The grow operation was found deep in a storeroom at the mall. Authorities say the growers used the mall's electricity to power their equipment, adding the flimsy wiring could have caused a fire.Marijuana garden at mall (Miami Herald)
Pre-Photkina 2008: Canon has launched the SELPHY ES3 and SELPHY ES30 compact photo printers, that are minor upgrades to the SELPHY ES2 and SELPHY ES20 respectively. With a more compact design and larger LCD screens of 3.5” in ES3 and 3.0” in ES30, the printers offer Gold and Silver Easy Photo Packs for enhanced printing. The ES3 also comes with 1GB of built-in memory. [Comments (0)] [link]
Pre-Photokina 2008: Next up from Canon today is this trio of entry-level compact digital cameras. The PowerShot A1000 IS and PowerShot A2000 IS replace the PowerShot A580 and PowerShot A720 IS respectively. Smaller in size than previous A series cameras, the new models have a 10.0MP sensor, advanced noise reduction, faster buffering speeds, Face Detection and Image Stabilization. These are joined by a 'ladies-exclusive' PowerShot E1, available in white, blue and pink. This curvaceous 10MP digital compact camera has 17 shooting modes, 2.5” LCD, Face Detection, Motion Detection and Long Play mode for videos.. All cameras offer beginners the option of switching to an Easy Mode enabling them to have a simplified menu, both for shooting and viewing. [Comments (0)] [link]
Pre-Photokina 2008: Canon has launched the super-zoom PowerShot SX110 IS, which replaces the SX100 IS. With an increased resolution and a more compact build than its predecessor, the 9MP SX110 IS offers a 3.0” LCD, 10x optical zoom, Image Stabilization, Face Detection, Motion Detection and a new Easy Mode. [Comments (0)] [link]
Pre-Photokina 2008: Canon today has also introduced the EF-S 18-200mm f/3.5-5.6 IS Zoom lens. With an equivalent focal length of 29-320mm, the lens offers 11x zoom range. It also features a 16 element, 12 group construction including UD and aspherical lens elements and a 4-stop optical Image Stabilizer. [Comments (0)] [link]
Pre-Photokina2008: No surprises to hear that Canon has launched the much anticipated EOS 50D, an upgraded version of EOS 40D. On the surface it looks almost similar to its predecessor. However, there are quite a few significant improvements; fifteen megapixel CMOS sensor, faster DIGIC 4 processor, 3.0" VGA LCD monitor with Live View mode offering 3 AF modes, ISO sensitivity expandable to 12800 and an HDMI connection for high Quality Image viewing. It also includes a new Quick Control screen which shows the most commonly used settings and Creative Auto mode for automatic focus and exposure. We're expecting to be able to bring you a full in-hands preview later today. [Comments (0)] [link]
Read more of this story at Slashdot.
Read more of this story at Slashdot.
Ben Adida calls out Apple for the poor security of its MobileMe web applications and AppleInsider for its misguided defense of Apple's design. Most users know that a special "lock" icon in the corner of their browser is a signal that the contents of the current website is encrypted in transit, protecting it from third-party eavesdropping. Evidently, users of MobileMe have been alarmed that MobileMe applications don't take advantage of this feature, even when sensitive information is being transmitted. Appleinsider says this is no big deal because Apple uses "authenticated handling of JSON data exchanges" to ensure security, and as a result SSL is unnecessary. Moreover, "if Apple applied SSL encryption in the browser, it would only slow down every data exchange without really improving security, and instead only provide pundits with a false sense of security that distracts from real security threats."
As Adida points out, this is way off base. A malicious individual may discover a security hole in the unencrypted part of the site that Apple's engineers didn't think of. Encrypting the entire session, rather than just the parts that Apple thinks are security-sensitive, provides an important extra layer of protection. There's also a more fundamental problem with AppleInsider's argument: without SSL, the user has no real assurances that he's talking to Apple, rather than a third party executing a man-in-the-middle attack (perhaps using a poisoned DNS cache). SSL requires servers to present a certificate signed by a recognized certificate authority in order to prove that it's the website it claims to be. That makes it difficult for a third party to masquerade as a legitimate SSL-encrypted website.
The scheme works because the authentication algorithm is baked into the browser and can't be changed by the website being visited. In contrast, if the authentication is performed by JavaScript code that was supplied by the server you're trying to authenticate, the "authentication" process is completely useless. A man-in-the-middle attacker can simply substitute his own bogus authentication script for the real one, and no one will notice the difference. So even if you have complete faith in Apple's ability to write secure authentication algorithms, you can't trust a non-SSL website purporting to be from Apple because there's no way to be sure it's actually an Apple server.
Training ordinary users to follow good security practices is notoriously difficult. Widespread user understanding and acceptance of the "lock" icon in their browsers is arguably the most significant improvement in web security since the web was created. It's extremely counterproductive to undermine use confidence in SSL by telling users to put their faith in Apple's magical homebrew crypto algorithms instead.
Timothy Lee is an expert at the Techdirt Insight Community. To get insight and analysis from Timothy Lee and other experts on challenges your company faces, click here.
Read more of this story at Slashdot.
Read more of this story at Slashdot.
( Lisa Katayama is a guest blogger.)
The next 37signals Live will be tomorrow, August 26th at 11am central time.
The first two Live shows were general Q&As. This time we’re going to narrow down the focus to chapter 13 of Getting Real: Promotion. Generating buzz, getting press, promotion without a budget, launch, etc.
Come armed with questions and we’ll fire back answers. We’ll see you tomorrow at 37signals Live!