“World IPv6 Day has Facebook, Google & Yahoo Support”

It seems that the big players, at least, are finally bowing to the inevitable and starting to test IPv6.

I’ve got too many pieces that aren’t IPv6-ready to handle any kind of native IPv6. My computer hardware is all ready, and all of the operating systems I use support it (Ubuntu 11.04 “Natty Narwhal,” Mac OS X “Snow Leopard,” and Windows 7), but my venerable (read “really old”) router definitely doesn’t, and I don’t plan to replace it until I have to (the longer I wait, the better and cheaper the replacement will be). I’m fairly certain that neither my cable modem nor my ISP support it at present either.

But native isn’t the only way to do IPv6. In fact, I can get a successful response from running “ping -6 ipv6.google.com” on my Win7 virtual machine, and even go to the IPv6 address of it on that machine, though it redirects me to the IPv4 address. But I can’t do the same on my Ubuntu VM, for some reason (“ping6 ipv6.google.com” reports “Network is unreachable”) — I suspect Win7 comes with a built-in IPv6 tunnel, and Ubuntu doesn’t at present. The definitive test-ipv6 site says that both have perfect “IPv4 stability and readiness, when publishers offer both IPv4 and IPv6” (and “no problems are anticipated” on World IPv6 Day), but fail every test for IPv6.

I found a page describing how to set up IPv6 tunneling in Ubuntu, but it’s apparently outdated, there’s no tspc package in Natty’s repository. This one seems more up-to-date, but I ran out of interest before trying to set it up.

In any case, there’s no rush for end-users like me to get IPv6. It’s the ISPs that have to deal with it right now, or scramble later. I expect we’ll see more than a few of them scrambling before this is all over, and I reserve the right to laugh and point. 😉

A New Password Manager

I’ve mentioned a couple times before that I used KeePassX, the unofficial Linux port of the highly-thought-of KeePass Password Safe. A few months ago I decided that I’d gotten tired of using it… KeePassX had only basic password management features, it lacked most of the nice features that I heard KeePass had, like automatically and intelligently logging onto web sites when asked to. It was time to move to a more modern password management system.

(I see that KeePass has an official Linux port now, as of last month. If I’d known that was coming I would have waited for it, but I had no indication they’d ever make an official port of it.)

I’d heard good things about 1Password and LastPass, and other than KeePass they seemed to be the only really popular options, so I looked into them.

1Password looked very good, but there was one huge problem: no Linux version. I spend most of my time in Linux, so that’s right out, no further evaluation needed.

LastPass looked very good too. It was compatible with all three major operating systems, and in all my research I couldn’t find any criticism of the implementation security. The only thing that gave me pause was the discovery that it stores your passwords online.

I’m of the firm opinion that trusting the security on my machines is a far better bet than trusting anyone else’s, especially anyone on the ‘net. I know what I’m doing, I have plenty of experience doing it, and I’m paranoid about security (as you must be in order to remain secure). There’s no way to judge the strength of another company’s security until someone breaks it, or until it’s both popular and has been up and running with no intrusions for a good long while. And in the latter case, there’s always the suspicion that there may have been intrusions, but they weren’t discovered or were covered up.

With that in mind, I scoured the ‘net for any hint of problems with LastPass. There weren’t any, or at least there weren’t any I could find — and if something that popular and heavily scrutinized had a problem, there would be a lot more than just a hint of it out there.

Okay, they pass that part. But I know a good bit about encryption and implementation security too — how did their security stack up to my own critical evaluation?

As it turns out, very well. The technology they use is adequate, and I might even be moved to term it impressive. They’re obviously paranoid about security, a very good sign. They’re extremely open about essentially everything, which is an absolute requirement for a security company. And unlike recent discoveries about DropBox, they really can’t decrypt your data — their code is JavaScript, which is easily examinable by anyone using it, and I’m sure lots of amateur cryptographers have given it a critical examination (and likely more than a few professionals too) — if they tried anything underhanded, it would be less than a week before someone caught them at it and raised the alarm, which would completely ruin them.

In other words, it looked like they ran it exactly the way I would. I was impressed despite myself.

The only other objection I had was that, as a ‘net-based system, what happens if they go out of business or their servers become unavailable for whatever reason? Am I locked out of my data?

As it turns out, they’ve addressed that too. Every client system has its own encrypted local copy of your passwords, which are synchronized with the server on a regular basis. Even if they go out of business and disappear tomorrow, I’ll still have all my password data, and can move it to something else (or even keep using it as-is if I wish).

Congratulations, LastPass. I’m not a fan of cloud-based computing (an understatement, I flatly refuse to use it at all for anything else), and I’m very cynical about a company’s security and honesty, but you convinced me.

I moved my passwords over and thought no more about it, until one week ago when I got an e-mail, the first I’d ever received from them:

Dear LastPass User,

On May 3rd, we discovered suspicious network activity on the LastPass internal network. After investigating, we determined that it was possible that a limited amount of data was accessed. All LastPass accounts were quickly locked down, preventing access from unknown locations. We then announced our findings and course of action on our blog and spoke with the media.

As you know, LastPass does not have access to your master password or your confidential data. To further secure your account, LastPass now requires you to verify your identity when logging in. You will be prompted to validate your email if you try to log in from a new location. This prompt will continue to appear until you change your master password or indicate that you are comfortable with the strength of your master password.

Please visit http://lastpass.com/status for more information.

Thanks,
The LastPass Team

It was alarming news, but after thinking about it, I didn’t think it was much of a problem. Even if the presumed hackers managed to steal my data blob, LastPass didn’t have the passphrase to decrypt it, so there was no way they could have stolen that too. It’s a very strong passphrase, one that no dictionary attack could possibly defeat and even a brute-force attack with every possible combination of characters would have a hell of a time with, so I wasn’t worried about my data. And it turns out that only a handful of encrypted data blobs could have been taken, so it’s all but impossible that they could have gotten mine anyway.

But watching how this company handled the problem was enlightening. Honest, very open, and at the same time very security-conscious. Exactly the way I’d have done it myself, and exactly what users of the service needed.

LastPass, my hat is off to you. If you maintain that level of quality, I’m a customer for life.

Self-Discovery, Part 2

(In part 1, I talked about discovering a few weeks ago that there’s a name for the differences between myself and others, High-Functioning Autism, referred to as HFA from here on. This part focuses on my reactions to that discovery.)

I’m still trying to make sense of my life in light of this new information. I’ve always thought, for instance, that I’m bad at verbal communication because I’ve chosen to spend more time on things that are more important to me, like studying computers and mechanical devices… now I find that’s not true, that I had no choice in the matter. I’ve always prided myself on being honest and loyal, but now I find that those are traits of people with this condition… they’re not choices, they’re dictated by the HFA.

In fact, every major choice that I’ve made, and everything that makes me unique, seems to stem directly from HFA. If I have any control over my life at all, I can find no evidence of it. I thought I’d made my choices consciously, only to find that every single one of them was dictated by genetics. What is the point of having self-awareness if you still have absolutely no control over your fate?

My wife and I have been watching the show Criminal Minds on A&E in the last six months or so. It’s about a group of behavioral analysts who profile serial killers to help police catch them, and the science seems very close to reality. One thing that struck me about it from the beginning was how they can, from the evidence the person leaves behind, accurately predict what drives the person and what he’s likely to do next. The science is self-consistent, and entirely consistent with what I’ve observed of human nature over the years, which leads me to a depressing conclusion: that we’re all just acting out our genetics. In the words of humorist Scott Adams (of Dilbert fame), we’re nothing but moist robots, acting out our programming. Since there’s nothing I can do about that, I’ve simply filed it away for future reference, and will ignore it from here on.

(Another interesting note: the Criminal Minds character of Dr. Spencer Reid is written as having HFA autistic traits. No mention of The Big Bang Theory, please — I’ve been compared to characters on that show all too often.)

I was initially shocked to find that HFA is considered a “disability.” I’ve never had reason to think of myself as disabled, just different. It might count as a social disability, but I’ve decided to reject the label entirely, because HFA has given me few insurmountable problems and several large advantages over non-HFA people (known as NTs, or “neuro-typicals,” in groups of people with HFA or Asperger’s Syndrome):

  • I’m totally uninterested in most things, but the few things I’m interested in, I’m intensely, obsessively interested in. I’ve turned that trait to good advantage as a software developer and business owner.

  • I cannot concentrate on anything else when someone is talking, but by the same token, I can’t fall asleep while someone is talking either — a useful trait when I’m driving, because playing any talk radio or audiobook will ensure that I remain awake and alert. I can drive for an entire sixteen-hour day with a good audiobook and rarely notice the time.

  • I had to consciously learn to interpret body language and facial expressions, and figure out what drives people, but I believe I’ve gotten a much better understanding of the process than someone who knows it instinctively. It’s very difficult for most people to understand why they do the things they do; it’s easier for me, because I’ve been working on the problem for literally my entire life.

  • I’m socially awkward, but I’m very good with electronic and mechanical devices, to the point that just looking at them sometimes fixes them. And if I wanted to devote the time and attention to it, my study of the human mind and a few small-scale experiments have shown me how to overcome the awkwardness, all I need is practice. (I probably will at some point, I just haven’t been motivated to do so yet. There are so many other, more interesting things to devote my attention to.)

  • I don’t generally advertise it, but I have a genius-level IQ (measured at 152 when I was in my teens). There’s apparently a body of evidence suggesting that HFA might be directly responsible for this. (For the record, I’m one of the “music, math and memory thinkers” mentioned in Dr. Grandin’s article, not the “picture” type that she describes herself as.)

Other than the social disadvantages, the only thing I really notice (and which may not be related to HFA at all) is that I can’t seem to remember absolute sizes, only relative ones. When my wife asks me if she’s gained or lost weight, I can’t answer without having her stand directly in front of me and measuring her waist with my arms. She says all three of our cats are huge compared to most, but I can’t see it and we’ve never put one directly alongside another cat, which is the only way I’d be able to. Not a major problem, in my opinion.

The only big question left in my mind is, if there had been a way to “cure” it when I was younger, to completely eliminate the HFA and all its symptoms, would I have taken it if given the opportunity? That’s not as academic a question as it might seem; as more people with HFA and Asperger’s Syndrome get together in places like Silicon Valley, more children are being born with the debilitating versions of autism, so there’s a lot of research by very smart people on ways to combat it. And I don’t have an answer. I would very much like to have been accepted by my peers as a child, and avoid the concomitant depression that plagued me throughout my school years (and still does to a point even now), but giving up the intelligence and the skill with electronics and machines? Having overcome the worst that it could throw at me, I prefer the way I am now to any theoretical normality that eliminating it would have offered. But if I’d been given the choice early in life, there are certainly times I would have jumped at it.

I guess I’ll never know.

Self-Discovery, Part 1

When I was in my late twenties, I ran across a checklist for depression. I was shocked to discover that I had nearly every symptom listed on it, and had for more than twenty years. I got treatment for it and discovered that life was nowhere near as difficult, painful, and pointless as it had seemed until then.

A couple weeks ago, I made a similarly shocking discovery: the differences between me and most other people, which I had always considered personal failings, are actually symptoms of a well-known medical condition. (Well-known now, anyway… when I was growing up, it was practically unheard-of.)

The symptoms of it almost read like my own biography:

  • Problems with verbal communication. I’ve never been very good at talking. I can write very well, but trying to come up with just the right words in real-time conversation is very challenging. I often know that there’s a word that describes the concept I’m trying to get across, but I can’t think of what it is, leading to awkward pauses. Given time I’ll be able to come up with it, but it’s extremely frustrating, both to me and to listeners.

  • Extreme sensitivity to certain senses. I’ve always been way more sensitive to light, sound, and touch than most people seem to be. I prefer the volume on TVs and radios turned much lower than most people like, and I regularly irritate my wife by singing along to whatever she’s listening to on her headphones, which most people wouldn’t be able to pick out. I can hear when the taps are getting hot, by listening to the change in pitch of the water pipes as they expand from the heat; it shocked me to learn that most people can’t. I have to squint even on cloudy days. I can’t stand anything more than very mildly spicy, and I have to warm cold things like ice cream before I can let them touch my teeth (things like Sensodyne toothpaste have no effect on it). I prefer my beverages at room temperature or just a little warmer or colder; ice cubes in drinks are right out.

  • Seems to have a heightened or low response to pain. As a child, I used to think I must be a wimp because I reacted to pain (both physical and mental) so much more than other people, so I learned not to react to it. But now I find that it wasn’t just that they didn’t react to it as much, they actually didn’t feel it as much. It would have been very comforting to know that at the time.

  • Unusual distress when routines are changed. I absolutely hate it when I’m forced to alter my routine. Travel is unpleasant. Moving to a different house is just short of traumatic, even if it’s in the same city — a lovely trait for a military brat whose family moved every two years. When I work on a program, I continue working on it for years if there’s enough to keep me busy. Much of my programming is centered on ensuring that the code will do the same thing regardless of the input thrown at it… I’ve never understood how most programmers can work on something only long enough to make it work most of the time, and only in the specific case they need it for.

  • Unusual attachment to objects. My need for sameness extends to the objects around me too. When I buy things, I always look for the ones that will last the longest. I’ve had my current car for ten years, and it was used when I bought it. I get very distressed when something breaks, even when it’s only minor damage.

  • Shows a lack of empathy. Most children seem to intuitively understand why other people are doing things, and what they’re feeling. I had to learn to read body language, facial expressions, emotions, and intentions. I’ve gotten pretty good at it, better than some “normal” people, but it never came naturally to me. And those skills didn’t directly give me the ability to discern what people wanted, or why… that took many more years to figure out, and I still don’t always manage it very well.

  • May not respond to eye contact or smiles, or may avoid eye contact. As a child, I watched people’s faces, trying to figure out what they were thinking. Somewhere before school age I figured out that if someone smiled at me, I was supposed to smile back, so I started doing so. It was several more years before I figured out why people got nervous or annoyed when they looked at me, and stopped staring at their faces all the time.

  • “Acts up” with intense tantrums. Though not too often, because my mother was a firm believer in corporal punishment, and as I said above, I feel pain more than most people.

  • Does not make friends. Prefers to spend time alone, rather than with others. I wanted to have friends, and spend time with other children, but how can a kid make friends when he doesn’t understand what other children want? And the older a child gets, the less tolerant other children are of differences. Why spend time around people who are cruel to you, especially when you’re more sensitive than most? As an adult, I always thought I was just shy and introverted… apparently not. (Though there’s now a theory that introversion is actually a mild form of this, that’s what led me to discover it.)

  • Has very narrow interests, but obsessive interest in specific items or information. If there’s any single sentence that describes me, that’s it. I just have no interest in most things. The obvious down-side of this is that it’s very hard to force myself to do anything that I’m not interested in. Mildly unpleasant but routine things, like exercising or cleaning the cat boxes, are very difficult for me, much harder than they seem to be for most people.

  • Unwanted social isolation can lead to anxiety and depression. I’ve stated my history in that area. That generally manifests at about school age, because that’s when you start dealing with other children, and that’s certainly when I started feeling that way.

  • May find certain background sounds, which other people ignore or block out, unbearably loud or distracting. I can’t have anything with words playing while I try to concentrate, or have any conversations going on within earshot.

On a self-assessment test for this condition, most people who don’t have it score about twelve. Those who do average thirty-two. I scored thirty-five. (EDIT: See the comments for a link to the test, if you’re interested.)

Just a few days ago, my mother was talking to me about one of my nephews, and how he seemed so similar to me. I love the kid dearly, but I had to say that he really wasn’t much like me, and enumerated some of the above items. When I mentioned the name of the condition, she said that she’d heard of it a few weeks ago on TV, and the description immediately reminded her of me. Furthermore, my father was apparently very like that as well (I never knew him, he died when I was three). It is, in the words of one web page I found, “extremely heritable, but not inherited” — as I understand it, that means that it’s genetic, but the genes responsible aren’t usually expressed in sequential generations.

There are other symptoms that I’ve overcome: as mentioned above, I’ve learned to read body language and understand tone of voice, gestures, and facial expressions, and I learned early the need for tact. There are also a few that I don’t think I ever had: I do care about others, and show it; I don’t avoid eye contact under any circumstances (I tend to make eye contact too much, in fact); and I recognize metaphors and similes and don’t take them literally, most of the time. But those are the exceptions.

I’ve carefully avoided naming the condition, as I’m sure you’ve noticed. When people hear the name, they think of the more extreme forms of it, which are very obvious and debilitating. People who knew me well during my childhood (like my mother) might immediately see it, but few who met me as an adult would suspect that I have it — I told my mother-in-law, a retired teacher who has worked with children with this condition, and she was shocked; she said that she never would have thought it.

The condition is High-Functioning Autism.

I have more to say on the subject, but I’ll save it for a second article.

“$1,000 reward offered for stolen cancer research laptop”

This is ridiculous:

Medical researchers in Oklahoma are offering a no-questions-asked $1,000 reward for the return of a stolen laptop that contains years of research on prostate cancer. […]

Has no one heard of backups?! Any time you have data that you can’t afford to lose, you should be making regular backups of it! Preferably automatic ones. At least to a second computer or flash drive, preferably all that plus storing a copy off-site too. If you don’t, theft of the hardware is the least of your worries.