Archive for March, 2012

Privacy news

Thursday, March 8th, 2012

privacy buttonI just came across two privacy related news articles. The first is a rather worrisome practice perpetrated during job-interviews: requiring the candidate to log in to Facebook and have the interviewers scroll through their list of friends, updates etc. Note that some schools take this one step further for their athletes, by requiring them to “friend” school personnel (the friended person has access to all “friends-only” posts).

Why would anyone agree to that, you ask?

It’s actually the core theme of the project I’m currently employed on: EPRIV — enforced privacy. This is the archetypical case of someone requiring you to violate your privacy — and being in a sufficiently powerful position that most will comply. I mean: you do want that job, right?
Think you stand a chance if you don’t log in to your Facebook, while the rest does? N

Note: your prospective employer will say you do: “5 out of 80 candidates hired, refused this” — see link. But the point is not whether it is mandatory, but whether it is perceived as mandatory. As I wrote: “Think you stand a chance?”.

The aim of my project is exactly to prevent this type of coercion attacks. Admittedly, we focus on other examples, but a logical continuation of this project would be to investigate such matters. Anyway, highly interesting. And scary to see that reality is moving faster than we can come up with solutions.

The second news report proposes a scale to rank privacy incidents on. In my humble opinion: idea good, execution hopelessly flawed — I disagree with most of the (classifications of) examples stated there. I guess that’s actually the reason such a thing didn’t already exist: it’s not easy to determine an objective scale of the “harm” of privacy violations — at least not one that usually “gives the right answer” (that is: violations perceived as worse are usually rated higher). It seems we still have some ways to go before we achieve the objective part of this. Hmmms… interesting :)

PS: In case you’ve never heard the term before: Free Speech Zone.
This is a (usually fenced-off) area, in which people disagreeing are allowed to speak their mind. While there is law-enforcement monitoring them.
Gee, where did I hear this before? (yep: Nobel peace prize winners, one and all). What a staunch continuation of “The Land of the Free”.

Ebook / e-PUB tips

Tuesday, March 6th, 2012

kindle logoI’ve been playing around with the epub format. Basically, an epub file is a zip file… with a few catches. Since it’s good to have a bit of a clue, here’s two catches I stumbled across — the hard way.

Catch 1: mimetypes

You need structure.
The first entry in your .epub file must be the “mimetypes” file. You just need it. Steal it from any other epub file — that’s easy :)
However, the file must be stored in a very precise manner in the zip file. For one, it may not be zipped. Le argh? Annoyance. Anyway, this works to create a fresh file:
zip -0X ../my-new-epub-file.epub mimetype
Where “-0″ ensures “store, not compress” and the “X” strips any

Next, you need a directory structure (META-INF/, OEBPS, cover.jpg, etc.). Again, open any existing .epub file and build your source in that fashion. Not too hard.
Now, to add all your goodies (once you’re done):
zip -Xr9D ../my-new-epub-file .epub *
r for recursive add, 9 for extreme compression.

Catch 2: HTML entities

Most & character codes are not allowed. Le crap.
Simplest solution: get rid of them. You can try using &#### codes, but there’s no real guarantee it works on devices. Alternatively, you just type the character in your favourite editor straight in the source and ignore that feeling in your gut about decent character encoding.

You learn something new every day

Thursday, March 1st, 2012

The current Dutch government has been installed over a year ago. Today I read a news report about a certain “Spies” suggesting that the Dutch government commences on a “hackday” once or twice a year. The idea would be to invite some wizzkids to try and hack designated government sites, so as to improve the security of those sites. The idea sounds interesting, so who is this “Spies” person anyway? Never heard of him/her, and I do follow (almost obsessively) Dutch news sites.

Turns out to be the minister of the Interior.

You learn something new every day.