spout

January 19, 2005 spout

The Reason For Code Access Security

I had a question in my inbox the other day that went something like this:

Since programming within the partial trust sandbox I get by default when using ClickOnce is so hard, why wouldn’t I just kick it up to FullTrust and let the user press the OK button?”

You can do that. Since ClickOnce supports user management of permission awarding for code deployed via ClickOnce (aka there’s a dialog that the user has to approve if the app wants more permissions than are the default), you could ask for FullTrust.

If I were you, I wouldn’t ask for FullTrust in my ClickOnce apps and not just because I don’t want users to be freaked out by the dialog box I expect to see that says Danger, Will Robinson, Danger, Danger!” Personally, I don’t want the liability. If I write code the requires FullTrust, I have to write my code to take full responsibility for its actions, including if the code is hijacked by other code to do bad things.

On the other hand, if I request the minimal set of permissions that I need, I’m walking with a net. If I miss an exploit, I’m limited to doing bad things inside of the limited set of permissions that the user has awarded to me and not the whole darn thing.

Full trust isn’t easier; it’s much, much harder. I like partial trust because I’m lazy: I don’t want to do the work to warrant the user’s full trust.

January 17, 2005 spout

Email Throughput

To get technical work done, I sometimes let my inbox fill up beyond what makes my comfortable. Today, that caught up with me, but I plowed into it and handled it like a man:

  • Handled 206 incoming emails (filed, deleted or dealt with in some other way):
    • Started with 47 emails in my inbox
    • Received 177 emails
    • Ended with 18 emails in my inbox
  • Sent 92 outgoing emails

I don’t normally track such things, so I can’t say if that’s a lot or a little, but it sure seemed like a lot to me. <whew>

January 2, 2005 spout

Death As A Possible Consequence

Here. The one where I describe my recent run-ins with the Oregon traffic police and my availability as the "Bad Boy" in your boy band.
January 1, 2005 spout

Death As A Possible Consequence

When something legal comes up, I like to dig into it. For example, I did my own consulting contracts for years, I’ve testified against an Oregon state bill mandating Open Source Software (a bill that was never passed), I wanted to serve on a jury and I’ve recently become very familiar with the Oregon state eviction and small claims procedures for a rental unit I own. I find laws and procedures to be fascinating and, like most things, showing up is 80%.

However, I don’t like the law so much when I’m the defendant, as was recently the case when the state of Oregon was hell bent on suspending my driver’s license. It seems that if you get 4 tickets in 2 years that they like you to stay home for 30 days or at least take the bus more. I’ve had speeding tickets on and off for most of my life, but before this 2-year period which included a total of 6 tickets (thank goodness that the state of Oregon doesn’t count tickets in Washington), I hadn’t had a ticket for about 5 years. Incidentally, if I could manage to spread them out in a Bell Curve instead of in a Mandelbrot Set, I wouldn’t even have to be in this predicament, but natural has it’s laws and who am I to consider myself above them?

Anyway, the tickets should hardly count. One was cuz I didn’t slow down fast enough in one of those coastal towns where half of the tourist revenue comes from their 100 feet of road along the highway that drops from 55 to 25 with a sign posted behind a tree. Another was on the way to Burning Man. Sure, I was going a little fast, but I spent the next week driving the dusty BM roads on my bike — can’t we do some averaging here?!? Another was an actual speeding ticket around town and that one I’ll admit to, but the forth one was when I passed into a turning lane through a solid yellow line in rush hour traffic cuz I wanted to turn left and the line of traffic was way shorted than the line of traffic going straight, so I cheated over a few feet early. I mean, come on, that’s just an efficient distribution of traffic! I was avoiding gridlock! It was practically my patriotic duty to move over into the left lane early!

However, the truck that was waiting patiently to move over into the left turn lane until he had passed the solid yellow line just ahead of me didn’t see it that way. Nor did the police car that had just turned the corner coming towards me as I scooted around the truck, neatly avoiding the oncoming traffic, all executed flawlessly while my wife dug her nails into my leg.

So, I did what I do with all my tickets: I signed the back and I paid the money. I mean, it’s not like my hairy cleavage is going to change any cop’s mind, so what else could I do?

When the letter from the state came that said they’d like me to turn in my driver’s license for a month is when I started exploring options real quick.

So, I called my tax/business/family attorney, who gave me the names of three traffic attorneys. Unfortunately, each of them specialized in Driving while Under-the-Influence and I began to think that I’d have been better off if I’d have been drunk. Each of them advised me that there was nothing anyone could do for me. I signed the ticket and I was going to have to give up my license. I also felt a very and why are you wasting my time, you sober slug, I’ve got important drunk people to talk to” vibe, but that could’ve just been me…

Luckily, once it was clear I was going to hang up the phone without giving the 3rd lawyer money, he mentioned another attorney that specialized in sober traffic offenses. This new attorney was one smooth operator. After about 5 minutes of questions over the phone, he’d figured out the conviction” (when you sign the back of the ticket, you’ve agreed to be convicted” of a crime) most likely to be turned back to trial (the passing violation, of all things). How did he determine the likelihood of getting a trial? He knew the prosecutor responsible for that part of the state! He was going to call the guy up, ask him for a solid, they run it by the judge as a formality and bang! I’ve got a new trial and my suspension was suspended pending the outcome of the trial.

And what did I have to do? Show up in court and plea my case? (“You want the truth! You can’t handle the truth! You want me crossing that line! You need me crossing that line!“) Nope.

Bring three character witnesses? (I have pictured Rory on the stand trying to provide a credible character assessment. : ) Nix.

Lie under oath? (“Yes? Mr. Sells? This is Nancy Reagan. I’d like that Eagle Scout Award that my husband signed back, please. Seems you lied to get out of a traffic ticket…“) Nine.

All I had to do was send in a $750 check and do it quickly, please. As soon as it cleared the bank, I’d have my new trial (although it’s illegal for him to give me odds” on my ability to get a new trial, my attorney was clear that it wouldn’t be a problem).

Plus, I didn’t even have to go to the trial. In fact, in a very carefully worded letter from my attorney, he let me know that I should only come to court if I could say that I didn’t do it with feeling and confidence. If I couldn’t do that, I should just go about my business. Note that he never actually asked me if I did it or not. I find that a particularly fascinating and scary part of our legal system.

Anyway, at the trial, my conviction” (I have to put it in quotes or you might think I was a criminal [I mean, just cuz I committed a crime, doesn’t make me a criminal, does it?]) was over-turned in exchange for 8 hours of driving school.” This time, I’m using the quotes because there ain’t no actual driving schooling going on. Instead, this is a replay of those driver’s education movies where they show you Faces of Death 3” in an effort to scare you onto the straight an narrow in a very Old Testament, fire and brimstone sorta way. Here’s the descriptive paragraph from the letter I got in the mail yesterday:

You have been given the opportunity to participate in the High Risk Driving Course… The course is designed to educate drivers to the potential and very real consequences of high-risk’ driving behaviors. You will spend eight hours [in the course]. During this time you will hear several presentations on the consequences of high-risk driving, have contact with victims of traumatic injuries and their families, and discuss death as possible consequences of high risk driving choices. Participation in the course will include group discussions and testing, including essay questions and an evaluation of the course. We anticipate that facing the reality and potential consequences of high-risk driving behavior will positively affect the attitudes and behaviors that contribute to choices which place [you] and others at risk of serious injury and death… I understand that what I see and hear in this program is meant to have an emotional impact on me. I may experience psychological discomfort…”

I believe that participation in this program should qualify me as a bad boy” and thereby make me the recipient of all of the benefits thereof, e.g. the alleged good girls” that can’t stay away from bad boys” should now feel free to throw their undergarments onto the stage and to mob my limonene (it’s a white 98 Volkswagen Cabrio Convertible limo” [note the quotes] in case you’re confused). The fact that my financial portfolio is fully diversified using CFA-certified asset allocation techniques, that I was a Boy Scout, that I’m married to my first real girlfriend, that I was a member of the marching band, that I was going 20 miles/hour when I committed my most recent traffic crime” and that I wouldn’t actually drive with a suspended license, thereby causing all kinds of havoc in my life, should not detract from my obvious reckless, dangerous, high-risk” persona. Anyone need a bad boy for their boy band? I’m available…

December 31, 2004 spout

Earthquake Disaster Relief Information

I can’t begin to imagine what the earthquake survivors are feeling after so much death and tragedy. If you can help, please do so.

For more information, you can visit the International SOS organization’s Tsunami Update page and the ReliefWeb site.

Thank you.

December 29, 2004 spout

SlashDot is Wrong: MCE05 Rocks

Here.

I’m a very happy user of Windows Media Center Edition 2005 and have been for some months. Not only does it allow me unfettered access to audio, video and recorded TV from any PC in the house, but with the XBOX Media Center Extender, I can access all of this from any TV in the house as well (so long as its equipped with an MCE Extender). Further, I was able to use MCE to record several episodes of a yoga TV show for my sister-in-law and burn them onto DVDs with an evaluation copy of WinDVD Creator, making her very happy. I don’t know what the content restrictions” who-ha is about, but MCE05 works great for me.

December 20, 2004 spout

We Need NetFlix for TV

Sometimes I miss some made-for-TV movie or series that I’d really like to see and that I didn’t know about before hand so that I could point my ReplayTV or MCE at it. The world needs NetFlix for TV.

December 16, 2004 spout

Deuce Bigalow: European Gigolo

Am I the only one actually looking forward to this movie?