Monday, January 24, 2005

Locks etc

Ok, all that reading got me thinking, I've been having a play around and listening to a few different transcripts of various seminars and things (all procrastination really).

There is a lot of debate within computer science about the concepts of full disclosure, open source cryptography and the possible benefits and pitfalls of "security through obscurity" are frequently discussed at (often tedious) length.

I discovered this great quote earlier, hopefully I can include in something useful some day :)


A commercial, and in some respects a social doubt has been started within the last year or two, whether or not it is right to discuss so openly the security or insecurity of locks. Many well-meaning persons suppose that the discussion respecting the means for baffling the supposed safety of locks offers a premium for dishonesty, by showing others how to be dishonest. This is a fallacy. Rogues are very keen in their profession, and know already much more than we can teach them respecting their several kinds of roguery.

Rogues knew a good deal about lock-picking long before locksmiths discussed it among themselves, as they have lately done. If a lock, let it have been made in whatever country, or by whatever maker, is not so inviolable as it has hitherto been deemed to be, surely it is to the interest of honest persons to know this fact, because the dishonest are tolerably certain to apply the knowledge practically; and the spread of the knowledge is necessary to give fair play to those who might suffer by ignorance.

It cannot be too earnestly urged that an acquaintance with real facts will, in the end, be better for all parties. Some time ago, when the reading public was alarmed at being told how London milk is adulterated, timid persons deprecated the exposure, on the plea that it would give instructions in the art of adulterating milk; a vain fear, milkmen knew all about it before, whether they practiced it or not; and the exposure only taught purchasers the necessity of a little scrutiny and caution, leaving them to obey this necessity or not, as they pleased.

-- Locks and Safes: The Construction of Locks. Alfred Hobbs (Charles Tomlinson, ed.), 1853 noted from here

Sunday, January 23, 2005

Language

From now on, I may or may not (at my option) be blogging in Klingon, this will inconvenience 90% of my readership and give me a false sense of superiority. That is all.

Tuesday, January 18, 2005

A Long Overdue Update

Well, there goes another weekend. I've been quite busy this last week or two, with my course earlier this week, lots of overtime in the middle, and just had some family visiting at the weekend. Last week I also completed module 2 of my course, "Financial Management" which provided an interesting insight into some stuff that I'd touched on before, and actually related it some some real-life examples, which is always good.

Oh, and Vauxhall Zafiras are REALLY boring... and if you ever get into one in the dark and have to find how to turn the interior light on so you can find the controls, pull out the switch for the headlights.

Apple seem to have released the iPod shuffle (which strangely has more functionality and more memory than the first generation of my mp3 player which had a 400mb hard drive). Quite nice.

I subscribe to crypto-gram mainly because I think Bruce does a particularly good job of putting some security issues into an understandable real world context (I don't necessarily agree with everything he says). Anyway, this month he linked to what I thought was a great paper on "safe security from a computer science perspective" or something similar, which got me thinking about combination locks and really got me interested in how they work, and it looks like I might have to get hold of one to have a play with :)

I've also decided that I need to concentrate more, and focus on doing the things I want to be doing with my life rather than sitting in front of a computer because I'm procrastinating over the things I need/want to be doing. And I need to sort out the sleep patters too.

Current Music: Placebo - Slave to the wage

Thursday, January 13, 2005

What monkey island character are you?

Herman Toothrot
Golly, you're Herman Toothrot. You are unique,
pleasent, er...unique. Oh, let's face it,
you're an old pantless weirdo. You trained a
bunch of monkeys to sail a ship back from a
deserted island but didn't go yourself, you
think your dead friend has never looked better,
and you talk to people who aren't there... kind
of. But don't worry, that's why everyone loves
you.


*~What "Secret of Monkey Island" character are you?~*
brought to you by Quizilla

Sunday, January 09, 2005

It's Saying Something...

When you can send the text message "pub at 8" and get the reply "aye", the name and approximate locations within it are already known. Oh dear.

Wednesday, January 05, 2005

Busy Busy Busy

Returned to work on Tuesday, and I have to say I was quite glad to, I really needed to get out of the house after the long christmas break. However, I've returned to a todo list as long as my arm and I'm going away on a course on monday, so it looks like I'll be working late most of this week, and I don't mind either, as things are starting to come together on one of my projects, I got some really encouraging feedback on the work I've done so far.

In addition to the day job, I have some assignments to do which I'm attempting to get my teeth into this evening...

Sunday, January 02, 2005

New Year etc.

Well, there we go, that's 2004 all done and dusted. After quite a bit of confusion about what was going on (a few ideas were bounded around that never came to fruition), I went to the pub with the group of old friends that I spent Christmas eve with. It was a great evening, and I managed to work my way through a nice selection of beers and had a few of the very nice hot dogs they had going (possibly the nicest sausages I've ever had, they seemed to be locally produced type things). All in all, ended up drinking a bit too much and once we'd had enough of the pub we wandered over one of the group's parents house... They had an EyeToy on their playstation, which provided humorous entertainment for a good while, and I recorded video evidence of the frantic arm flailing with my phone - oh dear.

I think it was about 4am I wandered home, not the usual way I go back which was nice, plus there was *no-one* about at all, and just the sounds of the light breeze in the trees, extremely peaceful.

Still haven't got around to completing my assignment, I'm hoping to get up early and have a productive day tomorrow to make up for it.

I got a phishing spam today that was the first one I'd seen that tried to exploit a "quirk" of IE image handing - screenshot here. You used to be able to place images anywhere on screen with an appropriately crafted webpage, so you could cover up the address bar with an image if you wanted to, this particular attempt failed as my version of IE is patched, but you can plainly see that the author is trying to use an image to make the user think that the address is a secure https address at the bank in question.

Current music: Jeanne Michel Jarre - Oxygene pt. II (for some reason I always associate this track with fireworks)