TapCard Skimming

28 May 2011 07:59 by Rick

Yesterday I had my credit card skimmed in a luxury goods shop in Cabot Circus. Credit card skimming is the process used by dodgy waiters and the like to steal the details off your card for use on the black market. It is often done using a small device concealed in the palm of their hand which reads the mag stripe while walking back to the till. This scam is, in fact, dying out as there are much easier ways for the criminals to get numbers in bulk, but it still used by small time crooks.

So, what happened in the shop? They had a skimmer attached to the front of the till – I should point out here that the action of the assistant was not criminal and, I will presume that the retail chain is not either. But they are foolish. Their system requires the credit card number before it will print a receipts. The PDQ chip-and-pin terminal they use for payment is not connected to the till system, and for good reason. They have no legitimate reason to collect and store the credit card numbers. In fact, I can’t imagine what they do with them. If there is a query over the payment (if the card subsequently turns out to be stolen for instance) then the merchant account provider, the people who process the transaction, have all the information necessary to pursue the case.

Larger retailers like supermarkets do have their systems connected together. They are operating as their own merchant provider and communicate directly with the credit card companies but they are then required to meet much more stringent security requirements on their whole system.

So if you see this happening – complain. I only noticed because the mag stripe on my card is faulty (it “accidentally” got too close to a strong magnet) and they had to type the number in by hand. It is also worth while noting the three digit number on the back of your card and then covering it up with a sticker. That will hinder online fraud.

I will report back here if the managing director of the chain concerned replies.

TapI can no more…

23 Apr 2011 09:01 by Rick

The words from near the beginning of Elgar’s Dream of Gerontius (words by Cardinal Newman) sum up Easter Saturday.

Sanctus fortis,
Sanctus Deus,
De profundis oro te,
Miserere,
Judex meus,
Parce mihi,
Domine.

Firmly I believe and truly
God is Three, and God is One;
And I next acknowledge duly
Manhood taken by the Son.
And I trust and hope most fully
In that Manhood crucified;
And each thought and deed unruly
Do to death, as He has died.
Simply to His grace and wholly
Light and life and strength belong.
And I love, supremely, solely,
Him the holy, Him the strong.

Sanctus fortis,
Sanctus Deus,
De profundis oro te,
Miserere,
Judex meus,
Parce mihi,
Domine.

And I hold in veneration,
For the love of Him alone,
Holy Church, as His creation,
And her teachings, as His own.
And I take with joy whatever
Now besets me, pain or fear,
And with a strong will I sever
All the ties which bind me here.
Adoration aye be given,
With and through the angelic host,
To the God of earth and heaven,
Father, Son and Holy Ghost.

Sanctus fortis,
Sanctus Deus,
De profundis, oro te,
Miserere,
Judex meus,
Mortis in discrimine.

I can no more; for now it comes again,
That sense of ruin, which is worse than pain,
That masterful negation and collapse
Of all that makes me man.

…And, crueller still,
A fierce and restless fright begins to fill
The mansion of my soul. And worse, and worse,
Some bodily form of ill
Floats on the wind, with many a loathsome curse
Tainting the hallowed air, and laughs, and flaps
Its hideous wings
And makes me wild with horror and dismay.

O Jesu, help! pray for me, Mary, pray!
Some Angel, Jesu! such as came to Thee
In Thine own agony…

Mary, pray for me. Joseph, pray for me.
Mary, pray for me.

TapNeoOffice is no longer free

20 Apr 2011 10:45 by Rick

NeoOffice is a fork of the well known office suite OpenOffice.org customised for Mac OS X. When it was created there was no Mac version of OpenOffice and even when I started three years ago, the Mac support for OpenOffice was very poor. There have always been licence anomalies between the two versions—OpenOffice is LGPL and requires a copyright assignment for contributions to the main code. NeoOffice were not prepared to do this so their code is licensed under full GPL and is not retrofitted.

Up until now, it has always been free at source with a recommendation/plea for donations to support the work, which I have done at least once. Now, since Version 3.2, the “donation” is mandatory—you can’t download the code unless you have donated at least $10US within the last year.

Times have changed—it now requires Mac OS X 10.5+ and Intel hardware which must kill off a sizeable proportion of their customer base. Also OpenOffice and now LibreOffice are much more capable. Finally, if you must pay for it, the iWorks components are much more affordable and also offer cross format capabilities.

TapGet your Bus Season Tickets NOW!

13 Apr 2011 09:04 by Rick

This applies to FirstBus Bristol. There are two reasons.

  1. FirstBus are running a promotion from April 10th to 23rd where they have reduced the Weekly and Monthly season tickets (Zones 1 & 2) to £16 and £64 respectively. In both cases this is lower than the annual season ticket (£810) when pro-rated. Get as many as you can afford because they can be purchased in advance and not activated until first use.
  2. FirstBus have yet to respond to the recent massive rise in fuel costs. History suggests that they always pass this on in increased fares.

TapProud

11 Feb 2011 22:44 by Rick

by Fat + Frantic—another song with no lyrics on the internet.

Words by Jim Harris

Sung as angry and fast as possible to a 2/4 beat accompanied by guitar and spoons.

Be Proud you are English, boy, be proud you are white,
Be proud you’re a man, be proud that men are always right.
Be proud you are comfortable and smartly dressed and clean,
Be proud that you are all the things you’re ancestors have been.

Oh boy, be proud that you are tolerant, be proud that you are nice,
Be proud you’re vaguely liberal, be proud you don’t think twice.
Be proud of your education, I am proud of mine,
Be proud that you have got a job and don’t stand on the line.

Chorus: Oh boy, but I am proud of nothing when I see God’s children cry,
When I see God’s children hungry, when I see the cities die,
When I see God’s children told they are not God’s because they’re black,
People say “I love you, God,” and then “push off” behind his back.

Be proud of you’re arrogance, be proud of your spite,
Be proud of you’re brutality, be proud of well armed might.
Be proud of your hypocrisy, the things you never said,
Be proud that you are still alive when half the world is nearly dead.

Chorus

But I am proud of Jesus, I am proud that he loves me,
I am proud that Jesus lived and died to set the people free,
I am proud of Jesus’ passion, I am proud of Jesus’ rage,
I am proud that he is shouting at this evil, godless age.

I am proud when people fight for Jesus’ justice and shalom,
I am proud when people rise at the oppression of the bomb,
I am proud that in South Africa and in El Salvador,
Jesus’ righteousness is frightening the oppressors more and more.

Chorus

But I am proud of Jesus, I am proud that he loves me,
I am proud that Jesus lived and died to set the people free,
I am proud that in South Africa and in El Salvador,
Jesus’ righteousness is frightening the oppressors more and more.
My Jesus’ righteousness is frightening the oppressors more and more.

TapHow incompetent can a software company be

10 Feb 2011 09:15 by Rick

I mean, of course, Adobe. I have written before about the hoops you need to go through to get copies of their critical security upgrades for the Flash products. Now they have cut off one of the little ruses I used so that it is now no longer possible to download the upgrade for Internet Explorer. All you get is flashax.exe, which is self deleting as soon as you run it (how stupid is that) and only runs an “Adobe Installation Helper” which downloads and runs the real product. Not a lot of help if you are not connected to the internet at the time. One of my systems will not be upgraded this time around because it can’t due to a firewall—perhaps I should sue for consequent damage when it gets infected.

Now all this fiddling about would perhaps make sense if the product was hundreds of MB and a download needed to continue if interrupted. But it is 2.7MB and takes a few seconds to download and a few more to install. What we want is an upgrade that we can download and save to run later and one that does all situations in one go – not separate for IE and other browsers.

[12 Feb—they’ve fixed it now]

TapVolume Levelling and Replay Gain

4 Feb 2011 13:38 by Rick

Ever since recording began there has always been the problem of varying volume levels—with a big horn gramophone you sat closer, with record players you kept getting up to adjust the volume. Sometimes this was the fault of lazy recording engineers but often it was inherent in the media; the peaks had to be limited to avoid clipping (or worse on vinyl) whilst still maintaining a respectable amplitude bandwidth. With digital media there should have been a solution at source. The bandwidth stretches below the threshold of hearing but recordings are usually made with the peak just a few dB off the maximum. The impact of this is that recordings with a wide dynamic range such as acoustic and classical music sound very quiet when compared to highly compressed pop music (compressing pop is an issue for another time).

DJs learn to “ride the fader” to keep the apparent volume steady over a session. At home we have to resort to the remote, but there is a solution with media that you have control over—or at least there should be. Digital formats such as MP3, WMA, Flac and AAC have developed mechanisms to adjust the decoder output to a user defined level. A good description of the technique is described on the MediaMonkey FAQ pages (scroll down to the last chapter).

The three different methods are

1. Recode the audio to the level you require; this is potentially destructive as information (and hence quality) is lost each time you do it and it is not reversible so few systems employ this method.

2. Code the reference level on each audio frame so that standard decoders can interpret them. This is the method used by MP3gain and MediaMonkey “Level Playback Volume” and is the most universally successful. However there is some doubt over whether it is truly reversible without loss. It is also not possible with files protected by rights management (DRM).

3. Code the adjustment required in the metadata without touching the audio stream. This truly does not lose any information but requires support from the player to interpret the tags. It is supported, amongst others by WMP “Volume Levelling”, MediaMonkey “Analyze Volume” and iTunes “Sound Check” and by players to varying degrees.

The way they all calculate what adjustment to make goes by the grand name of Psychoacoustic Analysis to judge how loud the listener perceives the music to be. The two ways to do this are by track, what used to be called “Radio Levelling” and is what you would want if you were a DJ or playing a party mix; and by album which used to be called “Audiophile Levelling.” This preserves the relative volume of the tracks on an album to respect the artist/engineer’s requirements and is what you would want if listening to a symphony with each movement as a separate track.

The problem

The definition of many of the metadata tags for method 3 are not standardised, particularly for the most common format—MP3. Different encoders do it in different ways which means that players have to decide which, if any they support. This is partly as a consequence of multiple independent tagging systems.

Replay Gain

The first format to adopt what it called Replay Gain was Flac (Ogg Vorbis) and that is (nearly) standardised using the tags REPLAYGAIN_TRACK_PEAK, REPLAYGAIN_TRACK_GAIN & REPLAYGAIN_ALBUM_GAIN. There is also a REPLAYGAIN_ALBUM_PEAK which most encoders ignore. The loose point in the standard is that it specifies a reference volume of 83dB above the threshold of hearing whereas everyone now accepts (and implements) 89dB as a better level to avoid stretching the analogue amplification too far. The technical description for the standard proposed is

…the ReplayGain tags stored in the files are 6dB above the gain adjustments required to make the files “sound as loud” as a -20dB RMS pink noise signal when replayed in an SMPTE RP 200 calibrated system. The -20dB RMS pink noise signal will measure 83dB [89dB] SPL at the listener’s seat in such a system.

http://www.hydrogenaudio.org/forums/lofiversion/index.php/t83397.html

Encoder/Taggers such as MediaMonkey also use these as sub-tags of the TXXX {user defined text information} ID3v2 tag in MP3 files. They have the advantage that they are easy to read.

Windows Media Player

It is predictable that the proprietary organisations should do it differently. “Volume Levelling” has a system for its own WMA format using PeakValue and AverageLevel tags (these are “track gain” only) which it also uses to code MP3 files as sub-tags of the PRIV {Private} ID3v2 tag. It is coded in binary. I have seen reported elsewhere on the internet that WMP uses WM/WMADRCAverageReference, WM/WMADRCPeakReference, WM/WMADRCAverageTarget, and WM/WMADRCPeakTarget tags but I can’t find evidence for this in my files. What ever it does, WMP does it very slowly just like its collection of other meta data.

Apple iTunes

“Sound Check” is different again. I can’t analyse AAC files as I can’t find a structure definition document but for MP3 files it writes an iTunNORM sub-tag of the COMM {Comment} ID3v2 tag. There are 40 bytes of binary data in there but what they mean I haven’t discovered.

LAME

Surprisingly, this very popular public domain encoder also uses a unique system called the MP3 INFO tag. Replay Gain uses bytes 167-174 (not 175 as the documentation says) of the tag coded in binary—Track Peak Amplitude (4 bytes floating point), Track Gain (2 bytes), Album Gain (2 bytes). The format of the latter two is as follows—3 bits; type code, 000=Not Set, 001=Track, 010=Album. 3 bits originator code; 000=Unspecified, 001=set by producer, 010=set by user, 011=calculated automatically. 1 bit: sign. 9 bits; value * 10.

RGAD

As well as the Vorbis type tags, MediaMonkey also writes an MP3 ID3v2 tag called RGAD {Replay gain adjustment} with 8 bytes of data supporting both track and album gain and I think there was some intention to get this standardised but I see no sign of it. The format (inside the tag) is the same as the LAME data described above.

What now

My immediate requirement is for my Sonos system to play at the correct volume. Sonos supports WMP tags for WMA & MP3, iTunes tags for AAC & MP3 and the standard tags in Flac files. It only supports “track gain” (and, as I have discovered by experiment, only supports negative values, so it will lower the volume but not raise it). What I require is “album gain” on Flac and MP3 files not written by the proprietary systems. What I need is a method to write either iTunes or WMP type tags based on the MediaMonkey ones. As a start I am working on a MediaMonkey plugin that first saves the “track gain” in a custom field for safety then copies the “volume gain” to the “track gain” field to fool the player into supporting audiophile mode. To do the rest of the job I will need to discover what the binary means in the WMP or iTunes tags.

[Edited 4 Jan 2012] to add information obtained from ReplayGain legacy metadata formats (with thanks).

TapThe Word of the Lord

1 Feb 2011 23:31 by Rick

Lyrics by Stephen Schwartz, Music by Leonard Bernstein

You can hear (and see) it sung here—the song is in English despite the narrative being in German.

You can lock up the bold men.
Go and lock up your bold men and hold them in tow.
You can stifle all adventure for a century or so.

Smother hope before it is risen,
watch it wizen like a gourd,
but you cannot imprison the Word of the Lord.
No, you cannot imprison the Word of the Lord.

For the Word,
for the Word was at the birth of the beginning,
it made the heavens and the earth and set them spinning.
And for several million years,
it withstood all our quorums and fine ideas.
It’s been rough,
it’s been rough but it appears to be winning.

There are people who doubt it.
There are people who doubt it and shout it out loud.
There are local, vocal, yokels who we know collect a crowd.

They can fashion a rebuttal that’s a subtle as a sword,
but they’re never going to scuttle the Word of the Lord.
No, they’re never going to scuttle the Word of the Lord.

All you big men of merit,
all you big men of merit who ferret out flaws,
you rely on our compliance with your science and your laws.

Find a freedom to demolish while you polish some award,
but you cannot abolish the Word of the Lord.
No you cannot abolish the Word of the Lord.

For the Word,
for the Word created mud and got it going.
It filled our empty brains with blood and set it flowing.
And for thousands of regimes,
it endured all our follies and fancy schemes.
It’s been tough,
it’s been tough and yet it seems to be growing.

Oh you people of power,
oh you people of power, your power is now.
You may plan to go forever but you never do somehow.

So you wait in silent treason until reason is restored,
and we wait for the season of the Word of the Lord.
We await the season of the Word of the Lord.

We wait,
we wait for the Word of the Lord.

I hope that is right, I wasn’t sure about a couple of words. I was working from the 1971 recording, I hear that the newer one on the video is slightly different.

TapAn’ damn’d Excise-men in a bussle

18 Jan 2011 17:48 by Rick

All the talk this morning is about the cost of alcohol and I wondered how the tax is calculated—it is complicated. The quote in the title is to reflect that it is close to Burns Night and we are not able to get to the dinner 🙁

The general principle is that the tax (excise duty) on beer and spirits is based on the alcohol content—which makes sense. The duty on all other drinks is charged at various different flat rates—which doesn’t. The reasons are largely political. Here is a simplified table with the current rates…

Beer 17.32p/Ltr/%Alc
Still cider 1.2%–7.5% 33.46p/Ltr
Still cider 7.5%–8.5% 54.04p/Ltr
Sparkling cider 1.2%–5.5% 33.46p/Ltr
Wine & alcopops 1.2%–4% 69.32p/Ltr
Wine & alcopops 4%–5.5% 95.33p/Ltr
Still wine & alcopops 5.5%–15% 225.00p/Ltr
Sparkling wine, cider & alcopops 5.5%–8.5% 217.83p/Ltr
Sparkling Wine & alcopops 8.5%–15% 288.20p/Ltr
Wine & alcopops 15%–22% 299.97p/Ltr
Wine & alcopops >22%, spirits, all spirit based alcopops 23.80p/Ltr/%Alc

This duty is charged at source to the manufacturer. On top of this VAT, currently 20%, is charged on the retail sale price.

So lets do some examples (the minimum price assumes that it costs nothing to manufacture & ship and the end customer pays all the tax).

3.5% beer—duty 34.5p per pint—Minimum over the counter price 42p
Flandres 2.6% gnats—duty 11p per 250ml bottle—Minimum price 14p
Special Brew 9% fighting juice—duty 78p per 500ml can ==> Minimum price 94p
A nice 14.5% Rioja—duty £1.69 per 75cl bottle—Minimum price £2.03
Budget 30% vodka—duty £5 per 70cl bottle—Minimum price £6.00
Bacardi 151 death wish—duty £17.97 per litre—Minimum price £21.56

The news today was that there should be a minimum retail price for beer set at 21p per unit of alcohol (1% in 1 litre) and spirits at 28p per unit. With the same examples as above we get

3.5% beer—pint—Minimum over the counter price 42p
Flandres 2.6% gnats—250ml bottle—Minimum price 14p (costs 28p in Sainsbury’s)
Special Brew 9% fighting juice—500ml can ==> Minimum price 95p (£1.57 in Sainsbury’s)
A nice 14.5% Rioja—75cl bottle—Minimum price £2.28 (assuming the beer rate)
Budget 30% vodka—70cl bottle—Minimum price £5.88
Bacardi 151 death wish—litre—Minimum price £21.14

i.e. identical for beer and close for spirits. When there was a big fuss about this last summer I did see basic lager on sale for less than 50p per litre. 3% lager would now be at least 63p.

TapSkype Newsletter?

12 Jan 2011 12:47 by Rick

If you see an email announcing itself as from “Skype Newsletter”, check very carefully. Most, if not all of these are bogus. They are spammers trying to get your login details and maybe get you to pay for an upgrade to a free product or install malware on your system.

^ Top