"To absent friends, lost loves, old gods, and the season of mists; and may each and every one of us always give the Devil his due."
Monday, August 30, 2004
Wednesday, August 25, 2004
Ah Blogger-toplevel-random-blog-bar, how I love thee!
You have given me a whole new way of wasting precious minutes of my tiny life, reading about other people's tiny lives.
Seriously though, I plan to experiment a bit and see what percent of blogs are political propaganda, what percent are contain the words "ponderings", "musings", "thoughts", "ramblings", "pondermusings" etc. in the description, what percent are Spanish, what percentage suck, what percentage rock, what percentage have so messed up a template that the blog-bar does not show up, what percentage are dead, what percentage are spam blogs and so on until I'm bored and decide to do something else.
Like watch Conan O'Brien on my new TV!
Ah brand-new-24-inch-flat-screen-Toshiba-TV, how I love thee!
You have given me a whole new way of wasting precious minutes of my tiny life, watching other people's tiny lives.
Seriously though, I plan to experiment a bit and see ... Oh. Wait.
You have given me a whole new way of wasting precious minutes of my tiny life, reading about other people's tiny lives.
Seriously though, I plan to experiment a bit and see what percent of blogs are political propaganda, what percent are contain the words "ponderings", "musings", "thoughts", "ramblings", "pondermusings" etc. in the description, what percent are Spanish, what percentage suck, what percentage rock, what percentage have so messed up a template that the blog-bar does not show up, what percentage are dead, what percentage are spam blogs and so on until I'm bored and decide to do something else.
Like watch Conan O'Brien on my new TV!
Ah brand-new-24-inch-flat-screen-Toshiba-TV, how I love thee!
You have given me a whole new way of wasting precious minutes of my tiny life, watching other people's tiny lives.
Seriously though, I plan to experiment a bit and see ... Oh. Wait.
Friday, August 13, 2004
A warm summer is all you look forward to here in nowhere-land. And then we have this, record low temperatures for summer.
Can somebody up there please send us a few scorchers?
"I think it's terrible," said Tropics server Nadia Sarkarat, 19, of Waukesha. "This is August. People should be going to the Wisconsin Dells, not walking around in winter coats."
Sarkarat was bundled up in four layers, including a long-sleeved T-shirt and hooded sweat shirt, but she still wished she had brought gloves to fend off the biting winds.
Can somebody up there please send us a few scorchers?
Friday, August 06, 2004
Slick web-app department
Microsoft strikes again with MSN Web Messenger Beta. A full-fledged (almost) version of MSN Messenger using only a browser. No Java and no ActiveX! Yes, you read that right no Java and no ActiveX! It works using Firefox so it's obvious they are using standard W3C technologies. Highly recommended.
Microsoft strikes again with MSN Web Messenger Beta. A full-fledged (almost) version of MSN Messenger using only a browser. No Java and no ActiveX! Yes, you read that right no Java and no ActiveX! It works using Firefox so it's obvious they are using standard W3C technologies. Highly recommended.
Wednesday, August 04, 2004
<gasps for breath and claws his way towards the land of books>
Finally got new things to read, and began by reading Alias: Book 1 by Brian Michael Bendis and Michael Gaydos. This is immediately added to my list of must read books. Jessica Jones is an ex-super heroine who has given up super stuff to become a private investigator. Best quote (at least, best quote from what I have read so far):
And while on the topic, I must mention Jeff Smith's Bone. Bone immediately pushed Sandman (by Neil Gaiman and various artists) down to number 2 in my list. (Sorry Neil.) The best way to describe Bone would be Calvin and Hobbes meets The Lord of The Rings but that doesn't really do it enough justice. So, I'll just stick to the word 'magical' and leave the rest to your imagination.
I almost finished reading Bone two weeks ago. 'Almost', because I still haven't read the last graphic novel in the series. However, I hadn't noticed the humongous 1300 page, One Volume Edition on Amazon before. Guess where I'm going to be spending my next paycheck!
Among other things I have with me but haven't read are Cerebus: Volume 1 by Dave Sim and Snow Crash by Neal Stephenson. Reviews will follow soon.
Finally got new things to read, and began by reading Alias: Book 1 by Brian Michael Bendis and Michael Gaydos. This is immediately added to my list of must read books. Jessica Jones is an ex-super heroine who has given up super stuff to become a private investigator. Best quote (at least, best quote from what I have read so far):
Lucas will feel guilty about this. He's a decent guy and a buddy and he'll feel bad about this. But that feeling will pass. Because he'll also look back and remember this was the one night that I let him do anything he wanted. And even though he'll know it's wrong he'll smile to himself. He just won't be able to help it.
Then he'll feel bad again. But I can't say that I care, really. I don't care what he feels like. I just want to feel something. It doesn't matter what. Pain. Humility. Anger.
I just want to feel something different.
And while on the topic, I must mention Jeff Smith's Bone. Bone immediately pushed Sandman (by Neil Gaiman and various artists) down to number 2 in my list. (Sorry Neil.) The best way to describe Bone would be Calvin and Hobbes meets The Lord of The Rings but that doesn't really do it enough justice. So, I'll just stick to the word 'magical' and leave the rest to your imagination.
I almost finished reading Bone two weeks ago. 'Almost', because I still haven't read the last graphic novel in the series. However, I hadn't noticed the humongous 1300 page, One Volume Edition on Amazon before. Guess where I'm going to be spending my next paycheck!
Among other things I have with me but haven't read are Cerebus: Volume 1 by Dave Sim and Snow Crash by Neal Stephenson. Reviews will follow soon.
Saturday, July 31, 2004
Secunia announced a fairly serious UI spoofing vulnerability in Mozilla Firefox and Mozilla. Essentially an attacker could popup a window with a disabled status bar, menu bar and tool bar and draw his own versions using XUL (XUL is the XML based UI design language that powers Mozilla). Here is a proof of concept, and you have to admit it's pretty scary. Try clicking on the padlock icon in the bottom left corner to see just how scary this is.
Someone on Slashdot posted a quick and dirty fix which is extremely useful. This fix basically ensures that the Menu bar, Status bar and Tool bar are always visible, even on popups. (Frankly, I believe this is good design. I don't see why site designers should be allowed to hide these things. To often some moron site designer decides that I shouldn't be able to close a window, resize a window, or view the status bar. As I user, I should at least have an option to always keep these on if I want to.) Here is the fix:
After doing this, any attempt to spoof the browser interface will be obvious, and you'll see multiple menubars, multiple statusbars and multiple toolbars.
No fix is available from the Mozilla Foundation yet. However, here is the real bad news. This has been a known bug for 5 years! Yes, that's right 5 years! It was marked as confidential, meaning that the developers knew how bad it was but chose to hide it from everyone anyway. This is the antithesis of Open Source. The reason Open Source software is supposed to be more secure is that all bugs are disclosed to the public. Making a bug confidential is exactly the approach taken by closed source companies. Security through obscurity doesn't work. Right now, there is a scramble to fix it but that's after it was disclosed to the public by an external bughunter. This whole situation has been, at least in my eyes, the first serious blemish on the Mozilla Foundation. Another couple of goof ups like this and I will seriously consider switching back to Internet Explorer after Windows XP Service Pack 2. (And the version of IE shipping in XPSP2 does ensure that the status bar is always visible). And if that's not secure enough, there's always Opera.
And lest any Internet Explorer users reading this are feel the need to gloat or be smug, need I remind you that Internet Explorer has been vulnerable to this for a long time. Here is a simple spoof page, a lot more can obviously be done using DHTML and Javascript. And more common examples are those particular popup ads which pretend to be Windows popups and present "Ok" / "Cancel" buttons.
Update (August 1, 2004): According to this post on MozillaZine, this vulnerability has been fixed in the "nightlies" and a patch or a new release should hopefully be out soon containing the fix. Quoting tojofb's post on MozillaZine:
Someone on Slashdot posted a quick and dirty fix which is extremely useful. This fix basically ensures that the Menu bar, Status bar and Tool bar are always visible, even on popups. (Frankly, I believe this is good design. I don't see why site designers should be allowed to hide these things. To often some moron site designer decides that I shouldn't be able to close a window, resize a window, or view the status bar. As I user, I should at least have an option to always keep these on if I want to.) Here is the fix:
- Start Firefox and enter
about:configin the URL bar - This should open a special page, the Firefox equivalent of a registry
- In the filter bar on top, type dom.disable and hit enter to filter down to the entries we are interested in modifying
- For the following entries, double click on them one at a time, and change false to true in the ensuing popup:
- The last three entries might already be true if you've visited Tools | Options ... | Web Features | Javascript | Advanced ... and unchecked all but the last check box. (According to me it's a good idea if you do.)
dom.disable_window_open_feature.close
dom.disable_window_open_feature.directories
dom.disable_window_open_feature.location
dom.disable_window_open_feature.menubar
dom.disable_window_open_feature.minimizable
dom.disable_window_open_feature.personalbar
dom.disable_window_open_feature.resizable
dom.disable_window_open_feature.scrollbars
dom.disable_window_open_feature.titlebar
dom.disable_window_open_feature.toolbar
dom.disable_window_flip
dom.disable_window_move_resize
dom.disable_window_status_change
After doing this, any attempt to spoof the browser interface will be obvious, and you'll see multiple menubars, multiple statusbars and multiple toolbars.
No fix is available from the Mozilla Foundation yet. However, here is the real bad news. This has been a known bug for 5 years! Yes, that's right 5 years! It was marked as confidential, meaning that the developers knew how bad it was but chose to hide it from everyone anyway. This is the antithesis of Open Source. The reason Open Source software is supposed to be more secure is that all bugs are disclosed to the public. Making a bug confidential is exactly the approach taken by closed source companies. Security through obscurity doesn't work. Right now, there is a scramble to fix it but that's after it was disclosed to the public by an external bughunter. This whole situation has been, at least in my eyes, the first serious blemish on the Mozilla Foundation. Another couple of goof ups like this and I will seriously consider switching back to Internet Explorer after Windows XP Service Pack 2. (And the version of IE shipping in XPSP2 does ensure that the status bar is always visible). And if that's not secure enough, there's always Opera.
And lest any Internet Explorer users reading this are feel the need to gloat or be smug, need I remind you that Internet Explorer has been vulnerable to this for a long time. Here is a simple spoof page, a lot more can obviously be done using DHTML and Javascript. And more common examples are those particular popup ads which pretend to be Windows popups and present "Ok" / "Cancel" buttons.
Update (August 1, 2004): According to this post on MozillaZine, this vulnerability has been fixed in the "nightlies" and a patch or a new release should hopefully be out soon containing the fix. Quoting tojofb's post on MozillaZine:
Using 7/19 nightly the spoof didn't work. I received a warning and also the address bar at the top displayed in yellow background.
Thursday, July 29, 2004
So why is it that my generation and my time seems such a let down? Am I just romanticizing achievements of the past too much or is something really wrong with us? Why have the Nineties and Two Thousand And Somethings brought with them such short attention spans that we never follow up on what outraged or excited us a few hours ago? Some say that the reason that this is happening is that our brains simply have too much information to process and not enough time. Is that the reason or are we as a generation getting dumber? Yes, we do process more information than our fathers and mothers used too, but they too processed much more that their parents used too. After all, it was in the Sixties that television and FM radio really took off. Of course we have the Internet and cable TV, and maybe that's what is rotting our brains, or rather flooding them with too much crap. Saturation is the word in charge.
The scary thought that follows from all this how easy it is for us to be manipulated by the owners of the media infrastructure. Our minds face DDOS attacks every time we turn on the television, radio or computer (DDOS attack: (n), Distributed Denial Of Service attack, a way of disrupting the normal operation of a computer system connected to a network by making multiple requests for processed information from multiple locations.) Democracy was always a good deal for the rabble-rousers and now the rabble waits on a sofa with cola and chips.
Everybody agrees that democracy is a better system than fascist dictatorships (Everybody other than fascist dictators of course!), but is it really the best system? It was invented by the Greeks a really long time ago. Why hasn't anyone invented something better than that? Something that will protect the intellectual and the common man from themselves and each other. Something that will perhaps tackle the root of the problems with all systems of politics - man's tendency to not think? Perhaps it's because our rulers need their subjects who tend not to think. After all if they started to think, the rulers could very quickly lose their jobs.
All the news that I have read seems to point to the fact that the IQ of the human race has risen over the years. But perhaps we also need to factor in the fact that the set of problems and potential killer booboos we have to face, has also risen (killer booboo: (n), event which could lead to the mass extinction of the human race, or at least kill an awful bloody lot of us.) So, is there any hope for my generation at all, or are we simply going to be content with rants on blogs with 5 page hits a day and the next channel on the TV? We are a generation of cowardly cynics and are being ruled by a generation of idiotic control freaks. Pointy haired bosses are funny in Dilbert's cubicle but fairly chilling if they are going to run your life the way they seem fit. Forever. What we really need is a way to prevent our rulers from handing over our reins to the next generation of morons (And believe me the next generation is dumber and more controlling), and a way to get hold of them ourselves. I think we're going to be too busy to bother.
The scary thought that follows from all this how easy it is for us to be manipulated by the owners of the media infrastructure. Our minds face DDOS attacks every time we turn on the television, radio or computer (DDOS attack: (n), Distributed Denial Of Service attack, a way of disrupting the normal operation of a computer system connected to a network by making multiple requests for processed information from multiple locations.) Democracy was always a good deal for the rabble-rousers and now the rabble waits on a sofa with cola and chips.
Everybody agrees that democracy is a better system than fascist dictatorships (Everybody other than fascist dictators of course!), but is it really the best system? It was invented by the Greeks a really long time ago. Why hasn't anyone invented something better than that? Something that will protect the intellectual and the common man from themselves and each other. Something that will perhaps tackle the root of the problems with all systems of politics - man's tendency to not think? Perhaps it's because our rulers need their subjects who tend not to think. After all if they started to think, the rulers could very quickly lose their jobs.
All the news that I have read seems to point to the fact that the IQ of the human race has risen over the years. But perhaps we also need to factor in the fact that the set of problems and potential killer booboos we have to face, has also risen (killer booboo: (n), event which could lead to the mass extinction of the human race, or at least kill an awful bloody lot of us.) So, is there any hope for my generation at all, or are we simply going to be content with rants on blogs with 5 page hits a day and the next channel on the TV? We are a generation of cowardly cynics and are being ruled by a generation of idiotic control freaks. Pointy haired bosses are funny in Dilbert's cubicle but fairly chilling if they are going to run your life the way they seem fit. Forever. What we really need is a way to prevent our rulers from handing over our reins to the next generation of morons (And believe me the next generation is dumber and more controlling), and a way to get hold of them ourselves. I think we're going to be too busy to bother.
Wednesday, July 28, 2004
Just this morning, the hit count for this blog was 999, now it's 1001! Thank you whoever you were mysterious 1000th visitor. (Look in the bottom right corner if you have no clue.)
(And yes, post count also went to 50 posts with that previous post about spell checkers. This is cause for celebration, I am going to party tonight and would advise all readers of this blog to do the same. Elvis has left the building.)
(And yes, post count also went to 50 posts with that previous post about spell checkers. This is cause for celebration, I am going to party tonight and would advise all readers of this blog to do the same. Elvis has left the building.)
Tuesday, July 27, 2004
I just discovered a very very useful extension for Firefox, Spellbound, a spelling checker for anything you type into a web form.
What's shameful is that this is not listed on any of the usual Firefox extension sites, neither Texturizer, Extension Room nor Firefox Update list it. And it's so useful it should probably be a part of the basic browser. One more example of open source's tendency of smashing it's own toes with glee!
(Now you have no excuses for bad spelling)
What's shameful is that this is not listed on any of the usual Firefox extension sites, neither Texturizer, Extension Room nor Firefox Update list it. And it's so useful it should probably be a part of the basic browser. One more example of open source's tendency of smashing it's own toes with glee!
(Now you have no excuses for bad spelling)
Thursday, July 22, 2004
Tuesday, July 13, 2004
Just a little addendum to the previous post.
Maybe I should change that sidebar of mine to read, "Save Yourself From A Horrible Fiery Death"...
Any comments and flames are welcome.
- "shell:" exploits have been found in MSN Messenger and Microsoft Word. Unlike the Mozilla foundation which patched the same vulnerability in the Mozilla Firefox Browser in 24 hours, no word has yet been received from Microsoft about when these will be patched.
- Furthermore 4 new and extremely critical vulnerabilities have been found in Microsoft Internet Explorer. Quoting from the advisory "Issues 1-4 has been confirmed on a fully patched system with Internet Explorer 6 and Microsoft Windows XP SP1." My suggestion (and the one given in the advisory) to anyone using IE is either use a different browser, or at the very least disable Active Scripting in IE.
Maybe I should change that sidebar of mine to read, "Save Yourself From A Horrible Fiery Death"...
Any comments and flames are welcome.
Saturday, July 10, 2004
This is the longest I time I have spent without writing, and for some reason it's not really bothering me as much as it should. I think this is happening because I am busy enough with work and algorithms and commuting. It's strange but I believe my creativity is simply finding more outlets at work.
I can write about mundane things I suppose such as Spiderman 2 and Fahrenheit 9/11, but I don't really think that will be in the spirit of this blog. So instead I'll just talk about how more and more people I know seem to be shifting to Firefox from IE. It was inevitable I guess. Microsoft last released the last version of IE in 2001 and there haven't been any features added since. Add to that the fact that malcontents on the Internet seem to be eager to find vulnerabilities in IE and exploit them.
I switched browsers when the URL phishing vulnerability for IE was announced. Microsoft took a whole month to fix that. Until they did the recommended workaround in the Microsoft Knowledge Base was to type out the URL for each link that you were planning to click! (If you don't believe me read the third bulleted point in the Knowledge Base Article.) The phishing vulnerability allowed malicious users to fool you into believing you were browsing on a trusted site (like Microsoft.com) when in fact you were getting pages from a malicious site (like some criminal server in Russia intent on getting you to enter you credit information.) Microsoft took a week to fix the Download.Ject vulnerability and even then they did not fix it properly. Download.Ject exploited a IE vulnerability and allowed people get infected by trojan software by simply visiting a malicious website. The Download.Ject trojan software would then find and send sensitive information (bank account numbers, credit card numbers) to the malicious website owners. The Mozilla shell vulnerability, which would allow for the execution of arbitrary EXE files on you computer if you followed a "shell:" link, was patched within 24 hours of it's announcement.
I don't really care if software is open source or not as long as the price is right - Internet Explorer and Mozilla Firefox are both free. I do care that the software I use is secure enough to protect my privacy and my money. Internet Explorer and Microsoft have failed in that respect. I'll go back to them when Firefox and the Mozilla Foundation fail. I don't use a cheap, easily breakable lock on my door, why should I use a cheap, easily breakable browser.
I can write about mundane things I suppose such as Spiderman 2 and Fahrenheit 9/11, but I don't really think that will be in the spirit of this blog. So instead I'll just talk about how more and more people I know seem to be shifting to Firefox from IE. It was inevitable I guess. Microsoft last released the last version of IE in 2001 and there haven't been any features added since. Add to that the fact that malcontents on the Internet seem to be eager to find vulnerabilities in IE and exploit them.
I switched browsers when the URL phishing vulnerability for IE was announced. Microsoft took a whole month to fix that. Until they did the recommended workaround in the Microsoft Knowledge Base was to type out the URL for each link that you were planning to click! (If you don't believe me read the third bulleted point in the Knowledge Base Article.) The phishing vulnerability allowed malicious users to fool you into believing you were browsing on a trusted site (like Microsoft.com) when in fact you were getting pages from a malicious site (like some criminal server in Russia intent on getting you to enter you credit information.) Microsoft took a week to fix the Download.Ject vulnerability and even then they did not fix it properly. Download.Ject exploited a IE vulnerability and allowed people get infected by trojan software by simply visiting a malicious website. The Download.Ject trojan software would then find and send sensitive information (bank account numbers, credit card numbers) to the malicious website owners. The Mozilla shell vulnerability, which would allow for the execution of arbitrary EXE files on you computer if you followed a "shell:" link, was patched within 24 hours of it's announcement.
I don't really care if software is open source or not as long as the price is right - Internet Explorer and Mozilla Firefox are both free. I do care that the software I use is secure enough to protect my privacy and my money. Internet Explorer and Microsoft have failed in that respect. I'll go back to them when Firefox and the Mozilla Foundation fail. I don't use a cheap, easily breakable lock on my door, why should I use a cheap, easily breakable browser.
Wednesday, July 07, 2004
Saturday, June 19, 2004
Two things.
First, I have had a relapse and early-wake-up-itis has caught be in a fever grip again. I wake after four hours of sleep on a Saturday, and I'm bright and cheerful, eager to blog. Somebody send a cure.
Second, I like noisy houses. I really do and moving to a noisy neighbourhood after three years of quiet places in Madison brings back all those noisy Mumbai memories. Now if only all states to the east of Wisconsin would sink under the Atlantic, then I could get my beloved ocean with its beaches and sunsets back too.
In other news, something perplexing. I don't understand this mad rush in geekdom to get Gmail accounts? I have one and don't even use it. No point unless Google decides to give an IMAP or POP interface.
In more new, something even more perplexing. I'm talking about the Open Source communities ability to gleefully hammer it's own toes. I am talking about the recent UI "updates" being applied to a plethora of Open Source products.
I've just spent the better part of my Saturday morning ranting about geek-related issues which nobody cares about. I need a life.
First, I have had a relapse and early-wake-up-itis has caught be in a fever grip again. I wake after four hours of sleep on a Saturday, and I'm bright and cheerful, eager to blog. Somebody send a cure.
Second, I like noisy houses. I really do and moving to a noisy neighbourhood after three years of quiet places in Madison brings back all those noisy Mumbai memories. Now if only all states to the east of Wisconsin would sink under the Atlantic, then I could get my beloved ocean with its beaches and sunsets back too.
In other news, something perplexing. I don't understand this mad rush in geekdom to get Gmail accounts? I have one and don't even use it. No point unless Google decides to give an IMAP or POP interface.
In more new, something even more perplexing. I'm talking about the Open Source communities ability to gleefully hammer it's own toes. I am talking about the recent UI "updates" being applied to a plethora of Open Source products.
- Firefox 0.9 changed the default skin to something much less prettier then the old default. The lead developer claimed that the skin author was uncommunicative when asked about skin licensing. Funny how the same author's skin is still being used on Firefox's sister product Thunderbird 0.7. Good leadership involves making tough negotiations to get a better product (and not throwing your hands up in the air helplessly and looking for an inferior alternative).
- Wikipedia.org, the excellent web-based collaborative encyclopedia recently updated their look too. While the new version of the site looks much more modern, the developers decided to use a sans serif font for main body text. Couple this with wikipedia's tendency to put large amounts of word's per line (something like 20 at my default resolution) and readers are faced with a serious readability problem. Might I suggest changing the stylesheet to bring wordcount per line to something like 10-13 words per line. And giving readers an easy option to change article font to a serif one. And when I say easy option I mean something which does not involve any form of logging on.
- And I am not even going to comment about the Gnome project's ridiculous blunder of forcing spatial filemanager browsing down their users' throats. Way to go Open Source leadership.
I've just spent the better part of my Saturday morning ranting about geek-related issues which nobody cares about. I need a life.
Thursday, June 17, 2004
Packed. Moved. Unpacked. Have to do this again in two months. Luckily my new place is within two blocks of Madison's greatest ice-cream shops.
Hmmmm...White chocolate ice-cream with almonds, walnuts and KitKat...(drool...)
(Tomorrow it's going to be boysenberry and cream gelato. Eat your heart out world!)
Hmmmm...White chocolate ice-cream with almonds, walnuts and KitKat...(drool...)
(Tomorrow it's going to be boysenberry and cream gelato. Eat your heart out world!)
Friday, June 11, 2004
Sunday, May 23, 2004
Ever had a chill run down your spine, as you suddenly realize that the world seems to be overrun with morons, and how most of them seem happier, healthier and sturdier than you. It's like their stupidity immunizes them from the tragedies of life. They run through the courses of their vacant lives, resisting change, being tricked by the next con man out for money or power, breeding, and killing other morons. And you're caught somewhere in the crossfire, all your intelligence nullified by a fool with a gun.
Wednesday, May 19, 2004
Subscribe to:
Posts (Atom)