Author: fledgling otaku

  • trailers

    Mark has a brilliant idea – instead of movie reviews, he is reviewing movie trailers.

    If you think about it, the name “trailer” seems to be a misnomer. After all, they come before the film, right? It turns out that the reason they are called trailers though is because they are appended to the movie reels, which are then fed backwards into the projector. That, and the complete lyrics to “Can you feel the love tonight”, are the sum total of knowledge retained from my brief career in the movie business. And by movie business, I mean working in a theater.

    Though I do have quite a good collection of movie trailers, on actual movie film stock, salvaged from the theater, in a box somewhere in my parents’ house. Including The Lion King. Brian, if ever I can find it, it’s yours man.

  • close the barn doors

    I thought I was done with this, but it seems that WordPress v2.3.3 did not fix the injection spam loophole; I was just hit by another injection spam attack on my previous post (now cleaned up). I’ve closed user registration on the blog for now, though of course you needn’t register to comment thanks to the captcha plugins I have installed. I suggest that all WP bloggers do the same and keep an eye out for injection spam by monitoring your RSS feed.

  • WP 2.3.3 does not close injection spam loophole

    Over a month ago, I’d upgraded to WordPress v2.3.3 which addressed a security hole that was permitting spammers to “inject” spammy links directly into posts via xmlrpc.php, and thereby avoid the “nofollow” attribute that is automatically applied to links in comments (to deprive comment spammers of the PageRank mojo they seek). The spam was surrounded by “noscript” HTML tags, which meant that they were invisible in the browser, thus hiding the links from detection and removal. However, subscribers to the blog feed can see the spam since RSS readers ignore javascript markup.

    However, on my latest post at my geekblog, I was hit by the injection spam again. I have sent the following email to wordpress security (security @ wordpress.org)

    Hello,

    I have a WordPress blog at domain http://haibane.info which was upgraded to 2.3.3 as soon as the security release came out last month. I had experienced the injection spam attack detailed here:

    http://wordpress.org/support/topic/151368

    and upgraded to 2.3.3, but on my most recent post I have seen the same spam attack occur. The post is here:

    Google 42

    and I have already removed the injection spam, but am reprinting it below :

    <noscript><a href="http://www.casinomejor. es/casino-online- basico.html">casino online</a> mirar sus oponentes h�bitos.</noscript>

    <noscript>Il <a href="http://www.qualitapoker .com/neteller-game-poker.html">http://www.qualitapoker .com/neteller-game- poker.html</a> � un gioco di carte.</noscript>

    (there were two separate injections into the same post)

    I am disabling user registration as a precautionary measure but it is clear that the 2.3.3 release did not solve the problem.

    I recommend closing user registration on all WP blogs for the time being. Peter’s captcha plugins make user registration obsolete for commenting, anyway.

  • Google 42

    TechCrunch had a little blurb about Google’s investment in DNA sequencing. Duncan Riley threw a little 42-based humor in there for fun – check out his suggested Google logo for the project. Presumably they aren’t out to clone Douglas Noel Adams.

    42.jpg

    Wouldn’t it be cool to have a Greasemonkey script that did nothing but substitute the above logo for the standard one at the Google homepage?

  • Lost in translation

    I saw Lost in Translation yesterday via Netflix. This movie was really a surprise, I think I was just expecting a light comedic drama without any real heft to it. The premise of the movie seems like a setup for comedy: an old actor and a young newlywed both arrive in Tokyo, stay at the same hotel, and experience culture shock together. But there’s so much more to this movie, especially as a commentary on marriage and relationships, that it transcends the level of ordinary pseudo-romantic comedy and enters into Artistic territory.

    I haven’t seen Rushmore so this was my first exposure to Bill Murray playing a complex lead, and his performance was just .. well, there was no Bill Murray, there was only Bob Harris. You get inside his head and really, really understand him and who he is, even though 90% of his lines are wisecracks, and the lines themselves are only 50% of his acting. His expression, as he sees the elevator doors close on Charlotte at the end… I don’t think there are many actors who can communicate that kind of emotion with just a look, but you read it on his face like it was printed there.

    The other half of this film is Scarlett Johansson, and she probably ranks as my favorite actress right now on the strength of her performance in this movie alone. Not just because she spends a few scenes sitting around in her underwear, though this helps. She has that kind of vulnerable courage in this film that I used to associate with Sandra Bullock. Again, with her performance, you simply understand her as Charlotte, like an open book – one which none of the other characters except Bob even bother to read, least of all her husband John (played with remarkable restraint[1] by Giovanni Ribsi).

    Tokyo itself, and the hotel in particular, are vibrant and fleshed out and almost characters in their own right. The movie does a masterful job of exposing the characters to all the wierd and wonderful, but unlike some critics I did not find it disrespectful. In fact there was an odd beauty to it, like the teenager simultaneously dancing while playing a video game, or the crazy talk show host, or even the hysterical scene in Bob’s hotel room with the call girl[2].

    I think I’ll take another run through this movie and grab some screenshots later. It was really one of the best movies I have ever seen. This film isn’t one that is content to play by the rules of romantic comedy. The two characters don’t do what you would expect them to do, which actually is how it would be in reality. And the two characters don’t keep up the facade about themselves that you expect them to, and which you yourself might maintain as well. And that too is more real, particularly in the context of the isolation that they both share, one exacerbated by being in a place so foreign, but still primarily deriving from their spouses’ neglect. I won’t spoil the ending but then again, the ending is almost impossible to spoil.


    [1] Dude, you’re married to Scarlett Johansson sitting there in her underwear and all you can look at is your camera?? ahem.
    [2] “lip my stocking!” omfg rofl. I laughed so hard I choked.

  • The mysteries of time

    An email, from a vendor of a time-keeping system, to a friend of mine who heads the IT department, regarding the implementation of Daylight Savings Time:

    On 3/9 there are only 23 hours in the day. This is controlled by NASA and Greenwich Mean Time. There is nothing that can be done to correct it, it is not broken; it is the planned design. In TIM time is an exact science.

    As well in Fall when time moves back to Standard Time there will be 25 hours in the day. Schedules must be adjusted to work the required number of actual hours if they cross the span that includes 2am when this occurs. In order to receive a full 8 hour shift employees scheduled ending times will need to be adjusted at both time changes.

    I understand. NASA, Dennis Kucinich, orbital mind control lasers, the whole bit. Not to mention a conspiracy of cartographers. It all makes sense.

    Meanwhile, I remain stubbornly opposed to reading the rationale behind DLS, so that I may hate on it unimpeded by pesky facts. Sometimes I have to insulate myself against my own reasonableness.

  • not the orange popsicle kind

    push-upFew things mark seriousness of intent as much as adding a category to your blog. So take the addition of the “fitness” category here at Haibane.info for the momentous event it is. I’m in reasonable shape – I am 5′ 8″ and I weigh 150 lbs. That’s a Body Mass Index of 22.8 which is solidly in the normal range. I used to lift weights in college and still retain some of that mass. I also was an avid bicyclist for a time. However it has been about 7 years since I last went to a gym with any regularity. At age 34, I am currently engaged in no physical activities whatsoever, and the Nintendo Wii does not count.

    If I intend to be an active grandparent someday, I need to start now, and the best way to do that, in the absence of any kind of free time which I might use to actually excercise at a gym or bike or run, is to start some kind of home routine. The obvious and simplest thing to start is with pushups and situps. So, let’s see if I can set a goal for myself, to do as many pushups as I can, three times a week, before bed. The Washington Post has a handy table to consult to assess your fitness level based on how many you can do by age.

    (pause)

    I just did 20 pushups. The last 3 were with the baby deciding to ride along, which accelerated my decline, but I doubt I’d have lasted much longer regardless. That felt like a lot, but 20 is only 3 more than Poor and 4 less than Fair. I need to reach 30 to hit Good. Ten more! I’ve got a way to go I guess. I am loath to be too ambitious because then I’ll fail. I need to keep my goals modest so that the sense of progress keeps me motivated.

    20 pushups is indeed Good… if I was 50-59 years old 😛

  • the economics of interstellar trade

    Paul Krugman may be known as a fire-breathing liberal economics professor today, but back in the 70s when he was just another aspiring junior faculty, he wrote one of the coolest things in economics since.. well, Freakonomics. Namely, a short treatise on the economics of interstellar trade (PDF). Here’s the title and abstract:

    The Theory of Interstellar Trade

    This paper extends interplanetary trade theory to an interstellar setting. It is chiefly concerned with the following question: how should interest charges on goods in transit be computed when the goods travel at close to the speed of light? This is a problem because the time taken in transit will appear less to an observer traveling with the goods than to a stationary observer. A solution is derived from economic theory, and two useless but true theorems are proved.

    The tone of the manuscript itself was even more light-hearted – for example, here is Figure 2, reproduced in its entirety:

    Impressive, no? (Krugman notes that readers who find Figure 2 puzzling should recall that a diagram of an imaginary axis must, of course, itself be imaginary).

    But the main contribution of the paper were Two Fundamental Theorems of Interstellar Trade, both truly proved with genuine rigor (or so I assume, the math seems fine to me but the theory is beyond my expertise). These theorems are:

    1. When trade takes place between two planets in a common inertial frame, the interest costs on goods in transit should be calculated using time measured by clocks in the common frame, and not be clocks in the frames of trading spacecraft.
    2. If sentient beings may hold assets on two planets in the same inertial reference frame, competition will equalize the interest rates on the two planets.

    It occurs to me that this is a rich field to mine for speculative fiction. Consider the case where two planets are not in the same inertial frame, like the homeworlds of the Pierson’s Puppeteers? Could someone on either world then take advantage of the violation of the Theorems above and make a fortune?

    Of course, there are less sophisticated ways to profit as well:

    Hi my name is Prince Valtor Tazalutium the Third from the distant planet Nigeron 7. I have dispatched the fastest cargo ships in my fleet to Earth filled with the rich treasures of my home planet. However because of the vast distance between our two planets my ships will not reach Earth until I am long dead and therefore will not receive a return on my initial investment. As I have no heirs I am looking for one trustworthy stranger to buy these ships and their cargo en route to your planet. I am willing to sell them for $50,000.00 US DOLLARS. If interested please contact me at valtorlol@aol.com.

  • why did MT lose and WP win?

    ma.tt responds to Anil Dash by pointing out that WordPress is fully open source:

    WordPress is 100% open source, GPL.

    All plugins in the official directory are GPL or compatible, 100% open source.

    bbPress is 100% GPL.

    WordPress MU is 100% open source, GPL, and if you wanted you could take it and build your own hosted platform like WordPress.com, like edublogs.org has with over 100,000 blogs.

    There is more GPL stuff on the way, as well. 🙂

    Could you build Typepad or Vox with Movable Type? Probably not, especially since people with more than a few blogs or posts say it grinds to a halt, as Metblogs found before they switched to WordPress.

    Automattic (and other people) can provide full support for GPL software, which is the single license everything we support is under. Movable Type has 8 different licenses and the “open source” one doesn’t allow any support. The community around WordPress is amazing and most people find it more than adequate for their support needs.

    Movable Type, which is Six Apart’s only Open Source product line now that they’ve dumped Livejournal, doesn’t even have a public bug tracker, even though they announced it going OS over 9 months ago!

    I think that this gets to the heart of why WP is so successful. WP vs MT is almost a case study of the Cathedral vs the Bazaar. Were Six Apart to fully embrace the open source model, as WP has done, they would of course lose the revenue stream from licensing, but the absence of that stream hasn’t exactly inhibited Automattic ($29.5 million in the latest round…). Matt alludes to the MT3 debacle, which really was a betrayal of MT’s until-then loyal userbase. It came down to simply money; in an era where the best things in (computing) life are free, Six Apart seems determined to charge. And that’s been the thing holding them back. Technology alone isn’t enough, you have to address the user model. That is what MT has failed and seems to continue to fail to do.

  • in the eye of the Beholder

    This insane rant against Gary Gygax is either satire or simply the product of the kind of person who the Adults always feared playing D&D was turning all us good kids into. I don’t know what game this jerk was playing, but it certainly wasn’t Dungeons and Dragons.

    I cant take someone seriously who laments about a “hobgoblin holocaust”, nor someone who is still – STILL – hung up about the fact that elves didn’t have player classes. In Basic D&D.

    I was just in Lake Geneva this past weekend. It felt like sacred ground. Here, an industry was born. Poseurs like Erik Sofge can only snipe from the sidelines, but they never really grokked D&D. Pity them.