The Travelin' Librarian

One bielyon dollars!

noreply@blogger.com (Michael) — Fri, 09 May 2008 14:01:00 +0000

Ok, I exaggerate a little but this is getting a smidge ridiculous. The MPAA is demanding $15.4 million from The Pirate Bay to "cover the damages they suffered from 4 movies and 13 TV-episodes that were made available via the popular BitTorrent tracker". Sorry, but by that logic, never mind the insane math involved in coming up with that number, the MPAA should be suing Google too since I can find torrents of The Pink Panther via their search engine too.

Pirate Bay's response: “The worst thing is that I lost 100 kronor on a bet on the number they would come up with,” Sunde added. “And, it sucks that they didn’t claim more than for Napster and the other sites. It’s cooler to break the record.”

Meme: Passion Quilt

noreply@blogger.com (Michael) — Fri, 09 May 2008 13:36:00 +0000

I haven't officially been tagged with this meme to my knowledge but I was inspired this morning by the combination of a quote from a book I'm reading and preparing for a Library 2.0 presentation next week. So, here's my entry:

Who am I tagging? Many I know have already done this but I'm sure I've missed a few so if you've already done this, my apologies:

3 Simple Meme Rules:

Post a picture from a source like FlickrCC or Flickr Creative Commons or make/take your own that captures what YOU are most passionate about for kids to learn about...and give your picture a short title.
Title your blog post "Meme: Passion Quilt" and link back to this blog entry.
Include links to 5 folks in your professional learning network or whom you follow on Twitter/Pownce.

BBC removes Doctor Who fan’s knitting patterns from the Web

noreply@blogger.com (Michael) — Fri, 09 May 2008 12:18:00 +0000

I'm not a knitter but I've been watching a lot of the photos on Flickr (especially the recent Face of Bo and Adipose creations) and wishing someone would love me enough to knit some of these for me. So when I read the story of the person who's received a cease and desist from the BBC for posting homebrew knitting patters online I felt just a little sick.

“We note that you are supplying DR WHO items, and using trade marks and copyright owned by BBC. You have not been given permission to use the DR WHO brand and we ask that you remove from your site any designs connected with DR WHO. Please reply acknowledging receipt of this email, and confirm that you will remove the DR WHO items as requested.”

Really, who is this hurting? No money is changing hands and the BBC isn't loosing any market share since they're offering no such thing officially. Hey Russell, what do you think about this?

Read more and link to the full story on the The Open Rights Group Blog.

Top 10 Jackie Chan Fight Scenes

noreply@blogger.com (Michael) — Thu, 08 May 2008 18:59:00 +0000

(Contains some adult language)

Visa Officially Says Stores Cannot Deny Purchases If You Don't Show ID

noreply@blogger.com (Michael) — Thu, 08 May 2008 14:52:00 +0000

According to The Consumerist, here's VISA's official policy on stores requiring ID for a credit card purchase.

Merchants may not refuse to honor a Visa card simply because the cardholder refuses a request for supplementary information. The only exception is when a Visa card is unsigned when presented. However, "See ID" is not considered a valid signature. In these situations, a merchant must obtain authorization, review additional identification, and require the cardholder to sign the card before completing a transaction.

To report any merchant practices that you feel are inappropriate, please notify the disputes area at the financial institution that issued your card account. Your card issuing bank has access to the appropriate Visa rules and regulations as well as to the Notification of Customer Complaint forms which should be used by your bank to document and file merchant complaints.

As an alternative, you may contact the Global Customer Care Services to report merchant practices that you feel are inappropriate. Please contact the Global Customer Care Services at 1-800-VISA-911 (1-800-847-2911). Please advise them that you were referred to file a complaint. The staff will be able to initiate a complaint form over the phone.

Flawed Bush logic on surge

noreply@blogger.com (Michael) — Thu, 08 May 2008 14:12:00 +0000

Countdown, May 7: On Tuesday, Max Booth, a senior fellow at the Council on Foreign Relations, insisted that the surge has worked and civilian deaths were down in Iraq. However, he wrote an op-ed piece in the Wall Street Journal the day before claiming the jump in American fatalities could be a sign of things getting worse before they get better.
http://www.msnbc.msn.com/id/21134540/vp/24511312#24511312

Moyers on Wright

noreply@blogger.com (Michael) — Mon, 05 May 2008 22:10:00 +0000

Bill Moyers reflects on his interview with Reverend Jeremiah Wright. (Sorry, the video isn't readily embeddable.)

Little Brother » Download for Free

noreply@blogger.com (Michael) — Mon, 05 May 2008 18:16:00 +0000

The CC-licensed free download is now available.

I did listen to the audio version over the weekend and I've got to say it's an amazing book that everyone should read. I got goosebumps a few times and started to tear once or twice too.

Pink Martini

noreply@blogger.com (Michael) — Mon, 05 May 2008 12:21:00 +0000

Last Friday night I got to see Pink Martini with the Colorado Symphony Orchestra Pop. Here's a sample if you're not familiar with their music.

The Truth About Ben Stein

noreply@blogger.com (Michael) — Wed, 30 Apr 2008 23:24:00 +0000

Brian of dotboom fame takes on Ben Stein and the film Expelled: No Intelligence Allowed. (Sorry, the vid can't be embedded so you'll have to click the link to watch.)

Creepy Portal-esque video

noreply@blogger.com (Michael) — Wed, 30 Apr 2008 20:40:00 +0000

via Geekologie

Tourist or Terrorist?

noreply@blogger.com (Michael) — Wed, 30 Apr 2008 18:03:00 +0000

According to this article from The Memphis Flyer be weary of taking photos in Memphis. You just might be a terrorist.

A man walking through Tom Lee Park pauses to snap a photo of the iconic Hernando DeSoto Bridge. Another man shoots pictures of numerous downtown buildings.

Many would assume the men are tourists taking in the city's sights, but law enforcement officials say they could be terrorists staking out possible targets.

The scenarios were described at an anti-terrorism town hall meeting last week hosted by the Shelby County Sheriff's Office. The meeting, held at Cordova's First Assembly of God Church, was one of four public meetings that occurred in conjunction with Operation Sudden Impact, a new local anti-terrorism initiative.

"You may think a guy is just shooting pictures, but if you report it to us, we'll send it on to the FBI and they may have four or five other reports of the same thing," said Richard Pillsbury with the Tennessee Fusion Center, a collaboration between the Department of Safety and the Department of Homeland Security.

Shelby County sergeant Larry Allen warned attendees at the meeting to look for people who appear to be doing surveillance outside public buildings, such as shopping malls.

I'm glad I got my photos of Graceland a few years ago.

Doctorow & Scalzi are doin' it for the kids

noreply@blogger.com (Michael) — Wed, 30 Apr 2008 01:03:00 +0000

More Little Brother

noreply@blogger.com (Michael) — Tue, 29 Apr 2008 14:13:00 +0000

Unshelved on Little Brother

noreply@blogger.com (Michael) — Tue, 29 Apr 2008 14:05:00 +0000

The War on Photography: NYC

noreply@blogger.com (Michael) — Tue, 29 Apr 2008 13:24:00 +0000

I've been reading more and more stories about police and government warring on photographers who are well within their rights to do what they're doing. As a photographer myself I'm starting to get a little nervous. Until now I've failed to post much about this issue but that stops here. I can't not share this video.

via Boing Boing

UKULELE - BLITZKRIEG BOP

noreply@blogger.com (Michael) — Tue, 29 Apr 2008 13:06:00 +0000

The next time I play this in Rock Band I might not be able to keep a straight face.

Little Brother has landed!

noreply@blogger.com (Michael) — Tue, 29 Apr 2008 12:41:00 +0000

Today the day for the new Cory Doctorow novel Little Brother. Click on the cover art to buy your copy now. In fact, buy a copy for every teenager in your life. (I ordered one for me and one each for the two 15 year-olds in my life.)

Not sure what it's about? Check out these words from authors John Scalzi and Neil Gaiman.

Now, here's my question: Since I'll be in Colorado this weekend I had my copies shipped there. I was hoping to download the traditional free copy to my Sony Reader today in order to be able to get started on the book tonight. Hey Cory, where's the downloadable CC-licensed copy?

Oh, and there's a how-to blog based on the book too. w1n5t0n [INSTRUCTABLES] If you can't understand the name of the blog, you're too old ;-)

UPDATE: It looks like Cory will be posting the ebook version "just as soon as I get back to London (I’m presently in Toronto, visiting my family with my newborn daughter). It’ll likely be Monday or so — there’s a bunch of little clean-uppy things I need to do with the Little Brother distribution site that I need to be in my office with uninterrupted time to accomplish."

Additionally, there's a DRM-free audio version available which "comes with my own sampling license: once you own it, you’re free to take up to 30 minutes’ worth of material from it and remix and then redistribute it as much as you like, provided that you do so on a noncommercial basis, make sure that it’s clear that this is a remix and not the original, and make sure that you tell people where to find the original. This is in addition to all the fair use remixing that you’re allowed to do without my permission (of course!)." Maybe I'll buy that tonight and listen to it on the drive to CO. That sounds like a great plan.

ICIW2008: Closing thoughts

noreply@blogger.com (Michael) — Sat, 26 Apr 2008 01:08:00 +0000

Well, the conference is over. Here's the thoughts I've been left with.

When military folks talk about "open source" they're not talking about "OpenSource" as we know it i.e. OpenSource software. What they mean is non-military sources i.e. the mainstream media. Once I came to this realization several things I'd head in the past two days had completely different meanings.

This was my first "academic conference" and it's not what I'm used to. What I'm used to us presentations about software, and events, and "here's what we did". At this conference it was 20 minute presentations of the research presented as papers in the conference proceedings. I understand that this is the standard for academic conferences but I'm just not used to it. That doesn't mean didn't enjoy the conference but it was a tad frustrating hearing "and you can read more about it in my paper" in most of the sessions.

Overall I enjoyed my time over the past two days. I thought I was going to be in over my head but surprisingly I wasn't. (Except for that last session.) It's always interesting to step out of your comfort zone and learn some new thing and new perspective.

ICIW2008: Analyzing Anonymity in Cyberspace

noreply@blogger.com (Michael) — Fri, 25 Apr 2008 18:48:00 +0000

Douglas Kelly, Air Force Institute of Technology, Wright-Patterson AFB, OH

I'm tired and there's way too much text on these slides for me to take coherent notes. Also, there's serious math going on in this presentation which is way over my head. Sorry.

ICIW2008: Organizing the US Government for the Contemporary Environment

noreply@blogger.com (Michael) — Fri, 25 Apr 2008 18:11:00 +0000

Colonel Steven Mains, US Combined Arms Center, Fort Leavenworth, KS Director, Center for Army Lessons Learned

Thesis

us govt is ceding to the info war to our enemies
more money is required
govt must be reorganized to retake the initiative

2 examples of what could have been

prior to OIF, France & Muslin world opposed invasion but were open to influence
IEDs became weapon of choice but have severe vulnerabilities

the problem

coordinated campaign required
info ops not integrated into planning and decision making
govt to people comms almost nonexistent
US Govt built in stovepipes
complete reorganization of the govt not a feasible option

advance US ideals and policies by ensuing that everyone has access to factual, unbiased, unfiltered info about intentions, actions & character of US, allies & adversaries

Ways

gauge world views by region, ethnicity, religion

identify market segments
identify acceptance and effects of policies

deliver truthful, tailored content that relies on our values to our policies
continuous reassessment

Means

Dep advisor to prez for national security (strategic communications)
increased national security council
strategic comms task force
dept of state reorg
DNI: covert communications
DHS: Infrastructure assurance
USAID: substantially increased Public Diplomacy capability
DOD: integrated into PD efforts, CNO

ICIW2008: Developing Cyber Warriors

noreply@blogger.com (Michael) — Fri, 25 Apr 2008 16:52:00 +0000

Jeff Boleng, US Sir Force Academy, Colorado Springs, CO

Cyberspace added to USAF mission in 2005
cyberspace is a warfighting domain
cyberspace covers all the other domains (air, land, sea, space)
different domains, different fucntions
recent threats & motivations

Hezbollah SIGINT attack on Israeli tanks
DNS Root Server attack 2007
Estonia 2007
pakistan youtube redirect 2008
IED jammers
F-22 flight over international dateline (avionics went black)

Broad requirements

USAFA graduates 1/4 of all new 2nd lieutenants
not "geek" focused
technical w/ a large dose of

ethics
legal studies
behavioral studies
military strategic studies

contrasting questions

how can we exploit adversary's e-systems
what is the legal authority
what are the national security implications
is cyber attack an act of war

prep of graduates

well documented outcomes

currently underway

core curriculum
baseline content
new upper-level courses
ensure coverage of AF education and training requirements

training to reinforce education

"unlike a traditional college we own our students"
basic cadet training scenarios
global engagement integration
summer space program
summer UAV program
DHS sponsored Black Dart

CS - Cyber Warfare Track

37 grads since 2004, 8 in 2008
offered to all CS majors
NSA & DHS recognized standards
3 courses taken as major options

cryptography
Cs security & IW
network security

details on the three courses given

Research

Academy Center for Cyberspace Research
current projects

jam resistant communications
biometrics
security education

Community involvement

other front range colleges
cyber defense exercise
computer and network vulnerability assessment

ICIW2008: Characterizing Malware Writers can Computer Attackers in Their Own Words

noreply@blogger.com (Michael) — Fri, 25 Apr 2008 16:21:00 +0000

Dr. Thomas J. Holt, University of North Carolina, Charlotte

digital crime markets

problem is increasing
also becoming more complex

criminological research

little research has been done
few studies have explored malware and hacker community in their own words

online resources

blogs
forums
this study focuses on Russia & China
not using their real handles

data & methods

qualitative analysis

identify 2 via snowball samples
qualitative analyses of open source materials online

linguists involved

RUSH

malware writer and hacker in Moscow
skilled individual
possible emotional problems

close associate of RUSH
skilled hacker

CS major at a Moscow university
may have minor health issues
loves his cat

Black Hat Gang

both RUSH and RUN belong
no stated political or financial agenda
provide a justification for their activities

rush & ru seem to have dif levels of productivity

have worked together

SAINT

Chinese national in Jinzhou
does not specify his motives but gives Chinese perspective
actions are somewhat contrary to his words
young student but doesn't enjoy school
likes girls & posts comments about love & relationships

SNAKE

associate of SAINT
difficult to gage his skill level
may be a script kiddie
is a student
may also have emotional issues though no specific reasons given

Hack Crew

SNAKE & SAINT are members
covert security technology group
criteria for membership
roles listed for members

SNAKE is a cracker
SAINT is a hacker/cracker

not clear how skilled group is as a whole

Discussion

all extremely interested in tech
variation in skill levels
justify what they do as education
some evidence of depression & substance abuse
variation in information provided
public & private resources needed to get mroe info
further research needed

ICIW2008: Establishing the Human Firewall: Improving Resistance to Social Engineering Attacks

noreply@blogger.com (Michael) — Fri, 25 Apr 2008 15:19:00 +0000

Jamison Scheeres, Air Force Institute of Technology

what is social engineering

techniques to manipulate people

also shoulder surfing
also dumpster diving
trick someone into doing something

huge threat in today's environment
red teams say SE is 100% effective
current defensive techniques are not effective
research

successful SEs are not caught
classification issues
ethical issues in deceiving subjects

psychological triggers

authority
reciprocation
strong affect (phishing)
overloading (buffer overflow for humans)
deceptive relationships
integrity/consistency

principles of persuasion

authority
consistency
liking
reciprocity
scarcity
social proof

resistance to persuasion

inoculation theory
self-efficacy
forewarning

"dispelling the illusion of invulnerability" (2002, Sagarin)
methodology

compared psych triggers to principles of persuasion
determine relationship between illegitimate persuasion & social engineering

military vulnerable to authority due to strict hierarchy of authority
conclusions

strong relationship between principles and triggers
illegitimate persuasion = social engineering

been trying to install resistance in the wrong way
solution is to demo to the individual they are personally vulnerable
security people must social engineer their people

future research

develope measurement
compare/validate various means of resistance training

ICIW2008: Day 2 Keynote

noreply@blogger.com (Michael) — Fri, 25 Apr 2008 14:26:00 +0000

Brigadier General Davis, US Strategic Command (Network Warfare)

Rapidly evolving battlespace
as long as we have two eyes and opposable thumbs we'll fight
econ major in college, never taken a CS course
I'm a social science guy
was never good at math until he had to learn how to make a bomb hit its target
Heads groups that operationalizes network warfare
has been learning about the cyberspace fight
tech has always made new inroads into warfare
modern networking tech is no exception
air, land, sea, space, now cyberspace
evolutionary steps in warfare
not going to talk about servers and high tech
what can we learn from the past
navigate the rocks and shoals of change
looks back to the advent of air power in warfare
some thought that war could be won by airpower alone
Curtis LaMay, father of Strategic Air Command
continuous readiness - 24/7
should also apply to cyberspace
Roy Geiger, saw airpower as part of a team effort, WWI Marine
but airpower could still be decisive
Geiger was there for for Bikini Atoll tests
the change was about speed and reaction time in this nuclear age
Geiger continued to say that it depended on an integrated effort
in cyberspace timelines are reduced to miliseconds
starting to learn what it takes to accomplish this
some was it's different, some things are the same
must change and adapt
"spectrum of conflict"
peace-something happens-spool up-war-spool down-back to peace
exploitation of anonymity
across a broad spectrum of activities
no one major adversary in cyberspace, could be anyone
not just the velociraptor nation -state we're up against
must be able to scale up operations quickly
final analysis: "there is no peace in cyberspace"
must be ready 24/7
multi-diciplined force of cyberwarriors is needed
must be ready when a crisis presents itself, which could be anytime
Marine General - three-block war: humanitarian/infrastructure, peacekeeping, high intensity conflict
we have the advantage in cyberspace right now but superiority would be better
no one military service can own this fight
military must partner with the intel community, law enforcement, allies
will need new authorities and policies
we are a nation of laws and those must be followed
"I've got a bunch of lawyers too"
training & education is key
must sustain operations to the highest level at all times including peacetime
on guard at all times
offensive and defensive tools
must integrate cyberspace tools with those in other war-fighting domains
must take account of trans-regional nature of cyberspace
no geographic boundaries
no single points of vulnerability
a digital bullet doesn't follow a straight line
multi-point attacks
our capabilities need to be distributed