<?xml version="1.0" encoding="UTF-8"?>
<opml version="1.0">
  <head>
    <title>cmdln.net_2008-06-29</title>
    <expansionState>0,1,6,13,14,23,28,33,40,41,61,78,105,129,150,151,161,166,178,179,187</expansionState>
  </head>
  <body>
    <outline text="Intro" Offset="00:17">
      <outline text="Taking a two week break">
        <outline text="Have never taken a hiatus longer than a week"/>
        <outline text="Need to brain storm new features"/>
        <outline text="Need to get cracking on next round of interviews"/>
        <outline text="Will return July 16th with a new feature"/>
      </outline>
      <outline text="Wall-E review">
        <outline text="Stross' Atrocity Archives has closing essay that mentions, among others things, hacker as the trickster"/>
        <outline text="Other reviews make this out as an eco film"/>
        <outline text="It surely is"/>
        <outline text="Protagonist hacks himself, goes beyond programming"/>
        <outline text="Wreaks change, in this case for the good, in his wake"/>
        <outline text="Very sweet story with many layers to contemplate"/>
      </outline>
    </outline>
    <outline text="Security Alerts" Offset="04:56">
      <outline text="OS X trojan spotted in the wild" Offset="05:15">
        <outline text="http://go.theregister.com/feed/www.theregister.co.uk/2008/06/23/mac_trojan/"/>
        <outline text="Follows on vulnerabilities in Apple Remote Desktop Agent"/>
        <outline text="Truly a trojan, have to accept a file from a transfer of some kind"/>
        <outline text="Authors trying to push malware via iChat file transfers and Limewire P2P network"/>
        <outline text="Multiple variants already in distribution"/>
        <outline text="Comes as a compiled AppleScript or an application bundle, not entirely stealthy"/>
        <outline text="Does allow rooting of an affected box, so access by the attacker to all system resources"/>
        <outline text="Researchers identify it accesses key strokes, iSight among other things"/>
        <outline text="More on OS X trojans">
          <outline text="http://rss.slashdot.org/~r/slashdot/eqWf/~3/319514677/article.pl"/>
          <outline text="The Register article seems to be identifying a new, different trojan"/>
          <outline text="The one others are discussing is embedded in a poker game"/>
          <outline text="All depend on exploiting a flaw that allows local privilege escalation in ARDAgent"/>
        </outline>
        <outline text="Protecting against OS X trojans">
          <outline text="http://db.tidbits.com/article/9665"/>
          <outline text="Article has some more detail"/>
          <outline text="Basically, instructions are to remove back up and remove the buggy software"/>
          <outline text="If you do not use Apple Remote Desktop, this seems like an acceptable step"/>
        </outline>
        <outline text="Security recommendations for OS X inspired by recent malware">
          <outline text="http://blogs.zdnet.com/security/?p=1325"/>
          <outline text="Reflects that the tipping point for OS X malware may be coming"/>
          <outline text="Still thinks it will be driven by market share"/>
          <outline text="Thinks Snow Leopard, 10.6, is a good opportunity"/>
          <outline text="Itemizes five improvements he'd like to see"/>
          <outline text="Seem reasonable and agree, next release after may be too late"/>
        </outline>
      </outline>
    </outline>
    <outline text="News" Offset="12:10">
      <outline text="Last components of Java to be freed this year" Offset="12:25">
        <outline text="http://rss.slashdot.org/~r/slashdot/eqWf/~3/317973020/article.pl"/>
        <outline text="Good snapshot piece on the state of opening Java"/>
        <outline text="Sun announced two years ago"/>
        <outline text="RedHat started IcedTea a year ago"/>
        <outline text="IcedTea just recently passed the Java Technology Compatibility Kit"/>
        <outline text="Means it is functionally equivalent of Java 6.0 Standard Edition"/>
        <outline text="Some critical of the JCK"/>
        <outline text="Previously used as a very high bar to lucrative licensing of closed Java"/>
        <outline text="Anecdotes of Sun changing JCK to match current bugs in their own code"/>
        <outline text="Regardless, only functional proof of meeting the JLS"/>
        <outline text="Last hold outs not surprisingly multimedia components"/>
        <outline text="Finally got third party graphics opened"/>
        <outline text="Sun is re-writing the last bit, audio, from scratch"/>
        <outline text="I won't argue with Java's critics"/>
        <outline text="Professionally, I use a small fraction of what is available"/>
        <outline text="My huge investment in time, experience means I find it easy to use"/>
        <outline text="I am not the best judge of its complexity"/>
        <outline text="Have to bear in mind that these arguments are about the language and the libraries"/>
        <outline text="Not foolish enough to suggest language without core libraries is worth considering"/>
        <outline text="Strong thoughts on whether open Java is relevant">
          <outline text="http://rss.slashdot.org/~r/slashdot/eqWf/~3/320656522/article.pl"/>
          <outline text="Commentary by Neil McAllister on Fatal Exception"/>
          <outline text="Not as strong as the slashdot poster makes out"/>
          <outline text="Generally sees opening Java as a good thing"/>
          <outline text="Admits it has a strong following, questions whether it will be able to grow it"/>
          <outline text="Objects to complexity"/>
          <outline text="Sees Sun's adding of new features in response to market as just making things worse"/>
          <outline text="Thinks newer tools do almost as much, more simply"/>
          <outline text="I think the opportunity is to re-tool library management"/>
          <outline text="Core language stacks up well against C/C++"/>
          <outline text="Outside of the static v. dynamic debate, also against newer languages"/>
          <outline text="Library bloat has been a huge problem"/>
          <outline text="Had &quot;standard extensions&quot; which were not required"/>
          <outline text="That fell away as these became incubators that got folded into core"/>
          <outline text="Has always need something like gem or CPAN"/>
          <outline text="Will be interesting to see if something like that develops, especially at RedHat"/>
        </outline>
      </outline>
      <outline text="Future of JavaScript" Offset="19:21">
        <outline text="http://www.infoworld.com/article/08/06/23/eich-javascript-interview_1.html"/>
        <outline text="Interview by InfoWorld with Brian Ellch"/>
        <outline text="Creator of JavaScript at Netscape"/>
        <outline text="CTO of Mozilla"/>
        <outline text="Actually spend a good amount of time discussing history on the language"/>
        <outline text="Explains some of the reasons of why it is the way it is"/>
        <outline text="Entertains comparisons to other scripting languages"/>
        <outline text="Pushes point about being the same language in all browsers"/>
        <outline text="Admits to the frustrations with some of the browser libraries, like DOM"/>
        <outline text="Clarifies relation to ECMA-262 or ECMAscript"/>
        <outline text="Future features include modules, some form of typing"/>
        <outline text="More flexible typing than Java but sounds like optional static or strong types"/>
        <outline text="Does sound like a reasonable compromise"/>
        <outline text="Drivers are what I expect, contracts between applications, modules"/>
        <outline text="Explains what ScreamingMonkey is, heard mentioned before"/>
        <outline text="Uses IE's own extension point for scripting languages"/>
        <outline text="What MS used to add VBScript and ActiveState Python, Perl"/>
        <outline text="Contracted an ActiveState developer to write glue code for Adobe ECMAscript engine, Tamarin, bundled with Flash"/>
        <outline text="Could allow existing IE versions to support JavaScript2 without an update from MS"/>
        <outline text="Could also help if Apple doesn't adopt for future versions of Safari"/>
        <outline text="Also mentions a 2 to 1 translator, similar to HotRuby that I've discussed"/>
        <outline text="With the popularity of dynamic web applications, having a more flexible upgrade path would be good"/>
        <outline text="Flash is not a bad choice, given it is as ubiquitous as browsers themselves"/>
        <outline text="Worried about efficiency of implementation, see old piece about Flash not being very green"/>
        <outline text="Could pressure Microsoft, Apple to adopt JS2, though, just be wide spread use"/>
        <outline text="Kind of nice to see Mozilla add features despite MS, but backed with real standards"/>
      </outline>
      <outline text="ICANN considering de-regulating top level domains" Offset="25:44">
        <outline text="http://news.bbc.co.uk/2/hi/technology/7468855.stm"/>
        <outline text="Instead of country codes plus com, net, org would be open"/>
        <outline text="Vague criteria, though"/>
        <outline text="Individuals or businesses as long as they have a business plan, technical capacity"/>
        <outline text="Does that mean it would still be restricted to registrars?"/>
        <outline text="That would be a business plan to resell names in a TLD"/>
        <outline text="ICANN would reserve right to reject domains, still, based on morality or public order"/>
        <outline text="Would still arbitrate in case of conflict"/>
        <outline text="Article mentions an auction to the highest bidder if arbitration fails"/>
        <outline text="Agree it is past time to expand TLDs"/>
        <outline text="Throwing it wide open seems unwise"/>
        <outline text="Cannot easily reverse it if it does fail"/>
        <outline text="Would you grandfather in open ended names or shut them down?"/>
        <outline text="Will make trademark and name recognition a nightmare"/>
        <outline text="Already difficult enough, with domain squatters and trademark disputes"/>
        <outline text="Auction after arbitration favors businesses with deep pockets"/>
        <outline text="Small players will have hard time protecting name"/>
        <outline text="Big players can wait and see then outbid anyone stealing their domain"/>
        <outline text="Comment mentions increased risk f fraud"/>
        <outline text="Beyond just name recognition, a field day for phishers, fraudsters"/>
        <outline text="When TLD could be off by one letter, and rest of domain matches, makes spotting much more difficult"/>
        <outline text="With internationalization of domains, could be even worse with similar but distinct characters"/>
        <outline text="Otherwise, internationalization on its own is well overdue"/>
      </outline>
      <outline text="Problems with building kill switches into everything" Offset="30:58">
        <outline text="http://feeds.wired.com/~r/wired/topheadlines/~3/320251669/securitymatters_0626"/>
        <outline text="Explains it as an extension of DRM"/>
        <outline text="Setting up a hierarchy of authority amongst devices"/>
        <outline text="Most extreme theoretical example is Microsoft's Digital Manners Policies"/>
        <outline text="Despite challenges of effective implementation, substantial risks"/>
        <outline text="Potential for abuse and how to resolve the core right a user should have to override"/>
        <outline text="Hacking such devices so a burglar can effect an electronic invisibility cloak"/>
        <outline text="Introducing serious inequities, such as law enforcement having super-privileged devices"/>
        <outline text="Hope lies in how poorly DRM has worked to date"/>
        <outline text="However, incentive is huge"/>
        <outline text="Not about loud talkers at cinemas or preventing medial device interference"/>
        <outline text="At first seems to overlap with my panel with Vernor Vinge"/>
        <outline text="External security risks are a stalking horse, though"/>
        <outline text="Location aware being used to foil camcorder pirates"/>
        <outline text="Device to device control like HDCP writ large"/>
        <outline text="Keeps open ended innovation form outrunning established businesses"/>
        <outline text="Want to squeeze every last bit of value by making you pay for privileges you'd have otherwise"/>
        <outline text="How do you fight this?"/>
        <outline text="Buy devices that use open source"/>
        <outline text="Support companies like Neuros, dedicated to open media stacks"/>
      </outline>
    </outline>
    <outline text="tail -f" Offset="35:38">
      <outline text="Several senators step up to oppose FISA Amendments Act" Offset="35:57">
        <outline text="http://feeds.arstechnica.com/~r/arstechnica/BAaf/~3/319802453/20080625-dodd-feingold-plan-hail-mary-anti-telco-immunity-filibuster.html"/>
        <outline text="Dems Dodd, Feingold step up willing to filibuster"/>
        <outline text="Dodd's filibuster killed an earlier version of the bill"/>
        <outline text="A couple of others have come out to oppose, Wyden and Boxer"/>
        <outline text="Feingold is not optimistic"/>
        <outline text="Earlier bill passed giving the executive more power"/>
        <outline text="Dems who voted for house bill received almost 2X money from telco lobbyists as those that opposed"/>
        <outline text="Maplight reveals quite a bit more industry money going to key actors supporting"/>
        <outline text="Article cites grass roots opposition as key, take action"/>
        <outline text="Senate delays vote on immunity">
          <outline text="http://www.eff.org/deeplinks/2008/06/senate-delays-vote-immunity"/>
          <outline text="Delayed until after the July 4th recess"/>
          <outline text="Key opportunity to keep the pressure on afterwards and kill the bill"/>
          <outline text="If you have not already, call your senators, express your opposition"/>
        </outline>
        <outline text="Support amendments to FISA act during the recess">
          <outline text="http://www.eff.org/deeplinks/2008/06/bingaman-amendment"/>
          <outline text="Senate will consider three possible amendments upon July 8th return"/>
          <outline text="One would strip immunity"/>
          <outline text="Another would courts to deny immunity"/>
          <outline text="Third would delay the issue until court cases have finished"/>
          <outline text="EFF supports the third amendment"/>
          <outline text="Would allow issue to be considered fully"/>
          <outline text="May be passable as it is simply a delay, not an outright reversal"/>
          <outline text="Seem optimistic that consideration of Inspector General's findings could sway opinion"/>
          <outline text="May be mild enough to catch Obama's support, so clearly EFF, other civil liberties' groups stance here is political"/>
          <outline text="Should still press senators for no vote but suggest they consider the Bingaman amendment"/>
        </outline>
      </outline>
    </outline>
    <outline text="Outro" Offset="39:40">
      <outline text="Contact me">
        <outline text="Email to feedback@thecommandline.net"/>
        <outline text="Web site at http://thecommandline.net/"/>
        <outline text="IM to command.line@skype"/>
        <outline text="Listener comment line is 240-949-2638"/>
        <outline text="del.icio.us tag is &quot;for:cmdln&quot;"/>
        <outline text="http://twitter.com/cmdln"/>
      </outline>
      <outline text="I'd like to thank libsyn.com for AAC hosting and Wouter de Bie for MP3 hosting"/>
      <outline text="These notes and the show audio and music are covered by a Creative Commons license">
        <outline text="http://creativecommons.org/licenses/by-nc-sa/3.0/us/"/>
        <outline text="Attribution, non-commercial, share alike"/>
      </outline>
    </outline>
  </body>
</opml>
