The concept of lightning talks works astonishingly good. Not all of the short talks are equally good but because of their limited length it doesn’t matter. It also turns out that 5 minutes are enough to get a sufficient introduction to a project/topic.

This article talks mainly about a small but fundamental security flaw in Microsoft’s ASP.NET. But check out how the author uses this topic to express his concerns about the USA Patriot Act.

I really like the new logo of the 21C3. It is much better than the macho/superhero-type hacker in the early versions (which is unfortunately still in use) - who are they kidding anyway?

When f. saw the image, she only asked "oh, did they take a picture of you at the camp"?

BTW. I still think "Bits of Mass Destruction" would have been a way better slogan for the congress...

Sometimes I think, for Adam Curry the major difference between Podcasting and Broadcasting is the possibility to say "fuck" on the air.

After a couple of months of curiosity I was able to obtain an invitation to Orkut [1]. I played with the site a little bit and still don’t get it. What is Orkut good for? Besides finding dates obviously.

The thing that ticks me off the most, are the lousy search capabilities. This is a project by Google, remember? I can’t even limit my searches to a specific community. Finding someone in a community with more than 1000 members is impossible.

And what is the point of the communities? To every topic a community is dedicated to exist already at least on comprehensive webpage, web-forum, wiki, mailinglist, etc.... Why would I want to participate in a webforum that is not accessible to everybody who is interested in the specific topic? Maybe there is more to communities, I should join one occasionally... But is there more to Orkut?

[1] www.orkut.com

Creating wireless honeypots: www.securityfocus.com

Watching other people's browsing is quite addictive. The easy to use global bookmark exchange del.icio.us [1] makes it possible. This should become increasingly interesting with the number of people using the service.

[1] del.icio.us

A paper (in german language) worth reading on this topic: Wie Personal Firewalls ausgetrickst werden können [1].

[1] home.arcor.de

Security-protocols.com runs an interessting article [1] describing methods to use Google to gain access to files you shouldn't be allowed to see or have access to. A broader and more in depth look at the same topic provides the site Serachlores.org [2].

[Update:] Slashdot [3] links to 2 additional articles about using Google (and the Google-cache) to retrieve confidential information.

[1] security-protocols.com [via SecurityBlog] [2] www.searchlores.org [3] slashdot.org

Honeytokens: The Other Honeypot [1]. I allways liked honey.

[1] www.securityfocus.com