Skip to content

Category: Uncategorized

The FTC’s ‘Fridge’

wow, the FTC get so many reports of spam, they have to use this monster to deal with it! That’s serious volume.

(Image courtesy of spamNEWS and Neil Schwartzman — thanks Neil)

for posterity: the FormMail advisory

Myself and Ronald F. Guilmette co-wrote an advisory on vulnerabilities in FormMail. Here it is, archived from RFG’s bugtraq posting:

Anonymous Mail Forwarding Vulnerabilities in FormMail 1.9

By manipulating inputs to the FormMail CGI script, remote users may abuse the functionality provided by FormMail to cause the local mail server on the same (web) server system to send arbi- trary e-mail messages to arbitrary e-mail destination addresses. Such e-mail messages may contain real or forged sender e-mail addresses (in the From: headers) entirely of the attacker’s choosing. In some cases, the envelope sender addresses of such messages may also be set to arbitrary values by the attacker.

I helped with a few cases where FormMail is vulnerable here, namely the injection of newlines attack.

When this came out, I was in Australia, packing in preparation for a month-long camping trip around Victoria ;) The Lake Catani campsite at Mount Buffalo was amazing. (whoa, compare that page with this e-commerce monstrosity — urgh)

UFO Roundup on Saddam’s Alien Technology

Saddam Hussein, or Mighty Morphin’ Power Ranger? You decide:

… (UFO Roundup Middle East correspondent) Mohammed Daud al-Hayyat has a theory that the golden necklaces worn by Saddam and his son Qusay are protective devices given to them by the reputed Zarzi aliens. …

‘People say that when they wear these necklaces, Saddam and Qusay have only to clasp hands, and the circle of light will appear,’ Mohammed explained, ‘The alien vortex will instantly transport them to safety. In this manner, they can create the circle without the Zarzi aliens being present.’ …

‘The latest rumor is that Saddam will shortly address the people of Iraq from an alien base on the moon! They say this will happen in four or five days.’

Classic! Snipped from UFO Roundup, via the Forteana list; full extract here. (Link)

‘Then they just drop off’

The BBC reports on one animal-borne disease which I, for one, do not want to see making that zoonotic jump to humans:

Gruesome VD hits Tanzania baboons

Scientists are investigating a horrific new venereal disease which is affecting baboons in Tanzania. … Male baboons are particularly badly hit by the new disease, says Elibariki Mtui from the African Wildlife Foundation in Arusha. ‘The genitals kind of rot away, then they just drop off,’ he said.

Salam’s Back

Good news — Dear Raed is back on the air, in one piece!

Let me tell you one thing first. War sucks big time. Don’t let yourself ever be talked into having one waged in the name of your freedom. Somehow when the bombs start dropping or you hear the sound of machine guns at the end of your street you don’t think about your ‘imminent liberation’ anymore.

But I am sounding now like the Taxi drivers I have fights with whenever I get into one.

Reactionary taxi drivers — the same the world over ;) A fantastic read. So many details from the point of view of a ‘normal’ Iraqi on the streets. If you’ve been following the war and subsequent events, you can’t miss it.

IDF fires on British defense attache

Israeli Defence Force fires on parents of injured British peace activist (Independent) (and the British defence attache to Tel Aviv): ‘The parents of a British peace activist who was shot in the head by Israeli troops, came under fire themselves’ … (they) ‘were in a British diplomatic convoy entering the town of Rafah in the Gaza Strip when Israeli soldiers at a checkpoint fired a shot’. ‘The incident … took place despite the Israeli Army being given notice of the journey on at least three occasions’. Incredible. More at the Guardian, too.

SARS genome decoding ‘couldn’t have been done without mail’

just got back from a super-quick booze-soaked weekend visit to Ben in SF. It was so good to visit a city once again, and get the opportunity to paint the town red, hit the bars, eat in plentiful cheap restaurants, and generally enjoy city life (which I’ve been missing massively since the move from Dublin). But now back in post-suburban Irvine to cope with the hangover.

Also got to meet up with Komal, one of my co-workers up there — which was cool. Unfortunately it was a super-speedy weekend whistle-stop tour though, so having a good social meet-up with all the guys will have to wait until the next visit. ;)

Net: ‘The Canadian scientists who broke the genetic code for SARS … say they couldn’t have done it without the Internet. … The key to that collaboration was ordinary e-mail‘.

It also turns out the ProMED mailing list was the central point at which SARS reports were collated in the early stages, even despite evasion and cover-up by the Chinese state.

So there you go — as usual, SMTP is the killer app — or in this case, a life-saving app! All the more reason to figure out ways to deal with spam and return SMTP to its top spot in the protocol pantheon.

Good thing the FTC Spam Forum went so well, then. Sounds like there was unprecedented agreement between the non-spam folks, clear understanding of the issues by quite a few of the Washington denizens, and maybe even some good footage of the other side digging holes for themselves.

Health: US, Asian Airlines Disagree on SARS. Me, I just wish the airlines would stop being so bloody cheap, and bring in more fresh air rather than recirculating. ;)

Scientists from the Michael Smith Genome Sciences Centre of the B.C. Cancer Agency say their achievement relied on rapid communication with scientists around the world. The key to that collaboration was ordinary e-mail, said Steven Jones of the Vancouver-based research agency in a teleconference Thursday sponsored by Science magazine.

“Within a day of us having a press release announcing our participation in the sequencing we had an amazing amount of e-mail from scientists all around the world,” Jones said.

As soon as the sequence was decoded, the B.C. researchers posted it on the Internet.

“People were, within minutes of that, able to download the sequence and analyse it in their own laboratories and their own computers,” Jones said.

“The Internet has had a profound impact on how this data has been shared and how scientists have collaborated.”

A short time later, researchers at the Atlanta Centers for Disease Control published the sequence of a coronavirus taken from another SARS patient.

The genetic coding for the two viruses were virtually identical, boosting confidence that the coronavirus was in fact the causal agent.

Now both sequences are posted on the World Wide Web for the benefit of researchers in many countries racing to find a reliable test for SARS, and a vaccine to prevent it.

Scientists say the speed of the decoding was amazing.

The first reports of the new disease came from China in November, and on March 13 cases were reported in Toronto and Vancouver. The sequences were posted on the net on April 15.

By contrast, it took years to identify the agents behind diseases like AIDS and hepatitis C.

Mel Crajdon of the B.C. Centre for Disease Control said all evidence points to the coronavirus as being the cause of SARS, despite some seemingly contradictory findings.

Earlier this week Frank Plummer, who heads the National Microbiology Laboratory in Winnipeg, said he was puzzled by the number of people who show evidence of the SARS coronavirus but not symptoms of the disease.

Crajdon suggested the apparent anomaly is due to imperfect understanding of how the disease presents itself, as well as lack of reliable tests for the presence of the virus.

“I’m not surprised by the results that have been obtained to date and I think that they will rapidly improve,” he said.

More than 5,400 cases of SARS have been diagnosed worldwide, with at least 394 deaths. In Canada, there have been 23 deaths, all in the Toronto area.

  • – –

On the Net:

SARS sequences: http://sciencemag.org/features/data/sars

SARS data: http://aaas.org

SARS Comments: http://eurekalert.org

Unicode, and how Java got it wrong

Tim Bray is opening my eyes to lots of the itty bitty details of i18n with Unicode. I had very vague ideas about so many things he’s writing here, so it’s an educational read, especially this:

In Java, characters are represented by the char data type, which is claimed to be a ’16-bit Unicode character’. Unfortunately, as I pointed out recently, there really is no such thing. To be precise, a Java char represents a UTF-16 code point, which may represent a character or may, via the surrogate mechanism, represent only half a character. The consequence of this is that the following methods of the String class can produce results that are incorrect: charAt, getChars, indexOf, lastIndexOf, length, and substring. Of course, if you are really sure that you will never have to deal with an ‘astral-plane’ character, to the point of being willing to accept that your software will break messily if one shows up, you can pretend that these errors can’t happen.

To me, this feels just like deciding that you’ll hever have to deal with more than 64K of memory, or a database bigger than 32 bits in size, or a date after December 31, 1999. What Hunter S. Thompson would call ‘bad craziness.’ I’ll settle for ‘shortsighted.’

Wow, and there was I thinking Java had that sorted. If you ever plan to deal with 21st-century-style i18n (ie. using Unicode), you’d better read these articles.

Spam: via BoingBoing, how to extract 500 bucks, painlessly, from telemarketers, under the TCPA. Not yet applicable to spam — but who knows, maybe in a few month’s time…

Open Source: Colm MacCarthaigh caught Dell out a few months ago; turns out they were distributing a wireless AP, the Dell Truemobile 1184, which contained a modified Linux distro — but were not distributing the source to the GPL’ed parts.

Well, all credit to Dell. They’ve admitted their slip-up, resolved the problem admirably, and openly, and have shipped Colm a CD-ROM with all the GPL’ed source on it , which Colm has made available here . Mistakes happen, but it was nicely resolved.

EMusic.com vs. Apple

a message on Dave Farber’s IP list tipped EMusic.com as a little-known alternative to Apples new music store. So I took a look, and whaddya know, it’s incredible! Here’s the key points:

  • A fantastic selection of my favourite genres: roots reggae, dancehall, ambient and drum and bass. This is exactly the stuff you can’t find on P2P nets nowadays, and it’s not on Apple’s store either. EMusic is not so hot for the top-40 stuff, but let’s face it, I will never want to listen to Britney’s latest anyway.

  • ‘Try before you buy’ 30-second track tasters, so you can listen to
    • the tune just enough to see if you like it before committing.
  • A flat monthly rate of 10 bucks, for 50 tracks a month.
  • Download as plain old un-DRM-encumbered MP3s. So it’ll work fine on my Linux desktop, and pretty much any music-listening device you can possibly imagine for the next few years.

Wow. I’m so signing up for this. I think in 10 minutes I’ve identified my next 6 months’ listening material…

The ‘Overseas Spammers’ and ‘Do Not Mail List’ Fallacies

Declan McCullagh: A modest proposal to end spam. Good article on Larry Lessig’s ‘spam bounties’ proposal.

Lofgren’s plan won’t give everyone who gets spammed new rights to sue (although spam victims may already may have some rights under state antispam or other laws). Instead, it states that people sending unsolicited commercial e-mail must label it with ‘ADV:’ in the subject line or run the risk of being sued by the Federal Trade Commission. If you are the first to report an unlabeled spam-o-gram to the government, you will get a bounty of ‘not less than 20 percent’ of the fine the spammer pays, assuming it can ever be collected.

There are problems with this. As far as I know, the FTC is not having a problem collecting spam — the figures I’ve seen (can’t recall them right now) indicate that they get hundreds of megs a day. (Even the SpamAssassin.org spamtraps get over 100Mb a day.)

The difficulty is chasing down the perpetrator, and prosecuting. That takes law-enforcement manpower, and that’s just not there right now — because, let’s face it, spam is not a serious offence like rape or murder.

Anyway, Declan says that the major problem is that the spammers are offshore:

For one thing, an increasing percentage of it comes from overseas, and you can be certain that offshore bulk mailers will gleefully thumb their noses at Congress. Ken Schneider, chief technical officer of antispam company Brightmail, estimates that 30 percent to 50 percent of the spam his company tracks comes from outside the United States. ‘It’s a big number,’ Schneider said. ‘It’s a global economy, and spammers are certainly taking advantage of it.’

This is a frequent misapprehension. This is not the case. It’s true that much spam is relayed through machines in Asia and South America, but the originators — the people who are writing the spam and sending it to compromised relay machines and proxies — are US-based. In fact, a vast quantity of ’em seem to be based in Florida. (This is the thing about country-code blacklists. In reality, if we could track a message all the way back to the origin, a state-code blacklist for FL would probably work much better ;)

In other news from the same article:

… Sen. Chuck Schumer, D-N.Y., is expected to introduce a bill this week to create an national ‘do not e-mail’ list–an idea that the New Democrats touted earlier this month.

OK, while I’m here, let’s debunk ‘do no mail’ lists too. ;) ‘Do not call’ lists work well for telephones, since you typically have only one phone number. But for email:

In summary, I’m not confident a ‘do not mail’ list could actually be operable.

Finally — The SBL’s answer to the EMarketersAmerica.org SLAPP lawsuit.

New Yorker on Spam

Via Ben:

Much funnier than Seinfeld would have you believe.

Unhappy Intelligence

I’ve been trying to reduce all the anti-war stuff, since there’s plenty of other sources for that and I reckon I’m boring everyone. But this story’s a doozie — US, UK intelligence agencies accuse Bush and Blair of distorting and fabricating evidence in rush to war:

A high-level UK source said last night that intelligence agencies on both sides of the Atlantic were furious that briefings they gave political leaders were distorted in the rush to war with Iraq. ‘They ignored intelligence assessments which said Iraq was not a threat,’ the source said. Quoting an editorial in a Middle East newspaper which said, ‘Washington has to prove its case. If it does not, the world will for ever believe that it paved the road to war with lies’, he added: ‘You can draw your own conclusions.’ …

‘The INC saw the demand, and provided what was needed,’ he said. ‘The implication is that they polluted the whole US intelligence effort.’

WWII’s Campest Spy

BBC: Wartime role of Queen’s dressmaker. ‘Details have emerged about the wartime activities of the Queen’s dressmaker Sir Hardy Amies, who died last month aged 93.’

Apparently, he served with the Special Operations Executive (SOE) in Brussels, liaising with the Belgian resistance. During this time, he organised a photo-shoot for Vogue magazine featuring members of the resistance movement posing for photographs!

Seems he got away with it, though — another officer writes in his file:

‘However, it is not for me to reason why, but no doubt the profile of Lt.Col Amies in the next issue of the Vogue will cause a flutter in many feminine hearts when they realise that their handsome couturier is, after all, the Scarlet Pimpernel of this war.’

A peek into a spammer’s inbox, and ‘targeting’

Aardvark.co.nz: The Sound Of A Spammer’s Laugh. Depressing reading. The article’s has screenshot of two MMF-spam dropboxes — here’s one. It’s full of mails from the spammer’s victims. Upshot: make sure your friends know not to reply to spam — and definitely not MMF spam. Mind you, if you’re reading this blog, you and your friends are probably too smart for that anyway ;)

Also: Brad Templeton on spam’s 25th birthday; Brian Hayes in American Scientist. The latter has this nice (although wholly unscientific ;) graph of spam topics — and it sounds like Brian’s getting spammed by artmarket.com.

That raises an interesting point. Spam is frequently trumpeted (by the spammers) as ‘targeted’. What this often means, in reality, is that they’ve just randomly selected addresses and put them in a list as supposedly targeted for a given topic; or else run a Google search for a related term, and shoved a load of addresses from all pages found into a ‘targeted’ list.

For example, my spam load includes:

  • Artmarket, above. I’ve never been known to buy art, apart from a few cheapo prints, and that was off-line.

  • The septic tank spammers. I have about 30 spams from the last 2 years flogging septic tanks. I don’t even know what one looks like.

  • Turkish political spam. Don’t have a clue. I went to Turkey on holiday once, but I never gave my email address to anyone ;)

  • the obvious stuff everyone gets: Japanese, Chinese and Korean spam. I can’t even read the ideograms, let alone understand the written language.

Plus the usual MMF, get rich quick, and porno spam. Not once have I seen a spam hawking DVDs of Koyaanisqatsi, classic breakbeat releases, or the new William Gibson novel — now that would be targeting. But no…

Threats close Kabul’s Irish bar

BlogStart:

Booze: BBC: Threats close Kabul’s Irish bar:

Terrorism alerts have prompted the owners of Kabul’s only bar to close down temporarily. The Irish Club has been a roaring success with correspondents reporting hundreds of drinkers inside at a time since it opened on Ireland’s national holiday, St Patrick’s Day.

But the popularity of the bar, which is open only to foreigners in the predominately Muslim state, appears to have attracted the interest of terrorists, United Nations staff in the city said. ….

Owners of the bar hope it will reopen next week, but its clientele is set to shrink after the UN banned its staff from going there for security reasons and other foreign aid organisations and diplomatic missions have issued warnings to their personnel. ‘It’s been placed off limits indefinitely after warnings that it could be the target of a terror attack,’ said UN spokesman David Singh.

Still, the owners say they’ll do some renovation work while it’s closed. Looking forward to the Beeb story about ‘Kabul’s Irish bar now boasts extensive beer garden and function room’ next month…

Spam: In other news, it seems AOL, Yahoo! and Hotmail are banding together to ‘reduce spam’. This could be interesting.

Amazon Web Services

Tim O’Reilly: Killer Apps Share A Common Thread: Hacker Geeks.

The really interesting bit in this is the discussion of the Amazon Web Services:

Rob Federick, senior technology manager for Amazon.com, asked for a show of hands for those in the room who considered Amazon.com to be a retailer business and those who considered it to be a technology platform. O’Reilly was amongst the few who raised hands in support of the latter.

It didn’t start out that way. But Amazon soon discovered developers taking the Amazon interface and adding their own ideas. A 19-year-old developer from Romania, ‘Catlin,’ began designing store fronts that looked like the Amazon.com site, and then allowing other developers to download the source code for free.

‘We are allowing people to create and innovate in ways that Amazon.com cannot do on its own,’ Federick said.

This is incredibly significant, and shows how Amazon’s leadership has a totally different vision compared to other online retailers. The others take the ‘Altavista view’ — they want to lock their users ‘in the trunk’ as Dave Winer says; users stay on the retailer’s site, aggregators and price-comparison engines are locked out, having to jump through hacky screen-scraping hoops, etc.

In contrast, Amazon are more than happy to let other sites scrape their content using their web services, even if this could be used to show how other sites have lower prices, or possibly lose them sales. Wow. I’m sure that was hard to sell internally, but it’s a great move.

Spam: Reg: new spam trojan, called Proxy-Guzu. Yet another. :(

Dublin Guinness to brew the Nigerian version

Yahoo: Guinness brews up African recipe.

DUBLIN (Reuters) – Guinness is brewing up an African-style version of its famous stout to quench the thirst of Ireland’s growing immigrant population. Tests are under way to replicate Guinness manufactured in Nigeria at its St. James’ Gate headquarters in Dublin. The African version of Guinness Foreign Extra Stout tastes sweeter and heavier than the traditional draught popular in the west, and is almost double in strength.

A Guinness spokeswoman said the new brand was a result of consumer demand from Ireland’s growing African population. ‘This is the home of Guinness and so we’re seeing if we can brew the African recipe here and produce it at St. James’ Gate to the same recipe as in Nigeria,’ she said. …

Guinness Foreign Extra Stout was first exported from Ireland in the 19th century to British colonies. The first Guinness exports to Africa were to Sierra Leone in 1827. The stronger alcohol content helped preserve it during the long sea journey.

I can’t wait to try it out. I used to continually overhear conversations on the bus between Dublin locals and Africans regarding whose Guinness was best — time to settle the argument! ;)

Luther Blissett, author

Luther Blisset strikes again; the pseudonymous trickster anarchist collective from Bologna named after a West Indian footballer (it’s all ‘explained’ in the manifesto) is still at work. Now they’ve written a swashbuckling bestseller historical novel called Q:

Q has finally reached Britain, in Shaun Whiteside’s zippy and rumbustious translation (Heinemann, £14.99). Set in Germany, the Low Countries and Venice between the 1520s and 1550s, it dramatises the bloody popular revolts that accompanied (and challenged) Luther’s Reformation, and the Catholic undercover strategies that wrecked these radical movements. Imagine Umberto Eco’s knack for the swashbuckling thriller-of-ideas crossed with an artful touch of the Le Carrés, and you have a fair idea of the novel’s mood. ….

Q works like a charm as a sordid, splendid period romp that painlessly informs its readers about the theological strife that splintered Europe (and the banking networks that re-connected it). Yet the reasons why a bunch of Bolognese stirrers shoud seize upon this theme soon grow clear. Effectively, their novel also operates as an allegory of Italian leftist politics since the Seventies. Out of the chaos of Utopian gambits and guerrilla provocations, in a murk of subterfuge, an elite plan for a ‘new world order’ emerges.

Sounds great! Must remember to stick that in the wishlist.

Guantanamo Bay detainees including children

Wierd. For the last two days, the PM news programme on BBC Radio 4 has been discussing the recent admission by (iirc) the US military commander in control of the Guantanamo Bay detention center, that there are several Afghani children who have been detained there, since the war in Afghanistan.

This has elicited the reactions you’d expect from UNICEF, etc., seeing as it’s in contravention of the UN Convention on the Rights of the Child.

However, there’s nothing on any English-language news pages I can find; just this Der Spiegel story, not even on the BBC news site itself.

Update: Didn’t look hard enough! Here it is. Also, the Irish Times reports:

(General Richard Myers) responded sharply to questions about critical world reaction to the detention of three children, ages 13 to 15, at Guantanamo Bay in Cuba where the US military holds suspected al-Qaeda and Taliban members.

‘Despite their age these are very dangerous people,’ he said. ‘Some have killed. some have said they will kill again.’

Defence Secretary Mr Donald Rumsfeld said the US was ‘keeping them down there to keep them off the streets’.

Hmm. On the BBC, the commander of the joint task force at Guantanamo, Major General Geoffrey Miller was interviewed; he said that the children had been press-ganged into fighting for the Taliban, and had been victims of abuse during that time. ‘very dangerous people’?

‘at teatime’?

wtf? From the Red Hat 9 at(1) manual page:

At allows fairly complex time specifications, extending the POSIX.2 standard. … You may also specify midnight, noon, or teatime (4pm).

US sugar industry threathens to kill off WHO

This is quite simply insane:

The sugar industry in the US is threatening to bring the World Health Organisation to its knees by demanding that Congress end its funding unless the WHO scraps guidelines on healthy eating, due to be published on Wednesday.

The threat is being described by WHO insiders as tantamount to blackmail and worse than any pressure exerted by the tobacco lobby.

In a letter to Gro Harlem Brundtland, the WHO’s director general, the Sugar Association says it will ‘exercise every avenue available to expose the dubious nature’ of the WHO’s report on diet and nutrition, including challenging its $406m (£260m) funding from the US.

The industry is furious at the guidelines, which say that sugar should account for no more than 10% of a healthy diet. It claims that the review by international experts which decided on the 10% limit is scientifically flawed, insisting that other evidence indicates that a quarter of our food and drink intake can safely consist of sugar.

Does anyone in their right mind think that a food intake consisting of 25% sugar makes any sense whatsoever?

Food over here, BTW, has been really good compared to Ireland. We have a branch of Trader Joe’s just down the road, which has supplied us with stacks of fantastic organic and/or healthy eats, for far cheaper than what the local supermarket charges for the usual pasteurised, added-sugar, added-salt crap.

This is just as well, because that supermarket has some really nasty stuff; even the bread is sweet due to added sugar! yuck. (In passing, pet food peeve: pasteurised orange juice. Pasteurisation of fruit juice kills the flavour and texture, and is thoroughly pointless; with that much acid and sugar, there’s no way any nasty bacteria can survive, assuming the juice is citrus and is fresh enough. But maybe that’s the point; saleable while less fresh == longer shelflife == profit.)

Goodbye to Baghdad

Goodbye to Baghdad (Guardian). Some good snippets:

The information ministry and TV headquarters were obvious targets (for looters), but the wanton destruction of St George’s church was unexpected. … A man living next door to the church said Christians were seen as part of the regime.

Tariq Aziz, after all, is a Christian. Also, this — I knew it! —

The US tanks that shot their way into the city have lost their menace. Children now go right up to the US soldiers, smile, and swear at them in Arabic, finding it hilarious that the troops think they are being friendly.

And the politics of the Shia/Sunni divide:

‘The whole administration has been robbed and destroyed, except for those institutions which have been guarded by them (provisional Shia local government),’ said the hospital director. He was transparently unhappy at having to take orders from the Shia clergy, but said America had left him no choice.

‘Without them, this hospital would have vanished. We have no civilian administration now. Until now America hasn’t done anything for the civilian administration. They are just occupying us and doing nothing.’

The doctor’s dilemma raises a larger question. Did Bush go to war on Saddam Hussein’s secular dictatorship to pave the way for an Islamist Shia regime bordering Iran? Because that is what is beginning to take root in Saddam City, and in other neighbourhoods of Baghdad. ….

The new Shia assertiveness – whether through ambitions of religious government or the exuberance with which millions this week participated in a religious pilgrimage banned under Saddam – has horrified the Iraqi middle and upper classes, and the minority Sunni elite, which has been the traditional ruler of Iraq from the days of the Ottoman empire.

Like the Americans, they have been slow to react these past two weeks, stunned by the speed with which the regime collapsed and mortified by the knowledge that millions have watched on TV as Iraqis laid waste to their own country, and history.

BBC chief attacks U.S. war coverage (fwd)

BBC Director General Greg Dyke singled out for criticism the fast growing News Corp’s Fox News Channel, owned by media baron Rupert Murdoch, and Clear Channel Communications, the largest operator of radio stations in the United States, with over 1,200 stations, for special criticism.

‘Personally, I was shocked while in the United States by how unquestioning the broadcast news media was during this war,’ Dyke said in a speech at a University of London conference on Thursday.

‘If Iraq proved anything, it was that the BBC cannot afford to mix patriotism and journalism. This is happening in the United States and if it continues, will undermine the credibility of the U.S. electronic news media.’

Dyke singled out Fox News, the most popular U.S. cable news network during the conflict, for its ‘gung-ho patriotism,’ saying: ‘We are still surprised when we see Fox News with such a committed political position.’

Good bits, via the IP list.

SARS and Singapore

(or humour?) Rod Liddle: How I was seized for my smoker’s cough:

Despite the almost total absence of SARS around here, the various governments are very worried, apart from the Singaporean government, which, I suspect, likes nothing more than imposing rigorous screening and quarantine programmes upon its somewhat cowed citizens and scrubbing everything down with disinfectant every five minutes. Stand on a street corner for too long in Singapore and you’re likely to be sprayed with Dettol. But that was true long before SARS presented itself. …

We are still in the blame stage of this ‘epidemic’ and the blame shifts according to where you are and what the local government believes. A similar pattern of xenophobic mythology established itself during the early stages of Asian flu, Aids and the Ebola virus. Nasty, incurable diseases are almost always the fault of foreigners doing despicable, uncivilised things, usually with animals. Betcha there’s a gruesome SARS film from Hollywood by the end of next year, with a heroic American doctor played by Ben Affleck, who saves Chicago, or something.

Rod Liddle is very clearly on holiday.

Spammers in the NYT again

NYT: Internet Is Losing Ground in Battle Against Spam.

‘We have allowed these spam cops to rise out of nowhere to be self-appointed police and block whole swaths of the industry,’ said Bob Dallas, an executive of Empire Towers, an e-mail firm in Toledo, Ohio, widely cited on antispam lists used by many Internet companies.

‘This is against everything that America stands for,’ Mr. Dallas added.

‘The consumer should be the one in control of this.’

Wow, way to shoot yourself down in flames. Without a spam filter to detect unsolicited bulk mail and differentiate from the solicited stuff from their friends and legit subscriptions, the consumer has control how, exactly?

BTW, Empire Towers have a very impressive ROKSO listing. It says: ‘Empire Towers (ET) is a hard-line stealth spamming operation whose spams are illegal in most US states. ET goes to elaborate lengths to hide spam origins and obfuscate URLs. They operate by obtaining multiple class C netblocks on multiple ISPs known for lax handling of spam complaints, the class Cs serving to make their account more valuable to the ISP so in theory harder to terminate.’

‘Internet advances not always pure tech’ shocker

Jason Kottke: Portal Wars II: When Search Engines Attack. He makes a great point (from Robert Morris at Etech 2002): while advances on the internet are typically heralded as tech-driven, in fact they’re more often usability-driven. Examples:

Mosaic was not an advancement in technology over TBL’s original browser. Blogger is a highly-specialized FTP client. IM is IRC++ (or IRC for Dummies, depending on your POV).

Dead right. Good tech, without the rough edges sanded down, and a degree of comprehensibility, is useless.

Aside: I wonder if Robert Morris, IBM is any relation to Robert T Morris, the 1988 internet worm guy?

Evil Alarm Clocks

It seems alarm clocks may be responsible for more than just waking you up at unfriendly hours of the day — they may also make you hallucinate and imagine visitations from supernatural beings, according to Michael Persinger, a psychologist who’s been investigating the effects of complex electromagnetic fields on the brain’s perception. He says:

As a human being, I am concerned about the illusionary explanations for human consciousness and the future of human existence. Consequently after writing the Neuropsychological Base of God Beliefs (1987), I began the systematic application of complex electromagnetic fields to discern the patterns that will induce experiences (sensed presence) that are attributed to the myriad of ego-alien intrusions which range from gods to aliens. The research is not to demean anyone’s religious/mystical experience but instead to determine which portions of the brain or its electromagnetic patterns generate the experience.

So it turns out that Horizon, the BBC science programme, has just shown an episode about Dr. Persinger’s work. The transcript isn’t up yet, unfortunately, but some mails on the forteana list make it sound like it’ll be well worth a read when it is. (It’ll be here, apparently.)

One great find is this paper:

‘A left-handed Roman Catholic female adolescent with a history of early brain trauma reported nightly visitations by a sentient being. During one episode she experienced vibrations of the bed, an external presence along the left side that moved into her body, inner vaginal (not clitoral) and uterine sensations, and the sense of being impregnated by a force she attributed to the Holy Spirit. After the latter experience she felt an invisible baby superimposed upon her left shoulder. Analyses of the measurements for magnetic anomalies within her bedroom indicated an electric clock about 20 cm from her head while she slept. The complex form of the 4 microT magnetic pulses generated by the clock was similar to shapes that evoke electrical seizures in epileptic rats and sensitive humans.’

Also worth noting that Richard Dawkins has little aptitude for religious feelings, even magnetically-induced ones!

The Open Proxy Problem

The Open Proxy Problem, a PowerPoint/PDF presentation shown at the Internet2 Members Meeting of April 9th 2003, by Joe St Sauver, Ph.D (Director, User Services and Network Applications University of Oregon Computing Center).

Well worth a read if you’re interested in network security or spam. Joe’s done an astonishing job of researching every angle of the issue, from historical comparisons to ‘blue boxes’ circa 1971, the status of proxy servers to the Chinese government, and even a statistical analysis of proxy DNSBL overlap. (BTW, did you know that the New York Times was broken into via an open proxy?)

Using VNC For Your Main Desktop

I’ve just fixed my desktop machine (had to buy a new CPU, unfortunately, after the old one died during shipping).

I then upgraded to Red Hat 9 (woo, very nice), switched to KDE for my desktop, and took a look at software suspend (because the machine is too noisy to leave on permanently in the corner of the living room).

However, the latter won’t work with my video card; instead, the machine reboots continually when resuming from suspend. Problem.

A bit of thinking about the problem came up with a nifty solution… I’d heard of folks using a VNC server for their main desktop, in order to connect to it from any machine they found themselves near, and not be ‘tethered’ to one particular desktop machine. The same system also means I can run my desktop with a virtual display, and just ‘connect’ to this from the real one. Then, when I want to suspend, I can just kill off the X server, suspend, and start up a new one after resume.

If you’re curious about how to do this, read on

(Untitled)

Guardian: Ministers may be questioned over cover-up.

The cover-up into security force collusion with loyalist murder gangs in Northern Ireland may have reached the highest echelons of the army and even government ministers, Britain’s most senior police officer revealed yesterday. …

He said loyalist paramilitaries had been helped by RUC officers and members of a covert army squad, the FRU (force research unit), and that the cooperation between them included ‘wilful failure to keep records, the absence of accountability, the withholding of intelligence and evidence, and the extreme of agents being involved in murder’.

More RHL9 comments

More comments on that RHL9 review… interesting to see that RH ran into the same Unicode problem we did with SpamAssassin — namely that using Unicode charsets is horrifically slow compared to plain old ASCII. (This is the main reason we use ASCII internally in SpamAssassin.)

Bootup Scripts and Unicode: All the text processing utilities, grep, awk, sort, etc all work significantly slower when using the Unicode UTF locale. To speed the bootup, in the /etc/rc.sysinit and other SysV scripts, because the configuration is using 7bit ASCII these utilities are now invoked with LC_ALL=C utility to force the C locale.

(Also interesting to note who reported the bug, too ;)

Other nice additions:

  • Keith Packard’s xrandr, to resize and rotate an X screen on the fly.
  • redhat-config-(tab) to list all system config stuff from the commandline. At last, sensible naming for this stuff!
  • Debuginfo RPMs, to install debug symbols for your system libraries on-the-fly.
  • Subversion. (Although I’m a bit disappointed to read that svn doesn’t improve on CVS’ ability to do merges at all, which has drastically reduced my keenness to upgrade.)

Red Hat 9, and POSIX ACLs

Good techie review of RH9, thanks Padraig. I find this horrifically kludgy, though:

Just a quick observation. The way text editors save files normally, is to create a new file with a temporary random name, and then move/rename the new file to name of the original. Using this technique, if the file being edited has ACLs, the ACLs will be lost. The Vim editor uses libacl to obtain the original ACLs, and then add them back after the save. It is important that other applications that save files in the same fashion are updated to use libacl.

Bad bad bad. Shouldn’t require application code updates like this. I think this is POSIX’ fault. Mind you, according to acl(5), it looks like umask(2) and a concept of parent-directory-affecting-child-nodes’-ACLs seems to apply; so that improves matters a little.

Still, I don’t like the idea of changing something as fundamental as the system calls used to copy and update files in a filesystem, which hasn’t changed in ~15 years on the UNIX platform. I am sure there’ll be nasty side-effects. Maybe that’s why the POSIX 1003.1e ACL standardization effort foundered ;)

Afghanistan’s First Irish Pub Opens

You just can’t get away from ’em. Irish bars, I mean.

‘The first public house in Afghanistan since the fall of the Taliban has opened – and it’s Irish. The Irish Club opened on a secluded side street in the centre of Kabul last month – on St Patrick’s Day.’ …

‘There are Afghan staff, of course, but they have all been given Irish names – Kevin, Jimmy, Michael, George – ‘to protect them from possible retaliation’ …

Fazel Ahmed Manawi, the deputy supreme court justice, said any Muslims found drinking at the Irish Club will be punished. ‘We have got a lot of foreigners living in our country and unfortunately, this is a necessary thing for them,’ he said.’ (Full story)

Venezuelan General: ‘Proof Washington was behind coup’

CBC.ca: Venezuela has Proof Washington was Behind Failed Coup, says General .

The embassy also rejected allegations by governing party legislators that two U.S. military officials who visited the Fuerte Tiuna military base in Caracas the day before Chavez’s ouster were helping coup leaders.

The two officers spent two hours at the base April 11 to investigate information about troop movements, the embassy said. They left hours before Chavez was deposed. Two officers returned to the base April 13 for another evaluation of the situation.

According to the Council on Hemispheric Affairs:

Venezuelan and U.S. officials are investigating allegations that two high-level military officials from the U.S. embassy, including Army Lt. Col. James Rogers, were at Fuerte Tiuna military base the first night of the coup while Chávez was being held there.

The U.S. embassy initially called the allegations ‘pure rubbish.’ A month after the overthrow, it issued a statement saying the two officials were at the base for two hours late Thursday afternoon, April 11, just before the coup unfolded that evening. They were checking reports of troop movements, the embassy said, and returned Saturday, April 13, during the coup to check the general situation.

Ri-ight.

The details of how the coup occurred are deepening suspicions of U.S. involvement among critics, such as Birns, who draw parallels to the 1973 coup in Chile. They contend that Chávez’s overthrow was not the result of a ‘spontaneous popular uprising’ as the coup leaders, the U.S. government and Chávez opponents contend. Rather, they say, it was a highly orchestrated, carefully thought-out plan by a corrupt class of business, labor, media and military elites who are backed by the United States and who see Chávez’s ‘peaceful revolution’ on behalf of Venezuela’s impoverished majority as a threat to their privileges.

‘This is as classic as they come,’ said William Blum, author of Killing Hope: U.S. Military and CIA Interventions Since World War II. In an April 27 interview with NCR, Blum said the CIA was ‘not even embarrassed’ to use its ‘same methods all over again,’ namely, helping to create a situation of chaos and violence that invites the military to step in.

reStructuredText v. EtText

reStructuredText is apparently the new wave of text-based markup — in the Python community at least. ;)

It’s basically a reworking of Zope’s StructuredText, which — like my own EtText, which is what this blog is written in — is itself a reworking of Setext. Setext is an old Amiga smart-text format which I first encountered in the Plexus web server back in 1993. Plexus, BTW, was what HTTP server number 70-something ran.

It’s interesting. I’d been considering modifying EtText to use some StructuredText ideas, such as indentation indicating tag-nesting levels. But it looks like reStructuredText has got rid of that idea, and instead does what EtText does: ie. indentation indicates quoting. So it must have driven someone up the wall in that case.

There’s a reStructuredText primer here. Compare with EtText’s quick intro. (gack, what is that font I’m using there? ;)

Still, a few other nice ideas to steal ;) — I like the idea of ending the paragraph with colon-colon to indicate that the next quoted block is a code sample in monospace format. hmm…

Ask Don Rumsfeld!

the ‘Ask Don Rumsfeld’ simulator

Your question was:

Any sign of those WMDs yet, Don?

Answer:

It might just be in the words one uses, and someone would then say, oh, my goodness, he thinks this and someone else thinks that. I am impatient. I probably will remain impatient. And if everything were being done absolutely perfectly, I probably would still be impatient. Our relationship with them is multi-faceted, it’s political, it’s economic, and clearly there are security implications.

I guess anything’s possible. I can’t validate it. Oh, I think I’ll leave that for the coming days and weeks. Now that I think of it, I shouldn’t have mentioned it. So when we do the best we can and we pull all this information together, and we then say well that’s basically what we see as the situation, that is really only the known knowns and the known unknowns.

Maybe that is kind of idiosyncratic behaviour on my part but it seems quite rational to me and I think I will stick with it. And it’s constantly a moving target. Well, you know, the United States has a wonderful record of humanitarian assistance, and caring about people, and participation in funding of medical activities, and food programs for people, and we’re not against any religion. As a country, we’re not against any race.

It’s just not knowable. We are looking for code words to describe a relationship that is in transition, I think, is a challenge. I don’t have any good current information that would validate that story.

Ways to pass the time on boring train journeys, pt.XVII

A group of Russian train conductors needed hospital treatment after smashing their heads repeatedly against a train window to find out who had the strongest forehead.

The conductors came up with the contest as a way of passing time on the 3,000 mile journey from Novosibirsk in Siberia to Vladivostock. The men were treated in hospital after stopping the train midway through the journey at the town of Vyazemskaya and demanding medical help, Pravda reports.

Story filed: 08:48 Thursday 17th April 2003 (Ananova)