Monday, March 14, 2022

Named

Name the marauding beast
to mark it from its heedless kin.

Name the rock
as a place to meet
at the hunt's end.

Name each other to...
Oh, kinsmen, what have we done?

You, me, I
separate one from the other.

You are Hunter, she is Healer, he is Runner.

Known by my skills.
Known by my past.
Shackled and chained
by others,
by myself.

No longer free to be.
No longer free to flow
with Nature and Time.

Named.


Jim Hart
1997

Copyright Jim Hart, 1997, all rights reserved. May not be copied or published digitally or in print without express permission of the author.

Saturday, July 3, 2021

Kinds of People


“If we are to achieve a richer culture, rich in contrasting values, we must recognize the whole gamut of human potentialities, and so weave a less arbitrary social fabric, one in which each diverse human gift will find a fitting place.” – Margaret Mead

If everyone were aggressive, fights would be constant and nothing would get done.

Many of the aggressive power seekers in our modern world don't recognize this. To them, anyone who isn't aggressive is weak, lesser. Thus the tribes, our societies, are broken.

Is this an inevitable outcome of human aggressiveness? We seem to be one of the most violent creatures on the planet. Certainly the most violent among the mammals. Chimps are perhaps closest. They have inter-tribal battles. They're willing to commit genocide. Other predators are sometimes violent, but in a limited way. Males don't usually kill females. They kill males and young so their genes dominate. Or they kill for territory.

Most creatures compete for resources and reproduction. Expand territory, kill others, acquire mates. Thank you DNA, not! Weirdly, it isn't just DNA. Viruses are a collection of proteins, yet they're driven to reproduce. Why?

Margaret Meade is also to have expressed the sentiment that she had done her duty by bearing and raising children, passing on her DNA. After that, her life was her own. In other words our whole purpose for existing is reproduction.

Our societies are broken at least partly because the powerful don't recognize the value of non-aggressive members. If everyone tries to be a chief, who will take care of the tribe? Arguably, a tribe can thrive without a chief. There are other forms of governance. It can't survive without caregivers.

And yet societies can survive based entirely on violence and slavery, e.g. the Taliban. We don't call their people slaves, but in fact they are. Conform or die. Follow orders or die. Try to leave, you die. Slavery.

Russia: conform or die, follow orders or die. Slavery.

Syria: conform or die, follow orders or die, More slavery.




Thursday, March 4, 2021

Apache SSI, is it secure?

Various authors have challenged Apache SSI security. For example:

Protecting Web Servers from Security Holes in Server-Side Includes by Jared Karro, Jie Wang, Division of Computer Science, University of North Carolina at Greensboro, Greensboro, NC 27402, USA, Jared Karro@uncg.edu, wang@uncg.edu
All of the examples this paper sites are internal attacks. Controlling who can edit the Web site and what user Apache runs as completely negate the claimed problems.

Generally, when people talk about the security of a Web scripting language, they are referring to external attacks. No one will claim that a Web language is totally immune, but SSI has, historically, had the fewest issues of any such language.

Other claimed vulnerabilities:


  • Server-Side Includes (SSI) Injection
    • The authors provide no explanation of how the injection is to be accomplished. Setting the file system permissions so the Web server can't write to the Web pages and turning off Exec permission, which are standard procedures for securing an Apache site, should eliminate any possibility of this working.
    • Perhaps they are referring to using the query string as a variable in an SSI command. Programmers must be cautioned to never do this without checking the content of the query string.

Thoughts on Chromebook

In particular, Acer CB515.

We have retired our desktop computers, a Mac Mini and the mid-tower running Ubuntu, in favor of Acer Chromebooks. Yes, there is the concern about being logged into Google all the time. Offsetting that are the following pluses:


  •     Low price ($300, Oct. 2019)
  •     Simple   
  •     Excellent performance
    •         Dozens of browser tabs
    •         Half a dozen or more apps
    •         Slow loading Linux apps...but once loaded performance is excellent
  •         Run most Android apps
  •  Multiple desktops (with a dedicated key for creating and switching - F5 on external keyboard) and separate desktops for each display
    • With one external monitor and the laptop screen, that's 4 desktops each for a total of 8
  •         Multiple displays, mirrored or extended desktop, user choice
  •         Run Debian compatible Linux apps
  •         Special keys for search and multiple desktops
  •     Works with most printers, either directly or via Google Cloudprint
    • Better than Linux
  • Has Penguin Linux available. Most things seem to work.
    • Thunderbird
    • Firefox
    • Gimp
    • grsync
    • Missing:
      • apturl
  •     Integrates with Android smart phones
    • Unlock
    • Text messages
  •     Hardware:
    •         All solid state
    •         Display full 1080 15.6" screen with excellent color and viewing angle
    •         Good speakers and keyboard
    •         Lots of ports
    •             USB 3 (2)
    •             USB C (2)
    •             HDMI (external monitor)
    •             Headphones
    •         MicroSD slot
    •         Brushed aluminum case with strong screen hinge (very similar to Apple MacBook Pro)
      • Slim
      • Lightweight
      • Note: screen hinge failed in a little over a year
    •         Touchscreen
    • Large touchpad with 2-finger support
      • 2-finger drag
      • pinch and zoom
    •         Long battery life
    •         Kensington lock slot
Even though it has only 32GB of built in eMMC, the MicroSD slot expands that substantially. Huge external drives can be connected to the USB C.

Saturday, May 26, 2018

Hate In Religious Holiday Seasons

Note to self: check out the psychology of hate

Dec. 25, 2011
Bomb blasts targeting Christmas Day church services in two Nigerian cities have left at least 28 people dead, with three more attacks on other towns.
The Islamist group Boko Haram said it had attacked St Theresa's Church in Madalla, near the capital Abuja, killing 27 people.

Dec. 25, 2009
In the eastern Baghdad district of Sadr City, Iraqi officials say a roadside bomb blast killed six Shi'ite Muslim worshipers as they observed the solemn Ashura holiday.

Nov. 6, 2011
Three explosions occurred today, November 6, in a market in Baghdad, on the first day of Eid Al-Adha, a Muslim holiday commemorating Abraham’s willingness to sacrifice his son, reports Reuters. As stated by the Baghdad police and the staff of Al-Kindi Hospital, the blasts left at least eight dead and 26 wounded in the city’s central market of Shurja.

"Content Management" - Hard Problems

There are a number of "hard problems" in the context of Enterprise Content Management (ECM or just CM) and institutional information in general.
  1. Treating Web content as something separate.
    1. Makes extra work.
    2. Creates errors and conflicts by having information in more than one place.
  2. History and archiving
    1. Archiving fixed artifacts is hard enough, but how do we keep long term history of all the information in all the systems of an organization?
      1. Business systems
      2. Phone calls and text messages
      3. Email
      4. Contact management
      5. Office electronic documents
      6. Web CM
      7. Photos and videos
      8. Printed documents
      9. External systems
        1. Social media
        2. Chats
  3. Search
    1. Information and data is stored in multiple systems in multiple forms, from simple word processing documents to complex business systems. Currently nothing is capable of connecting them all in a useful way.
  4. Formats
    1. How can we possibly relate data, documents, pictures, audio and video in all the systems in an organization? It's being worked on with such things as facial recognition, media tagging, etc. But, we aren't there, yet.
Many enterprise software systems have a Web interface or are Web based entirely. That helps with problem #1, but, typically, not any of the others.

Popular "content management systems" have all of these problems. Wordpress, Drupal, et. al. are self-contained. Plugins often provide interfaces to other systems, but not to the point of searching all of them at once. Incorporating word processing and spreadsheet documents is usually clumsy or impossible. History and archiving are idiosyncratic, usually in the form of database exports with no standardized structure.

Does Global Warming Matter?


  1. Assertion: Predicted sea level rise will wipe out most coastal cities around the globe. Find the evidence.

Why use Apache Server Side Includes (SSI) for Web scripting

  • Simple
  • Fast
  • Flexible
  • Secure (if configured properly)
  • Low server load
Apache SSI (also called XSSI, extended server side includes) has several advantages over other server-side technologies:
Easy to learn
A small learning curve makes XSSI accessible to people with limited programming experience. XSSI is programmer-efficient because it requires very  little debugging.
Mature
Well-tested code and a stable API make future surprises unlikely.
Lightweight
XSSI can deliver popular features such as printer-friendly versions, article partitioning, and hierarchical menus without client-side scripting or a database back end. Maintenance becomes easier--and cheaper.
Efficient
Contrary to early-day warnings that XSSI would bog down a web server, XSSI is probably the most resource-efficient of all dynamic technologies. For example, according to the Apache Hello World Benchmarks (see XSSI Resources), mod_include, the base module implementing XSSI in Apache, can serve more Hello World pages per second than other dynamic content-generation technologies.
Secure
In particular, if you do not include the output of arbitrary web server executable programs. Also, content maintenance is at the file system level. Desktop html editors make that an advantage because Web-based CMS write  to the file system. That's the vector for CMS attacks. See below for a security discussion.
Ubiquitous
Present in virtually every Apache installations, because its implementation is a base module.
Complementary
Combined with web site templates, XSSI can decrease maintenance time and increase sitewide consistency. 
It is easy to integrate with client-side technologies, including cascaded style sheets, JavaScript, and other dynamic objects such as Flash and Java applets.
On the server side, it's integrated with Apache CGI (Apache's original way of programming Web pages). Thus it can be combined with any other programming language that supports stdin/stdout. CGI is language neutral. 
Desktop GUI html editors can include it by switching to html mode. Can even use an online editor like blogger.com and copy-paste the html.
Forward-looking
It can integrate with any text-based document, including XML and RSS.
Powerful
CGI has access to all programming languages, commands and scripts on the system including server side Javascript. It can get data, code, etc. from other servers. It can make database calls. There's practically no limit to what a programmer can do using CGI integrated with SSI.

Apache's eXtended Server Side Includes Onlamp.com, by Kostas Pentikousis 07/07/2005

 

But, is it secure? Various authors have challenged Apache SSI security. For example:

Protecting Web Servers from Security Holes in Server-Side Includes by Jared Karro, Jie Wang, Division of Computer Science, University of North Carolina at Greensboro, Greensboro, NC 27402, USA, Jared Karro@uncg.edu, wang@uncg.edu
All of the examples this paper sites are internal attacks. Controlling who can edit the Web site and what user Apache runs as completely negate the claimed problems.

Generally, when people talk about the security of a Web scripting language, they are referring to external attacks. No one will claim that a Web language is totally immune, but SSI has, historically, had the fewest issues of any Web programming language.

Other claimed vulnerabilities:
  • Server-Side Includes (SSI) Injection
    • The authors provide no explanation of how the injection is to be accomplished. Setting the file system permissions so the Web server can't write to it and turning off Exec permission, which are standard procedures for securing an Apache site, should eliminate any possibility of this working.
    • Perhaps they are referring to using the query string as a variable in an SSI command. Programmers must be cautioned to never do this without checking the content of the query string.
So, what's wrong with it?
  • Limited function in of itself compared to other Web languages, e.g. PHP. Using CGI, it can do anything the others can, but programmers may find breaking the work into two environments inconvenient.
  • Requires understanding of stdin/stdout to use CGI.
  • Programmers must pay attention to the data coming in to ensure it doesn't contain executable code. Best practice is to never execute any part of the parameters or form input. Some CGI libraries, e.g. in CPAN and MIT's cgic take care of this housekeeping.
  • The biggest problem is lack of exposure. Most Web programmers don't know it exists.

Tuesday, May 22, 2018

Turning Apache SSI usage on its head.

Most people who talk about templating with Apache Server-side Includes scripting (SSI) have HTML pages pull in pieces of common code such as styles, headers, footers and so on, then hard code the content in the page. This technique certainly reduces the amount of code in each page. And, one can make some changes in a single place. In programming parlance, it modularizes the code. This approach has drawbacks, though.
  • Depending on what is pulled in, changing the structure of all the pages in the site may mean editing many files.
  • The content can't be presented in different ways for different purposes. It can't be reused.
So, what if we turn this concept on its head? What if the content calls the “page”, or more broadly the “template” rather than each page having content. What would that look like?

SSI can set variables. The variables can contain anything that is a string. The variables can be substituted for text just about anywhere, including in the URI in an SSI command.

What does that mean? It means that content can be put in a file that calls a “page” to display itself. The steps are:
  1. Set one or more variables with content.
  2. Call a template file, either a fixed one, or, and here's the beauty of it, one whose path is in a variable that was set before the content file was called.
  3. The template file puts the content variables in the appropriate places.
Why go to this trouble? Because the template file that’s called can be different depending on the desired output. One time it can be a complete HTML page. Another time it can be an HTML fragment such as a paragraph or a list element. Another time it can be an RSS feed item. Another time it can be Javascript variables. The same content. Only the template changes.

What's more, one template can be used for many pages, potentially an entire site. So, if the site structure or style changes, only one file has to be modified.

In some sense, this turns SSI into an object-oriented system, bringing it into the modern era of system architecture. The variables are object attributes and the template file is the method. What's more, the method can be anything. Unlike most OO languages, it doesn't have to be hard coded. (Although it could be by using #if conditional processing to choose among a fixed set of methods.)

Regardless, the possible uses of this technique are limited only by one’s imagination. The output can be anything that is deliverable in response to a Web request, even JSON. And, it can be driven by parameters in the URL that called it. (Apache SSI has access to the query string.) RESTful services anyone?

Tuesday, November 21, 2017

Satellite TV for an RV with no contracts and no gimmicks

We got satellite TV simple and cheap, no contracts, no fine print, no "have to do this to get that", no lease/rent payments on equipment. Up front cost: $270 ($310 if you want DVR). That gets your own receiver and a free dish installed at your house.  Monthly cost starts at $35 ($45 with local channels).

What's the trick? Pretend that you have an RV with satellite already installed and that you want to move it into your house when you're home. (This is no longer necessary. The Flex Pack is now available to home customers directly from DISH.)

Step by step:
  1. Go to DishForMyRV, Shop Now.
  2. Buy a DISH receiver. At the time of this writing, you want the Wally (NOPE, Wally is obsolete already). It has many desirable features, such as:
    1. Bluetooth headset support
    2. Wifi so you can stream from Netflix, etc.
    3. DVR support
  3.  When the receiver arrives, go back to DishForMyRV to the TV Channels section. Decide on the channel package you want. Make note, especially, of the Flex Pack. You may be able to get just the channels you want without having to pay for the bigger packages. Also note that there are no credit checks or contracts and no fees to start or stop the service.
  4. Call the number that's on the receiver to activate the service and set up an account with the channel pack(s) you decided on. The person you call will set up an account for you at DISH as part of the process. Do not call DISH network directly at this point!
  5. For DVR (you must have done step 4 first so that you have a DISH account),
    1. Attach a self-powered USB hard drive to your Wally receiver. Apparently DISH receivers don't supply power on their USB ports, so a flash drive won't work unless you put it into a self-powered USB card reader.
    2. Call DISH at 800-333-3474 to activate DVR on the receiver. They'll charge your account a one-time fee of $40.
  6. Now, call DISH. Tell them you have satellite TV in your RV already, but you want to use it in your house when you're not on the road. They'll send out an installer who, for a flat $147 fee, will install a free satellite dish and wire it into your receiver wherever you want to put it.
That's it. $120 for the receiver, $147 for the dish installation and $40 for DVR. Total cost $307. Start and stop the service any time you want. Change channel packs any time you want. No monthly equipment lease fees. No commitments. Satellite TV the way it should be: clean, simple and flexible. We pay only $45 a month for the "starter" and local channels.

As far as I know, DirecTV doesn't offer this kind of service.

DISH does package channels in some weird ways, though. For example, National Geographic Channel is only available in the Flex pack, not any of the higher channel count packs. Nat Geo Wild, which we would like to have, is only available in the 200 and 250 packages.

I hope many readers use this information to break out of the fine print prisons of conventional multi-year TV contracts.

Thursday, November 17, 2016

Herding Cats

Thoughts on managing independent, smart people.

Q: How do you herd cats?
A: With a mouse.

Q: How do you confuse a cat?
A: With more than one mouse.


Sunday, March 13, 2016

Large mouth bass in Maine

The original version of this essay was over the top. I apologize to those who read it. Hopefully this revised version is a little more accurate and well reasoned. jah 4/25/2016

Bass fisherman had no right to illegally introduce large mouth bass into Maine waters. In some places, these voracious fish have caused a collapse of other fisheries. If it were up to me, the Maine Department of Inland Fisheries and Wildlife (DIFW) would be doing research to find a way to destroy them. They're an invasive species and should be treated as such. At the very least, the law should require that the fish be killed after being caught.

On the other hand, one avid bash fisherman pointed out to me that in some places the water quality has deteriorated to the point that salmon and trout won't survive and reproduce, so large mouth bass aren't responsible for the collapse.

I would have no problem if the DIFW had done research and decided, for the right reasons, to introduce large mouth bass legally into former salmonid waters. But, private citizens introducing an invasive species of any kind anywhere is illegal and wrong.

Now public officials are embracing out of state bass fishermen. (Note recent efforts in Waterville that made the paper.) Who doesn't love a rich guy who throws his money around? Well, I'd rather they take their fast boats, money, publicity and attitude and go back where they came from. I only wish they could take their fish with them.

Thursday, March 3, 2016

Report on my diy silent computer system 2 years on

This system has proved to be very reliable and exceeded my expectations for performance.

(Nov. 2017 update:  The USB board in the front burned out for the second time and the company no longer makes the part. Bummer. Fortunately the Mobo wasn't damaged and the case has a separate USB3 port on the front.)

System specifications

Case: NoFan CS-60 mATX Mobo: Gigabyte GA-B75M-D3H CPU: Intel Pentium G2120 Graphics: SAPPHIRE Ultimate Radeon HD 6670 RAM: Crucial Technology 8gb (2x4) Pc3-12800 1600mhz Ddr3 Ballistix Cl9 Drives: 120 gb OCZ Vertex, 128GB Samsung SM841, Super Writemaster SATA DVD/RW PSU: SeaSonic SS-400FL2 CPU Cooler: stock Intel with Scythe Slipstream 120 Other cards: Syba ieee1394a-b PCI-X

Performance

iPlane9 and Flightgear flight simulators: smooth and responsive at max frame rates

Will run 2 Windows VMs in VirtualBox both doing updates, Firefox with a dozen or more tabs, Chromium with multiple tabs, Libreoffice with multiple documents open, and Thunderbird: switching between applications, mouse movement and typing are instantaneous; opening additional applications, e.g. gthumb to import pictures, is as fast as if nothing else were running. In other words, it'll do more things at once than I can keep track of.

Boots Ubuntu 14.04: 6 seconds, timed
Load Firefox: 2 seconds
Load Gimp: 2 seconds
Load Libreoffice essentially instantaneously...less than a second
Extract a 640MB tar/gzip archive: <2 seconds

Some things it doesn't do so well:

Encode a 4GB mp4 to 1080p 60fps (same as the recording) using OpenShot Video Editor: 23 minutes
(I have no idea whether this software uses the GPU. It uses ffmpeg for encoding.)

Temperature data

Ambient temp. 20 deg. C
Stress test the CPU at 100% - max CPU core temp 56 deg. C
Flightgear for 1 hour - max GPU temp 68 deg. C, max CPU temp 57 deg. C
(Note: The CPU is above the graphics card so it will get hotter when the GPU gets hotter)

These temperatures were much higher with two different passive CPU coolers. The case is narrow so only short coolers will fit. Running a CPU stress test, the CPU cores were over 80 and still climbing. Under normal use, they were in the 60s, but running a flight simulator pushed them, again, to a level I wasn't comfortable with. So I gave up on totally fanless and installed the Scythe 120. The results speak for themselves.


Issues

1) The first OCZ SSD died within the 2-year warranty window and was replaced.
2) The firewire card has never worked...appears to be a hardware problem. I didn't care until recently and have ordered a new card.
3) When a USB2 device is plugged into the USB3 port in the back, it often locks up the USB bus. You have to power the machine down by holding the start button for 5 seconds, then start it up again. Very annoying so I don't use the port.
4) I started out with 4GB of RAM. At times it wasn't enough, especially when running VMs. Adding another 4GB eliminated the problem. As noted above, I can't run and keep track of enough tasks to overload the machine.

Summary

Many people have used the G2120 in their builds because the combination of performance, price and low power is hard to beat. SPCR has reviewed an actively cooled card with the 6670 GPU, but this particular card is passively cooled. That has proved to be sufficient in the Nofan case with no high-temp cards below it. Combining these two processing units with SATA III and an SSD yields a fast, responsive system for day-to-day tasks. To my ears it's totally silent, but I'm 65 years old and my hearing isn't what it used to be. For those who want hard numbers, SPCR has tested the version of this fan without PWM: http://www.silentpcreview.com/article83 ... .html#SS-M

Monday, February 15, 2016

Guns, Kids and Power

So much of the public rhetoric, both for and against firearms, confuses statistical correlation with cause and effect. For example, states that have both more firearms and more firearm deaths may have other correlative factors...perhaps more alcohol consumption or more children per household or more poverty or less education. Or something else, entirely. No one of those factors can be singled out as the cause.

Let's face it, if an area has more cars, there are more car accidents. Do we take cars away from people? No, we require more driver training and put more restrictions on use by minors.

Roughly 100 children are killed in bicycle accidents every year. Does anyone call for taking bikes away from kids?

People who don't grow up around firearms often view them as an unnecessary evil. For those who are used to them, they're just another tool; one to be handled with respect just like any tool or machine that can injure or kill.

What are the most dangerous things in our households? Electricity. Fire. Cars. 411 people died from electrocutions in the US in 2001.1 Seven people died each day in U.S. home fires.2 According to the CDC3, motor vehicles were the leading cause of death of children and young adults from ages 5 - 24 in 2013. That same year, accidental death by firearms was 10th in the 5-9 age group, 9th in the 10-14 group and didn't make the top 10 for teens. Homicide by firearm was near the top of the list in every age group, but that's surely a function of gang violence, which is a whole different problem.

I really wish we would focus our energies on violence in our culture and on the socio-economic disparity that drives it. Then we might get somewhere. People who are productive and have non-violent control over their lives don't, generally, commit crimes or kill others. Feelings of helplessness and hopelessness that become despair and rage...those are what we must deal with. Disparity in power is at the core of all of the violence in the world, not just the U.S.

Does there seem to be a theme here?


1. Seven people die each day in reported U.S. home fires
2. Deaths from Electrocution 
3. Ten Leading Causes of Death and Injury

Monday, February 8, 2016

Violence

Violence begets violence. Revenge begets revenge. Hate begets hate. Always have, always will.

Until the admonition "Love thy neighbor as thyself." becomes the global norm, humanity will continue to be plagued by violence in all its ugly forms.

We know this already. Story after story in books and movies relate it. Love conquering evil/hate. Is there any more common theme? Well, yes, I guess there is. "Good" beating "Bad" through the use of violence. "American Western" stories and movies. They are a lie. When, in real life, have we seen the Bad stop after the Good guys "win". Stories have an end. Life doesn't.

Love thy neighbor as thyself. No more "us and them", just us. It is the only answer.

It isn't just about war and crime, though. Even indifference is a form of violence. How can we have billionaires and people living on the street? Us and them.
Refugees from wars and genocide. Us and them.
Economic and racial prejudice that creates slums and gangs. Us and them.

As my blog title implies, disequilibrium of power is at the heart of most of society's ills. (Overpopulation is at the heart of all of humanity's ills, but that's another topic.)

Nothing creates violence faster than making someone helpless. You want to get at the core of why mass murderers act out? Look at helplessness and hopelessness. Why do people become radicalized? Because they feel helpless in the face of powers that are antithetical to their values.

Power. The thirst for it. The lack of it. The disparity of it. All the things that provide it: land, resources, money, beauty. Power is at the core.

The struggle between social bonds (love) and competition for the resources needed to survive have, undoubtedly, been with us since the earliest days of humanity. Nay, since our primate ancestors became social creatures and overpopulated their territory. Somehow being in small groups and competing for food must have been more successful than working as one large group.

So, we come by it rightly. But, we are, supposedly, intelligent beings. We should be able to see the damage caused by our thirst for power, right? We don't. In aggregate, we haven't evolved, emotionally, from our ancestors. As we overpopulate Earth and individually struggle to survive, in toto we're the most destructive creatures to ever inhabit the planet. And, we create enormous suffering in the process.

Our most beloved teachers, Buddha, Muhammad, Christ, Gandhi (and others), taught about the dark side of power and greed. They put forward the solution in various forms of the Golden Rule.

"The Golden Rule or ethic of reciprocity is a moral maxim or principle of altruism found in nearly every human culture and religion, suggesting it is related to fundamental human nature.[1][2]" (Wikipedia, https://en.wikipedia.org/wiki/Golden_Rule)

Muhammad and Islam:

From the hadith, the collected oral and written accounts of Muhammad and his teachings during his lifetime:
A Bedouin came to the prophet, grabbed the stirrup of his camel and said: O the messenger of God! Teach me something to go to heaven with it. Prophet said: "As you would have people do to you, do to them; and what you dislike to be done to you, don't do to them. Now let the stirrup go! [This maxim is enough for you; go and act in accordance with it!]"
— Kitab al-Kafi, vol. 2, p. 146
Ali ibn Abi Talib (4th Caliph in Sunni Islam, and first Imam in Shia Islam) says:
"O' my child, make yourself the measure (for dealings) between you and others. Thus, you should desire for others what you desire for yourself and hate for others what you hate for yourself. Do not oppress as you do not like to be oppressed. Do good to others as you would like good to be done to you. Regard bad for yourself whatever you regard bad for others. Accept that (treatment) from others which you would like others to accept from you... Do not say to others what you do not like to be said to you."
— Nahjul Balaghah, Letter 31 [35]

Judaism:

You shall not take vengeance or bear a grudge against your kinsfolk. Love your neighbor as yourself: I am the LORD.

Gandhi:

“An eye for an eye will only make the whole world blind.”
Mahatma Gandhi

"I object to violence because when it appears to do good, the good is only temporary; the evil it does is permanent."

"Power is of two kinds. One is obtained by the fear of punishment and the other by acts of love. Power based on love is a thousand times more effective and permanent then the one derived from fear of punishment."

"What difference does it make to the dead, the orphans, and the homeless, whether the mad destruction is wrought under the name of totalitarianism or the holy name of liberty or democracy?"

"There is a sufficiency in the world for man's need but not for man's greed."

 

 Buddhism:

560 BC, From the Udanavarga 5:18- Hurt not others with that which pains yourself.

If you want others to be happy, practice compassion.
If you want to be happy, practice compassion
The Dalai Lama

Christianity:

"Do to others what you want them to do to you. This is the meaning of the law of Moses and the teaching of the prophets"[29] (Matthew 7:12 NCV, see also Luke 6:31)

"A new commandment I give unto you, That ye love one another; As I have loved you, that ye also love one another.  By this shall all men know that ye are my disciples, if ye have love one to another." John 13:34

Love, compassion, sharing...these are the only antidotes for the greed and violence that are destroying us.




AI: Threat to the Human Race? (work in progress)

Sam Altman (@sama) writes, regarding Superhuman Machine Intelligence (SMI): "The first serious dangers from SMI are likely to involve humans and SMI working together."

With that, I agree. The human(s) provide the motive and purpose in such a partnership. The problem comes when we start to posit "emergent behavior".

It's true that we don't understand how our brains produce human behavior, but we can make some observations about that behavior.

  • Action comes from motivation.
  • Motivation comes from desire.
  • Desire is an emotion or basic survival drive.
    • Hunger
    • Thirst
    • Reproduction
    • Fear
    • Anger
    • Greed
    • Joy
    • Pleasure
The drives that cause us to act are not high order, cerebral cortex functions. They are emotions. They come from the lower, "animal" part of our brains.

It isn't at all clear that hardware/software that thinks, no matter how powerful, will develop feelings, desires, motivation, purpose. Until it does, it has no reason to act independently. The danger, as Altman writes, comes from the human-SMI partnership, where the human, for good or ill, provides the motivation to act. Especially dangerous are the emotionally damaged, misanthropic, but brilliant, people who are working on SMI, the ones who think (and have stated) that machines are the next stage in evolution and should replace humans. If one or more of them succeeds in creating an SMI and sets fixed goals into it that are antithetical to human life, we will be in deep trouble. Those who want power won't purposely destroy all of humanity. They would have no one to have power over. It's the misanthropic, "mad scientist" who scares me. One of them was interviewed as part of a documentary on AI. I wish I could remember his name.

Now, if someone were to set out to replicate the animal part of the brain, that would be a new ballgame. So far, efforts seem to be focused only on thinking machines, not feeling ones.
  1. Builders of AI who've been quoted and interviewed in magazines and on television have no concept of psychology. Computers with more power than the human brain won't spontaneously become self-directed, even if they become self-aware, which is debatable.
    1. Action comes from motivation
    2. Motivation comes from drives and emotions; you have to want something.
    3. Instinctive drives, programmed in, will be the biggest danger:
      1. Self-preservation
      2. Reproduction
  2. Inorganic machines put more demands on the Earth than organic beings. Individually and in natural form, everything about a human animal can be readily reused by nature and makes small demands compared to a synthetic equivalent.
  3. Asimov's robotic laws. 
 Are the AI/android builders naive, sociopaths or misanthropes. If they think the Earth will be better off, they're mistaken.

3 Salmon

Dad and I have spent many hours trolling for landlocked salmon.

For those of you who don't fish, landlocked salmon are freshwater cousins to Atlantic salmon. Trolling is a lively, entertaining form of fishing in which one putters along in a boat at what's supposed to be the speed that a small fish swims, towing a lure or fly that's supposed to look like one. The idea, of course, is to fool a salmon into thinking it's the real thing so it'll bite it and get caught on a hook. Now, salmon can be hard to fool, at least Dad and I found it so. We spent days idling along, periodically changing the lure or fly, and waiting for the rod to bend, signaling that we'd hooked a salmon or a rock. The latter happened more often.

Now by the time the ice goes out around here in the Spring, the salmon are pretty hungry and tend to be a little less cautious about what they try to eat. At about the same time, fresh water smelt swim down brooks into the lake, what's called a smelt run. Salmon love them. If you time it right, the combination can make for some lively fishing.

So, one spring Dad made up his mind we were going to hit the smelt run on Alford Lake. He knew, from talking to other members of the Fish and Game Assocation, that the lake had salmon. Somehow he also found out that the smelt were running. So, we set out in our open aluminum boat on a lovely April day, with mist and drizzle, the temperature in the upper 30s (Fahrenheit), and a raw northerly wind. The lake was black (a color we only see at ice-out) under a dark overcast with patches of skim ice that we had to maneuver around. We were dressed for it in coats, rain gear, gloves and caps with earflaps, but we still had to handle wet, near freezing line, lures and fish with bare hands. If you're starting to shiver, you have the picture.

Back then, a landlocked salmon had to be at least 16 inches long to be a “keeper”. It's a decent size fish and fun to catch. Also, unlike today, you didn't have to immediately kill or release them. You could keep them alive on a stringer, which is a lightweight piece of aluminum chain with a bunch of large safety-pin sort of things along it. You open one of the hooks, slide the end in the space between the fish's gills and out the mouth, close it again, then hang the whole thing over the side of the boat. The fish can breathe and swim around normally, staying fresh until you're ready to go home.

Well, on this particular day, Dad was right. We caught fish … 3 keepers … more than we'd ever caught in one day. Two of them were closer to 20 inches than 16. Nice fish. Despite the cold, we were very happy guys.

I don't know how long we fished. But, once we'd gone a couple of hours with no more luck, we decided to call it a day. So, we stopped and put everything away, then Dad turned the throttle wide open and we sped across the lake toward the dock.

On the way in I kept hearing a metallic slapping noise, but was too busy daydreaming about a warm kitchen and fried salmon to pay attention. Then, as my wife Cindy would say, “Dawn broke over marble head.” Dad couldn't hear anything over the wind noise and motor, so I waved my arms frantically and pointed at the back of the boat. Wearing an all-too-familiar scowl, he finally slowed down and asked what was the matter. Still pointing at the corner of the boat behind his back, I choked out the single word “stringer”. At first he looked puzzled, then it hit him. He whirled around, grabbed the chain and pulled the forgotten stringer out of the water. No fish.

Now, you'd think that would have been a moment for a few choice words. Nope. We motored back to the dock, unloaded the boat, put it on the trailer and drove home in silence. We never spoke of it. In fact, as far as I know, neither of us has said anything to anyone in over 50 years, not until I asked Mum, a few days ago, whether she'd heard about it.

And that's the story of 3 salmon that, in fishing vernacular, “got away”, although not in the way that phrase is usually meant. It was one of our best, and worst, days fishing together.


Rest in peace, Dad.

Thursday, January 14, 2016

Gun violence and background checks

How many of the mass murderers used guns that were bought without a background check? None. How many gang and criminal killings have been committed with black market guns? Practically all. More background checks won't help. Having the CDC work to understand violence is the only thing that has the potential to help in the long run. Video games, Star Wars, The Hunger Games, Revenant. Need I say more? Whether we want to admit it or not, we are a violent society. That has to change.

Wednesday, November 25, 2015

Betrayed on FAA Medical Reform

It appears I won't be able to get back in the air, now. Senator Inhoff introduced an amendment to the FAA medical changes that requires passing the medical at least once. This change apparently satisfies some of the most vocal, and powerful, opponents who have blocked the change even though all the accident evidence clearly shows that the medical exam has no bearing on the safety of private pilots. (That is, very few accidents are caused by an in-air medical problem and those that are were not, or would not have been, caught by a medical exam. The exam is meaningless with regards to aviation safety, contrary to "common sense".)

Since, due to the FAA's archaic rules, I can't pass the exam, I'm stuck in Sport Pilot. Not being able to afford one of the expensive Light Sport planes, whose prices have gone through the roof due to the number of pilots with the same problem, I'm stuck on the ground. I spent over $10K to learn how to fly, now wasted.

Monday, July 20, 2015

Emotional Avoidance

Mindfulness and Avoidance
An issue closely related to control is that of avoidance. There is now strong evidence that a lot of unhappiness and mental health difficulties are linked to what is called emotional avoidance: avoiding or suppressing feelings, fantasies, or memories because when they come into our field of awareness, they trigger bodily feelings that can be overwhelming. Indeed, for all kinds of reasons, our present-moment experience can be so painful and conflicted that we don't want to be there. We feel that if we stay there too long, collapse, implosion, or emotional eruption might occur. This might not be the case in the beginning. When we start meditation practice and have our first experience of stepping back from the repetitive story lines that continually run through our minds to just watch them float by, there can be a feeling of joy and release as we see firsthand how we do not always have to be carried away by our thoughts.
But this can be a honeymoon period. In Choden's experience of mindfulness training, it is when we start running into the deeper levels of emotional resistance that mindfulness practice risks sliding into a process of thought management in which we subtly promote certain ways of thinking and feeling and reject others. It is like having a nice, tidy desk with everything in its rightful place, and constantly rearranging it so you have a sense of maintaining control. Very quickly meditation can be hijacked by this process— certain things are allowed in but others are not. You can tell this when people say, "I've been practicing mindfulness for eight weeks now, but I still can't stop feeling anxious or getting irritable," indicating that right from the outset, mindfulness was understood as a way of getting rid of painful emotions rather than being more fully present with them and learning how to hold them with compassion and thus to tolerate and accept them. Behavior therapy works in exactly the same way. For example, you would take an agoraphobic out into the streets so that they can experience anxiety more fully, learn to tolerate and work with it, and so be less frightened of it. In the case of the agoraphobic, avoidance is obvious, but for the mindfulness practitioner, it can be far more subtle.
According to Rob Nairn, one of Choden's mindfulness teachers, this process of avoidance and suppression happens subliminally, and before we are even consciously aware of it, we may find that we have already bought into attitudes of identification and avoidance— almost as if some shadowy doorkeeper to our subliminal world says that "this" is permitted entry but "that" is not. And then an even more subtle voice of authority follows quickly behind and says, "This is the way it must be."
Gilbert, Paul; Choden (2014). Mindful Compassion: How the Science of Compassion Can Help You Understand Your Emotions, Live in the Present, and Connect Deeply with Others (p. 147-148). New Harbinger Publications.