Andrew Cooke | Contents | Latest | RSS | Twitter | Previous | Next


Welcome to my blog, which was once a mailing list of the same name and is still generated by mail. Please reply via the "comment" links.

Always interested in offers/projects/new ideas. Eclectic experience in fields like: numerical computing; Python web; Java enterprise; functional languages; GPGPU; SQL databases; etc. Based in Santiago, Chile; telecommute worldwide. CV; email.

Personal Projects

Lepl parser for Python.

Colorless Green.

Photography around Santiago.

SVG experiment.

Professional Portfolio

Calibration of seismometers.

Data access via web services.

Cache rewrite.

Extending OpenSSH.

C-ORM: docs, API.

Last 100 entries

OpenSuse Leap 15 Network Fixes; Cat Soft LLC - Sell your invoices for immediate revenue that grows with Factoring Quotes's turnover!; Update; Credit Card Processing for Cat Soft LLC; Copier Quotes for Cat Soft LLC; [Book] Galileo's Middle Finger; VOIP quote for Cat Soft LLC; [Bike] Chinese Carbon Rims; Collection Agencies for Cat Soft LLC; Get Coffee Quotes for Cat Soft LLC; [Bike] Servicing Shimano XT Front Hub HB-M8010; [Bike] Aliexpress Cycling Tops; Now Is Cat Soft LLC's Chance To Save Up To 32% On Mail; Call Center Services for Cat Soft LLC; [Computing] Change to ssh handling of multiple identities?; [Bike] Endura Hummvee Lite II; [Computing] Marble Based Logic; [Link, Politics] Sanity Check For Nuclear Launch; [Link, Science] Entropy and Life; [Link, Bike] Cheap Cycling Jerseys; [Link, Music] Music To Steal 2017; [Link, Future] Simulated Brain Drives Robot; [Link, Computing] Learned Index Structures; Solo Air Equalization; Update: Higher Pressures; Psychology; [Bike] Exercise And Fuel; Continental Race King 2.2; Removing Lowers; Mnesiacs; [Maths, Link] Dividing By Zero; [Book, Review] Ray Monk - Ludwig Wittgenstein: The Duty Of Genius; [Link, Bike, Computing] Evolving Lacing Patterns; [Jam] Strawberry and Orange Jam; [Chile, Privacy] Biometric Check During Mail Delivery; [Link, Chile, Spanish] Article on the Chilean Drought; [Bike] Extended Gear Ratios, Shimano XT M8000 (24/36 Chainring); [Link, Politics, USA] The Future Of American Democracy; Mass Hysteria; [Review, Books, Links] Kazuo Ishiguro - Never Let Me Go; [Link, Books] David Mitchell's Favourite Japanese Fiction; [Link, Bike] Rear Suspension Geometry; [Link, Cycling, Art] Strava Artwork; [Link, Computing] Useful gcc flags; [Link] Voynich Manuscript Decoded; [Bike] Notes on Servicing Suspension Forks; [Links, Computing] Snap, Flatpack, Appimage; [Link, Computing] Oracle is leaving Java (to die); [Link, Politics] Cubans + Ultrasonics; [Book, Link] Laurent Binet; VirtualBox; [Book, Link] No One's Ways; [Link] The Biggest Problem For Cyclists Is Bad Driving; [Computing] Doxygen, Sphinx, Breathe; [Admin] Brokw Recent Permalinks; [Bike, Chile] Buying Bearings in Santiago; [Computing, Opensuse] Upgrading to 42.3; [Link, Physics] First Support for a Physics Theory of Life; [Link, Bike] Peruvian Frame Maker; [Link] Awesome Game Theory Tit-For-Tat Thing; [Food, Review] La Fabbrica - Good Italian Food In Santiago; [Link, Programming] MySQL UTF8 Broken; [Link, Books] Latin American Authors; [Link, Computing] Optimizatin Puzzle; [Link, Books, Politics] Orwell Prize; [Link] What the Hell Is Happening With Qatar?; [Link] Deep Learning + Virtual Tensor Machines; [Link] Scaled Composites: Largest Wingspan Ever; [Link] SCP Foundation; [Bike] Lessons From 2 Leading 2 Trailing; [Link] Veg Restaurants in Santiago; [Link] List of Contemporary Latin American Authors; [Bike] FTHR; [Link] Whoa - NSA Reduces Collection (of US Residents); [Link] Red Bull's Breitbart; [Link] Linux Threads; [Link] Punycode; [Link] Bull / Girl Statues on Wall Street; [Link] Beautiful Chair Video; Update: Lower Pressures; [Link] Neat Python Exceptions; [Link] Fix for Windows 10 to Avoid Ads; [Link] Attacks on ZRTP; [Link] UK Jazz Invasion; [Review] Cuba; [Link] Aricle on Gender Reversal of US Presidential Debate; {OpenSuse] Fix for Network Offline in Updater Applet; [Link] Parkinson's Related to Gut Flora; Farellones Bike Park; [Meta] Tags; Update: Second Ride; Schwalbe Thunder Burt 2.1 v Continental X-King 2.4; Mountain Biking in Santiago; Books on Ethics; Security Fail from Command Driven Interface; Everything Old is New Again; Interesting Take on Trump's Lies; Chutney v6; References on Entropy; Amusing "Alexa.." broadcast; The Shame of Chile's Education System

© 2006-2017 Andrew Cooke (site) / post authors (content).

Taking Back Email (not)

From: andrew cooke <andrew@...>

Date: Mon, 23 Apr 2012 20:20:01 -0300

I was brainstorming some ideas for a "worthy" project; I finally decided it
wouldn't work, but thought I might as well write things down in case I have
a change of heart.

The idea that email needs "fixing" seems to be common at the moment (it was
included in a list of "problems" by Paul Graham).  Now, personally, I manage
my email locally, because I am unhappy with Google (or anyone else) having
access to so much information.  And it works quite well.  So the core of the
idea was that I could make that approach available to others, packaged in a
way that didn't require any expertise.

Email would be pulled from existing mail providers over IMAP and stored
locally.  There would be an embedded SQL database for search (like mairix).
The client would probably be in the web browser, running against a local

Taking things further, you could extend the client to automate encrypted
email.  The idea I see working is based on ssh - you don't try to guarantee
that the initial key exchange is perfect, but you cache it and warn of
changes.  So every email would include a private key; these would be extracted
and cached by my software when it receives email from others; sending email to
people with a known key would automatically trigger encryption; a change in
keys would flag a warning.

There were some more ideas about UI, implementation, and searching /
cataloguing email, but that's the general idea.

But there are two problems.

First, sending email requires an SMTP gateway.  You can't just send email from
your own machine these days.  And while you can pull email from web providers
you cannot push it.  So there would need to be a central SMTP server.  That's
not so terrible - adding a central IMAP server for receiving email would help
avoid sharing data with the big players, and you could imagine people paying
for this service.

Second, and more seriously, I realised that I was stuck thinking of a PC-based
solution.  And really, these days, it needs to support mobile devices.  Which
don't have the resources to do this.  Email really does have to be in the
cloud, in a sense.

Coincidentally, the title "From Personal Computers to Personal Clouds" caught
my eye -
I haven't read the article, but given the above you can see an argument for
some kind of personal cloud platform...


Re: Taking Back Email (not)

From: Michiel Buddingh' <michiel@...>

Date: Tue, 24 Apr 2012 07:04:19 +0200

Why keep IMAP at all central to your solution?  The protocol
practically begs to be supplanted by a REST-based API.  Most IMAP
operations translate neatly to HTTP GET or PUT requests; I think that
if such an API could be standardised (for things like searching,
tagging etc, where the implementation isn't a transparent mapping), it
would be possible to once again decouple email storage and email user

To me, that would be a fundamental part of 'fixing' email, since
people tend to be incredibly specific about their preferences in a MUA

I like your thinking about email encryption, too; I think the PGP
infrastructure we already have is wonderful, but the practices devised
around it prioritize security above everything else.  For example, I
hesitate to send signed email to friends, because I know it will be
visible as a confusing blob of alphabet soup, or worse, as some kind
of suspicious attachment that can't be opened.

Oh, and I have to enter my password, and worry about key management (I
really should generate a subkey for my GPG key, so I can safely send
signed email from my laptop, for example).  Even for an experienced
computer user such as myself, the practice requires quite a bit of

Email needs a second level of security--one that's maybe not perfect,
but requires next to no conscious decision-making to use.


(*) It's possible now, of course, but most web mail software has to
implement IMAP behind the scenes, at a non-negligable programmer cost.

Re: Taking Back Email (not)

From: andrew cooke <andrew@...>

Date: Tue, 24 Apr 2012 09:06:58 -0300

It's interesting to think about replacing the prtocols.  Email is strange in
that two people "own" a message (sender and receiver) so it seems to need
either duplication or a trusted third party.  Your comment started me
wondering if you could replace SMTP/POST (sending email) with a combination

 - publishing the email on your (HTTP) server
 - something like RSS (so that the recipient know where to look)
 - restricting visibility to the recipient's browser
 - "strong" browser caching, so that once the recipient sees the message,
   it doesn't matter if it's deleted

But it's all kind of complicated for no real gain.  There's a dedicated
infrastructure and tools for this that should probably be leveraged...

Maybe the "two people owning the message" means that there's a special kind of
3rd party that has certain cryptographic properties, which would formalize
things like delivery verification, no forwarding, etc?  Not sure I am being
clear here - I imagine a server that has quite an abstract interface,
something like "store a number" or "generate a pair of primes" etc that could
be combined to implement message serving/hosting/storage with the required

A related idea is P2Pmail - if everyone starts running their own servers again
then you can deliver directly.

Also, with a web of public keys you can use HMACs to whitelist sources, which
helps with spam filtering (I think? does PGP allow this?)


Comment on this post