A week of tweets: 2010-01-31
- Off to LA again after way too short night. #
- Yay hertz, thanks for the c300 again. Much better than the navigator. #
- This is full of win http://www.youtube.com/watch?v=wUDmI9RT8Z8 4chan touches America's Top Model. Excellent Analysis by Know Your Meme #
- Yay East Oakland! http://www.youtube.com/watch?v=FO0QVnUPEew #
- WTF? My flight UAL ORD-YYZ is sched to leave at 9:32, boarding starts 9:12. Got to gate at 9:15. Plane full, had to gate check from 1st #
- Wow, hertz YYZ is really lame compared to LAX. "Sorry, I have your reservation but no cars. I have 1 yaris and a minivan at the garage." #
- Grand Caravan! FTW! Now, off to the minimall to pick up MILFs. It has a 30GB HD built in. WOOt #
- At democamp guelph. Go Guelph! #
- Berryblab.com author demoing says: yah, the iPhone is pretty cool… If you're a girl. #
- http://www.democampguelph.com/ go figure… Like dorkbot, but no fire. #
- Oh Canada! It is always snowing in canada. And bonus commute from guelph to waterloo. #
- Meta: http://suicidemachine.org/ #
- 14 degrees is the high today in guelph. Good time to go home. #
- http://twitpic.com/10cd8h – Very cold and very snowy in guelph – it was fun being in a real blizzard. #
- http://twitpic.com/10cddq – Just for lolz, ran out into snow naked. Not much contrast with "winter tan" #
- http://twitpic.com/10cdie – Amazing! Saw a snow leopard prowling around in blizzard. #
- http://twitpic.com/10cdoh – You can totally tell the leopard is looking at me and thinking "I can haz cheezeburger?" #
- YYZ to ORD via the OTHER maple leaf lounge! #
- Security takes about an hour at YYZ now. Stick hands down pants, submit for mass spectrography. OK, nothing but crotch funk, you pass. #
- Two women in lounge spent entire visit complaining about how gross process was, thought crotch funk would be transferred to their stuff. #
- http://twitpic.com/10dl6i – Oops, sorry about the NSF snow pic – censored version. still very snowy in Canada. #
- http://twitpic.com/10dl7g – Oops, sorry about the NSF snow pic – censored version. still very snowy in Canada. #
- Finally home with @phragments and maybe my luggage. It's Tops waiting… #
- Whee. Had to check luggage at YYZ. @UnitedAirlines left it at ORD, of course. 3rd time this year and still Jan. in reply to UnitedAirlines #
- Nice day for a walk in the cemetary with @phragments. #
Powered by Twitter Tools
Ceiling Cat Is Watching You
For reasons some people don’t understand, I think ceiling cat is pretty funny. Since my stray cats aren’t very good at behaving I made a paper one using a pattern from tubby paws. Now Ceiling Cat is watching. The best part is I’m the only one who notices.
I think I need to install camera’s in ceiling cat’s eyes… new project.
Unbreaking FireFox SSL Behavior
I used to love firefox, but then somebody decided that users were way too stupid to make it through web browsing without an endless parade of warnings about SSL certs. The premise seems to be that:
- Valid certs are meaningful.
- Self-Signed or expired certs are indicative of a problem.
Neither is true.
(To a statistical certainty. Some user somewhere will be validly warned away from a phishing site someday.)
Valid certs mean next to nothing since the users that these warnings are targeted to (and me too) will never ever notice if they’re going to bankofamerica.com (or whatever BofA’s legitimate URL is) or bankomerica.com (assuming bankomerica isn’t a valid bank of america domain). Thus bankomerica can dupe bankofamerica’s website and get a perfectly valid cert and if users were dumb enough to believe that a lack of warnings indicated validity as the huge scary warnings effectively convey, then they’d be easy prey.
The only valid purpose of SSL is to secure communication between a server and a client so you can check your web mail at a cafe without worrying about being snooped and a self-signed cert does that just as well as one issued by the cert mafia. Sure, sure the giant cert authorities would love to take your $1,000 a year to give a your user’s some sort of guarantee that you’re really who you say you are, but that doesn’t make any difference at all in practice.
As for DNS hijacking so amazon.com goes to a spoof site where the transaction security is compromised (and in theory the self-signed cert would be a give-away) just mod-rewrite to http then redirect to amazoncheck0utservices.com and get a valid cert for it.
Besides, after users have been forced to dismiss a zillion intra-net “invalid” certs, they’ve learned to completely ignore the warnings and so automatically click through the scary and almost always pointless warnings FireFox generates. Or, like many people, users stop abandon the scary, irritating browser and go back to IE. Win. Oh wait… FAIL.
Secure DNSSEC is smart, but forget warning people into oblivion over self-signed certs, the net effect is to make the web less secure because site admins have to choose between absurd fees for certs or turning certs off. Until FireFox fixes this counterproductive behavior, there are two things that help. First, browse to about:config and set browser.ssl_override_behavior to “2”.
I’ve also found the Persepectives Plugin useful to reduce the number of pointless and irritating error warnings Firefox generates when it sees a cert that hasn’t fully paid up the protection racket extortion fees by using a polling mechanism, effectively saying (to a collection of referee sites) “ya’ll think this cert is ok?” and if they say “yeah…” then you get no error.
There fixes are helpful for those of us sufficiently skilled to use them, but unfortunately they won’t prevent users abandoning the endlessly “WOLF!” crying FireFox for IE.
A week of tweets: 2010-01-24
- Whee. Weather makes flying fun. Heavy rain in sf. Thanks @phragments for the upgrade cert. #
- Oh noe, not ANOTHER black navigator. Oh Hertz… At least it isn't a towncar. #
- Gangstagrass thumpin in the black rental Navigator. Just seems right. #
- Giant thunderbolt in santa monica… Very odd… #
- Lightning freaks these SoCal people right out. #
- Code Bravo! Excitement at TSA checkpoint. B must be pretty minor. #
- RT @Emergency_In_SF: URGENT: NATIONAL WEATHER SERVICE HAS ISSUED A TORNADO WARNING FOR SANTA CLARA AND SANTA CRUZ COUNTIES. weather fun! #
- It's Tops! #
- Best part of travel. #
- RT @Emergency_In_SF: State of Emergency: 5 CA counties (including SF) have been declared in "states of emergency" due to winter storms. #
- Ok for home defense, but… #
- Sometimes only a minigun will do #
- Mmmm… It's Tops again. This time in from LV with @phragments. #
Powered by Twitter Tools
Measures of Society
type “is ” into the Google search bar in FireFox and you get:
“why” is even funnier
I’ve always wondered why I can’t own a Canadian… thanks Google!
Rental Lincoln Navigator
Hertz gave me ANOTHER black Lincoln Navigator (this is different than last week’s) to try to drive through LA’s traumatic rainstorms in (thunder! OMG!). Nothing like the efficiency of driving a car that seats 7 for a commute. Fortunately I don’t have to drive far so the total environmental impact is at least minimized and largely offset by the hilarity value.
The car has power every crazy thing. Even the back seats fold down with a button push, necessary since it has become standard to have a power opening and closing trunk so you don’t strain your dainty little self as you drive around in your ginormous faux-tough SUV.
A funny touch is the in-mirror back up camera. Nice that it is full color, but the screen is small enough that you’d never see a puppy. On the other hand, the back window is so far away and so shrouded in black leather that the little color view is the best you’ve got. Puppies are free.
It is always fun to try to figure out the electronic entertainment systems in one of these things. The test is “can you get it working between LAX and Santa Monica without reading the manual.” Mercedes, yes. Lincoln no.
In the end I did get it reading off a USB stick (and the ipod, though the Microsoft SYNC UI for that is unusable. Odd that M$ is advertising SYNC in magazines as brandable feature for a new car when it sucks so bad: I’d avoid a car with M$ inside myself).
Once it was working, the only appropriate choice was Gangstagrass. Thanks @satiredun!
Best QA Evar!
Looks like the latest update of Motorola Phone Tools wasn’t quite ready to ship…
A Week of SUV Rentals
First, in Canada, I got a GMC Acadia, a moderately stupid SUV with seating for 7. It was snowing and so I suppose AWD was useful, but the only really good part about it was the heated seats. The gas expense was not so great…
The Acadia was fine as far as it went, but then my next rental, in Las Vegas, was a Lincoln Navigator. I’ve not run across one of these before (though not much different than the Escalade). It wasn’t horrible as a driving experience, though I was happy enough not to have to take it through any urban areas as I would have needed to upgrade the wheels. I mean stock rims… Seriously.
The heated seats worked fine in that one too, but the backup camera that emerged from behind a half-silvered rear-view mirror was pretty cool. Especially as looking back is pretty useless through a forest of headrests.
In both cases I was the only passenger. This added to the value of the experience.
At least in LA at the end of the week, Hertz gave me a lovely C300. I think the exact same one I had rented earlier. A lovely car that seems far less silly.
A week of tweets: 2010-01-17
- ((Starship Troopers + Dances With Wolves + The Lion King + Bryce^3 + (Lord of the Rings)^-1) * Jar Jar Binks) + Sigourney Weaver = Avatar #
- Trying new EB flight path suggested by @phragments: last flight to ORD, AM connect to ET destinations. Like redeye but w/ 5 hrs in real bed. #
- Damnit. Oven isn't working so my nuts are cold. Hate that. #
- Morons at crowne plaza ORD have totally useless VM and if you dial enough rndom nums to get front desk, cant give dirs to own shuttle. FAIL. #
- ORD B6 RCC redesign is an improvement. Lots of outlets. #
- OMG!! I haz found the user's guide to the WHOLE internet in my hotel room! Only 2 pages! Skip to chapter on 4C #
- Transport Canada has effectively killed CA-US travel. Nice work! no lines, fast wifi at the
Lounge. Response does what terrorism can't. #
- Wow most polite, most efficient screening yet: RCMP WIN. Plus who doesn't love a quick reacharound? Concourse empty Travel dead Canada Fail. #
- Plus the female half of my RCMP pair looked very, very good in body armor. Now to kill the hour allocated to screening, which took 5 min. #
- 2 new mm-wave "naked scanners" at term 2 YYZ but no lines: not us customs, nor security, nor 2nd search/fondle. No carry-on still annoying. #
- Yay @unitedairlines lost my priority tagged bag from YYZ to jfk. Meeting tomorrow naked. BS YYZ rules mean I have nothing. #
- Terorrists exploit allergic response. Trivial bite triggers anaphlactic shock, kills US economy. #
- Warning!! UAL RCC at LAX warning. After the refurb (to hospital style pale green) men's and women's rooms have been swapped. Look b4 peeing #
- And, not just new toilets, but btand new hz busses in la. Mmm new bus smell (really). #
- Attending Joe Davis' lecture at the California NANOSystems Institute auditorium. #rubisco #aliens #
- I like a rental car with inflation advice for 100+ speeds. #
- "Every drop counts". Nowhere more true than on a urinal. Thanks for the reminder, Toto. #
Powered by Twitter Tools