Migrationsverket måste få ökade befogenheter att kontrollera de utländska bemanningsföretagen.

An anonymous reader writes "With recent action by the FTC against TRENDnet, the 'Internet of Things' has taken a sharp turn in the eyes of the public and government with regard to security. This week, Duo Security employee Mark Stanislav presented security research he did on the IZON IP camera from Stem Innovation. Through his testing, Mark found hardcoded credentials for Linux accounts (accessible by Telnet; Yes, — really), an undocumented web interface allowing for viewing a camera's stream (also with hardcoded credentials, user/user), and a variety of other failings including a lack of cryptography in most of the camera's functionality, including when uploading videos to Amazon Web Services's S3 storage." According to the above-linked article, "Contacted by The Security Ledger, Stem Innovation CTO Matt McBeth said that the IZON firmware, server system and iOS applications tested by Stanislav have since been updated, and that the research contains “inaccurate and misleading information.” Stem did not provide specific information about any inaccuracies."

Read more of this story at Slashdot.

Union Square Ventures has a new home, and it's a dandy! :-)

Down the left edge is a news flow that works more or less like Hacker News. Anyone can submit a link, upvote or comment. Comments are managed by Disqus, a USV company, btw (we also use Disqus here for comments).

There are the usual three components to a post: title-link-description. You can add tags. You can view the news flow in either reverse-chronologic order or ranked by number of votes.

The community is small, so the ranked page is not so interesting at least not yet. And there aren't many people submitting links. They've had ten submissions so far today, as I write this as 10:15AM on a Thursday. But it's only been around for 12 days, and Fred Wilson's blog has a sizeable audience to tap. I'm guessing the word really hasn't spread yet. (A side-effect of there being no culture of software reviews in tech.)

They have an RSS feed for the newest stuff and another that has just the hot ones. I added the full feed to my personal river, so if you watch that for your news, you'll automatically get all the links in the USV flow. Oddly the white-on-orange RSS icon in the upper-right corner of their home page does not lead to a feed. This is a bad idea. What little consistency there is in the RSS world should be preserved.

I asked a series of questions yesterday to find out how their editorial flow works, and in the process learned a bunch about how it was implemented. Nick Grossman, who developed the software says "The app is python + tornado + redis + mongodb + bootstrap + jquery." They say it will be released with an open source license. There is a bookmarklet and an Android app, Chrome extension and they're working on a Firefox extension. I imagine that Fred Wilson's dislike of iPhones is responsible for the lack of an iOS app? :-)

Why this is significant

• I used to have a standard home page at scripting.com until 1997 when I moved my Frontier News page up to the home page. I realized then that the home page of a site should be the fastest-moving page on a site. It's the easiest to get to, and what most people want is to quickly find out what's new, so why not make it easy for them to get what they want?
• Since figuring that out, and having it be an unqualified success, I've been preaching the gospel to anyone who would listen. I actually pitched this idea to a VC firm in the 90s, Kleiner Perkins. But it's taken this long for one to actually do it, and it's no surprise that it's Union Square. They've always been a bit ahead of the others in the VC business.
• So you might extrapolate that other VCs will either run USV's software once it's released open source, or commission their own, or perhaps even start a company or two in this area. The remaking of the home pages of our blogs to handle news links! What a concept. Long overdue, imho.
• Now all this assumes that USV's idea will work, and there's no guarantee that it will. People who post links need to feel that they're going to get a reward for it, either in more community cred, or flow for their ideas, or attention from a leading VC (a much-sought commodity). They've already said that pitches are permitted, so expect a lot of that. I love the fact that this will incentivize people to use blogs over social media sites, thus adding strength to the un-silo'd web.
• I'm not sure if they realize that they've set up a mini-Twitter on their home page, but they have. And it has a feed. So I'm pretty happy about this.

News organizations take note

• I've long felt that the home page of every news organization should be a reverse-chronologic list of on-site and off-site links. Remember, people come back to places that send them away. I've made direct pitches to a number of news sites, and they all said no. But this may light a fire. If a VC firm can innovate in news by giving the people what they want, why can't they?
• There are reasons why they've had trouble doing it. Usually it's because of a strong separation between their development and editorial parts. The news people are not empowered to make major changes to the sites, and often seem to not understand the relatively simple tech behind news aggregation, and I assume the technical people don't see why news should be a fast-flowing thing on their home pages. And owners don't see why they should give flow to others. If USV's new system works, they may see why it's a good idea, which it is, imho of course.
• But there's much more that can be done after the nice start that USV has made. If you want ideas, go back through the archive on Scripting News, and think about how you can deliver more to your readers by giving some semi-permanent love to the bloggers and other news organizations that you read. There are worse things than having readers come to your site to find out what's new on your competitors' sites. ;-)
• The blogroll concept was just a start. Think in terms of collections of feeds and you'll be going in a good direction.

Lots of responses and unprecedented traffic for Tuesday's Apple/NSA piece.

In a comment on that post, Tom Nemec expressed a fairly common idea about journalism.

• I guess the issue lies with the business model of most sites relying on advertising and sponsorship, which makes them dependent upon said practices. Their major goal is to generate lots of page views and (often times accidental) clicks on banners and links. In order to fulfill this goal, one has to focus on popular topics and make them accessible to the lowest common denominator of the public.

My response, which I wanted to get into a separate post:

• This has been a frequent response. But journalism is a profession, like medicine. Suppose it was profitable to set bones, but not profitable to treat cancer. You go to the doctor complaining that your cancer is acting up again. He puts your arm in a cast and sends you home. Oh he has to make money you might say. But the patient dies.
• In this case the journalists are supposed to cover what's actually happening, not what makes money for them. Or if they do they can't complain when they get called on it. The whining among reporters has been pretty subdued this time, because I think they've more or less figured this out on their own. A big bait and switch has taken place, with them as the instruments of it. The tech CEOs they've been pumping up act all innocent "Oh we never knew this was going on!" they say. Oh yeah that's believable. ;-)

I’ve always written my if statements like this:

if (something)
  doAThing();

That is — no braces when the code under the if is just one line.

That’s never, not even once, been a problem for me. Never caused a bug.

And, as a relentless cutter, a simplifier by temperament, I like it because it means I can do without a couple braces. Though it doesn’t make a difference to the generated code, it does means less actual characters in the source file, and it saves a line for the closing brace.

But I recently changed my mind. Now I write it like this:

if (something) {
  doAThing();
  }

And for the same reason: for the reason of simplification.

It’s simpler because it removes a special case, which means I no longer have to notice that it’s one line or multiple lines and add or delete braces as needed. I’ve simplified what my brain has to do at the cost of some more braces in the source code. I can live with that trade-off.

(Second reason: it’s likely that I was the last Cocoa coder to omit the braces on these statements, and I’ve learned the hard way that other people are going to work on my code some day. Even with Vesper we’ve had Doug Russell work on the code, on accessibility.)

PS But you know what I’m never going to do? Write methods like this:

- (void)doSomething
{
  doAThing();
}

I absolutely cannot bear that extra line for the opening brace. It gives me gas. I’ll often — usually, even — put a blank line there, but a blank line is nice and clean. A line with just an opening brace is like a fingernail on the page. (And it ruins the clean left edge of - to open and } to close.) Instead I’d write it like this:

- (void)doSomething {

  doAThing();
}

PPS Reasonable people may disagree. It’s a cinch that unreasonable people will also disagree.

Senior unnamed Israeli official says his country will press ahead with settlement construction in occupied territories.

First time accepted submitter xavier2dc writes "TrueCrypt is a popular software enabling data protection by means of encryption for all categories of users. It is getting even more attention lately following the revelations of the NSA as the authors remain anonymous and no thorough security audit have yet been conducted to prove it is not backdoored in any way. This has led several concerns raised in different places, such as this blog post, this one, this security analysis [PDF], also related on that blog post from which IsTrueCryptAuditedYet? was born. One of the recurring questions is: What if the binaries provided on the website were different than the source code and they included hidden features? To address this issue, I built the software from the official sources in a careful way and was able to match the official binaries. According to my findings, all three recent major versions (v7.1a, v7.0a, v6.3a) exactly match the sources."

Read more of this story at Slashdot.

Leaders of a movement for self-rule on oil-rich eastern Libya have announced a formation of shadow government.

En fullt utvecklad brand rasade i kväll på sågverket i Horndal, strax norr om Avesta.

Fyra dödsoffer - både skolelever och lärare - och en 11-åring inför rätta.

Uppgifter från dokument som läckts till The Guardian.

En ny förhandlingsrunda om den federala statsbudgeten startar i USA nästa vecka.

An anonymous reader writes "The open source PHP project site was compromised earlier today. The site appears to have been compromised and had some of its javascript altered to exploit vulnerable systems visiting the website. Googles stop-badware system caught this as well and flagged php.net as distributing malware, warning users who's browsers support it not to visit the site. The comment by a Google employee over the hacker news thread (official google webmaster forum thread) seems to suggest that php.net wasn't incorrectly flagged."

Read more of this story at Slashdot.

Simple incremental backup system

Manipulates TAR archives