Last weekend (2009 10/17~10/18), I went to Yahoo Open Hack Day Taiwan. The event seems has been become a big PR issue of Yahoo, only because a few minutes of lap dance.

Before I talked about what I feel about lap dance as a developer joined this event, I like to share about what we did in this event. As a team with hychen, tusng and honki, we were thinking about implement a self-learning web site, which provides a bookmarklet or plugin to let you look up the English words. And also help you to convert unfamiliar word on computer into physical flash card. But after we got there, we found this web site does not really use any Yahoo!API. :p

So, we pick up another idea from my never-have-time-to-start TODO list. We called it Synker,the original idea is to help people sync photos from any social network website into their own Google/Yahoo contacts. But we don’t want to have an avatar, we like to have photos with really face of our contacts. So we only use photos with face identified by integrated face detection technology. If you use these contact services on your phone, you will find it extremely useful when you try to remember someone when he/she calls.

After changed the idea, we start to implement it at Saturday afternoon. And finally we do can login with Yahoo account, download the contacts and find possible photo from Wretch profile and albums. It’s quite slow but it works. We tried to find Wretch girls hired by Yahoo as staffs to be our beta testers, it turns out that much of people don’t really use Yahoo! Contacts or Yahoo!360 lately. So most of the contacts are added very long time ago when YIM is still popular in Taiwan. For the local Wretch users, it might be much more useful if we can help them link their wretch users back to Yahoo contacts. However, Synker should be a service to help people sync photo into different contact service, the web site is now still a prototype, we might finish it later when we are available.

However, we did not win any award. Thanks to Erik Eldridge, at least we are mentioned in his favorite hacks list. But still, I have a lot of fun work with my teammate to implement a web site from scratch. I do enjoy to get tired, beard grown and smelly with friends after a non-stop 24 hours hacking. It’s exciting to experience issue and fix them together. It’s fun and we never stop laughing.

Thanks to Yahoo for organized this event. Without this event, I probably won’t get any chance to study Yahoo!APIs, and work with my friends on these APIs all day long. Thanks!

Sexism ?

So, many people feels women are offended, and they said sexism is bad for creating an inclusive environment in industry. I have to say please don’t judge the organizer before you understand the local culture. Applying your own viewpoints to the other side of earth is globalism, which does not help to create an inclusive environment.

As a developer staying there for the whole event, I don’t see the any lady are offended. But we, the shyly nerds are probably more insulted. :p

One my the other female friend XDite, she has been attend to Yahoo Open Hack Day since last year. She has same feeling as I do, we don’t feel it’s offending women. The dancing show is only a few minutes. We disliked it because it’s very annoyed for developers, since we have been coding for hours, a loudly music and dancing show just make us headache. It’s just annoying as the anchorwoman made some stupid jokes and asked developers to dance before the warding ceremony. It’s perhaps humiliated us much more then the dance girls.

Seriously, No! There are many female staffs around and many of the many of the top managers of Yahoo!Kimo Taiwan are female! And also the other female members in the other team. I don’t see there is any sexism issue in Yahoo and this event. However, I can understand why they like to have the dancing show, one for cheer the developers up after long time work, the other reason is to satisfy the local sick mass media.

The dancing show is only a few minutes, not the major part of the event. And we don’t care about the show, since we are really busy on get the things work. And yes, the kind of entertainments are expected in many IT events. It might comes from the history of southerns Taiwanese funerals and temple fair. People think it’s important to entertain Spirits, and living people, so they hire strippers to dance in public. It’s a symbol of supplicatory.

And somewhat this kind of traditions infected the IT event, but much more refined. Now, without Show Girls in a IT event, you will never get reported on local mainstream media. And this kind of tradition are spread in the world, which you can see many show girls on the online IT web sites.

It’s now become yet another industry for provide profession performing in IT events (commercial IT events does not mean open source software conference or hackathon). In addition, the dancing girl are professional dancers, they are not just boob girls or some woman found from the strip club. They are payed as profession for performing. I meant is creating something with your mind is much respectable then creatively with the body ? And what’s wrong that these ladies choose dancing as profession, is that one of talents should be appreciated ?

If you ask my opinion, I dislike this kind of arrangement it’s because it disturbed me. And don’t blame Yahoo, it’s totally not an issue of sexism of the event, you idiot. It’s about the sicked (local and global) media. Please go fight with the mainstream media if you think they are sexist, and many Taiwanese are already doing so.

話說上週六晚上,許久沒聯絡的朋友短小姐,丟了 MSN 給小宅男我,問說帳號被盜用怎麼辦?

原來是她發現莫名其妙收到一封雅虎帳號的備用信箱被更改成「[email protected]」的通知信,接下來一查當然就發現密碼被改掉、無法登入。懷著不安的心情,上了 Yahoo! 奇摩拍賣一看,發現被擺了非常多球鞋產品,是大量的粗劣仿冒愛迪達球鞋,每雙起標價格 1100。進入拍賣「關於我」一看,對方甚至大喇喇的留下 Y!M 即時通帳號 “knkn13133” 與 Hotmail 郵件地址。

About

好奇的偽裝買家透過即時通帳號與對方聯絡,為了知道對方來自何方,稍微寫了一個簡單的小程式顯示球鞋的照片,並利用這個小程式趁機紀錄他的連線資料。且再發了一封電子郵件給對方。

很快的收到來自 Hotmail 的帳號 030303036 <[email protected]> 之回信,透過標頭裡的資料顯示 X-Originating-IP: [58.61.246.38],而他也點閱了我假借詢問的網址,得到了以下資訊

REMOTE_ADDR => 58.61.246.38
REMOTE_PORT => 41491
HTTP_ACCEPT => */*
HTTP_ACCEPT_LANGUAGE => zh-cn
HTTP_ACCEPT_ENCODING => gzip, deflate
HTTP_USER_AGENT => Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

稍加利用 whois 追查 58.61.246.38 位址之後,知道對方可能來自廣東,使用中國電信股份有限公司、廣東數據通信網絡有限公司的寬頻網路,使用預設簡體中文顯示的瀏覽器。比較有趣的是對方要求 1400 直購價含運費,而且採用「貨到付款」的方式結標。我很好奇他最後是否真的會賣出品質低劣的球鞋,或者純粹作為詐欺,另外一個問題是既然透過物流商代收貨款,應當可以查到上游的公司資訊,不知道對方除了待在中國外,是否還搭了什麼樣的防火牆讓贓款可以運走。

products

上網查了查其他的案例,類似的受害者還不少 (而且偽造的店家都有類似的「紡」或「鞋紡」字眼),像是

所幸,我的朋友處理得當,拍賣帳號當晚就取回了,且冒用商品都先被 Yahoo 下架,拍賣帳號被雅虎鎖定,需觀察一段時間無法使用。

以下說明處理過程的幾個法則,若你碰到類似的問題,或許也可以如此處理。首先,最大的風險與損害就是上法院作證,帳號遺失是小事,信件遺失是小事,萬一有人因為你的帳號被欺騙,而告上法庭時,你就得不時去警局做筆錄、上法院去作證,會耗用掉更多時間,相對損失更大。最大的麻煩的是你得證明自己是受害者,若惡質的檢察官、警察把你當作犯罪嫌疑人,你可就要被整慘了,某些執法人員心中是沒有無罪推定原則這件事情的。因此,以下整理一些守則供參考。

PTT 的網友 leepopo 根據自己的經驗,分享幾篇文章

其中最後一篇自保守則非常有參考價值,大體上分為六則 (以下參考 leepopo 遭盜安全守則原文,略加修改)

一、通報網站。在上班時間內,你可以透過 客服電話:02-2192-7123 (客服電話常有異動,請參見雅虎網頁) 聯絡Yahoo!奇摩。但是詐騙集團通常利用週末的下班空窗期間行騙,請透過專門的「帳號盜用反應信箱」進行反應。(我朋友利用這個管道,深夜時被盜用的帳號就停權了。)

二、蒐證。查看自己的拍賣帳號,紀錄、儲存、列印出冒用者留下得資訊。拍賣帳號的入口是 http://tw.user.bid.yahoo.com/tw/user/會員帳號。若收到更改密碼、管理者來信、拍賣相關信件,也務必留下資料。

三、報警。找到你的轄區分局,帶著個人證件與相關證據前往報案,務必務必取得報案三聯單才算成功報案。不要被警察拿了筆錄、備案單、要你拿出網路公司證明文件之類的理由呼噥過去。若要求案由,請說明控告「妨害電腦使用罪」。若深夜不方便外出,可先行網路報案,市警局會在白天進行分案到指定轄區,這樣的好處是有報案憑據 (同 110 報案),不會因為分局或派出所員警的個人因素推卸報案責任。

四、取回帳號。你可在上班時間去電客服確認個人資料後取回帳號,或者在一收到備用信箱更改時,馬上再到雅虎網站要求寄發新密碼。因為對方刪除備用信箱時,雅虎系統會登記為「計劃刪除」,你還有機會取回密碼。別忘了,盡快更改密碼,將相關冒用資料蒐證,並下架。若沒辦法取回帳號,消極的作法是請朋友隨意下標,並給予帳號負評,警告無辜的網友。

五、存證信函。若你遲遲無法取得 Yahoo 奇摩的回應,請透過郵局寄發存證信函給 Yahoo,以確保你的權益。詳情請參閱遭盜安全守則一文第五條。

六、確保安全。
掃毒,有很大可能性,你不小心中毒或誤入釣魚網站,無意中洩漏密碼。所以請先確認電腦沒有病毒 (最好的方法是重新安裝作業系統),然後更改所有的密碼。若你日常都利用 Yahoo 信箱收取信件,請小心你的各種個人資訊都已被詐騙集團取得。特別是金融相關資訊,請聯絡你的銀行,更改你所有的線上密碼。此外,你過去的拍賣對象的資訊也都可能還存留在信箱中,別忘記通知他們你的資料遭到冒用,不要進行任何額外的匯款、買賣行為。

以上,希望你不是那位無辜的受害者或被騙者,並祝福你早日取回被冒用帳號。