Live RAT Dissection

Uri Fleyder (RSA) and Uri Rivner (Biocatch)'s presentation yesterday on the use of remote administration tools, coupled with "man in the browser" attacks is probably the most alarming threat exploitation I have seen recently. 

The attack first exploits browser vulnerabilities through drive-by-downloads to infect the target machine. I suppose a drive-by-download is not even necessary - other vectors could also be exploited. Once the target machine is infected, the attacker can make use of a remote administration tool (RAT) to carry out an attack using the target machine. Through the use of "man in the browser" attack, the attacker intercepts browser activities, such as banking (or e-commerce or any other activity), and thus can not only capture data in realtime but can also take control over the browser and show false messages (such as longer login times, false redirections etc). 

The beauty of this attack, is that the attack is completely out of the target user's machine, and tokens are actually also compromised in this attack (through the use of redirections). And there are very few countermeasures ...

RSA Conference Europe: Day 1 Keynotes

There was an overall theme to the first three keynotes - a need to change the security models from (perimeter) defense based to "intelligence based" model. Art Coviello (Chairman, RSA) introduced the theme, with a focus on changing security to be more agile, contextual, risk based and the need to share and analyse information on scale.

Tom Heisner (President, RSA) followed expanding the themes, with an insightful comment on the Moore's law equivalence in security; the cost of attacks have reduced while the complexity of attacks have increased. Both speakers were hugely critical of compliance based regulatory regimes which are sometimes contradictory, and often provide a false sense of security.

Francis deSouza (Symantec) followed the theme with a focus on the need to be more "militaristic" in IT security. His argument was that you can't win a battle on purely defense, and security strategies and solutions need to consider the whole campaign and not just point vectors. In this regard, defense mechanisms also need to be "great" and not just good to be effective.

Adrienne Hall (Microsoft GM for trustworthy computing) focused mainly on cloud adoption, though was a bit out of sync on the earlier theme. Hugh Thompson, was also out of sync, but did raise a different perspective - security solutions currently are a "one size fits all" solution, and are not catered for individuals, so are either too complex or too simple; and are basically both ineffective. To create a security profile that is really personalized will be difficult, but would be a very interesting approach in becoming more secure.

Chill Man

I caught the slower train from Heathrow to Paddington, which stops at a few local stations along the way. It was surprisingly quick to clear immigrations (last experience at Heathrow, over an hour, yesterday 5 minutes), so I had some time before I could check in to my hotel.

The first stop after Heathrow, two heavily tattooed men dressed in tatty clothes got on, and hung by the door. Shortly thereafter, the conductor came through checking tickets, which these men didn't have. I was quite surprised, as were the two men, on the conductor's reaction. After a hushed (but still audible) chat on why they didn't have tickets, the conductor simply asked the two men to take a seat and relax. The men were so startled, that the conductor had to repeat himself, "chill man".

I am not sure why this small incident should stick in my mind ... are these instances of understanding officialdom so rare?

Symphonic Rocks 2012

The second year in Jo'burg wasn't as well attended, with a number of free seats. Carnival City, as a venue probably contributes to that, but the crowd did seem a lot more diverse than last year. The combination of the 65 piece Cape Town Pops Orchestra and leading SA pop/rock artists is not only great music, but as Ard Matthews put it so eloquently, a great way to preserve a dying art, an contribute to enhancing our culture.

After a short overture, aKing started the proceedings in rocking style with two of their popular radio hits. It was a good start, though the next singer ChianoSky, didn't continue the momentum. Her dance hits for well with the orchestration, but her squeaky voice just irritated me.

A noticably slimmer Zolani Mahola (of Freshlyground fame) was the best performer of the first half, getting great applause and support from the crowd, and there was even dancing in the stands! Freshlyground's music lends itself to orchestration, and I think it would be great if they released a full album backed by an orchestra!

Van Coke Cartel's Afrikaans metal worked with the orchestra, although at times the electric guitar riffs did overpower the orchestra. They kept the energy going, into the next act, Toya Delazy, whose dance pop hits were more well suited for the orchestra.

Ed Matthews confessed to being a "soppy rocker", and belted out two of his solo love ballads followed by the classic "What he means", which seemed to get the whole audience singing. Tumi & The Volume closed the first half, though I found his voice to be overpowered by the instruments.

The second half started with a medley of theme songs from James Bond franchise (cleverly following a Heineken ad featuring Daniel Craig); which got a rousing applause from the audience. Andy Mac, the organizer behind Symphonic Rocks was next with his band Macstanley. Andy makes a good MC (better than the actual MC) and did a good job in introducing everyone on the stage (and the credit for being the head honcho). I haven't really been a fan of Macstanley (or Flat Stanley in their previous incarnation) and they were certainly blown away by the acts that followed.

Fokofpolisiekar should make a symphonic Afrikaans metal album. More than anyone else in the show, their ballads were perfectly pitched with the orchestra and was a truly amazing result. Their standard, "Hemel op die Plateland"was amazing with the symphony and got everyone headbanging.

Multi SAMA winner Zahara was next, and the success of the show was evident in how all the headbangers just switched to jiving along. She has an amazing voice, and it was a great to see her perform live.

Mi Casa played an interesting set, where there didn't seem to be any break between the songs (as would be expected from a electro-dance group). The trumpet playing of Mo-T was impressive, and fitted well into the arrangements.

Ed Rowland, the lead singer of Collective Soul was the last performer. I have seen Collective Soul before, but I am not really acquainted with their music. It was a great performance and a fitting end to the show.

As a final comment, perhaps future shows should consider reducing the number of artists in favor of giving them longer sets. And move the show closer!

Movie: Beasts of the Southern Wild

It is a strange movie - but one with an incredible imagination, and absolutely stunning acting performances; and a moral story about the devastating impact of climate change. Set in a poor community near New Orleans, the story revolves around a young girl, Hushpuppy, her eccentric father who is trying to teach her how to survive and some strange events that take place during, what seems to be a hurricane. I don't think I really understood some part of the story (like the aurochs), but the acting performances were incredible.

Buskaid 2012

This year, Buskaid's annual concert was sold out - the first time in the three years I have been going to Buskaid. It's a good thing I bought tickets early (which ironically meant that I almost forgot about it)! The concerts are an interesting mix - classical music by often less heralded composers interwoven with jazz/pop songs; and finished off with kwela and dancing (with the instruments) - something I doubt you will ever see at other classical music concerts.

The concert started off with pieces from Rameau's opera, Castor et Pollux. The program notes, that Rameau has become somewhat of a tradition with the Buskaid, and it was an energetic start to the concert. Due to a recording malfunction, the pieces were played again at the end - with ample encouragement from the crowd!

The second piece, was one of the highlights of the concert. A previous Buskaid concert, was the first time I had heard a live performance of music from "The Black Mozart", Chevalier de Saint-George. This year, the two senior violinists, Kabelo Monnathebe and Simiso Radebe, in the group (both studying at the Royal Academy of Music in London) performed the Allegro of the Symphony Concertante in G major. It is a stunning piece, especially how the violins feed off the rest of the orchestra, and how they blend into each other; and it was a captivating performance by the soloists.

Czech composer, Leoš Janáček's Idyll for String Orchestra was a bit of a let down after the Symphony Concertante - it felt like a filler piece; and I would have preferred a full performance of the Symphony Concertante instead. It was followed by two vocal pieces (Send in the Clowns, and At Last, both from old musicals), sung by viola player Mathapelo Matabane; who certainly has a voice that complements the style of the songs. The last piece, before the interval was the last movement (Marcia) from Swedish composer Dag Wirén's Serenade for String Orchestra. It is a very lively piece that I haven't heard before (though it is supposed to be very popular). I am not a big fan of Handel, so the first piece after the break (Suite from Terpsichore) wasn't that interesting.

Kabelo Monnathebe's performance of Nigun, by Ernest Bloch was the highlight of the evening for me. Part of a bigger work, Baal Shem, it is a dedication to Bloch's Jewish Roots, and Nigun is itself a religious piece. The piece itself is wonderful - it sounds religious, but it sounds like a story that wants to burst out. A story of triumph, of despair, of happiness and a whole lot more. It is a piece that requires mastery of the violin, and it was a brilliant performance, receiving a rousing applause at the end.

The last "official" piece (before the rerun of the Rameau, and the kwela pieces) was the "world premiere" of Karl Jenkin's Soweto Suite for Strings. It is not a completely new suite - but is rather assembled from Karl Jenkin's two big hits - The Armed Man and Stabat Mater. The pieces work surprisingly well together, and it is interesting to hear them without the choral and other orchestral accompaniments (although there were a few drums).

Beyond showing the musical talent of South Africa, Buskaid is a positive push on how transformation can take place; and a triumph of skill and perseverance over simple affirmative action. However, while it Buskaid has been wildly successful, it is facing a massive financial shortfall should the Lotto money not be renewed. In that it requires support - and support for more than just attending concerts and buying CDs, and I plan to add my pledge to the ring. 

That said, Buskaid is now effectively a thorough bred music school - and perhaps it is time that it also spans its wings. With highly competent performers and teachers, perhaps it should also consider doing lessons that are paid for. After all, while it is true that the vast majority of its students are from disadvantaged backgrounds; there are also students who are from advantaged backgrounds who wishes to learn and improve playing string instruments. Perhaps the solution should also encompass teaching, for profit, to the advantaged students that can afford the lessons? Yes, it may be a different track to how Buskaid started, but it could be an important step to a brighter, and more integrated future ...

Joshua Bell - JPO's 3rd Season, 6th Week

American violinist, Joshua Bell, is undoubtedly the biggest classical music star to have graced the JPO (at least since I have been going to the JPO). Playing to a full house, it was a masterful performance of
The concert started with a performance by the JPO academy, which seemed to be a medley of pieces. It felt a bit tentative, though it is difficult to judge without knowing much about the piece.

The first JPO piece was the ovurture to Carl Maria von Weber's "Der Freichütz". It was a fun piece, interesting to listen to, enough to want to listen to the whole piece.

The piece before the break was Mendelssohn's "Midsummer Night's Dream", linked to Shakespeare's play; though not completely aligned. I know the play only at a high level, and the music didn't align completely to the play; do it was difficult to get the story from the music.

Joshua Bell is playing at the JPO tonight and then in Cape Town. If there are tickets left, it is very worthwhile to go.

Movie: The Dark Knight Rises

Christopher Nolan's Batman trilogy has to be the finest superhero movie series to date. Across all the spheres, the beautiful cinematography, the great acting, impressive story writing and dialogue; each movie has been a great movie first, before being a great superhero movie. Like a proper trilogy, The Dark Knight Rises, builds upon the earlier stories and characters - not only in the growth of Bruce Wayne/Batman, but also the supporting characters such as Commissioner Gordon and Gotham itself.

The story has a bigger political undertone, especially of Bane's "uprising"; but the ultimate link to why Bane actually targets Gotham is tenuous, at best. It is probably one of the biggest plot holes (next to how Batman gets back to Gotham after his "exile"), especially as Batman has for all intent retired at the beginning of the movie. That aside, the pacing of the story, the characters (especially Bane and Anne Hathaway's Catwoman) and the construct of the "prison" of Gotham City is superb.

I have only two, relatively minor, issues with the film. Firstly, Bane's (and sometimes Batman's) speech was sometimes inaudible - but that could have been to do with the theater (and my hearing). Secondly, the very final scene with the coffee shop - did spoil the overall ending sequence. The entire trilogy has not shrunk away from making bold statements on heroism; the last scene was just unnecessary.

Movie: Sound of My Voice

It is billed as a psychological thriller, though IMO, the movie misses the mark quite a bit. Similar to the book/movie K-Pax in a way, Sound of My Voice revolves around a documentary filmmaker couple who infiltrate a cult around a woman who claims to be from the future. There is no real proof given on why she should be believed, and the movie sort of devolves into a weird exploration of mysticism. There are some other threads that also take place, but they are not really tied together making the plot even more confusing. In the end, it tries to be interesting, but just fails.

The Reluctant Fundamentalist

I bought Mohsin Hamid's "A Reluctant Fundamentalist" at the last Exclusive's sale, only because I didn't finish the book while I was "browsing". It is a gripping tale - one of those that you don't want to put down. It is a combination of a great conversational writing style, witty humour and a great plot - of a young Pakistani man, who succeeds in the top echelons of US academia, is highly successful in a competitive financial services but gives it all away as he becomes disillusioned with western politics. It is a highly entertaining read, and at the same time pushes the question on why fundamentalism (of all types) start out in the first place.

Movie: The Amazing Spiderman

Spiderman gets a reboot, and I suppose it is better than making endless sequels. This reboot has some great things going for it - there is a lot more character building for Peter Parker, the progression from geek to superhero is well paced and better reasoned and the cinematography, especially in the action sequences, is stunning. 

But there are also a number of problems - for one, he keeps on revealing his identity to people. The movie's final action sequence shows a TV camera following him at the beginning - and this camera magically disappears, as he takes his mask off? He has his mask off, in front of a whole crew of policemen; while rescuing a child etc. 

The villain, just doesn't work. Yes, the rationale that he wants to make everyone powerful and strong makes sense altruistically, doesn't make sense as an action that the villain will want to achieve. There are hints of an underlying subplot, but this seems to have been left for another movie. 

Overall, it is a good action movie - but the reboot is not in the same level as the Batman reboot.

Movie: Shame

Last year, Michael Fassbender was nominated at almost every major film award for his acting in Shame. The main character, is an intensely private person who is a sex addict, and the impact in both his personal and professional life. It is an interesting exploration, not only of the addiction itself, but also of why he needs to keep it a secret. It is an "arty" film - beautiful cinematography, lots of long silences with no dialogue, and no real conclusion - and exceptional acting from Michael Fassbender. It's not a movie for everyone, but certainly a though provoking one.

Mogwase

A stone's throw from one of Pilanesberg's gates, and slightly further from Sun City, are probably the only claims to fame for Mogwase. The B & B (Mogwase Guest House) we stayed at was friendly (with a bit of a quirky architecture) and economical - but there isn't much going for the town itself. 

But what was interesting to observe, is the gulf between South Africa's big cities and towns and smaller towns with regards to security. I didn't spot a single electric fence (other than at Pilanesberg), fences were demarcation of property and not prison walls, gates (if present) were welcoming and not foreboding and doors seemed to be kept unlocked. 

Why the difference? I don't know ...

Oppikoppi: Day 3

The last day promised the most exciting line-up, with some of the top musical acts in the country. Although, we had initially wanted to go fairly early in the day, we decided to go slightly later in the afternoon to make the most of the later acts.

The tribute to a legend in the South African music scene, Vusi Mahlasela, was the first act of the day. He performed a number of his hits (I have heard at his other appearances), together with some amazing guest artists, including Karen Zoid and Albert Frost. It was a great sundowner concert, and highly enjoyable.

I have never heard of "Eagles of Death Metal", but they drew a humongous crowd. It was an energetic performance by the Californian band, though it wasn't exactly death metal. It was good music, though not something that I would go out and buy a CD for (or even download).

Karen Zoid started her show with an apology, to the non Afrikaners, that not all Afrikaners think like Dan Roodt and Steve Hofmeyer. The rousing response from the crowd was a validation of the statement and her general position on the "Afrikaner mentality", from the massive, predominantly Afrikaner crowd. Her show was a mixture of her new songs (all in Afrikaans), some old favorites and an amazing cover of Queen's "The Show Must Go On". It was certainly one of the highlights of the festival, and yet again Karen Zoid nailed a great show.

I didn't spend too much time at Jack Parrow - the little I saw didn't really interest me much; mostly due to the style.

The tipping point in te decision to come to Oppikoppi was to see "Seether", and they didn't disappoint. In front of an absolutely packed stage, they started with the high octane "Gasoline", and finished with the equally high energy "Remedy", and a number of hits in between. The whole crowd singing "Broken" with the band playing the accompanying music was amazing, as were the numerous extended instrumental pieces during the songs. The interaction with the crowd, though minimal compared to some of the other bands was minimal, but felt genuine. The performance was special, and was certainly the highlight of the festival.

The last band of the festival, was British metal band, "Bullet for my Valentine". Although I have heard some of their songs before, I didn't really know their music. Nevertheless, the very high energy show was great, featuring some of the biggest mosh pits I have ever seen. In one of the instrumental solos, the lead guitarist started playing "Nkosi Sikelela Africa", and the amazing thing for me, was the gusto in which the largely white Afrikaner audience sang along; something that underlies the earlier comment made by Karen Zoid. We have truly come far!

Sun City

I have always wondered why Sun City was seen as a holiday destination, but despite driving past a number of times, I have never bothered to find out. So yesterday morning, I went to find out ...

There is a definite theme park vibe, from the gaudy decorations, to the architecture. And while I see the attraction of the Valley of the Waves, the rest of the non hotel areas was rather barren in things to actually do.

As a hotel while going to an evening show, or for a game drive at Pilanesberg, it makes sense; but purely as a holiday destination?

Oppikoppi: Day 2

Getting to the farm was far quicker, presumably because most people are already there, as evidenced by the general lack of parking space.

The first act we saw was, Jeremy Loops. The main feature was the use of loops, distortions and replays to combine different musical pieces; sort of a DJ with live instruments. It was a very interesting effect, though can't say that I was absolutely awestruck.

Albert Frost brought his blues and rock combo, in front of a packed house. It was an interesting blend of styles, complemented by a number of guest artists. It is easy to understand his popularity and it was a great way to see in the sunset.

BLK JKS came into the fore a few years ago as the all black rock band. When I saw them previously in Cape Town, I was quite unimpressed. Their sound has definitely evolved, a lot more musical but a lot less lyrical. I love the change, though the anthemic lyrics is what draws the crowd to sing a long, and that was mostly missing. That said, their closing song, evoking memories of apartheid protest actions (and now Cosstu strike rallies) was brilliant in both the blend of music and performance.

I didn't stay too long at the very crowded Valiant Swart performance. Country Western doesn't interest me much when in English, and it didn't become more interesting in Afrikaans.

Josie Field's performance at the "Small Stage" was packed, with almost no space to move. She played a number of her folk rock numbers, and it was a pity that this was on such a small stage.

A fairly recent band, Aking has a sizable following in South Africa, as evidenced by the massive crowd. The anthemic numbers however really require the listener to know them; I found it mostly mumbled and unclear - but the crowd around me seemed to be having a ball!

For me, French ska band, Babylon Circus had the best performance of the day. Similar to The Rudimentals in some respects, Babylon Circus combined a number of musical styles and influences into a raucous party. Despite singing mostly in French, they had the whole crowd dancing and even singing along. They had magnificent stage presence, with interesting stage antics (though not as extreme as Knorkator) and wonderful interaction with the crowd.

The wonderfully named, Desmond and the Tutus, were the last band we saw last night. The music was great, as were the lyrics; but the slurry/stoned singing style (or perhaps actual effect) wasn't too endearing. Like Aking, it felt as if one needs to know the songs to actually enjoy their performance.

Oppikoppi: Day 1

Just a few km outside Northam (about 120km north of Rustenburg), Oppikoppi has become an institution in the South African music scene. Modeled after Glastonbury, Oppikoppi is a multi day, multi stage, multi genre (and South Africa's largest) music festival.

I was first interested in attending, about 10 years ago but being a student with limited resources in Cape Town didn't help. Every year since, I have wanted to come; but never got round to it. This year, it was a bit of a last minute decision, but I decide to take leave and just attend.

M & I are not camping, but rather staying at a B&B in a small town about 40 km away. We arrived last night, but decided to only come through in the late afternoon, and ended up leaving a bit earlier than planned. While, I was aware of the size, but did not expect such a long traffic jam while entering. That said, it is very well organised, though it could do with some sign posting and day visitor's parking is lacking.

Southern Gypsey Queen played pop rock, with a constant revolving door of guest artists, be it musicians from other bands or singers. It was a good collection of songs, though I admit to not knowing any.

The Muffinz, played a combination of reggae/jazz though they didn't seem to have any real lyrics in their songs. Their music was however quote brilliant.

We didn't catch too much of Flash Republic, but they were clearly very popular given the packed stage area. I wasn't sure what to expect, but a live band performing electro dance music wasn't it.

Tidal Waves are promoted as the "hardest working reggae band in the country" in the Oppikoppi program. Their songs were a lot more socially aware, though their little speeches in between probably missed the crowd. Singing in a number of languages (Afrikaans in a Jamaican accent is weird), it was certainly an interesting performance.

Knorkator, was definitely the highlight of the evening. Taking place in one of the smaller stages made the experience more intimate, but a larger venue was probably warranted. A German band, which predominantly sings in German brings its own dynamics; but they amplified this with some brilliant performance art - from their costumes (a man dressed in monk robes, and the lead singer first in a green gimp suit followed by a woman's swimming costume worn in reverse), to the translations, to the crowd interactions - was stunning, and i was glad to be there. The amazing range of the lead singer with an eclectic choice of music (from heavy metal to pop rock to dance) made it the best performance so far. Unfortunately, despite the crowd asking for more, there was no encore :(

Pilanesberg

In my past visit to Pilanesberg, it has usually been in the morning (leaving at an ungodly hour from Jo'burg), so I wasn't expecting to see much on a drive much later in the day. Due to fires, and it being winter, the height of the grass was lower, and it did help, but no predators were spotted.

Nelson Mandela Capture Monument

50 years ago, Nelson Mandela was captured by the police, about 8km from Howick. It was a significant event; as he would be convicted of treason at the Rivonia trial and the rest is well known.

Yesterday, a monument was unveiled at the spot, with a museum to follow. It is a stunning monument, especially in the still rural environment. It is well worth the detour (about 2km from the freeway); and there is currently no entrance fee; even for parking!

Howick Falls

About 20km outside Pietermaritzburg, it is quite a spectacular sight in a small town. Remarkably, it is not commercialized beyond the obligatory curios and restaurant.