Português English

Blogs

2012.01.13

One Password to Rule Them All

Passwords are the new era plague. They are everywhere. Every system relies on passwords. People, unfortunately, are not designed to memorize all of them. The most common solution? Use one password for everything. If you ask one to create a password, one will use the very same password.

Passwords have some intrinsic problems:

  • difficult to create
  • difficult to remember
  • spread across several systems

Jeff Atwood wrote about the advantages of passphrases over passwords, but I’m still not convinced that it correctly addresses the problem. Using more robust brute force techniques, it will be, in fact, easier to break it, even if has several digits.

But when the person uses the same password over and over, there are some extra problems:

  • cross site vulnerability when one is hacked

Some use password wallets; programs that stores all your passwords in one place. However, you are putting all the eggs in a single basket. If this program gets hacked, all your passwords are exposed. Also, you have to keep a record of all sites you use, which facilitates even more the job a malicious hacker.

PasswordMaker

Suddenly I found about PasswordMaker on the FLOSS Weekly 84 on Twit, which opened my mind for a nice solution. The idea is to create a password generator using a central password combined with a unique id for each site, which can be its actual address! So, your job relies only on remembering one single password, and it will recalculate the actual password each time. One password to rule them all.

It solves some problems.

complex password generation

It can automatically generate very, very, very strong passwords using a several possible characters. the default 8 digits and 99 characters possible, generate 1 password in 9 227 446 944 279 201, much better than 110 075 314 176 passwords possible using a simple lowercase letters only. I personally use very long passwords. Configuring it to create a 20 digits password, it will be one in 8 179 069 375 972 310 000 000 000 000 000 000 000 000! much safer!

cross site safety

If Facebook is hacked, your Gmail account wont be compromised. If Flickr is invaded, your bank account will still be intact. Because each site uses a different password, you will be protected on all the others. And believe me, it’s site invasion and password leakage very common.

multiple profiles

Some sites have different password policies. Some require using letters and numers, some forbids special characters. Some require at least 8 digits, others restrict to 20. Using thie tool, you can change easily the different profiles and generate, each time, a password for each situation.

browser extensions

In their site, there are several plugins for all major browsers. They facilitates a lot the tool usage. I personally created a Chrome extension that uses the same algorithm. I hope people like it.

no central repository

Nothing is stored in the computer nor the internet. You don’t have to keep track which sites you have accounts. It still require non-software measures to make it work. You have to change your password in a regular basis (yearly maybe), among other atitutes. It is not a silver bullet solution, but it addresses several problems.

Skyrim feature
2012.01.10

Skyrim

The traditional Elder Scrolls game is now back with Skyrim. This takes place in northern lands. Snows in a lot of places. But the fire of the dragons might warm the players.

tES 5 is the Bethesda masterpiece. Every single aspect was updated and enhanced. Combat is more fun. The story infinitely much better than Oblivion, while still feels very cliché. It’s an improvement. However, it is still very, very awkward and worse, totally dull sometimes. It is for me the biggest weakness in the Bethesda Softworks team.

Skyrim 3.jpg

The game so big that you can spend days, weeks and even months without exploring the whole map. It adds a lot of value to the final offer. However, I bet that less than 25% of all players will see the end of this game. It’s so huge than at some point you will be tempted to restart and make different choices. Graphically, it is amazing. With all settings at the max, you will definitively be impressed. I was more shocked when Oblivion was released; it was more ground breaking. But Skyrim is beautiful and you will face some situations in which you will catch yourself with your jaw opened.

Skyrim 2.jpg

The same can be said about he bugs. The programming could not foresee he amount of situations that players put the character into. The result is an YouTube full of funny videos. But it is another Elder Scrools tradition: crazy and sometimes irritating buggy situations. It’s almost a positive feature.

Skyrim 4.jpg

Most of the mini-games are now fun. But I still feel that the most of the decisions that we make in the game, in terms of the storytelling aspect, are quite inconsequential. In the gameplay, however, is creates amazing branches based on what gamestyle you prefer.

Skyrim 5.jpg

It is a masterpiece. A bit of the same, if you already played tES game before, but is still amazing. And it have dragons!

Gamespot:

  • Better Than the Sum of Its Parts
  • Get More Than Your Money’s Worth
  • Great Sequel, Great Story
  • Outstanding Visual Design
  • Sucks You In+ Variety
My Rating: 9★★★★★★★★★
Metacritic: 94
Education and Certification feature
2012.01.01

Education and Certification

While university diplomas are still highly valued in many professions, their limitations are becoming increasingly apparent. A diploma may indicate that an individual has completed a particular course of study, but it does not necessarily certify that they possess the knowledge and skills needed to succeed in a particular field.

Additionally, university programs can vary widely in terms of quality, curriculum, and rigor. This can make it challenging for employers to evaluate the capabilities of job candidates who have graduated from different programs.

An example of the market perspective is the Information Technology (IT) industry. With the rise of technology, there is a high demand for IT professionals with specific knowledge and skills. Employers are increasingly looking for individuals who possess certifications, as a way to evaluate their capabilities, instead of looking for a diploma.

Third-Party Certification

One potential solution to the limitations of university diplomas is the implementation of national or international certification processes. These processes would involve standardized exams or assessments that would certify an individual’s knowledge and skills in a particular field.

One example of this is Brazil’s national exam for law students, which requires individuals to pass an assessment before being allowed to practice as lawyers. This type of certification process assures employers and clients that the individual has the necessary knowledge and skills to perform their job duties.

The Importance of Expiration Dates

While national or international certification processes can provide greater assurance of an individual’s knowledge and skills, it is also important to ensure that certifications remain relevant and up-to-date. This is where expiration dates come in.

Expiration dates ensure that certified individuals are continually updating their knowledge and skills to remain current with developments in their field.

Medical professionals are required to complete continuing education courses and renew their licenses periodically to ensure that they are up-to-date with the latest developments in medicine. Neglecting this can potentially compromise patient health. This ensures that they can provide the best possible care to their patients and remain competitive in the job market.

Revamping Careers

The limitations of university diplomas and the need for national or international certification processes also highlight the need to revamp careers. Many professions are changing rapidly, and it is becoming increasingly important for individuals to stay current with the latest developments and trends.

One way to address this is through continuing education programs. These programs would provide ongoing training and development opportunities for professionals, allowing them to stay up-to-date with the latest developments in their field.

Consider the legal profession. With the rise of technology and globalization, the legal profession is changing rapidly. As a result, law firms are now offering continuing education programs and opportunities for lawyers to specialize in specific areas, such as technology law or international law. This allows lawyers to stay current with the latest developments and provide the best possible advice and representation to their clients.

The Client Perspective and National Policy

The use of national or international certification processes and continuing education programs can also benefit the market as a whole. With standardized certifications, employers would have measurable indicators to properly select the best professionals for their organizations. This would lead to increased productivity and efficiency, which would ultimately benefit the economy as a whole.

Additionally, the implementation of these programs would inevitably lead to a raise in the national educational level. As individuals are required to continually update their knowledge and skills, the overall educational level of the workforce would rise. This would benefit not only the individuals themselves but also society as a whole.

Furthermore, the use of national or international certification processes would also provide greater transparency in the job market. Employers would be able to evaluate candidates based on their certifications and knowledge, rather than relying solely on educational credentials. This would help to level the playing field for individuals who may not have had access to high-quality educational programs.

In conclusion, the limitations of university diplomas and the need for national or international certification processes highlight the need for ongoing training and development opportunities for professionals. Through the use of continuing education programs and the implementation of standardized certification processes, professionals can stay up-to-date with the latest developments and trends in their respective fields.

These changes would also benefit the market as a whole by providing measurable indicators to properly select the best professionals for organizations. Additionally, the implementation of these programs would lead to a raise in the national educational level and provide greater transparency in the job market.

As the world continues to evolve and change, individuals and organizations need to adapt to these changes to remain competitive. The use of standardized certifications and continuing education programs is one way to ensure that professionals can keep up with the pace of change and remain relevant in their respective fields.

Note: This text was written in 2012 only in my personal notes and only now I revised and published.

Batman: Arkham City feature
2011.12.01

Batman: Arkham City

Jezz, what a great game. I must confess, flat, that it impressed me much less than the first installment. Several features, scenes and the general feeling was already known. Is takes a lot of the buzz and the fun, but what is left is so good that it is still one of the top games I ever played. What impressed me upfront is the level of detail. Batman Arkham City is a product of a gigantic effort and thought. The city is full of small surprises.

The story now is less impressive than the first game. Too many characters, villains in fact, are presented and compound the main story. But to patch all then into a single thread, the rationalization is left aside. The human villains are very plausible, like joker and penguin. But the more bizarre and monster like guys forces the story into a more a too much incredible way. Suddenly Batman stops chasing a psycho mass murderer and stats dealing with an assassin from centuries back, living by a coincidence in the city undergrounds.

Batman arkham city 118.jpg

Graphically the game is top notch. I would question a bit the excessive amount of colors that populate the city, regardless the argument that a place like that would normally be full of neon colors. The rest is gorgeous. I loved the humor -sometimes a bit dark- of the dialogs. Alfred almost always mocks Batman for being so good so smart so invincible. Joker, probably my favorite bad guy ever, is also a star.

Batman arkham city 120.jpg

The voice performances are amazing and convincing. In the artistic point of view, there is not much more to say than WOW.

The gameplay is very, very good. Easy enough to not let the flow stops but hard enough to keep you engaged. The plethora of gadgets is a bit confusing, but they make sense in the general situations. Puzzles are rational, challenges are well places and well executed. I tend to buy and play great games due to the fact I do some research before the acquisition. This game is a candidate to be one of the best games I ever played.

PS: Time to time I give my computer a clean installation of everything, formatting the hard drive. Guess what? I lost the saved game coz I forgot to backup this one! jezz, I’m soooo pissed. I was really near ending.

Gamespot:

  • Just Right
  • Oh Snap!
  • Outstanding Gameplay
  • Outstanding Visual Design
  • Sucks You In
  • Superior Animation
  • Terrific Voice Acting
My Rating: 8★★★★★★★★
Metacritic: 91
2011.09.01

Relaxation Sounds

Due to my personality, I’m generally a very active and anxious person. Loads of ideas come into my mind every day. I struggle to keep focus on what is important, what I’m currently working.

To “gain” time, I like to listen to podcasts or audiobooks while I am working on something. It is fine when the work is repetitive, and you can free your mind by putting your body into an autopilot, separating mind from body. You can even see your physical existence, like you are dead and see your corpse. It requires training but by perfecting this technique allows you to do multiple things at the same time.

However, for tasks that require both concentration and creativity, identifiable sounds get in the way. Some words triggers some brain switches that makes my attention to direct to stuff that is not the work. And takes a lot of time to force my mind to concentrate back into productive tasks. Listening to music triggers the same switches.

I don’t recall the exactly place where I found about that rain sounds are relaxing. It’s kinda of common sense, but to deliberately listen to rain is not. Investigating the internet I discovered a web site that is so simple that is great: rainymood.com. It keep an infinite loop of a pure relaxing rain recording. With the eyes closed, you could easily feel sad and introspective, with an immense need of a good book and a blanket by just freeing your mind with this hypnotic music. An equivalent solution exists for my Android phone, with Rain Sounds. When the sleeping time comes, it makes a lot easier to put this on and lay down in bed. The sleep comes much sooner. Much calmly. Much rainy.

As an alternative, I’m also a Grooveshark.com recurrent user, BUT, basically listening to the ambient radio station, which have a selection of music that are essentially instrumental, no identifiable patterns and never raise the music energy to the point that is bring our attention. Since Grooveshark is not -currently- blocked on my company, it is a great place to avoid the external noise and focus in the work. With your ears locked, it is time to kill some to-do tasks using martial arts like GTD/pomodoro.

Bruno MASSA