Welcome to Earthlink, where security is something we…wait, what does that word mean again?

Welcome to Earthlink LiveChat. Your chat session will begin in approximately 1 minutes. Feel free to begin typing your question.
‘Michael’ says: Thank you for contacting EarthLink LiveChat, how may I help you today?

Me: You have been hosting a “phish” page that is intended to steal sensitive financial information from people for more than two months.

Me: Repeated emails to your support and abuse addresses have been ignored.

Me: Months later, the phish site is still active on your network.

Me: Who do I need to call to get you to take responsibility and clean up your network?

Michael: What phishing site are you referring to?

Me: http://aolqr.com/_cqr/login/?Login=&Lis=10&LigertID=1993745&us=1

Me: Went live on June 18, first notified abuse about it on June 20, have since sent a number of emails to support and abuse addresses.

Michael: Have you tried to contact 1-800-955-0186?

Me: I have not. Is this standard accepted practice for notifying Earthlink of phish sites?

Me: Can you explain why your abuse and support email addresses don’t appear to be read?

Michael: What abuse address are you sending the reports to?

Me: abuse@earthlink.net, support@earthlink.net

Me: These are the abuse addresses defined in the ARIN Whois information and at abuse.net

Michael: I am not sure why our Abuse department has not responded, but it is best you contact the number I gave you

Me: OK, I will give them a call. Let me say, though, that I am extremely disappointed by Earthlink’s lack of responsiveness and willingness to permit this kind of flagrant network abuse.

Chat session has been ended by the agent.

Welcome to Earthlink LiveChat. Your chat session will begin in approximately 2 minutes. Feel free to begin typing your question.
Please hold for an agent. While you are waiting, please feel free to begin typing your issue in the box below. Try to be as descriptive as possible. Once an agent is assigned to the chat, click SEND to transmit what you have typed.
‘Michael’ says: Thank you for contacting EarthLink LiveChat, how may I help you today?

Me: I just spoke to you about the phish site you were hosting. The 800 number you gave me to call directed me to a recording telling me to use the support chat, and disconnected.

Me: So, your abuse email doesn’t work and neither does the phone number. Any other ideas?

Michael: Can you please try again

Me: Try the phone number again?

Michael: i am not sure why you cannot connect to the number I gave you, as we have persons right now ready to take your call

Michael: yes

Me: I’m calling right now, ending up in a voicemail system. I am not an existing customer, I have not recently placed an order.

Michael: What is the system asking you for?

Me: The phone number associated with my account.

Michael: Just provide your phone number

Me: I say “none,” and I hear a recording about “We are experiencing high call volumes. Please call back later or use our online support at support.earthlink.net”

Michael: Try 1-888-3278454

Me: Ah, now someone is on the phone.

Michael: great

Michael: Thank you for using EarthLink LiveChat. Should you need further assistance, please contact us again.

Chat session has been ended by the agent.

(A long and frustrating conversation ensues, in which I try to explain to a person whose native language is not English what a “phish” site is and what the Web domain in question is)

Guy on phone: I do not see anything on that Web site.

Me: The top level of aolqr.com doesn’t give you anything but a 403 Forbidden. You have to go to http://aolqr.com/_cqr/login/?Login=&Lis=10&LigertID=1993745&us=1 to see the phish.

Guy on phone: Please hold.

Bad hold music plays…

Guy on phone: What company are you working for?

Me: Huh?

Guy on phone: I have been instructed to ask, what company are you working for? What is the name of your company?

Me: I’m not working for any company. I’m trying to tell you about a phish site on your servers.

Guy on phone: Please hold.

More bad hold music plays…

Guy on phone: I have spoken to our engineering team. They have inactivated the Web site.

Me: *does a little dance*


Seriously? This is abysmal. A (quasi-)reputable Web hosting firm that allows phish sites to remain active for months on its network, doesn’t pay attention to abuse reports, and makes people call on the phone to report phish pages? Now that estdomains.com is no longer the bad guys’ go-to for one-stop Internet fraud, it’s nice to see a domestic company like Earthlink stepping in to fill the gap.

I suppose I shouldn’t attribute to malice what can adequately be explained by stunning, jaw-dropping, jesus-christ-you-have-got-to-be-kidding-me incompetence, but still. Past a certain point, any sufficiently advanced incompetence is indistinguishable from malice.

Assault and consent in the BDSM community

I had planned to spend this afternoon writing about the Long Now Project, which inspires some of the most optimistic parts of me and speaks to the parts of me that are profoundly in love with the potential of the human race.

Instead, I’m going to write about something that saddens me greatly.

A short time ago, a friend of mine was sexually assaulted during a play session with a person who’s prominent in the local Portland BDSM scene. The situation was complex, as these things often are; most rapes, whether they’re within the context of BDSM or not, usually don’t involve some perpetrator springing from a dark alley onto an unsuspecting victim. Yes, it can happen that way, but more often than not the victim knows the perpetrator, as was the case here.

This situation started out as consensual play, and turned into assault when my friend’s boundaries were overrun. And what happened next makes me especially disappointed and angry.

The purpose of this post isn’t to discuss the details of what happened. The things I’m going to say hold true regardless of the exact nature of the circumstances. Instead, what I want to do is talk specifically about the BDSM community, and how it often falls short of its own stated ideals, and often plays into cultural norms about men and women even while it supposedly enshrines values of individuality, negotiation, and consent.

Cut for potentially triggering content: rape, BDSM, consent, misogyny, and victim-blaming behavior

Movie review: Cowboys & Aliens

Okay, so I admit it. I am a tool of Hollywood. Every now and then, a movie comes out which I know I will see, despite the fact that my higher self is screaming at me in disgust and loathing for even considering the prospect.

Like the new Star Trek reboot, for example. I went to see it knowing it was going to be a travesty, and I was right. When the sequel comes out, I will see it, too, even though I know it’s going to be a disaster of a movie and I’m probably going to detest the whole shambling thing.

I saw the latest incarnation of the Indiana Jones saga adventure money machine, expecting it to be bad, and it turned out to be even worse than I could ever have dreamed. And if another one comes out, I’ll probably see it, too (and say snarky thins about it on my blog).

It was with that feeling I went to see a cheap matinee of Cowboys and Aliens.

It’s a gritty Western in which a rugged group of cowboys in a small Western town take on a rampaging group of aliens with spaceships and stuff. With a premise like that, how could it possibly go right? I mean, seriously, think Battlefield Earth for a prime example of what this idea is likely to lead to.

I was surprised.

And pleasantly so, which is a bit of a rarity. (That’s one of the downsides of being an optimist; an optimist is almost never pleasantly surprised.) The plot–there was one! I’m totally using that word non-ironically!–was surprisingly strong, and the move really was a whole lot better than it had any right to be. All it really needed was dialog, and it’d have been awesome indeed.

The film goes something like this:

COWBOY #1 wakes up in the middle of a DESERT
COWBOY #1 looks around with a STEELY GAZE
COWBOY #1: Hm.
COWBOY #1 looks at a GIZMO locked onto his WRIST with a STEELY GAZE
COWBOY #1: Hm.
COWBOY #1 hits the GIZMO with a ROCK. It FAILS to FALL OFF
COWBOY #1: Hm.
COWBOY #1 hits the GIZMO with a ROCK AGAIN. It still FAILS to FALL OFF
COWBOY #1: Hm.
Cut for spoilers; clicky to read more!

A new experiment

I’ve been hearing about this Kickstarter thing for a while.

I’ve also been wishing that I had the capital to print some more posters for a while.

So, since the two seem like a good fit, I’ve started my very first Kickstarter project.

Before you get oo excited, no, it’s not to make a poster of the Map of Non-Monogamy, though that is something I’d quite like to do. This project is a bit different; it’s a project to make a poster version of one fo the photos I took while moving across the country to the lovely city of Portland:

This project runs for 30 days. If it’s successful, I will do more in the future. If it’s successful and the poster sells well enough, I’ll be able to do more in the future without relying on Kickstarter, which would be awesome.

So. Want a poster? Click the link!

Fragments of Frolicon: Spontaneous Drag King Shoots

Operation Wifebeater (or, as some of us call it, Operation Drag Franklin Down To The Dungeon And Double-Team Him) was such a success that upon our return to Orlando, joreth and emanix decided that an encore was in order.

Well, of the outfits, at least. There’s only so much your humble scribe can take, after all.

In any event, I had the opportunity for a quick photo shoot outside joreth‘s house, which was quite a lot of fun, and went rather well, I think.

Yeah, you all wish you were me, I know you do.

I took quite a number of pictures, which you can click here to view.

Fragments of Frolicon: Nuclear Missile Porn

There is a town called Cordele, Georgia. It’s a tiny town well south of Atlanta, barely a blip on the map; if you blink while you’re heading along Interstate 75, you’re apt to miss it. It has a small gas station, a couple of rail lines, a Krystal burger…

…and a nuclear missile.

The missile is behind the gas station, right in front of the Krystal. It’s an old Titan, set up just off the freeway.

People walk their dogs next to it. There’s a very proud sign in front of it, solemnly informing visitors that this site is Confederate Air Force One.

The sign offers, I think, quite an insight into why the South lost the Civil War. They never did quite get the hang of this whole “industrialization” thing.

The careful reader will notice several punctuation errors on the sign. There’s also a technical error; a callout points to the “Stage III lox tank,” but the Titan I is a two-stage missile.

The South never really did much cotton to this science and technology stuff, so it’s probably not too surprising that they get bits wrong.

We stopped on the way home from Frolicon to take pictures of the missile. It’s slowly turning into rust, but it’s still quite lovely in a strange way. Viewed up close, some parts of it almost look like art.

You’ll find quite a few bandwidth-crushing pictures under the cut. Click here to see more!

From iPhone to Android

A few weeks back, I decided I needed to replace my aging iPhone 3G.

I got the 3G when it first came out. My roommate at the time and I spent quite a while waiting in line in front of the Apple store, only to be told when we were two places from the door that the stock for the day had been sold out. t took several more days of waiting in line before we were able to get our hands on one.

The iPhone 3G was the first smartphone I’d ever owned. I’ve been a cell phone user for quite some time, since the days of giant handsets with one-line LED displays, but I’d never owned anything even remotely approaching a smartphone before. For me, the iPhone was a game-changer. I have a notoriously bad sense of direction–it is not impossible for me to get lost just a few blocks from my home–and the GPS feature alone in the iPhone was a huge improvement in my quality of life.

Having real Web access was also a big deal. I do a lot of IT work, and the ability to get a call from a client and check the client’s Web site right there on the spot even if I’m not in front of a computer is huge.

But over the past few months, the 3G hasn’t been cutting it for me. The GPS is getting a little wonky, and the battery isn’t holding a very good charge any more, and the iOS 4.2 update made the phone feel a bit sluggish. On top of that, the amount that AT&T was charging me every month was enough to give me a nosebleed.

I spent a few weeks looking at several options: upgrading to an iPhone 4 and staying with AT&T, upgrading to an iPhone 4 and jumping to Verizon, and getting an Android phone.

Then Google announced the open hardware development kit for Android, and that significantly tilted the balance toward Android. The Google hardware kit for Android phones is based on the Arduino prototyping board, which I already have experience developing and programming for.

I went into T-Mobile and found that I could save quite a lot of money every month with a contract from them if I went to Android, so that’s what I did.


The phone I got and will be talking about here is the HTC Sensation 4G, running Android 2.3. It’s been an interesting, and at times rough, transition. I’ve been surprised by a number of things about Android, both pleasantly and unpleasantly.

But before I get into that, let me talk about what Android isn’t.

OPEN: IT’S THE NEW CLOSED

Android isn’t a religion. To hear many folks talk about it online, you’d think that the choice of cell phone operating systems was a religious or philosophical choice. Android, we’re told gravely, is “open.” The iPhone operating system is “closed.” To use Android is to celebrate freedom and democracy and other wonderful things; to use an iPhone is to toil under tyranny and totalitarian rule.

It’s hooey, of course. Android isn’t open, at least not in the way the religious folks say it is.

Oh, it’s open in the sense that the source code is available, kind of, eventually, when Google says it is. This sort of freedom isn’t really equal, though; Google decides who gets it when, and which partners get to have it first.

But the thing to remember is that from the perspective of the folks who make cell phone software, you aren’t the customer. The handset makers are the customer. Android is open–for them. You, as the person who buys the cell phone, get exactly as much freedom and openness as the handset maker lets you have.

On my HTC Sensation, for instance, the cell phone bootloader is locked down tighter than a nun’s–ahem. It was possible, if I wanted to, for me to jailbreak my iPhone. My Sensation? Nope, no can do. Not even the Cyanogen team has figured out how to root it yet.

The same is true for some other Android phones as well. Supposedly, HTC has had a change of heart and will be unlocking its phones in the future. It’s not clear whether this will apply to me; I’ve read one article online that says all HTC phones will be unlocked, and another that says only HTC phones not tied to a particular network or under contract with a particular carrier will be unlocked.

On the iPhone, the fact that I could, if I chose, jailbreak my phone never mattered to me; I never saw any good reason to. With Android, the fact that I can’t jailbreak it is kind of a bother, and that brings me to the second issue with Android.

SON OF THE REVENGE OF CRAPWARE: IT CAME FROM BEYOND THE GRAVE

With Android, we’re told, there is more openness in software, too. Android programmers do not have to go through any particular approval process to get their apps on your phone. The iPhone App Store is tightly regulated; apps that Apple doesn’t like aren’t available. The Android app store is an open bazaar; anyone can make any sort of app at all.

That’s not 100% true. The carriers have coerced Google into removing apps they didn’t like from the Google app store.

More to the point, though, the openness is really more for the handset maker’s benefit than for yours. With Android, we are back to the bad old days of Windows XP and Windows Vista, where each computer maker tended to stuff their computers so full of demos and third-party software and their own support applications that the term Craplets (crap applets) was devised to describe them.

Most computer manufacturers came to their senses, eventually, and cut it out. It didn’t help that some of this crapware, like HP’s support application that they bundled onto their computers, contained security vulnerabilities that let hackers pwn HP computers.

But Android phones often come so stuffed with pre-bundled crapware that, in my case at least, nearly half the available application memory is occupied right off the bat. Worse, unlike desktop crapware, the Android crapware can’t be removed without jailbreaking the phone. I’ll talk about some of that crapware in a bit.

So my experience with Android has been interesting. In the rest of this post, I’ll run down the differences I’ve found between using an Android phone and using an iOS phone, and rate the quality of everything from the handset design to the apps to the user interface. If that sounds like your thing, click here to read more!

How to Tie a Star-Shaped Body Harness

Note: This is part 8 of an occasional ongoing "how to" series on BDSM.

Part 1 of the series, How to Tie a Rope Harness Part I, is here.
Part 2 of the series, How to Tie a Frog Tie, is here.
Part 3 of the series, How to Tie a Shinju, is here.
Part 4 of the series, How to Make a Custom Dildo out of Ice, is here.

Part 5 of the series, How to Make a Spikey Decorative Collar, is here.
Part 6 of the series, Theory and Practice of Ginger Figging, is here.
Part 7 of the series, Rape Fantasy and Resistance Play, is here.
As you can probably figure out, most of these tutorials are really, really not work-safe.

This particular tutorial is not work-safe, photographically or in text. It shows and describes an unusual rope harness shaped like a five-pointed star. If it sounds like it’s up your alley, clicky the link!

Onward!

This Old House

During the way back from the great Sex For Science In A Seedy Hotel In Seattle Experiment last month, zaiah and our innocent victims companions and I stopped at the ruins of an ancient house along the interstate so that I could take pictures of it.

I vowed back then to return with a model and a lot of rope.

About a week ago, zaiah, my friend Scott, and I did just that. We brought with us a friend of his, the lovely slavetopurple, and another mutual friend who’s a bondage rigger.

The house has changed rather a lot in the past month. It looks like it’s being disassembled bit by bit; structurally, it’s in significantly poorer shape than it had been. It’s also being devoured by gigantic feral blackberry bushes.

As least that’s what I’m told they are. They’re actually more like the Great Cthulhu incarnated as vegetation, with even more tentacles than he is customarily depicted as having, and totally covered in thorns.

I used a wide-angle lens to get this rather fetching shot of the interior. You can see one of the feral blackberry bushes invading what apparently used to be the kitchen, presumably in search of souls to devour. It’s a little-known fact that every time you masturbate, God puts the souls of the unbaptized underneath your stove. That’s why televangelists don’t have stoves.

Clicky for more pictures, which are definitely not safe for work unless you work in a place that's pretty laid back about these sorts of things.

The Mathematics of Sex Toys Made Tangible

A while back, I posted a picture of a very early prototype sex toy designed to prevent its wearer from getting off.

This project is entirely separate from, and shouldn’t be confused with, the prototype sex toy that’s operated by the wearer’s brainwaves, which I’m still working on. The sex toy that is designed to keep the wearer from getting off, which I’ve started calling the “Tormentor,” is a vibrator connected to a programmable controller board that’s set up to run at random intervals with random pauses in between–perfect, in other words, for keeping whoever’s wearing it always aware of it, while not letting that person get enough stimulation to reach orgasm.

The very first proof-of-concept version was basically a bare controller board tethered to a laptop and connected to a vibrating egg. As it wasn’t exactly portable, it wasn’t able to do what I wanted, which is to be worn around while shopping or doing housework or otherwise going about one’s business.

So I started working on getting a more portable, self-contained version set up and running.

Click here for details, schematics, and pictures of the prototype being assembled