Slashdot Mirror

Oracle Goddess writes "In a story just dripping with irony, Amazon Kindle owners awoke this morning to discover that 1984 and Animal Farm had mysteriously disappeared from their e-book readers. These were books that they had bought and paid for, and thought they owned. Apparently the publisher changed its mind about offering an electronic edition, and apparently Amazon, whose business lives and dies by publisher happiness, caved. It electronically deleted all books by George Orwell from people's Kindles and credited their accounts for the price. Amazon customer service may or may not have responded to queries by stating, 'We've always been at war with Eastasia.'"

lee writes "After almost three years online, the admin of Free Rainbow Tables has decided to call it a day, citing a lack of time to keep it running. (I'm sure that you all know a rainbow table is essentially a giant list of precomputed hashes.) This is a shame, as the site is a useful resource for those occasions when you really need an existing password exposed, rather than simply changing it. I'm a Windows admin, and this site has come in very handy in the past. The currently computed tables weigh in at well over half a terabyte, are available as torrents from the site, or from a couple of mirrors (and alternatives are available). When the site was active, it featured a downloadable BOINC client to put your idle cycles to work computing ever-greater tables, and a space-saving format for storing the tables. The admin is willing to hand over source code if you wish to take over, though I suspect hosting is not included!"

A Cognitive Neuroscientist writes "A new study, led by Harvard Psychologist Joshua Greene and forthcoming in the Proceedings of the National Academy of Sciences, may represent progress on the front of using brain imaging techniques, such as functional magnetic resonance imaging, to detect lies. According to Harvard's press release, Greene's is 'the first study to examine brain activity of people telling actual lies,' as opposed to prior studies in which subjects were merely instructed to lie. The results suggest that one key step in distinguishing honest from dishonest individuals may involve focusing on a small set of brain regions that are responsible for executive control and attention. However, given that the actual paper is yet to be published, it's unclear whether the study is prone to some of the methodological and interpretive complications that have recently plagued similar brain imaging studies."

Raul654 writes "Last week, it was reported that the UK's National Portrait Gallery had threatened a lawsuit against an American Wikipedian for uploading pictures from the NPG's website to Wikipedia. The uploaded pictures are clearly in the public domain in the United States. (In the US, copies of public domain works are also in the public domain. UK law on the matter is unclear.) Since then, there have been several developments: EFF staff attorney Fred von Lohmann has taken on the case pro-bono; Eric Moeller, Wikimedia Foundation Deputy Director, has responded to the NPG's allegations in a post on the WMF blog; and the British Association of Picture Libraries and Agencies has weighed in on the dispute in favor of the NPG."

Raul654 writes "Last week, it was reported that the UK's National Portrait Gallery had threatened a lawsuit against an American Wikipedian for uploading pictures from the NPG's website to Wikipedia. The uploaded pictures are clearly in the public domain in the United States. (In the US, copies of public domain works are also in the public domain. UK law on the matter is unclear.) Since then, there have been several developments: EFF staff attorney Fred von Lohmann has taken on the case pro-bono; Eric Moeller, Wikimedia Foundation Deputy Director, has responded to the NPG's allegations in a post on the WMF blog; and the British Association of Picture Libraries and Agencies has weighed in on the dispute in favor of the NPG."

HFKap writes "The earliest computer games were pure text and were passed around freely on the ARPANET, culminating in the 'cave crawls' Adventure and Dungeon. The advent of the home computer opened up a commercial market for text adventure games, though the limited resources of these machines presented significant technical problems. Many companies vied for success in this market, but the best-remembered today is Infocom, founded by a group from MIT. Infocom's virtual memory and virtual machine innovations enabled them to design extremely ambitious and creative games, which they dubbed Interactive Fiction (IF). Ultimately the text game lost its paying customers to the lure of graphical games, such as those produced by Sierra On-Line. This article is a dialogue between Harry Kaplan and Jimmy Maher, editor of the modern IF community's pre-eminent e-zine SPAG."

jtcm writes "Three men have been charged with conspiring to violate the Digital Millennium Copyright Act after federal investigators found that they allegedly offered a cracker more than $250,000 to assist with breaking Dish Network's satellite TV encryption scheme: '[Jung] Kwak had two co-conspirators secure the services of a cracker and allegedly reimbursed the unidentified person about $8,500 to buy a specialized and expensive microscope used for reverse engineering smart cards. He also allegedly offered the cracker more than $250,000 if he successfully secured a Nagra card's EPROM (eraseable programmable read-only memory), the guts of the chip that is needed to reverse-engineer Dish Network's encryption.' Kwak owns a company known as Viewtech, which imports and sells Viewsat satellite receiver boxes. Dish Network's latest encryption scheme, dubbed Nagra 3, has not yet been cracked by satellite TV pirates."

New York Attorney General Andrew Cuomo announced yesterday that Lifestyle Lift, a cosmetic surgery company who posted fake reviews of their services on various websites, will have to pay $300,000 to the state of New York. Cuomo's office says this is the first US case to specifically target astroturfing on the internet. "Internal emails discovered by Attorney General Cuomo's investigation show that Lifestyle Lift employees were given specific instructions to engage in this illegal activity. One e-mail to employees said: 'Friday is going to be a slow day — I need you to devote the day to doing more postings on the web as a satisfied client.' Another internal email directed a Lifestyle Lift employee to 'Put your wig and skirt on and tell them about the great experience you had.' In addition to posting on various Internet message board services, Lifestyle Lift also registered and created stand-alone Web sites, such as MyFaceliftStory.com, designed to appear as if they were created by independent and satisfied customers of Lifestyle Lift. The sites offered positive narratives about the Lifestyle Lift experience. Some of these sites purported to offer forums for users to add their own comments about Lifestyle Lift. In reality, however, Lifestyle Lift either provided all the 'user comments' themselves, or closely monitored and edited third-party comments to skew the discussion in favor of Lifestyle Lift."

GigsVT writes "Editors on Wikipedia are engaged in an epic battle over a few piece of paper smeared with ink. The 10 inkblot images that form the classic Rorschach test have fallen into the public domain, and so including them on Wikipedia would seem to be a simple choice. However, some editors have cited the American Psychological Association's statement that exposure of the images to the public is an unethical act, since prior exposure to the images could render them ineffective as a psychological test. Is the censorship of material appropriate, when the public exposure to that material may render it useless?"

GigsVT writes "Editors on Wikipedia are engaged in an epic battle over a few piece of paper smeared with ink. The 10 inkblot images that form the classic Rorschach test have fallen into the public domain, and so including them on Wikipedia would seem to be a simple choice. However, some editors have cited the American Psychological Association's statement that exposure of the images to the public is an unethical act, since prior exposure to the images could render them ineffective as a psychological test. Is the censorship of material appropriate, when the public exposure to that material may render it useless?"

Soychemist writes "On the same day that yet another shuttle launch was postponed, SpaceX successfully carried a Malaysian satellite, RazakSAT, into orbit. This is the second successful launch in a row for Elon Musk's space exploration startup. Later this year the company will launch its larger Falcon 9 rocket, which could be used to carry cargo to the International Space Station. RazakSAT was designed by ATSB and carries a high resolution camera. If it is intact, the satellite will take photographs of Earth that could be used to better manage natural resources." Adds xp65: "The satellite was separated from the Falcon 1 about 48 minutes after liftoff at 3:35 GMT (11:35 pm EDT). The orbit is 685 km and 9 degrees inclination. Launch was delayed several times due to a faulty helium valve on the ground and bad weather at the launch site at Kwajalein. This was the fifth flight of the Falcon 1 rocket, with the last two flights being succesful. Later this year the inaugural flight of the larger Falcon 9 rocket is planned from Cape Canaveral."

Slashdot contributor Bennett Haselton says "Using FTP to administer a website is insecure -- but not for the reasons that you probably think. You yourself can stop using FTP any time you want, but how do we change the landscape Net-wide, to reduce the number of breakins using stolen FTP credentials?" You know what to click on if you want to read the rest.

On July 1st I found that one of my less important websites, hosted on a low-cost shared Web hosting service, had been broken into. A friend emailed me to say that the site was showing up in Google's search results with the Google "This site may harm your computer" warning listed next to it. I found that on one of the pages, about 1,500 HTML script tags had been inserted, loading JavaScript files from pseudo-random Russian hostnames like "www.chk06.ru" and "www.errghr.ru", none of which are currently resolving. Usually, when such script tags are maliciously inserted into a page on a website, the script tags attempt to install spyware on the machines of people who visit the site.

I immediately replaced the infected file on the website with the backed-up clean copy from my machine, and changed the password on the website in case the attacker had gotten in by using the old one. (The original file with the script tags inserted is here if you want to examine it, but use with caution -- if the .ru hostnames in the script tags start resolving again, then opening the file could cause the JavaScript on the pages to be loaded, which might infect your machine.) Then I started investigating (a) how this probably happened; (b) whether future similar attacks could be prevented, by changing some defaults in the way that hosting accounts are set up; and (c) whether the incentives for hosting providers are such that these changes are likely to happen by themselves, or whether it will require some third-party advocacy to change what we think of as "best practices".

Denis Sinegubko, the webmaster of Unmask Parasites, a free service that scans websites on demand for signs of break-ins, says:

The majority of web site compromises happen because of:

1. Stolen FTP credentials. Spyware on webmasters' computers: key-loggers, traffic sniffers (FTP protocol sends username/password as plain text), trojans that steal credentials from various programs' configuration files (FTP clients, DreamWeaver, etc).
2. Security holes in popular web software: CMS (Joomla, Drupal, etc), Forums (phpBB, vBulletin, Simple Machines, etc), Blogs (WordPress). Once a vulnerability discovered, hackers configure their automated tools to search the web for websites running vulnerable versions of the software and exploit them. This can be done easily and at almost no cost when they have an army of zombie computers.
3. Security hole in "in-house" web software. Many novice (and even many experienced) web developers don't properly sanitize user input making various attacks possible (SQL injections, XSS, etc)
4. Poor security practices (Something that should be manually configured by site/server admins and cannot be fixed with automated security updates): Weak passwords, open ports, insufficiently strict permissions for limited accounts, files and directories with world write permissions, etc.

I didn't have any third-party web software or custom-made software installed on the PublicEditorMyAss.com site, the password was a seven-letter meaningless mix of letters and numbers, and I didn't have permission to change most of the things like open ports and file permissions. That left the possibility of stolen FTP credentials. This is in fact what Sinegubko says is the most common cause of such break-ins:

I guess 90% of attacks use stolen FTP credentials this year. Check this Google's graph that shows the top 10 malware sites as counted by the number of compromised web sites that referenced it:
http://googleonlinesecurity.blogspot.com/2009/06/top-10-malware-sites.html

I reviewed 4 most widespread of them (Gumblar, Martuz, Goooogleadsense, Googleanalytlcs). All four used stolen FTP credential to penetrate web sites and upload malicious content. The chances are the rest used this vector too.

When the PublicEditorMyAss.com site was set up, the default setting was for pages to be edited over FTP. Even though FTP sends and receives passwords without encrypting them (in contrast with alternatives like SFTP or "secure FTP", which encrypts passwords), for a long time I had assumed that this was not a major security problem, because in order for an attacker to intercept the passwords in transit, they would have to control a machine somewhere on the path between my home computer and the PublicEditorMyAss.com server. I figured this wasn't worth worrying about, because it was much more likely that an attacker would attempt to steal the password by installing spyware on my home computer. And if an attacker managed to do that, then I assumed that the risk of passwords being stolen by spyware was about the same whether I used FTP or SFTP -- because either way, the spyware could just steal my password by reading it out of a configuration file where the password was stored. (Even though FTP and SFTP programs both store passwords in an encrypted format, the programs have to be able to decrypt the passwords in order to use them whenever the user wants to open a connection. So the spyware could just mimic whatever steps the client programs use to decrypt the stored passwords, in order to steal one of my passwords stored in a file.) So, I assumed it made no difference whether I used FTP or SFTP.

But according to what Sinegubko told me, this reasoning was probably wrong. The problem is that even though spyware installed on your machine could read passwords that are stored in configuration files, it would be a lot of work to write a spyware program that could do this, because every FTP program and SFTP program stores passwords according to a different algorithm. It's much simpler for spyware to simply watch the traffic sent and received from your machine, so that any unencrypted passwords will be spotted:

[Passwords can be stolen by] sniffers that read all TCP traffic on local computers. Like personal firewalls but malicious. They can easily intercept FTP credentials since they are sent as a plain text.

Sinegubko describes how one of his contacts obtained evidence that a common spyware program was doing exactly this:

One of them even infected a spare WinXP computer (with Gumblar) to test the consequences. On the infected computer he created a new account in a popular FTP client and saved it. The server address was correct (his server) and the username/password pair was not valid. A few hours later in FTP logs, he discovered login attempts that used that invalid username/password pair from a Singapore IP, then from a Florida IP, the some other country's IP. Apparently the FTP credentials were somehow stolen from that infected computer.

I know of only two instances where I've ever definitely been infected with spyware. I don't do stupid things like downloading and running strange programs from third-party sites, so I think both infections were probably caused by a site exploiting a security hole in Internet Explorer, or in a plug-in like Adobe Acrobat or the Flash player. Both times, once I noticed I was infected, I got rid of the infection with Malwarebytes, but I don't know how much damage the spyware did in the meantime.

So this was a case where a little knowledge can be a dangerous thing. If I had known nothing about Internet architecture, and someone told me "FTP is less secure than SFTP," I would have found a way to switch to administering the site via SFTP. But because I knew that the main reason FTP was considered "insecure" was because it transmitted passwords unencrypted, but I also knew that most of of the machines relaying those passwords in transit were secure and trustworthy, I thought it didn't matter. Now it seems that is probably how my password got compromised after all.

In that case, why don't more people switch to administering their sites via SFTP instead of FTP? Here are the steps it took me to enable SFTP on my GoDaddy hosting account. Feel free to use this as a reference, but the obvious point is that as long as this many steps are required, it's safe to say that most users won't be switching:

1. Go to the "Hosting" menu and pick "My Hosting Account."
2. Next to the name of your website, pick "Manage Account." This will open the Hosting Control Center.
3. In Hosting Control Center, click to expand the "Settings" options.
4. In the "Settings" control panel, click the "SSH" icon.
5. You will see a page saying "SSH is not set up", and prompting you to enter a phone number so that their automated service can call you with a PIN number. After you enter your phone number, the phone rings a second later, and you enter the PIN in a form on the GoDaddy website.
6. You will then see a page which says:

   Current Hosting Account Status: Pending Account Change
   Your request to enable SSH is being processed. This upgrade may take up to 24 hours.

In fact, even if only one step were required to switch, most users probably wouldn't change from the default setting to use FTP, due to the eternal, unchangeable fact that most people do not change their default settings, ever. (What percent of users ever change the default set of toolbars that are displayed at the top of their Web browser window?)

If more Web hosting companies made SFTP the default, then the number of websites that were compromised by stolen login credentials, would probably go down. Spyware authors might start to make their programs smarter at that point, enabling them to read the passwords stored by popular FTP and SFTP programs, so that it would make no difference whether the passwords were transmitted in the clear or not. However, this would be harder for spyware authors to do correctly, so it would at least raise the bar for a successful malware attack, and the number of compromised websites would be reduced.

Unfortunately, Web hosting companies don't have much incentive to make users switch to the more secure SFTP protocol. This isn't necessarily true of all security risks; sometimes the hosting company has a strong incentive to pass on the right wisdom (and select the right default settings) for their customers. From the hosting company's point of view, you could divide risks into three categories:

• Risks where the hosting company pays a large part of the price for a customer's machine being compromised. For example, if a cyber-criminal takes over a customer's machine and uses it to launch a denial-of-service attack by sending it a flood of traffic, the hosting company will see that traffic spike on their network. The hosting company has the most incentive to help prevent these types of attacks.

• Risks where the hosting company doesn't directly pay a price for the customer's machine being compromised, but they may have to deal with complaints sent in by third parties. For example, a customer's website could get broken into, and script tags could be inserted into the pages that cause visitors' machines to be infected with spyware. Those visitors might complain to the webmaster of the infected site, or they might complain to the hosting company, which then forwards the complaint to the webmaster. The hosting company may have to provide a few minutes of tech support to the customer, advising them to change their password and scan their own machine for spyware, but they probably won't incur any other material costs.

• Risks where neither the hosting company nor the customer pays a price for the machine being infected, but the price is paid by "Internet users as a whole." The only attack that I can think of in this category, is an attack where a cyber-criminal inserts key words into your web page and links them to his site, in order to increase his Google ranking for searches for those key words. Neither the website owner, nor any visitors to the website, are victimized directly; the harm being done is that the quality of Google search results is reduced for everybody. The only reports of the attack would probably come from "good Samaritan" Web surfers, who tell the hosting company or the webmaster that one of their pages has been vandalized.

When a customer's FTP credentials are stolen, the price paid by the hosting company lies somewhere in the middle. An attacker who stole my current PublicEditorMyAss.com credentials would only be able to deface the content on the site, but they wouldn't be able to launch an attack against a third-party network (my PublicEditorMyAss.com hosting account doesn't have the ability to initiate an outgoing connection to a third-party site).

Weighing in the other direction are the costs of switching to SFTP. If existing customers are forcibly switched over, phone lines will be clogged by customers wanting to know why their old method of logging in to their site has suddenly stopped working. A better choice would be to allow existing customers to stay with FTP while making SFTP the default for new customers. But there is a time and money cost of changing anything, even a default setting.

So GoDaddy doesn't have much incentive to make SFTP their new default. Indeed, I've used many different shared hosting companies before I started running proxies exclusively on dedicated servers, and none of the shared hosting companies ever used anything but FTP as the default method for customers to administer their websites. So who can blame them? They're not making the choice that makes the most sense for their customers or for Internet security as a whole, they're making the choice that makes the most sense in terms of costs and benefits for themselves, and I'm not being judgmental about that. We shouldn't expect most companies to ever behave in any other way.

That's why I think that glib "solutions" to security problems, like "Everybody install anti-virus software", or "Everybody stop using Windows", aren't helpful, because regardless of whether these ideas would work if everybody actually followed them, the fact is that most people won't. The problems have to be addressed in terms of changing incentives for the choices people make.

What's an idea for reducing the risks of FTP credentials stolen by malware, that addresses the incentives problem? Maybe give tax breaks to Web hosting companies that set up customer accounts to use SFTP instead of FTP by default? Or ask more computer vendors to include a desktop link to pre-installed SFTP software, so that when Web hosting companies present options to their customers, it's easier for users to choose the SFTP option since they have a client already installed? (I was tempted to recommend that Microsoft include a universal SFTP client pre-installed in Windows with a prominent desktop link, but the problem with that is that if almost everybody used the same SFTP client, malware authors would have greater incentive to reverse-engineer the algorithm that the client used to store saved passwords -- and then passwords would be just as easily accessible to spyware, as if the user were using FTP all along. So a good mix of SFTP clients is safer for this purpose.)

Since the difference between SFTP and FTP usually only matters in cases where a customer's machine has been infected with malware, obviously the best solution is to avoid malware altogether, but that's much harder problem to solve, as long as malware authors can keep finding security holes in Internet Explorer and other popular programs. Making SFTP the new standard for Web hosting accounts is something that we know how to do, right now. The incentives aren't currently right for Web hosting companies to make it happen. But there may be ways to change that, and I'll bet some people can think of better ideas than the ones I've suggested. I'm just saying that the incentives problem is where attention should be focused.

Peace Corps Online writes "The NY Times reports that researchers at Cornell studying the news cycle by looking for repeated phrases and tracking some 90 million articles and blog posts which appeared from August through October 2008 on 1.6 million mainstream media sites and blogs, have discovered that for the most part, traditional news outlets lead and the blogs follow, typically by 2.5 hours. The researchers studied frequently repeated short phrases, the equivalent of 'genetic signatures' for ideas. The biggest text-snippet surge found in the study — 'lipstick on a pig' originated in Barack Obama's colorful put-down of the claim by Senator John McCain and Gov. Sarah Palin that they were the genuine voices for change in the campaign. The researchers' paper, 'Meme-tracking and the Dynamics of the News Cycle,' (PDF) shows that although most news flowed from the traditional media to the blogs, 3.5 percent of story lines originated in the blogs and later made their way to traditional media."

Hugh Pickens writes "Scientific American reports that although cursing is notoriously decried in the public debate, scientists have discovered that swearing may serve an important function in relieving pain. 'Swearing is such a common response to pain that there has to be an underlying reason why we do it,' says Richard Stephens of Keele University in England. A study measured how long college students could keep their hands immersed in cold water. During the chilly exercise, they could repeat an expletive of their choice or chant a neutral word. When swearing, the 67 student volunteers reported less pain and on average endured about 40 seconds longer. How swearing achieves its physical effects is unclear, but the researchers speculate that brain circuitry linked to emotion is involved. Earlier studies have shown that unlike normal language, which relies on the outer few millimeters in the left hemisphere of the brain, expletives hinge on evolutionarily ancient structures buried deep inside the right half like the amygdala, an almond-shaped group of neurons that can trigger a fight-or-flight response in which our heart rate climbs and we become less sensitive to pain."

Ponca City, We love you writes "NetworkWorld reports that security consultants Andrea Barisani and Daniele Bianco are preparing to unveil their methodology at the Black Hat USA conference for stealing information typed on a computer keyboard using nothing more than the power outlet to which the computer is connected. When you type on a standard computer keyboard, electrical signals run through the cable to the PC. Those cables aren't shielded, so the signal leaks via the ground wire in the cable and into the ground wire on the computer's power supply. The attacker connects a probe to a nearby power socket, detects the ground leakage, and converts the signal back into alphanumeric characters. So far, the attack has proven successful using outlets up to about 15 meters away. The cost of the equipment to carry out the power-line attack could be as little as $500 and while the researchers admit their hacking tools are rudimentary, they believe they could be improved upon with a little time, effort and backing. 'If our small research was able to accomplish acceptable results in a brief development time (approximately a week of work) and with cheap hardware,' they say, 'Consider what a dedicated team or government agency can accomplish with more expensive equipment and effort.'"

99luftballon writes "Nearly 70 years after Station X (aka the Bletchley Park cryptanalysis unit) was set up, the surviving members are to be honored by the British government. Bletchley was one of the most important computing centers of its time and housed giants of the technology industry (as it was) like Tommy Flowers, who built Colossus, and Dr. Alan Turing. I was lucky enough to meet one of the staff at the site 11 years ago, and she was very bitter that their work was never recognized, and that they were bound by the Official Secrets Act and couldn't talk about it. It's just a shame that so few of the staff are still alive to receive the award."

Tiger4 writes "The mayor of the City of Lancaster in the Antelope Valley of southern California is considering a high-definition video flying platform to aid in crime fighting. The aircraft, would circle the city constantly, able to zoom in on activity spots instantly. 'You never know when you are being watched or followed. It would be stupid to commit a crime. You see it with such detail,' said Mayor R. Rex Parris, who took a ride last week in a camera-equipped airplane with pilot Dick Rutan. 'I have every hope that Lancaster will be the first city to deploy it. I've never been so excited about anything.' Dick Rutan is the same pilot who flew around the world non-stop in the Voyager, custom built by his brother Burt Rutan at Scaled Composites in Mojave." The aircraft is nothing special, a garden-variety Cessna or the like, but "the camera is an example of technology developed for and used by the military making a transition to civilian applications, Rutan said."

Tiger4 writes "The mayor of the City of Lancaster in the Antelope Valley of southern California is considering a high-definition video flying platform to aid in crime fighting. The aircraft, would circle the city constantly, able to zoom in on activity spots instantly. 'You never know when you are being watched or followed. It would be stupid to commit a crime. You see it with such detail,' said Mayor R. Rex Parris, who took a ride last week in a camera-equipped airplane with pilot Dick Rutan. 'I have every hope that Lancaster will be the first city to deploy it. I've never been so excited about anything.' Dick Rutan is the same pilot who flew around the world non-stop in the Voyager, custom built by his brother Burt Rutan at Scaled Composites in Mojave." The aircraft is nothing special, a garden-variety Cessna or the like, but "the camera is an example of technology developed for and used by the military making a transition to civilian applications, Rutan said."

Boccaccio writes "NASA on Wednesday successfully tested its MLAS alternative launch escape system designed for the new Orion Crew module. MLAS, or Max Launch Abort System, is named after the inventor of the crew escape system on the Mercury program, Maxime (Max) Faget and consists of four rocket motors built into a fairing that encloses an Orion module during Launch. MLAS is designed to pull the crew away from the main rocket stack during the critical first 2.5 minutes of flight in the event of a catastrophic failure. The advantage of the MLAS system over the more traditional LAS (Launch Abort System) is that it reduces the total height of the rocket, lowering the center of gravity and adding stability, and potentially allowing higher fuel load. You can watch a video of the launch at the NASA website, and there are also a bunch of pictures."

Boccaccio writes "NASA on Wednesday successfully tested its MLAS alternative launch escape system designed for the new Orion Crew module. MLAS, or Max Launch Abort System, is named after the inventor of the crew escape system on the Mercury program, Maxime (Max) Faget and consists of four rocket motors built into a fairing that encloses an Orion module during Launch. MLAS is designed to pull the crew away from the main rocket stack during the critical first 2.5 minutes of flight in the event of a catastrophic failure. The advantage of the MLAS system over the more traditional LAS (Launch Abort System) is that it reduces the total height of the rocket, lowering the center of gravity and adding stability, and potentially allowing higher fuel load. You can watch a video of the launch at the NASA website, and there are also a bunch of pictures."

Krneki writes "I've been developing monitoring solutions for the last five years. I have used Cacti, Nagios, WhatsUP, PRTG, OpManager, MOM, Perl-scripts solutions, ... Today I have changed employer and I have been asked to develop a new monitoring solution from scratch (5,000 devices). My objective is to deliver a solution that will cover both the network devices, servers and applications. The final product must be very easy to understand as it will be used also by help support to diagnose problems during the night. I need a powerful tool that will cover all I need and yet deliver a nice 2D map of the company IT infrastructure. I like Cacti, but usually I use it only for performance monitoring, since pooling can't be set to 5 or 10 sec interval for huge networks. I'm thinking about Nagios (but the 2D map is hard to understand), or maybe OpManager. What monitoring solution do you use and why?"

Krneki writes "I've been developing monitoring solutions for the last five years. I have used Cacti, Nagios, WhatsUP, PRTG, OpManager, MOM, Perl-scripts solutions, ... Today I have changed employer and I have been asked to develop a new monitoring solution from scratch (5,000 devices). My objective is to deliver a solution that will cover both the network devices, servers and applications. The final product must be very easy to understand as it will be used also by help support to diagnose problems during the night. I need a powerful tool that will cover all I need and yet deliver a nice 2D map of the company IT infrastructure. I like Cacti, but usually I use it only for performance monitoring, since pooling can't be set to 5 or 10 sec interval for huge networks. I'm thinking about Nagios (but the 2D map is hard to understand), or maybe OpManager. What monitoring solution do you use and why?"

Krneki writes "I've been developing monitoring solutions for the last five years. I have used Cacti, Nagios, WhatsUP, PRTG, OpManager, MOM, Perl-scripts solutions, ... Today I have changed employer and I have been asked to develop a new monitoring solution from scratch (5,000 devices). My objective is to deliver a solution that will cover both the network devices, servers and applications. The final product must be very easy to understand as it will be used also by help support to diagnose problems during the night. I need a powerful tool that will cover all I need and yet deliver a nice 2D map of the company IT infrastructure. I like Cacti, but usually I use it only for performance monitoring, since pooling can't be set to 5 or 10 sec interval for huge networks. I'm thinking about Nagios (but the 2D map is hard to understand), or maybe OpManager. What monitoring solution do you use and why?"

Krneki writes "I've been developing monitoring solutions for the last five years. I have used Cacti, Nagios, WhatsUP, PRTG, OpManager, MOM, Perl-scripts solutions, ... Today I have changed employer and I have been asked to develop a new monitoring solution from scratch (5,000 devices). My objective is to deliver a solution that will cover both the network devices, servers and applications. The final product must be very easy to understand as it will be used also by help support to diagnose problems during the night. I need a powerful tool that will cover all I need and yet deliver a nice 2D map of the company IT infrastructure. I like Cacti, but usually I use it only for performance monitoring, since pooling can't be set to 5 or 10 sec interval for huge networks. I'm thinking about Nagios (but the 2D map is hard to understand), or maybe OpManager. What monitoring solution do you use and why?"

duh P3rf3ss3r writes "The BBC is carrying a report from a team of researchers at Newcastle University who claim to have developed a the first 'artificial' human sperm from stem cells. The research, reported in the journal Stem Cells and Development, involved selecting meristematic germ cells from a human embryonic stem cell culture and inducing meiosis, thus producing a haploid gamete. The authors claim that the resulting sperm are fully formed, mature, human sperm cells but the announcement has been greeted with mixed reaction from colleagues who claim the procedure is ethically questionable and that the gametes produced are of inferior levels of maturation."

duh P3rf3ss3r writes "The BBC is carrying a report from a team of researchers at Newcastle University who claim to have developed a the first 'artificial' human sperm from stem cells. The research, reported in the journal Stem Cells and Development, involved selecting meristematic germ cells from a human embryonic stem cell culture and inducing meiosis, thus producing a haploid gamete. The authors claim that the resulting sperm are fully formed, mature, human sperm cells but the announcement has been greeted with mixed reaction from colleagues who claim the procedure is ethically questionable and that the gametes produced are of inferior levels of maturation."

stoolpigeon writes "At the end of last year, I made a move from an IT shop focused on supporting the US side of our business to a department that provides support to our operations outside the US. This was the first time I've worked in an international context and found myself, on a regular basis, running into long-time assumptions that were no longer true. My first project was implementing a third-party, web-based HR system for medium-sized offices. I found myself constantly missing important issues because I had such a narrow approach to the problem space. Sure, I've built applications and databases that supported Unicode, but I've never actually implemented anything with them but the same types of systems I'd built in the past with ASCII. But a large portion of the world's population is in Asia, and ASCII is certainly not going to cut it there. Fortunately, a new edition of Ken Lunde's classic CJKV Information Processing has become available, and it has really opened my eyes." Keep reading for the rest of JR's review. CJKV Information Processing 2nd ed. author Ken Lunde pages 898 publisher O'Reilly Media, Inc. rating 10/10 reviewer JR Peck ISBN 978-0-596-51447-1 summary Chinese, Japanese, Korean and Vietnamese computing. CJKV Information Processing has a long history that actually goes back into the 1980s. It began as a simple text document JAPAN.INF, available via FTP on a number of servers. This document was excerpted and refined and published as Lunde's first book in 1993, Understanding Japanese Information Processing. Shortly after JAPAN.INF became CJK.INF and the foundation for the first edition of CJKV Information Processing was born. The first edition was published in 1999, and it is safe to say that a number of important things have changed over the last 10 years. Lunde states four major developments that prompted this second edition in the preface. They are the emergence of Unicode, OpenType and the Portable Document Format (PDF) as preferred tools and lastly the maturity of the web in general to use Unicode and deal with a wider range of languages and their character sets.

Lunde sets out not to create an exhaustive reference on the languages themselves, but rather an exhaustive guide to the considerations that come into play when processing CJKV information. As Lunde states, "..this book focuses heavily on how CJKV text is handled on computer systems in a very platform-independent way..." Taking into account the complexity of the topic, the breadth of the work and the degree to which it is independent of any specific technology, outside a heavy bias for Unicode, is extremely impressive. A glance over the table of contents show just how true this is. Chapter 9, Information Processing Techniques has sections touching on C/C++, Java, Perl, Python, Ruby, Tcl and others. These are brief, with most examples in Java but that they are all directly addressed shows a great awareness of the options out there. The sections that deal with operating system issues have the same breadth. Chapter 10, OSes, Text Editors, and Word Processors doesn't just hit the top Mac and Windows items. It looks at FreeBSD, Linux, Mac OS X, MS Vista, MS-DOS, Plan 9, OpenSolaris, Unix and more. There are also sections for what Lunde calls hybrid environments such as Boot Camp, CrossOver Mac, Gnome, KDE, VMware Fusion, Wine and the X Window System. Interestingly the Word Processor system covers AbiWord and KWord but not OpenOffice.org The point stands that anyone looking to support CJKV, this book will probably cover your platform and give you at the very least a starting point with your chosen tool set.

That said, an extremely specific implementation is not what Lunde is out to offer up. This is the very opposite of a 'cook book' approach. This also makes the book extremely useful to anyone dealing with internationalization, globalization or localization issues regardless of character set or language. Lunde teaches the underlying principles of how writing systems and scripts work. He then moves to how computer systems deal with these various writing systems and scripts. The focus is always on CJKV but the principles will hold true in any setting. This continues to be the case as Lunde talks about character sets, encoding, code conversion and a host of other issues that surround handling characters. Typography is included, as well as input and output methods. In each case Lunde covers the basics as well as pointing out areas of concern and where exceptions may cause issues. The author is nothing if not thorough in this regard. His knowledge of the problem space is at times down right staggering. Lunde also touches on dictionaries as well as publishing in print and on the web.

The first three chapters set the table for the rest of the book with an overview of the issues that will be addressed, information on the history and usage of the writing systems and scripts covered and the character set standards that exist. This was a fascinating glimpse, once again into CJKV languages and how other languages are dealt with as well. I think there is even a lot here that would be extremely informative to a person who wants to learn more about CJKV, even if they are not a developer that will be working with one of the languages. That's only the first quarter of the book, so I don't know that it would be worth it from just that perspective, but it is definitely a nice benefit of Lunde's approach.

The style is very readable, but I wouldn't just hand this to someone who didn't have some familiarity with text processing issues on computer systems. While there is no requirement to know or understand one of the CJKV languages, understanding how computer systems process data and information is important. I did not know anything about CJKV languages prior to reading the book and have learned quite a bit. What I learned was not limited to the CJKV arena. The experience I had was very similar to when I studied ancient Greek in school. Learning Greek I learned much more about English grammar than I had ever picked up prior. Reading CJKV Information Processing I learned quite a bit more about the issues involved in things like character encoding and typography for every language, not just these four. But in dealing with CJKV specifically I've found that Lunde's work is indispensable. It is not just my go to reference, it's essentially my only reference. If any other works do come my way, this is the standard against which they will be judged.

There are thirteen indexes including a nice glossary. Nine of them are character sets, which were printed out in the longer first edition. In this second edition, there is a note on each, with a url pointing to a PDF with the information. It seemed odd, but each URL gets it's own page. This means there are nine pages with nothing but the title of the index and a url. Fortunately they are all in the same directory, which can be reached directly from the books page at the O'Reilly site. It seems it would have made sense to just list them all on a single page, but maybe it was necessary for some reason. It's a minute flaw in what is a great book."

You can purchase CJKV Information Processing 2nd ed. from amazon.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page.

je ne sais quoi writes "Net Applications normally releases its statistics for browser and operating system usage share on the first of every month. This month, however, the data has not shown up — only a cryptic message stating they are reviewing the data for inexplicable statistical variations and that it will be available soon. Larry Dignan at ZDNet has a blog post that might explain what is happening: Statcounter has released some data that shows a precipitous drop in IE browser use in North America, to the benefit of Firefox, Safari, and Chrome. At the end of May, StatCounter shows IE usage share (for versions 6, 7, and 8 combined) at around 64%; at the beginning of June it is now about 56% — an astounding 8% drop in one month. We should keep in mind the difficulties in estimating browser usage share: this could very well be a change in how browsers report themselves, or some other statistical anomaly. So it will probably be healthy to remain skeptical until trend this is confirmed by other organizations. Have any of you seen drops in IE usage share for Web-sites you administer?"

Peace Corps Library writes "BBC reports that about 800 pages of the earliest surviving Christian Bible, the 1,600-year-old Codex Sinaiticus manuscript, have been recovered and put on the Internet. 'The Codex Sinaiticus is one of the world's greatest written treasures,' says Dr. Scot McKendrick, head of Western manuscripts at the British Library. 'This 1,600-year-old manuscript offers a window into the development of early Christianity and first-hand evidence of how the text of the Bible was transmitted from generation to generation.' The New Testament of the Codex Sinaiticus appears in Koine Greek, the original vernacular language, and the Old Testament in the version, known as the Septuagint, that was adopted by early Greek-speaking Christians. For 1,500 years, the Codex Sinaiticus lay undisturbed in a Sinai monastery until it was found in 1844 and split between Egypt, Russia, Germany, and Britain. It is thought to have survived because the desert air was ideal for preservation and because the monastery, on a Christian island in a Muslim sea, remained untouched, its walls unconquered. The British Library is marking the online launch of the manuscript with an exhibition which includes a range of historic items and artifacts linked to the document. 'The availability of the virtual manuscript for study by scholars around the world creates opportunities for collaborative research that would not have been possible just a few years ago.'"

Peace Corps Library writes "BBC reports that about 800 pages of the earliest surviving Christian Bible, the 1,600-year-old Codex Sinaiticus manuscript, have been recovered and put on the Internet. 'The Codex Sinaiticus is one of the world's greatest written treasures,' says Dr. Scot McKendrick, head of Western manuscripts at the British Library. 'This 1,600-year-old manuscript offers a window into the development of early Christianity and first-hand evidence of how the text of the Bible was transmitted from generation to generation.' The New Testament of the Codex Sinaiticus appears in Koine Greek, the original vernacular language, and the Old Testament in the version, known as the Septuagint, that was adopted by early Greek-speaking Christians. For 1,500 years, the Codex Sinaiticus lay undisturbed in a Sinai monastery until it was found in 1844 and split between Egypt, Russia, Germany, and Britain. It is thought to have survived because the desert air was ideal for preservation and because the monastery, on a Christian island in a Muslim sea, remained untouched, its walls unconquered. The British Library is marking the online launch of the manuscript with an exhibition which includes a range of historic items and artifacts linked to the document. 'The availability of the virtual manuscript for study by scholars around the world creates opportunities for collaborative research that would not have been possible just a few years ago.'"

Hugh Pickens writes "Internet entrepreneur Mark Cuban writes that the problem with companies who have built their business around Free is that the more success you have in delivering free, the more expensive it is to stay at the top. '"They will be Facebook to your Myspace, or Myspace to your Friendster or Google to your Yahoo," writes Cuban. "Someone out there with a better idea will raise a bunch of money, give it away for free, build scale and charge less to reach the audience."' Cuban says that even Google, who lives and dies by free, knows that 'at some point your Black Swan competitor will appear and they will kick your ass' and that is exactly why Google invests in everything and anything they possibly can that they believe can create another business they can depend on in the future searching for the 'next big Google thing.' Cuban says that for any company that lives by Free, their best choice is to run the company as profitably as possible, focusing only on those things that generate revenue and put cash in the bank. '"When you succeed with Free, you are going to die by Free. Your best bet is to recognize where you are in your company's lifecycle and maximize your profits rather than try to extend your stay at the top," writes Cuban. "Like every company in the free space, your lifecycle has come to its conclusion. Don't fight it. Admit it. Profit from it."'"

Frequent Slashdot contributor Bennett Haselton's essay this week is about "A Tennessee man is arrested for possessing a picture of Miley Cyrus's face superimposed on a nude woman's body. In a survey that I posted on the Web, a majority of respondents said the man violated the law -- except for respondents who say they were good at math in school, who as a group answered the survey differently from everyone else." Continue on to see how.

On June 24, a Tennessee man was arrested for possessing photos that showed the faces of three underage girls, including Miley Cyrus, superimposed onto the nude bodies of adult women. Assistant District Attorney Dave Denny said of the arrest, "When you have the face of a small child affixed to a nude body of a mature woman, it's going to be the state's position that this is for sexual gratification and that this is simulated sexual activity." The phrase "simulated sexual activity" apparently refers to a Tennessee sex crimes law which states in part: "It is unlawful for any person to knowingly possess material that includes a minor engaged in simulated sexual activity that is patently offensive."

Assuming this is the crime that the D.A. plans to charge him with, to me it seems obvious that the defendant didn't violate the law as written. For one thing, if the nude women in the pictures were just standing there (and neither the article nor the D.A.'s statement suggests otherwise), then there was no "sexual activity" in the photos of any kind, real or simulated. But even if the nude adult women in the photos had been engaged in sexual activity (even just striking a mildly sexy pose), the law still would not apply, because the law requires an actual minor to actually be engaged in something, even if that "something" is simulated sexual activity. So if a video showed a real minor that appeared to be masturbating or having sex with someone in a manner that was "patently offensive", that could violate the law. (Hopefully the "patently offensive" clause would exclude artistic movies like The Tin Drum, although that defense has not always worked.) But if the girls' faces were simply cut and pasted onto the bodies of the women in the photos, then the minors in question were not "engaged in" anything. The D.A. appears to have confused "material that includes a minor engaged in simulated sexual activity" with "material that simulates a minor engaged in sexual activity". And the D.A.'s statement that "this is for sexual gratification and that this is simulated sexual activity" — clearly implying that the pictures are for sexual gratification and therefore this is "simulated sexual activity" — is ridiculous. The defendant probably used pictures of Miley with her clothes on for "sexual gratification" — does that make the photos "simulated sexual activity"? (Dave Denny's office did not respond to my request for comment.)

But I was more interested in a different question: What would people in a survey think about whether the defendant violated the law? And, would people who are good at math, answer the question differently from everyone else? And would those people answer the question differently from people who are good at, say, English composition?

That might seem like an odd twist to put on it. But if you can show that a certain answer correlates with mathematical ability, that indicates something special about that answer. And if you can show that that answer appeals to people with math skills, but not to people with English/writing/composition skills, then that indicates something interesting not just about that answer, but about mathematical ability as well, as opposed to writing ability. Whether that answer is "right" or "wrong" (or whether you think those terms are even meaningful for a legal opinion), it is a fact, not an opinion, that people with self-reported higher math skills are more likely to pick that as the correct choice.

By contrast, when the D.A. makes a public statement about the criminality of the defendant's actions, the implication is that we should give some weight to his statements because of his qualifications, such as being a member of the bar. But if we were to ask other bar members to decide independently of each other whether the defendant committed a crime, would they converge on the same answer? If not, then why should we listen to him, as opposed to someone else with the same credentials? When an expert cites their credentials in support of an opinion, if it's not true that other experts with the same credentials would back them up on that opinion, I don't think people realize the extent to which there is no there there.

So in the survey, I described the man's alleged actions and the Tennessee statute, and asked people if they thought he had violated the law. I also asked respondents to rate their math skills as "Excellent"/"Very good"/"Good"/"Fair"/"Poor" and to rate their English/composition skills as "Excellent"/"Very good"/"Good"/"Fair"/"Poor". The survey was posted on the Amazon Mechanical Turk site, where you can post "tasks" for people to complete in exchange for small payments of, say, 25 cents apiece. Some companies use this for grunt work (like hiring people to review user-submitted profile photos to make sure they don't contain nudity), but I use the site mainly to conduct surveys.

I think it's unlikely that the Mechanical Turk users are a representative cross-section of the population, but I use it more to find significant relative differences between demographic groups. If 60% of women on the site answer a question one way and 80% of men answer it the other way, that probably suggests that in a real cross-sectional survey of the population, men and women would largely disagree on the answer as well. (The alternative would be that the kind of men and women who use Mechanical Turk are predisposed to answer the question differently along gender lines in a way that average men and women are not, but that seems unlikely.)

For this survey, I offered users 25 cents apiece for completing this survey and collected 127 responses. The results in a nutshell:

1. About two-thirds of all respondents (85 out of 127) said that the man did violate the law.
2. However, among the respondents who rated their own math skills as "Excellent", only 44% (12 out of 27) said he violated the law, and 56% (15 out of 27) said that he did not. Out of all ten ability groupings (five different ability groupings for math, from "Excellent" to "Poor", and five for English), this was the only group where a majority said that the defendant didn't violate the statute.
3. Respondents who self-rated their English/composition skills as "Excellent", were also more likely than average to vote that the man did not violate the law, but a majority of them still voted that he did.

These results are significant at the 99% level, which you can check using an online statistical significance calculator. In other words, despite the modest sample size, the answers given by the respondents with self-rated "excellent" math skills are so starkly different from everyone else's, that there's less than a 1 in 100 chance that the difference is due to coincidence. Almost certainly, something about mathematical ability is correlated with a person's likelihood of giving the "not guilty" answer. (At this point I'm going to give in to my bias and hereinafter refer to that as the "right answer.")

Furthermore, while respondents with "excellent" English/composition skills were also more likely than average to get the right answer (a difference that is also significant at the 99% level, given the collected data), they were considerably less likely to do so, than the users with self-reported "excellent" math skills (again, significant at the 99% level). I tabulated all the responses.

If I could afford to pay a larger sample, I would investigate whether the effect of "excellent" English/composition skills disappears entirely when you control for math skills. In other words, it's possible that the people with excellent English/composition skills were more likely than average to get the right answer, but only insofar as their English/composition skills were correlated with excellent math ability — and maybe people with "excellent" English/composition skills, but only average math ability, score no better than the average respondents.

One thing that jumps out at me: Even though 44% of the 27 people with "excellent" math skills said the man did violate the law, when you look at the 58 people who self-reported "very good" math skills, 74% of them said he violated the law. This would appear to confound my original hypothesis that good math skills lead people to converge on the correct answer. But I suspect that many people with self-reported "very good" math grades were probably just good students who studied hard and did the practice problems and got good grades in math, but without necessarily having the insight that makes someone an "excellent" math student. Without that insight, there was no reason to expect them to be better than average at answering a question that has no resemblance to their textbook's practice problems.

In fact, I suspect that many of the people who self-reported their math skills as "excellent", and who still answered "yes" to the question of whether the man violated the law, probably fell into that studious-but-not-insightful category as well. It would be interesting to test whether if you required respondents to actually answer a math question — not a standard textbook question, but a tricky question that required people to demonstrate an understanding of what is actually going on — if the correlation between correctly answering that question, and "correctly" answering the legal question, is even stronger.

But what I think is even more important than the correlation of the correct answer with "excellent" math ability, was the significantly lower correlation of the correct answer with "excellent" English skills. I've been saying for years that you can use excellent prose to defend an illogical idea, or you can use poorly crafted prose to defend a good idea, and so if you care about the quality of an idea and its impact on the real world, you have to look at the substance of an argument, not the style. Economics professor Steven Landsburg writes in his forthcoming philosophy book The Big Questions,

The bane of a college professor's existence is the student who has been taught in a writing course that there is such a thing as good writing, independent of having something to say. Students turn in well-organized grammatically correct prose, with the occasional stylistic flourish in lieu of any logical argument, and don't understand why they've earned grades of zero.

I call such people "vocabulemics", who seem to think the purpose of a discussion is to vomit up as many SAT vocab prep words as possible, rather than to form a coherent point. I've tried, and I can't think of any coherent point that could be made in order to argue that the Miley photoshopper really did violate the Tennessee law.

If you're still unconvinced by the results of a survey of mathletes, consider that they do match up well with the comments provided to me by Mark Rasch, a lawyer and computer security specialist with Secure IT Experts and the former head of the Department of Justice Computer Crimes Unit:

First, an image of a minor engaged in simulated sexual activity is not the same as a simulated minor engaged in sexual activity... In other words, if you posed actual minors, nude, and made it look like they were having sex, it would be a crime, even though there was no "actual" sexual activity. In most other contexts, when the legislature says "simulated sexual activity" they mean real people engaged in what appears to be sex. The government is trying to apply this theory to real sex but simulated minors. I don't think that passes statutory muster.. its not what the statute prohibits... Under that rationale, if you had, for example, a picture of two dogs mating, and glued pictures of kids on the dogs faces, this would be "simulated sexual activity" but would not be prosecutable. Where do you draw the line? Under federal law, you typically draw the line at the use and posing of real kids.

Depending on how you look at it, you may think that this opinion from credentialed expert Mr. Rasch, vindicates the opinion of the math aficionados who voted that the defendant did not violate the law. I think it's the other way around — the fact that this answer was correlated in the survey responses with mathematical ability, vindicates the opinion of Mr. Rasch.

ZeXx86 writes "ArenaLive is a new open source game based on the well-known OpenArena. Its aim is to become an open-source alternative to id Software's QuakeLive. The main idea is to make a game available in your web browser. So far, the game is playable and provides player stats, straight-forward settings for your account in a web browser and, of course, loads of fun with your friends. At the moment, it is available only for 32/64bit Mozilla Firefox on GNU/Linux, however, support for other platforms and browsers is coming soon. The game is licensed under GNU/GPL2. It's still in an early development stage, so players and developers both are welcome to join."

Hugh Pickens writes "Launched in May, BBC reports that Europe's Planck observatory has reached its operating temperature, a staggering minus 273.05C — just a tenth of a degree above what scientists term "absolute zero." and although laboratory set-ups have got closer to absolute zero than Planck, researchers say it is unlikely there is anywhere in space currently that is colder than their astronomical satellite. This frigidity should ensure the bolometers will be at their most sensitive as they look for variations in the temperature of the Cosmic Microwave Background (CMB) that are about a million times smaller than one degree — comparable to measuring from Earth the heat produced by a rabbit sitting on the Moon. Planck has been sent to an observation position around the second Lagrange point of the Sun-Earth system, L2, some 1.5 million km from Earth and Planck will help provide answers to one of the most important sets of questions asked in modern science — how did the Universe begin, how did it evolve to the state we observe today, and how will it continue to evolve in the future. Planck's objectives include mapping of Cosmic Microwave Background anisotropies with improved sensitivity and angular resolution, determination of the Hubble constant, testing inflationary models of the early Universe, and measuring amplitude of structures in Cosmic Microwave Background. 'We will be probing regimes that have never been studied before where the physics is very, very uncertain,' says Planck investigator Professor George Efstathiou from Cambridge University. 'It's possible we could find a signature from before the Big Bang; or it's possible we could find the signature of another Universe and then we'd have experimental evidence that we are part of a multi-verse.'"

An anonymous reader writes "According to Wired, 'A federal judge on Thursday overturned guilty verdicts against Lori Drew, and issued a directed acquittal on the three misdemeanor charges.'" A similar story in the L.A. Times notes that "The decision by US District Judge George H. Wu will not become final until his written ruling is filed, probably next week." Update: 07/02 21:15 GMT by T : For those not following, Lori Drew's three convictions sprang from charges of online harassment of Megan Meier, a Missouri teenager whose suicide was linked to Drew's actions.

Attila Dimedici writes "A code expert just cracked a code used by a friend of Thomas Jefferson in a letter written to Jefferson some 200 years ago. This code is fairly easy to crack using a computer, but extremely difficult without one. I think it would have been much harder if the author had not included an indication as to what code algorithm he used in the letter accompanying the coded message."

Hugh Pickens writes "The Salt Lake City Tribune reports that the National Security Agency will be building a one million square foot data center at Utah's Camp Williams. The NSA's heavily automated computerized operations have for years been based at Fort Meade, Maryland, but the agency began looking to decentralize its efforts following the terrorist attacks of Sept. 11, 2001 and accelerated their search after the Baltimore Sun reported that the NSA — Baltimore Gas & Electric's biggest customer — had maxed out the local grid and could not bring online several supercomputers it needed to expand its operations. The agency got a taste of the potential for trouble January 24, 2000, when an information overload, rather than a power shortage, caused the NSA's first-ever network crash, taking the agency 3 1/2 days to resume operations. The new data center in Utah will require at least 65 megawatts of power — about the same amount used by every home in Salt Lake City — so a separate power substation will have to be built at Camp Williams to sustain that demand. 'They were looking at secure sites, where there could be a natural nexus between organizations and where space was available,' says Col. Scott Olson, the Utah National Guard's legislative liaison. NSA officials, who have a long-standing relationship with Utah based on the state Guard's unique linguist units, approached state officials about finding land in the state on which to build an additional data center. 'The stars just kind of came into alignment. We could provide them everything they need.'"

KentuckyFC writes "One of the biggest puzzles of astrobiology is the origin of the Earth's oceans and atmosphere. One favored theory is that our water is the leftovers from a bombardment of comets early in Earth's history. But the ratio of hydrogen and deuterium in the oceans doesn't match the ratio in the four comets measured so far (Halley's, Hyakutake, Hale-Bopp and C/2002 T7 LINEAR). Now a new analysis of the ratio of nitrogen-14 and 15 isotopes in these comets and on Earth places new limits on how much of our environment could have come from comets. On the one hand, the astronomers who did the work say that no more than a few percent of Earth's water could have come from comets. But on the other, they say that the ratio of nitrogen isotopes in these comets almost exactly matches the ratio in Earth's atmosphere. That suggests that while Earth's oceans must have come from somewhere else, Earth's early atmosphere was probably seeded by comets."

KentuckyFC writes "One of the biggest puzzles of astrobiology is the origin of the Earth's oceans and atmosphere. One favored theory is that our water is the leftovers from a bombardment of comets early in Earth's history. But the ratio of hydrogen and deuterium in the oceans doesn't match the ratio in the four comets measured so far (Halley's, Hyakutake, Hale-Bopp and C/2002 T7 LINEAR). Now a new analysis of the ratio of nitrogen-14 and 15 isotopes in these comets and on Earth places new limits on how much of our environment could have come from comets. On the one hand, the astronomers who did the work say that no more than a few percent of Earth's water could have come from comets. But on the other, they say that the ratio of nitrogen isotopes in these comets almost exactly matches the ratio in Earth's atmosphere. That suggests that while Earth's oceans must have come from somewhere else, Earth's early atmosphere was probably seeded by comets."

KentuckyFC writes "One of the biggest puzzles of astrobiology is the origin of the Earth's oceans and atmosphere. One favored theory is that our water is the leftovers from a bombardment of comets early in Earth's history. But the ratio of hydrogen and deuterium in the oceans doesn't match the ratio in the four comets measured so far (Halley's, Hyakutake, Hale-Bopp and C/2002 T7 LINEAR). Now a new analysis of the ratio of nitrogen-14 and 15 isotopes in these comets and on Earth places new limits on how much of our environment could have come from comets. On the one hand, the astronomers who did the work say that no more than a few percent of Earth's water could have come from comets. But on the other, they say that the ratio of nitrogen isotopes in these comets almost exactly matches the ratio in Earth's atmosphere. That suggests that while Earth's oceans must have come from somewhere else, Earth's early atmosphere was probably seeded by comets."

IamTheRealMike writes "It's been a few months since we last checked in on how the Blu-Ray group was doing in their fight against piracy. In December 2008, a new generation of BD+ programs had stopped both SlySoft AnyDVD HD and the open source effort at Doom9. At the start of January, SlySoft released an update that could handle the new BD+ programs, meaning that Blu-Ray discs could not be decrypted for a period of time about the same length as SlySoft's worst case scenario. The BD+ retaliation was swift, but largely ineffective, consisting of a unique program for every Blu-Ray master. Users had to upload log files to SlySoft for every new movie/region. They would then support that unique variant in their next update, usually released a few days later. Despite that, the open source effort never did manage to progress beyond the Winter 2008 programs and is currently stalled completely; SlySoft is the only group remaining. This situation remained for several months, but starting around the same time as Paramount joined Fox in licensing BD+, a new set of programs came out which have once again made Blu-Ray discs unrippable. There are currently 19 movies that cannot be decrypted. It appears neither side is able to decisively gain the upper hand, but one thing seems clear — only full-time, for-profit professionals are able to consistently beat BD+."

An anonymous reader brings us another bump on the bumpy road of Chris Anderson's new book, Free: The Future of a Radical Price, which we discussed a week ago. Now the Times (UK) is reporting on a dustup between Anderson and Malcolm Gladwell, author of The Tipping Point, Blink, and Outliers. Recently Gladwell reviewed, or rather deconstructed, Anderson's book in the New Yorker. Anderson has responded with a blog post that addresses some, but by no means all, of Gladwell's criticisms, and The Times is inclined to award the match to Gladwell on points. Although their reviewer didn't notice that Gladwell, in setting up the idea of "Free" as a straw man, omitted a critical half of Stewart Brand's seminal quote.

An anonymous reader brings us another bump on the bumpy road of Chris Anderson's new book, Free: The Future of a Radical Price, which we discussed a week ago. Now the Times (UK) is reporting on a dustup between Anderson and Malcolm Gladwell, author of The Tipping Point, Blink, and Outliers. Recently Gladwell reviewed, or rather deconstructed, Anderson's book in the New Yorker. Anderson has responded with a blog post that addresses some, but by no means all, of Gladwell's criticisms, and The Times is inclined to award the match to Gladwell on points. Although their reviewer didn't notice that Gladwell, in setting up the idea of "Free" as a straw man, omitted a critical half of Stewart Brand's seminal quote.

As IBM continues to build out Jazz, their community-oriented development site, technical lead Dr. Erich Gamma has offered to answer questions about Jazz or anything else in his realm of expertise. Among his many accomplishments, Erich worked with Kent Beck on the Java unit testing framework, JUnit, and was actively involved until JUnit 4. Dr. Gamma was also one of the fathers of Eclipse and the original lead on the Eclipse Java development tools. Feel free to fire away on Eclipse, Java, JUnit, the Rational suite, the Jazz site, or anything else you think Erich might be able to answer. Usual Slashdot interview rules apply. Update 19:05 GMT by SM: As pointed out by user Hop-Frog, Dr. Gamma is also co-author of the influential computer science textbook Design Patterns: Elements of Reusable Object-Oriented Software.

Dr_Ken writes "According to this news story in Ananova, the Indian Defense Ministry is looking into a cheaper and simpler form of tear gas agent for riot dispersal and crowd control. From the article: 'Defense researchers say the idea is to replace explosives in small hand grenades with a certain variety of red chili to immobilize people without killing them, reports the BBC. The chili, known as Bhut Jolokia, is said to be 1,000 times hotter than commonly used kitchen chili. Probably much cheaper to fabricate than conventional CN or CS gases and way less toxic, too.'"

coondoggie writes "If you can squish all the processing power of, say, an IBM Roadrunner supercomputer inside a 19-inch box and make it run on about 60 kilowatts of electricity, the government wants to talk to you. The extreme scientists at the Defense Advanced Research Projects Agency this week issued a call for research that might develop a super-small, super-efficient super beast of a computer. Specifically, DARPA's desires for Ubiquitous High Performance Computing (UHPC) will require a new system-wide technology approach including hardware and software co-design to minimize energy dissipation per operation and maximize energy efficiency, with a 50GFLOPS per watt goal."

puroresu writes "I currently reside in the UK. In recent years I've seen privacy, free expression and civil liberties steadily eroded, and I can't see anything changing for the better any time soon. With people being banned from the UK for expressing (admittedly reprehensible) opinions, the continuing efforts to implement mandatory ID cards and the prospect of a Conservative government in the near future, I'm seriously considering emigrating to a less restrictive country. Which countries would you recommend in terms of freedom and privacy? Distance is not an issue, though a reasonable level of stability and provision of public services would be a bonus."

BBCWatcher writes "Microsoft has long claimed that the mainframe is dead, slain by the company's Windows monopoly. Yet, apparently without any mirror nearby, Microsoft is now complaining through the Microsoft-funded Computer & Communications Industry Association that not only are mainframes not dead, but IBM is so anticompetitive that governments should intervene in the hyper-competitive server market. The Wall Street Journal reports that Microsoft is worried that the trend toward cloud computing is introducing competition to the Windows franchise, favoring better-positioned companies including IBM and Cisco. HP now talks about almost nothing but the IBM mainframe, with no Tukwila CPUs to sell until 2010. The global recession is encouraging more mainframe adoption as businesses slash IT costs, dominated by labor costs, and improve business execution. In 2008, IBM mainframe revenues rose 12.5% even whilst mainframe prices fell. (IBM shipped 25% more mainframe capacity than in 2007. Other server sales reports are not so good.) IBM mainframes can run multiple operating systems concurrently, including Linux and, more recently, OpenSolaris."

Xiroth writes "The Australian Federal Communications Ministry has confirmed that they intend to use the planned filter to block the download of games that have been refused by Australia's classification authority, the OFLC. As an Electronic Frontiers Australia spokesman noted, 'This is confirmation that the scope of the mandatory censorship scheme will keep on creeping.'"

Eric_S writes "Anybody who managed to get a decent city going in Sim City 2000 remembers the microwave power plant; now it seems like a real-world equivalent might be coming up on the horizon. The Pacific Gas and Electricity Company, per this 'interview' with the CEO of Solaren on their affiliated site, announced PG&E's plans to buy 200MW of base-load power from a Solaren beamed space solar power plant by 2016." I wish the skeptic in me would be quiet.