Archive for the ‘Privacy and security’ Category

Bitten by Bay Area network sabotage

Thursday, April 9th, 2009

I guess I’m a nerd and I had 9.5hrs of downtime on my server, but still I’m a little surprised there hasn’t been more press about this network sabotage. I guess because big players have geographic redundancy that makes then less vulnerable to single geography attacks like this.

It’s so easy to do this sort of climbing into manholes stuff though. Plenty of us were surprised by the resulting hit, despite believing our upstreams had redundancy. The specific cuts still aren’t entirely clear and the San Jose and San Carlos cuts just might have combined to kill a fair amount of intended redundancy for things solely located in the Bay Area (like my little machine).

I’m also a little miffed that a lot of news sources are calling it vandalism. Look that and sabotage up in the dictionary…there’s a difference. The real interesting part though will be if/when people are caught and their motivation comes out. Maybe it was just some vandal kids messing around. Or maybe not. UnitedLayer’s 200 Paul facility seems to have been hit hard, coincidentally hosts the Conficker Working Group, and this happened just as Conficker was getting more active. I guess there’s the union thing that’s been in the news, but that’s not as fun to speculate about.

And I find it pretty ironic that the network providers hit are generally not supporters of network neutrality. With a tiered internet, if we have to pay extra at their whim to get the packets we want, I wonder if they’ll start securing their manholes a little so they aren’t so at the whim of random other people to be able to transport packets at all.

PVPowered Data Collection Appears Secure-ish

Thursday, January 8th, 2009

My solar panels haven’t quite passed inspection yet (next week?…fingers crossed), but they’re producing and the data collection module for the PVPowered inverter is sending data out to the mvpvpowered.com web site.
I want to be able to push the data to my own site though (along with the weather station data). And in theory PVPowered will let me. The PVM1010 module’s page states:

Communications options: Standard open protocols that work on TCP/IP such as UDP and MODBUS can be supplied for system users on request.

I’ve sent in a request and need to email another because I’m not sure the first request went in correctly.
In the meantime I thought I’d have a look at what the module does. First most obvious step was to point a web browser at the IP my router handed out when I plugged in the module. Nothing. Okay…port scan…nothing! Locked down. So next step was wireshark to watch for packets out of the module. And…after a few minutes I catch the once per fifteen minute squirt of data out to dcgateway.pvpowered.com. Amazingly it’s an SSL encrypted session!
While this doesn’t mean the embedded device is secure, and in theory it shouldn’t much matter if it is just collecting data off the inverter’s serial port and it can’t actually send signals and harm the inverter, it does show that somebody at PV Powered put some proper engineering thought behind this module.
I’m impressed!
Though now I’m really counting on them to hook me up with a way to get at the data from the module.

ATT Travel Tips for Your iPhone

Wednesday, January 7th, 2009

I find it really humorous that as soon as the iPhone 3G is unshackled ATT starts sending out regular emails and SMS’s with tips for travelling internationally with an iPhone. The email says “Tips to minimize international data charges when travelling outside the U.S.” What more tip does one need than to unlock the phone and use a country-local mobile provider?

Verizon may have some intelligence after all

Tuesday, February 5th, 2008

Last I knew Verizon was still a fan of a tiered-internet. On the other hand they’re now saying at least when it comes to blocking copyrighted materials they wont tier things.
Their VP of PR specifically has said, “We generally are reluctant to get into the business of examining content that flows across our networks and taking some action as a result of that content.”
I’m not sure how they can say that and at the same time be for a tiered internet. Unless they envision that as discriminating against traffic by source and destination only and not content? But some of the other quotes in the NYT article make it seem like Verizon may be moving more towards accepting that they’re in the business of selling pipes and the more and fatter pipes customers want because of a thriving internet means more business for them.

Fair use supports the economy

Thursday, September 13th, 2007

Arguably from the Department of You Can Fund A Study To Prove Whatever You Want, but there is now a study claiming that fair use not just adds economic value, but actually adds more to the economy than copyright!
Maybe someday there will be acceptance of the reasoned arguments that holding IP too tightly hurts us, especially in the digital age.

EMI content DRM free on iTunes

Monday, April 2nd, 2007

If the press release were dated a day earlier I’d have been sure it was a joke. But it appears the anti-market EMI corporation may be the first major to start getting with the digital future. It might still be cheaper to just buy the physical media though…depends on whether they do $9.99 albums DRM free too.
And it is a bit odd that they’d have the DRM versions at all. Is $0.30/track enough to discourage somebody who wants to pirate music? No. Are people wanting to save a few cents a track seen as implicitly pirate-prone? Must be. The majors sure relate to their customers in strange ways.

Apple/Jobs on uselessness of DRM

Tuesday, February 6th, 2007

I was surprised to stumble on this today. The actual write-up is a good read…thoughtful and written in a way I’d expect a large portion of Apple’s critics (eg: esp. the techno-illiterate politicians) as well as their customers to be able to fully understand. And Jobs squarely plants the problem in the court of the big labels (for those who didn’t already clearly get the bloc power they hypocritically wield)!
This is exactly the type of message that you’d expect to deflect the European political pressure on Apple around its DRM. And exactly the thing to increase pressure on the majors to catch up with reality. Or the thing to increase political pressure in a more appropriate place (eg: how about these ideas for a start) towards helping the majors get a clue.
Maybe I was on the leading edge in witnessing EMI’s attack on OLGA (over a decade ago already?!), but I think the rest of Apple’s billion downloaders are starting to get the situation and are beginning to see the anti-market, anti-competitive, anti-creative state of copyright this DRM facade masks.
I can’t wait to watch how this plays out! It made the tail end of Marketplace today and I’d expect it prominently in the press tomorrow.

Yahoo groks DRM

Friday, July 21st, 2006

Slashdot’s got two good links on the DRM fromt today.
First, Yahoo’s actually taking a stand against DRM “protected” music! This is a great quote:
“As you know, we’ve been publicly trying to convince record labels that they should be selling MP3s for a while now. Our position is simple: DRM doesn’t add any value for the artist, label (who are selling DRM-free music every day — the Compact Disc), or consumer, the only people it adds value to are the technology companies who are interested in locking consumers to a particular technology platform. We’ve also been saying that DRM has a cost. It’s very expensive for companies like Yahoo! to implement. We’d much rather have our engineers building better personalization, recommendations, playlisting applications, community apps, etc, instead of complex provisioning systems which at the end of the day allow you to burn a CD and take the DRM back off, anyway!”
The second article on /. gives a deeper dive into just that. An analysis of DRM and how it has been circumvented.

More info on the Pirate Party

Thursday, June 22nd, 2006

Wired has an interview with some people from the party. Cool to see them continuing to generate press.

Another smart dude from Texas

Monday, February 20th, 2006

I saw this on BoingBoing following up on their reference the other day to this story. Is Houston Police Chief Harold Hurtt planning to run for president or something? He seems to be working on outpacing President Bush at trouncing civil liberties.
This is one choice quote: “I know a lot of people are concerned about big brother, but my response to that is if you aren’t doing anything wrong why worry about it.”
The best part is there’s now a bounty up for any video of Chief Hurtt breaking a law!
This should be fun to watch unfold…