21st Century Misfit

This blog has moved

2008-07-16T10:54:00.000-07:00

Please visit me at cohoe.net

Great New PodCasts: Photography and Media

2008-04-29T21:41:00.000-07:00

Leo Laporte, the host of some of my favorite podcasts, recently went on a photo-safari to Tasmania. During his trip, his podcasts net@night and This Week in Tech were on hiatus. In my search for fresh commuter podcast material, I stumbled across several excellent podcasts.

This Week in Photography is a great program that highlights recent developments in photography (of course) and photo-related software, like PhotoShop, Lightroom, and Aperture. Ironically, Leo was a guest of TWiP upon his return from Tasmania, and mentioned some great sites during that show. First, XYZ Adventures has a fantastic photo-gallery of the trip. Luminous Landscapes is another awesome site, with superb photo tutorials.

This Week in Media is another very worthwhile show. A recent episode mentions Tim Robbins' keynote at the National Association of Broadcasters annual show in Las Vegas. Robbins lets loose on the NAB during his keynote. The organizers shut off video of the event, but the audio made it out, and it is worth a listen. Essentially, he calls out American Broadcasters on the abysmal state of programming and goads them to fix it. It is timely and well deserved feedback for the bottom feeders in the TV industry today, and he gets quite a few nervous laughs from the audience. We'll see if his comments have any long-lasting impact. I hope so.

More versions on PaperTiger and AdAge.

More than you thought to understanding comics

2008-03-23T10:41:00.000-07:00

After watching an amazing Adobe presentation from Dan Bliton on using manga as a training medium, I checked out Understanding Comics: The Invisible Art. It's making me look at things in a new way. In Understanding Comics, Scott McCloud talks about how we iconify objects and ideas, and the process of conceptualization (learning) reminded me of On Intelligence by Jeff Hawkins (interview) and Ways of Seeing by John Berger (excerpt).

Additionally, McCloud has some great thoughts on how a reader or audience identifies with characters in a book or movie, so distilling the characters down to essential elements of humanity in comics and cartoons is more successful in getting the reader or audience to identify with those characters.

Global climate destabilization: how it ends

2008-02-11T05:22:00.000-08:00

Greg Craven, from Corvallis, Oregon, has created a wonderfully well-done video on global climate destabilization. The neat thing is, he doesn't try to convince; he tries to get you to think. It's a risk management issue, he says.

This is a must-watch for everyone, especially for those who remain on the fence. Inform yourself and your neighbors; the stakes are too big.

Oh, and he's a Ze Frank fan too.

The Story of Stuff

2008-01-22T09:58:00.000-08:00

Ever notice that things don't last as long as they used to? It's a concept called "Planned Obsolescence" which was promoted in the 1950's by Brooks Stevens. Where does our stuff come from? Where does it go?

Check out this awesome video; it's only 20 minutes long. There is some great info included on planned obsolescence and sustainability.

It's really thought provoking when you think about the ever bigger and badder computers that are marketed to us. They try to sell us the latest and "greatest" versions of Windows and Office 200x, which of course require a new computer to run them. It makes me truly realize the benefits of Open Source software and computer reuse.

O'Reilly reads its blogs to you

2007-12-22T15:41:00.000-08:00

OMG this is cool. Looks like most of O'Reilly's blogs have a reader built in (through the ReadSpeaker service). The voice is understandable, and if you don't like the embedded player, you can download MP3s for portability. Apparently this has been online since at least April 2007, and it's still being perfected; O'Reilly has a clearly linked feedback form every time you listen. Here are a few bugs I noticed:

It reads some graphic alt-text to me. Accessibility maybe, but irritating to me.
There seems to be a word or time limit on the length. I could only get it to read me short articles.
It resizes my Firefox browser window every time I click the "listen" link.

O'Reilly is a great source of blogs, and I have a terrible time keeping up with them. Sounds like a playlist in the making. Check out this entry on .htaccess, or for you bohemian types, here's a article on Dave Byrne. Click on "listen" in the upper right.

Google Maps doesn't know Israel?

2007-12-17T15:21:00.000-08:00

I was surprised when I tried locating some Israeli cities for a history course and noticed that Google Maps is noticeably lacking any info on Israel. Both Google Maps and Microsoft Live Maps know that Jaffa (formerly an ancient city and battle site of the Crusades) is now a neighborhood in Tel Aviv.

What Google Maps fails to display are the many roads and other towns in Israel. I kept zooming out, looking for any detail, until I eventually saw the national border. Funny that surrounding countries have highways and cities marked, but Israel has absolutely nothing.

I did another search and found various theories regarding Google and the Israeli government. In fact, there is a 1997 US law specifically forbidding US operators from make hi-res aerial images of Israel (and only Israel) available. Apparently there have been issues with hi-res (>2m resolution) images of Israel for 2 years or so, but this is the first time I've noticed regular map features missing. Curious that Google chose to block information that is freely available at other online locations and any map store or atlas.

I guess my biggest concern is the transparency or rather lack of it. It makes me wonder about the motives and reliability of other Google resources. Bottom line: check multiple sources to verify your data.

Online references for written sources

2007-12-16T11:23:00.000-08:00

Here's the dilemma: you've got a paper due, and you waited longer than you should have to gather sources. You need some additional resources but don't have time to wait for library holds to come in. Sometimes having a source to cite is all you need. This works really well if you have a quote from somewhere else, i.e. a web page or Wikipedia (which instructors are beginning to hate as references).

Here are two options: Google Books and Amazon.com.

Google Books and Amazon allow you a limited preview of some titles. Both sites allow you to search inside these previews. Do a search for the text string you're looking for. You can note the page number of your quote, pull up the publication info from the copyright page and voila, you have your source.

For example, I found a web page with an excerpt from The Technological Society by Jacques Ellul. I checked the local library, and they have the book, but it's in their maintenance facility. Argh. So I search for the title on Google Books and Amazon. Both services allow you to search inside. Both sites give you limited access to the text (Amazon more generously so) and page number.

By the way, I did pick up this book from a local college library, and it looks very promising. Anyone who feels like a slave to technology - a maintainer of tools rather than a user of them - will immediately see the implications of this work. It was written years ago and then translated from French, but Ellul's prescience is amazing.

GreyHat Cyber Defense Workshop

2007-11-18T09:00:00.000-08:00

I attended a recent network mapping workshop hosted by the University of Washington Grey Hat Group at the Tacoma campus. Although the nmap exercise was review for me, I found out about a couple new tools and an upcoming event that are worth sharing.

BackTrack is a sweet Linux distro that bundles some great security tools. Although Nessus is notably missing, apparently because of their new proprietary license for version 3, the distro appears much more up-to-date than Knoppix STD and Nubuntu.

DVL (Damn Vulnerable Linux), a play on Damn Small Linux, is neat little distro that you can use as a test target of your scanning and pen testing skills.

Finally, there is a cyber-security competition coming up in April 2008, to be hosted at a large Redmond software company. This is not a vendor specific event; it was held last year at a military base near Tacoma. Here's the rub: this appears to be the same weekend as LinuxFest NW, so I'm undecided on how I'll spend my weekend. LinuxFest is a lot of fun, and makes for a good family outing. My son enjoys it too; we both like the presentations, salmon bake, and world-famous raffle.

More decent blogs

2007-11-15T08:20:00.001-08:00

It's not like everyone isn't already suffering from information overload, but just in case someone missed the boat, here's another great RSS feed.

The Burton Group provides high-quality business analysis as a paid service. However, they also offer free RSS feeds to a handful of their blogs. The info is timely and deals with all manner of tech happenings. If you're looking for a new feed, plug burtongroup.com into your RSS reader. The Application Platform Strategies blog is pretty interesting and not as intimidating as it sounds. Recent posts deal with intellectual property and Google's new Android OS.

And if you happen to not be reading this on an RSS reader or aggregator, here's a primer on readers. I've used Bloglines in the past and am currently pretty happy with the Google Reader.

Block ads, tracking, and browser hi-jacks

2007-11-10T09:46:00.000-08:00

I've found a very useful tool to block ads, cookie trackers, and known browser hi-jacks. I've been using it successfully for several years, and it significantly reduced the spyware on the machines I manage. It works by sending unwanted communication attempts to known servers back to the loopback address (127.0.0.1) where, of course, that server doesn't exist. It works on Mac, Linux, and Windows by replacing the hosts file.

Simply download MVPS's custom hosts file, remove the .txt suffix, and place it in either /etc (Linux/Mac) or C:\windows\system32\drivers\etc (Windows), overwriting the file that's there. For a warm fuzzy, save a copy of the old hosts file first. For Windows, you should then either do a reboot or a dnsflush to help your network software recognize the new file entries.

Aside from the security benefits, it will speed up your internet connection, since you don't have to download ad graphics. It will display a red 'X' for those graphics in your browser.

You'll notice that the Google search results that point to ads don't work anymore. If you need to see certain ad servers, simply edit the file and comment out those entries. Warning: don't curiously plug any of the host entries into your browser; some of them are very nasty and/or malicious (that's why you want to block them in the first place!).

Do you know about Google alerts?

2007-09-19T08:25:00.000-07:00

You can set up alerts in Google to automatically notify you when news stories (or other content) appear on the internet. This is great if you want to stay on top of specific topics but don't want to manually look for the stuff every day. If nothing new is available, you won't be notified. Otherwise you'll receive an e-mail with links to the appropriate news stories.

I have alerts set up for certain tech developments I want to stay on top of, in addition to news on certain companies. I love getting daily updates on stories in which I am interested.

The Shadow IT Department

2007-08-29T08:03:00.000-07:00

This fantastic article entitled "Users Who Know Too Much and the CIOs Who Fear Them" really struck a chord in me. It talks about how your users will engineer around you to get their jobs done.

I think the folks in both the engineering and security fields should give this a read. Although we don't take an obvious financial hit by not innovating, we are affected. We need to be aware that when we say "no," we are encouraging (forcing?) users to go around us, potentially affecting productivity and probably affecting security. An interesting question to ask oneself when considering a user request is "how could they engineer around us if we say no?" Read "I, A User" for an example.

The capability of your IT needs to be on par with what's available outside your organization. Two of the biggies that stuck out for me: collaboration and mobility. Both availability and usability have to be up to snuff, or users will go elsewhere.

Sidebar: Tools for Managing Shadow IT
More on Shadow IT

What happens if Google goes down?

2007-08-22T08:25:00.000-07:00

As I listened to the Net At Nite podcast hosts discuss Page Flakes this morning, I was thinking about personalised home pages and online presence. I realized that, like hosts Leo and Amber, I'll try a service for a while, then let it trickle off.

Right now, I seem to have many of my eggs in Google's basket. Blogs, homepage, rss, etc. I started to wonder, "what would happen to my stuff if Google went down?" Not as crazy as it might seem, as Google recently shut down it's pay video service and the corresponding DRM server, effectively disabling all videos purchased by customers over the past few years. Although they later extended the shutdown notice, users will still lose the ability to play their videos six months after final shutdown.

So, when I went to look at the Fake Steve Jobs blog a bit later, I was rather ironically shocked to discover that blogspot was down. "Server error. Try again in 30 seconds." I tried my blog. Same thing.

As you can see, it's up now, but this situation gives one pause in storing stuff online. At the very least, I think I'll be backing up my posts monthly, even if it's to something as simple as an html file.

(BTW, Page Flakes is very cool.)

Friendly HTTP Errors Are Not

2007-07-25T11:54:00.000-07:00

Debugging ASP pages? Then friendly HTTP errors will drive you mad.

Friendly errors will show you something like HTTP error 500 - server error, instead of
Active Server Pages error 'ASP 0126' Include file not found. Needless to say, the latter is much more helpful.

This is easy to turn off within IEs advanced settings. However, minds greater than mine have decided I don't need access to that tab.

If this is the case for you, simply run RegEdt32 and look for the following value name: Friendly HTTP errors. It should live under [KEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]. Change the value to NO, exit RegEdt32 and restart IE. You may also have to dump your browser cache.

Using WINDIFF to compare 2 directories

2007-07-18T09:51:00.000-07:00

Have you ever copied the contents of a folder and the operation erred out midway because of a permission conflict or corrupt file? How do you determine which files are in the new location, so you can restart the copy operation? File-by-file comparison can be difficult if you're dealing with a large number of files.

The DIFF command has been around for a while in the Unix world, and does just what we want. It compares two directories (or files) and reports the differences between them. With WINDIFF, this functionality is available for Windows.

Syntax: C:\>windiff path1 path2

Example:

C:>windiff \wwwroot\GLOBAL\img \Backup\global\img

Generates this:
.\thumbs.db identical
.\vsd.gif identical
.\vssver.scc identical
.\windows.gif only in \wwwroot\GLOBAL\img
.\xls.gif only in \wwwroot\GLOBAL\img
.\zip.gif only in \wwwroot\GLOBAL\img

If you don't have WINDIFF, it is available as part of the WinXP SP2 Support Tools suite (http://www.microsoft.com/downloads/details.aspx?familyid=49ae8576-9bb9-4126-9761-ba8011fabf38&displaylang=en).

No remote access to Macs for updates? No problem!

2007-06-25T11:42:00.000-07:00

I was looking into getting remote desktop access to some of the Macs I manage. The reason? As a lazy (in a good way) sysadmin, I didn't want to keep going down to my lab to update the Macs when security patches came out. I wanted something that came with the box, a la Windows Remote Desktop (RDP). I didn't want to install third party products like VNC or pay for anything extra.

Voilà, here is the solution:

ssh username@remotehost
sudo softwareupdate -l
sudo softwareupdate -i name_of_update

Firefox 2.0.0.4 doesn't like limited users

2007-06-22T21:03:00.000-07:00

I run as a limited user on my XP machines, and Firefox 2.0.0.4 doesn't like this. Even after I install/upgrade Firefox as an admin user, I get "One or more files could not be updated..." each time I run Firefox as my regular user.

Josh Flanagan has a fix for this. I hope the Mozilla folks fix this for the next release or my confidence will begin flagging.

DNS Attacks

2006-06-06T13:27:00.000-07:00

Interesting reading about the internet's Achilles heel.

DNS Amplification Attacks (packetstorm)
DNS Amplification Attacks (ripe)
DNS Cache Poisoners - Lazy, Stupid, or Evil?

New data views

2005-09-18T00:17:00.000-07:00

These innovations are all interesting ways of looking at existing data in new ways. This is something that holds enormous potential.

* Where's SPAM coming from? Uses Google Maps to display spam sources.
* Enthusiast uses Google to reveal Roman ruins.
* MIT researchers map city by cellphone.

Open Source rules!

2005-02-21T14:45:00.000-08:00

I've been using various open source packages for a while, but I thought I'd start letting other folks really know about them. I'm handing out Firefox to friends and encourage you to do the same! All are community supported and free!

Some of my favorites:

Firefox is an open source web browser with built-in search bar from Google, IMDB, and others.

Open Office is a complete application suite alternative to Microsoft Office, including a FrontPage-like web page editor.

I've just started using the GIMP, a powerful alternative to PhotoShop.

You can get these, and many other tools all wrapped up in an easy-to-use CD at TheOpenCD.org.

Greater Seattle Linux Users Group (GSLUG)

2005-02-14T12:53:00.000-08:00

I attended my first meeting on Saturday. It was a hoot. There is a large and knowledgeable Linux community in Seattle. Tons of great info - all with a sense of humor. Check it out.

Greater Seattle Linux Users Group

OpenBSD release song lyrics

2005-02-14T12:46:00.000-08:00

OpenBSD puts out a theme song with each version release. DL and listen. These are high quality - very well done. Read/listen to the lyrics for an even bigger kick.

OpenBSD release song lyrics

The Chronicles of George

2005-02-11T13:52:00.000-08:00

The best trouble tickets of all time. If you have ever worked a Help Desk or used Remedy, you'll love this.

The Chronicles of George

Seattle Linux and BSD Users Groups

2005-02-05T15:26:00.000-08:00

Although I've been playing with Linux, specifically Redhat, for a while, I just watched Revolution OS on DVD. This documentary renewed my desire to work with other Linux & BSD geeks. Here are some user groups in the Seattle area.

Greater Seattle Linux Users Group
Seattle BSD Users Group

IBM Linux Client Migration Cookbook

2004-12-18T08:40:00.000-08:00

Another excellent Linux resource from IBM. IBM has poured a lot of money into Linux and it shows.
Linux Client Migration Cookbook: A Practical Planning and Implementation Guide for Migrating to Desktop Linux

The Shadow of Yesterday

2004-12-09T18:48:00.000-08:00

The Shadow of Yesterday is an open source role playing game. Download the rules for free. Pretty slick!

Creative Commons

2004-12-08T20:47:00.000-08:00

The Creative Commons is a pretty fantastic idea. Creative Commons has video, audio, pictures, and text. Pretty cool, and free for you to use.

"Creative Commons is a nonprofit that offers a flexible copyright for creative work."

You can also get free music off the Wired CD.

Cisco 4006

2004-12-06T22:47:00.000-08:00

A little light reading on the Supervisor Engine of the Cisco Catalyst 4006.

Netbios Hex Codes

2004-12-06T22:43:00.000-08:00

Pretty neat list of Netbios hex codes that show up in an NBTSTAT, courtesy of Church of the Swimming Elephant.

Deworming the Internet by Douglas Barnes

2004-12-02T16:29:00.000-08:00

Deworming the Internet by Douglas Barnes

Lightweight Directory Access Protocol

2004-12-01T15:25:00.000-08:00

Another wiki goody: Lightweight Directory Access Protocol

Howard Schmidt Interview

2004-12-01T14:22:00.000-08:00

Interesting 2003 Gartner interview with eBay's current CISO.

How does EFS Work?

2004-12-01T13:17:00.000-08:00

How does EFS Work?

Securing Data in Transit with IPSec: "File encryption can protect data residing on disk, but does not protect that data when it's in transit over the network. If you don't believe this, send an EFS-encrypted file across the network and capture the packets in transit. You'll see that the data is readable."

Encrypting File System - Microsoft's take

Geek Comics

2004-12-01T13:13:00.000-08:00

The king of geek comics - Dilbert

Another classic, though less well-known - User Friendly the Comic Strip - The Daily Static

Not sure about this one yet... - DORK TOWER

Domain Name System

2004-12-01T13:07:00.000-08:00

Small, but excellent collection of articles on DNS. Wikipedia is the bomb!

Domain Name System - Wikipedia, the free encyclopedia

SecurityFocus HOME Guest Feature: DNS Cache Poisoning - The Next Generation

Root nameserver - Wikipedia, the free encyclopedia