Artikel - 13.9.2005 - 7.10.2005

Nessus soon unusable

Here is the translated Markdown body:

Then Nessus becomes closed source - Golem.de:

The biggest change for Nessus 3, however, is the license. While Nessus has been developed and offered as open source under the GPL so far, version 3 will no longer be published under the GPL. Although the software will continue to be offered for free, even for Windows, the source code will no longer be published.

And a security scanner for which the source is not available is simply nonsense and snake oil. Because tools in the security field urgently need the peer review that is absolutely common for open source software in this area.

weblogs.com sold to Verisign?

If I understand Dave Winer's ramblings correctly, he has sold weblogs.com and other infrastructure to Verisign (yes, confirmation from Verisign).

Which makes weblogs.com completely dead and uninteresting to me, because everything Verisign touches turns to shit. Not to mention I don't trust the company as far as I can spit - they have their dirty fingers in too many internet topics (and are all too concerned about expanding their already absurd monopoly in some areas).

Well, today you ping via Ping-O-Matic anyway - this way pings also go out much broader, also to more sensible services. Apart from that, weblogs.com was already pretty unusable because it simply lacked the necessary performance. Which is no wonder if you choose the wrong software base for such services (nothing against Frontier, but it's simply unusable for this).

The EU Commission Again

That they want to introduce software patents through the back door is not new - but still concerning. But if you look at such excesses of their ideas about the possibilities of reacting to copyright and patent infringements:

If the controversial enforcement directive is approved by the European Parliament and the Council, the police would, according to FIPR, "have more powers against copyright infringers than against terrorists". Thus, law enforcement authorities would in future be able to freeze the accounts of parents whose children might have illegally downloaded music on the Internet, in coordination with lawyers.

Freeze the accounts of parents because their children have downloaded music? Hello, are you still there? What kind of idiots are actually assigned to the EU Commission?

this strange survey ...

... which has been circulating through the blogs for a few days, gets its fair share here. It starts harmlessly in the comments with the usual considerations about personal data and where does the email address come from, what are the personalized links for in the "anonymous" survey - so quite normal and healthy behavior from the people.

Then at some point the providers (the Knallgrauen) jump in. And then something comes up that leaves me speechless:

And now a few personal words: I find the excitement here a bit puzzling. We (twoday.net) have always been very careful with data in the past and have always tried to be careful and act in the best interest of the users with such topics. Every day, personal rights are handled much more carelessly elsewhere and no one cares. Here, however, everyone can say how they imagine research, including beautiful publication dreams, which are unfortunately far removed from any reality.

Sorry, but what? So the concerns about the passing on of email addresses for a purpose to which the owner of the address has not explicitly consented are responded to with the flimsy argument "we are always soooo good and the others are soooo bad, and anyway, you are all dreamers"? It's quite astonishing how much arrogance can fit into a small paragraph ...

This casts a not very positive light on the relationship of the Knallgrauen to the protection of the personal data of the users. And no, a survey is nothing that is necessary for the operation - no matter how flimsy the justification with which it is pulled out by the hair.

And it was not just a slip of the tongue, as another comment from the Knallgrau direction further down proves:

in other discussions I can personally not understand the excitement about some things. Data protection is important, but not all boys are bad. So I am probably not to be counted among the cautious species, maybe I have just been lucky so far.

Yeah, yeah, data protection is always taken too seriously. Sorry, Knallgrau, but data protection is always taken too lightly, which is why such idiots like you just brush it aside. It's much more important to carry out a survey that has been planned for months (from which the visitor has nothing, but only the evaluator and the recipient of the result - just by the way) and not to cancel it because of such trivialities, as you write in the same comment:

the interesting thing about communication is that there is always too little of it. The sensitive environment (due to previous surveys) was clear to us, the survey has been planned and prepared for months (very thoroughly prepared) and we did not want to cancel the project for such reasons.

Exactly. Screw data protection concerns, they are just "such reasons" and nothing important, like, for example, another insignificant survey about the blogosphere (in which the visitor is asked about their income to improve the provider's services - ah yes) ...

Driving makes you stupid

Cycling makes you impotent, but driving makes you stupid: drivers in a traffic jam have repeatedly turned around on the highway on the Autobahn:

For the second time in a few days, drivers in NRW have turned around on the highway. Although Interior Minister Ingo Wolf (FDP) had announced an increased release of the emergency lanes, this may only be ordered by the police.

Of course, for drivers in NRW, this immediately means the green light for a brainless move. The only question is when the turnaround idiots will meet the idiots who consider an emergency lane as a race track to the front of the traffic jam ...

Python Paste Power

Python Paste Power is a very interesting article about Python Paste, the metaframework by Ian Bicking. It makes the application and distribution of web applications in Python much easier (at least if the framework with which one wants to build the application has Paste support).

IRC Logger update

The IRC logger is working fine, but I wasn't happy with the dependence on muh - so I wrote my own little logger bot in python, based on irclib. Does work fine and does only what I want it to do - logging. I allways feel a bit queasy when IRC bots have command structures and stuff like that and I actually don't need any of those ...

So now the project is mostly complete - just use the django admin to add channels to your database, point the logger bot to some IRC host and see how it joins channels and starts logging.

Oh, there are still things to do - for example the bot needs to rescan the list of channels so it notices newly added channels and leaves deleted channels (and maybe I should add channel activation/deactivation so I can switch off channels for some time without losing the archives), but for now it just logs #django and for that it's good enough.

Media, Statistics and their "Interpretations"

What I hate are such great blanket headlines like the one at Heise today: Computers can lead to worse grades in school. Of course, poor teaching can also lead to worse grades. Newspapers can also lead to worse grades ...

It gets particularly embarrassing when you read the reasoning:

A computer in the child's room leads in most cases to worse grades in school. This is the conclusion of a study (PDF file) published on Tuesday by the Munich ifo Institute, which specifically evaluated the international data of the PISA studies again. The reason for this: the computer is very often used for computer games instead of being used for learning.

Aha. So let's conclude: playing instead of learning can lead to worse grades. Oh. Oh really. Grandiose insight - and why does the title say something completely different? Maybe the authors played a bit too much and learned too little?

Cycling makes you impotent

From the Süddeutsche Zeitung: Cycling causes impotence:

„There is no longer any question that cycling can cause erectile dysfunction“, comments reproductive medicine specialist Steven Schrader. „The only question now is what we can do about it.“

So if I call the next cyclist who wants to run me over on the pedestrian crossing an impotent bastard, that is by no means an insult, but a pure statement of fact!

(and no, I hardly ever use my computer for gaming, in case anyone feels the need to point that out)

37signals again

This time it's Writeboard for collaborative text editing over the web. Maybe something like SubEthaEdit for the very poor. From the FAQ:

Is this some sort of wiki?

No way. Not at all. Nope. Wikis are icky. Writeboard is about writing and editing solo or with others. It's all about the words. Wikis are about way more than that which is why they are generally pretty confusing to most folks.

Yes, of course, wikis are icky. And hard to understand. Logical. Might apply to someone who thinks to-do list programs are more brilliant than sliced white bread. Sorry, but it's just getting ridiculous what's coming out of that place. Banal programs don't get smarter just because you wrap them in candy colors ...

Google's Blog Search Stupid

When will Google finally realize that searching for links to a blog is pretty stupid if it returns links from the blog to itself in the results? I know that I link to myself - I don't need Google for that. Neither the web search nor the blog search. And of course, you can't just use -site or -domain or something like that. Rarely stupid. It already annoyed me with the normal Google web search, and it's also annoying in the blog search. A search for link: is a search for external links, so please filter the results to exclude the site itself ...

Retrocomputing - MIT CADR Lisp Machines

Yeeeehaaaa! The source code of the MIT CADR Lisp Machines - the precursor of most high-end Lisp machines - has been released under a BSD license!

This should hopefully give the CADR Lisp Emulator a further boost. In recent times, things have been a bit quiet around the emulator.

If Symbolics could finally bring themselves to port their OpenGenera platform to OS X, I would be even happier.

And a few more news about the emulator - there is the first support for ChaosNet, including a file server for Linux. And the Lispmachine-Board mentioned in the link would be pretty cool ...

IRC logger for #django

There now is a IRC logger for #django on freenode.net. Ever since the loglibrary broke down, I thought about rolling my own. So I started to build the stuff needed for an IRC logger. The interface itself is written with django, of course

As allways, the source is available in my trac instance. It's currently only running in #django, but it can easily be extended to other channels. And it stores log lines in a database, so I will be able to add searching and stuff like that. It already has a calendar view on the logs.

The logging itself is done with muh - a nice IRC proxy that allows logging to named pipes. Then there is a script fetch.py that pulls the lines from the named pipe and stores them in the database. The last part is the django-based viewer for those logs.

Update: the logging is now done with a dedicated IRC logger written in python. It's in the source tree as loggerbot.py.

I could make use of generic views in Django, only that I needed to parameterize them. I did that with a wrapper function that moves stuff from the keywords of a view function to the extra_lookup args and extra context keywords of generic views. You can see the code in the repository.

The rest is just standard Django stuff: generic templates (that make use of the cool regroup tag) and some custom tags for the calendar and the user colorization. A bit of model hackery and that's it, actually. Nice and simple. Took only a few hours to bang together, and that includes playing with muh and named pipes ...

Politicians and Reality

According to the projections, the SPD is the strongest party in Dresden and is clearly ahead of the CDU. So what conclusions does the Union draw from this? Clear: they see the election result in Dresden as clear evidence of their claim to leadership. It's quite strange how this peculiar people in Berlin view the world ...

By the way, such a clear claim to leadership cannot even be derived from the direct mandate: the Union may have won, but only narrowly with a few percentage points ahead of the SPD. But what does the Union care about the fact that over 60% of voters did not vote for the CDU in the direct mandate and over 70% of voters did not vote for the CDU in the second vote - it remains a clear claim to leadership.

In the direct arithmetic duel Ötzi against Merkelnix and the soup cook, Ötzi would probably win. Even in his current state ...

Leica - D-LUX 2

Leica has a successor for the D-LUX in the works: the D-LUX 2. The name may be boring, but the specifications sound nice - 16:9 format, wide-angle setting of the lens equivalent to 28mm on full-frame, 8 megapixels, image stabilizer, manually adjustable aperture and shutter speed, RAW format.

That's not particularly exciting yet, but it has again what the old Digilux 1 had, but the Digilux 2 did not: an adapter for the Leica Spective. Which makes it interesting for Jutta again.

However, it will likely also get a Leica-typical price ...

License to Print Money

E.ON and RWE want to increase electricity prices - with flimsy justifications and, given the record profits of these companies, extremely absurd. But privatization and free-market economy are so great, everything becomes cheaper for the consumer - it's just strange that we don't notice it ...

But this will surely be dismissed again by great statisticians as mere perceived inflation.

Court strengthens old spelling

Already quite cute: a student is granted the right to the old spelling in court, but:

An interim order to the Lower Saxony Minister of Education to maintain the old spelling, however, the Lüneburg judges did not want to issue. The student would have to wait for a judgment, but this is not to be expected before the end of the applicant's school time.

Somehow, one can only explain such things with a very twisted sense of humor. It almost has a Kohlhaas-like quality to it.

Solar Eclipse on German Unity Day

On German Unity Day there is a solar eclipse - too bad we no longer live in the time of the good old Germans, because then we could retroactively rate this as a bad omen and sacrifice Helmut Kohl to the gods

i18n and django

Jacob did set up branch commit rights for me and a branch for i18n stuff. So I worked today on the ideas in the patch on ticket 65 by nesh. I did write the stuff mostly from scratch because I wanted some things a bit differently and now it is available for testing.

So first on how you can use the i18n stuff with your django checkout. You need to have a current svn trunk checkout and go to the root of your checkout and issue the following command:

svn switch http://code.djangoproject.com/svn/django/branches/i18n/

After that you should have a tree with my patches applied. I currently only translated very little stuff to make the patch and changes as small as possible, but I already added a german translation file with stuf for the admin index and the isAlphaNumeric validator. I think I will add some more stuff to the translations soon.

The patch only addresses the translation part - other things like date formatting, number formatting, timezone handling should go into different patches to make each one of them as small as possible. The translation object (that's the beast that is responsible for turning strings into their new form) is built on request. This gives us the chance to look at various places that might help in deciding what language to present to the user. The code starts by looking into the session for a django_language variable. If that isn't found, it looks into the cookies for a django_lanaguage cookie. If that isn't found, too, it digs at the HTTP headers. It looks for the Http-accept-language header and splits that up by languages and sorts them by preference. It will use the first language (ordered by preference, highest preferences first) found in the django messagefile repository. If none of those languages can be found, it will ultimately fall back to the default translation object that is defined by the LANGUAGE_CODE setting in your settings file.Message files can be stored in three different places: the django project message files are stored in the django.conf package in a locale subdirectory. This is much like the admin_media and admin template directories. The locale subdirectory is structured as is typical with locale storage: one subdirectory per language and a LC MESSAGES directory in there. The language domain for django message files is allways django . The next place where django looks for message files is in the project - if you have a locale directory in your project, you can store additional message files there. The third place is the application - you can have a locale directory besides your apps views directory. All locale directories are structured the same.

A translation object for a given language is actually a concatenation of four translation objects: first the application translation object. This will have a fallback to the project translation. That in turn will fallback to the global translation object which will fallback to the translation object for the default language. That way higher levels can override translations from lower levels and applications can provide their own translations.

The application for the translations is actually discovered by module introspection - it uses the view func to call on a URL to discover what application carries this view func and uses that to look for local translations. There are two tools provided to manage translations: make-messages.py and compile-messages.py. Both tools can be called in either the root of the django svn tree or in the project directory or the application directory. make-messages.py will scan the current directory and everything below that for strings to translate and will create a django.po file in the locale directory for the given language. compile-messages.py will just turn all .po files into .mo files. Adding translations is easy. In python code you just surround strings (only string constants!) with ('...') or ("..."). That will mark those strings for translation so that make-messages.py can pull them out and write them to the .po files. And it will translate the string on runtime, using the current translation object as discovered from the request. In templates there is the template tag {% i18n ('....') %} - same syntax as with python code, only you need to wrap it as a template tag. Those strings will be pulled from the .html files into the .po, too. The i18n tag supports string interpolation from the context: {% i18n ('blah %(blubb) s blubber') %} would first translate the string and then interpolate the context variable blubb into the translated result.

A hint: when writing strings to translate, don't use positional parameters for interpolation (the %s stuff) but use named parameters (%(blah) s) instead. That way people building translations can reorder the string without breaking your code - some languages have different orders from english.

Using the translations is easy, too: you just need to set your default language in the LANGUAGE_CODE setting and add the django.middleware.locale.LocaleMiddleware to your middleware setting. You need to put it to the top - especially in the admin it should come before the AdminUserRequired middleware - but it needs to be after the SessionMiddleware, if you use that.

That's it for a start, play with it and tell me when something goes wrong. Best place to tell is on the ticket in the django trac.

Not a German Boxing World Champion Today

Brewster was indeed a little better than Luan Krasniqi in the 8th and 9th rounds. Heavyweight means that one second of not paying attention and the steam hammer comes. And he took two of them. Really exciting fight. In the first 7 rounds, everything was still open. Brewster really had to defend his world title.

HH-CDU and Democracy? Not really.

Because the CDU is changing the electoral law and the composition of the districts - and against a citizens' vote:

The SPD, GAL, and the initiative "More Democracy" reacted with outrage to the Union's plans, which can be decided by a simple majority in the Bürgerschaft. The vote of the Hamburg citizens in the referendum had been clear, said SPD state chairman Mathias Petersen. The SPD interior expert Andreas Dressel spoke of a "renewed moral breach of the constitution". Referendums were apparently only followed, "when the gentlemen Beust and Fischer have no objections". The Senate had already sold the municipal clinics against the will of a referendum at the turn of the year.

Power is more important than democracy and the will of the citizens. Here one coalitions with the right-wing scum or simply tramples on democratic decisions, as one pleases ...

Open Dylan

Open Dylan is ex-Harlequin Dylan, ex-Functional Developer - an integrated environment for Dylan programming and a library of various classes for different purposes - open-sourced some time ago and now available as the first beta for download for Linux and Windows.

I would prefer if Apple would release Apple Dylan, because its development environment was really light years ahead of everything else on the market, but that will probably never happen - rather there will be an OS X version of Open Dylan. Also quite nice.

EU Parliament Finally Rejects EU Council's Plan for Data Retention

The EU Parliament finally rejects the EU Council's plan for data retention - but is this a reason to celebrate?

In the area of security, the deputies have not yet had a right of co-decision, which is why their repeated rejection of the framework decision for the member states is not binding.

The Commission's counter-proposal is not much better - although the times are smaller and the compensation of the economy is addressed - but the rights of the citizens are also trampled there for a more than dubious purpose.

And we know from the fight against software patents how much we can rely on our government - they will sell us in the name of Schily or his successor ...

Routes for Python

Very interesting: Ben Bangert has ported Routes to Python. Routes is the core of the mapping of URLs to functions and back that is used in Ruby on Rails. So a general mechanism with which a Python object can be determined from a URL and a URL can be determined from a Python object - flexibly configurable.

Could also be interesting as an element in Django, as an alternative to the current URL pattern system. The current system elegantly provides the function to be called from a URL - but unfortunately there is not the same way back from the object or the function back to the URL.

In addition, Routes could also be interesting within WSGI projects - it elegantly solves a small sub-area and in such an abstract way that it should harmonize well with things like Python Paste(Ian Bickings Meta-Framework for WSGI applications).

Why I Have My Doubts About Rails

It could become clear if you read through the article here: Choose a single layer of cleverness (Loud Thinking) - yes, exactly, his opinion is, out with referential integrity, stored procedures, and triggers from the database, because he wants to keep them all in his code. How about "throwing out the baby with the bathwater"?

It's so embarrassing that I almost don't know whether I should laugh about it - but one thing I certainly won't do: put my money on such a horse ...

Casual approaches with simple, clever solutions that sometimes go against conventions are okay (and important - otherwise we would all end up with Java and J2EE ...) - but if programming consists only of patching together half-baked solutions, then I'd rather stay out of it. I might as well use PHP then ...

PocketMod - Mini Paper Organizer

The PocketMod Mini Organizer is not only fascinating as an idea - as a web application, it is too. A Java-Script application that generates a page layout for a simple foldable mini organizer from an A4 page. Not only a funny idea, the whole thing is even really practical.

Correction from the comments: not Java-Script, but Flash.

Drowsy Question Game Activated

Because spammers are bombarding my server again and I don't feel like seeing a ton of spam in the moderation queue, I've activated wp-questionnaire. For now, there's a more or less silly question that needs to be answered for a comment to appear on the pages. Sorry, it's unfortunately necessary at the moment - it's about 30-40 spam comments per day. Yes, they only end up in moderation, but it's still simply annoying.

Once the situation with the spammers has calmed down, I'll probably turn it off again. If anyone notices anything strange regarding the comment function, just let me know (but better via the feedback page and not via the comments).

TC Trustcenter insolvent

The TC Trustcenter has filed for insolvency - ouch. There was nothing in the media to suggest this - suddenly gone. Quite annoying, because in .de there aren't many places where you can get server certificates that are also accepted in browsers with standard delivery ...

Further Spam Fallout - No More Trackback and Pingback for Me

As a further action due to the ongoing spam wave, I have disabled trackbacks and pingbacks on my site. I never really liked trackbacks anyway - the technical concept is ridiculous. Pingbacks are technically better implemented - due to the stronger focus on backlinking - but they are visually just awful: the technically generated excerpts just look like shit.

If someone wants to comment, they can comment - and a comment can also contain a backlink. And for everything else, there are the usual curiosity tools - and their link search works quite well (although I have also found mountains of link spam there - some stupid spammer pseudo-blog had a bunch of links to me for a while and ended up in my Technorati evaluations).

Since I am consistent, I will also no longer send out trackbacks and pingbacks if I don't accept them myself. Sorry, but my time is too precious to manually clean up garbage from a technically unfinished protocol ...

Cowardice or Laziness?

Joschka makes the Oscar:

Particularly reprehensible: His patronizing remark that if there were a ministerial position to be filled, one could just call him. You can't disqualify yourself more clearly than that.

Yeah, Turnschuh-Joschka's nonsense was really more than out of place. Minister - he'll do that. But opposition work? Oh no thanks, I'll just exercise my mandate and let the others do the opposition work.

embarrassing mirror

It's really ridiculous how Der Spiegel can't hide its political tendencies time and again. Especially ridiculous because Der Spiegel was once considered a magazine with leftist tendencies. That's what quality journalism is like - completely unbiased, well-researched - and shamelessly brazen.

Poor, Misunderstood Media

You have to feel sorry for the media, given the massive criticism they're facing. And Nowotny - as the top media official of the public broadcaster - was embarrassed by Schröder:

Nowottny: I watched the show, and I must say that I was embarrassed by it. How the former media chancellor turned into a media critic was quite unique. My compliments go to the two moderators of the show, who did not let that accusation stand.

Well, he could have also taken a look at the media's programming beforehand - massive talk of change and transition, I have no idea how often during the day one was supposed to be brainwashed with the inevitable change. Actually, I am rather embarrassed by the amateurishness of the media in dealing with the only interesting detail of this election: the highly praised and supposedly infallible pollsters collectively messed up.

Therefore, the personification of embarrassment are people like Nowotny, who get worked up about the only sensible statement by Schröder - what was embarrassing about Schröder was his "I am chancellor" attitude, but not the media criticism. But that's how the divas of professional journalism are - how dare the citizens pee in their pool, one becomes thin-skinned...

But the entertainment program in the news is really great, one has to give the election result that

Election Results or Poor Results?

Somehow quite stupid - neither here nor there. And Stoiber even threatens to go to Berlin - who wants that? Well, at least the negotiations about possible coalitions could become amusing:

  • Stoiber is unwanted, but the Union insists
  • Schröder wants to remain Chancellor, no matter what - but he doesn't have the strongest faction
  • The Greens want to hold on to power, but will they with the Black party?
  • Traffic light coalition with and without a broken red light the FDP does not want - but only in a traffic light coalition does the FDP have a chance of participation
  • Red-Red-Green would be the logical consequence, but Schröder and Lafontaine - that won't work. And SPD+PDS - that won't work either.

Actually, all politicians have expressed so many exclusions about what wouldn't work that we can't get a government - snap elections would be a solution

Since there were only election winners, one could also summarize: "we are chancellor"

Microsoft's Covert Advertising on NDR

About the covert advertising (well, you can't really talk about sneaking anymore) for Microsoft in election coverage, there has already been written about. But it's quite shocking is the NDR's justification for why Microsoft had to be mentioned:

According to a statement by the Linux Association, the NDR argued in court that Infratest Dimap uses copyrighted databases and graphics from Microsoft for the projections.

Well, then they should just switch to free software, because I really can't imagine what copyrighted databases or graphics should be involved in election coverage - after all, only banal pie charts and bar charts are shown. And I certainly hope that the election itself is not sponsored by Microsoft - and that they therefore have some naming rights there. The whole thing is once again absolutely bananas, what the public broadcaster allows itself.

What does Trusted Computing have to do with Trust?

Sure, everyone knows this and it has gone through all the blogs, but the film is so nicely made that you have to link to it more often: A movie about Trusted Computing. Because the film names exactly the central point: if the industry has decided that they do not trust the user - why should the users trust the industry?

wxWindows Book

There is a book about wxWindows/wxWidgets: Cross-Platform GUI Programming with wxWidgets - although it focuses on wxWidgets and is primarily for C++ programmers, the wxPython bindings are left out. Nevertheless, it is certainly interesting if you use wxWindows in any form, as the bindings for other languages are always based on the original library.

Media Literacy à la CSU

Söder: 300,000 Emails Are Not Spam - and knowing how to deal with criticism:

However, the CSU seems to be at least unsettled by the criticism on their own election campaign site. More than 100 partly very critical comments about the email action had been posted in the official party blog «blog4berlin.de». In response, the CSU initially deleted some of the comments on Tuesday afternoon. On Thursday, the comment function, which is essential for blogs, was completely turned off.

Oh yes. First, they want to spam people - and sorry, but this excuse that they had signed up is quite absurd in view of the further plans to have these people provide more numbers - and then deal with the criticism in Bavarian style and simply turn it off. Great.

confused face

Supply for Astronomy Enthusiasts

This time it's a Japanese space probe that will hopefully provide many interesting images and data with its landing on an asteroid. Cool. And far more interesting than silly repair tours of the space shuttles ...

Even more media incompetence - this time CDU

Even the CDU is sending out spam:

Approximately 300,000 to 400,000 Germans are receiving an email from the contest provider "Play and Win" these days. They are advertising to vote for the CDU in the upcoming Bundestag election on Sunday. However, this is not entirely accurate: upon closer reading, it is simply election advertising by the Union.

Upon closer reading of the spammer's comment, it is simply spam. Scum.

Is Peter Lustig quitting?

Peter Lustig goes into retirement:

Löwenzahn, the series that sweetens a Sunday visit to friends with children - or your own children - is ending! Peter Lustig is retiring to well-deserved rest (probably he will open an inventor's workshop instead).

Really a shame. Somehow, this remnant of the hippies and eco-freaks was always cute to watch - and so beautifully cozy. Even if it was of course uninteresting for me back then, as I was naturally an iron-clad mouse fan. But I've had the one or other encounter with Peter Lustig through my nephews in the form of games and books - and I quite liked it. I can't imagine that something like this could be revived - the TV makers are too stupid to give such a rather strange concept a chance. A shame actually - it was always better than the silly American concepts and Americanized children's shows that you see today while channel surfing on vacation.

RFID in the passport is not a security feature

Tobias Straub on RFID in passports:

Straub, who as an employee of the company FlexSecure was involved in developing the signature architecture for the new passport, assessed the security properties of Basic Access Control with 56-bit keys and a passport lifespan of 10 years as insecure and the concept of a non-secure radio interface in general as unsuitable. Only the Extended Access Control, which should come with the introduction of fingerprints by the end of 2007 at the latest, would make a cryptographically secure system possible. Referring to BSI tests in which passports could be read bit-exactly from a distance of 2 meters, with error correction and additional antennas from 10 meters, Straub explained: "If I use RFID, I already have a threat with it". Compared to a contact-based SmartCard, RFID is not a security feature but an insecurity feature, said Straub, who now works at the Fraunhofer Institute for Secure Information Technology in Darmstadt.

But we are sold the nonsense of Otto Orwell as a great security facility.

They're doing the same shit as in the USA

Here the state also provides backing to a voting machine manufacturer and keeps the inspection reports under lock and key due to alleged protection of know-how:

That the BMI keeps the inspection reports under lock and key weighs heavily, especially in light of a waiver of an additional vote recording independent of the electronics, criticizes Wiesner: "Neither the voter nor the election committee in the polling station can determine which software is actually used in the polling station and how secure the devices used are against manipulation." Consequently, the form for the election record does not even provide for the alleged program version to be recorded.

For me, this is just as dubious as the same nonsense in the USA. Voting computers must - if they are to be trustworthy - withstand public discussion. The alleged know-how protection of the manufacturer must not be valued higher than the citizen's right to information on how the vote counting is conducted. It is simply absurd what the BMI is doing here - but what else can one expect from the authority of Otto Orwell?

And suddenly you feel young again

Here's the translated Markdown body:

Here's the translated Markdown body:

Kate Bush plans a comeback. Okay, there probably won't be a second "Babooshka," but still.

Yep, it works.

And onwards:

Only then did I realize: I couldn't care less. It's been a while now - I couldn't care less what Patalong or the other idiots write there: I know how the game works with them, I've experienced how they steal, influence, and trick, I've overheard that they don't have the guts, I've followed it long enough and written about it for a year. It doesn't matter anymore. SPOn doesn't matter anymore, at least not to me.

SPOn has been out of my feed reader for a long time, only appearing indirectly through other blogs and sometimes through Google News searches. Current information about the day's events is provided by Tagesschau and Netzzeitung. And all the many blogs that I read and that give me the necessary pointers on where I should read next ...

DjangoScgi - Django Projects - Trac

Django with Apache and SCGI and Django with Apache and FCGI are two reworked documentations on how to get Django running with both FCGI and SCGI under Apache. I use the same parts as with my previous howtos, only that now SCGI is supported, too.

My gallery is currently running the Apache+SCGI setup, it's quite nice. The configuration in Apache is much nicer and cleaner than with the FCGI setup.

Since 2007 the links in this page didn't work any more, so I removed them.

Gas price calculations must be disclosed

E.ON must make gas prices transparent:

The gas supplier E.ON Hanse must, according to a preliminary assessment by the Hamburg Regional Court, disclose its price calculation. The company must prove that the three price increases since last October, totaling 25 percent, were justified, the court stated. The simple reference to the linkage of the gas price to the increased oil price is not sufficient.

Ok, no reason to cheer yet, but maybe it helps to control the rather strange gas price development.

Security by complete Stupidity

Now it's clear, how to get Paris Hilton's phone number:

The hackers called a T-Mobile store and pretended to be employees of the company headquarters. They said there were network problems and had the non-public internet address of the T-Mobile customer database given to them as well as the necessary login and password information.

Ouch. Ouch. Ouch.

Google Blog Search

Google now also has a Google Blog Search - but why does someone who enters the race last have to be so stupid (arrogant?) to deliver this blog search only as HTML and not also alternatively as its own RSS, so that you can do something with the search results? I mean, a performant alternative to Technorati or Feedster would be quite nice, they are simply down too often. But what's the point if I have to do all the searches myself and manually?

Correction: there are XML links for the search results.

Does twice stupid hold better?

As if Kirchhoff alone weren't threatening enough, now he also wants to ride tandem with Merz - the only thing that comes to mind is the Mad Hatter and the March Hare...

Lügen-Linssen and the Finances

Well, this is how Linssen envisions the austerity measures - with a bunch of new positions, including speechwriters. Because we certainly need those urgently in NRW, so that the black-yellow embarrassment can be talked away.

Because it's not about the election promises at all - it's only about gaining power and holding onto it, and then embezzling as much as possible as quickly as possible.