☆ Free Money!

Kiva are giving away $25 to anyone who asks today. It’s true. The catch? You have to loan the money to someone who has far, far less money than you do and who will use it to bootstrap their business. Like everything, Kiva has a deeper story, but I am an enthusiastic supporter as I believe investing in local small entrepreneurs who will grow their economy is by far the best way to tackle poverty long-term.

I recommend you go to their site and claim your $25. Be quick, these offers “sell out” amazingly fast. First-time Kiva lenders only, obviously.

☆ A Day At The Races

And they're off!As a child, my parents used to regularly take me point-to-point racing. I wasn’t very interested in the horses, but there were often trees to climb and always a picnic and friends in droves. My parents used to “have a flutter” on the races but of course I never gambled – too young.  We had to drive for miles and miles to get there, but all the fresh air, food and fun used to make it a highlight.

Fast forward 40 years (gulp), and I’ve still never bet on a horse race. I was over at Stonehenge a few weeks ago taking visitors to see the rocks, and noticed in the hedgerows a still-familiar set of signs for the races. Painted on wooden slats, the same signage was in use in the 1960 and 70s. I saw that the Larkhill races were happening this weekend and told my daughter (an avid equiphile and lover of racing over jumps). Larkhill was one of the more distant destinations my parents used to take me to, and I (just about) remember it as having very poor tree-climbing facilities. Still, the experience as a whole all came flooding back to me.

That was all it took. We headed out today (sans picnic) to find the races again after so many years. I live closer now so it was a fairly quick drive to the middle of  Salisbury Plain. The byways to the fields are gritted these days, so no fears of tractor-propelled exits that I remember from my childhood, but everything else was still exactly the same. We paid for our pass, drove into the field, found a space near the last jump (number 5 on the map) and settled to watch the racing.

It was like stepping back in time: announcements on trumpet-like loudspeakers, a rickety sign with wooden slats hauled on ropes showing the runners for each race, red-coated riders from the New Forest Hunt patrolling the fields on horseback, raffles to raise money for the hunt, trashy outdoor food on sale (pasties! a beer tent! candy floss!) Bookies In Action and a line of bookies by the paddock.

I’m not usually a betting man (my grasp of statistics is weak but good enough to tell me it’s foolish to gamble against professionals), but I was surprised to discover that I could still read the racing form in the race card and the temptation grew too. My daughter was certain that the favourite was going to win, at fairly short odds that weren’t worth considering, but I saw another horse I thought had a good chance and so decided to risk my £2 coin at 4-1. Bookie time.

While they may look timeless with their leather bags and wooden trestles, the bookies have modernised. They now have whiteboards instead of blackboards, but there’s a more radical change. No more coloured cards with interesting markings that I remember playing with as a child when my parents lost. These days, even in the middle of a field in the middle of nowhere the bookies all have computers that issue betting tickets. So I paid my coin, took my ticket and headed back to the track.

Close Race

It was a close race, and my daughter was right about the favourite. She has an eye for horses and I think if I was ever to take up racing seriously I’d want her to be my advisor and cashier. But in this case, the rider was very unfortunate and broke his stirrup just before the final jump, leaving my horse with a clear run to the finish. Amazingly, my only ever bet on a horse won. I went back, joined the line and claimed my crisp £10 from the bookie.

While the gambling isn’t my thing, I can see we may well be back at Larkhill at some point, maybe even soon. The sun shone, the sky was blue, I was able to take photographs and there were even skylarks. But next time, we’ll take a picnic.

☆ Leaving Room For Mystery

Stave Church DragonThis post is a bit unusual for me – apologies if it offends you –  but I found my mind wandering after I re-read this letter that the Archbishop Of Canterbury sent in reply to a letter from a six-year-old asking “To God, How did you get invented?” I do recommend reading it.

There are so many ways to answer. Some are angry and negative; some are complex and technical; some are condescending; some are trite. This one seems to me to be a perfectly tuned answer, respecting the unknowable mystery of the subject, the trusting simplicity of the questioner and indeed the scepticism to the facilitator. The result encourages reflection and leaves room for mystery.

Leaving room for mystery is one of the things I feel the world lacks at the moment. Everyone wants precise answers to every question, with uncertainties eliminated. It’s possible to do that with simple, objective questions, but once the system we’re considering gets complex it’s entirely possible it will become unknowable to a single mind. Reductionism a great tool, as long as the system still works once it’s been reduced.

I’ve never been a proponent of a “god is in the gaps” approach of reifying the unknown, but all the same there are things that are beyond simplification, which have to be taken as a whole and accepted on the basis of experience rather than analysis. That was one of the conclusions for me after my direct/indirect causality essay. It seems to me that a “fundamentalist” is actually someone who refuses to do that, insisting instead on using the reductionist tools that worked on the easy problems and discarding the parts of the complex problem that don’t respond to them.

Doing that breaks things. The real world is deliciously complex, and there will always be mysteries – systems too complex for us to analyse. It seems to me that one of the keys to maturing is learning to identify those systems and leave room for them to be mysteries, without discarding the rest of rational life.

☆ Hollow Point

Each time I am told I should unreservedly respect decisions made by authorities in secret, I remember this song by Chris Wood. I always cry when I play it.

[youtube http://youtu.be/tI2YdHt_V7s]

In case you don’t recognise the story, it’s about Jean Charles de Menezes and his killing by British police whose certainty he was an Islamic terrorist overcame their humanity.

Folk music is still our folk memory. Bad laws limiting criticism of official business, restricting mention of trademark terms or preventing adaptation of popular culture will kill it and make us forget.

☆ Pratchett Does Sci-Fi

My attention was drawn to a new direction that fantasy author Terry Pratchett is taking. His Discworld series has been a huge success among a wide circle of people who find the Tolkien-informed, politically-aware stories clothed in a rambling fantasy universe compellingly funny.

He’s now working on a collaboration with serious sci-fi author Stephen Baxter. The first fruits of the collaboration is due out in June – a book entitled The Long Earth, which will apparently combine Pratchett’s insightfully quirky approach with Baxter’s hard-science-driven sci-fi. Wikipedia’s plot summary says:

The ‘Long Earth’ is a (possibly infinite) series of parallel worlds, similar to Earth. The “close” worlds are almost identical to ‘our’ Earth, others differ in greater and greater details, but all share one similarity: on none are there, or have there ever been, human beings. The books will explore the theme of how humanity might develop when freed from resource constraints: one example Pratchett has cited is that wars result from lack of land – what would happen if no shortage of land (or gold or oil or food) existed?

According to the Guardian, this new departure is actually based on ideas Pratchett was considering in 1986 before the Discworld series took off. I’ll certainly be interested – I’ve pre-ordered [links: US | UK].

☆ Is Windows to blame for viruses?

Bug engaged in exploitA historical post, for a change. A comment on a mailing list tonight – that something was “rather like blaming Windows for getting viruses” –  sent me exploring my recollections of CPU security on Intel chips from my days at IBM. I went scurrying to find a half-remembered explanation from the past of why, in addition to the larger user base making the target much more tempting, Windows has suffered from virus attacks much more than anyone else to date. I couldn’t find it straight away so this post is the result.

Before you add a comment, note I am NOT saying that the only explanation for Windows viruses is this technical one; obviously the huge attack surface of the giant user base attracts attackers. I AM saying, however, that leaving the door open for a decade hasn’t helped and is a major reason why the dominant form of malware on Windows is the virus and not the trojan.

Exploitation

All operating systems have bugs, and I suspect (although haven’t found any data tonight to confirm) that they occur at approximately the same frequency in all mature released operating systems. All operating systems that respect Shaw’s Law are also vulnerable to malware. Malware depends on identifying exploits – defects of some sort in system security that can be “exploited” to permit infestation by the malware.

Not all bugs turn into security exploits, though. In particular, in Unix-like operating systems like OS X, Linux and Solaris, it’s unusual for bugs to lead directly to security exploits; instead, most malware depends on user error or social engineering.  For an exploit to exist, there has to be a way to use knowledge of the bug to gain access to a resource that would otherwise be forbidden.  It certainly happens on *ix systems, but the operating system has checks in place to prevent the most common way of turning bugs into exploits.

Unauthorised Pokes

The most common way for this to happen (although there are many others) is for the operating system to fail to differentiate between data and program code. By treating code and data  as the same thing, a path is opened for malware to use a bug to push some data into a memory location (a “buffer over-run” or a “stack overflow” are examples of this) and then tell the computer to execute it. Hey presto – exploit. All an attacker has to do is push code for a virus (or a virus bootstrap) into memory and ask for it to be executed, and your computer is compromised.

Windows could have prevented this sort of thing from happening by exploiting ring protection offered by Intel x86 architecture from the 80186 chip onwards. A feature of Intel’s x86 architecture makes it possible to prohibit execution of data unless the program in question is privileged (“at ring 0”), usually by being part of the operating system. Application code at ring 3 can be forbidden from executing data.

Indeed, Windows did use ring 0/ring 3 differentiation for some jobs (skipping rings 1 and 2 for cross-platform technical reasons). But access to ring 0 – “able to execute anything you want” – was never prohibited. Doing so would have prevented legacy DOS code from running, so as I remember being told, Microsoft chose not to implement ring 0/ring 3 protection in Windows NT until it was completely sure that deprecating DOS legacy support would no longer be a marketing issue. That was in Windows 8…

Credit Where Due

So actually it’s somewhat appropriate to blame Windows versions prior to Windows 8 for being vulnerable to many viruses which exploited bugs in this way. The existence of the vulnerability was a conscious choice and a marketing decision; in OS/2, which had no legacy to accommodate, the ring 0 separation was enforced.

Yes, Windows also offers a larger attack “surface” because of its wide adoption, and yes, there are other exploit mechanisms. But this tolerated technical vulnerability is the root cause of a large number of exploits. So while it’s true that malware authors are directly to blame for malware, there’s also a culpability for Microsoft that can’t be ignored. Thank goodness Windows 8 has addressed this particular issue.

☆ A Tax Whose Time Has Come

Dubbed “the world’s most popular new tax”, this proposal has gathered an amazing breadth of support globally, including world political and business leaders. Indeed, France and Germany are both committed to implement it during 2012 (although we need to scrutinise their commitments carefully looking for loopholes). It sounds like one of the things that should be on the political agenda for any elections that might be happening this year, no?

A tiny tax of a fraction of a fraction of a percent on all speculative bank transactions that don’t involve members of the public (read: high-stakes gambling with other people’s money)? That will raise in excess of £100 billion each year? From people whose insensitivity and abuse of society seems to have no bounds? That sounds splendid. I signed up.

[youtube http://youtu.be/qYtNwmXKIvM]

Seems there’s a Canadian page too.

♫ Eric Whitacre’s Grammy

Back in December I mentioned that Eric Whitacre’s wonderful choral album “Light and Gold” [Amazon UK | Amazon US] had been nominated for a Grammy award. Well … he won!

If you’ve not heard his choral music, I suggest you take a look at my posting about his Virtual Choir project from last year.

Congratulations, Eric!

♫ Sarah Jarosz – ‘Run Away’

This performance by 20-year-old Sarah Jarosz is completely magical. She’s supported by Alison Krauss and Jerry Douglas but there’s no missing her star quality. What’s more, the song is her own composition.

Superb stuff again from Transatlantic Sessions, which has become my favourite music TV. This is from Series 5 – I’ve added the DVD to my wish list!

 

✈ Yosemite HD

I need to go back.