My inane life… in glorious details!
Archive for December, 2007
Where have the last 2 years gone?
Dec 30th
2005, 2005, 2005. It feels like only last month it was 2005. I look at the stuff I’ve worked on in the past years – skins for Quintessential Player, web design stints, and whatnot – stuff that feels like I only did months ago, but as I look at it all more closely it turns out to be many years ago. I’ve been with a particular forum for six years already. Six years! Oh how time flies.
Now 2008 is upon us. HOPE6 was already a year and a half ago, and the next one is due up soon. Jesus. I often wonder whether this lost track of time has to do with the fact that my time in that period has been absorbed only by a few projects (namely On Piracy and Docks), or whether it’s just one of the drawbacks of getting older.
I remember at the hunting camp I went to a few months ago, a man that was in his early sixties was there. Â He had worked for Bell all his life, and yet, as he explained, his first day there felt like only yesterday.
I don’t want to end up like that. When I’m sixty, I want to feel like my being twenty-two was ages ago. What a scary thought that is, to have life literally dissappear from under you. To have it gone by in the blink of an eye.
All shoots complete for Docks…
Dec 20th
It’s done… All of it… Some of it is alright, some of it downright horrible – but that’s the way the cookie crumbles… I’m now in the process of dumping the footage onto my computer, as I need to return this borrowed camera ASAP.
Fun, fun, times.
Dec 12, 17, 18 Shoots
Dec 18th
These were small shoots to take care of the small extra scenes that help complete the film. The scenes featuring the main actors was done with the Dec 11 shoot, this is all about the extras and the little things. Tomorrow will be the last day of shoots, at which point I’ll furiously dump the footage onto my home computer.
Which brings me to another point – I haven’t been home since last Friday. I went to my mom’s for her birthday, but due to the storm and everything I’ve yet been able to go my own home. I’m not looking forward to the gazillion emails awaiting me.
Storm of the Decade
Dec 16th
It’s quite the snow storm out there. I’m presently at my parent’s home, unable to go back to my place. It’s just too heavy, you can’t even see the sides of the road, much less the cars on front. Ironically enough, The Day After Tomorrow is playing on TV.
RADAR imagery of the storm:

Teens & University
Dec 16th
I appreciate my university education. It’s given me skills that have become indispensible to my daily living – the ability to think critically, an understanding of how to question, and the like. But in as much as I consider such broadening of perspectives invaluable, I’ve come to be extremely cynical on the stress imposed on high school students to get into the institution of their “choice.” Moreso if the student parent is aiming for a high-brow British university or whatnot.
I see such aims as both fiscally irresponsible and a waste of time. The more expensive the institution, the more specific the program, the less inherent flexibility there is for the student to change their mind. That fluidity is necessary, because unless one expects a 16 year old to somehow be imbued with the knowledge of a recent graduate, we shouldn’t expect him/her to not change their mind on the degree of choice. It’s only natural, as anyone who’se been through the grind will tell you.
So when I see news tidbits on kids suffering burnouts over their attempts to get into prestigious schools, I can’t help but think their parents blinded by their own aspirations. Naturally, there’s nothing wrong with getting into a prestigious school. But a 22 year old equipped with a university degree and a clearer mind is much better informed at making such a decision than a 16 year old still trying to grasp the basics of adult life.
December 11th Shoot
Dec 11th
And with that, I conclude the last of the shoots with the main characters of Docks. I also got some footage for a featurette on the rundown of an atypical shoot. Next up: the small things which I can do, as well as work with five extras. I hope to wrap up filming by this weekend.
In Thursday’s Globe and Mail…
Dec 5th
I was in last Thursday’s Globe and Mail, as part of an article on the throttling of bittorrent traffic that a number of ISPs are undertaking. What a crazy day that was – I was at work when the first email came through on my BlackBerry. Within hours, a photoshoot and interview time had been set. These guys sure waste no time.
Security & UofO Website
Dec 4th
The other day I discovered a flaw with the University of Ottawa website. In essence, it allowed any one of it’s 30,000+ students to hijack their student directory page to upload malicious code. This was not in the realm of the theoretical, it had only taken me a matter of minutes to set-up the following fake phishing example. Whenever someone would visit my student page, they would be treated to a pop-up window that would ask them to log-in to their university account again.
Putting their mouse over the pop-up would produce a warning that the log-in prompt was a fake:
It’s classic cross-site scripting. It would be obvious to some that this was a phishing attempt, but not to everyone. The solution was simple too: sanitize text. I sent an email to the head webmaster of UOttawa, but she never got back to me. Great! With the person supposed to care not giving a shit, I decided to go through the regular support channels all students use. Lo-and-behold, they sent this:
Mr. McArdle,
Thanks for submitting the problem to us and for the information you gave us. Have you spotted any such record that have exploited the vulnerability?
I lied and told them no. I didn’t want to mention the demonstration I had made. Then I was worried it was a mistake. A week had passed, and the vulnerability was still in place. This morning, I got this:
Mr. McArdle,
Thanks for the feedback. I”ve assigned the problem to the group in charge of InfoWeb.
So hopefully, hopefully, they’ll do something about this. But what are the odds? I honestly don’t think anything will be done. That’s the problem about security: too few care. There’s lots of students at Ottawa U., and it wouldn’t take a genious to figure out what I did. And I’m a frickin’ physical geography student – not anything remotely close to computer science!
Update: I got the following message today…
Mr. McArdle,
Thank you for your astute observations and honesty and integrity in revealing the gap. This is a known bug and with a known solution and we are in the process of correction by [removed.]
Thanks again for reminding us of this urgency.
Recent Comments