Klockor mot nazister i Almedalen SvD Inrikes(cached at May 28, 2014, 11:34 pm)

Visby domkyrkoförsamling planerar tillsammans med andra initiativtagare en ”manifestation för mångfald, yttrandefrihet, demokrati och medmänsklighet” under årets Almedalsvecka, rapporterar P4 Gotland.
CVE-2014-0943 (webspherecommerce) (Natl. Vulnerability Database) SANS ISC SecNewsFeed(cached at May 28, 2014, 11:30 pm)

CVE-2014-0943 (webspherecommerce) (Natl. Vulnerability Database) SANS ISC SecNewsFeed(cached at May 28, 2014, 11:30 pm)

True Crypt Compromised / Removed?, (Wed, May 28th) (InternetStormCenter) SANS ISC SecNewsFeed(cached at May 28, 2014, 11:30 pm)

True Crypt Compromised / Removed?, (Wed, May 28th) (InternetStormCenter) SANS ISC SecNewsFeed(cached at May 28, 2014, 11:30 pm)

al-Sisi mot väntad seger i Egypten SvD Utrikes(cached at May 28, 2014, 11:05 pm)

Egyptens förre arméchef Abd al-Fattah al-Sisi ser som väntat ut att gå mot en valseger efter att vallokalerna stängts och rösträkningen börjat.
Läsande man bortglömd på bibliotek SvD Inrikes(cached at May 28, 2014, 11:04 pm)

Klockan 20.23 på onsdagskvällen ringde en man upp Linköpingspolisen och berättade att han satt inlåst på biblioteket.
Bunnie Huang Shows Off His Open Source Laptop (Video) Slashdotby timothy on hardware at January 1, 1970, 1:00 am (cached at May 28, 2014, 11:04 pm)

Bunnie Huang is both a hardware and software hacker, but that's greatly understating the case: renaissance man is more like it. Bunnie doesn't just tinker with one-off system modifications or console mods (though he's done that, too) -- he creates and repurposes at scale. (He's also an author, respected researcher with interesting thoughts on a wide range of topics, like how to think of the H1N1 flu from the point of view of a security researcher.) Bunnie's latest long-term project has been mentioned a few times on Slashdot: It's an open-source laptop computer that goes much farther than some other open-source hardware projects, and as a bonus includes an FPGA as well as a conventional -- but unusual -- processor. (Bunnie grants that there are still bits that aren't quite open source, but points out that we also don't have the software that runs the fabs; there's a point of diminishing returns.) A crowd funding campaign (via CrowdSupply) was successful enough to also fund several stretch goals, including a general purpose breakout board. I talked with Bunnie at the recent Bay Area Maker Faire. (Expect more from that show in coming weeks.) He walked us through the state of the hardware, and talked about some of the design decisions that go into making a computer that is of, by, and for hackers. (Alternate video link)

Read more of this story at Slashdot.








How It Went on Vesper Syncing Day One inessential.comat January 1, 1970, 8:00 am (cached at May 28, 2014, 11:01 pm)

Of course I was anxious about Vesper syncing day one. My job was to write a bunch of iOS and Node.js code that ought to actually work. My job is also to monitor the servers and make sure they’re happy.

Everything was fine through the betas, of course — but things can change when it’s suddenly many thousands of people instead of dozens.

I’ll invent a day one 0-to-10 scale (because as a programmer I have to start with 0):

0 - everything went perfectly
5 - there were near-constant struggles and moments of panic
10 - had to remove the app from the App Store temporarily and turn off the servers

We ended up at 0.1 on that scale. That’s just about as close to perfection as we’re likely to see on a day one. I’m totally happy about that.

At the same time — non-technical stuff now — we got great response. The app is rated highly, with lots of reviews, and we’ve heard from even more happy people on Twitter and email.

As much as I love it when people write about how syncing is fast and unobtrusive, my favorite part is the feedback that mentions our customer support.

Customer support is all Dave.

Dave is the second-best support person I’ve ever worked with, and I’ve been privileged to work with great support people throughout my career. First best is my wife Sheila Simmons, who did support for years for NetNewsWire and MarsEdit. Everybody else is judged by that standard.

Great support takes empathy, imagination, and brains, and Dave brings all three to the job.

What’s great about indie software is pretty simple: it’s a small team of people who aren’t just doing a job — they’re making, by hand, carefully and with love, the best thing they can make for other people. That focus on other people doesn’t stop with the product itself: it extends to every part of the process. It’s why I blog about development. It’s why Dave makes sure that he does the best possible job helping people.

And yesterday we were reminded, again, that people like indie software. Even with all the changes — App Stores, iPhones, iPads, etc. — over the years, people still like supporting the village toymaker.

(And if I’ve got you inspired about indie apps, and you’ve already bought Vesper, go buy Acorn. Or MarsEdit, so you can blog more. Or Hazel. Or Capo. Great apps by great indies.)

How It Went on Vesper Syncing Day One inessential.comat January 1, 1970, 8:00 am (cached at May 28, 2014, 11:01 pm)

Of course I was anxious about Vesper syncing day one. My job was to write a bunch of iOS and Node.js code that ought to actually work. My job is also to monitor the servers and make sure they’re happy.

Everything was fine through the betas, of course — but things can change when it’s suddenly many thousands of people instead of dozens.

I’ll invent a day one 0-to-10 scale (because as a programmer I have to start with 0):

0 - everything went perfectly
5 - there were near-constant struggles and moments of panic
10 - had to remove the app from the App Store temporarily and turn off the servers

We ended up at 0.1 on that scale. That’s just about as close to perfection as we’re likely to see on a day one. I’m totally happy about that.

At the same time — non-technical stuff now — we got great response. The app is rated highly, with lots of reviews, and we’ve heard from even more happy people on Twitter and email.

As much as I love it when people write about how syncing is fast and unobtrusive, my favorite part is the feedback that mentions our customer support.

Customer support is all Dave.

Dave is the second-best support person I’ve ever worked with, and I’ve been privileged to work with great support people throughout my career. First best is my wife Sheila Simmons, who did support for years for NetNewsWire and MarsEdit. Everybody else is judged by that standard.

Great support takes empathy, imagination, and brains, and Dave brings all three to the job.

What’s great about indie software is pretty simple: it’s a small team of people who aren’t just doing a job — they’re making, by hand, carefully and with love, the best thing they can make for other people. That focus on other people doesn’t stop with the product itself: it extends to every part of the process. It’s why I blog about development. It’s why Dave makes sure that he does the best possible job helping people.

And yesterday we were reminded, again, that people like indie software. Even with all the changes — App Stores, iPhones, iPads, etc. — over the years, people still like supporting the village toymaker.

(And if I’ve got you inspired about indie apps, and you’ve already bought Vesper, go buy Acorn. Or MarsEdit, so you can blog more. Or Hazel. Or Capo. Great apps by great indies.)

Eben Moglen on Snowden and Surveillance (Schneier blog) SANS ISC SecNewsFeed(cached at May 28, 2014, 11:00 pm)

True Crypt Compromised / Removed?, (Wed, May 28th) SANS Internet Storm Center, InfoCON: green(cached at May 28, 2014, 11:00 pm)

Earlier today, the popular disk encryption tool Truecrypt was essentially removed from Sourceforge, and replaced with a warning that Truecrypt is no longer secure and people should switch to Bitlocker  (with instructions as to how to do this). The source code was updated and essentially all functionality was removed but the installer will now just show a message similar to the one displayed on the homepage.

Recently, a community effort was launched to review the Truecrypt code, in particular to check for backdoors and incorrectly implemented crypto algorithms. As far as I know, no significant issue was found to date.

This very much smells to me like a compromised Sourceforge repository. Truecrypt uses Sourceforge for all of its content. At this point, sit back, don't visit the Truecrypt sourceforge page or download the crippled version, but don't panic (yet).

,

------
Johannes B. Ullrich, Ph.D.
SANS Technology Institute
Twitter

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Ännu mer blod spilldes i Irak SvD Utrikes(cached at May 28, 2014, 10:34 pm)

I de senaste våldsdåden runtom i Irak dödades i dag minst 63 människor. Skottlossning och bombdåd ägde rum i huvudstaden Bagdad och i de oroliga norra och västra delarna av landet, uppger säkerhets- och sjukhuskällor. Ett av de blodigaste dåden inträffade i Mosul där två bilbomber exploderade och tog sammanlagt 21 människors liv.
Ännu mer blod spilldes i Irak SvD Utrikes(cached at May 28, 2014, 10:34 pm)

I de senaste våldsdåden runtom i Irak dödades i dag minst 63 människor. Skottlossning och bombdåd ägde rum i huvudstaden Bagdad och i de oroliga norra och västra delarna av landet, uppger säkerhets- och sjukhuskällor. Ett av de blodigaste dåden inträffade i Mosul där två bilbomber exploderade och tog sammanlagt 21 människors liv.
Fler lyckades fly från Boko Haram SvD Utrikes(cached at May 28, 2014, 10:34 pm)

Ytterligare fyra nigerianska skolflickor som kidnappats av den islamistiska gruppen Boko Haram har lyckats fly. Det uppger Musa Inuwa, utbildningsansvarig i delstaten Borno.