As is common these days, I was complaining about something on Twitter.

https://twitter.com/sdarlington/status/1523588282986033152

It’s easy to complain about security practices which, if I’m honest, is why I do it. But there is an important point, one that I included in a follow-up tweet:

https://twitter.com/sdarlington/status/1523602044791115776?s=61&t=69wO28ER8NUpssCyeNkqJw

The security team in many companies models itself on the DUP. Say no to everything. But – and this is the key – offer no alternative.

I’ve seen quite a few people saying that it isn’t possible to move an iOS app from paid to being free with an in-app purchase to unlock the full functionality. Fortunately they’re wrong.

“Traditionally” I would have had to remove version one from sale and offer a completely new app, which would have meant that existing users would have to pay again to get the same functionality. Or I’d have to support two apps. Or I’d keep the same app in the store and all existing users would get downgraded to the free version. None of these solutions seemed fair to existing users.

• 10 cheap and cheerful city breaks – Some ideas for next years November trip…
• Schneier on WikiLeaks – “Just as the music and movie industries are going to have to change their business models for the Internet era, governments are going to have to change their secrecy models. I don’t know what those new models will be, but they will be different.”
• Publishers take note: the iPad is altering the very concept of a ‘book’ – The future of publishing?
• eclipse of 2010 – Great images of the recent eclipse.

• This case must not obscure what WikiLeaks has told us – Another good piece about WikiLeaks. The news about Assange is starting to obscure the real news.
• Live with the WikiLeakable world or shut down the net. It’s your choice. – “What WikiLeaks is really exposing is the extent to which the western democratic system has been hollowed out. In the last decade its political elites have been shown to be incompetent; corrupt; or recklessly militaristic. And yet nowhere have they been called to account in any effective way. Instead they have obfuscated, lied or blustered their way through. And when, finally, the veil of secrecy is lifted, their reflex reaction is to kill the messenger.”

• The religious excuse for barbarity – “No, we don’t respect your desire to needlessly torment animals because some hallucinating desert nomads did it centuries ago. We don’t respect it at all. You can cry that we are “persecuting” you if we stop you committing acts of cruelty if you want.”
• Penn & Teller – Penn (of Penn and Teller fame) protests the new TSA rules.

• Catholics, it’s you this Pope has abused – Why even Catholics should Protest The Pope.
• There’s more to colour than meets the eye – Nice discussion of colours and what they “mean.”
• Compromising Twitter’s OAuth security system – " What it comes down to is that OAuth 1.0a is a horrible solution to a very difficult problem. It works acceptably well for server-to-server authentication, but there are far too many unresolved issues in the current specification for it to be used as-is on a widespread basis for desktop applications. It’s simply not mature enough yet." This is pretty much what I found implementing OAuth for Yahoo! in Yummy.

• Who Can Do Something About Those Blue Boxes? – “Used to be you could argue that Flash, whatever its merits, delivered content to the entire audience you cared about. That’s no longer true, and Adobe’s Flash penetration is shrinking with each iPhone OS device Apple sells.”
• Penguins, Peaks and Penny-Farthings: Nat Geo Covers 1959-2000 – “The National Geographic Society celebrates its 122nd anniversary on Jan. 27 … Though the early issues had rather drab academic looking covers, by 1959 they were consistently adorned with eye-cathing art and photos.”
• Verified by Visa bitchslapped by Cambridge researchers – “Secondary credit card security systems for online transactions such as Verified by Visa are all about shifting blame rather then curtailing fraud, Cambridge University security researchers argue.” Or put another way: those annoying screens you get when you buy something online are not for your benefit.

• Priori Acute – What if M.C. Escher had been a typographer?
• What “Nothing to Hide” is Hiding – Why “if you have nothing to hide, you have nothing to fear” is a bad argument in favour of increased surveillance.

• Separating Explosives from the Detonator – A sensible response to the pants bomber…
• Google ‘open’ memo betrays deep corporate delusion – “Aside from Apple, no tech outfit is more secretive about what goes on inside the company.”
• Q: “Once in a blue moon” is a rare event. But what does “blue moon” really mean? – These things are never as simple as you think they should be…

• Mind the staff – A photo of a member of staff at every London Underground station. Neat idea.
• The Pain of Being a Redhead – Green is not the only colour that it’s not easy being…
• Government rubbishes ID card hack report – “This story is rubbish.” A not very reassuring response to yesterdays story that it was possible to both clone and change the details on the new ID cards.