Diary of a Network Geek

Yeah, yeah, happy New Year to you you, too, now, go change your passwords.

No, seriously, change your passwords.  Think about how long it’s been since  you either setup that account or changed the password on it.  Now, consider that there have been some significant security breaches in the past year, including the issues at Gawker and their family of popular websites, and think about how many places you’ve used that same password.  It’s your favorite one, right?  The one you use for all your accounts, because it’s so, so easy to remember?  Guess what, it’s also probably easy to crack and is probably in a database on some hacker/cracker website right now matched up with the e-mail address you used, too.  How long will it be, do you suppose, before someone gets into all your accounts?

Right.
So, go change your passwords.
Not sure how to pick a good one?  Well, if you trust the U.S. Government for security, you can go to their Computer Emergency Readiness Team (aka US-CERT) for advice on choosing a secure password.  If you’re like me, though, you categorically do NOT trust a government agency for your personal security, in which case I recommend that you check out premier security expert Bruce Schneier’s advice for picking a secure password.

I’ll offer two bits of advice on the topic.
First, if any system lets you, choose a password that includes numbers and special characters, not just letters.  The example I always use is “@2brutus”  And, yes, that means I will NEVER again use that as a password. *sigh*  I like to substitute numbers for letters which resemble them, like the number one instead of the letter L or the letter I.  In the example, I’ve taken a  whole word out “et” and substituted the “at” symbol, or “@”.
Secondly, try to use something that is not a single word, but a phrase.  Again, in the example, I took my bastardization of “et tu brute”, which I remembered as “et tu brutus” and mashed it up a bit.  I have known people who use short sentences, however.  One guy I worked with occasionally used lines from Lewis Carroll’s [amazon_link id=”0810911507″ target=”_blank” ]Jaberwocky[/amazon_link], which adds the extra security of words that will most likely never be found in any standard dictionary of any language.

So, trust me on this, if you haven’t done it, start the new year right and change your passwords.

Advice from your Uncle Jim:
"Life lived for tomorrow will always be just a day away from being realized."
   --Leo Buscaglia

No, I did not make gingerbread houses for Christmas.

In fact, I hardly decorate at all for Christmas.  For me, the holiday is about the feeling.  It’s about the rebirth of light into the world, both figuratively and in reality.  I mean, really, based on historical events described in the Gospels, [amazon_link id=”0380813815″ target=”_blank” ]Joshua be Joshua[/amazon_link], or Jesus of Nazareth, as most folks know him, would have been born in the Spring.  The reason we celebrate Christmas in Winter was to bring in the Pagans who were already celebrating the rebirth of light in the world via the Winter Solstice.  The early church fathers figured that if we synced up our holidays, they’d get more converts.
And, hey, I’m not knocking the marketing strategy!  But, I also don’t feel so compelled to put up a Pagan-inspired “Christmas Tree” or wreath or, really, any other materialistic decorations.

But, for those of you who do decorate, go check out the amazing gingerbread houses at Mental Floss and then, for God’s sake, step up your game!

And, most of all, have a very Merry Christmas!  Cherish all the gifts you’ve received all year long and celebrate the rebirth of light and hope into the world tonight.

Websites lie.

There, I said it.
Well, I wrote it.  Anyway, you and I and everyone else with half a brain know that these “free” websites are paid for in some way.  Mostly, that way is advertising.  Sometimes, that advertising involves selling personal data that they’ve collected.  Oh, c’mon, don’t act so shocked.  You know it’s true just like I do.  The big [amazon_link id=”B0001EQIFQ” target=”_blank” ]Internet Bust of 2000[/amazon_link] showed us all that companies without a good revenue model will, ultimately, fail.  And, the best revenue model of all on the Internet is selling your data to advertisers.

The thing is, wouldn’t it be nice if they just admitted that up front?
Well, Dan Tynan over at IT World has a modest proposal; The first truly honest privacy policy.

Watch out, because I may just start using this on my sites!
But, I won’t warn you ahead of time…

It’s not quite the “birthday” of the mouse, but…

Today is the 42nd anniversary of the first time a mouse made its commercial debut, though the patent was actually granted just a few weeks earlier on November 17th. That’s right, the mouse, that marvel of modern technology that most of us use daily is just a little older than I am. Invented by Douglas C. Engelbart and the group of 17 researchers working with him in the Augmentation Research Center at Stanford Research Institute in Menlo Park, CA, the original mouse was little more than a square, wooden box, but the little device would change the world. Engelbart showed how the mouse could let a user jump from text on one part of the screen randomly to another section without having to scroll through the text inbetween. Doesn’t sound too revolutionary to us today, does it? But, think about how you navigated to this page to read this little blurb, then try to imagine doing it without a mouse. Or, imagine trying to use Photoshop or any other graphic design program for that matter without the point-click-and-drag of a computer mouse. Yeah, pretty much everything cool you can do on a computer these days involves a mouse or similar pointer. Now, of course, to me, that’s the real genius of an invention like the mouse; it seems so obvious that we wonder why we didn’t think of it sooner!

So, happy demo day, little guy. Thanks for giving me a job and us a way to waste time at work.

Been spending big on the holidays?

Today, the day after Thanksgiving, traditionally known as “Black Friday” because it’s when retailers get out of the “red” and start really turning profits for the year, is when a lot of people do their Christmas shopping.  But, today, I’m going to share something else with you, instead of the traditional Black Friday sales.
Gentle readers, I, too, have worshiped at the altar of plastic and run up huge debt.  Granted, my ex-wife helped me with that and so did my medical debt, but, still, the bulk of the responsibility is with me.  Today, I plan on not buying anything, but, rather, enjoying the things I have.  My Christmas shopping can wait another couple days, what I haven’t done already, that is.  And, yes, I’m trying to spend less and, more importantly, debt less, though, I admit I find it difficult to stop entirely.  It’s a bad habit, to be sure.   Of course, I do pretty well, so I’m impacted only a little by my huge debt.  And, it’s just me that’s effected these days.  I don’t have a family I’m weighing down with my remaining debt.

But, it’s not that way for everyone.  Some people have really big problems with debt.  Bigger than my problems.  For them, though, there is hop.  There are solutions.  And, today, as most of America wallows in the excess, that’s what I’m bringing to you.  It’s only one alternative, but, I hope it becomes a growing trend.
It’s a website called Creditable and it’s a site designed to help you get out of that crushing debt, anonymously and free.

And, either way, whether you need this or not, enjoy today and be thankful for what you have.

Advice from your Uncle Jim:
"Hating people is like burning down your house to get rid of a rat."
   --Harry Emerson Fosdick

Speaking of free software…

Many of you know that I’ve long been a proponent of the spectacular free office suite, Open Office.  Well, there’ve been some shake-ups in the free software world and Oracle and the developers of Open Office have had a bit of a falling-out.  Nothing too serious, really, but enough of a difference of opinion about the future of Open Office that they forked the project.  Now, what that means to you and me is that they’ve taken the open source code to date and started their open development of it under a new name.  The new project is called “LibreOffice” and is being supported by the Document Foundation, who’s sole purpose seems to be continuing development of this fantastic office suite.
Follow that link and you can download the latest version to try for yourself.  I suggest you do because you may never buy another revision of Microsoft Office again.
Seriously.

Wow, even computer crime is a “family” business these days!

Hey, look, I’m from Chicago, where you can’t hardly swing a dead cat and not hit a mobster, but this surprised even me!  Apparently, according to an article that ran on CNet, 85% of all stolen data last year was linked to some kind of organized crime.  And, 38% of data breaches used stolen credentials.

But, also, people are getting rich protecting us from the threats they create!  Seriously!  According to this article at eWeek, that’s just what some of the botnet crooks are doing.  And, remember, this is BIG business.  We’re not talking about a couple hundred infected PCs, we’re talking about tens of thousands.  There are websites dedicated to the buying and selling of the data these things collect and renting out the zombie PCs to do your dirty work, like send spam.  It’s big business and where there is big money to be made doing illegal things, there’s always been organized crime.

More and more, life is becoming like a William Gibson novel…

No, this is not a post about sexual performance.
Pervs.

I use my iPhone for a surprising variety of things, even at the office.  For around $14, I threw together a suite of network scanning and testing tools that let me get a pretty good look at any network I manage.  But, that’s another post.
Today, I thought I’d bring to your attention a great blog post by Nicholas M. Petty tittled “iPen: Hacking with the iDevice“.  What he’s got is a set of instructions and tools for turning your iPhone, or, presumably, your iPad, into hand-held computer security penetration testing tool.  Yeah, I know, it still sounds dirty when you say “penetration”.  Grow up.

If you’re into security, whether you own an iPhone or not, it’s worth going to take a look at just to see the thought process and methodology.
Now, as much as I love this idea, I probably won’t actually do it myself because the first step is to “jailbreak” your phone and, frankly, as tight as money is and as important as my phone is to me, I can’t afford to have problems with it.  Still, it is an interesting idea, especially considering how many of these little devices are wandering loose out there and how many wifi access point exist out in the world.  I often wonder how secure any of them really are, especially in corporate environments.

Anyway, this should be something for network managers to think about the next time they see someone in the lobby of their building “playing a game” on their iPhone!

It’s no secret that I love WordPress.

I mean, seriously, I really, really love WordPress as a blogging platform and as an easy-to-understand Content Management System.  But, did you know that I’m one of the three most important people in WordPress? No, for real! And, I have a certificate from Matt Mullenweg himself to prove it!

Okay, so, yeah, I know, I’m not really one of the most important people in WordPress, outside of being one of millions of users who do, in fact, make WordPress a force to be reckoned with. But, we only manage that as a group, as a community. No, that certificate is a joke. Literally. It’s a joke from Matt Mullenweg, founding developer of WordPress, regarding an incident some weeks back involving a theme developer who didn’t want to use the GPL, which is the software license that WordPress uses and all theme developers are required to use. I know people will disagree, but, based on my understanding of the GPL, any derivative works of a product that uses the GPL must also use the GPL.  So, really, for most of their code, theme developers are required to use the GPL.  Honestly, I’ve never worried about it.  I mean, mostly, it’s a bunch of legal speak that means very little to the average end-user.
One of the things that this theme developer claimed, erroneously, was that he was one of the “three most important people in WordPress” because he felt that so many people used his theme.  I think he may have been surprised at how many of those folks jumped ship when they found out there was something wrong with that theme and its license.

In any case, what does matter to us about all this is that Matt took that attention and made a marketing opportunity out of it.  For starters, he started buying people premium themes that didn’t violate the GPL as a kind of protest and a way to draw attention to how serious he is about supporting the GPL.  And lots of people took him up on the offer.  But, apparently, someone griped about not wanting a premium theme or something and so, instead, Matt made a second offer to those of us who didn’t want, or couldn’t decide on, a premium theme.  He offered us free t-shirts.

Well, I’m always up for a free t-shirt, especially one that advertises something I believe in and use, so I was on this offer like white on rice.  Now, I can only imagine how many people also took advantage of this, too, but I went to his website, and filled out the form and sent off my e-mail like a kid sending in his box-tops for his toy surprise.  And, then I forgot about it.  I try to do that, frankly, when I enter contests and such.  Like casting my bread upon the water, I do what I need to do to enter and then forget it.  That way, if something does arrive, I’m pleasantly surprised.  That’s just what I was this past Friday when I found the package from Matt in my mailbox; pleasantly surprised!

As you can see from the picture, the t-shirt came with a few other things.
First of all, there were all kinds of stickers, which I love.  It reminds me of the old days when you got swag at the conventions and covered your laptop in stickers.  But, there was also an iPhone skin and pencils and, of course, the certificate, which made me laugh out loud.
I’ve already worn the t-shirt, which, as you can see, says “Code is poetry” on the front.  What you can’t tell from the photograph is that the t-shirt reads “WordPress.org” and has the official WordPress logo on the back.  Frankly, that’s the part I love.

Now, all I need to do is actually read all those books I’ve gotten on WordPress theme design and get working on it…
Anyway, thanks for all the stuff, Matt!

I always come up with these ideas just before someone else announces their version to the media.

No, seriously, I was just thinking about finding the time to research what kind of power requirements a small network would have and figuring out what sort of solar setup would meet those needs.  I was thinking about it for disaster recovery, like after a hurricane or an earthquake, but, still the principal is the same as the Computer Aid Cyber Cafe in a Shipping Container.

I may still write up my ideas, one day, but, I think not during this particular hurricane season.