IraLaefsky writes "The appropriately titled Becoming Agile: In An Imperfect World by Greg Smith and Ahmed Sidky offers a realistic path to the family of Agile practices which have become prevalent in software development in the last few years. This family of approaches to software development has been widely adopted in the past decade to replace the traditional Waterfall Model of software development, described in a 1970 article by Winston W. Royce 'Managing the Development of Large Software Systems.' The Waterfall Model stressed rigid functional and design specification of the program(s) to be constructed in advance of any code development. While the this methodology and other early formal tools for Software Engineering were infinitely preferable to the chaos and ad-hoc programming-without-design practices of early systems, these first tools ignored the fallibility of initial interviews used to construct initial design and often resulted in massive time and cost overruns." Read below for the rest of IraLaefsky's review.

Rexdude writes "Apple has filed a patent that forces users to interact with an ad. FTFA: 'Its distinctive feature is a design that doesn't simply invite a user to pay attention to an ad — it also compels attention. The technology can freeze the device until the user clicks a button or answers a test question to demonstrate that he or she has dutifully noticed the commercial message. Because this technology would be embedded in the innermost core of the device, the ads could appear on the screen at any time, no matter what one is doing.'" We've been following this story for awhile now but it seems to have broken into the mainstream.

An anonymous reader writes "Nearly 80 percent of security products fail to perform as intended when first tested and generally require two or more cycles of testing before achieving certification, according to a new ICSA Labs report that details lessons gleaned from testing thousands of security products over 20 years. Across seven product categories core product functionality accounted for 78 percent of initial test failures. For example, an anti-virus product failing to prevent infection and for firewalls or an IPS product not filtering malicious traffic. Rounding out the top three is the startling finding that 44 percent of security products had inherent security problems. Security testing issues range from vulnerabilities that compromise the confidentiality or integrity of the system to random behavior that affects product availability."

In September we discussed one isolated instance of the heirs of rights-holders filing for copyright termination. Now Wired discusses the general case — many copyrights from 1978 and before could come up for grabs in a few years. Some are already in play. "At a time when record labels and, to a lesser extent, music publishers, find themselves in the midst of an unprecedented contraction, the last thing they need is to start losing valuable copyrights to '50s, '60s, '70s and '80s music, much of which still sells as well or better than more recently released fare. Nonetheless, the wheels are already in motion. ... The Eagles plan to file grant termination notices by the end of the year.... 'It's going to happen,' said [an industry lawyer]. 'Just think of what the Eagles are doing when they get back their whole catalog. They don't need a record company now... You'll be able to go to Eagles.com (currently under construction) and get all their songs. They're going to do it; it's coming up.' ...If the labels' best strategy to avoid losing copyright grants or renegotiating them at an extreme disadvantage is the same one they're suing other companies for using, they're in for quite a bumpy — or, rather, an even bumpier — ride."

xploraiswakco writes with the first Microsoft-confirmed Windows 7 zero-day vulnerability, with a demonstration exploit publicly available. The problem is in SMBv2 and SMBv1 and affects Windows 7 and Windows Server 2008 R2, but not Vista, XP, or Windows Server 2003. A maliciously crafted URI could hard-crash affected machines beyond any remedy besides pushing the white button. "Microsoft said it may patch the problem, but didn't spell out a timetable or commit to an out-of-cycle update before the next regularly-scheduled Patch Tuesday of December 8. Instead, the company suggested users block TCP ports 139 and 445 at the firewall." Reader xploraiswakco adds, "As important as this the mentioned article is, it should also be pointed out that any IT staff worth their pay packet should already have port 139 blocked at the firewall, and probably port 445, too."

theodp writes "Thousands of teachers are using websites like Teachers Pay Teachers and We Are Teachers to cash in on a commodity they used to give away, selling lesson plans online for exercises as simple as M&M sorting and as sophisticated as Shakespeare. While some of this extra money is going to buy books and classroom supplies, the new teacher-entrepreneurs are also spending it on dinners out, mortgage payments, credit card bills, vacation travel and even home renovation, raising questions over who owns material developed for public school classrooms."

robotsrule writes "As we discussed last month, RealityServer 3.0 is Nvidia's attempt to bring photo-realistic 3D images to any Internet-connected device, including the likes of Android and iPhone. RealityServer 3.0 pushes the CPU-killing 3D rendering process to a high-power, GPU based, back-end server farm based on Nvidia's Tesla or Quadro architectures. The resulting images are then streamed back to the client device in seconds; such images would normally take hours to compute even on a high-end unassisted workstation. Extreme Tech has up an article containing an interview with product managers from Nvidia and Mental Images, whose iray application is employed in a two-minute video demonstration of near-real-time ray-traced rendering." Once you get to the Extreme Tech site, going to the printable version will help to preserve sanity.

Glyn Moody writes "Last year, we discussed here a Russian plan to install free software in all its schools. Seems things aren't going so well. Funds for the project have been cut back, some of the free software discs already sent out were faulty, and — inevitably — Microsoft has agreed to a 'special price' for Windows XP used in Russian schools."

symbolset writes "Many know the beauty and complexity of the Mandelbrot set. For some years now a few enterprising mathematicians / rendering fiends have been seeking a true 3D Mandelbrot set. A month ago a solution was found, and it is awesome to behold."

At a UN-sponsored Internet Governance Forum in Egypt, anti-censorship group Open Net Initiative was startled by a demand from UN officials to remove a poster mentioning Chinese Net censorship. When ONI refused the request, security personnel arrived and took away the poster. The group was promoting a new book, Access Controlled, a survey of Internet censorship, filtering, and online surveillance. A witness said, "The poster was thrown on the floor and we were told to remove it because of the reference to China and Tibet. We refused, and security guards came and removed it. The incident was witnessed by many." Here is a video of the removal.

theodp writes "In the official record of the historic House debate on overhauling health care, the speeches of many lawmakers echo with remarkable similarities. Often, that was no accident. Statements by more than a dozen lawmakers were ghostwritten by Washington lobbyists working for Genentech. E-mail obtained by the NY Times shows that lobbyists drafted one statement for Democrats and another for Republicans. Genentech, a subsidiary of Swiss drug giant Roche, estimates that 42 House members picked up some of its talking points — 22 Republicans and 20 Democrats, an unusual bipartisan coup for lobbyists. ... The statements were not intended to change the bill, which was not open for much amendment during the debate. They were meant to show bipartisan support for certain provisions, even though the vote on passage generally followed party lines. ... Asked about the Congressional statements, a lobbyist close to Genentech said: 'This happens all the time. There was nothing nefarious about it.'"

oliderid sends along a BBC report on progress toward Europe's home-grown GPS system. The Galileo concept will get an initial test via four "pathfinder" satellites that will be the first in the Galileo constellation. Galileo is intended to be complementary with the US GPS system — when all 30 Galileo birds are flying, a receiver with both GS and Galileo capability should enjoy 1-meter positional accuracy, vs. the several meters available through GPS alone, according to the article. There's a video tour of the facility where the pathfinders are being built. "After all the wrangling, the delays, and the furor over cost, Europe's version of GPS is finally starting to take shape. Due for launch in pairs in late 2010 and early 2011, the 'pathfinders' will form a mini-constellation in the sky. They will transmit the navigation signals that demonstrate the European system can become a reality."

The Installer writes with this excerpt from an Associated Press report: "A couple of genetic testing companies are promising to match couples based on DNA testing, touting the benefits of biological compatibility. The companies claim that a better biological match will mean better sex, less cheating, longer-lasting love and perhaps even healthier children. 'How many dating services can you think of where they can suggest you might have better children?' said Eric Holzle, founder of ScientificMatch.com, one of the first online dating sites to use DNA. ... The idea is that people tend to be attracted to those who have immune system genes that are dissimilar from their own. Biologists say the HLA genes of the immune system — which are responsible for recognizing and marking foreign cells such as viruses so other parts of the immune system can attack them — also determine body odor 'fingerprints.' And people tend to be attracted to the natural body odors of those who have different HLA genes from their own."

jammag writes "Some developers have gone to four-year universities, where they've also studied subjects like history and sociology, while other coders go to vocational schools and focus purely on writing great software. So why, asks a longtime developer, is there a stigma attached to not having a four-year degree, when 'blue collar' coders might be better trained? Why does the software industry keep emphasizing this difference — and generally giving better pay to four-year grads? Isn't being a developer about real skill level, not the piece of paper on the wall?"

badger.foo writes "The Australian rickrolling of jailbroken iPhones only goes to prove that bad passwords are bad for you, Peter Hansteen points out, as he reports on the further exploits of the password-guessing Hail Mary Cloud (which we've discussed in the past). The article contains log data that could indicate that the cloud of distributed, password-guessing hosts is growing. 'With 1767 hosts in the current sample it is likely that we have a cloud of at least several thousand, and most likely no single guessing host in the cloud ever gets around to contacting every host in the target list. The busier your SSH deamon is with normal traffic, the harder it will be to detect the footprint of Hail Mary activity, and likely a lot of this goes undetected.'"