Toronto's Green Beanery Cafe and Wholesaler is politically complicated

I’m currently looking for replacement parts for my old Bodum burr grinder; this led me to Toronto’s Green Beanery. I had heard previously that the owner of Green Beanery was some kind of Internet mogul, so I went Wikipedia hunting. Coffee is always politically problematic

Not quite an Internet mogul, but very complicated indeed. Turns out, Green Beanery is a non-profit organization, that supposedly supports small coffee farmers. So far, so good. But, all of the profit goes to Energy Probe, an environmental NGO—still good. The founder of Green Beanery is Lawrence Solomon, a co-founder of Energy Probe. This is where things get complicated. Lawrence Solomon is a global warming denier, opposed to the expansion of Canadian nuclear power, in favour of transit privatization (especially the TTC), and calls for a “reform” of foreign aid. Energy Probe board members include Margret Wente, Andrew Coyne, and Clifford Orwin, all staunch pro-market, neo-conservatives (Wikipedia even going as far to call Orwin as a Straussian!). Energy Probe is described as being “ecocapitalist” and was adopted by Progressive Conservative Party of Ontario under Mike Harris.

While we’re at it, Ducks Unlimited saves wetlands so hunters can blast more ducks. Complicated indeed.

Contest still open, plenty of press fuels the hacker fires

I’ve heard word that people are working on the Cracking the Agrippa Code contest, but none have yet been successful. I’m looking forward to seeing just how tricky the encryption is, and what creative solutions there are for cracking it.

There has been considerable press coverage on the contest, which should help get plenty of capable hackers trying their hands at it.

• Boing Boing
• Schneier on Security
• Ars Technica
• Slashdot
• Gizmodo
• The Verge
• Yahoo News
• Reddit
• CBC Radio’s As It Happens

And of course, plenty of Twitter action. Retweet and share the love!

Cracking the Agrippa Code

The contest has started, and is picking up traction. As news comes in I'll post it here. The final information (winner's name, cracking information, etc) will all be posted on the Cracking the Agrippa Code website: http://www.crackingagrippa.net

"Small problems" in the humanities?

I am someone who knows my way around a keyboard, but isn’t really invested in computer science, hacking, or computer and electrical engineering—I’ve often been fascinated with the idea of “small problems” in the practice of computing. I’m here referring to the ubiquitous weekend projects and semi-organized hackathons. Not only do these (very) occasionally lead to important theoretical insights, they frequently contribute to the practice. We’ve seen all sorts of feats of implementation, development, reverse engineering, and integration. 

While the humanities are a decidedly less practice-oriented field, there still are enclaves of practice, such as in digital humanities, book history, and of course, actual writing. If we were to find areas of practice, or small areas of theory, what would the humanities take to be a “small problem”, accomplishable in a weekend or a hackathon?

The student's (and faculty's) guide to computer security

[N.B. I’ll be discussing Mac software exclusively, but basically the rules apply to other operating systems.]

A friend of mine recently had his laptop stolen from school, and he came to me asking if there is any way to track the device. Basically, that answer is a sad “no”, but there are some things you can do before your laptop is stolen.

A word about “security”. I’m using this in the broadest sense possible, and will be offering a kind of “best practices” approach. The things that you’ll want to “secure” are: data, privacy, and physical device recovery. Let’s start with the easiest.

Data security

“If it isn’t in at least two places, it doesn’t exist” ~ a paraphrase from an unknown Internet source

It’s simply not enough to occasionally move your important files over to a USB key or external hand drive every now and then. Likewise, emailing your files to GMail probably isn’t good enough either. Here’s what I do, and you should too:

1. Automatic offsite backup. It may cost you $50/year but the various (secure) cloud backup services may save your butt, and if you should have irrecoverable data corruption, or if your device is stolen, you would gladly spend that $50/year to recover all of your data. In the event of a disaster it will save you a lot of time to get back up and going too, since most services will allow you to either download all your files or (for a fee) ship you a hard drive of all your data. These services run continuously or nightly (the prior is much preferred) and will save every file on your computer. This includes those intangibles that would never be saved with your current “email” backup strategy, like your holiday pictures and your large music collection. Sure, saving your dissertation-in-progress is important, but how sad would it be to lose the pictures of your children, your ex-lovers, your holidays, and your family? I use Backblaze (Mac or Windows), which I really enjoy. After some experimentation, I discovered that it hits all the criteria for me: unlimited backup, continuous (“smart”) backup, and encrypted data prior to uploading.
2. Automatic onsite backup. If you use automatic cloud backup you might not need this one, but still, it’s an extra layer of protection and can help recover particular versions of your data, or allow for very fast data recovery (if your onsite data is good, then no need to recover from the cloud). All you need is a cheap external hard drive or (better) an Apple Time Capsule for automatic over-the-air backup. Turn on OS X Time Machine and it takes care of the rest. It’s a few hundred dollars well spent.
3. Automatic cloud syncing. A third data backup!? I know, it might be overkill, but it’s easy to do and offers other benefits also. If you use a service like Dropbox (2GB free) and keep all of your more important documents in the Dropbox folder, you’ll get automatic versioning for every single save, and you’ll be able to access your files from anywhere using the web interface. Ever find yourself at school without your laptop, and you forgot to print that important document? Log in to Dropbox and view all your documents. The backup solutions described above don’t backup your data as frequently, so if a program crashes and corrupts your data you might lose an hour or a day’s worth of work, but so long as you click Save every few minutes (and you should), you’ll be safe with Dropbox. [OS X Lion has automatic backup and versioning capabilities, but until they are fully supported by all your applications this isn’t really an answer. Microsoft Word, notably, does not support system-level versioning.]

Privacy

There are two senses of privacy in this scenario. The first is privacy while you use your computer. Some of the cloud services listed above (ahem, Dropbox) are very bad in terms of privacy and data security, but they may just be a necessary evil (that’s how I view it). Your web browser is the other obvious place for privacy, and using browser extensions like Ghostery will help protect you online. The second scenario is privacy if your laptop is stolen. Here’s some tips:

1. Always secure your laptop with a password. This may seem annoying but it is important (you’ll realize that when your laptop is stolen). OS X has made it relatively painless: System Preferences -> Security & Privacy and then set “Require password ___ minutes after sleep or screen saver begins” to a number that isn’t too annoying, but is relatively secure. Mine is set to 15 minutes.
2. Your email account is your skeleton key to online privacy, so treat it accordingly. Gmail offers enhanced security such as two-factor authentication and verification code requirements (if you have a mobile device). Likewise, Facebook can do two-factor authentication by sending you an SMS with a code every time a new device attempts to log in to your account. This won’t necessarily help you if your laptop is stolen and is password protected (and it is, right?), but it’s a good idea anyway. If your laptop is stolen and you do use Gmail (who doesn’t?), go in to your Google account settings and log out of all other sessions.

Physical device recovery

This is a trickier one. Step one is “don’t lose your laptop”, but assuming you’ve skipped step one, there are a few options.

1. Sign up for Apple’s free iCloud service, and turn on “Find my iPhone” for all your devices (yeah, they still haven’t changed the name to reflect the fact that you can locate any OS X and iOS device). If your laptop connects to a wifi location you’ll be able to track it on a map. The irony of the iCloud tracking is that it won’t work if you have password protected your laptop, but, you should definitely password protect your laptop if you don’t want your identity stolen and your life ruined. Leaving a “Guest” account on your OS X machine would permit a thief to log in but not access your information, thus increasing the possibility of this service working.
2. Sign up for a (free or paid) tracking service. Unlike Apple’s iCloud there are services that run at a “root” level on your machine and can track it even if it is password protected (so long as it can still automatically connect to a wifi location). You may still be out of luck (the thief may not connect to a wifi location), but it’s worth a shot. I use the (free) Prey service which allows you to gather information on the thief, and even take a photo of the person using your webcam.

So, there you go. Spend an afternoon securing your digital world and you’ll thank yourself later. If you are a n00b and can’t figure this stuff out, go talk to your local n3rd (who should be willing to help, for a beer), or even ask an Apple Genius to help you set up the configurations.