Planet Sysadmin               

          blogs for sysadmins, chosen by sysadmins...
(Click here for multi-language)

February 08, 2010

iDogg

Cell phones are too expensive

My wife and I have phones on Verizon wireless.  She pays roughly 80 and I pay about 65.  We don’t have data plans.  I started looking at upgrading our phones and maybe even going towards data plans.  A family plan would work fine for us since she uses more minutes than I do.  I don’t even need what I have(my $39.99 plan with over 50% extra in horse shit surcharges).  All together with a two year contract, two droids, and a data plan, we’re looking at $200.  That’s even before the aforementioned surcharges and other hidden fees appear on the bill.

I understand why they cost so much.  Basically, it’s what the people will pay.  Same goes for cell phones.  I’m surprised that modern smart phones such as the Droid, Nexus, and iPhone cost over $500 considering you can get a less than terrible laptop for the same price.  For political reasons at work, they won’t pay for a data plan.  I’m probably the only admin left that doesn’t get email on my phone.  :)

At any rate, do you have a smart phone with a data plan?  Does your job pay for it or do you foot the bill yourself?  Is it even worth having a data plan when you get past the novelty and wow factor?

by Ian at February 08, 2010 07:53 PM

Ubuntu Geek

Managing Product Development

Standalone Sysadmin

“SysAdmin Talk” Blog Live

Michael Francis, the gentleman who brought us the SysAdmin Network, has created another sysadmin related endeavor called SysAdmin Talk, a group blog from five admins about what looks like a variety of topics.

Michael’s got a history of successful online efforts, so I have no reason to think this will be any different. Go on over and take a look. I suspect that we’ll be seeing good things from them in the future.

In the interest of full disclosure, Michael is my editor at Simple Talk: Sysadmin, the magazine that I (infrequently) contribute to.


by Matt Simmons at February 08, 2010 04:18 PM

Ubuntu Geek

Tech Teapot

Technology lag

I was interested to see a blog post discussing the benefits of the new 4G wireless standards currently in development. It struck me just how long it really takes for a technology to be in use by the majority of people. Here we are at the dawn of the 4G world and yet 3G isn’t widely deployed. The 3G licences were auctioned in the UK around ten years ago.

I’ve had an Apple iPhone 3G for a few months now and I am able to use a 3G signal for a small fraction of the time. In fact, outside of major cities, you’ve very little chance of getting a decent 3G signal. Most of the time I’m stuck on GPRS speeds or worse. If 3G hasn’t spread outside of the main metropolitan areas ten years after the original spectrum auctions, then it seems likely that there is no business case for ever doing so. If it isn’t commercially viable to implement 3G then what hope is there for 4G?

I wonder if the auction process itself could be to blame for the patchy deployment? Whilst the government in the UK did very nicely out of the auction, the bidders did pay very handsomely for their spectrum. Perhaps a better solution would have been to cap the auction price but place a service guarantee onto the bidders to ensure a more even deployment.

A broader implementation of 3G technology I’m sure would be a boon to the hi tech sector in the UK and would have had the effect of increasing economic activity. Whether the increased economic activity would have made up for the shortfall in the spectrum auction revenue is hard to say. But, the auctions were one off events and the increased economic would keep paying year after year.

Will the areas that don’t already have 3G never benefit from high speed wireless internet access? It isn’t looking promising…


by Jack Hughes at February 08, 2010 03:31 PM

Eric's Blog

Model Specific Formatted Search Results Using Thinking Sphinx

Having recently implemented Thinking Sphinx on one of my web sites, I thought it would be cool to be able to search every indexed model. With Thinking Sphinx, it’s easy to have a bunch of different classes returned in the results. The tougher part is displaying them in a way that is organized (although admittedly not very DRY).

Let’s start out with the controller method for search results (app/controllers/search_controller.rb):

  def result
    if !params[:model].blank?
      @model = params[:model]
    else
      @model = "ThinkingSphinx"
    end
    @query = params[:search][:query]
   
    @results = Search.model_search(@model, @query)
  end

Also, let’s make sure we define the actual search model. I define it in a separate search library (lib/search.rb). This is the relevant snippet of code:

  def self.model_search(model, keywords, var = {})
    @search_options = { :page => var[:page] || 1,
                          :per_page => 15 }

    @search_options.merge!( :order => "@relevance DESC",
                            :sort_mode => :expr,
                            :sort_by => "@weight * @weight")

    model.constantize.search(keywords, @search_options)
  end

Assuming that we are working with the all models search, where the above model is ThinkingSphinx, let’s iterate over the search results with this code in the view (app/views/search/results.html.erb):

< % if @results.total_entries > 0 %>
<div id="localLocationList">
    <ul class="list">
    < % @results.each do |result| %>
        <li>
            < %= display_search_result(result) %>
        </li>
    < % end %>
    </ul>
    <div class="clear"></div>
</div>
< % end %>

And the view helper (app/helpers/search_helper.rb):

def display_search_result(result)
  eval "render :partial => '#{result.class.to_s.downcase.pluralize}/result',
    :locals => { :result => result }"

end

The interesting thing about this bit of code is the eval. The eval on each iteration decides which search result partial to display based on the class and then passes the result to the partial for display. So if the result has a class of Business, the partial app/views/businesses/_result.html.erb will be rendered. This is a quick example of a search result partial:

<span id="localBizName">< %= link_to result.name, business_path( result ) %></span><br />
<p class="smallOffset">< %= truncate( "#{result.description}", :length => 128 ) %></p>

This is useful because all models don’t have the same characteristics. By creating a search result partial for each model type, this can be reused for consistent looking search results around your webapp. If the search is model specific, the same result partial will be used in every iteration over the results. If the search is model agnostic, then you can display your search results in a consistent manner.

by eric at February 08, 2010 02:15 PM

Thinking faster

What's on your office Wall?

I was listening recently to the radio and overheard a discussion about what good leaders use to motivate themselves.  The conversation turned to whether or not you could learn things about people by what they place in the cubes or offices - especially graphics, paintings, pictures and motivational sayings.

That got me thinking that it would be interesting to see what people place on their walls, to inspire them, to remind them of why they do the jobs they do, to encourage them and so forth.  So, with that in mind I'd like to start a small project, and hopefully many of you will participate and encourage people you know to participate as well.

What's on your office wall that inspires you?  What pictures, photos, drawings or sayings are there that you keep there on purpose?  I'm not talking about the snapshots of your family or the office picnic, but images, cartoons, etc that you placed there to help you think differently or that inspire you.  Since this is the first edition of the What's on your office Wall (possibly called WOYOW later), I'll go first.

On my wall I have three quotes.  The first is from Gandhi and it reads:

Seven blunders of the world that lead to violence:  wealth without work, pleasure without conscience, knowledge without character, commerce without morality, science without humanity, worship without sacrifice, politics without principle.

I have this one on my wall to remind me that all of the good things in life come with responsibilities.

The second quote on my wall is from the science fiction writer Robert Heinlein:

A human being should be able to change a diaper, plan an invasion, butcher a hog, conn a ship, design a building, write a sonnet, balance accounts, build a wall, set a bone, comfort the dying, take orders, give orders, cooperate, act alone, solve equations, analyze a new problem, pitch manure, program a computer, cook a tasty meal, fight efficiently, die gallantly.  Specialization is for insects.

I have this quote to remind me that it's important to do a number of things reasonably well.

The third quote on my wall is attributed to both Machiavelli and Daniel Burnham:

Make no small plans for they have no power to stir the soul

I have this quote to remind me that real change and innovation require big plans.  Small, safe plans don't stir people to action.

I also have a cartoon on my wall about innovation, entitled the Lifecycle of Innovation:

Brand_camp_lifecycle_of_innovation_resized3
I have this image on the wall to help me remember how hard it is to create really interesting new products and services.

So, that's what's on my wall that inspires me, encourages me and makes me think.

Care to share what's on your office wall?  If so, please email me at whatsonyourofficewall at gmail dot com.  I'll post your pictures and sayings in upcoming posts.  If you send me an email, please send the picture, graphic or saying, and tell me why the particular item encourages you or inspires you.  Let me know if you want to be identified or prefer to remain anonymous.

I look forward to hearing from you and finding some insightful thinking.

by Jeffrey Phillips at February 08, 2010 01:44 PM

Linux Poison

openSUSE Survey 2010 – Participate now

Participate in the openSUSE survey 2010 to give feedback to the openSUSE project about the distribution, the openSUSE tools environment and the project in general. Let the project know where things are in good shape and areas where improvement is needed. There are also some questions to get some demographic knowledge about users. The survey will take about 8 mins. The survey will be online

by Nikesh Jauhari (njauhari@cybage.com) at February 08, 2010 12:27 PM

SysAdmin1138

OpenSUSE Survey

It's time for another openSUSE survey! If you're an openSUSE user (or even a user of SLES/SLED) it's a good idea to take this thing. They set development priorities based on these surveys, so if you have an area that needs buffing up this is the place to tell them. Or if you want to tell them 'works great!' this is where you do it too.

http://www.surveymonkey.com/s/6MJYV7T

by riedesg (noreply@blogger.com) at February 08, 2010 12:25 PM

Google Blog

2010 Super Bowl: Some search touchdowns

While 106 American football players sought yardage in the 2010 Super Bowl, millions of people sought information related to the big game from Google search. We looked at some game-day search trends and data* to see what football fans were searching for this year.

Most searched-for team
To the victor of this year's big game went the search spoils: The New Orleans Saints captured both the NFL championship and the lion's share of Super Bowl team searches in 2010.

Most searched-for player
For leading the New Orleans Saints to their 31–17 win over the Indianapolis Colts — with 288 yards, two touchdowns and 32 of 39 passes completed — quarterback Drew Brees won the Most Valuable Player award. But Peyton Manning earned the status of the Super Bowl's most searched-for player, beating out some tough competition and followed by Drew Brees, Reggie Bush, Hank Baskett and Scott Fujita.

Many fans of Reggie Bush also expressed interest in his girlfriend Kim Kardashian; searches for her name, both on its own and linked with Reggie Bush's, spiked significantly during the game. Additionally, search volume for football great Walter Payton — after whom the Walter Payton Man of the Year Award was named — was as high as that for some of the game's top five most searched-for players.

Most searched-for coach
Behind every team is a great coach, and behind every coach is an engaged online community. This year, Sean Payton, who has coached the New Orleans Saints since 2006, was the most searched-for team leader.

Most searched-for party planning terms
Die-hard football fans and casual shindig hosts alike look forward to game day for its party planning possibilities. This year, people went online to find all the information they needed to watch the game and to make sure they were well-fed during the same. Some top rising recipe searches on game day included buffalo chicken dip, guacamole, 7-layer dip and pigs in a blanket.

People were also looking for information on how and when to watch the game; searches related to the start time of the game and watch Super Bowl 2010 online were both notably high.

Most searched-for advertisers
In addition to spotlighting some of the finest football teams in the U.S., the Super Bowl is a showcase for some of the funniest, coolest and most interesting creative advertisements each year. This year, the prospect of "free" dominated the searched-for ads. The offer of free pants from Dockers garnered a spike of queries which continued throughout the game. Twice, Denny's advertised free grand slam breakfasts, leading to two bumps in searches for Denny's free breakfast, Denny's locations and Denny's.

Searchers also enjoyed ads featuring celebrities — including Betty White, who played football and ate Snickers bars, and Megan Fox, who used a Motorola smartphone.

We told the story of an American who finds love in Paris — using search queries. Google Super Bowl commercial led searchers to the love story of a man who dutifully searched for information on how to impress a French girl, long distance relationship advice and how to assemble a crib. (Full disclosure: We work for this advertiser.)

Stay tuned
Which advertiser won the position of Favorite 2010 Super Bowl Ad, according to fans? Check out YouTube's Ad Blitz results on February 17 to see which Super Bowl ad received the greatest number of positive votes from the YouTube community. Until then, you can use Google Trends to see more Super Bowl-related queries.

*We used internal tools to quickly gather this data. All of the search queries we looked at were anonymous — no personal information was used.

by A Googler (noreply@blogger.com) at February 08, 2010 11:29 AM

Linux Poison

FSArchiver - Filesystem Archiver for Linux

FSArchiver is a system tool that allows you to save the contents of a filesystem to a compressed archive file. The filesystem can be restored on a partition that has a different size, and it can be restored on a different filesystem. Unlike tar/dar, fsarchiver also creates the filesystem when it extracts the data to partitions. Everything is checksummed in the archive in order to protect the data

by Nikesh Jauhari (njauhari@cybage.com) at February 08, 2010 11:27 AM

canspice

Weekly Tweet Digest for 2010-02-08

  • HELLO TWITTER STOP HOW ARE YOU TONIGHT OVER #
  • Glad I won't have to deal with U-Haul again for a very long time. #
  • Holy shit Google Maps on the iPhone is awesome. I know, I know,welcome to 2008, Brad. #
  • Elizabeth all decked out for Ikea shopping. http://yfrog.com/4fxdjsj #
  • And another two boxes of crap bite the dust. Someone remind me why I kept all this? #
  • The remainder of the aforementioned boxes of crap. http://yfrog.com/33z7mcj #

Powered by Twitter Tools


by Brad at February 08, 2010 10:00 AM

Chris Siebenmann

A thought on deliberately slow disaster recovery

A thought on deliberately slow disaster recovery

Given my earlier entry, here is a thesis: some disasters are big enough that you should stop trying to recover rapidly.

The problem with attempting rapid disaster recovery is that significant disasters are high stress, high pressure situations. Unless you have very good checklists, this is exactly the sort of situation where it's easy to have something go catastrophically wrong through various situations; missed steps, miscommunication between people about who was doing what, failing to notice problem indicators under the pressure of driving full speed ahead, interruptions and distractions making people lose their place, and and so on.

So in this sort of situation, maybe what you should do is slow down. Back off, reduce the stress level, be methodical. Take the time to be organized. Stop sometimes to take a breather. Yes, this requires accepting that the systems will come back up slower than you might have been able to achieve if you went all out and everything went well. But in return, you are much more likely to avoid making the situation (much) worse.

This is a new way of thinking about crisis handling for me, because I am quite a lot a 'go, now now now!' type of person when trying to fix problems. (And yes, some of the time I have probably made the situation worse by rushing to slap apparent bandaids on things; my instinct is to get the system up now and sort out the situation later and, well, this is not always the right answer.)

There's two things that strike me about this. First, the most dangerous crises and disasters from this perspective are not necessarily the huge ones, but the ones that have the highest potential for further damage, the ones that involve your critical infrastructure but have not already done much damage to it.

(To put it one way, if your machine room has burned down you have very little left to lose, no matter what you do.)

Second, this is not necessarily going to be easy. There are going to be a lot of people yelling at you to get things going faster, and a lot of pressure on you in general. I suspect that you're going to want management agreement on this, in advance (because you're unlikely to get it at the time, not with people yelling at your management too).

by cks at February 08, 2010 06:16 AM

Everything Sysadmin

To all my New Jersey friends:

Do you work in New Jersey? Let your "IT guy/gal" know how much you appreciate them this Valentines day!

Send this to them, or better yet, open a ticket at your helpdesk with this text!

(And if you really like them, CC: their boss!)

8 ---------- cut here ---------- >8


Happy Valentines Day to my favorite computer system administrator:


You only hear from me
when my computer is blue.
So this Valentine's Day
I'm saying "Thank you!"

I admit my computer problems,
like it's a reality-show confessional.
But you hide your frown,
and act very professional.

I think that you're great!
I know I'm a pest!
But I bring my troubles to you,
because you're the best!

Some roses are red,
some roses are pink.
No candy this year,
but my card's at this link:
http://picconf.org/vday

Thank you for everything you do! Happy Valentine's Day!

Sincerely

(your name here)

8 ---------- cut here ---------- >8

(Please pass this on to all your friends in New Jersey!)

This campaign is brought to you by EverythingSysadmin.com and LOPSA-NJ (picconf.org).

February 08, 2010 03:33 AM

Rands in Repose

A Story Culture

The Editor and I don't argue, we discuss.

We're arguing... discussing over a glass of red wine my concern over our collective attention spans. Not just she and I, but everyone. The whole damned planet.

I say, "Information just keeps getting smaller. We're sharing our bright ideas in 140 characters now and no one is taking the time to construct a strategic thought. All these micro-ideas are free and everyone is taking them for granted. We're just tactically stumbling through a day full of intellectual sound bites stuffed with shortened URLs. There's no deep now. Just shallow passing seconds."

"No one is learning. There's no work involved in knowing a thing, so we're becoming mentally flabby. I want people to read more."

To which the Editor retorts: "I don't think you know what information is."

Hmmmm.

Information has a Hierarchy

So I looked it up. According to Ray R. Larson at Berkeley, information has a hierarchy that looks like this:

  • Data - The raw material of information
  • Information -- Data organized and presented by someone
  • Knowledge -- Information read, heard or seen and understood
  • Wisdom -- Distilled and integrated knowledge and understanding.

If you ignore the fact that the word information is used to define a hierarchy about information, this hierarchy makes sense, but it dances around a key point.

Another version of this hierarchy describes the same categories as above but focuses more on what happens to information once we get a hold of it. Not just consumption, but synthesis.

  • Data -- Raw material. Facts. Got it.
  • Information - Organized data. See what happens here? Someone showed up and organized the data into something else. Why'd they do this? How'd they know it was the right thing to do? Let's keep moving.
  • Knowledge -- Information seen, heard or read and understood. To me this is when information is transformed by the understanding of why. Our data is organized into information and that is passed onto someone else who can now recognize the value in the information and thinks, "Oh, wow. Now I understand how a trash compactor works. Slick."
  • Wisdom -- Distilled, integrated knowledge and understanding. The idea here is that higher order constructions of information are based beyond our ability to consume, combine, evaluate, and interpret information. The information becomes a catalyst for creation. Think of it like this: maybe a lot of people understand trash compactors, but you know so much about trash compactors that you could build one yourself and perhaps advance the art of trash compacting in the process.

Still with me? This is going to take more than 140 characters and there's a point. Just wait a tick.

Take a look at this list:

  • New York is a city.
  • It takes me about five hours to fly to New York.
  • I've been to New York three times this year
  • I never believe I'm in New York until I'm in a cab or smoking a cigarette.

Is this data, information, or knowledge? Or just four boring tweets? That would depend on whether or not you're interested in my experiences in New York. But what I provide in this list is the opportunity for increasing amounts of understanding, and understanding is the progression through, and synthesis of, increasingly complex pieces of information. Right?

There's another thread that ties this information together, and you may not initially see it, but if you've started mentally asking questions - Why does Rands go to New York? What does he do there? Did I know that he smoked? - you have started to find it.

I've begun to tell you a story.

A Shattered Narrative

The reason no one watches or cares about the evening news anymore is because there are a great many other ways to find your news. A weblog here, a Twitter status update there. In the deluge of information variety we've realized that the evening news is just one set of facts and just one carefully constructed story, and increasingly one with its own specific agenda. Who wants to be spoon-fed 30 minutes of ad-infested evening news when I can figure out what my world thinks is important by glancing at The Daily Show, Twitter, and NetNewsWire?

The traditional narrative has been shattered into bits of well-indexed information. Google wasn't the first indexing tool, but it's certainly the best. Still, Google is powerfully dumb. Yes, I can find whatever piece of information I'm looking for, but what's more interesting are all the related pieces of information. How do you query for knowledge via Google? How about wisdom?

If you're buying my definitions of the informational hierarchy, there's no replacing the process of understanding if you want to delve into more interesting forms of information. There's no replacing a human being combing through seemingly disparate pieces of information to evaluate, interpret, and combine it into something unexpected; into a new work. Into a story.

Those frustrated with Twitter are frustrated because they have a belief that a story needs a beginning, middle, and end. And that it should have all of those parts before it's presented to them. What the hell am I supposed to learn from a tweet? The point of Twitter isn't knowledge or understanding, it's merely connective information tissue. It's small bits of information carefully selected by those you've chosen to follow and its value isn't in what they send, it's how it fits into the story in your head. There are great stories to be found on Twitter, but you have to do the work.

This is what is going on all day. It will start with a random tweet about conferences and you'll think, "I don't understand why everyone goes to conferences". You won't act on this thought; you'll leave it buried in your head until you see that link on del.icio.us where someone important rails on the lack of women presenters at conferences. And in that moment, you'll remember that drunken thought you had at that conference last March when you discovered the basic truth about conferences: it's not what you learn, it's who you find.

From a disparate set of information, you continually find your own arc, your own story, and my question is: What are you going to do with it? You're an information nerd, you're adept at consuming massive amounts of micro-information, and those who watch you do this are saying you've got a short attention span, and you might.

But I think all this micro-information has macro-story potential.

Rands' Story Hierarchy

As we've established, there's information. Like everywhere. You, as a consumer of information, fall into one of three progressively complex buckets regarding this data:

  • You can understand the information -- What does it mean? Why is it important? How does it relate to other things I care about?
  • You can explain the information to someone else -- Hey Bob, this is what this means. I can explain it to you and impart my understanding.
  • You can create more information, building something new and telling a story - Hey Jim, actually, we discovered a better way to do X. Bob and I were working on Y one time and realized that...

But Rands, I'm not a writer.

This is a poor excuse and the death of many a worthy story. The construction of a story has very little to do with writing. It has to do with the semi-magical process of you taking disparate pieces of information, combining them into something new, which includes your experience and understanding, and then giving them to someone else. Look around the walls of wherever you're reading this and pick two random objects. Got 'em? Ok, now tell me how they relate. No, you can't say, "They're both in the coffee shop". What's the first novel thing that crosses your mind about the intersection of these two items?

But you don't have a story, yet. Just like information isn't knowledge until it's understood, your tale isn't a story until you give it someone else -- until they have a chance to see what they think about your inspiration.

But Rands, my thought is really, really stupid.

I understand what you're saying but I don't think that's what you mean. I think what you're saying is, "I don't think that anyone will find anything of value in my thought," and you're wrong. You've got two things going for you. You've got the inexplicable moment of inspiration that created your idea, and it's the closest thing to magic you'll experience in your life. Second, you've got the entire planet listening and there's just no telling what any of those folks are looking for.

The value of the idea is one part that it is yours and one part that you gave it to someone else. It's you and something new.

Information Is Getting Smaller and Faster

Look at the historic progression of popular personal written information containers over the past 10+ years:

Home pages > Blogs > Lists of Links > Tumblr > Twitter

I see two symbiotic trends. First, I see a reduction in the average size of a piece of information. I see information that feeds our short attention spans. Second, and more important, I see our tools increasingly removing barriers from producing information. Remember when you needed a nerd friend to set up a weblog? Did you have any issue figuring out how to publish a thought with Twitter? I hope not.

Yes, these frictionless tools make it so anyone can say anything about any topic, but these tools are built with you in mind and I do mean you. Imagine if Twitter forced you to follow certain people. What if Facebook randomly added folks to your friends list? You know what you'd have? The evening news. Random stories from folks you don't know and probably don't trust.

We're in a share everything world and you get to choose your role. You can be overwhelmed and sit in the coffee shop with your friends and say, "Twitter: what's the point?" Or, you can jump in with both feet, grab those three random ideas and tie them into a story that no one has ever seen.

An Essential Skill

I wrote, edited, and published an entire book without physically interacting with a single person at my publisher. The t-shirt I produced last year and the one I'm doing this year were entirely designed, developed, and shipped by interacting with two different organizations that I never met. Paradoxically, it's never been easier to share or meaningfully interact with more people with less physical, in-person effort.

Your ability to compose and convey information as well as express yourself through your fingertips is a skill that is only going to increase -- and increase in value -- as people become more comfortable with their place in communities that span the planet, and as the tools to connect them become more commonplace.

In this digitally distant world full of information that appears to only be moving faster and faster, you get to choose: how much will I consume and how much will I create?

February 08, 2010 02:57 AM

Ubuntu Geek

February 07, 2010

Google Blog

Love and the Super Bowl

If you watched the Super Bowl this evening you'll have seen a video from Google called "Parisian Love". In fact you might have watched it before, because it's been on YouTube for over three months. We didn't set out to do a Super Bowl ad, or even a TV ad for search. Our goal was simply to create a series of short online videos about our products and our users, and how they interact. But we liked this video so much, and it's had such a positive reaction on YouTube, that we decided to share it with a wider audience.

If you like it too, we hope you'll watch the others. Enjoy.

by A Googler (noreply@blogger.com) at February 07, 2010 05:51 PM

TaoSecurity

So Much for China's "Peaceful Rise"

I was not surprised to read China’s hawks demand cold war on the US in the Times Online.

[A]lmost 55% of those [in China] questioned for Global Times, a state-run newspaper, agree that “a cold war will break out between the US and China”...

An independent survey of Chinese-language media for The Sunday Times has found army and navy officers predicting a military showdown and political leaders calling for China to sell more arms to America’s foes...

This time China must punish the US,” said Major-General Yang Yi, a naval officer. “We must make them hurt.” A major-general in the People’s Liberation Army (PLA), Luo Yuan, told a television audience that more missiles would be deployed against Taiwan. And a PLA strategist, Colonel Meng Xianging, said China would “qualitatively upgrade” its military over the next 10 years to force a showdown “when we’re strong enough for a hand-to-hand fight with the US”...

As a crescendo of strident nationalistic rhetoric swirls through the Chinese media and blogosphere, American officials seem baffled by what has gone wrong and how fast it has happened...

“The truth was that the atmosphere was cold and intransigent when the president went to Beijing yet his China team went on pretending that everything was fine,” the diplomat said.


American officials have been "baffled" because they fell for the so-called "peaceful rise" propaganda promulgated by the Chinese government and its sympathizers and apologists in the West. Now that the Chinese government is feeling confident, it's less inclined to keep its true intentions out of its state-run media. As Liu Menxiong, a member of the Chinese people’s political consultative conference, said in the article:

“We have nothing to be afraid of. The North Koreans have stood up to America and has anything happened to them? No. Iran stands up to America and does disaster befall it? No.”

by Richard Bejtlich (noreply@blogger.com) at February 07, 2010 02:48 PM

Chris Siebenmann

The problem with blog footnotes

The problem with blog footnotes

Here is something that has just occurred to me (courtesy of seeing an example of it): footnotes are hard to do well in blogs, and may need actual software support if you want them to be completely correct.

The conventional way of doing footnotes in HTML is to use fragment URLs and anchors, with the footnote text at the bottom of the entry and your choice of footnote markers in the main text. But, like anything involving anchors, this means that you need to come up with unique anchor names.

On one level this is no problem; you can just use 'fn:1', 'fn:2', and so on. But on another level this is a problem for blogs, because blog entries are repeatedly aggregated together with each other on web pages. When you put multiple footnote-using entries on the same HTML page, you need all of their anchors to be unique; you are not likely to get this if you use 'fn:1' style anchors. (This is especially pernicious once you start considering syndication feeds and 'planets', that put content from multiple blogs on the same HTML page.)

You can just punt on the issue and say 'well, it's up to the author to come up with unique anchor text (ideally globally unique text)', but in practice people won't always do this and this is equivalent to having non-functional footnote links under some circumstances.

Admittedly, I suspect that most people won't really care about all of this, and will be perfectly happy using 'fn:1' style links and having them not work. Regardless of whether the actual links work, your intent is likely to be pretty easy for users to follow.

(And who knows, maybe the proper implementation of footnotes in blog entries is pop-up alt text, like xkcd famously does on the comics images. Alternately, footnotes are a printed thing that are not appropriate in HTML.)

by cks at February 07, 2010 08:07 AM

Off Planet

bit.ly.Pro: Create Short URLs With Your Own Domain


As Twitter has rapidly risen to dominate the real-time web, related applications and services have also come to prominence; many in the field of URL shortening. Foremost amongst these is bit.ly, which today released a Pro edition of the service.

bitly.Pro is, in essence, a “white-label” edition of the public service, where a short URL such as http://bit.ly/bHRDfP can now be replaced by one with a custom domain, such as http://imrn.me/bHRDfP.

As well as the ability to utilise a custom domain, bitly.Pro also provides a dashboard view, enabling users to view analytics on all the links shared from your custom domain. I put bitly.Pro through its paces today by registering my new domain — imrn.me. Setting up the service is surprisingly easy; here’s how I did it:

  1. I registered imrn.me with GoDaddy.
  2. I changed the domain’s nameserver settings to point at my own MediaTemple-hosted server.
  3. I altered the DNS records (A and CNAME) for the new domain to verify and redirect to bit.ly.pro.
  4. I logged into bitly.Pro with my standard bit.ly account details to link both account histories.
  5. Used the standard bit.ly bookmarklet to generate my first custom shortened URL: http://imrn.me/90mM9Q

All in all, the entire setup process took me around 10-15 minutes and the new real-time analytics dashboard will prove useful in tracking the “virality” of my shared links. Sadly, your shortened URLs still share their namespace with other bit.ly users, so your domain will still be suffixed by a five-character reference.

However, other than vanity and analytics, there are good reasons for employing a custom domain for your shortening your URLs.

Why use a custom domain?

In recent months, there’s been much discussion on the impact short URLs are having on the long-term stability of the web; notably by weakening the web with centralised hyperlinks, reducing transparency, introducing unwelcome interstitials and providing opportunities for phishing attacks.

Delicious creator Joshua Schacter suggests some publishers should offer their own shortening services to mitigate some of the negative circumstances of shortening.

Indeed, we’ve recently seen brands such as Flickr, TechCrunch, WordPress and Google offer short URLs such as flic.kr, tcrn.ch, wp.me & goo.gl.

For such prominent brands, content publishers and even prolific Twitter users, bitly.Pro offers a useful form of transparency and trust to users clicking on shortened links.

Though the service doesn’t address the problem of centralization of links, it’s a step in the right direction. For those who demand more control, installing a hosted URL shortening app may be more appropriate.

Related GigaOM Pro Research: Report: The Real-Time Enterprise

by Imran Ali at February 07, 2010 02:36 AM

Ubuntu Geek

Off Planet

12 Classic Zen Habits Posts You Might Not Have Read

“There is no way to happiness, happiness is the way.” ~ Thich Nhat Hanh

Post written by Leo Babauta. Follow me on Twitter.

This morning I found myself lying around, enjoying a lazy weekend with my wife and kids, basking in the peaceful simplicity of today.

It’s in these moments that I find not only my greatest happiness, but my purpose in life.

I am here not to achieve or even to change the world, but simply to live. Life is a gift, and I’m happy to accept every moment of it.

And so, in this spirit, I thought I’d dig through my archives and share a few favorite posts, to help others find this peace.

A lot of Zen Habits readers are new, and haven’t taken the time to peruse the 800+ posts I’ve written. Shame on you! :)

Here’s a good way to get started. If you want more, check out the Beginner’s Guide to Zen Habits, or see the newly revamped Zen Habits archives for every post ever published here.

12 Classic Posts You Might Not Have Read
Don’t read these all at once:

  1. Peaceful Simplicity: How to Live a Life of Contentment
  2. The Four Laws of Simplicity, and How to Apply Them to Life
  3. The Cure for What Ails You: How to Beat the Misery of Discontentment
  4. 30 Things to Do to Keep From Getting Bored Out of Your Skull at Work
  5. A Guide to Cultivating Compassion in Your Life, With 7 Practices
  6. 9 Steps to Achieving Flow (and Happiness) in Your Work
  7. 10 Simple Ways to Live a Less Stressful Life
  8. 15 Tips for Becoming as Patient as Job
  9. 12 Practical Steps for Learning to Go With the Flow
  10. Calm as a Monk: How Equanimity Can Save Your Sanity
  11. The Many Paths to Simplicity
  12. The Magical Power of Focus

“Be content with what you have; rejoice in the way things are. When you realize there is nothing lacking, the whole world belongs to you.” ~Lao Tzu

If you liked this post, please bookmark it on Delicious or share on Twitter. Thanks, my friends.

by Leo at February 07, 2010 12:37 AM

February 06, 2010

Ubuntu Geek

TaoSecurity

APT Presentation from July 2008

Some of you may remember me mentioning the 2008 SANS WhatWorks in Incident Response and Forensic Solutions Summit organized by Rob Lee. I provided the keynote and really enjoyed listening to the presentations, which Rob has graciously made available at http://files.sans.org/summit/forensics08/. One of the presentations, by Mandiant consultant Wendi Rafferty and then-Mandiant consultant (now GE-CIRT incident handler) Ken Bradley, was titled Slaying the Red Dragon.

As you can see from the first two slides shown at left, this was presentation explicitly addressed advanced persistent threat. I didn't mention it originally because it discusses a specific attack vector. However, it's been over 18 months since the presentation was made. Therefore, to show that APT is "not a new term" but also to share some technical insights, I thought it acceptable to advertise this presentation.

By the way, the presentations from the 2009 event are posted at http://files.sans.org/summit/forensics09/.

I'm sure we will discuss this topic at the 2010 Incident Response Summit and the 2010 Incident Detection Summit.

by Richard Bejtlich (noreply@blogger.com) at February 06, 2010 02:19 PM

Review of The Book of Xen Posted

Amazon.com just posted my five star review of The Book of Xen by Chris Takemura and Luke S. Crawford. From the review:

The Book of Xen (TBOX) is a great book for Linux system administrators who want to deploy Xen. The authors ground their recommendations in over four years of experience running Xen to support Internet-facing virtual private servers. I found their writing style to be very engaging; it reminded me of reading any one of Michael Lucas' No Starch books. If you know your way around Linux and want to deploy Xen in production, TBOX is the book for you.

Thank you to No Starch for providing me a free review copy.

by Richard Bejtlich (noreply@blogger.com) at February 06, 2010 01:54 PM

Ubuntu Geek

Canonical picks open-source leader for COO


When Mark Shuttleworth, CEO of Canonical, the company behind Ubuntu, stepped down and former COO (chief operating officer) Jane Silber moved up, there was concern that the popular Linux company might suffer from a lack of corporate leadership. Worry no more. Open-source industry veteran and leader Matt Asay has joined Canonical as its new COO.
(...)
Read the rest of Canonical picks open-source leader for COO (365 words)


© admin for Ubuntu Geek, 2010. | Permalink | No comment | Add to del.icio.us
Post tags: ,

Related Articles

by admin at February 06, 2010 09:50 AM

Aaron Johnson

Linux Poison

Grsync - A Graphical User Interface for Rsync

Grsync is a rsync GUI (Graphical User Interface). Rsync is the well-known and powerful command line directory and file synchronization tool. Grsync makes use of the GTK libraries and is released under the GPL license. Grsync doesn't need the gnome libraries to run, but can of course run under gnome pretty fine. It can be effectively used to synchronize local directories and it supports remote

by Nikesh Jauhari (njauhari@cybage.com) at February 06, 2010 06:27 AM

Chris Siebenmann

Why a laptop is not likely to be my primary machine any time soon

Why a laptop is not likely to be my primary machine any time soon

I know and read a number of people who use laptops as their primary machines, but I'm one of the people who's not interested in the idea (even ignoring any issues of relative prices). I wound up actually thinking about the question recently, and as it turns out I think I have a fairly odd set of reasons for it.

So, here they are so far:

  • I have very particular tastes in keyboards (I have used a BTC-5100C keyboard for more than a decade) and for the space immediately in front of the keyboard. Laptops may have decent keyboards, but they don't have my keyboard.

  • I want a fairly physically large display with good resolution, especially good vertical resolution; when there's room for it, I want two of them.

  • I use two drives in my systems in order to have mirrored (system) disks. (Of course this can have drawbacks.)

In the past, my desire for Unix (ideally Linux) would also have been a significant obstacle, but my impression is that it's now relatively easy to find a nice modern laptop that has good Linux support. (Hopefully I'm not wrong.)

Another way of thinking about this is that I have two roles for computers: the computer I sit in front of all the time, and the computer that I take places for relatively moderate use. For the heavily used computer, I have strong and very particular opinions about the pieces of the computer that I interact with a lot (the keyboard, the displays), but I'm indifferent to the rest of it (provided that it's quiet). I don't care as much about the casual computer, but I want it to be small, light, and still nice for productive work.

(The late Dell Mini 12 is about my platonic ideal of the casual laptop in form factor, screen resolution, and keyboard.)

It's pretty clear to me that some of these desires clash even in the best of circumstances, particularly the displays; a laptop screen big enough to be one of my regular displays makes the laptop too big to be conveniently portable. Thus, if I tried to use a laptop for both roles the only use I'd get for it in the full time usage role would be as the system unit of a desktop system, as I wouldn't use either its display or its keyboard (and I'd still only have one system disk). If I absolutely had to have only computer this could be workable, but if not, there's little advantage to it.

I suspect that other people are generally much less particular and picky about their keyboards, displays, software, and so on. (Or, alternately, they have found a laptop maker whose keyboards and screens they are as fond of as I am fond of my favorites.)

(This entry was sparked by the discussion here. Plus, I feel like not writing about documentation for days on end.)

by cks at February 06, 2010 05:44 AM

Ubuntu Geek

How to install Gyachi in ubuntu 9.10 (Karmic)


GyachI program is a fork from Gyach Enhanced Yahoo! client for Linux operating systems. It was born purely out of impatience. Since there was no progress on Gyach Enhanced  for about a year, a couple of impatient GYach Enhanced users decided to continue development of that client, fearing that original author Erica Andrews lost interest or abandoned project altogether. Therefore, in the true spirit of Open Source we, the developers, thought of simply “carrying on the torch”.
(...)
Read the rest of How to install Gyachi in ubuntu 9.10 (Karmic) (78 words)


© admin for Ubuntu Geek, 2010. | Permalink | 6 comments | Add to del.icio.us
Post tags: , ,

Related Articles

by admin at February 06, 2010 12:03 AM

February 05, 2010

nxadm

See you at Fosdem!

Better late than never… see you there. Filed under: Misc

by claudio at February 05, 2010 08:20 PM

Google Blog

This week in search 2/5/10

This is part of a regular series of posts on search experience updates that runs weekly. Look for the label This week in search and subscribe to the series. - Ed.

In addition to language improvements this week, we released several other new features:

Haitian Creole translation
We've now added Haitian Creole (kreyòl ayisyen) translation to Google Translate, so that you can translate between Creole and 51 other languages, and also hear spoken versions of Creole translations. While this translation system is still evolving (when translating to/from Creole, English performs better than other languages), we hope it will help relief volunteers communicate better with Haitian earthquake victims, and serve as a useful resource for people in Haiti and elsewhere. To learn more about ways you can help with Haiti relief efforts, please visit our Crisis Response page.

Example translations: [Kijan ou ye ?] and [How can I help you?]

Improvement for Arabic searches
Sometimes when people conduct a search, they forget to separate words with spaces or mistakenly repeat a letter within a word. These types of errors are much more common in languages like Arabic, where some letters are considered word breaks. In other words, if the last letter of one word is a word break, the following word may not be separated with a space. To address issues like this, we recently developed a search ranking improvement that targets certain Arabic queries. Our algorithm employs rules of Arabic spelling and grammar and signals from historical search data to indicate when to leave out spaces between words or when to remove unnecessarily repeated letters. Now, when you type a query leaving out spaces or repeating a letter, you'll see better results based not only on what you typed, but also on what our algorithm understands is the "correct" query.

Example search: [التربيةوالتعلييم] Incorrectly typed, this Arabic query may not produce a relevant search result. With our algorithm change, the query returns better results for the correct meaning: "Ministry of Education."

Doodle 4 Google
This week marks our third annual Doodle 4 Google contest in the U.S. The competition gives K-12 kids the opportunity to design their own Google logo and the winner appears on Google.com for a day so that hundreds of millions of searchers can enjoy it as well. In addition to the bragging rights, there are a number of great prizes including a college scholarship and computers for the winner's school. If you or your child are interested in getting involved, check out our announcement or visit the Doodle 4 Google contest page for entry rules.

Stars in Google News
A couple of months back, we launched the Custom Sections Directory feature in Google News, enabling you to setup and share sections on topics of interest. Now there's an even easier way to keep up to date with particular news stories. Mark a story cluster by clicking on the star next to it — just like you do with messages in Gmail and items in Google Reader. Once you've starred a story in Google News, when there are significant updates, we'll alert you by putting the headline in boldface. You can also follow your most recent starred stories in the Starred section of Google News. Learn more about this, and get starring!

Thanks for following news of our search enhancements, and stay tuned for more.

by A Googler (noreply@blogger.com) at February 05, 2010 06:16 PM

Standalone Sysadmin

The fun of dealing with bandwidth vendors

I’m in the middle of an upgrade to the networking and telephone infrastructure of the company’s user sites. Our New Jersey office has this completed, and we’re now running a 13Mb/s symmetrical fiber line there, and at the same time, I’ve upgraded the phone system there to be capable of VoIP.

The idea is that we upgrade the bandwidth there, upgrade the bandwidth in our New York City office, and then migrate the NYC users onto the corporate phone system, so they can have all of the PBX features we’ve got in NJ. All of this is contingent on the bandwidth upgrade in New York, of course.

And so I scheduled Atlantic Metro to come install a 5Mb/s metro ethernet line, which was scheduled for Thursday the 4th. I thought, “cool, I’ll head into the NYC office and make sure things go smoothly”. A few days ago, I got a notice from Atlantic that Verizon would actually be doing the installation. That makes sense, I figured, since Verizon is the ILEC here. Attached to the email was a dire warning:

Please note that Verizon’s dispatch window is 8AM-5PM. A more specific time cannot be requested. Missed appointments will result in a Missed Appointment charge of $195.00.

Awesome. 9 hour window with punishment for not answering the door. Alright, so I let the NYC office know to be on alert, and that someone had to be there early (the office in NYC usually gets active a little later than that), and of course we had to let the building’s facilities people know.

I got here at 9 or so, since I wanted to be on hand when they were installing it. And so I waited. And waited. And waited. The building’s lobby people left, so I waited in the lobby for Verizon. And nothing. 5pm rolled past, and I called Atlantic Metro, and they said they’d check in on them. So I sat there and played some iphone games. And waited. And then I called back, and finally got an answer.

Apparently, Verizon’s tech was overbooked, or otherwise too busy yesterday, and so the Atlantic Metro guys worked hard to get it rescheduled for today. And so it was. Of course, it still has the same window, which is why I found myself at the train station at 6:45 waiting to head into the city. Again. To wait.

Of course, there’s always something to do while I’m waiting, and I don’t see the people in New York enough, and I love the city, but it’s just a pain in the butt!

For the record, I don’t think it’s Atlantic Metro at all. From all of my experiences with Verizon, I believe that they keep their techs overworked and overstressed. I know from my friends who are in the telco business that it’s never fun, and there is always a ton of work, but I really do believe in customer service, and that if you can’t extend any courtesy to your customers, you’re going to get no respect in return.


by Matt Simmons at February 05, 2010 05:35 PM

Off Planet

Improve Productivity by Avoiding Going Online Before Breakfast


In the old days, it was traditional to get up, get dressed, and read the newspaper — or listen to the news on radio or television — over coffee and breakfast.

These days, though, I’ve been getting up at 5 or 6 a.m. In a lot of ways, the early morning hours are a great time to write and do projects that require uninterrupted effort. But I find that it’s way too easy to get sidetracked. Since I work at home, I’m tempted to sit down at the computer first thing in the morning to “check my email.” Unfortunately, too often, I find that “checking the email” has turned into a marathon session of “checking the email, responding to email, reading online news, and catching up on Facebook and Twitter…” and the next thing I know, it’s already 9:30, and I haven’t yet eaten or gotten dressed.

So I’m going to try a few things to regain my mornings:

  • Turn off my computer at night. Not only will I save energy, it will require an extra effort to turn it back on in the morning.
  • If I must leave my computer on for some reason, I plan to shut down my mail software, web browser, RSS reader, Twitter client and anything else that’s likely to send notifications overnight. I’ll probably leave my IM client on, but will set my status to “away” or “not at desk.”
  • Route my business email accounts through a service like AwayFind. I used this a while ago, but haven’t tried it since Thursday wrote about its new features.
  • Use a VoIP service like onSip to set my business phone lines to take messages, or forward calls to me in an emergency. I’ve found that most clients are quite understanding about what’s really an emergency.
  • If I do turn on the computer in the early morning hours (for instance, if I get an idea that I want to write down), I won’t fire up my email client or my browser, but will instead go directly to my word processor or to Evernote.

It’s going to be a challenge to follow these recommendations, especially since I live on the U.S. West Coast, and most of the rest of the world is already working by the time I get up. We’ll see how I do.

How do you keep your mornings to yourself?

Photo by stock.xchng user swissboy

by Charles Hamilton at February 05, 2010 05:00 PM

bitfield consulting

Puppet Drupal recipes

Drupal is an amazing tool for quickly constructing attractive, functional web sites. It lets you manage large numbers of web sites from a single installation, and (via add-on modules) provides almost any CMS or blog feature you could want.

However, like any powerful tool, Drupal takes some learning. It also needs a certain amount of discipline to manage Drupal servers without getting into a chaotic mess. The Drupal sysadmin can end up trying to navigate a spaghetti of ad-hoc symlinks and face problems upgrading, maintaining, monitoring and backing up a large Drupal installation.

Fortunately, Puppet can help you tame Drupal and use the power of configuration management to bring your Drupal sites under control. In this article I'll explain some techniques and Puppet recipes I use to manage Drupal sites and servers, including my own sites, including this one!

read more

by John at February 05, 2010 03:24 PM

Tech Teapot

Planet Network Management Highlights 2010 Week 5

Highlights from Planet Network Management + Planet Sys Admin for Week 5.


by Jack Hughes at February 05, 2010 02:19 PM

/sys/admin/blog

Milek

Data Corruption - ZFS saves the day, again

We came across an interesting issue with data corruption and I think it might be interesting to some of you. While preparing a new cluster deployment and filling it up with data we suddenly started to see below messages:

XXX cl_runtime: [ID 856360 kern.warning] WARNING: QUORUM_GENERIC: quorum_read_keys error:
Reading the registration keys failed on quorum device /dev/did/rdsk/d7s2 with error 22.

The d7 quorum device was marked as being offline and we could not bring it online again. There isn't much in documentation about the above message except that it is probably a firmware problem on a disk array and we should contact a vendor. But lets investigate first what is really going on.

By looking at the source code I found that the above message is printed from within quorum_device_generic_impl::quorum_read_keys() and it will only happen if quorum_pgre_key_read() returns with return code 22 (actually any other than 0 or EACCESS but from the syslog message we already suspect that the return code is 22).

The quorum_pgre_key_read() calls quorum_scsi_sector_read() and passes its return code as its own. The quorum_scsi_sector_read() will return with an error only if quorum_ioctl_with_retries() returns with an error or if there is a checksum mismatch.

This is the relevant source code:

406 int
407 quorum_scsi_sector_read(
[...]
449 error = quorum_ioctl_with_retries(vnode_ptr, USCSICMD, (intptr_t)&ucmd,
450 &retval);
451 if (error != 0) {
452 CMM_TRACE(("quorum_scsi_sector_read: ioctl USCSICMD "
453 "returned error (%d).\n", error));
454 kmem_free(ucmd.uscsi_rqbuf, (size_t)SENSE_LENGTH);
455 return (error);
456 }
457
458 //
459 // Calculate and compare the checksum if check_data is true.
460 // Also, validate the pgres_id string at the beg of the sector.
461 //
462 if (check_data) {
463 PGRE_CALCCHKSUM(chksum, sector, iptr);
464
465 // Compare the checksum.
466 if (PGRE_GETCHKSUM(sector) != chksum) {
467 CMM_TRACE(("quorum_scsi_sector_read: "
468 "checksum mismatch.\n"));
469 kmem_free(ucmd.uscsi_rqbuf, (size_t)SENSE_LENGTH);
470 return (EINVAL);
471 }
472
473 //
474 // Validate the PGRE string at the beg of the sector.
475 // It should contain PGRE_ID_LEAD_STRING[1|2].
476 //
477 if ((os::strncmp((char *)sector->pgres_id, PGRE_ID_LEAD_STRING1,
478 strlen(PGRE_ID_LEAD_STRING1)) != 0) &&
479 (os::strncmp((char *)sector->pgres_id, PGRE_ID_LEAD_STRING2,
480 strlen(PGRE_ID_LEAD_STRING2)) != 0)) {
481 CMM_TRACE(("quorum_scsi_sector_read: pgre id "
482 "mismatch. The sector id is %s.\n",
483 sector->pgres_id));
484 kmem_free(ucmd.uscsi_rqbuf, (size_t)SENSE_LENGTH);
485 return (EINVAL);
486 }
487
488 }
489 kmem_free(ucmd.uscsi_rqbuf, (size_t)SENSE_LENGTH);
490
491 return (error);
492 }

With a simple DTrace script I could verify if the quorum_scsi_sector_read() does indeed return with 22 and also I could print what else is going on within the function:

56 -> __1cXquorum_scsi_sector_read6FpnFvnode_LpnLpgre_sector_b_i_ 6308555744942019 enter
56 -> __1cZquorum_ioctl_with_retries6FpnFvnode_ilpi_i_ 6308555744957176 enter
56 - __1cZquorum_ioctl_with_retries6FpnFvnode_ilpi_i_ 6308555745089857 rc: 0
56 -> __1cNdbg_print_bufIdbprintf6MpcE_v_ 6308555745108310 enter
56 -> __1cNdbg_print_bufLdbprintf_va6Mbpcrpv_v_ 6308555745120941 enter
56 -> __1cCosHsprintf6FpcpkcE_v_ 6308555745134231 enter
56 - __1cCosHsprintf6FpcpkcE_v_ 6308555745148729 rc: 2890607504684
56 - __1cNdbg_print_bufLdbprintf_va6Mbpcrpv_v_ 6308555745162898 rc: 1886718112
56 - __1cNdbg_print_bufIdbprintf6MpcE_v_ 6308555745175529 rc: 1886718112
56 - __1cXquorum_scsi_sector_read6FpnFvnode_LpnLpgre_sector_b_i_ 6308555745188599 rc: 22

From the above output we know that the quorum_ioctl_with_retries() returns with 0 so it must be a checksum mismatch! As CMM_TRACE() is being called above and there are only three of them in the code lets check with DTrace which one it is:

21 -> __1cNdbg_print_bufIdbprintf6MpcE_v_ 6309628794339298 quorum_scsi_sector_read: checksum mismatch.

So now I knew exactly what part of the code is casing the quorum device to be marked offline. The issue might have been caused by many things like: a bug in a disk array firmware, a problem on an SAN, a bug in a HBA's firmware, a bug in a qlc driver or a bug in SC software, or... However because the issue suggests a data corruption and we are loading the cluster with a copy of a database we might have a bigger issue that just an offline quorum device. The configuration is a such that we are using ZFS to mirror between two disks arrays. We have been restoring a couple of TBs of data into and we haven't read almost anything back. Thankfully it is ZFS so we might force a re-check off all data in the pool and I did. ZFS found 14 corrupted blocks and even identified which file is affected. The interesting thing here is that for all blocks both copies on both sides of the mirror were affected. This almost eliminates a possibility of a firmware problem on disk arrays and suggest that the issue was caused by something misbehaving on the host itself. There is still a possibility of an issue on SAN as well. It is very unlikely to be a bug in ZFS as the corruption affected reservation keys as well which has basically nothing to do with ZFS at all. Then we are still writing more and more data into the pool and I'm repeating scrubs and I'm not getting any new corrupted blocks nor quorum is misbehaving (I fixed it by temporarily adding another one, removing the original and re-adding it again while removing the temporary one).

While I still have to find what caused the data corruption the most important thing here is ZFS. Just think about it - what would happen if we were running on any other file system like: UFS, VxFS, ext3, ext4, JFS, XFS, ... Well, almost anything could have happened with them like some data of could be corrupted, some files lost, system could crash, fsck could be forced to run for many hours and still not being able to fix the filesystem and it definitely wouldn't be able to detect any data corruption withing files or everything would be running fine for days, months and then suddenly the system would panic, etc. when application would try to access the corrupted blocks for the first time. Thanks to ZFS what have actually happened? All corrupted blocks were identified, unfortunately both mirrored copies were affected so ZFS can't fix them but it did identified a single file which was affected by all these blocks. We can just remove the file which is only 2GB and restore it again. And all of these while the system was running and we haven't even stopped the restore or didn't have to start from the beginning. Most importantly there is no uncertainty about the state of the filesystem or data within it.

The other important conclusion is that DTrace is a sysadmin's best friend :)


by milek (noreply@blogger.com) at February 05, 2010 12:27 PM

Google Blog

Google Apps highlights – 2/5/2010

This is part of a regular series of Google Apps updates that we post every couple of weeks. Look for the label "Google Apps highlights" and subscribe to the series. - Ed.

Developments over the last couple weeks really showcase how Google's other innovation focus areas — including Search, Mobile and Chrome — help make Google Apps even more useful.

Updates to Google Search in Gmail Labs
On Tuesday we made some helpful changes to the Google Search feature in Gmail Labs. The search gadget now runs some of Google's most popular search features, like dictionary definitions, spelling suggestions, calculations, local results, weather info and news. You don't even need to type your search query anymore; just highlight text in the compose area and click the multicolored "g" button to run a search on those terms.


Gmail Chrome extensions
Several convenient extensions for Gmail are now available to Chrome users. The "Google Mail" extension adds a small button next to Chrome's address bar that displays your unread mail count. "Send from Gmail" makes Gmail your default mail program, and opens a Gmail compose window when you click an email link on a web page. The button for this extension helps you quickly share the web page you're viewing over email.


Easier file location in Google Docs
Last week we introduced a pair of improvements to make finding files in Google Docs easier. First, we launched an option to show file thumbnails in your Documents List, which is great for quickly spotting what you're looking for. Just click the view option buttons in the toolbar to toggle between thumbnails and the standard text layout.


Also released last week: search spelling suggestions help you find the file you're looking for, even when your typing is off. The Google Docs search spell checker is powered by the same technology that helps you get better search results on google.com.


Scripts for Google Apps Standard Edition
At the end of last week we launched application scripting for Google Apps Standard Edition. (Before it was only available to businesses and schools using Premier and Education Editions.) Scripts can be triggered from spreadsheets to perform automated tasks and calculations, but scripts go far beyond spreadsheets; they can be used to fire off automated email messages, create appointments in Google Calendar and accomplish other actions across the whole Google Apps suite. We've written up a few script tutorials if you have the itch to give scripting a try.

Mobile device management
Just yesterday, Google Apps Premier and Education Edition customers got a boost in their ability to manage mobile devices synced with Google Apps. Right from the online control panel, IT admins can remotely wipe data from lost or stolen mobile phones, configure devices to lock after a period of inactivity and set password strength requirements. These new capabilities are available for iPhones, Windows Mobile devices and Nokia E-series phones. Stay tuned for similar features for Android devices.

Who's gone Google?
It's been another very active couple weeks helping more businesses and schools move to the cloud. The team is happy to welcome the latest crop of Google Apps customers, including Complinet, The Open University, Villanova University, Small World Financial Services, Tuskegee University, Clemson University and the New Zealand Post.

Saline Area Schools in Michigan has an especially impressive "gone Google" story. They're saving $400,000 in the first year, spending much less time on server administration, keeping spam at bay and fostering better collaboration among faculty.

Fairchild Semiconductor also recounted their experience switching 6,000 employees spread across 20 countries off their legacy Lotus Notes installation, selecting Google Apps and Postini over hosted email alternatives from Microsoft and IBM. Barry Driscoll, Senior Director of IT for Fairchild summed it up best: "Now we are providing our employees with a lot more functionality for a lot less money."

Hope you're enjoying the latest round of new capabilities, whether you're using Google Apps with friends and family, with work colleagues, or with classmates. For details and the latest news in this area, check out the Google Apps Blog.

by A Googler (noreply@blogger.com) at February 05, 2010 12:26 PM

Sam Ruby

Rails 3.0 Beta

P P

David Heinemeier Hansson: You thought we were never going to get to this day, didn’t you? Ye of little faith. Because here is the first real, public release of Rails 3.0 in the form of a beta package that we’ve toiled long and hard over.  It’s surely not perfect yet, but we were out of blockers on the list, so here we go. Please give it a run around the block, try to update some old applications, try to start some new ones, and report back all the issues you find.

For those who have purchased (or who have yet to purchase) Agile Web Development with Rails, Edition 3, I’ve begun a page which details the differences that affect what is described in the book.  Edition 3 was based on Rails 2.2.2, and this page is cumulative.  My perception is that the differences that affect applications is way less than the differences between Rails 1 and Rails 2, and frankly not much more than the differences between Rails 2.2 and Rails 2.3.

Work on Edition 4 is well underway, and now that Rails has shipped a beta, I’ll may be able to get a beta of the book out by the end of the month.  It will not only be based on Rails 3.0, but will also be focused on current best practices and new APIs.

Things I am tracking at this point: a RubyInstaller for Windows that supports a version of Ruby that Rails can run on, a version of the will_paginate gem that works on Rails 3.0 which was just made available last night and I will be testing with it today, a regression in the (yet to be released) Ruby 1.8.8 that will affect both Builder and Rails, and some inconsistencies in how I18n YAML files are treated with respect to html_safe.

February 05, 2010 12:07 PM

Ubuntu Geek

SysAdmin1138

Dealing with User 2.0

The SANS Diary had a post this morning with the same title as this post. The bulk of the article is about how user attitudes have changed over time, from the green-screen era to today where any given person has 1-2 computing devices on them at all times. The money quote for my purposes is this one:

User 2.0 has different expectations of their work environment. Social and work activities are blurred, different means of communications are used. Email is dated, IM, twitter, facebook, myspace, etc are the tools to use to communicate. There is also an expectation/desire to use own equipment. Own phone, own laptop, own applications. I can hear the cries of "over my dead body" from security person 0.1 through to 1.9 all the way over here in AU. But really, why not? when is the last time you told your plumber to only use the tools you provide? We already allow some of this to happen anyway. We hire consultants, who often bring their own tools and equipment, it generally makes them more productive. Likewise for User 2.0, if using Windows is their desire, then why force them to use a Mac? if they prefer Openoffice to Word, why should't they use it? if it makes them more productive the business will benefit.

Here in the office several of us have upgraded to User 2.0 from previous versions. Happily, our office is somewhat accommodating for this, and this is good. I may be an 80% Windows Administrator these days, but that isn't stopping me running Linux as the primary OS on my desktop. A couple of us have Macs, though they both manage non-Windows operating systems so that's to be expected ;). I have seen more than one iPod touch used to manage servers. Self-owned laptops are present in every meeting we have. See us use our own tools for increased productivity.

The SANS Diary entry closed with this challenge:

So here is you homework for the weekend. How will you deal with User 2.0? How are you going to protect your corporate data without saying "Nay" to things like facebook, IM, own equipment, own applications, own …….? How will you sort data leakage, remote access, licensing issues, malware in an environment where you maybe have no control or access over the endpoint? Do you treat everyone with their own equipment as strangers and place them of the "special" VLAN? How do you deal with the Mac users that insist their machines cannot be infected? Enjoy thinking about User 2.0, if you send in your suggestions I'll collate them and update the diary.


Being a University we've always had a culture that was supportive of the individual, that Academic Freedom thing rearing its head again. So we've had to be accommodating to this kind of user for quite some time. What's more, we put a Default-Deny firewall between us and the internet really late in the game. When I got here in 2003 I was shocked and appalled to learn that the only thing standing between my workstation and the Internet were a few router rules blocking key ports; two months later I was amazed at just how survivable that ended up being. What all this means is that end-user factors have been trumping or modifying security decisions for a very long time, so we have experience with these kinds of "2.0" users.

When it comes to end-user internet access? Anything goes. If we get a DMCA notice, we'll handle that when it arrives. What we don't do is block any sites of any kind. Want to surf hard-core porn on the job? Go ahead, we'll deal with it when we get the complaints.

Inbound is another story entirely, and we've finally got religion about that. Our externally facing firewall only allows access to specific servers on specific ports. While we may have a Class B IP block and therefore every device on our network has a 'routable' address, that does not mean you can get there from the outside.

As for Faculty/Staff computer config, there are some limits there. The simple expedient of budget pressure forces a certain homogeneity in hardware config, but software config is another matter and depends very largely on the department in question. We do not enforce central software there beyond anti-virus. End users can still use Netscape 4.71 if they really, really, really want to.

Our network controls are evolving. We've been using port-level security for some time, which eliminates the ability of students to unplug the ethernet cable connected to a lab machine and plug it into their laptop. That doesn't stop conference rooms where such multi-access is expected. And we only allow one MAC address per end-port, which eliminates the usage of hubs and switches to multiply a port (and also annoy VMWare users). We have a 'Network Access Control' client installed, but all we're doing with it so far is monitor; efforts to do something with it have hit a wall. Our WLAN requires a WWU login for use, and nodes there can't get everywhere on the wired side. Our Telecom group has worked up a LimboVLAN for exiling 'bad' devices, but it is not in use because of a disagreement over what constitutes a 'bad' device.

However, if given the choice I can guarantee certain office managers would simply love to slam the bar down on non-work related internet access. What's preventing them from doing so are professors and Academic Freedom. We could have people doing legitimate research that involves viewing hard core porn, so that has to be allowed. So the 'restrict everything' reflex is still alive and strong around here, it has just been waylaid by historic traditions of free access.

And finally, student workers. They are a second class citizen around here, there is no denying that. However, they are the very definition of 'User 2.0' and they're in our offices providing yet another counter-weight to 'restrict-everything'. Our Helpdesk has a lot of student workers, so we end up with a fair amount of that attitude in IT itself which helps even more.

Universities. We're the future, man.

by riedesg (noreply@blogger.com) at February 05, 2010 10:16 AM

Google Blog

Google-inspired designer collections

Each year, Vogue and the Council of Fashion Designers of America (CFDA) sponsor a Fashion Fund to support emerging designers. In 2009, each participating designer was asked to create a one-of-a-kind item inspired by Google in some way — whether through our logo's colors, technology or our commitment to equal access to information. Last October, we transformed 10 of the finalists’ designs into iGoogle Artists themes. While we loved seeing fashion meet iGoogle, we wanted to see these pieces in person — and wear them! Today, we’re debuting three of our favorite designs from this challenge. These three featured designers have customized their original designs for a broader audience, and we’re making them available to the public to purchase for a limited time. Check out this page to learn more about the items, the designers and how they were inspired by Google.


by A Googler (noreply@blogger.com) at February 05, 2010 08:41 AM

Linux Poison

APG - Automated Password Generator for random password generation

APG (Automated Password Generator) is the tool set for random password generation. This standalone version generates some random words of required type and prints them to standard output. Advantages:    * Built-in password quality checking system (it has support for Bloom filter for faster access)    * Two Password Generation Algorithms:            Pronounceable Password Generation Algorithm

by Nikesh Jauhari (njauhari@cybage.com) at February 05, 2010 07:27 AM

Chris Siebenmann

Emergency procedures checklists need check steps

Emergency procedures checklists need check steps

Given my previous entry, here is a thesis about emergency procedure documentation: you shouldn't just have a checklist for what to do, your checklist should include actual check steps, points where you stop to explicitly confirm that you've done something and it actually works.

Checklists are a good idea, but the common form of a checklist is just a list of steps to be carried out. Under the stress of an emergency situation, I don't think that this is good enough. First, your checklist implicitly assumes that everything works right, and second, it's too easy to be rushed, distracted by some interruption, sleep-deprived, or whatever while you're going through the checklist and lose track of where exactly you are, miss-do something, or miss the potentially subtle signs that something is not working the way that your checklist assumes.

Thus, you need spots in your checklist where you not do things but check things; you take positive steps to make sure that everything is as it should be and that the system is in the state that you and your checklist assume that it is. These checks insure that if something goes wrong, either in the environment or in you carrying out the checklist, that it gets noticed before things go horribly off the rails and explode.

In short: it's not good enough to have a checklist item that says 'throw switch 12'; you need something to confirm that you have in fact thrown switch 12 (and ideally just switch 12) and that the results of throwing switch 12 are what you expect.

You need these checks to be explicit steps in your checklist for the same reason that you have a checklist in the first place; your memory is fallible, especially under stress, and having them written down explicitly maximizes the chances that you will always do this.

(I suspect that one of the lessons that the airline industry can teach system administration is that in this sort of situation it is best to have two people involved, one reading off the checklist and the other one performing the actions and verbally confirming that they've been done. This makes it harder to fool yourself that something has been done or that of course something looks right.)

The corollary to this corollary is that checks should especially be inserted before you about to do damaging operations such as formatting a disk, putting a replacement system online under its production IP address, or force-importing a SAN filesystem on a non-default fileserver.

(Sadly, testing checks is probably even harder than testing documentation normally is; how do you manufacture failures in checklist steps to make sure that your check steps actually do anything useful?)

by cks at February 05, 2010 06:15 AM

Daniel E. Markle

DT&I Work Crane and Boom Car


This DT&I (Detroit Toledo and Ironton) work crane and boom car set by K-Line caught my eye, it's the first set of this type I've acquired in O gauge.

These road name labeled versions are an interesting staple of model railroading that were rare in real life. Actual railroad lines didn't want work cars cleaning up derailments, etc. to have their names on the side (they didn't want to be associated with train disasters) so these actually came in either plain colors or if marked were marked with the manufacturer's name. The 'work caboose' was also rare, these were usually just plain flat cars.

by syntax@ashtech.net (Daniel E. Markle) at February 05, 2010 04:48 AM

Off Planet

Man Knowledge: The Greek Philosophers

Editor’s Note: This is a guest post from Ernesto Fernandez. Ernesto is a graduate student in the Philosophy Department of Biscayne College at St. Thomas University in Miami Gardens, FL.

So there you are, deadlocked in the men’s underwear section, torn between the solid and striped cotton boxer-briefs and wondering which one Chuck Norris would buy. And then you remember: Chuck Norris doesn’t wear underwear, just two pairs of pants.

Oh, how low we’ve fallen. Once upon a time, men called on their knowledge of the great, introspective minds of history to inform their decisions, not internet humor. These great men of the past made up an essential field for the man claiming any level of education or sophistication: philosophy.

In the heyday of American education, before schools became training centers for standardized tests, subjects like philosophy were indispensable parts of school curriculum. In fact, bachelor’s degrees until the 1950s meant a philosophy based curriculum, and it wasn’t until graduate school that an aspiring professional entered into his specific subject matter.

What Defines Philosophy?

The word philosophy comes from the Greek words for “love” and “wisdom” and generally refer to the pursuit of wisdom, moral discipline and knowledge through logic. Don’t be fooled, however, as philosophy is not just a place for high-minded, abstract thinking and hypothetical irrelevancy (though there’s certainly plenty of that, too).

Philosophy is the historical mother of all disciplines, the stomping grounds for exploring ideas too new for testing and observation until a whole new field breaks away dedicated to that particular subject; biology, physics, psychology, and even chemistry all originated as philosophy before becoming fields of their own. Isaac Newton and Sigmund Freud studied philosophy before moving on to their particular fields. Adam Smith and Karl Marx studied and became tenured professors of philosophy in England before pioneering the independent field of economics as we know it today.

Philosophy is the forward offensive line of human understanding; it is the highest calling of the thinking man, because his philosophy governs his every action. In short, philosophy is not just for bearded wisemen but a gentleman’s preoccupation, and I think its high time we brushed up on some of the great thinking men whose manly voices have come down to us as the baddest and burliest in history’s Great Conversation.

The Greeks

The ancient Greeks are the cornerstone of Western philosophy. If you were born in a country in Europe, a country settled by Europeans, or a country at any point ruled by a European power, the essence of Greek philosophy has found its way into your worldview in one way or the other, and that’s a fact. Capitalist or communist, liberal or conservative, Coke or Pepsi, the people who have had the greatest influence on the way we think and how we live in the Western world took their cues at some point from a Greek. Over 9 times out of 10 this Greek will be Plato or Aristotle of Athens, the city-state which was to philosophy in ancient Greece what Sparta was to kicking ass.

Plato

Plato the Greek was born in 428-429 BC, though Plato was not his real name. In fact, Plato is Greek for “broad” or “flat,” a nom de guerre he gave himself as a wrestler in the Isthmian Games due to his unusually broad shoulders. Really. This makes him first on the list of celebrities with one-word aliases, way before the likes of Prince and Sting. Alas, history had other plans for The Broad, as his failure to qualify for the Olympic Games necessitated an immediate career change.

Plato fell in with a wandering philosopher by the name of Socrates, of whom you may have heard, who encouraged his students to challenge conventional wisdom to the point that he was finally executed in 399 BC for corrupting the youth. This, Plato would say, was a major turning point in his life, and he fled Athens to avoid a similar fate by association. He wound up in Sicily, where he joined an order of Pythagoreans (something along the line of celibate math mystics), whose fixation with numbers would inspire the cosmology Plato would become famous for.

Truth with a capital T was abstract and eternal like numbers, which is to say it is immaterial and thus does not experience degeneration, and everything in the world was an expression of this abstract Truth. Plato effectively invented the word “perfection” as it is used today. A beer, for instance, was only a poor imitation of a beer; a mere knockoff of a more perfect beer that he called an ide (the Greek root of “idea”) that existed in the heavens. This is to say that these Ideas are literally up in the sky, among the stars, sun, and moon. In turn, that “more perfect” idea of a beer was a similarly cheap imitation of the even more perfect Idea of “Deliciousness.” Plato’s universe continues this way all the way up, up to the most perfect idea of “Goodness,” which was the common Idea in all things, including humans.

Plato also explains human existence in these terms, as humans are Good beings “fallen” from “the heavens” and trapped in the lowest, most imperfect level of the Universe, which is the world he and you and I and all of us live in. Plato believed that when a human being deduces or learns something they are in fact remembering something they already know by virtue of our eternal, divine nature, which is why we are attracted to certain things in this world; we recognize the Idea of “Goodness” in it from our time in the ether.

Thus, by denying our Passions with our Courage, which is governed by our Thinking (these three Plato believed to be the three levels of human nature), we could dust off all our Divine knowledge and return to the heavens upon death, avoiding another birth in the material world.

If all of this sounds strangely familiar to you, it ought to. St. Augustine, St. Thomas Aquinas and Martin Luther are just some of the Neo-Platonists who borrowed from Plato when developing their worldview and theology. Another influential Neo-Platonist was the philosopher-psychologist Freud, who based his “Id, Ego, Superego” theory on Plato’s “Passion, Courage, Thinking” model.

What made them Neo-Platonists and not just plain old Platonists, you ask? Because they (or their teachers) all learned about Plato from Arab philosophers after the end of the Dark Ages – which, historically speaking, officially began when the early Christian Emperor Justinian closed Plato’s “Academy” in 529 A.D. Ironic, dontcha think?

Plato did have a way of overextending himself, however, which led him to apply the idea of the three separate levels of a human being to society in general. In The Republic he outlined a plan for what he believed to be a perfect society, one in which all children would be raised by the state, taught to see it as their only parent, and continuously evaluated and sorted as they grew up.

The weak and not-so-bright kids were allowed to live by their Passion. This group, which Plato called the Mob, were intended for unwitting servitude and strict control and assigned to be farmers and laborers. Distracted with jewelry and other frivolous things, they worked their lives away for the good of the whole society.

The strong and bright kids got to be warriors and live by their Courage. Without worldly possessions to distract them, these warriors would be able to focus on their duty of keeping order in society (they would be the only ones with swords or, say, MP40s). These Warrior-Guardians would be a completely male force. Plato did not have a high opinion of women.

The sharpest tools in the armory, meanwhile, would be promoted to the highest caste after demonstrating their superior intellectual ability and go on to study… you guessed it…

Philosophy! The Philosophers would live and love together, sharing all their belongings (and themselves) to keep free of corruption, and would be wise governors of a society ruled by pure thoughts.

Finally, from these specially selected philosopher-governors, a single Philosopher King would be chosen to act as the supreme authority over Plato’s fascist, homoerotic dystopia, in which the entire, perfect society was oriented to satisfy the will of the rulers in the way the entire soul should be oriented to satisfy the will of the rational mind.

This aspiration was more or less the end of Plato’s professional reputation. After failing in two separate stints as court philosopher to implement his Republic in the Kingdom of Syracuse, and ending up in prison both times, Plato retired from public life to the Academy, where he died in 347 BC.

Aristotle

When Plato died, he left his nephew Speusippus as his successor to run the Academy and secure the proper education of young minds in his philosophy. He was apparently quite right in doing so; his brightest and most famous student, Aristotle, who later became the private tutor of Alexander the Great, had no intention of continuing Plato’s legacy and ultimately undermined him with or without the Academy.

Aristotle was a scientist in the truest sense of his day and when good, scientific information was unavailable, he insisted on strict logic. Relativism, or the belief that the Truth is whatever most people believe it to be, had created a huge market for professional bullshit artists in Athens who instructed their students on how to effectively convince crowds with sneaky and faulty arguments, a practice called Sophistry (now an insult of the first degree).

So unforgiving was Aristotle’s nose for BS that he invented the first formal system of logic in the West, still in use to this day, which allows philosophical arguments to be written out as semi-mathematical formulas that can be easily examined, evaluated, then accepted or dismissed, and boy did he dismiss.

Aristotle also wrote a huge – and consequently unknown – number of books of scientific observations in biology, chemistry, and medicine in addition to his impressive amount of philosophical writing.

Aristotle’s fascination with the sciences, in contrast to Plato’s obsession with mathematics, logically produced a very different worldview, one which directly contradicted Plato’s. Aristotle rejected the Forms (the Ideas in the sky) and thereby the belief that “Perfection” exists in some heavenly realm above, separate from the material world we live in. In Aristotle’s universe, a thing was perfect when it did what that thing does naturally. Moment to moment, a thing lives out a natural life which is innately part of that thing’s DNA, so to speak. The better it lives out that nature, the more perfect it is.

Thus, a frog is not an imperfect imitation of some Superfrog in the sky; so long as it sits on its lily pad, swims in the pond, and does Budweiser commercials, it is essentially perfect.

Aristotle’s perfect man, consequently, does not deny his humanity the way Plato recommended; he perfects it.

In order for a man to perfect his humanity, he must be the best man he can be. To be his manly best, a man not only needed to cultivate proper intentions and an appropriate disposition, but put those intentions into real virtuous action. Aristotle called his hands-on form of constructive self-perfection eudaimonia, a word defined and redefined by virtually every Greek thinker, coming from the Greek words for “good” or “well” (eu) and “spirit” or “soul” (daimon).

Often translated as “happiness,” Aristotle’s eudaimonia is concerned most of all with the exercise of good actions. What makes actions good, you ask? Well, keeping in mind the relationship between Goodness and Perfection set forth by Aristotle’s teacher, Mr. Broad, it is clear that for a thing to be good it must strive “up the ladder” of perfection.

The frog on the lily pad again illustrates the point as it sits sagely, wades in the water and eats mosquitoes. What it is doing is what a frog naturally does, so it is perfect and its actions are good. It is that simple: a man who strives to achieve his potential as a man is doing good and, so long as he keeps up the fight, he is perfect.

With this understanding, we can see that eudaimonia is best understood simply as “natural potential” while eudaimon is best understood as living up to that potential. Aristotle believes that a man who is eudaimon  is virtuous. So, to Aristotle, man’s natural function is to exercise virtue. So that means that, by Aristotle’s understanding, a man who strives to live up to his potential is excelling in a man’s functions.

Aristotle believed that all knowledge was accumulated memories, collected through a long series of observations and connected by the mind into a single experience, like many pictures forming a single movie. Each picture leads into the next, following a progression we make sense of in our minds, until we reach a logical conclusion. Having seen certain actions lead to certain consequences before, an experienced man can see a particular picture and conclude what will happen next.  A man who can explain why one thing precedes the next thing and can invent an appropriate conclusion, on the other hand, is wise according to Aristotle.

For example, an apprentice who knows that stacking blocks that were given to him in a specific order will produce an arch is skilled and has experience. The master mason who knows that cutting blocks of that type stacked in that order will always produce an arch and understands how the whole device works is virtuous, because he is artistic and he possesses wisdom.

The pursuit of knowledge being a desirable and justified end in itself to Aristotle and the ancient Athenians in general, the highest calling of men was therefore to amass wisdom, becoming greater and greater artists in their own right through their ability to understand the universal application of knowledge (the “Why” and “How” of things) over the simple, practical function of actions (the inglorious “What”).

In another in-your-face contradiction of Plato, Aristotle insisted this knowledge had to be learned through firsthand experience – through observation with the senses and physical participation in the naturally perfect and good world – and not by denying the physical world. Where Plato would say that one could uncover their innate knowledge of how to play baseball by carefully reading a well-written book on the subject, Aristotle would reject the idea that anyone was born knowing how to play baseball and that there is any other way to learn other than to get out on the diamond, play the game, and create the new knowledge in your mind.

Why all this preoccupation with the kinesthetic nature of learning and knowledge? Because where Plato draws sharp lines between the physical man and the rational, spiritual man, Aristotle sees no such distinction. Ever the scientist, Aristotle saw the obvious leap of faith in Plato’s theories, in which a duality – or inherent double-nature – is accepted on Plato’s word alone. Aristotle asserts that the physical and the rational are not two parts of men but two dimensions of men. Thus, the exercise in good actions is as essential to the virtuous life as exercise in strength is to the physically healthy life.

Recommended Reading:

Great Dialogues of Plato by Plato, W. H. D. Rouse (Translator)

A valuable anthology of Plato’s works in a convenient and relatively (and I stress relatively) lighter package than more complete texts. Sorry, but I just can’t endorse any “Intro to” book over the man himself.

The Republic by Plato

A hefty guide to philosophical governance, ideological totalitarianism or drop on the head of home invaders from your second-floor balcony. Large print recommended.

Aristotle for Everybody by Mortimer J. Adler

A somewhat academic book providing as much Aristotle as the average person will need in a lifetime (and then some) in a surprisingly easy to read package by the author of the not-so-light “How to Read a Book.”

Looking at Philosophy by Donald Palmer

An extremely readable, accessible, and – dare I say – enjoyable textbook highly recommended to novice as well as intermediate students of philosophy. Great reference book with masterfully hand-drawn illustrations.

DownloadThe Art of Manliness Free Man Cookbook
DownloadThe Art of Manliness Guide to Being a Gentleman

Hawaiiabera Discount Code: AOM


Check Out These Related Posts:

by Guest at February 05, 2010 04:27 AM

February 04, 2010

Adams Tech Talk

Linux LUKS Crypt HOWTO


Linux kernels now support encrypted filesystems. Setting one up should take 5 minutes, or 3 hours if you’re like me and can’t read.

Firstly, install the right tools: apt-get install cryptsetup

Make a new partition, and initialize it with: cryptsetup luksFormat /dev/sda3 mycrypto

Where /dev/sda3 is your newly created partition and ‘mycrypto’ is your name for the container.

You will be prompted to type YES in uppercase to confirm your understanding that your partition is about to be wiped. If, like me, you type ‘yes’ in lowercase, it will fail with “Command Failed.”. You’ll then spend hours checking for loaded kernel modules, log files, and trawling google for more information. The answer is to type ‘YES’ in uppercase as you’re told :)

Enter a passphrase, and you’re ready to go.

Next, ‘open’ the container. cryptsetup luksOpen /dev/sdb3 enter the passphrase, and you should at this point end up with a /dev/mapper/mycrypto

Format with your desired partition mkfs.ext3 /dev/mapper/mycrypto

Then, you can mount /dev/mapper/mycrypto as you would any other block device: mount /dev/mapper/mycrypto /mnt/my_mount_point

To close the container:
umount /dev/mapper/mycrypto
cryptsetup luksClose mycrypto

Easy :)

by Adam Palmer at February 04, 2010 11:07 PM

AUnixSysadminsJourney

Assign Different Values to Different Nodes via One Action in Views Bulk Operations

The Views Bulk Operations module (a.k.a. VBO), is a godsend for busy Drupal site administrators. Don't just take my word for it - Lullabot wrote a chapter about it in O'Reilly's Using Drupal, it's included in the Open Atrium Drupal distribution, and it's even used on Drupal.org! Out of the box, VBO does a lot to streamline the things you do everyday, so that you spend less time doing them. A perfect example is bulk content moderation - with a few clicks of the mouse, you can mark a huge amount of comments as spam. You can even enable batch processing with a single click of a mouse so that you can literally do thousands of these without timing out.

VBO was attractive enough that we decided to offload the bulk/batch operations of Node Gallery to VBO. Integration for the most part was surprisingly easy - VBO "speaks" in Drupal Actions, so by writing actions, we were writing integration with VBO.

There's one undocumented case where VBO can be used that was critical for us. Most VBO actions you will find perform one action to a set of nodes, one at a time. Often times, that one action is to set a value of some sort on said nodes. In the case of Node Gallery, we wanted to be able to assign different weight values (used for sorting) to a bunch of nodes. The key here is that we aren't assigning a value of '2' to all selected node's weight, we want to assign a weight of 2 to node #1, 3 to node #2, 8 to node #3, and so on. While not straightforward, it's definitely achievable.

read more

by Justin Ellison at February 04, 2010 08:24 PM

TaoSecurity

Answering APT Misconceptions

There's finally some good reporting on advanced persistent threat appearing in various news sources. A new Christian Science Monitor story, one by Federal Computer Week, and one by Wired are making progress in raising awareness. Unfortunately, there's plenty of Tweeting and blogging by people who refuse to understand what is happening or are not capable of understanding what is happening. From now on, rather than repeat myself trying to answer these misconceptions, I decided to consolidate them here.

  1. Myth 1. APT is a "new term," invented by Mandiant. Reality: Mandiant did not invent the term. The Air Force did in 2006. More info: What Is APT and What Does It Want?

  2. Myth 2. APT is "not new." Reality: APT is only new to people who have not been involved with the problem. If you look solely at offender and motive, and exclude defender, means, and opportunity, you're likely to think APT is not new; you'd be wrong. Just performing an Attribution Using 20 Characteristics exercise helps demonstrate that APT is not like organized crime or other structured attackers. More info: Two-Dimensional Thinking and APT

  3. Myth 3. APT is "marketing hype." Some companies with little to no experience with APT are clearly jumping on the counter-APT bandwagon, even registering domain names related to APT. That is sad but not unexpected. However, companies like Mandiant are not suddenly releasing reports because of Google v China. Mandiant offered a public Webcast (which I attended) in March 2009 called State of the Hack - Addressing the Advanced Persistent Threat. They and certain other companies have been public about APT for a while, but a lot of people were ignoring them. More info: You Down With APT?

  4. Myth 4. APT is a "class of attacker." Reality: Most of the counter-APT community uses APT to refer to specific threats or "threat agents" if you prefer that term. Those threats are associated with a certain country. In some cases, certain counter-APT community members prefer to include other countries with similar capabilities. If required to differentiate during discussions, I prefer to prefix APT with the named country.

  5. Myth 5. APT is "FUD." Reality: Fear can be healthy if it helps reallocate resources away from wasteful and ineffective compliance regimes like FISMA. No one I know who fights APT sleeps very well. Regarding uncertainty and doubt, what more do you need to know? Read my post Is APT After You? to get a better sense if you should worry. It's better to prepare your defenses now than to start once a Federal agent comes knocking. More info: DNI Blair Leads with APT as a "Wake-Up Call"


I may add more myths as they appear, but for now those five seem sufficient.

By the way, I appreciate the private communication and public comments from people genuinely interested in learning about this issue. It helps focus my attention away from the critics who refuse to align with reality. It's also clear that many of you understand why I use certain phrases or address this subject in the manner that I do. I am glad those of us with similar backgrounds can at least share in that sense of solidarity. Thank you.

by Richard Bejtlich (noreply@blogger.com) at February 04, 2010 07:55 PM

Ben Rockwood

Jonathan Says Goodbye via Twitter Haiku

The message was simple:

Today's my last day at Sun. I'll miss it. Seems only fitting to end on a #haiku. Financial crisis/Stalled too many customers/CEO no more

Please post your thoughts on Jonathan's leaving. Its a mixed emotion... on one hand he set some great goals and put a fire under things. A lot of us believed in him. And yet, he failed to execute and ultimately was responsible for Sun's demise. Could someone else have done a better job and still kept the culture alive? I don't know honestly.

I'll continue to stay neutral on the subject and reserve judgment until the behind-the-scenes stories trickle out over the next months and years. Jonathan screwed up, yes, but I think that Jonathan also got screwed himself, more than we realize. Time will tell.

In other news, Oracle is finally doing what has needed to be done for years: Oracle to Revamp Sun Supply Chain. One of the biggest complaints by customers for years has been inability to get timely delivery of systems. Its good to see signs of that era ending.

Also, Project Darkstar & Kenai are being axed. Project Kenai, a SourceForge like project hosting service provided free by Sun, will close its doors on April 2nd 2010. You have untill then to get stuff out. One of the most important projects there, Immutable Service Containers (ISC) has moved to OpenSolaris.org.

by benr at February 04, 2010 06:49 PM

the_angry_angel

Microsoft Licensing and Virtualisation

Licensing is a pain in my arse. There are whole companies full of people who can tell you that you're doing it wrong. Personally I cannot stand licensing, and the only thing that I find more annoying (in this field) than the proliferation of Open Source and Free Software licenses (and figuring out what I'm allowed and not allowed to do and what is an "arms length" exactly - but thats another rant for another time), is the software licensing by Microsoft and other vendors who shall remain nameless for this article.

To try and make things easier at work two and a half years ago I put together a very small document/cheatsheet describing the licensing terms for various Microsoft products and virtualisation. Yesterday Microsoft released an updated document for Windows Server 2008 R2, and interestingly not much has changed for Window Server, with the exception of a few new products. The table below should help out a bit if you're confused 1.

Instances
Server ProductLicense TypePhysical 2Virtual 3
Windows Server Foundation (2008 only)OEM10
Windows Server StandardOEM, Retail, VL, SPLA11
Windows Server EnterpriseOEM, Retail, VL, SPLA14
Windows Server DatacenterOEM, VL1Unlimited
Windows Server WebOEM, Retail, VL, SPLA10
Windows Server HPCOEM, Retail, VL, SPLA11

I decided to check the licensing for other products, just incase I'd missed any changes. It doesn't look like it, so here the run down (as I understand it).

As a general rule, for anything per processor licensed, if you're running it in a virtual environment it will simply count the number of virtual processors you assign it.

It gets a bit complicated with SQL 2005 and newer. To quote Microsoft:

When licensed per Server or CAL Workgroup and Standard editions allow you to run any number of instances of the server software in one physical or virtual operating system environment on the licensed server at a time. Previously, only the Enterprise edition of the Server license allowed multi-instancing. When licensed per Processor Workgroup, Web, and Standard editions for each server you have assigned the required number of per processor licenses, you may run, at any one time, any number of instances of the server software in physical and virtual operating system environments on the licensed server. However, the total number of physical and virtual processors used by those operating system environments cannot exceed the number of software licenses assigned to that server. For Enterprise if all physical processors in a machine have been licensed, then you may run unlimited instances of SQL server 2008 in one physical and an unlimited number of virtual operating environments on that same machine.

As far as I'm aware anything else licensed per server doesn't currently have any special rules regarding virtualisation; so this includes Exchange, Sharepoint, and so on.

  1. It should be noted that I've only gone so far back as Windows Server 2003 for this table. I suspect that there are no particular dos or don'ts for anything older and you should probably just treat any virtualised instances as you would physical machines. If you know any different I'd love to hear it.
  2. You can, of course, use the licence in a purely virtual environment.
  3. On the same hardware as the physical licence.

by the_angry_angel at February 04, 2010 04:26 PM

Ubuntu Geek

mikas blog

The mysterious 8MB block device on Linux

If you ever notice a device like that on your Linux system:

# fdisk -l
Disk /dev/sda: 8 MB, 8388608 bytes
8 heads, 32 sectors/track, 64 cylinders
Units = cylinders of 256 * 512 = 131072 bytes

Disk /dev/sda doesn't contain a valid partition table

… then the scsi_debug kernel driver is present. To get rid of the device either unload the driver or (if e.g. statically compiled into the kernel) use sysfs, like:

# echo -1 > /sys/bus/pseudo/drivers/scsi_debug/add_host

Further details available at http://sg.danny.cz/sg/sdebug26.html.

by mika at February 04, 2010 12:57 PM

TaoSecurity

DFRWS, VizSec, and RAID 2010 Calls for Papers

I'm involved in one degree or another with three somewhat academically-oriented conferences this year. I wanted to post notices of the call for papers for each event.

First is DFRWS 2010 on 2-4 Aug in Portland, Oregon. I am on the Technical Program Committee but will not attend due to a family conflict. The CFP ends 28 Feb.

Next is VizSec 2010 on 14 Sep in Ottawa, Ontario. I am on the Program Committee and plan to attend. The CFP for full papers ends 30 Apr.

Last but not least is RAID 2010 on 15-17 Sep in Ottawa, Ontario. I like the fact this conference is held in conjunction with VizSec, so I will probably attend. The CFP ends 4 Apr.

by Richard Bejtlich (noreply@blogger.com) at February 04, 2010 10:53 AM

Google and NSA Fulfilling 2008 Predictions

In December 2007 I wrote Predictions for 2008. They included 2) Expect greater military involvement in defending private sector networks; 3) Expect increased awareness of external threats and less emphasis on insider threats; and 4) Expect greater attention paid to incident response and network forensics, and less on prevention.

All three of those predictions are being fulfilled by the Google v China incident as demonstrated by this Washington Post story by Ellen Nakashima titled Google to enlist NSA to help it ward off cyberattacks:

The world's largest Internet search company and the world's most powerful electronic surveillance organization are teaming up in the name of cybersecurity.

Under an agreement that is still being finalized, the National Security Agency would help Google analyze a major corporate espionage attack that the firm said originated in China and targeted its computer networks, according to cybersecurity experts familiar with the matter. The objective is to better defend Google -- and its users -- from future attack.

Google and the NSA declined to comment on the partnership. But sources with knowledge of the arrangement, speaking on the condition of anonymity, said the alliance is being designed to allow the two organizations to share critical information without violating Google's policies or laws that protect the privacy of Americans' online communications.


I expect to see a lot of protest from people who have knee-jerk reactions to anything associated with NSA. However, the article notes that NSA is trying to help defend Google against advanced persistent threat, which benefits Google's users. As I wrote in Notes from Talk by Michael Hayden:

The agency with the most capability to defend the nation suffers because it is both secret and powerful, two characteristics it needs to be effective. The public and policymakers (rightfully) distrust secret and powerful organizations.

If NSA can change this perception it will help them better defend American national interests.

by Richard Bejtlich (noreply@blogger.com) at February 04, 2010 10:15 AM

Off Planet

5 Hearty Winter Breakfasts to Fill Your Belly

Image from Captain Geoffrey

“Eat breakfast like a king, lunch like a prince, and dinner like a pauper.”-Adelle Davis

Breakfast has always been the man’s meal. It’s usually men who are in charge of whipping up glorious fire cooked breakfasts on camping trips, and dad who’s flipping pancakes on Saturday morning. I’m not sure why this is. Maybe the hard working cowboys and frontiersmen of yesteryear understood the value of a hearty breakfast in the morning and always gave that meal extra attention. Perhaps back in the day when women were expected to make dinner, cooking breakfast on the weekend was a way for the man to take a turn in the kitchen. Maybe it’s because men have always had an affinity for greasy spoon establishments and have a deep appreciation for the diner breakfast.

Or maybe it’s just because we love sausage and bacon.

Most likely it has to do with the nature of breakfast food. It’s simple and straightforward-never fancy or fussy. There are no five star gourmet breakfast restaurants, no wine pairings with your pancakes, and no foie gras omelettes. Breakfast is food without affectation.

At any rate, men love breakfast. We love to make it and we love to eat it.

And there’s no better time for a good breakfast than the winter months. It’s cold, dark, and dreary, and you want something in the morning that will stick to your ribs and fuel your day. Food so hearty and tasty that the anticipation of it actually gets you out of bed in the morning.

Punxsutawney Phil has predicted 6 more weeks of winter. So here are 5 hearty breakfasts to power you through to spring.

Cajun Breakfast Casserole

Breakfast casseroles are awesome. Their possibilities are limited only by your imagination. They can accommodate any combination of eggs, vegetables, meat, and bread; you can thus concoct one from anything you have hanging out in the fridge. But if you want a specific recipe, here’s a good one.

Prep: 20 minutes, Bake: 40 minutes

Serves 6

Ingredients:

  • 12 to 16 ounces smoked andouille sausage, thinly sliced
  • 1/2 cup chopped onion
  • 1/2 cup chopped red pepper
  • 1/2 cup chopped green bell pepper
  • 1 finely diced jalapeno pepper
  • 1 medium tomato, diced
  • 6 large eggs
  • 1 1/2 cups milk
  • 1 teaspoon Cajun seasoning
  • 1/4 teaspoon black pepper
  • dash of hot sauce
  • 4 slices bread torn in 1-inch pieces
  • 2 cups shredded cheddar cheese
  • salt and pepper

Preparation:

Heat oven to 400°. Butter a 2-quart baking dish.

1. In a large skillet, cook sliced sausage with the onion and bell peppers until vegetables are translucent. As they near completion, throw in the tomatoes and let them cook a minute or two.

2. Whisk eggs with milk in a bowl with the Cajun seasoning, pepper, and any other spices you want to use. Add a few dashes of hot sauce to taste.

3. Arrange the torn bread over the bottom of the buttered baking dish. Sprinkle with the sausage and vegetables. Top with cheddar cheese and then pour the egg mixture evenly over the top.

4. Bake for 40 minutes, or until puffy and lightly browned.

Apple-Pecan Baked Oatmeal

If you love oatmeal, but have never tried it baked, then you’re really missing out on a whole lot of deliciousness. This recipe is like a hearty, good for you version of apple cobbler. It makes a ton too, so if you’re a single guy or childless couple, you’ll have tasty leftovers for several mornings after you make it.

Prep: 20 min, Bake: 45 minutes

Serves 8-10

Ingredients

  • 3/4  cup  chopped pecans
  • 5  Granny Smith apples
  • 1  (18-oz.) container regular oats
  • 3  large eggs, beaten
  • 1  cup  firmly packed brown sugar
  • 1  cup  unsweetened applesauce
  • 3 teaspoons cinnamon
  • 3 teaspoons pumpkin pie spice
  • 4  teaspoons  baking powder
  • 1  teaspoon  salt
  • 1 1/4  cups  water
  • 1  cup  milk
  • 1/4  cup  melted butter

Preparation

1. Toast the pecans in a pan over medium heat until they are fragrant.

2. Peel and chop apples into 1 inch chunks. Spread the apples on the bottom of a lightly greased 13- x 9-inch baking dish (make sure the pan is pretty deep-the oats need a lot of room). Sprinkle toasted pecans over apples.

3. Combine oats and next 10 ingredients in a large bowl, stirring until well blended. Pour oat mixture evenly over apples and pecans.

4. Bake covered at 400° for 30 minutes; uncover and bake 15 more minutes or until golden brown and set.

If you’re feeling a bit wild in the morning, it’s extra good when topped with whipped cream.

Green Chili Breakfast Burrito Casserole

Breakfast burritos make a great morning meal. Fry up some eggs, sausage, onions and so on and wrap it in a tortilla. This casserole offers a twist on this standby, turning it into a green chili wet burrito layered lasagna-like thing. Trust me-it’s awesome.

Prep: 20 min, Bake 25 min

Serves 4-5

Ingredients

  • 1/2 pound sausage
  • 4 eggs scrambled
  • 3 medium potatoes, diced
  • 1/2 onion, diced
  • 1/2 green pepper, diced
  • 1 can of green chili sauce
  • 2 cups of Mexican cheese
  • Flour tortillas

Preparation

1. Fry up the sausage until it’s browned. Set aside.

2. Fry up the potatoes. When they’re almost done, add the peppers and onions, and fry everything until done. Season with whatever spices strike your fancy. I like to throw in paprika, salt, pepper, garlic powder, and fajita seasoning.

3. Spray a baking dish with cooking spray. Cut the tortillas in half and create a layer on the bottom of the pan. You can tear them in various pieces to cover the bare spots, but don’t do too much overlap. Sprinkle in a layer of veggies, sausage, and eggs. Ladle on some of the green chili sauce. Sprinkle on some cheese. The depth and width of your pan and your desire will dictate how many layers you can make. But repeat the process at least once more, finishing with tortillas, sauce, and cheese on top.

4. Bake uncovered at 350 degrees for 25 minutes.

Nutty Buckwheat Buttermilk Pancakes

No matter what you call them-flapjacks, hotcakes, or pancakes, they are the quintessential breakfast food. Pancakes are a blank canvas that you can transform into a hundred different varieties of fried flour goodness. Chocolate chip pancakes, blueberry pancakes, banana nut pancakes-the sky’s the limit. This is one of my favorite pancake recipes. It produces pancakes that are hearty, nutty, and filling. And the buckwheat makes you feel like you’re eating something healthy.

Prep: 5 minutes Cook: 10 minutes

Makes 8 large, filling pancakes

Ingredients

  • 3/4 cup buckwheat flour
  • 3/4 cup unbleached white all-purpose flour
  • 3 tablespoons sugar
  • 1.5 teaspoons baking powder
  • 1/2 teaspoon baking soda
  • 1/2 teaspoon salt
  • 1/2 cup pecans or walnuts, chopped
  • 1.5 cups buttermilk
  • 3 tablespoons unsalted butter, melted
  • 2 eggs

Directions

1. Whisk together the dry ingredients in one bowl and the wet ingredients in another.

2. Mix the wet and dry ingredient together. It’s okay for the batter to be a little lumpy. Overmixing the batter will result in tough panackes.

3. Grease and heat up a skillet over medium heat. Drop 5 inch circles of pancake batter into the pan.

4. Wait for bubbles to emerge on the top of the pancakes and then flip them over.

5. Top with butter and real Vermont maple syrup. The use of Aunt Jemima and her syrup impostor kin is punishable by 30 lashes.

Biscuits and Gravy

Looking for some good Southern comfort food? Look no further than biscuits and gravy. Nothing else can warm your belly like hearty gravy filled with savory sausage.

My tip: As much as you might like sausage, don’t go overboard on it. As you can see, my sausage gravy turned out more sausage than gravy. But I love sausage, so I really didn’t care.

I’m not yet confident enough in my culinary skills to make my own biscuits and thus used the refrigerator roll variety. But if you’d like to make your own biscuits, more power to you brotha.

Sausage Gravy

Ingredients

  • 1-pound package pork sausage
  • Flour
  • About 1 quart of 2-percent milk
  • Salt and pepper

Directions
1. In a large skillet, brown sausage over medium heat.

2. Add flour — enough to coat the sausage. Stir until it absorbs the grease from the sausage.

3. Add milk (1 quart or more, as needed), salt and pepper. Stir until thickened. If it’s too thick, add more milk.

4. Pour over your biscuits. Enjoy.

DownloadThe Art of Manliness Free Man Cookbook
DownloadThe Art of Manliness Guide to Being a Gentleman

Hawaiiabera Discount Code: AOM


Check Out These Related Posts:

by Brett & Kate McKay at February 04, 2010 05:31 AM

Linux Poison

How to Import / Export (Backup / Restore) MySQL Database

It is important to back up your databases so that you can recover your data and be up and running again in case problems occur. MySQL offers a variety of backup strategies from which you can choose the methods that best suit the requirements for your installation. Export / Backup MySQL database: The mysqldump client can be used to dump a database or a collection of databases for backup or for

by Nikesh Jauhari (njauhari@cybage.com) at February 04, 2010 05:27 AM

Off Planet

Outdated documentation is especially risky for sysadmins

Outdated documentation is especially risky for sysadmins

The obvious traditional risk of outdated documentation in all its forms is that you rely on it and go wrong somehow; you trust the comments in the source code and write your new code accordingly, and your changes don't work. I think that this risk is especially acute for sysadmins, for two strongly related reasons.

First, much of our documentation tends to be about procedures, not simple information. Following what is actually a wrong or incomplete procedure is a great way to create spectacular failures on the spot. Worse, sysadmins inevitably wind up dealing directly with live systems and live data.

(Yes, you can test procedures just as you test the code that you write, but at some point you have to use them on your live system and this is always somewhat different from the test environment, unless you have a spectacularly complete test environment.)

Second, some of the least used documentation (and thus our most risky ones) is our emergency procedures. When we need to use them, we're in one of the most tense situations possible, under a great deal of pressure to get things fixed now and thus least able to go slowly and carefully and stop if something, anything, seems off. This is the exact sort of situation where incorrect procedure documentation can do the most damage, because people don't stop before they compound a small problem into a huge one.

(Imagine, for example, an off by one error in documentation about how to map disk bay slots to device names. Now add a 'get things back up right away' crisis where you need to replace a disk.)

by cks at February 04, 2010 04:21 AM

Chris Siebenmann

Outdated documentation is especially risky for sysadmins

Outdated documentation is especially risky for sysadmins

The obvious traditional risk of outdated documentation in all its forms is that you rely on it and go wrong somehow; you trust the comments in the source code and write your new code accordingly, and your changes don't work. I think that this risk is especially acute for sysadmins, for two strongly related reasons.

First, much of our documentation tends to be about procedures, not simple information. Following what is actually a wrong or incomplete procedure is a great way to create spectacular failures on the spot. Worse, sysadmins inevitably wind up dealing directly with live systems and live data.

(Yes, you can test procedures just as you test the code that you write, but at some point you have to use them on your live system and this is always somewhat different from the test environment, unless you have a spectacularly complete test environment.)

Second, some of the least used documentation (and thus our most risky ones) is our emergency procedures. When we need to use them, we're in one of the most tense situations possible, under a great deal of pressure to get things fixed now and thus least able to go slowly and carefully and stop if something, anything, seems off. This is the exact sort of situation where incorrect procedure documentation can do the most damage, because people don't stop before they compound a small problem into a huge one.

(Imagine, for example, an off by one error in documentation about how to map disk bay slots to device names. Now add a 'get things back up right away' crisis where you need to replace a disk.)

by cks at February 04, 2010 04:21 AM

Ubuntu Geek

February 03, 2010

DanT's Grid Blog

Self Control

Good day, and welcome to week four of my continuing attempt to cover all the features added in the latest release (6.2u5) of Sun Grid Engine. This week we'll talk about array task throttling.

Sun Grid Engine supports four classes of jobs. Interactive jobs are the equivalent of doing an rsh/rlogin/ssh to a node in the cluster, except that the connection is managed by Sun Grid Engine. Batch jobs are your traditional "go run this somewhere" type of job. They represent a single instance of an executable. Parallel jobs consist of multiple processes working in collaboration. All of the processes need to be scheduled and running at the same time in order for the job to run. Parametric or array jobs are like what you see in Apache Hadoop, where multiple copies of the same executable are run across multiple nodes against different parts of the data set. The important characteristic that distinguishes array jobs from parallel jobs is that the tasks of an array job are completely independent from each other and hence do not need to all be running together.

The way that Sun Grid Engine processes array jobs is particularly efficient. In fact, a common trick to improve cluster throughput is to bundle many batch jobs together to be submitted as a single array job. Because array jobs are so efficient, users use lots of them, sometimes with huge task counts. There is no explicit limit on the number of tasks that an array job can contain. Hundreds of thousands of tasks in a single array job are not uncommon.

There is a problem, however. From the Sun Grid Engine scheduler's perspective, all of the tasks of an array job are equal. That means that if the highest priority job waiting to execute is an array job, then all of that job's tasks are higher priority than any other job (or task) waiting to run. If that job has a million tasks, then the cluster is going to have to process all million of those tasks before anything else will be executed. Now, the policies do come into play here, and if a higher priority job is submitted or if the array job loses priority through some policy (like the fair share policy), then it and its remaining tasks will fall back in the execution order. Nonetheless, this approach makes it possible for a user to unintentionally execute a denial of service attach on the cluster.

For quite some time there has been an option that an administrator can configure to set a limit on the maximum number of tasks that can be simultaneously executed from a single array job (max_aj_instances in sge_conf(5)). That solves the problem, but only in a very general and somewhat suboptimal way. As with any such global setting, the administrator has to make a trade-off between having a limit that works well for the majority and having a limit that doesn't unduly restrict certain users. (The default is 2000 tasks per array job.) Well, it turns out that given the opportunity, most users will willing set such a limit themselves, both to avoid being bonked on the head by the administrator for abusing the cluster, and for reasons of self interest, such as by allowing multiple of their array jobs to share cluster time rather than being processed sequentially. So, with 6.2u5, we've given users exactly that ability.

Let's look at an example:

% qsub -t 1-100000 myjob.sh

will submit an array job that will run the myjob.sh script one hundred thousand times. Each time it runs, an environment variable ($SGE_TASK_ID) will be set to tell that instance which task number it is. The myjob.sh script must be able to translate that task ID into a pointer to its portion of the data set. In a cluster with default settings, up to 2000 of the tasks of this job will be allowed to be running at a time. If the cluster only has 2000 slots, that could be a bad thing.

% qsub -t 1-100000 -tc 20 myjob.sh

submits the same job, except that it places a limit of 20 on the number of tasks allowed to be running simultaneously. In our fictitious 2000-slot cluster, that's a quite neighborly thing to do. If you try to set the limit above the global limit set by the administrator, the global limit prevails.

While this feature is pretty simple, it can mean a large difference in job throughput for some clusters. I know one customer in particular that went way out of their way to implement this feature themselves using clever configuration tricks. The massive headache of hacking together a solution was worth it to them to be able to set per-job task limits.

by templedf at February 03, 2010 11:13 PM

Managing Product Development

PragPub Out With an Article From Me

I wrote a little article about Barriers to Agility in the most recent version of PragPub, the online magazine from the Pragmatic Bookshelf. There’s a bunch of other good articles in there, too. Andy Lester has a great article about speaking as a way to practice interviewing, a bunch of comments/thoughts/rants about the iPad, and much more. Take a look!

Post to Twitter Tweet This Post

by johanna at February 03, 2010 10:43 PM

Off Planet

The Final Release of Apache HTTP Server 1.3

Kyle Hamilton writes "The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the release of version 1.3.42 of the Apache HTTP Server ('Apache'). This release is intended as the final release of version 1.3 of the Apache HTTP Server, which has reached end of life status There will be no more full releases of Apache HTTP Server 1.3. However, critical security updates may be made available."

Read more of this story at Slashdot.

by timothy at February 03, 2010 09:30 PM

Chris Siebenmann

Link: Pollution in 1.0.0.0/8

Link: Pollution in 1.0.0.0/8

IANA has recently allocated 1.0.0.0/8 to APNIC, which has caused a certain amount of concern that it is 'polluted' by people already using it for various reasons. Pollution in 1/8 is a report from RIPE Labs on what happened when they announced routing for some bits of it as part of their debogonising work.

This is clearly going to be what they call 'interesting'.

(via Hacker News.)

by cks at February 03, 2010 05:04 PM

LOPSA blogs

Why we still need old-fashioned backups: A cautionary tale

“Backups are becoming less and less necessary these days”, I'm told. High availability, cheap disk mirroring and snapshots, cloud storage, data syncing between services—all these factors make old-fashioned backups—the offline, offsite, multi-tier kind, probably to tape, an expensive and cumbersome luxury that is neither affordable nor needed today.

I just got bitten, hard, by the results of that sort of thinking. I think a cautionary tale is in order to remind you of why, exactly, mirroring technologies (of which syncing, cloud storage, etc.

by trey at February 03, 2010 02:45 PM

AUnixSysadminsJourney

HipHop PHP and Drupal

So, Facebook has released HipHop PHP - a PHP-to-C++ converter. While the name is stupid, the idea is not. 100% of their developers know PHP, I would guess that less than 5% of them are proficient at C++. So, HipHop takes their PHP code, and converts it to compiled C++ -- in turn, they get a huge boost in performance and get to keep their existing developers. HipHop is also it's own webserver too - fun!

My first thought was: I wonder what this could mean for Drupal? Well, David Struass, a maintainer of Pressflow (a set of patches for Drupal performance and scalability) put up a blog post about what it would take for Pressflow and Drupal to become HipHop-friendly. Exciting times!

read more

by Justin Ellison at February 03, 2010 02:45 PM

SysAdmin1138

Free information, followup

As for the previous post, my information sharing has in large part been facilitated by my place of work. I work for a publicly funded institution of higher learning. Because of this, I have two biiiig things working in my favor:
  1. Academic freedom. This has been a tradition for longer than 'information wants to be free' has been a catch-phrase. While I'm on the business side rather than the academic side, some of that liberalism splashes over. Which means I can talk about what I do every day.
  2. I work for the state. In theory everything I do in any given day can be published by way of a Freedom of Information Act request, or as they're called here in Washington State a Public Records Request. Which means that even if I wanted to hide what I was doing, any inquisitive citizen could find it out anyway. So why bother hiding things?
If I were working for a firm that has significant trade secrets I'm pretty sure I couldn't blog about a lot of the break/fix stuff I've blogged about. Opinion, yes. Examples from my work life? Not so much.

I passed my 6 year blogaversary earlier last month, and if it is one thing I've learned is that people appreciate examples. It's one thing to describe how to fix a problem, and quite another (more useful) thing to provide the context in which a problem arose. It's the examples that are hard to provide when you have to protect trade secrets.

So, yes. I'm creating free information, in significant part because I work somewhere that values free information.

by riedesg (noreply@blogger.com) at February 03, 2010 12:50 PM

Eric's Blog

SEO and Cross-Domain Content Syndication

When dealing with content syndication, one is occasionally in the situation where you are not the higher ranking site in search engines. You might rank #4 for an article and in that same search, your syndicated content may be ranked #1. What’s the best way to deal with this?

After much reading and discussion, I believe that you have a few options.

The first is taking advantage of the most recent addition to the cross-domain rel=canonical link element. You can read up on it more here. If you can talk to the publishing group and get them to allow the addition of the canonical link relationship, then you will get credit where credit is due (and deserved).

The reason that this can sometimes be an issue is that a lot of SEO types are not comfortable with when and how to use this link relationship and over use it or point it to their homepage for more link juice. That’s not the idea here. The idea is to prevent duplicate content from being index and to allot credit to the deserving party.

The second is to try to take advantage of the syndicate publishing networks credibility and publish a blurb at the bottom of every article. Look at the bottom of every CNET article as an example. There is a blurb about every author with a link. That link could be to the author’s site or to an author’s bio page.

Lastly, you need to make sure that the article links back to your site. This is again taking advantage of the link juice and credibility that the higher ranking site can bring to your natural search ranking.

by eric at February 03, 2010 11:45 AM

SysAdmin1138

Free information

Charles Stross had a nice piece this morning about that long time hacker slogan, "Information wants to be free". It's a good read, so I'll wait while you go read it. It focuses on the different definitions of free. One means, "no cost," like those real-estate fliers you see at the grocery store. The other means, "free to move," like Amazon MP3 Store mp3 files. Different, see.

Part of his point is that it is one thing to enable information to be free, and quite another to create free information. Information creation is the ultimate validation of this credo. In his case, he can work with his publishers to release novels in a non-DRMed format; something he has done once and will do again soon.

But he closes with a question:
What have you created and released lately?
That's a very good question. The quick answer to that is this blog. My experiences wrestling with technology have proven useful to others. The search key-words that drive people here have evolved over time, but give a nice snapshot for what issues people are having and are looking for answers about. For a long time that was news about the Novell client for Vista. Right this moment the top trending keywords all include two of the following terms 'cifs', 'Windows 7', 'Netware', and 'OES', strongly suggests people looking for how to connect Vista/Win7 to NetWare/OES. Comments I've received have also proven that what I've posted here has been useful to others.

But what about beyond that? I've written a couple of AppNotes for Novell over the years covering topics that the NetWare-using community didn't have adequate coverage over. Novell has always had a stake in 'community', which fosters this sort of information sharing.

I've also been active on ServerFault, a sort of peer-support community for system administrators. I don't get as good data about what my contributions there are being used for, but I do still get comments on accepted answers months after their original posting. I'm in the top 25 for reputation there, so that's something.

It doesn't look like a lot, but it is free information out there. In both senses of the word.

by riedesg (noreply@blogger.com) at February 03, 2010 11:30 AM

TaoSecurity

DNI Blair Leads with APT as a "Wake-Up Call"

AFP is one of the few news outlets that correctly focused on the key aspect of testimony by US Director of National Intelligence Dennis Blair at yesterday's US Senate Select Committee on Intelligence hearing. In his testimony, DNI Blair began his Annual Threat Assessment of the US Intelligence Community with the following. I highlight "began" because this section wasn't buried in the middle of the document. He discussed digital threats right from the start.

The national security of the United States, our economic prosperity, and the daily functioning of our government are dependent on a dynamic public and private information infrastructure... This critical infrastructure is severely threatened.

The recent intrusions reported by Google are a stark reminder of the importance of these cyber assets, and a wake-up call to those who have not taken this problem seriously...

I am here today to stress that, acting independently, neither the US Government nor the private sector can fully control or protect the country’s information infrastructure...

The existing balance in network technology favors malicious actors, and is likely to continue to do so for the foreseeable future. Sensitive information is stolen daily from both government and private sector networks, undermining confidence in our information systems, and in the very information these systems were intended to convey.

We often find persistent, unauthorized, and at times, unattributable presences on exploited networks, the hallmark of an unknown adversary intending to do far more than merely demonstrate skill or mock a vulnerability...

Many have the capabilities to target elements of the US information infrastructure for intelligence collection, intellectual property theft, or disruption...


I'm sure a few readers keyed on the terms "unattributable" and "unknown". Only in the section on China did DNI Blair mention a country that "pose[d] challenges to its neighbors and beyond" with respect to cyber activities. He said:

The PLA’s capabilities and activities in four key areas pose challenges to its neighbors and beyond Taiwan, including China’s military relationships across the developing world; China’s aggressive cyber activities; its development of space and counterspace capabilities; and its expansive definition of its maritime and air space with consequent implications for restricted freedom of navigation for other states...

The other section where "cyber" was mentioned appeared in the International Organized Crime material:

International organized crime (IOC) is threatening US interests by forging alliances with corrupt government officials, undermining competition in key global markets, perpetrating extensive cyber crimes, and expanding their narcotrafficking networks...

International criminal organizations are likely to become more involved in cyber crimes, raising the risk of significant damage to the global financial and trust systems—banking, stock markets, and credit card services—on which the global economy depends.


I highlight the criminal aspect to remind everyone that cyber crime is a real problem that should not be forgotten!

I'm sure there are readers who will dismiss this as "Beltway propaganda," but I think it's important to realize what the nation's top intelligence official -- surely a "grown up" by anyone's standards -- has to say to the Senate about recent digital intrusions.

by Richard Bejtlich (noreply@blogger.com) at February 03, 2010 11:13 AM

OSI Blog

I signed the Public Domain Manifesto

You can read about it here and then decide for yourself whether to sign it as well.

by Michael Tiemann at February 03, 2010 10:44 AM

CoolBeans

1+1=1.5: How estimating coding time breaks math

I always hate providing a SWAG [guess] on how long something will take. Predicting how much time I will work on something is never a good indicator on when the item will be finished.

A talent a good dev will have is to take two 1 week features and finish them in 1.5 weeks. It may seem like black magic, but most people don't work on everything serially. You interleave work between tasks; coding on one while the other is still compiling.  Washing your clothes will take 1 hour, but washing two loads benefits from usage of the washer and drier at the same time in the middle.

This model of “shorter done together” seems to go against the grain of traditional software planning. You can’t put it into a spreadsheet and sum it together, because the total time spent will end up being less than the sum.

In the end, given 12 weeks and 5 features, as long as all 5 are done at the end of 12 weeks who should care? Turns out managers tend to care because they need to measure everyone’s time the same way to get an accurate picture where their team is.

Plugging into this model is something that’s not easy to do and requires some patients on both ends. A good dev will know how to emulate what their manager wants to hear, and a good a manager will be able to interpret their report’s work style in a way which plugs in to their tacking methods.

Now can someone teach me to be a good dev given the above? I always seem to frustrate someone with my “trust me it’ll just get done” attitude problem.

by Chris Becker at February 03, 2010 07:59 AM

Chris Siebenmann

How to destroy people's interest in updating documentation

How to destroy people's interest in updating documentation

Here is one of the less obvious perils of outdated documentation:

Suppose that you have some documentation that is out of date, but not in an obvious way; for example, you have an out of date network layout diagram. Since it's not obvious you don't realize this right away, so you keep on updating the network layout diagram when you make changes to your actual network.

Except that faithfully updating an inaccurate network layout diagram is relatively pointless. When you realize that it is incorrect, you are going to have to re-check most of it anyways, or at least spend a bunch of effort to reconstruct what sections are trustworthy.

This peril of outdated documentation is that updating bad documentation is wasted effort. (Fixing bad documentation is not, but that's a different thing.)

Since updating documentation takes time that you could be using for other things, and it's generally not fun, it does not take too much time to be wasted this way before people stop doing updating documentation entirely. Why do annoying wasted effort, when you could be doing something that's actually productive and useful? (Especially if you did the work thinking that it wasn't wasted effort, only to find out later that what you thought was productive work, well, wasn't. People really don't like that.)

At first, this effect will probably be limited to documentation that is highly suspect. But I don't think it takes much bad documentation before people more or less give up totally, because it is too heartbreaking to waste time this way and they can't stand the idea of it any more; you will lose the culture of documentation. At that point, you can stop talking about updating documentation and start talking about reconstructing it from scratch.

(This is where local wikis are perhaps less than ideal, because at this stage what you really need to do is pave everything so that there is a clear line between 'done recently, can be trusted' and 'is old, do not trust until it has been redone'.)

by cks at February 03, 2010 06:59 AM

Linux Poison

Astyle - Source code indenter, formatter, and beautifier for C, C++, C# and Java

Astyle (Artistic Style) is a source code indenter, formatter, and beautifier for the C, C++, C# and Java programming languages. When indenting source code, programmers have a tendency to use both spaces and tab characters to create the wanted indentation. Moreover, some editors by default insert spaces instead of tabs when pressing the tab key, and other editors (Emacs for example) have the

by Nikesh Jauhari (njauhari@cybage.com) at February 03, 2010 06:27 AM

Google Blog

Doodle 4 Google — Tell us what you would do if you could do anything...

Today, we're excited to announce our third annual Doodle 4 Google contest in the U.S. Google doodles, created by our talented team of doodlers, have helped us celebrate events and anniversaries from Van Gogh's birthday to Valentine's Day. And since 2008, Doodle 4 Google has given K-12 kids the opportunity to create their own logo and have it displayed on the Google homepage for hundreds of millions of users to enjoy for a day.

In addition to the winner's art appearing on Google.com on May 27, 2010, they'll also receive a $15,000 college scholarship, a laptop computer and a $25,000 technology grant for their school.

This year's theme is "If I Could Do Anything, I Would..." and it's all about pushing the limits, dreaming big, and seeing what you can accomplish in life. When coming up with inspiration for this year's contest, we turned to some of our very own Googlers, including Ed Lu, a former astronaut.

Ed typifies this year's theme in action, and shares an inspiring anecdote:

On my first mission STS-84, one of my crewmates and I were having dinner aboard the Space Shuttle Atlantis. After all our work for the day was done, we decided to eat "upside down" on the ceiling, gazing out at the Earth moving by below our feet. As we flew around the Earth, watching the continents go by, my crewmate remarked how amazingly large the Earth really is. But at that same time, it also felt small to us. There we were, flying at 18,000 miles per hour around the Earth in a machine built by humans, with a crew made up of astronauts from all over the world. Both of our observations were true at the same time. The world is indeed a big place with many challenges. But by using science, technology and the power of people working together, nearly anything is possible.

So dream big! If you could do anything, what would you do?


For even more inspiration, you can see last year's winner, Christin Engelberth, a sixth grader at Bernard Harris Middle School in San Antonio, Texas. She titled her doodle "A New Beginning" to express her wish that "out of the current crisis, discoveries will be found to help the Earth prosper once more."

We're happy to let you know that this year, we've also assembled a panel of well-known "Expert Jurors," including creative directors, cartoonists and famous animators ranging from Sesame Workshop to Pixar Animation Studios. Our Expert Jurors will help us narrow down the cream of the crop to 40 regional finalists, who will come to the Google office in New York City on May 26, 2010. For the second year, we'll also be partnering with the Smithsonian's Cooper-Hewitt, National Design Museum, where the top 40 regional finalists will get to have their artwork displayed in a national exhibit. And for the first time this year, we'll give out eight Technology Booster awards to schools that submit maximum number of doodles per school by March 10th and have students in our 400 State Finalists.

Please visit the official competition website for a full listing of all contest rules and requirements. Only students from registered schools can enter, so be sure your school is registered by March 17, 2010. All doodles must be submitted by March 31, 2010.

We hope you're as excited about this year's contest as we are. Good luck!

by A Googler (noreply@blogger.com) at February 03, 2010 06:02 AM

Off Planet

Boosting Your Resiliency-Part 2: Avoiding Learned Helplessness and Changing Your Explanatory Style

This is the second part in a new series designed to help you boost your resiliency. For an introduction, see here.

Starting in 1967, Dr. Martin Seligman began a series of experiments involving 3 groups of dogs. The first group of dogs were given electric shocks, but were able to press a panel with their nose to make the shocks stop. The second group of dogs were given the shocks as well, but had no recourse to make them stop. The third group was the control and received no shocks.

The dogs in the first and third group recovered well from the experiment. But the dogs in the second group, those that had been helpless to stop the pain, developed symptoms similar to clinical depression.

In the second part of the experiment, the dogs were placed in an enclosed box separated by a low barrier over which they could see. When the shocks were administered, all the dogs had the opportunity to easily escape the pain by jumping over the partition, and this is what the dogs in the first and third group did. But the dogs in the second group, those which had previously learned that there was nothing they could do to escape the shocks, simply lay there whimpering and took it. They had come to believe that nothing they did mattered; Dr. Seligman called this behavior “learned helplessness.”

The experiment was repeated with other animals, babies, and adult humans, and the results were the same. Once subjects had been exposed to a situation over which they had no control, they would continue to feel helpless, even in situations where they did have control.

Learning Helplessness

You were an awesome boyfriend, but still got dumped or a wonderful husband who still got cheated on. You’ve always been a good person, but your father died when you were in college, while the jackasses out there still get to go on fishing trips with their dads. You put your heart and soul into your job, but got passed over for the promotion. You worked your butt off in law school, but you still can’t find a job.

When these kinds of things happen, you lose an important sense of control over your life; you stop believing you’re the captain of your destiny. You followed the rules, but you still got screwed. You feel disillusioned, and it becomes easy to develop a jaded, passive “What’s the point?” philosophy that informs all areas of your life.

But having such an experience doesn’t guarantee that you’ll develop “learned helplessness.”

During his research, Seligman noticed a curious phenomena; in all the experiments, a consistent ratio emerged: 2/3 of the test subjects which had experienced a situation over which they had no control developed “learned helplessness,” while the other third did not. They were able to see the helpless situation as an isolated event, and bounce back to proactively face future challenges.

Dr. Seligman wanted to know the secret of the 1/3 who felt helpless in one situation, but didn’t carry this feeling over to new challenges. Why did the exact same events produce such different responses? The answer turned out to be something called explanatory style.

Explaining Explanatory Style

Dr. Seligman discovered that the difference between those who were able to bounce back and those who were susceptible to learned helplessness was rooted in the different ways people explain the things that happen to them.

Seligman argues that our interpretation of events can be broken down into three categories:

  • Personalization (internal vs. external)
  • Pervasiveness (specific vs. universal)
  • Permanence: (temporary vs. permanent).

The authors of The Resilience Factor helpfully rename these categories in an easier to remember way and explain their meaning:

  • Me/Not Me
  • Always/Not Always
  • Everything/Not Everything:

“A ‘Me, Always, Everything’ person automatically, reflexively believes that he caused the problem (me), that it is lasting and unchangeable (always), and that it will undermine all aspects of his life (everything).When problems arise, a “Not Me, Not Always, Not Everything person believes that other people or circumstances caused the problem (not me), that it is fleeting and changeable (not always), and that it will not affect much of his life (not everything).”

For obvious reasons, studies have shown that those with a “Not Me, Not Always, Not Everything” explanatory style are the most optimistic, while those with a “Me, Always, Everything” explanatory style are prone to pessimism and depression. Once MAE’s fail at something, they are susceptible to experiencing “learned helplessness” for a long time and across many areas of their life.

The effect of your explanatory style not just on your resiliency but on your whole life cannot be overstated. Those with a pessimistic, “Me, Always, Everything” explanatory style are more prone to depression, anxiety, low self-esteem, and paralyzing inertia in the face of setbacks. Those with an optimistic, Not Me, Not Always, Not Everything style, on the other hand, experience improved health and happines and significantly more success in the workplace, at school, and on the playing field.

An Example of Explanatory Style

Let’s examine one situation and see how a Me, Always, Everything man reacts compared to a Not Me, Not Always, Not Everything man.

Len gets fired from his job:

  • If Len tends to a Me, Always, Everything thinking style then he might explain this event by saying, “I’m such an incompetent accountant. I was always out of my league at the office (Me). I’ll never be able to find another good job. (Always). My wife is probably going to leave me now. Man, my life is so screwed up. (Everything).”
  • Now if Len has a Not Me, Not Always, Not Everything explanatory style, then he might explain this event by saying, “I got fired because there just isn’t very much work for me to do anymore, and the company is trying to be more efficient. (Not Me). The economy is really making holding a job difficult. But things will eventually turn around. (Not Always). The job wasn’t a good fit for me anyway; I really wasn’t using my true talents. At least I have a good wife at home to help me through this (Not Everything).”

Flexible Optimism

None of use the same explanatory style with everything in our lives. For instance, while optimistic people tend to use a Not Me, Not Always, Not Everything approach when dealing with bad events, they use the opposite style when good things happen. And vice versa for pessimistic people. And we can give into “learned helplessness” even when we know it’s not our fault-it’s not “Me” but it is “Always” and “Everything.” Ie., you worked your butt off in grad school but you can’t find a job because the job market is crap. It’s not your fault but you find yourself feeling like things will never get better and responding passively to everything in your life.

Also, while a “Me, Always, Everything” approach can cause a person significant problems, always using a “Not Me, Not Always, Not Everything” style can also be unhealthy. Because sometimes it is your fault. You can slough off all of your personal responsibility for failures to keep from getting depressed, but you’ll also keep yourself from ever being successful in life. You can admit it’s your fault without going farther and believing the problem is pervasive and permanent.

Finally, sometimes you’re right to be pessimistic. A bit of pessimism keeps you vigilant and prevents you from taking foolish risks. There’s no need to be blindly optimistic; Pollyanna was never an icon of manliness.

So the key is not to wear rose-colored glasses all the time, but to be what Seligman calls a “flexible optimist.” This means seeing the world accurately, reacting appropriately-using the right explanatory style at the right time-and not letting pessimism obscure the things you legitimately have going for you.

Relearning Your ABC’s

So the bad news is that having a pessimistic explanatory style can have a big negative impact on your life. The good news is that you can change your explanatory style for the better. And it’s as easy as ABC. How we encounter and react to life’s setbacks can be broken down like this:

A: Adversity. We face a setback or challenge.

B: Beliefs. Our thoughts, feelings, and interpretation of the setback. These beliefs lead to:

C: Consequences. How we act because of our beliefs about the setback.

So we can’t change the A. But we can change the B, which will lead to a new C. It’s not adversity itself that creates our reactions, but our beliefs about our adversity. If your beliefs have been leading to negative, non-resilient responses that are dragging you down, you have to short circuit this reaction by changing your beliefs about challenges.

Here’s an example of a pessimistic ABC in action:

Adversity: James frequents a coffee shop because he has a crush on the girl at the register. He finally works up the courage to ask her out. But instead of saying yes, she turns him down.

Beliefs: James thinks: “Geez, I’m such a freakin loser. I’m not attractive and don’t have anything to offer women. I’m never going to find a girlfriend.”

Consequences: James alternates between feeling depressed and angry for the next week. He can’t muster up the courage to ask another girl out for over a year.

James’ beliefs about what happened led to an overly negative reaction. To get a better outcome, he needs to change his beliefs by disputing them.

Disputing Your Beliefs

Just because you have certain beliefs, even if you have held them for as long as you can remember, that doesn’t make them true. False beliefs will limit your ability to get to the root of your problem and will limit the solutions you are able to come up with. If you have some beliefs that are sabotaging your resiliency, you need to dispute them, challenge them, and have an argument with yourself.

Dr. Seligman recommends judging your beliefs on 4 criteria. Let’s take a look at them and explore how James could have reacted more resiliently to the rejection he received:

1. Evidence. What are the real facts in the situation? Does the evidence support your belief or vanquish it?

  • James could think, “I’m not a loser. I’m an Oxford scholar, I’ve done an Ironman, and I’ve got a great job at a prestigious law firm.”

2. Alternatives: Pessimists have a tendency to latch onto the most dire of explanations for a bad event, ignoring more positive alternate explanations.

  • James could think, “Maybe she had a boyfriend and that’s why she said no. Maybe she just got out of a bad relationship. It might have nothing to do with me personally at all.”

3. Implications. When faced with a setback, pessimists have a tendency to jump to more and more catastrophic implications. But what are the chances of these implications really happening?

  • James could think, “Just because a girl at a coffee shop turned me down doesn’t mean I’ll never have a girlfriend. I’ve had a girlfriend before and I’ll have one again.”

4. Usefulness. Just because a belief is true, doesn’t mean it’s useful. Clinging to useless beliefs keeps you from working on the things that you actually can change about yourself.

  • James could think: “Yeah, I’m not that attractive. But I have a lot going for me otherwise. Girls like confidence, so what I really need to work on is coming off as more confident and self-assured. Thinking about my unattractiveness is sabotaging that.”

Whenever faced with an ABC, practice disputing your beliefs; have a knock down drag out fight with yourself and figure out what’s really going on. It may be beneficial to journal it, as writing can help you sort through why you’re feeling the way you are, and whether your beliefs are distorting what is really going on. It can also be helpful to have a spouse or trusted friend do the disputing for you. Tell them what you’re upset about and have them challenge you on your beliefs, asking you questions to figure out just how accurate your beliefs actually are.

While at first it will take some effort to stop in the midst of your negative reaction and work on disputing your beliefs, over time it will become natural and will help you respond appropriately, positively, proactively-and resiliently to your challenges.

Sources:

Learned Optimism by Dr. Martin E.P. Seligman

The Resilience Factor by Dr. Karen Reivich and Dr. Andrew Shatte

DownloadThe Art of Manliness Free Man Cookbook
DownloadThe Art of Manliness Guide to Being a Gentleman

Hawaiiabera Discount Code: AOM


Check Out These Related Posts:

by Brett & Kate McKay at February 03, 2010 05:45 AM

Ubuntu Geek

iptstate - Top-like state for netfilter/iptables


iptstate  displays  information  held  in  the IP Tables state table in real-time in a top-like format.  Output can be sorted by any field,  or any field reversed. Users can choose to have the output only print once and  exit,  rather  than  the  top-like   system.   Refresh   rate   is configurable,  IPs  can  be resolved to names, output can be formatted,the display can be filtered, and color coding are  among  some  of  the many features.
(...)
Read the rest of iptstate - Top-like state for netfilter/iptables (273 words)


© admin for Ubuntu Geek, 2010. | Permalink | 3 comments | Add to del.icio.us
Post tags: , , ,

Related Articles

by admin at February 03, 2010 12:33 AM

Daniel E. Markle

Clever Cheese Commercial

With the Super Bowl approaching and the impending commercials associated with it, I've just seen a commercial setting the standard by which their strength will be compared.



With the weakness most of these commercials have had over the past few years, this is going to be one tough little guy to defeat.

by syntax@ashtech.net (Daniel E. Markle) at February 03, 2010 12:10 AM

February 02, 2010

Everything Sysadmin

New Jersey Sysadmin conference announced!

New Jersey (and nearby) sysadmins, network engineers, DBAs, and anyone that considers themselves part of the "IT industry" should check out the LOPSA New Jersey Professional IT Community Conference.

The conference will be Fri/Sat, May 7-8, 2010 in sunny New Brunswick, NJ. I'll be speaking both days.

February 02, 2010 10:13 PM

Ben Rockwood

OPEN LETTER TO ORACLE: (Open)Solaris Roadmap

Dear Oracle,

Congratulations on the EU approval of your acquisition of Sun Microsystems, Inc. Many of us in the various Sun communities spent years working closely with Oracle products on Sun technology and feel right at home being part to the Oracle family. The business savvy and dedication to customer success will be a welcome change in the direction of all of Sun's technologies.

While the strategy webcasts and FAQs have been fantastic, there are many questions customers have regarding the future of Solaris, OpenSolaris and the technologies within. It's no secret that for several months Oracle has been involved to some degree in Sun engineering directions and therefore it does not seem unreasonable to ask for answers even so soon after the EU green-light.

First, and of foremost concern, is the future of the Solaris product for enterprise customer, currently "Solaris 10". Will there be a Solaris 11? (It would fit nicely with Oracle's scheme, btw.) Will it be compatible with existing Solaris technologies (Jumpstart, SysV PKGs, etc) or will the existing path to scrap these technologies in favor of new and unproven solutions created within the OpenSolaris platform be chosen instead?

Please understand that until recently customers could choose the traditional product (Solaris 10), the advanced development product (OpenSolaris Distribution), or use the bridge between these two worlds: Solaris Express Community Edition(SX:CE). However, with SX:CE's recent retirement Solaris shops are forced to make a choice: go forward and accept uncomfortable and disruptive changes of OpenSolaris Distro or fall back into the technically inferior but fully supported and well understood Solaris 10. Sadly, some are opting to leave all together due to a lack of direction.

Decisions need to be made and customers need guidance in order to make them. Consistent with Sun's legacy, the OpenSolaris project has been phenomenally successful in empowering customers and driving innovation, however management has continually failed to produce a coherent roadmap for enterprises to bank on.

Therefore, I would humbly ask that Oracle definitively provide guidance on the following:

  • A roadmap for enterprise Solaris customers
  • Guarantees with regard to the well-being and sustained viability of OpenSolaris as an Open Source community (independent of "OpenSolaris" as a distribution)
  • Future support and development for Solaris virtualization technologies, namely xVM (the best Xen solution in the industry thanks to ZFS, Crossbow, FMA, etc.) and Containers (the best Xen alternative in the industry), with respect to how they will compliment, supplement or be replaced by "Oracle VM"

I look forward to these details which will hopefully put an end to the Solaris FUD and put us back on a path of profitable and productive growth, for the sake of the community, customers, and Oracle itself.

Ben Rockwood
(Open)Solaris Developer & Evangelist

by benr at February 02, 2010 10:06 PM

Ilia

My Thoughts on HipHop

To paraphrase Marco Tabini if you work with PHP you must be doing so in a pretty deep cave to have not heard of HipHop for PHP and the fervor around it the prior to its official announcement this morning by Facebook.

I had a fortune to be part of the small group of PHP community people who were invited to take a peak at its technology prior to its official release in January. And I must admit it had been quite amusing to read some of the conjectures people were making about what it actually, given how off the mark most of their guesses were.

So what is HipHop?

In the tersest of terms HipHop is a tool that converts PHP code into C++ code that when combined with a PHP compatible engine and extensions (ports of some native PHP extensions Facebook uses) library also written in C++ can be compiled using GCC into a binary. This binary can then be ran on a command line or as a web server daemon that utilizes libevent. According to Facebook this can speed up applications by up to 50%, which is a pretty impressive improvement.

It is not entirely surprising that world's largest PHP deployment, such as Facebook would look at solution that would allow them to halve their not inconsiderable count of servers or double capacity. Releasing this solution as Open Source is I think a great idea, and big kudos to Facebook for doing so.

From a technical perspective the PHP optimization approach of converting PHP into a compiled language is not a completely new one, Roadsend compiler, a commercial product has been around for a few years now and has been doing that with some degree of success. That said it is not a trivial task and from an engineering perspective presents a fairly tricky development challenge, especially when you want to allow regular, off-the-self scripts to work. Perhaps more importantly, HipHop not a theoretical solution, "for you to test", it actually works, with most of the Facebook's servers running it and doing it well, on millions of lines of converted PHP code on daily basis, very impressive.

At this point you are probably thinking, that if it is so great and it works, I'll deploy it on my servers as soon as I can get my hands on the source code. Well, unfortunately things are not quite so simple, there are few technical and deployment challenges you need to overcome.
Continue reading "My Thoughts on HipHop "

by ilia@ilia.ws (Ilia Alshanetsky) at February 02, 2010 09:47 PM

Giri Mandalika

PeopleSoft NA Payroll 240K EE Benchmark with 16 Job Streams : Another Home Run for Sun

(Originally posted on blogs.sun.com at:
http://blogs.sun.com/mandalika/entry/peoplesoft_na_payroll_240k_ee
)

Poor Steve A.[1] ... This entry is not about Steve A. though. It is about the new PeopleSoft NA Payroll benchmark result that Sun published today.

First things first. Here is the direct URL to our latest benchmark results:

        PeopleSoft Enterprise Payroll 9.0 using Oracle for Solaris on a Sun SPARC Enterprise M4000 (16 job streams[2] -- simply referred as 'stream' hereonwards)

The summary of the benchmark test results is shown below only for the 16 stream benchmarks. These numbers were extracted from the very first page of the benchmark results white papers where Oracle|PeopleSoft highlights the significance of the results and the actual numbers that are of interest to the customers. The results in the following table are sorted by the hourly throughput (payments/hour) in the descending order. The goal is to achieve as much hourly throughput as possible. Click on the link that is underneath the hourly throughput values to open corresponding benchmark result.


Oracle PeopleSoft North American Payroll 9.0 - Number of employees: 240,000 & Number of payments: 360,000
VendorOSHardware Config#Job StreamsElapsed Time (min)Hourly Throughput
Payments per Hour
SunSolaris 10 5/091x Sun SPARC Enterprise M4000 with 4 x 2.53 GHz SPARC64-VII Quad-Core processors and 32 GB memory
1 x Sun Storage F5100 Flash Array with 40 Flash Modules for data, indexes
1 x Sun Storage J4200 Array for redo logs
1643.78493,376
HPHP-UX1 x HP Integrity rx6600 with 4 x 1.6 GHz Intel Itanium2 9000 Dual-Core processors and 32 GB memory
1 x HP StorageWorks EVA 8100
1668.07317,320


This is all public information. Feel free to compare the hardware configurations and the data presented in both of the rows and draw your own conclusions. Since both Sun and HP used the same benchmark toolkit, workload and ran the benchmark with the same number of job streams, comparison should be pretty straight forward.

If you want to compare the 8 stream results, check the other blog entry: PeopleSoft North American Payroll on Sun Solaris with F5100 Flash Array : A blog Reprise. Sun used the same hardware to run both benchmark tests with 8 and 16 streams respectively. We could have gotten away with 20+ Flash Modules (FMODs), but we want to keep the benchmark environment consistent with our prior benchmark effort around the same benchmark workload with 8 job streams. Due to the same hardware setup, now we can easily demonstrate the advantage of parallelism (simply by comparing the test results from 8 and 16 stream benchmarks) and how resilient and scalable the F5100 Flash array is.

Our benchmarks showed an improvement of ~55% in overall throughput when the number of job streams were increased from 8 to 16. Also our 16 stream results showed ~55% improvement in overall throughput over HP's published results with the same number of streams at a maximum average CPU utilization of 45% compared to HP's maximum average CPU utilization of 89%. The half populated Sun Storage F5100 Flash Array played the key role in both of those benchmark efforts by demonstrating superior I/O performance over the traditional disk based arrays.

Before concluding, I would like to highlight a few known facts (just for the benefit of those people who may fall for the PR trickery):
  1. 8 job streams != 16 job streams. In other words, the results from an 8 stream effort is not comparable to that of a 16 stream result.
  2. The throughput should go up with increased number of job streams [ only up to some extent -- do not forget that there will be a saturation point for everything ]. For example, the throughput with 16 streams might be higher compared to the 8 stream throughput.
  3. The Law of Diminishing Returns applies to the software world too, not just for the economics. So, there is no guarantee that the throughput will be much better with 24 or 32 job streams.


Other blog posts and documents of interest:
  1. Best Practices for Oracle PeopleSoft Enterprise Payroll for North America using the Sun Storage F5100 Flash Array or Sun Flash Accelerator F20 PCIe Card
  2. PeopleSoft Enterprise Payroll 9.0 using Oracle for Solaris on a Sun SPARC Enterprise M4000 (8 streams benchmark white paper)
  3. PeopleSoft North American Payroll on Sun Solaris with F5100 Flash Array : A blog Reprise
  4. App benchmarks, incorrect conclusions and the Sun Storage F5100
  5. Oracle PeopleSoft Payroll (NA) Sun SPARC Enterprise M4000 and Sun Storage F5100 World Record Performance





































Notes:

[1] Steve A. tried so hard and his best to make everyone else believe that HP's 16 job stream NA Payroll 240K EE benchmark results are on par with Sun's 8 stream benchmark results. Apparently Steve A. failed and gave up after we showed the world a few screenshots from a published and eventually withdrawn benchmark [ by HP ]. You can read all his arguments, comparisons etc., in the comments section of my other blog entry PeopleSoft North American Payroll on Sun Solaris with F5100 Flash Array : A blog Reprise as well as in Joerg Moellenkamp's blog entries around the same topic.

[2] In PeopleSoft terminology, a job stream is something that is equivalent to a thread.

by Giri Mandalika (noreply@blogger.com) at February 02, 2010 08:52 PM

TaoSecurity

Traffic Talk 9 Posted

I just noticed that my 9th edition of Traffic Talk, titled Testing Snort with Metasploit, was posted. From the article:

Security and networking service providers are often asked whether their solutions are working as expected. Two years ago, I wrote How to test Snort, which concentrated on reasons for testing and ways to avoid doing poor testing. In this article, prompted by recent discussions among networking professionals, I show how to combine several tools in a scenario where I test Snort with Metasploit.

by Richard Bejtlich (noreply@blogger.com) at February 02, 2010 07:46 PM

Google Webmasters

How did you do on the Webmaster Quiz?

Webmaster Level: All

Thanks to all of you who took our webmaster quiz and waited patiently to see how well you did! Today, we're pleased to present the Webmaster Quiz answers! We hope this quiz has provided some clarity on common issues users ask about in the Webmaster Help Forum. We'll go over a few of the questions and answers here, but if some of the answers lead you to ask more questions, we encourage you to continue the discussion in the forum!

1) You have moved your site to a new domain name. For users and search engines, the preferred way to permanently redirect traffic is:

Correct answer: a) 301 redirect

Explanation: A 301 redirect is preferred because it tells search engines, "Ok, this is the new domain I want you to show to users from now on," as opposed to something like a 302 redirect, which tells search engines, "Hey, this is only a temporary redirect--so, uh, I might change the URL soon, okay?" In addition to implementing a 301 redirect, the Change of Address feature in Webmaster Tools can help Google find your new site.

2) Your server is going to be moved and unavailable for a day. What should you do?

Correct answer: c) Return "Network Unavailable (503)" with a helpful message to all requests

Explanation: Maybe not as commonly known to webmasters, but very useful if your site is down! This tells crawlers to come back later, rather than crawling and indexing your "Down for maintenance" pages when you respond with 200 rather than 503. Check out the Help Center to learn more about HTTP status codes.

3) Your website is not in the index five days after you've put it online; what should you do?

Correct answer: b) Continue working on the site

Explanation: This one is a bit tricky. There could be a number of reasons why your site is not indexed. For example, a site's robots.txt file may contain a directive to inadvertently block crawlers from searching its contents. But the main take-away from this question is that if your site is pretty new, it may just be a matter of time before it gets indexed. You should continue to focus on improving your site for your users.

6) You need to remove 192 PDF files from the /private-files/ folder which have gotten indexed. What's the fastest way to do this?

Correct answer: d) Disallow the folder in robots.txt and request removal of the whole folder in Webmaster Tools.

Explanation: Before removing a directory that you don't want indexed, you need to include the Disallow directive in your robots.txt file to tell search bots not to crawl it anymore.

9) You have a country-coded domain name called example.es. To associate your site with Spain, you need to:

Correct answer: c) None of this is necessary. Google should already associate a domain ending in .es with Spain.

Explanation: Some country-coded domains may overlap with international ones, like .tv--which could also be a site from Tuvalu. But these sort of cases are rare and if they do arise, don't be shy to seek out help on the forum.

Great job to everyone who took the quiz and tested their know-how! And last but certainly not least, kudos to the top scorers! Congratulations on a quiz well done!

40/40:
  • ChrisRaimondi
  • theopeek
  • beussery
39/40:
  • Petro
  • pornel
  • Ian Macfarlane
  • g1smd
  • Mattman
  • thinkpragmatic
  • GLV
  • GoalGorilla
  • rssmarketer
38/40:
  • BartVB
  • Kim Minh Kaplan
  • Ippi
  • Erik Dafforn
  • scole01
  • Konstantin
  • John
  • fer.vazquez
  • eMBe
  • Todd Nemet
  • p.jaroszynski
  • ph0b

by Chark (noreply@blogger.com) at February 02, 2010 05:00 PM

Thinking faster

Why is fighting fires more valuable than avoiding fires?

I was working with a client recently in a team meeting when one of the participants got a phone call, bolted up, apologized for the sudden departure and left the room.  His reason - a big "fire" was underway and he was needed to help put it out.  For the life of me I'll never understand this.  In most businesses we place so much value on people who can conduct a "turn around" or who are "fire fighters" but we constantly don't invest in people or value people who predict or avoid fires.

It seems to me our priorities are all wrong.  We've built several generations of managers who are almost completely reactive, and who are rewarded for reacting quickly.  I suspect that given the chance, many managers would be happy to do little proactive work and would only respond to problems once they become big and hairy.  Perhaps all of us should be issued a set of boots, fire proof clothing and one of those cool fire fighter hats when we join our organizations.

What's wrong with investing in the skills and foresight necessary to avoid fire fighting and avoid the problems or perhaps even predict them and put programs in place to not merely avoid the future fires but be prepared to take advantage when our competitors get caught short, but we don't.  I can't wrap my head around this - a small investment in a few people constantly scanning the near term future and identifying potential problems, challenges or roadblocks would dramatically reduce the number of fires.  Fire fighting is difficult, costly and means the firm is simply trying to react to catch up to some shift in the market or some problem.  This means it's an investment on top of a previous investment, so fighting fires is expensive and doesn't necessarily place the firm in a better position going forward.

Look at the problems at Toyota right now with the sticky accelerator.  Even though the designs may have been bad, if Toyota had done a better job recognizing the problems at the outset and planning and reacting at that point, rather than stalling and waiting until the problem became a "fire fighting" exercise, they'd have a much better outcome.  Clearly in this case it may have been difficult to predict the problem and avoid it, but scanning the feedback and watching the trend lines would have had them reacting much faster.

I think much of this is cultural.  For some reason we believe that sweeping in and fixing a problem has more drama, and gains more attention, than doing the work to predict and avoid problems.  Perhaps we've trained people to believe that reacting to problems after they've occurred is more valuable than avoiding or predicting problems in advance.  In our culture we dislike people who predict negative consequences in the future, even if they are right, yet celebrate people who fight fires that could have been easily prevented.  Perhaps we need to place more emphasis on who missed the signals that led to the problem, and place less emphasis on fire fighting and more on strategic vision.

by Jeffrey Phillips at February 02, 2010 02:53 PM

Off Planet

Why is fighting fires more valuable than avoiding fires?

I was working with a client recently in a team meeting when one of the participants got a phone call, bolted up, apologized for the sudden departure and left the room.  His reason - a big "fire" was underway and he was needed to help put it out.  For the life of me I'll never understand this.  In most businesses we place so much value on people who can conduct a "turn around" or who are "fire fighters" but we constantly don't invest in people or value people who predict or avoid fires.

It seems to me our priorities are all wrong.  We've built several generations of managers who are almost completely reactive, and who are rewarded for reacting quickly.  I suspect that given the chance, many managers would be happy to do little proactive work and would only respond to problems once they become big and hairy.  Perhaps all of us should be issued a set of boots, fire proof clothing and one of those cool fire fighter hats when we join our organizations.

What's wrong with investing in the skills and foresight necessary to avoid fire fighting and avoid the problems or perhaps even predict them and put programs in place to not merely avoid the future fires but be prepared to take advantage when our competitors get caught short, but we don't.  I can't wrap my head around this - a small investment in a few people constantly scanning the near term future and identifying potential problems, challenges or roadblocks would dramatically reduce the number of fires.  Fire fighting is difficult, costly and means the firm is simply trying to react to catch up to some shift in the market or some problem.  This means it's an investment on top of a previous investment, so fighting fires is expensive and doesn't necessarily place the firm in a better position going forward.

Look at the problems at Toyota right now with the sticky accelerator.  Even though the designs may have been bad, if Toyota had done a better job recognizing the problems at the outset and planning and reacting at that point, rather than stalling and waiting until the problem became a "fire fighting" exercise, they'd have a much better outcome.  Clearly in this case it may have been difficult to predict the problem and avoid it, but scanning the feedback and watching the trend lines would have had them reacting much faster.

I think much of this is cultural.  For some reason we believe that sweeping in and fixing a problem has more drama, and gains more attention, than doing the work to predict and avoid problems.  Perhaps we've trained people to believe that reacting to problems after they've occurred is more valuable than avoiding or predicting problems in advance.  In our culture we dislike people who predict negative consequences in the future, even if they are right, yet celebrate people who fight fires that could have been easily prevented.  Perhaps we need to place more emphasis on who missed the signals that led to the problem, and place less emphasis on fire fighting and more on strategic vision.

by Thinking faster at February 02, 2010 02:53 PM

Matt Brock

About Matt Brock

I’ve worked in system administration for over 10 years, and I have a general interest in computers and other bits of technology. I’m a keen user of Apple products including Macs and an iPhone. I’m very interested in music, and I’ve written and produced my own music for 20 years. My main musical project is Dicepeople [...]

by Matt Brock at February 02, 2010 02:47 PM

Geeking with Greg

New details on LinkedIn architecture

Googler Daniel Tunkelang recently wrote a post, "LinkedIn Search: A Look Beneath the Hood", that has slides from a talk by LinkedIn engineers along with some commentary on LinkedIn's search architecture.

What makes LinkedIn search so interesting is that the search does real-time updates (the "time between when user updates a profile and being able to find him/herself by that update need to be near-instantaneous"), faceted search (">100 OR clauses", "NOT support", complex boolean logic, some facets are hierarchical, some are dynamic over time), and personalized relevance ranking of search results (ordered by distance in your LinkedIn social graph).

LinkedIn appears to use a combination of aggressive partitioning, keeping data in-memory, and a lot of custom code (mostly modifications to Lucene, some of which have been released open source) to handle these challenges. One interesting tidbit is, going against current conventional wisdom, LinkedIn appears to only use caching minimally, preferring to spend their efforts and machine resources on making sure they can recompute computations quickly than on hiding poor performance behind caching layers.

by Greg Linden (glinden@gmail.com) at February 02, 2010 01:40 PM

Rich Bowen

The myth of SEO - What makes a best seller?

The SEO industry has bought into the same myth that strikes all content industries - that is, that there's some repeatable formula guaranteed to produce best sellers. All we have to do is find that formula and set up an assembly line to push out best sellers. Hence, The Land Before Time XII: The Great Day of the Flyers. If the first 11 were good, the 12th must be fabulous!

But the simple truth is that there's no formula. It's the unique movies that are the blockbusters, not the cookie-cutter movies. And yet every time there's a bestseller, there are dozens or hundreds of copy-cats that try to mimic that success. Witness the Young Adult Fiction section of your local bookstore. This year, it's all vampire books. Two years ago, it was all magician books.

So why does the SEO industry get away with their high rates and ludicrous promises? Well, obviously because Computers Are Hard, and we are the Experts to Help You Succeed. And since you are ignorant, we can convince you that anything, no matter how silly, is going to help you achieve world fame and success.

Not only are folks wasting most of the time on the Apache support channels on wrong-headed mod_rewrite questions ("How do I remove 'index.html' from all of my URLs to improve my search engine rank?") but thousands of companies are spending billions of dollars of work time on optimizations that won't actually do anything useful.

What's the secret? Well, it's really quite simple. The secret is, and always has been, to have something that people want, and present it in an attractive way. Of the two things, the first is far and away the most important. If you have a website that has a product everyone wants, your presentation is secondary. If you have content that everyone is clamoring for, and, as importantly, tell all their friends about, it's not terribly important that it doesn't look perfect.

Witness Craig's List, an incredibly ugly website which is one of the great Internet successes. Note that it has what "SEO experts" call ugly URLs. Interestingly, so does Google, by which we presume to measure all of our success.

A very alarming trend that I've observed in the last year or so is the number of folks saying things like "Yes, I know it doesn't accomplish anything, but my boss says I have to." This highlights two problems. One, management refusing to listen to the folks who know something, and throwing away millions of dollars of their company budget. Two, technology experts who can't, or won't, stand up for what they know to be true, to the benefit of their company and investors.

Folks need to wake up and use reality as their measuring stick, not some snake-oil SEO salesman telling them that this technique, or that one, is guaranteed to make your website a best-seller. It's nonsense, and they know it, and view you as an easy mark. Don't get taken in.

by rbowen at February 02, 2010 01:25 PM

Google Blog

A recent improvement for Arabic searches

This post is the latest in an ongoing series about how we harness the data we collect to improve our products and services for our users. - Ed.

We've learned that when performing a search on Google, people sometimes forget to separate words with spaces. Moreover, people often mistakenly repeat a letter within a single word. For instance, when writing the query [amazingly beautiful poem], you might write it as [amazingly beautiifullpoem].

These types of errors are much more common in languages like Arabic, where most of the letters are cursive. That means that the shapes of the letters change, based on the position of the letter in the word (initial, middle, final or isolated). Moreover, some Arabic letters are considered word breaks, meaning that the following letter must be in an "initial" shape. In other words, if the last letter of one word is a word break, the following word may not be separated with a space.

For example, the queries [وزارةالتعليم] and [وزارة التعليم] have an identical meaning (Ministry of Education) and they're both written in a common form for Arabic documents. But they have different, albeit correct, formats — the first query is written as a single word, while the second is written as two. Google needs to understand that while they're written differently, they mean the same thing and should yield the exact same search results. In this example, both queries were written correctly, just in different formats. But sometimes people just make errors — like repeating the same letter twice. For example, you might write [راائعة الجماال], repeating the letter "ا" twice in both query words. In this case the correct spelling should be [رائعة الجمال]. It's important that Google search recognizes your query — despite spelling errors.

To address issues like this, we recently developed a search ranking improvement that targets certain Arabic queries. Our algorithm employs rules of Arabic spelling and grammar along with signals from historical search data to decide when to leave out spaces between words or when to remove unnecessarily repeated letters. Now, when you type a query leaving out spaces or repeating a letter, we'll return better results based not only on what you typed, but also on what our algorithm understands is the "correct" query. For example, here's what happens when you type [قصيدة راائعةالجماال] ([amazingly beautiful poem] in Arabic) with repeated letters and dropped spaces between words.


As you can see, the Google results contain the corrected query, the terms قصيدة رائعة الجمال, in bold.

For most people, this might seem like a small enhancement. But for us, it’s a big change. Our tests show we've improved search for 10% of Arabic language queries. Which, when you think about it, is a lot of people.

by A Googler (noreply@blogger.com) at February 02, 2010 12:29 PM

SysAdmin1138

Budget plans

Washington State has a $2.6 Billion deficit for this year. In fact, the finance people point out that if something isn't done the WA treasury will run dry some time in September and we'll have to rely on short-term loans. As this is not good, the Legislature is attempting to come up with some way to fill the hole.

As far as WWU is concerned, we know we'll be passed some kind of cut. We don't know the size, nor do we know what other strings may be attached to the money we do get. So we're planning for various sizes of cuts.

One thing that is definitely getting bandied about is the idea of 'sweeping' unused funds at end-of-year in order to reduce the deficits. As anyone who has ever worked in a department subject to a budget knows, the idea of having your money taken away from you for being good with your money runs counter to every bureaucratic instinct. I have yet to meet the IT department that considers themselves fully funded. My old job did that; our Fiscal year ended 12/15, which meant that we bought a lot of stuff in October and November with the funds we'd otherwise have to give back (a.k.a. "Christmas in October"). Since WWU's fiscal year starts 7/1, this means that April and May will become 'use it or lose it' time.

Sweeping funds is a great way to reduce fiscal efficiency.

In the end, what this means is that the money tree is actually producing at the moment. We have a couple of crying needs that may actually get addressed this year. It's enough to completely fix our backup environment, OR do some other things. We still have to dicker over what exactly we'll fix. The backup environment needs to be made better at least somewhat, that much I know. We have a raft of servers that fall off of cheap maintenance in May (i.e. they turn 5). We have a need for storage that costs under $5/GB but is still fast enough for 'online' storage (i.e. not SATA). As always, the needs are many, and the resources few.

At least we HAVE resources at the moment. It's a bad sign when you have to commiserate with your end-users over not being able to do cool stuff, or tell researchers they can't do that particular research since we have no where to store their data. Baaaaaad. We haven't quite gotten there yet, but we can see it from where we are.

by riedesg (noreply@blogger.com) at February 02, 2010 10:12 AM

Aaron Johnson

Chris Siebenmann

What charging credit cards doesn't prove

What charging credit cards doesn't prove

Every so often, commonly in the context of SSL certificates, someone puts forward the theory that charging money for things makes the customers somehow more identifiable and reliable than giving it to people for free (with the same other authentication of customers). After all, so the theory goes, when you give people something just because they have a particular email address, that's not much, but when you've charged their credit card, you have a lot more confidence in their real identity.

This is wrong. To explain why it is wrong, let's talk specifically about SSL certificates.

The basic model of 'verifying' SSL certificates is that in order to get a certificate for a domain, you have to prove that you (theoretically) have power over that domain; you have one of a certain number of email addresses at that domain, you can put things on its web server, or something of the like. Most SSL certificate authorities also charge money on top of this; you submit credit card information along with your Certificate Signing Request, they charge your card, and if the charge goes through you get your signed certificate in email. By collecting money from you, they've gotten a stronger verification than before.

Except that they haven't, because I snuck a fast one into this description: charging a credit card is not the same as actually collecting money from it. No SSL CA waits on giving you your certificate until they actually have received your money from the credit card company; the delays involved in that would drive most customers away. Instead they issue SSL certificates very close to on the spot, which means that SSL CAs are not verifying that you can pay them money, they are verifying that they can charge a credit card. And there are a lot of ways to get a credit card number that can have some amount of money charged to it and not have that reversed, rejected, or detected as fraudulent for (say) six hours, if not days.

(Oh, sure, once the charge blows up the SSL CA will try to revoke the SSL certificate. Good luck with that.)

(This is kind of a reaction to this, because I think this misapprehension is a general one.)

by cks at February 02, 2010 06:39 AM

Linux Poison

PDFCrack - A Password Recovery / Crack Tool for PDF-files on Linux

PDFCrack is a GNU/Linux (other POSIX-compatible systems should work too) tool for recovering passwords and content from PDF-files. It is small, command line driven without external dependencies. The application is Open Source (GPL). Features: Supports the standard security handler (revision 2, 3 and 4) on all known PDF-versions Supports cracking both owner and userpasswords Both wordlists and

by Nikesh Jauhari (njauhari@cybage.com) at February 02, 2010 06:27 AM

Google Blog

Announcing Google's Focused Research Awards

(Cross-posted with the Google Research Blog)

It is said that Google is like a university — and not just because everyone eats their lunch off trays in the cafeteria. Like a university, we devote significant energy to research across a wide array of subjects — from semantics to help improve search, to ways we can improve the efficiency of our data centers. Along with our internal efforts, we've long invested in building a strong, mutually beneficial relationship with universities and the research community. We give approximately 150 research grants a year to fund projects across a variety of subjects, we host visiting faculty members here at Google on sabbatical, and last year we started the Google Fellowship Program to fund graduate students doing innovative research in several fields.

Today, we're announcing the first-ever round of Google Focused Research Awards — funding research in areas of study that are of key interest to Google as well as the research community. These awards, totaling $5.7 million, cover four areas: machine learning, the use of mobile phones as data collection devices for public health and environment monitoring, energy efficiency in computing, and privacy. These are all areas in which Google is already deeply invested, and yet there is a long way to go. We're excited to see what these projects contribute to the body of research in these important areas.

These unrestricted grants are for two to three years, and the recipients will have the advantage of access to Google tools, technologies and expertise. We've given awards to 12 projects led by 31 professors at 10 universities:

Machine Learning: William Cohen, Christos Faloutsos, Garth Gibson and Tom Mitchell, Carnegie Mellon University

Use of mobile phones as data collection devices for public health and environment monitoring: Gaetano Borriello, University of Washington and Deborah Estrin, UCLA

Energy efficiency in computing:
  • Ricardo Bianchini, Rutgers, Fred Chong, UC Santa Barbara, Thomas F. Wenisch, University of Michigan and Sudhanva Gurumurthi, University of Virginia
  • Christos Kozyrakis, Mark Horowitz, Benjamin Lee, Nick McKeown and Mendel Rosenblum, Stanford
  • David G. Andersen and Mor. Harchol-Balter, Carnegie Mellon University
  • Tajana Simunic Rosing, Steven Swanson and Amin Vahdat, UCSD
  • Thomas F. Wenisch, Trevor Mudge, David Blaauw and Dennis Sylvester, University of Michigan
  • Margaret Martonosi, Jennifer Rexford, Michael Freedman and Mung Chiang, Princeton
Privacy:
  • Ed Felten, Princeton
  • Lorrie Cranor, Alessandro Acquisti and Norman Sadeh, Carnegie Mellon University
  • Ryan Calo, Stanford CIS
  • Andy Hopper, Cambridge University Computing Laboratory
We look forward to working with these researchers over the coming years. And, as we continue to identify key areas of research that are of mutual interest to both university researchers and Google, we will provide awards to support these collaborations. For more information about all of our research programs, check out our University Relations site.

Update at 1:13 PM: Added Allesandro Acquisti and Norman Sadeh to the list of PIs on the CMU privacy project.

by A Googler (noreply@blogger.com) at February 02, 2010 05:00 AM

Sam Ruby

Rails 3.0 on Cygwin

Rails 3.0 requires 1.8.7 or later. Both InstantRails and the (current, released) version of RubyInstaller bundle Ruby 1.8.6.  The files on the Ruby site seem to be a scavenger hunt.  While the next release of RubyInstaller will address this, we can run today with Cygwin.

On the right of the Cygwin page you will find a link to “Install Cygwin now”.  The UI for the installation is a little unusual, the basic process is documented here.

When you get to step 15 (yes, step 15), you will want to select the following:

  • ruby
  • sqlite3
  • libsqlite3-devel
  • wget
  • make
  • gcc
  • git
  • curl

Hint: I find it is easiest to first click on view (top right) to get a alphabetical list of all packages, then use the search box (top left) to filter the list, and then select the individual packages.

Cygwin itself provides a minimal shell window.  You can use the Console program to give you a nicer window.  This program doesn’t have a proper installer, instead you simply unzip the file you downloaded.  In the directory that produced, create a shortcut to the Console executable (right click on Console, select “Create shortcut”) and then drag that shortcut out to some place where you can find it later (e.g., desktop or quick launch toolbar).  Launch a Console window using this shortcut to see a Windows command prompt.  Select Edit -> Settings, and set the shell to C:\cygwin\bin\bash -l.  Select OK, then exit and relaunch the console and you now have a bash prompt.

Notepad++ is a free editor that understands Unix conventions.  Select and run the installer from here.  Launch Notepad++, and from there navigate to your bash configuration file:

  File → Open → Computer → c: → cygwin → home → yourname → .bashrc

Insert the following at the bottom:

alias edit='cygstart "/cygdrive/c/Program Files (x86)/Notepad++/notepad++.exe"'

You might need to adjust this path slightly.  On Windows XP, for example, I don’t seem to have the “ (x86)” part.  Once complete, save the file.  Now close any open Console windows and launch a new one.  Inside that console, execute the following commands:

wget http://rubyforge.org/frs/download.php/60718/rubygems-1.3.5.tgz
tar xzf rubygems-1.3.5.tgz
cd rubygems-1.3.5
ruby setup
cd ..
gem install sqlite3-ruby

Now you can install rails normally (gem install rails), or checkout the latest using git.  You can now edit files (e.g., config/database.yml) using the alias you set up:

edit config/database.yml

Results following the scenario described in AWDwR3 closely match results on Ubuntu.

February 02, 2010 02:10 AM

Ubuntu Geek


Administered by Joe. Content copyright by their respective authors.