Archive for the ‘Tech’ Category

Feature: Lifehacker’s 2007 Guide to Free Software and Webapps

Monday, December 17th, 2007

Just because:

Feature: Lifehacker’s 2007 Guide to Free Software and Webapps

A Roadmap to Spectacular GTD Failure · The Cranking Widgets Blog

Sunday, November 18th, 2007

Found a link to this on Lifehacker. I’ve certainly been guilty about some or all of these errors, usually in multiples:

A Roadmap to Spectacular GTD Failure · The Cranking Widgets Blog

Testing Word 2007

Sunday, November 18th, 2007

Microsoft 2007 has a Word template for blog posting, so I’m giving it a try.

Elcomsoft turns your PC into a password cracking supercomputer (gulp) – Engadget

Friday, October 26th, 2007

Elcomsoft turns your PC into a password cracking supercomputer (gulp) – Engadget
An NTLM-hashed Microsoft Vista password, for example, can now be cracked in 3 to 5 days

I have to wonder if there are the equivalents of chopshops for stolen laptops? The idea is that a laptop thief just takes their newly acquired laptop to the shop, sells it for the price of hot hardware, and then moves on. The chopshop then has the laptop to hack and crack. They can make money two ways – confidential and identity data sales, and hardware resale on the “Don’t ask why you’re getting such a good price market” with a ‘refurbished’ laptop.

“To date, many people still maintain their illusion of privacy,”

Sunday, October 21st, 2007

According to the opinions on one tech podcast (TWIT 117) Google bought Jaiku, instead of Twitter, was that one of the founders of Jaiku is a real ‘thought leader’. If they were referring to Petteri Koponen, his quote below may indicate that they may have got less (or more, depending on your point of view) than they bargained for.

Google’s Purchase of Jaiku Raises New Privacy Issues – New York Times

41 Reasons Why Your Blog Probably Sucks | Performancing.com

Sunday, October 21st, 2007

41 Reasons Why Your Blog Probably Sucks | Performancing.com

I’m putting this one in here, just to remind myself to check back in a while.

Mac Rumors: Apple Posts Mac OS 10.5 Leopard Guided Tour

Saturday, October 20th, 2007

Wondering if I should wait for the 10.5.1 or jump right in with 10.5.0?

Mac Rumors: Apple Posts Mac OS 10.5 Leopard Guided Tour

It’s worth a look.

Tick Tock . . . . . .

Saturday, October 20th, 2007

Jeff Jonas wrote this post as a plausible journey from six minutes to midnight to total surveillance society, after seeing the ACLU Surveillance Clock (below):



Microsoft Updates Windows Without User Permission, Apologizes — Windows — InformationWeek

Monday, September 17th, 2007

Microsoft Updates Windows Without User Permission, Apologizes — Windows — InformationWeek
“Over the last few weeks, without user approval, Windows Update has updated nine small executable files in both Windows XP and Windows Vista.”

This is a great example of how a company full of really smart people, can collectively do something not so bright. While the Microsoft Update Product Team Blog explains the logic, it remains problematic. There might be both technical and security reasons1 for not sharing the fact that you need to do an update with your users, but neither override the need to be clear and transparent with your customers to build trust. Now we know that Redmond not only has the ability to run code on our systems with our permissions, even if we have specifically selected the option NOT to run update, but they are willing to use it. This is bad.

Peter Venkman: I’m fuzzy on the whole good/bad thing. What do you mean, “bad”?

Egon Spengler: Try to imagine all life as you know it stopping instantaneously and every molecule in your body exploding at the speed of light.

Ray Stantz: Total protonic reversal.

Peter Venkman: Right. That’s bad. Okay. All right. Important safety tip. Thanks, Egon.2

OK, maybe not that bad, but still. What worries me is that this might have been a calculated move based on the perception that most Windoze users are apathetic/cynical/resigned and will just accept this as situation normal, all ****** up (SNAFU). I hope not.


1My free verse hypothesis of possible Redmond reasoning:

  • Technical: “We are making a change of the Windows Update Servers. If our users don’t install the update by such and such a date, update with stop working for them. Since Windows Update is a valuable service, we need to make sure that these upgrades are installed before we upgrade the servers”
  • Response: “Fair enough. Don’t do it in stealth mode. Announce the push update and the logic behind it in advance. You will take a hit for the revelation that you can do this, but it will be outweighed by your openness.
  • Security: “We’ve discovered a bug in our code. Rather than exposing it for exploitation, we are going to push out the fix without consultation, because that is the lowest risk strategy.”
  • Response: “This is a better justification, but if that’s the case, then a communication to the user base shortly after the patch was pushed would have been a good proactive way to mitigate posssible backlash. What we did get was a partial apology on a developer blog”

2Ghostbuster, 1984

TD Ameritrade & 6.3 million records

Sunday, September 16th, 2007

According to attrition.org TD Ameritrade has acknowledged that one of it’s databases has been hacked, and contact information for more than 6.3 customers has been absconded with. On their home page this is referred to in reference to “SPAM investigations”. Ameritrade has known about the problem at least since late May, when they were sued by a couple of customers regarding e-mails that the customers were getting. Let us hope for everyone’s sake that this is only a SPAM related breach, and that the data doesn’t get used more harmfully.

No security system can be perfect, so a critical part of any well thought our security strategy has to be, “What’s the communication plan in the event of a breach?” I’d like to see the communications plan that this one came from! If you are a non-security executive and someone from IT (doesn’t matter if they are in your company or a hired gun) comes up to you and says, “We got it all covered, you don’t need an emergency communications plan” you should consider releasing them to be successfully somewhere else, preferably with your competition. They are either willfully lying or willfully ignorant.

I await further developments to see the consequences, or lack thereof, from this bit of news.