|
NETSURFER DIGEST
More Signal, Less Noise |
Volume 07, Issue 39 Thursday, November 15, 2001 |
NETSURFER LINKS
|
|
BREAKING SURF Anybody Hear Anything About Some Harry Potter Movie? When we visited the Warner Bros. site, a clock there was relentlessly clicking down the days, hours, and seconds to the movie's North American release. The site offers diversion for impatiently waiting would-be wizards, including four broomstick-riding games in the quidditch training area, an introduction to potions, and a place to create magical creatures. The site is a bit like Harry himself, in whose presence strange things happen; stick around long enough and who knows what might occur. This is a hoot of a place with, of course, a newsletter you can sign up for - duh! A CNET brief offers some impressive stats about the site's growing popularity as the movie's world premiere approached. No fear about this place wearing any cloak of invisibility!Movie: http://harrypotter.warnerbros.com/ CNET: http://news.cnet.com/news/0-1005-202-7827501.html The only way you might not know about Microsoft's Xbox is if you've had no contact with any form of media over the past two years. Everyone else knows that Xbox is Microsoft's high-powered entry into the game console market, a market heretofore dominated by Nintendo and Sony. The Xbox is an impressive box with excellent graphics as well as the ability to play DVDs and store game data on its internal hard drive. Games will decide the console's fate. Among the first for Xbox is Halo, a first-person, space-based shooter game that is garnering amazing reviews, like the one below at Voodoo Extreme. The New York Times has a comparison of Xbox and Nintendo's new entry, the GameCube. Let the games begin. Xbox: http://www.xbox.com/default.htm GameCube: http://www.nintendogamecube.com/launch.html Voodoo Extreme: http://www.ve3d.com/games/reviews/haloxbox/ Times: http://www.nytimes.com/2001/11/08/technology/circuits/08GAME.html Important Neutrino Detector Severely Damaged The Super-Kamiokande (SK) neutrino detector is essentially a cathedral-sized tank of ultrapure water, buried deep underground and lined with photo-multiplier tubes. As elementary physical particles pass through SK on their way through the Earth, they leave faint trails of glowing radiation, which the photo-multiplier tubes detect and record. Unfortunately, SK was heavily damaged this week when about 7,000 of the 11,000 tubes imploded as the tank was being refilled after maintenance. In 1998, the detector was instrumental in proving that neutrinos have mass, a fundamental discovery in particle physics with all sorts of interesting implications for the origin and nature of the Universe. The SK Web page has much information about the detector, but no real news on the nature of the accident just yet. Try the US collaboration Web page for the latest news.SK: http://www-sk.icrr.u-tokyo.ac.jp/doc/sk/index1.html US: http://www.phys.washington.edu/~superk/ The Secret of PayPal's Success PayPal processes 200,000 online payment transactions worth $10 million per day. What is the secret of its success? One reason, according to this CommerceNet analysis, is "obsessive customer orientation". PayPal devotes two-thirds of its organization to customer support, and item one in the PayPal rulebook is "focus on the customer". Developing an effective structure to combat online fraud has also fortified the company's position - PayPal sellers experience a fraud rate of only 0.5%, versus a rate of 2.6% for all Internet transactions. Other key elements include a Net-centric approach, an early viral marketing model, stringent internal cost control, and a "start small, get feedback, add functionality" strategy. CommerceNet's excellent business analysis tells how PayPal seems to have done everything right.http://www.commerce.net/research/ebusiness-strategies/2k1/2k1_14_r.html Internet2 has a rival. Geant, a European Union consortium, has created a powerful analogue to the American project. Like Internet2, Geant is all about speed - on the order of 100 times faster than current Internet standards. The resulting speed qualitatively and quantitatively changes the Net experience and makes possible a whole new domain of work. Astronomers can now instantaneously control telescopes at Mauna Kea and conduct successful experiments in tele-immersion, making virtual reality a quotidian experience. Geant will connect researchers in 3,000 institutions across 32 countries to a network of unprecedented speed. There are still problems to be worked out with local telcos, but those who'll be able to use Geant will find their online and possibly offline lives will change dramatically, if the hype can be believed. (Whatever happened to Ginger, anyway?) Expect Internet2, Geant, and possibly other alternatives to slowly leak out of the academic research community into the Net at large over the next few years. The Guardian has more. Geant: http://www.dante.net/geant/ Ginger: http://ginger.patentcafe.com/ Guardian: http://www.guardian.co.uk/internetnews/story/0,7369,589431,00.html Cryptocoprocessor Hacked, Cracked, Whatever You Want to Call It IBM is understandably mum about this, but a couple of graduate students have designed a sweet little hack that allows them to grab any or all of the DES and 3DES keys generated by the 4758 cryptocoprocessor. The 4758 is a hardened PCI board that sells for around $4,000 and is pretty much impervious to physical attack, which is why it's so widely used in the banking industry. As these two students demonstrate, however, it's not at all impervious to an unethical banker. All a hacker needs is permission-level access to Combine_Key_Parts and 20 minutes' physical access to the device. Subsequently, in the comfort of elsewhere, said banker can use an off-the-shelf evaluation board and spend a weekend cracking the keys. It all seems fairly unrealistic - until you notice that some 82% of all bank fraud is perpetrated by bank employees. The hack page FAQ conveniently tells you how to book tickets to Bermuda. Wired has more.4758: http://www-3.ibm.com/security/cryptocards/ Hack: http://www.cl.cam.ac.uk/~rnc1/descrack/ Wired: http://www.wired.com/news/technology/0,1282,48277,00.html Firehole Rips through Software Firewalls You just hooked up your DSL or cable modem. Immediately, you download or install one of the new personal firewall programs to protect your system from malicious hackers. You feel safe and secure knowing that your system is protected. Alas, that sense of safety is false. It turns out that a programmer can write a tiny piece of code that can turn your Web browser into a gateway for all sorts of nasty demons. And there may not be that much you can do about it, since the tiny Trojan horse program - can we coin the expression "Trojan pony"? - looks like a perfectly innocent DLL. It remains unclear whether Mac or Linux systems are vulnerable to this particular code, but Windows machines sure are. Now that the exploit has been published, and a benign but easily modified app released, how long will it take for someone to use it maliciously? It would be nice if the author of this program also provided a way to immunize ourselves from it. We'd even settle for suggestions on how to build a good firewall.http://keir.net/firehole.html Microsoft IE Security Flaw, Number Two Gazillion in a Series A member of the Bugtraq mailing list has revealed a potentially serious problem with how Microsoft Internet Explorer versions 5.5 and 6.0 deal with cookies. Basically, cookie data can be exposed or altered by means of a fairly simple script contained within a malicious Web site. An attacker could gain access to passwords or other useful information - assuming that you allow cookies to store such material. The threat is probably miniscule for long-time netsurfers, but the ever-growing population of newbies presents an inviting target. Microsoft is working on a patch, but none has yet materialized. You may want to check the link below from time to time. CNET has more analysis.Bugtraq: http://www.securityfocus.com/archive/1/225343 CNET: http://news.cnet.com/news/0-1005-200-7828689.html Does Microsoft Want to Create a Security Bug Information Cartel? Apparently, it does. This item at SecurityFocus talks about a Microsoft-led coalition of five companies that have agreed to not fully disclose computer vulnerability information. In recent weeks, Microsoft has made an effort to stigmatize the popular practice of publishing public information about security bugs. Microsoft's stance is understandable as a corporate survival reflex, since it is that company's software that seems to be target of most security exploits. The five companies that signed up as Microsoft's policy partners are not particularly significant players in the security arena and the coalition is not likely to have any practical impact. Overwhelmingly, the current bug-reporting paradigm in the security community is to notify software manufacturers of a bug, give them a reasonable period of time to fix it, then go public with the details. Compare the Mozilla open browser project's newly announced policy for dealing with security bugs.SecurityFocus: http://www.securityfocus.com/news/281 Mozilla: http://www.mozilla.org/projects/security/security-bugs-policy.html Two economists (and their students) have been tracking eBay's online auctions for some time - for coins, specifically - and they've found factors that affect final sale prices. The online sales aren't the same beasts as their old-fashioned brick-and-mortar counterparts. Seemingly unimportant factors such as the day of the week, time of day, and the presence or absence of a picture all affect the final winning bid. Chances are good that you can buy an item for less if you avoid auctions that end on weekends. The brief article from the Economist hits the high points; we found a couple of links to authors Robert Kauffman and Charles A. Wood's earlier material, as well. Economist: http://www.economist.com/science/displayStory.cfm?Story_ID=852466 Earlier 1: http://misrc.umn.edu/wpaper/default.asp Earlier 2: http://aisel.isworld.org/subject_by_publication.asp?Subject_ID=20 The US Department of State offers a new online publication called "The Network of Terrorism", which does a decent job of outlining what happened Sept. 11 and tying those attacks to previous US embassy bombings by al Qaeda terrorists. It also details the repressive nature of the now crumbling Taliban regime in Afghanistan, and America's humanitarian efforts in the region and elsewhere. If you want more in a similar vein, State's Publications page offers a host of online publications that deal mainly in economics, trade, and foreign policy, often in a choice of formats. One interesting new release is "Muslim Life in America", with rich photo galleries and brief text. State also offers a new QuickTime movie called "Defeating Terror, Defending Freedom", a 46-MB slide show of striking pictures, stirring music, and a flag-waving parade of statements from world leaders. Network: http://usinfo.state.gov/products/pubs/terrornet/ Publications: http://usinfo.state.gov/products/pubs/ Movie: http://usinfo.state.gov/quicktime/defend.mov Libraries May Be Required to Spy on Your Net Use As a consequence of the recent US anti-terrorism act, federal agents with warrants can force libraries to turn over records of visitors' Internet use and, presumably, lists of the books they have borrowed. Furthermore, libraries served with such warrants are prevented from disclosing this fact to their users. The American Library Association (ALA) has a brief guideline that explains how libraries should behave when served with such a warrant. The ALA page also links to a Department of Justice document that details the differences between the old laws and the new USA PATRIOT anti-terrorism legislation. The document, "Field Guide on New Authorities (Redacted) Enacted in the 2001 Anti-Terrorism Legislation" is more readable than the law itself.ALA: http://www.ala.org/alaorg/oif/alertusapatriotact.html Field Guide: http://www.epic.org/privacy/terrorism/DOJ_guidance.pdf Europe Tries to Take a Bite out of Cybercrime The Council of Europe has adopted the Convention on Cybercrime, the first international treaty to establish a common criminal policy on Internet and computer offences. The Convention chiefly addresses the usual suspects - copyright infringement, computer fraud, child pornography, and security violations - but whether its bite can measure up to its bark will depend on how sharp of tooth Articles 24 (extradition) and 32 (trans-border access to stored computer data) turn out to be. Future plans call for supplementing the treaty with an "additional protocol making any publication of racist and xenophobic propaganda via computer networks a criminal offence", an ambition which may prove to be a minefield of eggshells.Adoption: http://conventions.coe.int/Treaty/EN/cadreprojets.htm Convention: http://conventions.coe.int/Treaty/EN/projets/FinalCybercrime.htm US Court Shields Yahoo from French Anti-Nazi Ruling A district court in California has ruled that Yahoo does not have to comply with a French court order to block French access to Nazi-related auction materials. The US court ruled that Yahoo was not under obligation to abide by the French ruling because the foreign order violates US Constitutional protections on free speech. The American lawyer representing the French interests has announced they will appeal - surprise - and the case might eventually reach the US Supreme Court. CNET has more.http://news.cnet.com/news/0-1007-200-7815683.html Conference on Intellectual Property Papers Last issue, we pointed you to the Conference on Intellectual Property held at Duke University. This week, the papers from the conference are available online and provide a lot of provocative and somewhat academic reading. Topics include a deconstruction of Negativeland's appropriation of popular culture, the transformation of fair use to allow the use of intellectual property for "significant social criticism", Lawrence Lessig's musings on the architecture of innovation, the economy of open source, Constitutional roots of public domain doctrine, and much more. It's not light reading but, then again, these are not lightweight topics.http://www.law.duke.edu/pd/papers.html QinetiQ, a research and technology organization, is sponsoring a planned assault on the high ballooning record, held by a couple of US Navy men who reached 113,740 feet as part of the US space program way back in 1961. Pilots Andy Elson and Colin Prescot plan to ride their balloon, QinetiQ 1, to 132,000 feet while wearing space suits. QinetiQ 1 consists of an open platform beneath the largest manned balloon ever, one that will stretch to hold some 40 million cubic feet of helium at its target altitude. At lift-off, scheduled for next summer (northern hemisphere), this monster will be as tall as the Empire State Building. You can follow mission preparations at the QinetiQ Web site or through an e-mail update service. If all goes well, the trip will be televised live. These folks are aiming high. QinetiQ: http://www.qinetiq1.com/ Golden Age: http://www.montypython.net/scripts/montgolf.php ONLINE CULTURE That WTC Unluckiest Tourist Guy Jose Roberto Penteado says some friends hijacked his face for the now-famous faked photo of a tourist standing atop the World Trade Center, oblivious to the deadly jetliner approaching behind him. Wired has unleashed Jose's story and has possibly uncovered the true-life identity of "the tourist guy", the hottest meme to hit the Internet since "All your base are belong to us." The original hoax photo inspired an online flood of manipulated images depicting the hapless tourist at disaster and historical scenes a la "Forrest Gump". The Tourist of Death site consolidates those images and tracks news of the original hoax, but its creator doubts that Penteado is the face that launched the phenomenon. Compare photos at his site and judge for yourself.Wired: http://www.wired.com/news/culture/0,1284,48225,00.html Tourist: http://www.touristofdeath.com/
SURFING SITES Poachware: The Good, the Bad, and the Very Ugly When you see some Net ads, what you see may not be what the buyer of that space intended. "Poachware" is the term coined to describe software that does what Gator's Windows-based software does. Gator runs with a browser and provides services, including auto-filling forms and remembering passwords, while it replaces legitimate site advertising with banner ads of its own choosing and for which it earns revenue. Of course, the current versions of browsers can also do what Gator does, but they don't advertise those features as strongly as Gator pushes itself. Gator is extremely difficult to remove once installed. At the moment, Gator's ad space theft seems legal if not too moral or ethical. The technology has the potential to harm advertiser-supported sites and is being aggressively fought by trade associations. The best weapon is an informed user who refuses to put up with it.http://poachware.com/ Randy Cassingham has been publishing "This is True" for the past seven years, and it's been hugely successful. There's a good chance you've read some of his work without even knowing it. That's unfortunate. Randy's genius lies in his uncanny ability to distill news stories down to their essential elements and preface them with a pithy header and/or a killer one-line summation. Around a year ago, he spun out an entirely different newsletter. HeroicStories is built on brief, true stories that illustrate the enduring significance the actions of one individual may have on others. Although you can read a few sample submissions at the Web site, HeroicStories is a newsletter to which you must subscribe to receive a regular dose of inspiration. If it sounds too sappy to you, you're in dire need of a subscription. http://www.heroicstories.com/ alt.wesley.crusher.blog.blog.blog Whether they believe he deserved it or not, all faithful Star Trek fans should agree that Wesley Crusher holds the singular honor of being the most maligned Trek crew member of all time. What do you think harangues from thousands of dedicated fans might do to a teen heartthrob turned red-shirt freshman? It might make him a little funny... or a lot. Judge for yourself at Wil Wheaton Dot Net, a site created and updated on a frequent basis by the man who played Wesley himself. Wil jots down his observations in a witty, tongue-in-cheek manner. The site is gaining blogging sensation/cult status fame with an audience not entirely disparate from that which dissed him once. Because of its popularity, it disappears every once in a while. If you can't get to it, go read Wil's Slashdot interview in the meantime.Wil: http://www.wilwheaton.net/ Slashdot: http://slashdot.org/article.pl?sid=01/10/29/173252 Original? Yes, but no - the name of the place is Orisinal, and for all the Flash incorporated here, the site comes off as delightfully minimalist. Just running a mouse over the initial page's icons will tickle your interest, never mind the games to which these icons lead. Whether you challenge your clicking finger with a high-speed session of Milk the Cow, a more prosaic matter of lying in wait with a digital camera to record flying saucers, a shoot-'em-up, or Snow-Bowling, these things are fun and free, not to mention kind of addictive. We didn't find it at all surprising to learn that Orisinal's ISP tossed the site a couple of months ago because it was "too busy". Go figure. http://www.ferryhalim.com/orisinal/ We recommended the Complete Collector's Set to you a few issues ago (NSD 7.37), and now we're back with more Blackadder for your viewing pleasure. Did you realize the Collector's Set (at least the Region 1 version of the DVD, which works in America and Canada) includes "Blackadder Back & Forth", a special filmed in 1999? Find out tidbits like that at Blackadder Hall, a fan-run Web site. Besides facts about the shows and ways to order your own copies, it features sections such as Gardening with Baldrick, which includes, not surprisingly, quite a lot about turnips. The site also supplies another way for you to annoy your coworkers - download the Blackadder mobile ring tone. There's a link to one that costs $5, plus the directions on how to key it in yourself if you have a phone that will let you do it. http://www.blackadderhall.co.uk/ Star Light, Star Bright, Star Degrees I Link Tonight According to the University of Virginia's computer science department, there are only three movie degrees of separation between Sid Vicious and Shirley Temple. However, there are only two clicks between Kevin Bacon and both Shirley and Sid, and that, kids, is why Kevin is King. The comp sci department's Star Links site calculates the connection number and maps the links between any two actors or actresses via movies or TV. Purists already know of the Oracle of Bacon, using the classic "degrees from Kevin Bacon" model. Mathematicians at the Oracle of Bacon have also conducted some scholarly research which would indicate that Kevin Bacon is not actually the brightest star in the Hollywood universe. Oh, those wacky scientists....Star Links: http://www.cs.virginia.edu/oracle/star_links.html Oracle of Bacon: http://www.cs.virginia.edu/oracle/ "No one owns cliches. Cliches are never new. Cliches: each of them makes something easier, but all of them together make things very complicated." Those all come from the Book of Cliches and all are trite, and all are true (which is not in the Book of Cliches, but should be). The world speaks in cliches; they are the mainstay of poor speakers and the weak-brained, although if it doesn't come naturally, leave it. We assume our readers are neither, but sometimes need to make a point and need some help expressing it so the weaker-minded can understand. The Book of Cliches offers 20 categories of well-used and easily recognized terms. Most mean many things or nothing, but may be what's called for. The organization and navigation are excellent. Remember, though, that you are a loser only when you fail to try. http://utopia.knoware.nl/users/sybev/cliche/ The Slip-Up Archive is the place to find, submit, and rate those tangles of the tongue, lapses of logic, and violations of physical law that occasionally sneak their way into entertainment media and public speech. You can search the site by topic or keyword, or by top-rated or most recent goofs. Poke around and you'll find the skinny on the edition of the King James Bible that commanded "Thou shalt commit adultery", Hillary Clinton declaring "We are the president", a whopping 94 errors in "Austin Powers: The Spy Who Shagged Me", and one Miss Alabama's thoughts - and we use that term loosely - on immortality. http://www.slipups.com/ How you ever wondered what free speech really is? Visit ManBeef. Be warned: the subject matter may seriously offend, and the product offered is illegal in most of the world. Of course, cannibalism does exist, but it's rarely as explicit or secular as the ManBeef site. We're inclined to believe this site does not actually offer a real product, but it is real convincing. There's nota single solid clue that this is a joke site. ManBeef is an excellent example of a small e-commerce site, if you ignore the subject matter. http://www.manbeef.com/ The latest Mnftiu (which stands for "My new fighting technique is unstoppable") comics look at the current US-Afghan/bin Laden war in traditional three panel format and make many well-thought out points. The artwork is simple and competent; nothing special. You're here for the text, not the art. Some of the commentary is sophomoric and some relies too heavily on vulgarity rather than the logic other strips in the series employ. The overall effect of reading all the strips at one sitting is a bit much. Try them a page at a time and you'll enjoy Mnftiu better. The main site (look for the tiny home link at the bottom) has other, somewhat more bizarre strips. With a bit of aging, this site is sure to improve. http://www.mnftiu.cc/mnftiu.cc/war.html This site hasn't been updated in a while and even includes a few candy bars we think probably aren't in production any more, but chocolate never goes out of style. Despite the fact that it uses the still-infamous blink tag, we're still pointing to the Name That Candybar page because, heck, we just really like chocolate. If you have young 'uns, visit here with 'em. The site presents a cross-section of a candybar and asks you to guess the bar in question. Click on the cross-section to get the answer and view the wrapper for the bar. Note the archaic Kit Kat wrapper that appears instead of the plastic one Americans now get with the terribly helpful "tear here" instructions. http://www.sci.mus.mn.us/sln/tf/c/crosssection/namethatbar.html Leave No Tracks on the Web, for a Price Many dream of surfing without ads or cookies. NetHush lets you visit any site anonymously and ad-free. The drawback is you must enter each URL, one by one. No one, not even Job, has that sort of patience. And to surf without ads, pop-ups, graphics, scripts, or cookies will cost you. NetHush's monthly fee is $15, but you can buy three months' service for the price of two. NetHush works exactly as advertised and speeds up the loading of most pages. The designs of some sites falls apart when they are anonymized, but most users of this service will find that a small price. Many sites require cookies, but such sites aren't visited by serious keepers of personal privacy, anyway. This NetHush site - ironically, not ad-free - offers a valuable service at a price some might call stiff. But no one ever promised free privacy, not even the phone company.http://www.nethush.com/ ONLINE TRAVEL The ShoppingAA.com site bills itself as one-stop shopping for all things Thai. That it is, but that's not its main strength. It's a virtual and beautiful tour of Thailand (Interesting Place category) and has more good, useful information about Thai culture and arts (Interesting Story) than you'll find elsewhere. All of that comes presented on a visually beautiful, easily navigated site. Fabric, food, music, religion, dance, and many more topics each get their own page or set of pages. The photos are enticing and the text is clear. While not quite as satisfying as a visit to Thailand, this site's cheaper and can be visited anytime.http://www.shoppingaa.com/interesting/allinteresting.html When you think of San Francisco, you probably picture the Golden Gate bridge or some other icon. The National Resource Defense Council (NRDC) is pushing a new image, however - the Green Gate. This site sums up some 30 years of NRDC work to protect the Bay-Delta ecosystem. From the picture this site paints, it's amazing that anything can live in the Bay area. We thought that dotcoms went belly-up because of economics, not ecology. At least the environment is recovering. Wetlands seem to be on the mend, public transit use is increasing, legislators are more environmentally aware, and the incidence of childhood lead poisoning is declining. Nearly 22,000 acres of wetlands were restored in a six-year period, impressive in an area with high immigration. http://www.nrdc.org/greengate/ FLOTSAM & JETSAM Didja like the new Pixar short preceding "Monsters, Inc."? Pixar is offering its entire catalogue of short films for free online viewing. Seven options are available, all of which work best if you're on a high-speed connection. You even get some details about the animation process. "Knick Knack", here we come!http://www.pixar.com/shorts/index.html A number of these Java2 applets play with fractals. We liked some, but found the 3-D world efforts lacking in realism and substance. Some of these applets might serve as remarkably hypnotic screensavers, were it not for the static copyright notices prominently emblazoned at the bottom of the programs. http://virtualexp.net/ SOFTWARE SourceForge Forging Chains for Free Software? SourceForge has provided the free/open-source community with a hosting environment and a common set of tools for collaborative development. The popular service has been run by VA Linux as a freely available resource on a free and open software platform - theoretically, you could download the source and run your own competing service. This policy recently changed, and Loic Dachary takes VA Linux to task for its move to closed source and its attempt to seek tighter copyright control over the software that runs the SourceForge site. He also points out that an alarming number of open/free resources fall under the control of VA Linux, which also owns the Open Source Development Network (OSDN) and which happens to be struggling financially. Loic calls for developers to "escape entrapment" by the newly strict VA Linux and to wean themselves off of SourceForge.Loic: http://www.fsfeurope.org/news/article2001-10-20-01.en.html SourceForge: http://sourceforge.net/ OSDN: http://www.osdn.com/ CORRECTIONS Mark's simple note explains all: "Thanks for the lovely write-up of Sweet Fancy Moses (NSD 7.38). We appreciate the good word. One thing, though. My name is Matt. Not Scott." Sorry, Mark.http://www.sweetfancymoses.com/ |
| CONTACT AND SUBSCRIPTION INFORMATION | |
| ||||
| CREDITS | |
| ||||