- “Why I’m quitting Facebook” by Douglas Rushkoff (CNN; 2013.02.25) –
http://www.cnn.com/2013/02/25/opinion/rushkoff-why-im-quitting-facebook/index.html?iid=article_sidebar
- I have always argued for engaging with technology as conscious human beings and dispensing with technologies that take that agency away.
Facebook is just such a technology. It does things on our behalf when we’re not even there. It actively misrepresents us to our friends, and worse misrepresents those who have befriended us to still others. To enable this dysfunctional situation — I call it “digiphrenia” — would be at the very least hypocritical.
- Facebook does not exist to help us make friends, but to turn our network of connections, brand preferences and activities over time — our “social graphs” — into money for others.
- The true end users of Facebook are the marketers who want to reach and influence us. They are Facebook’s paying customers; we are the product. And we are its workers. The countless hours that we — and the young, particularly — spend on our profiles are the unpaid labor on which Facebook justifies its stock valuation.
- I have always argued for engaging with technology as conscious human beings and dispensing with technologies that take that agency away.
- “Facebook Is Recycling Your Likes To Promote Stories You’ve Never Seen To All Your Friends” by Anthony Wing Kosner (Forbes; 2013.01.21) –
http://www.forbes.com/sites/anthonykosner/2013/01/21/facebook-is-recycling-your-likes-to-promote-stories-youve-never-seen-to-all-your-friends/
- “Why are dead people liking stuff on Facebook?” by Bernard Meisler (ReadWrite > Social; 2012.12.11) –
http://readwrite.com/2012/12/11/why-are-dead-people-liking-stuff-on-facebook
2013.02.26
Facebook sinking even deeper
2013.01.14
Android development
- Building Your First App –
http://developer.android.com/training/basics/firstapp/index.html
– a self contained introduction to installation of ADT (Android Development Toolkit), starting new project, etc. - “10 useful Resources for the fledgling Android developer” (a slideshow at NetworkWorld; 2013.01)-
http://www.networkworld.com/slideshow/85469/10-useful-resources-for-the-fledgling-android-developer.html
- “Learn Java for Android Development” by Shane Conder & Lauren Darcey, a 13-part tutorial (2010) –
http://mobile.tutsplus.com/series/learn-java-android-development/
- Getting Started for Android Developers –
http://developer.android.com/training/index.html
- Using your own SQLite database in Android applications –
http://www.reigndesign.com/blog/using-your-own-sqlite-database-in-android-applications/
- “Android (Homescreen) Widgets – Tutorial” by Lars Vogel –
http://www.vogella.com/articles/AndroidWidgets/article.html
- Android tutorials on YouTube:
- Android Tutorial 1 – How to start developing. Install SDK, ATD and Eclipse –
- TheNewBoston – Android Application Development –
http://www.youtube.com/user/mybringback
- “Learning Android Development? Here Is A 200-Episode (Almost 20 Hours) Tutorial Series – All For Free [Videos]” by Artem Russakovskii (2011.08.23) –
http://www.androidpolice.com/2011/08/23/learning-android-development-here-is-a-200-episode-almost-20-hours-tutorial-series-all-for-free-videos/
- Android Tutorial 1 – How to start developing. Install SDK, ATD and Eclipse –
- Android discussions at Reddit –
http://www.reddit.com/r/Android/
2013.01.03
Brain games
Sites
- Lumosity –
http://www.lumosity.com/
- Mind games at BrainScale.net –
http://brainscale.net/
Dual N-back
- paper: “Improving fluid intelligence with training on working memory” by Susanne M. Jaeggi, Martin Buschkuehl, John Jonides, and Walter J. Perrig –
http://www.pnas.org/content/early/2008/04/25/0801268105.abstract
- paper: “Short- and long-term benefits of cognitive training” by Susanne M. Jaeggi1, Martin Buschkuehl, John Jonides, and Priti Shah –
http://www.pnas.org/content/early/2011/06/03/1103228108.abstract
- paper: “Increasing fluid intelligence is possible after all” by Robert J. Sternberg –
http://www.pnas.org/content/105/19/6791.full.pdf#page=1&view=FitH
[PDF] - “Can You Make Yourself Smarter?” By DAN HURLEY (The New York Times; 2012.04.18) –
http://www.nytimes.com/2012/04/22/magazine/can-you-make-yourself-smarter.html?pagewanted=all&_r=1&
- Dual N-back game online (at Soak Your Head) –
http://www.soakyourhead.com/dual-n-back.aspx
[requires Silverlight 2] - Dual N-back game online –
http://www.brainboffin.com/
- Discussion at Google groups: “Dual N-Back, Brain Training & Intelligence” –
https://groups.google.com/forum/?fromgroups#!forum/brain-training
- Dual N-Back FAQ –
http://www.gwern.net/DNB%20FAQ
- IQ boost with dual n-back task –
http://dual-n-back.com/
[with online game at
http://dual-n-back.com/nback.html
] - N-back (at WikiPedia) –
http://en.wikipedia.org/wiki/N-back
- Brain Workshop – a Dual N-Back game –
http://brainworkshop.sourceforge.net/
; free downloadable application (for Windows) - Brain Workshop – Python implementation of the Dual N-Back mental exercise –
http://sourceforge.net/projects/brainworkshop/
- Dual N-Back Lite –
http://sourceforge.net/projects/dualnbacklite/
- The Brain Trainers” by DAN HURLEY (NYT; 2012.10.31) –
https://www.nytimes.com/2012/11/04/education/edlife/a-new-kind-of-tutoring-aims-to-make-students-smarter.html
“Forget Brain Age: Researchers Develop Software That Makes You Smarter” by Alexis Madrigal (Wired; 2008.04.28) –
http://www.wired.com/science/discoveries/news/2008/04/smart_software
Other
- gbrainy –
https://live.gnome.org/gbrainy
– a brain teaser game and trainer to have fun and to keep your brain trained. |
http://sourceforge.net/projects/gbrainy/
- Pathological –
http://sourceforge.net/projects/pathological/
– “an engaging puzzle game in the spirit of “Logical” byRainbow Arts. To clear a level, match the rolling marbles by collectingthem into wheels. A wide variety of board elements makes the game funand challenging.” - Jooleem –
http://sourceforge.net/projects/jooleem/
– “a simple yet extremely addictive puzzle game. The best way to kill 10 minutes. There is only one rule: click on four marbles of the same color that form a rectangle. Time is constantly running out, but you can earn time by forming rectangles.”
Elsewhere in this blog: Intelligence (IQ) –
http://eikonal.wordpress.com/2010/10/27/intelligence/
2012.11.26
SciFi
Herbert George Wells
- The Invisible Man
- The New Machiavelli
- The Time Machine
- The War of the Worlds
- The World Set Free
- Time Machine
2012.11.02
Java keytool
- Download the CA certificate from the proxy and convert it to PEM format:
/usr/java/default/bin/keytool -import -trustcacerts -file -alias CA_ALIAS -keystore /usr/java/default/lib/security/cacerts -storepass changeit
More:
- The Most Common Java Keytool Keystore Commands –
http://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html
- keytool – Key and Certificate Management Tool –
http://docs.oracle.com/javase/1.4.2/docs/tooldocs/windows/keytool.html
2012.06.27
2012.06.25
More unix tools
- Joye’s “moreutils” collection –
http://joeyh.name/code/moreutils/
. Contains following:- chronic: runs a command quietly unless it fails
- combine: combine the lines in two files using boolean operations
- ifdata: get network interface info without parsing ifconfig output
- ifne: run a program if the standard input is not empty
- isutf8: check if a file or standard input is utf-8
- lckdo: execute a program with a lock held
- mispipe: pipe two commands, returning the exit status of the first
- parallel: run multiple jobs at once
- pee: tee standard input to pipes
- sponge: soak up standard input and write to a file
- ts: timestamp standard input
- vidir: edit a directory in your text editor
- vipe: insert a text editor into a pipe
- zrun: automatically uncompress arguments to command
- num-utils –
http://suso.suso.org/programs/num-utils/
. Contains:- average: A program for calculating the average of numbers.
- bound: Finds the boundary numbers (min and max) of input.
- interval: Shows the numeric intervals between each number in a sequence.
- normalize: Normalizes a set of numbers between 0 and 1 by default.
- numgrep: Like normal grep, but for sets of numbers.
- numprocess: Do mathmatical operations on numbers.
- numsum: Add up all the numbers.
- random: Generate a random number from a given expression.
- range: Generate a set of numbers in a range expression.
- round: Round each number according to it’s value.
- Scylla and Charybdis, Tools –
http://www.scylla-charybdis.com/tool.php
. Contains:- checkrun: Program watchdog to terminate a program with starving output)
- cmpfast: Fast compare two files binary)
- count: Copy lines, shows progress)
- dbm: A little tool to access gdbm files from shell.)
- dirlist: Primitive directory lister, quicker than ls, find and echo *)
- diskus: Disk geometry checking and repair tool)
- getrealpath: Print realpath to stdout)
- histogram: Count bytes in file)
- kdmktone: Make the console beep)
- keypressed: Nonblocking, nondestructible test for waiting data on TTYs, sockets and probably pipes)
- killmem: Protect some memory against paging until you need free memory)
- lockdir: Create a directory for locking purpose)
- lockrun: Exclusively run something by placing a file lock)
- md5chk: Create md5sums for easy shell usage)
- minicron: This is a program which starts other programs after some time)
- mvatom: Move files by atomic rename instead of copy.)
- printansi: Like /bin/echo but ANSI-escapes the output)
- printargs: Like “hello world” but dumps the argc array)
- ptybuffer: daemonize interactive tty line driven programs with output history)
- runningfor: Return true until the given time periode is reached.)
- slowdown: Slowdown processes or pipes.)
- socklinger: Execute quick hack shell scripts connected to a socket.)
- sq: SQLITE3 query tool for shell usage)
- timeout: Execute a command or pipe only for a given duration.)
- timestart: Start a program N-M times in parallel by running it it each A-B seconds)
- tinohtmlparse: Simple HTML parser to extract information from HTML files by shell)
- tinoseq: An integer seq implementation)
- udevraw: Dump udev events for bash usage)
- unbuffered: Copy stdin to stdout and stderr, unbuffered)
- watcher: A Python2.6 script to watch files, pipes or Unix domain sockets)
2012.05.21
Disabling MS Windows updaters and other unwanted features
Disabling MS Office Upload Center
Options:
- To disable the Office 2010 Upload Center you can run msconfig, click Startup and remove the check next to “Microsoft Office 2010” that references MSOSYNC.EXE.
- Go to C:\Program Files\Microsoft Office\Office14 (or whatever your program files folder is) and rename MSOUC.exe and MSOSYNC.exe into something non-execeutable (e.g. MSOUC.exe-original and MSOSYNC.exe-original).
- Open regedit > Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run > Delete the entry for MSOSYNC.
- Use Autoruns to disable use of MSOSYNC (HKCU\Software|microsoft\Windows\CurrentVersion\Run\OfficeSyncProcess) at the boot time
Sources:
- “disable upload center via OCT 2010″ –
http://social.technet.microsoft.com/Forums/en-US/officesetupdeploy/thread/79e88e72-e9a2-4740-a41e-dbec4511ec59
- “Remove Office Upload Center From Taskbar System Tray” by Nakodari (addictiveTips; 2009.11.15) –
http://www.addictivetips.com/windows-tips/remove-office-upload-center-from-taskbar-system-tray/
- “Windows 7 – I Want to REMOVE Upload Center from 2010″ –
http://www.sevenforums.com/microsoft-office/142835-i-want-remove-upload-center-2010-a.html
Other update and fast starter pests
- Adobe updater: AdobeARM: c:\Program Files\Common Files\Adobe\arm\1.0\adobearm.exe |
AdobeARMservice: c:\program files (x86)\common files\adobe\arm\1.0\armsvc.exe - MS Office 10 Sync: BCSSync: c:\Program Files\Microsoft Office\Office 14\bcssync.exe
- Java Update scheduler: SunJavaUpdateSched: c:\Program Files\Common Files\java\java update\jusched.exe
- Flash player update: C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10q_ActiveX.exe -update activex
- Adobe Flash Player Updater service: c:\windows\syswow64\macromed\flash\flashplayerupdateservice.exe | AdobeFlashPlayerUpdateSvc: c:\windows\syswow64\macromed\flash\flashplayerupdateservice.exe
- Google Installer:
- GoogleUpdateTaskMachineCore: c:\program files (x86)\google\update\googleupdate.exe
- GoogleUpdateTaskMachineUA: c:\program files (x86)\google\update\googleupdate.exe
- Google update service:
- gupdate: c:\program files (x86)\google\update\googleupdate.exe
- gupdatem: c:\program files (x86)\google\update\googleupdate.exe
- MozillaMaintenance: c:\program files (x86)\mozilla maintenance service\maintenanceservice.exe
2012.05.16
Law-vs-technology
Sites
- ArsTechnica: Law & Disorder – Tech Policy News –
http://arstechnica.com/tech-policy/
| Intellectual Property –
http://arstechnica.com/discipline/intellectual-property/
| Privacy –
http://arstechnica.com/discipline/privacy-2/
- Berkman Center –
http://cyber.law.harvard.edu/
- Center for Democracy and Technology –
https://www.cdt.org/
| Blog –
https://www.cdt.org/blog
- COMMERCE AND TECH LAW blog –
http://www.bna.com/ecommerce-tech-law-blog/
| RSS –
http://www.bna.com/rss.aspx?fid=12884902166
- FOSS Patents –
http://www.fosspatents.com/
- Groklaw – Digging for Truth –
http://www.groklaw.net/
- Lauren Weinstein’s Blog –
http://lauren.vortex.com/
- Michael Geist’s Blog –
http://www.michaelgeist.ca/
- NXT – Internet policy and governance dissected –
http://news.dot-nxt.com/
- ITU and WCIT (World Conference on International Telecommunications) watch –
http://news.dot-nxt.com/United%20Nations/ITU
- ITU and WCIT (World Conference on International Telecommunications) watch –
- Policy by the Numbers –
http://policybythenumbers.blogspot.com/
- Techdirt –
http://www.techdirt.com/
- The Technology Liberation Front –
http://techliberation.com/
- The Volokh Conspiracy –
http://volokh.com/
- Web Policy blog by Jonathan Mayer (Stanford University)-
http://webpolicy.org/
– “a blog about technology, policy, and law“. - World Conference on International Telecommunications (WCIT) leaks –
http://wcitleaks.org/
Related here: Information disclosure sites –
http://eikonal.wordpress.com/2010/02/25/information-disclosure-sites/
| WikiLeaks –
http://eikonal.wordpress.com/2010/12/29/wikileaks-2010/
| ACTA –
http://eikonal.wordpress.com/2010/07/16/acta/
2012.05.05
Shell-In-A-Box
- Project page –
http://code.google.com/p/shellinabox/
- Shell In A Box implements a web server that can export arbitrary command line tools to a web based terminal emulator. This emulator is accessible to any JavaScript and CSS enabled web browser and does not require any additional browser plugins.
http://www.freshports.org/www/shellinabox/
- Shell In A Box is a web server that can export arbitary command line tools to a
web based terminal emulator- “Shell In A Box Gives Your Browser Terminal Status” by Ken Hess (2010.09.19) –
http://www.linux-mag.com/id/7864/
- Shell In A Box gives you simple web-based terminal access to your Linux system.
https://help.ubuntu.com/community/shellinabox
- “How to install Shell In a Box” –
http://www.acmesystems.it/shellinabox
- “shellinabox With Apache Authentication Over HTTPS 443″ (scottlinux.com; 2010.12.15) –
http://scottlinux.com/2010/12/15/shellinabox-with-apache-authentication-over-https-443/
- “Shellinabox” by BobJunior –
http://bobjunior.com/linux/shellinabox/
http://freecode.com/projects/shellinabox
- Shell In A Box implements a Web server that can export arbitrary command line tools to a Web-based terminal emulator. This emulator is accessible to any JavaScript and CSS enabled Web browser, and does not require any additional browser plugins. Most typically, login shells would be exported this way: “shellinaboxd -s /:LOGIN”. This starts a Web server at http://localhost:4200 that allows users to log in with their username and password and to get access to their login shell. The connection will be encrypted if SSL/TLS certificates are available.
- “Installing Shell In A Box – Ubuntu Server 11.04″ (YouTube video) –
2012.05.04
Firewalls
- FirewallBuilder –
http://www.fwbuilder.org/
- YouTube tutorials on firewalls:
- Linux – Setting up iptables firewall rules (Video 2 of 4 for setting up Linux RouterGateway) –
- IPtables, NAT, firewall en linux –
- Basic IPtables configuration walkthrough –
- Example IPtables RuleSet –
- 09-Iptables.avi –
- Iptables (Firewall Linux) – http://www.jeffersoncosta.com.br –
- Firewalling in Linux using IPtables Sp8scorp –
- How to Configure IPtables in Ubuntu –
- Configuring and Implementing Linux’s iptables – Part 1 –
- Configuring and Implementing Linux’s iptables – Part 2 –
- Configuring and Implementing Linux’s iptables – Part 3 –
- Configuring and Implementing Linux’s iptables – Part 4 –
- Mastering IPTables, Final Installment –
- Linux – Setting up iptables firewall rules (Video 2 of 4 for setting up Linux RouterGateway) –
More on this blog: IpTables –
http://eikonal.wordpress.com/2011/01/24/iptables/
| Personal Computer Security > Personal Firewalls –
http://eikonal.wordpress.com/2011/02/28/personal-computer-security/
| Port Knocking –
http://eikonal.wordpress.com/2010/10/05/port-knocking/
2012.04.27
2012.03.14
Pretty little tables
Recently I have seen in an math forum this:
|
and just a few days later this one, too:
|
Pretty little tables, aren’t they? How could they be so regular? Can they be generalized somehow?
Answers are: yes, you will see, and yes.
Wonder #1
Let’s first take a look at the first table:
| Table 1 |
|
In order to understand it one has to work not with the specific numbers (digits), but with their abstract representations. For this, we will work with a number system of base (
), which in the orginal tables is
. Then we can rewrite several first members of the Table 1 as follows:
,
,
,
- etc
Ok, we see some regularity here. To proceed further, rewrite the row of that table in the form a mathematical equation
, transforming the first beautifully looking number (
) into second beautifully looking number
.
Here the series is:
,
,
,
- …
.
| A side note: Note that For example, for |
Let’s go back to the main line of discussion.
Now we are interested in the following derivative series . The straightforward manipulation leads to the anticipated result:
.
i.e. . The initial pyramid of simple results holds for every base
.
Example: for we have
, so
,
, etc. Then, for example
.
Wonder #2
Let’s look at the Table 2:
| Table 2 |
|
Here the first (i.e. the independent) variable is the exactly same as the one used for Table 1. The second (i.e. the dependent) variable
is new one, determined by defining equation:
Then, using steps similar to these used in analysis of the Table 1, we get:
where there are copies of digit 1.
Nice. Easy.
Wonder #3
| Table 3 |
|
| Table 3* |
|
Wonder #4
| Table 4 |
|
Option Explicit
Sub sortIP() 'sorts IP addresses
Dim i As Long, j As Long, k As Long
Dim IP
Dim rg()
Dim RangeToSort As Range
Dim IPaddress As String
Dim IPColumn As Long
IPaddress = "#*.#*.#*.#*"
Set RangeToSort = Selection
'If just one cell selected, then expand to current region
If RangeToSort.Count = 1 Then
Set RangeToSort = RangeToSort.CurrentRegion
End If
'Check if row 1 contains an IP address. If not, it is a header row
'first find column with IP addresses. Check row 2 since row 1 might be a Header
IPColumn = 1
Do Until RangeToSort.Cells(2, IPColumn).Text Like IPaddress
If IPColumn > RangeToSort.Columns.Count Then
MsgBox ("No valid IP address found in Row 1 or Row 2")
Exit Sub
End If
IPColumn = IPColumn + 1
Loop
If Not RangeToSort(1, IPColumn).Text Like IPaddress Then
Set RangeToSort = RangeToSort.Offset(1, 0). _
Resize(RangeToSort.Rows.Count - 1, RangeToSort.Columns.Count)
End If
'one extra column for the IP sort order
ReDim rg(RangeToSort.Rows.Count - 1, RangeToSort.Columns.Count)
For i = 0 To UBound(rg)
For k = 1 To UBound(rg, 2)
rg(i, k) = RangeToSort.Cells(i + 1, k).Text
Next k
IP = Split(rg(i, IPColumn), ".")
For j = 0 To 3
rg(i, 0) = rg(i, 0) & Right("000" & IP(j), 3)
Next j
Next i
rg = BubbleSort(rg, 0)
For i = 0 To UBound(rg)
For k = 1 To UBound(rg, 2)
RangeToSort.Cells(i + 1, k) = rg(i, k)
Next k
Next i
End Sub
'-------------------------------------------
Function BubbleSort(TempArray As Variant, d As Long) 'D is dimension to sort on
Dim temp() As Variant
Dim i As Integer, j As Integer, k As Integer
Dim NoExchanges As Boolean
k = UBound(TempArray, 2)
ReDim temp(0, k)
Do
NoExchanges = True
For i = 0 To UBound(TempArray) - 1
If TempArray(i, d) > TempArray(i + 1, d) Then
NoExchanges = False
For j = 0 To k
temp(0, j) = TempArray(i, j)
TempArray(i, j) = TempArray(i + 1, j)
TempArray(i + 1, j) = temp(0, j)
Next j
End If
Next i
Loop While Not NoExchanges
BubbleSort = TempArray
End Function
|
Related here: Excel to text –
http://eikonal.wordpress.com/2011/02/14/excel-to-text/
| Excel files processing –
http://eikonal.wordpress.com/2011/02/25/excel-files-processing/
| IT tips pages –
http://eikonal.wordpress.com/2010/02/08/it-tips-pages/
2012.02.06
Skills acquisition
- “Why Gladwell’s 10,000-hour rule is wrong” by David Bradley (BBC Future; 2012.11.14) –
http://www.bbc.com/future/story/20121114-gladwells-10000-hour-rule-myth
- “Zap your brain into the zone: Fast track to pure focus” by Sally Adee (New Scinetist; 2012.02.06) –
http://www.newscientist.com/article/mg21328501.600-zap-your-brain-into-the-zone-fast-track-to-pure-focus.html
- “Why Chinese Mothers Are Superior” by Amy Chua (Wall Street Journal; 2011.01.08) –
http://online.wsj.com/article/SB10001424052748704111504576059713528698754.html
- Can a regimen of no playdates, no TV, no computer games and hours of music practice create happy kids? And what happens when they fight back?
- … What Chinese parents understand is that nothing is fun until you’re good at it. To get good at anything you have to work, and children on their own never want to work, which is why it is crucial to override their preferences. …
Books
book: “Bounce: Mozart, Federer, Picasso, Beckham, and the Science of Success” by Matthew Syed –
http://www.amazon.com/Bounce-Federer-Picasso-Beckham-Science/dp/0061723754/
Related: On importance of practice –
http://eikonal.wordpress.com/2011/01/11/on-importance-of-practice/
2012.01.27
2012.01.24
Quacks everywhere
Bruce Lipton
- “Bruce Lipton, quack” at Atheist in a (Metaphorical) Foxhole blog –
http://inafoxhole.livejournal.com/83321.html
Dr. Joseph Mercola
- “FDA Orders Dr. Joseph Mercola to Stop Illegal Claims” by Stephen Barrett, M.D. (at QuackWatch; 2012.02.01) –
http://www.quackwatch.com/11Ind/mercola.html
- “9 Reasons to Completely Ignore Joseph Mercola” by Joseph Albietz (Science-Based Medicine) –
http://www.sciencebasedmedicine.org/index.php/9-reasons-to-completely-ignore-joseph-mercola-and-natural-news/
- Postings on Dr Mercola at Science Blogs
- “Dr. Oz defiantly embraces The Dark Side” –
http://scienceblogs.com/insolence/2011/01/dr_oz_finally_unequivocally_embraces_the.php
- As 2011 dawns, there is no doubt in my mind that Dr. Oz has now inevitably crossed the Woo-bicon, gone over to the Dark Side, betrayed the cause, gone woo, or whatever you want to call it. I say again: Stick a fork in him. He’s done, as far as science-based medicine goes. That’s because he featured one of the biggest promoters of quackery on the Internet on his show in one fawning segment after another. I’m referring, of course, to Dr. Joe Mercola, who was the main guest on The Dr. Oz Show yesterday in segments entitled The Alternative Health Controversy (part 1, part 2, part 3), coupled with another segment entitled The Surprising Supplement You Need. Let’s just say that Dr. Oz’s journey to the Dark Side is now complete. He has controlled his fear but released his woo, and it is strong woo indeed.
To give you an idea of just how bad this is, take a look at the introduction to the show before the credits. Dr. Mercola is described as a “pioneer in alternative medicine” and “a man your doctor doesn’t want you to know.” I don’t know about you, but hearing that made me think instantly of Kevin Trudeau and his now-infamous book of quackery Natural Cures “They” Don’t Want You To Know About.
2011.12.06
C|Net’s Download.Com trojans
- “C|Net Download.Com is now bundling Nmap with malware!” by Fyodor (nmap-hackrs email list; 2011.12.05):
From: nmap-hackers-bounces@insecure.org On Behalf Of Fyodor Sent: Monday, December 2011.12.05 17:36 To: nmap-hackers@insecure.org Subject: C|Net Download.Com is now bundling Nmap with malware! Hi Folks. I've just discovered that C|Net's Download.Com site has started wrapping their Nmap downloads (as well as other free software like VLC) in a trojan installer which does things like installing a sketchy "StartNow" toolbar, changing the user's default search engine to Microsoft Bing, and changing their home page to Microsoft's MSN. The way it works is that C|Net's download page (screenshot attached) offers what they claim to be Nmap's Windows installer. They even provide the correct file size for our official installer. But users actually get a Cnet-created trojan installer. That program does the dirty work before downloading and executing Nmap's real installer. Of course the problem is that users often just click through installer screens, trusting that download.com gave them the real installer and knowing that the Nmap project wouldn't put malicious code in our installer. Then the next time the user opens their browser, they find that their computer is hosed with crappy toolbars, Bing searches, Microsoft as their home page, and whatever other shenanigans the software performs! The worst thing is that users will think we (Nmap Project) did this to them! I took and attached a screen shot of the C|Net trojan Nmap installer in action. Note how they use our registered "Nmap" trademark in big letters right above the malware "special offer" as if we somehow endorsed or allowed this. Of course they also violated our trademark by claiming this download is an Nmap installer when we have nothing to do with the proprietary trojan installer. In addition to the deception and trademark violation, and potential violation of the Computer Fraud and Abuse Act, this clearly violates Nmap's copyright. This is exactly why Nmap isn't under the plain GPL. Our license (http://nmap.org/book/man-legal.html) specifically adds a clause forbidding software which "integrates/includes/aggregates Nmap into a proprietary executable installer" unless that software itself conforms to various GPL requirements (this proprietary C|Net download.com software and the toolbar don't). We've long known that malicious parties might try to distribute a trojan Nmap installer, but we never thought it would be C|Net's Download.com, which is owned by CBS! And we never thought Microsoft would be sponsoring this activity! It is worth noting that C|Net's exact schemes vary. Here is a story about their shenanigans: http://www.extremetech.com/computing/93504-download-com-wraps-downloads-in-bloatware-lies-about-motivations It is interesting to compare the trojaned VLC screenshot in that article with the Nmap one I've attached. In that case, the user just clicks "Next step" to have their machine infected. And they wrote "SAFE, TRUSTED, AND SPYWARE FREE" in the trojan-VLC title bar. It is telling that they decided to remove that statement in their newer trojan installer. In fact, if we UPX-unpack the Trojan CNet executable and send it to VirusTotal.com, it is detected as malware by Panda, McAfee, F-Secure, etc: http://bit.ly/cnet-nmap-vt According to Download.com's own stats, hundreds of people download the trojan Nmap installer every week! So the first order of business is to notify the community so that nobody else falls for this scheme. Please help spread the word. Of course the next step is to go after C|Net until they stop doing this for ALL of the software they distribute. So far, the most they have offered is: "If you would like to opt out of the Download.com Installer you can submit a request to cnet-installer@cbsinteractive.com. All opt-out requests are carefully reviewed on a case-by-case basis." In other words, "we'll violate your trademarks and copyright and squandering your goodwill until you tell us to stop, and then we'll consider your request 'on a case-by-case basis' depending on how much money we make from infecting your users and how scary your legal threat is. [...]
- “Does CNET Download.com’s new installer install malware?” (HighTechReality.com blog; 2011.08.30) –
http://hightechreality.com/2011/08/cnet-downloadcoms-installer-install-malware/
- “Download.com wraps downloads in bloatware, lies about motivations” by Lee Mathews (2011.08.22) –
http://www.extremetech.com/computing/93504-download-com-wraps-downloads-in-bloatware-lies-about-motivations
- There was a time long, long ago when Download.com was the place I went for software. It’s been years, however, as the site repeatedly showed signs of devolving into a site every bit as bothersome as the many third-tier software repositories that hide genuine links below clever-placed advertisements and bundle toolbars with their “certified” local downloads.