* Posts by Psymon

266 publicly visible posts • joined 7 May 2008

Page:

Ten... freeware gems for new PCs

Psymon

VLC? Pah!

Yes, as several others have pointed out, VLC's a tired old dog. One of the most annoying features is when you hit pause, theres a delay.

What, am I watching this on VHS?

Media Player Classic is a truly well rounded app, but to get around the codec issue, simply download the K-lite codec pack, and choose "Lots of Stuff" during the install, and you get MPC.

Voila, you have high functionality media player, with codecs to to play just about anything, even the Bink and Smacker A/V codecs EA and Codemasters commonly use as the format for their in-game videos. Crucially, because they are system codecs, your other player apps can use them too, improving overall system flexibility.

For disc writing, I've sworn by Ashampoo Burning Studio (ver. 6, the free one) for years, and can count the number of writer drives more easily than the the number of discs I've worked through. Tiny memory footprint, extremely stable, fully featured, delightfully lacking in bloatware and I can run multiple instances, writing to multiple drives simultaniously.

I've used XBMC, and while I have no argument over cross platform issues, the interface is appalling unintuitive for novice users. I know this because I had a system with it set up for my parents in their living room.

No matter how much I tweaked the preferences or themes, they found it just too difficult to navigate.

The solution came with MediaBrowser, an open source plugin for media player which combines similar functionality, incredible beauty, and crucially, ease of use which means my parents, rather than watching telly, frequently browse through the 2TB of movies and TV using the media center remote, with the same ease that they use the DVD player

Glider pilot 'swallowed camera memory' say plunge tragedy cops

Psymon

it's certainly a testament to the robustness of SD memory card technology.

I'm struggling to imagine another data storage medium that could withstand a tour of the human digestive tract.

Mind, I'm now strugglin to imagine another medium that COULD take a tour of the digestive tract.

I cant get the mental image of a man trying to swallow a VHS tape out of my head, now.

Dell's rapier-thin PowerEdge M420 to render Hobbits?

Psymon
Holmes

re: what is its application

As the article extensively mentioned, render farms are the biggest application.

3D ray tracing (if you can even still call it that given its umpteenth generational jump from the original concept) for movies requires truly vast quantities of number crunching for every frame of the movie.

One thing that piqued my curiosity, is that I couldn't see any fans or PSU, indicating that there is some type of blade-like enclosure this will go into.

Microsoft probes IE8 dll AWOL hell

Psymon

I'll bet anything on 3rd party software causing this

My first thought was that it could possibly be a false positive from antivirus software, but I'd guess it's more likely to be a failed malware infection attempt that causes to dll to not be installed/updated correctly during the patching process

Demand for safety kitemark on software stepped up

Psymon
Flame

It all sounds suprisingly good

I do like the idea of kite-marking software, simply embarressing the software company into complying with the standards that were set out for the given platform they have chosen to code for would be a huge boon in overall safety.

As a sysadmin, this has been the bane of my life, and the primary reason the windows platform has been such an easy target. Even going back as far as XP SP2, in the right hands it was a pretty secure platform. With internet security zones, and a draconian group policy lock-down, you could make a windows box pretty resiliant.

Until that is, you tried to use any 3rd party software. At which point, you then found yourself turning off every safety feature because the programmer had decided it would be easier to write his config data into the program file folder, or worse system32.

Adobe might actually pull their finger out and fix their software. As for Spotify, the guy that thought it was a good idea to install the executable in the roaming appdata folder of the users profile needs to be shot. Repeatedly.

When using Linux do you have to log in as root, otherwise your web browser crashes? The UAC should cause immediate panic and a feverish antivirus scan. Instead we've been collectively conditioned by poorly written software to just say 'meh', and blindly click continue.

This is the crux of the matter.

Microsoft releases fix for Applocker bypass flaw

Psymon
Trollface

irony overload from the openbsd fanboi

Yet again, the nix zelots mistake security by obscurity for perfection in code.

This argument is tiresome and tedious. Especially from an OS that uses Kerberos protocols from the stone age, laughably simplistic ACLs, no concept of domains or computer accounts, and up until very recently, easily crackable RC4 encryption.

At least MS fix their security vulns, instead of bickering for months on end as to wether it actually IS a vulnerability. Then again, in the slow moving world of the sleepy nix, a few months make no difference because nobody's bothered about trying to exploit it.

I've tried various nix solutions, and found them lacking. Everytime we try to intergrate some nix based system, without fail, we have to switch off huge swathes of security settings on our MS systems to make them (and here's the important word) BACKWARDS compatible.

Just this week I've have to switch off AES128 and AES256 because some idiot bought a solaris server, and don't get me started on the IPv6 switchover! Yet again, the only things that broke were non-MS.

Cryptoboffin: Secure boot a boon for spooks' spyware

Psymon

yet another storm in a teacup

All this chicken-little knashing of teeth and arm waving is tediously familiar, and smacks of the same paranoia that surrounded CPUID and TPM technologies when they were first introduced.

At the end of the day, this is merely a step toward improving overall security within the OS. As with all the other "controversial" technologies, there will be an option to SWITCH IT OFF in the bios.

There ya go, you can breath again now.

Microsoft surprises Street with double-digit growth

Psymon

I think this is only the start

When I first heard about MS buying Skype for a ludicrous amount of money, I thought "Meh, another blue-sky venture", but the more I thought about it, the more I realised that this is gonna be big. Really big.

About 18 months ago, we upgraded our phone system due to the company we bought it from going under. We replaced the lot with a new VOIP system.

The handsets were expensive, the software was expensive, the new POE switches were expensive, and the manhours in setting up a complex VLAN to support it... You get the idea.

The reasons we went with a digital VOIP system were many, but included the fact that we could use our existing ethernet infrastructure. As it turns out, the CAT5 wiring is about the only thing that our phones have in common with the rest of our IT infrastructure, and at the end of the day, it still only handles voice calls.

Now imagine Skype being intergrated into Active Directory and Exchange/outlook. The potential savings are incredible. You can buy a USB microphone/speaker in any formfactor you desire for next-to-nothing.

Contact details, routing and out-of-office, all become non-issues, as you already have these set up and configured within AD/Exchange - your phone simply follows your login. Changes and feature adding

Of course, this is all omitting the ADDED features, such as video, conference calling, instant messaging...

Apple unveils 'World's First Thunderbolt Display'

Psymon
Mushroom

It's just Apple ADC all over again

Pretty nice monitor.

Very nice Docking Station.

Unfortunately, the Apple price looks even more ludicrous when you realise that, just like every other Apple 'innovation', they, will drop support for it within a few years.

When you buy a peice of expensive kit such as this, one of the biggest factors to take into consideration is its product lifespan, and I'm afraid you can expect a maximum 5 years of slowly whittling support for this standard before you won't be able to plug it into anything without first purchasing a massively overpriced adaptor from Apple, in turn completely defeating the point of the single wire system.

"But it's based on Displayport!"

Really? Oh, you mean the outside runner of the video standards? The one intended to improve on HDMI, but couldn't get off the starting blocks fast enough, so HDMI had already equaled resolution capabilities?

Seriously. How many non-Dell monitors do you see with DisplayPort? Don't get me wrong, it's a nice standard with the daisy-chaining and latching connector, but then again, Betamax was a nice standard too. Phillips System 2000 was even better.

Online map suppressing crime reporting, says survey

Psymon

If the people consider the reporting the crime is worth less than potentially devaluing the house...

...Then clearly, the 'crime' wasn't worth reporting in the first place.

There once was a time when the police were set up to prevent the daily body turning up in the Thames. Just stop and think about that for a moment. A dead body. In the Thames. Every single day.

Now try and sound serious when you talk about crime rates going up. These days apparently it's a crime serious enough to warrant police intervention when kids are having fun and making noise on the street. Despite the fact that there's nowhere else for them to go. Or your birthday party has gone on til 10.05pm - which is simply intolerable!

What you have to remember is that in general, the "house price worriers" set sit in an almost eclipsical venn diagram state with the "nosy neighbours". The people who come over to tell you off because YOU haven't mown YOUR lawn, and it's making their property look messy by association.

What we have here is a win-win situation. Because the nosy neighbour set will now have to think twice before crying wolf, police resources should be stretched slightly less, kids might get an inch of breathing room, and hopefully, social attitude towards what is now considered a 'crime' may settle a little closer to the tolerant levels

Microsoft floats 'site-ready' IE10 preview

Psymon
Meh

@mittfh

While I certainly understand your point, it is hardly justification for lazy and badly written software that forces you to run as administrator, making your entire OS vulnerable.

That's like me designing a generic fuel injector, and when asked why it's squirting petrol all over the manifold, replying "oh, that nozzle is there for a different model of engine, I can't be arsed to redesign it just for your car!"

If you install nothing but well written software, then you can quite happily run Windows under a limited account *as it was intended to be used in the first place*, only elevating to admin status to install software and drivers.

In an ideal world such as this, if the UAC pops up while you're NOT installing software or drivers, then it will give the user genuine pause for thought, rather than just assuming its Firefox/java/adobe et al trying to update itself in a non-compliant manner.

Instead, we have become so punch-drunk from the constant bombardment, most users blindly click OK everytime it appears, allowing any virus to run with YOUR administrative privileges, which you've been forced to use because your badly written software breaks otherwise.

That said, I am steadily seeing a shift in trends since the appearance of Win7, with more software becoming compliant. Even Adobe are pulling up their socks.

Nvidia still have a fair way to go with their new driver models, I am seeing a lot of buggy drivers. So much so we now buy ATI cards for our graphics workstations.

Psymon
Mushroom

Mozilla once again demonstrating they have no place in an enterprise environment

Firefox is a very nice browser for home users, but that's it.

Nearly every aspect of the softwares architecture under the bonnet is wrong in every particular.

Self update should be done by an installed service, not by the running program trying to write back to its program folder, hence the UAC alarm.

Firefox abuses and incorrectly uses the local/roaming profile folders with a jaw-dropping lack of understanding that I would barely expect from a first year student of software engineering.

Finally, your software preferences and configuration need to be stored in a registry. Locally saved config files were passé in the early ninties.

Despite many tweaks and changes in the details, these 3 basic rules have been the backbone of the NT family from the very start. If you can't grasp them after 20 years, then frankly your maturity as a software engineer is in serious doubt.

It's pretty obvious that software developers who ignore these aspects of the Windows OS do so out of a hypocritical disdain for the very operating system they are writing for, and ironically, are the very cause of the Windows insecurity. You don't run your Linux install as root all the time, but you have to with Windows because of 3rd party software that breaks all the rules.

On a corporate network, IE is vastly more secure than any of the alternatives, not because of the underlying code, but because it uses the host OS correctly, it can be centrally managed using Group Policy, and configured to such a granular level that it can be locked down completely when viewing potentially dangerous zones.

You can't even centrally manage the bloody homepage of these rinky-dink browsers.

So, excuse me if I'm a little cynicle about Mozilla and Googles attempts to ratify the next web standard when they can't even comply with the standards of the host OS they are writing for.

Pure Storage to dethrone 'evil' hard disk

Psymon
Terminator

@James Hughes

I can see how that can be confusing, but if you've ever stood beneath a power pylon on a still day, you can very clearly hear the distinctive 50hz hum coming from the cables, yet they too have no moving parts.

I believe this comes from electromagnetic resonance. I have also heard IC chips that produce a high pitched whistle.

When I was younger, I used to be able to hear the extremely high pitched whine from cathode ray tubes... from outside the house! This freakish TV detector ability used to fascinate my schoolfriends

Whitehats pierce giant hole in Microsoft security shield

Psymon

These are not the security holes you are looking for

While these newly discovered vulnerabilities are interesting, you need only look at the change in attack vector by viruses in the wild to realise the depth of change related to windows security in recent years.

Long gone are the days of the of the blaster/sasser worms. Even the dreaded conficker worm uses a combination of social engineering and brute force dictionary attacks.

And the drive-by web based attacks rely on exploiting vulnerabilities in commonly installed software like Acrobat, not the OS itself. There in lies the rub.

All the current security issues on the Windows platform can be laid squarly at the feet of badly written 3rd party software.

It all started when MS ditched the home market DOS based OS and consolidated on the NT platform with XP. Prior to this, people who wrote software for the NT platform understood that it was a network based OS with tightly regimented ACLs, and if they didn't take this into account, their software would not work.

Then came the flood of script kiddies, DOS programmers, and beard-stroking old-school Unix zealots, who refused to comply with the windows security model, making it so diffucult to run as a limited user we have to run as admins, giving anything we double-click on full rights to the entire OS.

"Program Files? that has a space in it, and would require some improvement in my programming skills. I'll just install in the root of C:"

"Windows registry? Looks complex. I'll just write back to config files in my install directory"

The net result is that as a sysadmin, you spend days tightly locking down your windows environment, and then weeks punching dirty great holes in it again to get badly written software working. No wonder you're average home user is vulnerable, They've been conditioned into thinking that every bit of software out there needs direct kernel access and sufficient rights to re-partition your hard disk, just so it can self-update.

Firefox behaves like a virus, trying to write-back to its program folder when updating (instead of using an installed service). I've seen Google Chrome install itself into the users profile folder before! Don't think the open source crowd do any better. The first thing that happens when you launch GIMP, is it does a great steaming dump all over your user profile. You'd think by the way these programs behaved the coders had never actually seen a windows computer before in their life.

When these 3rd party programs finally start using the now decade old, well documented windows security model, then so can we! On that day, we will be genuinely worried by the UAC pop-up, rather that just assuming it's Mozillas crappy updating routine.

Microsoft+IE9: Holier than Apple open web convert?

Psymon

Interesting points here

Only a handful of trolls out today, which is quite refreshing.

@Torquemada

If I remember correctly, it was the other way round? Netscape BEGAN by selling their product for £30.

Microsoft entered the market, also punting their product for roughly the same price. Unfortunately for MS, theirs was vastly inferior to Netscapes, and didn't sell. Unfortunately for Netscape, MS had extremely deep pockets, and began giving it away for free, then going on to bundling it with the OS.

It was at this point, Netscape began giving away their product, in a last desperate bid to stay alive. Since Netscape had no other means of revenue generation, it didn't take long for them to go under. This was long before the large-scale "free software" movement. A movement that has only recently become possible due to the many alternate revenue generation means made available by the now, well established internet.

@unicomp21

I'm certainly very interested in FF4 (especially the tab management system), but IMHO the 3D aspect is going to be a mere gimmick for some time yet. Don't forget that 3D on the web has been tried many, many times before.

Not just VRML, but 3D content has also been available through Flash and Shockwave for many years (albeit Flash used extra plugins) and has been used quite successfully for a great many web-based games, but whole websites?

Also, the OpenGL standard has been languishing for some time now. Remember that it's the games industry which has pushed 3D standards to their now dizzying heights, and like it or lump it, the vehicle of choice for this progress has been DirectX for a long time now.

MS has worked very closely with the games and graphics industries over the years, folding new innovations into DX. Whether you approve of their methods, the end result is the undeniably powerful DX11.

GL is a poor showing by comparrison, and because of this, the vast majority of consumer level cards pay little more than a token guesture for hardware support.

Internet Explorer 9 pulls on best pants for 14 March release

Psymon

features in IE

I used to religously use firefox as my faithful browserfor close to knocking on ten years. I'd tried Opera, and while it had some nice features (and some very gimmicky) I found it struggled to render some pages.

I, like a great many reading/posting on this article, had settled into a comfortable groove. After all, if it ain't broke, why fix it? Then my 7yr old OS install started to crumble. I had literally hundreds of programs installed, and a mixed graphics card setup that made reinstalling nigh impossible.

First Firefox stopped working, despite several hours trying to coax it back to life. Months later, Opera flaked out.

I only give you the backstory because it took this much preassure to to force me to fire up the old blue e. Never been updated, it only took a few minutes of fighting with v6 before I downloaded 8.

Yes, it was slow. Yes it was clunky. There was feature that immediately jumped out, though. The ease at which you could add your own custom search providers.

With FF, you had to rely on the website providing a link. Most of which were more interested in installing yet another bloody toolbar full of spy/adware. I did have a search on how to manualy create one, but it involved writing some javascript, copying the file to the right location...

TLDR!

I filed it away in my favourites with the intent of having another look when I had some genuine time to waste.

IE changed all that. When you click the add search provider, there's a link at the bottom called "Create Your Own Search Provider". It's so easy to use, (search your target website with the word TEST, copy the resultant URL, paste in the box and give it a name) that I began to add websites which I wouldn't have originally considered worth the effort.

The real game-changer though, is using them through the internet accelerator. Highlight a bit of text on any given website, click the accelerator icon, choose a search from the list, and it opens that website with the search results from the text you selected in a new tab.

This sounds medicore, until you spend a few seconds creating a set of search providers customised to your browsing. Then you begin to realise your getting through the web faster and in fewer clicks than ever before.

Obviously, Still being on V8s crappy javascript engine, the whole streamlined experience would grind to a halt. This pushed me to download the IE9 beta (admitedly a very late one). Suddenly, all the random halts were fixed, and it loads up on my old P4D faster than any other browser.

I've no doubt FF4 will improve on things. They're claiming even better JS engine, and the tab management feature looks amazing. On the flipside, Mozilla update mechanism is nothing short of retarded. Not only does the self-update break every security rule of the WIndows OS set out since XP, but it does this on startup of the application?!?

Either way, this is all healthy competition, and is spurring the market forwards

Building Windows 7 skills - will we need another 10 years?

Psymon
Gates Halo

re: event veiwer.

You beat me to the punch on how resource heavy the new event veiwer is, but getting teary eyed for the old one? Really?

Yes, the old event viewer loaded quickly. It also closed just as snappily after you discovered it had recorded bugger all that would give you a clue as to why the machine had suffered a major breakdown and rebooted.

Just last week we had one user who was suffering frequent crashes. At first we put it down to errant software. After all, the XP install on her machine was nearly 5 years old, and had been passed through many users, filling up with crapware. After trying various band-aids and little fixes we bit the bullet and remastered her machine.

This seemed to fix it, until a few days later, it crashed again. The BSOD indicated a memory problem this time, so roll out memtest and various other diags. There was NOTHING in the XP event viewer to even give me a hint, even with all the logs switched to full. It passed with flying colours. By this point, my slightly cynical nature started leading me to suspect it was somehow user instigated.

We put Win7 on her machine, as we've found in practice it's a lot more resiliant and idiot-proof than XP. Again fine for a few days, then I get another call. This time, it had only lost network connectivity. I look in the event viewer, and there it was. I can't remember the exact phasing, but it stated that the HAL had failed to retrieve information from RAM after resuming from sleep.

Bingo. A BIOS update to fix the *known* bug in the ACPI firmware, and we're all sorted. I suppose a lesson to be learnt would be slightly less cynical. When I asked her what she was doing at the time of crash and she said "nothing" I might have realised she litterally meant nothing, hence the machine went to sleep.

Whereas XP refused to even admit that the machine had even rebooted, Win7 just barely stopped short of whipping the side panel off the case and pointing at the chip!

Of course, this is known as self diagnosis and monitoring, or as my collegue amusingly refers, 'naval staring', and we're seeing it more commonly everywhere. Most modern cars will simply tell you exactly what's gone wrong when you plug a laptop in.

I was indulging in a bit of 'motherboard reading' the other day, and spotted a connector I didn't recognise. After some googling I found it was for a motherboard tester that checked every single pathway and chip. The controller chip for that connector had it's own internal bus bridge between the V1 and V2 extended diags.

Wait, what? even the motherboard self diagnostic chip is so advanced now it has multiple internal clock speeds? The self analysis systems within modern computers and the Windows OS are getting ever more advanced and resilliant, but the laws of physics dictate that that these diags have to use resources.

So, can I begrudge the event view taking a few seconds longer to open? Not really. If I'd had Win7 on that machine to start with, it would have save both me and the user a week and a half of mucking about, and I can easily foresee it saving me a lot more time in the future

Prepping the great Windows 7 migration

Psymon

@rattus rattus

Yes. Yes, they have indeed buggered up the configuration. What you have described smacks of a lack of planning and/or understanding.

I've been building and implementing a multi-site SCCM infrastucture for about two years now, and while I can certainly understand the duanting complexity of the SCCM system, the power and flexability is staggering.

Our desktop environments vary wildly in their hardware/software setup, so an image-based OS deployment system like RIS, Ghost, or WDS is completely impractical. The difference between those and SCCM is dramatic. Our server Has the drivers and software for every machine, and applies them intelligently during setup.

SCCM takes a lot of investment of time to get right, but once it is, it's magic. One example is we have a large number of machines with M-Audio soundcards. M-Audio haven't written their drivers correctly, so the OS deployment will install the drivers, but not the software needed to configure them (this is possible, as the Intel Media Graphics Accelorator does this correctly).

To compensate, I have a collection whose membership rule is that the machine has said M-Audio card. I then have a sub-collection whose membership rule is that the machine DOES NOT have the M-Audio software. A Silent install is advertised to that sub collection. These get updated each time the machine performs a scheduled hardware inventory, so it's all completely automated.

The collection rules can be based on any information that can be collected from Active directory, network information or the WMI repository. I've found that the WMI can tell you the serial number off the battery in the laptop, if you know how to ask it!

Sounds like your guys are running the site in mixed-mode rather than native. That's why a second computer account is generated after the OS deployment.

You can avoid inputting the mac address by simply joining the computer to the domain, pushing the SCCM client out, and then adding it to the OS deployment collection. I've done this a few times, but I've often found that OEM Windows install takes so long to do its' initial configuration, it's quicker to input the mac and run a bare-metal deployment via pxe.

Dell are the best for this. Not only do they routinely put the mac on the outside of the packaging, but when you enter the service tag on their site, you can download a CAB file containing all the drivers, which you can import straight into SCCM. No mess, no fuss.

The software suite we install during OS deployment is a pretty standard afair, again, because all the systems are so different. You can create rules during the task sequence that check for variables, but I found it easier to keep that part simple, and have software advertisments based on the computers OU container, group memberships, and the most commonly logged on user.

It doesn't deploy all the software during the initial setup, but we give it to the user, and the silent installs cause no disruption. They just suddenly find a new program in their start menu.

Thunderstorms found to squirt antimatter into space

Psymon

nature vs science

Indeed, barrels are used thoughout nature. As for chemical explosions, much rarer, but they do exsist.

The bombardier beetle releases two chemical simultaniously from its abdomen. If Wickipedia is accurate, hydroquinone and hydrogen peroxide, which react violently, deterring predators.

Nature is amazing on many levels, but don't let the hippies fool you. The overwhelming majority of machines we produce are vastly more efficient at their task than natures solutions.

Flight, for example. Your average Boeing uses far less energy to achieve flight than any bird or insect. Nature can't even build a land animal of the same weight, let alone for flight.

In fact, the heaviest animal ever known is the blue whale, tipping in at 180 metric tons, The Antonov An-225 could quite happily fly said whale, with 70 tons spare for provisions to keep our whale alive and in relative comfort during the 2,500 mile journey, faster than any lifeform at 500mph.

This is primarily due to the infinately rotatable axel. Something nature can never achieve.

We have long since outrun nature in everything we strive for.

What a piece of work is a man, how noble in reason,

how infinite in faculties, in form and moving,

how express and admirable in action, how like an angel in apprehension,

how like a god!

Leslie Nielsen dead at 84

Psymon
Unhappy

I had tears of laughter when I heard

Sorry honey, but I like my sex like my basketball.

One-on-one, with as little dribbling as possible!

He will be fondly missed

MS security tool interferes with Chrome and Adobe updates

Psymon
FAIL

I think you'll find...

It's Adobe and googles updating routines which are working in direct violation of the windows architecture.

Adobe are legendary for writing software for the windows platform, that isn't actually compliant with the Windows architecture. Non-standard installers, non-standard interfaces, and of course, non-standard updating routines.

This behaviour was almost acceptable back in the days of Windows 95, when you bypassed the standard windows libraries so that you could tweak your assembler written game kernel to run on a 66Mhz Pentium, but things have moved on.

We use the incredibly powerful SCCM to manage software distribution and updating, but even with amazing tools like that, each new Adobe update makes me die a little inside.

World's most advanced rootkit penetrates 64-bit Windows

Psymon
Gates Halo

UAC violations

Having managed a few networks in my time, I've dealt with windows boxes and related security issues on various levels, and nothing was more telling than when dealing with locked-down user accounts.

Most readers on this site will be accustomed to small-to-medium windows networks where most users are granted a modicum of trust and rights over their own personal systems, but when you have environments like schools, prisons, call centres it is policy to "lock it down 'til it squeaks" that you start to see some of the dirty habbits of software you previously considered respectable.

Once you've locked down a winXP system, it is nigh impossible to infect it. Buffer overflow code executions fail when they attempt restricted actions. Process user elevations never happened because policies specify a whitelist of trusted locations locally and externally that executables can be run from.

We never had a problem with the students desktops (the teachers laptops on the other hand...)

Secure, that is, until you start having to punch dirty great holes in your own security to get shoddily designed bits of software working.

Firefox is a classic example. It's self update system breaks several fundamental rules of the windows environment. The most obvious of which, attempting to write back to its' own program folder.

This should never happen. The updating component should have been installed as a local service.

What really irks me, is that these aren't brand new rules that you could forgive people struggling to catch up with. The NT family were deisgned from the get-go so that in everyday use you run as a limited user but there are still too many lazy coders out there who take shortcuts that compromise the whole systems security, forcing you to run as root.

The UAC isn't intended as a direct security measure. It's there to embarrass the coders into writing their software in compliance with the platform they are developing it for. Just think of it as a big FAIL sticker on the 3rd party software everytime you see it.

But it said so in the manual

Psymon

EXT probs

Our Unix guy isn't here right now, so I can't get all the grizzly details, but our fileserver gave us equally unexpected and unpleasant results when we started tripping over its’ hidden limits.

We have a Unix baox attached to a SAN with approximately 4Tb storage, which at the time we considered ample capability for its job. It didn’t take long before we hit the dreaded inode limit.

As I say, I can’t remember all the precise details, but the EXT filessystem, formatted over a certain size (1 or 2 TB) assumes that the average size of each file will be around 1GB, and therefore allots an appropriate number of Inodes for this assumption.

If your average filesize is closer to a few KB, your Inodes run out loooong before you reach the drives space capacity. When he investigated this, he naturally assumed he chosen an incorrect option when creating the partition. After significant research, he discovered the was the default, and only configuration.

How do you copy 60m files?

Psymon

hahahaha!

I love some of the suggestions that appeared between composing and posting my last comment!

@Russel Howe

Please tell me you're joking!

Pull out the hard drive? What, one hard drive containing 60m files? Or even a server, and it has ONE hard drive?!? This isn't the 70s, Rus.

1) it's at minimum RAID 5 array, quite possibly utilising the raid controller built into the servers motherboard. The raid controller is integral to keeping the data readable

2) You don't just 'pull out hard drive' on a server. In all likelyhood, that machine is still live, and hosting a miriad of roles and services for the network.

@Zax

I'll give you 10/10 for optimism there. Xcopy would have failed just like the other commandline tools Trevor had tried. I've seen many a solution using insanely complex batch and kix scripts fail time and time again. The simple fact of the matter is that in a complex environment such as this, scripted systems invariably fail due to the unexpected and unforeseeable.

@Zaf

We have actually had to shift FROM a unix file server, TO a windows system. Over 2 terrabytes, we encountered severe limitations with the filesystem. That being we were regularly exceeding the inode limitations. After several weeks of research, we discovered that this was a fundamental design flaw of the filesystem, which assumed over that size the partition was going to be filled with files greater that 1Gb, not tens of millions of 1Kb files.

On top of that, Unix has a less advance Kerberos implementation, meaning computer account permisions could not be applied, and the time saving benefits of giving users access to Volume Shadow Copy dynamic restores meant were weren't forever routing through tape backups for every user that accidentally overwrote their word document.

Psymon

large file transfers are always a challenge

Personally, I swear by Directory Opus, by GPsoftware.

I can attest to it's incredibly reliable performance, error handling and insanely flexible advanced features.

Aside from being able to copy vast quantities of data, handle errors, log all actions, migrate NTFS properties, automatically unprotect restricted files and re-copy files if the source is modified, it also has built-in FTP, an advanced synchronisation feature (useful for mopping up failed files after you've fixed the problem that stopped them being copied), and a truly unparralelled batch renaming system which among other things, can use Regular Expressions.

It also has tabbed browsing (you can save groups of tabs), duplicate file finding, built in Zip management, custom toolbar command creation, file/folder listing and printing....

Stangely, not a lot of sysadmins know about DOpus. I learnt of it during my Amiga days, in what seems like a lifetime ago. I always have a copy installed on my workstation, and at least 1 of my servers

MS offers Security Essentials to small business

Psymon

have to agree with harryhedgehog

As a home user I was a devout AVG user for many years, but compared to MSSE, AVG is a total resource hog, and not very effective at it's job.

One annoyance with AVG is it's schizophrenic behaviour when an infected file gets lodged in a system restore point. Despite the infected file being completely inert (unless of course you put your machine back to that restore point) the monitoring component will periodically scream VIRUS! VIRUS!

So, you run the scanner across your entire hard disk, at the end of which it comes up "dunno what you're on about, mate. No virus here" because it can't access the System Volume Information.

Symantecs' product is less than useless. The first sign of a virus, and it curls up in a corner crying "Not in the face, not in the face!" You can tell your machine may have brushed by some 10 year old malware, because the Norton icon in the system tray is disabled, and you can't re-enable it. Oh, and the firewall in it continues to block software on your computer from accessing the net even AFTER YOU UNINSTALL IT!

Mcaffee have come up with an interesting solution. They install so much crap on your system it s-l-o-w-s... t-o... a... c-r-a-w-l. Your computer is literally too slow to catch a cold.

Sophos is an arrogant little turd. You fire up your computer, log in, and it essentially shouts "STOP EVERYTHING YOU ARE DOING! I'm updating myself." It seems to grab nearly every resource off you for the simple act of self-update. And don't get me started on the false positives!

Compared to this lot, MSSE isn't just out in front, it's lapped them several times

Blighty's carriers to field Windows Phone 7

Psymon

I'd have to agree with Ku...

What piqued my interest in Winpho7 was the underlying engine.

With shifted a great many in-house intra-services to .net, because the visual studio development environment is top notch.

This potentially opens some very interesting integration opportunities.

Time will tell...

Google ops czar condemns multi-core extremists

Psymon

Horses for courses indeed

While parallelisation can benefit a great many applications in general, there are also a great many algorythms which simply have to be serially processed, due to the next part relying on results from the prior code

Plus the greater the number of processes/threads, the greater the overhead of managing them becomes.

Ray tracing is a classic example. While chucking cores at a single image being rendered will greatly increase speed, you quickly hit a wall, due to each pixels colour being dependant on its' adjacent pixels (and further), due to anti-aliasing, specular flare, and other physical effects that simply aren't known until the other nearby pixels have been calculated.

In this scenario, 2,4, or even 8 cores will produce dramatic benefit when you split the image up into chunks and render each simultaniously, but each chunk then has to be 'stiched' together at the seams, and this generates more work than if the overall image had been done in one peice. Still a massive benefit overall.

But what happens when you have a 1:1 ratio of pixel to processor? The render re-hashing would be horrific, not just you the system, but also for the poor programmer who would have to figure out how to code for every pixel adjusting itelf to its adjacent, while that pixel is also still adjusting?

Microsoft hangs head, makes apology for US cloud bust

Psymon

At least they appologised

I seem to remember Google had some similar problems early on with their cloud services.

Their response was more along the lines of "Meh. Something happened. We fixed it."

Not exactly a comforting response when your business is utterly dependant on said service.

Microsoft locks down Windows Phone 7 code

Psymon

blookin social networking cr*p

I wish MS would stop trying to ape Apple with and their ilk by offering useless fluff.

Windows Phone 7 is not going to make a dent in the the fluff market. Apple and google have sewn it up tight.

It's the corporate market that redmond really need to focus on. Never mind bloody facebook/twatter contacts, how about a user friendly means of filtering and searching exchange/ldap contacts?

WP7 is apparently based on the core of 7, with the ability to bolt on modular extra components from the full-fat version, like Location and Sensors and Bitlocker.

Now that I can see as being useful. Your field engineer wakes up in the morning, switches on his phone, and starts receiving his synchronised calender schedule for the day which was automatically generated from the call centre booking system.

All customer details are secured using bitlocker, the GPS unit tied into location and Sensors, then feeds the times and locations into some autoroute type software, and plots out the optimal journey (I know, I know.), and the customers contact details for that day would automatically generate a quick-access contact list.

Finally, because this is essentially a 'proper' windows platform, all phones can be managed in the same way as we would laptops, with software updates and configurations automatically managed through SCCM and group policy.

This is only touching on the potential offered by the ever aloof 'unified platform'.

Redmond are tantilisingly close this time, just as long as they don't fumble the ball.

You may say I'm a dreamer, but I'm not the only one...

Sony Oz mod chip dongle ban hearing delayed

Psymon

Actually...

Firstly, ripping the contents of a game to hard disk vastly speeds loading times.

Games are expensive, and discs get lost or scratched. Yes, Blu-ray too. The odds of either happening are vastly reduced if you only use the disc occasionally.

Sony PS3s are notorious for frequently breaking optical drives. Sony also charge more than £100 to replace what is essentially, a £20 blu-ray reader.

This also opens up the potential for "bedroom programming". Something that has been long, long lost amongst the endless parade of stale sequels.

These are not the veiled arguments of a pirate attempting to defend his illegal ways, these are the legitimate reasons I have not bought a console since 1998.

Yours sincerely, a lost customer.

MS hits refresh on Windows 7 SP1 for select few

Psymon
Troll

@DJ2

By what twisted logic can you lay that blame for Flash crashing your machine at the feet of MS?

That's Adobe (one of the flakiest mainstream software developers on the planet) not fully testing their x64 implementation of the flash plugin.

As for Zone Alarm, don't touch it with a ten foot barge pole. I didn't even think they were still going. There's certainly no market for the product since XP SP2.

I can't remember that last time I've seen a BSOD that hasn't been caused by dodgey software, dodgey drivers, or hardware failiure.

MS's greatest weakness, is when you run the OS and application stack on insuficiently powered hardware. If you keep the CPU/GPU/RAM/HDD maxxed out for long enough, apps will start to fall over.

This is no different to any other OS.

Now cue the trolls "Linux has a smaller footprint..."

Win 7 up, Mac OS X down in market share wars

Psymon
Gates Halo

Interesting

I liked the predictable symmatry of the Vista and 7 lines on the graph.

It makes perfect sense, since upgrading from Vista to 7 is incredibly easy and painless (I've done it manually on about 30 machines now) so to watch the vista decline asymetrically match 7s growth is statistically pleasing.

@Gile Jones

As Graham pointed out, the stats were from people browsing the web, so these are OS installs that are being actively used, the number of CALs sold is irrelevent.

@Mr Baggaley

While I agree that seeing just home usage stats would be an interesting sideline, there seems to be a mythology propagated amongst fanbois that large corporations are somehow ham-strung into using Windows by evil licensing agreements, and that if we could only shake off these shackles of legacy compatibility we would immediately leap onto Ubuntu and OSX.

I hate to break it to you, but we sysadmins actually know what we are doing.

While I welcome the last near-decade or so of healthy competition from alternate OSs, Microsoft haven't been resting on their laurels. Ask yourself why young, dynamic and extremely profitable companies like Google, who have a vested dislike of MS, still use Windows in the vast majority of their offices?

Microsofts LDAP (active directory), SMB and Kerberos implementations are now light years ahead of anything offered in Linux or Unix flavours, meaning that if you're not using a Windows domain controller, you're actually losing a great deal of functionality, flexability, and even security.

Unix LDAP doesn't natively support computer accounts, and has no concept of domains - in a complex corporate environment where the computer needs to access secure resources without anyone logging in (automated installs, updates, secure lab machine only resources, automated RADIUS) this is essential.

On top of this, other services such as DHCP, DNS, certificate services, file server security and print management are all extremely well integrated, feature laiden, easy to set up, and a doddle to manage.

Most importantly, Mr Baggaley, let us not forget that it is us, the sysadmins that keep the world turning, not the fanbois sat at home play WoW in Wine, so I think you'll find the corporate figures considerably more important than home usage on many levels

MS springs service pack preview of Windows 7

Psymon
Troll

@untrusted connection

I take it you must be using an older version of Firefox.

There are a few well-known bugs in Firefoxes certificate verification (which made it unusable for a large number of intranet scenarios, hence low corporate take-up).

I'd assume they resolved that by now.

Let's not forget XP SP2 also completely re-vamped the terrible wifi components within XP, which was previously nigh unusable.

That might not seem like much to your average home user, but when you're managing 80+ laptops on one site, it was a god-send!

Mozilla stokes Firefox 4 with first beta build

Psymon

I suspect underlying drive is win7 compatability

While Firefox certainly runs on win7, there were a few integration aspects that were suspicious by their abscence.

Most noticable, was the lack of support for taskbar grouping of the tabs. I was pleasantly suprised to see that Opera had this feature almost from the outset.

It's nice to see a bit of healthy competition in the browser market now, especially the refreshed focus on performance. FF and IE are both a bit lethargic on startup. IE is terrible with javascript, and new tab generation is appallingy slow.

Opera still has some rendering issues. Certain javascript image rollover functions cause it to 'jump' back to the top of the page, making it virtually unusable with certain large thumbnail gallery pages.

IE has the edge when it comes to adding search providers. While with others you need to find a pre-configured link, or fiddle with config files, Microsoft provide a "Create your own search provider" link. SImply search TEST on the website of your choice, paster the resulting URL in the box, give it a name, and click 'Add'.

IEs Internet Accelerator feature is a killer app once you figure out how to customise it properly. Combined with your own custom search providers, it makes very short work of finding content related to a certain phrase across multiple sites, and is my browser of choice for these types of tasks.

Opera is very feature rich, but I don't think I'm alone when I say I've browsed through the options, and gone "oooh, that's a cool feature" and then never used them again, or tried to use them, and found it too much work with little gain. Voice recognition and Gestures spring to mind.

Firefox on the other hand, relies almost entirely on add-ins to be 'feature rich'. While this is not a bad thing per say and adds a modular approach, it does quite often lend to stability and performance issues.

Fanbois howl over 'hang a lot' Safari 5

Psymon
Coat

slap their one button mouse with their webbed hands and still get some job done.

When you say "get some work done", I'm assuming you must mean "post some inane dribbling on twitter"

Mines the one with the bag of troll-feed in the pocket!

Can Windows Phone 7 gain momentum with all eyes on Apple?

Psymon
Gates Halo

certainly not going to beat apple but...

They will gain a foothold in the corporate market, purely because of the interoperability with Win7 and Server 2008.

The underlying kernel technologies are intrinsically compatible with each other, and the modular nature of wp7 allows for highly advanced features of win7 to be incorporated into the mobile device in a "Pick 'n Mix" style by the handset designer.

Add to this the the .net compatibility which will allow a great deal of porting and and compatibility, and you have for the first time a mobile device that can be seemlessly intergrated into your Active Directory schema.

None of this will matter to your turtle-neck coffee drinkers or your ringtone blarring hoodies, and I certainly wouldn't expect them to give a jot.

Your freindly neighbourhood sysadmin though, would be VERY interested in mobile devices that can be managed/configured from group policy and intergrated into exchange without painful and buggy 3rd party software plugins.

very interested indeed...

Drinking coffee offers no real benefit, say eggheads

Psymon
Thumb Up

@gabor1

I think you might be onto something there.

variations in peoples diurnal cycle can certainly cause problems when attempting to work around an artificially induced sleep cycle.

I've done shift work aplenty in my time. While I've known some to have no problems with swing-shifts, I certainly didn't adjust well to going to bed while the sun's blazing outside.

without resorting to prescriptions I found a few beers in my artificial evening would help send me off, while a couple of brews in the 'morning' would perk me up.

While shift work is an extreme example, I can say that I've always been a bit of a night owl, whereas my sister struggles to stay up past 8pm.

Alas, tolerance buildup quickly becomes a problem.

Facebook hires big antitrust lawyer

Psymon
Headmaster

awarded a lifetime achievement award

I think you might need to submit that sentance to the redundancy department of redundancy for closer inspection.

Apple's iPad - 'Will It Blend?'

Psymon
Happy

mmmmmmm......

Ipad smoothie....

Nips slip past Apple censors

Psymon

snigger

"Apple started pulling off porn apps..."

No THAT's hypocrasy!

Teen's mobe loaded with X-rated smut

Psymon

Oh come on!

It's blatantly obvious what's happened, and if she'd engaged her clearly seldom used brain for just a few seconds, she'd have realised the resumption she jumped clearly makes no sense whatsoever. Why? Why would some guy in the workshop load this stuff ONTO a customers phone? I mean sure, having a rumage round for naughties and possibly copying them off, but what's to be gained from loading them on?

the main board was clearly reconditioned, but some numpty forgot to wipe the memory (like the unwashed swathe that get regularly shipped to china).

Consumers have this weird fantasy that when their electronic device is sent for repair, brand new components are manufactured and then fitted 'hot off the press', as it were.

If you have a computer with a burnt out PSU, but a perfectly good mobo, and another with a knackered mobo but functional PSU, what would you do? Why would you think any other repair shop would do different?

90% of the time, the production run on a particular electronic design is so short that brand new spare parts will all be gone within a year.

£10 sounds perfectly resonable. Yeah, he forgot to press the format button. Here's a tenner for the 30 seconds of time it will take for you to do it yourself.

So no, dear. Noone's had their 'filthy paws' all over your phone except the over worked, underpaid engineer who swapped out the mainboard that was previously owned by a red blooded guy with a healthy sex drive.

It's a shame there isn't another undiscovered continent like America, where we can ship these Prudes before they plunge us into another psychologically damaging Victorian period, where chair legs must be covered, and your young son is trussed up at night to prevent him masturbating (the bitrthplace of BDSM)

Hardware biggest cause of HDD failure, says Freecom

Psymon

wow

compared to the quotes i've seen elsewhere that's a pretty good deal!

Certainly worth baring in mind when we get the odd-bod who insists on storing stuff locally. certainly more cost effective than high maintenance and troublesome client backup solutions

Google ratchets interweb 3D on Windows

Psymon

I suppose emerging technology is always viewed in this way...

Why would we ever need any more than 640K of RAM?

Why the hell would I want my computer to be permenantly connected to the internet?

With technologies like this, you need to put the horse and cart the other way round. Throw the tech out there, and see what people can do with it.

I can think of a couple of minor uses for it (nothing earth shattering) but if the techs readily available, some bright spark will come up with something that'll make you think "Oh, yeah. Why didn't I think of that!"

It'll be nice to see GL get some DX support. It has languished a bit from lack of mainstream hw and sw support. The last ever game written it it was released 12 years ago.

Before the trolls jump on that, yes I know there are plenty of applications that use GL (I do raytracing myself) but we're talking numbers here, boys.

When it comes to native hardware support, GL really does need to tap into the readily available. After, who's gonna buy a £500 nvidia Quadro card to surf the web?

'Racist' job ad sparks investigation

Psymon

Oh good grief

I would guestimate that the job description writers intentions were most likely to specify a language skillset, or perhaps even intimate cultural knowlage, but due to the many dialects employed in India decided to truncate their requirements into a rather unfortunate wording.

I wish local bodies would become this irate over real threats to human rights

Microsoft confirms IE9 will shun Windows XP

Psymon
Grenade

@ Gary 23 - glad you asked, my spleen was getting bloated.

Well, aside from the long standing issues with security certificate support, FF is a petulant, unmanageable child.

A prime example out of the many bad behaviors , the self update is an executable that writes directly back to its' own program folder.

No, no, no!

If you want access to protected folders such as this, you need to have the executable installed as a Service running as Local Service User. I'm not talking 7 or even Vista here, these are rules that laid down for 2k and XP, this is one of the many reasons you run your XP as an admin, essentially turning off any and all security.

You try running as a limited user (just like Linux, the way 2K and XP were designed to be run) and see how long it takes for your software to break.

What astounds me is that developers have had ten years to read a whitepaper on this, and still, Mozilla, among many others, continue to flout rules that force end users to open vulnerabilities in their system.

Then you have configuration. FF stores its settings in a config file per user in a local setting profile folder when they should be located in the registry.

And why is this important? Three words. Group Policy Management. If your software stores its settings in the registry, Your friendly neighborhood sysadmin con configure it centrally.

This is no small matter. THIS is the real reason corporations won't adopt it. What? You want me to run over to a computer and configure its proxy settings everytime a new user logs in? I should Coco!

A small group called FrontMotion did try to address this extremely serious issue by creating a custom GP manageble version. Problem is, because it's modified, you can't apply security updates. Kinda important in an internet facing program. Again, since you can’t centrally manage and monitor updates, FF just presents a big black unknown hole when it comes to ensuring all your machines are fully patched.

I could go on…

Yes it’s extra work, but writing good code always is, and if you don’t like these windows rules and protocols, THEN DON’T WRITE FOR THE WINDOWS PLATFORM.

This is why the UAC is such a good idea. It’s there to name and shame all the bad habits developers have been using for years, and give you a tiny little glimpse into the blood sweat and tears we sysadmins have spent in procmon watching some crappy little utility written by some crappy little programmer stomp all over our nice neat OS, because you asked us to make it work.

Psymon
Troll

the trolls are quick this morning

@ Glyn 2

well done, you've successfully managed to confuse yourself. The file copy delay was was Vista. It also sounds like you need to be booked into some week long training courses on mouse control too.

I don't know what pile-o-crap you were testing the RC on, but I've been soak testing 7 on a few machines round here for a while now, and found it to be pretty much bullet-proof.

I was particularly impressed with its tenacity, when it successfully booted on a machine with multiple hardware failiures, and then attempted an auto-repair. Obviously, software can't pick up a screwdriver and swap-out a motherboard, but it tried its best, bless.

XP has more than had its day. The HAL, video and audio architecture have been tweaked til their eyes water. It's time someone noticed the buzzards have started feeding on its equine corpse, and put down the whip.

As for Firefox, I've said this time and time (and time) again. Yes, as a simple user with no concept of underlying architecture, software compliance, or best practice, it's great. I even use it myself at home (sandboxed, naturally)

As a profesional who's job it is to ensure a stable, secure and reliable working environment, I cannot begin to express the horrors of what it does (and doesn't do) under the bonnet. This is why no large corporation has adopted it. Frankly there's a total lack of professionalism in its design.

But this means nothing to you. You're a User. If cars were software, you'd be asking "well, they can go forwards and backwards, it should be a simple enough process to make the go up and down too". I personally love the UAC. It's a kick up the arse for developers who still write their software for single user environments with full admin rights.

The new architecture in 7 and DX11 is going to be a shot in the arm for the PC games industry, who have been languishing under the XP shackles for too long.

YoYoTech Warbird i750CX

Psymon
Boffin

not bad for just over 1k

... though the case does look a little bland externally, and not as well designed as something from Chieftec internally.

I would also venture that the single sata drive may hamper performance.

If you're serious about building a real gaming rig, you'd opt for a pair of small SSDs in RAID 0 for your OS, and a single large (and bloomin cheap these days) SATA for storage.

I can't really mentally place this in the market because of these omissions. It ships sans OS, so it's not aimed at the first time buyers market, yet it doesn't quite have the polish to appeal to the hardcore clockers.

The overall impression it gives me is something you'd build and say "OK, I can't quite afford these bits until next month, but for now..."

I don't know, maybe I'm a little too picky about my choice of cases and the price tag is a temptingly round figure, but I bare enough war scars on the backs of my hands - and those 2 top 3.5" bays look like a propper ballache to use due to the power cables coming off the cards.

Just as an example:

http://www.chieftec.com/ch07.html

The HDD bays are the most elegant design I've ever seen outside a rackmount server.

'Health and safety killjoys' kill cheese-rolling race

Psymon

Next door to Roysten Vasey?

This is a local event, for local people! There's no parking for you here!

Microsoft embraces another Linux company

Psymon

here we are

Gleened from these very pages:

http://www.theregister.co.uk/2003/12/04/ms_tightens_ip_grip/

I suspect this is the same cause for legal wranglings with TomTom.

There's no reason your Lights Out embedded linux or whatever environment should HAVE to use FAT, or any other filesystem - it will be the only one using it.

Fileservers though... Fairy 'nuff, in _normal_ operation the internal filesystem shouldn't matter (unless it doesn't support extensible metadata used by the clients).

But, when the fit hits the shan, unless your server is using RAID5, any customer would naturally expect the ability to remove the drives from failed server, and read them using another host machine. You don't want to discover that your precious data is effectively 'encrypted' in some obscure filesystem.

I'm not saying ext3 is obscure, of course I'm just highlighting a flaw in your logical thinking.

That said, I also wouldn't be overly pleased with my "server" using FAT or FAT32. neither of which have particularly robust error correction hashes

Page: