Category Archives: Security

Zune reviews

Engadget has a priceless review of the Microsoft Zune. Perhaps most notable was a default “guest” mode that tells the user that their new Zune already has another home, which is obviously totally confusing. Hard not to also point out the pressure to setup a “Live ID” and fill-out registration information, as well as the need for a “Zune Tag”. I thought this part was hilarious:

While we were figuring out which tag to use, we were suggested some pretty awesome(ly awful) names:

* TwinightRyan (sp)
* UprightRyan
* GrizzlyRyan
* PraisedCloud
* ScapularWorm and
* HangingCheetah
* PricyRacketeer
* GutlessStudent
* WontedSum
* PeeweeDust

Do we LOOK like a scapular worm to you? Don’t answer that.

Looks like the same sort of nonsense I get from spam engines these days. Does Microsoft have a security team working on product release? How could they have let this thing go to market in this state?

Icing on the cake: restart after uninstall. No, sorry, the icing on the cake is the crash our computer took after we hit this, causing our RAID 5 array to crap out and spend a few hours rebuilding

Ouch.

Laser-based signatures

Looks like someone has figured out a way to scan and record the uniqueness of materials at a nano-level. The Guardian has the story:

After tuning the laser system, he also discovered that the probability of two pieces of paper producing an identical reading was unimaginably remote.

Credit cards, metals and coated paper boards were swiftly tried with the same startling results. Putting the now defunct microchips aside, Cowburn realised that all he needed was to scan an item’s surface, convert the reflected laser speckle pattern into numbers, and store a security signature in a database.

Several applications are discussed, but I think this one is particularly interesting:

laser surface authentication might provide rapid checking of ordinary paper passports without the need for costly microchipped identity cards

One problem I see is the susceptibility of a material, especially paper, to being altered by liquid, pressure, heat, etc.. Wonder how they’ll account for that.

Nevada town bans display of foreign flags

This CNN story is so unbelievably stupid, it is hard to believe it isn’t something made up by The Onion:

The [Pahrump, Nevada] town council voted last week, 3-2, to approve an ordinance that makes it illegal to display a foreign flag — unless an American flag is flown above it. Scofflaws face a $50 fine and 30 hours of community service.

The story blames a single person for the ordinance:

Pahrump resident Michael Miraglia proposed the ban because, he said, he got upset when he saw immigrant activists marching through U.S. cities last spring, waving Mexican flags.

Personally, I think there is far too much flag waving in general, but so far I have more important things to do than try to convince people not to be so irrationally nationalistic. Or maybe I am just not living in a “relaxed” enough environment:

In the Pahrump Valley, people are relaxed and enjoy life because there is no traffic to fight, very little crime and more time to do the things they enjoy.

…like passing ordinances that ban the freedom to fly another nation’s flag and express oneself. When you read the actual ordinance, it seems that the language is even more radical than the CNN story suggests. First of all, it’s primary purpose is to require English as an official language:

Pahrump Town Ordinance No. 54

ENACTING THE PAHRUMP ENGLISH LANGUAGE AND PATRIOT
REAFFIRMATION ORDINANCE OF 2006

“Patriot Reaffirmation”? Ugh. Sounds Rove-ian. Section eight covers flags:

Flying of Flags on residential and business property including land. The Official
Flag of the United States of America shall be flown in accordance to United States
Code, Title 4
. No other flag or pennant may be placed above or, if on the same level,
to the right of the flag of the United States of America. And, if flown from the same
halyard in this order from top to bottom:

a. The Official Flag of the United States of America.
b. The Official Flag of the State of Nevada.
c. The Official Flag of the Town of Pahrump.
d. The Official Flag of our Military Forces.
e. Any other flag or pennant an individual whishes to fly other than a flag of a
foreign nation.
f. A flag of a foreign nation cannot be flown by itself, and must always be
flown with the Official Flag of the United States of America, union first,
from separate staffs. No person shall display the flag of the United Nations
or any other national or international flag, equal, above, or in a position of
superior prominence or honor to, or in place of, the flag of the United States.

For the purposes of subsections a. through e. these flags can be flown by themselves.

Interesting that they specifically call out and attack the United Nations flag. How exactly that can be considered a threat is beyond me. Incidentally, how would someone in a parade fly a flag together with the American flag, yet from separate staffs? Sounds like you could have one American flag flying somewhere in a parade along with thousands of other flags flying from separate staff, even in different groups, no? Or maybe this has nothing to do with carrying flags, just flags flying from staffs permanently fixed on property? What about flags pinned to your clothing, or draped over you like a cape?

So many questions…but at the end of the day this ordinance just makes Pahrump look like a horribly mean-spirited and xenophobic place to live. As if it couldn’t get any worse, Section nine of the ordinance tries to re-write the story of America. It takes the line “Give me your tired, your poor, your huddled masses yearning to breath free…” and turns it into:

Illegal aliens or undocumented immigrants are not entitled to any benefits from the Town of Pahrump.

And what risk is being addressed by removing “benefits”? The cost of immigration apparently is not in health benefits.

Pahrump…now officially to be known as a*sholeville.

Incidentally, in terms of enforcing this anti-immigrant ordinance, if you are do not have your documentation and happen to get a benefit or if you improperly fly an unapproved flag (or at least fly one somewhere not very near to an American flag), you may be fined up to $50.00 (as CNN mentioned). I wonder whether that would that be $50 per illegal flag in a parade, or $50 for the entire parade group if they operate as an incorporated entity?

Oh well, as I said, there should be less flag waving all together and if this leads to fewer American flags too then maybe there is a silver lining to the nationalist ferver. I’m kidding, of course. Pahrump should send a delegate to Germany to ask someone why they traditionally have frowned upon people waving nationalist flags

UPDATED TO ADD (16 Jan 2007): A reader sent me this funny image of foreign flag-waving aliens in the Rose Bowl parade. This shows that Pahrump may in fact have been trying to warn the Earth of an impending threat from Darth’s minions. Either that or Pahrump has a long way to go before it will be the sort of place to host a parade worth attending:

Stormy Flags

T-Mobile Employee IDs Lost in Checked Luggage

So if you placed a value on 43,000 identities, what would it be? I think we could all agree that it is more than a dollar per identity, which just begs the question of whether anyone should feel safe putting something worth more than $43,000 in checked luggage? FIRST has a link to last week’s story:

Bellevue’s T-Mobile USA Inc. on Wednesday confirmed reports that a laptop computer containing the Social Security number, salary, birth date and home address for as many as 43,000 current and former employees disappeared from an employee’s checked luggage.

And even if/when the luggage is found, will there be any guarantee that the data was not copied? Hard to say there was no breach if the data was not encrypted. The best path forward is clearly encryption of the data on laptops, and never putting high-value assets in as checked luggage.