Copying EXIF Information

Lots of data is recorded in photos every time you take a picture with a modern digital camera (EXIF data). Stuff like; make, model, aperture, shutter speed, ISO etc. Nowadays, it's possible to add GPS information as well. This information is available in programs like Adobe Lightroom and Apple Aperture.

Unfortunately, the recorded information might get lost if you use graphics software to manipulate the photos. For example, I take 5 photos and blend them into one for a panoramic photo or an HDR photo. The result can be stunning, but mostly, the original EXIF information is gone. In these situations I copy the information using jhead (exiftool is an alternative) from one of the original images and place this in the final (manipulated) image. Downside is that this is kinda disrupting for my 'workflow', because is done by the command line.

It would be nice if e.g. Lightroom had a context menu of copying the EXIF information (this is possible for other metadata in the photos), and pasting it in the new photo.
Some might say that this might not be very ethical because the data is from another image, but then again, there are tools already available for doing this. Even though these aren't very user friendly. Perhaps a small suggestion for the developers.....

Experimenting with HDR

The HDR consists of a 5 image series (-2EV -> +2EV) taken last Saturday in Goedereede.

More photos from the Goedereede shoot are available on my flickr page.

Apple Released OSX 10.5.5 Update

Apple released the 10.5.5 update last night.
What's included?

General

• Includes recent Apple security updates.
• Addresses stability issues with video playback, processor core idling, and remote disc sharing for MacBook Air.
• Addresses an issue in which some Macs could unexpectedly power on at the same time each day.
• Resolves a stability issue in TextEdit that could be found when accessing the color palette.
• Improves Spotlight indexing performance.
• Fixes an issue in which contacts might not sync properly with PalmOS-based devices.
• Improves iPhone sync reliability with iCal and Address Book.
• Includes improvements to Active Directory (see this article for more information).
• Improves Speech Dictionary.
• Fixes Kerberos authentication issues for Mac OS X 10.5 clients that connect to certain Samba servers, such as Mac OS X Server version 10.4.
• Includes extensive graphics enhancements.

Mail

• Addresses performance issues related to displaying IMAP messages.
• Resolves an issue with SMTP settings for AIM, Compuserve, Hanmail, Yahoo!, and Time Warner Road Runner email accounts.
• Addresses stability issues that may occur when dragging a file to the Mail icon in the Dock.
• Addresses an issue with the "Organized by Thread" view in which the date does not appear when the thread is collapsed.
• Resolves an issue in which RSS feeds could temporarily disappear from the sidebar.
• Improves Mail robustness when sending messages.
• Improves reliability when saving drafts that have attachments.

Time Machine

• Improves Time Machine reliability with Time Capsule.
• Addresses performance issues that may affect initial and in-progress backups.
• Fixes an issue in which an incorrect alert message could appear stating that a backup volume does not have enough free space.
• Time Machine can now back up iPhone backups that are on your Mac, as well as other items in (~/Library/Application Support).

And much, much more.

New Nikon 70-200 f/2.8 AF-S VRII

Rumors are that a new and improved Nikon 70-200 f/2.8 AF-S lens will be announced/revealed on Photokina 2008. Which would be nice since I'm still saving money to 'replace' my Sigma 80-400.

It would be nice to come back from holiday, and to find out that Nikon shipping lots of new goodies :).

iTunes 8. Now With a Piece of 'Genius'

Some of you might have noticed that Apple introduced a new and improved iPod Nano, and some other iPod hardware. Apart from the hardware, they also released iTunes 8.

No subscription model for the music, but (apart from some other improvements) they added a Genius function. The Genius analyzes your music library, and makes suggestions on the music your playing. Cool feature since it finds/suggests songs with the same mood, but there's room for improvement.

Genius Playlist??The following screenshot shows a overview of the 'Forty Licks' album of the Rolling Stones. As you might notice, the Genius in iTunes recommend that I seem to miss. I can buy these songs on the right. Notice the missing songs and the ones I marked in yellow.... Okay, one of them is spelled wrong (Jumping instead of Jumpin'), but the others are correctly spelled.

Even a Genius Makes a MistakeThis doesn't only occur on the album of the Stones. It occurs on almost every album/song I play.

Is Apple trying to earn an extra buck? Or is there a vacancy for a real Genius? Anyway, I'd love to have this feature on my iPod.

Another Possible P&S Candidate

Recently I blogged about wanting a (new) Point&Shoot camera. Back then, I optioned the Canon G9 and the Panasonic Lumix LX3. But in the mean time another candidate roared its head; The Leica D-LUX 3 (in black).

Choices, choices, choises... When will it end?

Storing Plain-text Passwords

Security is a hot issue now-a-days. You get told over and over that no one will ever ask you for your password. Not your bank, not Paypal, and not even your online grocery store. This is to make sure that people won't be persuaded by phishers and other scumbags in giving them the password.

But why is it that a lot of companies and other initiatives on the Internet seem to store passwords in plain text in their databases? There is NO NEED to do this. Almost every hypertext scripting engine (ASP, PHP, Coldfusion, Perl, Ruby on Rails) supports the hashing of passwords.

COLDFUSION: <CFSET hashedPwd = HASH(password, "SHA-256") />

When a user logs in with a username and password, they are checked against the credentials in the database. The password gets hashed, and the hash is checked against the stored hash in the database. This way no one will be able to figure out the actual password (especially if a relativley strong hashing algoritme is being used like SHA-256).

If the same user forgets his/hers password you only need a mechanisme to reset the password to a random password, and communicate this with the user (by e-mail, SMS, snail-mail, or whatever) and allow the user to change this new password to one of his own at the next logon.

Another nice feature of hashing passwords is that the user can use a password with lots of printable characters (like !@#$%^&* (){{}|":;'\][/.,<>?`~), or complete sentences because these won't be stored. Only the hash (a hexadecimal string) will end up in the database. No matter how long the password/sentence is, the hash will always be a fixed length.

Maximum flexibility for the user, and a secure way of storing the passwords in the database. So if financial institutions or other high profile web-presences fail to do so, they should be made aware, and change their code.

So there's absolutely no need for anyone to be able to see your (plaintext) password besides yourself. And don't let them tell you otherwise.

FireFox 3 Color Management

In the 'old' days, Safari was probably the only Internet browser with some decent color management. The problem was that images displayed in Firefox and Internet Explorer looked a bit desaturated and lighter.

Now, in FireFox 3 you have the opportunity of enabling color management. Just set the following configuration option to 'true' (by double clicking) in the FireFox configuration settings (to access the config-part of FireFox, just type about:config in the address bar).

gfx.color_management.enabled

This feature is turned off by default. Restart firefox and be amazed by the colors in your photos on the Internet

Undocumented Coldfusion Ports

After running 'chkrootkit' on one of my Ubuntu server at work, I got a responds:

Checking `bindshell'... INFECTED (PORTS:  4000)

A message which started a 'mild' shiver across my back, because the rootkit checker just reported that one of the processes on the server could be compromised.

First I took the server of the network. Just to make sure. After that I searched the Internet for a possible explaination. Nothing substancionally. until I found the following command to see what is occupying the port.

sudo netstat -e -p -n -a | grep 4000

This gave me the following result:

udp6       0      0 :::4000                 :::*
65534      13886      4739/coldfusion8

So it seems that Adobe Coldfusion is using this port. But this can't be found in any of the official Adobe Coldfusion documentation. There are some (blog)posts related to this, but nothing more.

Update on Tuesday, April 6, 2010 at 11:04 by Willem

This 'problem'still occurs with Coldfusion 9 (on Centos 5.4)

Lucky shot

I spotted the airplane just in time. It's a KLM airplane heading south. The image is not manipulated (apart from the conversion to black&white).

More photos at my flickr page.