing about this is that we've been holding these dinners for much longer than the whole Bean-Sec/Chi-Sec thing has been going on. This evening's dinner was much more enjoyable because it was a much smaller group. We didn't invite many of the first-year students so the group was able to eat at one large table and we were all able to hear each other (a first!).

The only drawback to the entire evening was the food. Since "Mama" at the Biergarden (in Portsmouth) doesn't "drive" the kitchen any more, the quality of the food has slipped to the point where it's recognizeable that it's German food cooked by someone who's not familiar with it. Authentic German food (that is, good food) has a taste that is based not only on its ingredients, but also how the pans are handled, how the stove is operated, and how the prep surfaces are cleaned. All that I can say is that the Biergarden in Portsmouth, VA is now in dire need of a good German cook. If they don't get one, they risk losing a good-sized chunk of their clientelle. (For anyone that has a German grandmother, here's a hint: I didn't have seconds, not even of the spaetzle.)

For those that didn't attend tonight, you missed a good time (food not withstanding). Hopefully you'll be able to attend in the Spring.

joat: 23:23:19 19 Dec 2007


Wed, 12 Dec 2007

Request for public comments? 12 Dec
The older I get, the more I realize that the things you say/write will either have unintended side-effects or will show up in some very interesting places. And, as such, you should be very careful in your choice of words (I was) when someone asks your opinion (even in forums like public Requests for Comment (RFCs)). Hopefully, this blog doesn't count because you receive my opinion without asking for it.

A friend's recent vanity search, which turned up some unexpected responses, prompted me to do one of my own (it's been awhile). The short version of this story is that I may not yet have visited Congress, but my words have. Yikes!

Okay, it was a RFC dealing with constraints on how a specific organization should make its data publicly available. Nothing major but what happens to your words, after they leave your head, can be quite interesting.

joat: 06:38:01 12 Dec 2007


Tue, 13 Feb 2007

Last word 13 Feb
My final comment on DRM (I'll drop it) (unless of course something really stupid is done with it or crypto advancements affect it)...

DRM protects you from nothing, other than your ethically challenged self. If you're an honest person, you'll never see it (unless it's implemented poorly). If you're a professional criminal, it'll add steps to your process but won't stop you.

Q: So, who is it aimed at? A: You, the guy who attempts to save 99 cents by listening to music that someone else puts online. 400 million 99 cent thefts gets attention. I find it odd that the same industry is willing to spend almost as much to run out "copying music is stealing" advertisements.

Q: So who does it effect? A: Everyone. (I did mention poor implementations, right?) Someone has decided that it's an all or nothing thing, demanding that the OS with 95% market share implement it. This means that 3rd party manufacturers will have to add DRM to their products or not have a market. This will drive up the price for everything computer related. Costs go up, production goes down, markets get squeezed and prices for lower level components go up, driving costs for all electronics up. It took a very long time for the market to get to the point where you can buy $300 systems. (It got there because of very little innovation other than chip speed for an extended period of time.) Computer systems are more or less static in design, having become ubiquitous enough that most consider it an appliance rather than a tool. This action of mandatory DRM will destablize that market. You'll see prices shoot up faster than gasoline.

Q: How I feel about it? A: I actually hope that it works. After a short period of time, the entity driving the bus won't be the one that demanded that MS implement DRM in the first place. Yeah, MS will be a LOT more richer, but at some point, they'll have control of the market. Remember, not only is MS putting DRM in computers, they're also involved in content, either selling it to you directly or behind the scenes (Walmart's music uses MS's copy protection).

Also, innovation seems to occur when markets are squeezed. Inventors are usually frustrated people, looking for new or better ways do do something. Five years ago, who'd have thought that podcasting has gone where it has.

The scary part of all this is that DRM is built into hardware. Like it or not, the evil types will eventually learn the ins and outs of the system. Like I've always opined: adding technology to any system, while often improving performance, adds complexity to that system (more ways for it to break down) and makes the system more rigid (less tolerant to failure). Increased complexity plus increased rigidity equals greater catastropic failures.

MS can barely keep up with patching vulnerabilities now. You think Blaster was bad. Wait until a worm gets into the DRM system. (Remember, it now has control over your monitor, speakers and harddrive.)

How about a patch involves a firmware or hardware replacement? The market will likely tolerate one but two, a few months apart, will cause riots in Congress. The point to keep in mind that (to date) no bugless program has ever been commercially marketed (i.e., all programs have bugs). Put that on top of a system built by the lowest bidder. End result, DRM will be (or already has been) broken. Only a few will know about it at first. Once the number of machines containing the new feature are out there, it will become a target. Then someone will demonstrate how obscenely easy it is to compromise or abuse. Then you get the worms. Want see a "flash" policital movement? It'll come into existance a few days after the MP3/MP4-eating DRM mega-worm does.

I may not like it but I look forward to it. This is the pendulum that has spent a long time on our end ($300 systems). Market forces (DRM and a return to higher priced systems) will cause it to swing away but it'll come back.

With apologies for the rambling...

joat: 10:31:13 13 Feb 2007


Fri, 19 May 2006

Can you do this? 19 May
I know that WinME can't and Linux barely can, can XP do the following at the same time:
  • transcode 20GB of conference videos
  • push 6GB through SSH
  • pull another 1.5 GB from HTTP
  • pull/share 300MB podcasts with BitTorrent
  • view Bloglines with Firefox
  • edit a text file (this one) with Vi
  • chat in IRC

The above has to occur without serious latency or interaction. Admittedly most of the above are text-based and/or tunable, but I'm wondering if XP can do it too. Yes, there are days when I don't use more than one side of the dual boot and, yes, there are good reasons to use XP. Just don't ask me to list them after 6 p.m. (As I write this, it's 8:30 p.m.)

joat: 08:00:00 19 May 2006


Sun, 30 Apr 2006

Finals 30 Apr
Finals are this week so this means that, for any of Rob's old students, we'll be at our final in the usual place in Portsmouth on Thursday evening. (heh) Please remember their policy concerning charge cards and individual order payment (i.e., bring cash!). The extended forecast says "isolated thunderstorms" so you may want to include an umbrella when you leave for work that morning.

joat: 14:00:00 30 Apr 2006


Sun, 30 Jan 2005

ShmooCon 30 Jan
Following are bloggers and others that have stated intentions to be at Shmoocon (in no particular order):

Groups:

Should be an interesting con. Anyone else going? It's probably pointless but I was thinking about rigging a 54G in the car to watch for stumblers on the drive up (I'm more interested in "watching the watchers"...). It's only a four-hour drive too.

joat: 07:30:00 30 Jan 2005


Tue, 25 Jan 2005

Shmoo! 25 Jan
Just realized that the ShmooCon is a week from Friday. That means I have this weekend to clean and rebuild the laptop. Hopefully I'll have time to Tripwire it.

Wonder if it's worth taking audio equipment to record the talks. Anyone know if they're planning on recording the talks?

joat: 08:00:00 25 Jan 2005


Fri, 03 Dec 2004

Sealand 03 Dec
Ever wonder what happened to Sealand?

joat: 08:00:00 3 Dec 2004


robtex