Skip to content

Justin's Linklog Posts

Links for 2008-11-20

Published November 20, 2008

Links for 2008-11-19

Published November 19, 2008

Dumb eco-questions you were afraid to ask

Published November 19, 2008

New Scientist have a great article up this week entitled ‘Dumb eco-questions you were afraid to ask’, including:

Q: Does switching from bus to bike really have any effect? After all, cycling isn’t completely carbon neutral because I’ve got to eat to fuel my legs.

A: You are much better off cycling. A 12-kilometre round commute on a bus or subway train is reckoned to generate 164 kilograms of carbon per commuter per year. Somebody cycling that distance would burn about 50,000 calories a year – roughly the amount of energy in 22 kilograms of brown bread. A kilo of brown bread has a carbon footprint of about 1.1 kilograms, so switching from public transport to a bike saves about 140 kilograms of carbon emissions per year — although this only really works if enough people cycle to allow public transport providers to reduce the number of buses and trains they run.

Also included: ‘How clean does the pizza box/can/bottle have to be for it to be recyclable?’; ‘Are laminated juice cartons recyclable?’; ‘What’s worse, the CO2 put out by a gas-fuelled car or the environmental effects of hybrid-car batteries?’; ‘Can I put window envelopes in the paper recycling?’ and many more. Check it out…

Links for 2008-11-18

Published November 18, 2008

Links for 2008-11-17

Published November 17, 2008

VisitWicklow.ie: Spammers

Published November 17, 2008

I think I just got my first spam from a government body! Specifically, VisitWicklow.ie spam from Wicklow County Tourism. It says:

Wicklow County Tourism is launching its sparkling 2008 Christmas campaign this month, with an extensive festive section on our website www.visitwicklow.ie/xmas . Here you will find all the information you need about what is happening in the Garden County this season including Christmas parties, seasonal events, carol singing, festive markets, Santa visits, great accommodation packages etc.

It was sent to a spamtrap address, scraped from an old mail archive. This address is a dedicated spamtrap; I’ve never used it for non-spam-trapping purposes, nor has it ever opted-in to receive mail. So there was no question that I granted permission to anyone to mail it.

The address delivers mail to my personal account — that’s what I do with my spamtraps, until their volumes get too high. So it still qualifies as a "personal email address". Here’s the full spam with all headers intact.

It appears the message originated at IP address 87.192.126.62:

inetnum:        87.192.126.32 - 87.192.126.63
netname:        IBIS-PA-NET
descr:          BreezeMax-KilpooleHill-Comm-E 3MB 24:1 (2)
country:        IE
admin-c:        IRA6-RIPE
tech-c:         IRA6-RIPE
status:         Assigned PA
remarks:        Please do NOT send abuse complaints to the contacts listed.
remarks:        Please check remarks on individual inetnum records for abuse contacts, or
remarks:        failing that email abuse reports to abuse@irishbroadband.ie.
mnt-by:         IBIS-MNT
source:         RIPE # Filtered

Kilpoole Hill appears to be south of Wicklow town, just the right spot for a wireless tower used for Irish Broadband access from The Murrough, Wicklow Town (mentioned as the address for Wicklow County Tourism in the mail).

Suggestions? Did anyone else get this? How do I report spam sent by the Wicklow County Tourism Board?

Update: they also hit the Irish Linux User’s Group submission address. I wouldn’t be surprised if they scraped the addresses of other ILUG subscribers, then…

Links for 2008-11-13

Published November 13, 2008

Déjà Joué

Published November 11, 2008

James Tauber just mentioned on Twitter:

“is it bad that I just saw a photo of Stockholm and immediately recognized a stretch of road from PGR2, rather than when I was actually there?”

This is something I’ve been thinking about recently. As game graphics improve, the realism levels become close enough to fool our brains into creating something like "real-world" memories for the worlds we’re experiencing in gameplay.

For example, when I visited California for the first time, I was stunned by the feelings of familiarity I felt in response to stuff I’d experienced while playing the super-realistic Grand Theft Auto: Vice City; little things like the way traffic lights were mounted above the road, the design of the curbs, etc., the level of detail for which Rockstar received a "Designer of the Year" nomination — because of this, the streetscape of a typical Californian street was instantly familiar to me.

The same thing happened this weekend, watching footage on TV of Arizona’s Monument Valley. Naturally, I’ve driven a dirt bike around Grand Theft Auto: San Andreas‘ version of this. ;)

Update: another one is the Pripyat level of Call of Duty 4, which would be extremely familiar to anyone viewing these photos from a real-life visit.

I think this phenomenon needs its own name. "déjà vu" is similar, but different — that phenomenon occurs when the memory feels erroneously that an experience has previously happened, whereas in this case, the experience has happened — albeit virtually.

I’ve come up with a phrase to describe this: "déjà joué". (In French, that’s "already played", analogous to the "already seen" of "déjà vu".)

What do you reckon? If you like it, feel free to use it ;)

Links for 2008-11-10

Published November 10, 2008

IBM’s ZTIC

Published November 6, 2008

IBM Zone Trusted Information Channel (ZTIC) — ‘a banking server’s display on your keychain’.

IBM has introduced the Zone Trusted Information Channel (ZTIC), a hardware device that can counter [malware attacks on online banking] in an easy-to-use way. The ZTIC is a USB-attached device containing a display and minimal I/O capabilities that runs the full TLS/SSL protocol, thus entirely bypassing the PC’s software for all security functionality.

The ZTIC achieves this by registering itself as a USB Mass Storage Device (thus requiring no driver installation) and starting a "pass-through" proxy configured to connect with pre-configured (banking) Websites. After starting the ZTIC proxy, the user opens a Web browser to establish a connection with the bank’s Website via the ZTIC. From that moment on, all data transmitted between browser and server pass through the ZTIC; the SSL session is protected by keys maintained only on the ZTIC and, hence, is inaccessible to malware on the PC […].

In addition, all critical transaction information, such as target account numbers, is automatically detected in the data stream between browser and ZTIC. This critical information is then displayed on the ZTIC for explicit user confirmation: Only after pressing the "OK" button does the TLS/SSL connection continue. If any malware on the PC has inserted incorrect transaction data into the browser, it can be easily detected by the user at this moment.

This seems like quite a nice implementation, I think.

However, key management will be problematic. Each server’s public key will need to be stored on the ZTIC, and not be writable/modifiable by the possibly-infected PC, otherwise the "bad guys" could simply insert a cert for a malware proxy server on the PC and perform a man-in-the-middle attack on the TLS session. But for that to be viable, the SSL certs need to change very infrequently, or some new secure procedure to update the certs from a "safe" machine needs to be put in place. Tricky….

Links for 2008-11-04

Published November 4, 2008

Linux: It Just Works

Published November 3, 2008

Here’s a nice little (totally subjective!) story for Linux users.

At home, I have a HP Laserjet 1018 printer; it’s a dinky little USB laser. When I was setting up my Mac running OSX, I attempted to use it.

A common refrain from Mac users is that MacOS X just works — attempt to get something working, and the Mac will do the right thing with little friction, compared to the Linux situation which will involve complex config file editing and what-not. If this experience is anything to go by, that’s not entirely the case anymore. In fact, the exact opposite applied; when I plugged the printer into the Linux box and ran System -> Administration -> Printing -> New Printer, it "just worked" and I wound up with a working network printer within seconds. No such luck with OSX. Some googling revealed the problem:

In summary, the LJ1018 is just not supported on MacOS X. In order to get it working you need to install a third-party port of the Linux printing components foo2zjs, Foomatic, and Ghostscript, ported to MacOS X, and then get busy with the config file editing and undocumented tweaking and what-not. Ouch.

So there you go. Linux: it just works! ;)

(By the way, I was able to work around it by printing from the Mac to the Linux print server in Postscript; the CUPS print server will transcode PS to the native format.)

Links for 2008-10-31

Published October 31, 2008

Links for 2008-10-30

Published October 30, 2008

Links for 2008-10-29

Published October 29, 2008

The horror! the horror!

Published October 28, 2008

Dead Space came out last week, just in time for Hallowe’en. It’s a survival-horror first-person shooter, set in space:

In the bold and often-bloody Dead Space, gamers step into a third-person sci-fi survival horror experience that delivers psychological thrills and gruesome action. Set in the cold blackness of deep space, the atmosphere is soaked with a feeling of tension, dread and sheer terror. In Dead Space, players step into the role of engineer Isaac Clarke – an ordinary man on a seemingly routine mission to fix the communications systems aboard a deep space mining ship. It is not long before Isaac awakes to a living nightmare when he learns that the ship’s crew has been ravaged by a vicious alien infestation. He must fight through the dead silence and darkness of deep space to stay alive.

I absolutely love this genre. If you ask me, Resident Evil 4 is one of the best games ever written; perfectly paced, with some truly terrifying villains, plot twists and tension-laden surprises along the way. There’s no experience in computer gaming quite so viscerally terrifying as the first time you hear Dr. Salvador’s chainsaw revving up in the distance, while trapped in a farmhouse under siege from an army of blood-crazed cultists…

So I got Dead Space last Friday, and have been playing it over the weekend; it’s good. Problem is, it’s not as good as RE4, but then, when you’re up against the best game ever, that’s going to be hard to avoid. Actually, to be honest, the first couple of stages feel very reminiscent of RE4, tending towards derivative. Stage 3, however, comes into its own, with flavours of Aliens. Fingers crossed the upward trend continues…

Reading the comments on a Slashdot thread about the game, I came across this tip:

Call of Cthulhu (Score:5, Informative)

I’d say this is the last game that scared the shit out of me. The fact that you don’t have any health bar, and that your vision, hearing, and even your heartbeat and breathing pace are affected by the situation can really frighten you. I don’t think this game got enough credit. I still haven’t finished the game yet.

Here’s a nice 10 minute video that gives you the general feeling of the whole game. (minus the 320×240 resolution and lossy quality of course). If you get bored skip to the middle.

The video is pretty compelling, so I did some research. It seems the game is still playable on XBox360, albeit with some wonky sound samples during dialogue. Sounds ok to me. I went onto eBay, and was able to find a copy for 8 UK pounds. bargain!

When I twittered about this, I got these responses:

Me: "Call of Cthulhu" 2005 Xbox title, apparently one of the most terrifying games ever written: 8 UK quid on eBay. woot.

Myles at 2:00pm October 23: You won’t be saying woot when your sanity dwindles and you gnaw off your own fingers in an attempt to protect yourself from the Great Old One. [a fair point]

Andrew at 6:56pm October 23: Have you ever played Eternal Darkness for the Gamecube? Really really creepy, and as close to Cthulhu as you can get without paying royalties.

Síofra at 9:06pm October 23: Eternal Darkness – feckin’ brilliant. My first videogame addiction and I remember it fondly. The darkness comes….

So I looked up Eternal Darkness: Sanity’s Requiem, too. check this review out:

Resident Evil, this game is most absolutely not. What it is, however, to dedicated players who fully explore its length and intricacies, is one of GameCube’s absolute best games, and indeed one of the greatest titles we’ve ever played. […]

There are insanity effects — hallucinations that have a major role within the game. […] if a character’s sanity bar drops too low, strange things will begin to happen. Very strange things sometimes. These occurrences are sure to set the dark mood of the adventure and have an impact on the play experience. Going insane too much can create unwanted obstacles for players and in doing so may also endanger one’s health and magick supplies. Some of the insanity effects we’ve encountered have proven very disturbing. Some even attempt to pick at the mind of the player outside of the game universe.

Apparently the walls drip with blood when you start losing your mind. Awesome! IGN gave the game 9.6 out of 10, Metacritic gives it 9th position, 92/100, "universal acclaim", on the all-time high scores list for the Gamecube, and of course, it’s playable on the Wii.

Rosco has already promised I can borrow his copy. Sign me up! Looks like I’ll be scaring the crap out of myself for a while to come…

Links for 2008-10-27

Published October 27, 2008

Links for 2008-10-24

Published October 24, 2008

the on-demand Windows desktop

Published October 24, 2008

A few days ago, Amazon announced that they would be supporting Windows on EC2. IMO, you’d have to be mad to dream of running a server on that platform, so I was totally like "meh".

However, James Murty pointed out the perfect use case that I’d missed:

Although I much prefer “Unixy” platforms for my own development, I can imagine situations where it would be very handy to have a Windows machine easily available — such as for running those vital but irritating programs that are only made available for Windows. Australian Tax Office, I’m looking at you…

He’s spot on! This is a great use case. If you need to do a little ‘doze work, a quick recompile, or a connect to another stupid platform-limited service — indeed, like the Irish tax office’s Revenue Online Service, for that matter — simply fire up a ‘doze instance, do your hour’s work, SDelete any private files, and shut it down again. All of that will cost 12.5 cents.

This will save me a lot of pain with VMWare, I suspect…

More techie details at RightScale; a trial run.

Switch, ep. 3: revert!

Published October 23, 2008

So, that OSX thing. I’m afraid I’ve given up on the switch; I’m back on Linux. :(

I got the keyboard mapping working, but <a href="http://taint.org/2008/09/23/154834a.html”>Focus-Follows-Mouse and the couple of window-management hotkeys I rely on were impossible to work around.

Focus-Follows-Mouse is emulated by iTerm, but every time you switch to an X11 app or to Firefox, a click is required. This app-specific behaviour is jarring and inconsistent.

For some reason, the window-management hotkeys had a tendency to break, or to be disabled by other hotkeys or apps. I never figured out exactly why.

In addition, OSX has a built-in tendency to hibernate once the laptop’s lid is closed. I wanted to disable this, for a number of reasons; most importantly, I tend to leave the laptop closed, leaning beside a chair in the TV room, while I’m at work, but there’s frequently something I want to SSH in for. I tried Caffeine.app to avoid this, but it failed entirely on my hardware. InsomniaX generally works, but for some reason it tends to turn itself off occasionally for rather random reasons (such as switching to battery power, no matter how briefly, then back again). This was the final straw.

So just over a week ago, I installed Ubuntu on the MacBook Pro, following the documentation on the Ubuntu Wiki. Everything worked!

The Wiki’s suggestions were a little hairy to configure — but then, the OSX experience had been, if anything, less easy. Plus, I know my way around a Linux /etc.

On the Linux side, the Avant Window Navigator is truly excellent, and rivals the Dock nicely, and the Baghira kwin theme gives a pretty good OSX sheen to KDE 3. It’s not quite as pretty as OSX, but I’m happy to lose some prettiness for better usability.

Regarding the interface — the current version of the Linux Synaptics driver supports multi-touch (Apple’s patents be damned, seemingly), and all the nice multi-touch tricks supported by most OSX apps work with it too. I’m still working out the optimum settings for this, but it’s very configurable, and quite open.

It’s fantastic ;) I feel like I’m home again. Sorry, Mac people.

(image: CC-licensed, thanks to Dr Craig)

Links for 2008-10-23

Published October 23, 2008

Bonuses for bankers: business as usual

Published October 23, 2008

Wall Street banks in $70bn staff payout:

Financial workers at Wall Street’s top banks are to receive pay deals worth more than $70bn (£40bn) [equivalent to 10% of the US government bail-out package], a substantial proportion of which is expected to be paid in discretionary bonuses, for their work so far this year – despite plunging the global financial system into its worst crisis since the 1929 stock market crash, the Guardian has learned.

Lloyds chief tells staff: you’ll still get bonuses:

The chief executive of Lloyds TSB, one of the banks participating in the [UK] £37bn bank bail-out, has promised staff they will receive bonuses this year despite Gordon Brown’s promise of a crackdown on bankers’ pay following the investment by taxpayers.

In a recorded message to employees, Daniels stressed that the bank faced "very, very few restrictions" in its behaviour despite the injection of up to £5.5bn of taxpayers’ funds. "If you think about it, the first restriction was not to pay bonuses. Well Lloyds TSB is in fact going to pay bonuses. I think our staff have done a terrific job this year. There is no reason why we shouldn’t."

Now that takes nerve.

Links for 2008-10-21

Published October 21, 2008

Links for 2008-10-17

Published October 17, 2008

Links for 2008-10-16

Published October 16, 2008

Closed phish data costing $326mm per year

Published October 16, 2008

Richard Clayton posted a very interesting article over at Light Blue Touchpaper; he notes:

Tyler Moore and I are presenting another one of our academic phishing papers today at the Anti-Phishing Working Group’s Third eCrime Researchers Summit here in Atlanta, Georgia. The paper “The consequence of non-cooperation in the fight against phishing” (pre-proceedings version here) goes some way to explaining anomalies we found in our previous analysis of phishing website lifetimes. The “take-down” companies reckon to get phishing websites removed within a few hours, whereas our measurements show that the average lifetimes are a few days.

When we examined our data […] we found that we were receiving “feeds” of phishing website URLs from several different sources — and the “take-down” companies that were passing the data to us were not passing the data to each other.

So it often occurs that take-down company A knows about a phishing website targeting a particular bank, but take-down company B is ignorant of its existence. If it is company B that has the contract for removing sites for that bank then, since they don’t know the website exists, they take no action and the site stays up.

Since we were receiving data feeds from both company A and company B, we knew the site existed and we measured its lifetime — which is much extended. In fact, it’s somewhat of a mystery why it is removed at all! Our best guess is that reports made directly to ISPs trigger removal.

They go on to estimate that ‘an extra $326 million per annum is currently being put at risk by the lack of data sharing.’

This is a classic example of how the proprietary mindset fails where it comes to dealing with abuse and criminal activity online. It would be obviously more useful for the public at large if the data were shared between organisations, and published publicly, but if you view your data feed as a key ingredient of your company’s proprietary "secret sauce" IP, you are not likely to publish and share it :(

The anti-phishing world appears to be full of this kind of stuff, disappointingly — probably because of the money-making opportunities available when providing services to big banks — but anti-spam isn’t free of it either.

Mark another one up for open source and open data…

(thanks to ryanr for the pic)

solid Python queueing?

Published October 15, 2008

OK, message queueing has become insufferably trendy. You don’t need to tell me, I’ve known it’s the bees knees for 4 years now ;)

The only problem is, there doesn’t seem to be a good queue broker written in Python. They’re in Java, Perl, more Perl, or Erlang, but a solid, reliable, persistent queueing backend in Python is nowhere to be found, as far as I can see. Work is a mainly-Python shop, and while we can deploy other languages to our production, staging and test grids easily enough, it’s a lot easier to do developer-desktop testing if we had an all-Python queue backend.

Am I missing one?

Links for 2008-10-14

Published October 14, 2008

Dublinr Exhibition

Published October 14, 2008

Dublin is a city that, photographically at least, can be reduced to a set of clichés, but a new exhibition offers a fresh, vibrant perspective of the Irish Capital. Dublinr is organised by a group of photographers that came together through the photo sharing website Flickr.

The exhibition opens at 6.00pm on Wednesday 5 November, runs until Sunday 9, from 11:00am – 6:30pm daily, and admission is free.

The Joinery Gallery | Arbour Hill | Stoneybatter | Dublin 7.

Some fantastic local photographers, including Andy Sheridan, whose work I’ve been following for a couple of months now; and a good location. D7 is full of good stuff nowadays — in fact, ever since I moved out ;)