Thursday, October 14, 2010

Macy's "Magic Mirror"

Wow...I just had to ask myself if this wasn't April Fool's Day. I've just seen about the worst idea I've come across in a long time.

"Macy's shoppers can now check their look in a "magic mirror" in a fitting room, thanks to touchscreen computing. A large mirror, linked up to a touchscreen tablet computer, lets visitors to the iconic department store chain's flagship New York location scroll through their options, then digitally "try on" clothes in the mirror. Then they can get quick feedback from friends by posting their image to Facebook or sending it in an e-mail or text.
How long until
  1. Someone figures out how to hack the system and turn on the magic mirror remotely, capturing unwitting customers in the fitting room in various stages of undress?
  2. (Variant of 1) Someone in the Macy's IT Department figures out a way to run the system in "test mode" to turn on the camera on unwitting customers in the fitting room in various stages of undress...and starts collecting the images?
  3. Macy's starts capturing that Facebook or email address you enter, and starts sending you messages like "If you liked that DKNY dress, you'll just love this Ann Taylor"?
Thank goodness it's only scheduled to be available until November.

Edited to add: It all makes sense to me now. It seems that the company that's making this capability available to Macy's is UK-based RetailCam...that would be UK as in the country that brought you Big Brother and 21st century quality surveillance.

Tuesday, October 12, 2010

Interview with John Le Carre

I accidentally tuned in to Democracy Now yesterday and was surprised to hear someone talking about Bukavu, which I was reading about last week in The Mission Song. Surprise, surprise...who should be speaking but John le Carre, himself?


It turned out to be a very nice hour-long interview by Amy Goodman. It covered all sorts of stuff, from his experiences visiting Africa (he says he is a follower of "Graham Greene's dictum" that "if you're reporting on human misery, you do well to share it") to politics to his writing process. Having read a number of his books with interest (I really enjoyed "A Most Wanted Man" last year), I found this interview put the books into a nice context.

I will add that le Carre has a lovely voice. He sounds like a man half his age.

I'm adding him to the list of people I'd like to make friends with.

Wednesday, October 6, 2010

Another one: "bites the dust"

Yes, I am a fan of Queen.

However, what this is really about is the origin of the phrase "bite the dust". I ran into what may have been one of the fairly early uses of this phrase, reading Samuel Butler's comparatively painless prose translation of The Odyssey.

According to The Phrase Finder, the phrase "bite the dust" was used in 1750 by Tobias Smollet. However, they also note that Butler uses it in his 1898 translation of the Iliad, and I myself found it in his 1900 translation of the Odyssey (book XXII). Lang, et. al. translate the same phrase as "bite the earth" in the Iliad.

So as I figure it, the image of "bite the dust" to refer to a violent death goes back as far as Homer.

Who knew?

Sunday, October 3, 2010

John LeCarre says...

"A good writer is an expert on nothing except himself. And on that subject, if he is wise, he holds his tongue."

His bio on his own website is crafted to this ideal.

I'm currently listening to "The Mission Song". Enjoying it, though it's a bit pedantic, and hard to follow some of the logic, given that I'm not as well acquainted with the politics of the Congo and Rwanda as I might be. Some of my difficulty might also have to do with the abridgment for audio -- I suspect they may have cut some critical details in the interest of recording time. However, the audio rendering is quite good...I really like the narrator.

Saturday, August 21, 2010

Are they playing Pacman with your vote?

Alex Halderman's group managed to get hold of some old Sequoia AVC-Edge voting machines, and without needing to tamper with the tamper-evident seals reprogrammed them to play Pacman.

Sequoia AVC-Edge voting machines are DRE (that's Direct Recording Electronic -- not digital rectal examination, which is perhaps equally pleasant). This means that the only way they capture a vote is electronically: if something goes wrong with the machine, there is no independent evidence of how the voters wished to vote. (This is in contrast with optical scan voting technologies where the voter, for example, fills in a bubble sheet, which is scanned in for ease-of-counting, but which also provides an independent, auditable, debuggable record of the vote.)

Halderman writes,
"The original election software used the psOS+ embedded operating system. We reformatted the memory card to boot DOS instead. (Update: Yes, it can also run Linux.) Challenges included remembering how to write aconfig.sys file and getting software to run without logical block addressing or a math coprocessor. The entire process took three afternoons."
There are three significant points here:
  1. It doesn't appear to be terribly technologically difficult to reprogram the machine. I'm sure that having worked out the process in 3 afternoons, it would take them about half an hour to run the same reprogramming process on the next machine.
  2. It is possible to do this reprogramming in an undetectable way -- i.e. without messing with the tamper evident seals.
  3. Given that the machine is DRE, vote tampering cannot be independently detected or recovered from.
Voting machines are often left on their own in unsecured locations. A motivated attacker in a district that uses these machines could prepare a vote-stealing program in advance, access the machine briefly, and load the program. Without leaving any noticeable evidence. A forensic analysis of the machine would probably detect the program, but without any obvious tampering, who'd bother? And by then, the damage might already have been done -- forensics after election day would detect the possibility of tampering but would not get back what the votes should have been.

I just explained this to Sidharta in about 5 minutes. He totally got it. How come most of our electorate doesn't?

Sunday, August 8, 2010

Mary Anning, Revisited

I just got done listening to another great audiobook: Remarkable Creatures, by Tracy Chevalier. A friend recommended it, and I'm so glad he did. It combines two themes dear to my heart: A Jane Austen set-up and, if you can believe it, the problems of women in science.


This is the story of icthyosaur and plesiosaur discoverer Mary Anning (1799-1847), of whom I wrote a while back. It is more-or-less a novelization of her life. That is to say, most of the events and characters in the book are historical, but the narrative alternates between first person accounts provided by Mary, herself, and her friend Elizabeth Philpot, an expert fossil hunter in her own right.

Elizabeth is a typical Jane Austen heroine: born into the gentry, but with a very meager inheritance of her own. Mary is accustomed to living hand-to-mouth, the daughter of a cabinet maker, who dies highly in debt when she is about 11. The two women met soon after Elizabeth and two of her unmarried sisters moved to Lyme Regis to live cheaply, after the marriage of their brother who held the bulk of the family's wealth. Elizabeth had become interested in fossil hunting and Mary, who was only about 10 at the time, contributed to the family's income by supplying a fossil knick-knack ("curie", short for curiosity) stand that the family ran alongside the cabinet-making business. Elizabeth encouraged her to get an education, and to take a scientific, systematic approach to documenting her finds. Over time, the two became friends, and apparently spent significant time together collecting and studying the fossils. Along the way, they developed connections with, and taught or led a number of the well-known geologists and biologists of the time, including apparently, Cuvier (one of the acknowledged pioneers of paleontology).

Of course, scientific expertise is no excuse for gender, and though their contributions were first rate, neither Mary nor Elizabeth were recognized by any of the scientific establishment, on anything but a personal level. They were friends with the "great men", they sold fossils to the men, they corresponded with the men on scientific matters, they led the men on fossil hunts, but they could not publish papers or attend scientific meetings. And Mary had the double whammy of being of a different social class, as well, and living on the brink of starvation for much of her life.

The story reads like a pure novel. The narrative is wonderful, as are the voices of the two women. (I will say, too, that as audiobooks go, this was a lovely one, with two readers who provide excellent voices of their own.) The historical events are woven in nicely with the plot. And throughout you feel all of the pathos of the difficulties faced by two serious scientists in the context of their gender, poverty and class.

My informant tells me that The Lady and the Unicorn is good, too. It's on my queue.

Tuesday, August 3, 2010

Fortune cookie wisdom

OK...you may have guessed it by now...I like fortune cookies.

There were some good ones today.

I got one that read "Do it because you love it." All "between the sheets" jokes aside, I do try to live this. Or maybe I should say, I try to live a transposed version of it: "Because you love it, do it." It is important to make time for the stuff you love. Of course, this also means that my house isn't quite as clean as it would be if I loved cleaning.

Annapurna read her fortune, and immediately groaned, "oh, that's bad!" Then she cracked up. It read "Be broke, be wealthy, but don't accept mediocity". And, no, that's not my typo.

Monday, July 12, 2010

Face Police

Facebook has apparently implemented a "Panic Button" in the UK that "allows youngsters to report suspicious behaviour to the Child Exploitation and Online Protection Centre (CEOP) and Facebook."


I can't help thinking this is a bad idea.

Don't get me wrong. I really don't like the idea of kids being cyberbullied or stalked or in any way endangered in any online forum. And yes, I see lots of potential for all of these via Facebook and other online forums.

But I don't think this Panic Button will ever be terribly useful, and I do think it will cause more harm than good.

Think about it. Do we really want a bunch of 13-18 year olds hitting that button unsupervised, possibly at whim? CEOP, as far as I can tell, is a branch of UK law enforcement. Would you really want law enforcement getting involved with every report a teenager cared to dream up? And can you imagine how much work it would be for law enforcement to sort out all those reports? And who gets blamed when law enforcement can't keep up with it all, and some teenager gets killed anyway? And what happens to the kid who gets reported by some other kid as a prank? Sure it will get sorted out, but how long will it take for that kid to get his life back?

I don't have the answer to handling cyberstalking, but I'm pretty sure this isn't it.

Monday, June 28, 2010

A little taste of the future

Lauren Weinstein called out a proposal last Friday by the White House called National Strategy for Trusted Identities in Cyberspace. I haven't read through it yet, but it's certain to be interesting. I'll post some impressions when I have gone through it. I'm eagerly awaiting commentary by Bruce Schneier and Ed Felten.


This could turn out to be a defining moment for the internet.

What's at issue here is how you are defined as an individual on the internet. How does anybody know you are you? Do they know you're a dog? Sometimes it doesn't matter. Sometimes it does. If you're trying to purchase something online, it seems reasonable for the other party to want to be certain that you are not a mugger who stole your credit card (and for you to want to be certain that you are communicating with a legitimate merchant and not a fake web site). If you're a whistleblower, it seems reasonable for you to wish to hide your identity. If you are a stalker, it seems reasonable for law enforcement to have the capacity to identify you despite pains you may have taken to hide your identity. The ability of the merchant and law enforcement to identify you unambiguously may be in direct opposition to the whistleblower's need for anonymity.

At this point, as I understand it, the proposal claims to be voluntary for "the public". Of course, once the infrastructure is in place, the foot is in the door and it becomes easier to turn it into a legal matter to mandate it for all internet access.

Which is why we should pay attention now.

Tuesday, June 1, 2010

Good Omens

Just got done listening to a fantastic audiobook, Good Omens, by Neil Gaiman and Terry Pratchett. And because the narration is so awesome, I'll mention it was narrated by Martin Jarvis.


I was first introduced to Terry Pratchett's work reading The Amazing Maurice and His Educated Rodents to Annapurna a few years ago. It is one of my favorite kid books.

Pratchett's sense of humor and lovely, light voice are a pleasure to read. It has a distinctly Wodehouse/Douglas Adams feel. But he has more to say, a deeper philosophical message than either Wodehouse or Adams. (I say "Pratchett" though it is co-authored with Gaiman...I haven't read Gaiman, but there is a strong Pratchett feel, and I've read that he did most of the actual writing.)

Good Omens is, if you can believe it, a farcical rendering of the days leading up to Armageddon. There are two things you need to know about this story. First, Pratchett is a fairly vocal humanist. Second, the story was published in 1990, which is around the time that the Soviet Union was breaking up, and no one knew which way it was going to go. Though the story does not directly refer to the unfolding world drama, the parallels are obvious in the interaction between the two main earth-based agents of Armageddon: angel Aziraphale and demon Crowley. Through their scheming conversations, Gaiman and Pratchett manage to pose many deep philosophical questions about entrenched mindless animosities, good vs. evil, theodicy (God's goodness in the face of evil), the intentions of creation, innateness vs. acquisition of evil, determinism vs. free will, etc.

In this story, it seems that the "Adversary, Destroyer of Kings, Angel of the Bottomless Pit, Great Beast that is called Dragon, Prince of This World, Father of Lies, Spawn of Satan and Lord of Darkness" is mistakenly placed at birth in a stuffy middle class British family (think of a dad somewhat like Hyacinth Bucket), instead of with a US ambassador, where he could have gotten up to a lot of good mischief. Neither side realizes the mistake until it becomes apparent that none of the expected harbingers of the apocalypse are appearing in the vicinity of the putative Spawn. It then becomes a race between Aziraphale and Crowley on one side, trying to save the Earth they have come to enjoy, versus the assembled hosts of heaven and hell who are determined to have it out.
And meandering through the text we have the "nice and accurate predictions of Agnes Nutter", a book full of correct but cryptic (and ultimately pointless) predictions from the seventeenth century, including the actual location of the actual Spawn.

The book mainly pokes fun at the concept of "our side vs. their side" and the myriad ways in which people have found to misunderstand and abuse it. There is a theme of tolerance that seems to pervade Pratchett's work, at least as much as I've read. Which is another reason I like it so much.

And finally, I will say this is one of the best audio renditions I've listened to lately. Jarvis is brilliant at creating distinct (and funny) voices and accents for each of the characters. The only one that I found a little off was that of the young Spawn, but I suspect there was a deliberate decision to make him sound like his stuffy adoptive father, rather than the 11 year old boy leader he is supposed to be. And interestingly, he puts on an American accent for the characters War and Pollution (two horsemen of the apocalypse), though as far as I could tell there is nothing in the text that calls for this.

Listen to the book.