blarg?

doom

Cuban Shoreline

I tried to explain to my daughter why I’d had a strange day.

“Why was it strange?”

“Well… There’s a thing called a cryptocurrency. ‘Currency’ is another word for money; a cryptocurrency is a special kind of money that’s made out of math instead of paper or metal.”

That got me a look. Money that’s made out of made out of math, right.

“… and one of the things we found today was somebody trying to make a new cryptocurrency. Now, do you know why money is worth anything? It’s a coin or a paper with some ink on it – what makes it ‘money’?”

“… I don’t know.”

“The only answer we have is that it’s money if enough people think it is. If enough people think it’s real, it becomes real. But making people believe in a new kind of money isn’t easy, so what this guy did was kind of clever. He decided to give people little pieces of his cryptocurrency for making contributions to different software projects. So if you added a patch to one of the projects he follows, he’d give you a few of these math coins he’d made up.”

“Um.”

“Right. Kind of weird. And then whoever he is, he wrote a program to do that automatically. It’s like a little robot – every time you change one of these programs, you get a couple of math coins. But the problem is that we update a lot of those programs with our robots, too. Our scripts run, our robots, and then his robots try to give our robots some of his pretend money.”

“…”

“So that’s why my day was weird. Because we found somebody else’s programs trying to give our programs made-up money, in the hope that this made-up money would someday become real.”

“Oh.”

“What did you to today?”

“I painted different animals and gave them names.”

“What kind of names?”

“French names like zaval.”

“Cheval. Was it a good day?”

“Yeah, I like painting.”

“Good, good.”

(Charlie Stross warned us about this. It’s William Gibson’s future, but we still need to clean up after it.)

Your new password must contain a mix of:

  • uppercase letters
  • lowercase letters
  • numbers
  • symbols
  • symbols that are also numbers
  • illuminati symbols
  • hobo signs
  • occult symbols (not illuminati)
  • old girlfriend’s phone numbers
  • hieroglyphs
  • fragrances
  • H.P. Lovecraft references
  • exotic spices
  • descriptions of that favorite sweater you lost in a breakup that one time
  • secret regrets
  • controversial onomatopoeia
  • limericks about a thermostat
  • vaguely sexual innuendos
  • anagrams of a word you can’t spell
  • favorite emoji
  • least favorite emoji
  • turnips
  • shrugs
  • ennui
  • cursory pats on the back
  • long stares into the middle distance
  • moments of quiet yearning for lost love (unrelated to sweater or secret regret)
  • cups of OK coffee
  • sense of resigned inevitability (minimum three)
  • irish setters
  • tweed hats

No repeat characters.

This has been sitting around in the drafts folder for a while. I’m not sure why I wanted to finish it off tonight, but I want to get all these half-finished posts done. This seemed like a good way to knock off some of the rust.

Rust Never Sleeps

Occasionally when I’m in one of my darker moods I’ll fire up a game that’s meant to be multiplayer and walk through it alone, crawling around the fringes and corners to see how the game reacts to unexpected stimuli, looking for soft spots and exposed nerves.

I’ve always been a lurker in open worlds games, real life being no exception; I don’t remember when I started looking for the seams, the little gaps where the walls don’t quite line up or the high ledge that offers a long view, but it’s not a thing I can turn off. And when I’m in that sullen loner’s mood, sitting in the dark soloing multiplayer spaces is a pleasant way to spend an hour or two on just that sort of wallhack tourism.

Halo’s Spartan Ops, is kind of fun though not particularly replayable distraction. It’s a neat idea, and I sort of wish they’d done more with the idea of serving up Halo in smaller episodic doses. The environments, though… if you have the right eyes you can’t help but notice that built-for-a-shooter feeling that pervades the designed landscapes of that franchise.

Its not just the trademark gun-litter; whether it’s a forcefield deployed pointlessly in a cave, an otherwise-empty room with one door and twenty or so alien warriors milling around inside waiting to no discernable purpose or an massive structure of dubious architectural merit built by an advanced alien species whose accomplishments include intergalactic teleporters but not doors, you never have a moment to shake off the sense that the world is built entirely around sight lines.

Specifically, as they emerge from you.

This is a pretty niche failure mode, I’ll admit. It’s possible I’m the only person who will ever notice or care about it. But it’s been a long time since I’ve seen a space designed for a shooter that didn’t undercut any grandeur and greater aspirations the game might have. It maybe unavoidable; as lush as some of these environments seem at first, how do you evoke that sense of being part of something much bigger than yourself when everything is designed around you?

So much video game architecture fails that test of basic significance, worlds of outsized and beautiful physics-defying structures that don’t speak to any motive beyond themselves. Halo 4 is hardly the worst example, but the scale it aspires to makes this kind of anarrative laziness hard to overlook. This incredibly ambitious backstory, these huge structures and it’s all facade; there’s no “why”, because you’re there with the controller in your lap and you’re the “why” and there is no larger story than that.

“This place once belonged to an ancient and noble civilization, whose might and wisdom spanned the galaxy”, these structures say, “and as a monument to our glories we have built this: a monochromatic rhombus.”

Also I’m not sure how that Spartan Miller guy got his job, but he’s kind of excitable for an ostensibly hardened space marine.

But if you’re the sort of person who appreciates a jetpack – and if you’re not I don’t really see how we can keep being friends – then a lot of these arbitrary obstructions and forced perspectives are suddenly, inexplicably tractable. That extra degree of freedom is enough; in some places – Science Mountain is a good choice here – suddenly you can fly over a gate you were meant to fight past. And the game, of course, doesn’t appreciate being spoken to like that: Halo is on rails, and always will be thus! And you’re frightening the AI and this is just the way things are and I don’t care for your tone, young man. You can’t just leave the rails, that’s why it’s called “going off the rails”, and… hey, get back here!

And in this transgression, of course, Halo reveals itself for what it is.

You clear that gate, mop up a few stragglers and hop back to flip the switch to proceed. Enemies appear, less and listless. Defeat them, and now you’re alone. The next part of the sequence simply doesn’t happen. No-one else appears, no more doors open. Your team never contacts you and you, stoic and silent, never reach out to them.

There’s no meaning, there’s no more, there’s no distraction; there’s just reflection and just you, silently exploring a small corner of a deserted island intended only for you, forever. And there’s nothing to do but look for another seam, another glitch, to allow you maybe possibly move on.

It’s a weird, lonely feeling; kind of what you’d expect from soloing a multiplayer game alone in the dark.

You can think of them as the Fry and Laurie of malevolent synthetic intelligences that are going to murder you.

In a fortuitous coincidence, this video – a collection of communications from SHODAN, antagonist of the classic System Shock 2,

and this video, of GlaDOS‘ spoken dialogue from the first Portal,

… are both about 14 and a half minutes long.

You should listen to them both at the same time.

I was in an Ikea last weekend, when their background music system started playing Rage Against The Machine.

I was actually paralyzed for a moment. I found myself looking around, thinking “Am… Am I just old? Is this old-person music now? Or is it finally time? Here? Why here, now?” I felt, briefly, like I was revisiting a scene from They Live, entirely in my own head. Am I the only person who can hear this? Doesn’t anyone else know what comes next?

I took a minute to look around; I expected to see at least one other person trying to decide whether or not it was time to start flipping stuff over and setting it on fire, but nope. Not a one.

UPDATE: A cölleägüe pöints öut thät there ären’t enough ümläuts in this pöst, which I will äddress directly.

horse-castle

A friend of mine has called me a glass-half-broken kind of guy.

My increasingly venerable Nokia N9 has been getting squirrelly for a few months, and since it finally decided its battery was getting on in years it was time for a new phone.

I’m going to miss it a lot. The hardware was just a hair too slow, the browser was just a hair too old and even though email was crisp and as well done as I’ve ever seen it on a small screen, Twitter – despite being the one piece of software that periodically got updates, strangely – was always off in the weeds. Despite all that, despite the storied history of managerial incompetence and market failure in that software stack, they got so many things right. A beautiful, solid UI, an elegant gesture system that you could work reliably one-handed and a device whose curved shape informed your interaction with the software in a meaningful way. Like WebOS before it, it had a consistent and elegantly-executed interaction model full of beautiful ideas and surprisingly human touches that have pretty much all died on the vine.

Some friends have been proposing a hedge-fund model where they follow my twitter feed, scrape it for any piece of technology I express interest in and then short that company’s stock immediately and mercilessly. The reasoning being, of course, that I tend to back underdogs and generally underdogs are called that because of their unfortunate tendency to not win.

So now I own a Nexus 5; do with that information what you will. The experience has not been uniformly positive.

Android, the joke goes, is technical debt that’s figured out how to call 911, and with KitKat it seems like somebody has finally sent help. For a while now Android has been struggling to overcome its early… well, “design process” seems like too strong a term, but some sort of UI-buglist spin-the-bottle thing that seemed to amount to “how can I ignore anyone with any sort of design expertise, aesthetic sensibility or even just matching socks and get this bug off my desk.” KitKat is clearly the point we all saw coming, where Android has pivoted away from being a half-assed OS to start being a whole-assed Google-services portal, and it really shows.

Look: I know I’m a jagged, rusty edge case. I know. But this is what happened next.

As you open the box, you find a protective plastic sheet over the device that says “NEXUS 5″ in a faint grey on black. If you don’t peel it off before pushing the power button, the Google logo appears, slightly offset and obscured behind it. It’s not a big thing; it’s trivial but ugly. If either word had been a few millimetres higher or lower it would have been a nice touch. As shipped it’s an empty-net miss, a small but ominous hint that maybe nobody was really in charge of the details.

I signed in with my Google Apps account and the phone started restoring my old apps from other Android installs. This is one of the things Google has done right for a long time; once you see it you immediately think it should have worked that way everywhere the whole time. But I didn’t realize that it restored the earlier version of the software you had on file, not the current one; most of my restored pre-KitKat apps crashed on startup, and it took me a while to understand why.

Once I’d figured that out and refreshed a few of them manually, set up my work email and decided to see if Google Goggles was neat as it was last time I looked. Goggles immediately crashed the camera service, and I couldn’t figure out how make the camera work again in any app without power-cycling the phone.

So I restart the phone, poked around at Hangouts a bit; seems nice enough and works mostly OK, could use some judicious copy-editing in the setup phase to sound a little less panopticon-stalkerish. (But we’re all affluent white men here it’s no big deal, right? Who doesn’t mind being super-easy to find all the time?)

I went to make dinner then, and presumably that’s when the phone started heating up.

Eventually I noticed that I’d lost about a quarter of my battery life over the course of an almost-idle hour, with the battery monitor showing that the mail I’d received exactly none of was the culprit. From what I can tell the Exchange-connection service is just completely, aggressively broken; it looks like if you set up the stock mail client for Exchange and pick “push” it immediately goes insane, checking for mail hundreds of times per second and trying to melt itself, and that’s exciting. But even if you dial it back to only check manually, after a while it just… stops working. A reboot doesn’t fix it, I’ve had to delete and recreate the account to make it work again. Even figuring out how to do that isn’t as easy as it should be; I’ve done it twice so far, one day in. So I guess it’s IMAP and I’ll figure calendars out some other way. We use Zimbra at the office, not Exchange proper, and their doc on connecting to Android hasn’t been updated in two years so that’s a thing. I’m totally fine in this corner, really. Cozy. I can warm my hands on my new phone.

I’ve been using my Bespoke I/O Google Apps accounts before Google doubled down on this grasping, awful “G+ Or GTFO” policy, and disabling G+ in Apps years ago has turned my first-touch experience with this phone into a weird technical tug-of-war-in-a-minefield exercise. On the one hand, it’s consistently protected me from Google’s ongoing “by glancing at this checkbox in passing you’re totally saying you want a Google+ account” mendacity, but it also means that lots of things on the phone fail in strange and wonderful ways. The different reactions of the various Play $X apps is remarkable. “Play Games” tells me I need to sign up for a G+ account and won’t let me proceed without one, Play Movies and Music seem to work for on-device content, and Play Magazines just loses its mind and starts into a decent imitation of a strobe light.

I went looking for alternative software, but The Play Store reminds me a lot more of Nokia’s Ovi Store than the App Store juggernaut in a lot of unfortunate ways. There are a handful of high-profile apps there work fast and well if you can find them. I miss Tweetbot and a handful of other iOS apps a lot, and keep going back to my iPod Touch for it. In what I’m sure is a common sentiment Tweetbot for Android is looking pretty unlikely at this point, probably because – like the Ovi Store – there’s a hundred low-rent knockoffs of the iOS app you actually want availabl, but developing for Android is a nightmare on stilts and you make no money so anything worth buying isn’t for sale there.

It’s really a very nice piece of hardware. Fast, crisp, big beautiful screen. Firefox with Adblock Plus is way, way better than anything else in that space – go team – and for that on its own I could have overlooked a lot. But this is how my first day with this phone went, and a glass that’s half-broken isn’t one I’m super happy I decided to keep drinking from.

Bricks

I was going to write this to an internal mailing list, following this week’s PRISM excitement, but I’ve decided to put it here instead. It was written (and cribbed from other stuff I’ve written elsewhere) in response to an argument that encrypting everything would somehow solve a scary-sounding though imprecisely-specified problem, a claim you may not be surprised to find out I think is foolish.

I’ve written about this elsewhere, so forgive me, but: I think that it’s a profound mistake to assume that crypto is a panacea here.

Backstory time: in 1993, the NSA released SHA, the Secure Hashing Algorithm; you’ve heard of it, I’m sure. Very soon afterwards – months, I think? – they came back and said no, stop, don’t use that. Use SHA-1 instead, here you go.

No explanation, nothing. But nobody else could even begin to make a case either way, so SHA-1 it is.

It’s 2005 before somebody manages to generate one, just one, collision in what’s now called SHA-0, and they do that by taking a theoretical attack that gets you close to a collision, generalizing it and running it for around 80,000 CPU hours or so on a machine with 256 Itanium-2 processors running this one job flat out for two weeks.

That hardware straight up didn’t exist in 1993. That was the year the original Doom came out, for what it’s worth, so it’s very likely that the “significant weakness” they found was found by a person or team of people scribbling on a whiteboard. And, note, they found the weaknesses in that algorithm in the weeks after publication when those holes – or indeed “any holes at all” – would take the public-facing crypto community more than a decade to discover were a theoretical possibility.

Now, wash that tender morsel down with this quote from an article in Wired quoting James Bamford, longtime writer about all things NSA:

“According to another top official also involved with the program, the NSA made an enormous breakthrough several years ago in its ability to cryptanalyze, or break, unfathomably complex encryption systems employed by not only governments around the world but also many average computer users in the US. The upshot, according to this official: “Everybody’s a target; everybody with communication is a target.”

“Many average computer users in the US”? Welp. That’s SSL, then.

So odds are good that what we here in the public and private sectors consider to be strong crypto isn’t much more of an impediment for the NSA than ROT-13. In the public sector AES-128 is considered sufficient for information up to level “secret” only; AES-256 is for “top secret”, and both are part of the NSA’s Suite B series of cryptographic algorithms, outlined here.

Suite A is unlikely to ever see the light of day, not even so much as their names. The important thing that this suggests is that the NSA may internally have a class break for their recommended Series B crypto algorithms, or at least an attack that makes decryption computationally feasible for a small set of people that includes themselves, and indeed for anything weaker, or with known design flaws.

The problem that needs to be addressed here is a policy problem, not a technical one. And that’s actually great news, because if you’re getting into a pure-math-and-computational-power arms race with the NSA, you’re gonna have a bad time.

A little while ago, the espresso machine in our office broke down. This doomsday scenario is, and I say this without the least bit of hyperbole, the most catastrophically dire situation that can exist in this or any other possible universe. If the intertubes felt slow for you the last few weeks, that’s probably why.

After a while, I started asking a colleague, Sean Martell, to ‘shop up some old war propaganda every few days, to express our dismay.

So, here you go.

We Need Coffee To Survive

It Can Happen Here

We Can Do It

Mercifully it is now fixed, and productivity should normalize in a day or two.

After explaining the death of a neighbor’s cat to Maya, every conversation we have can now get incredibly heavy without the least bit of advance warning.

“Dad, I want eggs for breakfast.”
“Ok, Maya, how do you ask for things?”
“Please can I have eggs for breakfast please?”
“Sure. We can make scrambled eggs.”
“Ok. Dad, are you going to die?”
“Eventually. Hopefully not soon, but eventually everyone dies. That’s why we have to be kind to each other with the time we have.”
“Can I have ketchup?”
“Maya.”
“Please can I have ketchup with breakfast please please?”
“Certainly.”
“Is mom going to die?”

It’s honestly like having a cartoon piano land on your mood four times a day.

Guys guys great news: it turns out that panicky superstitious people who deliberately misinterpret their shallow understanding of an incredibly narrow slice of a foreign culture they’re otherwise completely disinterested in aren’t reliable predictors of anything at all ever.

Who saw that coming, right?

I like to imagine that for months now somewhere in the Yucatan peninsula people have been saying “Oh shit, man! The white people’s calendar ends on December 31st!!” and then howling with laughter, because somehow it’s hilarious every time.