Les Troyens: Early reviews in
Boston Globe: Glimpses of Fire, Passion at Symphony Hall. As I mentioned last night, Dwayne Croft’s cold was in evidence, and Jeremy Eichler mentions it, and is negative about Marcello Giordano’s performance as well. But he gives thumbs up to Yvonne Naef and practically glows about the TFC, giving the longest review mention (a full [...]
Wow, that was something: Les Troyens
Opening night is past. Les Troyens, Part I is a magnificent beast, and it has already bloodied the cast—poor Dwayne Croft had a cold the likes of which I’ve never heard from someone singing a part like that. I think we all breathed a sigh of relief at the end of the duet. All the [...]
The intersection of Barack and security
Netcraft: Hacker redirects Barack Obama’s site to hillaryclinton.com. Okay, folks, here’s the thing: never trust any place where a user can enter text into your website and have it displayed back at you. Never trust any text that comes from a form field on your site. Because if you do, smart and devious people like [...]
Performing for the Pope
My friends and colleagues in the Suspicious Cheese Lords have been busy lately. This weekend they sang for Pope Benedict XVI (Yes, seriously.) at the Pope John Paul II Cultural Center. The piece was a composition by George Cervantes, a setting of the Peace Prayer of St. Francis of Assisi, making the occasion that much [...]
New mix: 2:42
My 2:42 mix is now posted at Art of the Mix. I decided to keep to the format of the original, and only included twelve songs.
I noticed, looking at Isis’s version, that some of her track lengths were different from mine—for instance, her version of “That Teenage Feeling” by Neko Case is 2:42, whereas mine [...]
2:42
Joshua Allen at The Morning News (via BoingBoing) writes about his deductive process of identifying the perfect pop song length, at two minutes and 42 seconds:
The scientists then dug up this song by a group that pretty much defines one-hit wonder: the La’s. The song is “There She Goes,” and is so flawless that it [...]
Edit the Oklahoma Sex Offenders Registry!
In what is shaping up to be a fine security trifecta (see yesterday’s post about an as-yet unpatched cross-site scripting vulnerability at CIA.gov), yesterday’s Daily WTF posting concerned a naked SQL Injection vulnerability on the Oklahoma Department of Corrections website. The vulnerability allowed anyone who cared to download lots of details from Oklahoma’s sex offender [...]
Cross-site scripting, illustrated
Wired ThreatLevel Blog: Look Ma, I’m on CIA.gov. Wired’s security blog reports a cross-site scripting vulnerability in the CIA’s web site and gives a convenient demo exploit. The exploit is benign enough, illustrating how JavaScript can be used to load an iframe on the CIA’s search results page containing arbitrary content. But the potential for [...]
Fun with Berlioz
We had an unusual rehearsal the other night. Instead of being in the chorus room in the bowels of Symphony Hall, we were on stage, and we had cameras on us. It was for the BSO’s podcast series, and the episode is now out: an interview with our fearless leader John Oliver, with shots of [...]
The danger of outsourcing…
…your bookmarks. Del.icio.us is offline and my whole morning routine is off. Okay, so instead of tagging these two links I’ll post them to my blog instead.
First, for those new product managers out there, as well as those that have been the copy machine once too often, check out the free ebook from Pragmatic Marketing, [...]
We love it when our friends become successful
In another of an intermittent series of posts about past acquaintances of mine who are now Doing Great Things, I happened to think the other day about Darius Van Arman. Darius and I went to the University of Virginia at around the same time, and primarily bumped into each other in the basement of Peabody [...]
Veracode: Cool Vendor
Quick pointers to a few awards Veracode has won recently:
Readers Choice Award, Information Security Magazine and SearchSecurity.com
Gartner Cool Vendor Award, Application Security and Authentication category
It’s great for Veracode to get this kind of recognition. I’m really proud to work at a company that can make a difference to how companies address application security.
—Oops. Almost forgot [...]
New lenses on the world
A few weeks ago my eyes turned bright red. They didn’t hurt but something was clearly wrong. I stopped wearing my contacts for a few days and got rid of the infection that had settled in. In the meantime, I relearned what I already knew: my glasses prescription was woefully out of date. Like, when [...]
Why does Microsoft push unpatched software via Windows Update?
It is, for a change, a very good question from CNet. If you know that security vulnerabilities exist in your software, and you’ve already patched those vulnerabilities, and you have a well-documented process for slipstreaming patches into existing installs, and you have an automatic update process…
… why in the hell would you have that automated [...]
Google opens the Cloud
Google App Engine appears to be Google’s answer to Amazon’s web services—a simple, highly scalable development and deployment platform for web apps that need to scale. It’s an interesting offering that takes a slightly different tack from Amazon, with the requirement to build an app as a fully integrated stack (not to mention, the application [...]

