Sep 29

Metasploit on the iPhone:

Every process runs as root. MobileSafari, MobileMail, even the Calculator, all run with full root privileges. Any security flaw in any iPhone application can lead to a complete system compromise.

I really thought Apple had better software developers than that. I guess that explains Steve Jobs’ comments about it being impossible to provide a 3rd party SDK safely.

Yeah, if you made the incredibly dumb decision to have no security whatsoever in your mobile OS, then it’s impossible to support 3rd party applications safely.

More to the point, as soon as someone finds a security hole in Safari or Mail, that’s it—they will be able to pwn the entire system. I’d place bets that someone will find such a bug, sooner or later; and then we’ll see iPhone viruses and trojans spreading by e-mail or web.

Sep 25

WordPress 2.3 is out, with official tag support. I’ve just finished upgrading, and tags now work properly. I had to hack together some SQL + Ruby to convert everything, but it should all be done now.

Atom feeds and OpenID support should hopefully work as before; let me know if you notice anything strange. I’m going to test by replying to this…

Update: It works. And excitingly, you no longer have to hack code to get OpenID support working to and from LiveJournal.

Sep 24

How would you like a digital video camera that records 15fps video in 3GP format (QuickTime-compatible) direct to flash drive, is small enough to fit in a pack of gum, and has 33 hour capacity?

It’s currently $295. In less than 10 years cameras like this will be so cheap anyone will be able to afford one. Phones will be able to upload their video live to the Internet, in case of confiscation.  The future of ubiquitous surveillance is coming, whether you like it or not.

Sep 19

Senator Arlen Specter (R-PA) on Larry Craig:

“You don’t toss off, er, over, a friend of that duration … There’s been a lot of favorable talk about Larry in the cloakroom.”

About how everyone in the Senate thinks he’s a fine upstanding member, no doubt. Quoted in the Washington Post.

Sep 18

The amazing thing about World of Warcraft is that even if you’re a gamer, conversations about it sound like complete gibberish. And not the potentially interesting kind of gibberish, either.

Some quotes from the General forum Blizzard runs:

Won’t the S3 rating requirement encourage arena team selling? I mean someone could just have 1500 ratings for all of S2, wait for S3, buy a team that meets the rating requirement for the week. They would have the points and rating.

Fire Mages ouch, you got hit by a huge nerf bat with resilience, my resil alone takes off 10% of your total 20% average crit. So that gives you a measly 10% chance to crit on most decently geared fire mages so the High DPS glass cannon that was once fire mages is nothing but a PvE spec anymore. Without survivability you guys have it tough, especially with the armor nerf.

It would really help BGs if in AV HKs were worth more (except for Alliance at SH GY =) ). This would discourage a base race. The other 3 BGs needs HK honor cut way, way down. This would encourage people to actually go for objectives rather than HK farm.

It’s like D&D played over AIM by LOLcats.

Sep 15

When I moved in with rothko, we bought a vacuum cleaner. At the time we were living in a fully carpeted apartment in Malden, MA. Money was tight, so I did some research via Consumer Reports and bought a Sharp vacuum cleaner.

Unfortunately, I overlooked one detail. While excellent on carpets, the vacuum cleaner was entirely unsuitable for hard wood floors. After a couple of years we moved into an apartment with wood floors, and the Sharp took up residency in the basement. But I was loathe to part with it, because it was a perfectly good vacuum cleaner, and vacuum cleaners are expensive.

Then we moved to Texas. The faithful vacuum came with us. It’s still in fine working order, and we now have carpet again, which it does a good job of cleaning. But the problem is, we also have stairs. The trusty Sharp is about as suited to vacuuming stairs as a Dalek. And downstairs is wood floors again.

So for a while now, I’ve had plans to get a vacuum that actually does a good job of hard floors, stairs, and carpet.

Obviously the Dyson range appealed as soon as I saw it. But I heard that the early Dysons were heavy and awkward, and often unreliable. So I waited.

After a couple more years, the Dyson ball was launched, which was more maneuverable. Then this year, the Slim was launched in the USA. It has a smaller version of the ball mechanism in a vacuum that’s light enough to pick up and carry up and down stairs without my back hurting. It also seems as though the reliability issues have been dealt with.

Searching on Google, I saw ads for a company offering “Worst prices on Dyson”, asking “Don’t pick on us”. I wondered whether it was a mistake or a joke, clicked through, and discovered it was an independent retailer in Austin called ABC Vacuum Warehouse. It’s a store I must have driven past dozens of times without ever realizing it was there, partly because it’s in a nondescript shack-like building in front of a warehouse, and partly because the windows are all covered up with blinds so it looks like it has been abandoned. Inside is a small store filled with nothing but vacuum cleaners, accessories for vacuum cleaners, and spares for vacuum cleaners.

At the store’s suggestion we took a look at a Sebo vacuum cleaner as well as the Dyson range. Fine German engineering, but there were a few things I didn’t like. First up, it uses bags and filters. Secondly, the main upright piece detaches from the brush head for cleaning stairs, which sounds good, but I could see it would be annoying and require a lot of bending over to detach and re-attach it. I prefer the Dyson wand, which doesn’t require any bending over at all.

So, DC-18. I took it for a thorough trip around the house this afternoon. It does indeed do a good job on all floors; it’s great on the hard wood floor, will remove the gifts of the pube fairy from the tiled bathrooms, and does at least as good a job as the Sharp on carpet. Time will tell how reliable it is, but so far I’m satisfied: I ended up with a full cylinder of hairy filth.

Sep 14

I just went to weigh myself, and a tiny gecko shot out from under the scales and crawled part way up the wall. I’ve managed to catch him and reunite him with his lizard friends on the back porch. I’d love to know how he made it upstairs.

The squirrels have been leaving us alone since we came back from England. I wondered if they were sulking, but then I saw that the trees were all suddenly bearing black walnuts and live oak acorns. The squirrels have such abundant food right now that they simply don’t need to visit us.

We had a landscape gardener come to look at the front yard. We’re definitely going to get some cactus worked into the plans. The back yard is now entirely horse herb for ground coverage, which is working very nicely.

Sep 13

Google press release:

We recognize the impact that our operations have on the Earth’s climate, and are taking steps to ensure that we are carbon neutral by the end of 2007.

Solving climate change won’t be simple, and there won’t be a single solution that addresses the entire problem at once. We all need to act together to meet the challenge – from the largest corporations and governments to individual households.

Meanwhile in the New York Times:

In the annals of perks enjoyed by America’s corporate executives, the founders of Google may have set a new standard: an uncrowded, federally managed runway for their private jet that is only a few minutes’ drive from their offices.

The Google founders, according to one of their own Google maps, will spend just 7 minutes to get from their offices to the NASA airport where their jet is parked. As the crow flies, the airfield is only 1.7 miles away.

For $1.3 million a year, Larry Page and Sergey Brin get to park their customized wide-body Boeing 767-200, as well as two other jets used by top Google executives, on Moffett Field, an airport run by NASA that is generally closed to private aircraft.

We all need to act together to meet the challenge, eh?

What’s the betting that Google don’t include Larry and Sergey’s burning 5 tons of jet fuel per hour in their “carbon neutral” calculations?

Sep 12

Features required:

  • Container format support: AVI, MPG, MP4.
  • Video codec support: MPEG-1, MPEG-2, MPEG-4, DivX, XviD.
  • Audio codec support: MPEG-1 layer III, MPEG-2, MPEG-4 AAC.
  • Component video output.

Features desired:

  • Hard disk or SD cards for storage.
  • Network connection.
  • H.264 codec support.

Some options I know about:

  • Apple TV. Pluses: Cheapish, nice UI. Minuses: Requires unsupported hacks.
  • Mvix MV-4000U. Pluses: Dirt cheap. Minuses: No H.264.
  • DViCO TVIX M-4000PA. Pluses: Works as regular FTP server.
Sep 07

Text from a memo found in terror leader Abu Musab al-Zarqawi’s hide-out:

As an overall picture, time has been an element in affecting negatively the forces of the occupying countries, due to the losses they sustain economically in human lives, which are increasing with time. However, here in Iraq, time is now beginning to be of service to the American forces and harmful to the resistance [...]

In general and despite the current bleak situation, we think that the best suggestions in order to get out of this crisis is to entangle the American forces into another war against another country or with another of our enemy force, that is to try and inflame the situation between American and Iran or between America and the Shi’a in general.

[...] We have noticed that the best of these wars to be ignited is the one between the Americans and Iran, because it will have many benefits in favor of the Sunni and the resistance [...]

Sometimes you have to wonder whose side the US government is on.