Jeran
jeran
.::::...... .::
Back Viewing 0 - 20  

Map: http://quake.wr.usgs.gov/recenteqs/Maps/118-34.htm
Details: http://quake.wr.usgs.gov/recenteqs/Quakes/ci14383980.htm

Current Mood: surprised surprised

I'm running two new journals on Blogspot, syndicated as LJ users [info]jeransden and [info]silverglasstech. If you add those to your friends list, you'll get the posts appearing just like my LJ journal posts would. Silverglass Tech will be for technical posts, Jeran's Den will be for personal ramblings.

Current Mood: busy busy

I want the US Mint to drop the dollar bill. We've got a good dollar coin that's visually and tactilely distinguishable from quarters and other coins. The coins are more durable than bills, and they're in circulation. So just stop printing new dollar bills. Stop delivering them to banks by default. As worn $1 bills come in, destroy them and replace them with coins instead of bills. Within a year or two natural turn-over will handle the rest.

Current Mood: busy busy

No FanFaire for me this year, I think. It's a close call. $100 less and it'd be easy to say I can accommodate that in the budget. $100 more and it'd be a no-brainer that it's just not doable. I'm so tempted, but being up in the air at this late a date I think I'd better say "Next year.".

Current Mood: grumpy grumpy

So want:

http://www.parksabers.com/malestrom.html
http://www.parksabers.com/echelon.html
http://www.parksabers.com/fusion.html

And they've got 3 models that were new for Comic-Con (with new brighter LED-string blades instead of the EL blades) and aren't on the site yet.

Current Mood: envious envious

The FDIC has taken over another 2 banks: 1st Nation Bank of Nevada and First Heritage Bank. I expect this is going to cause a drop in the markets on Monday. And people are going to be pulling their money out of those banks. When the regulators caution against concern for depositors, I say "If I've no reason to worry, you wouldn't have had to take over the bank. I want my money, now. Go gamble with your own money, I'm taking mine somewhere more stable.".

Current Mood: sleepy sleepy

One of the reasons the SF sysadmin at the center of the current flap had for keeping everyone else out of his network was his fear that he was the only one competent to keep everything secure.

The SF District Attorney just proved he was entirely and completely justified in that attitude. Said DA just disclosed, in public court documents, 150 usernames and passwords used to access the network. They claim that the sysadmin's knowledge of them posed a threat to the network. Well, WTF do they think every damned cracker in the whole wide world knowing those passwords poses? The sysadmin was right, they aren't competent to know those passwords. Bloody morons, the lot of 'em. And they wonder why BOFHs have the attitudes they do. It's called experience with you gods-be-damned assholes!

Current Mood: amused amused

Way back when I lived in Nevada, I did lawn-mowing as a side job. For plain mowing (and bagging cuttings) of a small yard, no edge trimming or anything, I'd charge $20. This was back in '90 or so, these days I'd charge $35-40 or so for that. I could do about 8 yards like that in a day without much trouble, depending on travel times. Larger yards scaled up based on how long they'd take to do.

$35 x 8 x 5 = $1400/week, or around $6000/month before taxes and such. That's not bad money, really, if you're doing it full-time.

Current Mood: amused amused

Debian "lenny" is being frozen next week in preparation for a September release. That means I've got to start looking at getting things sync'd up to it. I'm currently running "etch", the stable version, and the big thing is deciding whether to update the system or simply save my configuration and install from scratch. Time to fire up Minerva, install "etch" and try the in-place update process.

On another note, why can't they make a generic "blog" client that can talk multiple protocols and send posts to multiple servers/users at the same time?

Current Mood: hot hot

Gas prices are going down. The Arco station's at $4.21/gallon now. That's a good 15 cents cheaper than a week ago.

Current Mood: listless listless

Looking back through my entries, I found this one about server hosting. It's weird seeing how things have changed. 2001, server hosting would be $300+/month and come with a 10GB bandwidth allowance. Today I can find hosting from ServerBeach starting at $75/month with a 1.2TB bandwidth allowance. My, how times have changed. And it's only been 7 years.

I keep saying to myself that I need to get a dedicated server and run my own system for e-mail, website, blog/journal, DNS and so on. What mostly keeps me from doing it is the scutwork: arranging secondary nameservers, setting up the firewall, locking down access, getting the Web software (the server itself, the supporting languages and packages and the apps for things like uploading content and running a blog) configured correctly. That, and I'm paranoid about finances. I want to run several months with the cost of the hosting free and clear, not allocated to anything, before I commit to that bill.

Current Mood: sleepy sleepy

You know you're working with heavy equipment when someone's looking at an 8' tall, 3-ton gas spring and you go "Yeah, that's the little one. For what you're talking about you'll want to use one of our bigger models.".

Current Mood: silly silly

Well, there's apparent confirmation on the exact method of attacking the DNS vulnerability Kaminsky reported last month. And the details show it's a nasty one. I got most of it, missing only one detail: the use of additional data in DNS responses. When you make a DNS query, the response can contain not just the answer to the query but additional RRs that the querying server should cache as well. The main use for this is when handling domain delegation: the answer contains the NS records needed plus as additional data the A records for the NS names. Apparently a lot of nameserver software trusts all additional data in the response and caches it. Nameserver software also had a fix for a vulnerability there: only data belonging in the same domain as the query will be trusted. So, send a query for say aaaa.google.com. Forge a response packet with an additional data record: an A record for www.google.com pointing to your server instead of Google's. Race Google's nameservers to get an answer in. You'll probably lose, failing to guess the transaction ID properly. Repeat for aaab.google.com, aaac.google.com and so on. Eventually you'll win at least one race. The nameserver you're running your queries through will now unconditionally cache your forged www.google.com record and return that to everybody from that point on until the TTL runs out.

The fixes I proposed would actually protect against this even though I didn't think of it (I'd assumed that nameservers discarded all additional data in the response except for NS record glue data). One of the fixes was to watch for forged responses (ones that purport to match an outstanding query but whose source port and/or transaction ID don't match) and, if you see them, discard all records that came from that query and try the query again from scratch. That's a fairly complex bit of coding, though, and a simpler fix would be to discard all unneccesary additional RRs from responses before using them.

Current Mood: amused amused

You remember the Janet Jackson Superbowl breast exposure flap back in 2004? Well, the Court of Appeals has thrown out the fine completely. They noted that, while the FCC is entirely within it's rights to set it's own rules, it's not free to change those rules without giving broadcasters and others fair notice and warning of the impending changes. The FCC fine in that case was a drastic unannounced departure from policy as the FCC had enforced it for decades, and the court found that unreasonable.

And frankly I think the FCC are just being twits. It's a breast. And, overall, an average-looking one at that. The female half of the population sees two of those on a daily basis. So does probably almost all of the male population over 18, and I'd bet that most males under 18 who're interested at all can see them on a regular basis. If seeing one's traumatic then man, you gotta get out more.

Current Mood: amused amused

Went to see Hellboy 2. Not a bad movie. Feels like it could've used 15 more minutes for a more gradual introduction of a couple of plot points, but overall good.

Since I got home my GI tract's been acting up. Beh.

This week's going to be a short week. I've got Wednesday through Friday off for CCI, so 2 days of work then 5 days off.

Want one of the Parks replica lightsabres. Pity they're so expensive.

Current Mood: sleepy sleepy

Why it's a bad idea for some people to have too much time on their hands: Joss Whedon's Doctor Horrible

The movie and TV studios ought to worry about this. Take a look at the credits and see how small a cast and crew it took to put this together. And it's more interesting and funny than most of the half-hour sitcoms out there (yes, Raymond, I'm talking about your painfully pathetic show too). We could use more material like this.

Current Mood: amused amused

You've probably heard about the flap in San Francisco where the admin has allegedly locked everybody out of the city's data-processing network. Well, apparently there's a few part of the story the city isn't mentioning. Like that fact that the network's been humming along perfectly ever since this started, so all the uproar about "sabotage" doesn't have a basis in reality. And the fact that the admin didn't lock anybody out. That implies some action on his part, and he took none. Nobody but him has access now because nobody but him has ever had access. He's refused to let anybody else have the passwords, refused to document the network configuration, won't even do something as simple as save router configuration to flash memory. He's paranoid about inferior admins getting into "his" network and breaking it. And the big problem the prosecutors are going to have is that this has been going on for a very long time (as in years, apparently, not days or weeks), and his superiors have known about it and have done absolutely nothing about it for all that time.

My take on it: they're going to have a hard time prosecuting him because he's done nothing new that he hadn't been doing consistently and with the knowledge and apparent approval of his superiors, and because they'll have a hard time showing any actual disruption of the network by him. He's a flake who should've been either forced to document and record things and train at least one or two replacements/substitutes long before this, or forced out and replaced, but because they let him get away with it for so long they've painted themselves into a corner.

InfoWorld has a story here:
http://www.infoworld.com/archives/emailPrint.jsp?R=printThis&A=/article/08/07/18/30FE-sf-network-lockout_1.html

Current Mood: amused amused

IBM has cloned the Linden SL servers. They've got server code that'll talk to the stock SL client program correctly, and that supports most if not all of the SL world stuff.

This won't affect Linden much at all. SL is a MUCK. Better graphics, different programming language, but it's a MUCK at heart. And people choose MUCKs based heavily on which MUCKs lots of the people they know are on. So Linden will continue to attact the bulk of new users, which reinforces their position. Alternate grids will need to attract a big enough community on day 1 to make them attractive to new users, if they don't then they'll collapse from simple lack of members. The only way I see for alternate grids to be successful is to specialize: provide a better experience for specific groups of users, enough to attract a large fraction of those users away from Linden's grid. And that's not gonna be easy.

Current Mood: geeky geeky

Ray Bradbury
Wendy Pini
JMS
Mythbusters
David Franklin and Gigi Edgely
Charlie Stross
Erin Gray
Herb Jefferson Jr.

Current Mood: busy busy

So. Senator Dodd is saying that Fannie and Freddie aren't in a liquidity and financial bind.

Dude. We have eyes, OK? We can see the shape they're in. Their loan portfolios are tanking right along with the rest of the housing market. The remarketing of the loans as bundled securities makes it all but impossible to stave off the foreclosures. 80% of their equity's evaporated in the last year.

And the Fed's reaction to Senator Schumer's comments tells me that the Fed's part of the problem. Schumer's right, everything he said is public knowledge. If pointing out the problem is considered a problem, things are even worse than they appear. Even I know the first rule for judging how solvent a bank is: "How willing are they to let you have your money?". You want to test a bank, walk in and ask to withdraw all your money and close your account. And you want cash, not a check drawn on them. The more resistant they are to letting you have your money, the more you want to get your money out of there.

Current Mood: working working
Back Viewing 0 - 20  

Advertisement