· Naughties
· · 2005
· · · November
· · · · 04 (2 entries)

FSS: Baldini Sunset · Friday Slide Scan #12 is a picture of a sunset near <a href='http://en.wikipedia.org/wiki/Fort_Vermilion%2C_Alberta'>Fort Vermilion, Alberta</a>, which is way up north. It’s by my <a href='http://www.textuality.com/BillBray/'>Dad</a>, and while it’s pretty nice, it’s not his best, not even his best sunset; but it’s the oldest I’ve scanned so far, dating from 1953 ...
Security Hell · Tap, tap, tap, pause... “hmph”. Tap, tap, tap, pause... "grmph". <i>[Ten minutes pass.]</i> Tap, tap, tap, pause... “Hellfire.” Tap, tap, tap, pause... “Crap.” <i>[Ten more minutes.]</i> Tap, tap, tap, pause... “<multiple expletives deleted>.” Tap, tap, tap, pause... loud <em>splat</em> sound as the yellow-stickies pad impacts the far office wall. The cats, sensing trouble, have left the room. Is this the sound of: Trying to book a flight to somewhere attractive using points? Multi-threaded software being debugged? An attempt to write WSDL by hand? Solving a really nasty <cite>Myst</cite>-series puzzle? None of the above. Those sounds would be me trying to pick a new Sun LDAP password that meets the incredibly-stiff requirements of our new (SarbOx-driven, they say) security policy. The dictionary they check includes variant spellings of the names of little towns in the Lebanese mountains! I asked Lauren: “How am I going to remember this?” She said: “Go pick up that that yellow-stickies pad you threw across the room, write it down on one, and put it somewhere safe. Bruce Schneier <a href='http://www.schneier.com/blog/archives/2005/06/write_down_your.html'>says that’s OK</a>.” While I generally approve of forcing people to avoid easily-stolen passwords, I do worry a little that these hard-to-guess things can also be <a href='http://groups.google.com/group/comp.unix.wizards/tree/browse_frm/thread/11aa844cfe1a185c/9bbe9c93cc3ead22?rnum=21&_done=%2Fgroup%2Fcomp.unix.wizards%2Fbrowse_frm%2Fthread%2F11aa844cfe1a185c%2F253cb2b0d9a3e602%3F#doc_3c07325af7803805'>hard to type</a>, and perhaps thus vulnerable to prying eyes. But anyhow, if you were thinking of writing a program to guess anyone’s password here at Sun, well forget about it. <i>[Update: I got a bunch of suggestions on how to deal with this, some of them good.]</i> ...
author · Dad · software · colophon · rights
Random image, linked to its containing fragment


I am an employee of Amazon.com, but the opinions expressed here are my own, and no other party necessarily agrees with them.

A full disclosure of my professional interests is on the author page.