Information Security magazine have a cover feature on the same subject, specific articles are here, here , here and here. I haven't read my paper copy yet but they're usually fairly good quality (well, better than most trade press anyway.)
So when Bronson steps back so say we need to fight the urge to justify ourselves by our status, I think "who's 'we'? I never had that urge."
Hands up everyone who's heard themselves talking about work to friends or family saying "Well, what we did was..."
It's not WE unless you're self-employed or have a significant stake in the enterprise. It's a super-liminal strategy that ensures we - we employees - identify our own wellbeing and status with that of the organisation that happens to pay our salaries.
For those rare few self-actualisers who actually do control their own professional life, perhaps along with a few other close friends: congratulations.
How much effort would it have been to insert the words "first-person shooter" (or IP server collection, or DNS tools, or BSD filesystem utilities, or... )
This is not an issue. The exploit uses existing, well-known vulns.in MS' IE. Nothing to see here. Move along, move along, read the Full Disclosure list for further background.
Despite the BBC having a story on this (the first place I learned of it: I had a looong lie-in this morning, er, afternoon) that incidents.org which collates scanning activity worldwide has "status: green" showing with a small note that "some scanning by new SQL Server worm causing some slowdowns" - not exactly apocalyptic, huh? And here in the UK (My ISP) everything looks fine. Slashdot's faster than usual if anything... sounds like a storm in a teacup to me.
"THE COUNTRY WAS FOUNDED ON THE PRINCIPLE THAT THE PRIMARY ROLE OF THE GOVERNMENT IS TO PROTECT PROPERTY FROM THE MAJORITY - AND SO IT REMAINS." - Chomsky, as sampled on the #1 hit single "The Masses Against the Classes" by the Manic Street Preachers.
Look... the U.S. gubment is rather fucked. Both parties are full of crooked bastards who are only looking out for themselves. BUT, to say that Bush is ignoring the unemployed, suspending our rights, and instituting a Christian version of the Taliban sounds... well... VERY BIASED, IMHO.
Huh??
(a) if you accept that all politicians are fucked, crooked bastards,and that Bush is a politician, then is there really any inconsistency with asserting that he's ignoring the unemployed, etc etc?
(b) if you haven't noticed that Dubya's the worst president the USA's had since... well, Nixon at the very LEAST, then, dude, wake up and smell the fsckin' coffee! He's about to take on the entire world. The USA's closest allies are going to denounce the Iraq war as a blatant trampelling of International law. Tony Blair, the stupid bastard, is probably going to lose office over his idiotic support because of the "special relationship" -- you think *any* UK government is going to just obey American orders again? ever??
Personally, I'm hoping that the nascent movement for international sanctions gets a good head of steam. It's time you all* realised that you're not the only people on this planet that matter.
* Yes, I realise that the actions of the American government, particularly the current junta, do not necessarily represent mainstream American opinions or beliefs. Yes, I realise you are not all the ignorant, arrogant, fat-headed, slackjawed, trigger-happy, greedy, selfish imperialist tossers Bush represents you to be. And yes, as you've no doubt realised by now if you're grinding your teeth at my holier-than-thou snobbery, I'm European;)
"Well I hope you live long now, I pray the Lord your soul to keep I think I'll be going before we fold our arms and start to weep I never thought for a moment that human life could be so cheap 'Cos when they finally put you in the ground They'll stand there laughing and tramp the dirt down"
>First of all, Mozilla doesn't understand UNC paths. If your GPO >redirects %appdata%, you're screwed. Quit now.
Or, you could just map the same network drive on all 50 clients using their login scripts, then point mozilla at drive R or whatever. Can;t see any reason that wouldn't work. Saying "you're screwed, quit now" is a sign of a Bad Attitude, and the Stark Fist of Removal will be coming for you soon.
You may laugh, but RISKS digest reported a computer that drove a laser for correcting shortsighedness by gently vapourising a shallow layer of the surface of the victi^h^h patient's eyeball was running Windows... Windows 95 at that! What's worse the technician casually hit ESCAPE toi clear the screen whenever a warning dialog popped up, without bothering to read what it said. I'm damn glad I've got 20/20 vision!
Friends don't let friends have their eyeballs vapourised by lasers driven by Windows 95...
Chapter 1 was removed from the book by Kevin's publisher. It gives an interesting insight into HIS perspective on how he came to be known as Public Enemy Number 1 on the Internet, the feud with John Markoff, the Takedown film, as well as how he got into social engineering in the first place (getting free rides on the bus...)
I think it's interesting, and I'm glad it was posted, although my first reaction was the same as everyone else, BOLLOCKS! But as lots of other people, including the mighty Register have pointed out, Gobbles has a good record for making apparently silly claims, letting people scoff, then proving them wrong. I think the real story is "Gobbles makes outraegous claim, what the hell is he up to?"
Speculation: Theoretically, I guess it's possible that there's an overflow in a library widely used in mp3 players. Remember the SMTP vulnerabilities last year, or the zip library hole that affected everyone from RedHat to Microsoft? Heh, that's the trouble with those pesky BSD licensed libs;) Suppose Gobbles did find a zero-day hole. Remember that 95% of p2p users are going to be Windows users, so they're probably all using the same OS libs in their clients - for network access, say, if not for mp3 playback. Bear in mind that this worm would be pretty silent - it wouldn't be throwing rude messages up on the screen, it'd be sneaking around and trying to hide itself... Suppose it was only released in the wild a week ago. Perhaps it used the Kazaa auto-updating features to distribute itself over the network . Hmmm, this is actually starting to sound feasible. Now, obviously if the RIAA hav done this, then they're in deep, deep trouble: even the copyright mafia and Bush junta would have a problem trying to make out that this is anything but deeply criminal action. Posit: Gobbles, or another ethically challenged researcher, decides to try to discredit the RIAA... what better way to do it? Can you imagine the 9o'clock TV news headlines if there turns out to be a whiff of fire behind the smoke?
If someone logs into your (wide-open, no password root shell) server without your permission, that's trespass.
If someone hacks your server to get in, that's trespass and breaking-and-entering.
If someone changes your web-site, etc., while they're there... that's destruction of property.
Wrong, wrong, and wrong again. Trespass is physically entering someone else's property. breaking-and-entering is physically damaging someone else's property to gain entry. And if changing a website is destruction of property... tell me, what have you destroyed? Some digital bits that exist only as flipped transistors on a microchip, or magnetic domains a zillionth of an inch across? Give me a break. Those things are what we call analogies. And arguing by analogy means you lose.
Hello, story submitter here. Disclaimer: as it happens, I'm an info-sec professional myself - as a matter of fact, I'm a pen-tester:)
Firstly, apologies for the needlessly trollish Guantanamo refs... I was so sure it wouldn't get posted anyway, and I was casting around for the other end of the spectrum from the punishment for graffiti, and the Amnesty report was just in the news over here in the UK, so...
That said, I find it quite depressing the number of people saying "These people are evil!! We must execute them all!!" Yes, having a site cracked costs a lot of money, as does preventing it from happening in the first place. Yes, you'll have to pull the box, reformat the disks and restore from backups, and check out anythign else the cracker might have wormed his way into at the same time (you HAVE got those MD5 checksums burned to CD, right?) And this is a serious PITA, especially if you, the admin, have been trying to get management attention for the fact that your site is an accident waiting to happen. And now you get to work all night/weekend, because some PHB couldn't see the point of putting resources into proactive security measures.
There are several reasons why I do NOT think this justifies locking the kid up and throwing away the key. Firstly, YES, if you run a major site on a shoestring, don't bother patching your server, running an IDS and firewall, or even scanning yourself with Nessus or nmap, then YOU WILL BE OWNED. You might say that you don't deserve it. Well you don't deserved to be mugged if you go touring crackhouses with a $2000 camcorder and laptop, but what the fsck do you EXPECT to happen? Secondly, assuming the attackers are the proverbial greenhaired 15 yo's from Buttfuck, Nebraska, a disproportionate sentence is destroying someone's life for a foolish mistake. Anyone male here who didn't do something bloody stupid at some point during their childhood or adolescence? Hell I went through a brief stage of shoplifting. Got caught, had my arse paddled and a serious bollocking, didn't do it again. Testing boundaries and trying alternative identities out is part of growing up. Thirdly, you're destroying the potential for good in later life. The fact is that many of the leading lights of the security scene wouldn't be around if they'd been caught & gaoled for ten years in earlier life. I'm not mentioning names, but they know who they are;) All you're doing is getting "revenge" - which is no kind of justice - by destroying the life of someone who was probably too young to know any better. No doubt many people reading this are thinking, "Ah, but I didn't go out and 0wn cnn.com!" No, but I bet you swapped games at school, or taped CDs from friends, huh? Right, but I'm sure you can see that the IP mafia want to make sharing == piracy == cracking == terrorism... and that in a few years time, you're going to have kids of your own. Want to bet they'll do something out of order at some point whilst growing up? Whaddya going to do, chain them up in the cellar?
The final reason not to throw the 15 yo's in gaol is that it'll achieve sweet F.A.. No matter how many American kids get slung in gaol, the scans and DoSes and script kiddies will keep on coming and you know what? that's a GOOD thing. It keeps sites secure, it keeps people pushing software to be more secure, and that all makes it harder for the real villains - the ID thieves, the industrial espionage and extortion types and so on. Oh yeah, and it pays my rent;)
Of course, I'm specifically talking about under-age malcontents here. If you're, say, 25, and know what the consequences of your actions are, the difference between right and wrong , etc, and you sneak into a creditcard database for the purpose of id theft or extortion from the company , then hell yes, you're going to do some time and quite right too. And you'll never get work as a sysadmin again. Hmmmm, perhaps there's some cultural relativism at work here... in the UK, if you (genuinely) can't distinguish right and wrong, you're a sociopath, and you belong in a secure hospital. If you're underage, though, you're given the benefit of the doubt. Eg there was a cause celebre perhaps 6 or 8 years ago where two boys, aged 13 or 14, bullied a 4 year old kid, threw rocks at him and eventually murdered him. They're eligible for release soon - quite right in my view.
Oh yeah, and the US are rapidly burning through the goodwill we hold towards you, in Europe at least - the illegal incarceration at Guantanamo, the Bush/Cheney/Ashcroft junta's blatant wars of aggression against people who look at you funny, the willful destruction of human rights in your own country,.. the good news is that, I think and hope, most of us in Europe can distinguish between the actions of your corporations, government and corrupted legal system, and individual people who just happen to be citizens of the country. (If Bush gets re-elected, though... this might change:( )
BT has been doing this in the UK for ages - I think I saw the first ones (in Liverpool St station, London) in late 1999 or early 2000. There's one on the corner of my street now. (Brixton.)
This sounds great! Please do let me know when you're ready to release. Oh wait, you mean you put all that effort into listing what you want from Linux, and that you think will be the unstoppable distro that will finally wipe the floor with Microsoft, but can't be bothered to contribute to an existing distro project or start your own? Oh well. "If wishes were fishes we'd all be fat" or what-not.
>I don't think that the forces of evil can force >every PC everywhere to have DRM.
But they don't have to. Consider what will happen if every PC sold with Windows - not just home systems, but corporate desktops too - are unable ever to boot a Free OS. For those enterprises or homes to switch away from Windows, they will be forced to replace all their hardware. And you can guess how likely that is.
Consider then that PC manufacturers will have the choice of producing "Untrusted" mobos / BIOS - but that they'll have to do so *as well as* producing Palladium-crippled products (as the vast majority of their customers, in America and Europe anyway, will be buying same.) OK, some niche companies may offer unrestricted hardware for specialised vertical markets, such as those governments you mentioned. How many of these boxes do you think will be in PC World, Dixons, or whatever the US equivalent of these High St chains are?
Palladium is a brilliant strategy from the Microsoft "World Domination" playbook. No wonder they're backing it so strongly. As far as the general public are concerned it's a pure win - it's only those of us in the Free/Open/ *nix communities who have the slightest idea why this will be such a catastrophic technology.
> Hasn't your lawyer advised you not to talk about > this case? What if you mis-say something and they > nab you on it?
I don't have a lawyer; I'm not wasting my precious disposable income on defending such a ludicrous and blatantly meritless case, esp. when I'm in the UK. Californian law doesn't run here. I've done nothing wrong; if they think I have - bring it on!
Jeff's a rather strange chap. There's a reason why his blog used to be called "Yak's Zoo"... that said, I've been reading his ramblings since the late 80s (when he first got an Apple and started producing a newsletter - I especially remember his lengthy description of hiking up Machu Pichu at dawn *soley* to watch the sun rise whilst listening to Pink Floyd on his Discman...
A shame that the relaunch of Llamasoft doesn't seem to have taken off. Anyone else remember Psychedelia? I was into that long before I even *saw* a spliff...
Slashdot Mirror
Information Security magazine have a cover feature on the same subject, specific articles are here, here , here and here. I haven't read my paper copy yet but they're usually fairly good quality (well, better than most trade press anyway.)
No, I have no connection with them.
Lordy lord, *two stories later*, how DO you guys do it???? Enquiring minds want to know!
This was a show-stopper for us only last week - trying to find a reasonably easy way to get Samba supporting NT LANManager v2 authentication? Anyone?
yet another load of snakeoil, nothing to see here, move along please... read Bruce Schneier's CryptoGram Newsletter... drink beer! Eat food! etc etc
Hands up everyone who's heard themselves talking about work to friends or family saying "Well, what we did was..."
It's not WE unless you're self-employed or have a significant stake in the enterprise. It's a super-liminal strategy that ensures we - we employees - identify our own wellbeing and status with that of the organisation that happens to pay our salaries.
For those rare few self-actualisers who actually do control their own professional life, perhaps along with a few other close friends: congratulations.
How much effort would it have been to insert the words "first-person shooter" (or IP server collection, or DNS tools, or BSD filesystem utilities, or... )
sigh.
This is not an issue. The exploit uses existing, well-known vulns.in MS' IE. Nothing to see here. Move along, move along, read the Full Disclosure list for further background.
Despite the BBC having a story on this (the first place I learned of it: I had a looong lie-in this morning, er, afternoon) that incidents.org which collates scanning activity worldwide has "status: green" showing with a small note that "some scanning by new SQL Server worm causing some slowdowns" - not exactly apocalyptic, huh? And here in the UK (My ISP) everything looks fine. Slashdot's faster than usual if anything... sounds like a storm in a teacup to me.
> The government's primary job is defense,
Wrong. Noam Chomsky said it best:
"THE COUNTRY WAS FOUNDED ON THE PRINCIPLE THAT THE PRIMARY ROLE OF THE GOVERNMENT IS TO PROTECT PROPERTY FROM THE MAJORITY - AND SO IT REMAINS." - Chomsky, as sampled on the #1 hit single "The Masses Against the Classes" by the Manic Street Preachers.
Look... the U.S. gubment is rather fucked. Both parties are full of crooked bastards who are only looking out for themselves. BUT, to say that Bush is ignoring the unemployed, suspending our rights, and instituting a Christian version of the Taliban sounds... well... VERY BIASED, IMHO.
;)
Huh??
(a) if you accept that all politicians are fucked, crooked bastards,and that Bush is a politician, then is there really any inconsistency with asserting that he's ignoring the unemployed, etc etc?
(b) if you haven't noticed that Dubya's the worst president the USA's had since... well, Nixon at the very LEAST, then, dude, wake up and smell the fsckin' coffee! He's about to take on the entire world. The USA's closest allies are going to denounce the Iraq war as a blatant trampelling of International law. Tony Blair, the stupid bastard, is probably going to lose office over his idiotic support because of the "special relationship" -- you think *any* UK government is going to just obey American orders again? ever??
Personally, I'm hoping that the nascent movement for international sanctions gets a good head of steam. It's time you all* realised that you're not the only people on this planet that matter.
* Yes, I realise that the actions of the American government, particularly the current junta, do not necessarily represent mainstream American opinions or beliefs. Yes, I realise you are not all the ignorant, arrogant, fat-headed, slackjawed, trigger-happy, greedy, selfish imperialist tossers Bush represents you to be. And yes, as you've no doubt realised by now if you're grinding your teeth at my holier-than-thou snobbery, I'm European
"Well I hope you live long now, I pray the Lord your soul to keep
I think I'll be going before we fold our arms and start to weep
I never thought for a moment that human life could be so cheap
'Cos when they finally put you in the ground
They'll stand there laughing and tramp the dirt down"
>redirects %appdata%, you're screwed. Quit now.
Or, you could just map the same network drive on all 50 clients using their login scripts, then point mozilla at drive R or whatever. Can;t see any reason that wouldn't work. Saying "you're screwed, quit now" is a sign of a Bad Attitude, and the Stark Fist of Removal will be coming for you soon.
You may laugh, but RISKS digest reported a computer that drove a laser for correcting shortsighedness by gently vapourising a shallow layer of the surface of the victi^h^h patient's eyeball was running Windows... Windows 95 at that! What's worse the technician casually hit ESCAPE toi clear the screen whenever a warning dialog popped up, without bothering to read what it said. I'm damn glad I've got 20/20 vision!
Friends don't let friends have their eyeballs vapourised by lasers driven by Windows 95...
SchneierZilla vs MegaMullen? No contest!
Chapter 1 was removed from the book by Kevin's publisher. It gives an interesting insight into HIS perspective on how he came to be known as Public Enemy Number 1 on the Internet, the feud with John Markoff, the Takedown film, as well as how he got into social engineering in the first place (getting free rides on the bus...)
The Register have it here.
I think it's interesting, and I'm glad it was posted, although my first reaction was the same as everyone else, BOLLOCKS! But as lots of other people, including the mighty Register have pointed out, Gobbles has a good record for making apparently silly claims, letting people scoff, then proving them wrong. I think the real story is "Gobbles makes outraegous claim, what the hell is he up to?"
Speculation: Theoretically, I guess it's possible that there's an overflow in a library widely used in mp3 players. Remember the SMTP vulnerabilities last year, or the zip library hole that affected everyone from RedHat to Microsoft? Heh, that's the trouble with those pesky BSD licensed libs ;) Suppose Gobbles did find a zero-day hole. Remember that 95% of p2p users are going to be Windows users, so they're probably all using the same OS libs in their clients - for network access, say, if not for mp3 playback. Bear in mind that this worm would be pretty silent - it wouldn't be throwing rude messages up on the screen, it'd be sneaking around and trying to hide itself... Suppose it was only released in the wild a week ago. Perhaps it used the Kazaa auto-updating features to distribute itself over the network . Hmmm, this is actually starting to sound feasible. Now, obviously if the RIAA hav done this, then they're in deep, deep trouble: even the copyright mafia and Bush junta would have a problem trying to make out that this is anything but deeply criminal action. Posit: Gobbles, or another ethically challenged researcher, decides to try to discredit the RIAA... what better way to do it? Can you imagine the 9o'clock TV news headlines if there turns out to be a whiff of fire behind the smoke?
Wrong, wrong, and wrong again. Trespass is physically entering someone else's property. breaking-and-entering is physically damaging someone else's property to gain entry. And if changing a website is destruction of property... tell me, what have you destroyed? Some digital bits that exist only as flipped transistors on a microchip, or magnetic domains a zillionth of an inch across? Give me a break. Those things are what we call analogies. And arguing by analogy means you lose.
Thanks for playing.
Disclaimer: as it happens, I'm an info-sec professional myself - as a matter of fact, I'm a pen-tester
Firstly, apologies for the needlessly trollish Guantanamo refs... I was so sure it wouldn't get posted anyway, and I was casting around for the other end of the spectrum from the punishment for graffiti, and the Amnesty report was just in the news over here in the UK, so...
That said, I find it quite depressing the number of people saying "These people are evil!! We must execute them all!!" Yes, having a site cracked costs a lot of money, as does preventing it from happening in the first place. Yes, you'll have to pull the box, reformat the disks and restore from backups, and check out anythign else the cracker might have wormed his way into at the same time (you HAVE got those MD5 checksums burned to CD, right?) And this is a serious PITA, especially if you, the admin, have been trying to get management attention for the fact that your site is an accident waiting to happen. And now you get to work all night/weekend, because some PHB couldn't see the point of putting resources into proactive security measures.
There are several reasons why I do NOT think this justifies locking the kid up and throwing away the key. Firstly, YES, if you run a major site on a shoestring, don't bother patching your server, running an IDS and firewall, or even scanning yourself with Nessus or nmap, then YOU WILL BE OWNED. You might say that you don't deserve it. Well you don't deserved to be mugged if you go touring crackhouses with a $2000 camcorder and laptop, but what the fsck do you EXPECT to happen? Secondly, assuming the attackers are the proverbial greenhaired 15 yo's from Buttfuck, Nebraska, a disproportionate sentence is destroying someone's life for a foolish mistake. Anyone male here who didn't do something bloody stupid at some point during their childhood or adolescence? Hell I went through a brief stage of shoplifting. Got caught, had my arse paddled and a serious bollocking, didn't do it again. Testing boundaries and trying alternative identities out is part of growing up. Thirdly, you're destroying the potential for good in later life. The fact is that many of the leading lights of the security scene wouldn't be around if they'd been caught & gaoled for ten years in earlier life. I'm not mentioning names, but they know who they are ;) All you're doing is getting "revenge" - which is no kind of justice - by destroying the life of someone who was probably too young to know any better. No doubt many people reading this are thinking, "Ah, but I didn't go out and 0wn cnn.com!" No, but I bet you swapped games at school, or taped CDs from friends, huh? Right, but I'm sure you can see that the IP mafia want to make sharing == piracy == cracking == terrorism... and that in a few years time, you're going to have kids of your own. Want to bet they'll do something out of order at some point whilst growing up? Whaddya going to do, chain them up in the cellar?
The final reason not to throw the 15 yo's in gaol is that it'll achieve sweet F.A.. No matter how many American kids get slung in gaol, the scans and DoSes and script kiddies will keep on coming and you know what? that's a GOOD thing. It keeps sites secure, it keeps people pushing software to be more secure, and that all makes it harder for the real villains - the ID thieves, the industrial espionage and extortion types and so on. Oh yeah, and it pays my rent ;)
Of course, I'm specifically talking about under-age malcontents here. If you're, say, 25, and know what the consequences of your actions are, the difference between right and wrong , etc, and you sneak into a creditcard database for the purpose of id theft or extortion from the company , then hell yes, you're going to do some time and quite right too. And you'll never get work as a sysadmin again. Hmmmm, perhaps there's some cultural relativism at work here... in the UK, if you (genuinely) can't distinguish right and wrong, you're a sociopath, and you belong in a secure hospital. If you're underage, though, you're given the benefit of the doubt. Eg there was a cause celebre perhaps 6 or 8 years ago where two boys, aged 13 or 14, bullied a 4 year old kid, threw rocks at him and eventually murdered him. They're eligible for release soon - quite right in my view.
:( )
Oh yeah, and the US are rapidly burning through the goodwill we hold towards you, in Europe at least - the illegal incarceration at Guantanamo, the Bush/Cheney/Ashcroft junta's blatant wars of aggression against people who look at you funny, the willful destruction of human rights in your own country,.. the good news is that, I think and hope, most of us in Europe can distinguish between the actions of your corporations, government and corrupted legal system, and individual people who just happen to be citizens of the country. (If Bush gets re-elected, though... this might change
BT has been doing this in the UK for ages - I think I saw the first ones (in Liverpool St station, London) in late 1999 or early 2000. There's one on the corner of my street now. (Brixton.)
This sounds great! Please do let me know when you're ready to release. Oh wait, you mean you put all that effort into listing what you want from Linux, and that you think will be the unstoppable distro that will finally wipe the floor with Microsoft, but can't be bothered to contribute to an existing distro project or start your own? Oh well. "If wishes were fishes we'd all be fat" or what-not.
> Wait until 24 January. Announcement. Very good things.
>Something wonderful is about to happen.
This sounds promising... I'd be made up if he finally achieves some long-overdue fame & fortune!
>every PC everywhere to have DRM.
But they don't have to. Consider what will happen if every PC sold with Windows - not just home systems, but corporate desktops too - are unable ever to boot a Free OS. For those enterprises or homes to switch away from Windows, they will be forced to replace all their hardware. And you can guess how likely that is.
Consider then that PC manufacturers will have the choice of producing "Untrusted" mobos / BIOS - but that they'll have to do so *as well as* producing Palladium-crippled products (as the vast majority of their customers, in America and Europe anyway, will be buying same.) OK, some niche companies may offer unrestricted hardware for specialised vertical markets, such as those governments you mentioned. How many of these boxes do you think will be in PC World, Dixons, or whatever the US equivalent of these High St chains are?
Palladium is a brilliant strategy from the Microsoft "World Domination" playbook. No wonder they're backing it so strongly. As far as the general public are concerned it's a pure win - it's only those of us in the Free/Open/ *nix communities who have the slightest idea why this will be such a catastrophic technology.
> Hasn't your lawyer advised you not to talk about
> this case? What if you mis-say something and they > nab you on it?
I don't have a lawyer; I'm not wasting my precious disposable income on defending such a ludicrous and blatantly meritless case, esp. when I'm in the UK. Californian law doesn't run here. I've done nothing wrong; if they think I have - bring it on!
A shame that the relaunch of Llamasoft doesn't seem to have taken off. Anyone else remember Psychedelia? I was into that long before I even *saw* a spliff...