I Shall Not Hate – A book review

Dr. Abuelaish, the author of the book, has suffered in ways that are awful to contemplate. The book explores the doctor and his family's history, how he achieved what he has, who his family was and how he has reacted to what has happened along with some ruminations on how the Israeli/Palestinian peace process can move forward.

Continue reading I Shall Not Hate – A book review

1491 – New Revelations of the Americas Before Columbus – A book review

1491 - New Revelations of the Americas before Columbus by Charles C. Mann explores what was known as of 2005 or so about the inhabitants of the Americas before the arrival of Columbus. The book shows that just about everything I was taught about the Indians wasn't so much wrong as misleading.

Continue reading 1491 – New Revelations of the Americas Before Columbus – A book review

Griftopia – A book review

There have been plenty of books on the financial crises but most aren't quite as entertaining and, to be frank, potty mouthed, as this one. Matt Taibbi is a muck racking reporter for the Rolling Stone who, I suspect, will be the first up against the wall when our corporate overlords decide they can stop even pretending to care about the rule of law. The book lays out some of the facts about how exactly a bunch of insanely greedy evil doers destroyed our economy with the active help of 'our' government. I can't say these folks are criminals because we live in a criminal state where the evil doers simply have the laws changed to make their acts legal. In this blog article I look at the part of his book that deals with the mortgage crises.

Continue reading Griftopia – A book review

Anarchy Alive! – A book review

Anarchy Alive by Uri Gordon is an overview of the modern Anarchist movement. Dr. Gordon is an active member of the Anarchy scene and he wrote this book from his perspective as an activist. The book attempts to explain the characteristics of the modern Anarchist movement and the issues Dr. Gordon thinks it needs to address.

Continue reading Anarchy Alive! – A book review

Sharing sparse disk image bundles across OS X machines

Normally using my Mac is a simple joy. But recently I created a sparse disk image bundle on my main OS X box and wanted to share it with other OS X boxes. This is quite possible but requires some very arcane commands to make work. I explore those commands below.

Continue reading Sharing sparse disk image bundles across OS X machines

Four Views on Free Will – A book review

What is free will? This book presents the views of four different philosophers on the topic. The book defines free will via a question - what are the prerequisites for someone to be held morally responsible for their actions? What is especially great about this book is that the authors could see each other's sections in the book so that as the book progresses each author can refer to what the authors in the sections before them said. Then at the end each of the four authors gets another chapter in which they can refer fully to what the other three authors said and respond. I especially liked the fact that the authors really engaged with each other's points rather than just throwing stones at each other. Below I explore the key points that each of the authors made and why I'm not fully buying any of it.

Continue reading Four Views on Free Will – A book review

User IDs – managing the mark of Cain

Facebook's latest privacy debacle was driven by their failure to properly manage user IDs. This is not a new problem area and as the EFF points out, Facebook has done this before. So while I don't know if Facebook will be interested in this post, those who care about protecting their user's privacy in an age of data sharing may want to have a look at the threats and defenses needed to share user IDs across sites. Securing user IDs isn't easy.

[Update 10/22/2010: Changed the title and intro and added three new sections at the end.]

Continue reading User IDs – managing the mark of Cain

11/2/2010 General Election Seattle, King County, Washington

It's voting time again. I still don't know why I bother. But here I am. Scroll down to see details about why I am voting the way I list.

  • Initiative Measure No. 1053 - No

  • Initiative Measure No. 1082 - No

  • Initiative Measure No. 1098 - No

  • Initiative Measure No. 1100 - No

  • Initiative Measure No. 1105 - No

  • Initiative Measure No. 1107 - No

  • Referendum Bill No. 52 - No

  • Amendment to the State Constitution Senate Joint Resolution No. 8225 - Yes

  • Amendment to the State Constitution Engrossed Substitute House Joint Resolution No. 4220 - No

  • Charter Amendment No. 1 Amendments to the Preamble - No

  • Charter Amendment No. 2 Amendment of Section 690 - Campaign Finance - Yes

  • Charter Amendment No. 3 Amendment of Section 890 and New Section 897 - Collective Bargaining - No

  • Proposition No. 1 Sales and Use Tax for Criminal Justice, Fire Protection, and Other Government Purposes - No

  • Seattle School District No. 1 Proposition No. 1 Supplemental Operations Levy - No

  • United States Senator - Patty Murray

  • United States Representative Congressional District No. 7 - Jim McDermott

  • State Representative Legislative District No. 46 - Position 2 - Phyllis G. Kenney

  • Seattle Municipal Court Judge Position No. 1 - Edsonya Charles

  • Seattle Municipal Court Judge Position No. 6 - Karen Donohue

  • State Supreme Court Justice Position No. 6 - Richard B. Sanders

Continue reading 11/2/2010 General Election Seattle, King County, Washington

OAuth 2.0 Bearer tokens – unsafe at any speed?

Eran's latest article raises a number of specific security threats by way of arguing that bearer tokens are irredeemably insecure. In this article I examine the attacks Eran calls out and demonstrate that they are already addressed by OAuth 2.0. Eran's article does bring up the interesting question of - do we need defense in depth for the tamper resistance and confidentiality provided by SSL/TLS?

Continue reading OAuth 2.0 Bearer tokens – unsafe at any speed?

Bearer Tokens, Discovery and OAuth 2.0

Part of my day job is working on adding discovery to OAuth 2.0. This article provides a summary of some of that work. So I was more than a little concerned when I saw a blog article from Eran Hammer-Lahav, the editor of OAuth 2.0, asserting that OAuth 2.0 couldn't support secure discovery. Very worried that something was terribly wrong I carefully read Eran's article. I summarize below what I believe his concerns are and explain how I believe those concerns would be addressed by extensions to OAuth 2.0 to support discovery. I also explain how Eran's article helped me find a flaw in my own proposal and how I propose fixing that flaw.

Continue reading Bearer Tokens, Discovery and OAuth 2.0