I found this little gem waiting for me to approve. I get a bit of spam that Akismet doesn’t toss automatically, but this one struck me as an absolute failure to come across as human. It also struck me that Akismet didn’t toss this one automatically.. .:-\

Russ McRee over at HolisticInfoSec.org wrote a great article talking about Mandiant Highlighter that I and Jason Luttgens wrote. We just released a minor bug fix version, 1.1.3. Here’s the link.

holisticinfosec.blogspot.com/2011/10/toolsmith-log-analysis-with-highlighter.html

Here’s the link to the download:

www.mandiant.com/products/free_software/highlighter/

Here’s a link to the forums:

forums.mandiant.com/forum/highlighter

Highlighter v1.1.3 has been released. Check out the sweet blog post by yours truly over at blog.mandiant.com/.

Lately I’ve been doing some work in C# targeting the 3.5 .NET Framework (because that’s where LINQ — Language INtegrated Query — is introduced).  There are two forms for using LINQ: the query expression form and the method-based query form.  Each allows the exact same functionality and each has its own pros and cons.  I have found that I prefer the method-based form, perhaps because I’m trying to expand my skills with lambda functions and already know SQL well enough to get by. Here is an example of each technique.

First, here is the build-up to the interaction with LINQ:
using System.Linq;
List<string> names = new List<string> { "Alice", "Bob", "Cathy", "Eddie", "Frank", "Gary" };
Easy, right?  Even if you don’t know programming, you might be able to figure out what this means.  Moving on, the following is the query-expression form to show all names ending in the letter “y”. Then the results (in var y_endings) are printed to stdout.
var y_endings = from n in names
                where n.ToLower().EndsWith("y")
                select n;
foreach (string name in y_endings)
{
    System.Console.Out.WriteLine(name);
}
Got it?  Good.  Ok, now here’s a similar query using the method-based form to find all names of length 5 (also printed to stdout):
var fives = names.Where(n => n.Length == 5);
foreach (string name in fives)
{
    System.Console.Out.WriteLine(name);
}
That lambda function is pretty wacky, but it’s saying “Return all values which have a length of 5. I choose to refer to each tested value as ‘n’.”  They aren’t so hard in their simplest forms, but still gave me a little trouble because I’m not familiar with anonymous functions.  You can see how the query expression form is basically a lambda function and maybe that will help form your method-based queries (if you’re so disposed).  Anyway, I just wanted to share the two forms side-by-side.  For more, google LINQ and read.  Ugh.  Do it.

[edit 2010-05-10]
I posted this on my facebook account and received a well-deserved lambasting for up-voting the article.  I hadn’t thought hard enough on the problem of domain trusting with such a distributed, flexible, and multi-point service such as email.  Mat Whitney gave me a lesson on the difficulties of domain reputations when the domain is something like gmail.com or live.com — they’re publicly available and that’s where the majority of spam comes from, so how can you trust any sender from that domain without specifically white-listing the address?  That means there are only baby-steps in security available through a huge effort on the part of IT administrators with the technologies described in The Register’s article.  I take back my promotion of this article until I am able to speak more intelligently on the matter.   Whoops!
[end edit]

——————————————

www.theregister.co.uk/2010/05/09/email_and_trust/

An article on The Register writes about finally adopting existing technology (software, not hardware) to allow people to trust their inboxes again.  With all the worms, identity theft attempts, scams, and general nogoodnickism that happens via email today, users are hesitant to open emails even from addresses they recognize.  It’s like getting a package delivered by USPS and wondering if you’ll find a pipe bomb or anthrax in each one.  Well, in the digital word, electronic messages can be signed in such a way that trust can be (largely) restored and, as with the Web, “feature rich” email is the way of the future.

The article describes that, as everyone should realize, social hubs like Facebook and [the defunct] Google Wave will grow in popularity and virtual size and will begin to experience the same problems that email users have to deal with daily.  Identity theft, worms (www.google.com/search?q=koobface), and hijacked accounts occur in Facebook already and there will be no long-term decrease in these activities because they are making money with them.

My words of advice: read the article; expect trust-restoring technologies in the near future that may look a little different from the email you’re familiar with, but will be fundementally the same; be wary of what you put on social media sites (Facebook, Google profiles, MySpace, etc.); be wary of who you friend and who you show your information to.  I absolutely DO NOT advise to stop using social media websites because they carry value (that’s for a different article), but realize that it’s just a picture and text — the person you think is behind that profile may not be who you expect.

As always, your thoughts/opinions/comments/defamations/flattery/proposals are welcome.  I have to refuse some of those on principle but send them anyway.

Go here: mrdoob.com/lab/javascript/harmony/. Play with Harmony. You’ll get it. It. Is. Dope! HTML5 is the media-rich future of the World Wide Web and this sort of thing is going to become more prevalent very quickly. I’m excited!

The server I was hosted on before started going belly-up, so I moved over to www.bluehost.com (as recommended by E$). So far I’m pleased with the experience: it wasn’t seamless by any means, but there’s a good support team and other than a couple Gallery2 plugins that don’t work right, I’m back in action.

I recently had a moment of clarity with regards to my historical stance on downloading software that I have not paid for. It wasn’t the sort of clarity that helps me to pass on my point of view to others, but the sort that is more or less self-defining.

A new jailbroken iPhone application has been released into the wild that allows users to install cracked versions of pay apps as if they paid for it. It’s no different than using a cracked version of Photoshop or Premier or any other pirated software, but it’s new because it’s on th iPhone! The new app is called Installous (available at www.hackulo.us) and it is a great idea.

I saw my friend using a very expensive application ($70) that he hadn’t paid for and I though, “I want to do that too!” I downloaded the app and installed a couple games that are normally pay-only. I was messing around a little more today and it dawned on me again, after many years … I don’t want to pirate software.

This was particularly poignant because I was recently speaking with someone about the importance of revisiting semi-religious decisions like this with some regularity. I don’t know that I can take a stand against the moral implications of piracy, because I’m honestly not against the concept of learning how to use an application from the cracked (i.e. pirated) versions. But I can say that I have followed-through with my conscience regarding my desires to “have” and to “be able to resist”. I have learned to do without these toys this long, and I can do without them longer if I don’t want to pay for them.

What are your thoughts on piracy? Do you feel you’re just saving money? Do you care?

(Written from my iPhone)

I’ve been using Window 7 pre-release on my home desktop for a couple weeks now and it’s probably a decent time to jot down some thoughts.

I really dig most elements of the user interface: the organization of the screen, as well as the addition of Mac-ish features like preview from the taskbar, make it pretty easy to find directories (aka folders) when you aren’t necessarily good at navigating that sort of thing. I believe there are a few more elements from Vista-land that Vista users have shown me, but I forget to check it when I get home.

I’m am not sure I like the way Win7 handles the congregation of the My Documents folders. I haven’t looked too far into this, but the requirement that I add folders to My Documents instead of just switch where that folder is located is sort of annoying.

The thing that I truly dislike is how hard it is to act like an administrator. When I’m an admin, I don’t ever want to have to use the “Run as administrator” option. I even disable UAC and still am hamstrung when installing or trying to delete certain files. It’s very frustrating when I’m so used to the XP experience, so I’m going to definitely check out what I’m doing wrong there.

Overall I report positive things. I think the average Windows user will like the changes. Being a true power-user, there are a few things I would like to see or use differently.

My computer died… all of a sudden… for no apparent reason.

My main home desktop is was Windows XP SP3.