Archive for the ‘General nonsense’ Category

A quick rant about e-mail address validation

Saturday, May 19th, 2007

I use GMail a lot. I love it. One thing that I really love is the fact that you can create spam-resistant e-mail addresses like by adding a + sign after the user part.

So, if your e-mail address is example@gmail.com, and you have phone service from AT&T, you could give the AT&T website this address: example+att@gmail.com. This way, if the evil overlords in the AT&T marketing department ever sell or otherwise leak your address to undesirables, you can simply redirect all mail to the special AT&T address to spam and never have to worry about it again. Besides, it adds an audit trail, so you can easily trace the leak to its source.

The problem is that waaaaay too many websites think that the + sign is an invalid character in an e-mail address. This is not true. So, if you are a website owner with a broken site, please fix your validation checks!

[Incidentally, at&t is used only as an example here; I'm not complaining about them.]

How to learn a foreign language

Thursday, March 29th, 2007

Lots of people around the world spend a good chunk of time learning languages, but in the US, it’s rare to find someone who grew up speaking English who can speak anything else. I have long enjoyed studying languages, and I think the best courses ever made for development of actual fluency in the language were the ones made by the US Foreign Service Institute several decades ago.

These courses are not subject to copyright, being works made by the US government, so they should be free for download. Well, now they are, thanks to the Glen D. Fellows and the rest of the wonderful people at www.fsi-language-courses.com. These courses are very long, very hard, and ridiculously repetitive, but they really do work well.

Anyway, if you’re interested in languages, this is an amazingly valuable resource.

LinkedIn

Tuesday, January 30th, 2007

It’s fun to see something gain critical mass right before your eyes. I’ve been using LinkedIn for a while now, but I’ve really seen a ton of new people using in the last couple of months. LinkedIn raised a bunch of money this week, on a pretty significant valuation, and I’ve seen guys like Guy Kawasaki and Jason Calacanis blog about it recently, with very favorable opinions.

At any rate, I’ve been spending some time fixing up my LinkedIn profile and adding connections. If you want to connect on LinkedIn, send me an invitation to my last name at positivenetworks.net.

Some random updates

Tuesday, January 30th, 2007

I’ve had a really busy few weeks since the new year and have been slow at posting lately. But I guess you knew that. :-)

Wordpress has been upgraded to 2.1, so please let me know if you have trouble with the site. I had to manually fix up the sidebar, since the updates conflicted. Maybe it’s time to pick out a new theme…

I also have been having some trouble lately with Linode, although I’m hesitant to blame it solely on them. My node keeps mysteriously spinning out of control once every two months, and response time has been known to really suck on occasion. I’m thinking of moving to MediaTemple or 1and1. When I get around to it. At any rate, sorry about the recent outage.

I plan on revealing my prediction soon. Watch this space!

Security is hard, part 5 – checking voice mail for free

Wednesday, January 3rd, 2007

OK, fine, this may be more of a LifeHacker-style tip, but it kinda fits the topic, and hey, it’s my blog.

Are you tired of paying minutes for checking voice mail? T*Mobile has the solution! Simply sign up for a shared minutes plan and get 2 free phones and pone numbers. Only give out phone number A, and when you check your mail, use your unlimited phone-to-phone minutes to call from phone B. Hit * when your voice mail starts talking.

Engineering and Christmas lights

Friday, December 22nd, 2006

One of the best Christmas movies of all time has to be Christmas Vacation with Chevy Chase. I just caught it on cable last night while I was trying (not) to get some code working.

I couldn’t help but be struck by the Christmas light scene, where he wires together a zillion strings of lights and then gets stuck troubleshooting it. I think programmers everywhere can sympathize – the code is perfect, why doesn’t it work? I’d never noticed it before, but looking at those scenes through the eyes of a debugger is hilariously familiar.

Slow hard drives

Wednesday, December 13th, 2006

I went to Micro Center this week to buy a new external hard drive; my 120G internal laptop drive is too full. I thought I’d try to get the fastest one I could, so I got a FireWire 800 enclosure and a new Segate 320G 7200RPM drive with a 16MB cache. Since I spent a little extra on fast parts, I thought I’d benchmark a bit. After timing some drag-and-drop operations, I was coming out with around 30MB/sec, which seemed too slow for this equipment.

I’m not a storage guy, but I seem to remember 33Mb/sec as an old transfer rate speed to ATA drives. A great Wikipedia article confirmed my hunch. I was instantly irritated with the vendors of this drive enclosure, so I wrote up a quick program to benchmark this thing.

The program confirmed that I was getting right about 30MB/sec copying a 2G file from my laptop to the external drive. So, just for the sake of comparison, I changed the program to simply writing 1GB worth of 0’s and pointed it at my internal hard drive.

30MB/sec.

I use a 17″ MacBook Pro for most of my dev work; I work in one of several VMs depending on the environment I’m developing for. My System Profiler tells me that I have a 1.5Gb/s (192MB/s) SATA controller with an attached Segate 120G 5400RPM drive. No obvious reason it would come in at 30MB/s sustained write.

I then tried my program on my new external drive. 57 MB/sec. Waaaay better. This is about what I’d expect out of this drive.

So, I have no idea why my internal drive’s sustained transfer rate is roughly 1/2 of my external drive’s. The data sheet says it should be capable of 42MB/s. Sure looks like it’s clipped at 33 though.

The true performance story, of course, has little to do with max sustained transfer speeds; seek time and bursts tend to dominate performance. Still, with a SATA controller and a reasonably fast hard drive in my laptop, I’m curious to know what’s up. The inescapable truth here is that it’s going to take 2x the amount of time to back up my iTunes repository that it should, or to copy VM’s around, which annoys me.

Still CCIE #5444

Monday, November 27th, 2006

After donating a nontrivial amount of my Thanksgiving weekend to studying, I am pleased to report that I passed my re-certification exam and am still CCIE #5444.

I had complained about a few books previously; now I have some empirical data to help me better evaluate them. First, let me say that I was pleasantly surprised with one Cisco Press book, Network Security Principles and Practices by Saadat Malik. Things got a little unclear when he got deep into crypto, but otherwise, this is hands down the best of the books I read this weekend.

The rest of the books were not… good. Having taken the exam, I stand by my estimate from my last post that the official exam guide addresses, at best, 25% of the subject matter. Without discussing specific exam items, I can tell you that I saw very detailed questions from a wide range of topics, including Token Ring, BGP, Ethernet, IP addressing, and lots of other non-security-specific topics, virtually none of which were covered (or at least covered adequately) by any of the books or RFCs I read.

As bad as the books were, I am pleased to report that the exam is great, from a technical perspective. For the most part, the questions were difficult, precise, and intelligently crafted. There were some very difficult crypto questions, and it was obvious that the writers of those items were waaaay more comfortable with the subject matter than any of the book authors. And we’re not just talking protocols, either – there were actual algorithm questions.

Overall, I’m happy with the certification. It’s expensive and is a bit diluted compared to the 90’s, but it still seems to me to be the best one out there. And, best of all, it’s done for another two years. Just in time, too; I’m behind on some (network) driver stuff.

Pop quiz: would I still be happy with the exam content if I had not passed? :-)

TechCrunch on CarsDirect

Saturday, October 28th, 2006

Mike Arrington confirms something I’ve always suspected: CarsDirect is a pretty good way to buy a new car. I’ve never gotten to use them because they haven’t had dealers in my area for the car I’ve wanted.

Welcome to Bellevue

Sunday, October 22nd, 2006

Ken and I have arrived in Seattle and are staying at the Paragon Hotel in Bellevue. Not bad, except it’s about 5 feet from the highway. They even offer free wi-fi service for the entire hotel. But, there’s one problem.

When you connect to the network and open your browser, it goes right to their portal page and asks you to create a free account. You get to pick a username and a password. When you’re done registering, you get a friendly prompt:

Please check your e-mail to get a message with your password from our administrator.

Wow. Seriously. I’m at a hotel. I don’t have Internet access with which to check my e-mail, or else I wouldn’t need theirs.

So, I’m now borrowing Ken’s Verizon EVDO service to get my password. POOR DESIGN.

Incidentally, if these brainiacs e-mail me the password that I just typed in, I’m going to go nuts. That is (was?) a secure password! Sigh…

UPDATE: They didn’t mail the password, just a link to click on.