Seth Battis posted a photo:
http://farm3.static.flickr.com/2665/3681622569_2a0b80a094_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2665/3681622569_2a0b80a094_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3619/3682436090_0c763c1ea4_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3619/3682436090_0c763c1ea4_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2472/3682435766_41290868f9_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2472/3682435766_41290868f9_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2650/3682435496_d07151e437_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2650/3682435496_d07151e437_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2545/3681621533_c1a404673c_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2545/3681621533_c1a404673c_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2457/3682434926_e1b0bc1811_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2457/3682434926_e1b0bc1811_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2566/3682434666_79f13477c0_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2566/3682434666_79f13477c0_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2424/3682434438_84c943e434_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2424/3682434438_84c943e434_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2461/3681620429_fee3748e58_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2461/3681620429_fee3748e58_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3551/3682433662_9dbc3a1093_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3551/3682433662_9dbc3a1093_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2580/3681619681_0a5661a90a_m.jpg
&rdquoSeth Battis posted a photo:
http://farm3.static.flickr.com/2580/3681619681_0a5661a90a_m.jpg
&rdquo
PITTSBURGH ? A skilled San Francisco-based computer hacker who once sought to unite the cyber underworld under his benign rule pleaded guilty to federal wire fraud charges here Monday, admitting he stole nearly 2 million credit card numbers from banks, businesses and other hackers, which were used to rack up $86 million in fraudulent charges.
Max Ray Butler, 36, faces up to 60 years in prison for the two felonies under law, but his actual sentence will be influenced by a number of factors, not least a plea agreement with federal prosecutors that was filed under seal Monday.
Wearing an ill-fitting orange jail uniform and round glasses, his hair cut short and neat, the six-foot-plus Butler towered over the burly deputy marshals that brought him into the court room. Once he settled into his seat, he spoke softly and evenly as he answered questions from the judge, frequently drawing admonishments to speak up for the benefit of the court reporter.
?I actually did the actions that are relevant in the indictment, and I am guilty,? Butler said, at one point.
Butler identified himself in court as ?Max Vision,? the name he gave himself in the 1990s when he became a superstar in the computer security community. At that time Butler was billing himself out as a $100-an-hour computer security consultant, and he earned the respect of his peers for creating and curating an open source library of attack signatures used to detect computer intrusions.
But it turned out Butler was staging recreational hacks on the side, and in 2001 he was sent to federal prison for 18 months for launching a scripted attack that closed security holes on thousands on Pentagon systems, and left backdoors behind for his own use.
While in prison, Butler met more serious criminals, and he was befriended by a professional swindler named Jeffrey Norminton. After his release, Norminton introduced him to an Orange County, California entrepreneur and former bank robber named Chris Aragon.
Butler admitted Monday that he began hacking banks, merchants and other hackers to steal credit card numbers, then sold them to Aragon. Aragon, who?s pending trial on related state charges in southern California, turned that stolen data into near-perfect counterfeit cards, complete with holograms, and recruited a crew of shoppers who used the cards to snap up designer merchandise for resale on eBay. Aragon earned at least $1 million in the business, police say.
Butler became a priority to federal law enforcement officials in 2006, when, under the handle ?Iceman,? he staged a brazen takeover of the online carder forums where hackers and fraudsters buy and sell stolen data, fake IDs and specialized underground services.
He hacked into the forums, wiped out their databases, and absorbed their content and membership into his own site, called CardersMarket.
On one of the sites he hacked, called DarkMarket, Butler later discovered that an administrator named ?Master Splyntr? was logging in from an FBI office in Pittsburgh. Butler partnered with a Canadian hacker to try and expose Master Splyntr as a fed, but his claim was largely dismissed in the underground as inter-forum rivalry. DarkMarket went on to become a full-blown undercover FBI operation, and the FBI and Secret Service began an investigation into ?Iceman.?
(I wrote about Butler in the January issue of Wired. I?m now working on a book about him and the carder forums for Crown publishing).
Using informants and some genuine electronic gumshoe work, the feds identified Iceman as Butler about a year later, and arrested him in September 2007 at a corporate apartment he used as a hacking safe house.
When the feds seized Butler?s hard drive, they found five terabytes of encrypted data on his harddrive,? the government said Monday. They later cracked Butler?s crypto, and discovered 1.8 million stolen credit card numbers belonging to 1,000 different banks. The banks tallied the fraudulent charges on the cards at $86.4 million.
But Butler?s defense attorney told U.S. District Judge Maurice B. Cohill Jr. Monday that Butler and his associates weren?t? responsible for all of the fraudulent charges.
Butler, noted federal public defender, Michael Novara, frequently cracked the computers of other members of the underground, and stole their stuff. Some of the credit card numbers found on Butler?s hard drive had been in the hands of cyber thieves before Butler began his hacking spree.
?Max is kind of a hacker?s hacker,? said Novara. ?There was a lot of stuff on his computer that he was not responsible for, and did not intend to use.?
?I don?t think I ever heard the expression, ?a hacker?s hacker? before,? said Judge Cohill, with a smile.
Sources say Butler?s plea deal will also wrap up a separate federal case in Virginia, in which Butler is charged with staging the first documented ?spear phishing? attack against employees of a financial institution, gaining access to the corporate network of Capital One bank.
Butler was calm and attentive at Monday?s proceeding, which opened with federal prosecutor Luke Dembosky crossing to the defense table to shake hands with the hacker, who smiled and nodded.
Through his attorney, Butler released a two-paragraph statement following his plea.
?Max Vision, known in this case as Max Butler, pled guilty today as a first step toward getting this sad chapter of his life behind him. It is unfortunate that his life circumstances in 2005 led him to participate in this criminal conduct, and he very much regrets doing so,? he wrote.
?Max has always preferred using his extraordinary computer skills ? his computer vision ? for the good of society and the cyber world, and he hopes that he will be given the opportunity in the future to once again don the white hat.?
Asked afterward what kind of sentence the government expects for Butler, Dembosky was vague with reporters. ?Suffice to say, it won?t be probation.
See Also:
PITTSBURGH ? A skilled San Francisco-based computer hacker who once sought to unite the cyber underworld under his benign rule pleaded guilty to federal wire fraud charges here Monday, admitting he stole nearly 2 million credit card numbers from banks, businesses and other hackers, which were used to rack up $86 million in fraudulent charges.
Max Ray Butler, 36, faces up to 60 years in prison for the two felonies under law, but his actual sentence will be influenced by a number of factors, not least a plea agreement with federal prosecutors that was filed under seal Monday.
Wearing an ill-fitting orange jail uniform and round glasses, his hair cut short and neat, the six-foot-plus Butler towered over the burly deputy marshals that brought him into the court room. Once he settled into his seat, he spoke softly and evenly as he answered questions from the judge, frequently drawing admonishments to speak up for the benefit of the court reporter.
?I actually did the actions that are relevant in the indictment, and I am guilty,? Butler said, at one point.
Butler identified himself in court as ?Max Vision,? the name he gave himself in the 1990s when he became a superstar in the computer security community. At that time Butler was billing himself out as a $100-an-hour computer security consultant, and he earned the respect of his peers for creating and curating an open source library of attack signatures used to detect computer intrusions.
But it turned out Butler was staging recreational hacks on the side, and in 2001 he was sent to federal prison for 18 months for launching a scripted attack that closed security holes on thousands on Pentagon systems, and left backdoors behind for his own use.
While in prison, Butler met more serious criminals, and he was befriended by a professional swindler named Jeffrey Norminton. After his release, Norminton introduced him to an Orange County, California entrepreneur and former bank robber named Chris Aragon.
Butler admitted Monday that he began hacking banks, merchants and other hackers to steal credit card numbers, then sold them to Aragon. Aragon, who?s pending trial on related state charges in southern California, turned that stolen data into near-perfect counterfeit cards, complete with holograms, and recruited a crew of shoppers who used the cards to snap up designer merchandise for resale on eBay. Aragon earned at least $1 million in the business, police say.
Butler became a priority to federal law enforcement officials in 2006, when, under the handle ?Iceman,? he staged a brazen takeover of the online carder forums where hackers and fraudsters buy and sell stolen data, fake IDs and specialized underground services.
He hacked into the forums, wiped out their databases, and absorbed their content and membership into his own site, called CardersMarket.
On one of the sites he hacked, called DarkMarket, Butler later discovered that an administrator named ?Master Splyntr? was logging in from an FBI office in Pittsburgh. Butler partnered with a Canadian hacker to try and expose Master Splyntr as a fed, but his claim was largely dismissed in the underground as inter-forum rivalry. DarkMarket went on to become a full-blown undercover FBI operation, and the FBI and Secret Service began an investigation into ?Iceman.?
(I wrote about Butler in the January issue of Wired. I?m now working on a book about him and the carder forums for Crown publishing).
Using informants and some genuine electronic gumshoe work, the feds identified Iceman as Butler about a year later, and arrested him in September 2007 at a corporate apartment he used as a hacking safe house.
When the feds seized Butler?s hard drive, they found five terabytes of encrypted data on his harddrive,? the government said Monday. They later cracked Butler?s crypto, and discovered 1.8 million stolen credit card numbers belonging to 1,000 different banks. The banks tallied the fraudulent charges on the cards at $86.4 million.
But Butler?s defense attorney told U.S. District Judge Maurice B. Cohill Jr. Monday that Butler and his associates weren?t? responsible for all of the fraudulent charges.
Butler, noted federal public defender, Michael Novara, frequently cracked the computers of other members of the underground, and stole their stuff. Some of the credit card numbers found on Butler?s hard drive had been in the hands of cyber thieves before Butler began his hacking spree.
?Max is kind of a hacker?s hacker,? said Novara. ?There was a lot of stuff on his computer that he was not responsible for, and did not intend to use.?
?I don?t think I ever heard the expression, ?a hacker?s hacker? before,? said Judge Cohill, with a smile.
Sources say Butler?s plea deal will also wrap up a separate federal case in Virginia, in which Butler is charged with staging the first documented ?spear phishing? attack against employees of a financial institution, gaining access to the corporate network of Capital One bank.
Butler was calm and attentive at Monday?s proceeding, which opened with federal prosecutor Luke Dembosky crossing to the defense table to shake hands with the hacker, who smiled and nodded.
Through his attorney, Butler released a two-paragraph statement following his plea.
?Max Vision, known in this case as Max Butler, pled guilty today as a first step toward getting this sad chapter of his life behind him. It is unfortunate that his life circumstances in 2005 led him to participate in this criminal conduct, and he very much regrets doing so,? he wrote.
?Max has always preferred using his extraordinary computer skills ? his computer vision ? for the good of society and the cyber world, and he hopes that he will be given the opportunity in the future to once again don the white hat.?
Asked afterward what kind of sentence the government expects for Butler, Dembosky was vague with reporters. ?Suffice to say, it won?t be probation.
See Also:
Shared by Seth Battis
There's a wealth of jokes about engineers' engagement with the world here. Perhaps the big issue though is that this may well highlight how important it is to help our students grasp that there are shades of grey, as well as black and white in neat bins.
Time to start profiling.
EDITED TO ADD: here's the paper.
&rdquoShared by Seth Battis
There's a wealth of jokes about engineers' engagement with the world here. Perhaps the big issue though is that this may well highlight how important it is to help our students grasp that there are shades of grey, as well as black and white in neat bins.
Time to start profiling.
EDITED TO ADD: here's the paper.
&rdquoJump to a Random Strip in the Archives! | Get Sheldon Books 'n Shirts | Buy This Original Art | Forum Chat | Archives | E-mail Dave
&rdquoJump to a Random Strip in the Archives! | Get Sheldon Books 'n Shirts | Buy This Original Art | Forum Chat | Archives | E-mail Dave
&rdquohttp://www.wired.com/images_blogs/underwire/images/2008/04/25/roflcon_jmm_0352_2.jpg
Iranian democracy activists, meet your new pals: a masked protest movement best known for needling the Church of Scientology, and a group of file-sharers so infamous they?re facing a year in jail.
Anonymous Iran is a collaboration between The Pirate Bay ? operators of the world?s largest torrent site, convicted in April of copyright infringement ? and Anonymous, the prankster collective dedicated to exposing ?Scientology?s crimes.?
The new site offers tips on how to navigate online in private, upload files through the Iranian firewall, find the best activist Tweeters, and launch attacks on pro-government websites.
This week, The Pirate Bay launched its virtual private network service that promises to mask users? indentities online. More than 180,000 people have already signed up. Earlier this month, Sweden?s Pirate Party won a seat in the European Union Parliament, after outrage about the file-sharers conviction erupted.
[Active: Linkfilter; Photo: Jim Merithew/Wired.com]
ALSO:
http://feedads.g.doubleclick.net/~at/AKGI5FFcATCjW8ifXny-KS1GK4c/0/di
http://feedads.g.doubleclick.net/~at/AKGI5FFcATCjW8ifXny-KS1GK4c/1/di
http://www.wired.com/images_blogs/underwire/images/2008/04/25/roflcon_jmm_0352_2.jpg
Iranian democracy activists, meet your new pals: a masked protest movement best known for needling the Church of Scientology, and a group of file-sharers so infamous they?re facing a year in jail.
Anonymous Iran is a collaboration between The Pirate Bay ? operators of the world?s largest torrent site, convicted in April of copyright infringement ? and Anonymous, the prankster collective dedicated to exposing ?Scientology?s crimes.?
The new site offers tips on how to navigate online in private, upload files through the Iranian firewall, find the best activist Tweeters, and launch attacks on pro-government websites.
This week, The Pirate Bay launched its virtual private network service that promises to mask users? indentities online. More than 180,000 people have already signed up. Earlier this month, Sweden?s Pirate Party won a seat in the European Union Parliament, after outrage about the file-sharers conviction erupted.
[Active: Linkfilter; Photo: Jim Merithew/Wired.com]
ALSO:
http://feedads.g.doubleclick.net/~at/AKGI5FFcATCjW8ifXny-KS1GK4c/0/di
http://feedads.g.doubleclick.net/~at/AKGI5FFcATCjW8ifXny-KS1GK4c/1/di
Google is putting millions of users at risk of fraud from hackers and needs to enable encryption by default on its most popular web apps, including Gmail and Google Docs, a gaggle of security researchers told the search giant Tuesday in an open letter.
At issue are the current default settings for Google?s popular web applications. The settings use the secure ?HTTPS? protocol only for logging in, and fall back to unencrypted browsing thereafter. If a user doesn?t know how to force Google to use HTTPS full time, he?s vulnerable to a host of nasty hack attacks when using an open or badly secured network, particularly a public Wi-Fi spot.
Most of the web?s cloud computing applications leave users just as vulnerable to having their e-mail and social networking accounts hijacked, the letter admits, but the collection of security professionals is leaning on Google to take a leadership role.
?Few users know the risks they face when logging into Google?s Web applications from an unsecured network, and Google?s existing efforts are little help,? the letter reads. ?As a market leader in providing cloud services, Google has an opportunity to engage in genuine privacy
and security leadership, and to set a standard for the industry.?
The 37 signatories to the letter (.pdf) include the country?s top encryption and security experts, ranging from Ron Rivest ? the inventor of some of the most popular encryption tools ? to Rsnake, one of the net?s most agile good-guy hackers. The posse seems to have been called together by Christopher Soghoian, a computer researcher, programmer and privacy provocateur.
The letter notes that Google locks down other applications, such as Google Voice, Health, AdSense and AdWords, by running all their traffic ? not just the login ? via the https protocol. That?s how banks run their sites, since that encrypts the communication between a user?s browser and company?s servers, making it virtually impossible for a hacker to get at the data in transit. That?s important, given how often people use open and untrusted wireless connections that can easily be snooped on.
Currently, Google?s web apps do require users to log-in via https, but after that, most users check their email, read their documents and look at their calendars ?in the clear.? That means any ne?er-do-well with the brains to install WireShark or Linux can sit in a cafe, using their packet sniffer to check, read, and look along with them. Even worse, a clever attacker can ?side-jack? the user?s cookie and actually log-in to those services at the same time the user is in them. From there they can edit and delete your documents, scour your email for sensitive data and even send out mail under your name.
Google responded Tuesday morning, saying that it is already ahead of the pack by even offering HTTPS, and that the company is looking into whether it would make sense to turn it on as the default for all Gmail users.
For right now, the security problems can largely be solved currently by into Google?s options and changing the ?Browser Connection? setting from ?Don?t always use HTTPS ? to ?Always use HTTPS.? Firefox users can also use the Customize Google extension to fix the problem for many Google applications, and others can force Google to use HTTPS for a particular session by going directly to a Google HTTPS address, rather than being redirected there. (Note, the last solution doesn?t stop so-called sidejacking attacks unless users also change the Google account SSL option).
So why hasn?t Google switched on HTTPS for all accounts?
Well, according to Google?s own post, the default to HTTP was made for speed and user experience reasons. HTTPS sessions involve a lot more computation on both sides of the transaction, and that also means more load on Google?s servers ? which easily translates into larger expenses for the company. And that?s good enough security for users of a secure wireless or a wired network, unless there?s an intruder in the network or someone is spying on all of an ISPs? internet traffic.
The letter?s signatories say Google engineers can solve any technical problems with always using https.
?Google?s engineers have created a low-latency, enjoyable experience for users of Health, Voice, AdWords and AdSense ? we are confident that these same skilled engineers can make any necessary tweaks to make Gmail, Docs, and Calendar work equally well in order to enable encryption by default.
Shorter version of the letter: What do we want? H T T P S! When do we want it? Now.
UPDATE: This post has been updated Tuesday morning to include comment from Google.
Photo: An Enigma machine, a sophisticated encryption tool used by Germany in WWII. English codebreakers managed to reverse-engineer the system, leading to much havoc for the German navy. Flickr/Kevin Bocek
See Also:
Google is putting millions of users at risk of fraud from hackers and needs to enable encryption by default on its most popular web apps, including Gmail and Google Docs, a gaggle of security researchers told the search giant Tuesday in an open letter.
At issue are the current default settings for Google?s popular web applications. The settings use the secure ?HTTPS? protocol only for logging in, and fall back to unencrypted browsing thereafter. If a user doesn?t know how to force Google to use HTTPS full time, he?s vulnerable to a host of nasty hack attacks when using an open or badly secured network, particularly a public Wi-Fi spot.
Most of the web?s cloud computing applications leave users just as vulnerable to having their e-mail and social networking accounts hijacked, the letter admits, but the collection of security professionals is leaning on Google to take a leadership role.
?Few users know the risks they face when logging into Google?s Web applications from an unsecured network, and Google?s existing efforts are little help,? the letter reads. ?As a market leader in providing cloud services, Google has an opportunity to engage in genuine privacy
and security leadership, and to set a standard for the industry.?
The 37 signatories to the letter (.pdf) include the country?s top encryption and security experts, ranging from Ron Rivest ? the inventor of some of the most popular encryption tools ? to Rsnake, one of the net?s most agile good-guy hackers. The posse seems to have been called together by Christopher Soghoian, a computer researcher, programmer and privacy provocateur.
The letter notes that Google locks down other applications, such as Google Voice, Health, AdSense and AdWords, by running all their traffic ? not just the login ? via the https protocol. That?s how banks run their sites, since that encrypts the communication between a user?s browser and company?s servers, making it virtually impossible for a hacker to get at the data in transit. That?s important, given how often people use open and untrusted wireless connections that can easily be snooped on.
Currently, Google?s web apps do require users to log-in via https, but after that, most users check their email, read their documents and look at their calendars ?in the clear.? That means any ne?er-do-well with the brains to install WireShark or Linux can sit in a cafe, using their packet sniffer to check, read, and look along with them. Even worse, a clever attacker can ?side-jack? the user?s cookie and actually log-in to those services at the same time the user is in them. From there they can edit and delete your documents, scour your email for sensitive data and even send out mail under your name.
Google responded Tuesday morning, saying that it is already ahead of the pack by even offering HTTPS, and that the company is looking into whether it would make sense to turn it on as the default for all Gmail users.
For right now, the security problems can largely be solved currently by into Google?s options and changing the ?Browser Connection? setting from ?Don?t always use HTTPS ? to ?Always use HTTPS.? Firefox users can also use the Customize Google extension to fix the problem for many Google applications, and others can force Google to use HTTPS for a particular session by going directly to a Google HTTPS address, rather than being redirected there. (Note, the last solution doesn?t stop so-called sidejacking attacks unless users also change the Google account SSL option).
So why hasn?t Google switched on HTTPS for all accounts?
Well, according to Google?s own post, the default to HTTP was made for speed and user experience reasons. HTTPS sessions involve a lot more computation on both sides of the transaction, and that also means more load on Google?s servers ? which easily translates into larger expenses for the company. And that?s good enough security for users of a secure wireless or a wired network, unless there?s an intruder in the network or someone is spying on all of an ISPs? internet traffic.
The letter?s signatories say Google engineers can solve any technical problems with always using https.
?Google?s engineers have created a low-latency, enjoyable experience for users of Health, Voice, AdWords and AdSense ? we are confident that these same skilled engineers can make any necessary tweaks to make Gmail, Docs, and Calendar work equally well in order to enable encryption by default.
Shorter version of the letter: What do we want? H T T P S! When do we want it? Now.
UPDATE: This post has been updated Tuesday morning to include comment from Google.
Photo: An Enigma machine, a sophisticated encryption tool used by Germany in WWII. English codebreakers managed to reverse-engineer the system, leading to much havoc for the German navy. Flickr/Kevin Bocek
See Also:
Shared by Seth BattisTo save money, more than 20 Michigan counties have decided to turn deteriorating paved roads back to gravel. Montcalm County estimates that repaving a road costs more than $100,000 a mile. Grinding the same mile of road up and turning it into gravel costs $10,000. At least 50 miles of road have been reverted to gravel in Michigan the past three years. I can't wait until we revert back to whale oil lighting and can finally be rid of this electricity fad.
Depending on the conditions, the gravel road may actually hold up better than the paved road over the long term, contributing even more greatly to amortized maintenance costs. Consider the Mokie Dugway, which is a gravel stretch in the middle of a paved highway, since if it were paved, erosion would undercut the pavement and create a truly treacherous road surface.
http://slashdot.org/slashdot-it.pl?from=rss&op=image&style=h0&sid=09/06/15/1641219
Read more of this story at Slashdot.
&rdquoShared by Seth BattisTo save money, more than 20 Michigan counties have decided to turn deteriorating paved roads back to gravel. Montcalm County estimates that repaving a road costs more than $100,000 a mile. Grinding the same mile of road up and turning it into gravel costs $10,000. At least 50 miles of road have been reverted to gravel in Michigan the past three years. I can't wait until we revert back to whale oil lighting and can finally be rid of this electricity fad.
Depending on the conditions, the gravel road may actually hold up better than the paved road over the long term, contributing even more greatly to amortized maintenance costs. Consider the Mokie Dugway, which is a gravel stretch in the middle of a paved highway, since if it were paved, erosion would undercut the pavement and create a truly treacherous road surface.
http://slashdot.org/slashdot-it.pl?from=rss&op=image&style=h0&sid=09/06/15/1641219
Read more of this story at Slashdot.
&rdquoShared by Seth Battis
Gyarrrgh! Talk about adding insult to insult: I bought my 2.0GHz MacBook literally hours before the 2.13GHz speed bump... and apparently a week or two before this Snow Leopard offer kicked in. I wonder if Apple will someday give a credit to all the people who have been repeatedly "just a few days outside the upgrade window." I'd like some frequent-Mac-purchaser points or something.
Filed under: OS, Apple, Snow Leopard
If you purchased a new Mac or Xserve on or after June 8th, Apple just announced that you'll be able to take advantage of the Mac OS X Snow Leopard Up-To-Date Program. TUAWApple announces Snow Leopard Up-To-Date program originally appeared on The Unofficial Apple Weblog (TUAW) on Mon, 15 Jun 2009 14:00:00 EST. Please see our terms for use of feeds.
http://feedads.g.doubleclick.net/%7Eat/NxuGUPIlCBCg-Rfm_Rr1EKEszx4/0/di
http://feedads.g.doubleclick.net/%7Eat/NxuGUPIlCBCg-Rfm_Rr1EKEszx4/1/di
Shared by Seth Battis
Gyarrrgh! Talk about adding insult to insult: I bought my 2.0GHz MacBook literally hours before the 2.13GHz speed bump... and apparently a week or two before this Snow Leopard offer kicked in. I wonder if Apple will someday give a credit to all the people who have been repeatedly "just a few days outside the upgrade window." I'd like some frequent-Mac-purchaser points or something.
Filed under: OS, Apple, Snow Leopard
If you purchased a new Mac or Xserve on or after June 8th, Apple just announced that you'll be able to take advantage of the Mac OS X Snow Leopard Up-To-Date Program. TUAWApple announces Snow Leopard Up-To-Date program originally appeared on The Unofficial Apple Weblog (TUAW) on Mon, 15 Jun 2009 14:00:00 EST. Please see our terms for use of feeds.
http://feedads.g.doubleclick.net/%7Eat/NxuGUPIlCBCg-Rfm_Rr1EKEszx4/0/di
http://feedads.g.doubleclick.net/%7Eat/NxuGUPIlCBCg-Rfm_Rr1EKEszx4/1/di
http://img.wonkette.com/wp-content/uploads/2009/06/obamastairs.jpgGeorge Will is dying right now. The president is sitting on a pile of trash, basically. And is the fellow on the left wearing dungarees and flip flops? Can we get a column on flip flops, George Will? Close those legs, Obama. [Pete Souza/White House]
&rdquohttp://img.wonkette.com/wp-content/uploads/2009/06/obamastairs.jpgGeorge Will is dying right now. The president is sitting on a pile of trash, basically. And is the fellow on the left wearing dungarees and flip flops? Can we get a column on flip flops, George Will? Close those legs, Obama. [Pete Souza/White House]
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3425/3377551238_e37316d05d_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3425/3377551238_e37316d05d_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3394/3344769755_d4ccda388b_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3394/3344769755_d4ccda388b_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3361/3345602094_de9ea6c751_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3361/3345602094_de9ea6c751_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3336/3344766579_0f155d6443_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3336/3344766579_0f155d6443_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3597/3344765121_cee0ce8706_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3597/3344765121_cee0ce8706_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3327/3344763647_1cc5e88547_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3327/3344763647_1cc5e88547_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3400/3344762185_981db446df_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3400/3344762185_981db446df_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3367/3345594812_8c687a474a_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3367/3345594812_8c687a474a_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3622/3344758441_670190b256_m.jpg
&rdquoSeth Battis posted a photo:
http://farm4.static.flickr.com/3622/3344758441_670190b256_m.jpg
&rdquoHaving just spent some time fiddling with Synergy on OS X, it seems that there aren’t any current instructions on how to make Synergy start automatically on OS X Leopard (and starting it manually is kind of a hassle). My approach is based on Jan Varwig’s instructions, which needed yet more modification for my purposes. Having configured synergy.conf (nota bene: Synergy treats hostnames as case-sensitive, so read the results of hostname carefully!), I set the server and client machines to automatically start their Synergy processes on login.
This requires creating a Launch Agent on each machine (the server and the clients) to start the processes. I use Lingon, mostly because it validates my XML and lets me use the GUI, sometimes (this, by the way, was a time when the GUI failed me — it tended to trim off parameters, be forewarned and use the Expert view).
On the server, I created a new My Agent thus:
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>net.sourceforge.synergy2.server</string> <key>OnDemand</key> <false/> <key>ProgramArguments</key> <array> <string>/path/to/synergys</string> <string>--no-daemon</string> <string>--no-restart</string> <string>--debug</string> <string>WARNING</string> <string>/path/to/synergy.conf</string> </array> <key>RunAtLoad</key> <true/> </dict> </plist>
And on the client, I created a similar My Agent thus:
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>net.sourceforge.synergy2.client</string> <key>OnDemand</key> <false/> <key>ProgramArguments</key> <array> <string>/path/to/synergyc</string> <string>-f</string> <string>Server-Hostname</string> </array> <key>RunAtLoad</key> <true/> </dict> </plist>
A reboot on each machine (server first) and all is ready to go (and, in fact, going).
&rdquoI’m in the throes of reworking my Introduction to Computer Science course for the coming fall. I was thoroughly dissatisfied with how I taught the course this year: I’m at the stage of teaching where I know how I want it to go, but can’t always make it happen. Of course, this may not be a stage, but could, depressingly, be the existence of a grown-up.
I have divided the course into three broad areas that I think are most important to cover: computer science (as a discipline: concepts like variable scope, Boolean logic, object-oriented design, and so on), programming in Java (concrete details like how a for loop works or how to declare a class) and design and implementation. Design and implementation is actually really the core of my fascination with this course: how do you teach problem solving? And how do you get students to apply those skills.
In doing this, I’m plowing through a lot of articles.
Of course, the challenge is now to boil down all these design concepts into something that is useful not in a first-year computer science or software engineering undergraduate course, but in a first-semester high school course. How much do my students really need to know about UML, CRC cards, flow charts, eXtreme Programming, incremental development, rapid prototyping, functional requirements and use cases? Not a whole damn lot. Mostly, I want them to learn to enjoy the process of rigorous problem solving as manifest in learning to program a computer.
But I’d certainly like them to not be starting down the garden path of bad habits based on ill-considered pedagogical frameworks.
Ah, for the days of Pascal as a first programming language!
&rdquoWant a way to track all of my varied output? Try the master feed. (Okay, it’s not all my output — but I’ve combined my blog feed, twitter feed and the the various filtered feeds I send to my classes in one. The class feeds run off of Google Reader, so that I can clip useful articles for them as I see ‘em.)
&rdquoAs we steam towards the end of the year here, I’m watching my next few weeks and, in fact, my summer start to disappear under encroaching project creep. Not that I object too much: most of the projects are pretty cool — in fact, some of them are projects that I’ve been dying to find time to work on during the school year.
I’m painfully aware of my propensity to put off inordinate amounts of work for my next medium-sized chunk of free time. My canonical example is the year in college that I put off about a dozen errands until my Thanksgiving break. Boy howdy, was it ever a rude awakening to realize that Thanksgiving break is only about three or four extra days on the weekend, and probably at least two to four of those days are chock full of commitments to family and friends. Not so much time.
With that in mind, I was fascinated by Steve Pavlina’s article on calculating your fudge factor: that ineffable amount that your horseback estimate of the time necessary for a project is off from reality. My fudge factor is approaching 1.0 for things like driving time — and has been for years. But for coding projects and curriculum development, it might be closer to 3-10 (as in, it takes me 3 to 10 times as long as I plan for).
I’m not convinced that I have Steve’s discipline, but I rather suspect that I can use old data to get some sense of how off I usually am in my time estimates. I have surely made lots of promises archived in my email and then documented my progress (and extensions) in that same medium. Sounds like an interesting project to work on this summer…
Although building an intelligent project monitor that used heuristics to identify project commitments and updates in my incoming and outgoing email and automatically calculated the fudge factor… Now, that could keep me off the street for days at a time. Or weeks. Depends on what my fudge factor is.
&rdquoI realized that I have abandoned this experiment for over a month. No doubt this is indicative of something. Not quite sure what yet, though.
&rdquoHaving just struck upon the similarities between Pink’s six new senses and Gardner’s multiple intelligences, I continue to be fascinated by examples of folks employing these ideas in creative ways: enter Basildon Coder, recently highlighted on Slashdot for describing a Wodehouse-ian approach to code refactoring. As always, I look at this and start to ponder how to use it in the classroom with my students: one of the real challenges that my students face is not the development of new code (although that is challenging) but figuring out how to use a body of code written by someone else (me, their classmates, some godawful Windows GDI API, etc.). I have been struck by the difficulty my students have faced this year in grasping the 50,000 foot view of coding — perhaps a visual representation like this might be a first step. Sort of a Powers of 10 for programming.
&rdquoI have a shelf (well, two shelves now) of books that I want read in their entirety (many of which I have cherry-picked and explored already). But one of the things that I’m particularly bad about is setting aside the time to really sit down and read a book cover-to-cover (even in chapters — I get distracted easily, like a cat with shiny things). Fortunately, I am traveling today, which creates the enforced seat-time necessary to get some good reading in.
I read Daniel Pink’s A Whole New Mind on my flight from Dallas to Chicago this morning. It turned out to be a shockingly quick read. While I was put off for several chapters by his apparent need to ingratiate himself to left-brain directed skeptics (myself included), I was gratified to find that he did have a clear line of reasoning, rich in examples of why right-brain directed folks will be in greater comparative demand in the coming years. Much like Thomas Friedman, but much, much quicker to get through. And with interesting portfolios to match each of his new six senses.
Ironically, Pink’s last sense is the sense for meaning, touching on what he perceives a general human need for meaning in life beyond, say, comfort or safety — Viktor Frankl was his dramatic example of this. (I have some doubts that this is really a “sense” per se — much like Howard Gardner’s intelligences: they represent ideas that are hard to categorize, so any categorization is necessarily arbitrary.) Pink offers some interesting suggestions for how to try to hone this sense, particularly focused on establishing reflective rituals for oneself. I say ironically, because I just saw that my friend Rachel posted this reflection earlier this week. Way to go Rach!
&rdquoAn interesting study that suggests that will power takes real, actual, measurable energy. I wonder a) what all the ramifications of this are (is this going to be like light being both a particle and a wave?) and b) if this is correct, what ramifications does that have for how we educate our students? Hard to expect them to exert will power if we run them into the ground. I wonder how we could help them “bulk up” their wills. Mine too (says the portly gentleman on his third cream soda of the last hour).
&rdquohttp://farm4.static.flickr.com/3184/2332470390_8a553fae05_m.jpg
A rather substantial constellation of coincidental events over the past week has gotten me thinking about how we approach project-based learning: a course-planning conversation with the genial mad scientist whose classroom I share, happening to reflect on my experiences in graduate school last year as I walked past the Kennedy School of Government (not my alma mater), pondering a spring of senioritis, and trying to figure out which of many projects I most wanted to tackle myself over this break, ranging from budgeting curriculum development grants to grading to just plain building code.
Right now I’m starting to overhaul my computer science courses for the 2008-2009 school year, while simultaneously talking with my colleague about a potential joint course in 2009-2010. I have a strong personal preference for project-based learning as a teaching tool because I believe that it provides both an engaging and demanding environment in which students are challenged to learn more in order to do more (rather than just to keep me off of their backs). I also think that projects are an ideal forum in which to draw together the disparate strands of a student’s education — helping them to accomplish an integration for which there is rarely, if ever a formal structure at any level of education. (Perhaps the course on How to Make Almost Anything at MIT is the exception.)
Some of this is based on my experience working with summer programs where we pushed students — during their vacations, in the wilderness — to take on an ambitious personal project over the course of the summer. The outcomes of these projects reflected a great deal of real learning, as well as some very idiosyncratic fascinations. I worked with students who were mapping and analyzing the population of our program over the past three-quarters of a century, students who were focused on writing collections of place-based poetry and short fiction, students who were determined to build a new tool that the expeditions could use in years to come. Anything and everything. But the key was that, by and large, students were genuinely excited about these self-designed projects and put in far longer hours and more effort to complete these projects than they would with normal schoolwork (as I know based on some conversation with their school faculties). Engagement and the discovery of an intellectual passion are no trivial accomplishment for an adolescent summer.
Two summers ago, the faculty reading for my school was Thomas Friedman’s The World is Flat, a book which raises some interesting questions about the direction of education and economics (I suggest skimming liberally through the early chapters… I think it got interesting around page 600 or so). In large part, Friedman’s argument (which is not novel to the educational world) is that those who are able to integrate knowledge and create and construct new ideas based on that integration will have the whip hand in the world of tomorrow (a phrase normally uttered only in echo chambers).
Where in our schools do we offer those opportunities, practice or guidance for our students to integrate the knowledge that they have learned in each discipline. Certainly our instinctual tendency is often to “silo” that education, each discipline focusing exclusively on its own branch of learning, without substantial interaction with other disciplines, or alternatively engaging with other disciplines only as subservient tools of our own, intrinsically more important, discipline. (God knows I’m guilty of this: I’ll look at anything, so long as I get to write some code to work with it down the road.)
As we each start to move towards a project-based curriculum, rich with alternative assessments and challenges to individual student’s passions and interests… we’re going to burn the little puppies right out. This realization came to me as I walked past the Kennedy School, where I took a superlative accounting course last spring — the only course in which I did not have a final project. None of my final projects connected with any other final project, and several were in areas in which I had but marginal interest. This is not something unique to me: all of our students take classes in which they are only marginally interested, in order to fulfill requirements (yes, I’m starting to think about course selection advising as well!).
If every class is so well-designed that it uses the breadth of our pedagogical knowledge and the entire scope of our educational best practices, no student will be able to take a breath long enough to even start to integrate what it is that he or she is learning through this process. How much more powerful would it be for us to guide our students towards a grand, culminating project that required them to draw on multiple disciplines, integrating their knowledge and uniting their teachers as a team in support of this creative work?
Perhaps this is an overly idealistic rendering of the scene, but as I discussed curriculum planning and projects with my mad scientist friend, it became rapidly apparent that the most interesting projects were those that would require more than just one of us (and often more than just one or two of our friends and colleagues) to accomplish. This will require a culture shift at my school. But it will accomplish three major feats, if done well:
So why is there a picture of my cat on a table up above? Because I’m struggling with all of this at once and finding it fairly overwhelming. If you click through and look at the list of texts, you will either wonder if I’m trying to build SkyNet by myself, or if I have technology-induced ADD. I suspect the latter. But my hope is that out of this chaos, I will be able to start to bring first order, and then some new ideas for the coming year. And then maybe I can look at training the cat to stay off the table.
&rdquoThis sounds really familiar. I wonder how you can train folks to achieve this sort of memory more rapidly — and in other fields.
&rdquo