A dovetail joint of news, art, science, politics, philosophy & global affairs

“Three cord symphony crashes into space
The moon is hangin' upside down"

"Πάντα ῥεῖ καὶ οὐδὲν μένει"







May 22nd
5:16 PM

DuckDuckGo and Ixquick take a tiny bite out of Google
Private: some search engines make money by not tracking users

Cyrus Farivar - arstechnica »

“The problem is that [people] have never had a choice…They don’t perceive that they have a choice. If you say: yes, you can go to this privacy search engine, they feel that they’re sacrificing something for that. But I don’t want to hamper my search experience. We’ve been trying to offer high privacy and a comparable or better search experience [than Google].”

[Gabriel] Weinberg’s not the only one saying it. Search Engine Land wrote last month that in terms of user experience and interface, DuckDuckGo “has begun to beat Google at its own game.” >continue<

While a “tiny bite” may sound quixotic in a world where Google is almost synonymous with ubiquity, the emergence of “filter bubbles” and the inescapable avalanche of personally tailored information appears to mark the extreme frontiers of sophistry. Constantly being told what we want to hear, given what we want to see, subtly subverts both intelligence and its emergence. If Socrates told any interesting stories or asked any interesting questions, that and how one might counter it should be remembered above all.

It’s not just balkanization into ever more finely tuned demographics and the herding of citizens into a consumeristic fate here in the Age of Marketing - but the chief mode whereby soul is rendered into slavishness, and where the hope for an adroit political intellect is forever attenuated into an infinity of desire.

Which is to say, the linked Eli Pariser video and the arstechnica piece above are worth more than passing attention.

April 26th
10:25 AM

American industrial systems vulnerable to Stuxnet like exploit

America’s Stuxnet? Weakness found in Pentagon systems, power grid
Mark Clayton | CSMonitor »

An amateur cybersecurity researcher who bought industrial computer networking equipment on e-Bay for fun has discovered a critical weakness in equipment that helps run railroads, power grids, and even military installations nationwide.

The vulnerability means that hackers or other nations could potentially take control of elements within crucial American infrastructure – from refineries to power plants to missile systems – sabotaging their ability to operate from within.

Analysts say the problem is likely fixable, but the enthusiast says he has gone public only because the company that manufactures the equipment, RuggedCom of Concord, Ontario, has declined to address the issue since he made it known to them a year ago. >continue<

related: Stuxnet, dire warnings 1yr on  |  Cracking Stuxnet [TED talk]

HBGary & Stuxnet Israeli General brags over Stuxnet

Welcome to Cyberwar  |  Stuxnet in the news

April 10th
6:36 PM

“…you can’t just fast forward them… or at least you can, on my machine at least, only by awkwardly holding down the button you use to skip forward, which means you’re pressing the forward button longer in order to achieve a smaller movement forward. Which is counter-intuitive madness of the sort which I don’t believe it’s an exaggeration to say will surely destroy us all.”

February 15th
9:15 AM
Crypto shocker: four of every 1,000 public keys provide no securityDan Goodin | arstechnica&#160;&#187;

An astonishing four out of every 1,000 public keys protecting  webmail, online banking, and other sensitive online services provide no  cryptographic security, a team of mathematicians has found. The research  is the latest to reveal limitations in the tech used by more than a  million Internet sites to prevent eavesdropping.
The finding, reported in a paper (PDF) to be presented at a cryptography conference in August, is based on the  analysis of some 7.1 million 1024-bit RSA keys published online&#8230;
The research is the latest to show the limitations of cryptographic  systems that websites use to secure communications.  In September,  researchers unveiled an attack that silently decoded encrypted traffic as it passed between SSL-protected websites and a Web browser. Over the  past few years, the much more standard way of defeating SSL has been to  compromise one of the 600 or so entities authorized to mint certificates that are trusted by Firefox and other standard browsers. Given the  success and ease of that method, the techniques laid out in the research  paper would likely not be an attacker&#8217;s first choice of exploitation.
It remains unclear exactly what is causing large clusters of keys to use duplicated factors.  &gt;continue&lt;

image: John Kennerly

Crypto shocker: four of every 1,000 public keys provide no security
Dan Goodin | arstechnica »

An astonishing four out of every 1,000 public keys protecting webmail, online banking, and other sensitive online services provide no cryptographic security, a team of mathematicians has found. The research is the latest to reveal limitations in the tech used by more than a million Internet sites to prevent eavesdropping.

The finding, reported in a paper (PDF) to be presented at a cryptography conference in August, is based on the analysis of some 7.1 million 1024-bit RSA keys published online…

The research is the latest to show the limitations of cryptographic systems that websites use to secure communications. In September, researchers unveiled an attack that silently decoded encrypted traffic as it passed between SSL-protected websites and a Web browser. Over the past few years, the much more standard way of defeating SSL has been to compromise one of the 600 or so entities authorized to mint certificates that are trusted by Firefox and other standard browsers. Given the success and ease of that method, the techniques laid out in the research paper would likely not be an attacker’s first choice of exploitation.

It remains unclear exactly what is causing large clusters of keys to use duplicated factors.  >continue<

image: John Kennerly

February 6th
1:23 PM

Novel photosynthetic process called 'Biosolar Breakthrough'

Science Daily »

To produce the energy, the scientists harnessed the power of a key component of photosynthesis known as photosystem-I (PSI) from blue-green algae. This complex was then bioengineered to specifically interact with a semi-conductor so that, when illuminated, the process of photosynthesis produced electricity. Because of the engineered properties, the system self-assembles and is much easier to re-create than his earlier work. In fact, the approach is simple enough that it can be replicated in most labs…

…This green solar cell is a marriage of non-biological and biological materials. It consists of small tubes made of zinc oxide — this is the non-biological material. These tiny tubes are bioengineered to attract PSI particles and quickly become coated with them — that’s the biological part. Done correctly, the two materials intimately intermingle on the metal oxide interface, which when illuminated by sunlight, excites PSI to produce an electron which “jumps” into the zinc oxide semiconductor, producing an electric current.  >continue<

January 31st
12:39 PM

Pac-Man Hacked Onto a Touch-Screen Voting Machine Without Breaking “Tamper-Evident” Seals

J. Alex Halderman and Ariel J. Feldman, the academic computer science and security experts who hacked the Sequoia machine, this time with Pac-Man, report that “In 2008, the AVC Edge was used in 161 jurisdictions with almost 9 million registered voters, including large parts of Louisiana, Missouri, Nevada, and Virginia.”  >continue<

January 25th
5:17 PM
"Last April, Annie Lowrey of Slate wrote about a start-up called “E la Carte” that is out to shrink the need for waiters and waitresses: The company “has produced a kind of souped-up iPad that lets you order and pay right at your table. The brainchild of a bunch of M.I.T. engineers, the nifty invention, known as the Presto, might be found at a restaurant near you soon. … You select what you want to eat and add items to a cart…"
—  Thomas Friedman, Average is Over
January 24th
5:49 PM

Europe Weighs Tough Law on Online Privacy

Europe is considering a sweeping new law that would force Internet companies like Amazon.com and Facebook to obtain explicit consent from consumers about the use of their personal data, delete that data forever at the consumer’s request and face fines for failing to comply.

The proposed data protection regulation from the European Commission, a copy of which was obtained by The New York Times, could have significant consequences for all Internet companies that trade in personal data… >continue<

January 22nd
1:05 PM
Via
"It seems implausible that the U.S. military would deliberately reduce the warrior’s role in war to the point that people become mere monitors of autonomous, man-made technology. But this is precisely where the evolutionary trend has been heading ever since the 1940s. Autonomy is the logical endpoint of a century of technological progress."
—  Lot of stories, commentaries and policy papers floating around lately about the use of pilotless drones. If you only read one, make it this new paper from journalist Shane Harris, author of a wonderful book on spying technology called The Watchers(via ageofperil)
January 16th
1:23 PM
Via

Gluttony Goes Viral

infoneer-pulse:

When we try to hold the Internet in a single thought, we reach for an image of exhilaration, of liberation, of flight: “the Information Superhighway”; “surfing the Web”; data zipping through candy-colored cables straight into our homes. This is the Internet as it, in theory, ought to be: the world’s information and entertainment instantly accessible, and we at our screens, poised, enthralled, and weightless.

I want to suggest another image, one that comes closer to the Internet in practice: a great groaning table, creaking under bottomless platters of food and pitchers of drink, and we in our chairs, too exhausted to stand, mouths too numb to taste much, but with just enough energy to reach for more.

Few of those who identify with this image of information numbness are Luddites—in fact, they’re often the most immersed. A recent college graduate likened life online to “being demoted from the category of thinking, caring human to a sort of rat that doesn’t know why he needs to tap that button, just that he does.” An information-management expert advises her overwhelmed clients to stop “passively ingesting the flow.” A Newsweek report on the Internet and decision-making warns that “trying to drink from a fire hose of information has harmful cognitive effects.”

» via The Chronicle of Higher Education (Subscription may be required for some content)

January 4th
5:02 PM

#Riot: Self-Organized, Hyper-Networked Revolts—Coming to a City Near You

Wired.com | Bill Wasik »

For tech to become effective as a tool for civic disorder, it first had to insinuate itself into people’s daily lives. Now that it has, there can be no getting rid of it. The agent provocateur lives inside our pockets and purses and cannot be uninstalled.  >continue<

Interesting long read & observations on protests, technology and social media.  Wild too trying to get a fix on the irony of blanket attitudes of opposition to a system which in large part are enabled and sustained by what is undeniably a product of the system.

December 2nd
2:32 PM
Via

Open Source Paradigm Shift

In 1962, Thomas Kuhn published a groundbreaking book entitled The Structure of Scientific Revolutions. In it, he argued that the progress of science is not gradual but (much as we now think of biological evolution), a kind of punctuated equilibrium, with moments of epochal change. When Copernicus explained the movements of the planets by postulating that they moved around the sun rather than the earth, or when Darwin introduced his ideas about the origin of species, they were doing more than just building on past discoveries, or explaining new experimental data. A truly profound scientific breakthrough, Kuhn notes, “is seldom or never just an increment to what is already known. Its assimilation requires the reconstruction of prior theory and the re-evaluation of prior fact, an intrinsically revolutionary process that is seldom completed by a single man and never overnight.”  >continue<

Intro to a great long read with some focus on Linux. And to one of the questions posed therein: Yes, Linux Mint Debian Edition here ;/

November 30th
7:11 AM
Via

Researcher’s Video Shows Secret Software on Millions of Phones Logging Everything

infoneer-pulse:

The Android developer who raised the ire of a mobile-phone monitoring company last week is on the attack again, producing a video of how the Carrier IQ software secretly installed on millions of mobile phones reports most everything a user does on a phone.

Though the software is installed on most modern Android, BlackBerry and Nokia phones, Carrier IQ was virtually unknown until 25-year-old Trevor Eckhart of Connecticut analyzed its workings, revealing that the software secretly chronicles a user’s phone experience — ostensibly so carriers and phone manufacturers can do quality control.

But now he’s released a video actually showing the logging of text messages, encrypted web searches and, well, you name it.

» via Wired

November 10th
12:51 AM
Took a dive into Linux Mint Debian Edition today. A few quasi-geeky hoops to jump but it&#8217;s runnin&#8217; smoove. Almost 2 years now into Linux after a Microsoft Update assploaded XP. It&#8217;s been awesome, and so have to pimp the minty goodness.
My Linux Mint 8 KDE edition was getting too old. Cool thing about Mint&#8217;s transform into Debian territory (from an Ubuntu related stable of releases), the &#8220;rolling updates&#8221; rather than a static OS where graduating to a new edition means a total new installation.
If you&#8217;re tired of constantly worrying with Windows susceptibility to worms, viruses, and trojans - or it&#8217;s plethora of annoyances, you owe it to yourself to consider Linux. If there&#8217;s a learning curve, it&#8217;s far less in real terms than struggling with the labour of protecting or fixing Windows. Plus you can learn about virtual machines if you just have to run Windows sometimes - that or an emulator called Wine. Then there&#8217;s just a massive stock of free, open source analogues to popular programs.
And since we&#8217;re pimping, we&#8217;re on the hook to answer any &#8220;stupid questions&#8221; should you take the plunge. God knows we&#8217;ve had few of our own. But in the long run, it&#8217;s made for a real sense of - well - freedom.

Took a dive into Linux Mint Debian Edition today. A few quasi-geeky hoops to jump but it’s runnin’ smoove. Almost 2 years now into Linux after a Microsoft Update assploaded XP. It’s been awesome, and so have to pimp the minty goodness.

My Linux Mint 8 KDE edition was getting too old. Cool thing about Mint’s transform into Debian territory (from an Ubuntu related stable of releases), the “rolling updates” rather than a static OS where graduating to a new edition means a total new installation.

If you’re tired of constantly worrying with Windows susceptibility to worms, viruses, and trojans - or it’s plethora of annoyances, you owe it to yourself to consider Linux. If there’s a learning curve, it’s far less in real terms than struggling with the labour of protecting or fixing Windows. Plus you can learn about virtual machines if you just have to run Windows sometimes - that or an emulator called Wine. Then there’s just a massive stock of free, open source analogues to popular programs.

And since we’re pimping, we’re on the hook to answer any “stupid questions” should you take the plunge. God knows we’ve had few of our own. But in the long run, it’s made for a real sense of - well - freedom.

November 2nd
10:01 AM

Mystery code spreads, but is it ‘son of Stuxnet’?

The malicious computer code that bears similarities to Stuxnet — the worm that sabotaged Iran’s nuclear program and prompted speculation about U.S. and Israel involvement — has now spread to eight countries, according to researchers, but there’s still widespread disagreement on whether it is, in fact, the “son of Stuxnet.”

…Duqu, by contrast, captures information on the systems it infects. Symantec has said that it, nonetheless, appears to be a precursor to a Stuxnet-like attack, gathering information that could be used to guide the selection of future targets.

“In our mind, there’s absolutely no doubt that Duqu was created from the same source code as Stuxnet.  >continue<

Related:

Duqu linked to MS Word Document Exploit | Unholy Ghost of Stuxnet