Main

November 20, 2008

What's the problem with Microsoft

The Get a Mac commercials are more than just cute, and they're more than just stereotypes of Mac users and PC users. These commericals present substantive critiques of PCs and with Windows specifically, including:

  • the degree to which PCs come pre-loaded with trial software
  • the prevalence of viruses on PCs
  • the ease with which Mac users can create and publish Web content
  • Windows Vista's security concerns

These are all critiques that are "arguable" in that they present an argument. Apple argues that the implementation of Windows Vista's User Account Control presents security problems. It is now Microsoft's responsibility to respond.

Or, at least, that's how it should be.

Microsoft has, through its "I'm a PC" commercials, decided not to address the arguable parts of Apple's Get a Mac ads at all. Instead, Microsoft will address the non-arguable part of the ads; namely, the stereotypes of the PC users.

Yes, certainly we understand that the Get a Mac commercial, with its young and hip Mac constantly trying to understand the old and stodgy PC, dabbles in stereotypes. Microsoft wishes to fire back, suggesting that not all PC users are stodgy; indeed, many of them are just as hip -- if not more so -- than Mac users.

But that's not the point. Will this really convince potential Apple customers not to switch to a Mac? No one buys a Mac because he or she thinks it will make him or her "hip." People switch to Macs for all the reasons outlined above: Macs are perceived as easier to use and more secure. Regardless of whether or not this is the case (and that's a discussion for another day), this is the perception of Macs in the general public. If Microsoft really wants to tear customers away from Apple, it will need to address the arguable issues, not the inarguable ones. And it is these arguable issues that matter to consumers; indeed, it's the point behind advertising. Does Diet Dr. Pepper really have the same taste as regular Dr. Pepper? That is at issue, and the advertising tries to persuade the consumer that, yes, they taste the same. This will induce the consumer to buy Diet Dr. Pepper.

In the same way, Microsoft would be better served hiring an ad agency whose campaign addresses the arguable issues. Does Windows Vista have security problems? Is a Mac really easier to use than a PC? The recent election showed us that unarguable issues don't really matter to voters: to call Barack Obama a "socialist" means nothing. To suggest that he'll raise your taxes? Now that's arguable!

The public perception of Microsoft has nothing to do with its hipness and everything to do with Windows' own problems: viruses, stability, security, compatibility. Microsoft could, for example, counter Apple's campaigns by pointing out that there are far more applications (and games!) designed for Windows than there are designed for Macs. Microsoft either doesn't recognize that this is its problem, or it doesn't want to recognize that this is its problem. It appears that Microsoft would rather deflect the substantive issues altogether and change the subject. Unfortunately, consumers who are thinking about whether to buy a Mac or a PC have the substantive issues very much in their minds, and those issues won't be lured away by a funny commercial about how everyone can be a PC.

December 4, 2007

Facebook becoming too ad-centric

I've written in this space before about how I think the Unifying Theory of Advertising doesn't work on the Internet. There are too many ways in which a user can ignore or outright disable ads. This cuts down on the number of people who view the ads, and in turn, how many people buy the stuff featured in the ads.

Read/Write Web today takes issue with the advertising technology at the heart of Facebook's potential $15 billion valuation (based on Microsoft paying $240 million for a 1.6% stake).

The problem, writes Alex Iskold, is that "people are not coming to Facebook to click ads." Ignoring for a moment the other half of Iskold's thesis -- that Facebook isn't capable of delivering relevant ads that people want to click on -- we're left with a problem that could bring down Web 2.0.

I've said it before: people don't like advertising. They tolerate because they have to, and whenever they can easily get around it, they do. Advertising is reaching a saturation point, and it won't be long before people, fed up with constantly being marketed at, abandon forums that contain advertising in favor of forums that don't. If Facebook becomes too ad-oriented, it runs the risk of alienating its users at worst, and losing revenue from users who don't buy the products advertised. Once the revenue goes down, then ad-based social networking sites -- which are most of them -- will find themselves in the unemployment line right behind Web 1.0.

August 1, 2007

Advertising will bring down Web 2.0

John C. Dvorak writes today in PC Magazine about the impending "Web 2.0" bubble. "Web 2.0" refers to social networking and user-generated content websites like MySpace, Facebook, YouTube, and Flickr. "Bubble" refers to the overvaluation of these companies and the eventual collapse of the Web 2.0 business model once investors pull their money out.

Why will they pull their money out? Lots of promises without the coincident profitability. The original "dot-com" bubble burst because companies promised a lot of stuff without generating a lot of money. Says Dvorak, "We were told that you'd be buying sandwiches over the Internet and having them delivered the next day by FedEx." There actually were several dot-com startups that delivered groceries that you purchased online. And while these were very whiz-bang companies, not enough people bought into their promises of changing the world to make them profitable. People don't want to buy groceries online; they want to go to the store and see them!

The Web 2.0 bubble, says Dvorak, will be worse. But why? He cites several reasons, but I can think of one big one: advertising. Advertising is fueling the Web 2.0 phenomenon. It's traditional advertising, like context-sensitive search results (such as Google Ads) or big, flashy banners on MySpace. The inherent assumption in advertising theory (if there is such a thing) is that the existence of an ad is prima facie evidence that revenue will be generated from that ad, because a person who sees an ad will necessarily buy whatever is advertised.

This ignores a few things: (1) some people aren't morons (that is, they don't automatically buy whatever is shown to them in an ad); and (2) not everyone sees the ads that you place there (due to pop-up blockers, ad blockers, or TiVo). If people can avoid advertising, they will. And I cite Second Life as my example. Second Life was touted as a revolution: you could do business in a virtual world without ever paying the fixed costs that having a business entails. Need to have a meeting? Have it in Second Life! Companies with advertising to do jumped onto this, creating stores and marketplaces in Second Life where users could purchase branded stuff.

The problem is: no one cared:

But the sites of many of the companies remaining in Second Life are empty. During a recent in-world visit, Best Buy Co.'s Geek Squad Island was devoid of visitors and the virtual staff that was supposed to be online.

The schedule of events on Sun Microsystems Inc.'s site was blank, and the green landscape of Dell Island was deserted. Signs posted on the window of the empty American Apparel store said it had closed up shop.

McGuinness said Starwood's venture into Second Life did accomplish something. Feedback from denizens gave Aloft ideas for its physical hotels.

The point is that, given advertising or none, people choose no advertising. Or no branding. Or no shopping. Advertising encourages people to buy things they need, but once everyone has everything he or she needs, advertising moves into its next phase of existence: convincing people to buy things they don't need. Convincing them that there's a void in their life that can only be filled by Banana Republic jeans, Budweiser, or Chevrolet. In the United States, shopping is a past-time. In Second Life, not so much. In an episode of The Simpsons where giant, metal advertising characters came to life and tried to destroy the town, Lisa observed that if you don't pay attention to them, they'll go away. It appears that Second Life has also learned how to use advertising's silver bullet: when no one responds, the advertisers move on.

This is Second Life, but it could be the rest of the Internet, which is much more predicated on advertising revenue than Second Life. In fact, advertising revenue is probably the number one business model, with subscriptions close behind. Advertisers pay Google or Facebook to place their ads on the page, in the hope that visitors will be attracted to these ads and then purchase the products. The entire model operates under the assumption that all ads that are put out there will be seen by consumers; and, as a correlation, all consumers who see those ads will go out and buy the products. As I said at the beginning of this article, those two assumptions are flawed, and when companies realize this, they'll pull some of their billions out of the Internet. Ad-blocking software is very prevalent, and all modern browsers (Internet Explorer 7, Safari, Firefox) offer popup-blocking options. Just because an ad is placed on a website doesn't mean that it will ever be seen. I have popup and ad-blocking software on all my web browsers: I hardly ever see advertisements.

Web 2.0 gets its money from these advertisements. That's why Rupert Murdoch paid $500 million for MySpace, and why Google paid $1.6 billion for YouTube. It's the prospect of reaching an advertising audience. But what if that audience won't see the ads, or won't click on them? The advertisers will pull out, and suddenly the social networking sites will go back to being mere social networking sites, devoid of advertising. This is a good thing for users, but a bad thing for Web 2.0 proprietors, who depend on that revenue to keep the sites going.

May 13, 2007

Think twice before going to www.terrorism.com

In 1994, Congress passed -- and Bill Clinton signed -- the Communications Assistance for Law Enforcement Act, which, even before the Internet was popular, demanded federal snooping access to the Internet.

Tomorrow, May 14, 2007, is the deadline set forth in CALEA, by which time all ISPs must have installed backdoors into their systems to allow The Feds easy access. It's strange to think that this is a privacy-invading law that was passed before September 11. It was passed before the Oklahoma City bombings, even.

Thankfully (?), the law doesn't require that an ISP be able to decrypt encrypted customer communications, as long as it was the customer, and not the ISP, that encrypted the communications.

[Via Wired Threat Level blog.]

February 6, 2007

New 'Get a Mac' ad targets Vista security features

In its latest "Get a Mac" ad, Apple accurately highlights one of the problems of Windows Vista: its security.

In the ad, a secret service-looking guy stands behind PC, asking him if he wants to "cancel or allow" practically anything he does. Several websites have pointed out that Vista's new "security" is less secure than it is annoying, since it asks you to authorize even normal functions. I can't remember off-hand where those websites are, but I'll bring up a few of the good points they discussed:

  • Vista is inconsistent in when it asks for permission to do things. Even opening the Microsoft Management Console requires you to click "continue." As one website pointed out, Mac OS asks for your authorization only for a few things; therefore, you will be trained to understand that when it asks you for your password, you could be doing something dangerous. Microsoft's approach -- parodied excellently in the above-mentioned ad -- is to ask you for approval even for things that aren't system-critical. This trains the user to merely click past the dialogue without thinking about what he or she is doing.
  • Vista is also inconsistent in the way it asks for your authorization. Clicking "continue" or "cancel" is one way it asks for permission to do something. An entirely separate dialogue opens when you run an application installer that may make changes to the system; in that dialogue, you must click "allow" or "cancel." If you're not an administrator, there is a third dialogue that can pop up, asking you to actually type in an administrator's name and password. There is still a fourth method of authorization: it's the holdover from Windows XP SP2 that asks you if you want to run the particular program (and includes a checkbox for "don't ask me again" for that program). Mac OS, on the other hand, always asks for your authorization in the same way, so you're never confused about what's going on.
  • Clicking "okay" does not make anything secure. The action of clicking a single button may be performed by the user automatically, as I mentioned above, without thinking. It may also be performed by spyware, which can move the mouse or emulate a mouse click. Mac OS requires you to type in a password. The time it takes to remember the password and physically type it in is time that you could use to think about what you're doing. Also, spyware doesn't know your password, so it can't emulate your typing it in.
  • In Vista, you can actually turn this protection off. As PC points out in the ad, either you get all the alert dialogues, or you get none of them. In Mac OS, turning off these warnings isn't an option (unless you're the root user, and a root user isn't enabled by default, so the average user will never "accidentally" turn off warning dialogues), even if you're an administrator. This means that you -- or spyware -- can't blow past an installation.

The point is that Windows Vista doesn't encourage good security practices. It actually discourages them in favor of what Microsoft thinks is a happier user experience. Or it poorly implements them for an annoying user experience that makes people just shut the security off.

Interestingly, this is only the third "Get a Mac" ad (of the many ads they've made so far) that mentions Windows (but not Microsoft) by name. The first was the ad that introduced Boot camp; the second was the "surgery" ad that showed PC being prepped for his "upgrade" to Windows Vista.

(Via TUAW.)

January 13, 2007

Windows Vista doesn't suck that hard

SAN FRANCISCO -- Part of my job will require supporting users running Microsoft's newest operating system, Windows Vista. So I had to install it on my computer. My "computer" is actually a virtual machine running under Parallels Desktop for Mac on a 2.16 GHz 20" iMac Core 2 Duo. I'd love to have the Aero Glass interface (and, indeed, the 128 MB video card could handle it), but Windows doesn't recognize the special Parallels drivers, so it won't do anything like that.

Here's the low down: Windows Vista isn't as terrible as I thought it would be.

Security

Windows Vista actually enforces "administrator" rights like Unix does. This is good. What's bad, though, is that it does so in three different, inconsistent ways. Vista may ask you to "allow" a program (or installer) to run much like Windows XP SP2 requires you to allow certain programs to run. This prevents programs from installing stealthily, which was the major problem with Windows XP. Vista may ask you if you wish to "continue" with the execution of a program that it determines could be potentially risky. Finally, Vista may ask you to type in your full-blown administrator name and password. It may ask for all of these or a combination of them.

It's good that Vista has security in mind, but it's bad that Microsoft implemented security in a half-assed way. On Mac OS, if you want to install anything that's not a drag-and-drop into your own user folder, you must -- always! -- supply an administrator's name and password. No questions, no deviations. If you are about to install something on Mac OS that modifies the operating system, you have to be authenticated.

It's not enough that Vista requires you to click a button; certainly a smart program could create a macro that clicks the button or at least emulates, to the operating system, clicking a button. It's tremendously more difficult to find out your name and password. This is good for multiple users, as well; anyone who isn't an administrator could potentially install stuff on your computer just by clicking a button. They don't need to know a password.

Multiple users

Whereas Windows 9x had no multi-user support to speak of (except for multi-user logins which just saved some settings and Start Menu configurations), Windows XP did have support for multiple users. Windows Vista continues this trend, which is good. But, again, the benchmark for multiple-user support is Mac OS, where not only are one user's settings totally separate from another user's settings, but users can't even see each other's folders. In fact, not even an administrator can see other user's folders. Only the root user (which is disabled by default but can be enabled by any administrator) can see other user's folders. In Windows Vista, anyone can see anyone else's stuff. Why is this still going on?

Functionality

Vista took a nose-dive in the user interface department. It's more difficult in Vista to find what you're looking for than it was in Windows XP. For example, how do I find out my IP address? A user of moderate knowledge could go to a command line and type "ipconfig." But Windows Vista wants to be graphically based. Okay, let's bite. The first thing you would do is go to the Start Menu and then to Network. But Network doesn't display your network settings; it displays the stuff on your network. You'll need to click Network and Sharing Center in the menu bar of the Network window to get to the settings. The next window looks familiar; it's almost like the Network Settings control panel from Windows XP, but it provides a little more information. For example, if you're connected to a domain, it will tell you what the domain is. That's great! But it doesn't tell you what your IP address is. For that, you'll need to "View Status" of your local area connection. But even that doesn't tell you your IP address like it did in Windows XP. You must click "Details" and then you can figure out your IP address.

The Lowdown

Some people -- like major marketing companies -- would like you to believe that Windows Vista is a next-generation, super-duper operating system. It's not. It's merely the next iteration after Windows XP. Microsoft spent the last six years slowly stripping away features and, in the same way that they rewrote Windows 2000 and called it Windows XP, they rewrote Windows 2003 and called it Windows Vista. There's no reason to upgrade to Vista, especially if you have an older machine. The sexy Aero Glass interface will only work on machines with a real video card, so if you purchased a bargain-basement machine from Dell with onboard Intel video, you're out of luck. What you'll be using will look and act pretty much like Windows XP. And when the "Home Premium" version of Vista (which is the only "home" version that doesn't suck) costs $300, why bother?

December 1, 2006

Movie companies to Apple: 'Be evil'

AppleInsider reports that movie industry executives refuse to license their films to the iTunes Music Store unless Apple locks down the content in a way that makes them happy:

"The studios want to avoid the experience of the music industry, which has yet to recover from years of illegal digital piracy," the report states. It quotes one studio executive involved in the talks as saying Apple must introduce a "new model" for feature film content delivery.

It is debatable and, by all independent analyses, extremely unlikely, that piracy is responsible for a decrease in music industry revenue. Never mind that (1) companies similar in size to the aggregate size of the RIAA's member companies experienced a similar downturn in revenue; (2) the music companies have actually been releasing fewer units than before their downturn; and (3) it may just be possible that consumers are buying less corporate music because they don't like it.

The RIAA and MPAA have always argued that DRM is essential to their online business models. Without DRM, they argue, we wouldn't be able to provide the content to you; therefore, in order to provide content to you, we must DRM it. This flawed logic implies that DRM is necessary for online content distribution, when, in fact, these industries only require DRM so that they can be sure that no one will ever -- ever -- use their content in a way that they don't want.

But this isn't news. Music companies have been pressing Apple to fall into their way of doing things for years. Music companies want Apple to adopt a variable pricing scheme that makes popular tracks more expensive than unpopular ones. Ever since the inception of the iTunes Music Store, Steve Jobs has sold all music for the same price, regardless of popularity. The only things that makes albums more expensive at the iTunes Music Store is the amount of stuff included (i.e. a multi-disc collection is more expensive than a single-disc album).

Fortunately, Apple is more responsive to its consumers than Microsoft, and Steve Jobs is stubborn enough not to be bullied by music industry executives. When the music companies came to Microsoft and said that they wanted a device that would barely function, and when it did, it would function the way music companies wanted it to, Microsoft said, "Where do we sign?" Apple designed the iPod and the iTunes Music Store by asking, "What features do consumers want?" DRM is probably not at the top of the list.

November 27, 2006

Professor Rosengarth talks back

Over the weekend, I wrote about how a professor at Bridgewater University used one of my blog entries in his class. I emailed him to ask him how he happened to choose my entry, and what his students thought of it. His response:

Hello Mr. Wilson,

Thanks for your e-mail. The class you came upon is an "intro to liberal arts" class that centers around writing reflective essays on a variety of personal development topics. Since this fall was an election season, your blog entry served to stimulate discussion on what is "liberal" and what is "conservative."

I found your blog through a "liberal vs. conservative" Google search. The course syllabus indicated the link to your site. Students had to visit your link directly to access your blog entry.

This group of first year college students seemed very accepting of your comments. I was surprised that the general topic of contemporary politics did not bring the type of enthusiastic discussion that I anticipated.

Best regards,
Tom Rosengarth

Oh, man! I had hoped I would inspire spirited debate. Then again, it could be that first-year college students are apathetic about most things in general, if they do the readings at all.

November 24, 2006

Zune player 'is about as pleasant as having an airbag deploy in your face'

Andy Ihnatko of The Chicago Sun-Times writes his review of the Microsoft Zune player. His recommendation:

"Avoid," is my general message. The Zune is a square wheel, a product that's so absurd and so obviously immune to success that it evokes something akin to a sense of pity.

Once again, Microsoft proves its schizophrenia: on the one hand, it wants to make good products. On the other hand, its good products are inhibited by its awful operating system and its necessity to do what its business partners want it to (i.e., put DRM into the system).

November 18, 2006

Why Apple makes better PCs than PC makers do

This is an excellent discussion of the differences between Intel Macs and Intel PCs. As the author observes, now that Apple is using Intel processors, Apple isn't making Macs; it's making next-generation PCs. Apple's use of Intel's GUID Partition Table (GPT) format and its EFI firmware have gotten it away from the legacy universe of PCs, which still operate using technology from the 1980s.

Indeed, HP still ships its computers with PS/2 mice and keyboards (leading those of us in the IT field to collect mountains of USB-to-PS/2 adapters that must ship with every PC-compatible mouse and keyboard, just in case), whereas Apple introduced the iMac in 1998 with USB mice and keyboards. Apple also dumped the 3 1/2-inch floppy drive in 1998, something that PC manufacturers still include, despite the fact that modern data can't begin to fit on a 1.44 MB disk that reads and writes at about 100 KB/sec. Solid-state flash drives are cheap (you can get 128 MB of storage -- which is plenty for the average user -- for $20), fast (USB 2.0 transmits data at 400 Mb/s, or 50 MB/s, compared to the floppy drive's 0.1 MB/s), convenient (any computer with a USB port can read data from a USB drive, and Windows automatically detects and installs pretty much every kind of USB drive), and robust (there are no moving parts in a USB drive, meaning that disks crashing or becoming corrupt due to mechanical or physical problems is impossible).

It's amazing that HP and Dell are still using technology that is 20 years old to produce PCs. Those PCs still boot into a DOS-looking screen, they still rely on the old BIOS architecture for their firmware, and some of them still ship with parallel (Centronics) ports, which no one even uses anymore (all modern printers either connect via RJ45 or USB jacks). In making the transition to Intel processors, Apple has created what the PC of 2006 should look like: a machine that abandons any hint of DOS, that utilizes only the most modern peripherals and components, and that allows for backward compatibility without mandating it. (If you want a floppy drive, for example, you can just plug a USB floppy drive into your Mac; however, space isn't wasted in producing an OEM floppy drive for the sake of the minority who still use floppies.) And PC manufacturers certainly haven't adopted IEEE 1394 "FireWire" ports, even though FireWire 400 actually transmits data faster than USB 2.0, due to the way in which the data is routed by the system.

And then there's Windows. Windows 95 was a hearty attempt to get rid of DOS. Even as late as Windows 3.1, Microsoft's operating system was just a user interface that floated on top of DOS, which did the real behind-the-scenes work. Windows 95 was the first time that Windows was actually the operating system in control. Windows XP was a further evolution, ending the Windows 9x (95, 98, 98se, Me) train and instead branching off the Windows 2000 train. But Windows XP still contains ridiculous legacy components that wouldn't be there if Microsoft had set out to refurbish its operating system. Microsoft didn't rebuild Windows from the ground up in order to create XP; rather, it smushed together Windows 2000 and Windows 98 to create an OS that had the pretty functionality of the consumer-level Windows 98 and the back-end robustness of the professional-level Windows 2000.

In fact, take a look at RoughlyDrafted's multi-part series "Leopard vs. Vista," in which the author explains the major differences between the Leopard experience and the Vista experience and why most pro-Windows advocates obfuscate their arguments and why Microsoft and Apple can't even be compared, because they cater to different markets, have different goals, and even perform different functions. (Microsoft, for example, makes only the operating system; Apple, on the other hand, makes both the OS and the hardware, which is a significant difference, as you'll discover.)

Zune player will fail

Microsoft is counting on its gigantic market-share to force its new mobile media player (I don't call it an "MP3" player for reasons that will become clear below) into people's homes in the same way that it forced Internet Explorer into people's homes: laziness.

First of all, the use of Microsoft's Zune player requires Windows Media Player. In the computing world, the field of competition in the "OS media player" struggle consists of two parties: Windows Media Player and iTunes. Back in college, WinAMP and MusicMatch Jukebox were viable alternatives, although MusicMatch was clunky and WinAMP 3 was beset with enough bugs to make me look for something else. And lo, there was iTunes: a simple, elegant, perfectly functional music management program that did all the things I wanted it to. By the time I graduated, most of the people I knew were using iTunes to manage their music -- and why not? For one thing, it allowed changing ID3 information for multiple files, something that's really useful if you have an entire album filled with incorrect information (which happens often). For another, the menu and interface structure is a whole lot better than WMP, which hides its menus all in the name of looking "sleek" or something like that. Apple managed to create a product that is both sleek and functional. (This, however, is not an "Apple is better than Microsoft" debate; WinAMP's interface was also sleek and functional.)

The secret to Apple's success was that it didn't bow to music industry pressure and force consumers to use its DRMed format for all of their music. Apple understood that consumers liked the MP3 format for its convenience, ease of use, and portability, and allowed consumers to put their existing MP3s on an iPod without forcing them to convert the files to AAC or some other format.

Not so much with Zune. According to Medialoper, Microsoft will try what others have tried -- and failed at -- before: namely, requiring DRMed files on the music player. Brian, who used to work at the Sony outlet store in Grove City, told me a horror story about a Sony digital music player he bought a few years ago. Apparently, once the Sony OS-based software was installed, it proceeded to go through the entire computer and convert any pre-existing music into Sony's proprietary, DRMed file format. If Medialoper is correct, Zune will behave in a similar way:

Unfortunately Zune’s wireless music sharing is turning out to be one of those features that seemed better when it was just a rumor. While Zune users will be able share music with friends, there’s a catch (isn’t there always). As Jim noted earlier, recipients of shared songs will only be able to listen to them three times or for three days, whichever comes first. It sort of sounds like a really bad tire warranty.

Zune accomplishes this amazingly stupid feat by wrapping shared music in a proprietary layer of DRM, regardless of what format the original content may be in. If Microsoft’s claims are to be believed, this on-the-fly DRM will be seamless and automatic - which must be some kind of first for Microsoft.

What Microsoft has created is a new form of viral DRM. Zune will intentionally infect your music with the DRM virus before passing it along to one of your friends. After three listens the poor song dies a horrible DRM enabled death. Talk about innovation.

Microsoft will undoubtedly claim this limitation is designed to support artists and prevent piracy. There’s just one problem. Not all artists want their music protected by DRM. Furthermore, not all artists benefit from having their music protected by DRM.

So, even if the music you wish to share is licensed under a Creative Commons License (which specifically forbids DRM), Microsoft will blatantly violate the license because it's more important to catch people trying to violate copyright than it is to allow people to use their devices in the way they want. This may alienate a lot of customers once those customers realize what's going on.

This whole "wireless functionality" business is also doomed to failure. What good is sharing music wirelessly if you get "3 days/3 plays"? This feature was imposed on Zune by music companies, who would not have given licenses to Microsoft unless they were absolutely sure the content could be completely locked down. Music companies are not in the business of letting you own your music; they're in the business of giving you licenses to your music and then telling you what you may do with the music you have a license to. Using the "license" trick also enables them to change the license at any time, so theoretically, they would be well within their rights to make it so that you can only play a song once, and then you have to re-purchase the song from Microsoft.

Wireless functionality is a neat idea ... maybe for a few times. Apple thought about it briefly for its next generation of iPod, but scrapped it because it would diminish battery life faster.

I feel that Microsoft will push Zune on Windows customers and hope that those customers will go with Zune because of inertia; "Hey, I already have Windows and Windows Media Player, why shouldn't I have a Zune?" This might have worked five years ago, but Apple is already here with a superior product. Why did I get an iPod? Because, after a thorough review of all the music players out there, I concluded that the iPod had the best features and the most functionality, and that holds true today. Microsoft also priced its Zune player on the same level as the 30 GB iPod, so the "Apple is too expensive" argument doesn't fly in the digital music player field. Since price is no longer a factor, I expect that customers will still flock to the iPod because of its functionality. And who knows? Maybe they'll be suspicious about Microsoft products after spending the last five years running weekly anti-spyware and antivirus programs to get rid of all the garbage that can be installed on Windows XP.

November 5, 2006

Life lessons from junk email

Not only does spam email advertise a variety of stock options and sexual enhancement tools, it also provides us with things to think about. Take these examples of fine philosophical discourse, seemingly randomly generated, from spam emails:

Many hands make light work A creaking door hangs longest. Look before you leap. You cannot lose what you never had Half a loaf is better than none. Dont count the days, make the days count!

He who dares wins When man done suck cane he dash peeling pan ground. Smile and the world smiles with you, snore and you sleep alone A good mate is the road map for the spaghetti junction of life.

A heart at peace gives life to the body, but envy rots the bones. You cannot burn the candle at both ends There's a light at the end of the tunnel. Yesterday is ashes; tomorrow wood Only today does the fire burn brightly

How profound! Little did I know that, at the "spaghetti junction of life," which is a metaphor for Cialis (I think), I would need a good mate to help me with the road map.

June 9, 2006

Net neutrality

I had totally forgotten to blog about the issue of 'net neutrality, and then I read an op-ed in the San Francisco Chronicle today from Stanford University law professor and EFF boardmember Lawrence Lessig. Apparently, Congress will vote today on a 'net neutrality bill, and they could vote to either keep the Internet free, or create a "premium" tier of Internet, the content of which will be pay-only. Lessig explains:

Now Congress faces a legislative decision. Will we reinstate net neutrality and keep the Internet free? Or will we let it die at the hands of network owners itching to become content gatekeepers? The implications of permanently losing network neutrality could not be more serious. The legislation, backed by companies such as AT&T, Verizon and Comcast, would allow the firms to create different tiers of online service. They would be able to sell access to the express lane to deep-pocketed corporations and relegate everyone else to the digital equivalent of a winding dirt road. Worse still, these gatekeepers would determine who gets premium treatment and who doesn't.

As Lessig points out, practically everyone is against the idea of a two-tiered Internet -- except ISPs like Verizon, AT&T, and Comcast. In a world of net neutrality, phone and cable companies lose, since they don't get the opportunity to charge for what they determine is "premium" content.

If you'd like to read the legislation, it is available via THOMAS, the federal legislation database. It is called H.R. 5252, the "Communications Opportunity, Promotion, and Enhancement Act of 2006."

As an aside, I didn't know that bills were now available in XML. Awesome! Internal references are hyperlinks, so if some text refers to some other part of the bill, you can click on the link and go to that reference.

May 15, 2006

Intel/PowerPC dual boot? Think again, bucko

Two months ago, Apple announced Boot Camp, a preview of a utility to be included in Mac OS 10.5, Leopard. Boot Camp is a utility that allows users of Intel-based Macintoshes to install a Windows XP boot partition on their machines.

Sure, that's great. But say you're in the business of installing custom disk images onto lots of computers, some of them Intel Macs and some of them PowerPC. An Intel Mac won't boot from a PowerPC version of Mac OS X, and vice versa. So, you thought you'd install the Intel Mac OS X on your external FireWire drive. Right?

Wrong. You probably got a big "X" over the drive when you tried to install Mac OS X from the installation DVD. This "X" means that Mac OS X can't be installed on that drive. What gives?

As this website points out, there are going to be some problems if you don't format the external drive correctly:

The Intel-based Macs are the first Macs to use Intel's Extensible Firmware Interface (EFI). Originally intended to replace the PC's aging and unloved Basic Input Output System (BIOS), EFI has found its way into the new Macs, taking over for Open Firmware in PowerPC-based Macs.

Tagging along with EFI is a new partition scheme: GUID Partition Table (GPT); GUID itself is an acronym, expanding to Globally Unique Identifier. GUIDs are locally generated, world-unique random numbers, which make them handy for uniquely identifying all kinds of things without a centralized organization or database. GUIDs are a great way to identify hard disk partitions, enabling the operating system to track volumes even if the device interface changes (as would happen if you ripped your old hard drive out of your Mac and tossed it into a FireWire enclosure).

GPT replaces Apple Partition Map (APM) as the boot partition scheme for Intel-based Macs. And therein lies the rub. Intel-based Macs can't boot from older APM drives, and PowerPC-based Macs can't boot from newer GPT drives. This appears to be a permanent situation - each scheme makes incompatible assumptions about the layout of physical block 1 on the disk. While GPT was designed to be compatible with Master Block Record (MBR, the PC's old partition scheme), it doesn't play nicely with APM.

When you go into Disk Utility (/Applications/Utilities/Disk Utility) to erase the FireWire disk, unbeknownst to you, Disk Utility is formatting the drive using the APM scheme by default. To change this option, click on the "Partition" tab and then the "Options" button, where you will be greeted by three partitioning options (in addition to the ones already available in the "Erase" tab): Apple Partition Map (the default for PowerPC-based Macs), GUID Partition Scheme (the default for Intel-based Macs), and Master Boot Record (the default for Windows and DOS-based computers since time immemorial). If you want your FireWire drive to be a bootable volume for your Intel-based Mac, choose GUID Partition Scheme, and suddenly you'll be able to install Intel-based Mac OS X on your external drive.

Great! Woo! But what if you support a bunch of users who use both Intel and PowerPC-based Macs? Disk Utility won't let you partition a disk in multiple ways -- at least, not in one fell swoop. Here's a link to an article detailing how to install both Mac OS X for Intel and PowerPC on different partitions on the same physical disk. It requires several steps and takes a while, but it appears to work. Plus, it saves you from having to either (1) buy two FireWire drives and/or (2) cart two drives around with you.

March 5, 2006

Now you can play McDonald's!

An Italian design group called Molleindustria has produced the McDonald's video game. Using Flash, they've created a SimCity-style representation of the McDonald's corporate structure. You must oversee grain and soy production in, cow production, store management, and corporate marketing. The game is clearly anti-McDonald's and is designed to demonstrate how corrupt and evil capitalism is (like most Europeans, these Italians are probably socialists).

Some of the evil capitalist things you can do in the game are:

  • Demolish a native village in South America to create more land for cow pasture or grain
  • Use genetically-modified soy to increase soy output (soy feeds the cows when they're in the slaughterhouse)
  • Add animal waste to the soy when they're isn't enough soy
  • Add hormones to the soy to increase beef production
  • Reward McDonald's store employees with a trite "badge" for doing a good job
  • Use marketing techniques to get people to buy more product (by targeting children specifically, for example) or as damage control, such as when an obesity group claims your product causes obesity

The game is very pretty and very well-designed, but like most European socialist beliefs, I have to take issue with some things.

McDonald's doesn't add animal waste to its feed ("shit" is specifically mentioned in the tutorial). Why would animal waste be nutritious? It's toxic and it doesn't contain any nutrients. Someone at Molleindustria thought this would be a good way to gross people out ("Horrors! McDonald's puts animal shit in animal feed? That's disgusting!") and encourage them not to buy McDonald's, but it just doesn't make sense. Corporations may do horrible things, but only when it makes sense.

That word "genetically modified" is here again. Despite no evidence whatsoever to support their claims, European socialists hate genetically-modified crops, which they call "Frankenfoods." I don't even know what they think is going on when it comes to GM foods: do they think we're creating a race of super-plants? Do they think we're putting mind-control serum into the plants? No, they're just being reactionary, because when a multinational corporation does anything, it is necessarily bad, especially when a multinational corporation messes with Mother Nature. But did anyone mention to these people that we have been genetically modifying food -- by splicing cuttings from plants together -- for thousands of years?

On an economic level, genetically-modified foods increase output and lower costs because you have to plant less. You can engineer plants that are more yielding and more resistant to pests, meaning that you cut down on pesticide use (wait a second, I thought you people didn't like pesticides!) and you can make more money with the same amount of land use.

Second, when it comes to growing food, socialists love organic. It's somehow "better" than regular food growth, because it doesn't use pesticides, and that makes it more "natural." Well, this concept of "nature" is just as fabricated as the old Romantic notion that farmers and poor people are more virtuous than everyone else. Because organically-grown food doesn't use pesticides, there's more crop lost to pests. This means that, to compensate for the lost crop and generate the same yield as non-organic crops, organic growers must grow approximately four times as much as non-organic growers, and this means about four times as much land use. If the world were convinced by the organic argument, then a lot of the world's population would starve. We don't even have enough arable land on planet Earth to allow for organic production. Either the "organic all the way" people (and by this, I mean the people who want to impose organic growth on everyone else, not the organic people who prefer it for themselves) haven't thought much about the issue, or they want a good portion of the population to starve and die. This latter suggestion would be most consistent with the idea of "sustainability," which involves having a much smaller population than we do now. In that case, the organic movement would be very sinister, as it would be encouraging people to die in order to promote sustainable growth.

Third, what does "organic" mean, anyway? Like I said, it's a fabrication. Human beings have been using pesticides since they first starting growing crops over five thousand years ago. They used pesticides because pests were eating their crops and they had to do something about it! (Please read the last sentence with a Lewis Black inflection on the italicized words.) Human beings have the capability to solve problems and use technology. Are we not supposed to do these things? If so, we would have been killed by lions thousands of years ago. There is a difference, certainly, between using a careful application of pesticides to control pests while keeping crops safe and coating everything we see in DDT. Many of these European socialists, I feel, can't see the distinction. All pesticides, to them, are DDT. There is no middle ground. In this way, they're a lot like neoconservatives. Same style of argument.

Problem is, I have to deal with this all the time in Berkeley, since there are a lot of European-style people there. Lousy hippies.

February 28, 2006

More iStuff

Last week, rumors surfaced that Apple was holding some sort of super-duper event Feb. 28, during which Steve Jobs would unveil some "fun" new products.

Think Secret reports that the product is probably the iPod Hi-Fi Boombox. Until now, Apple hasn't gotten into the iPod accessories business, leaving that to other companies like Griffin and Belkin. Now, though, if Think Secret is correct, Apple may soon start selling its own devices that "will deliver unique capabilities beyond what today's third-party docking speaker systems offer."

There are also rumors floating around that Apple's "fun" new product could be the touch-screen iPod. Rumors abound that the next generation iPod will feature a 3.5" screen and a touchscreen navigation wheel, eliminating the mechanical click wheel.

February 8, 2006

Charging for email won't solve the problem

In case you haven't heard, AOL and Yahoo revealed last week that their solution to the problem of spam email was to charge users who send email from an aol.com or yahoo.com address.

The charge won't be mandatory, however. Using a technology called Goodmail, AOL and Yahoo will prevent mail from people who pay the fee from being marked as spam. Users of the service must assure Yahoo and AOL that they won't email anyone who hasn't requested to be emailed. After paying the fee -- which could be as high as one cent per email -- and giving Yahoo or AOL an assurance, senders' emails will never be marked as spam in AOL or Yahoo's mail systems.

Great idea, right? It will stop spam, won't it? I mean, a financial burden is a disincentive to engage in a particular practice (cf. Oakland's new ordinance regarding litter, or charging companies for polluting), right?

Not really.

First, all the system does is remove a barrier. It doesn't impose new barriers for spam emails. AOL and Yahoo have blacklists for filtering out spam emails. All this Goodmail system will do is remove XYZ Corporation from the blacklist. Spammers will continue to come up with new and innovative ways of getting around the mail filters.

Second, the system creates a slippery slope: charging for emails. While it only applies to people who want to use it, the precedent has been set. Companies are now charging for emails. The Electronic Frontier Foundation's legal director, Cindy Cohn, warns:

Even email senders who just want to reach Dad@aol.com may eventually be in trouble. Once a pay-to-speak system like this gets going, it will be increasing difficult for people who don't pay to get their mail through. The system has no way to distinguish between ordinary mail and bulk mail, spam and non-spam, personal and commercial mail. It just gives preference to people who pay.

"Payment" is, in this system, a proxy for "not spam." The problem is that this isn't always true. Things that are not spam might not be paid for. Things might be paid for that are spam. There's plenty of wiggle-room for false positives (something marked as "not spam" that is spam and something marked as "spam" that's not spam). In any security system in which you're trying to restrict access to just the people you want, false positives mean that the system isn't working, and a dysfunctional system might be worse than no system at all.

We have lots of proxies in our society. "Race" often stands in for "poverty." "Wealth" often stands in for "virtue." The beauty of the Internet is that those proxies don't exist. Putting the Goodmail scheme into place would create a new one: if you have to charge for it, then it must not be junk. Free is bad. Costliness is good. Except, the Internet functions on being free. This is why people run away in droves from websites that require pay subscriptions (except for porn sites, because the demand for porn is apparently perfectly inelastic). As Cohn notes in her blog entry, being free is "a feature that has driven the digital revolution. It allows groups to scale up from a dozen friends to a hundred people who love knitting to half-a-million concerned citizens without a major bankroll."

On a philosophical level, charging for email is a bad idea. On a pragmatic level, it's a bad idea: it won't solve the problem of spam email (or spammers will go to other ISPs for free email addresses, or they'll write viruses to turn infected computers into zombie mass-mailers).

January 11, 2006

That's hilarious ... if you're a nerd

CNet reports that Apple's share price closed yesterday at $80.86. This is sort of a coincidental joke. Yesterday was the day that Apple unveiled its new Intel-powered Macs, and "8086" was the internal number given to Intel's first major consumer processor back in 1978. (For this reason, Intel processors that follow in this line of architecture are called "x86" -- 80286, 80386, 80486, and the 80586, which was called the "Pentium.")

Just something that's slightly hilarious. If you're a nerd.

January 10, 2006

New toys -- er, productivity devices -- from Apple

As expected, Steve Jobs announced at the keynote address of the MacWorld Expo the first Intel-based Macintosh, the MacBook Pro, a laptop powered by an Intel Core Duo processor (it is dual-core, meaning it has two processors on the same chip). The MacBook Pro comes with a built-in iSight camera and Front Row, the application for remote control access first introduced on the iMac. The MacBook Pro claims to be "4x faster" than PowerBooks and, starting at $1999, it's more affordable. The MacBook Pro comes in only one size -- a 15.4" widescreen display -- but can be outfitted with either a 1.67 or a 1.83 GHz dual-core processor. The MacBook Pro also supports Serial ATA and has a frontside bus speed of 667 MHz.

The MacBook Pro also introduces the "MagSafe" power adapter connector, which holds the power cord in place with a magnet. This comes in response to complaints that previous PowerBook connectors were held in place too strongly, causing the whole machine to fall off the desk if someone tripped over the power cord. Now, the force holding the power cord in place is less strong than the force of friction between the computer and the tabletop, meaning that if someone trips on the cord, the cord will simply pop out instead of the computer careening off the tabletop.

The 1.67 GHz MacBook Pro costs $1,999, while the 1.83 GHz version comes in at $2,499. The 1.83 GHz version is different from the 1.67 GHz version not only in processor speed, but also memory (1 GB of RAM instead of 512 MB), hard drive capacity (100 GB instead of 80 GB), and video memory (256 MB instead of 128 MB). Both models have SuperDrives, Serial ATA hard drives, and ATI Mobility Radeon X1600 video cards.

Jobs also introduced the newest incarnation of the iMac, which also uses an Intel Core Duo processor. The new iMac has a top speed of 2 GHz and comes in either a 17" or 20" widescreen display.

The 17" iMac has a speed of 1.83 GHz and comes with a 160 GB Serial ATA hard drive. The 20" iMac has a speed of 2.0 GHz and comes with a 250 GB Serial ATA hard drive. Aside from that, both models are the same, including dual-layer DVD burning. The 17" model starts at $1,299, while the 20" version costs $1,699.

What's startling is that the MacBook Pro and the iMac are the first Macintosh computers to be powered by Intel chips instead of Motorola-designed PowerPC chips. Reportedly, porting Mac OS X to an x86-based processor has resulted in a tremendous performance increase. (Curiously, putting Windows on ever-faster processors doesn't increase Windows' performance.)

Think Secret expected to see an iBook instead of what is essentially a PowerBook with an Intel processor, but no doubt Apple will release a lower-end version of the MacBook Pro for the iBook market (maybe single-core instead of dual-core). Expect prices of G4 PowerBooks and G5 iMacs to fall as techies start buying up the x86-based Macs.

Jobs also introduced, as planned, iLife '06, which contains all the applications found in iLife '05 plus a new application called iWeb. iWeb is used, according to the Apple website, "to create websites, blogs, and podcasts." True to the user-friendly nature of Apple applications, a user can "drag, drop, and design using [his] choice of web templates, then publish live to [his] .Mac account." It was really the only thing missing from iLife '05 and provides a more compelling reason to buy a .Mac account, which, until now, only really allowed for email and storage space. Creating a web page was something you had to do in another program. Now, a user can create a webpage using entirely Apple software and services.

But wait! There's more! Jobs also announced a new member of the iPod family, the iPod Radio Remote, which allows you to listen to the radio with your iPod, a feature that has been sorely lacking ever since the iPod's introduction in 2001.

With all of these new products come software updates. Mac users should expect to see iTunes 6.0.2 and QuickTime 7.0.4 in the "Software Updates" application today.

Just one more thing

Now that I'm in Oakland, I thought about attending the MacWorld Expo, the January event that showcases Apple's new products for the year. It's also the place where Jobs adds, "Just one more thing ..." to his keynote address, signaling the introduction of some cool new piece of hardware or software. Think Secret hypothesizes that Jobs will formally introduce x86-based iBooks and PowerMacs to the public today at 9 AM PST, as well as iLife '06, the newest version of Apple's iLife '05 (iTunes, iCal, iPhoto, iMovie, iDVD, though iLife '06 will have a new program, iWeb), and an updated Mac Mini.

Yes, I wanted to go. Until I learned that it cost $1,700 to attend MacWorld Expo. So, I figure that I'll just read about what happens. One day, I'll be able to spend $1,700 on a ticket to MacWorld Expo. I went to a Microsoft convention for free and got a goodie bag filled with sundry goods and a copy of Windows XP. If that's in the goodie bag for a free convention, the MacWorld Expo goodie bag had better have a Mac Mini in it.

As soon as I know what the super cool surprise is, I'll report about it.

January 6, 2006

Accepting submissions

I'm going to add a new feature to my website and I'm going to call it something like "Things My Mom Needs to Know About Computers." It will consist of several different tutorials about doing things that parents that aren't computer-savvy might not know. I asked my own mom what things she might need help with, since I'm not there anymore, and she suggested that sending email was number one on the list.

Do your parents need helping doing things with the computer? Would you like to see a tutorial about that thing? Maybe you need help doing something but are too embarrassed to say that you don't know how to do it. Just let me know and we won't judge you.

November 4, 2005

SEHDE is a fairy

According to David A. Justiss's Dictionary of Monsters, which provides an index of mythical creatures and monsters, a "sedhe" is a fairy. The word sedhe is Gaelic and is pronounced "shee":

They are often very dangerous even if they seem friendly. They are very selective about who they let into their world (and who they let back out), and often have strict rules about not telling anyone where they live or where the entrance to the land of faerie is. The result of breaking their rules is often death or a devastating curse. Some, like the banshee, seem undead and others more like demons than fairies. Even when types of Irish or Europeon fairies seem harmless and helpful, they are afraid of clergy or religious people which usually implies something demonic.

A banshee, though Irish, is not a fairy and is not undead. Nevertheless, David A. Justiss claims that the word "banshee" comes from the Gaelic "Bean-sedhe," which means "woman of the sedhe." A banshee is the ghost of a woman who has drowned her children; this is why she is most frequently seen next to rivers. Seeing a banshee is a "forerunner," meaning an indication of your impending death. It's a common misconceptions that banshees wail; they don't wail, they cry. And if you're seeing the banshee, and she's crying, then she's crying for you, because she knows you're about to die.

So, not only is SEDHE the Spanish Society for the History of Education, but it's also a fairy.

October 12, 2005

iPod now in its fifth incarnation

At a conference today announcing its fourth-quarter sales figures, Apple CEO Steve Jobs also unveiled some new Apple products. Speculation had been circulating at places like Think Secret that the next version of the iPod would have video-playback capability. It was the next logical step, after all. Jobs revealed the fifth generation iPod, which has a larger (2.5" diagonal) backlit, color LCD screen and a smaller click-wheel a la iPod Nano. The fifth-generation iPod is available in standard white or glossy black. It comes in two sizes: 30 GB ($299, the same as the fourth-generation 20 GB iPod) and 60 GB ($399, the same price as the fourth-generation 60 GB iPod). The iPod U2 Edition has been phased out. I suspect many people bought it because of its glossy black color, but now that Apple makes a glossy black regular iPod, there's no reason to pay more money for DRM-crippled U2 songs just so you can have a black case.

Jobs announced a deal with ABC in which the iTunes Music Store would provide full-length episodes of Lost and Desperate Housewives for $1.99 each the day after they air. The iTunes Music Store also has a new video download department. I don't suspect all television viewing will now move to the iPod -- since viewers like large screens -- but it will certainly allow people to be distracted by their iPods while walking around town in a new and different way.

Apple also unveiled its new iMac G5, which looks a lot like the old iMac G5, except this one has a remote control and a built-in iSight camera. The new iMac G5 is available in a 1.9 GHz 17" model ($1299) or a 2.1 GHz 20" model ($1699). The new iMac G5 still sports a PowerPC processor, but it contains DDR2 RAM instead of DDR RAM. Think Secret expected to see updates to the PowerBook and Power Mac lines, but they were not unveiled today. The only updates possible for the PowerBook would be a change from DDR to DDR2 RAM and a switch to a slightly faster G4 processor. Any Power Mac update is expected to be a switch to a dual-core G5 processor. Don't expect a G5 PowerBook anytime in the near ... ever.

Along with a new iPod came a new version of iTunes, iTunes 6, which interfaces with the iTunes Music Store's new video download section. And along with a new version of iTunes came a new version of QuickTime, QuickTime 7.0.3.

October 1, 2005

Time to vomit

Dear Lord: Please stop making it easy for people who have no idea how to design a web page to make web pages. Thanks a million. Oh, and P.S.: If could find time to firebomb Xanga, that would be great.

September 21, 2005

Has it got any spam in it?

CNet reports that a new variant of the old Bagle virus is coursing through the Internet.

It's interesting to note how viruses have changed in the last thirty or so years. When computer viruses began, they were the projects of kids looking to cause trouble. Today's most prolific viruses, though, are designed to turn an infected computer into a spam robot, sending thousands of spam emails all over the world.

What have I been saying about the pervasiveness of marketing? If this keeps up, James Bond's next villain will try to engage in a hostile takeover of a major company -- literally. Whatever happened to being bad for bad's sake? It's been swallowed up by the prospect of 25 cents per spam email.

Even worse, today's viruses are smart. They automatically terminate processes associated with antivirus and anti-spyware software. They block access to security websites. They effectively strip a computer of its protection. Remember how everyone keeps telling you to install antivirus software? Whether you have it or not doesn't matter to the new Bagle virus, or any other of dozens of viruses. It will terminate the process, anyway. And you want to try to start up in safe mode? Yeah, that doesn't matter, either. It's there in safe mode. I've worked on computers for days trying to get rid of all the crap stuck on them, and sometimes I've had to give up and format the hard drive, because the virus or spyware so pervaded the operating system that there was no way to get rid of it all. Two years ago, this was nothing more than an interesting exception to the spyware/virus rule. Spyware back then was easy to get rid of through "Add/Remove Programs." Now, the spyware hides deep within the registry and file structure. It masquerades as a dozen fake applications in the C:\Windows\System directory. It terminates your anti-spyware program. It blocks web access to Symantec's website. "Add/Remove Programs" doesn't work anymore.

And why spam? As Bruce Schneier points out, it's because people actually read it. Some people read spam emails, and since the cost of sending spam emails is ridiculously low, it doesn't take a lot of people to read those emails and buy those products to make the emails profitable. We've got one of two options, here: (1) alter people's web-browsing habits so they don't open spam emails; or (2) levy fines against known spam senders. This last one is hard, because spam senders are often not companies, or if they are, they're companies whose "official policies" are to not send spam, while at the same time they pay Eastern European hackers 25 cents per spam email sent with the new spam virus that the kid wrote. What's happened to the world when corporations have infiltrated run-of-the-mill mischief? Pretty soon, punks will be spraypainting buildings and bridges with the Pepsi logo instead of regular old grafitti -- and Pepsi will pay them for their troubles.

Meanwhile, over here at SEDHE, the comment-spam is getting smarter. Now, whatever robots that are sending comment spam are including what appear to be random URLs from actual blogs along with links to the crap that they're advertising. This makes it difficult to program MT-Blacklist, since each individual comment spam contains a different URL and a different, randomly-generated fake email address. The point of comment spam is not to have people click on the links. The point of comment spam is for the owner of the blog to ignore the spam until such time as the page with the comment spam link on it gets archived by the search engines. The more pages there are with the same link, the higher the search result, and the more money these companies can weasel out of advertisers. This strategy takes advantage primarily of Google's search algorithms, which don't just search the Internet for text strings, but also index searches based on how many other web pages are linking to a particular web page. This is precisely how Kerry supporters got the phrase "miserable failure" to link to the White House website as the number one search result in 2004: by taking advantage of Google's unique feature of seeing how many pages link to a given page. The same goes for comment spam and trackback spam.

But it doesn't stop there. All sorts of robots sign up for free Blogger accounts. They're mostly redirects to major porn websites, and they get a lot of hits because people have become wise to what URLs for major porn sites look like; a Blogger URL seems less like "corporate" porn. But, sadly, the online porn industry is smarter than you are. (In fact, the porn industry has pioneered a lot of the technology now commonly found on the web.)

September 15, 2005

Miami University security leak

A file containing the social security numbers of every student who attended Miami University during the Fall 2002 semester somehow ended up in public webspace. From Miami's official press release:

Miami University is notifying all students who attended Miami during the fall 2002 semester that a report containing their names, Social Security numbers and grades had been inadvertently placed in a file accessible through the Internet.

University officials said that at this point they have no evidence of illegal use of the information, which included data on the 21,762 students enrolled on all Miami campuses in fall 2002. No other students were affected.

Officials say the information was in an isolated area of the university's network, in a file assigned to a now-retired faculty member, and thus avoided detection until this week when an alumna told Miami she had discovered the file after entering her name in a search engine.

“Nevertheless, private and confidential information was exposed, and we deeply regret the incident. We have removed the file and are writing the students and alumni to apologize. We also are taking steps to rectify the problem and to avoid a similar instance in the future," said J. Reid Christenberry, Miami's vice president for information technology.

As a recently former employee of Miami IT Services, I won't comment on this information.

September 7, 2005

It's a Nano, Mrs. Walker

Think Secret had been reporting that Apple was going to unveil something mind-boggling Sept. 7, something that would revolutionize the industry as much as the iPod had.

Eh, maybe not. Today, Apple unveiled exactly what we thought it would unveil: an iPod phone. Designed by Motorola and called the Rokr, the phone contains a 500 MB card for storing music, which can be played back on the phone using an iPod-like interface. It's available only through Cingular and requires a two-year contract. Oh, and it's $250. And it can store only 100 songs, no matter how much storage is installed. Man, when you put the two biggest DRM providers in the country -- an MP3 player manufacturer and a cell phone company -- together, you get ... oh, wait. You get more DRM.

But, sneakily, Apple also introduced new products into its regular iPod line. The newest member of the iPod family is the iPod Nano, a music player so thin that you could wear it in your ass for five years and not even know it was there. The iPod Nano replaces the iPod Mini and completes Apple's overhaul of its hard drive-based iPods. Recall that in July, Apple upgraded all its hard drive-based iPods (except the Minis) to 65,536-color screens, essentially making them all iPod Photos. It also introduced iTunes 4.9, capable of downloading podcasts. The iPod Nano creates the missing consistency in the design of all of Apple's hard drive-based iPods. The Mini was designed to be fruity and colorful; the Nano is a badass, available only in white or black. The Minis looked like children; the Nanos look like midget versions of real iPods. The iPod Nano comes in 2 GB or 4 GB versions. The 2 GB version retails for $199, while the 4 GB version retails for $249. Why would anyone buy these? Spend $50 more -- that's twenty percent more -- and get five hundred percent more storage space by buying the 20 GB iPod instead of the 4 GB iPod Nano. But people bought the Mini because of the "cute" factor. No one will be doing that with the Nano.

September 6, 2005

I'll get you, Windows!

As a newly-christened Mac user, I'm sometimes appalled when a website I go to says I must be using IE 6 and Windows in order to access it (Wells Fargo Online Bill Pay comes to mind). And it's not a matter of actual, factual compatibility. A website knows what browser you're using because the website sends an HTTP_USER_AGENT request to your computer, and your computer responds by telling the website what browser it's using and what operating system it's using. Some web browsers -- most notably Opera -- can "spoof" as USER_AGENT request, responding with whatever you want. By default, Opera identifies itself as IE 6. And does this mean the website doesn't work? No! It works fine! It wasn't a precaution inserted there by the webmaster because he knew that there would be compatibility problems between his website and anything that wasn't IE 6. It was inserted because he was lazy and didn't want to have to create several stylesheets for several browsers. (Remember the good old days when websites had phrasing like "This webpage best viewed at 800x600 resolution using Internet Explorer 5"? Well, those days are gone, but some people still think we're living in 1998.

FEMA is one of those people. On its website, you can get information about disaster relief, but only if you're running IE 6 on a Windows machine:

My 90-year old mother sat out Katrina in her brother's home next door in Diamondhead, MS, about eight miles from the Mississippi coast where the hurricane's eye hit. They survived without injury but with massive destruction to their homes, and my mother has lost most of her possesions. I brought her to my home in California yesterday and this morning went to the FEMA website to register to start the assistance process.

To my dismay, our Federal emergency agency requires Microsoft Internet Explorer 6, and only IE 6, to use the website for disaster assistance. I don't want to be political about this, but this smacks of a serious leadership failure that the use of the Internet is reserved for only the Windows community. I will reserve my opinion of the administration for the op-ed pages, but I want to vent my dismay about this to the rest of the Mac community. I hope other Mac users let their political reps, newspapers and other media know of this marginalization. [...]

This person, Gary Mullins from MacInTouch, is right. The Internet is not a Windows community. In fact, given its structure, it's a *NIX community (Linux runs about half of the world's Internet servers.) As Matt can tell you, Internet Explorer isn't standards-compliant because Microsoft decided to make up its own standards, and dammit, the rest of the Internet will follow its standards, not W3C's standards.

September 4, 2005

In re: Movable Type 3.2

Six Apart released version 3.2 of its Movable Type software Aug. 25, and I have to say that it is to Movable Type 3.1 what Windows Me was to Windows 98.

To be fair, Movable Type 3.2 has a lot of cool new features. Not the least of these new features is easier installation and upgrading. All previous versions of Movable Type required the use of a separate script, called mt-load.cgi if it were a clean install and mt-upgrade.cgi if it were an upgrade. These scripts then had to be deleted, as anyone could could execute them and re-initialize the system, deleting the old weblog and replacing it with a new one.

Another cool feature is a better plugin control system. It's "better" because it's centralized. Prior to MT 3.2, each plugin had its own control screen; MT 3.2 provides users with a one-stop shop for control of all your plugins.

By default, MT 3.2 comes with a spam-control plugin (not MT-Blacklist), which was a long time coming.

Unfortunately, MT 3.2, for all its good elements, is beset with bugs. Stroll through the Six Apart support forums and you'll find users beside themselves with problems, most of which have to do with importing entries or publishing new entries. In my case, every time I tried to publish a new entry, I received a "500 Server Error" after it told me it was rebuilding the entry ("rebuilding" is the process by which MT creates new files for the new entry). I received a similar error after I tried rebuilding all of the files, but only once it tried to rebuild the monthly archive indexes. In my experience, 500 Server Errors are caused by problems with file permissions, but all the permissions seemed to be okay.

Six Apart has been of little help to customers over the past week. Users posting questions in the forums maintain that Six Apart staff have been in the forums to help users in the past, but not this time. Either they're too swamped with problems from paying customers or they're busy working on bug fixes. MT 3.2 is an oddity, as most versions of MT didn't have such crazy problems. Even the transition from 2.661 to 3.0 wasn't this bad.

In the end, I tried a fresh install of MT 3.2, but it wouldn't import all of the archives. It got stuck on entry 133. So I dumped MT 3.2 and went back to MT 3.1. This experience has been a reinforcement of everything your mother told you about backing up your data.

Six Apart has become pretty big in only the last couple of years. Not only do they do Movable Type, but they provide blogging services of their own, via Movable Type on their Typepad service, and via LiveJournal, which they acquired last year. From what I know about the company -- which is very little -- what began as a mom and pop operation (quite literally, it was about two or three people) has quickly boomed into a legitimate business. There's no doubt in my mind that Six Apart will issue an update for 3.2, but I'm surprised that they produced a product with so many bugs when that's not their tendency. They're more a Blizzard than a Microsoft.

September 1, 2005

Yahoo! Instant Messenger update is bad for you

Frequently, software vendors will disguise decreased functionality as an "update." This was recently chronicled in the story of the Sony PSP 2.0 firmware update. Software developers discovered how to write games and applications for the PSP platform, allowing them to customize their PSPS. In the 2.0 update to the PSP's firmware, Sony disabled this functionality. Why? Ostensibly because Sony wants to control your PSP, even though you bought it and can do whatever you want with it.

This is also true of previous updates to Apple's iTunes software. Apple's "updates" to iTunes frequently disable third-party applications designed to circumvent some of iTunes' DRM protections, including an incredibly stupid protection that prevents a user from transferring music from the iPod to his computer. (A user can transfer music from his computer to his iPod, but not, by default, in the other direction.)

And now an "update" to Yahoo's Instant Messenger. We've seen AIM updates before that disabled functionality in third-party programs that accessed AOL's network, like GAIM or Dead Aim. But Yahoo's update goes a step further in altering your computer's settings:

By accepting Yahoo's "typical" installation of YIM with Voice, it will also download Yahoo's Search Toolbar with anti-spyware and anti-pop-up software, desktop and system tray shortcuts, as well as Yahoo Extras, which will insert Yahoo links into the Internet Explorer browser. The IM client also contains "live words," which will automatically show an icon when the user highlights words online and then hyperlink to Yahoo search results, definitions or translation tools. Finally, the installation will alter the users' home page and auto-search functions to point to Yahoo by default.

To avoid these changes, users must actively choose the "custom" installation and uncheck five boxes.

Is this in the interest of security? Nope. It's in the interest of making money. Every time a user gets online, his home page goes to Yahoo. This is another hit on Yahoo's page, and another justification for increasing the price it charges for advertisements. More hits equals more people viewing the page equals more money for ads. It's the same reason NBC can charge a million dollars for a 30-second Super Bowl commercial: everyone's going to be watching it. Except in this case, you've been coerced into visiting Yahoo's home page. Your computer, which does whatever it's told to do, obediently goes to Yahoo's home page even if you don't want it to.

Yahoo isn't stupid. They know that most of their users are novices (because the ones that aren't novices are using GAIM, NAIM, or something that's not YIM) and thus (1) won't bother to see which settings are selected by default and (2) won't know how to change those settings once they've been implemented. Also, like the naive person who goes to the used car dealership, the person installing YIM assumes that Yahoo isn't going to harm him, when in fact, Yahoo is going to harm him.

UPDATE: I just realized that AIM is guilty of the same thing, but no one seems to notice it. When you install AIM, AIM installs the Viewpoint Media Player, which it uses to play those annoying little video-based ads that apepar at the top of your buddy list. It also adds AOL icons everywhere and alters your Internet Explorer security settings by adding the website http://free.aol.com/ to IE's list of "trusted" sites. This is extraordinarily dangerous, as "trusted" sites are sites that can do things like executing code and downloading stuff without having to ask you if it's okay, because, hey, it's a "trusted" site. Lots of spyware programs like to add websites sponsored by them (usually warez or porno sites) to the "trusted" list, increasing your odds of getting more spyware. I've personally seen dozens of sites listed in IE as "trusted," even though they were porn and warez sites that had no business being "trusted."

August 24, 2005

Amazing links

Copyright law is complicated.

There's no such thing as open-source DRM. Open-source is about encouraging users to make changes to a system. DRM is about locking a user out of a system.

We all need one of these.

AOL intentionally makes it difficult for you to cancel its service. My dad recently got a free cable modem if he agreed to sign up for an AOL account. He signed up for the account, and then canceled it the next day. He spent about fifteen minutes on the phone as the customer service representative begged and pleaded with him not to cancel, and enticed him with a dozen special offers. Of course, he wouldn't relent, and they canceled the account. A month later he received a letter in the mail stating that his account had been canceled, but not before AOL customer service called the house, trying to talk him into re-activating his account.

August 17, 2005

Dell sucks now; Apple is great

Whereas four years ago they were the highest-rated computer company in terms of customer service, ITworld.com reports that Dell has been sent back several notches with the other PC companies. Apple is now leading in customer service:

For the second year in a row, Apple received the best rating from PC buyers in the American Customer Satisfaction Index (ACSI), said David Van Amburg, general manager of the ACSI. The University of Michigan compiles the ACSI in numerous product categories by randomly calling U.S. residents and surveying their buying habits, he said.

Apple received a score of 81, compared to an industry average score of 74, in results released Tuesday. The Cupertino, California, company's focus on product innovation and customer service has won it a cadre of famously loyal customers unlike any other PC vendor, Van Amburg said. Apple also received a score of 81 in 2004.

Dell, on the other hand, earned a score of 74, down from a score of 79 the previous year. Survey respondents complained mostly about the quality of Dell's customer service, not its products, Van Amburg said. The ACSI doesn't ask specific questions about the type of problems customers are having with a company, but customers were clearly more frustrated with the Round Rock, Texas, company than last year, he said.

But the quality of Dell products has gone down, too. As a person who spent three years fixing the things (Dell was definitely the PC of choice for Miami University students, followed by Gateway), I watched as the product line got more and more horrible. Why did Dell build a huge hinge system in their desktops that only made the case heavier? Why do the laptops routinely overheat now? What's with those hinged panels in the front of the desktop that don't seem to do anything but collect dust? Also, recall 2003, when we learned that Dell told its customer service reps in no uncertain terms that they were not allowed, ever, to suggest spyware-removal programs to customers. On top of that, in May of this year, it was revealed that Dell may have spyware installed on the computer by default, anyway. The moral of the latter story is that you should format and re-install if your computer came with pre-installed software.

But Apples come with the system software, its associated utilities, iLife, and demos for one or two other programs, like QuickBooks. Apples are so well-engineered that they hardly ever break, mechanically, unless a user has done something to them (yes, I understand that PowerBooks have had problems in the past, most notably with the screens on the 15" PowerBooks of two years ago). I talked to an Apple support guy once, and he reported that most calls to tech support come about because a user decided to play with the system in Darwin. This means that the user has to try to break an Apple. PCs will break down, no matter what.

This is why Apple has such a loyal following. People who own Macs love Macs and don't want to go back to Windows. Everything about them is great, even the packaging! (As Elizabeth noted when she took her recently-purchased iPod out of the Circuit City bag, "I want to have sex with this box.") The PowerBook comes in a form-fitted styrofoam case inside of a box with a handle on it! A handle! So you can carry it around! Now if only Apple would have offered a free laptop carrying case with the PowerBook, I would have been very happy indeed.

But Apples are expensive. But you know what's not expensive? Upgrading them. If you buy a low-end Mac, you can upgrade it for much less than Apple would have charged you. I recently purchased 512 MB of PC2700 DDR SDRAM for my PowerBook, bringing my total memory up to 1 GB. Purchasing the memory from Apple would have cost $150, but I bought a 512 MB SO-DIMM from newegg.com for less than $50. And every review of this kind of memory (from a company called A-DATA) was excellent; some reviewers even went to far as to say it was the best kind of memory to put in a Mac.

If money were no option, then I think everyone would switch to Mac. Unfortunately, Macs are more expensive than PCs, and quite often, people choose price over quality, thinking that "it's all the same, anyway." But the difference between a Mac and a PC is like the difference between a Rolls-Royce and a Ford Escort. Sure, the Ford Escort gets the job done, but it will break down periodically. The Rolls-Royce is a fine-tuned machine, which is good, because Rolls-Royce's other job is making jet engines. I wouldn't want Ford making my jet engines. And I don't want Microsoft making the OS that powers my servers or my computer.

I wanted to end this by providing a link to a good website which talks about why Macs are terrible, but if you type "macs suck" into Google, you get 150,000 results, most of which are people's personal web pages that are outdated by several years. Type in "macs are great" and you'll get 1,720,000 results. Even the Internet agrees, by a margin of 11 to 1, that Macs are great.

August 1, 2005

Mac x86

In case you weren't aware, Steve Jobs announced at the Apple Worldwide Development Conference (WWDC) in June that the entire Macintosh line would switch from PowerPC processors to Intel processors. Much was revealed at the conference, including the fact that Apple has created an x86 version of every one of its Mac OS X builds. As we speak, Apple is renting$999 Mac OS x86 PCs to developers who want them so that they can create x86-based versions of every Mac program. Within two years, Jobs wants the entire Macintosh line to be running x86 processors instead of PowerPC G4 and G5 processors. (This also means, interestingly, that you may now -- for the first time -- run both Mac OS and Windows on your hard drive. On different partitions, of course.)

"x86" refers to Intel processors with the suffix "-86," like 8086, 286, 386, et cetera. This includes the Pentium 4, Intel's most powerful desktop processor. The x86 has a different architecture from the PowerPC processor, which has been inside every Mac since . . . well, the first PowerPC. The PowerPC processors are built by IBM.

Some reports indicate that the x86 version of Mac OS X on the fastest Pentium 4 is faster than Mac OS X on the fastest dual processor G5 systems. But there's a catch to the new x86-based Mac OS X. The kernel (the back-end of the operating system) utilizes Intel's Trusted Computing hardware, a technology built into the x86 chip. Cory Doctrow from Boing Boing explains the problems involved with this:

The point of Trusted Computing is to make it hard -- impossible, if you believe the snake-oil salesmen from the Trusted Computing world -- to open a document in a player other than the one that wrote it in the first place, unless the application vendor authorizes it. It's like a blender that will only chop the food that Cuisinart says you're allowed to chop. It's like a car that will only take the brand of gas that Ford will let you fill it with. It's like a web-site that you can only load in the browser that the author intended it to be seen in.

What this means is that "open formats" is no longer meaningful. An application can write documents in "open formats" but use Trusted Computing to prevent competing applications from reading them. Apple may never implement this in their own apps (though I'll be shocked silly if it isn't used in iTunes and the DVD player), but Trusted Computing in the kernel is like a rifle on the mantelpiece: if it's present in act one, it'll go off by act three.

"Trusted Computing" is nothing more than hardware-based DRM (digital rights management). It means that, theoretically, you would be forced to open AAC (Apple's DRM-enabled audio format) files in iTunes, WMV files in Windows Media Player, or DOC files in Microsoft Word. There would be no way around this, since the content management would be part of the processor, not the operating system. It would also prevent competitors' products from opening certain files. Imagine a dystopic future where only Internet Explorer could open HTML files. Scary, isn't it? It also means that you couldn't use freeware products -- like Windows Media Player Classic if you're on Windows -- to open files that were tied to specific, closed-format applications.

Since I'm on a PowerBook G4, I'm not concerned about speed increases. If it meant surrendering my freedom to open files however I want to someone else, I'd rather have a 1.67 GHz PowerPC G4 than a 3.5 GHz Pentium 4.

July 26, 2005

Some smudges on Windows' Vista; we need some WinDex XP

Microsoft has finally come out with a name for its sort-of-next-generation operating system, which has been code-named "Longhorn." The new version of Microsoft Windows will be called "Windows Vista."

Okay, so it sounds stupid. Actually, "Windows Longhorn" would probably have been a better name, anyway. But what has Windows Vista done for me lately?

Longhorn has been delayed, delayed, and then delayed again. One of the new release's most hyped features, the next-generation file system WinFS, was scrapped last year. Vista will continue to use NTFS, like Windows 2000 and Windows XP before it.

But one of the whiz-bang features that will remain is Avalon, Longhorn's ultra-cool graphics engine, which allows for translucent windows and will allow each window to be rendered individually. This means, though, that the computer that you're running Windows XP on right now probably won't be able to use Avalon, especially if it's using an integrated video card.

With the acquisition a year ago of Giant Software, which resulted in the creation of Microsoft Antispyware, and its purchase of anti-virus maker Sybari Software, we may expect to see antivirus and antispyware protection built into the operating system, which is good, since Windows attracts a lot of spyware and viruses.

July 19, 2005

Morgan Spurlock Watch

Via Metafilter comes a really cool website called Morgan Spurlock Watch which, in the vein of books like Al Franken's Lies and the Lying Liars Who Tell Them, attempts to correct errors in Morgan Spurlock's books, blog, TV show, and film Super Size Me.

One of my biggest pet peeves is when a person deliberately manipulates information in order to forward an agenda of his own. Whatever happened to the truth? The author of Morgan Spurlock Watch seems to be a libertarian, no doubt one of the reasons he dislikes Spurlock, who sees capitalism as evil and the government as trustworthy. Nevertheless, this writer does give Spurlock credit when he gets his facts right.

Part of the problem with people who have an agenda is that once they've found information -- any information -- that agrees with their opinions, they use that information as fact, even though there may be other, more credible information that contradicts those facts. Take, for example, Spurlock's repeated citing of the Physicans Committee for Responsible Medicine as a credible source. And it certainly sounds credible. But the author of Morgan Spurlock Watch is more skepticaler:

So what exactly is the Physicians' Committee for Responsible Medicine? They aren't physicans. Less than 5% of the group's membership are actual physicians.

In fact, PCRM is a rather militant animal rights group. Its aim? To end medical research on animals, and to foster public fear of eating cheese and meat with scare campaigns. Through lawsuits, intimidation, and stealth media placement, they're trying to push the vegan lifestyle.

Ouch. We know that Spurlock, as well as his fiancee, Alex, is a vegan. Either he didn't know that PCRM isn't a credible source (probably not true, given that he's a smart guy) or he used information that he knew to be false just because it supported his opinion, not because it was true in the philosophical sense or even in the factually correct one.

Where have we seen that before?

I like libertarians. I often disagree with their politics, but they're estranged enough from "mainstream" politics that they put their own beliefs before trying to institute some kind of social or political change. If libertarians make a mistake, they admit it. And they do their research. They work until they find hard facts, not just people who make themselves up to be experts. This is to be contrasted with social activists like Spurlock, who would like to dump American capitalism altogether, probably along with eating meat. This is his agenda. Neo-cons also have an agenda: they would like to institute an Evangelical Protestant United States empire. Libertarians like things the way they are. All they want is for the government and other private citizens to keep their noses out of peoples' lives. It's hard to pigeonhole libertarians by saying that they're all conservative. Frequently, they're economic conservatives, simply because they don't want a lot of government interference in how they spend their money. But they're social liberals in the sense that they don't want Christian morality-based restrictions on how they live their private lives. They would believe in Roe v. Wade because of a right to privacy, that the government shouldn't be able to meddle in the affairs of private citizens. They would agree with the gay rights movement not because they're especially in favor of specifically rights for homosexuals, but because they don't want the government to tell citizens how they can and cannot live their private lives.

Sometimes libertarians can be crazy, but that's true of anyone, I guess. On average, they're less crazy than neo-cons and communists.

July 14, 2005

Arescom NetDSL 800 sucks monkey chunks

If you're in the market for cheap DSL service, you might consider Qwest by MSN. And if you do consider that service, Qwest will offer you a free DSL modem, the Arescom NetDSL 800. And you might accept it.

If you're a chump.

Because unbeknownst to you, you would be buying a DSL modem with an unconfigurable internal firewall. That's right, kids. You won't find it in the documentation, and you'll have to pry the information out of a Qwest customer service representative, but sooner or later you'll discover the unconfigurable firewall.

Here's Arescom's official answer for a problem with the Arescom NetDSL 800 firewall (which you were never told existed, by the way):

The MSN NetDSL units are are pre-configured per stringent specifications from MSN. Because the units are pre-configured for MSN, we do not offer a software manager to the open public.

Why would MSN preconfigure these units to not work? Users trying to download files via BitTorrent (which has "substantial non-infringing uses") or play games over the Internet will find that they have either no connection or a connection at a greatly reduced speed. Is this some sort of punishment for taking a "free" modem? It's not like it's defective; MSN went the extra step to order defective modems! It's as though you went to a car dealer and had to choose between two cars which were exactly the same, except one was free but didn't go over 45 mph, and it was designed that way. But they didn't tell you about it.

And why wouldn't MSN tell you about an unconfigurable internal firewall? Obviously to hide it from you. Openness comes from openness. Someone keeps something secret if he wants to hide it.

There is a way to "fix" the modem, but it requires some electronics knowledge and some command-line voodoo to hack your way into the modem's firmware and alter the firewall. And it probably voids the warranty. So in the future, just pay the fifty bucks for a decent, non-busted modem.

July 1, 2005

iPod changes again

A year ago, Apple phased out the 40 GB iPod ($399), leaving consumers with only a 20 GB iPod ($249), 20 GB iPod U2 Edition ($299), 30 GB iPod Photo ($399), and 60 GB iPod Photo ($499).

Now, Apple has phased out the black-and-white regular iPod altogether (well, short of the iPod Mini and iPod Shuffle models). The cheapest iPod you can buy is a 20 GB iPod ($299) with a 65,536-color screen. The next-best iPod (I guess) is a new iPod U2 Edition -- new because it, too, has a color screen. It sells for $329, $30 more than the black-and-white iPod U2 Edition. The top-level iPod is still the 60 GB iPod, which has come down in price to $399. The cool thing about these color iPods is that they will display cover art, if you have it, along with the album being played.

The great thing about the old Generation IV 40 GB iPod was that it came with a dock. With the phase-out of that iPod, consumers had to purchase a dock separately. The dock is great because you can plug the dock into your computer and just set the iPod inside the dock, where it syncs and charges without having to plug things in and out (especially for people with desktops with no USB ports on the front). Purchasing a dock adds $39 to the price of your order, but these new color iPod docks come with an S-video connector, meaning you can play photo slideshows on your TV (and can accompany them with music if you have an S-video connector that does audio as well as video).

I was really upset when I discovered that Apple no longer sold the 40 GB iPod, since it was essentially like getting an iPod for $360, plus the $39 dock. I guess Apple decided that they wanted people to pay extra for the dock. It's still a better than value than paying $299 for a Generation II 10 GB iPod, which I got for Christmas in 2002 and still use to this day.

May 30, 2005

Big Brother wants your IP address

From Wired, via Slashdot, comes a story about the Bush Administration, the USA-PATRIOT Act, and Internet Service Providers (ISPs):

The Bush administration asked a federal appeals court Friday to restore its ability to compel Internet service providers to turn over information about their customers or subscribers as part of its fight against terrorism.

The legal filing with the 2nd Circuit U.S. Court of Appeals in New York comes amid a debate in Congress over renewal of the Patriot Act and whether to expand the FBI's power to seek records without the approval of a judge or grand jury.

U.S. District Judge Victor Marrero of New York last year blocked the government from conducting secret searches of communications records, saying the law that authorized them wrongly barred legal challenges and imposed a gag order on affected businesses.

Supporters of the PATRIOT Act like to say that there is oversight over warrants that require information to be turned over, but the oversight is minimal. Organizations which receive National Security Letters (NSLs) requiring them to turn over information to the authorities in the name of counter-terrorism are forbidden from telling anyone that any information has been turned over or that they received NSLs at all.

Congress is attempting to ascertain whether or not it should renew elements of the PATRIOT Act that are set to expire later this year, and in doing so, they're trying to get information from the FBI and other national crime-prevention organizations about the success of the PATRIOT Act provisions. Unfortunately, the FBI has been less than forthcoming about disclosing how it used its new information-obtaining powers. Congress would like to know how much of these new powers has been used against non-terrorist criminals and how much has been used against terrorist criminals. We're still not sure.

Sure, there is a compelling government interest in keeping its citizens safe, but is security worth the possibility that our government could use these tools to silence its enemies? NSLs leave citizens without recourse to prevent their information from being turned over to the authorities. Where is the due process? The standard of evidence is even lower than usual. Instead of "probable cause," which is required to get a warrant, the PATRIOT Act specifies that terrorism-related warrants can be issued with the lesser "part of an ongoing investigation" standard of evidence. This means that the feds don't have to prove that you probably did something wrong; as long as you can be sort of associated with terrorism, a warrant can be issued. Isn't that a happy thought?

May 15, 2005

On authority

When speaking about politics and political systems, there are two other words which come into play: authority and legitimacy. Authority means “power to enforce obedience” and “the right to command.” The English word comes from the Latin verb augere, “to make grow, originate, promote, increase.” Politicians are invested with the authority – that is, the power – to make people do things that they would otherwise not want to do.

But power comes from somewhere. This is where legitimacy comes into play. Legitimacy comes from the Latin verb legitimare, “to declare to be lawful, to cause to be regarded as lawful.” Legitimacy determines how an agent with authority has that authority. In some instances, legitimacy determines whether or not an agent should have authority. We use the word “illegitimate” to describe a political leader whose authority is in question; if illegitimate, his authority is not lawful.

Political authority means, “Who has the power to tell me what to do?” Political legitimacy means, “How does the person with that power get that power?” Here is a small table of political legitimacy:

  Legitimacy Authority
Monarchy God King
Military dictatorship Force General
Democracy People People
Republic Constitution President
Anarchy No one No one

Some of these are merely examples, of course. And the table above is focused primarily on European and American systems, hence “God,” “King,” and “Constitution.” These could easily be replaced by any number of other words – “Deity” for God, “Chief” for King – but the concepts remain the same. Under a monarchical political system, a single person and his descendants are invested with authority. They are legitimated by God, who has chosen them and only them to be given authority. This only works as part of a larger religious social framework in which the subjects of the king believe that he has authority given to him by God. Under a military dictatorship, a military leader assumes control based on the threat of violence. His ability to inflict violence makes his rule lawful. Under a true democracy, like that practiced by the Athenians, the people[1] are in control of the entire political system. They have the authority and they legitimize it because they are in charge of it. A republic, like the United States, derives its legitimacy from a written document, like the Constitution, and invests authority in a president (although there are others who have political power). Finally, under anarchy, there is no government, therefore no one has authority and no one has any legitimate claim to authority.

Historically, there has been a political trend toward republican governments. It is no coincidence that this trend began during the seventeenth century. The trend toward republican governments follows a trend toward republican epistemology that began in 1450. The invention of the Gutenberg movable-type press allowed the masses who could read to read the Bible on their own. Previously, reading the Bible had been the office of priests, who were the only source of knowledge of the Bible and the only source of interpretations of the Bible. Once lay people could read and interpret Scripture for themselves, there was no longer a need to rely on priests; indeed, the entire hierarchical structure of the Catholic Church was questioned. Knowledge itself had become more open to the masses, as political systems would become more open to the masses.

Knowledge follows rules of authority and legitimacy as political systems do. Authority in the case of knowledge means the ability to say what is true. Legitimacy means the same things it does in politics: how an agent with authority has that authority. Here’s a table of epistemology:

  Legitimacy Authority
Catholic Church God Priests
China Force Communist Party
U.S. Media “Objectivity” Journalists

The Catholic Church has the power to claim what is true because God endorses what the Catholic Church says. Of course, if you don’t believe in God, then this presents a problem for legitimacy: the Church no longer has any. The legitimacy of its authority rests on the same kind of thing that U.S. money does: the “full faith and credit” of Catholics that (1) a God does exist, and (2) the Catholic Church represents exactly God’s opinions about particular human issues. In China, or even the former Soviet Union, the Communist Party’s power to disseminate truth is sanctioned by force: either you like it, or we’ll run you over with a tank. Finally, in the United States, the ability of journalists to disseminate truth is legitimized by their perceived objectivity: what they report must be true, since they wouldn’t lie to us; they’re objective all the time, after all.

It is the authority of epistemology that I really want to talk about. As Gutenberg’s printing press made it easier for anyone to be a disseminator of truth (and harder for an established authority like the Catholic Church to be one), so too has the Internet made it easier for anyone to be a disseminator of truth. History works in cycles, and the group of people that was once full of rebels – the journalists – has now become the authority. A new group of rebels is calling the journalists’ authority into question. They’re bloggers, and like the pamphleteers of seventeenth-century England, they’re out to disseminate truth without anyone giving them permission.

It’s very hard to make a newspaper that large numbers of people will read. It requires a huge investment in equipment to make millions of newspapers. If you wanted to make your own TV show, first you’d need another huge investment in transmission equipment, as well as several thousand dollars for an FCC license. New authorities have been created since 1450. It used to be the king, but now it’s the people with the printing press. They are the new kings, the people that hold the keys to the gates of public discourse. Bloggers today do what English pamphleteers did three hundred years ago: they bypass the gates altogether and sneak in through the back. Blogs are essentially free: for the price of an Internet connection, you have access to the millions of people who have access to the Internet, a virtual public forum. The great thing about virtual forums is that the physical limitations of space, cost, and time, which exist here in the real world, don’t exist in the virtual world. The Internet is composed merely of lots of computer servers hooked to each other. They get data from a few hubs around the world, but by and large, the network’s structure is very decentralized. There is no place that you can call when you want to call the Internet.

The decentralized physical structure of the Internet has led to a decentralized authority structure. Since there is no one in charge of the Internet, there is no one in charge of what is true on the Internet. Anyone can – and does – say anything with impunity, regardless of whether or not it is factual. Truth is another issue. Most “news” websites out there, especially blogs, don’t just deliver news. They deliver facts augmented with the fact-teller’s own opinion.

And so we come to Wikipedia, the Ur form of the democratization of knowledge on the Internet. No one is in charge of Wikipedia except those who contribute to it (Wikipedians?). For the uninitiated, Wikipedia is a collaborative, online encyclopedia with no editors and little oversight. Wikipedia allows users to create encyclopedia entries about anything, and while this is good for the democracy – it gives the people control of knowledge – it is bad for the knowledge itself.

Last November, Robert McHenry, formerly Editor-in-Chief of Encyclopaedia Britannica, criticized Wikipedia on many fronts:

  1. Anyone, irrespective of expertise in or even familiarity with the topic, can submit an article and it will be published.
  2. Anyone, irrespective of expertise in or even familiarity with the topic, can edit that article, and the modifications will stand until further modified.
  3. Some unspecified quasi-Darwinian process will assure that those writings and editings by contributors of greatest expertise will survive; articles will eventually reach a steady state that corresponds to the highest degree of accuracy.

The thrust of McHenry’s problem with Wikipedia was its lack of authority. Anyone can post anything to Wikipedia regardless of whether or not that thing is factually correct. If the information is incorrect, then Wikipedia relies on other users to point that out and correct it. These other users may or may not be authorities on the information they are correcting, so no matter what, there is a high degree of uncertainty that the information is incorrect. McHenry himself sampled a Wikipedia entry about Alexander Hamilton and concluded that, after errors of fact, grammar, and problems with vague language, “the article is what might be expected of a high school student, and at that it would be a C paper at best.” Who is writing Wikipedia articles? High school and college students, some knowledgeable, others not, and few “experts.”

Of course, we can always call into question the “expert” nature of the people who work for real encyclopedias, but they have been accredited as experts by places given the authority to do so. Their expertise is legitimate because it has been sanctioned by an external body; no one has dubbed Wikipedians “experts” in anything, unless they have degrees. Opponents of this idea will suggest that not all people accredited as experts are really experts, and there are some people who can be considered experts who have not been accredited as such. I do not deny the existence of such people, but I posit that there are more experts who have been validated as such and non-experts who have not been validated as experts than there are expert non-experts and non-expert experts. If Harvard were accrediting idiots, then Harvard would lose its reputation and authority. If Stanford medical school let anyone be a doctor, then no one would take Stanford seriously as a medical school and would not want to accept Stanford graduates. In some cases, authority can save lives. That’s why we have medical schools and bodies like the FDA: ostensibly, they know more than we do about what a good doctor is and what safe drugs are.

And so we have come to the democratization and decentralization of the Internet. The Internet’s physical structure is decentralized, and so is its epistemological structure. There are no authorities.

But that statement is false. There are authorities on the Internet, and such advocates for information democracy follow the rules of these authorities, whether they are aware of it or not. One of these authorities is called the World Wide Web Consortium (W3C), a group that creates standards of compliance for Web markup languages. Standards are what make the Internet work. If everyone used a different communication protocol, there would be no Internet. Fortunately, everyone has agreed to use TCP/IP, and thus the Internet works. Such standards assure that when I create an HTML document, it will look the same in all Web browsers (of course, the reality of standards-compliance is that no web browser adheres completely to all W3C standards, and sometimes different versions of the same browser – IE 5 for Mac and IE 6 for Windows – behave differently).

Here’s another example of authorities on the Internet. When I go to Amazon.com to buy a copy of Ann Coulter’s latest book, Amazon asks me for my name and password so that it can establish a secure connection. But what ensures that my connection is really secure? Certainly not just an assurance from Amazon that the connection is secure. I want more than that to make certain that someone doesn’t steal my credit card number and buy copies of Al Franken’s latest book. Another company, VeriSign, certifies that when I am establishing a secure connection to Amazon, the connection is (1) really to Amazon and (2) really secure. If there were no third-party certifying that my connection was secure, I wouldn’t use Amazon for my business.

Wikipedia co-founder Larry Sanger has recognized this problem with authority. Even if Wikipedia contains correct information, says Sanger, it is not perceived as authoritative by the public at large. One of the reasons for the lack of perception of authority is the lack of experts to certify that the information is correct. Wikipedians have balked at the very idea that anyone with credentials should review their work. “Project participants have such a horror of the traditional deference to expertise, this sort of proposal has never been taken very seriously by most Wikipedians leading the project now,” said Sanger. Wikipedia will never be an authority because Wikipedians do not want to involve authority.

Aaron Krowne, writing for Free Software Magazine, wrote a reaction to McHenry’s piece in which he tried to frame the debate in terms of money:

In brief, the goal of FUD [Fear, Uncertainty, and Doubt] is to make money when the free software competition cannot be defeated fairly in the marketplace. This can be done by scaring consumers through wild propaganda, or more recently, confusing courts through more subtle arguments.

Krowne would have us believe that McHenry is part of a larger conspiracy which is actively trying to stop free information from being disseminated. “The Man” doesn’t want “The People” to create their own information. The motivation for this is money: McHenry, a representative of The Man, is afraid that Britannica will lose customers to Wikipedia. But is this argument true? This is not an issue of open information vs. free information, but rather an argument of correct information vs. suspect information. McHenry, an academic, is not pragmatic enough to be concerned with money. As with most academics, McHenry is concerned with the information itself and the information’s integrity. Like a Supreme Court justice making a ruling against homosexuals in Lawrence v. Texas, he is not concerned with actual oppression of information (or people); he is concerned with the integrity of the information (as Scalia was concerned with the integrity of the law – though this is not an endorsement of Scalia’s opinion in that case, which I think was a wrong one).

My cardinal fear in writing this was that it might appear to be an endorsement of tyranny. My constant statements that we need “authority” might lead readers to think that I believe that political authority is best vested in an autocrat. This is not so. In the United States, we invest our leaders with authority to act on our behalf. Ideally, we know in what direction we want the country to go, and we elect leaders who will take us in that direction. The specifics of getting there are not up to us, necessarily. The law is an esoteric institution with its own processes and vocabulary that non-lawyers don’t always understand. Regular people are not experts in the law; therefore, they hire people who are experts to get their agenda done for them. In the United States, of course, this has turned into something nefarious, as lawmakers themselves set the agenda, not the people. The people have become the unwilling servants of politicians who are acting in their own best interests, not the interests of the people that they serve. This does not mean that we should abandon the republic style of governance altogether, for it is the best system for a country of our size, traditions, and institutions. A complete overhaul of the system would be morally wrong for the United States, since it would result in the loss of life and property for a whole lot of people.

My point in writing this was to show that (1) the Internet is not void of authority, and (2) there are instances when authority is good, even necessary. We need it in our politics, because that is the nature of politics. Rousseau said that the first social contract was made when the first farmer fenced off his land to keep his animals in and other animals (and people) out. He surrendered some of his freedoms to an authority who would ensure that his property was protected from encroachment by others. Likewise, when searching for information, we must occasionally submit ourselves to an authority who knows more than we do about the information we’re looking for.

If Michel Foucault were around, he would point out that authorities can misrepresent information for their own agendas. In examining the history of insanity and punishments for insanity, Foucault concluded that the definition of “insane” was not clinical, but determined by whatever was outside societal norms at the time. These norms were determined by authorities who wanted to forward a particular agenda, using their authority for moral evils, not for moral good. Indeed, the very nature of discourse makes it such that whoever is in charge determines what discourse is and what it is not. This is the problem with authority: we must trust it not to become tyranny, although knowing when that has happened can be hard. The only comfort I can offer is that sometimes authority is necessary and sometimes it is not. We may not know whether authorities are lying to us or not, but we usually have a good idea of when authority should be present. And authority should definitely be present when it comes to information. Information may want to be free, but if it is the wrong information, then that freedom is a pointless exercise.

Notes

[1] Under the Athenian system, of course, “people” meant “male citizens.” A citizen was any person who was born in Athens; thus, foreigners were not allowed to be part of Athenian politics.

March 2, 2005

The battle for wireless

Increasingly, technology and media companies have been faced with the choice to innovate or stifle. To "innovate," a company would have to change its business model to meet with the new challenges of the Internet, which is a very different marketplace from those that companies were used to. To "stifle," a company could use political influence to have laws changed so that they can make the Internet conform to the practices of the old marketplaces.

Guess which one they've chosen.

Costa Rica may criminalize VoIP (Voice over Internet Protocol, a method of making phone calls by sending data over a broadband Internet connection) if the Costa Rican (non-state-owned) telecom monopoly has its way. Most U.S. government agencies have ruled that VoIP is a data service, not a telecom service, and as such, should not be regulated. But that won't stop Instituto Costarricense de Electricidad (Costa Rican Electrical Institute, ICE) from demanding regulation or, in a worst-case scenario, forbidding VoIP.

Why? ICE already has telecom infastructure in place. And it's getting money from that infastructure as well as from the services provided over that infastructure. VoIP is super-cheap, and given the option, most Costa Ricans would probably opt for broadband + telephone service instead of individual services (and Costa Rican phone services are none too good, either).

ICE doesn't want its customers to be able to make cheap phone calls. It will lose customers to VoIP. So, it's decided to use its influence to attempt to ban VoIP altogether, rather than change its business model.

A similar situation is popping up in municipalities around the United States. Cities and towns want to establish free, city-wide wireless networks (so-called Wi-Fi, but that's a dumb name, for reasons I won't get into right now). Telecom companies don't want them to, and as such, have pushed for state-level laws (like ones in Texas) banning the implementation of municipal wireless networks.

Back in the old days, companies would change their business models to fit a changing marketplace. Now, companies use their political influence to destroy the new marketplace, forcing it to adhere to the standards of the old one (cf. MPAA, RIAA). The Internet is not a Wal-Mart, and should not behave like one. Attempts to make the Internet into an older marketplace will ultimately fail, of course, as the Internet is more untamed than the "real" world and hardcore h4xx0rz will find ways around roadblocks imposed by corporate America.

February 27, 2005

In defense of authority

You may recall last November, when former Encyclopaedia Britannica editor-in-chief Robert McHenry heavily criticized Wikipedia in an article entitled "The Faith-Based Encyclopedia."

The article caused a good deal of controversy. Wikipedia represents the new free, open source mentality of information thriving on the Internet (the kind of mentality behind Linux; also note that I am note equating "free" with "open source"), while McHenry represents the "old guard" of closed, elitist, and expensive information. It's very much like a battle between Catholics and Lutherans: on the one hand, McHenry suggests that only a select few have the credentials to disseminate information. On the other hand, Wikipedia suggests that anyone can disseminate information, and that the Internet had made this democratization (Gr. demos, "the commons, the people" + Gr. -ize, "to conform to such a way"; from the same root comes democracy, "authority of the people") of information possible.

It certainly has. Blogs are another example of the democratization of information. Whereas journalists with credentials behind them (a degree in journalism plus a respected news organization) told us the news prior to the existence of the Internet (although fringe and "underground" publications provided news as well, but were not taken to be authoritative), bloggers have no credentials beyond a background knowledge in the material they write about and excellent research skills. In the increasingly anti-authority world of the Internet, having credentials is more of a liability than not having them. Credentials mean that you're part of the establishment, that an elite person has, like a feudal lord, given you the authority to say what is factual and what is not factual (the "t-word" will not be used here, since encyclopedias are not bastions of truth, but of fact).

The Internet seems to reject information from an authority figure merely on principle, without evaluating the information itself. The fact that it comes from an elite source renders it biased, inaccurate, or "evil" by itself. When Microsoft engineer Peter Torr criticized Mozilla Firefox for being insecure, open-source apologists rushed him immediately, declaring him "narrowminded" and "a tool." Some of his comments made me a little leery, like when he referred to download mirrors at universities being operated by "a bunch of kids at some random university I've never heard of." But did the people who read his blog entry bother to consider what he was saying? Or did they immediately presume that since he (1) worked for Microsoft, and (2) was attacking Firefox, he must be an evil person and obviously stupid.

His comments about security were on target. Firefox entices its users into thinking that (1) it is hack-proof and thus (2) it will stop any nasties (spyware, adware, malware) from entering your computer. This is not the case. Torr correctly indicts Firefox for lulling its users into insecure computing practices, like readily accepting a download from a site that you have been redirected to. "Not only does this software come from a completely random university server, but I have no way of checking if it is the authentic Firefox install or some maliciously altered copy," writes Torr. There is no security authority telling the user that the product is safe. The Internet needs security, and it has that in the form of certificates which certify that the thing you downloaded really is what it claims to be. Even Firefox utilizes certificates. And where to certificates come from? Private third-party institutions, like Verisign, certify that certificates are real. If they won't do it, then who will?

The same is true for Wikipedia. Aaron Krowne, writing for Free Software Magazine, lambasted McHenry for his criticisms of Wikipedia, suggesting that he has a "a vested interest or deep-seated bias" in his hatred for Wikipedia. But what about the integrity of the information? Who will certify that the information I find on Wikipedia is true? What are the credentials of the authors of various articles? There is no certainty beyond the theory that, if enough people review and revise an article, it will become factually correct. "Wikipedia is almost becoming authoritative," says Krowne, "a fact which clearly upsets McHenry and similarly-situated individuals." Why is it upsetting? Because they are Grinch-types who sit in their high castles, cursing the fact that the people now have a free encyclopedia? Or is it because they are concerned about the quality of the information coming from Wikipedia? McHenry isn't the only person who questions Wikipedia. Krowne acknowledges that Wikipedia co-founder Larry Sanger also expressed doubts about Wikipedia and suggested that become less anti-elitist and have more respect for expertise. Sanger observes that "project participants have such a horror of the traditional deference to expertise, this sort of proposal has never been taken very seriously by most Wikipedians leading the project now." Why have project participants been loathe to bring in experts? The existence of "experts" and "non-experts" runs counter to the democratization of information on the Internet, where everyone is an expert, and anyone who claims to be an expert is obviously up to no good.

There are people who know more than you do. The folks at Wikipedia must learn this. Experts have spent years studying their fields and have credentials from institutions to prove it. The people who want to make information dissemination more egalitarian are frequently (though not always) armchair scholars who can put half-information in academic-sounding language to mask its inadequacies. The people who contribute to Wikipedia are the same people that you and I have met on countless message boards. They know a little bit about enough things to be dangerous, but not enough to be experts. On the Internet, the person who sounds the most authoritative is the most authoritative, whether he is or not.

In academia, we still require that web pages have credentials behind them. Any old web page won't do; it must have an authority behind it. The Internet provides a plethora of information, but not all of that information can be certified as correct. Wikipedians object to the existence of an omniscient third party certifying information to be correct or not. The fact is that someone must exist to certify whether information is correct.

In the absence of information, Wikipedians (and bloggers) will defer to opinion as a substitute for fact. Most blogs do not provide "news," but rather provide an opinion about the news. Likewise, Wikipedia provides facts as well as opinions about those facts. For a reference source, this is unnecessary and unwanted. I can form my own opinions; I just want the background material around which to base those facts. By throwing your own opinion into those facts, you have interfered with my ability to think for myself. You would have me think as you do. That's not what I want when I go to an encyclopedia.

Democracy for democracy's sake is a terrible idea. Just because an encyclopedia can be written by people from around the world does not mean that that is a good idea. The question must be asked, "Why would I want a reference source whose facts are questionable, just for the sake of calling it 'free and open'?" This is the problem: Wikipedians put the cart of demos before the horse of fact. I don't go to an encyclopedia because it espouses opinions about information accessibility that I agree with. I go to an encyclopedia for correct information, and in the case of Wikipedia, its contributors are more concerned with the information being available for dissemination by anyone than that information being correct.

What are we really talking about? Democracy means "authority of the people," but in the case of Wikipedia, the people do not have the authority. Wikipedia is currently in a state of anarchy (Gr. an, "without" + Gr. arkhos, "leader"), or more properly, ankratia ("without authority"). The ideal of the Internet is ankratia, but only in certain ways that are rather hypocritical. It is perfectly acceptable to criticize Microsoft for being a large, nameless, faceless corporation and Windows for being a terrible operating system. But to criticize Linux or Mozilla (and there are valid reasons for criticizing them) is heresy. Microsoft is regularly criticized for not adhering to standards of HTML compliance - invented by whom? An authority: the World Wide Web Consortium (W3C), which creates standards for Web markup languages like HTML, XML, and XHTML. Internet anarchists are perfectly content to obey some authorities and not others, as long as the authority's politics are in line with their own.

Democratization brings freedom. This we can be sure of, as far as states go. But even in the United States, we are a federal republic. A pure democracy would be crazy with 293 million people. Instead, we invest authorities with the power to do things for us. So, too, do we invest authorities with the responsibility of finding information for us. We are not experts on ancient Persia. That's why we expect other people to be. But we want them to have the ability to say something about ancient Persia and have it be factually correct. Wikipedia denies us this. And if the Wikipedian suggests that one can never know if a fact is totally true or whether or not an authority is correct, then I will say that Encyclopaedia Britannica is more correct than Wikipedia. I hardly ever use Wikipedia to look things up; I use Project Bartleby's Columbia Encyclopedia and the other reference materials available at Bartleby. I know the material has been researched by actual, real-life scholars, not kids in dorm rooms sipping Mountain Dew. I place factual correctness above the necessity of being free and open. And if you'd like a free encyclopedia, try the Columbia Encyclopedia. As for being "open," I'd prefer a closed encyclopedia if that meant that the facts were correct.

This does not mean that Wikipedia should close its doors forever. What it does mean is exactly what Larry Sanger suggests: in order to be authoritative, it must accept authority. U.S. currency is accepted around the world only because it is based on a promise from the U.S. government that the money will be worthwhile tomorrow. A Wikipedia currency would give us no such security, since it isn't backed by anything - just as the Wikipedia encyclopedia is not backed by anything but the "full faith and credit" of its contributors and its review process, all of which are suspect. "The project can both prize and praise its most knowledgeable contributors, and permit contribution by persons with no credentials whatsoever," says Sanger. If Wikipedia wishes to survive - and if the Internet wishes to be taken seriously - then we must show some deference to authority, lest the Internet become one giant, mindless message board void of cogent thought.

February 4, 2005

'Why Does Windows Still Suck?'

Via Slashdot comes the story of a man who plugged his girlfriend's computer into her new Yahoo! DSL only to have it slow to a crawl four minutes later, laden with spyware and virus infections.

Other sites have documented how quickly a fresh copy of Windows XP can be made to go sour by spyware, malware, and viruses. But Mark Morford, author of the above-mentioned article, asks

Why the hell do people put up with this? Why is there not some massive revolt, some huge insurrection against Microsoft? Why is there not a huge contingent of furious users stomping up to Seattle with torches and scythes and crowbars, demanding the Windows Frankenstein monster be sacrificed at the altar of decent functionality and an elegant user interface?

As an IT support professional (more or less), I see this stuff all the time. It boils down to a few factors:

  1. By and large, Windows users expect everything to be done for them. They figure that if Windows doesn't do something about their virus protection or spyware protection, then it isn't important; or, it doesn't even cross their minds. Linux users are used to doing things for themselves, usually on the command-line. The GUI is for convenience (I could make a mySQL database on the command-line -- and I have -- or, with significantly less typing and some mouse-clicks, I could have phpMyAdmin do it).
  2. It's not a Windows user thing, but a technology user thing. Some people just don't maintain things. They don't take care of their house, their apartment, their bedroom, or their car until something is wrong. A computer, like a car, requires maintenance.

Nevertheless, we shouldn't accept this kind of behavior. Morford is correct when he says that we should demand Bill Gates's head for this kind of operation in software:

Here is your brand new car, sir. Drive it off the lot. Yay yay new car. Suddenly, new car shuts off. New car barely starts again and then only goes about 6 miles per hour and it belches smoke and every warning light on the dashboard is blinking on and off and the tires are screaming and the heater is blasting your feet and something smells like burned hair. You hobble back to the dealer, who only says, gosh, sorry, we thought you knew -- that's they way they all run. Enjoy!

December 26, 2004

But how secure is secure?

So you've been told that you need to encrypt your wireless access point. You've heard about wardriving and you don't want to be a victim of people using your WAP without your knowledge. So you activate WEP on your Linksys, D-Link, 3-Com, or whatever commercial brand of access point or wireless router.

Then what happens? You're secure. But my friend Jim found that that's not always the case:

It took me less than 5 minutes to set WEP up.

It took me less than 30 minutes to gather the data.

It took me less than 10 seconds to crack my own WEP key.

So how was it done? Well, I setup a 26 character 128bit WEP key on both my access points. I picked the one closest to me to crack. Then I just downloaded and followed the instructions for Aircrack. Once Airdump was running on my laptop (the hacker in my own test) I simulated traffic on my wireless network from the inside. I waited until I got a little more than 500,000 unique WEP IVs and started up Aircrack. Before I could figure out how the program worked my WEP key was given to me.

What does this mean? It’s been known for years that WEP is worthless. But what this really means, is that for busy wireless networks, WEP is not worthless, it’s a joke. The good news is my wireless network doesn’t normally generate this kind of traffic so the odds of getting hacked by a wardriver are slim. If I suddenly notice a bunch of directional antennas pointed towards my house - then it’s a whole different story.

Now I know why Miami University doesn't encrypt its wireless networks. Instead, it asks us to login with our IDs and passwords in order to obtain an IP address. A much more secure idea, but one that doesn't scale down for the home network.

This, of course, doesn't mean that you shouldn't encrypt your wireless access point. Not everyone is Jim, which means that if the average user wants to listen in on your wireless communications, he won't be able to do it. If a hardcore h4xx0r wants to do it, there's little stopping him -- short of a login system like Miami's.

Oh, and Merry Christmas.

December 21, 2004

Can I trust anyone?

Open-source h4xx0rz -- and even regular users -- have been wetting themselves during the past year over Mozilla Firefox, an open-source web browser that, like Linux, is touted as the holy grail of computing. In a utopic future, software will be free and it will be open source. "Open source" means just that: the source code upon which the applications are built is available to the public for viewing, not locked away where no one can see it. The theory behind "open source" is that if you have a million hackers at a million typewriters, you can create a completely secure piece of software, since they will necessarily double-check each other. This model of distributed software development is what powers Wikipedia, the open-source encyclopedia, although a former Encyclopaedia Britannica editor had a few choice words for Wikipedia and its "double-check" model.

Microsoft's Peter Torr examines Firefox and compares it to Internet Explorer in a recent blog entry (via Slashdot). He concludes that if Internet Explorer is insecure, then Firefox is equally insecure. His observation is an astute one: they are not insecure in precisely the same ways. Whereas IE may have been written insecurely, with Firefox, "it doesn't matter how secure the original code is if the typical usage pattern of the browser requires users to perform insecure actions." His blog entry successfully demonstrates that a user must make several insecure decisions when downloading and installing Firefox: the user is redirected to mirrors that he is not familiar with; the user must download and install software that isn't digitally signed; the user can choose never to see warnings that he might be downloading insecure or malicious software (the "don't show me this again" checkbox). While Torr's criticisms are valid, his installation of Firefox is rife with errors that I've never seen before in my many installations of Firefox (I started using it back when it was version 0.7).

As interesting as the original article is the level of comments that have appeared at his website. He wrote a new entry today to answer criticisms from yesterday. It's the typical bunch of comments: you're stupid, you're with the man, you don't know what you're talking about. But he does! Why is it that everyone's tendency is to dismiss someone he disagrees with? For example, Torr was redirected to a mirror provided by DePaul University in order to download Firefox. He suggested (sarcastically) that he didn't know what DePaul University was. He was berated, he says, for "failing to have an encyclopaedic knowledge of all the universities in a country [he] didn't grow up in." His point is "that the average internet user might not know what '.edu' means, or who controls the server. The New York Times told them to download Firefox from a '.com' address, and now they're downloading it from somewhere completely unrelated." Internet users should be worried when they're redirected. This is how spyware infects a computer: by fooling the browser into going to one website, then redirecting it to another (this is especially topical given the existence of an exploit that allows a hacker to put whatever URL he wants into the address bar of Internet Explorer).

There is no such thing as completely secure computing. It's asymptotic at best and Torr does exactly what advocates of open-source should be wanting him to do: pointing out problems in software instead of hiding those problems. Linuxites complain all the time that Microsoft doesn't make its security holes public; that's exactly what Torr is doing. Why are you shooting him now?

December 9, 2004

On another note ...

Scott goes to the Activision website to download a patch for their popular game Return to Castle Wolfenstein. Before he is allowed to see anything about the game, which is rated "M," the website makes him enter his birthdate. When he tries to download a patch, the website makes him enter not only his birthdate, but also a valid credit card number! Fortunately there are other websites out there that have the patches on them (like our good friend Gamecopyworld).

June 11, 2004

Microsoft propaganda

Slashdot reports that Microsoft is going on a "myth-busting" tour to expel the "myths" surrounding Linux: apparently, Linux costs companies more in the long run and is less secure than Windows. We are supposed to laud Microsoft for having "a fix available 25 days after a security issue was publicly disclosed." That's great. The alternative is not having security issues in the first place, like our friend Linux.

See also: ZDNet, "Microsoft Goes on a 'Myth-Busting' Tour."

March 16, 2004

Miscellany: The software knows!

A few months ago, my roommate Matt got Adobe Photoshop CS and was delighted with it; as a graphic designer, he loves the newest version of anything Adobe produces. He tried to scan an image of US currency so he could photoshop it, but met with problems; it wouldn't work. Why not?

Unbeknownst to practically anyone, Adobe inserted anti-copying technology into the latest version of Photoshop which prevents it from opening images of US or European currency. The anti-copying device runs constantly, checking each image that is opened to see whether or not it is US or European currency (an algorithm checks for the existence of a five-dot pattern on the currency). This is scary stuff. Then I found an article on Slashdot which talks about this technology pervading other places. Apparently, newer HP printers won't print images of currency. An exasperated Slashdot forum reader wondered at what point CD burners would have DRM built-in to prevent them from copying protected media. In much the same way that DVD makers have decided what we may do with the product we purchased, so, too are software manufacturers doing the same thing.

On a totally different note, I was uninstalling spyware from a computer the other day, and the spyware generated a number-picture that I had to confirm in order to uninstall the software. It's the same kind of thing that Yahoo! or Hotmail uses: it asks you to tell it what word you see to prevent advertising robots from signing up for free accounts; only humans can read the text in the picture. Only this was the spyware that was defending itself from being automatically uninstalled by Ad-Aware or Spybot. The software is fighting back! It's becoming more powerful! Scary stuff. And it angers me that the spyware people are going to great lengths to prevent you from uninstalling their crap that you never asked for in the first place.

February 11, 2004

More spyware

If you received an instant message from a buddy urging you to "check this out . . ." and then a link to a web page beginning with www.wgutv.com, rest assured that it is bogus. The link points to the "WGU News Player," where you can find out about Osama bin Laden's capture (not true). In order to do so, you must first download the WGU News Player, an ActiveX control. This ActiveX control is, of course, spyware and hooks into your instant messaging client. It automatically sends people on your buddy list IMs advertising products and services and also entices them to download the ActiveX control so that they, too, can become unwilling purveyors of advertising.

Step one of the process is don't download ActiveX controls from companies you don't trust! Everyone must be chastised for this. Why do you need ActiveX controls from Microsoft? So you can get Windows Updates. Why do you need ActiveX controls from Macromedia? So you can view Flash animation. Do not download ActiveX controls from companies that you are not familiar with! And if you aren't sure, read their terms and services. The WGU News Player is provided by PSD Tools, Inc. This is what their terms and services say: "In addition, the Software will interoperate with your current instant messaging client so as to permit the automatic sending of advertising messages originating from your Computer to your contact or 'buddy' list regarding Content offered by PSD Tools or its suppliers."

Step two: go to Add/Remove Programs and find a program with "buddylinks.net" in the name. Remove it. Also remove "PSD Tools v1.0" or anything similar. You will probably have to turn off your instant messenger (but I'm sure you can survive for ten seconds).

Step three: if you have your Internet Explorer or Netscape (or Mozilla, Firebird, or Opera) browsers set to automatically install ActiveX controls, don't. This is extremely stupid. Reset your security settings to their defaults. They're the "default" settings for a reason: they keep security at a reasonable level. if you're concerned that the crappy file-sharing program you downloaded is full of spyware (and it is: Kazaa, LimeWire, Bearshare, Morpheus, P2P Networking -- they're all full of spyware) download Spybot Search & Destroy. If you download two spyware-removal programs, they should be Spybot and Ad-Aware (from Lavasoft). Do not download any other spyware-removal programs! Chances are good that they will install more spyware under guise of removing it. If all of this sounds a little angry, it should be. In tech support, I see ten thousand computers a day that are loaded with spyware junk because people don't know how to take care of their computers and then they wonder why they get ad popups every ten seconds. Not to mention that the file-sharing programs they use to get their Justin Timberlake music is terrible, anyway. Your computer is not a toy; take care of it or you will end up having to call tech support (and some computer companies -- Dell, for example -- will not tell you how to remove spyware, so you'll be on your own). Only download Spybot and Ad-Aware; they are the only ones to be trusted as legitimate spyware-removal programs.

And for crying out loud, have an antivirus program installed! Especially if you do the file-sharing, because files with enticing names can be viruses! Serenity now!