Recent blog entries

21 May 2013 sness   » (Journeyer)

21 May 2013 jarod   » (Journeyer)

GVT: atendimento péssimo, ouvidoria cínica.

Dia 20 de abril mudei-me de casa. Fora a encheção de mudar de casa em si, para uma casa menor, veio a encheção de tentar transferir a minha linha da GVT.

Liguei uns poucos dias antes para tentar agilizar as coisas. Pediram 3 dias úteis para analisar se a minha nova residência teria disponibilidade de serviço. Aguardei os 3 dias, tinha disponibilidade, pedi a mudança.

Aí começa a novela.

A minha casa anterior tinha 35 mega de velocidade. A nova, só tem disponibilidade de 25 mega. Aí eu ligo, eles dizem que primeiro preciso baixar a velocidade do meu pacote de dados. Pedem para eu aguardar 3 dias úteis. Ligo de novo 3 dias depois. Algo deu errado. Mais 5 dias úteis. Mais 3. Mais 7 dias.

A última feita, aguardei os 7 dias úteis ao final dos quais a linha deveria estar instalada. Sim, sou paciente. Ligo lá no sétimo dia útil, só pra ver se vai rolar mesmo. ‘Senhor, a sua mudança não foi confirmada, está dando erro no sistema. Vou passar para a área técnica onde eles tentarão emitir uma ordem de serviço manual, mas será necessário aguardar mais 3 dias úteis’.

Apelo para a ouvidoria. A ouvidoria, cínica, trata meu pedido de transferência de linha como um pedido de mudança de endereço de correspondência e diz que eu já fui atendido, fechando meu chamado.

A mensagem que mandei pra ouvidoria no dia 7 de maio:

Há dias tento solicitar a minha mudança de endereço da xxx para a yyy em Brasília. O último prazo que me deram, 7 dias úteis, se encerraria hoje. Ao ligar na GVT hoje, sou informado que a ordem de serviço ainda nem foi gerada, e terei de aguardar mais 72horas para verificar se a ordem foi gerada, devido a algum erro misterioso que ninguém sabe me dizer ao certo qual é. Mais 3 dias para verificar SE a linha poderá ser transferida. Estou extremamente decepcionado com isso, e nem ao menos sou informado da razão desse erro misterioso, que nem a atendente soube me informar. Uma pena que vocês tratem seus clientes com tão absurdo descaso.

A resposta absurda da ouvidoria, no dia 13 de maio:

Prezado Walter, Em atenção ao seu e-mail, informamos que o endereço foi alterado com sucesso, para: bla bla bla bla novo endereço Atenciosamente, Joana Ouvidoria GVT – Atendimento ao Cliente Não responda esse e-mail. Em caso de dúvida ou sugestão acesse novamente o Fale Com a Ouvidoria

Último contato da parte deles foi na última terça-feira, por volta das 10 da manhã, onde após eu praticamente spamear a caixa de mensagens do perfil do facebook deles, eles ligam falando: ‘Então senhor, não temos disponibilidade de 35 mega no seu novo endereço, podemos prosseguir com o serviço de 25 mega?’

Como se eu não tivesse ouvido isso de vários atendentes anteriores. Digo que sim, que eu preciso de QUALQUER internet. Até hoje, nada de contato da parte deles.

Sigo spameando s caixa de mensagens deles do facebook (inefetivo, porém me dá vazão a profunda frustração que me acomete). Fiz reclamação na anatel na sexta-feira passada, dia 17. Protocolo 1541960.2013. Tive até hoje qualquer ligação ou retorno deles? Óbvio que não.

O mais absurdo é, por tudo o que me foi dito até o momento, não existe nenhum problema técnico que impossibilite a instalação da linha na minha nova casa, com velocidade de 15, 25, ou qlqr outra que eles puderem me fornecer. O que existe é um tremendo descaso, um atendimento péssimo e até esse cinismo, que são os aspectos que mais me incomodam no processo inteiro.

Nem escrevo na intenção de que isso cause qualquer solução. Apenas torço pra que outra história do descaso absurdo dessa operadora fique indexado na internet.

(Sim, vocês podem me perguntar, porque eu não cancelo e peço de novo: quando perguntei dessa possibilidade, falaram-me que seria mais sete dias úteis.

Syndicated 2013-05-21 21:18:49 from devlog

21 May 2013 proclus   » (Master)

Give students the same interest rates on loans as the big banks

Hi,

I signed a petition to The United States House of Representatives and
The United States Senate which says:

"Wall Street banks – the ones that wrecked our economy – should not be
getting a better interest rate on their government loans than young
people trying to go to college."

Will you sign this petition? Click here:

http://pac.petitions.moveon.org/sign/give-students-the-same?source=s.em.cp&r_...

Thanks!

Syndicated 2013-05-21 20:31:00 (Updated 2013-05-21 20:31:26) from proclus

21 May 2013 sness   » (Journeyer)

ULB Bonn ::: Dissertation - Rolf Bardeli: Algorithmic Analysis of Complex Audio Scenes, 2008

ULB Bonn ::: Dissertation - Rolf Bardeli: Algorithmic Analysis of Complex Audio Scenes, 2008: "In this thesis, we examine the problem-of algorithmic analysis of complex audio scenes with a special emphasis on natural audio scenes. One of the driving goals behind this work is to develop tools for monitoring the presence of animals in areas of interest based on Their vocalisations. This task, Which Often an occurs in the evaluation of nature conservation measures, leads to a number of subproblems to audio scene analysis.
In order to develop and evaluate pattern recognition algorithms for animal sounds, a representative collection of sounds tested"

'via Blog this'

Syndicated 2013-05-21 19:29:00 from sness

21 May 2013 etbe   » (Master)

No Backups WTF

Some years ago I was working on a project that involved a database cluster of two Sun E6500 servers that were fairly well loaded. I believe that the overall price was several million pounds. It’s the type of expensive system where it would make sense to spend adequately to do things properly in all ways.

The first interesting thing was the data center where it was running. The front door had a uniformed security guard and a sign threatening immediate dismissal for anyone who left the security door open. The back door was wide open for the benefit of the electricians who were working there. Presumably anyone who had wanted to steal some servers could have gone to the back door and asked the electricians for assistance in removing them.

The system was poorly tested. My colleagues thought that with big important servers you shouldn’t risk damage by rebooting them. My opinion has always been that rebooting a cluster should be part of standard testing and that it’s especially important with clusters which have more interesting boot sequences. But I lost the vote and there was no testing of rebooting.

Along the way there were a number of WTFs in that project. One of which was when the web developers decided to force all users to install the latest beta release of Internet Explorer, a decision that was only revoked when the IE install process broke MS-Office on the PC of a senior manager. Another was putting systems with a default Solaris installation live on the Internet with all default services running, there’s never a reason for a database server to be directly accessible over the Internet.

No Backups At All

But I think that the most significant failing was the decision not to make any backups. This wasn’t merely forgetting to make backups, when I raised the issue I received a negative reaction from almost everyone. As an aside I find it particularly annoying when someone implies that I want backups because I am likely to stuff things up.

There are many ways of proving that there’s a general lack of competence in the computer industry. But I think that one of the best is the number of projects where the person who wants backups has their competence questioned instead of all the people who don’t want backups.

A decision to make no backups relies on one of two conditions, either the service has to be entirely unimportant or you need to have no bugs in the OS or hardware defects that can corrupt data, no application bugs, and a team of sysadmins who never make mistakes. The former condition raises the question of why the service is being run and the latter is impossible.

As I’m more persistent than most people I kept raising the issue via email and adding more people to the CC list until I got a positive reaction. Eventually I CC’d someone who responded with “What the fuck” which I consider to be a reasonable response to a huge and expensive project with no backups. However the managers on the CC list regarded the use of profanity in email to be a much more serious problem. To the best of my knowledge there were never any backups of that system but the policy on email was strongly enforced.

This is only a partial list of WTF incidents that assisted in my decision to leave the UK and migrate to the Netherlands.

Not Doing Much

About a year after leaving I returned to London for a holiday and had dinner with a former colleague. When I asked what he was working on he said “Not much“. It turned out that proximity to the nearest manager determined the amount of work that was assigned. As his desk was a long way from the nearest manager he had spent about 6 months getting paid to read Usenet. That wasn’t really a surprise given my observations of the company in question.

Related posts:

  1. Red Hat, Microsoft, and Virtualisation Support Red Hat has just announced a deal with MS for...
  2. The Security Benefits of Automation Some Random WTFs The Daily WTF is an educational and...
  3. Rackspace RHEL4 updates A default RHEL4 install of a Rackspace (*) server contains...

Syndicated 2013-05-21 09:43:37 from etbe - Russell Coker

21 May 2013 fabrice   » (Journeyer)

Fabrication du pneu Michelin Vidéo n°53 Auteur Jean Michel Bonnemoy – GRAVURE CAOUTCHOUC ARTISTIQUE

Fabrication du pneu Michelin Vidéo n°53 Auteur Jean Michel Bonnemoy – GRAVURE CAOUTCHOUC ARTISTIQUE.

Syndicated 2013-05-21 09:25:02 from Fabrice's blog

21 May 2013 etbe   » (Master)

Advice on Buying a PC

A common topic of discussion on computer users’ group mailing lists is advice on buying a PC. I think that most of the offered advice isn’t particularly useful with an excessive focus on building or upgrading PCs and on getting the latest and greatest. So I’ll blog about it instead of getting involved in more mailing-list debates.

A Historical Perspective – the PC as an Investment

In the late 80′s a reasonably high-end white-box PC cost a bit over $5,000 in Australia (or about $4,000 without a monitor). That was cheaper than name-brand PCs which cost upwards of $7,000 but was still a lot of money. $5,000 in 1988 would be comparable to $10,000 in today’s money. That made a PC a rather expensive item which needed to be preserved. There weren’t a lot of people who could just discard such an investment so a lot of thought was given to upgrading a PC.

Now a quite powerful desktop PC can be purchased for a bit under $400 (maybe $550 if you include a good monitor) and a nice laptop is about the same price as a desktop PC and monitor. Laptops are almost impossible to upgrade apart from adding more RAM or storage but hardly anyone cares because they are so cheap. Desktop PCs can be upgraded in some ways but most people don’t bother apart from RAM, storage, and sometimes a new video card.

If you have the skill required to successfully replace a CPU or motherboard then your time is probably worth enough that getting more value out of a PC that was worth $400 when new and is worth maybe $100 when it’s a couple of years old probably isn’t a good investment.

Times have changed and PCs just aren’t worth enough to be bothered upgrading. A PC is a disposable item not an investment.

Buying Something Expensive?

There are a range of things that you can buy. You can spend $200 on a second-hand PC that’s a couple of years old, $400 on a new PC that’s OK but not really fast, or you can spend $1000 or more on a very high end PC. The $1000 PC will probably perform poorly when compared to a PC that sells for $400 next year. The $400 PC will probably perform poorly when compared to the second-hand systems that are available next year.

If you spend more money to get a faster PC then you are only getting a faster PC for a year until newer cheaper systems enter the market.

As newer and better hardware is continually being released at low enough prices that make upgrades a bad deal I recommend just not buying expensive systems. For my own use I find that e-waste is a good source of hardware. If I couldn’t do that then I’d buy from an auction site that specialises in corporate sales, they have some nice name-brand systems in good condition at low prices.

One thing to note is that this is more difficult for Windows users due to “anti-piracy” features. With recent versions of Windows you can’t just put an old hard drive in a new PC and have it work. So the case for buying faster hardware is stronger for Windows than for Linux.

That said, $1,000 isn’t a lot of money. So spending more money for a high-end system isn’t necessarily a big deal. But we should keep in mind that it’s just a matter of getting a certain level of performance a year before it is available in cheaper systems. Getting a $1,000 high-end system instead of a $400 cheap system means getting that level of performance maybe a year earlier and therefore at a price premium of maybe $2 per day. I’m sure that most people spend more than $2 per day on more frivolous things than a faster PC.

Understanding How a Computer Works

As so many things are run by computers I believe that everyone should have some basic knowledge about how computers work. But a basic knowledge of computer architecture isn’t required when selecting parts to assemble to make a system, one can know all about selecting a CPU and motherboard to match without understanding what a CPU does (apart from a vague idea that it’s something to do with calculations). Also one can have a good knowledge of how computers work without knowing anything about the part numbers that could be assembled to make a working system.

If someone wants to learn about the various parts on sale then sites such as Tom’s Hardware [1] provide a lot of good information that allows people to learn without the risk of damaging expensive parts. In fact the people who work for Tom’s Hardware frequently test parts to destruction for the education and entertainment of readers.

But anyone who wants to understand computers would be better off spending their time using any old PC to read Wikipedia pages on the topic instead of spending their time and money assembling one PC. To learn about the basics of computer operation the Wikipedia page for “CPU” is a good place to start. Then the Wikipedia page for “hard drive” is a good start for learning about storage and the Wikipedia page for Graphics Processing Unit to learn about graphics processing. Anyone who reads those three pages as well as a selection of pages that they link to will learn a lot more than they could ever learn by assembling a PC. Of course there’s lots of other things to learn about computers but Wikipedia has pages for every topic you can imagine.

I think that the argument that people should assemble PCs to understand how they work was not well supported in 1990 and ceased to be accurate once Wikipedia became popular and well populated.

Getting a Quality System

There are a lot of arguments about quality and reliability, most without any supporting data. I believe that a system designed and manufactured by a company such as HP, Lenovo, NEC, Dell, etc is likely to be more reliable than a collection of parts uniquely assembled by a home user – but I admit to a lack of data to support this belief.

One thing that is clear however is the fact that ECC RAM can make a significant difference to system reliability as many types of error (including power problems) show up as corrupted memory. The cheapest Dell PowerEdge server (which has ECC RAM) is advertised at $699 so it’s not a feature that’s out of reach of regular users.

I think that anyone who makes claims about PC reliability and fails to mention the benefits of ECC RAM (as used in Dell PowerEdge tower systems, Dell Precision workstations, and HP XW workstations among others) hasn’t properly considered their advice.

Also when discussing overall reliability the use of RAID storage and a good backup scheme should be considered. Good backups can do more to save your data than anything else.

Conclusion

I think it’s best to use a system with ECC RAM as a file server. Make good backups. Use ZFS (in future BTRFS) for file storage so that data doesn’t get corrupted on disk. Use reasonably cheap systems as workstations and replace them when they become too old.

Update: I find it rather ironic when a discussion about advice on buying a PC gets significant input from people who are well paid for computer work. It doesn’t take long for such a discussion to take enough time that the people involved could spent their time working instead, put enough money in a hat to buy a new PC for the user in question, and still had money left over.

Related posts:

  1. Buying Old PCs I install quite a number of internet gateway machines for...
  2. Buying a Laptop from Another Country Mary Gardiner has written a lazyweb post asking about how...
  3. IT Recruiting Agencies – Advice for Contract Workers I read an interesting post on Advogato about IT recruiting...

Syndicated 2013-05-21 04:58:03 from etbe - Russell Coker

21 May 2013 etbe   » (Master)

Advice on Buying a PC

A common topic of discussion on computer users’ group mailing lists is advice on buying a PC. I think that most of the offered advice isn’t particularly useful with an excessive focus on building or upgrading PCs and on getting the latest and greatest. So I’ll blog about it instead of getting involved in more mailing-list debates.

A Historical Perspective – the PC as an Investment

In the late 80′s a reasonably high-end white-box PC cost a bit over $5,000 in Australia (or about $4,000 without a monitor). That was cheaper than name-brand PCs which cost upwards of $7,000 but was still a lot of money. $5,000 in 1988 would be comparable to $10,000 in today’s money. That made a PC a rather expensive item which needed to be preserved. There weren’t a lot of people who could just discard such an investment so a lot of thought was given to upgrading a PC.

Now a quite powerful desktop PC can be purchased for a bit under $400 (maybe $550 if you include a good monitor) and a nice laptop is about the same price as a desktop PC and monitor. Laptops are almost impossible to upgrade apart from adding more RAM or storage but hardly anyone cares because they are so cheap. Desktop PCs can be upgraded in some ways but most people don’t bother apart from RAM, storage, and sometimes a new video card.

If you have the skill required to successfully replace a CPU or motherboard then your time is probably worth enough that getting more value out of a PC that was worth $400 when new and is worth maybe $100 when it’s a couple of years old probably isn’t a good investment.

Times have changed and PCs just aren’t worth enough to be bothered upgrading. A PC is a disposable item not an investment.

Buying Something Expensive?

There are a range of things that you can buy. You can spend $200 on a second-hand PC that’s a couple of years old, $400 on a new PC that’s OK but not really fast, or you can spend $1000 or more on a very high end PC. The $1000 PC will probably perform poorly when compared to a PC that sells for $400 next year. The $400 PC will probably perform poorly when compared to the second-hand systems that are available next year.

If you spend more money to get a faster PC then you are only getting a faster PC for a year until newer cheaper systems enter the market.

As newer and better hardware is continually being released at low enough prices that make upgrades a bad deal I recommend just not buying expensive systems. For my own use I find that e-waste is a good source of hardware. If I couldn’t do that then I’d buy from an auction site that specialises in corporate sales, they have some nice name-brand systems in good condition at low prices.

One thing to note is that this is more difficult for Windows users due to “anti-piracy” features. With recent versions of Windows you can’t just put an old hard drive in a new PC and have it work. So the case for buying faster hardware is stronger for Windows than for Linux.

That said, $1,000 isn’t a lot of money. So spending more money for a high-end system isn’t necessarily a big deal. But we should keep in mind that it’s just a matter of getting a certain level of performance a year before it is available in cheaper systems. Getting a $1,000 high-end system instead of a $400 cheap system means getting that level of performance maybe a year earlier and therefore at a price premium of maybe $2 per day. I’m sure that most people spend more than $2 per day on more frivolous things than a faster PC.

Understanding How a Computer Works

As so many things are run by computers I believe that everyone should have some basic knowledge about how computers work. But a basic knowledge of computer architecture isn’t required when selecting parts to assemble to make a system, one can know all about selecting a CPU and motherboard to match without understanding what a CPU does (apart from a vague idea that it’s something to do with calculations). Also one can have a good knowledge of how computers work without knowing anything about the part numbers that could be assembled to make a working system.

If someone wants to learn about the various parts on sale then sites such as Tom’s Hardware [1] provide a lot of good information that allows people to learn without the risk of damaging expensive parts. In fact the people who work for Tom’s Hardware frequently test parts to destruction for the education and entertainment of readers.

But anyone who wants to understand computers would be better off spending their time using any old PC to read Wikipedia pages on the topic instead of spending their time and money assembling one PC. To learn about the basics of computer operation the Wikipedia page for “CPU” is a good place to start. Then the Wikipedia page for “hard drive” is a good start for learning about storage and the Wikipedia page for Graphics Processing Unit to learn about graphics processing. Anyone who reads those three pages as well as a selection of pages that they link to will learn a lot more than they could ever learn by assembling a PC. Of course there’s lots of other things to learn about computers but Wikipedia has pages for every topic you can imagine.

I think that the argument that people should assemble PCs to understand how they work was not well supported in 1990 and ceased to be accurate once Wikipedia became popular and well populated.

Getting a Quality System

There are a lot of arguments about quality and reliability, most without any supporting data. I believe that a system designed and manufactured by a company such as HP, Lenovo, NEC, Dell, etc is likely to be more reliable than a collection of parts uniquely assembled by a home user – but I admit to a lack of data to support this belief.

One thing that is clear however is the fact that ECC RAM can make a significant difference to system reliability as many types of error (including power problems) show up as corrupted memory. The cheapest Dell PowerEdge server (which has ECC RAM) is advertised at $699 so it’s not a feature that’s out of reach of regular users.

I think that anyone who makes claims about PC reliability and fails to mention the benefits of ECC RAM (as used in Dell PowerEdge tower systems, Dell Precision workstations, and HP XW workstations among others) hasn’t properly considered their advice.

Also when discussing overall reliability the use of RAID storage and a good backup scheme should be considered. Good backups can do more to save your data than anything else.

Conclusion

I think it’s best to use a system with ECC RAM as a file server. Make good backups. Use ZFS (in future BTRFS) for file storage so that data doesn’t get corrupted on disk. Use reasonably cheap systems as workstations and replace them when they become too old.

Related posts:

  1. Buying Old PCs I install quite a number of internet gateway machines for...
  2. IT Recruiting Agencies – Advice for Contract Workers I read an interesting post on Advogato about IT recruiting...
  3. Buying a Laptop from Another Country Mary Gardiner has written a lazyweb post asking about how...

Syndicated 2013-05-21 04:57:03 from etbe - Russell Coker

21 May 2013 dmarti   » (Master)

What's up with the Q and A posts?

Just realized that I have gotten into the bad habit of writing stuff on a web questions and answers site instead of here. (cue kid from The Simpsons saying HA HA!)

Saving some, deleting the rest.

Syndicated 2013-05-21 03:27:46 from Don Marti

21 May 2013 dmarti   » (Master)

What are the benefits of participating in open source?

Depending on the project and your role in it, you might get lots of different benefits.

  • Learn new languages and tools to keep your skill set current.

  • Practice techniques that you might not be able to justify putting time into in a corporate environment. (For example, coding for extreme security or efficiency or minimum power and memory usage.)

  • Make connections with people outside your company.

  • Signal your technical competence and ability to work with others. Often, willingness to put time into open source depends on the job market for high-skill non-management programmers. The more that the hiring process depends on formal education and certification, and the less input it has from peers, the less incentive that a programmer has to Signal his or her skill using open source.

  • Talk with real users about bugs and features without a company filter, to get a better understanding of a software problem space.

Syndicated 2013-05-21 03:19:26 from Don Marti

21 May 2013 sness   » (Journeyer)

Yitang Zhang Proves 'Landmark' Theorem in Distribution of Prime Numbers | Simons Foundation

Yitang Zhang Proves 'Landmark' Theorem in Distribution of Prime Numbers | Simons Foundation: "“Basically, no one knows him,” said Andrew Granville, a number theorist at the Université de Montréal. “Now, suddenly, he has proved one of the great results in the history of number theory.”"

'via Blog this'

Syndicated 2013-05-21 00:14:00 from sness

21 May 2013 proclus   » (Master)

Repeal the #Monsanto Protection Act - #gmo

Hi,

I signed a petition to The United States Senate which says:

"Written anonymously and passed in secret, the Monsanto Protection Act
allows agri-business to ignore court orders blocking the sale of
genetically-engineered seeds.

I support the repeal of this outrageous special interest provision -
and demand a public vote in the U.S. Senate."

Will you sign this petition? Click here:

http://pac.petitions.moveon.org/sign/repeal-the-monsanto-protecti-3?source=s....

Thanks!

Syndicated 2013-05-21 20:30:00 (Updated 2013-05-21 20:30:23) from proclus

20 May 2013 proclus   » (Master)

Tell Governor O'Malley to Ban #Fracking in Maryland!

Hi,

Governor O'Malley's fracking commission released a report warning
about the dangers of fracking. But instead of heeding the
recommendations of the report, Governor O'Malley is trying to expedite
rules for fracking.

We already know that fracking causes significant impacts to our air,
water, agriculture, public health, and climate. There is no place for
fracking in our state. But the Governor is ignoring the
recommendations from his own commission to open our state up to
fracking by proposing even weaker regulations that cater to the oil &
gas industry.

Tell Governor O'Malley he needs protect Marylanders and stop pursuing fracking.

That's why I signed a petition to Governor Martin O'Malley.

Will you sign this petition? Click here:

http://petitions.moveon.org/sign/tell-governor-omalley?source=s.em.cp&r_by=98...

Thanks!

Syndicated 2013-05-20 19:40:00 (Updated 2013-05-20 19:40:08) from proclus

20 May 2013 jarod   » (Journeyer)

Usando ckeditor e jquery validate juntos

Mais simples impossível:

$('#form1').validate({
			ignore: [],
			rules: {
				corpo : {
					required: function()
					{
						CKEDITOR.instances.corpo.updateElement();
					}
				}
			}
		})

Syndicated 2013-05-20 14:19:41 from devlog

20 May 2013 louie   » (Master)

At the Wikimedia Foundation (for, um, three months now)

Since it was founded 12 years ago this week, Wikipedia has become an indispensable part of the world’s information infrastructure. It’s a kind of public utility: You turn on the faucet and water comes out; you do an Internet search and Wikipedia answers your question. People don’t think much about who creates it, but you should. We do it for you, with love.

Wikimedia Foundation Executive Director Sue Gardner, from http://blog.wikimedia.org/2013/01/14/wikipedia-the-peoples-encyclopedia/

As Sue says, the people who create Wikipedia are terrific. I’m lucky enough to say that I’ve just wrapped up my first three months as their lawyer – as Deputy General Counsel at the Wikimedia Foundation. Consider this the personal announcement I should have made three months ago :)

Wikimania 2012 Group Photograph, by Helpameout, under CC-BY-SA 3.0, available from https://commons.wikimedia.org/wiki/File:Wikimania_2012_Group_Photograph-0001.jpg
Wikimania 2012 Group Photograph, by Helpameout, under CC-BY-SA 3.0.

Greenberg Traurig was terrific for me: Heather has a wealth of knowledge and experience about how to do deals (both open source and otherwise), and through her, I did a lot of interesting work for interesting clients. Giving up that diversity and experience was the hardest part of leaving private practice.

Based on the evidence of the first three months, though, I made a great choice – I’ve replaced diversity of clients with a vast diversity of work; replaced one experienced, thoughtful boss with one of equal skill but different background (so I’m learning new things); and replaced the resources (and distance) of a vast firm with a small but tight and energized team. All of these have been wins. And of course working on behalf of this movement is a great privilege, and (so far) a pleasure. (With no offense to GT, pleasure is rarely part of the package at a large firm.)

The new scope of the work is perhaps the biggest change. Where I previously focused primarily on technology licensing, I’m now an “internet lawyer” in the broadest sense of the word: I, my (great) team, and our various strong outside counsel work on topics from employment contracts, to privacy policies, to headline-grabbing speech issues, to patent/trademark/copyright questions – it is all over the place. This is both challenging, and great fun – I couldn’t ask for a better place to be at this point in my life. (And of course, being always on the side of the community is great too – though I did more of that at Greenberg than many people would assume.)

I don’t expect that this move will have a negative impact on my other work in the broader open source community. If anything, not focusing on licensing all day at work has given me more energy to work on OSI-related things when I get home, and I have more flexibility to travel and speak with and for various communities too. (I’m having great fun being on the mailing lists of literally every known open source license revision community, for example. :)

If you’d like to join us (as we work to get the next 1/2 billion users a month), there are a lot of opportunities open right  now, including one working for me on my team, and some doing interesting work at the overlap between community, tech, and product management. Come on over – you won’t regret it :)

Syndicated 2013-05-20 14:00:49 from Luis Villa » Blog

20 May 2013 Rich   » (Master)

What I've learned at SourceForge

Today I'll be leaving SourceForge and taking a role at RedHat. Please don't think for a moment that it's because I don't like SourceForge. I continue to think that SourceForge does community *way* better than either Github or Google Code, and while there are places where the platform can improve, the team that's working on it is one of the finest bunch of engineers I've ever had the privilege of working with.

Here's a few of the many things I've learned at SourceForge.

People are passionate

Every time I talk to anybody about my job, I mention two projects: PonyKart and OpenMRS. These projects illustrate to me how people can be passionate about anything. Having talked with the leads of both of these projects, I'm blown away by their passion for excellence.

Of course, these projects could hardly be more different.

PonyKart is a My Little Pony themed Mario-Kart style game. It's fun. The physics are well done. The courses are well designed. The community is very engaged. And it has My Little Pony characters in it. The guys that did this project wanted it to be a MLP game, but they also wanted it to be excellent. They wanted it to be fun. They wanted it to be *good*. They are passionate about it.

The OpenMRS project is a medical records system that was developed for a hospital in Kenya that had a hacked-together Access database monstrosity, and it was faster and easier for these guys to hack something together than to try to fix what was there. But that wasn't enough. They were passionate. They wanted it to be done right, and they wanted hospitals all over the world to benefit from it. And now they have a non-profit dedicated to giving this product away to hospitals in developing nations that need it. These guys are my heroes.

I am continually blown away by the quest for excellence, and the vast range of ways that it manifests itself.

People are kind

I've met amazing people in my time at SourceForge. These people are helpful, kind, patient, and, as I've mentioned, passionate. For the most part, people get that I'm human and can't solve all of their problems immediately. They get that we all have the limitation of time and resources.

Most people *don't* throw tantrums or demand their way. For this I am very grateful. I'm glad to have met a few of the nice people.

People are cruel

Sure, SourceForge is the underdog right now. I get that. It's not necessary to be a jerk.

It's hard to remember, when people are being jerks, that they're in the minority. Most people are, in fact, nice. But the jerks are very loud.

I'd like to remind the jerks that the folks who happen to be developing their project on the SourceForge platform are passionate, and they are pragmatic, and they are doing something useful while you fling mud at them.

'nuff said.

People are pragmatic

Tools are tools. They are not your children.

For the most part, people want to get a job done, and they use the tools they have, because the focus is the task, not the tools. Once, we used CVS and MailMan and we *liked* it. SVN is better. Some people like Git better. But if we had to use CVS and MailMan, you know what? We'd still get stuff done.

Religious debates over the relative merits of DVCS and CVCS systems are all well and good over beer at conferences, but most of us have a job to do, and we don't have time for that indulgence. You may, in fact, be right, but I don't have that kind of time.

I grow very weary of the This vs That flame wars that have characterized the IT world for so long. Perl vs Python, VI vs Emacs, Linux vs Windows vs Mac, Git vs SVN. The thing is, if you're a professional, you need to know *all* of them, and you're not coming across as brilliant, you're coming across as only knowing one tool. Nice hammer. Sometimes a screwdriver is useful.

But, much as most people are nice, it turns out most people are pragmatic. Most people don't have time for those debates either. They want to get their job done. I really appreciate having met a lot of those kinds of people.

Syndicated 2013-05-20 12:03:49 (Updated 2013-05-20 12:05:14) from Notes In The Margin

20 May 2013 dkg   » (Master)

gpg --ask-cert-level considered harmful

Occasionally, someone asks me whether we should encourage use of the --ask-cert-level option when certifying OpenPGP keys with gpg. I see no good reason to use this option, and i think we should discourage people from trying to use it. I don't think there is a satisfactory answer to the question "how will specifying the level of identity certification concretely benefit anyone involved?", and i don't see why we should want one.

gpg gets it absolutely right by not asking users this question by default. People should not be enabling this option.

Some background: gpg's --ask-cert-level option allows the user who is making an OpenPGP identity certification to indicate just how sure they are of the identity they are certifying. The user's choice is then mapped into four levels of OpenPGP certification of a User ID and Public-Key packet, which i'll refer to by their signature type identifiers in the OpenPGP spec:

0x10: Generic certification
The issuer of this certification does not make any particular assertion as to how well the certifier has checked that the owner of the key is in fact the person described by the User ID.
0x11: Persona certification
The issuer of this certification has not done any verification of the claim that the owner of this key is the User ID specified.
0x12: Casual certification
The issuer of this certification has done some casual verification of the claim of identity.
0x13: Positive certification
The issuer of this certification has done substantial verification of the claim of identity.

Most OpenPGP implementations make their "key signatures" as 0x10 certifications. Some implementations can issue 0x11-0x13 certifications, but few differentiate between the types.

By default (if --ask-cert-level is not supplied), gpg issues certificates ("signs keys") using 0x10 (generic) certifications, with the exception of self-sigs, which are made as type 0x13 (positive).

When interpreting certifications, gpg does distinguish between different certifications in one particular way: 0x11 (persona) certifications are ignored; other certifications are not. (users can change this cutoff with the --min-cert-level option, but it's not clear why they would want to do so).

So there is no functional gain in declaring the difference between a "normal" certification and a "positive" one, even if there were a well-defined standard by which to assess the difference between the "generic" and "casual" or "positive" levels; and if you're going to make a "persona" certification, you might as well not make one at all.

And it gets worse: the problem is not just that such an indication is functionally useless; encouraging people to make these kind of assertions actively encourages leaks of a more-detailed social graph than just encouraging everyone to use the default blanket 0x13-for-self-sigs, 0x10-for-everyone-else policy.

A richer public social graph means more data that can feed the ravenous and growing appetite of the advertising-and-surveillance regimes. i find these regimes troubling. I admit that people often leak much more information than this indication of "how well do you know X" via tools like Facebook, but that's no excuse to encourage them to leak still more or to acclimatize people to the idea that the details of their personal relationships should by default be public knowledge.

Lastly, the more we keep the OpenPGP network of identity certifications (a.k.a. the "web of trust") simple, the easier it is to make sensible and comprehensible and predictable inferences from the network about whether a key really does belong to a given user. Minimizing the complexity and difficulty of deciding to make a certification helps people streamline their signing processes and reduces the amount of cognitive overhead people spend just building the network in the first place.

Syndicated 2013-05-20 07:21:00 from Weblogs for dkg

20 May 2013 danstowell   » (Journeyer)

An app for a conference - with a surprising set of features

I'm going to a conference next week, and the conference invites me to "Download the app!" Well, OK, you think, maybe a bit of overkill, but it would be useful to have an app with schedules etc. Here is the app listed on google play.

Oh and here's a list (abbreviated) of permissions that the app requires:

"""This application has access to the following:

  • Your precise location (GPS and network-based)
  • Full network access
  • Connect and disconnect from Wi-Fi - Allows the app to connect to and disconnect from Wi-Fi access points and to make changes to device configuration for Wi-Fi networks.
  • Read calendar events plus confidential information
  • Add or modify calendar events and send email to guests without owners' knowledge
  • Read phone status and identity
  • Camera - take pictures and videos. This permission allows the app to use the camera at any time without your confirmation.
  • Modify your contacts - Allows the app to modify the data about your contacts stored on your device, including the frequency with which you've called, emailed, or communicated in other ways with specific contacts. This permission allows apps to delete contact data.
  • Read your contacts - Allows the app to read data about your contacts stored on your device, including the frequency with which you've called, emailed, or communicated in other ways with specific individuals. This permission allows apps to save your contact data, and malicious apps may share contact data without your knowledge.
  • Read call log - Allows the app to read your device's call log, including data about incoming and outgoing calls. This permission allows apps to save your call log data, and malicious apps may share call log data without your knowledge.
  • Write call log - Allows the app to modify your device's call log, including data about incoming and outgoing calls. Malicious apps may use this to erase or modify your call log.
  • Run at start-up.

"""

Now tell me, what fraction of those permissions should a conference-information app legitimately use? (I've edited out some of the mundane ones.) Should ANYONE install this on their phone/tablet?

Syndicated 2013-05-20 00:06:07 (Updated 2013-05-20 00:06:25) from Dan Stowell

20 May 2013 danstowell   » (Journeyer)

Mountain Sun IPAs

Not only is Boulder Colorado the Hebden Bridge of the USA (I'm told it's "where all the hippies went"), but it also has a really impressive amount of craft beer. Following a tip-off (thanks Bob), tonight I went to sample a few IPAs in the Mountain Sun pub. For the education of no-one except myself, here are my tasting notes - first in visual form:

Untitled

then in words:

  • Illusion Dweller IPA: described as "biscuity" and "english-style" but still with a hoppy sour tang at the back of the mouth, very clear and nice. Tastes like a modern American IPA to me, doesn't remind me of England - but a great balance of tang and biscuit, super drinkable.
  • Vagabond IPA: almost a pure grapefruit hit, reminds me of that Metal Man which I loved in Ireland.
  • FYIPA: "piney" is the main impression. However it's not got the sharp piney poke of Becherovka which I really like. Maybe it's unfair to compare a beer against a spirit, but Becherovka integrates its alcohol flavour in with the pine, whereas FYIPA has a kinda noticeable alcohol taste separate from the pine, which is a bit of a shame IMHO.
  • Hop Vivant: yes it's a hoppy IPA, but more balanced, multivalent, colourful than the others I'm tasting tonight. Not a session beer, a bit too rich for that.
  • Cat Burglar: black IPAs are really confusing. Erm. I like it less than the Thornbridge Raven, but I don't know why.

Not to look a gift-horse in the mouth, these are all lovely beers, very well served, but when they're sitting next to each other I have to compare them. Hence the ups and downs in the notes. The winner for me is definitely the Illusion Dweller. The ratings over at ratebeer tell almost the opposite story for some reason, with Illusion Dweller the only one not scoring ninety-something. Who knows what to make of that.

Syndicated 2013-05-19 23:13:49 (Updated 2013-05-19 23:23:35) from Dan Stowell

19 May 2013 mako   » (Master)

The Cost of Inaccessibility at the Margins of Relevance

I use RSS feeds to keep up with academic journals. Because of an undocumented and unexpected feature (bug?) in my (otherwise wonderful) free software newsreader NewsBlur, many articles published over the last year were marked as having been read before I saw them.

Over the last week, I caught up. I spent hours going through abstracts and downloading papers that looked interesting or relevant to my research. Because I did this for hundreds of articles, it gave me an unusual opportunity to reflect on my journal reading practices in a systematic way.

On a number of occasions, there were potentially interesting articles in non-open access journals that neither MIT nor Harvard subscribes to and that were otherwise not accessible to me. In several cases where the research was obviously important to my work, I made an interlibrary request, emailed the papers’ authors for copies, or tracked down a colleague at an institution with access.

Of course, articles that look potentially interesting from the title and abstract often end up being less relevant or well executed on closer inspection. I tend to cast a wide net, skim many articles, and put them aside when it’s clear that the study is not for me. This week, I downloaded many of these possibly relevant papers to, at least, give a skim. But only if I could download them easily. On three or four occasions, I found inaccessible articles at this margin of relevance. In these cases, I did not bother trying to track down the articles.

Of course, what appear to be marginally relevant articles sometimes end up being a great match for my research and I will end up citing and building on the work. I found several suprisingly interesting papers last week. The articles that were locked up have no chance at this.

When people suggest that open access hinders the spread of scholarship, a common retort is that the people who need the work have or can finagle access. For the papers we know we need, this might be true. As someone with access to two of the most well endowed libraries in academia who routinely requests otherwise inaccessible articles through several channels, I would have told you, a week ago, that locked-down journals were unlikely to keep me from citing anybody.

So it was interesting watching myself do a personal cost calculation in a way that sidelined published scholarship — and that open access publishing would have prevented. At the margin of relevance to ones research, open access may make a big difference.

Syndicated 2013-05-19 16:00:05 (Updated 2013-05-20 15:18:41) from copyrighteous

19 May 2013 sness   » (Journeyer)

Google I/O 2013: Keynote - YouTube

Google I/O 2013: Keynote - YouTube: "