Just because:
Feature: Lifehacker’s 2007 Guide to Free Software and Webapps
Found a link to this on Lifehacker. I’ve certainly been guilty about some or all of these errors, usually in multiples:
A Roadmap to Spectacular GTD Failure · The Cranking Widgets Blog
Microsoft 2007 has a Word template for blog posting, so I’m giving it a try.
Elcomsoft turns your PC into a password cracking supercomputer (gulp) – Engadget
An NTLM-hashed Microsoft Vista password, for example, can now be cracked in 3 to 5 days
I have to wonder if there are the equivalents of chopshops for stolen laptops? The idea is that a laptop thief just takes their newly acquired laptop to the shop, sells it for the price of hot hardware, and then moves on. The chopshop then has the laptop to hack and crack. They can make money two ways – confidential and identity data sales, and hardware resale on the “Don’t ask why you’re getting such a good price market” with a ‘refurbished’ laptop.
According to the opinions on one tech podcast (TWIT 117) Google bought Jaiku, instead of Twitter, was that one of the founders of Jaiku is a real ‘thought leader’. If they were referring to Petteri Koponen, his quote below may indicate that they may have got less (or more, depending on your point of view) than they bargained for.
Google’s Purchase of Jaiku Raises New Privacy Issues – New York Times
41 Reasons Why Your Blog Probably Sucks | Performancing.com
I’m putting this one in here, just to remind myself to check back in a while.
Wondering if I should wait for the 10.5.1 or jump right in with 10.5.0?
Mac Rumors: Apple Posts Mac OS 10.5 Leopard Guided Tour
It’s worth a look.
Jeff Jonas wrote this post as a plausible journey from six minutes to midnight to total surveillance society, after seeing the ACLU Surveillance Clock (below):
Microsoft Updates Windows Without User Permission, Apologizes — Windows — InformationWeek
“Over the last few weeks, without user approval, Windows Update has updated nine small executable files in both Windows XP and Windows Vista.”
This is a great example of how a company full of really smart people, can collectively do something not so bright. While the Microsoft Update Product Team Blog explains the logic, it remains problematic. There might be both technical and security reasons1 for not sharing the fact that you need to do an update with your users, but neither override the need to be clear and transparent with your customers to build trust. Now we know that Redmond not only has the ability to run code on our systems with our permissions, even if we have specifically selected the option NOT to run update, but they are willing to use it. This is bad.
Peter Venkman: I’m fuzzy on the whole good/bad thing. What do you mean, “bad”?
Egon Spengler: Try to imagine all life as you know it stopping instantaneously and every molecule in your body exploding at the speed of light.
Ray Stantz: Total protonic reversal.
Peter Venkman: Right. That’s bad. Okay. All right. Important safety tip. Thanks, Egon.2
OK, maybe not that bad, but still. What worries me is that this might have been a calculated move based on the perception that most Windoze users are apathetic/cynical/resigned and will just accept this as situation normal, all ****** up (SNAFU). I hope not.
According to attrition.org TD Ameritrade has acknowledged that one of it’s databases has been hacked, and contact information for more than 6.3 customers has been absconded with. On their home page this is referred to in reference to “SPAM investigations”. Ameritrade has known about the problem at least since late May, when they were sued by a couple of customers regarding e-mails that the customers were getting. Let us hope for everyone’s sake that this is only a SPAM related breach, and that the data doesn’t get used more harmfully.
No security system can be perfect, so a critical part of any well thought our security strategy has to be, “What’s the communication plan in the event of a breach?” I’d like to see the communications plan that this one came from! If you are a non-security executive and someone from IT (doesn’t matter if they are in your company or a hired gun) comes up to you and says, “We got it all covered, you don’t need an emergency communications plan” you should consider releasing them to be successfully somewhere else, preferably with your competition. They are either willfully lying or willfully ignorant.
I await further developments to see the consequences, or lack thereof, from this bit of news.