Sky’s Blog

Is security dead on the Internet? Yeah, it probably is—as long as we rely on software other people have written^[1]. Unless you’re capable of writing all of your own software, without any errors, and keeping it isolated from software written by anyone else, you’re never going to have a secure digital life^[2].

But there are things you can do to protect yourself. NGO-in-a-box has developed Security-in-a-box, a set of tools and tactics for your digital security. Worth taking a look!

It’s often said that “if we can envision it, we can create it,” but in the world of computer (and network) software this is only partially true. We can attempt to create it, but it will always have bugs in it. And those bugs are the chinks in the armor that allow malware to work and cyberwarfare to succeed.

---

[1] That’s because I can write a perfect program with no bugs, but nobody else can.

[2] See also The Social Graph of Malware, my site where I explore ways in which social engineering is used by the bad guys to get malware onto your computer.

Tweet This Post

I just realized (smack me in the face, huh!) that MyBlogLog.com, which I signed up for some months ago, is actually something I don’t want any part of! Duh.

It’s a “service” that shows my little face photo on sites that subscribe to their service, saying “Sky has been reading this page.” Given what Facebook did to me in December, revealing who all of my friends are^[1][2], I’ve become somewhat protective of where I go and what I read. (continue reading…)

Tweet This Post

In searching for a solution to embed a particular font in one of my games^[1] at YBCA, I spent dozens of hours experimenting with the @font-face cross-browser^[2] CSS technology. It’s a technique that allows your browser (like MSIE or Firefox, right?) to read a TrueType (.TTF) or OpenType (.OTF) font file from a server and then use it to render type on a web page. The headlines on my blog are rendered using this technology^[3]. I’m really happy with the results.

The idea is to give the designer of the web page the ability to select exactly the font he or she wants to see on the finished page!

But, even with this great tech in place, Microsoft is playing its game of insisting on its own solution—they propose it as a “web standard” but in real life it’s implemented by nobody except Microsoft (using their .EOT file format). So there are two competing and incompatible ways of adding fonts to a web page—the open-source method, and the Microsoft method.

Initially I was able to devise a solution that works except for FireFox (it failed both on Mac OSX and on Windows and Firefox represents about 40% of my users so I really need it to work)… and then, by accident… (continue reading…)

Tweet This Post

I just completed a new page at Red7.com that describes the major mixed-reality games I’ve run since 2004 — take a look.

Since I speculated (a few years ago) that we could create really great mixed-reality^[1] games (or learning experiences, for that matter) that would utilize all sorts of real-world media including SMS^[2], video, telephones^[3], FAX, email and web, I’ve been working to develop more of these games and get them played. I started by developing a scenario-operating-system that could run on a server, “listen” to incoming SMS and email messages, and react appropriately to move “players” through the game. This system is in place today, and listening for certain key words in incoming messages the set players off on a chase through the game of their choosing.

While experimenting with the scenario system, the team and I learned a lot. We learned that people have trouble with SMS messaging. We learned that email works (now that smartphones support email) better. We learned they’ll call a phone number, but they’ll hesitate because they don’t know for sure that the number is in-game. We learned that they like certainty more than experimentation. And we learned they ultimately will be creative if given the right opportunity.

Oh, and there’s a new game being planned right now.

---

[1] Mixed-reality means combining game play in such a way that it plays out in real life but uses digital media either in or to control parts of the game.

[2] SMS (also called TEXT or TXT in the US) messaging is the first method we used to get messages to and from the players. To avoid certain technical difficulties with SMS, including charges, we used email gateways, which are provided by mobile system operators. These did not work well because many people were unfamiliar with the ways they could send and receive email from their phones.

[3] We used call-in phone messages in almost all of the games. These are answer-only phone numbers where a simple message is played for each caller. Each message describes the next step in the game. I thought it would be fun to customize those messages for the players, but we haven’t gotten around to doing it… it’s a technology challenge that involves call-director, voice-response, XML-controlled systems.

Tweet This Post