The CBLDF has issued a press released detailing the victory in the Gordon Lee case. This was the case in which a comic book store in Rome, Georgia, as part of a 2004 Halloween promotion, was handing out free comics left over from that year’s Free Comic Book Day. Among over 2,000 comics, they accidentally included a copy of Alternative Comics #2, which included a story about Picasso which included him running around his studio in the nude. And they accidentally gave it to a kid. The parents wouldn’t accept an apology, and pressed charges instead. The DA has been determined to make an example out of him, pushing grossly overinflated charges including felonies that would have given him prison time. 3½ years, 3 trial dates, a mistrial for prosecutorial misconduct, and $100,000 in defense costs later, the Rome DA finally agreed to drop the case in exchange for a written letter of apology — which is exactly what the store owner had offered in the first place.

Cookie Security in WordPress 2.5. The latest version of the blogging software has a feature that can make it harder for attackers to grab your login sessions. It involves setting a pass phrase in wp-config.php, one which you’ll never have to remember, but which will be unique to your site. You have to copy the SECRET_KEY section from wp-config-sample.php and add in your passphrase…or you can generate a random code at http://api.wordpress.org/secret-key/1.0/ (be sure to put it in the middle of the file!)

The Internet Storm Center writes on Hundreds of Thousands of SQL Injections — all websites that have been hacked to host various sorts of malware.

Scientists have built a computer model of the Neanderthal vocal tract based on fossils, and have simulated the kinds of sounds they could have produced. Ever since I read Robert J. Sawyer’s Neanderthal Parallax novels, I’ve been fascinated by the idea that there were two distinct human species, living side by side, for perhaps thousands of years. What happened to them? Did our ancestors kill them off, or interbreed with them? Did they fail to adapt to a changing climate? (via Slashdot)

On a related note, it seems that Expelled, the anti-science propaganda film that actually invokes Godwin’s Law by claiming that “believing” evolution leads to Nazis, opens this weekend. I’m curious to see how badly they misrepresent things (it’s always best to look for yourself, instead of just taking other people at their word—that’s the whole idea behind science, after all), but I can’t bring myself to support them by actually giving them money. Meanwhile, Expelled Exposed is interesting reading.

In software, dria.org explains why the AwesomeBar is awesome. That’s the nickname given to the new address bar in Firefox 3, which lets you search your browser history as you type. It’s the reason I never went back to Firefox 2 after trying out one of the later FX3 betas, and why I’ve installed Fx3b5 on two more machines. The Opera 9.5 previews have a similar feature, but Firefox’s implementation is better visually. It’s easier to spot the page you want, and over time, it learns which pages you visit more often. It’s so much faster to type a word or two than to hunt through the bookmarks menu. (via Asa Dotzler)

IEEE has an article on how copyright law applies to websites, What Can You (Legally) Take From the Web?

Finally, ***Dave relates an incredibly cool story of going to see Avenue Q and what happened after the show. I had no idea that (at least in New York), the “Give Me Your Money” segment was actually collecting for a charity.

In conjunction with the Safari 3.1.1 security release, Apple has also released a new version of Apple Software Update for Windows. With version 2.1, they’ve taken the opportunity to fix one of the problems that caused so much criticism last month.

It now shows two lists: one for updates, and one for new software. This takes care of one of the three easy steps that I culled from discussions back in March:

  1. Separate updates from new software and label them clearly. Done.
  2. Leave the new stuff unchecked by default. Bzzzt! Try again!
  3. When run automatically, don’t pop up a notice more than once for each piece of not-installed software. [Edit:] Done.

Unfortunately the new software is still checked by default, but one hopes that the separate list would be enough to make people stop, look, and make a conscious choice as to whether or not to install it.

I don’t know yet how it handles new software when run automatically, or whether they’ve made the ignore option apply to an entire piece of software rather than a specific installer. I’ve taken iTunes off the ignore list and set it to check daily so that I can find out. [Edit:] I haven’t seen it pop up in the last 24 hours, and according to eWeek, “Apple will now only prompt the user if there are critical security updates available.”

Continue reading

Since Gravatar was bought by Automattic, the service has been a lot more stable. I had already re-enabled them on this blog before WordPress 2.5 came out with built-in Gravatar* support.

Not everyone has a Gravatar, though, so many comment threads just show the default icon, over and over. Not only does this look boring, but it misses out on the whole point of using an avatar: providing an easy at-a-glance visual distinction between each author.

When I first used Gravatars on this site, I set it up to use a giant first initial as a fallback. Now, I’ve been trying out two plugins that will automatically generate avatars for people who don’t have their own:

  • Wavatars builds up cartoony faces using geometric shapes. Interestingly, it’s by Shamus Young, author of the screencap-based webcomic DM of the Rings and writer of Chainmail Bikini.
  • WP_Identicon sounds like a Transformers faction, but produces a geometric pattern as inspired by Don Park’s Identicon, which built a similar image based on a visitor’s IP address. The same author also has one that generates cartoon monsters, which appears to be one of the earliest implementations of this concept.

These plugins will use a Gravatar if available, or else generate an image based on the commenter’s email address (if supplied). That means each comment by the same person should use the same image. Other blogs using the same plugins at default settings will come up with the same avatar for each commenter, as well. The images are stored in a cache, so each only has to be generated once.

6 Wavatars to the left, 6 Identicons to the right

Once I made sure both plugins worked, I showed the results to Katie. We ended up settling on Wavatars, since faces are easier to recognize than patterns. (Though the patterns are really cool!)

You can try out the automatic avatar by leaving a (relevant, please!) comment on any post. Or you can run over to Gravatar and set up an icon of your choice!

*What’s a Gravatar? The intent is to be a Globally Recognized Avatar. You upload an image to Gravatar and associate it with your email address. Then any site with Gravatar support will be able to display your image next to your posts. Right now it’s mostly used in blog comments, but it could easily be worked into forums, wikis, etc. The Gravatar Blog mentions other uses they’ve seen people apply it to, such as plugins for Thunderbird and the Mac OS X Address Book

Note: I did notice one important drawback to the WP_Identicon plugin: it’s very inefficient at generating the images. When I first visited posts with long comment threads, like Another One Bites the Dust (174 comments) and Songs Not to Play at a Wedding (87 comments), WP_Identicon took over a minute to generate all the icons and maxed out the server’s CPU. Sure, the images are cached, so it’s only really an issue when you first install the plugin (unless you get a lot more people commenting at once than we do here), but to compare, Wavatar on an empty cache finished the same posts in just 4 seconds and 2 seconds, respectively.