<?xml version="1.0" encoding="UTF-8"?>
<opml version="1.0">
  <head>
    <title>cmdln.net_2008-04-06</title>
    <expansionState>0,1,11,12,15,19,25,26,40,59,60,83,100,112,120,139,147,173,174,175,185,190,198,199,207</expansionState>
  </head>
  <body>
    <outline text="Intro" Offset="00:17">
      <outline text="Reading of Edward Lee's paper">
        <outline text="From Jon's feedback last week"/>
        <outline text="Thorough criticism of the problem with threads"/>
        <outline text="Multiple threads are non-deterministic"/>
        <outline text="Too difficult for programmer to predict program state"/>
        <outline text="Well cited"/>
        <outline text="Offers some positive ideas for better approaches"/>
        <outline text="Mostly coordination languages"/>
        <outline text="Additional language or added language semantics"/>
        <outline text="Describe when and how threads coordinate"/>
      </outline>
    </outline>
    <outline text="Listener Feedback" Offset="03:34">
      <outline text="Comments from Randal Schwartz on web site">
        <outline text="Perl does JIT parsing, doesn't keep re-parsing"/>
        <outline text="Parrot uses bytecode, supports compile and interpreted mode"/>
      </outline>
      <outline text="Bruce Barr">
        <outline text="Macros are totally scripting"/>
        <outline text="Recorders are not unique"/>
        <outline text="My favorite text editor, vim, supports recording, macros"/>
      </outline>
      <outline text="David Ward">
        <outline text="There is a free Microsoft option"/>
        <outline text="Nothing wrong with Microsoft scripting"/>
        <outline text="Be careful with Access, though"/>
        <outline text="In the past hasn't been a good multiuser database"/>
        <outline text="Good to get some exposure to other tools, even if you go back to MS"/>
      </outline>
    </outline>
    <outline text="Security Alerts" Offset="17:32">
      <outline text="Another RFID encryption scheme cracked" Offset="17:51">
        <outline text="http://www.eetimes.com/rss/showArticle.jhtml?articleID=207000946&amp;cid=RSSfeed_eetimes_newsRSS"/>
        <outline text="Scheme used by NXP's Mifare Classic"/>
        <outline text="Cracked by CCC along with researchers at UVA"/>
        <outline text="Break is thorough, allows reading, writing cards and cloning, creating new ones"/>
        <outline text="Uses 48-bit encryption"/>
        <outline text="Doesn't appear to have been updated since market introduction in mid-nineties"/>
        <outline text="Vendor doesn't plan to withdraw product"/>
        <outline text="Will communicate findings with customers"/>
        <outline text="Has stronger encryption available, tripe DES and AES"/>
        <outline text="Sees it as the decision of the implementer to change up"/>
        <outline text="Lower encryption is probably cheaper"/>
        <outline text="Vendor would rather see a cheap sale than out pricing themselves"/>
        <outline text="Not doing implementers any favors"/>
      </outline>
      <outline text="Biometrics hacking tool" Offset="19:47">
        <outline text="http://feeds.engadget.com/~r/weblogsinc/engadget/~3/263482389/"/>
        <outline text="Research shared at Black Hat Amsterdam"/>
        <outline text="By Matthew Lewis of Risk Management"/>
        <outline text="Biometric data isn't encrypted between scanner and server"/>
        <outline text="Requires physical access to network"/>
        <outline text="Highlights attack is possible, though"/>
        <outline text="Tool acts like a key logger, but for biometric credentials"/>
        <outline text="Can sniff, identify and capture credentials"/>
        <outline text="Access may get easier in retrofits, as existing IP networks are re-used"/>
        <outline text="Tool can be placed on an existing host on a network"/>
        <outline text="IP based access control is being pushed by larger players"/>
        <outline text="Research so far has been on fingerprints"/>
        <outline text="Should generalize to other types of biometrics"/>
        <outline text="Lewis wants vendors to improve"/>
        <outline text="Suggests answer is as simple as encryption on the wire"/>
        <outline text="Wonder, though, at the capabilities of the scanners"/>
        <outline text="Do they have enough processing power to do secure encryption?"/>
        <outline text="If not, cost of adding may have negative affect on price, adoption"/>
      </outline>
    </outline>
    <outline text="News" Offset="23:28">
      <outline text="More on Mozilla Weave for synch, collaboration and mobile" Offset="23:42">
        <outline text="http://arstechnica.com/news.ars/post/20080331-mozilla-wants-to-put-firefox-in-the-cloud-and-your-pocket.html"/>
        <outline text="First saw this back in December last year"/>
        <outline text="Weave provides storage, sync for Firefox"/>
        <outline text="Already supports bookmarks, history"/>
        <outline text="Does so securely, all user data is encrypted"/>
        <outline text="Working on a third party API"/>
        <outline text="Eventually extension developers will be able to use it"/>
        <outline text="Includes a server specification, uses webdav"/>
        <outline text="Transport to client uses JSON, a JavaScript serialization specification"/>
        <outline text="Next steps are sharing data between users"/>
        <outline text="Think social networks though this sounds like it could be more useful"/>
        <outline text="Like that they are concentrating on permissions aspect"/>
        <outline text="Could make mobile more compelling"/>
        <outline text="Memory improvements in Firefox 3 make it a serious mobile option"/>
        <outline text="Experience of moving seamlessly between desktop, mobile could be killer"/>
        <outline text="Mobile plans are earlier and ambitious"/>
        <outline text="Want to improve usability, keep it secure, not have to distort content"/>
        <outline text="Weave may be more likely to succeed"/>
        <outline text="Only serious competitor is Google Gears, uptake of which has been slow"/>
        <outline text="Mobile will be harder, perception that Firefox is bloated"/>
        <outline text="Participation in mobile space may net improvements in Opera, WebKit"/>
        <outline text="More focus on Firefox's priorities in response"/>
      </outline>
      <outline text="Creative stops user support of their under supported product" Offset="27:33">
        <outline text="http://feeds.boingboing.net/~r/boingboing/gadgets/~3/261334203/creative-stops-hacke.html"/>
        <outline text="Creatives driver support specifically for Vista has been bad"/>
        <outline text="Their excuse is the sound system is Vista is poor"/>
        <outline text="Has left customers out in the cold"/>
        <outline text="A modder, Daniel_k, reverse engineered the drives"/>
        <outline text="Re-enabled features Creative wasn't supporting under Vista"/>
        <outline text="Creative did not do anything, at first"/>
        <outline text="Apparently only reacted after he started taking donations"/>
        <outline text="In the forums where this has unfolded someone from Newegg has responded"/>
        <outline text="Claims the online reseller will be boycotting Creative"/>
        <outline text="Unconfirmed if that thread is legit"/>
        <outline text="Reverse engineering, in a clean room, is legal"/>
        <outline text="Not sure of the rights of Creative when he starts taking money"/>
        <outline text="I've certainly seen third party drivers, even donation ware"/>
        <outline text="Used one with my old PB for its trackpad"/>
        <outline text="That was not after market, but isn't too different"/>
        <outline text="The modder's side of the Creative story">
          <outline text="http://feeds.wired.com/~r/wired/topheadlines/~3/262120523/daniel_k-who-fi.html"/>
          <outline text="Thorough detail on what he did"/>
          <outline text="More important, on what he found about how Creative enabled, disabled features"/>
          <outline text="Creative probably more made that he reversed their control scheme"/>
          <outline text="Donations were not directly for drivers, just to support his work generally"/>
          <outline text="He thinks that was wrong, I disagree"/>
          <outline text="He admits he is working no hardware, features he won't use"/>
          <outline text="OK to accept donations from people who benefit"/>
          <outline text="Can't speak to the ALchemy changes, but suspect if the limits were arbitrary, Creative was unfairly punishing customers"/>
          <outline text="Daniel would have worked with Creative if they had approached with more courtesy"/>
          <outline text="Creative is allowing to accept donations, just doesn't want him unlocking premium features"/>
        </outline>
        <outline text="Creative backs down">
          <outline text="http://techdirt.com/articles/20080403/234719746.shtml"/>
          <outline text="Creative restored forum posts it formerly removed"/>
          <outline text="Claims the issue was other company's property"/>
          <outline text="Again, if reverse engineered, how was Daniel distributing &quot;their property&quot;?"/>
          <outline text="May have been a legit mistake they are honestly trying to make up for"/>
          <outline text="Claim to support Daniel, others"/>
          <outline text="Remains to be seen, could be trying to play it both ways"/>
        </outline>
      </outline>
      <outline text="Lawyers subpoena code, text messages" Offset="33:39">
        <outline text="http://www.nytimes.com/2008/03/30/nyregion/30text.html?_r=3&amp;th&amp;emc=th&amp;oref=slogin&amp;oref=slogin&amp;oref=slogin"/>
        <outline text="During the RNC, protests of scale were launched"/>
        <outline text="They were coordinated via SMS"/>
        <outline text="Messages flowed through technology developed by Instituted for Applied Autonomy"/>
        <outline text="http://www.appliedautonomy.com/"/>
        <outline text="Group interested in how technology can enable self determination"/>
        <outline text="Excellent example of hacktivism"/>
        <outline text="NYC Law Department identified author of TXTmob"/>
        <outline text="Tad Hirsch, doctoral student at MIT"/>
        <outline text="Action arose out of dozens of suits by people arrested in wake of protests"/>
        <outline text="City consolidated suits, police feel these are the exception to largely peaceful actions"/>
        <outline text="Hirsch's lawyers contesting the subpoena, explaining it is too vague, overboard"/>
        <outline text="Hirsch is dedicated to protecting free speech, privacy rights of users"/>
        <outline text="System clearly was used well beyond just protester coordination"/>
        <outline text="Reporters definitely used to follow action"/>
        <outline text="Law enforcers were probably monitoring"/>
        <outline text="Ironic since TXTmob was in some ways a response to law enforcement acting to forestall larger, more organized protest"/>
        <outline text="The service allows smaller, more fluid organization, roaming protests"/>
      </outline>
      <outline text="Why US engineers do not participate in public policy" Offset="36:24">
        <outline text="http://www.eetimes.com/rss/showArticle.jhtml?articleID=207001226&amp;cid=RSSfeed_eetimes_newsRSS"/>
        <outline text="Assumes little or no US engineers work in government"/>
        <outline text="Not sure this assumption is valid, author is in SF on west coast"/>
        <outline text="Here in DC, much involvement, usually through contractors"/>
        <outline text="Implies that danger of espionage, treason may be chilling"/>
        <outline text="Cites work of UVA researcher"/>
        <outline text="Research contrasts predominance of engineers in Chinese government to lawyers in US"/>
        <outline text="Thinks difference in mindset is telling">
          <outline text="Lawyers think short term fixes"/>
          <outline text="Engineers think long term solutions"/>
        </outline>
        <outline text="Limits policy interaction to legislation"/>
        <outline text="Consider advisory roles but thinks influence too limited"/>
        <outline text="Example of NASA directors during height of space program"/>
        <outline text="Cites other academics who speak to psychological, sociological factors"/>
        <outline text="Describe mind set as introverted, arrogant, logical"/>
        <outline text="Engineers may see social problems as outside scope of technical solutions"/>
        <outline text="Researchers suggest engineers may have other skills to offer"/>
        <outline text="Article only cites immigration, visas"/>
        <outline text="Wish they had explored more, like long term planning, resource management"/>
        <outline text="Think cultural differences may factor in"/>
        <outline text="In countries that more strongly equate engineering with professional success"/>
        <outline text="May net closer affinity to political power, activism"/>
        <outline text="Article disappoints in it considers mostly engineers perspective"/>
        <outline text="Cultural considerations limited to issues of alignment"/>
        <outline text="What about limits on opportunities?"/>
        <outline text="Engineers have run, recently, but clearly stacked against them"/>
        <outline text="Campaign finance, appealing to potential constituency"/>
        <outline text="Is influence outside of direct participation really that limited?"/>
        <outline text="US ACM publishes many position papers"/>
        <outline text="Researchers like Felten, Schneier weigh in on critical issues like e-voting"/>
        <outline text="Agree that US engineers need to be more politically aware, active"/>
        <outline text="Disagree that this article is a good motivator"/>
        <outline text="Doesn't suggest any good ways forward, fixates on foreign circumstances"/>
      </outline>
    </outline>
    <outline text="tail -f" Offset="43:13">
      <outline text="Latest in making available cases" Offset="43:32">
        <outline text="Ruling in Elektra v. Barker">
          <outline text="http://feeds.arstechnica.com/~r/arstechnica/BAaf/~3/261648106/20080331-new-ruling-may-grease-the-wheels-of-riaa-litigation-machine.html"/>
          <outline text="Elektra v. Barker case has ongoing for over two years"/>
          <outline text="Considered one of the most serious evaluations of the issue"/>
          <outline text="Judge allowed RIAA is viable, that defendant offered to distribute"/>
          <outline text="Didn't necessarily accept making available theory but did reject defendants motion to dismiss"/>
          <outline text="Essentially admitted RIAA case has merit"/>
          <outline text="von Lohmann of EFF characterizes ruling as well reasoned but unfortunate"/>
          <outline text="Case will proceed to court unless defendant settles"/>
          <outline text="Confusing ruling, to me, which may not really affect the contours of making available question"/>
        </outline>
        <outline text="EFF analysis of the ruling">
          <outline text="http://www.eff.org/deeplinks/2008/04/offering-distribute-distribution-says-elektra-v-barker-ruling"/>
          <outline text="Takes issue with considering publication, distribution the same"/>
          <outline text="Clarifies how different definitions expand, narrow scope respectively"/>
          <outline text="Doesn't mean question of making available is settled"/>
        </outline>
        <outline text="More on making available theory">
          <outline text="http://www.eff.org/deeplinks/2008/04/making-available-distribution-says-court-london-sire-v-doe"/>
          <outline text="Atlantic v. John Does 1-21, now known as London-Sire v. Doe"/>
          <outline text="Opposite ruling from Barker"/>
          <outline text="Another ruling based on very thorough examination"/>
          <outline text="Still, like Barker case allowing case to proceed"/>
          <outline text="Also, unfortunately, may not affect question much"/>
          <outline text="Like Groklaw article a bit back, case law still being made"/>
        </outline>
      </outline>
    </outline>
    <outline text="Outro" Offset="48:08">
      <outline text="Contact me">
        <outline text="Email to feedback@thecommandline.net"/>
        <outline text="Web site at http://thecommandline.net/"/>
        <outline text="IM to command.line@skype"/>
        <outline text="Listener comment line is 240-949-2638"/>
        <outline text="del.icio.us tag is &quot;for:cmdln&quot;"/>
        <outline text="http://twitter.com/cmdln"/>
      </outline>
      <outline text="I'd like to thank libsyn.com for AAC hosting and Wouter de Bie for MP3 hosting"/>
      <outline text="These notes and the show audio and music are covered by a Creative Commons license">
        <outline text="http://creativecommons.org/licenses/by-nc-sa/3.0/us/"/>
        <outline text="Attribution, non-commercial, share alike"/>
      </outline>
    </outline>
  </body>
</opml>
