Still going after all these years.
Boing Boing: Free Stanford course on surveillance law. Now I know what I’ll be doing in my spare time this month, and you should too.
At last month’s inaugural Black Hat Executive Summit, I learned a few things that surprised me about how existing US law applies to “cyber,” and I expect to continue to be surprised by this course. Probably unpleasantly, but who knows?
Happy New Year!
We went a little nuts yesterday and made Melissa Clark’s “modern timpano” for our New Years Eve dinner. Did it go well? Well, aside from taking more like five hours, and the pasta covering being pretty inedible, I’d say yes. The inside was delicious, though not much like the Stanley Tucci inspired dish it’s named after (and check Tucci’s feedback on that in the recipe comments!).
You can see what it looks like fresh out of the pan above, and served up below.
And the New Year begins, lazy, as we polish off leftovers for lunch – not a hardship when it’s leftover duck and shrimp gumbo – and think do I really want to cook that Hoppin John analog today? Well, yes, since I went to the trouble of mail ordering the Sea Island red peas from Anson Mills and they’re soaking in the fridge.
But for now it’s just a pleasure to sit and enjoy the quiet.
Bored with Tufte? Looking for new horizons in data visualization? Bunky, look no farther than FiveThirtyEight’s “47 weirdest charts of 2015.” Including a pictographic of a marijuana leaf, multiple uses of lifeline charts and some stuff that must make Edward Tufte hold his head and groan, like the Twitter visualization above.
I miss writing here. I write a lot on Facebook, some on Twitter, and a few things on my company’s blog. But it’s very rare that I write anything under my own name any more.
My New Year’s resolution is to change that. Gonna see if I can write something every (week) day here. Starting with today’s post (which could have gone on my company’s blog) but hopefully with a broader focus as time goes on. Let’s see how we do!
Springer has published a bunch of its books online for free. (Hundreds more were free until this morning but the plug has been pulled.) I went looking to see what I could find. There are some interesting finds there, including a festschrift for Ted Nelson, the inventor of hypertext. And, relevant to my work interests, a text called The Infosec Handbook.
What’s that, you say? A free textbook on information security? Sign me up! Well, not so fast, pilgrim.
Admittedly, I come to the topic of information security with a very narrow perspective—a pretty tight focus on application security. But within that topic I think I’ve earned the right to cast a jaundiced eye on new offerings, as I’m going to celebrate my eighth year at Veracode next month. And I’m a little disappointed in this aspect of the book.
Why? Simple answer: it’s not practical. The authors (Umesh Hodeghatta Rao and Umesha Nayak) spend an entire chapter discussing various classes of threats, trying to provide a theoretical framework for application security considerations, and discussing in the most general terms the importance of a secure development lifecycle. But the SDLC discussion includes exactly one mention of testing, to wit, in the writeup of Figure 6-2: “Have strong testing.” And an accompanying note: “Similarly, testing should not only focus on what is expected to be done by the application but also what it should not do.”
Really?
It’s pretty widely understood in the industry that “focus(ing) on what is expected” and “[focusing] on what [the application] should not do” are two completely different skill sets and that even telling a functional tester what to look for does not ensure that they can find security vulnerabilities. The problem has been well known for so long that we’re nine years into the lifespan of the definitive work on the subject, Wysopal et al’s The Art of Application Security Testing. But there’s no acknowledgment of any of the challenges raised by that book, including most notably the need to deploy automated security testing to ensure that vulnerabilities aren’t lurking in the software.
As for the “eight characteristics” that supposedly ensure that an application is secure, take a look at the list for yourself:
Really? Nothing about availability. Nothing about authorization (determining whether a user should be allowed to access information or execute functionality). Nothing about guarding against unintended leakage of application metadata, such as errors, identifying information, or implementation details that an attacker could use. And nothing about ensuring that a developer didn’t include malicious or unintended functionality.
The chapter also includes no mention of technologies that can be deployed against application attacks, though this may be a blessing in disguise given the poor track record of web application firewalls and the nascent state of runtime application self-protection technology.
All in all, if this is what passes for “state of the art” in a security curriculum from the second biggest textbook publisher in the world, I’m sort of relieved that information security isn’t a required curriculum in a lot of CS programs. It might be better to learn about application security in particular from a source like OWASP, SANS, or your favorite blog than to read a text as shallow as this.
In the course of listening to all the music in my iTunes library at least twice (a multi-year project!), this morning I came across Arvo Pärt’s 1991 album Miserere. It’s a touchpoint for me—it was the first album of his music I ever bought, probably the first Hilliard Ensemble album I ever got, and one of the first albums of modern classical music I ever bought. (I think the first modern classical album I bought was the Kronos Quartet’s Black Angels.)
As I listened to it, I remember being simultaneously profoundly moved and confused by the third track, “Sarah was ninety years old,” scored for three voices, percussion, and organ. The piece begins in contemplative solo percussion, which gradually picks up intensity until the first vocal entrance, then repeats, until finally the long stretches are ended by the entrance of an organ and a soprano solo that spirals up into ecstasy (as Sarah conceives and bears a son at the age of 90).
Something that had puzzled me from my first listen was just exactly how it was that the percussion didn’t drive me nuts. The percussion consists of four-beat patterns of high and low tones, continuing initially for over five minutes before voices enter. How does it pull the listener in?
I think I figured it out listening to it this morning. Turns out, it’s math. The percussion part runs through permutations of three low tones and one high tone, with varying repetitions. So the first section goes:
And then it repeats, but now each permutation is only repeated three times. Then two. Then one repetition of each permutation, at high urgency and with a fierce percussive attack.
Then: the voices arrive.
And we realize that we have been counting the repetitions and that our breath has been quickening in anticipation of what happens when the pattern ends.
The work is literally minimalistic, but it’s also highly meditative. I don’t think anyone online has specifically written about how Pärt creates this effect, so I figured I’d share.
Enjoy!
It’s been some time since I’ve posted any narrative about my work researching the history of the Virginia Glee Club. That’s honestly because a lot of it has been fairly uninspiring heavy lifting: looking up death dates of alumni from the 1930s, transcribing rosters from bad photocopies of Corks and Curls, and so on. But this week, as I tried to put some narrative around the first decade of the Glee Club’s history (which for this purpose we’ll describe as 1871 to 1880), I ran into another one of those interesting corners that pops up from time to time.
This time the question that I found myself asking was: what were all the musical students at the University of Virginia doing between the demise of the Claribel Club in 1875 and the coming of Woodrow Wilson’s incarnation of Glee Club in 1879?
Turns out, they were putting on minstrel shows.
To summarize: between 1876 and 1878, the Virginia University Magazine published notes about three different minstrel performances. The first note, published in October 1876, noted that some students intended to form a “negro minstrel troup” to perform for the local audience and also for the “young ladies, orphans and lunatics” of Staunton, Virginia. The following year, we are told that a “repetition with slight variations of the long-to-be remembered minstrel performance of last year” will be held in the Town Hall, for the benefit of the Rives Boat Club. (The Town Hall, later known as the Levy Opera House, would be the site of a Glee Club performance in 1894; the Rives Boat Club was in existence at least through 1889 and appears to be the distant forerunner of UVa’s crew team.) In 1878, the performance returned and once again benefited the Rives, though the Magazine noted that attendance had fallen off the previous year. There is no mention of a show in the years following, during which the Glee Club returned, though there is evidence, in the form of a program, that a troupe re-formed and performed in 1886 or 1887.
This isn’t the first time we’ve bumped up against minstrel traditions in researching the history of the Glee Club, and it likely won’t be the last. But it’s fascinating to me to see how the threads intertwine, and see the Glee Club in a larger context. That 1886 program lists Glee Club president Sterling Galt as one of the performers in the minstrel program, along with J.R.A. Hobson and W.P. Brickell.
I’ve looked for minstrel troupe programs in the library catalog; while the 1886 program is there, there’s no record of the 1870s performances—they may have been lost in the Rotunda fire. But I hope to find more information about the performances some day. The dividing line between outright minstrelry and the banjo and mandolin performances—and membership—of the Glee Club appears to be pretty faint. Understanding the complexity of the interplay between Southern culture, race, and music in the formation of the early group provides a fascinating glimpse into student life in the dawn of the Glee Club’s years.
Midsummer, so time for another mix. At some point I’ll break this meta-thing I have where the mix starts out party and ends up somber, but this will not be the mix to break the pattern.
A few track notes in line below.
Thanks to Tyler, I’m spending the morning listening to archival folk music recordings and grinning from ear to ear.
I’ve written about cousin Bascom Lamar Lunsford before. In the years since the CD reissue of the Anthology of American Folk Music, which features several of his songs, quite a few folk artists have approached his tunes anew, with varying levels of success (check out Frank Fairfield’s version of “I Wish I Was a Mole in the Ground“). But nothing’s like the real thing.
So I was thrilled to get a link from Tyler on Facebook pointing me to the digital archives at Berea College with a collection of forty-two Bascom Lamar Lunsford archival recordings, plus a few large group songs and a newsreel, available for free listening and download. The quality of the recordings, made for Columbia University in 1935 and archived by Berea, isn’t great — there’s reel-to-reel noise on most of them, and the otherwise revelatory performance of “Mole in the Ground” is marred by uneven recording or playback, leading the pitch to wander all over. But hey–free Bascom Lamar Lunsford! Go listen!
More reading: a Bascom Lamar Lunsford/University of Virginia/Virginia Glee Club connection.
Listen: “Swannanoa Tunnel” by Bascom Lamar Lunsford from the Berea archive
Boston Globe: Tanglewood chorus director Oliver to step down.
I auditioned for the Tanglewood Festival Chorus almost ten years ago. In that audition, I showed my lack of symphony and opera experience by singing a work by Landini — a good audition piece for an early music ensemble, woefully out of place for a symphony chorus. But John Oliver took a risk on what he heard and invited me to join the chorus. And he let me continue to participate through travel, at least one blown reaudition, and the appearance in the chorus of many other more qualified singers.
In the process, he has taught me a great deal as a singer, including:
There is much to be said for John’s tenure as founder and director of the TFC, and I’ll write it someday. For today, I’ll just note my gratitude for this acerbic, demanding, opinionated… and secretly generous man, and for what he taught me as a singer.
It’s another new year, another mix. As always, this is no more or less than what happened to be kicking around my iTunes for a long period of time, so I make no claim for it hanging together. Except I’m kinda happy about the string of tracks from #2 through #13 and parts of the last stretch.
Some track specific notes:
“Papa’s Got a Brand New Bag”: Yes, yes he does. You can’t have this track, with James Brown yelling out “This is a hit!”, in a playlist and not have it leading off.
“Rotating Head (raga version)”: A tabla-heavy remix of a song most familiar from the “Ferris Bueller” soundtrack, this picks up the groove from Track #1 and takes it into…
“Seen and Not Seen”: Groove city. Check the way the handclaps, bass, and guitar work together. Much like the way the next groove builds…
“Autumn Sweater”: Here the groove is all drums and bass, especially bass. Love what James McNew does with the bassline during the break here.
“Electricity”: A break from the groove for a guitar based rocker. I had forgotten this album until Shuffle brought it back to me. A great track.
“Masanga”: An obscurity, this popped up on a compilation of sub-Saharan guitar that I found on Bandcamp over a year ago. I love the purely guitar driven groove. Seriously propulsive and fun.
“I Love This Life”: Also propulsive and fun, but almost all synths, I slept on this track from The Blue Nile for a long time. I’m not sure what “ragtown” meant to Paul Buchanan, but when I listen to this track I feel like I understand.
“The Statue Got Me High”: A non-sequitur but a fun one, and a great singalong.
“Mod Lang”: Gee, there’s a “groove” theme going on on this mix, which is unusual for me. I love how Chilton takes a handful of lyrics that are almost nonsense and weaves them into urgency.
“Courage”: A PG rarity that was released alongside the 25th anniversary reissue of So a few years back. Too lyrically heavy and overtly structured a song to fit comfortably on that album, I don’t know if it works well here either but I couldn’t cut it.
“Rain”: Groove, man. Complete with the backward bit at the end.
“JC”: Shift of tone to a minor key with a fair amount of distortion.
“After the Flood”: This track is the still heart of this mix. I stumbled across Talk Talk by accident, more or less, thought they had been on my list of bands to find for a long time thanks to the late lamented Lists of Bests. This is an incredible track, building from almost inaudibility up through some killer organ work into a long burn of a distortion guitar solo. I have listened to this one for days at a time.
“Try Not to Breathe”: Taking a breath, this is a song I didn’t think so much of until I was recovering from surgery a year ago. Then it made a lot of sense.
“No Love Lost”: The rare Joy Division song I like more as an instrumental, but there’s still something compelling in Ian Curtis’s delivery here.
“Lick the Palm of the Burning Handshake”: Boy, Nika can really do apocalyptic, can’t she? Even if we don’t totally understand what she’s singing about.
“Svatba”: The transition from Nika’s wordless outro to “Lick the Palm” into the Bulgarian voices here was a happy shuffle accident.
“Accordion”: Another happy accident, another supremely bizarre rap from MF Doom.
“Super Mario”: Well, as long as we’re doing bizarre, I figure an a cappella version of an 8 bit videogame theme qualifies.
“Gallows Pole”: If there’s a theme wending through the back half of this, it might be covers vs. authenticity. The ballad, which started out as “The Maid Freed from the Gallows” in the Child ballads before being recorded as “The Gallis Pole” by Lead Belly, is colored by Plant’s rock god delivery until it’s hard to tell at the end who is swinging from the gallows pole, and whether the pole is literal or metaphoric. A neat trick.
“Tall Trees in Georgia”: Again, covers and authenticity. When Eva Cassidy was alive, she was lauded as a vocalist but not so much as an authentic jazz talent (I remember one review saying “She even covers Buffy Ste Marie!”). It’s a moving performance nonetheless.
“They Won’t Let Me Run”: A beautiful groove for an ugly story.
“Holocene”: Was totally obsessed with this song for about 18 months.
“Let It Down”: Tension release necessary after the last few tracks.
“Rill Rill”: Speaking of authenticity, how about copping “Can You Get to That?” for this song about teenage girl angst? Well, yeah, and it works, so the hell with authenticity.
“(Won’t We Have a Time) When We Get Over Yonder”: Another Bandcamp find, this one is a different kind of groove entirely, almost an incantation until one of the Jordan River Singers slips over completely into a Spirit induced holler. And that leads to…
“The Times They Are A Changin’”: I was disappointed with the rest of this album only because it doesn’t live up to its title the way this lead off track does. “Times” is truly one of Dylan’s most gospel-like songs to begin with, and this version pulls out all the revival stops. A fantastic cover.
This year marked the 74th annual Christmas concerts of the Virginia Glee Club. Started during wartime in 1941 by Glee Club conductor Harry Rogers Pratt and continued through to the present day without interruption, this concert series has been the longest running musical tradition at the University of Virginia. I thought I’d look back and see what we know about these concerts and their evolution.
The first Glee Club Christmas concert was held in 1941 under the direction of Harry Rogers Pratt. We don’t have any documentary evidence of this concert; somehow no one associated with the University saved the program, at least not that we’ve found. But we have a College Topics (forerunner of the Cavalier Daily) article documenting the existence of the second concert, in 1942. The concert was to include a procession down the Lawn, “several Wassail songs,” and an audience singalong.
The 1942 concert was Pratt’s last performance as Glee Club director; he resigned the following spring to focus on war efforts. His successor, Stephen Tuttle, continued the tradition during wartime and arguably made the Glee Club Christmas concert what it is today, with a mix of audience carols, familiar and new holiday music, and interesting collaborations. We have the program from the 1943 concert, and it’s interesting reading. Arguably a little heavy on Holst and Bach, there are a few jewels among the items chosen, including a Tuttle arrangement of the Spanish carol “Hasten, Shepherds” that would show up performed by the Virginia Gentlemen in the 1967 Christmas performances. While composer and music department head Randall Thompson was accompanist for the performances, none of his works were programmed; that would change in years to come.
The other noteworthy thing about the 1943 performance is the inclusion of the Madrigal Group. Comprised of women associated with the University community, this group of thirteen women appears to have been UVa’s first women’s chorus! (I previously wrote about the Madrigal Group in 2011; sadly nothing came of my appeal for information.)
We don’t have a program from 1944, but the performance is attested in College Topics, including a roster of the Madrigal Group (which included a few members who had sung in 1943). 1945 continues in much the same vein, including a performance of Randall Thompson’s Alleluia (first performed by the Glee Club in its fall concerts that year).
The postwar years saw a massive swell of membership in the Glee Club, but the Christmas Concert formula remained remarkably stable, albeit with one major change, the departure of the Madrigal Group — there’s no attestation of the group’s existence after Christmas 1945 (save for a brief revival of the name in 1957). Over time, as Tuttle’s tenure in the directorship lengthened, his influence on the repertoire increased, with Renaissance composers like Orlando di Lasso and Josquin appearing alongside the customary Bach in 1947. This concert was also the oldest for which a recording survives, according to the UVA Special Collections library.
In 1948, during Tuttle’s Harvard sabbatical, Henry Morgan stepped in and delivered a fine entry in the canon, with a program that differed in specifics (a new Peter Warlock carol, a new carol by Morgan himself) but overall fit the general formula that was by now well established. I don’t have the 1949 program in the Glee Club archives, but 1950 continued along the same track, with new carols (“How Still and Tiny,” a Polish carol, makes its first appearance this year) joining the well established English and French numbers.
In the first ten years, the formula for the Virginia Glee Club Christmas Concert was well established: audience carols, familiar and unfamiliar tunes, larger works, guest groups, and lots of reflective holiday works. That you could take any of these programs from the first ten years and perform them without modification today suggests the longevity of the formula, and helps to drive home why these concerts became an annual tradition.
Thanks to the horrific article in Rolling Stone detailing the alleged gang rape of a University of Virginia student at Phi Kappa Psi, I’ve been thinking a lot about my alma mater this week. As part of that, I’ve revisited a piece I wrote in 2011 about the song used as a framing device for the article, “From Rugby Road to Vinegar Hill.” I spent some more time thinking about the piece last night after my Virginia Glee Club Wiki article about the song was linked from the New York Times yesterday.
Late last week, the current president of the Virginia Glee Club announced that he had taken an executive action to ban the performance of the song during his presidency. Left unreported in the Cavalier Daily article was the fact that he had also called for a vote of the membership to consider a permanent ban on the song; the ban was instead reported as “temporary,” prompting a storm of comments accusing the president of disingenuity or worse.
I wrote a letter to the president of Club and to other Club alumni last night about the issue and my thoughts regarding the prospect of a permanent. On reflection, I’m opening up the letter to a broader audience. I welcome reasoned discussion in the comments or elsewhere.
I have long jokingly said that those who criticize “Rugby Road” for sexism miss the point, since the first stanza celebrates the sort of conflict between faculty and student that led to the murder of John A.G. Davis by a rioting student. But of course, Davis’s shooting in 1842 led to a very public examination of the issues of student behavior, lawlessness, and entitlement that led to the tragedy, and to major changes in the course of the University’s history. By contrast, the issues raised in the second stanza, to say nothing of the apocryphal subsequent stanzas, are just now being publicly examined by the entire University community. This may well be this generation’s equivalent of the John A. G. Davis moment.My feelings as an alum? By the time I came along, “Rugby Road” was only performed after midnight at the Clubhouse – we knew it wasn’t made for daylight. While there is a case to be made for celebrating history and for songs of revelry, my personal belief is that times have changed and the time for this song has passed. I am usually one to argue for preserving tradition, but not now. I am glad you retired the song; as a Club alum and the brother of a Women’s Chorus alumna, I hope it stays retired.That said, the thing that makes me most proud of you guys and that gives me most hope for the University is that fact that you acted as a student leader, and not on the orders of an administrator or faculty advisor, to retire the song. The culture of self governance that grew from the tragedy in 1842 can still act in positive ways. Indeed, it is the only possible force for long term changes to student behavior. Thanks for showing that it still works.
When I wrote about our most distinguished neighborhood house, the Parker-Morrell-Dana house, I compared a modern day photo to an 1865 one from Lexington’s Cary Library and evinced surprise at the large number of alterations, including changing Doric to Ionic columns and changing the shape of the parapet windows. How, I asked, had the local historic district permitted such alterations?
Of course, they didn’t. The library had mislabled a photo of the Stone Building as being the Parker-Morell-Dana house. In retrospect, the giveaways were obvious, and I probably would have caught it myself if I had used the modern day shot of the Stone Building below, rather than the front facade shot that I used instead.
But that’s the Stone Building. The Parker-Morrell-Dana House is something else again. Here’s an undated print of the front of the house, courtesy the Cary Library (again).
In this picture — probably not from 1865 — you can see all the features that were present in my modern day photo, including the Ionic portico, the conventional square windows, and even the brick sides of the house (if you look very closely. You can also see one of my favorite features: the elongated window frames, made to look as if the facade had triple sashed windows like the ones on Jefferson’s Pavilions at the University of Virginia. But the bottom third inside the frame is just regular siding.
So anyway, that’s the story of how a mislabeled photograph led me astray. As they say, we regret the error.
The historic survey form from the 1970s has more information about the house and its history.
Update: Just heard from the library and they’re correcting the exhibit.
One of the big surprises of our new place (well, not so new any more — we’ve been here almost three months) was that it was in a neighborhood. A very old neighborhood, established almost 200 years ago. As I wrote in my last post about the house, there’s been a house in this location for almost 300 years. There was building all around this area then, but it really got going in the early 19th century.
About 120 years after the old Robbins house was built where our place now stands, the Follen Church Society called their first minister, and built their unique octagonal church building four years later, in 1839. The Follen Church feels like the center of this little village here in East Lexington. The bells chime every hour. And all the other civic buildings are spread out around it.
Yes, civic buildings. And the Follen Church isn’t even the second oldest one. There are a little cluster of them here, or not far from here. Fire station, a little further up the road. Then there’s…
Originally the Adams School, this is the second school building in and around this site. The original Adams School building, dating to 1890, was just across the street where a parking lot now stands. The “new” building, constructed in 1912, has been home to the Waldorf School of Lexington since 1980. The school stands far back from Massachusetts Avenue, just south of the Follen Church. It’s got a town park behind it with a playground, soccer field, tennis and basketball courts too.
The Stone Building is not to be confused with a stone building. It’s a fantastic Greek Revival building that is the second oldest civic building in the cluster. Built in 1833 by Eli Robbins as a lyceum, it housed quite a few notable speakers over the years, including Ralph Waldo Emerson, Henry David Thoreau, Wendell Phillips, Charles Sumner, and Josiah Quincy, Jr. It was used as a branch library until a burst pipe in 2007 caused significant damage, causing the structure to close. It’s still closed, though some repairs were done to contain the damage; plaster was stripped from the entire ceiling and some walls in the first floor, but carved decorative lintels around the windows are still intact, as visible in a video shot inside the building in 2008. You can read the architectural recommendations made five years ago.
Now owned by the Waldorf School, the “Brick Store” was the original East Lexington post office. Built in 1828, it’s the oldest of the civic buildings in the East Lexington area. It’s also the building that abuts our property, though we’re separated by a parking lot and a stone wall.
This last stop on our tour is the first building I noticed in our neighborhood, and the oldest of the buildings on this tour — but it’s not a civic building, it’s a private residence. Abutting the house on the other side of the cul-de-sac from ours, this fairly magnificent Greek Revival home dating from the early 19th century has apparently always been a pillar of the surrounding community. Built around 1800 for Obadiah Parker, it was converted into its current temple form in 1839 for furrier Ambrose Morrell, who was Eli Robbins’ neighbor and business rival. It’s worth noting that it has undergone some changes over the years; while it currently sports Ionic order capitals on its front porch columns, a photo from 1865 shows a plainer order — maybe Doric — as well as other alterations that have been made, such as the removal of a side entrance and the removal of clapboards on the sides to show the original Federal brick façade. Even more striking is the removal of the quarter-lune windows in the triglyph. I’d love to find the meetings of the historical committee meeting that let that one go down. (Update: Of course the historical committee didn’t allow such a change. See my next post for an explanation of the confusion.)
So yes, our little cluster of buildings on the side of Mass Ave is architecturally delightful and complex—and fun. And that’s even before we talk about the bike trail, the Great Meadows, Wilson Farm…