I decided once and for all to fix this problem, and I hope that other Traveler Guitar owners can use this approach to save themselves from getting jabbed by sharp guitar strings. Read on for my cheap and cheerful solution.

The Guitar

It’s a fun little electric guitar with a full-length scale, built-in amplifier, and headphone jack. The best thing is, it fits in an airplane overhead compartment—I have traveled by air several times with my guitar and nobody has even lifted an eyebrow.

They achieve this diminutive size by removing the head and putting the tuners in the center of the guitar body. You can see the strings starting at the tip of the fingerboard and then wrapping around little pulleys at the base of the instrument.

The Problem

From this view of the back of the guitar, you can see that the tuning machines are flush against your belly when you play the instrument. Unless you have some superior string wrapping technique that does not expose the sharp tip of the string, you will get jabbed as you play. And don’t think you can arrange things so the pointy bits are all on the inside—as soon as you tune up, the sharp ends will rotate around.

My Simple Fix

Today over lunch I stopped by my local music store and asked the guitar tech if he had some nice looking pick guard material lying around. He found a very attractive piece of laminated tortoise shell plastic which he cut roughly to size for me. He sort of squinted at it and said “How’s ten bucks sound?”, which was fine by me.

Here’s a drawing with measurements.

I used a belt sander and a smooth file to put the finishing touches on the shape, checking squareness with a try square as I worked. I then rounded the corners and put a slight bevel on all edges.

I hit Home Depot and bought some strips of Velcro, which I trimmed to size and attached to the back of the guitar and the new back plate.

The Finished Product

Problem solved!

I like the playlist tools that iTunes provides, and I find it very convenient to create Smart Playlists or to create Genius lists. However, I want to keep my Master Library of music elsewhere, far from iTunes. Wouldn’t it be great if I could share these playlists on my home network in a completely nondenominational format? Wouldn’t it be nice if my Squeezebox server would have those same playlists available? And wouldn’t it be spectacular if those playlists would magically appear on a network drive whenever the lists change in iTunes?

Read on for details on how I accomplished this and to download the free utility I wrote to handle this task.

The Problem To Be Solved

In order to understand what this application does, you need to know what I was trying to accomplish.

I have a NAS drive on my network that contains my Master Library of mp3 files. The files on this drive are located under /media/music.

I have a Squeezebox server, running on an Ubuntu machine. This server is used by Squeezebox devices to play music anywhere in my house. It holds a copy of the Master Library, located under /srv/squeezebox/music

What I want: I want my Mac to magically push proper m3u playlists to the Squeezebox server—the Squeezebox server understands m3u playlists.

What I don’t want: Squeezebox supports direct access to iTunes. But I don’t want to do this because I don’t want to have to run Squeezebox on my Mac. Why did I bother setting up a dedicated server if I have to keep my Mac running?

Why is this challenging: Even if I could point Squeezebox to the bare iTunes database file, all of the file paths are wrong. My master library might have a song at …/artist/album_name/disc 1/, while iTunes might put it at …/Artist/Album Name/, omitting the disc 1 folder and reformatting names.

My Solution

I wrote a small command line application in Perl that supports the following:

• Paths to songs in Apple’s mysterious black box are converted to nice paths to the same songs in my golden Master Library.
• Even if a song name changes or a folder path changes, the original master copy is found.
• All playlists are generated in m3u format.
• Smart playlists and Genius playlists are supported.
• The generated playlists are automatically moved to either a local directory or a remote server, using scp.
• Network shares are automatically mounted at beginning of process and unmounted at end of process.
• You can provide a file path to be prepended to all playlist entries.
• Exits early if the iTunes library has not changed since the last run.
• Supports exclusion patterns in order to skip some playlists.
• A local Squeezebox server can be automatically pinged to cause it to refresh playlists.

Here is the full documentation for the Playlist Mapper application.

Basic Installation

Please note that this is a command line program. Some day I might figure out how to make a pretty GUI installer for it, but for now you have to get your hands a little dirty in order to install and configure.

Download the application here: plmapper

This is a Perl script that uses many standard utilities already present in a Snow Leopard OS X installation. You should not need anything other than the plmapper file itself.

Unzip the file and place plmapper in your home directory.

Open a Terminal window and make the script executable:

chmod u+x plmapper

Read the man page for the application by doing this:

./plmapper --man

There are many command line arguments, but you don’t need to worry about most of them. Create a file called plmapper.config in your home directory and put any arguments you need in that file, as name-value pairs.

Example:

itunes=/Users/Bozo/Music/iTunes Music Library.xml
dest=/Users/Bozo/Desktop
library=/Volumes/media/music

Once you have added all of the configuration settings, go ahead and run it:

./plmapper

You should see plenty of status information go by as each playlist is processed.

Making it Run Automatically

There are better ways of doing this, but I’m a command-line commando, so I simply added the following cron entry (see crontab):

0 22 * * * /Users/Me/bin/plmapper >/Users/Me/plmapper.log 2>&1

This causes the plmapper program to run once daily at 10pm, logging output to a file called plmapper.log in my home directory.

Of course, this can be tweaked to taste; it doesn’t matter if you run it hourly since the app skips any heavy lifting once it sees that the iTunes library file hasn’t been touched.

How It Works

The application performs the following basic steps:

• Mounts network shares using mount_smbfs.
• All music files in the external non-iTunes Master Library are listed in an internal data structure, sorted by file size.
  This allows us to quickly find a “short list” of possible candidate files that match a given source file. This works because mp3 files have fairly random sizes.
• The iTunes database XML file is processed using an XSLT transformation to generate a set of basic m3u playlist files. The xsltproc command line utility is used to run the transformation.
• All paths in the playlists are converted from escaped URI syntax (e.g. %20 for space) to regular UTF-8 characters.
• Each path is resolved to a single music file (i.e. an mp3 file) in the Master Library.
  This is done by obtaining the size of the iTunes version of the file and then looking this up in the internal list created in the first step.
• Once a short list of candidates is found, the first few thousand bytes of each file are compared until a match is found.The risks of choosing the wrong file are low: all that will happen is that a song might be switched in the playlist accidentally. As such, it isn’t worth scanning the full file to ensure they are exact matches.This algorithm works quite well, and can detect music files that have been renamed and moved around.

• The playlist files are now converted from utf8mac to utf8 using the iconv command line utility.This process collapses wide UTF-8 characters, consisting of a letter plus an accent add-on, into their single-letter equivalents. This process is known as Unicode Normalization, and this tool uses Normalization form C: Compatibility decompisitiion followed by canonical composition.
• Playlist files are now copied to a local or remote directory, either as direct file copy or via the scp utility.
• Optionally, a special call is made to a specified Squeezebox server to tell the server to refresh all playlists.
• Any mounted shares that were mounted by this process are unmounted via diskutil unmount.

Limitations

• Nested folders of playlists currently act funny. The lists will come over, but you may get two lists. You can use the exclude option to prevent this.
• Songs with non-ASCII characters in the file name might not be recognized by all players. Squeezebox has a problem with many special characters—I tested this by adding songs like Águas de Março.mp3 using Squeezebox’s own playlist editor, and when I reloaded the list the songs were not there. This is a bug in Squeezebox server.
• Occasionally the file matching algorithm might pick the wrong song. In an effort to speed up processing, the program only looks at the first few thousand bytes of files when comparing. It isn’t a big deal if the wrong file is added to a playlist, is it?

Closing Thoughts

As often happens, this program was written because I had an itch that needed to be scratched. Now that I went through all of the hassles, I hope others can benefit.

Through good fortune, I am working in a Macintosh environment. This means that all of the important tools were already present on my machine: perl, xsltproc; mount; iconv; scp; nc; and others. If I were writing this for a PC, I probably would have written the whole thing in Java—a more familiar language to me, but one that comes with its own configuration issues.

I plan on updating plmapper over time, and if anyone has suggestions, please let me know.

And if a Perl guru wants to tell me my Perl skillz are subpar, go right ahead—but be gentle, and let me know how to improve the app.

[Update]

Fixed a couple of bugs related to path and “qx” calls, thanks to Chris. Updated version here.

I have been struggling with making everything digital for years now, and there are stacks of photos and thick albums that remain uncharted territory. Every once in awhile I sit down and scan in an album.

Trouble is, unless you do the whole job at once, it’s pretty easy to lose track of where you have already been. And if that’s not bad enough, we always bought double prints—they didn’t cost much more, and we could give some away. Now how do I know if I have scanned the long-lost twins of some photos that are already on my computer? That’s a problem for another day.

Here’s how I make sure I don’t scan the same single photo twice:

That’s right, I leave breadcrumbs in the form of little dots on the back of each one.

Such a simple thing, but it saves me from a lot of head scratching and wasted time scanning the same stuff over and over.

Scanned photographs are an entirely different brew. They typically represent events from the distant past, and scanner software EXIF data is hit or miss.

I looked for commercial software to handle a few special cases of EXIF data troubles, but came up empty handed. So I wrote a few useful AppleScript droplets that do these tasks quite nicely, and I will share them here.

Warning!

These scripts use jhead to manipulate and rewrite your JPEG files!

Don’t be a fool. Experiment first with a safe set of throwaway JPEGs. And never use these tools on original files; always keep a backup.

Prerequisite

All of these scripts depend on a fine piece of free software called jhead written by Matthias Wandel.

Installation is not difficult, but it does involve the command line.

• Go to the jhead site
• Scroll down to the Releases section and look for Pre-built OS-X Intel executable
• Right click on the jhead link on that row and choose Save Linked File to “Downloads”

At this point, I found that jhead was saved as jhead.txt. Oh well. We needed to do some command-line magic anyway.

• Open a terminal window and enter the following:

These lines do the following:

• Lines 1 and 2 navigate to the Downloads directory and remove the “.txt” from the name
• Line 3 makes the file executable by everyone on your Mac
• Line 4 places the file in a public area where everyone on your Mac can see it (you will be prompted for your password)

Stripping All EXIF Data

Sometimes I receive files that have corrupt EXIF data. I had a large quantity of scanned files in my collection that claimed to be scanned some time in 2038, while others insisted that they had been around since 1901. Neither situation is good, and I found that standard EXIF editing tools may fail to change these corrupt EXIF sections.

The answer is to blow away the EXIF data.

Download: Strip EXIF

This zip file contains a compiled AppleScript application. You can unzip it and place the application on your desktop. Safari will probably unzip it for you when you click the link.

To be safe, open AppleScript Editor and use it to open the Strip EXIF app to see its magic.

Now you can drop any number of JPEG files onto the Strip EXIF app and it will kindly eviscerate each JPEG, removing all traces of EXIF data.

Adding Basic EXIF Data to a vanilla JPEG

Some tools create JPEG files without EXIF date and time information within. This is typically the hallmark of photo manipulation software and dodgy scanner software. And if you happened to use the Strip EXIF app to rip out a bad EXIF block, then you will want to replace it with a proper data block so that you can still use camera date and timestamps.

Download: Add Basic EXIF

Again, unzip the file, place the app on your desktop, and then drop any number of JPEG files onto Add Basic EXIF.

The app will set the EXIF date to the file creation timestamp.

Spreading EXIF Timestamps

This is the real reason why I wrote these scripts. I couldn’t find a satisfactory tool on the market that would allow me to automatically spread out the shooting times for a series of images.

Why would anyone want to do this? Because some processes give you fifty JPEG files all with the exact same creation time and exact same shooting time. I like to use file renaming tools to incorporate the shooting time in the filename, so that files sort by chronological order. This doesn’t work if all of the timestamps are the same.

So I wrote a little app that adjusts the first photo by one minute, the second by two minutes, and so on. If there are fifty photos, then the last one will have its shooting time adjusted by fifty minutes.

The result is a series of photos/scans that have different timestamps.

Download: Spread EXIF Timestamps

Again, please look at the short program before you run it.

Closing Thoughts

I hope that my favorite tool implements these tricks soon (A Better Finder Attributes, I’m looking at you!), but until then, I will be dropping my files onto these three little droplets.

The jhead tool is so versatile that I will probably end up with a whole slew of similar droplets that will do all kinds of spiffy stuff. Nevertheless, I would rather the commercial products already provided these features. Not everyone likes dipping into AppleScript and the command line!

Anyway, some weeks ago I was thinking how cool it would be to have a totally fanless and silent little black box that would serve up something useful in my house, such as the wiki I use to keep track of my geeky pursuits.

The other day I managed to obtain a spare Soekris net4801 box, a device best known for embedded applications such as firewalls. Between last night and this morning, I spent about three hours working out the hitches and getting MoinMoin and Ubuntu up and running on this neat little box.

The Device

So this is what I am talking about:

Cute, isn’t it?

It’s a Soekris net4801, a single board computer, a bit smaller than a hardcover book, with a 233MHz chip and 128MB of RAM soldered on the board. It doesn’t even have a hard drive—it runs everything off of a CF card.

The Operating System

After searching around for various combinations, I chose Ubuntu. Many people use FreeBSD on these boxes, because it is such a lightweight Linux distro, but I immediately ran into issues during the FreeBSD install process, and it was clear that I was going to have to learn many details of this different distro if I wanted to make my own custom install.

The approach I followed involved creating an image using an existing Ubuntu machine—a Hardy instance (8.04LTS) that I have running in a VM on my Mac.

The Process

I followed two different pages for getting Ubuntu up and running:

• Installing Ubuntu 7.04 Server via debootstrap
• Ubuntu 9.04 (jaunty) on a soekris net-4801

As it turned out, I had to keep bouncing between the two pages, using a little bit from one and then grabbing something from the other. For example, one page mentioned using parted for partitioning the CF card, while the other used cfdisk. I found cfdisk a little less intimidating, so that’s the one I used.

Both of these pages talk about using a tool called Debootstrap to install a new Debian base system in a subdirectory of another.

By mounting the CF card on a running Ubuntu instance, and then mounting the ISO Ubuntu disk image, you use debootstrap to generate a base Ubuntu install on the CF card.

It ain’t simple, but it ain’t rocket science. There are several tedious details, but for the most part it is a matter of following the directions.

The overall process is as such:

• Format and partition the CF card with Linux filesystems
• Use debootstrap to create a base Ubuntu install on the card
• Use chroot to set the card as the root filesystem and make several tweaks, such as setting up mount points, configuring networking, and adding users
• Get the latest kernel and set up grub

Then you plug it into the Soekris and boot

Other Hardware Issues

• You need a CF card reader, a device which is becoming more rare as each day passes.
• You also need a serial cable and a machine with a serial port—that’s how you get to the console on the Soekris.

Ubuntu Configuration

Once I got Ubuntu up and running and was connected via the console, I did the following:

• Installed ssh
• Installed apache2
• Installed and configured MoinMoin

Once ssh was up and running, I could abandon the serial console and do my work from a terminal window on my Mac.

Final Outcome

I was saddened by the results. Each page takes about seven seconds to render. This is probably a combination of these factors:

• My box uses a CF card, and not a hard drive. It is quite possible that the claimed 15MB/s written on the card is a lie, and I haven’t even checked to see how far that is from hard drive access times.
• MoinMoin is filesystem intensive, and they recommend running on a system with lots of memory, to keep the files in-memory.
• This device has only 128MB of memory, and it isn’t expandable.
• The processor isn’t that fast: 233MHz.
• I have done nothing to tune the Ubuntu install to make it faster.

I looked at top while the pages were being generated, and it was clear that the CGI script for MoinMoin was really taking seven seconds each time.

I looked up MoinMoin tuning and saw that I should be using WSGI instead of CGI, but there wasn’t a ready made package for Hardy, and I didn’t want to spend the time building it, chasing after a possible second or two of performance.

Maybe some day I’ll buy the hard drive adapter for the Soekris and see if I can bump up the speed that way. It’s better to run a system like this on a hard drive anyway.

Another thing I have in mind is to try this on my PC Engines ALIX box that runs my home firewall—that’s a much faster board with more memory.

So, if you landed here because you were trying something similar, let me know. Share your thoughts and successes or failures.

Update

So I had some spare time today and I decided to take another whack at loading some of the other variants of Unix/Linux onto the device, hopefully finding something lightweight with a smaller memory footprint.

The mysteries of PXE were slowly made clear to me—if you read a the Wikipedia page, it looks fairly complex with lots of configuration on the various bits. The reality is that PXE involves a few simple things:

• Local DHCP server tweaks to point the way to the PXE server
• A tftp server—meaning Trivial File Transfer Protocol
• The actual PXE boot payload file (typically a bootstrap file along with a config file)
• Some kind of file server, such as HTTP or NFS, to host the full install directory tree from the ISO of choice (FreeBSD, Ubuntu, etc)

Any decent geek who messes around with Linux boxes probably already has a few of these pieces running somewhere.

The reason it seems so darned complicated is that most online solutions do all of this in one shot on one machine, building a DHCP server as well as an NFS server, talking about this mysterious tftp along with inetd (“Trivial FTP” sounds so much more manageable, doesn’t it?).

Upon realizing that most of the scary stuff was all about getting tftp running, I followed this fine set of instructions on Installing and setting TFTPD in Ubuntu and had my Ubuntu tftp server running in about five minutes.

I was also able to relatively quickly add two single entries in my m0n0wall firewall configuration (my DHCP server) so that it would redirect local PXE requests correctly. This involved two “hidden options” from this m0n0wall page: What about hidden config.xml options?

And the web server? I already had an Apache server installed on my Ubuntu box, so that was no problem whatsoever.

Once you separate it out into its pieces, it is a pretty quick setup.

The hardest part is setting up the PXE payload. I was able to get Soekris to boot a couple of different boot kernels, but at this point I realized that any more progress would require custom boot loaders and such, compiled on a FreeBSD machine, and this was more than I wanted to get into.

So I reimaged the borrowed Soekris as a m0n0wall firewall, as it had been before, and restored the original configuration file. In a few days it will be back in its home, doing a proper job of being a firewall.

But in all of those times, I almost never want my computer to paste “ransom note” text. Ninety nine times out of a hundred, I want clean text to be pasted, neatly blending with its surroundings. In other words, paste it as if I were typing it at the keyboard.

So why does Apple think we always want to paste styled text? And why does Microsoft think we always want our spreadsheet to suddenly be filled with somebody else’s 24 point Comic Sans letters instead of a nice unformatted date and time?

Here are my workarounds for this problem. Maybe someone can offer a few other workarounds.

Windows

The easiest way to pasting unformatted content in Windows is to use a free program called Pure Text by a gentleman named Steve Miller. Download PureText 2.0 for all modern versions of Windows.

This app doesn’t have an installer; it runs from wherever it is. However, since it does provide  the ability to launch when Windows starts, I recommend you first drag the small executable file to a nice permanent home somewhere on your hard drive (I usually create a C:\Program Files\PureText folder).

Now launch the app. You will see a small PT icon in your system tray.

All you need to do for an unformatted non-ransom-note paste action is to hit Windows+V. In other words, instead of Control+V, hit the Microsoft flag key and V. You will hear a short cowbell sound as the paste action is performed.

Macintosh

Amazingly, there doesn’t seem to be such a free simple little tool available for Macintosh.

In some applications, such as Pages, the four-key combination of Option+Shift+Command+V will perform an unformatted Paste operation.

If you don’t mind spending a bit of money, programs such as Clean Text for Mac and SmartWrap 2 provide this functionality at a price: both are about twenty bucks. Fortunately, both products provide much more functionality than just stripping formatting from the clipboard.

If you want to roll your own, the best I could come up with is to use a keyboard macro application to assign a tiny script to the desired keys—this option works fine if you already happen to have a keyboard macro application installed. I use Keyboard Maestro, though this method should work just as well with other macro tools.

The essence of the “strip formatting” operation lies in this very short shell script:

What this does is it simply pipes the output of a command-line “read clipboard” action into a command-line “copy” action. This is a text-level operation, so no funky formatting makes it through. Now, the clipboard contains only pure unformatted text.

The trick is to make your keyboard macro program execute this when you hit the key combination of your choice. Maybe I’ll find inspiration some day to learn how to make a small application like PureText for the Mac. When I do, I’ll post it here.

There are other options available for Macintosh. If you are ambitious, you can turn the problem around and Create a ‘copy as plain text’ service.

Why do computers do this?

When you copy text, the computer puts it on the clipboard in many different styles, referred to as flavors. Typical flavors might be “Rich Text”, “Unformatted Text” or “Image Data”. When you then perform a paste operation somewhere else, the receiving application sifts through the available flavors of your clipboard data and selects the one it likes the most. The application will usually pick the fanciest usable flavor available.

Usually, this process works fairly well. When you copy a selection of cells in an Excel spreadsheet, it might paste into a Word document as a proper Word table, but if you paste into an email application, you might get an image of the cells, and if you paste into a text editor such as Notepad, you will see just the numbers and words.

Likewise, a copied Visio diagram might paste into Word as an embedded editable Visio object, while a paste into Photoshop would result in a flat image, like a screenshot.

Final Thoughts

People have been swearing at the clipboard for years. The typical lowest common denominator is to paste the text into Notepad and the copy from Notepad. Even for this, Mac comes up short: the standard text editor, TextEdit, simply pastes in your ransom note text with formatting and all.

If you use Windows, go right ahead and install PureText. You won’t regret it.

If you use Macintosh, make it easy on yourself and invest in one of the payware applications. Think of how many times you have wanted to paste clean text, as if you had typed it in from the keyboard.

The content was innocent enough, but when they sent out the mailing, they made a critical error: they had pasted the entire mailing list of addresses into the Recipients field in their mail program. As a result, every parent had every other parent’s email address. Some never noticed, and others didn’t really care. Several were displeased about this breach of privacy and let the school know about it.

That individual had committed the same error as many friends and family do when they want to share a message with many people.

This social faux-pas is easy to prevent, so I include here a quick set of instructions on how to maintain your mailing list’s privacy when you have a large mailing to send out.

What’s the problem?

When you send an email to a few dozen people, you risk the following:

• Some people might be upset because you are passing their private email address around in public. Treat the email list as if it were a list of private phone numbers. Would you send such a list to everyone you know?
• You are exposing everyone on the list to an increased spam risk. If anyone has a virus-compromised email account or is a spammer themselves (perish the thought!), they will now have access to the entire list of your friends.
• It is quite possible that someone in the mailing list will click “reply all” and either send personal information meant for you to everyone else, or at least annoy the others on the list.

Keeping it Private

The solution is very simple:

• Put your own address in the To field.
• Put all of your friends’ addresses in the BCC field—Blind Carbon Copy.
• Compose and send your email.

Your friends will receive an email that contains only your address and their address; they cannot see any of the other names on the list, even if they were to dig into the gritty details of the email headers.

Have Consideration

When you send a message to a large mailing list, please

• Keep their email addresses private
• Edit out unnecessary content of forwarded messages
• Respect their wishes if they ask to be removed from your list
• Carefully consider if your mailing is appropriate for everyone in the group

In other words, don’t become a spammer in your friends’ eyes.

I have been dealing with situations like this for years, working with computers in a small school and at a nonprofit volunteer organization, shared by many. It seems that whenever I turn on any of these machines, the background is set to something ugly, the screen resolution is weird, there is some cute animated mouse cursor, and someone has left their most intimate secrets in a document on the desktop.

Microsoft Steady State solves all of these issues by providing a means of creating a golden configuration that is restored to absolute perfection the next time the machine is rebooted. But download it before the end of the year, when it will be pulled by Microsoft!

Steady State Magic

This free product gives you the ability to configure accounts on your XP or Vista machine with several fine-level access controls. For example, you can prevent users from changing screen settings or prevent them from writing to anywhere other than their personal “Documents and Settings” directory.

But by far the coolest feature is the ability to turn off hard drive writes altogether. When you do this, Windows slips a layer between the OS and the physical hard drive that intercepts and tracks all hard drive activity during a session. During the session, the user can browse the web, create documents, install programs, whatever…but when the machine reboots, the cached list of hard drive changes is discarded completely: the hard drive is restored to the way it looked before the user booted the machine.

What can you use this for?

There are many places where a completely protected machine would be of great use…

• A shared computer in a public area, like a hotel lobby
• A home computer that is used by the kids and the cat and the dog
• Computers in a school or library setting
• Shared computers in a setting where many different workers use the same computer

Anything to worry about?

• All of your users must remember that everything must be saved to a USB stick before reboot. Steady State warns you of this every time you reboot the machine.
• There are some annoyances that might happen, such as that silly “Desktop Cleanup Wizard” popping up every single day because it thinks it hasn’t been run in five months, or “New Programs Installed” balloons that come up every single day because, again, the machine is restored totally to day-one upon reboot.
• Microsoft is killing the product at the end of the year. Now it will likely remain functional for XP and Vista, but they are not upgrading it for Windows 7. But this is too cool a product not to try out. In theory, you could create a steady state machine today and keep booting today’s version of Windows XP for the next five years.

Additional Features

With the hard drive protection enabled, you can add programs at any time from an administrator account. When you shut down, Steady State will ask you if you want to commit your changed hard drive data to the Steady State disk image.

Even without the hard drive protection enabled, you have plenty of security constraints you can enable for other users to keep them from installing their favorite annoying toolbar and blinking mouse cursor. Think of this as a poor-man’s version of the domain policy tool used in enterprise environments.

More Information

• Microsoft Steady State. How to remotely remove and retain changes on lab computers.
• Defending the C disk with SteadyState from Microsoft
• Alternatives to Steady State for Windows 7: Creating a Steady State by Using Microsoft Technologies
• See Episode #129 of Steve Gibson’s Security Now podcast: Security Now! Episode Archive

Conclusion

I did not understand just how slick a tool this is until I installed it on a spare machine. It took about fifteen minutes to configure things right, but that machine has been running for the past few weeks with the locked-down golden configuration. Whenever it reboots, it looks exactly as it did when I installed Steady State.

Give it a try before it’s too late!

This belief was based on the understanding that only those with supercomputers at their disposal would have the computational ability to trundle through all of the permutations needed for a brute force attack against our jumble of weird symbols.

Richard Boyd, of the Georgia Tech Research Institute, told the BBC that the number-crunching capacity of graphics cards compares to those of supercomputers built only 10 years ago.

— The Register

Huh?!

The modern bleeding-edge graphics card, normally the purview of hardcore gamers, packs sufficient mathematical muscle to compete with not-so-old super computers?

In other words, not only do we have to worry about black-hats who can command arrays of hijacked home computers to take down sites like Twitter and Facebook at will, but they now have mathematical might at their disposal that we normally associate with scientists and three-letter government agencies.

Read all about the demise of the short password here:

Short passwords ‘hopelessly inadequate’, say boffins (The Register)

Doom and gloom?

Fortunately, from a password security point of view, this kind of computing power is most useful to hackers who have access to the encrypted password file from the server—a file that is hopefully treated with extra special care to prevent others from seeing it.

The hacker simply runs every possible combination of umpteen funny characters through well known hash algorithms until one particular choice hashes perfectly into the stolen encrypted version. Then he logs into your Lego account and orders more Star Wars Lego kits.

If the hacker does not have the list of encrypted user passwords, he cannot run this process on his über cruncher machine in isolation: He must make a login attempt with each password. And most systems start inserting longer delays, and eventually blocking logins altogether, after three or four failed attempts.

An ominous sign

Password hacking aside, there is a more sinister problem facing us…

Large powerful government agencies do not spend all of their computing horsepower trying every possible ten-character password to crack a Unix login, do they? They are more concerned with modern hard encryption technologies, the cornerstone of e-commerce and our trust in the Internet.

The time is near when these fancy 128-bit AES keys will fall prey to ne’er-do-wells with nothing more than a tricked-out gaming machine.

And I want to be able to treat a PDF file exactly as I would a sheaf of printed pages.

Then along comes someone who exploits yet another bug in someone’s PDF renderer. A few months ago Acrobat Reader was all over the news. Today I saw that all of the cool kids are jailbreaking their iPhones using a simple web site that exploits a PDF defect in mobile Safari in iOS4.

And if the slick website can inject code that does something as profound as jailbreaking your iPhone, it should be child’s play for a black hat to use the same thing to take over your iPhone and ring up millions of dollars of charges to some telephone extortion outfit in a remote part of Africa.

I guess all of the fancy PDF features are a double edged sword—recall that Active-X controls and DDT were both amazing and powerful when they were introduced, but the improper use of both have sullied their good names. I just hope that the goal of a pure paper replacement standard is not lost and that these events do not cause PDF to become a marginalized technology.