WPA2 vulnerable

It seems the WPA2 encryption system used by most WiFi networks is badly broken:

This follows recent breaks in core security technologies like SSLStrip and Heartbleed.

People with good security practices like defence in depth and compartmentalization of sensitive information might not be too threatened by this. Those relying exclusively on the integrity of WPA2 may be in big trouble.

What are you sharing on your wireless network? Any file servers, cameras, or other sensitive systems?

Do you run your internet traffic through a second layer of encryption like a VPN and stick to HTTPS/TLS for sensitive websites?

Responding to violence intelligently

The often-excellent NPR Planet Money podcast (which ran an earlier episode about “Freeway” Rick) had two notably engaging recent segments.

One included an interesting account of the data-analysis-decision-action cycle in intelligence work, specifically when deciding if an assailant is an enemy counterintelligence agent or drug-addled mugger.

The other discussed policy and incentive problems in the area of kidnapping and ransom, including Canada’s supposed policy of not paying ransoms and prohibiting families from doing so.

Each is well worth a listen.

Fourth rule of the internet

A somewhat obvious rule of internet security to add to the first three:

  1. Against a sophisticated attacker, nothing connected to the internet is secure.
  2. Everything is internet now.
  3. You should probably worry more about being attacked online by your own government than by any other organization.
  4. Sensitive data about you is largely on the computers of other people who care little about your security.

Equifax is getting lots of attention right now, but consider also Deloitte, Adobe, Stratfor, Blizzard, LinkedIn, DropBox, Ashley Madison, last.fm, Snapchat, Adult Friend Finder, Patreon, Forbes, Yahoo, and countless others.

As Bruce Schneier points out, the only plausible path to reduce such breaches is for governments to make them far more painful and costly for corporations.

Major Apple purchases

It’s crazy how demanding web browsers have become.

Both my main computers are somewhat old, but they can run modern 3D games at low graphics settings and perform computationally-intensive tasks like converting RAW files to JPG. Nonetheless, I find both my iMac and my MacBook Pro routinely struggling to run GMail in Safari, Firefox, or Chrome.

If I wasn’t a PhD student, I would probably have replaced both computers years ago.

Tracking back through my archives, I have some records of major Apple purchases:

  • My 20 GB 4th gen iPod was $389 in 2004;
  • my 14″ 1.33 GHz G4 iBook was $1990 in 2005 (that was the computer I brought to England and used exclusively in Oxford) (iBook SN: 4H50911AS88);
  • my top-of-the-line 24″ iMac was $2,249 in 2008 (a gift to self for being gainfully employed, and the computer I am typing on now);
  • In May 2010 I paid $35 for Mac OS X 10.6.3 Snow Leopard!
  • I got one of many 160 GB iPod Classics for $279 in 2010 (still the best MP3 player ever; I need to replace the hard drive in my current one); and
  • I got my 13″ MacBook Pro for $1649 in 2011

I am pretty tied into the OS X universe. That’s how all my projects (academic, photographic, activist) are organized, including encrypted archives and backups.

I would love to get a Mac Pro (though apparently those available now are outdated and expensive) or an iMac Pro (not out yet, first-of-a-kind Apple products tend to have big problems, and crazy expensive at $5000+).

All told, I would prefer to avoid the all-in-one design. My current iMac has a great screen, but inadequate processing power for current applications. It cannot be used as a display for a faster computer.

History’s unpredictable paths

Columbus could not have foreseen the results of his search for piperine, Magellan was unaware of the long-term effects of his quest for isoeugenol, and Schönbein would surely have been astonished that the nitrocellulose he made from his wife’s apron was the start of great industries as diverse as explosives and textiles. Perkin could not have anticipated that his small experiment would eventually lead not only to a huge synthetic dye trade but also to the development of antibiotics and pharmaceuticals. Marker, Nobel, Chardonnet, Carothers, Lister, Baekeland, Goodyear, Hofmann, Leblanc, the Solvay brothers, Harrison, Midgley, and all the others whose stories we have told had little idea of the historical importance of their discoveries. So we are perhaps in good company if we hesitate to try to predict whether today there already exists an unsuspected molecule that will eventually have such a profound and unanticipated effect on life as we know it that our descendants will say, “This changed the world.”

Le Couteur, Penny and Jay Burreson. Napoleon’s Buttons: 17 Molecules that Changed History. Penguin, 2004.

Related: Learning and teaching

Kyocera ceramic paring knife

I have been collecting knives for years, including superb folders like Benchmade’s 940 Osborne and the Wüsthof chef, santoku, and paring knives I have been using to cook since I bought then during one of my first few weeks in Ottawa.

A few weeks ago, I visited a shop beside Trinity-Bellwoods park which exclusively sells Japanese imports. A plastic-handled white-bladed Kyocera ceramic knife caught my eye. For many years, I have sharpened my knives using the high alumina ceramic stones in my Spyderco Tri-Angle Sharpmaker, and I have been curious about the exceptional sharpness, edge retention, and corrosion resistance offered by ceramic blades.

After a few weeks of daily use, I am sold on the ceramic knife. I have never had a knife with a standard 30˚ edge cut tomatoes in the way that it will. I find myself buying more vegetables like carrots, just for the pleasure of slicing them so precisely and effortlessly.

I know ceramic knives always have a risk of shattering, and some people report them dulling quickly (apparently, using a plastic cutting board is incompatible). So far, at half the price of the Wüsthof paring knife, I would say confidently that it’s sharper, lighter, and more precise. I can report back in a year or two on whether it remains so.