Sunday, November 5, 2017

Rage Quitting

In the Leverage episode The Gold Job, the hacking expert took a turn leading the con by making a real life video game. 

Spoiler warning - his plan (though not the con as a whole) failed when the marks got frustrated and quit.  Rage quitting.

So a little while later, I found myself wondering how many of our shooters are basically rage quitting life.

Sort of a "I can't win, this isn't fun, screw everyone" sort of thing.  I wonder if there's any research on that.

Saturday, November 4, 2017

Wanted to Add...

I don't post as much about Trump because there's plenty of other people out there, saying the same things I would say.  He is deeply unpopular.  I know of a very, very few people who outright support him...

So I speak up when Hillary Clinton's name comes up because there still seems to be a large number of people who seem to think she was the best candidate in 50 years, and that the only reason she didn't become president was because of sexism, Russian interference, or the Comey investigation.

I  have heard plenty of people acknowledge the flaws in other candidates while still saying they will support them.  Heck, that's sort of how I am most of the time...you pick the candidate that seems the lesser of two evils, or the best you can get out of the choices you're given. 

Hillary Clinton had a problem with her high unfavorability from the get go.  The thing her supporters shouted the most (that she had been under the spotlight for so long that nothing new could come, that she was proven and tested) was actually the thing that hurt her the most.  That is, after decades in the spotlight almost everyone had already made up their minds about her and it would be very difficult to change that.  Especially since so many had a negative impression.

She was supposed to have 'electability', but how can you judge electability right when you totally ignore those unfavorables?

This isn't actually about Hillary Clinton herself, you see.  I don't know her well enough, she sounds like a very complicated lady, and while I have not been too impressed with her character and judgement that's just my personal opinion.

The reason I keep speaking up isn't about her, so much as the party base that is so unwilling to question her candidacy.  The one that dismisses every criticism as part of the "vast right wing conspiracy", tolerates any character questions as "that's just what politicians do.  Everyone else does it, too."  Yes, there are people on the right who rabidly hate on the Clintons.  I shuddered to think of 4-8 years of Republican witch hunts, which you know would have happend if she'd won.  But that 'vast right wing conspiracy' would have targeted Obama, too.  You could say that they did.  It's just that the whole birther thing was so ridiculously stupid that only fringe elements bought into it.  It never gained the traction of something like the Lewinsky scandal or Hillary's e-mails. 

There's a reason for that.

Hillary's supporters get really, really, really upset at the Bernie bros, or Russia, or Comey, or whoever it is they blame for Hillary's loss without ever questioning what sort of system puts two of the least liked politicians ever in a competition for the presidency.  (I keep asking myself how, in a nation of over 300 million people, we wound up with Donald Trump and Hillary Clinton as the leading contenders for the presidency.  I know we have better choices out there!)

A Persistent Threat

I like this article because it shows how persistent cyber threats operate.  That is, this was a sustained effort that only had to succeed once.

As an aside, I read one of the Hillary supporters trying to say this latest round of allegations are yet another nothingburger, and referred to this opensecrets site.

I have questions about the info here I don't know how to look up, since my desired search terms bring up the most recent issues.  I might try a deeper search on my computer (i.e. limit the date range).

Those questions are mostly related to a perennial problem, with Clinton scandals in particular but not exclusively.  Namely this argument that whatever-it-is is something "everyone does" and nothing to be worried about. 

Sometimes those arguments are fair.  I recall reading about the poor IT situation at the State Dept, for example, and it did explain some of what I'd consider malfeasance if done in the SCIFs I worked at.

At other times, these arguments sound like something a six year old would say.  "But everyone does it!" And I'd wonder how supposedly astute politicians try making arguments that wouldn't fly with said six year old's mother.  If you can counter the argument with "two wrongs don't make a right", or "and if 'everyone' decided to jump off a cliff would you do that too?" then maybe you shouldn't be using it as a grown adult.

And sometimes we just don't have enough information to evaluate the claim.  I looked at that opensecrets list and wondered a) when were the states given that money and b) how does the breakdown compare to similar payouts in previous years.  In total dollars as well as a percentage of it all.

It still doesn't justify or explain some of the almost willful ignorance about the agreement giving the Clinton campaign total control over strategy (of somewhat more concern to me than the finances, only because the DNC was apparently broke and it would have taken a better person than most to give the DNC a lot of money without any strings attached.  Though I'd like to see more about how/why the DNC was broke, and why so many  Democratic donors apparently chose to give a lot of money to Hillary, and not to the DNC or state orgs.  More of that 'don't know what's normal so can't really judge' type of problem.)

I saw one poster, for example, point out that some of the language in the agreement preserved DNC neutrality -
“nothing in this agreement shall be construed to violate the DNC’s obligation of impartiality and neutrality through the Nominating process” and that “all activities performed under this agreement will be focused exclusively on preparations for the General Election and not the Democratic Primary.”

Now, the problem I have with that is that saying one thing and doing it are often different. To stick with the Clintons, saying (for example) you take "personal responsibility" for your election loss is just words when your actions show you really, really don't.  I know it doesn't feel fair, and it seems like letting others 'get away with it' or win, but there's a reason I was taught as a young cadet to say "No excuse, sir."

Even if you really do have an excuse.

It sucks, we all have the urge to defend ourselves and argue.  But something funny happens when you take ownership, full stop, and stop trying to explain or excuse.  It's like, everyone is able to move on and (more importantly, if you really are unable to accept a possible poor impression - even when you have time to correct it by performing well in other areas) you can sometimes let those explanations come to light later, where they're more likely to be understood and accepted since you weren't trying to dodge responsibility.

Anyways, saying in the agreement that the DNC would still be neutral doesn't mean it is, and it's hard to imagine how that would even be possible if they're running strategy by the Clinton campaign.

Thursday, November 2, 2017

Politics Today, Part II

So I've got a calculus test today, and I'm typing this in between reviewing formulas for taking the derivative of logarithms, calculating elasticity, and evaluating interest rates (whether continuous interest or compound interest).

I'm trying to figure out what to say that won't turn into basic Clinton bashing (I am definitely not a fan, you see). 

And that's kind of the problem.  Or rather, the fact that we can't have an honest discussion about Clinton without sounding like it's Clinton-bashing is a problem.  The true believers have all their counter-arguments and defenses already lined up.  Don't like her? 

You must be a Republican.

Or too credulous, and willing to believe Republican lies.

Or sexist.

Or it was all Comey, and Russia, and you are letting them 'win' if you talk about Hillary's mistakes.

It kind of bothers me that we are almost a year past the election, and Hillary Clinton's name is still coming up all too often.  Some of that is on the Republican side - they seem to like using her as a distraction - but some of that is Clinton herself.  Who just refuses to go away.

And her true supporters laud her for that, even as the 2/3rds of the population who don't support her are sick of it.

I find myself wondering, why is she so desperate to hang on?  Like - I know that you have to believe in yourself to run for office.  That you have to convince yourself that you need to be the candidate, that nobody else can do it better.  (After all, if they could do it better you'd drop out and vote for them...right?)

But at some point you have to understand the distinction between what's best for you and what's best for the party.  And I really don't think Hillary hanging on is best for the party.  She lost to one of the most unpopular presidential candidates ever.  Some of that may be because of Russian meddling, or Comey, or any of the other excuses...but the race wouldn't have been close enough for those things to matter if she had been a better candidate in the first place. 

The true believers act as though her years of experience were a good thing, since it proved nothing the Republicans did could stick.  They were so focused on defeating the Republicans (and calling them out for all the 'lies' against their own candidates) that they didn't care at all about what the casual voter thought. 

Or how it looked, that the entire Democratic party supported a candidate who was under an FBI investigation.  After all, they all 'knew' the investigation was just Republican shenanigans, and not anything anyone should take seriously.

And now that the election is over, why, we've got better things to worry about.  Like Trump.  Or Russia.  No need to look at how and why the entire Democratic party supported such a flawed candidate.

So much of the commentary on that tweet is avoiding exactly that. 

Politics Today, Part I

This morning I saw this tweet, and decided to check out the comments.  I know, I know...people have stopped doing that.  It's ugly, negative, and you can't really tell who are bots, or paid responders, or just trolls trying to get people wound up.

Still, I like doing it for certain articles because it feels like I'm taking a pulse on an issue.  That is, the media may decide what to write about and may even slant the article a certain way, but the comments is where you get readers responses.  A sense of how they are interpreting the article.  And it's not always in the way the author expected or intended.  Plus, if there are bots or paid responders it's kind of worth knowing what sort of narrative is being pushed. 

Let me rephrase that - comments may not accurately reflect the viewpoints of the population, but it can and does reflect the strength of certain narratives (whether genuine or paid) and it's worth knowing what those narratives are and how many responders take the time to share it.

I have to admit, I was disappointed/disturbed by the narrative thus displayed, and what it says about America today.

This post is pretty much an attempt to sort through why it bothered me.

When I was a kid, I argued with one of my younger brothers a LOT.  I remember one particular argument - not the details, of course.  I remember Mom got involved, and it didn't go the way I wanted it to.  I wanted her to clearly back me up, see my brother's misdeeds and punish him.

What I do remember, however, is when she asked me "Do you think your brother thinks he won?"

Now, as a child I really didn't want to hear that, of course.  I was right, he was wrong, and it was very black and white to me.  But that question did kind of stick in my mind, because (now that I'm older) it brings up a very good point.  Namely, that just because we think someone 'got away with it', or wasn't punished appropriately doesn't mean that they feel the same way. 

I could go into a speech on human nature, on our tendency to exaggerate the hurts done us and minimize the hurt we do to others (thus making our evaluation of 'just punishment' flawed, as instead of "an eye for an eye" we feel that taking both eyes is just punishment for their taking one of ours) but I think that would take too long, so I'll skip it for now.

The point was that in a dispute we tend to focus on defeating the other, and in doing so we lose sight of the bigger picture.  So, for example, in a counterinsurgency we start focusing on killing insurgents rather than the bigger picture (i.e. killing insurgents as well as reducing their ability to recruit new insurgents through a combination of policies.  Like addressing the grievances that motivate new recruits, making it clear that there is a way out if they give up the fight (so they don't feel like they have to fight to the death), and remembering to create a safe place for neutrals and people caught in the middle.  That way there clearly IS an alternative.  You basically want to make it clear that supporting you is better than supporting the bad guys, not just morally...but also in terms of safety and your ability to protect those who support you.

On a less violent, less visceral level the same thing happens in politics.  That is, true believers (on the left and the right) focus on their opponents.  On wanting to clearly win, and make the other side clearly lose.  They get tunnel vision, and lose sight of the bigger picture.  They pander to their base, and stop caring about persuading those who aren't already true believers (like them.) 

And they want to make the other side lose.  Badly. 

So they consider any attack on their own to be lies...while any attack against their opponent is God's honest truth.  And anyone who doesn't see it their way is too stupid to know better, or misled by the lies of their opponents.  Either way, it's not worth considering.  And definitely not worth changing course - after all, that would mean their opponent won


Monday, October 30, 2017

What I've Learned in School

The more I learn about computers, the more I realize how much there IS to learn.  And the more I appreciate the hard work of those who've come before me.  It must have taken thousands upon thousands of man hours every year to get where we are today.

This post is just typing out some of the things I've been piecing together, since I think it will help clarify some things for myself.  So as not to get too bogged down in technical details, I'll just warn any readers that people can write books about each topic here, so this is definitely not an in-depth look at any of it.

The heart of computing is tied to simple electric switches.  Think of a light switch to your living room - it's either on or off.  Yes or no.  0 or 1.  It's all...binary.

All computing comes down to turning millinos of tiny little switches either on or off.  Which is why it's so freaking amazing that we have display screens, graphics, video games and more...all from a series of switches turning on and off.

Hardware (circuits, memory cards, etc) has to do with the physical ways we have of determining what switches are turned on and off.  How your mouse or keyboard sends signals telling the computer to change some 0s and 1s on or off.  Your computer has logic circuits, for example, which may look at two different locations and decide whether to turn a switch on or off based on what it sees.  (i.e.  if something is true you turn a switch on, and arbitrarily call it '1'.  If it's false you turn the switch off, and arbitrarily call it '0'.  If you only want something to occur if two items are true, you check to see if both are switched on...and only if both are on do you turn on another switch.  x AND y turns on only if both x and y are on.  x OR y turns on if either x or y is on.  x XOR y turns on only if one or the other is on, but not both.  Hence logic circuits can allow us to do complicated things based on whether switches are turned on or off...and can mimic our more formal logic.)

But 0's and 1's are really hard to work with, and it's too easy for us to make mistakes.  So we came up with a number of things.  We came up with some arbitrary sets of 0's and 1's to represent letters, for example (like ASCII and Unicode).  And a way of telling the machine whether the 0s and 1s indicate numbers or letters.

We came up with something called Assembly Language, which allows us to tell a machine what to do without having to translate it all into 0s and 1s ourselves (the machine does it for us.)  Assembly Language gets into the nitty gritty details of your computer, and how it does what it does.  It means you have to tell it every little step of the way.  Like giving extremely detailed instructions on how to drive your car to the store.  You can't just say "drive down the street until you reach the third stop sign, then turn left."  You have to tell it how to put a key into the ignition, how to put the car into reverse, how to step on the gas...all the tiny little details it takes to do this thing we call 'drive a car'.   

This is interesting stuff, though, since I think that's where we get most of our security exploits.  Oh, assembly language is also slow and tedious (though less slow than 0s and 1s), and we have even higher programming languages that are easier to use.  We're learning some of them in my computer science courses.  But figuring out how a piece of malware takes over a program and depends more on the mechanics going on at assembly level.

So then...

When you run a program, the central processing unit sets aside some places in memory for everything the program needs.  You've got some identifying information, the code itself, initial variables, uninitialized variables that will be set during the running of the program, and a couple of interesting things called the heap and the stack.  These things are stored in specific locations.  Many programs require you to identify what sort of variable you are using (integer, character, etc) ahead of time so that the computer can reserve enough space to store that information when the program runs. 

The heap and stack change size as needed while the program runs.  The stack in particular makes things interesting, since it allows a program to do some pretty complicated things.  See, every time you say "compare x to y, and if x is ____ do _____" it requires some complicated steps.  First, you have to know where x is and where y is.  Then you have to do the comparison. 

So x and y get stored in registers, and there's special arithmetic logic unit that does the comparison and returns the result.  The computer looks at that result...and often the result requires jumping to a new series of instructions.  There's something called an instruction pointer that helps the computer keep track of where it is.  It stores the memory location for the next instruction.  If the program says to go to another set of instructions, the pointer will put in the new location for that instruction, and the program processes the instruction at that location.

I'm still learning a lot about how it all works, but the security flaw that sort of clicked in my head was a buffer overflow.  If I understand what's going on correctly, what happens is that (unless someone is careful with their programming) any time you ask a user for input and the user provides something larger than what the computer expected, that information will fill the location set aside when the program was initialized and spill over into the next memory location.  'Overflow'.  If you know where you are in the program, and what it's overflowing into, you can overwrite the values already at that location.  If those values happen to be instructions for the program to run, you can give the program new instructions.  You can basically tell the instruction pointer to jump to a totally different location where you've coded in malicious instructions (or just overwrite the existing instructions entirely, which will likely cause an error whenever that program is run...so it's kind of obvious.  Better to make a small change pointing the code elsewhere, then return to the original program and run it like it's intended.  Then the user won't notice anything particularly wrong.)

There's a lot more to it than that, of course, but it's nice to start making some connections out of all the stuff I'm learning.


Saturday, October 21, 2017

Update

School is on track, though I've got various projects to do over the next couple of months.  Once I complete this semester, I'll have finished all the prerequisites for the Master's in Computer Science program except one.

Which means that next semester I can start getting into more specialized work in the areas that interest me.  Should be fun. :)

I've also been watching a bit of Netflix lately.  Started off by (finally!) finishing Luke Cage, the third season of Voltron, and all of The Defenders. 

As I generally prefer to read, that was unusual enough...but I decided to continue the trend for a bit.  It's actually cheaper, in a way.  See, I devour books.  I have to be careful about starting a new (large) series as I have a tendency to stay up very, very late finishing the book.  Which is not necessarily a good thing if I have school or work or something.  In college I mostly didn't read during the school year, then whipped through a ton of books during finals week.

I've been re-reading some of the books in my personal library.  Partly because it's been long enough I've forgotten most of the plot, and partly because it's cheaper than buying new books.  It's also sort of interesting to compare my impressions when I was younger to my impressions upon reading the book again today.

Still, sometimes I'm not in the mood for the books I already own.  Which means buying more books.  (The library, you see, would cost me extra to use as I technically live in the county rather than the city.)

So anyways.  Homework, school, and a bunch of Netflix.  After watching The Defenders I decided to watch Leverage, which was pretty enjoyable.  Comedy, action, heists, and enough real world issues to give it more depth than usual for that sort of show.  Good character development, and it's fun to see the actors demonstrate how different they can look/act as they try to pull off their capers. 

I do wish they'd done more with Hardison's background.  See, we know a lot about Nate.  We've had flashbacks of Parker's childhood, as well as encounters with the thief that trained her.  We had Eliot's old flame.  Sophie's friend brought them The Wedding Job.  They all had a case or two brought to the team through their old ties.  While I'm not saying Hardison's backstory was neglected (we know about his Nana, playing violin, etc.) I don't remember an episode where they helped out one of his family members or childhood friends.  I suppose their encounters with Chaos might qualify?

Anyways, now that I'm done with the series I'll finally track down the movies for The Librarian and carry on with the new Librarians series.  My father says a good actor is one you don't recognize from movie to movie.  I don't claim to be a great acting judge, but it's one of the things I notice now.  See who changes enough of their mannerisms to be - unrecognizable.  I think David Tennant's a good example, since the exact same guy played the Doctor and Kilgrave.



In Leverage, pretty much all the actors do that.  Sophie in particular, of course, but everyone does it to one degree or another.  (It cracked me up when Sophie took on some of Eliot's mannerisms in The Hot Potato Job.  I didn't really think think about how much his low throaty voice was part of the role until he changed it up in The Tap Out Job, and here's Sophie doing her version of the exact same thing.) 

I looked up most of the actors on IMDB and was surprised to realize Christian Kane (who played Eliot in Leverage) also played Lindsey in Angel and Jacob Stone in The Librarians.  I'd seen pictures and gifs of The Librarians through some of my social channels and had been mildly interested in watching it for a while.  It's just that I had planned to start with the movies (even if they aren't strictly necessary) and since they weren't on Netflix the slight effort of tracking them down had kept me from following through.