About Me

I ramble about a number of things - but travel experiences, movies and music feature prominently. See my label cloud for a better idea. All comnments and opinions on this blog are my own, and do not in any way reflect the opinions/position of my employer (past/current/future).

31 October 2006

Reflections: ACM DRM 2006

Yesterday was basically the reason I am here - to attend and present my paper at the DRM Workshop at the ACM Computer and Communications Security (CCS) Conference. So, this is a brief reflection of the proceedings of the workshop.

The first paper, by some researchers from SUN, looked at some of the business models that movie industry could adapt from the MMORPG world. While the ideas are certainly applicable; I am not really sure of the practicality of the ideas. The second paper looked at privacy, from the point of legal and economic practicalities. Basically, the paper argues that there exists certain legal and economic obligations if a business wishes to collect private information. These obligations create a risk; and thus creates ceiling on how much privacy can be afforded to customers. It was a very interesting paper; but I think it glossed over one crucial point - very rarely do businesses actually take into full consideration the economic and legal obligations when they do collect private data.

My paper, which was next, was very well received, and attracted quite a lot of interest. I was not really expecting a great reception; because the paper is quite simple in nature - but it is an area that has not really been addressed before. So, I was pleasantly surprised at the paper's reception.

The next paper on a view only file system has been discussed before as a mechanism for short term DRM solution. The one presented this year went a step further and designed a VM based system. It could work; but I am not convinced on the security layer between the VM and OS/lower level VM; or the performance overheads. The paper following it discussed an interesting key distribution strategy; but I must admit I did not follow it as well as I should have.

Tom Kalker, from HP Labs and Coral, presented the invited talk focussing on interoperability. Most people who have voiced opinions against DRM, seem to imply hatred on the lack of DRM interoperability, and not some of the other issues. He discussed how interoperability in DRM is not only a format issue; but also a business and complete technological issue. He talked about Coral, which uses a credential system, allowing for interoperability. However, it is by no ways a perfect solution, as every device would still require their own file format etc.

The next paper discussed more interesting code obsfucation and diversification as a mechanism to combat piracy. It was quite impressive, until the performance hit .... 840 times slower!

Pramod Jamkhedkar and Gregory Heileman presented their paper next, and their DRM project is very similar to mine; and we have been presenting or discussing similar ideas for the past three years. This year, they discussed, what they considered fundamental flaws in Rights Expression languages. In a few ways, their arguement was flawed, because it discussed mainly the flaws of XrML and did not consider the fact that some of the issues are being addressed or have been addressed in other RELs like ODRL. However, the issues raised are correct and needed to be recognised.

The next talk on interoperability, was a bit of a miss; simply because a lot of the content seemed to be contrary to the issues raised earlier; and the underlying details were hazy at best. The talk following it was very interesting; discussing some of the background to Intel's LeGrande architecture. Bascially, the OS is going to be dead - instead, the CPU itself will have a trusted OS base; complete with drivers and firmware. Applications will run on top of this base; in a completely protected environment, similar in operation to Multics. I am not sure of the maturity of the solution, but both Intel and AMD, together with other interested parties, have been pouring money into similar projects; so something is bound to come up.

The next paper, from Phillips Labs, discussed ideas on how to lower consumer anger and better ways to handle consumers who make use of pirated DVDs; or more appropriately Blu-Ray discs. Much of the work presented revolved around the use and operation of blacklists in Blu-Tay discs. It was really interesting; especially on the changing position.

The last paper of the workshop on watermarking presented nothing new; and in fact I have seen many better applications of watermarking.

30 October 2006

Movie: Talladega Nights: The Ballad of Ricky Bobby

I went to watch the movie here in DC with a friend from cyberspace ... one of the guys from the Atlas F1 Paddock Club. The movie house itself was interesting - basically an auditorium like most movie houses; but one that is also a full service restaurant and features arm chairs instead of normal movie seats. So we had two F1 fans watching a movie about Nascar while eating Pizzas.

The movie itself was surprisingly not too bad; and the rip offs of team orders and F1 were brilliantly done. As entertainment value, Nascar is not bad at all; and neither is the movie. If you are a racing fan; it's great; if only to identify all the different parallels.

Dam Festival 2006

I saw an ad talking about a Indie Rock festival in Washington DC; and I just couldn't give it a miss. Basically, a number of bands; spread out over a number of clubs playing in the evenings. Unfortunately, I managed to go to only one of the clubs - and it was an interesting experience.

First up; the club itself was quite small. Apparently, rock is a big genre in the DC area - the size of the club, Velvet Lounge, would lead you to think otherwise. Another disappointing aspect was the fact that most of the people who were there; seemed to be band supporters - they were there because they knew someone in one or more of the bands. The numbers were really small; and there was no real vibe - no mosh pits. Being Halloween weekend, there were a few costumed attendees - the best being a guy dressed up in a robot suit; completely with a functional iPod and speakers! At $8 cover charge; it was quite cheap; and good return for money.

The first band, Drunken Sufis (ft. The Psycho Terrorists), was in my opinion the best of the lot. They had an impressive stage show; and much of their music was about the War in Iraq, Bush etc ... almost Green Dayish. They had good songs and put on a great show - couldn't ask for much more.

The second band, from New Zealand, Over the Atlantic, was interesting - comprising of two members (bass guitarist and a lead guitarist/vocalist) and a computer doubling up as a synthesiser effort. It was interesting music - no doubt about that; but it just didn't click for me ... might work on radio; maybe - but not really a live band style.

The third and fourth bands, The Opposite Sex and The Object Lesson resp, were more mainstream rock bands; singing largely incomprehensible lyrics. However, they had really good music - brilliant guitar and drum play. The Opposite Sex features one member doubling up on a saxophone and a synthesiser; which reminded me a bit about the Nude Girls; but their songs were just not that great. The Object Lesson featured a hot keyboard player (wearing a catholic school girl outfit :p) instead of a Sax player and was the only band featuring a female member. I did not stay for the full set of the last band, The Chance, but they didn't seem too different from the two previous bands.

Overall, the music itself wasn't too bad - but it didn't have the vibe - maybe it was just a bad day.

28 October 2006

Freak House

Halloween seems to be very popular in the US, and this being Halloween weekend, there seems to be quite a few themed events happening around here. I came across "Freak House" in one of the free newspapers here, and as the website bills it "Torture. Murder. Shark attack. You'll scream your tits off!!"; it was just too tempting.

It is similar to London Dungeon in concept; although, more adult in nature. Basically, they have taken a whole three story house and converted it into a 9 roomed, scary/freak show. In many of the rooms, audience participation is almost pre-requisite; and I am sure a psychologist would have a field day in analysing how people react to certain situations. It was very cool, although London Dungeon is certainly more polished.

Rights and Repression

Being the capital of the world's most powerful country, it has also been the scene of many civil rights protests, and with America's thirst for storing history, it has also preserved a lot. The day before, yesterday ended up being quite a sobering tourist attraction day - as I ended up going through the Holocaust Museum and also going through various neighbourhoods involved in the Civil Rights movement. I also went up the Washington Monument, which was closed for renovation in my previous two visits.


The visit to the Holocaust Museum was sad, and at the same time, it did have a ray of hope in the end. The detailed examination of what happened to minority groups before and during WW2 is downright frightening ... how can fellow human beings really do that? But what was most frightening is not that it happened; but the reactions of the other countries in the world to the plight of the persecuted. Not only did they not chose to interfere earlier; but countries like the USA, sent refugees back, and, during WW2, refused to bomb gas chambers in some concentration camps even if it was physically possible. It is the indifference that really shocks - and the scary thing is - we haven't really learned anything since. After all; Rwanda happened and the world stood by - and Darfur is happening - and the world still refuses to take action.

The ray of hope, however tiny, is that the Holocaust museum is starting to document other holocausts - and trying to raise awareness of pressing issues like Darfur. I hope that it is not too late - otherwise 50 years from now; we will have another museum to add to the list.

Walking around Adams-Morgan, U Street precinct in DC was less strenuous on the mind, although not less worthy. One guidebook I read while browsing at Exclusive Books before arriving, claimed that Washington DC is predominantly black and latino. Moving around in downtown DC, you wouldn't believe that. Thus walking around suburbia was interesting in itself - and gives a very different view of a city ... A lot of the old buildings are preserved, and the contrast in architecture and style is amazing.

27 October 2006

Drug Free Zone


I came across this while walking around in DC suburbia ... and I was instantly reminded of various episodes in Season 2 of Weeds. There didn't seem to be any surveillance cameras though

25 October 2006

Reflections: WESII

For the last two days, I have been attending the The Workshop on the Economics of Securing the Information Infrastructure, sponsored by I3P. It was quite an interesting conference bringing together people from different disciplines including computer security, economics and social sciences. A lot of the content did revolve around policies; but unlike ISSA, the content was much more constructive, and dare I say, more useful.

There were a few really interesting discussions and topics; so I will briefly discuss them - maybe some of you have something to say about them ...

First up, there was a panel discussion on DNSSec, including a very quick demonstration on how quick and easy it is to actually commit DNS spoofing attacks. Considering the fact that DNS forms the backbone of the Internet (from the users perspective), a secure DNS solution is really important. In summary, DNS entries themselves are not verifiable, and like the paper I am going to present next week at the DRM workshop; there is no verification service currently available for DNS. This means that a man in the middle attack is very possible scenario for DNS - because in the current DNS setup; the first response received from a DNS query is taken to be the correct query. For a spoofer, it is therefore possible to redirect any DNS query, and a malicious attacker can really cause a lot more damage than phishing attacks. DNSSec seems like a good solution; but implementation is the problem as it requires every top level domain controller to actually do it; and also enforce others to carry on.

Two papers at the end of the first day were also quite interesting. There was a discussion on modeling black markets for software vulnerabilities; a scenario that already exists with botnets - but can seemingly also extend to any malicious intent; just like the arms trade I suppose.

But it is the last paper that I am really excited about. Bob Briscoe from British Telecoms presented an idea on how to control congestion on the Internet; allowing users an equal share of the bandwidth pie. The proposal raises the potential for real quality of service guarantees for Internet access; but at the same time provide a very real solution for denial of service attacks. It is a very neat idea, and is definitely a paper I intend following up on.

One of the interesting papers from today was the analylis of the value of data, using techniques similar to the insurance industry. The paper discussed how data can be valued, and why the valuation easily explains why the uptake for some security products like disk encryption and email encryption is so low. Can't really say I agreed with the values; but the approach made sense overall.

24 October 2006

Virgin Atlantic's Infight Entertainment System

In terms of intent; Virgin Atlantic's inflight entertainment system is quite amazing: on demand music, video and games - including playing games against other passengers on the plane. But after seeing a number of failures on both of my flights so far, I am convinced that the design is flawed.

Basically, the inflight entertainment system uses a very thin (anorexiac?) client which seems to process input and provide output only and one server (well atleast one per class anyway ... can't confirm about business class). Because the thin client performs no operations - the server does tend to become overloaded - and rebooting it; requires an inactivity period of over 30 minutes for most users. Furthermore, if too many users are using a certain feature - like the mapping service - then the system also becomes overloaded or too slow. In fact, there are a number of instances where the system (from the user's perspective) is just too slow or unresponsive.

In my opinion, it would be a better design in incorporate much of the interface processing components, like the menus on the client side. This way - the server does not have to do everything and the response time would be increased. Furthermore, if there are problems with one or two clients; it will not require the entire system to be rebooted. Just a few thoughts ... anyone else used a similar system?

How evil are you?

A link from Carl ... must say; many of the things listed are not really evil ...

You Are 58% Evil

You are evil, but you haven't yet mastered the dark side.
Fear not though - you are on your way to world domination.

Movie: A Scanner Darkly

This is an adaptation of possibly Phillip K Dick's most personal novel - chronicling his own experiences in drug use. It is a celebrated novel; but I found it the most difficult to understand and follow of the ones I have read. The movie on the other hand is quite precise and easy to follow - a feat in itself.

The most obvious and impressive aspect of the movie is the technology used in merging live action and animation (almost painterly in nature) into one seamless movie. This gives the movie itself a certain look; which it self enhances the whole "drug use" genre in some respects.

The story itself is good - and like most other Phillip K Dick stories; it explores the various interconnections between various aspects of life taken to extremities - in this case surveillance, corporate influence and friendship. Keanu Reeves plays an undercover agent seeking out a drug cartel behind a very toxic and addictive drug - substance D.

Unlike some of the more blockbuster movies made from Phillip K Dick movies, like Minority Report and Blade Runner - this focuses more on the poor and the disenfranchised - and very much less explosive. None the less it is an amazing movie because it is made so well and even Keanu manages to show some expressions (although that could have been animation)

Movie: The Notorious Bettie Page

I did not really know much about Bettie Page - a pinup model from the 50's who has been apparently photographed more than some of her more famous and well known counterparts like Marilyn Monroe and Cindy Crawford. The movie is effectively a biopic about her heydays when she was a major, well known model.

What is really interesting is that she was a force before the so called sexual revolution; so some of her reactions and the reactions of the society in general is quite interesting. In particular, Bettie Page was a well known fetish model; and the movie stresses that she was not into the fetish lifestyle itself; and how she rationalises what she does - esp in the light of being quite a strong Christian.

Movie: An Inconvenient Truth

A few quick reviews on the movies I watched while there was nothing else to do on the plane.

Trailers in Ster-Kinekor put the movie as the most terrifying movie ever made. As a documentary it is - mainly because you soon realise that what you can do as a person may not be enough; because 6.5 billion people also have to do the same thing. Climate change and global warming ... it is a fact; and it is terrifying what the future could be if we can't stop the degradation. As the movie states - do we have political will to do it? And more importantly - do all countries have the political will to do it?

Unfortunately, like many other "movies that have to be seen" the people who really need to see it; will no doubt not see it.

20 October 2006

Rent a Super Car

Now this is a business model that could work; and I would support! We all know that super cars are expensive machines; and thus most people can't really afford to drive one; let alone own one. So, Rio Prestige, based in Edinburgh, is a super car rental agency. For relatively low prices, you can hire a super car and drive it around.

Now they are based in Edinburgh; and I will be in Edinburgh in two weeks time ... an interesting opportunity except for the fact that you have to be 25 to hire ... maybe I can convince Eric to come along ...

18 October 2006

Movie: The Black Dahlia

Almost, everything I read about this movie before watching it was negative; so I did not really have very high expectations of the movie. On the surface, it is a movie about a murder mystery and the lives of the detectives that solve the mystery. As a detective story; it is great - and the pieces of the puzzle do come together. While, it is in no way comparable to a Agatha Christie or any other crime fiction great; the story is good, and plausible.

But it is the style of the movie that was really iffy. Arthur correctly pointed out; that the movie was done in a certain style, and thus was a good movie for that style. However, I think it was too stylized; there was an over emphasis in style - and that was a detriment. That too much style forced the movie to be too long; and introduced a really slow pace at some parts of the movie. In the end it is like too much make up on women (especially old women) - unattractive and artificial.

Sam commented that watching the movie was like going to a wine tasting when you don't drink wine. Maybe; but I think it would be more apt to say it was going to a wine tasting where cheap wine is being served from really expensive looking bottles.

08 October 2006

Ho Ha about Gay Marriage?

There has been so much debate on the legitimacy of the proposed Civil Union bill, which have set me thinking (which, as a self confessed idiot could be dangerous) and so this post is very much a mind dump. But first a bit of quick background.

Firstly, it has been criticised by some in the Gay and Lesbian community, because it is a separate act; and is different from the current marriage act. Thus they argue; it is different and discriminatory. The government argues that it needs to be; because the marriage act is primarily based around religious and traditional ceremonies; and since the new bill is independent of religion; it requires different treatment.

On the other hand, there is the criticisms from the religious, and virtually every homophobic person, on how gay marriage is against nature, and against every religious belief; and thus immoral. In fact, the government was really pushed to write this bill; because the Constitutional Court ruled that the current Marriage Act is unconstitutional; so it is obliged to change the law. And like the death penalty - referendums on the matter will not help. To change the legal position on either; there needs to be a change in the constitution; and even a simple 2/3 majority is not sufficient to do that!

So either way; like it or not, gay marriage will be legalised; and there is effectively nothing that the opposition can do. This off course raises a few very important issues and problems. First and foremost - in a constitution that separates the church and the state distinctly; is there a need for a marriage act, other than to recognise marriage can be performed under religious and traditional ceremonies? In that scenario; other than recognised state machinery to register and dissolve marriages; why is there a need to have separate acts governing them?

Secondly, and more interestingly in my opinion: why should marriage be between two persons (as dictated by the last Constitutional Court judgment on the issue)? Why can a marriage not be between more than two persons? And it is not a new thing in South African culture anyway - quite a few cultural groups, like the Zulus, recognise polygamy. And so do some religions, including Islam. So, if it is religiously and culturally ok to have more then two persons in a marriage; why should a civil marriage be any different? Why should it not be possible to have marriages involving multiple persons, of different genders? Do we really have any right to regulate people's love and sex lives - as long as every one in the relationship is a consenting adult?

Gay marriage controversy ... wait till the polygamy controversy starts :P

07 October 2006

"Sundowners" on Lion's Head

At the last SASSU-UCT meeting, we decided to go up Lion's Head as a sort of last committee thing. Despite three people baling at the last moment, it was a great last team event; although, to be honest; sports at UCT tends to run itself, so SASSU does not really do much (or claim to do much, like SRC). I say "sundowners", because although the intention was there, none of us brought anything other than water; but it was a great hike up Lion's Head; and a wonderful view of the rising full moon; and a setting sun.


Clouds come in (quite fast), and envelope Signal Hill. By the time it was dark, virtually all of Cape Town was enveloped in the cloud and mist.

Some of the SASSU-UCT collective (Gary, Cheryl, Tarryn, Jacob)

Fraser strikes a pose

The hike down was quite interesting, under the moonlight and without torches. What made it even more interesting was the fact, that for the most part we were above the clouds, thus able to see the stars. Sadly, my camera and my photographic skills are quite lacking to give a really good perspective. A pic of the path down anyway ...

05 October 2006

Movie: Sophie Scholl - Die letzten Tage (The Final Days)

Another movie from the EU Film Festival; and this was Germany's entry for the Best Foreign Film award at the Oscars this year. The plot is about Sophie Scholl and other members of "The White Rose", a anti-Nazi German, mainly student movement, in operation near the end of the WW2. What was interesting about many members of the The White Rose, was that most of them had actually spent time at the front lines; or were intimately connected to the front lines. The movie recounts the last days of The White Rose; from the arrest of Sophie Scholl (and her brother Hans), her interrogation, the show trial and finally the execution.

What is really amazing is the dialogue, and the arguments - not only by Sophie Scholl, on why Hitler's war strategy was wrong, and the war needed to end; but also the Nazi arguments; on why their course of action was correct - and would ultimately succeed. It is an intellectual debate that makes the movie worthwhile. But it is also the stark difference in arguments between the interrogator - whose arguments are philosophical and largely logical; and the judge (and chief prosecutor rolled into one) at the show trial - whose arguments are basically propaganda and righteous beliefs; that make it so interesting.

In many ways; the arguments are like present day Iraq situation; the Israeli-Palestinians conflict or indeed the Iranian Nuclear Enrichment tug of war ... both sides in the disputes have perfectly logical arguments; but these are all drowned by the rhetoric and the passionate preaching, often by both sides. It seems that, history truly repeats itself, often.

03 October 2006

UCT Student Leadership Awards

Before I rant, congratulations to Chad for being awarded, for the second year running, the Student Leadership award for Postgraduate Students.

And now to my rant, I was nominated for the leader in sport, but just before the ceremony yesterday, I realised that it was not listed on the presentation schedule. I learnt from the MC, that it was not going to be awarded, because there was no suitable candidates meeting the high standards. I would have left it at that, except, one of the deputy vice chancellors, Prof. Nhlapo, came over during the reception and I was obliged to fill my curiosity, and ask him why it was not awarded.

His response was, that there was only one nomination, and therefore the award was not awarded because there was no competition. It is a position, I sort of understand; but baffles me none the less ... for two reasons. Firstly, why announce that there was no suitable candidates for the award ... because it implies that there were nominees and none of the nominees met the standard. Secondly, it implies, and Prof Nhlapo did concur when I raised it, that even if there a brilliant leaders who are nominated, they will never get the award if they have no competition ... it just seems so absurd.

In either case, my main motivation for the awards was not really the money (which would have been good, considering the crappy exchange rate) - but to prevent what has happened in the past, where the winner has been the SRC sports rep, who did not play for any sport teams and did not really belong to any sport clubs. In fact, most of the winners last night were from the SRC ... an amazing fact, considering the debacles of the SRC this year ...

Movie: Antonio Guerriero di Dio (Antonio, Warrior of God)

It's the European Film Festival again; although it seems to be a lot smaller affair. This is Italy's contribution to the festival, a biopic on Saint Antonio.

The movie begins with a shipwreck, with two survivors - Fibonacci (the mathematician) and a monk; and a supposed treasure. For the most part, the story focuses on the Monk, Antonio - who, as the film progresses is shown to be greatly admired by the general populace; because of his humility, and his affinity to the poor. For the large part, Fibonacci does not feature in the movie; except in the almost incidental contribution of the Arabic number system to the West; which is taken advantage of by a prominent money lender, who employs him. Antonio's major fight in the movie is against greedy money lenders, who feed of the poor and the unfortunate, but Fibonacci and Antonio are not shown together again.

It is a story about a Saint, and so it was like many religious movies, a bit preachy. The story, while simple, was not well told, in my opinion ... and Antonio's illness was never really explained. What was great about the movie though, was its cinematography - it's a stunning film, taking full advantage of some beautiful churches and medieval architecture.

A different comment: It is amazing to note how many scientific advances have been made on the back of persecution (or towards to cause of persecution) of other humans.

27 September 2006

Movie: Hard Candy

The subject of the movie is quite difficult - on the surface, it is about a pedophile trying to pick up a 14 year old girl over the Internet. But that is only the first 20 minutes of the film - and nothing is what it seems to be. Primarily, it is a story about revenge; but you never really feel sorry for the victim - maybe because he is a pedophile; and possibly a murderer - and while many parts of the story is quite tragic; there is also quite a bit of comedy - situations where you can't really stop laughing ... even though it is rather cruel. It is definitely one of the best pieces of acting I have seen for a long time; and that alone should be a reason to watch the movie.