Privacy news

March 8th, 2012

privacy buttonI just came across two privacy related news articles. The first is a rather worrisome practice perpetrated during job-interviews: requiring the candidate to log in to Facebook and have the interviewers scroll through their list of friends, updates etc. Note that some schools take this one step further for their athletes, by requiring them to “friend” school personnel (the friended person has access to all “friends-only” posts).

Why would anyone agree to that, you ask?

It’s actually the core theme of the project I’m currently employed on: EPRIV — enforced privacy. This is the archetypical case of someone requiring you to violate your privacy — and being in a sufficiently powerful position that most will comply. I mean: you do want that job, right?
Think you stand a chance if you don’t log in to your Facebook, while the rest does? N

Note: your prospective employer will say you do: “5 out of 80 candidates hired, refused this” — see link. But the point is not whether it is mandatory, but whether it is perceived as mandatory. As I wrote: “Think you stand a chance?”.

The aim of my project is exactly to prevent this type of coercion attacks. Admittedly, we focus on other examples, but a logical continuation of this project would be to investigate such matters. Anyway, highly interesting. And scary to see that reality is moving faster than we can come up with solutions.

The second news report proposes a scale to rank privacy incidents on. In my humble opinion: idea good, execution hopelessly flawed — I disagree with most of the (classifications of) examples stated there. I guess that’s actually the reason such a thing didn’t already exist: it’s not easy to determine an objective scale of the “harm” of privacy violations — at least not one that usually “gives the right answer” (that is: violations perceived as worse are usually rated higher). It seems we still have some ways to go before we achieve the objective part of this. Hmmms… interesting :)

PS: In case you’ve never heard the term before: Free Speech Zone.
This is a (usually fenced-off) area, in which people disagreeing are allowed to speak their mind. While there is law-enforcement monitoring them.
Gee, where did I hear this before? (yep: Nobel peace prize winners, one and all). What a staunch continuation of “The Land of the Free”.

Ebook / e-PUB tips

March 6th, 2012

kindle logoI’ve been playing around with the epub format. Basically, an epub file is a zip file… with a few catches. Since it’s good to have a bit of a clue, here’s two catches I stumbled across — the hard way.

Catch 1: mimetypes

You need structure.
The first entry in your .epub file must be the “mimetypes” file. You just need it. Steal it from any other epub file — that’s easy :)
However, the file must be stored in a very precise manner in the zip file. For one, it may not be zipped. Le argh? Annoyance. Anyway, this works to create a fresh file:
zip -0X ../my-new-epub-file.epub mimetype
Where “-0″ ensures “store, not compress” and the “X” strips any

Next, you need a directory structure (META-INF/, OEBPS, cover.jpg, etc.). Again, open any existing .epub file and build your source in that fashion. Not too hard.
Now, to add all your goodies (once you’re done):
zip -Xr9D ../my-new-epub-file .epub *
r for recursive add, 9 for extreme compression.

Catch 2: HTML entities

Most & character codes are not allowed. Le crap.
Simplest solution: get rid of them. You can try using &#### codes, but there’s no real guarantee it works on devices. Alternatively, you just type the character in your favourite editor straight in the source and ignore that feeling in your gut about decent character encoding.

You learn something new every day

March 1st, 2012

The current Dutch government has been installed over a year ago. Today I read a news report about a certain “Spies” suggesting that the Dutch government commences on a “hackday” once or twice a year. The idea would be to invite some wizzkids to try and hack designated government sites, so as to improve the security of those sites. The idea sounds interesting, so who is this “Spies” person anyway? Never heard of him/her, and I do follow (almost obsessively) Dutch news sites.

Turns out to be the minister of the Interior.

You learn something new every day.

Canadian election fraud

February 26th, 2012

voting logoThis is an interesting news post on a socio-technical hack on elections. The simple idea: call voter, claim to be the other party and annoy the hell out of the voter. Would this work? Not for all, probably. But I’m sure it would work in some cases.

It’s funny — part of my work is understanding and improving a small part of security in voting, realising full well there are other concerns beyond this small part. Every once in a while, reality rears its head and shows just what is happening beyond the small part…

Hiking ebook finished!

January 29th, 2012

kindle logoI finished the ebook project! When I started with this, I just got all of the files together and pressed “convert” in Calibre (an ebook manager). That crashed my PRS-T1 though :s.

After the holidays, despite it being too late to be of use now, I still had an itch to scratch. Well, I scratched it :) Took me a while and it got me back into sed-scripting (this page was a wonderful resource). Why sed-scripting? Well, I wanted to basically do “batch”-vi – that is, use the power of search-and-replace with regular expressions over a group of files. Roughly, there are 3 straightforward options: Perl, sed, and awk. Of these, I picked sed — it allows you to just type your regexps just as you would in vi :) Of course, they got a little more complicated after a while:

# row for total distance
/Total distance:<.td>$/ {
	N
	N
	N
	s/\n/ /g
	s#\s*\(Tot.*tance:</td>\) \(.*\)#<tr><td>\1<td>\&nbsp;</td><td>\2</tr>#
}

Not much, just a little. Near the end, several times I figured to be done when the lay-out on the devices themselves would be rather bad. But: no more crashing — definitely an improvement. And then, finally, the last tweaks were made, the last sed-script was run, and it was over! Hooray! To celebrate, I made two versions: one for my Kindle DX version (mobi) and one for my Sony Reader version (epub). (No clue if there’s any specific tweaks Calibre adds based on the device, but you can select specific devices for the “output profile”, and I did.)

If you’re interested in a copy of the book, drop me a line.
And, as a bonus, here’s the cover of the book: a photo of La Palma from the International Space Station.

cover

Tuxguitar working :)

January 28th, 2012

playing guitarFor my birthday (a while ago, I admit it :), Aga thought about getting me Guitar Pro – a piece of software that can help you with guitar playing. Somehow. The trial version on Aga’s laptop looked pretty cool, but I had two hesitations:

  1. Will it run under Ubuntu?
    That’s kind of paramount for me…
  2. Will I actually use it?
    If people are going to spend money on my behalf and I get a say in it, I’d like to make sure they get value for money.

The first point is easily settled with a quick Google… except it isn’t. As in: the company says “yes”, plenty of users complain. Hmms. But, in the course of googling, I stumble upon TuxGuitar, a freeware project doing roughly similar things. (Note that development seems to have ceased 3 years ago…). Installed it, but: no sound. For a tablature editor (or any musical score editor, for that matter) lack of sound is of course the death knell. Tweaked around with the various settings, unplugged and replugged cables, but to no avail. Left it alone for a long while, and then realised I didn’t do the obvious: complain to google. I do, and indeed, the first hit solves my problems! Turns out Ubuntu doesn’t come with midi support by default. Makes sense, probably. Anyway, let’s add some!

In a nutshell: install TiMidity, a piece of software so finished it hasn’t been updated since before 2005 ;-). Then, run TuxGuitar, tweak the settings to use a TiMidity midi port as output, test, et voila! (In case of absence of Voila!, choose a different midi port and repeat).

Now to find out what this TuxGuitar thingy actually does

Current project: compile hiking e-book!

January 26th, 2012

kindle logoAga likes hiking trips. My kindle DX, awesome though it is, is too heavy and bulky for light-weight travel. So, for our recent visit to the Canary islands (perhaps see a blogpost in the near future), I bought a new reader, the Sony PRS-T1. Extremely lightweight, as it happens (not the reason I bought it — it was the only model the store had that I found acceptable :)

But then, in preparing our trip, Aga found an online hiking guide to La Palma. It is fantastic! It has a lot of info you want when tracking… so how to take that?

I figured to try and convert it into an ebook and take it. Tried, but miserably failed. There was some flash going on on the pages, which crashed the ebook. So, we went without. But ever since then, the idea of having the hiking guide there caught me, and now I’m in the grips of it. While most of it is rather straightforward (basically, cleaning up the HTML and removing cruft), it is quite a bit of work. Or at least, it is the way I’m doing it :)

Still, the project is progressing slowly. Moreover, I’m taking the opportunity to add some notes — e.g. to underline the error found in some maps (they list a mountain hut where there is none, not even a place to get water). Fun!

Will keep you up to date.
PS: Since I’m not looking to infringe upon someone’s copy right, I’ll probably not distribute it publicly.

Happy New Year!

January 19th, 2012

A quick look back on 2011: personal highlights.

  • Meeting Aga
  • Visiting Tenerife, Corsica, Darmstadt, Graz, Vienna, South Africa, Canary Islands
  • Teaching crypto :)
  • Kindle and PRS-T1 (oh yeah I love gadgets)

Well, it’s brief, but there’s plenty of stories behind those things. Some of them ended up here. Not all of them though, and I doubt they will (too much backblogging is not good for the back ;-)
Anyway: best wishes for the coming year!

Time in Thunderbird

October 17th, 2011

Thunderbird logoThe time of messages in Thunderbird always used to be annoying (i.e. non-24hrs format). This post explained what that’s due to: Thunderbird takes your default locale and presents time in the view due to that.

Somehow, the default locale it took was not my default locale (LC_ALL=C). So, to fix this minor annoyance, I changed the Thunderbird launcher to env LC_ALL=C thunderbird %u (where %u passes arguments — I just left it there).

Scrollbar shrinking

October 17th, 2011

Ubuntu logoSince I am using a tiny tiny computer, I like tiny tiny scrollbars.
To do this:

  1. sudo apt-get install gnome-color-chooser
  2. launch: System->Preferences->GNOME Color Chooser
  3. Under Tab: Specific, you can change the scroll bar width. Then Click Apply.