Jarrett House NorthSoftware development, Boston life, music, and whatever else is interesting.Psst! New blog!- (Found July 8, 2008 ) I don’t have all the lights on yet, but you can find me at my new WordPress blog. In a few weeks, this site will automatically redirect over there, but why waithttp://discuss.jarretthousenorth.com/2008/05/10#a21880 We love it when our friends become successful- (Found July 8, 2008 ) In another of an intermittent series of posts about past acquaintances of mine who are now Doing Great Things, I happened to think the other day about Darius Van Arman. Darius and I went to the University of Virginia at around the same time, and primarily bumped into each other in the basement of Peabody Hall, where all the University publications were at that time. I was getting a poetry magazine called Rag & Bone off the ground; he was working on a music and creative magazine called 3.7. I...http://discuss.jarretthousenorth.com/2008/04/11#a21866 The danger of outsourcing...- (Found July 8, 2008 ) ...your bookmarks. Del.icio.us is offline and my whole morning routine is off. Okay, so instead of tagging these two links I’ll post them to my blog instead. First, for those new product managers out there, as well as those that have been the copy machine once too often, check out the free ebook from Pragmatic Marketing, The Strategic Role of Product Management. There’s nothing new here; in fact, it’s all stuff you’ve seen before, on Steve’s blog or in other...http://discuss.jarretthousenorth.com/2008/04/14#a21867 Fun with Berlioz- (Found July 8, 2008 ) We had an unusual rehearsal the other night. Instead of being in the chorus room in the bowels of Symphony Hall, we were on stage, and we had cameras on us. It was for the BSO’s podcast series, and the episode is now out: an interview with our fearless leader John Oliver, with shots of the Tanglewood Festival Chorus rehearsing the Berlioz Les Troyens and some footage from the recent Met staging of the opera. I think it gives good insight into both the piece and the chorus (as well as some.http://discuss.jarretthousenorth.com/2008/04/14#a21868 Cross-site scripting, illustrated- (Found July 8, 2008 ) Wired ThreatLevel Blog: Look Ma, I'm on CIA.gov. Wired’s security blog reports a cross-site scripting vulnerability in the CIA’s web site and gives a convenient demo exploit. The exploit is benign enough, illustrating how JavaScript can be used to load an iframe on the CIA’s search results page containing arbitrary content. But the potential for mischief is significant. Imagine loading a phishing site this way. Or imagine this vulnerability on your bank’s home page. Too..http://discuss.jarretthousenorth.com/2008/04/15#a21869 Edit the Oklahoma Sex Offenders Registry!- (Found July 8, 2008 ) In what is shaping up to be a fine security trifecta (see yesterday’s post about an as-yet unpatched cross-site scripting vulnerability at CIA.gov), yesterday’s Daily WTF posting concerned a naked SQL Injection vulnerability on the Oklahoma Department of Corrections website. The vulnerability allowed anyone who cared to download lots of details from Oklahoma’s sex offender registry that shouldn’t have been accessible, including social security numbers (identity theft,...http://discuss.jarretthousenorth.com/2008/04/16#a21870 2:42- (Found July 8, 2008 ) Joshua Allen at The Morning News (via BoingBoing) writes about his deductive process of identifying the perfect pop song length, at two minutes and 42 seconds: The scientists then dug up this song by a group that pretty much defines one-hit wonder: the La’s. The song is “There She Goes,” and is so flawless that it instantly made everything else the band did pointless. This ditty is two minutes and 42 seconds, and is all about songwriting economy.... What else is at 2:42...http://discuss.jarretthousenorth.com/2008/04/18#a21871 New mix: 2:42- (Found July 8, 2008 ) My 2:42 mix is now posted at Art of the Mix. I decided to keep to the format of the original, and only included twelve songs. I noticed, looking at Isis’s version, that some of her track lengths were different from mine—for instance, her version of “That Teenage Feeling” by Neko Case is 2:42, whereas mine is 2:43. A second’s difference is surprising—maybe it’s just the difference between buying the track digitally and ripping it. Or maybe different...http://discuss.jarretthousenorth.com/2008/04/19#a21872 Performing for the Pope- (Found July 8, 2008 ) My friends and colleagues in the Suspicious Cheese Lords have been busy lately. This weekend they sang for Pope Benedict XVI (Yes, seriously.) at the Pope John Paul II Cultural Center. The piece was a composition by George Cervantes, a setting of the Peace Prayer of St. Francis of Assisi, making the occasion that much cooler. Plus Skip was interviewed on CNN about the performance. And the video is prime Skip. Full video of the performance (starts at around 18:30). and other activities at the...http://discuss.jarretthousenorth.com/2008/04/21#a21874 The intersection of Barack and security- (Found July 8, 2008 ) Netcraft: Hacker redirects Barack Obama's site to hillaryclinton.com. Okay, folks, here's the thing: never trust any place where a user can enter text into your website and have it displayed back at you. Never trust any text that comes from a form field on your site. Because if you do, smart and devious people like Mox here can use your trust to do embarrassing things to your visitors. On the (very) slightly mitigating side, the attack was not against the main Obama website but his community...http://discuss.jarretthousenorth.com/2008/04/22#a21875 |