Archive for November, 2009

Anti-competitive behaviour ruling against Telkom possible


2009
11.30

Not sure whether this is supposed to come as a surprise?

From the Business Report on 30 Nov 09:

After five years of litigation-filled delays, Telkom is closer to being slapped with a penalty of up to R3.76 billion for anti-competitive behaviour following last Friday’s ruling by the Supreme Court of Appeal (SCA).

According to one analyst:

“In the five years that it has been able to keep this away from the Competition Tribunal, Telkom’s behaviour has caused material damage to the South African economy.”

The Competition Tribunal has been found to be in its rights to proceed against Telkom, leaving the door open to a judgement and fine against them. Whatever that may mean — think Tiger Brands and the fines that were ‘imposed’ there…

Unproductive Video Conferences


2009
11.29

Depending on how tight your handle is on the management of a video-conference, and what your expected outcomes are, there is a danger that the video-conference may become unproductive :) It’s all about the planned and structured way of planning a meeting…

The high-def version (so so worth it!!!) is 122MB as an MP4 file :)

Kindle International Version now with Screen Rotation


2009
11.29

As you probably know already, a quiet version upgrade of the Kindle 2 has resulted in new functionality for the aA key – Screen Rotation is now an option, through a full 360°!

And web browsing on Wikipedia and Amazon work (though a Wikipedia page on Bumble Bees draws 158kB – which is the size of a smallish book..?)

Amazing what switching on your wireless now and then allows you to find out! And, what’s more, there’s now native PDF support! New firmware here or by Whispernet delivery :) In addition, longer battery life with Wireless on (1 week) and off (2 weeks!)

Beware: The update can take ages… the Screen might say “Your kindle is starting up. This can take a minute.” The Kindle will be completely unresponsive — after a few hours, it’s back in action and happy. That’s the Kindle 2 International Wireless Edition. YMMV…

Google Analytics unzulässig nach deutschem Recht?


2009
11.25

Die Zeit berichtet, daß Datenschützer, auch mittels Bußgelder bis zu €50 000, von dem Gebrauch Google Analytics abraten möchten. “Google Inc. räumt sich ausdrücklich, in seinen beim Einsatz zu akzeptierenden Regularien das Recht ein, die über den einzelnen Nutzer mittels einer eindeutigen Kennung gewonnenen Daten mit anderen, bereits gespeicherten Daten” etwa aus Google Mail “zu verknüpfen und diese Informationen an Dritte weiterzugeben.” Der Hauptpunkt dieser Entscheidung hängt damit zusammen, daß der Benutzer sich nicht ausdrücklich einverstanden erklären muß, bevor die Privatdaten (etwa geografische Lage, Rechnereinstellungen) einfach an Dritte übertragen werden. Die Debatte läuft, mal sehen, was drauß wird!

In short, to re-iterate what I wrote above in a short point: As you do not explicitly opt in to the use of Google Analytics, German lawmakers are trying to dissuade/stop the use of GA on sites in Germany with the added incentive of fines up to €50 000 so as to protect individual’s personal privacy rights.

Knowledge Tree 3.7 Community Edition released


2009
11.25

PBGVVH25US66 They released the Knowledge Tree 3.7 RC Community Edition some time ago, which now runs on the full Zend-Server stack! Infrastructurally, this is the biggest changed; PHP-based setup wizards also feature, and sure – you can now run it on IIS6/IIS7, but that switch to the Zend stack with use of Optimiser features most highly for me on this development. But you knew that already! :)

Curious to see the feedback from Steve Briggs from iBurst about their KnowledgeTree (not necessarily their whole CRM solution) usage and implementation experience at iBurst, after the chat I had with him yesterday…

Cloud Computing 2009, The Forum, Bryanston


2009
11.24

With the usual eats (ok, the brownies are good – chewey, but not gooey) welcoming those who chose to attend, the presentations at the Cloud Computing Conference 2009 promise three potentially interesting presentations: a case study by iBurst, one by the University of the Witwatersrand, and a presentation about the potential security risks that cloud computing inherently presents. (more…)

nginx on Windows Vista / Windows 7 with php


2009
11.22

You can get the latest stable version of a Windows compile of nginx (0.7.64) here.

Setup is quite straight forward; you’ll need the php-cgi.exe downloaded (copy the libmysql*.dll to the Windows system directory – quickest but dirtiest solution) and tied in; I assume that you can download and run the mysql application yourself?

You may need to run the startup as a batch file (f: below is the drive installed on, php has been extracted into the php under nginx as you can see). PHP is set to listen on port 9000, which nginx interfaces requests to below. (more…)

Drupal 7 – Impressions


2009
11.15

So I’ve installed the current beta (for non-production environments) of Drupal 7 on an nginx/php/mysql setup to test speed, interface and ease of use. It was a double-whammy operation, on the one hand testing the server environment, and on the other, the new software. It’s not production-ready, so I don’t expect it to be ready by any stretch of the imagination. So these are just impressions. (more…)

Slashdot offline 13:12 SAST


2009
11.15

Perhaps it’s just routing — perhaps it’s the network — perhaps it’s Telkom’s upgrade for 2010…

But #slashdot.org is offline…

Sigh…

But you knew that already!

Hayibo.com is suffering from 500 Internal Server Errors…

Not a good day on the web…

Zombie postings with Captcha automation


2009
11.14

Just got another comment posting request relating to a version 5.0 release of automated forum/blog spamming software which is guaranteed to get your customers ‘closer to your products’ by improving product and site visibility. It can also do in-forum PMs ‘for a more personal touch’ — ie violate any terms and conditions of a user environment to spam the web for cheap cross-links (at $540 for the app — including automatic Captcha recognition). (more…)

Flash Exploit Protection


2009
11.13

The folks over at www.foregroundsecurity.com have discovered (another) Flash exploit that makes use of a same-origin policy interpretatino malformation in the application.

This vulnerability allows the same-origin policy of Adobe Flash to be exploited to allow nearly any site that allows user generated content to be attacked. No fix for this vulnerability currently exists.

Two ways of dealing with it (more…)

And we’re on 2.8.6


2009
11.13

Another quick upgrade to make it safe — 2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. Not really pertinent here but good to keep it closed :) The patching deals mainly with untrusted user issues, but “upgrading to 2.8.6 is recommended”.

But you knew that already :)

Virus Scanner Comparison


2009
11.08

They ran a comparison of virus removal software in Oct ’09. Full results are here. Question is, why not compare latest versions throughout? Their methodology (a “work in progress”) suggests that the vendos provide their software, which is updated “as per the manual”… (more…)

Cloud Computing – on Crack


2009
11.03

There are a range of ways that cloud computing can be used to leverage the power of a range of machine to achieve cheaply what you wouldn’t necessarily invest physically in. And to crack PGP or system passwords, you typically just need a lot of machines. So there are a few demonstrations here and here that show off the whole process, including spawning more instances than they typicially want you to :) It’s all based on using ElcomSoft’s Distributed Password Recovery.

Cool! :)

Mobile Payments 2009 at The Forum, The Campus, Bryanston


2009
11.03

And the light dims as the presentations are to start – two days of presentations on mobile payments and payment mechanisms. Featuring Paul Stemmet from MXit, Aletha Ling from Fundamo, Adrian Vermooten from ABSA who compares the pros and cons of the operator vs the banking-centric business model for mobile payments, let’s hope that the presentations and the stay up here in the city of thunderstorms and bad bad driving is worth it…


Update: So far, the presentations from Paul, and the POCiT presentation on the basic factors and segmentation considerations of mobile payers have been worth it. Key quote:

Is your solution a headache or a vitamin tablet?

People will borrow money to buy a headache tablet, but only when they have spare cash will they splash out on vitamins…


Update: So ABSA sends about 1bn messages a year, now with more than 500 000 users on USSD gained via the last 8 months. Seems as though they NotifyMe system has been a good mechanism of getting users used to the mobile phone as a ‘trusted banking device’. May be worth looking a megau.mobi and absabank.mobi and absahome.mobi where they process around 1000 logins per minute as capture interfaces with large amounts of information required.

It takes less than 2minutes to register for a Funeral Plan via the ABSA mobile platform

… seeing that the ambulance will take 10min or more to get there…?


Update: After the Atos Origin (IT partners for the Summer and Winter Olymptics) presentation on their TESSA platform (including Bluetooth stickers), the SA Reserve Bank gave insight.

Through their South African Multiple Option Select System, they clear on average R300bn/day, with Oct 2008 seeing R8.4tn for that month. On the definition of e-money (seeing that they were presenting on the South African National Payment System, specifically on their E-Money Position Paper ("out in two weeks"), airtime is not considered a "currency" of any type as it’s barter in a free-market economy. E-money should be considered as currency issued by an issuer on the receipt of funds, accepted by receipients other than the issuer and redeemable for cash or bank deposit.

Currently, in South Africa, accepting a deposit for later repayment is the business of the bank and hence a criminal offence by a non-bank. Say you buy a store card for R 500 and have the cashier pay out R 200 out of the card — that’s currently illegal as it is using the card as a redeemable, cashable store of value.

That is the business of the bank as their main use is related to receipt of funds not for on-payment (on-payment is fine if the recipient is due funds – that’s why you can pay for a fine or rates at a Pick ‘n’ Pay or Shoprite) to third parties. The paper to be issued is a position paper (opion and interpretation by the SARB), not a directive (which becomes a ‘restrictive’ law).

Currently, deposit receipt is only possible in conjunction with a bank. In future, a model similar to the one the Financial Serices Authority (FSA) in the UK is using in having a multi-tier approach, where an "e-currency" may be issued:

  • 1st tier: Bank
  • 2nd tier: less than £25mil
  • 3rd tier: less than £1mil, for a geographically restricted area, with business plan and 6-monthly report-back

Remissions Currently, PayPal could pay remissions (money paid back across borders, typicially by migrant workers…) if they applied for a banking licence; currently, though, they do not comply with the Foreign Exchange Control or the Banks Acts in South Africa. That’s why using Paypal cannot be ‘cashed in’ in South Africa. "Because they don’t want to" according to the SARB.

Malawi, Botswana, Angloa and Malawi are currently the most expensive remission destinations in the world, and the SARB is investgating methods of working on the remission costs. But that is in the future.

Isn’t it an issue if people buy less oranges and more airtime? — No, that’s the free market.


Update: ukash presented their offering, where PIN-encoded value stores are purchased in real currency and can then be transferred as far afield as Uruguay, Russia (as from today), Australia and South Africa (Pick n Pay -> wantitall, bidorbuy) – via mail, SMS, forum or other. Very popular in Pakistan and the Middle East, redeemable for things like Skype vouchers etc. Reminds me of the Security Summit 2009 presentation on the Underworld Economy… They were hit by £ 500 000 fraud in Sept 2008 due to monetarisation of their vouchers…