Wednesday, April 12, 2017

Bacon of the Month Club

How can something this good go so bad?  First, the good:
We'll ship to the lucky recipient each month, just in time for weekend frying.
Each shipment contains 12 to 16 ounces of artisan bacon, bacon stories, histories and recipes.
Bonus! Free Bacon Booklet keepsake primer and awesome Pig Magnet with first club shipment.
"Amazing artisan bacon"—Mario Batali
"The best thing I ever ate"Michael Symon
"Fantastic gift!"—Bobby Flay
Sounds good!  What's it cost?

Zingerman's Bacon Club - $99

G-BAC-3 3 MONTH

  • Month 1:
    Applewood Smoked Bacon, Bacon All-Stars Refrigerator Magnet, Pocket Book of Bacon
  • Month 2:
    Kentucky Dry Cured Bacon
  • Month 3:
    Arkansas Peppered Bacon

  • [blink] [blink]

    $33/lb for bacon?  I don't pay that for steak.  I don't like paying half of that for steak.

    Bah.  Got to find me a local bacon bootlegger.


    Tuesday, April 11, 2017

    Rest in Peace, J. Geils

    John Warren Geils, Jr. dead at 71.  Thanks for all the great music.

    They say there's no such thing as bad publicity

    I guess we're fixin' to find out if United Airlines agrees.  This is a random sampling of what's floating around the Intertubes.


    Here's another:


    And another:


    Me, I don't expect the United Airlines CEO to last a year.

    What do you call a day with a new "Smart" TV hack?

    Any day ending in "-day":
    Now, a security researcher is warning of another IoT threat involving Smart TVs that could allow hackers to take complete control of a wide range of Smart TVs at once without having any physical access to any of them.
    And there's proof of concept code!
    The proof-of-concept exploit for the attack, developed by Rafael Scheel of cyber security firm Oneconsult, uses a low-cost transmitter for embedding malicious commands into a rogue DVB-T (Digital Video Broadcasting — Terrestrial) signals.

    Those rogue signals are then broadcast to nearby devices, allowing attackers to gain root access on the Smart TVs, and using those devices for nasty actions, such as launching DDoS attacks and spying on end users.

    Scheel provided a live hacking demonstration of the attack during a presentation at the European Broadcasting Union (EBU) Media Cyber Security Seminar, saying about 90 percent of the Smart TVs sold in the last years are potential victims of similar attacks.
    So you're 90% likely to be vulnerable if you bought one of these pigs.  But fear not, no doubt the vendor's security team will soon have a patch for you /sarc ...

    So how do you protect yourself?  Don't connect it to the Internet:
    Scheel's exploit relies on a transmitter based on DVB-T — a transmission standard that's built into TVs that are connected to the Internet.
    And you really, really don't want this thing connected to the Internet:
    Once compromised, the TV would be infected in a way that neither device reboots nor factory resets would help the victims get rid of the infection.
    Angels and Ministers of Grace, defend us.

    The thing to look for is "HbbTV".  Don't buy one that has this.

    Monday, April 10, 2017

    The Sun is Mirrored Even in a Coffee Spoon - A Brigid Guest Post

    We shall deal here with humble things, things not usually granted earnest consideration, or at least not valued for their historical import. But no more in history than in painting is it the impressiveness of the subject that matters. The sun is mirrored even in a coffee spoon. . . .modest things of daily life, they accumulate into forces acting upon whoever moves within the orbit of our civilization
    — Sigfried Giedion, Mechanization Takes Command (1948)

    December this last winter saw the city and most of the surrounding small towns come to a grinding halt for a brief period before unseasonable warm weather was upon us.  Wind chills in the minus 20's and heavy, drifting and blowing snow resulted in a backlog of travel within parts of the city that had this 4 x 4 driver teleworking for a few days while the powers that be told people to stay off the streets unless necessary.  Out in the small towns, there was little movement, but there are those hardy souls that won't let frostbite and politicians tell them what to do.

    During the storms, I had the blinds and what curtains we have, closed against the cold. Since the house is atop a walk out basement with windows above the ground level,  the huge windows on the south side of the house that look out onto the Spruce trees only have some antique lace toppers, making for a lovely view but not maintaining the home's warmth.  Even with the little heater next to the desk then, the chill eddy of cold licked at my skin, as I gathered a warmer sweater and some thicker wool socks to finish my work.

    One needs to be prepared for such things. A few days ago it was in the upper 60's, before plunging again into the low 30's, another sleight of hand from the greatest of magicians, Mother Nature; Machiavellians stroke on the part of that foe, a new battle towards which it channels ancient wounds, inflicting its grievance upon the land. It will likely arrive to do battle when you least expect it, when the prolonged blow of the dark and ice sinks through the skull and lays its claim deep on the bones of the winter landscape. It will not be a day and night safe for man nor beast.
    Other than the sound of my husband puttering in the basement this day, it's intensely quiet. No birds, no clattering of cars starting up. Just the sound of  the incessant wind, a  long, broad hum, as if through wires. There is little noise or movement, but the whine of a piece of shop equipment, maybe a half block away, the sound sticking to the cold air as if snow on a branch. Then the sound of a bell, a wedding that was scheduled this day in the corner church.

    It's funny, I'm perfectly fine holing up at home for days with nothing but books, a kitchen, and some tools.  But tell me I can't drive to the store or run to the library, and I suddenly get cabin fever, peering out the window every so often, like a bird from a cage that fidgets with feathered annoyance.
    I also noticed something else, something a little nicer.  My knee does not hurt.  After the fall that tore out my meniscus and the resultant surgery and physical therapy, my knee hurt, even years later.  After the first couple of years, it was bearable but always there, a deeply painful twinge,  much worse in cold weather.  Now, six years post injury, after adopting a serious military-style weight/boxing/cardio program, working out several times a week, once a week with a female trainer, I sit here and realize, it doesn't hurt.

    It's not the pain that bothered me, I've dealt with pain.  It was being unable to run, to jump, to MOVE, quickly and without effort. It was crutches, then a cane, then just walking with a bit of a limp when the air pressure dropped and it felt as if knives poked at it.  It was sliding back in time, back to when I wasn't confident in my physical abilities, when I was just a skinny, quiet little kid who was picked last for dodgeball, because frankly, I'd rather be inside reading a book that the teacher would think was inappropriate for someone my age.

    It wasn't the pain, it wasn't an injury that in the grand scheme of things, wasn't very serious.  I realized at this point that what is dire profundity to the very young, is usually just "been there done that" to those of us in middle age, which is still preferable to the six foot deep and eighteen foot square reality that faces us all eventually.
    No, it wasn't torn and missing cartilaginous tissue and the wobbly feeling post-surgery I had every time I tried to use that leg.  It was losing a foothold I'd stretched so far and so hard for. It was realizing that we treat our bodies with a sense of entitlement we may eschew in other things as if breath was some plaything given to us just for our own pleasure. I look down on the small scars as if speaking to them. You would let me run, you would let me climb mountains, you would let me explore and make mistakes and play. Now I can't walk up a flight of stairs. When our body fails us, it's like a personal betrayal

    It's much as if seeing a beloved old building each and every day, an old church perhaps, the stones so study that time had not displaced it, could not ever displace it, not all of time could have.  Then one day you drive past and it's simply gone, razed and replaced by a shabbily built storefront that won't withstand a good wind.
    I sat here in this spot, January 1st, six years ago, during another storm, crutches up against the wall, the curtains drawn, as the pain in my body drove for an instant upon me, the thorns of slain flowers.  On that day, I wished to be anywhere but far from home and in pain, not even strong enough to drive back to my hometown for the surgery I needed. The sky was spilling snow, the only light there was laying low to the ground as if held down by the wind itself, unable to rise and move away. It was a day in which I could only sit immobile hundreds of miles from my home as the wind howled, dreaming in an Arctic landscape of a sea that never freezes and a landscape that is forever green.

    It's easy to throw a pity party, and I was on the verge on that later day I realized I was in a motorized scooter in WalMart, one place I swore I would never be.  But in that same moment, as the young man that is now my husband, smiled down at me, his having been with me, his best friend, not even an official girlfriend yet, without fail since I got hurt, canceling his whole Christmas to drive me home and tend to me and my elderly dog, I realized all that I had. I also realized that putting the small end of the crutch out in front of me like a knight's lance, I could knock the Billy Bass out of the cart of the guy with no teeth.  Oh, sorry, accident, really. SCORE!
    I am who I am through hurt and pain and failures and because of them.

    Because of that, I know what is important. And that is all the endurance of which mind is capable, of which the flesh has appetite for. That has kept me going on nights when all I could do was sit and hold a small faded photo, eyes, tightly shut, as if the light was diminished by its own grief, leaving only a lone huddled shadow upon the wall, pale and fading. That has kept me going when fate swiped a paw at me and I swiped back, harder, EPR's steady, left hand tight on the yoke of my comrade-in-arms, with the swept back wing of an old combat jet, planting that aircraft on a piece of hard ground as small as my fear.
    I get up from my chair and open the curtains up.  With the storms today the temperatures dropped significantly.  I'll have a higher heat bill, but for now, I want to look out, and up.  I look at the sun I've not seen in two days as the fierce wind hollowed the remaining light out of the sky, the light now holding a quality beyond heat and illumination.   In the distance the sound of a church bell, a deliberate note blowing free, like snow from a winter branch. Somewhere within, a priest lifts the Host in a series of shimmering gleams like warm rain that falls from the sky as vows are spoken, and what is broken is healed.
     - Brigid

    How to spot if an ATM machine has been tampered with

    ATM hacking is pretty wide spread.  After all, people rob banks because that's where the money is.  There's a whole industry creating hardware that Bad Guys try to install on ATMs, where the information from your bank card and your PIN get captured.

    Brian Krebs has a great article on what to look for when you use an ATM.

    Sunday, April 9, 2017

    You make your software sad when you uninstall it


    Bedřich Smetana - Má Vlast (The Moldau)

    Somehow in all my travels (almost 40 countries) I never made it to Prague.  Prague, of course, is on the river Vlast, better known to non-Czech speakers by its German name, the Moldau.  Smetana wrote what is undoubtably his most famous composition about this river.  If you, like me, grew up with classical music, you've heard this.  It's likely in any list of "Top 100classical music pieces".  Maybe most top 50 lists.

    Smetana was an interesting character, from an interesting time.  He lived in the middle of the 19th century, a time of political upheaval (he participated in the Revolution of 1848).  Most of his children died of childhood diseases, and his wife died of tuberculosis.  He had to leave Prague to make his living, going to Sweden.  Making some fame and (not quite fortune), he returned to Prague, only to end up going mad and living out his last days in an asylum.

    But his music has become a focus of Czech patriotic musical fervor.  In this, he was part of a 19th century wave, including Edvard Grieg, Ralph Vaughan Williams, and Sir Edward Elgar.  If you like this period of classical music, you'll like him.  I sure do.

    Saturday, April 8, 2017

    Quote of the Day - Refugee Edition

    By a Syrian refugee:
    If you really care about refugees, if you really care about helping us, please -- help us stay here in our country ... We don't want to come to the United States. We want to stay in our country. We want to stay in our country ... With all due respect, this is hypocrisy. If you really care, if you really care...help us stay in our country. We don't want to become refugees. We want to stay in our country.
    Why on earth would they not want to stay in their own homes, in their own communities?  Safely?

    This was on CNN, whose interviewer (of course) was mortified that her interviewee wouldn't say anything bad about Donald Trump.  It must be mystifying to them.

    My Doctor says I have to start eating more healthy

    But maybe not this healthy ...


    Sure sounds like they're ripe, though.

    Friday, April 7, 2017

    New malware bricks Internet Of Things devices

    I complain a lot about crummy security on Internet of Things (IoT) devices.  I like to say that not only is security not an after thought, it wasn't thought of at all.  I've also said (repeatedly) that companies who make these devices don't care about security because their customers don't care.  After all, there's no downside to the customer for crummy security.

    Until now:
    A new malware strain called BrickerBot is bricking Internet of Things (IoT) devices around the world by corrupting their storage capability and reconfiguring kernel parameters.
    Detected via honeypot servers maintained by cyber-security firm Radware, the first attacks started on March 20 and continued ever since
    "But really, Borepatch," I hear you ask.  "Just how bad can it be?"  This bad:
    The end result is a bricked IoT device that will stop working within seconds of getting infected. Experts call these attack PDoS (Permanent Denial of Service), but they are also known as "phlashing."
    According to telemetry data, just one of Radware's honeypots has seen 1,895 PDoS attempts in the span of four days.


    Welcome to the Internet of (Crummy Security) things.  I can't wait until this hits thousand dollar big screen "Smart" TVs.  But if the malware world follows historical norms, that's coming.

    Article I, Section 8, Clause 11

    It looks like both political parties interpret the text of that section of the Constitution the same way they interpret the Second Amendment.  Whatever is convenient and popular for them at the time.

    I know that this has never been invoked during my lifetime (I believe that the last time it was executed was December 8, 1941).  But I'm old fashioned, and think that things mean what they say.

    For sure Donald Trump is no small government constitutional originalist.

    Thursday, April 6, 2017

    Hamlet for Gen X


    That's actually kind of how the play is.

    Curse You Perry the Platypus - On Being a Scientist

    We all grow up, yet, we all do not, still children inside, even if we won't admit it.  For I have, on more than one occasion, been up on a stand in a courtroom as the expert witness, or offering testimony on a case of my own, doing the double take when my name and title are called, convinced for a moment they've got the wrong person. For honestly, on such days, there in my dark blue suit and button down white shirt and shiny shoes, I still feel like a kid playing grown up. Perhaps it's because I still watch cartoons (an odd combination of Loony Tunes, Pinky and the Brain, Johnny Quest, Phineas and Ferb and Futurama). Perhaps it's just how I view my life and my world.

    But in what makes me smile, what makes my mind ignite, some things really never change. You probably see that as well. For in many families there is usually one child that has that deep seated curiosity that sets him or her apart from the others. Sometimes it's as subtle as a lot of "why" questions; sometimes it's finding out someone asked for a lathe from Santa. But for you new parents, here are some helpful hints to recognize if your child is going down the path of saving the world, one science experiment or engineering drawing at a time.

    How to identify if your child is going to be the next engineer or scientist in your family.

    All toys are first taken completely apart before playing with.

    Hooks dogs leash to remote control car so he/she does not have to walk him.

    Pumps up his or her Super Soaker with an industrial air compressor.

    Can demonstrate  Bernoulli's Theorem with a shop vac and a golf ball.
    Jello + BB Gun. Does anyone have a mop?

    Installs Dad's stereo speakers in duct work for true "surround sound".

    Freezes siblings chair with liquid nitrogen when he's foolish enough to be temporarily absent.

    Rolls his/her eyes when you call a Pipe Wrench a Monkey Wrench.

    Comes home from Sears with permission slip to buy a nail gun.

    Asks for a large sheet of plywood and a saw horse or two to go with the toboggan at Christmas to better make the ski jump.

    Uses Dremel tool to convert striped Phillip head screws into slotted screws. Opens the stuck jar of mayonnaise by puncturing the lid with a clean nail to break the vacuum.

    After a day of playing "spy", uses the pressed,warm flat edge of a knife to convince a small piece of dry ice to spill the goods.  "We have ways of making you talk . . SQUEAL"

    Solves Rubik Cube by disassembling and reassembling in the correct order. (Mad Scientist bonus: Disassembles and reassembles leaving it one cube out of place and leaves it for unsuspecting sibling).

    Can repair any toy out of existing garage inventory

    Has built a Bazooka out of a floor vacuum cleaner, PVC pipe, a PVC 3 way junction with an  angle of 45° that fits the straight PVC tube, duct tape and a projectile

    Takes apart 36 inch model of Cutty Sark with a hammer to build a workable raft for G.I. Joe, accompanied by Barbie and Midge dressed up like Mary Ann and Ginger. (Note, raft not to be confused with a B.O.A.T., (Buoyancy Operated Aquatic Transport)
    When given permission to build a tree house, presents a bill of materials including the proper number of nails.

    Launches G.I. Joe/Star Wars Project to melt enemy troops with a magnifying glass.

    Makes Bionic Barbie (Formerly G.I. Joe raft date Mary Ann) with scraps of wire and auto body filler to replace leg lost in tragic potato gun accident.

    When asked why he or she is borrowing the vice grips replies "I hear the tooth fairy pays good money."

    Passes meatballs to little brother wit  tiny trebuchet.

    Trip to ocean involves buckets and plastic M80's for building and destroying sand castles.

    Takes apart TV set "because there's nothing to watch".
    Instead of marbles, has a jar full of nuts and screws. (Got bored playing marbles when discovery made that you can always win using a steel ball bearing.)

    Discussion at parent/teacher conference involves discussion of intentional launch of schoolyard bully off of teeter totter to correlate weight and angle to trajectory.

    Neighbor calls that your kid is in their back yard with  your lawn chair, duct tape, a two liter bottle of diet coke and Mentos (Remember kids, Mythbusters taught us to grind up the Mentos first!)

    While Mom makes cookies, mixes Borax, white glue, water, and food coloring to make homemade slime.

    Borrow tools and does not return them.

    Has pet that works for OWCA.
     
    Try and set a good example of research and safety (eye protection!). School them in the laws of man and physics (those fingers just won't grow back you know).  Then sit back and smile as you quietly watch them do the same things you used to do, remembering how, in the long run, it helped you learn and grow.

    For you never know when such skills might come in handy, for that day you might meet pure Evil and he's just invented the "Delete-ALL-initor".

    Bridge repair in Atlanta has begun

    They're gathering construction materials.


    Spotted by the Queen Of The World.  She has pretty sharp eyes ...

    So just how much data does Windows 10 collect from your computer?

    Wow.  That's a lot of data.

    My recommendation is to set the data collection to "Basic", which will still collect a ton of data from your computer, but at least not the ginormous amount from Full mode.

    Even better, install Linux Mint.

    Wednesday, April 5, 2017

    Chelsea Clinton is as dumb as a rock

    Welcome to the Internet, it's full of sarcasm and trolls.  Someone needs to tell Chelsea not to feed the trolls.  Like she just did.

    The Palm Beach (Florida) Republican Party did up a pic of Abe Lincoln in a "Make America Great Again" hat:


    Long time readers will know that I'm not particularly a fan of Mr. Lincoln, and especially his brand of MAGA, but hey - it's the Internet.  It's nothing but sarcasm and trolls.

    But it seems that someone needs to tell that to Ms. Clinton:



    [blink] [blink]

    OK, this is a photoshop.  Duh.

    The Twitter responses ranged from incredulous to brutal, as you'd imagine.  Ms. Clinton seemingly needs some remedial edumcation on da 'net.

    Oh, yeah, the 'net has cat pix too.  This one applies to her tweet:


    Samsung "Smart" devices: "It may be the worse code I've ever seen."

    Samsung is making all their devices "smart" - not just phones, but TVs and appliances like dishwashers and the like.  All of these will be connected on your home network.  They have shipped something like 30 million of these devices, so this is in all kinds of things.  You may even have one of these and not know about it.

    Samsung naturally wants to avoid licensing costs, so their software is not built on top of Android.  Instead, they have created their own operating system called Tizen.

    Long time readers already know where I'm going.  I keep saying that when it comes to the IoT, security wasn't an after thought, it wasn't thought of at all.  Well, it's not just me saying it - Samsung's Android Replacement Is A Hacker's Dream:
    Last month, the CIA got a lot of attention when WikiLeaks published internal documents purporting to show how the spy agency can monitor people through their Samsung smart TVs. There was a caveat to the hack, however—the hijack involved older models of Samsung TVs and required the CIA have physical access to a TV to install the malware via a USB stick.
    But the window to this sort of hijacking is far wider than originally thought because a researcher in Israel has uncovered 40 unknown vulnerabilities, or zero-days, that would allow someone to remotely hack millions of newer Samsung smart TVs, smart watches, and mobile phones already on the market, as well as ones slated for future release, without needing physical access to them. The security holes are in an open-source operating system called Tizenthat Samsung has been rolling out in its devices over the last few years.
    The researcher was horrified at the security holes:
    "It may be the worst code I've ever seen," he told Motherboard in advance of a talk about his research that he is scheduled to deliver at Kaspersky Lab's Security Analyst Summit on the island of St. Maarten on Monday. "Everything you can do wrong there, they do it. You can see that nobody with any understanding of security looked at this code or wrote it. It's like taking an undergraduate and letting him program your software."
    And the icing on the cake?
    Neiderman contacted Samsung months ago to report the problems he found but got only an automated email in response. When Motherboard contacted the Korean company, a Samsung spokesperson sent a boilerplate response via email: "Samsung Electronics takes security and privacy very seriously. We regularly check our systems and if at any time there is a credible potential vulnerability, we act promptly to investigate and resolve the issue."
    After this article was published, the company sent another statement reading: "We are fully committed to cooperating with Mr. Neiderman to mitigate any potential vulnerabilities. Through our SmartTV Bug Bounty program, Samsung is committed to working with security experts around the world to mitigate any security risks."
    Riiiiiight.  Good Security followup.

    Quite frankly, the situation looks like a complete security disaster, with security holes everywhere up to and including the "Samsung Online Store" that would let you install your own hacker 'sploit (not that you would ever do that, Gentle Reader).  It's Amateur Hour at Samsung, from the coders to the testers, all the way to the PR droids.



    If you add in other great reasons not to use their "Smart" devices, all I can recommend is that you do NOT buy from this company.  I don't think I've ever had 4 posts saying not to buy products from a particular vendor because of blatant security fails.  I guess that Samsung is an overachiever here.

    The Internet of (Crummy) Things

    Ah, the shiny new Internet-connected gadget.  All wired together with who knows what sort of security?  It turns out that there are risks you may not have considered, even if the security is top notch:
    An Internet of Things maker has just had first-hand experience of the Streisand effect – after remotely killing a customer's Wi-Fi garage door for being rude. 
    Garadget builds and sells a so-called smart door opener that can be operated remotely from a smartphone app. Once installed, Garadget's $99 gizmo wirelessly connects to backend servers on the internet. This allows you to remotely control your door, or check if it's open or closed, from anywhere in the world: your phone app talks to Garadget's servers, and these talk to the smart door controller. 
    As one Garadget owner Robert Martin found on Saturday night, the gadget can therefore be killed at any time by Garadget staff: they just simply have to block access to a particular gizmo, cutting off the hardware from its app – and leaving the garage door stuck in place.
    Good security doesn't seem to protect you if your shiny new Internet-controlled doo-dad is from a company full of Asshats.

    But sure I'll trust you, Mister I've-Never-Met-You-Internet-Company!

    Tuesday, April 4, 2017