GoodStorm ~ The Art Of Good

St. Vincent

St. Vincent is our first indie MixTape after the successful Instant Karma launch.  Check her music and schedule out.  If you love Annie's music, please put it on your blog, MySpace, Facebook or other social network.

I love her music.

Hard Work Pays Off - Instant Karma Makes # 15 On Billboard

When we launched on June 12th, we made it to # 15 on the Billboard 200.  On the week of July 23rd, we're still on the Billboard 200 holding to a # 99 position.

http://www.billboard.com/bbcom/charts/chart_display.jsp?f=The+Billboard+200&pageNumber=Top+11-50&g=Albums

Get the Instant Karma Mixtape

Here's the Amnesty International page on our Instant Karma MixTape widget:  http://www.amnestyusa.org/Take_Action_Online/Get_the_Instant_Karma_Mixtape/page.do?id=1031079&n1=4&n2=40

read more | digg story

Amnesty International GoodStorm MixTape Music Players

After many months of planning and hard work from many organizations, artists, music industry professionals, designers, lawyers and many more, I am pleased to announce the availability of a special edition GoodStorm MixTape specifically developed to help spread the word about Amnesty International's work in Darfur, Sudan.

We specially designed and coded the Instant Karma MixTape using our unique technologies and capabilities.  We worked with a team that Amnesty International brought together:  Warner Music, Apple iTunes, HUGE, Artists First and hundreds of good people with the unselfish goal of being part of a solution to a grave situation ~ Darfur.

Take a look at the 310 pixel version...

Instant Karma MixTape 310 pixel width

We wanted to contribute a technology to help reach the greatest number of people.  We have hopes of getting to as many people as possible so we can raise both money and awareness about the greatest tragedy of our current times. 

At first, we wanted to use the Instant Karma campaign to highlight our technologies but we set aside our own company goals and bias to use only our technologies because our Darfur effort is not marketing platform.  It would have been a golden opportunity fo us but Apple iTunes volunteered to  distribute the Instant Karma music collection using their technologies and perhaps most important ~ Apple so generously agreed to give 98% of all the total sales to Amnesty International's efforts to stop the genocide in Darfur. At the end of the day, it was not a technology issue for GoodStorm.  It was about being part of a movement of good folks.  We are so humbled by Apple's generosity.  Likewise, we are in awe of Warner Music's hard work curating and producing Instant Karma.  Perhaps most important, we want to acknowledge and thank Yoko Ono for donating all the rights and royalties to John Lennon's amazing music to Amnesty International and their Darfur work.  Last but not the least, our thanks to all the artists who made this possible with their unselflish and wonderful renditions of  Lennon's music.

Our technology is so small compared to the work of many but we believe our MixTape can make a difference in the viral internet campaign.  We hope you use it, put it on your blogs and social networks to help spread the word and raise money. We are grateful to Wordpress, Facebook and SixApart for allowing the MixTape widget in their platforms.

The MixTape is special in it's goal and music.  It features some of the world's greatest artists and allows you to spread the word by forwarding it to your friends and family.  Best of all people can buy great music and feel good that you have done something great and good for the world.   It is also very easy to install and host on your blog or social network.  If your social network does not allow you to install a MixTape, ask them to permit it.  They can do it if you ask.

But enough talk, try it out and please help by posting it on your favorite blogs and social networks. 

Spread the word by posting the MixTape player, buying the music or by signing the petition that is on the MixTape widget. Explore the music, learn how you can help and join the fight against genocide.

It will be available in 3 sizes (310 px as seen above, 240 px and 160 px) to fit any blog or social network.  We are finishing sidebar integration for TypePad, WordPress  and tight integration with Facebook.

Before I go, here are the 240 and 160 pixel version.:

Instant Karma MixTape 240 pixel width

Instant Karma MixTape 160 pixel width

A Geeky Note:

This was developed using Flash, Actionscript, a bit of AJAX and php.  Apache, Linux, mySQL on the back end.  The hardest part was backend engineering.  A record label, artist or a fan who makes a MixTape has full command and control of how to present music, podcasts or videos.  It is essentially a way to present or securely sell digital media (MP3s, podcasts or even video).  The publisher gets full reports of all sales and other site statistics such as views, plays, etc...

If you want to build your own MixTape, please come to http://music.goodstorm.com.

Thank you!

Music meets politics in Darfur campaign - CNET News.com

A widget called MixedTape carries the tune in an online fundraiser by Amnesty International that features John Lennon songs.

read more | digg story

Lunch With A Hero... Rigoberta Menchú

It's not everyday that you meet a true hero.  I had the great fortune to be invited to a luncheon with a great woman, Rigoberta Menchu of Guatemala.  For those of you who do not know, Rigoberta won the Nobel Peace Prize in 1992.  She came over for a lunch to ask for help as she seeks the presidency of Guatemala.

For those of you who do not know her background, here is a little information I took from the Nobel Prize page. 

"Rigoberta Menchú was born on   January 9, 1959 to a poor Indian peasant family and raised in the   Quiche branch of the Mayan culture. In her early years she helped   with the family farm work, either in the northern highlands where   her family lived, or on the Pacific coast, where both adults and   children went to pick coffee on the big plantations.

  Rigoberta Menchú soon became involved in social reform   activities through the Catholic Church, and became prominent in   the women's rights movement when still only a teenager. Such   reform work aroused considerable opposition in influential   circles, especially after a guerilla organization established   itself in the area. The Menchú family was accused of taking   part in guerrilla activities and Rigoberta's father, Vicente, was   imprisoned and tortured for allegedly having participated in the   execution of a local plantation owner. After his release, he   joined the recently founded Committee of the Peasant Union   (CUC).

  In 1979, Rigoberta, too, joined the CUC. That year her brother   was arrested, tortured and killed by the army. The following   year, her father was killed when security forces in the capital   stormed the Spanish Embassy where he and some other peasants were   staying. Shortly afterwards, her mother also died after having   been arrested, tortured and raped. Rigoberta became increasingly   active in the CUC, and taught herself Spanish as well as other   Mayan languages than her native Quiche. In 1980, she figured   prominently in a strike the CUC organized for better conditions   for farm workers on the Pacific coast, and on May 1, 1981, she   was active in large demonstrations in the capital. She joined the   radical 31st of January Popular Front, in which her contribution   chiefly consisted of educating the Indian peasant population in   resistance to massive military oppression.

  In 1981, Rigoberta Menchú had to go into hiding in   Guatemala, and then flee to Mexico. That marked the beginning of   a new phase in her life: as the organizer abroad of resistance to   oppression in Guatemala and the struggle for Indian peasant   peoples' rights. In 1982, she took part in the founding of the   joint opposition body, The United Representation of the   Guatemalan Opposition (RUOG). In 1983, she told her life story to   Elisabeth Burgos Debray. The resulting book, called in English,   I, Rigoberta Menchú, is a gripping human document   which attracted considerable international attention. In 1986,   Rigoberta Menchú became a member of the National   Coordinating Committee of the CUC, and the following year she   performed as the narrator in a powerful film called When the   Mountains Tremble, about the struggles and sufferings of the   Maya people. On at least three occasions, Rigoberta Menchú   has returned to Guatemala to plead the cause of the Indian   peasants, but death threats have forced her to return into   exile.

  Over the years, Rigoberta Menchú has become widely known as   a leading advocate of Indian rights and ethno-cultural   reconciliation, not only in Guatemala but in the Western   Hemisphere generally, and her work has earned her several   international awards."

It was truly a privilege to be with with a person who hopefully will become the president of Guatemala.

       

 

Initial Views On GoodStorm's MixTape

This is a test post for StartUp Camp using GoodStorm's MixTape.  We'll have a short test period then roll out on June 12 with some of the biggest artists in the world.  Stay tuned!

 

San Francisco Chronicle Podcast

I was interviewed by the San Francisco Chronicle on GoodStorm.  It was one long interview but it was interesting.  The best part is I got a call from a long lost friend from the 70s.

Listen (...if you must) to the podcast.

In Memory Of Virginia Tech People

In real life and in second life, we grieve for all affected by the tragic events that happened in Virginia Tech.

graphics by: Perefim Cao

Crowdsourcing the Good

I’m really excited about a new name and a new set of Web tools for collecting and mining the collective knowledge and wisdom of the online community – “crowdsourcing.” People were crowdsourcing long before the Web, of course, but only with people they knew or knew of. Now we’re all wired into the conversation, and where cynics might expect 100% Babel we often find flashes of brilliance.

One of the first formal applications of online crowdsourcing – Assignment Zero – is an experiment in journalism. Until the rise of Web 2.0, journalism was a tightly restricted medieval craft guild that monopolized the practice of newsgathering and reporting. Its motto: “And that’s the way it is,” always delivered in the weighty baritone of TV anchor certainty. Assignment Zero, a collaboration between Wired magazine and a New York University journalism professor, Jay Rosen, is smashing the palace gates to let amateurs get their hands on the means of news production & news distribution to see what happens.

You know journalists: the most fascinating stories they encounter are found in the mirror. So it’s not totally surprising that the first crowdsourced story Assignment Zero is tackling is…(wait for it) crowdsourcing.

Assignment Zero has set up a online newsroom where citizen-journalists interested in reporting on crowdsourcing – and several other topics – can get oriented, hear a pep-talk from the editor, and choose an assignment from among the many sub-stories that, put together, make up the whole story. Professional editors will monitor the reporting, then wrap the best material into one large, coherent report. As the metas metastasize, Wired will then run a feature article on the Assignment Zero experiment, using material crowdsourced by the amateur experimenters themselves. Whew.

Here’s why I’m excited about the intersection of Goodstorm and crowdsourcing: as I said in my last post, launching Goodstorm got me thinking a lot about the nature and properties of good. Last time I kicked around some thoughts on the spiritual and metaphysical nature of good, but those aren’t the parts of good that I’m most interested in.

I’m trying to put together an actionable guide to being good that redefines and refreshes “good” the way Goodstorm is redefining and refreshing “capitalism.” We’ve got to take back the power and meaning of our words.

Real capitalism isn’t oligopoly (hear that, Halliburton?), and real good isn’t some watery broth of pop psychology and comfort food for the soul. Real good(ness) has the power to save lives and make a difference in the world. It’s a power that’s re-emerging on a global basis – thank goodness. We are part of that process.

So here’s an invitation to crowdsource the art of good. Help Goodstorm fight for the highest meaning of good with the greatest power of all: ideas that work. I’m looking for the wisdom of our crowd when it comes to active ideas for being a good friend, a good spouse/lover/partner, a good pet owner, a good businessperson, a good investor, a good shopper, a good farmer, a good driver, a good citizen…of a community, a country, the world.

I’ll be posting great ideas I come across, and great ideas and commentary sourced from the wise & generous Goodstorm crowd. As someone said, we are smarter than me.

(In addition to being a great sound bite, We Are Smarter Than Me is a crowdsourced book-in-progress on how the emergence of community and social networks will change the future rules of business.)

On The Nature of Good

I’ve been thinking a lot lately about the nature and properties of good. I’m deeply interested in what readers of this blog have to say on the subject. I’m looking for enlightenment!

“Good” is part of our name (GoodStorm) and good is what we hope will come out of it. The genesis of the company was 2005’s Hurricane Katrina, which was, in so many ways, a bad storm. My co-founders and I were watching the multi-level human horrors of Katrina on TV, and committed ourselves on the spot to counteracting the evil of that bad storm with an active and activist GoodStorm of our own.

We’re business people… Internet entrepreneurs. We don’t believe that simply giving money away is “good,” nor does it change much. If we gave away all our collective money, it wouldn’t make a dent in the world’s misery. But if we can lend a hand by refreshing capitalism to empower people to make a difference in their worlds – become the change they want to see, as Gandhi said – that’s a good start.

I’ve been thinking not only about how to do good – the mission of the company – but about the very nature and transformative power of good itself. In a world where the elemental struggle is supposedly between good and evil, light and darkness – where good is ostensibly the good guy – good has been getting some rotten press lately. Where to start? How about “good guys finish last,” and all its cynical derivatives. How did good get so uncool?

It’s like, “Dude, sure the meek will inherit the earth. But two hours later, the powerful will come around and grab it right back.”

GoodStorm is just one element of a worldwide movement away from that kind of self-defeating cynicism and toward a brighter historical moment. The movement – progressives, activists, NGOs, philanthropists, environmentalists, educators, and so on – is fighting to take back our global culture from dark forces that tend to celebrate the worst in people.

Celebrating the worst is poison soul-candy, a form of ethical prurience – people getting the wrong kind of thrill wallowing in the worst humanity has to offer (I’m thinking here…24-hour-a-day Anna Nicole coverage, Britney obsession, gigantic ratings for the snarky nastiness of “American Idol,” reality shows that pick up where carnival freak shows left off, etc.).

Why is this happening? Because people have lost touch with the ecstatic, erotic, superior thrill of good. I’m not talking the talcum-powder, pinch-mouthed good of the official painted saints and deities. I’m not talking Mother Theresa, Buddha, Jesus, Mohammad, Lao Tzu, Hillel, Yahweh, or Zoroaster (I’m not ruling them out, either). Good is not a leafy vegetable you’re forced to eat for your own…uh, good no matter how bad it tastes. Good is the most savory thing on the universe’s menu, but too many of us have lost our taste for it. Thus this conversation.

Ever since I was in college in the Philippines – where I studied (broadcast) communications and political science between "detention time" as a political dissident under the Marcos regime, complete with Gitmo-style torture (more on that in a future post) – I’ve been fascinated by Sun Tzu’s The Art of War, a military treatise that, 2,500 years after its writing in about 515 B.C., has become something of a user’s manual and strategic guide to life in our times.

Next to the Bible, The Art of War is one of the best-selling works of all time. Amazon is awash in derivative books applying Sun Tzu’s military stratagems to business and social situations, and many colleges offer full-semester courses in the timeless wisdom and contemporary applications of Sun Tzu. 

It’s true that many of us feel like modern life is a battle, that the earth is a 360-degree war zone, and that we’re constantly fending off enemies. But is war truly humanity’s default state? Is war the actual nature of things, or simply a reflection of what we’ve done to ourselves, and an indication of what good things we must do now to bring good back as the golden, muscular force I believe it is?

Writing in The New York Times recently, columnist David Brooks summed up the cynics’ view of the world, arguing that “the belief in natural human goodness is fading.” [http://select.nytimes.com/search/restricted/article?res=F00B13F63F5A0C7B8DDDAB0894DF404482] Brooks wrote:

Sometimes a big idea fades so imperceptibly from public consciousness you don’t even notice until it has almost disappeared. Such is the fate of the belief in natural human goodness.

This belief, most often associated with Jean-Jacques Rousseau [http://en.wikipedia.org/wiki/Jean-Jacques_Rousseau]…had gigantic ramifications over the years. It led…to the belief that bourgeois social conventions are repressive and soul-destroying. It contributed to romantic revolts against tradition and etiquette…whether 19th-century Parisian bohemians or 20th-century beatniks and hippies…It led people to hit the road, do drugs, form communes and explore free love in order to unleash their authentic selves.

In education, it led to progressive reforms, in which children were liberated to follow their natural instincts. Politically, it led to radical social engineering  efforts (welfare, the War on Poverty, etc.)…to reshape institutions in order to create a New Man. Therapeutically, it led to an emphasis of feelings over reason, self-esteem over self-discipline.

Over the past 30 years or so, however, this belief in natural goodness has been discarded…because of the failure of just about every social program that was inspired by it, from the communes to progressive education on up.

But the big blow came at the hands of science. From the content of our genes, the nature of our neurons and the lessons of evolutionary biology, it has become clear that nature is filled with competition and conflicts of interest….

Human beings operate according to preset epigenetic rules, which dispose people to act in certain ways. We strive for dominance and undermine radical egalitarian dreams. We’re tribal…This is a darker if more realistic view of human nature.

Brooks concluded that Rousseau – with his idea that good was the basic nature of things – was wrong, and that Thomas Hobbes, the 17th-century English social philosopher [http://en.wikipedia.org/wiki/Thomas_Hobbes], was right. Hobbes held that the essential nature of human life was “solitary, poor, nasty, brutish, and short.” Oh, snap!

Gloomy stuff. Depressing, conservative stuff. Very much of the dark realpolitik of that ultimate cynic Henry Kissinger, who once observed, “We have no friends, only interests.” But then…the very next day in The Times, the cavalry of good rode into battle with banners flying in the golden sun:

David Barash, an evolutionary biologist and professor of psychology at the University of Washington, wrote:

David Brooks is half right in asserting that evolutionary biology shows human beings to be selfish, nasty and competitive by nature.

In the process, he conveniently doesn’t mention the other half: the adaptive outcome…is often achieved by organisms behaving altruistically toward one another, enhancing the success of other(s), such as relatives, reciprocating friends, and even, on occasion, unrelated individuals within the social group.

William Flesch, a professor of English at Brandeis, and the author of a forthcoming book about contemporary biological theories of human altruism, wrote:

David Brooks is reading the wrong evolutionary psychologists. We compete for status, true, but paradoxically the way we display status is by showing that we can afford to be generous to one another.

As all consumers of fiction know, heroes help people, and those who help others are those we all acknowledge as heroes. It would be a shame if pessimism distorted our views of the altruism and helpfulness that are embedded so deeply in human nature.

Michael Eigen, the editor of The Psychoanalytic Review, wrote:

David Brooks describes human nature in terms of stock binaries like Hobbes versus Rousseau….Such categories represent diverse tendencies of our nature. It is not a matter of one or the other, or of making a choice as to which is more basic.

To put who we are in terms of one tendency versus another is to maintain an all-too-prevalent dissociative attitude that has played havoc with our sense of self for a good part of our history.

I believe that evolution requires us to get beneath such categories and begin to partner the profound interweaving of multiple tendencies that give human nature the plasticity and persistence it demonstrates.

So maybe it isn’t Hobbes or Rousseau to the exclusion of the other. Maybe it’s a swirling mélange of selfishness and altruism, realpolitik nasty and empowering good.

And what I’ve been wondering for years is this: If The Art of War is such a big best-seller because it teaches people how to win through fighting and conflict, might there be a use in the world for, say, The Art of Good, which would show people how to win through being good – to one’s family, friends, spouses, partners, lovers, business associates, society at large, even one’s pets?

Do we need a sort of latter-day good book – no, not that one – that demonstrates how goodness – properly framed – is a nourishing virus that spreads life’s riches along the lines of, “the more there is, the more everyone gets”?

Is it time for a rebirth and a refresh of goodness, the way we at GoodStorm are trying to refresh capitalism to make it work for everyone, not just the oligarchy? Is there a way to show…to prove…that goodness not only benefits others, which in itself is worthy, but in the end benefits oneself?

I’d like to hear from you on these questions. What do you think the nature of good is? How can we be good to each other?

Does it matter?

I need your wisdom.

Venture Capital Journal Cover Boy

Ok... I did not make Rolling Stone Magazine or the Daily Show but I made it to become the cover boy of Venture Capital Journal.

Ok... I never said it was exciting.  The story inside just talked about my penchant for investing in consumer product and retail companies.  I guess that's why I started GoodStorm with apparel, music, movies, books and games.

I just wish I can do downloadable music so I can give Apple a run for it's money.  Hmmm...  What do you about that idea?  Downloadable music with a Capitalism Done Right backdrop.  Inspiring!

Podcast On GoodStorm

Here is a podcast on GoodStorm.  I was interviewed on Serius Radio's Business Shrink program.

Download BizShrink030307YobiBenjamin.mp3

Enjoy!

Videos I Did Once Upon A Time...

Leading change and transformation for a large organization is extremely challenging but professionally and personally rewarding . These are videos that I did when I was at Ernst and Young. 

It's very corporate but it was exciting to be one of the leaders of a firm-wide transformational process.  If you would like to see me in action in a corporate environment.  Click on the link below.  It will bring up a Quicktime movie.

Download yobie_company_man.mov

Also once upon a time I was really into information security.  20/20 did a piece on financial systems security and it featured me and my team breaking into a very very large financial institution... legally of course!

Enjoy!

 

GoodStorm TShirt Wizard Debuts On TechCrunch

We just released GoodStorm's Tshirt Wizard on TechCrunch.com and our traffic has spiked big time!  Get one for your own website or blog.

https://tshirts.goodstorm.com/register?affiliate

A little background on the app itself: foremost, it gives anyone the opportunity to easily design and buy their own custom T-shirts directly from your website.  We differ from other on-demand T-shirt applications in two big ways: our app can be installed on most any webpage and we offer the lowest base prices for T-shirts anywhere.  That means resellers can make a decent profit even on a $15 shirt, sold right on their own website.

Resellers can also customize the look of their creator and choose how much profit they want to make on each shirt sold.  For your reference, here are some of the key highlights and benefits:

For sellers:

    * Customize your Wizard with one of over a dozen cool themes.
    * Set your prices and keep 100% of the profit from every sale.
    * Standalone creator can be installed on almost any website.
    * Free to install and use - no designs needed.
    * Your visitors design and purchase shirts directly from your website.
    * We handle inventory, print-pack-ship, and all customer service.

For shoppers:

    * Upload your custom photos or designs.
    * Write in your own text in a variety of fonts and colors.
    * Don't have your own artwork? Use our clipart.
    * Design and purchase without creating a user account.

Diebold Source Code Stolen!!!

This is bad news for democracy.

The Baltimore Sun reported that Diebold's current source code was stolen and mysteriously showed up in the mail of a retired Maryland legislator. 

Here's the article:  http://www.baltimoresun.com/news/local/bal-te.md.voting20oct20,0,5237249.story

The Insecurity Of Outsourcing

I wrote a very long post titled "Outsourcing To Hell" and as a TV show aired, I am not only right but I also did not sound enough alarms.  My principal concern was rogue programming code in critical systems but as this ZDNet Asia article shows security problems can also be very low tech in nature.

Lurkers & New Posters In Doom9 Seem To Be Trying To Bait FairUse4WM DRM Hacker | Also... DRM Could Lead To "Bricking" Devices

As I follow the threads in Doom9 (which BTW is a great site!) about viodentia and FairUse4WM, it seems that there are sudden bulletin board lurkers (...myself included) hanging around.  That's not so strange.  What's funny is some folks (who are obvious agents for the dark side) seem to be suddenly posting and baiting viodentia to show his source code. 

Whoever is investigating this alleged theft of source code must be a junior code monkey from the dark side.  You DO NOT need source code to study software internals.  Whoever is asking for the source code or wants the source code should spring out the corporate credit card and buy a copy of DevPartner (formerly SoftIce).

It reminds me of the bumbling investigators HP hired to sniff out the boardroom leaks.  At least the dark side can send some competent folks to ferret out viodentia but then again what's the point? 

It is my opinion the dark side's DRM implementation has fundamental  architectural problems need rebuilding from scratch!  Patching is just a hacking challenge.  Bottom line, either re-write the current DRM implementation or drop it entirely.  Putting out bad software is worse than DRM itself.

The real point is DRM could create a consumer nightmare.  As long as there are those who are willing to challenge DRM system and software, the possibility of "bricking" consumer devices looms.  It is criminal to knowingly write and distribute software that will break systems and hardware but people do it anyway.  Although destructive, bricking devices is the ultimate malicious hack.

This is not a science fiction story.  There is a malicious software that goes around bricking Sony PSPs.  Imagine bricked iPods and Zunes.  It would be the ultimate product recall.

Remember hacking is just time, intent, motive and skill. 

BTW, this is another t-shirt that you can buy from Defective by Design.

Hacking and Breaking Microsoft's DRM: Viodentia Releases Fix For Microsoft's DRM Patch! FairUse4WM rel 1.3 Download Link Here

This was sent to me by some friends and I thought it was amusing.  Many years ago, I co-authored a very interesting article on Windows NT that details the weakness of Windows NT security so I know a little bit ;)  about security.

It's been a while since I tinkered with encryption stuff but it seems to me that based on the description set forth by viodentia, he/she did not and does not need any access to the source code as Microsoft alleges in their federal lawsuit.  In my opinion, it is totally not necessary to see the source code to execute this hack.

For those of you who are real software and crypto geeks, you know that the explanation makes perfect sense and leads one to suspect the allegations of source code theft.  But then again, this is merely my opinion. 

Another opinion, Microsoft does not need a patch, they need a full overhaul of the DRM architecture if they want to fix this very elegant hack.

To poke a little fun, I am featuring two very cool shirts from Defective By Design.  Click on the designs to buy the shirts.

By the way, here' s the explanation by viodentia:

"This new version uses a new extraction approach, courtesy of c0redump. The method no longer requires the selection of a DRM protected file, and should retrieve all ECC keys at once.

FairUse4WM has been my own creation, and has never involved Microsoft source code. I link with Microsoft's static libraries provided with the compiler and various platform SDK files.

Thanks for Rjamorim for graciously hosting in Brazil.

http://pessoal.onda.com.br/rjamorim/FU4WMver13.zip

12815576c78a799114025b3b266dd156 *FairUse4WM.exe

                            by: viodentia"

In my humble opinion, the architecture of Windows DRM is defective by design.

Viodentia's further explanation in doom9.org shows he/she knows his/her stuff...

"The AES key displayed in new key extraction

---

For the v11 individualization, v2ksndv.bla (or v2ks###.bla) is now an XML file. There are two tags of particular interest, the first 40 bytes of "c:PKCert" is the public key for ECC encryption and the "Keys" which stores all the secondary keys.

Each time you re-individualize, the DLL sends "escrowed" key information to Microsoft's servers which decrypts it and re-encrypts it inside this secondary key table. These are all the keys for previous individualizations.

The <Keys> tag is encrypted with AES in Counter mode using the displayed key. To decrypt, create a 16-byte BIG-ENDIAN counter (that is, 16 bytes of 0, next would be 15-bytes of 0's and one 1 byte, and so forth). Encrypt that with the AES key. XOR the output with the next 16-bytes from the tag.

Once decrypted, the Keys tag holds a XML document which in turn has both the old ECC keys (which v1.3 happily extracts for you), and some RSA keys - the RSA keys are apparently new for v11, and I don't know what they're for.

By the way, if one looks at the individualization process in Wireshark, it's conceivable that future individualizations can be handled with the assistence of Microsoft's own servers."

To appreciate the technology behind the hack, you'll have to trace the thread at: http://forum.doom9.org/showthread.php?t=114916

Last opinion, Microsoft can fix it but to claim someone stole the source code to execute the hack leads me to believe that some marketing person talked to the legal guys.  The techies would not allege this given the explanation by viodentia.

The Real Hack On Voting Systems... Hacking The Voter Smart Card To Hack The Vote

No instructional here but consider the following scenarios.

What Is a smart card?

A smart card resembles a credit card in size and shape, but inside it is completely different. First of all, it has an inside -- a normal credit card is a simple piece of plastic.

The inside of a smart card usually contains an embedded microprocessor. The microprocessor is under a gold contact pad on one side of the card. Think of the microprocessor as replacing the usual magnetic stripe on a credit card or debit card.

Magnetic stripe technology remains in wide use in the United States except for voter smart cards that do not use the mag stripes. The stripe is really not the best place to store sensitive information.

A smart card carries the intelligence.

The microprocessor on the smart card is usually there for security but it can carry any payload it is designed for. The host computer and card reader actually "talk" to the microprocessor. The microprocessor enforces access to the data on the card. If the host computer read and wrote the smart card's random access memory, it would be no different than a diskette or thumbdrive.

Smarts cards may have up to 8 KB of RAM, 346 kilobytes of ROM, 256 kilobytes of programmable ROM, and a 16-bit microprocessor. The smart card uses a serial interface and receives its power from external sources like a card reader. The processor uses a limited instruction set but can be configured to do any application.

I learned how to program when computers had 256K of memory and we wrote pretty complex spreadsheets on the IBM personal PC platform.

The demonstration that Ed Felton and company from Princeton University demonstrate that given access to a machine which thousands of electoral volunteers do during the election season that it is trivial to hack the code in a machine. 

The fact is if you have the intent, time, motive and skill... one can hack anything. 

Reverse engineering is trivial if you are an accomplished software engineer.  Check this out: http://www.acm.uiuc.edu/sigmil/RevEng/
and http://en.wikipedia.org/wiki/Reverse-engineer.

If you can hack the machine and are able to introduce a polymorphic and self-deleting virus such as the one demonstrated by the Princeton team, you can also hack it to allow the voting machine to "accept" specially configured smart cards to do whatever you want the darn machine to do.  It could have special executables.  It could force buffer overflows a favorite fault injection technique.  Bottom line is you can do a lot with a 256K capable microprocessor.

By the way, most of the voting machine companies would never be able to detect specially constructed viruses because there is no such thing as virus protection for the operating systems that these machines use.  If Windows XP could be hacked by some Bulgarian teenager, what would the possibilities be for a desperate politician or political party?  Perhaps even a construction company that would benefit from a multi-billion dollar bond measure?

This would give new meaning to technical hacking and social engineering... imagine hacking a country, state or bond measure. 

If the voting machine companies want to prove me wrong, then they should open their source code for public inspection.

I dare the voting machine companies to expose their software to prove they are secure.

BTW, here's a list of tools that can be useful for reverse engineering code.

Crocodile http://kastanie.informatik.tu-cottbus.de/crocodile.htm dead link! CXREF - a C language cross referencing and documenting tool. It produces documentation (in LaTeX, HTML, RTF or SGML) including cross-references from C program source code. From Andrew M. Bishop. http://www.gedanken.demon.co.uk/cxref/ Datrix - software source code assessments with the goal of evaluating the maintainability and the evolability of software products. http://www.iro.umontreal.ca/labs/gelo/datrix/ daVinci - a X-Window visualization tool for drawing directed graphs. http://www.tzi.de/~davinci/ Design Recovery Tool http://www.cse.unsw.edu.au/~drt/ DISCOVER - a commercial a software development and maintenance environment Carnegie Mellon University, 1996 http://www.setech.com then bought by MKS (formerly Upspring Software) and integrated into CodeRover. Supports Impact Analysis, Integrity Checker... Commercial, Integration into VisualStudio, JBuilder, Emacs. http://www.mks.com/upspring.shtml GEN++ - an application-generator to support development of analysis tools for the C++ language. From UC Davis and Bell Labs. http://www.cs.ucdavis.edu/~devanbu/genp/ GOOSE - a tool set for analysing the design of object-oriented software systems (FAMOOS project). http://esche.fzi.de/PROSTextern/software/goose/index.html GraphViz - a graph visualization http://www.research.att.com/sw/tools/graphviz/ GraVis http://www-pr.informatik.uni-tuebingen.de/Forschung/GraVis/welcome.html Headway - a commercial source code visualization and comprehension tool for Java and C++ developers. http://www.headwaysoft.com/ IDA - (interactive disassembler) reverse engineering  at low level. http://www.datarescue.com/idabase/ Imagix - a 3D query and visualization tool. http://www.imagix.com inSight tool suite - Nortel. http://case.ispras.ru/insight/index.html Insure+ - a source level run-time debugger for C and C++. http://sdt.cern.ch/Insure/ Introspector - A long term project to extract MetaData from FreeSoftwareTools like the Gcc,Perl,Bash. From James Michael DuPont http://introspector.sf.net Juliet - an IDE extension for NetBeans, Forte, JBuilder, JDeveloper. http://infotectonica.com/juliet/ Klocwork Suite - a commercial suite of RE products targeted at C, C++, and Java. http://www.klocwork.com/ Logiscope - a source code analyser and test coverage tool for C/C++/Fortran. Telelogic. http://sdt.cern.ch/Logiscope/ PBS Portable Bookshelf http://swag.uwaterloo.ca/pbs/ PL/I Analyzer (REFINE) - an interactive workbench used to analyze and reengineer legacy PL/I systems. Phoenix Software Technologists. http://stout.levtech.com/ Refactorit - an IDE extension with metrics and refactorings engine and integration for Forte. http://www.refactorit.com/ Rigi http://www.rigi.csc.uvic.ca/ SHriMP http://shrimp.cs.uvic.ca/ SNiFF+ - supports reverse engineering, configuration management, workspaces and build management and provides a set of browsers and parsers. Commercial. http://www.windriver.com/products/html/sniff.html Source Browser. C Code Browser, non-commercial, Adam Moravanszky. http://n.ethz.ch/student/adammo/ProBrowser.htm SOURCE CODE BROWSER - commercial product by Alajava. http://www.alajava.com/aubjex/products.htm Source Explorer - commercial tool for source code browsing and re-engineering. http://intland.com/html/__source_explorer.html Source Insight - a commercial project oriented program editor with built-in analysis for C/C++, and Java programs. http://www.sourcedyn.com/ Source Navigator http://sources.redhat.com/sourcenav/ http://oimanager.de/sn.htm (Internet Extensions) SPOOL - Spreading Desirable Properties into the Design of Object-Oriented, Large-Scale Software Systems. http://www.iro.umontreal.ca/labs/gelo/spool/ StP - an UML Editor by Software through Pictures. http://www.aonix.com/content/products/stp/stp.html Surveyor - A tool for source code analysis, visualization, and documentation in most popular languages, OS's, and IDE's. http://www.lexientcorp.com Tarantula - Finding software faults by visualizing test results - very specific views on metrics. http://www.cc.gatech.edu/aristotle/Tools/tarantula/ The Small Worlds - is a commercial application for analyzing and visualizing large-scale software, developed by the Information Laboratory. http://www.thesmallworlds.com/ TkSee - Knowledge-Based Reverse Engineering of Legacy Telecommunications Software. http://www.site.uottawa.ca/~tcl/kbre/ Together ControlCenter - commercial round-trip engineering tool for Java. http://www.togethersoft.com Understand C / FORTRAN - an interactive development environment (IDE) tool providing reverse engineering, automatic documentation, metrics and cross referencing of C / FORTRAN source code. http://www.scitools.com/uf.html http://www.scitools.com/ucpp.html VIBRO (VIsualisation BROker Framework) - Visualisation Research Group, participated in SORTIE project. GXL. University of Durham, UK. http://www.csr.uvic.ca/chisel/collab/reports/VIBRO/Report.html Visualize it - a graphical source code visualization tool for Java. http://www.powersoftware.com/vz/ XGVis -  A system for multidimensional scaling and graph layout in any dimension http://www.research.att.com/areas/stat/xgobi/

More eVoting Documents: Redacted Reports From Leading Electronic Voting Researchers

Dan Wallach and Doug Jones have just released some findings on their analysis of ITA certification documents for four of the major vendors (Diebold, ES&S, Hart InterCivic, and Sequoia).  The documents were redacted by the Colorado Attorney General and Colorado Secretary of State.

The documents are worth a read and I'll let you draw your own conclusions from Dan and Doug's work.

Download them here:

Download djones-redacted.pdf

and

Download dwallach-redacted.pdf

Who Is Cheating? All Students' Works Have Implied Copyrights And Using Their Works For Commercial Gain Potentially Violates Copyright Law

Here's an interesting article... http://www.washingtonpost.com/wp-dyn/content/article/2006/09/21/AR2006092101800.html

I am not a lawyer but having filed numerous patents, trademarks and copyrights with the US Patent and Trademark Office, I have been told that all original written work have implied copyrights,  Copyrights are the weakest of all intellectual property protections although if properly executed, they are as powerful as trademarks or patents. 

Original work is always copyrighted.  I am not sure about derivative works.  Maybe a lawyer can comment on this blog about derivative works.

A student who writes an original paper on the impeachment process or genetic mutations has an implied copyright to his work and it cannot be used or exploited for any other purpose other than the student's original intent.  In most cases, the purpose is to satisfy the requirements of course work. 

In my humble opinion, students do not surrender rights to their copyrighted work to anyone other than the teacher or professor and perhaps the school for the SOLE purpose of satisfying course work.  The school has no right to submit the copyrighted work to any another company for such company's archiving and further using the copyrighted works as part of a database which is used for commercial gain.

The only ones arguing that the practice is legal are school administrators who were caught with their pants down and the company who is using the original, copyrighted work of students for commercial gain.  In my opinion, no one has the right to appropriate the copyrighted original work of anyone for commercial gain without properly compensating the copyright owner. 

As a matter of conjecture and personal opinion: If it is true that 60% of student works are plagiarized, then 40% of content of turnitin.com's database could be students' copyrighted works.  I can guess that copyrighted works have no releases from their authors and are being used for commercial gain without paying the students/authors/copyright owners.  This could be one of the biggest breaches of copyright law in history.

I am not sure who is cheating in this controversy.  I am on the students side!

Excellent Service Is Hard To Find! Barnett Plumbing

If you need a great, reliable and downright HONEST commercial and residential plumber in the Bay Area, call Philip Barnett. 

• Web site ~ http://www.philbarnettplumbing.com
• 2150 Portola Ave Suite D # 192, Livermore, CA 94551
• Phone number 925-872-0805
• email info@philbarnettplumbing.com

Why I posted this?  Well, I needed some plumbing work done on my kitchen sink.  I called 5 plumbers and stumbled upon Phil's ad on Craigslist.  Not one of the 5 plumbers I called would give an estimate for their work.  They all insisted on coming over before giving an estimate.  I replied that I wanted to replace the trap under the kitchen sink (...pretty standard plumbing work, I thought) and yet NOT one of the first 5 would give an estimate.

Phil Barnett not only gave a quote, he was on time, prompt, courteous and fixed 2 clogged sinks, snaked my sewer line and fixed a leaking garden faucet.

Great work Phil!  You've won a customer for life.

I Just Read The Declaration Of Independence

It's almost eerie to read the Delaration of Independence.  I have highlighted the passages that gave me pause.  I hope that if you read this, you will pause to reflect on our times.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

IN CONGRESS, JULY 4, 1776.
THE UNANIMOUS
DECLARATION
OF THE
THIRTEEN UNITED STATES OF AMERICA.

WHEN, in the Course of human Events, it becomes necessary for one People to dissolve the Political Bands which have connected them with another, and to assume, among the Powers of the Earth, the separate and equal Station to which the Laws of Nature and of Nature's GOD entitle them, a decent Respect to the Opinions of Mankind requires that they should declare the Causes which impel them to the Separation.

We hold these Truths to be self-evident, that all Men are created equal, that they are endowed, by their CREATOR, with certain unalienable Rights, that among these are Life, Liberty, and the Pursuit of Happiness.--That to secure these Rights, Governments are instituted among Men, deriving their just Powers from the Consent of the Governed, that whenever any Form of Government becomes destructive of these Ends, it is the Right of the People to alter or to abolish it, and to institute new Government, laying its Foundation on such Principles, and organizing its Powers in such Form, as to them shall seem most likely to effect their Safety and Happiness. Prudence, indeed, will dictate, that Governments long established, should not be changed for light and transient Causes; and accordingly all Experience hath shewn, that Mankind are more disposed to suffer, while Evils are sufferable, than to right themselves by abolishing the Forms to which they are accustomed. But when a long Train of Abuses and Usurpations, pursuing invariably the same Object, evinces a Design to reduce them under absolute Despotism, it is their Right, it is their Duty, to throw off such Government, and to provide new Guards for their future Security. Such has been the patient Sufferance of these Colonies; and such is now the Necessity which constrains them to alter their former Systems of Government. The History of the present King of Great-Britain is a History of repeated Injuries and Usurpations, all having in direct Object the Establishment of an absolute Tyranny over these States. To prove this, let Facts be submitted to a candid World.

HE has refused his Assent to Laws, the most wholesome and necessary for the public Good.

HE has forbidden his Governors to pass Laws of immediate and pressing Importance, unless suspended in their Operation till his Assent should be obtained; and when so suspended, he has utterly neglected to attend to them.

HE has refused to pass other Laws for the Accommodation of large Districts of People, unless those People would relinquish the Right of Representation in the Legislature, a Right inestimable to them, and formidable to Tyranny only.

HE has called together Legislative Bodies at Places unusual, uncomfortable, and distant from the Depository of their public Records, for the sole Purpose of fatiguing them into Compliance with his Measures.

HE has dissolved Representative Houses repeatedly, for opposing with manly Firmness his Invasions on the Rights of the People.

HE has refused for a long Time, after such Dissolutions, to cause others to be elected; whereby the Legislative Powers, incapable of Annihilation, have returned to the People at large for their exercise; the State remaining, in the mean Time, exposed to all the Dangers of Invasion from without, and Convulsions within.

HE has endeavoured to prevent the Population of these States; for that Purpose obstructing the Laws for Naturalization of Foreigners; refusing to pass others to encourage their Migrations hither, and raising the Conditions of new Appropriations of Lands.

HE has obstructed the Administration of Justice, by refusing his Assent to Laws for establishing Judiciary Powers.

HE has made Judges dependent on his Will alone, for the Tenure of their Offices, and the Amount and Payment of their Salaries.

HE has erected a Multitude of new Offices, and sent hither Swarms of Officers to harrass our People, and eat out their Substance.

HE has kept among us, in Times of Peace, Standing Armies, without the Consent of our Legislatures.

HE has affected to render the Military independent of and superior to the Civil Power.

HE has combined with others to subject us to a Jurisdiction foreign to our Constitution, and unacknowledged by our Laws; giving his Assent to their Acts of pretended Legislation:

FOR quartering large Bodies of Armed Troops among us:

FOR protecting them, by a mock Trial, from Punishment for any Murders which they should commit on the Inhabitants of these States:

FOR cutting off our Trade with all Parts of the World:

FOR imposing Taxes on us without our Consent:

FOR depriving us, in many Cases, of the Benefits of Trial by Jury:

FOR transporting us beyond Seas to be tried for pretended Offences:

FOR abolishing the free System of English Laws in a neighbouring Province, establishing therein an arbitrary Government, and enlarging its Boundaries, so as to render it at once an Example and fit Instrument for introducing the same absolute Rule into these Colonies:

FOR taking away our Charters, abolishing our most valuable Laws, and altering fundamentally the Forms of our Governments:

FOR suspending our own Legislatures, and declaring themselves invested with Power to legislate for us in all Cases whatsoever.

HE has abdicated Government here, by declaring us out of his Protection, and waging War against us.

HE has plundered our Seas, ravaged our Coasts, burnt our Towns, and destroyed the Lives of our People.

HE is, at this Time, transporting large Armies of foreign Mercenaries to complete the Works of Death, Desolation, and Tyranny, already begun with Circumstances of Cruelty and Perfidy, scarcely paralleled in the most barbarous Ages, and totally unworthy the Head of a civilized Nation.

HE has constrained our Fellow-Citizens, taken Captive on the high Seas, to bear Arms against their Country, to become the Executioners of their Friends and Brethren, or to fall themselves by their Hands.

HE has excited domestic Insurrections amongst us, and has endeavoured to bring on the Inhabitants of our Frontiers, the merciless Indian Savages, whose known Rule of Warfare, is an undistinguished Destruction, of all Ages, Sexes, and Conditions.

IN every Stage of these Oppressions we have Petitioned for Redress in the most humble Terms: Our repeated Petitions have been answered only by repeated Injury. A Prince, whose Character is thus marked by every Act which may define a Tyrant, is unfit to be the Ruler of a free People.

NOR have we been wanting in Attentions to our British Brethren. We have warned them, from Time to Time, of Attempts by their Legislature to extend an unwarrantable Jurisdiction over us. We have reminded them of the Circumstances of our Emigration and Settlement here. We have appealed to their native Justice and Magnanimity, and we have conjured them by the Ties of our common Kindred to disavow these Usurpations, which would inevitably interrupt our Connexions and Correspondence. They too have been deaf to the Voice of Justice and of Consanguinity. We must, therefore, acquiesce in the Necessity, which denounces our Separation, and hold them, as we hold the Rest of Mankind, Enemies in War, in Peace Friends.

WE, therefore, the Representatives of the UNITED STATES OF AMERICA, in GENERAL CONGRESS Assembled, appealing to the Supreme Judge of the World for the Rectitude of our Intentions, do, in the Name, and by Authority of the good People of these Colonies, solemnly Publish and Declare, That these United Colonies are, and of Right ought to be, FREE AND INDEPENDENT STATES; that they are absolved from all Allegiance to the British Crown, and that all political Connexion between them and the State of Great-Britain, is, and ought to be, totally dissolved; and that as FREE AND INDEPENDENT STATES, they have full Power to levy War, conclude Peace, contract Alliances, establish Commerce, and to do all other Acts and Things which INDEPENDENT STATES may of Right do. And for the Support of this Declaration, with a firm Reliance on the Protection of DIVINE PROVIDENCE, we mutually pledge to each other our Lives, our Fortunes, and our sacred Honour.

John Hancock.
GEORGIA, Button Gwinnett, Lyman Hall, Geo. Walton.
NORTH-CAROLINA, Wm. Hooper, Joseph Hewes, John Penn.
SOUTH-CAROLINA, Edward Rutledge, Thos Heyward, junr. Thomas Lynch, junr. Arthur Middleton.
MARYLAND, Samuel Chase, Wm. Paca, Thos. Stone, Charles Carroll, of Carrollton.
VIRGINIA, George Wythe, Richard Henry Lee, Ths. Jefferson, Benja. Harrison, Thos. Nelson, jr. Francis Lightfoot Lee, Carter Braxton.
PENNSYLVANIA, Robt. Morris, Benjamin Rush, Benja. Franklin, John Morton, Geo. Clymer, Jas. Smith, Geo. Taylor, James Wilson, Geo. Ross.
DELAWARE, Caesar Rodney, Geo. Read.
NEW-YORK, Wm. Floyd, Phil. Livingston, Frank Lewis, Lewis Morris.
NEW-JERSEY, Richd. Stockton, Jno. Witherspoon, Fras. Hopkinson, John Hart, Abra. Clark.
NEW-HAMPSHIRE, Josiah Bartlett, Wm. Whipple, Matthew Thornton.
MASSACHUSETTS-BAY, Saml. Adams, John Adams, Robt. Treat Paine, Elbridge Gerry.
RHODE-ISLAND AND PROVIDENCE, &c. Step. Hopkins, William Ellery.
CONNECTICUT, Roger Sherman, Saml. Huntington, Wm. Williams, Oliver Wolcott.

IN CONGRESS, JANUARY 18, 1777.

ORDERED,
THAT an authenticated Copy of the DECLARATION OF INDEPENDENCY, with the Names of the MEMBERS of CONGRESS, subscribing the same, be sent to each of the UNITED STATES, and that they be desired to have the same put on RECORD.
By Order of CONGRESS,
JOHN HANCOCK, President.

BALTIMORE, in MARYLAND: Printed by MARY KATHARINE GODDARD.

Outsourcing To Hell

Outsourcing is best described as the race to the bottom line. Most if not all of the Fortune 1000 have outsourced or are contemplating the transfer of many business functions to countries outside the United States. It is big business. The largest US companies, IBM, EDS, Accenture as well as emerging global players such as Infosys, Tata and Wipro are all in the game. Everything from call centers, medical transcription services to programming of critical software is being sent overseas to deliver incredible cost savings to corporations, public and private, large and small.

It is difficult not to listen to the siren song of outsourcing. Promises of up to 80% cost savings on a company’s non-core activities are just too hard to ignore. Several factors come into play - global competition, a near maniacal push towards optimum performance characterized by cost savings and efficiency and the demand for greater growth and profits all play into the hands of companies who promise incredible cost savings to America’s corporations. Unfortunately the push to higher profits and greater savings and cost efficiencies often come with greatly magnified risks.

Even the most American of companies cannot ignore the trend. “If we don’t do it, we will be killed on prices by our competition” carps one giant consulting company executive. Unabashed free traders likewise add fuel to the fire by arguing that in a global economy with borders blurred by the Internet, the outsourcing trend is an inevitable consequence of progress.

Maybe so.

In a world transformed by global terrorism, it is clear that uncontrolled, unabashed and unregulated move to outsourcing plays into the hands of those who see the current world order as fundamentally wrong and immoral. Unlike the movement of industries like Nike shoes from Portland and Levis jeans from San Francisco to China and the Philippines, the outsourcing of information processing intensive industries will inevitably bite and mangle the hands that feed it.

It is one thing to stamp automobile body parts in Korea, assemble bicycles in Taiwan or manufacture t-shirts from Ecuador and bring them back to the world’s largest market, the United States. It is a wholly different dynamic and a far more gruesome scenario when we send deeply personal and private health care, personal and corporate financial information to Bangalore, Kiev, Hyderabad, Shanghai or Islamabad. It is even more frightening that many critical system and application software and imbedded systems are being coded in countries by people who may not have the sophistication to write secure code or conversely, even worse have the evil knack and skill to create backdoors and Trojans that very few can find.