At the end of April I will be joining the
Guardian in London to
build a new developer program there.
This is a fantastic opportunity in many ways. Perhaps what’s most
appealing to me is the direction the Guardian is going — they are
totally focused on building a great online business, and it all starts
with great journalism. As Jeff Jarvis reported from a management meeting there about a year ago
--
California Reviews... And Decertifies... More ES&S E-Voting Machines
Thu, 27 Mar 2008 12:57:00 PST
Remember how e-voting firm ES&S was so
against
letting California's Secretary of State have an independent security
team review their e-voting machines? Well, now we know why. The state
had already released
one damning security report and
sued ES&S for giving the state uncertified machines. Now the state has come out with another report on more ES&S machines
and the story gets worse and worse and worse.
The good news is that California won't certify any of them. The bad
news is that ES&S appears to not only be belligerent in not wanting
to let California review its machines, but it also seems to be
incompetent as well. As Dan Wallach notes in reviewing the report,
ES&S appears to have outright ignored issues that the state asked
them to address. As for the machines themselves? There seem to be all
sorts of problems, including an awful lot of data stored in cleartext
rather than encrypted, easily accessible and easily changed or
corrupted data, and seldom-used and easily-broken password protection.
Physical locks were all easily picked (some within 5 seconds, the rest
within a minute). In other words, the security is a near total joke.
This, despite the fact that people have been pointing out these kinds
of security concerns for over five years. I wonder if the guy from
ES&S who showed up a year ago and
told us all
we had no clue what we were talking about and swearing up and down that
the machines were safe will come back and explain these latest results.
--
<
Top tech startups in Europe?
Thu, 27 Mar 2008 14:23:14 +0000
The Red Herring has released it list of top 100 Tech startups in Europe
and they include a number of UK firms. Among the list (and I may have
missed some) is blinkBox, Bragster, Miomi, mydeco, Mydeo, Refresh
Mobile, Rummble, Silobreaker, SportsDo, StrategyEye, T5M, Taptu,
Webjam, Wonga, Zebtab, Zemanta, Trampoline Systems and Zygo
Communications.
--
This is serious problem. Many organizations including banks and
government agencies are guilty of this and send personal, confidential,
or proprietary emails in this manner.
<
http://blog.washingtonpost.com/securityfix/2008/03/they_told_you_not_to_reply.html>
"When businesses want to communicate with their customers via e-mail, many
send messages with a bogus return address, e.g. "somethinghere@donotreply.com."
The practice is meant to communicate to recipients that any replies
will go unread.
But when those messages are sent to an inactive e-mail address or the recipient
ignores the instruction and replies anyway, the missives don't just
disappear into the digital ether.
Instead, they land in Chet Faliszek's e-mail box."