Monday, February 28, 2005

I did a lot of preparation for Boomershoot 2005 this weekend.  I finished up reducing the volume of the 8“ target bodies so the neighbors don't have so much stuff falling off the walls.  I didn't do all the 8“ target bodies, just more than enough for this event.  I changed my method to do this.  The egg cartons were just too time consuming.  I switched to using the expanding sealing foam used in home repair.  It was much, much faster even if it was more expensive.  Here is a picture of some of the target bodies:

Also note the colors of the lids at the base of the stack of target bodies. I'm painting them different colors to help the shooter/spotter teams identify which target they are talking about.  There will be a white as well as the yellow, red, and “cardboard brown” shown in the picture above.  I have painted all the yellow and red lids I need for the 8“ targets just the white lids remain.  I'll do the six inch lids and the rest of the 8“ lids sometime in March.

These are the new 4” targets we will be using for the main event on Sunday.  These are cardboard boxes with internal dimensions of 4x4x2 inches.  These targets will hold slightly more of the “reactive recipe“ than the old 4“ diameter targets did.  They come from the factory white so there will only be the three colors of them.  The clinic will use up the last of the 4” diameter targets with the plastic lids we used last year.

In other news I just sent in the comments from a number of proof readers (family and friends) on a article that is being written for a shooting magazine on the Boomershoot by someone that has attended the last two events.  It looks really good but we don't know for certain if the magazine will actually publish it or not.  I doubt that it will appear before this years event so it probably won't help attendance this year but it might for next year.

Next weekend, assuming the weather is favorable, we will be doing a bunch of experiments with new mixes to increase the sensitivity and reliability of detonation.  Then on the 27th of March we have a “private party“ to put on.  This is going to be a busy month for Boomershoot stuff.

I got an inquiry from someone in Wisconsin this weekend.  He will be a first from that state if he is able to make it.

Joe Huffman  Monday, February 28, 2005 10:29:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [2]  |  Trackback

There was never a genius without a tincture of madness.

Aristotle

Joe Huffman  Monday, February 28, 2005 11:46:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Sunday, February 27, 2005

Later in life, when mortar rounds were dropping around him, Brother said he didn't mind a bit.  "Just like fishing back on the farm," he always said.

Ragnar Benson
From: Ragnar's Guide to Home and Recreational Use of High Explosives
Page 5, Copyright 1988

Joe Huffman  Sunday, February 27, 2005 7:47:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Saturday, February 26, 2005

As usual, lots of entries came in this last week of February but because I expanding the shooting line so much I still have 22 more shooting positions available.  I have 38 positions taken now.  I'm also officially in the black on paper.  That doesn't count the loan I made to Boomershoot for the new explosives magazine last year and all the chemicals I purchased last year or the new generator I bought a month ago.  But since I had purchased nearly enough materials for this years event last year my cash flow has been very good this year.  I have paid back $1650 (including interest) on the loan and paid for the generator with this years money so I'm feeling pretty good about the money situation.

Since we have all the bloggers showing up this year I had hoped to get wireless internet service onsite.  I talked to the provider yesterday and found out that there are political obstacles to that happening.  They have been working on providing service in that area for some time but aren't quite there yet.  There are permits they have to obtain and stuff like that.  The current schedule looks like “end of the summer“.  So, maybe Boomershoot 2006 will be the first to have live blogging.

There are just under nine weeks to Boomershoot 2005.  Next Saturday Ry and I will do a full day of experiments aimed at getting the mix more sensitive.  Then we will be ready until just a few days before the event when the work really begins.

Joe Huffman  Saturday, February 26, 2005 10:20:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [4]  |  Trackback

I drove 400 miles round trip to have dinner with a friend on Wednesday evening.  I always enjoy my time with him immensely.  Very, very, funny, and thought provoking.  I'll share his solution to our war with Muslim extremists in some other post but a newspaper article I saw this evening reminded me of something else he said.  He made a comment about Bush's State of the Union speech being insane if you read between the lines. "Oh?", I asked. "How is that?" The answer I got was, "He wants to export freedom to everyone. That's not much different than Caesar saying he wanted to bring civilization to everyone and the Conquistadors bringing Catholicism to everyone."  Interesting viewpoint.  I hadn't thought of it that way before.  My friend doesn't exactly think everyone is ready or capable of handling freedom as we know it.  I'm not so sure but he has a number of data points from dealing with other cultures that I don't have direct experience with.  Anyway the news indicates, insane or not, foreign governments are taking Bush seriously.

From the LA Times:

Egyptian President Hosni Mubarak called Saturday for a constitutional amendment to allow other candidates to run against him for the first time, a surprise move that could be a historic turning point in a country that has endured decades of repressive rule.

The announcement by Mubarak, a staunch U.S. ally, came days after Secretary of State Condoleezza Rice canceled a trip to the Middle East this week amid mounting tension over the autocratic Egyptian leader's crackdown on political opponents.

Joe Huffman  Saturday, February 26, 2005 9:54:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [1]  |  Trackback

Yeah, I know, so what else is new?

They report on the bill before the U.S. Senate to protect the gun industry from junk lawsuits.  They claim:

 In September, the families of victims in the sniper shootings in the Washington area won a $2.5 million settlement from the dealer who supplied the snipers' assault rifle.

Being generous to the reporter and editors, they are misleading when they say this.  The gun was stolen from the dealer by the two criminals.  Do they claim a bank that gets robbed provided money for the criminal to buy illegal drugs?

To give them credit where they deserve it, they did quote a spokesman for one of my Senators:

A spokesman for Senator Larry E. Craig, an Idaho Republican who sponsored the bill, said the lawsuits were inappropriate.

The suits "attempt to achieve gun control through judicial rather than the legislative means," said the spokesman, Sid Smith. "If a drunk driver hits someone," he said, "the car manufacturer is not held responsible so long as the car functioned correctly, so why should the gun industry be any different?"

Overall I give them a grade of 'C' on this article. In addition to the above blatant bias they only gave a few lines of coverage to the pro-freedom viewpoint and the vast majority to the anti-freedom viewpoint.

Joe Huffman  Saturday, February 26, 2005 11:30:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback

Man defends himself as much as he can against truth, as a child does against a medicine, as the man of the Platonic cave did against the light.  He does not willingly follow his path, but has to be dragged along backward.

Henri Frederic Amiel

Joe Huffman  Saturday, February 26, 2005 11:08:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Friday, February 25, 2005

Denise's comments here and the big story about CNN breaking Federal law to do an anti-freedom story on gun ownership reminds me of something I said a long time ago and remains true today:

Huffman's rule of firearms law: Firearms law are so complex, victimless, and nonsensical that almost every firearms owner breaks multiple laws without knowing it. A general rule to compute the earned prison time for crimes committed is to multiply the number of years of activity in the shooting sports by five.

Joe Huffman
(Who, if caught and convicted, would spend the rest of his life in prison)
12/16/97

Joe Huffman  Friday, February 25, 2005 12:10:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback

As I reported before Adam was one of the Precision Rifle Clinic instructors at the last Boomershoot.  Rivrdog reports on his memorial service.

MSM reports:

Seattle Times
Seattle Times
The News Tribune
The News Tribune
KVAL News
Seattle PI
Seattle PI
KOMO TV
The Register Guard
KOIN News
The Oregonian
Bend.com
The Olympian
The Olympian
YubaNet

You can donate money to directly to the Lancer Memorial Fund which helps the families of those fallen in battle.  See near the bottom of this press release for more details.

Joe Huffman  Friday, February 25, 2005 10:39:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback

Amazing.  The first time my blog is linked to by a really, really, high traffic blog and it's these people.

Someone has a tin foil hat on and quotes a news quote of mine rather than going directly to the source I gave.  <shrug> They are a few Fruit Loops short of a full bowl so what do you expect?

Joe Huffman  Friday, February 25, 2005 8:40:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [2]  |  Trackback

No, that wasn't a note.  That was an entire symphony.

Peter Zatloukal
When asked if that was a note of sarcasm in his voice.
3:00 PM, October 24, 2000

Joe Huffman  Friday, February 25, 2005 7:59:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [2]  |  Trackback
 Thursday, February 24, 2005
My ISP is having some problems.  It's been down for over 18 hours now.  I don't know when it will be up again.
Joe Huffman  Thursday, February 24, 2005 8:59:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [1]  |  Trackback

An ex-employee at the San Francisco International Airport claims the security people doing the passenger screening cheat to pass the tests by federal auditors.  Bruce Schneier writes about the necessity of having trusted people.  This is true.  What he doesn't point out is that in this case it's probably an unsolvable problem.  Security is no stronger than the weakest link.  When you have thousands of people you have to trust to ensure the “sterile area” of the air transportation system is secure the odds of having one or more untrustworthy people is asymtotically close to one.

The odds of getting weapons onboard a plane when the passenger makes no attempt to hide the weapon is about 20%.  When the auditors deliberately try to evade security they classify the test results.  My guess is the results approach a 100% failure rate.

It's time to consider alternatives.  Obtaining public acceptance of scientifically sound methods of security is a better position to be in than using publicly acceptable methods that can never succeed.

Joe Huffman  Thursday, February 24, 2005 12:25:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [1]  |  Trackback

IMO there are to many stupid people in the world to waste any time worrying or complaining about them.

Greg Hamilton
11/11/2001
Insights Training Email List

Joe Huffman  Thursday, February 24, 2005 11:20:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Wednesday, February 23, 2005

Kim du Toit has a picture of a poster from a previous war entitled “What did you do today ... for freedom?“  It turns out I have been thinking about that a lot the last few days.  I just woke up a short while ago so I'll write about yesterday instead of today.

What did I do for freedom yesterday?  I reviewed proposals for some Navy money and voted on which should be given funding and which should be dropped this time.  Then I worked on a portion of a solution to plug a security hole in our computers. 

But I can't tell you how many times I think about Adam and wonder if there was a countermeasure for Vehicle Borne Improvised Explosives Devices (VBIEDs) that I should have thought of.  Without more details on what exactly happened to Adam I don't know if any of my ideas could have made any difference.  But I keep thinking maybe there was something more I should have done with the ideas I did have or were suggested to me.  I presented them and sold them as best I could to management last fall but they didn't go anywhere that I know of.  They could have been passed on to people better able to implement than I and classified--I just don't know.  But could I have followed up more and pushed harder?  Could I have gotten something implemented and deployed in time to have prevented Adams death?  Probably not.  But what about the next VBIED?  Is there one that next week or next month or next year that will kill or injury Walter or my nephew or a few years from now after my niece graduates from West Point?  Is there something I could have done or should do to prevent it?  What if I had found someone to give my information on people searching for bomb building information sooner?  Technically, it's not my job.  My job is with computer security.  I'm working to keep our computers and computer networks safe from attack.  Worthwhile endeavors in our fight to preserve our freedoms, but I often feel it's not as pressing as solving the simple brute force attacks used by our current adversaries.

What to do?  Do my job as best I can, keep thinking, and keep feeding ideas to those who's job it is to solve the immediate problems.  It's time to get ready for work.  Today and every day is important.

Joe Huffman  Wednesday, February 23, 2005 7:19:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback

The problems of victory are more agreeable than the problems of defeat, but they are no less difficult.

Winston Churchill
Speech
House of Commons
11/11/42

Joe Huffman  Wednesday, February 23, 2005 6:40:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Tuesday, February 22, 2005

The following is only very slightly edited from a class I took yesterday.  I think it's good advice for everyone.

We have become vulnerable everywhere because today's terrorist confronts the United States indirectly.  This tactic exploits our vulnerabilities and negates our superior tactical and strategic advantage.  The terrorists are looking for headlines, high mortality, and high shock value.  The reality is that the risk is now on our home front.  We no longer can assume we are safe in the continental United States; as demonstrated by September 11, 2001 terrorist events.  The terrorists are bringing the fight to us.

You can help CI by being aware of activities that are precursors of a terrorist event and may provide a warning that saves lives and property.  The fundamental indicator is unusual and suspicious activities.  We must all remain alert to possibilities that are virtually limited only by one's imagination.  We cannot accept the risk of complacency.  Our defense: unpredictability, situational awareness, patience, and vigilance.  Awareness, the eyes and voice of each individual, is critical to the success of the war against terrorism. 

A partial list of things worthy of additional attention:

  • People near a facility using or carrying video cameras or observation equipment (for example night vision devices)
  • People parking, standing or loitering over several days with no apparent reasonable explanation
  • Suspicious vehicles, something that is not normal for the situation or area
  • Unusual questioning about the facility or personal information
  • Frequent telephone calls claiming to be wrong numbers
  • Abandoned packages, briefcases, or suitcases
  • Low-flying aircraft, possibly observing the area
  • Any activity considered suspicious or unusual to you from what you normally observe.
Joe Huffman  Tuesday, February 22, 2005 10:03:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [3]  |  Trackback

Reliability in a handgun is extremely important.  If you point it at someone and all it does is go CLICK when you pull the trigger you don't have much leeway in talking your way out of the situation.  I mean, what are you going to say?  "I wasn't serious when I pulled the trigger?"

Eric Engstrom

Joe Huffman  Tuesday, February 22, 2005 9:04:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Monday, February 21, 2005

Political power grows out of the barrel of a gun.

Mao Tse-Tung, also Mao Zedung
Problems of War and Strategy, speech
6 Nov. 1938

Joe Huffman  Monday, February 21, 2005 10:20:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Sunday, February 20, 2005

Whoever is careless with the truth in small matters cannot be trusted with important matters.

Albert Einstein

Joe Huffman  Sunday, February 20, 2005 3:42:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [1]  |  Trackback
 Saturday, February 19, 2005
Barb, Xenia, Sara, and I went for a hike on Badger Mountain today and we took a few pictures. The girls wimped out part way up.  Barb and I went to the top and came back down a different route.  There was supposed to be a geocache up there but we were unable to find it.
Joe Huffman  Saturday, February 19, 2005 9:19:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback

I just found out via Kim duToit that Adam Plumondore was killed in a car bomb explosion.  Adam and his co-worker Walter assisted Eugene Econ with the Precision Rifle Clinic last year. I had a few pictures that were taken by Ry and Michael of the Saturday night dinner during Boomershoot 2004 that I had never put up.  Some of those included pictures of Adam.  I put those up on my photo album a few minutes ago.  We all are saddened by this loss.

Update: See also this blog entry.
Update2: I found another picture and uploaded it here.

Joe Huffman  Saturday, February 19, 2005 11:14:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [3]  |  Trackback

In a most pleasant change from normal I didn't have to drive 150 miles home after work Thursday or Friday.  Barb, Xenia, and Xenia's friend Sara drove over Thursday night to spend the weekend with me.  This saved me six hours of driving while still getting to be with my family for the weekend. 

I made pancakes yesterday morning for the girls and myself.  We had lunch at the Chinese buffet.  I got discount tickets at work and last night we went to see Finding Neverland. We all cried.  It was a great movie.  So here I sit, in bed, with Barb asleep beside me.  Life is good.

Joe Huffman  Saturday, February 19, 2005 10:08:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback

Ry and Stephanie are doing their part in our efforts to make people more comfortable with the recreational use of explosives and firearms.  Ebay seems like as good a place as any to reach the general population.

Thank you!

Joe Huffman  Saturday, February 19, 2005 9:57:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [1]  |  Trackback

All our objectives are predicated on the belief that the interests of public safety demand a reduction in the availability and attractiveness of guns of all kinds.

  1. Minimum age of 18 for the ownership, use and possession of all guns.
  2. Ban on the sale, manufacture and import of imitation guns and their possession in a public place.
  3. Certification of all deactivated weapons.
  4. Inclusion of airguns in certification system.
  5. One certification system for all legal weapons i.e. rifles, shotguns, airguns.
  6. Multi-shot rifles and shotguns to be banned.
  7. Practical or Combat shooting or any other shooting practice which involves the simulation of real life situations and/or the use of human shaped targets to be banned.
    Abolition or radical reconstitution of the Firearms Consultative Committee.

We recognise the existence of a significant minority interest in shooting for sport, and our proposals are aimed at striking an appropriate balance between the sport-shooting interest and the overriding interest in public safety.

Gun Control Network
Our Objectives as of February 19, 2005

Joe Huffman  Saturday, February 19, 2005 9:42:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Friday, February 18, 2005

Since emotions are few and reasons are many (said the robot, Giskard), the behaviour of a crowd can be more easily predicted than the behaviour of one person can.

Isaac Asimov

Joe Huffman  Friday, February 18, 2005 10:32:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Thursday, February 17, 2005

I help design and implement solutions to improve security of various things against intelligent, determined adversaries.  I think I'm pretty good at it.  But I don't think I would have envisioned and prevented the dust bunny that took down a network supporing thousands for hours.

I was in a meeting this afternoon where we were figuring out how to handle all the different possible failure situations in a communication protocol.  As we progressed I was getting more and more concerned.  The designers were explaining how things would work and I would come up with all these different situations they hadn't considered.  Things like (not exactly, but close enough to get the point across) if your encryption keys are being updated every ten minutes what happens when your main unit goes down and you have to bring online the back up control center 100 miles away?  How does the backup know what the current keys are?  They hadn't thought of that.  Lots and lots of examples like that things they hadn't thought of but were valid concerns.  They were very good with finding solutions to the “hand grenades” I was throwing at them, but it bothered me that I was the only one coming up with the complications.  I may be better than the average person at thinking of all the exceptions to a general rule (my wife sometimes gets angry with me when I do this in “normal conversation”) but I'm far from perfect.  What about all the exceptions I hadn't thought of?  If two or more people from different perspectives are “lobbing hand grenades” at the proposed solution I would feel a lot better about the robustness of the solution.  I didn't say anything about it, I just stewed on it, “Who else can we get to take a look at this for vulnerabilities?  Should I hire an outside consultant to review our work?  We really need to make sure we have thought of nearly everything...”  I was right in the middle of those thoughts when one of the guys told a story of something happened at the lab a year or two ago.  I burst out laughing and continued even though they kept insisting it wasn't funny.  Of course it wasn't funny to them, they were there until the wee hours of the morning bringing the network back up with thousands of people needing for them to be successful.  All I could think about was that I knew that no matter how many people were brought in or who those people were, they wouldn't have envisioned a killer dust bunny.

If you have a critical resource like an engine on a airplane or a computer system that your entire company requires to function you go to extraordinary efforts to make sure it doesn't fail or that you can fail in a graceful manner. A power failure to a system with a UPS can give the computer a few minutes warning the power is going away when the batteries go dead. The computer then gets to shutdown gracefully. If one computer system and/or UPS system fails the second computer system and it's independent UPS can continue without skipping a beat until the primary can be fixed. But as reliability engineer Ted Yellman from Boeing (and Teltone where I met him) once told me many years ago, "The question usually isn't how reliable or how many redundant systems you have, it's how independent they are." In this case someone was routing some cables through the false ceiling over the computer room for the network at the lab. Some dust came down (technically not a dust bunny, but it makes a better story if it is a dust bunny) and the fast moving air in the computer room pulled the dust into the smoke detector. The smoke detector set off the fire control mechanism which "knew" that you don't want the electricity on when you turn on the sprinklers. And since designers of the fire control system knew the computers were on a UPS, not just the normal power mains, it shut down the UPS as well. That brought down the all the computers, main and backup, in a fraction of a second without the computers able to gracefully shutdown. Imagine planting your face in the middle of your plate of spaghetti during dinner instead of going to your room and getting in bed to fall asleep. And so it was with a room full of racks filled with computers--splat! It took them something like 170 man hours to bring the system back up. Some of the computers hadn't been turned off in a year or more and some hard drives and other hardware failed on startup. Other systems had corrupted files systems that were discovered after they booted. The startup procedure had been written before new equipment and software had been installed. It was a nightmare--they had to diagnosis and repair a complex system under time pressure with multiple simultaneous and unknown failures.

So I'm thinking what hope do we have to guard against determined, intelligent adversaries when something as undetermined and unintelligent as a dust bunny can take us out?  And I'm reminded of the joke about computer programmers versus carpenters.

If carpenters build houses like programmers wrote software the first woodpecker that came along would destroy civilization.

Joe Huffman  Thursday, February 17, 2005 6:17:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [1]  |  Trackback

Yesterday morning I sent an email to some people at a company I knew was about to release a product using SHA-1.  I got this back last night:

Hi Joe,
 
Just saved me an email I was about to send you a similar one...
We've been tracking this since yesterday and evaluating what it means to us.
I'll keep you posted of our evaluation and next step plan.
Thanks!
We have a meeting this afternoon on a project for which we were considering the use of SHA-1.  It was, and still is, a tough call in some ways.  SHA-256 generates 256 bits which in our application mean taking up a lot more of the available bandwidth.  I think we'll probably go with SHA-256 though, this is a “critical infrastructure” application after all.  The consequences of inadequate security are just too great compared to the consequences of inadequate bandwidth in some older installations.  The bandwidth can be increased to accommodate SHA-256 easier than we can undo the damage done by an attacker.
Joe Huffman  Thursday, February 17, 2005 11:57:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback

... religion is needed for restraining rude populations, which have to be ruled, whereas rational demonstration is for such, of a contemplative nature, as know how to rule themselves and others.

Guido (Giordano) Bruno
1548-burned at the stake, on this day in history, February 17 1600

Joe Huffman  Thursday, February 17, 2005 11:06:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Wednesday, February 16, 2005

SHA-1 has been broken. Not a reduced-round version. Not a simplified version. The real thing.

...

This attack builds on previous attacks on SHA-0 and SHA-1, and is a major, major cryptanalytic result. It pretty much puts a bullet into SHA-1 as a hash function for digital signatures (although it doesn't affect applications such as HMAC where collisions aren't important).

What he said.  Major, major cryptoanalytic result.  The U.S. government, via NIST, planned to phase out SHA-1 by 2010 anyway.  I imagine this will speed things up a bit:

http://csrc.nist.gov/hash_standards_comments.pdf

…due to advances in technology, NIST plans to phase out of SHA-1 in favor of the larger and stronger hash functions (SHA-224, SHA-256, SHA-384 and SHA-512) by 2010.

See also: http://csrc.nist.gov/CryptoToolkit/tkhash.html

MD5 was partially broken months ago.  These are interesting times we live in.

Joe Huffman  Wednesday, February 16, 2005 11:09:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [2]  |  Trackback

Wherever morality is based on theology, wherever right is made dependent on divine authority, the most immoral, unjust, infamous things can be justified and established.

Ludwigh Feuerbach

Joe Huffman  Wednesday, February 16, 2005 9:51:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Tuesday, February 15, 2005

To believe regulation of anything by government automatically extends free will is a delusion.

 Anthony Evans
 April 30, 1998
 SOC Libertarian Discussion at Microsoft.

Joe Huffman  Tuesday, February 15, 2005 12:47:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Monday, February 14, 2005

I get lots of spam which I delete, but today was the first time I deleted a real comment.  It was for this post.  Kind of ironic I suppose, but I'm including the comment here:

Sender: ANTI -GUNNERS WORST NIGHTMARE
Url:
IP Address: 207.43.195.202
re: Pathetic anti-gun turnout

YOU LIBERALS ARE RETARDED! DO U REALLY BELIEVE EVERYTHING U READ OR HEAR?! YEAH I HAVE A 2000 CHEVY TRUCK THAT CAN FIRE 1,000,000 ROUNDS A MINUTE AT A TARGET THAT IS GOING 800 MPH! FUCKHEADS GET A CLUE, GET A LIFE,AND PULL YOUR HEAD OUT OF YOUR FUCKING ASS!!!!!!!GUN CONTROL IT'S NOT ABOUT GUNS, IT'S ABOUT CONTROL, AND I THINK YOU SHEEPLE AKA SHEEP ARE TOTALLY IN THAT CUNT SARAH BRADY'S CONTROL!!!! YOU ARE FUCKING BRAINED WASHED BY A BUNCH OF U.S. HATEING SELF PROCLAIMED COMMIE BASTARDS, WHO WANT TO TAKE ALL, YES ALL OF YOUR CIVIL RIGHTS AWAY!!!!!!!!!!!!!!

While I suspect the anonymous poster and I share some political opinions our approach to the problem is quite different.  Foul language and name calling do not improve your standing with the public at large or the people that make law and policy.  If you feel it does put it on your own site or someone else's that agrees with your mythology.  It won't be hanging around on my blog for long.  The IP address above resolves to Overland Park, Kansas.  I've spent enough time in Kansas to know that there are some bright, articulate people there.  The person that left the comment above does not represent the people of Kansas that I know.

Joe Huffman  Monday, February 14, 2005 1:36:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [1]  |  Trackback

To rid ourselves of the entrenched, voracious type of capitalism that is in this country that perpetuates sexism and racism, I don't think that can come nonviolently.

Lynne Stewart
Civil rights lawyer convicted February 10, 2005 of smuggling messages of violence from one of
her jailed clients -- a radical Egyptian sheik -- to his terrorist disciples on the outside.

[Apparently she doesn't have a problem with the sexism of radical Islam.--Joe Huffman]

Joe Huffman  Monday, February 14, 2005 9:35:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Sunday, February 13, 2005

We must not always judge of the generality of the opinion by the noise of the acclamation.

Edmund Burke
(1729-97), Irish philosopher, statesman.
First Letter on a Regicide Peace (1796;
published in The Writings and Speeches of Edmund Burke, 
vol. 9, ed. by Paul Langford, 1991).

Joe Huffman  Sunday, February 13, 2005 11:04:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Saturday, February 12, 2005

As some of you know I am involved with biometrics at work.  And it's possible that some of you put two and two together when you saw my “Quote of the day” yesterday.  One of the proposals I submitted for possible funding yesterday was to further develop a means of eliminating the need for passwords in computer security.  It's possible that the computer would, in essence, “just know” you when you sat down and started using the computer.  And it could transmit your identity to other computers/websites that you interacted without the need for passwords.  Kind of cool in some ways, huh?  It's possible that it would make it much harder for someone to get access to your bank account.  It would reduce the ability of “bad guys“ being able to trick someone into giving up their password or mother's maiden name, etc and making off with their life's savings.  Websites could be automagically restricted such that your children couldn't access “adult“ sites even if they got a password from a friend or discovered or guessed yours.  “Transparent security“ could be very cool in some ways.

Among the downsides is that in a totalitarian society it would make it much tougher to deny your involvement in the freedom movement.  Another is that if the system were broken it would be harder to prove it wasn't you that accessed that kiddy porn site.

From a technological standpoint I'm really excited about the prospect of providing a solution to this problem.  The question is; Can it be made compatible with a free society and the individual fighting for freedom in a totalitarian society?

Joe Huffman  Saturday, February 12, 2005 10:05:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [1]  |  Trackback

As I reported on Wednesday Barb was sick over the weekend and I may have become infected.  I was sort of teetering on the edge of being sick all week.  I would feel good in the morning then poor that evening.  I had a pretty stressful day at work yesterday getting a bunch of proposals out just before a deadline.  Two of them were mine the other seven belonged to other people.  The boss man ask a co-worker (who had three) and I to “clean-up” everyone else's proposals and get them back to him by close of business.  My co-worker and I had things in fairly good shape for our stuff but some of the others were really bad.  I had the unpleasant task of telling one guy that he really needed to just start over.  He wasn't at all happy and decided to “just drop it”. Another person decided to do just two instead of three after I talked to them about the changes needed.  But they did a good job once I gave them a little guidance.  Anyway we got them all cleaned up and out the door by 17:10 which was acceptable.  Then I had a three hour drive home and I arrived sick.  I wasn't much better this morning and got worse throughout the day.  Lots of things I should do today and I basically just stayed in bed.  I just got up for a bit to try and do something productive for a little while.  I'll probably be all better by Monday when I have to go back to work.

A few minutes ago I updated the Boomershoot Bloggers section of the Boomershoot website.  Analog Kid at Random Nuclear Strike has been linking to Boomershoot for the slightest excuse for weeks now and finally made it over the 100 unique referrals to warrant a free entry.  Thank you! 

I received two more boomershoot entries this week.  The event is half full now.  Wish I was feeling well enough to get some more work done on the event.  There are more targets to modify and more experiments to do.

Joe Huffman  Saturday, February 12, 2005 9:37:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [1]  |  Trackback

I believe the American would prefer the policeman's truncheon to the anarchist's bomb.

Former Vice President Spiro T. Agnew

Joe Huffman  Saturday, February 12, 2005 4:47:00 PM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [2]  |  Trackback
 Friday, February 11, 2005

Passwords have reached the end of their useful life. Today, they only work for low-security applications. The secret question is just one manifestation of that fact.


Bruce Schneier
February 9, 2005
http://www.schneier.com/blog/archives/2005/02/the_curse_of_th.html
http://www.computerworld.com/securitytopics/security/story/0,,99628,00.html

Joe Huffman  Friday, February 11, 2005 7:47:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Thursday, February 10, 2005

My nephew is in Iraq and came across a rather odd bullet.  Any ideas on what it is made of?  And what kind of gun shoots it?  Wish he had answered more of my questions...

Jason:

...we dug the slugs out of the wall and the humvee tire and they were strange.  Not lead.  Really light and silver.  Steel maybe?  But really light.  Maybe a muj attempt at an armor piercing round made out of steel?  They had a tracer mix in them though.  So that makes me think it's manufactured.  And I didn't really get a good look at the weapon system, but it was full auto and I think an RPK.  Which should be a 7.62 round, but the slug was small.

Thoughs?

Joe:

Mild steel bullets were made by the Chinese.  Maybe some others as well.  Have you tried a magnet on it?  The Chinese bullets were 7.62 x 39 and the same weight as lead bullets, but longer to make up for the lower density.

Did they have a jacket?  "The slug was small".  Small in diameter or length? Did it compress, break into pieces, or not really deform when it hit rubber, wood, brick, or metal?  Compare in weight to your 7.62 or 5.56 rounds or a penny or ideally actually measure the weight in grains or grams.  Actual dimensions and shape would also help determine what they are intended for.  Pictures?

Jason:

The bullet was about the size of a .22.  It didn't defom much at all when it punched through the hub of the humvee and into the run flat tire.  It was also able to punch through about 18 inches of concret with little or no deforming either.  It was a tracer/ball mix of about 4 to 1.  And fired from what sounded like an AK or RPK. 

...

Okay, got to run.  If you want to ask other people about the round feel free, it's not classified or anything.

Joe Huffman  Thursday, February 10, 2005 7:56:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [1]  |  Trackback

Modern liberalism, for most liberals is not a consciously understood set of rational beliefs, but a bundle of unexamined prejudices and conjoined sentiments. The basic ideas and beliefs seem more satisfactory when they are not made fully explicit, when they merely lurk rather obscurely in the background, coloring the rhetoric and adding a certain emotive glow.

James Burnham
Suicide of the West

Joe Huffman  Thursday, February 10, 2005 7:37:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [1]  |  Trackback
 Wednesday, February 09, 2005

I was sort of down last week after enduring some abuse from Claire Wolfe and friends (this is almost for certain about me too).  After talking to numerous people (not even work associates, but gun owners) I'm convinced I'm right about the turning over certain parts of the boomershoot web logs to the counter intelligence guy upstairs.  I've been thinking about it for days and have an outline of a post on the topic in my mind.  Way, way too many other things going to start writing on it though.  Basically I am of the opinion their world view is set and not subject to new data and situations.  In their minds WW III either doesn't affect them or doesn't exist.

I went to the Lewiston Pistol Club IPSC match on Sunday, I sucked big time.  I think it was the worst I have done in years.  I zeroed one stage.  Did poorly on most of the others.  The classifier (El Presidente) was the only one I did reasonably well on.  I felt really 'spacey'.  Sort of dizzy most of the day.  Barb was coming down with something and missed work Monday.  I may have become infected too.  The dizziness continues and I have a bit of a sore throat as of late Tuesday.

I conducted some explosives tests after the match.  They were the continuation of this.  Another set of disappointments.  None could be detonated with the .22LR and only the 20 and 30 mL of fuel mix detonated with the .30 Carbine.  I read some stuff in my new pyrotechnics book that gives me another idea for a fuel to try that might result in a more sensitive mix.  It will have to wait for a week or two however.  I'm much too busy with other things right now.

Stephanie has been doing a bunch of work on the Boomershoot news releases and related stuff which is really nice to have taken care of.

Joe Huffman  Wednesday, February 09, 2005 12:44:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [10]  |  Trackback

There are worse things to be than a bigot. I'd rather keep company with a bigot who lets me go my own way than a well-intentioned man who presumes to know what is good for me.

Wendy Thrash

Joe Huffman  Wednesday, February 09, 2005 12:10:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [0]  |  Trackback
 Tuesday, February 08, 2005

Guns are the catalytic component in murder-suicide. Just as important, it must be understood that the emotional factors that drive suicide can be all too easily turned outward on friends, family, co-workers, and complete strangers because of the unmatched lethality of firearms. Every major murder-suicide study ever conducted has shown that a firearm—with its unmatched combination of lethality and availability—is the weapon most often used to murder the victims, with the offenders then turning the gun on themselves.

Josh Sugarmann
VPC executive director
August 5, 2002
http://www.vpc.org/press/0208nc.htm

[Apparently Mr. Sugarmann didn't include murder-suicide studies done in Japan in his review of papers.  Murder-suicide is far more common in Japan than in the U.S. and yet guns are almost never used.--Joe Huffman]

Joe Huffman  Tuesday, February 08, 2005 9:13:00 AM (Pacific Standard Time, UTC-08:00)  #    Disclaimer  |  Comments [2]  |  Trackback
 Monday, February 07, 2005

But I wonder when else, in the history of controversy, there has be