random neuron misfires

BBC employees are to be banned from connecting their PDAs to the BBC’s computers unless they run on the Microsoft Windows PocketPC 2002 platform.

“We believe PocketPC includes all functionality and is one the most secure platforms available.“ [my emphasis]

Employees have until summer 2003 to change their PDAs or refrain from porting them to BBC computers.

I hope BBC was paid well by Microsoft to make that public announcement. I haven’t seen any major flaws or breaches where a Palm or Psion handheld PDA was used in some insecure fashion to exploit, steal, or “hack” into any corporate networks… at least none which cannot also be done with a PocketPC.

Microsoft, OTOH, has had at least 3 security advisories per month for the past 4 years, sometimes more.

• Movers arrive tomorrow. Still have to disassemble this desk! More packing remains.
• Liquid polyurethane foam isn’t the best way to pack monitors. Time for Plan B.
• Truck must be relocated soon also, or donated.
• pilot-link will have to be released when I’m on the “other side”.
• Am I attending Palmsource in two weeks?
• Cox Cable better live up to their bandwidth promises.
• Server relocation must happen promptly.

Zurk, how noble of you to certify yourself directly as Master, without even a single project under your guidance. Perhaps you might want to take a look at the Certification Overview and think of a value which suits your personal contributions. Your Sourceforge entry doesn’t seem to contain much. Your homepage seems to be down. I did find your ZDoc homepage though. Perhaps you should add your project to the Advogato project page.

You complain that you lost your certification, and that you can’t post. Perhaps you need to contribute to some community projects or Free Software work. You are judged by your peers here, by your contributions, not by your “friends”.

You aren’t “owed” certifications, you earn them. Just a thought…

Things..

• belated Christmas shopping
• friends from the past
• pilot-link hackery
• packing everything into boxes
• power outages
• voratious hunger
• unstable sleep pattern

SPAM Honeypot

I just looked at the logs from my spam honeypot script running on my box, and there was one spam harvesting engine stuck in it tonight, and it had already hit it 25,813 times before I finally blocked it with iptables. Each new link it found, it spawned a new instance of itself and begain spidering the page again. This is purely evil.

At over 200 unique fake email addresses per page, that’s over 5,162,600 fake email addresses that my script successfully populated it’s database with. Too nice.

PG&E

I had my power shut off today at 12:40pm, and I called PG&E to restore it at b>2:30pm, the power flickered on for 1 full second at 3:48pm and was off again. I called them again at 5:18pm and then again at 6:26pm. They told me power was restored. Uhm, no. They said they would dispatch another truck, but it could take up 8:00pm. I decided to just fix it myself. I went downstairs into the ahem “locked” Utility room and right next to my meter was a little PG&E post-it that said “Service Restored” and a tech’s name. I opened the little metal flap over the breaker, and it was in the Off position. Gar! Why do I always have to deal with this ineptitude? Next time they cut my power, I’ll just march back down there, ahem “open” the Utility room, and turn it back on.

Autoconf quote of the day:

“Using autoconf is like playing chess from 20 feet away by flicking a rope to move the pieces…” -mbp

It’s Thu Jan 24 02:17:58 PST 2002 and I’m not even tired yet.

RoUS, VMware is something I know a great deal about, inside and out. I can probably help you.

I’ve gotten many unsupported USB devices working, regularly sync my Palms over USB, Ir, and serial into and out of vmware guest images, and have no problems with NAT or DVD playback.

Hit me up in email and I can help you out. I have some tweaks as well, that you may want to implement, which will speed up the performance of that NT image for you inside the vm.

I have about 12 images I use in vmware on nearly a daily basis (and as I type this, FreeBSD 4.3 is happily compiling gnome inside VMware right now on another window).

I rely on it quite heavily for my cross-platform work, where I need a “soft” box to test in.

Sony Debacle II
Cross-posted from my original Slashdot posting on the same subejct from today

I’ve been hoping they’d learn, but they still do not. I just checked the Sony Palm Developer website, and they have a Windows binary of POSE, the PalmOS Emulator. This binary covers “PEG-T600C/T400/T415″ models and another binary on the same site covers “PEG-S and PEG-N Series” models. The source code that they have available only covers “PEG-S and PEG-N Series” models. These are all from November 20th, 2001.

Sony, where is the POSE source code for the “PEG-T600C/T400/T415″ series version of POSE? You have two new models of Clie devices on the horizon, and I’m sure that developers would like to begin supporting them, further increasing your sales margins. You have a Windows binary of POSE available that supports these models, you are legally bound to provide the source code which generated these binaries.

Here’s a quote from your PalmOS® developer page:

The source code will be available with the final version.

Sony, listen closely.. you really need to make yourself aware of the GPL before you blindly violate it like this. If you come back with the excuse that you are “cleaning up the code”, you are still in violation. “Cleaned up” code will produce a different binary. You are bound, by the GPL, with releasing the source code which generates any binary you create and distribute from that source code, Windows, Unix, or Macintosh.

I will be in attendance at Palmsource in a few weeks, and I hope you will be as well, because I intend to fully bring this to the attention of yourself, and everyone else there. I have been quiet about this issue, but believe me, I am not backing down.

I have reluctantly added support to pilot-link for the Sony devices, most of which are randomly designed in nature, so that you can see increased sales due to the non-Windows users purchasing your hardware. How about giving back to the community that has been supporting your bottom line for the last two years, instead of raping and stealing from it?

I see only one way that you can claim that you are allowed to proceed with this violation, and that would be if the original copyright holder of xcopilot relicensed or sold the copyright to that code to Palm and then they in turn relicensed it to you. I do not see that being the case, since all previous versions of POSE that you have made available have been based on publically available GPL versions of the codebase. From your own site:

This is the same software level as Palm OS® Emulator 3.0a8 (PEG-S and PEG-N Series) and Palm OS® Emulator 3.2 (PEG-T415), distributed by Palm,Inc.

I anxiously await your public response to this matter.