<?xml version="1.0" encoding="UTF-8"?>
<opml version="1.0">
  <head>
    <title>cmdln.net_2007-09-09</title>
    <expansionState>0,1,9,10,14,15,24,29,43,44,45,51,53,56,62,66,80,83,90,94,97,101,106,111,114,127,130,144,145,157,164,170,176,177,185</expansionState>
  </head>
  <body>
    <outline text="Intro" Offset="00:17">
      <outline text="Dragon*Con wrap up">
        <outline text="Worked twice as many panels as intended"/>
        <outline text="Very proud of the audio we captured"/>
        <outline text="Podcast programming was excellent"/>
        <outline text="Missed the two or three EFF panels I wanted to attend"/>
        <outline text="Got to socialize with old and new friends, most important"/>
        <outline text="Drama, incidents were rare, the exception"/>
        <outline text="Crowding may have us thinking about not going next year"/>
      </outline>
    </outline>
    <outline text="Listener Feedback" Offset="06:16">
      <outline text="C.A. Sizemore on Medeco story">
        <outline text="Yes, lock smiths have known about many picking techniques before hackers, public"/>
        <outline text="In talking to TOOOL folks at ShmooCon, they still seemed to think Medeco did better than average"/>
        <outline text="Relying on a lock alone, regardless of brand, is foolish"/>
      </outline>
    </outline>
    <outline text="Security Alerts" Offset="12:34">
      <outline text="Tor used as bait for malware" Offset="12:54">
        <outline text="http://feeds.feedburner.com/~r/boingboing/iBag/~3/153202221/beware-wolf-dressed.html"/>
        <outline text="As the Nick Matheson from the project suggests, this says more about Tor awareness than the spammers"/>
        <outline text="Spam warning of being surveilled"/>
        <outline text="Generated by storm worm, one of the biggest recent worms"/>
        <outline text="Suggests using Tor and provides links"/>
        <outline text="Email doesn't come from Tor authors"/>
        <outline text="Looks legit, through, with logo images"/>
        <outline text="Links do not go to Tor site"/>
        <outline text="Tor signs their packages, article has link on how to verify">
          <outline text="A lot of FOSS is signed"/>
          <outline text="Probably a good idea to look for signatures on all security related software"/>
        </outline>
        <outline text="Same practice of not clicking unverified links is wise, here"/>
        <outline text="Always review link targets, suspect them if they do not match"/>
      </outline>
      <outline text="Worm may rival top super computers" Offset="15:24">
        <outline text="http://rss.slashdot.org/~r/slashdot/eqWf/~3/153440965/article.pl"/>
        <outline text="Storm worm has been coopting Windows boxes for three months unabated"/>
        <outline text="Consensus is it has built the largest botnet to date"/>
        <outline text="By node count alone, tops purpose built super computers"/>
        <outline text="Observation suggests botnet may be as big as 50 million nodes"/>
        <outline text="Seems to idle at using about 2 million nodes"/>
        <outline text="Doesn't factor in power of individuals nodes"/>
        <outline text="Comparison is sensational for other reasons"/>
        <outline text="Super computers nodes must share data"/>
        <outline text="Botnet nodes can run much more independently"/>
        <outline text="How much performance would be lost due to lack of task coordination, message sharing?"/>
        <outline text="Regardless, gives a sense of scale to the attacks that have been and could be run"/>
        <outline text="I wonder if coordination channels might be more vulnerable at these larger scales?"/>
      </outline>
    </outline>
    <outline text="News" Offset="18:07">
      <outline text="Computer &amp; Communications Industry Association complains to FTC about copyright notices" Offset="18:22">
        <outline text="CCIA calls content industry on copyright misinformation">
          <outline text="http://www.groklaw.net/article.php?story=20070831145639691"/>
          <outline text="Argument is that copyright warnings, anti-piracy warnings ignore fair use"/>
          <outline text="Example statements are all or none in nature"/>
          <outline text="Also contradicts copyright act in that facts, &quot;accounts&quot;, and ideas are not copyrightable, specifically for MLB, NFL"/>
          <outline text="In the case of DVD, consumers are forbidden from skipping notices"/>
        </outline>
        <outline text="Copyright Alliance response">
          <outline text="http://yro.slashdot.org/article.pl?sid=07/09/07/0047225&amp;from=rss"/>
          <outline text="Main point is that fair use is not a right">
            <outline text="This is correct"/>
            <outline text="It is an affirmative defense"/>
          </outline>
          <outline text="The opinion is a mere statement of fact but also oversimplifies the CCIA complaint">
            <outline text="CCIA does explicitly state fair use as a right, in relief section"/>
            <outline text="I believe this is a redaction, factually incorrect but speaks to allowances under fair use, others"/>
            <outline text="Easier to say &quot;fair use rights&quot; than &quot;allowances or defensible actions if infringement is pressed&quot;"/>
            <outline text="Cites other rights, not necessarily fair use, in the copyright act and case law"/>
            <outline text="CA acting just as disingenuously as it claims CCIA is being, i.e. next point about pithy warnings"/>
          </outline>
          <outline text="CCIA complaint provides a positive example">
            <outline text="CA complains it is too wordy to address consumer rights"/>
            <outline text="Paragraph 43 shows a simple reference to sections 107, 108 is sufficient"/>
            <outline text="Not the only positive example, more follow that paragraph"/>
          </outline>
          <outline text="CA feels no harm is demonstrated">
            <outline text="CCIA states largest harm is chilling effect"/>
            <outline text="Relieve is oversight, assessment"/>
            <outline text="Critical statement about rights holders not forcing consumers to waive rights through contractual means, including adhesion"/>
            <outline text="That is, no click through or EULA style language for waiving rights"/>
          </outline>
          <outline text="Not seeking punitive, mildly injunctive"/>
          <outline text="Seeks to get rights holder involvement in education"/>
          <outline text="Of course the CA would object"/>
          <outline text="The more than key drive consumers to them for all needs, the better off they are"/>
          <outline text="The less money they would have to spend on enforcement"/>
          <outline text="Permission culture has reigned long enough"/>
          <outline text="Complaint has merit, despite the criticism"/>
          <outline text="The rights holders are usually careful enough to not go too far, to make just this argument, that harm is not material"/>
          <outline text="Some invalid DMCA takedown notices, though, show that the law is getting too thorny even for that tactic"/>
        </outline>
        <outline text="An explanation of why fair use is a right">
          <outline text="http://www.techdirt.com/article.php?sid=20070829/155106#c136"/>
          <outline text="A right is simply a legally justified claim"/>
          <outline text="Other examples of non-fair use, but consumer rights">
            <outline text="AHRA allows non-personal backups"/>
            <outline text="Section 117 allows some backups"/>
          </outline>
          <outline text="Also responds to fair use only being tested in court"/>
          <outline text="Equates it to criminal charge, each case must be individually tested"/>
          <outline text="Others have pointed out rights holder must act to press infringement"/>
          <outline text="Fact that copyright is granted by default only means it doesn't dilute in absence of complaint, like trademark"/>
        </outline>
      </outline>
      <outline text="Jennifer Grannick on legality of iPhone unlocking" Offset="27:52">
        <outline text="http://www.eff.org/deeplinks/archives/005418.php"/>
        <outline text="Granick fought for last year's cell phone unlocking exemption to DMCA"/>
        <outline text="Successfully argued that cell phone locking has nothing to do with infringement"/>
        <outline text="Exemption was narrow, though">
          <outline text="Protects unlocking user only"/>
          <outline text="Does not protect tool providers"/>
        </outline>
        <outline text="Tool makers will have to argue">
          <outline text="Garage door, ink cartridge may provide precedents"/>
          <outline text="Purchase connotes permission by owner to operate device"/>
        </outline>
        <outline text="Primarily arguing against DMCA language on making, distributing tools capable of infringement"/>
        <outline text="Issue is complicated by ToS and contracts">
          <outline text="Contracts, ToS do not apply to tool makers"/>
          <outline text="Damages are usually less than statutory ones"/>
        </outline>
        <outline text="She sees the iPhone as a lever to make more people care about these issues"/>
        <outline text="It is more likely that consumer demand will bring this argument into the courts"/>
        <outline text="Cites breaking of AT&amp;T monopoly as positive example">
          <outline text="Allowed any device to be attached to phone system"/>
          <outline text="Resulted in increased competition, innovation"/>
        </outline>
        <outline text="Unfortunately, cell carriers also have opportunity to learn from this history"/>
        <outline text="I am also hopeful but all parties are better armed"/>
      </outline>
      <outline text="New high level language, Vala, that compiles to C" Offset="32:51">
        <outline text="http://feeds.arstechnica.com/~r/arstechnica/journals/openended/~3/151382969/vala-high-level-programming-with-less-fat"/>
        <outline text="Loaded with sugary features similar to most newer, dynamic languages"/>
        <outline text="Compiling to C brings certain benefits">
          <outline text="Not really a dynamic language, no VM or interpreter so potentially faster"/>
          <outline text="Also means compatible with other C libraries"/>
          <outline text="May be called from other C programs"/>
          <outline text="Use of GObject system means also highly compatible with Gnome and GTK programs"/>
        </outline>
        <outline text="New version released this past week"/>
        <outline text="Increases compatibility with more environments through new bindings"/>
        <outline text="In particular now can be used on Nokia N800 smart phone and similar devices"/>
        <outline text="Like many new projects, documentation is biggest weak area"/>
        <outline text="Author suggests could become prime language for Gnome development"/>
        <outline text="Comparison to C# is not accidental, could lower bar to entry for Gnome"/>
        <outline text="Might yield more, better programs for that platform"/>
        <outline text="May just yield more programs, with median quality going down"/>
      </outline>
      <outline text="Molecular memory research" Offset="36:09">
        <outline text="http://feeds.arstechnica.com/~r/arstechnica/BAaf/~3/151463017/20070902-shifting-atoms-in-single-molecule-memory.html"/>
        <outline text="Motivated by pressure to shrink elements"/>
        <outline text="As die sizes decrease, problems increase">
          <outline text="Manufacturer gets more expensive, higher energy tolerances"/>
          <outline text="Start to incur interference from small scale quantum effects"/>
        </outline>
        <outline text="Same issues that motivated the neural network, nanocomputer research from last news show"/>
        <outline text="In the case of memory, research is on single molecules that can chemically switch between on and off"/>
        <outline text="Compounds that work well in lab have not been robust enough for real world"/>
        <outline text="Previous attempts shifted structure of molecule"/>
        <outline text="New approach moves hydrogen atoms without changing structurally"/>
        <outline text="Also, can be measured by changes in electrical conduction"/>
        <outline text="Still requires massive chilling"/>
        <outline text="Achieved 90% accuracy in switching, would need to do better"/>
        <outline text="Far more details in the article about how these molecules behave"/>
        <outline text="While this exact technique may not make it into real computers, suggests new ways size barrier may be broken"/>
        <outline text="Didn't talk about error correction at all, either, critical to memory in particular"/>
      </outline>
    </outline>
    <outline text="tail -f" Offset="40:16">
      <outline text="HR 811 e-voting reform bill coming to floor vote" Offset="40:35">
        <outline text="http://www.eff.org/deeplinks/archives/005421.php"/>
        <outline text="Supporters back for what it does, despite other improvements possible"/>
        <outline text="Would ban direct electronic reporting without paper trail"/>
        <outline text="Would also mandate security audits"/>
        <outline text="Originally had source code access provision but was diluted in the face of industry opposition"/>
        <outline text="Would be better than today's systems, regardless"/>
        <outline text="http://www.freedom-to-tinker.com/?p=1195"/>
        <outline text="Legislates results, allows choice in implementation"/>
        <outline text="Compromises on existing, weak paper trails"/>
        <outline text="Secure, durable must be implement where there are none"/>
        <outline text="Existing paper systems can be phased out by 2010"/>
      </outline>
      <outline text="HR 811 pushed back">
        <outline text="http://feeds.feedburner.com/~r/techliberation/~3/153940205/042771.php"/>
        <outline text="Two dissenting committee members"/>
        <outline text="Disagree because bill doesn't go far enough"/>
        <outline text="Sacrifice short term improvements for larger changes"/>
        <outline text="As long as the short term does no harm, why stall the bill?"/>
        <outline text="I think Tim Lee is being naive, I doubt this will ever be done correctly with a single bill, regardless of deadlines"/>
      </outline>
      <outline text="DoJ blasts net neutrality" Offset="42:05">
        <outline text="http://feeds.wired.com/~r/wired/topheadlines/~3/153191840/INTERNET_FEES_JUSTICE_DEPARTMENT"/>
        <outline text="Pretty much mouthing the telcos' arguments verbatim"/>
        <outline text="Overlooks that customers already pay for differentiated products"/>
        <outline text="What telcos want is to charge twice for bandwidth, at either end"/>
        <outline text="Overlooks consumer confusion, why two similar services run very differently, because of discrimination, not because of wire speeds"/>
      </outline>
      <outline text="Why is the DoJ commenting on net neutrality?">
        <outline text="http://techdirt.com/articles/20070907/000225.shtml"/>
        <outline text="Nominally because of their antitrust responsibilities"/>
        <outline text="There is no merger or monopoly, so why?"/>
        <outline text="Worse, why make these statements and not act when line sharing regulations were dismantled?"/>
        <outline text="DoJ overlooking subisidies and heavy regulations"/>
      </outline>
    </outline>
    <outline text="Outro" Offset="46:21">
      <outline text="Contact me">
        <outline text="Email to feedback@thecommandline.net"/>
        <outline text="Web site at http://thecommandline.net/"/>
        <outline text="IM to command.line@skype"/>
        <outline text="Listener comment line is 360-252-7284"/>
        <outline text="del.icio.us tag is &quot;for:cmdln&quot;"/>
        <outline text="http://twitter.com/cmdln"/>
      </outline>
      <outline text="I'd like to thank libsyn.com for AAC hosting and Wouter de Bie for MP3 hosting"/>
      <outline text="These notes and the show audio and music are covered by a Creative Commons license">
        <outline text="http://creativecommons.org/licenses/by-nc-sa/3.0/us/"/>
        <outline text="Attribution, non-commercial, share alike"/>
      </outline>
    </outline>
  </body>
</opml>
