Dell pulling a Lenovo/Volkswagen?

You don’t need David Cameron to break encryption, or the feds, or any secret agency in the world. Computer companies are doing it gladly. Dell laptops have been found to be pre-installed with rogue SSL certificates that can allow attackers to impersonate as any HTTPS protected website. Want a backdoor? Dell will provide it quickly and for everyone with a few skills. The worrying part on this story is that this certificate is what has been found until now. Who knows what else has Dell (or other companies) done to break trust in and give access to their laptops?

Are we buying smartphone spies into our lives?

With all the “apps” you can eat (install) mantra, smartphones represent one of the biggest threats to our privacy. MIT researchers found that most popular Android Apps are killing device’s batteries with constant background covert communications. 63 percent of the external communication has no effect on user-observable functionality. The authors concluded that the covert communications could impair transparency and undermine the users’ trust in the mobile application ecosystem. The top 500 apps in google play are full of phone-home crap. What information are they sending? Why are they sending? Smartphones are empowering a new generation of users but are also challenging our rights and privacy. How can we protect ourselves from these negative impacts?

The crazy fear of the West with refugees

Why is the west so alarmed with refugees? Well, science explains it but knowing our fears and the ways our primal brains work won’t we be forced — as rational beings that we think we are — to fight our prejudices and ease the boundaries between us and them? Or we might just need to teach people more math.

Telegram shutting down ISIS sites won’t solve the problem

While some argue that the fact that ISIS is using encryption is a good reason to break encryption — it is a little like saying that because ISIS uses guns, then the West should ban guns too (hm, might not be a bad argument after all…) — the fact is that banning their channels from existing communication services will not be enough as they will certainly setup new channels. In any case it is a measure that can have some effect on the recruitment and propaganda. If we make ISIS propaganda expensive (both in terms of cost and in terms of man-hours to setup, a bit like making SPAM expensive by forcing them to buy more servers), and with limited reach, then we might start winning part of this war. On the other hand it might also create the illusion that they are under control. Don’t get into that delusion. Telegram shutting down ISIS sites and all the active monitoring and control of ISIS propaganda is just a small step. Their activities need to be stopped on a global level.

Printing all Bibtex references into a single document

When dealing with Bibtex reference files sometimes they just grow BIGGER THAN LIFE and sometimes it is important to have a printed copy of all references for handing out to some colleagues. Well. Some people still make fire with flint.

Here is my trick to produce a printed version of all the references in my master bib file references-master.bib. together with the file I keep a references-master.tex file with the following content:

\documentclass[11pt, a4paper]{scrartcl}
\usepackage[utf8]{inputenc}
\begin{document}
\nocite{*}
\bibliographystyle{plain}
\bibliography{references-master}
\end{document}

When I need to produce an updated print of all references I just typeset this small document. The document uses the \nocite command to output all references in the references-master file.

This is also a great way to check the bib file for errors in the entries as it forces you to correct them into proper format. One by one you can fix the entries and in the end you’ll get better bibliographies in Latex that are ready to use in any paper or publication.

More stupid attacks on Encryption

The NYT reveals that the Paris terrorists used encrypted systems to communicate and organise the attacks. WHAT IS THE SURPRISE IN THIS? The stupidity is that the MILITARY want to push for broken encryption systems, and that mentality is so flawed that one has to ask HOW ARE THE INFORMATION SERVICES PROTECTING US AGAIN?

The role of encryption is to guarantee privacy end-to-end in any kind of communication. Encryption runs the world today and If it wasn’t so the world would just collapse. Financial systems would be broken and caos would be everywhere.

The military mentality behind requesting backdoors assumes that they can stay ahead of the competition. While this could be used in the context of real physical military weapons, in digital realm one has to assume that EVERY THING I CAN DO, SOMEONE ELSE CAN TOO.

That is why putting a hole in encryption will just create a new target to be used by terrorists. Please stop this stupidity of thinking that encryption has to be BROKEN BY DESIGN. The scenario would be even worse than having terrorists encrypting their communications. They would be the ones using the loopholes to create global HAVOC.

The age of easy things in software development

With the advent of App Stores in many platforms we’ve seen a change in programming paradigm and a decrease in software quality in general.

When there was no other option to sell your product other than making it so good that word of mouth would carry if forward, developers invested a lot of time in the quality of their code and great pieces of software were produced. But now, with stores and fast distribution channels for the many platforms, software developers realized that shelf time of most of their products is very short in these stores — that are the de facto channel for software distribution. This pushes software developers to lower quality software. It is not an intentional decision, but is a matter of survival and having a quick meal while the food is hot.

The tools to develop software are more accessible and widespread while at the same time more cross platform. Write code once and distribute everywhere is of interest for comercial developers that save time and optimise workflows to be more productive. This “productivity race” has created a situation where quality software is more difficult to obtain and in the meanwhile we are seeing a lot of subpar products that are cheap, but one has the feeling they will never see an update because the brains behind it have moved on to another quick-buck-to-be-made.

Can we solve this? I don’t really know if we can. A few years ago while discussing with Maria João Valente about software she was in the camp of those defending the little app developer charging some money for it and her argument against open source versions was that the paid version would have more quality because of the commitment of the developer with the client, forcing a cycle of interaction that ultimately would drive the quality of the product up. And it was hard to fight this argument. In the Mac environment there were many examples of software that were just perfect examples.

But today, with the profusion of the stores can we still say the same? I’d probably say that 90% of the paid software in the stores is useless or broken or of dubious quality. I would argue that Open Source on the other hand, with all its flaws, still offers a more rewarding experience — even if at a slower pace. And as the software production is not driven by the need to make a quick buck, its quality increases steadily over time. Is open source the solution for everything and everyone. Some will say it is, some will say no. But its importance is without a doubt different from that of a few years ago. Every time a website prompts me to visit the “App Store” I immediately ask myself it it is worth even that click.

Cuidado com a EDP Comercial

Temos urgentemente que criar uma lei que criminalise o marketing telefónico de uma vez por todas. Ultimamente é o número 210340970 em que a voz do outro lado se diz da EDP Comercial. Perguntei-lhes claramente se se tratava de uma campanha de marketing ao que não me responderam.

Será que estas companhias não percebem que estão a tornar o uso do telemóvel insuportável e que com isso estão a fazer que cada vez mais as pessoas bloqueiem os números que não conhecem? E é claro que com este comportamento agressivo perdem os clientes de vez. O SPAM telefónico tem que acabar, mas em Portugal os políticos parecem muito preocupados com estas invasões de privacidade constantes.