Thursday, August 31, 2006

"Security Engineering" Is Now Online

"Security Engineering" Is Now Online:

"An anonymous reader writes 'Ross Anderson, author of 'Security Enginnering', notifies in a message to comp.risks that he just got permission from Wiley to let anyone download the full content of his book for free. This is one of the best books on computer security and it is used as textbook in many University courses (I teach two of them).'"


(Via Slashdot.)



The server is slashdotted. You can barely view the web page, let alone download the chapters. Will have to wait. :(

DNS outage for .es

Netcraft: Thousands of Spanish Web Sites Knocked Offline by Software Error:

"A botched software update at Spain's central domain registry knocked as many as 400,000 sites offline for several hours Tuesday, according to the Esnic registry. The error left Internet users unable to access domains using .es, the country code top-level domain for Spain. The outage lasted from 3 pm to 5 pm Tuesday afternoon (local time) when the DNS database that connects domain names to IP addresses was 'affected by an error' during a software update, according to an advisory posted at Esnic, which manages the .es database."



Perils of DNS. Umm... thats why you have multiple DNS servers so if one server goes down, its not lights out for 400,000 web sites! Upgrade one server, make sure it works, then the other!

Monday, August 28, 2006

Intel: Optimize applications for multicore

Intel: Optimize applications for multicore | CNET News.com:

"Multicore applications do boost performance of existing applications because they are more powerful. But to have a more dramatic improvement, software makers need to write applications where separate tasks can be done in parallel, Reinders said."



Finally some news about how to take advantage of multicore processors! I've been trying to find info for a while now.

Google Releasing an Office Suite

Google Releasing an Office Suite:

"Google Apps for Your Domain is Google's entrance into the office productivity world, but contrary to popular expectations, the company is not shipping word processor or spreadsheet for corporate use just yet. Google, Inc. bundled e-mail client (Gmail), shared calendaring environment (Google Calendar), instant messaging client (GTalk) and HTML page generator (Google Page Creator) to be used across specific domains. The service will be ad-supported, reports the Associated Press.'"


(Via Slashdot.)


I just signed up for this service. For adnanwasim.com. The most exciting thing will be the use of Gmail. Right now they are not even in beta yet, they will email when it reaches beta. If Google can handle this right, I think this might be really big. This is an appealing package for small businesses that are having problems with spam, or problems with keeping their mailboxes in sync with clients like eudora/outlook and webmail. Gmail will give them an amazing interface to work with. Plus if they enable POP access like they do with normal gmail accounts, you have a local copy of your mails. Ofcourse, not every small business is going to feel comfortable giving Google control of their corporate email/calendering/IM.

I remember Microsofts Live having some such feature, whatever happened to that? Why don't they market better? And speaking of marketing, Scoble is all angry at the way Google released this news:


Google sticks its toe into enterprise waters (is Google hiding from bloggers?):

"I can’t find a single blogger who got leaked this information along with the big-city newspapers."


(Via Scobleizer - Microsoft Geek Blogger.)


Since Om was contacted, is their now a distinction between bloggers and professional journalist bloggers being made? Or is Om not a blogger?

Guest Review: Fraser Speirs on “Time Management for System Administrators”

Guest Review: Fraser Speirs on “Time Management for System Administrators”:

"Thomas A. Limoncelli’s book Time Management for System Administrators is perhaps the first example I’ve seen of a book which advocates a GTD-style workflow with some modifications specific to the system administration ‘lifestyle’."


(Via 43 Folders.)

Sunday, August 27, 2006

Where's Ethereal? It's Now Sniffing the Wire Like a Shark:

"Wireshark 0.99.3 is the latest version of the project formerly known as Ethereal and includes a number of improvements over its predecessors. It also includes a few serious bug fixes that could have potentially represented security vulnerabilities. "


I've downloaded the source code for wireshark, and am compiling it right now. Fink doesn't seem to have a package for it yet.

Wednesday, August 23, 2006

Software sleuthing in the field

Software sleuthing in the field:

"Because I have a relationship with the vendor, and because I'm a fairly technical guy, we were able to collaborate on solving the problem in a way that wouldn't work for a typical customer. The lead developer wound up sending me a specially-built version of the program, one in which verbose logging was enabled, and I used that to capture a trace that led him to the solution.
As is so often true, it was a silly little thing. At some point I'd switched from using an absolute path in the Save As dialog box (c:\jon) to a relative path (\jon) that the QuickTime encoder won't accept. The application should have caught that before calling QuickTime, but didn't. Now, it does."


Reading this, the first thing that came to mind was, how easy would it have been if this was an open source app. I guess thats how open source works in the first place. But then again, this would only have applied because Jon Udell is a very technical person. Here is an app that he needs/relies upon. A technical person with that requirement would dive in, fix the bug and move on. Ok, perhaps it wouldn't have been as easy as I make it sound, but still.

In this particular case, Jon Udell is a technical person with connections. So he was able to get work done on a closed source app. Now if it were me on the other hand, I'd be pure out of luck. I'd have to report the bug. I'd have to wait for the next release, hoping that the bug gets fixed. Meanwhile, my work would remain at a standstill.

On his blog Jon says:
Where's the incentive, after all, to play the current version of this game -- that is, to agree to send your core dump to the vendor? Your report just vanishes into a black hole. You never find out what use was or wasn't made of the data you contributed, and there's no ongoing involvement. If the game were instead structured according to the architecture of participation, a lot of folks would get a kick out of helping to improve their software, irrespective of whether that software is commercial or open source.


The steps he outlines are truly something that can improve the transfer of information required to fix a bug. Whether its an open source app or closed source. This is a new way of writing apps. Those that take advantage of the network, for tasks other than the main task. Another example of network usage might be version checks for applications.

I've noticed new open source mac apps (Cocoalicious, Adium, VirtueDesktops, Voodoopad, Firefox to name a few) have the ability to automatically check online for a new update. Its different for closed source apps. For instance, Safari, Mail.app, ichat don't individually check for updates. They are updated via Apples software update. Whether you like it or not. I like the ability to individually upgrade apps.

Voodoopad recently updated to version 3.0. I bought a license for version 2.0. I have to pay to upgrade. So I went in preferences, checked of don't check for upgrades, and I have been using the app happily ever since. 2.0 is good enough for my needs right now.

A scenario I've been thinking about is the feeding of IE7 as a critical update. What if I don't want to upgrade? I need IE6 for web development or something. One night the system upgrades, and I have IE7 instead of IE6. What do I do then? Shouldn't windows update ask first? Better yet, shouldn't IE6 ask? Same problem might have existed for Safari, but it seems Apple works in a different way. They do bug fixes via Software Update. A newer version of Safari however, is released with a newer version of OS X. So the upgrade is tied to the OS.

When people say that the internet is in its infancy, I assume this is what they mean. We have a long way to go before we figure out the best method of interaction for various situations. The above are just two scenarios out of many (one Jons, one mine).

Saturday, August 19, 2006

Lack of Linux System Admins hurting adoption - O'Reilly Sysadmin

Lack of Linux System Admins hurting adoption - O'Reilly Sysadmin:

"Plenty of companies experience similar outcomes. Linux sounds like a good idea (and it is) but Linux slobs leave their IT departments and a mess no one can figure out. It's not giving us a good rap, friends."



Not fair. I wonder what kind of conditions the previous admin was working in. Was he given enough time for documentation? Pay?...

Human Behavior:

"If aliens landed in your backyard and gave you one minute to describe everything there is to know about human behavior, what would you say?"


(Via The Dilbert Blog.)


:)

Friday, August 18, 2006

BusyBox simplifies embedded Linux systems:

"BusyBox is a single executable implementation of many standard Linux® utilities. BusyBox contains simple utilities, such as cat and echo, as well as larger, more complex tools, such as grep, find, mount, and telnet (albeit, with fewer options than the traditional version); some refer to BusyBox as the Swiss Army knife of utilities."




This utility came in handy once, when a box got compromised. A rootkit had been installed. I needed to see various configuration settings on the compromised box, while setting up the new box on a separate machine. The normal utilities such as ls and cat, were being appended to by the rootkit, which in turn would cause the executable to segfault. Busybox was an executable not known by the root kit, and I was able to use it for most commands that I wanted to run. Ofcourse the compromised box was offline, and I had already determined how the hacker got in.

Unfortunately this was a box that didn't have a backup of its configuration. I made sure all my systems configuration was backed up after this!

System Administrators Toolkit: Backing up key information

System Administrators Toolkit: Backing up key information:

"Most UNIX® administrators have processes in place to back up the data and information on their UNIX machines, but what about the configuration files and other elements that provide the configuration data your machines need to operate?"



Usually to backup configs on a unix system, I just tar/gzip all the "files" in the etc directory using a cronjob. The files are then transferred over to the backup server. So far I haven't had a problem. The article basically does the same.
I wanted to test writely and see how well it will blog.

Update: So far so good.

Does it seem like you are always just updating software. The server, desktop, two laptops, one cell phone, packages like fink, work servers, work workstation, game software, individual applications (virtuedesktop, adium, firefox.... )....

When will it end! I guess when we move to web apps for all our software. But then we'll be saying...

Does it seem like you are always having connection problems with servers...

Tuesday, August 15, 2006

Suprise of the month: Macs crash?

Suprise of the month: Macs crash?:

"OK, I just purchased a Mac. A 17-inch MacBook Pro. I was forced into this by HD and wide-screen video formats. Windows Movie Maker doesn’t do it (it does on Windows Vista, but I can’t use beta software to run my business). Apple’s software does do HD today. I don’t even need to wait (there’s a reason why Microsoft’s Channel 9 and On10.net aren’t wide-screen or HD and it’s spelled Movie Maker)."


(Via Scobleizer - Microsoft Geek Blogger.)



Hey, Robert Scoble got a Mac! :) That was fast. He only just left Microsoft. Anyways, welcome to the Mac world Robert! I think Patrick Scoble had a hand in this! :)

...Cause I just read about Dave Winer’s crashy experiences with his Mac.

Last week on the way home from Montana Ryanne was editing her video on her Mac. The app just suddenly disappeared from screen. In my book that’s called a crash. I found that to be very strange cause the hype on Macs is that they never crash.


I am inclined to think that these situations are rare. Their might be some hardware problem with Daves machine. And as for the app disappearing while editing video, it just seems like the app might be buggy. I've been using OS X since Jan of 2005. And since then not once has the machine crashed on me (I hope me saying this doesn't jinx it!).

Well, come to think of it, neither have Linux/Windows. Hmm... maybe I'm just that good at keeping my machines problem free! :)

How to use the Eclipse IDE to develop Ruby applications

How to use the Eclipse IDE to develop Ruby applications:

"If RADRails doesn't capture your fancy and you'd rather use regular Eclipse as your Ruby IDE, Tabrez Iqbal has a great walkthrough of setting up Eclipse and using it to develop Ruby applications along with lots of screenshots and useful information."


(Via Ruby Inside.)



The eclipse IDE is amazing. I've used Aptana, which is based on eclipse and it certainly makes editing web applications a whole lot easier. Here is some more web application stuff eclipse might be able to do for you.

Monday, August 14, 2006

Found Footage: Leopard GUI in action

Found Footage: Leopard GUI in action:

" Check out the use of Core Animation (I assume) in action. I can't decide if this is great advance in user interface or if it is obnoxious."


(Via The Unofficial Apple Weblog (TUAW).)



I vote obnoxious. I didn't like that at all. Perhaps its just the video quality.

scobles moms basement

My mom’s basement:

"Come and see what we found in my mom’s basement after she died in May. No, we didn’t eat any of that food and thankfully World War III didn’t happen last week. Sometimes it seemed like it was possible, though."


(Via Scobleizer - Microsoft Geek Blogger.)



Holy crap, you gotta see the video. Thats a LOT of food. Scary. Well at least now I know where to go to for food in case of a food shortage! :)

But don't lose hope yet! Their are people like Dave out their:
Everything we do seems predicated on the assumption that we have an infinite amount of money, and that an American (or British or Israeli) life is worth an infinite number of Muslim lives. We don't have an infinite amount of money, and an American life and an Arab life have exactly the same value.

Dell Details on Notebook Battery Recall

Dell Details on Notebook Battery Recall:

"Dell announced a recall today of lithium-ion batteries sold in many of our notebook computers over the past two years. You may have seen the recent New York Times story or have seen other details in the blogosphere.  As the leader of the mobile business for Dell, I wanted to share my thoughts on this recall."


(Via Direct2Dell.)



I just checked and the battery for my D620 is not part of the recall. I'd hate to have to go through the hassle of mailing the battery, use the laptop without a battery during the wait for a replacement battery. Make sure their is someone to receive the freaking replacement battery.

Dr. Dobb's | It's (Not) All Been Done

Dr. Dobb's | It's (Not) All Been Done:

"In 2004, I wrote that 'the biggest sea change in software development since the OO revolution is knocking at the door, and its name is Concurrency' (http://www.ddj.com/184405990). The concurrency revolution now getting underway will be as significant as the object revolution of the late 1980s and 1990s in its impact on programming languages and development tools."



I have been trying to find some material to study on these matters but haven't been able to just yet. I guess that means that this is truly a new field. I want to find out how software I write can take advantage of the dual core (or however many cores, I think the mac pro is going to be a quad machine) a machine has. Is it something that will be handled by the kernel of an OS, the interpreter in an interpreted language, a virtual machines headache, or something your code has to handle. Do we have to use libraries like MPICH and do our applications have to be aware of MPI. How well do SMP kernels handle dual core processors.

I used to think that SMP was a pretty stable thing. However, I was surprised to find that Ubuntu doesn't use the SMP kernel by default because some software cause issues. What software causes what kind of issues? Must look that up.

Also, are their any differences in writing code for a dual-core vs. a dual CPU machine?

Friday, August 11, 2006

4 Ruby Debugging Systems Reviewed

4 Ruby Debugging Systems Reviewed:

"Scott Broson has reviewed four different Ruby debuggers and works out which is the best."


(Via Ruby Inside.)

Intel liberates driver source code, AMD might too

Intel liberates driver source code, AMD might too:

"Intel has released the source code of the drivers for its latest graphics hardware. AMD might release the source code of some ATI graphics drivers too."


(Via Ars Technica.)



Thats big news. Intel releasing source code is not that big a deal for me, since its the integrated GMA card. However AMD releasing source code for ATI graphics drivers IS a big deal. At least I'm sure that ATI wouldn't do that for their higher end cards. The ones gamers use. If they do, Nvidia is going to be under pressure then.


Cocoalicious, the software I use for bookmarking says its offline and wont post to del.icio.us any of the bookmarks I've made today. I don't know if this is because del.icio.us is having problems or of the client is having problems.

Posting to blogger for that matter has been iffy all day. Sometimes it posts, other times it won't.

be positive, be constructive

Fighting Illiteracy One Cup of Tea (and School) at a Time :

"In 1993, mountain-climber Greg Mortenson nearly lost his life trying to climb one of the world’s highest mountains, K2 in northern Pakistan. Reeling from his failed attempt, Mortenson stumbled into the village of Korphe in Pakistan’s Karakoram Himalaya region.

There he saw children huddled in the cold wind, scratching out lessons with sticks in the hard ground. He was inspired and impetuously made a promise to the village’s leader, Haji Ali: I will build you a school. That promise took him to rock bottom and back again as he despaired while living in his car to save money for the school until a generous benefactor set him on his way. His remarkable odyssesy reflects the astounding humanitarian reach that one person can generate."



If you're gonna do something, be constructive, not destructive.

Monument Pakistan Lahore


Monument Pakistan Lahore
Originally uploaded by Worlds best city.
Found some cool pics to show what my Pakistan is all about.

793 Pakistan - Rawalpindi


793 Pakistan - Rawalpindi
Originally uploaded by williewonker.
Found some cool pics to show what my Pakistan is all about.

Decorated Buses in Pakistan

Found some cool pics to show what my Pakistan is all about.

Enroute Pir Sohawa


Enroute Pir Sohawa
Originally uploaded by mbukhari_prm.
Found some cool pics to show what my Pakistan is all about.

Way to Naran Kahgan


Way to Naran Kahgan
Originally uploaded by ksbukhari.
Found some cool pics to show what my Pakistan is all about.

PAKISTAN-KITE


PAKISTAN-KITE
Originally uploaded by AhMaD RoXx in VanCouVer.
Found some cool pics to show what my Pakistan is all about.

With Exploits Out, MS Braces for Worm Attack

With Exploits Out, MS Braces for Worm Attack:

" A network worm attack exploiting a critical Microsoft Windows vulnerability appears inevitable, security experts warned Aug. 10."



slashdot thread.

Woops, update time.

Tuesday, August 08, 2006

yahoo ui library

I've been working with the Yahoo UI library for a few days, and I was having a problem with internet explorer. One of my own div layers consisted of a bunch on buttons, that called javascript buttons. In Firefox everything worked fine. But in Internet Explorer, some buttons were unclickable. They weren't disabled, nothing happened when you clicked on them.

It took me a while to figure out that the z-index for one of the hidden layers I had defined for a yahoo dialog were covering these buttons, making them unclickable in Internet Explorer. In Firefox the z-index was fine. Increasing the default z-index on the layer fixed the problem.

Update: That didn't fix it. I'll have to look in deeper into what is obscuring those buttons.

Update: a dialogs body must be wrapped in a div tag with class='bd'.

Saturday, August 05, 2006

dzone: A Digg for programming languages

dzone: A Digg for Ruby stuff:
"Okay, the title is a little white lie. DZone is actually a Digg-like site covering all programming and development topics, but recently its Ruby section has become more popular than when I first checked it out a few months ago."

New episode of hak5 is out! :)

Hak.5 » Blog Archive » Episode 2×01 Release

Friday, August 04, 2006

xml-stylesheet and the World of Warcraft home page:

"Their front page is XML, with an XSL processing instruction at the top"



This is interesting... why would they choose to not use xhtml?


I went and looked at their page and this is the start of the document:

<?xml version="1.0" encoding="ISO-8859-1"?>
<?xml-stylesheet type="text/xsl" href="/new-hp/layout/layout.xsl"?>

< page title="World of Warcraft Community Site" type="front">

New in JavaScript 1.7 - MDC

New in JavaScript 1.7 - MDC



Their are some interesting things that are being brought forth in version 1.7, but how are we going to handle this? Browsers have a tendency to stick around for a long time. Take IE 6 for example. If someone wants to take advantage of the features in 1.7, they will have to write two sets of code, one that works for javascript 1.7, and one that works for older versions. Why would one do that? Especially in a working world where a developer has to meet deadlines. Does IE 7 support Javascript 1.7? If not, it might take even longer 1.7 to be supported in major browsers other than Firefox/Mozilla.

When bad customer service turns good:

"We often hear horror stories of horrible customer service, so I thought I would share this story about excellent customer service."


(Via .)

Wednesday, August 02, 2006

The Next Three Days are the x86 days

The Next Three Days are the x86 days:

"Pinky wrote in to note that 'today, tomorrow and the next day are the only days we'll get dates like this: 2/8/6 3/8/6 4/8/6 like the x86 computers :-)'"


(Via Slashdot.)

Mozilla and hypocrisy

Right, but what about the experiences that Mozilla chooses to default for users like switching to  Yahoo and making that the default upon ...