MacBook, defective by design banner

title:
Put the knife down and take a green herb, dude.


descrip:

One feller's views on the state of everyday computer science & its application (and now, OTHER STUFF) who isn't rich enough to shell out for www.myfreakinfirst-andlast-name.com

Using 89% of the same design the blog had in 2001.

FOR ENTERTAINMENT PURPOSES ONLY!!!
Back-up your data and, when you bike, always wear white.

As an Amazon Associate, I earn from qualifying purchases. Affiliate links in green.

x

MarkUpDown is the best Markdown editor for professionals on Windows 10.

It includes two-pane live preview, in-app uploads to imgur for image hosting, and MultiMarkdown table support.

Features you won't find anywhere else include...

You've wasted more than $15 of your time looking for a great Markdown editor.

Stop looking. MarkUpDown is the app you're looking for.

Learn more or head over to the 'Store now!

Thursday, December 29, 2011

We're sorry. You have exceeded the maximum number of requests to Register telephone numbers from the National Do Not Call Registry. As a result, we are unable to fulfill your request.


Thanks guys. I especially like the way it doesn't tell me on the page, but only on the email reply. Or give me an option like removing a number. Well done, Uncle Sam.

Email #2 coming right up...

Labels:


posted by ruffin at 12/29/2011 07:18:00 PM

Seriously, the Gmail spam/phishing filter is horribly broken.

Delivered-To: MyEmailAddress@gmail.com
Return-Path: <client1@dockershippingagent.com>
Received-SPF: neutral (google.com: 173.201.193.62 is neither permitted nor
denied by best guess record for domain of client1@dockershippingagent.com)
client-ip=173.201.193.62;
Authentication-Results: mx.google.com; spf=neutral (google.com: 173.201.193.62
is neither permitted nor denied by best guess record for domain of
client1@dockershippingagent.com) smtp.mail=client1@dockershippingagent.com
Received: (qmail 18466 invoked from network); 29 Dec 2011 13:12:48 -0000
Received: from unknown (HELO localhost) (173.201.193.116)
by p3plwbeout16-05.prod.phx3.secureserver.net with SMTP; 29 Dec 2011 13:12:48 -0000
Received: (qmail 13713 invoked by uid 99); 29 Dec 2011 13:12:48 -0000
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
X-Originating-IP: 41.234.71.35
User-Agent: Web-Based Email 5.6.09
Message-Id: <20111229061247.78014317b47e9d0ab986e08a521d7d2b.9387052348.wbe
@email16.secureserver.net>
From: "=?UTF-8?Q?Google=E2=84=A2=20Error-Code=20Alert=20?="
<gmailupgradeteam@inbox.lv>
X-Sender: client1@dockershippingagent.com
To: g.team.upgrade.alert@gmail.com
Subject: Google error code alert ..
Date: Thu, 29 Dec 2011 06:12:47 -0700
Mime-Version: 1.0

<html><body><span style=3D"font-family:Verdana; color:#000000; font-size:10=
pt;"><div><br></div><div><br></div><div>Dear Account User's</div>
<div><br><=
/div><div>Over the next few days as we make Google Analytics for the end of=
the year default for all users, we are simultaneously rolling out the repo=
rt of error code & anonymous emails, confirm if you still want to conti=
nue with Google mail .<br><br>Reply Saying " ACTIVETE "<br><br>Happy Analy=
zing,<br><br>The Google Analytics Team </div></span></body></html>


I did some line wrapping, but that's about it. Perhaps Google should partner with IBM for a twenty year-old version of Watson (or attach Gmail to an iPhone and rewire Siri) to figure out that emails claiming to be from Gmail that they didn't send should probably be reviewed before they're released to the inboxes. Seriously, would holding suspicious emails for a few hours hurt anyone unduly?

I mean seriously -- Account User confirm "Google mail" -- with a sig that includes "Google" and "Team" should be enough for someone to figure out something phishy is going on. How about ANY From line with "gmail" in the pre-ampersand portion? This isn't even close to rocket science.

This should embarrass the Gmail team. It's hardly the first time phishing-as-Gmail has snuck through.

EDIT: I thought there was another recently. Two days ago.


Delivered-To: MyEmailAddress@gmail.com
Received: by 10.180.93.5 with SMTP id cq5cs335243wib;
Tue, 27 Dec 2011 06:44:25 -0800 (PST)
Received: by 10.68.74.167 with SMTP id u7mr64941924pbv.103.1324997063562;
Tue, 27 Dec 2011 06:44:23 -0800 (PST)
Return-Path: <users@anseude.com>
Received: from p3plwbeout15-06.prod.phx3.secureserver.net
(p3plsmtp15-06-2.prod.phx3.secureserver.net. [173.201.193.44])
by mx.google.com with SMTP id z4si32228704pbp.218.2011.12.27.06.44.22;
Tue, 27 Dec 2011 06:44:23 -0800 (PST)
Received-SPF: neutral (google.com: 173.201.193.44 is neither permitted nor
denied by best guess record for domain of users@anseude.com)
client-ip=173.201.193.44;
Authentication-Results: mx.google.com; spf=neutral (google.com: 173.201.193.44
is neither permitted nor denied by best guess record for domain of
users@anseude.com) smtp.mail=users@anseude.com
Received: (qmail 1725 invoked from network); 27 Dec 2011 14:44:22 -0000
Received: from unknown (HELO localhost) (173.201.193.115)
by p3plwbeout15-06.prod.phx3.secureserver.net with SMTP; 27 Dec 2011
14:44:12 -0000
Received: (qmail 9449 invoked by uid 99); 27 Dec 2011 14:44:12 -0000
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
X-Originating-IP: 41.151.168.164
User-Agent: Web-Based Email 5.6.09
Message-Id: <20111227074410.1a431ae06f0531ae35f54fefd79e03f2.bb414b03c5.wbe
@email15.secureserver.net>
From: "Gmail Team" <member.verification@gawab.com>
X-Sender: users@anseude.com
To: accounts-inc@gmail.com
Subject: Gmail Security Warning
Date: Tue, 27 Dec 2011 07:44:10 -0700
Mime-Version: 1.0

<html><body><span style=3D"font-family:Verdana; color:#000000; font-size:10=
pt;"><div><div style=3D""><div style=3D""></div><div class=3D"im" style=3D"=
"><div style=3D""><div style=3D""><div style=3D""><div style=3D""><div styl=
e=3D""><div style=3D"">Dear Valued Member,</div><div style=3D""><br style=
=3D""></div><div style=3D""><font size=3D"2" face=3D"verdana, geneva" style=
=3D"">We are currently upgrading our database security and We've noticed th=
at your account security is inactive.</font></div><div style=3D""><font siz=
e=3D"2" face=3D"verdana, geneva" style=3D""><br style=3D""></font></div><di=
v style=3D""><font size=3D"2" face=3D"verdana, geneva" style=3D"">To enable=
your account security: <a href=3D"http://gtrmn.com/GM/Gmailme/Gmail.h=
tm" target=3D"_blank" style=3D"">Click here</a>  </font></div><di=
v style=3D""><font size=3D"2" face=3D"verdana, geneva" style=3D""><br style=
=3D""></font></div><div style=3D""><font size=3D"2" face=3D"verdana, geneva=
" style=3D""><font size=3D"2" style=3D"">We are sorry for the </font>i=
nconvenience.</font></div><div style=3D""><font size=3D"2" face=3D"verdana,=
geneva" style=3D""><font size=3D"2" style=3D""><br style=3D""></font></fon=
t></div><div style=3D""><font size=3D"2" face=3D"verdana, geneva" style=3D"=
"><font size=3D"2" style=3D"">Sincerely, </font></font></div><div styl=
e=3D"">Google Mail =C2=AE </div></div></div></div></div></div></div><d=
iv style=3D""></div></div></div></span></body></html>


RLY? Have I started reporting not only as spam but as phishing scams? Yes. But if you're expecting human users to do the work of catching this stuff, you don't really understand 01s.



Fail.

Labels:


posted by ruffin at 12/29/2011 09:43:00 AM
Saturday, December 24, 2011


I'm playing around with Google's Music Manager a little, uploading a few hundred tracks just for fun and downloading a few I grabbed from a recent promotion. I'm not sure how I feel about cloud music, but it seems like a decent idea. Surprised Apple & Google don't care about the bandwidth. How much can a dollar a track really buy you?

But the link to the OSS used in the Music Manager isn't quite enough. Many OSS apps that include or are themselves Free software display the GPL or LGPL in their entirety when you install, making you "accept" the GPL before using the software. I always thought that was the wrong terminology -- you're not really "accepting" it so much as the developers who made your software did. In retrospect, however, this in-your-face license makes a lot of sense. Many applications only have the required OSS licenses in their About boxes, and that just barely seems to meet the letter of the law for some OSS license requirements, imo, even though I'm guilty of doing the same thing. I think you're required to give the license to your user and a link to code, and hiding just the license in an obscure menu item isn't the way to do that.

Google does even worse in the Music Manager. In the About, there's a link to a page (admittedly a page copied locally by the install, though it is an html page that requires a browser to view) that has more links to licensing realted to the software they've used in Music Manager. In some cases, like libmpg123, the link is directly to the LGPL. In others, like id3lib, the link is to that software's home page, not the license. That seems bogus.

I will credit that page with an appropriate link to the tarball (http://dl.google.com/dl/androidjumper/src/current/music-manager-source.tar.bz2), which is nicely done.

But the tab for About with a link to YA page of links, on which you may have to hunt to find the license, is closer to Kevin Bacon than the letter of the LGPL.

EDIT: But it's hard to stay mad when Google Music handles FLAC with its Cloud player. Awesome.

Labels: , , , , ,


posted by ruffin at 12/24/2011 06:47:00 PM
Tuesday, December 20, 2011

Really, how does this stuff get through?


Googleโ„ข Team gmailteamuptade@inbox.lv
10:50 PM (1 minute ago)

to galertdepartme.
************************************************************
This footnote confirms that this email message has been scanned by
New Google Mail-SeCure for the presence of malicious code, vandals & computer viruses.
************************************************************
Dear User,

We know it can be painful to switch email accounts, and we hope this makes the
transition to Gmail a bit easier,your account profile needs to be updated as part of
our measures to ensure your safety while using our online service.

To continue reply With " Activate " ..

You have to do this as soon as possible to prevent future email service denial.

UPDATE Your Gmail Account Access.

- The Gmail Team


Even worse, this suggests that some people might have experienced vandals coming their way via email. Quelle horror!

Labels:


posted by ruffin at 12/20/2011 10:52:00 PM
Monday, December 19, 2011

Classy name.

alert(JSON.stringify(data));

Labels:


posted by ruffin at 12/19/2011 05:11:00 PM
Tuesday, December 13, 2011

RLZ to RLY? Yes, I went there. It was too low hanging a fruit.

So I was about to include a search URL in some comments in some code I was writing and noted this RLZ value on the querystring. Interesting. It was clearly compressed data, and not human readable. Wth?

?rlz and privacy - Google Chrome Help:

You may notice a RLZ parameter in the URL when you do a Google search from the Google Chrome address bar. The RLZ parameter contains some encoded information (like when you downloaded Google Chrome and where you got it from). The RLZ parameter does not uniquely identify you nor is it used to target advertising. Google uses this information in aggregate to find out whether groups of people are using Google Chrome actively.


Yeah, but what if I start mailing out the URL? Doesn't that give someone an idea that it's mine? And if I use the search results to get to someone's page, isn't that RLZ on the referring page info? Maybe not. I can't recall. But if it is, that's bad.

Don't personally tag my URLs, plz. Maybe you don't record my id with them, but someone else can. It's just A Bad Idea in general.

posted by ruffin at 12/13/2011 04:23:00 PM
Tuesday, December 06, 2011


I can fill out my order. I can put the stock in my "cart". I can click "Checkout". But nothing happens. (Preview doesn't work either.)

Going to see if this is an IE-only app. Honestly, there's no way to screw this up. It's the simplest system. If it's not an overloaded server issue, the coders are cruddy.

Update: Yep, appears to be an IE thing. That worked, no problem, other than your standard timeouts. Not even the certificate warning that I got on Firefox.

Seriously, though, how a company that banks tens of millions of dollars in profit each year can let some yokel make an WinIE only sales cart for their fund raising makes me really wonder. How many thousands might be on the table if they don't sell out of stock? (Apparently they didn't sell it all last time, iirc.)

Oh well, guess it doesn't matter when there are idiots like me who'll buy. That's the single most stupid purchase I've made since, well, let's not get into it. ;^D

posted by ruffin at 12/06/2011 09:27:00 AM
Friday, December 02, 2011

Google has finally figured out how to leverage their search dominance into a more successful social media ecosystem: Give Google+ Profile holders an unfair advantage with Google search results by putting images next to their hits!


How do you set things up? Start here. Enjoy. There's some fiddling with your Google Profile and the text of your blog page, but it's pretty easy. If you'll add G+ icons to your posts, you can do it on a by-post basis as well.

With Gravitar and Google+, etc, it appears to be the Age of the Self-branding Headshot.

Labels: ,


posted by ruffin at 12/02/2011 10:40:00 AM

On Windows at least, Safari will apparently check some system-wide setting and see if there's a proxy it should be using. This would be taken from some wacky .pac file or some such.

So when Safari pops open a window saying... "To view this page you must log in to the http proxy server", you're probably (?) supposed to be blocked from viewing that site by your [office?] proxy. I've noticed that I can type in real mature stuff like "doo doo" for the user name and password and still through, however, so I'm not sure what's going on there.


To fix this (at least for me), you can go to settings in Safari, click Advanced, click the Change Settings button next to Proxies, click the LAN settings button on the new dialog, then if "Use automatic configuration script" is checked, uncheck it.

Profit.

That was a pain. I wanted to use Safari as my "no Javascript" test browser, and it was initially just hanging, and then it did this proxy jive after reinstall. Fun times.

Labels: ,


posted by ruffin at 12/02/2011 08:55:00 AM
Thursday, December 01, 2011

Daring Fireball: Rootkit, Eh?:

I canโ€™t find a single word where I place blame anywhere other than in the hands of the carriers. (Which, as the story continues to unfold, looks to be exactly where the blame should be placed.) I didnโ€™t even crack an โ€œAndroid is openโ€ joke.


Funny.

posted by ruffin at 12/01/2011 09:06:00 PM

I've got a page with a save button that's to be enabled only after edits have been made (otherwise what are you saving, right?). So right now it's an asp:button, so I disable it with Enabled="false".

<asp:Button runat="server" ID="cmdSavePrimaryClientEdits" Text="Save" 
onclick="cmdSavePrimaryClientEdits_Click"
OnClientClick="checkCboMasks();"
Enabled="false" />


Bad news. I couldn't for the life of me figure out why my OnClientClick function call wasn't in the html. Finally, a StackOverflow comment gave me the answer...

asp.net - OnClientClick not working - Stack Overflow:


Another possibility: if the button is disabeld when the page is rendered, then the OnClientClick event is NOT written to HTML. Is your button disabled when the page is rendered? โ€“ AASoft Sep 17 '09 at 22:35


Hey, Ballmer, WHAT THE HECK GOOD IS IT TO REMOVE THE FREAKIN' ONCLIENTCLICK IF THE BUTTON'S DISABLED? IT'S NOT LIKE IT'LL ACCIDENTALLY GET CALLED, OKAY?!!!

ARGH. What a pain. I can now either use jQuery to attach my click event to the button after it's rendered OR I can remove the Enabled attribute and use jQuery to disable it once the page is done loading. What a freakin' kludge o' freakin' rama.

So here's the jQuery fix:
$('#<%=cmdSavePrimaryClientEdits.ClientID %>').attr('disabled', 'disabled');

/sigh

Labels: , ,


posted by ruffin at 12/01/2011 04:17:00 PM

I've always liked using System.Beep in VB6 as a sort of audible debug. It's so much easier than msgbox or writing to some stupid debug textbox if you just want a very quick confirmation that you got here.

Well, it looks like it's gone. But why was it there in the first place? From that same link:

Thereโ€™s something else that happened in the past 25 years. PCs became commodity systems. And that started exerting a huge amount of pressure on PC manufacturers to cut costs. They looked at the 8254 and asked โ€œwhy canโ€™t we remove this?โ€

It turns out that they couldnโ€™t. And the answer to why they couldnโ€™t came from a totally unexpected place. The Americanโ€™s with Disabilities Act.

The ADA? What on earth could the ADA have to do with a PC making a beep? Well it turns out that at some point in the intervening 25 years, the Win32 Beep() was used for assistive technologies โ€“ in particular the sounds made when you enable the assistive technologies like StickyKeys were generated using the Beep() API. There are about 6 different assistive technology (AT) sounds built into windows, their implementation is plumbed fairly deep inside the win32k.sys driver.
...
For Windows 7, we resolved the issue completely โ€“ we moved all the functionality that used to be contained in Beep.Sys into the user mode system sounds agent โ€“ now when you call the Beep() API instead of manipulating the 8254 chip the call is re-routed into a user mode agent which actually plays the sounds.


Bottom line for the change? Money.

Simon: You're right that there are other solutions. But we weren't trying to solve the console beep problem - we were solving a manufacturing cost problem.


Strangely, even if your hardware has the internal hardware to Beep, in Win7 64 bit, you're out of luck. I don't see a slick way to grab the speaker, though, since It's All Just 0s and 1s (c) 1970, there's got to be a way, right?

I also don't see exactly how this solves the ADA problem. If I buy a computer, there's no guarantee it has external speakers. With an internal speaker, the sound will be there [as long as the speaker works properly, etc]. And it'll be distinctive to boot. How does moving to the standard sound jive help? Save System.Beep!

Anyhow, I'm awfully sad to see Beep go. It's fun. And a cool Easter Egg.

EDIT: I couldn't help but play a little. In 32 bit Windows 7, I tried it out as explained here with Console.Beep(1000,1000); Interestingly, it most certainly did go through the headphones if they were plugged in, but more interestingly, this HP Compaq 6005 Pro MT PC made the sound through an excellent internal speaker (which it apparently does always have: "Integrated High Definition audio with internal speaker") when I unplugged the headphones -- though no other sounds have come out of this thing since I've used it.

(Hrm, now I can't turn the danged thing back off. Maybe I just had it on low all this time?)

I know Macs have had excellent internal speakers since forever (? -- my LC had one and everything through now has too), but perhaps I missed that standard hardware usually has one too? So perhaps this is a win-win, and using the "user mode system sounds agent" still routes to the internal speaker even when, for normal sounds, it's off. Perhaps the ADA simply mandates that you have an internal speaker of some sort, but Windows 7 allows that sound to move through the headphones if they're in? Still seems like the ADA would prefer these sounds not be mutable. /EDIT


Btw, has anyone noticed that logging in to blogger routes you through YouTube now? Wonder if YouTube is getting bundled with Blogger for a quick sale...

Labels: , ,


posted by ruffin at 12/01/2011 08:39:00 AM

<< Older | Newer >>


Support freedom
All posts can be accessed here:


Just the last year o' posts:

URLs I want to remember:
* Atari 2600 programming on your Mac
* joel on software (tip pt)
* Professional links: resume, github, paltry StackOverflow * Regular Expression Introduction (copy)
* The hex editor whose name I forget
* JSONLint to pretty-ify JSON
* Using CommonDialog in VB 6 * Free zip utils
* git repo mapped drive setup * Regex Tester
* Read the bits about the zone * Find column in sql server db by name
* Giant ASCII Textifier in Stick Figures (in Ivrit) * Quick intro to Javascript
* Don't [over-]sweat "micro-optimization" * Parsing str's in VB6
* .ToString("yyyy-MM-dd HH:mm:ss.fff", CultureInfo.InvariantCulture); (src) * Break on a Lenovo T430: Fn+Alt+B
email if ya gotta, RSS if ya wanna RSS, (?_?), ยข, & ? if you're keypadless


Powered by Blogger etree.org Curmudgeon Gamer badge
The postings on this site are [usually] my own and do not necessarily reflect the views of any employer, past or present, or other entity.