Security Theatre, the Orange Edition

December 27th, 2009

I like how the authors at Debka summed it up:

“The horrendous sight of another Western airline crashing over the US on Christmas Day 2009 was averted by a fluke and the resourcefulness of passengers and cabin crew – not by the anti-terror agencies’ high-tech gadgets, vast budgets and airport security measures.”

Now let’s look at this next posting, this time from Slashdot:

“”Some airlines were telling passengers on Saturday that new government security regulations prohibit them from leaving their seats beginning an hour before landing. The regulations are a response to a suspected terrorism incident on Christmas Day.”

Further discussions that I’ve had with people on this subject suggest that the “regulations” even include small children, and definitely prevent anybody from using the lavatory. You see, now the terrorists can dick with us without actually killing or even hurting anybody. Now I’m sure that very few people on the planes nowadays have enough backbone to openly question this new policy, such as “how is this supposed to actually prevent somebody who has 80 grams of PETN from attempting to blow up this plane?” Everybody in the flight is probably just too scared that if their 2 year old child acts up, that they will end up on the no-fly list and arrested upon arrival for daring to question an authority that has obviously no logic or reason to back it up. They’d also probably be very likely to shout “terrorist” at anybody else who dares to question this authority so that they themselves will not be noticed by the authority. (The best defense is an offense no?)

I surely hope that such retarded regulations are not in place when I am on a flight. I have flown El Al multiple times, and I know what real security is like. I also know what it is like to have several places that I frequented blown up by suicide bombers – from the Purim bombing at Dizengoff Center in Tel Aviv to the trampiada at Tsrifin to any number of public buses. In spite of all this, I go about living my life like I normally do. I do succumb to bag checks and metal detectors at public places in Israel, but you can be sure that I would raise my doubts and demand to be allowed to take a piss if any ridiculous regulation such at this was passed in Israel. So I am here disapproving of this idea. The USA has gone back to making women drink their own breastmilk. What a very pathetic society we live in today.

Security Theatre

December 26th, 2009

I’m just trying to reconcile this… I cannot bring a bottle of water past a security checkpoint anytime I wish to fly, but a man somehow sets off a “small explosive device” on a Delta Airlines flight between Amsterdam, Netherlands, and Detroit? I’ve even had bottles of water that I had with me on El Al flights confiscated from me in Newark…

Shouldn’t airplane security focus on real security and not things that give the misperception of security?

Calling on DJB

December 18th, 2009

Perhaps you’ve used his software before. Perhaps you know it’s a little “funky” in design, because DJB does things his way. But this is not to say that his software is faulty. Unfortunately, though, he is not known as one who updates his software to fix bugs or add new functionality to them.

I’ve been using Qmail for over a decade now. For most of this time, I’ve been using netqmail, which is the last release of Qmail that DJB did (1.03 I believe is the version number) with something ilke 25-35 patches on top of it. Some of those are trivial, such as the #include patch. Others are much more involved.

I have come upon something else now that could use a little love. I use daemontools and ucspi-tcp to launch a number of my network services on my linux systems. I prefer this method as it’s a non-obtrusive and low resource method to make sure that if a service controlling daemon or other program crashes, that it gets relaunched automatically within 5 seconds.

Just the other day, a friend of mine from the FreeSWITCH community was complaining about troubles he has with NAT. I too hate NAT, especially when it comes to working with VoIP, and needed a little excuse to roll out ipv6 on my network. So I, taking a little break from writing C code and SQL stored procedures, decided to re-establish my ipv6 tunnel connection to Hurricane Electric. After working out the routing, radvd, and firewalling with ip6tables (which, I must say, is WAAAAY easier when you don’t have to muck around with NAT), I noticed that there is no ipv6 support in ucspi-tcp 0.88. I cannot say that I am surprised, given how long ago it was since 0.88 was initially released. And despite that DJB granted a less restrictive license (possibly it was straight to public domain? I don’t remember.), he still hosts the source and documentation on his website. It therefore seems that he still claims ownership over the source code in the sense that it was his effort that created them. Now a little Google searching reveals some patches out there for ucspi-tcp to add ipv6 support. But I prefer to get these patches from recognized sources, especially DJB himself. So this is a call out to DJB to ask that he incorporate this and other patches that people have provided over the years for this and his other software (where it makes sense that is). There are forks now of his software, but I am a little apprehensive about grabbing one of these forked projects instead of the DJB one.

Perhaps what I am asking here is unrealistic. Perhaps DJB gave the projects to the public domain because he has no intention to continue to support them. Perhaps I didn’t get that memo. I guess only he could tell us for sure.

A Few Random Thoughts

December 14th, 2009

I’m up later than I probably should be tonight, but as I’m trying to wind down to go to sleep, some thoughts have been running through my mind. On the heels of this article, I am once again reminded about the issue of Net Neutrality. While I am completely for the concept of Net Neutrality in the sense that I think it should be illegal for the pipeline provider to reclassify your packets, there is one single edge case that comes to my mind that is not like the others. This issue is about emergency services calls over VoIP (or whatever the defacto technology is at any point in time in the future). In this one case the providers should be allowed, in fact even required, to grant higher priority to calls, as it could very well be a matter of life and death.

That brings me to another issue. The FCC is starting to take preliminary comments about an eventual switchover from the current TDM phone network that we all know to a packet voice network (in this case, specifically VoIP). Now there is at least one major kink in handling routing of emergency services calls. If I were managing a service provider (i.e. an ITSP), I would not want to rely on the consumer to keep all records up to date, and what of the case where somebody is running their own PBX and has multiple users from multiple geographic locations? As we are all waiting to see if the USA in general will join the 1990’s by finally starting to roll out IPv6 natively on the wire on a grand scale, there *might* be a solution to that built into IPv6. Another member of the FreeSWITCH community suggested that the IPv6 mobility extensions might hold the key to this problem. His understanding is that information about the geographical location of the system using the IP address gets (or can get) encoded into the packets with the mobility extensions. I myself have not yet read up on IPv6 mobility extensions, so if any of you have and have some input on this, I’d love to hear about it.

Achtung

December 2nd, 2009

This review is a little late, considering that Wolfenstein (2009) has been out for at least a few months now. I was still weighing in on the game, so I couldn’t really decide how to review it. The envelope has been pushed and I definitely have formed my opinion now.

Single player is mildly entertaining. I say that it’s mildly entertaining because it follows pretty much the same cookie-cutter form as all other recent FPS (first person shooter) games. The interesting additions were the concept of finding and buying upgrades to weapons and the veil device. Neither of these are original to FPS games, but it added a little twist to the Wolfenstein saga.

Now the multi-player mode is a completely different story altogether. Let’s start off with the idea of ranks and unlocks. There’s 50 ranks altogether, and you start off at 1 as you can probably guess. Now I’m not sure what the exact mechanism is to jumping ranks – whether it be time played, gold won, number of kills, or number of objectives attained (or some combination thereof) – but as you play you will start to increase in rank and be able to get upgrades to your powers and weapons. Now here’s the problem: You can randomly lose ranks without any rhyme or reason, though playing on a hacked server certainly does cause this (anybody who has played on the Testz public server has probably noticed this). So about a week and a half ago, I was rank 32. I am now down to rank 5. I have lost pretty much all of my gold and my upgrades. How stupid is it that playing on a hack server punishes you? It’s not like you can really tell who has a hacked server and who doesn’t until it’s too late. Now there’s also the issue of the statistics website, which to this date still has no DNS entry for it – stats.wolfenstein.com. Why does the game advertise a URL with this host in it if it never has existed? That’s beyond sloppy. Now the game play itself is just a little unpolished (usually minor sync issues), but the number of maps and the types of games are definitely lacking. You have team deathmatch, objective (build things, steal things, disable things), and stopwatch (objective where you switch sides, so there are two rounds to each match). There’s only a small handful of maps to play, such as Manor, Rooftops, Telsa, Hospital, Chemical Factory, and Rail Yard (might not be the name – it’s the one with the veil tank in it). Two of the reasons that people still play older games like Quake 4, Quake 3, Urban Terror, etc., is because a) there are many more maps, many of which were created by regular old community members, and b) more than 2 modes of play. So how did ID/Raven drop the ball on Wolfenstein then? It’s the game that basically started the FPS genre…

I feel as though I did not get my money’s worth out of this game. Single player mode is rarely sufficient for FPS games these days. There is an expectation of playing with other folks online, instead of just some AI. I do not plan to play this game again, and will return to playing other games.

Oh, one more thing – normally id software games have the option for a native linux launcher. Bring that back with future games, please. And x86_64 binaries (for all supported OS’s) would be doubly good.

The Real Story About the War in Gaza (aka “Cast Lead”)

January 19th, 2009

Draconians in the Private Sector

January 14th, 2009

It’s been a good while since I posted anything.  I know, I have been bad, and allowed real life to interfere with my virtual reality that is the Internet.  That being said, there’s a few things that I feel the need to comment on, especially since they are fresh in my mind.  I am sure I’m not the only one who says these things, but perhaps the more people talk about it in an intelligent manner, the more the “common person” will understand about the issues.  Granted, these issues are not of the utmost importance, and I’d be much more inclined to have the healthcare system in the USA fixed before these issues are dealt with.  However, the “common person” often times places greater importance on these issues than I do.

Have you bought any Blu-ray movies recently?  How about subscribing to digital cable TV in a major metropolitan area in the USA?  If so, you have either knowingly or unknownling encountered DRM.  DRM, called “Digital Rights Management”, is misnamed.  Since it does little to protect you, the consumer, and is all about protecting the rights that the “content publishers” (in this case, the companies that publish the movies or cable tv feeds) believe they have.  It restricts what you may and may not do with the movie in your own home.  Therefore, “Digital Restrictions Management” is a more apt definition.

Since you may not have knowingly encountered the problems that this DRM creates, I can present two scenarios that I have encountered.  For starters, Blu-ray discs are usually encrypted with a pretty strong encryption routine.  This encryption routine is much stronger than the one that is used on standard DVD discs.  The “content publishers” would have you believe that the encryption is to prevent copyright infringement (notice I did not say piracy, as the real piracy is occuring in the waters off of the Horn of Africa by Somalis).  Why do I have the strong suspicion that bootleg copies of Blu-ray movies have been out since they were released to market, especially in East and Southeast Asian countries?  The answer is simple: those who do large scale infringement for profit can easily get around the encryption on the discs.  So then one must assume that the encryption on the disc was either a naive protection against those large scale counterfeiters or simply a way of preventing you, the end user, from making copies and giving to your friends.  With all the hype going around the media about how piracy is hurting legitimate sales, let me pause for a minute to put the clock back to the 1970s and 1980s.  Back then, how many people made mix tapes and shared them with their friends, and those friends ended up sharing the mixes with their friends too?  I’d put my money on it being the majority of folks around at the time with access to records and tapes. What’s the difference between the 1970s and 1980s and the current day?  Simple: The Internet has given people some *limited* ability to quantify events and occurences that were previously too difficult to quantify otherwise.  So suddenly the “content publishers” are able to see “OMG, there’s thousands of copies of our songs out on the Great Wild Internet!  We must do something to force people to pay for every single copy out there!”  Current Recording Industry of America Association litigation aside, the second prong on that crusade is to encrypt everything.  Not only that, to be able to decrypt the content, your hardware and software must be licensed.  That means that all free and open source projects are excluded, because one of the steps in getting the license is coughing up a big wad of cash.  Another of the steps, I believe, is preventing users from getting the technical information and encryption keys necessary to decrypt discs on their own.  The fact that the program’s source code is widely available means that all that technical information is right there in public view.  This effectively prevents anybody from releasing a piece of open source software to allow even viewing of the content without taking on great legal and/or financial liability.

The situation with cable tv is pretty much the same.  The only two differences that come to mind are the fact that instead of a disc being encrypted, it’s the signal that comes over the cable lines that is, and the fact that you as a consumer are paying a pretty hefty price monthly to subscribe to this service.  I use an open source DVR at home known as MythTV.  MythTV is similar in many ways to a Tivo, except that it has no corporate backing, no interest in financial gain via sale of software or services, and allows the user to have more complete control over what is done with the recordings.  For example, I can retain my recordings forever, provided I have space for them.  I can transcode them (means to convert from one format to another) in order to save drive space at the cost of quality (usually).  I can automatically skip the obnoxious commercials as well.  Tivo will certainly not allow you to skip commercials, only to fast forward through them.  This means that Tivo is a somewhat more convenient VHS, and does not live up to its potential as a digital recorder.  If you happen to have a Motorola 6200 series cable box, you’ll see that the box has the hardware for networking (the RJ45 connector), Firewire connectivity, and USB connectivity, which are all very likely disabled by your cable provider.  Since digital cable and HDTV transmit what’s called mpeg2ts which can be streamed (sent) directly out the firewire ports, it would make sense to just plug the cable box into a computer with a firewire port on it, and record off of that, no?  It cuts out the overhead of digital-to-analog-to-digital conversions, and simplifies everything.  Comcast in DuPage County, Illinois, only allows for the firewire port to be used on channels that are broadcast in the region (i.e. channels 2, 5, 7, 9, 11, 26, 32, 38, 44, 50, and 66) and a few public access channels.  Everything else is disabled by encryption.  So I end up paying $70 per month to not be able to simply and easily record off of the cable box, and instead have to resort to a convoluted solution involving infrared transmitters and Hauppage WinTV capture cards.  It is far less successful than using the firewire, as sometimes the channel does not change properly.  When I called to complain to Comcast about this, I was told “We disabled this because you might record a show and keep it forever.”  Excuse me?  First off, what about all those old VHS tapes of TV shows that my elders have in their possession?  I don’t seem them tossing them out.  I also don’t see them watching them anymore either, though.  I do have several episodes of The Daily Show with Jon Stewart from 2005, but I also have not watched them recently either.  I would not likely buy seasons of The Daily Show on disc if they were offered for sale assuming that I did not have those episodes saved on my drive.  The “content publishers” cannot even try to assert that this is a “lost sale”.

The only lost sales involved are these:

1.  I have not subscribed to cable tv since moving back in November.  I have no plans on doing so until the encryption is beaten to a pulp (which is unnecessary to do in my opinion) or is completely dropped from at least non-premium stations.  So that means that Comcast, Time Warner, AT&T, et al, are all out of the $70 a month that I would otherwise have spent on service from one of those companies.

2.  I have no immediate plans to buy any Blu-ray movie discs.  I do own a Blu-ray recorder on my computer, but it is meant to be used for data and for my own home movies.  I own somewhere around 40 DVD movies (or more) right now, which I only bought because it was possible to watch them with open source software.  Until this is possible and unencumbered, all the “content publishers” selling encrypted and encumbered discs are out the several thousands of dollars I would otherwise spend on updating my collection and collecting new titles.

The “content publishers” lobbyists constantly sell their sad sad stories to our elected (and unelected) officials all the time.  For some reason, they believe that their products are of national importance, and that without them the national economy would crumble.  I didn’t realize that music, movies, and tv, were on the same level of importance as roads, schools, healthcare, and protection.  What would happen if they just vanished off the face of the planet?  Simple – life would go on as it always did, and people would care less about American Idol and the next installment of Tolkien’s books into movie form.

Americans would not likely let the government control at what times they eat everyday inside their own homes.  Why do they let companies like these control how they view and copy what they have legally paid for in their own homes?

The issues are even more complex than this, but this is already a good start.

Time to Play Food Critic

August 30th, 2008

I don’t consider myself to be much of a food critic.  I know what I like, and I know what tastes good to me.  But I do not believe that I have that refined of a taste except maybe in some very specific types of cuisines.

The other day I was in San Antonio, Texas, and I was sitting at the Rivercenter Mall along the famous Riverwalk.  It is a very beautiful and interesting path to walk around, though I wouldn’t suggest wheelchairs, walkers, or strollers (and if you have small children, put floaters on them and tie a leash to them, most of the riverwalk has no barrier from the water’s edge).  Anyway, I spotted restaurant I believe was called “Gourmet Kebab Cafe” or something similar.  The man working the counter was of Persian (Iranian) descent.  I haven’t had middle eastern food in a couple weeks, so I was craving some Humus or something.  I ordered the Humus at this restaurant, and I was absolutely disappointed.  First off, the Humus was thick and pasty, not smooth and creamy like it is in Israel and the surrounding countries.  Secondly, I was provided with weird tasting Grecian style pitas instead of the type normally found in the southeastern shores of the Mediterranean.  Thirdly, I was only given one such pita, and then had 4 corn tortilla chips inserted into my Humus (must be a Texan thing).  The taste of the Humus and the pita was absolutely abysmal.  I paid $5 for this, and I couldn’t even force myself to eat it.  I had to dump it out.

Later in the day, I was driving towards Houston on I-10.  About 1/2 to 2/3 of the way there, I stopped at the Oakridge Smokehouse just off the highway.  From a glance of the facade, you wouldn’t think to eat there.  It definitely looked shabby (although most of the shabbiness was likely deliberate), and not a place I’d likely stop at to eat.  Anyway, the decor of the restaurant was more simplistic country, but they seemed to collect a lot of Christian paraphenalia.  I was seated on the side of the room with the collection of the crosses, but I didn’t say anything about them as I didn’t want anybody to know I wasn’t Christian.  Anyway, I ordered a 16 oz. T-bone steak.  I didn’t even need any sauce on the steak, it was that well seasoned.  In fact, I must have eaten about 3/4 of the steak, because I actually had very mild heartburn afterwards.  I rarely get heartburn, as I rarely overeat.  The prices were pretty fair at the Oakridge Smokehouse – that steak was $16.  In reality, it would have been enough for 2 people to share and not be hungry.  Thumbs up.

Hey Shrek, Nice Ass

July 10th, 2008

 

There’s something about people in more well-to-do areas of North America that annoys me a lot.  Everytime I go to see the 4th of July fireworks, there’s always a ton of people who think that by putting a blanket on the ground and a few chairs that they now somehow hold a lease to that piece of land.  However, they always neglect to actually sit and keep an eye on their stuff.  My philosophy has always been this:  if your ass isn’t there, you have no claim to it.  I have been tempted on more than one occassion to take random blankets and chairs and remove them, and dump them in a much less attractive fireworks-viewing location.  The only thing that stopped me from doing so is the fact that I was still thankfully able to find a spot to sit in, though it wasn’t always the most comfortable.  What would it take to have this behavior stop?  Maybe some petty thieves from the city coming around and stealing whatever nobody kept an eye on.  Oh hey, good idea in fact…

No (remedial) Child Left Behind

June 19th, 2008

I was recently participating in a discussion about the public school education system in the USA recently on Slashdot.  The basic premise of the article being discussed is how the No Child Left Behind Act actually leaves the advanced students behind.  I’ve seen a number of people who are of the opinion that if a child is sufficiently advanced academically, that said child can entertain himself when he finishes his work in a mere fraction of the time allotted to his classmates.  This does not make sense, because it tries to force children into yet another mold.  Not every child wants to entertain themselves.  Some children are very advanced but crave the guidance of a teacher or other elder.  I have experienced this firsthand in my life as well when I was a child.

 

I never wanted to be just sitting for 20 minutes at the end of the test, and I was one of the highly advanced children in my class. I was not allowed to do anything except sit still at my desk by my 2nd grade teacher. I was not allowed to doodle, read a book, or anything else.

I was sick of being taught how to do simple addition and subtraction by time I was halfway through 2nd grade that I started to refuse to do the same bull over and over again. Maybe a lot of the people in the world only remember things if it’s been pounded into their heads with a metaphorical sledgehammer, but I wanted to move on. The problem is that my refusal to do work was taken by the school board to be reflective of my not being ready to move on because I was being insubordinate, and they even wanted to put me in the behavioral disorder program because I had started causing trouble in class for the teachers.

Interestingly enough, I’ve read studies about the behavioral disorder program at public schools in the USA, and most show a high percentage of male students in the program. This percentage is very disproportionate – I believe the average was said to be between 70-90% of the students in the average BD program were boys. I’ve also read that the average boy is characterized as being more likely to be insubordinate and require justification for doing work than the average female student, and this is interpreted by the educators as something abnormal instead of something that is inherent and normal.

In the end, my parents fought tooth and nail with the school board and kept me out of the BD program. Unfortunately, they could not get the school to shoot me up a grade because I refused to do my homework. (A vicious cycle that perpetuated until I finished high school. I didn’t do redundant homework year after year, but they wouldn’t advance me because I didn’t do my homework. Test scores were inconsequential to them.)

The public school system in Illinois, and quite probably most (if not the rest) of the USA, is the factory mentality. Pink Floyd’s Another Brick in the Wall Part II (from the movie version of The Wall) makes me think a lot about our school system here. Send the kids down the conveyor belts and turn them into hamburger meat. One size does not fit all; it never has, and it never will. The problem with Honors classes and *some* “gifted” programs is that they entailed more work, but not more thought and learning. Work does not necessarily equate learning.

I was lucky that at the same time I was having problems with most of the teachers in my normal classes, the “gifted” program at my grade and junior high schools did provide new material for us. We learned a bit about chemistry already in grade school such as titration and chemical properties of common compounds that we use on a day to day basis. In 7th and 8th grades we were already dissecting frogs, fetal pigs, and sharks and learning about the anatomy in far more detail than the rest of our classmates. The classes that I behaved the best in were the classes that I was most challenged in. I rarely if ever gave my “gifted” program teachers any problems at all.

Since I’m many years out of k-12, and because of stupid laws such as NCLB, I fear that in many places these programs for the advanced students have been cut in order to use more resources on the remedial students. If so, the dumbing down of America continues.  This can and will have detrimental effects on American society.