On January 7th, a friend of the entire Phish community was taken from this world much too early. Robert Eckhart (known by many as Barefoot Bob) found a small spot on his tongue. Sadly, it turned out to be cancer. He went through painful surgeries to have part of his tongue and the lymph nodes in his neck removed. This was followed by numerous, difficult radiation treatments. On Monday, January 7th, he lost his courageous battle and leaves a wife and two children. He was only 37.

Trey was on WXPN this afternoon, on the same day as Bob's services, extolling the virtues of Phish fans and proclaiming them the best fans anywhere.

Let's really prove this point as we have many times in the past and band together as a community and help Bob's family. It makes no difference if you knew him from Phish.net, from Twitter, from tour experiences together, a fleeting hello at one show, just knew his name or never heard of him at all. He is one of us. A fan. A husband, father, brother, son, and friend.

Many artists, Phish and gracious fans and friends have donated a few dozen fantastic items including posters and artwork. Please visit http://barefootbobmemorial.com/ for details on how you can participate. And remember- the most important thing is helping the family so make those donations and dig deep.

Share your thoughts and rememberances of Barefoot Bob in THIS thread.

We are lucky to be part of such a great community. Thank you for reading and contributing.

Read more...

For those of you not familiar with the Type II Cast, it is a Phish fan podcast that discusses current Phish shows with occasional special episodes dedicated to various Phishy topics. For this week's episode discussing Phish's New Year's run at Madison Square Garden, they invited me to be their guest alongside usual panel members Steve Olker, Josh Korin, and .Net's Chris Glushko. We gathered together virtually on Monday, January 7th, armed with a pile of great audio clips from the run, to share our thoughts on both individual songs and the shows as individual entities and as part of a run of shows. Two hours of quality Phish nerdery ensued. Chris was kind enough to put together rankings of these shows compared to the other multi-night NYE runs starting in 1995, which we discussed as well.

We dedicated this show to the memory of Robert Ekchart, aka Barefoot Bob, a beloved Phish fan who lost his battle with cancer earlier that day.

Click on over to the Type II Cast site to listen, or you can download the mp3 here (right click save as).

You can also subscribe to the podcast on iTunes by clicking here.

Enjoy!

Brian

Read more...

Happy New Year from Mystery Jam HQ here at Phish.net. For the 127th installment of the MJ, we've selected a jam that will delight and confound... or just be solved by 12:45. It really could go either way. As usual we will be playing for an MP3 download, courtesy of our friends at LivePhish.com / Nugs.Net. The rules haven't changed: you need to correctly identify the song and the date to win. Post your guess in the comments. One guess per person per day (with the second “day” starting after I post the hint). A hint will be posted on Tuesday (if necessary) and the answer will be posted on Wednesday. Good luck...

Wednesday Answer: Congrats to conradjohansen for being the first to identify the 12/28/03 "Frankie Says." The Blog will return on Monday with MJMCXXVIII.

See the title up there? That’s the last thing I’m going to say about “Show of Life.”

And now the rest is easy, because now I get to review a really great Phish show. Better yet, I get to review a really great Phish show that doesn’t quite start out that way.

The band takes the stage at 8:18 p.m. MSG time. Page and Trey are wearing the same outfits they wore the prior two nights. Mike is dressed in his 5th outfit of the run, give or take an artisanal pashmina. And you know what Fish is wearing.

Read more...

The date December 29 has historical significance to Phish fans. Back in 1994, the New Year's Run followed a magnificent fall tour that had seen the band deepen and extend its improvisations, learning to move quickly and sometimes abruptly from one idea to another, from one riff to a variation to chaos to deep space and then back. The month between 11/12/94 at Kent State and the end of the tour in particular featured consistently sophisticated and exploratory second sets the likes of which Phish had never been able to deliver before. After taking a couple of weeks off for the holidays and a warmup the night before, Phish showed up on December 29, 1994 and emotionally demolished the ancient Providence Civic Center with possibly the most storied single jam in its history. As readers of this site know, the 35-minute, multi-part Providence "David Bowie" recently placed first in the Phish.net working group's (admittedly off-the-cuff and informal) poll of Phish's greatest jams. Even those (like me) who wouldn't rank it number-one have to acknowledge its immense significance and wondrous beauty.

Read more...

Glad tidings from Phish.net to all of you.

Much has come to pass since this summer, including recent human tragedies that have underscored how reliant we are on each other as human beings, and how blessed this community is by the generosity and passion of its members. In no official capacity whatsoever, I would like to thank you for being here and taking part, whatever that looks like for you.

Now let’s pick up where we left off three months ago and change, with a short and sweet look at night one.

Read more...

Burlington, VT television station WCAX has posted an interview with Page about Phish's history of charitable giving. The piece covers Phish's philanthropic history from Ben & Jerry's Phish Food and the WaterWheel Foundation to the Essex Irene Relief Benefit show, as well as touching on the generosity of the fan base and the state of Phish today. Says Page, "Having more fun than ever. I really am." You can read the story and see the video from the piece here.

Read more...

Quick - in two minutes or less, name your ten favorite Phish jams.

Members of the Phish.net working group did just that over email. It's an interesting exercise - since you are answering quickly, you bring all of your subjective biases, feelings and reasoning specific to that particular moment in time to the table. Every single one of us who answered found ourselves in disbelief that we forgot about certain jams that others had on their lists. Many of us wanted to go back and change some of our votes, but for our purposes here I've held all of us to our initial lists. In other words, our individual lists came from the heart, rather than our heads - we tried to keep this as spontaneous as possible.

Read more...

Phish fan and webmaster Kevin Spence has posted an interview with Paul Languedoc on his website, careerthoughts.com. It's an interesting glimpse into Paul's work both as a soundman and a guitar craftsman.

Read more...

They say 80% of passwords on the internet are "weak" passwords. When sites use annoying guidelines like "you must have an uppercase character, a lowercase character, a number and a special character," it's not because the webmaster was feeling cruel and abusive and all powerful, but rather because he or she was trying to protect his users. Gaining access to a website with weak security is trivial. You want to protect your users' data, including their password, which may be their key for other websites too.

So here's your security 101: when you store data in a database, step 1 would be storing a password. Storing a password as plain text is not very secure and would certainly be problematic if someone unauthorized gained access. So to combat this, developers encrypted passwords. But passwords that can be decrypted are equally problematic, anyone who could get them could certainly decrypt them. So developers changed to one-way encryption: encrypt it, and then when you give me your password, I'll encrypt it again and see if it matches! Brilliant!

But computers got faster, and thus were born "rainbow tables." Essentially, hackers would start generating encrypted versions of dictionary words, common passwords, and other phrases, and these encrypted strings are known as hashes; when you got a list of encrypted passwords, you could compare them to your list of known hashes. Brilliant!

So developers struck back with "salts." Add some random stuff to the beginning or end of the password and encrypt it, thus rendering rainbow tables null and void. Unless, of course, someone gets your salt. Then what? You can't even decrypt the passwords yourself to re-encrypt them with a new salt. You have to force everyone to change their password.

With the not-too-long-ago release of some compromised passwords from a fellow Phish site, we decided to bump up our security efforts. Phish.net used to utilize a mix of SHA1 and MD5 encryption, fairly common cryptographic hashing functions. The challenge with these is that they are very fast - a computer processor can compute these hashes in microseconds, enough that one could hit a login form 10,000 times per second and just run through the dictionary. Knowing that weak passwords make up 80% of the accounts out there, just knowing usernames - something one could easily pull from, say, our forum - you'd probably be able to gain access to at least a few thousand accounts.

As a result, today, we switched to bcrypt for encryption. bcrypt is very slow (in computer terms). In fact, we actually slow our implementation down further. In other words, it still only takes a fraction of a second, far too little for a human to notice, but enough that a computerized attempt to gain access would be hindered by how long the response would take. The automation of such an action is severely handicapped by this slow encryption. Converting a list of the passwords from our database into something usable elsewhere would still be a mammoth task.

On the flip side of this, what if someone just keeps hitting your site trying to login? To combat this, on Phish.net, we implemented "rate limiting" some time ago. Too many failed attempts and the login process won't continue.

How can you take advantage of this? Simply login to Phish.net. The next time you login successfully, your password will be automatically converted to the new encryption.

Read more...

Welcome to Mystery Jam Monday Part 126 here at Phish.net. This jam was hand picked by @bl002e, the third professor to receive tenure here at Mystery Jam University. As usual we will be playing for an MP3 download, courtesy of our friends at LivePhish.com / Nugs.Net. The rules haven't changed: you need to correctly identify the song and the date to win. Post your guess in the comments. One guess per person per day (with the second “day” starting after I post the hint). A hint will be posted on Tuesday (if necessary) and the answer will be posted on Wednesday. Good luck...

Wednesday Answer: Congrats to MomaDan for correctly ID'ing the 7/20/99 "Misty Mountain Hop," and kudos to bl002e for a nice MJ selection. That said, it just goes to show how hard it is to stump the users. And with that, the Blog is going to call it a year. Mystery Jam Mondays will return in 2013...

For the 125th time, welcome to Mystery Jam Monday here at Phish.net. As usual we will be playing for an MP3 download, courtesy of our friends at LivePhish.com / Nugs.Net. The rules haven't changed: you need to correctly identify the song and the date to win. Post your guess in the comments. One guess per person per day (with the second “day” starting after I post the hint). A hint will be posted on Tuesday (if necessary) and the answer will be posted on Wednesday. Good luck...

Tuesday Hint:

Wednesday Answer: Congrats to donatello for being the first to guess the 5/8/94 "Antelope" from The Day After the Bomb (Factory). That said, the win was hint-aided, so the Blog will count that as a moral victory. The Blog will be back on Monday with yet another Mystery Jam for your listening pleasure.

The Executive Director of The Mockingbird Foundation, Ellis Godard, who co-founded the Foundation in 1997 and who helped to start Phish.net in the 1990s, is featured in an article in the December 7, 2012, edition of the Daily Sundial, the newspaper of California State University, Northridge, at which Professor Godard teaches. You can read the article and listen to an interview with Ellis here.

Read more...