Computing

Topics related to computers and computing

Security of Google Desktop Search

What's that you say? Read the manual?

Since I don't have access to my XP box right now I sent Dave Winer a query about how the Google Desktop Search results are included with web results. He suggested it might be a Javascript include. A reasonable possibility but I didn't find mention of a need to run Javascript in the browser to use GDS. There is a page in the manual - who would have thought, actually read the manual - that describes the integration this way: "Wait a minute. How can web search return a page containing both www.google.com and Google Desktop Search results?

When Google Desktop Search is integrated with Google web search, what you're really doing is sending your query to two different programs and places. One copy of your query goes to www.google.com, which searches only the web and returns a page with those results to your computer. Another copy of your query goes to the Google Desktop Search application running on your computer, which searches only its cache on your computer for results. Google Desktop Search also intercepts www.google.com's results page before you can see it, changes it to include the Google Desktop Search results, and then lets your web browser show it to you. Google never knows what your Google Desktop Search results are."

So it appears it's both very cool software and well implemented so as to avoid the insecurity of send

Google desktop search

Dave Winer is very excited with Google Desktop Search. It does seem like something pretty cool and I'll have to check it out. It just might bring Windows XP one step closer to OS X. Dave notes that GDS is not available for the Mac. This seems a bit odd to me, the fact that it is a fractional web server means there are several ways it could quite easily work on the Mac. Perhaps they're waiting for some of the core searching features to be baked in in Tiger. Or perhaps they're looking at the fact that very similar functionality has been available since OS 8.6 for the Mac - longer than Google's been around. Admittedly the idea of a fractional web server is a thousand times cooler than a native app and the expandability should be great for this kind of platform. It is quite disappointing that they don't support the browsers that many community leaders use - Firefox comes to mind.

Which brings me to another idea that's been bugging me lately. When will there be a browser maker for Windows that understands spell checking. Certainly Apple's decision to bake spell checking into the operating system makes it easier, but the #1 feature of Safari as far as I'm concerned is that it can spell check anything I type on the web - critical for web content authors.

SETI@Home

The Seti@Home project allows users to use their home computers to search for intelligent life. Today news from Columbus, Ohio says that a state programmer was fired for running the program on a state-owned computer server. Maybe using all those spare taxpayer dollars to run up your personal stats isn't such a good idea.

WIll MP3 players go away?

Russell Beattie comments on Dan Gillmor's statement in the recent Gillmore Gang. Asked if he had an iPod Gillmore responded "Yes, but I don't use it any more because I have a large memory card in my Treo."

Beattie says bingo. I say not a chance. First there is an inherent problem with the Treo platform. It is too small. Yes there is such a thing. When size makes for a crappy user interface it won't succeed. Although Apple doesn't appear to realize it the time has come to re-release the Newton. Of course it needs updating and needs to have the capacity to play audio, video and store more than a desktop computer.

The storage on Treo won't begin to compete with the likes of the iPod for years. I've had a string of palms devices, cell phones, and two-way pagers for years. I've tried at least every few months to try and move my simplest tasks to them - keep track of "to do's", addresses, calendars, and take notes at meetings. Once I find this I can do away with my paper calendar/planner. None come close. The note taking si by far the worst part. Even when using a keyboard (an extra device to port around anyway) then when I get back to the office I have to think about "syncing" to get the notes to where I can use them... and then again to get them to the device to take somewhere else, of course by then the device is full and I have to decide to delete some thing or another.

Email client

So I need a new email client. I've been thinking since reading the article in this month's MacWorld and there don't seem to be any great ones out there. Here's a partial list of features I need:

  • Handle IMAP and POP mail
  • Ability to import large email stores
  • Mail must be stored in a standard format
  • Mail cannot be stored in a single file
  • Inline spell checking
  • Read HTML email

So in short there is not an emailer out there that will do that. The big compromise at this point is between Apple's Mail which does HTML interpretation well but has terrible filtering and Eudora which has wonderful filtering features and lacks in displaying HTML formatted email.

SMTP intercept

Just spent some time working on reconfiguration of one of the SMTP servers I run. The odd thing was that even the tests that should fail went through without a hitch. So I dug into the logs a bit further and found no record of any of the messages I was sending, either good or bad. So I looked at the headers and it appears the ISP for the hotel is doing NAT port redirection of all outbound connections on port 25. It's a practice that is convenient for guests but may pose both an opening for spammers to stop by and use the connection as well as annoyance for people who don't like third parties unwittingly intercepting their mail.

Technology doesn't make it better

Sarah is signed up for a class that uses a student response unit from eInstruction. I'll be interested to see how well it works, but so far I'm skeptical. First of all there is a $3.75 purchase for the "unit". There is a note that it can be "sold back" to the bookstore (at 50%) at the end of the term... Once you have the unit you simply log in and pay $15.00 to register for your class. So hundreds or thousands of students, having paid tuition to the state, purchased their books form the bookstore, and paid their technology fees to the university they are attending are now asked to pay an additional $15 to a third party so their instructor.

So what do you get for this extra $20 per class? Well, you get the ability to answer questions using a keypad... Answer all the multiple choice questions that someone can throw at you. So you don't have to really learn anything but how to spit back the right choice on a multiple choice quiz or test.

But what else happens? Students are required to give their private information, including credit card information to a third party, not the school, not a store where the student has any choice. Make it easy for the professor to take roll and require that a student give personal information to someone who has no interest in protecting the student's rights.

False positives form chkrootkit

A quick FYI this morning I ran chkrootkit from a PORTS install on FreeBSD 4.9 this morning. It comes up with a few "INFECTED" files as so:

Checking `chfn'... INFECTED
Checking `chsh'... INFECTED
Checking `date'... INFECTED
Checking `ls'... INFECTED

There were no other errors. To be safe I built and used the GCC Fileutils including gls and again chkrootkit said the same files were infected. A quick web search found a few people having this problem with FreeBSD 5.x but no mention of 4.9. A quick trip to chkrootkit.org and I downloaded and installed the new version and it didn't show the problems. Unfortunately there is no mention of this in the changelog that is a part of the readme other than "small bugs corrected".

Is it defective?

Dave Winer's Thinkpad has developed a fracture. He wonders if it has to do with airport security and the beating it has taken. I've traveled with my laptop quite a bit and not had similar problems. My Thinkpad was terribly built and just felt flimsy but weighed a ton. Dave, I'd take it back for warranty service this shouldn't happen.

The simple way

We're working through some DNS transitions at the office. On Friday I spent too long looking for a slick way to use record generators or something similar in BIND to create forward DNS entries for 750 addresses that I needed to create. It wasn't until too much later that i realized the simple solution.... It takes a few seconds to use Excel to create the records. Simply set up the first two records with sequential numbers in them and then copy away. It has to be done once for each subnet, but in a few seconds all 750 addresses were done.

Subscribe to Computing