Search Results: "reg"

29 November 2009

Aigars Mahinovs: New hardware planning

My primary workstation is a 3 and a half year old Dell XPS M1710 laptop and it is getting old the 320 Gb hard drive is getting small and slow, the 3 Gb or RAM (expanded from 2 Gb) look too small and screen is turning brown in one corner. Also dead or dying: keyboard (after cat+coffee incident), built-in speakers, battery, power adapter (twice replaced), DVD writer (rads but does not write any more) and fans (one replaced, one getting louder by the week). Also the video card is a bit slow for nowadays needs. So I set aside some money and started considering the options. In short, I could get another laptop OR get a regular computer for the same price but with twice the power. After considering all the laptop options up to 1000LVL, I decided to get a regular computer and if/when I ll need to travel I ll either take one of the old laptops with me or get a new netbook. Now comes the fun part choosing the components! So far my choices are as follows: And that is it a great setup that will last me a few years for around 700 LVL and it will have more partial upgradability than my laptop that I paid twice as much 3 years ago. Any tips? Did I miss anything? Is it likely that anything in the above list will cause me any trouble in latest Ubuntu/Debian installations? Update: got all of the above, except 500 Gb HDD of the same kind (faster, cooler, but higher price per Gb) and no Blueray (no drive in LV at the moment and did not want to wait a few weeks). The results are good, but I wish I would have gone with a 5 LVL more expensive video card that has a quieter cooler. Now I am buying a separate video card cooler for around 20 LVL that will be both more efficient and much quieter than the stock cooler I have Zalman VF1000 is the model. Has not arrived yet. P.S. It looks like updating a post in WP, automatically bumps it back into the Planet feed. Sorry :(

28 November 2009

Erich Schubert: Tracking Google image search in Analytics

I do not really understand why they don't support this themselves, but Google Analytics will not track keywords for Google image search. Instead it just shows up as "referrer". A site I'm webmaster for, Swing and the City, gets a lot of image search exposure (funnily for an image that is gone since August, Google also needs to work on their index, too), so it was a bit odd to have images.google.com show up as top referrer but not "organic search".Here's the code I use to fix this:
var r=document.referrer;
if(r.search(/images.google/)!=-1 && r.search(/prev/)!=-1) 
 var e=new RegExp("images.google.([^\/]+).*&prev=([^&]+)");
 var m=e.exec(r);
 pt._addOrganic("images.google","q",true);
 pt._setReferrerOverride("http://images.google."+m[1]+unescape(m[2]));
 ;
pt._addOrganic("maps.google","q",true);
pt._addOrganic("forestle.org","q",true);
pt._trackPageview();
Note that image search is more complicated than the maps and forestle search engines I also add for keyword tracking. The original query is encoded in the "prev" parameter, and the easiest (or only?) way to get working tracking is to use the ReferrerOverride function of analytics.Note: this is not a straight copy & paste, since I use this code in a compressed and encoded (for injection into the page via DOM ops) form. So no guarantee of syntax completeness. You'll need to adjust it to your variable naming anyway (I use "pt" instead of "pageTracker"). This is just to show you the use of unescape on the "prev" parameter for this purpose.

27 November 2009

Sandro Tosi: Reportbug has now less than 150 outstanding bugs!

Yes, finally we made it! Thanks in particular to Carl Chenet and to Luca Bruno we were able to reduce the reportbug bugs count below 150!

It was a very long road (when I joined the team there was 230-something bugs opened) and I hoped to achieve this some time ago, but the fought goals are the most relevant ones.

Of course, the just released version 4.9 contains quite some bug fixes and enhancements: if you have the chance, give it a look and report any regression or feature request you see fit, but not too much: I want to enjoy the barrier just broken :)

Stefano Zacchiroli: RC bugs of the week - week 12

RCBW - week #12 Here is this week squashes, by yours truly: The funniest part of this RCBW issue is probably that Luk has started handing over RC bugs to me: from time to time I just get a /query from him with bug numbers :-) In fact, this is more useful than one can imagine, because a considerable amount of time in periodic RC squashing is taken by triaging the RC bug list to choose your targets. Of course there is no guarantee that I'll be willing/able to fix handed-over bugs but, as a RM, Luk has evidently well-trained feelings about how hard would be to fix a given bug. All in all, for this week it worked well: 4 of the above 7 came from SchindlerLuk's list. ... and of course, let's welcome Simon on board! He is definitely doing a better job at spotting packages that should be removed from the archive rather than resurrected (potential negative effect that a NMU can indeed have on a package, de facto "saving" it from testing/release exclusion). In fact, the dilemma of "NMU vs Request Removal" raises various tricky questions. For instance, while we currently have pretty clear guidelines on how and, more importantly, when doing NMUs, we are more stringent on "Non-Maintainer Removals". Quoting from the Package Removal Requests wiki page:
    In all cases, if there is a maintainer and it's not you, mention the
    maintainer's opinion or, if you don't know it, mention how and when you
    tried to contact him.

It is of course reasonable to be more stringent on a measure that is way more invasive than a "simple" NMU. But if we start to rely on NMU-time as an important trigger for removal requests, then we could probably use a more aggressive and more distributed process for removals.

26 November 2009

Josselin Mouette: The new faces of Europe

This is it. We know the faces of people who will count in Europe during the 2009-2014 period. And we can count on them to make the EU weigh even less than it did until now. Jos Manuel Dur o Barroso, president of the European Commission. For 5 years, this ultra-liberal brought in his fanatic views of the free market, leading to unprecedented removals of regulations and legislations that could prevent large corporations to extort money from citizens. He holds a non-negligible responsibility on the (still unsolved) bank crisis of 2007. Yet, citizens voted en masse earlier this year for the EPP all across Europe, leading to his renewal. You get the commission you deserve. Herman Van Rompuy, president of the European Council. This is no secret that this transparent non-leader was the choice of Sarkozy after Tony Blair turned out to be an unsustainable choice. Yet, none of the 26 other members of the Council dared to raise a single finger against this choice. Sarkozy has completely lost his credit in France, but that doesn t prevent this council of cowards from trusting him, apparently. It s not as if there weren t good candidates, like Jean-Claude Juncker or Vaira V e-Freiberga. But having a competent, Europe-friendly president who actually knows his files and speaks many languages would have cast shadows on those who don t (see below). Catherine Ashton, foreign ministry of the EU. If there was any worse possible choice, I don t know which. This was the only position supposed to be affected to a socialist. And since the Labour party is still member of the PASD, despite their insane liberal economic policy and their full-scale paranoia leading to unprecedented freedom hunting in the UK, the position was given to someone from this party. And among them, they chose a person with a reputation of sloppiness and incompetence, who doesn t speak correctly a single foreign language. It is probable that, just like Van Rompuy s going to be Sarkozy s puppet, she s going to be the UK Foreign Office s servant. And we continentals all love the Foreign Office s policy, which is often in complete opposition to what the rest of Europe feels like. Jerzy Buzek, president of the European Parliament. You don t know him? Neither do I. A weak parliament goes with a weak parliament president. This way, the European Council has its hands free for behind-the-curtains arrangements, rather than letting the citizens representatives take action. Martin Schultz, president of the PASD group at the European Parliament. In order to ensure his place as president of the Parliament for the second half of the period, he betrayed his own people, and accepted any rotten compromise the EPP would propose for the key positions. Socialists have never been so weak in Brussels, and the total absence of leadership has something to do with it. Makes you proud to be European, heh? And of course you already know the real faces of Europe for the next years. Sarkozy, Merkel, Berlusconi, Brown. The main leaders from Western Europe, with their rotten governments who swore to slay any of the remaining personal freedoms in each of their countries. What a great image for EU in the world. What a great example to set. But again, you get the leaders you deserve. That s the whole point of democracy.

Russell Coker: Killing Bankers

John Robb wrote an interesting post about running web sites to target corporations such as Goldman Sachs [1] (such as tracking where it s employees live). Naked Capitalism has an interesting post about US investment banks getting preferential access to vaccines [2]. In the comments section some people state an intention to deliberately infect Goldman employees if they get sick. Rob Blackwell at American Banker writes about a popular iPhone game based around the idea of defending the White House from attacking bankers who try and steal money [3]. The game features a number of ways of killing bankers. It seems to me that the US bankers have gone way beyond the level of greed that will actually benefit themselves and their actions seem to indicate a death-wish. As the banks are supposedly too big to fail they should also be too big to be allowed to kill themselves, so maybe we need some sort of corporate suicide-watch. According to a blog post I read when someone is admitted to a psychiatric hospital after a suicide attempt they are watched by video at all times, inspected every 15 minutes, and regularly searched for sharp objects. Maybe part of the bail-out package should have included the US government inspecting the offices of bankers every 15 minutes, watching them at all times by video, and regularly searching them for toxic assets, derivatives that no-one understands, etc. It seems that the TSA employees would rather search for money than weapons [4], so they could be redeployed in searching bank offices. TSA employees never were much good at searching for bombs anyway [5].

25 November 2009

Erich Schubert: Identifying Link Spammers via nofollow links

I wonder if it's possible to identify link spammers (you know, these bots that mass-submit a link into as many blogs/etc they can find in order to boost their page rank) by the simple measure of how many of the links to their site are marked 'nofollow'.Say, a regular page should have less than 5% (and less than 20) nofollow links; a site that goes significantly above this value probably employs some spam bot.The only really hard thing is how to avoid attacks on a site using this ... say, I write a bot that spams links to Microsoft on as many sites as it can find that DO use 'nofollow', in order to get that site above the limit, and have google penalize it.So in general I don't think Google would automatically penalize such things, still it could be used to e.g. have a human check the destination site for useful content, and then only blacklist when it doesn't seem to be useful.P.S. Which BTW is a reason why some of the SEO "do nots" are bullshit: it would be too easy to deliberately use these to blacken a competitor. So a 'link farm' will at most do nothing to raise your ranking; but Google must not allow you to actually lower a competitors ranking by setting up a link farm to him!)P.P.S. On another side note: Who guarantees that Google actually ignores "nofollow" links? They could also just be assigned a lower weight or a penalty, so that a "nofollow" link from a strong site such as Wikipedia would still be worth a lot, while the average blog comments page link goes down to 0. Say a "nofollow" link from a PR 6 site is as much worth as a regular link from a PR 4 site, and PR 2 becomes PR 0. Would already do much of the trick in discouraging the use of blog spam bots. Because after all, ignoring the links on Wikipedia for page rank would be quite stupid. In German Wikipedia, the page contents are even "sighted" (aka: peer reviewed); this is a rather trustworthy source, especially when you take time effects into account. A link being constantly in Wikipedia on a popular page for more than a month very likely is good.

Russell Coker: Seatbelts and Transporting Computers

I ve just read an interesting post at Making Light about seat-belts [1]. In Australia seat-belt use is mandatory, you can be fined for failing to wear one and the police (who help clean up the mess when someone dies on the road) are apparently quite aggressive about enforcement. Even aside from the legal requirement the use of seat-belts is fairly ingrained in Australian culture, people tend to use them even when they won t get caught. One of the things I like to do in my spare time is to take unused computer gear from IT companies (which they regard as rubbish) and give it to home users for recreational and educational use. Due to that and my work for some smaller IT companies I ve helped many people load computer gear into their private cars and observed that most people will not take adequate care unless I coerce them. A CRT monitor tends to be large and heavy, you wouldn t want to get hit in the back of the head with one at 60Km/h. With some combinations of monitor and car you can fit a monitor in the front passenger foot-well, but usually the only place a monitor will fit is the back seat. The correct thing to do is to use the seat-belt to strap the monitor in place. It s most likely that the monitor stand (the only part that allows a seat-belt to be attached) would snap off in the event of a serious crash but this would at least slow the monitor down. Also don t put the monitor directly behind your seat if you can avoid it, put it behind the passenger seat. In a collision monitor might be able to push through your seat and cause you a back injury. Between 1992 and 2006 there were 78,000 acute computer-related injuries treated in US hospital emergency rooms [2]. The number of injuries caused by monitors peaked at 37% of the total in 2003 this was largely due to monitors falling on people. Even without the speed of a car a monitor can be a dangerous projectile. Hard drives have a lot of potential to cause damage, they are dense, hard, and the corners often aren t rounded. Storing them above the back seat behind the driver s head (as a friend once tried to do) is a really bad idea. Mythbusters showed that a box of tissues isn t going to kill you in a crash, but a hard drive is much more dangerous. The typical car glove box can store a few drives. If you need to transport a box full then the front passenger foot well is a reasonable place. If your car rolls then that would suck, but it seems that people usually die when they roll their car anyway so just try not to do that. A serious server (EG 2RU or bigger rack-mount) typically weighs 30Kg or more and is solidly constructed. The size and mass of such a machine makes it extremely difficult to safely store inside a car. The ideal place is the boot, but if that isn t an option then behind the passenger seat is the next best option. One final issue that I ve been wondering about is the safest option for laptops that are in use in a moving car. A 3Kg Thinkpad would have to hurt if it hit you in the back of the head at 60Km/h. The child-seat attachments are solid anchor points that can be used for other things. I wonder if a laptop security cable could be attached to one of the child seat points. According to an exhibit at a science museum I can throw a tennis ball at 115Km/h, so I presume that laptop security cables are designed not to break when someone swings the laptop at that speed. Therefore if a car was driving at a legal speed in Australia before crashing then a laptop security cable should be able to stop the laptop. Preventing the cable from injuring the passenger on the way would be the difficult part.

Gunnar Wolf: Source format 3.0 (quilt) for teh win!

My Debian QA page shows what I consider to be a huge amount of packages I am currently uploader for 207 packages. Why so many? There are many factors The main one is group maintenance (I'm directly responsible only for 19; of course, this should not mean I disregard the rest of them), the second one is regularity. By far, most of my source packages (177) match lib.*perl, followed by lib.*ruby with 20. Anyway A strong factor that allows the pkg-perl group to be successful in maintaining 1411 packages is the regularity of the task: Packaging Perl modules is usually as easy as running dh-make-perl on them (of course, not taking away the merit of packaging the few strange corner cases In Ruby-land, the landscape is quite different. The developer community is quite anchored in agile worldviews, which go beyond coding practices and all the way over to confronting the way most Free Software projects distribute their work. I have previously ranted presented informed and opinionated blog posts on this topic Ruby culture dictates the distribution via Ruby Gems, which are for many reasons not Debian friendly. Besides Gems, most projects have adopted Git for development tracking and are hosted under Github That's why I came up with Githubredir, which basically presents an uscan-friendly listing of tags for a given project. But if you develop in Git, you might want to split a project in its constituent parts for easier organization, without meaning that each subproject should be an independent project by itself, right? After all, that's what Git submodules are for. That's what happened with a great PDF generating library for Ruby, Prawn. Thing is, the three parts of the main project are required for the project to be built. Anyway, that was a great reason to move the package over to the new dpkg 3.0 (quilt) source format. And, yes, it is a straightforward move! If you have not yet done so, take a look at Raphael Hertzog' explanation+FAQ wiki page. It just works, and makes many things way easier. There are still some wrinkles in my packaging, like where I'm getting the orig tarballs from As the submodules are not presently tagged in any way, I was only able to download a snapshot of their respective current master branches. This is suboptimal, I know, but I have talked to the upstream author, and he confirms that for the next major version (which should not be long in coming) the tags will be synchronized, and things will be even cleaner. PS- I love Hpricot. To get the numbers for my QA page, I just had to get three dirty but useful arrays:
  1. require 'hpricot'
  2. require 'open-uri'
  3. url = 'http://qa.debian.org/developer.php?login=gwolf&comaint=yes'
  4. doc = Hpricot(open(url))
  5. tot = ( (doc / 'table' )[1]/'tr').map row
  6. (row%'td' % 'a').inner_html rescue nil .select i i
  7. team = ( (doc / 'table' )[1]/'tr').map row
  8. (row%'td' % 'span.uploader' % 'a').inner_html rescue nil .
  9. select i i
  10. mine = ( (doc / 'table' )[1]/'tr').map row
  11. (row%'td' % 'span:not(.uploader)' % 'a').inner_html rescue nil .
  12. select i i

And work from the three very simple lists there i.e. tot.select pkg pkg =~ /lib.*perl/ .size gives me 177.

Erich Schubert: Google Wave rolling out?

When I got my Google Wave account, it took the invitation about a week to arrive. A few days ago, I got my first own invites, and invited some colleagues (in an attempt to actually find a use for Google Wave beyond "rich media live messaging"). Within a few minutes they were "in". Now I just got my second set of invites. So is Google Wave now getting ready for mass opening, rocketing user numbers?As you might have already guessed, I'm not convinced by Google Wave. It's technically interesting and well-done. The demos are all nice. It's just that the UI in the browser is a bit fragile and cumbersome, and the big question so far is:
What does Google Wave allow you to do that you couldn't do before?
To me, there has been little actual use so far. Wave can do everything, but isn't optimal in any of them: Yes, I'm aware that you should differentiate between the protocol and the ui. Still pretty much everything is currently designed for the web browser with full JavaScript and Flash capabilities.Of course this isn't the end yet, Google Wave will evolve. Maybe into something cool, maybe it will remain just a niche thing. Maybe some cool apps will just use Wave as protocol. But I figure, I'll mostly wait for these things to happen first before I become a frequent user of Wave.The biggest thing I see is the "spam" (this especially includes 'Quiz', Mafia Wars and similar Scamville type of 'apps' that surely will show up in no time, once Wave is open to the public). What will Wave provide to me to handle this flood of worthless information that I'm getting more and more?P.S. Please don't bother to ask for invitations to Wave.P.P.S. here's how to replace the odd scrollbars with the regular OS scrollbars with a really simple user style (CSS).

Jo Shields: Taking a back seat

I m making a few changes to my online interactions. Some things, however, will NOT be changing. Thank you for your time.

Biella Coleman: Ninja Mind Tactics

Over the years far too many years I have occasionally chronicled the slow death of my mother, a death of mind, personality, really person that comes with Alzheimers. She has officially had the illness for 7 years now but had symptoms prior to this time, in the form of perceptual disturbances that are the defining feature of the rare type of Alzheimers she has, Benson s syndrome. As her illness progressed and we saw her doctors they would always ask: what other illnesses or health problems does Vera have? And I would answer none. Without fail and almost immediately, the inquiring doctor would respond back none? often with a slightly raised eyebrow, the one word uttered not to challenge the veracity of my answer, but used instead to convey another meaning, often bathed in some mixture of compassion and pity. It was an acknowledgement of the future that awaited us, basically stating with no other illness, this is going to be on heck of long and difficult haul of a life experience, which has indeed been the case. However, after nearly two years of being bed bound in a nursing home, physical health problems are now creeping in and my mother is descending into different type of hell, especially since she can no longer communicate the physical pain she might be in. The words she knows are few: no and a few other words (she likes to tell people they are loco and indeed I can only imagine how true this accusation of crazy is given that we are keeping her alive against her wishes). Her consistent and persistent wailing, agitation and crying do of course communicate the depth of suffering this being the hardest thing to bear witness to. She does have periods of calm, coaxed in part by the drugs she is given but these are not enough to override the pain she and we feel. About two months ago, her body started to give, the first problem being a fracture that led to significant internal bleeding and required a blood transfusion and a brace she is still wearing. A few weeks ago when I was visiting her, she basically developed these black and red welts on the bottom of her feet in a manner of two days, so instead of boarding a plane to NYC, I took her to the emergency room and stayed a full week while she was pumped with intravenous antibiotics. At first, doctors thought it might be gangrene, which was mortifying mostly because of all the associations that come with it. The doctors determined that it was not in fact gangrene but that she has a bone infection technically called osteomyelitis a tricky condition to treat that requires at minimum 45 days of IV antibiotics. The hospital/doctors who had originally determined she would stay there for her treatment, changed their mind unexpectedly and announced their intention to ship her to a long-term care facility, which in theory we were not opposed to, except for the fact that it is very far from where my sister lives, and also it is a facility we had not verified for ourselves. On top of it, we knew she had a legal right stay in the hospital (though some doctors informed us otherwise). We preferred the hospital because it is so close to our house, we would be able to hire someone to visit her when my sister is at work, and we suspect that she will have additional complications from 45 days of IV abx so why not stick around and receive treatment and care from the same internist who had been nothing but a great doctor. The story took a turn toward the surreal when the infectious disease doctor decided to release her to her nursing home with a treatment of oral antibiotics, even though every single doctor we saw from the emergency room doctor to the weekend internist who subs for her regular doctor, repeatedly informed us the only treatment is IV antibiotics for at least 45 days, possibly more (which is the normal treatment protocol).
Since so many people don t know how to maneuver complaints and take action in hospitals, doctors and other staff can exploit this to make medically dogdy decisions (which happened in fact when a feeding tube was put into my mom, but that is another long story I don t think I ever wrote about here). I am sure also that some doctor s are less willing to take questionable action with certain patients depending on the class and background of their family members but I bet the first impression I give off to doctors, to invoke Erving Goffman s work on self-presentation, is not someone willing to take swift action. In the hospital, I have the sense that most doctors don t take me all that seriously, probably thinking that I am 5 foot slacker/artistic type that I admittedly do look like as I dress in jeans, a hoodie and a winter cap because the hospitals are so effing, ridiculously cold in PR (and I can t help my height nor the fact that I look 24 or so). So it usually comes as a surprise when I bring out my mind ninja tactics developed over years of being and thinking like an academic, whose craft is research, whose passion is arguing, and for some of us who are politically inclined, who love the challenge of righting wrongs. So when this happened I contacted lawyer-friends, talked to the social worker and promptly complained to the head of client services/ombudsperson and made a stink but of a very particular sort: it was packaged in massive tact. I was very deferential (especially since those folks have nothing to do with the mess, they are there to help and are your allies), repeatedly pointed out how the doctor s decision amounts to medical negligence, and made it clear that I was willing to take action, leave my work if need be and get my ass down there, and casually mention how in the 5 hours between their decision and my phone calls, I have already taken action (how I have contacted lawyers on the island, etc). Needless to say, the hospital decided that my mom is staying put in the hospital and I am relieved. But this solace is only of the tiniest sort. I am still reeling from the absurdity of her condition and her suffering. She is only alive because of a feeding tube that I am opposed to, her state of being a modern day zombie that in reality, or at least from my perspective perpetuates her suffering. For this reason, truth be told and at one level relieved that her body is finally failing, that there is a chance, a light at the end of this lonely, now horrific tunnel that her life will end sooner than later. This, however, makes it no easier emotionally nor ethically as it is my mother who must journey alone through significant pain and suffering as her body now goes elsewhere a journey we can watch in person yet are powerless in its face.

Biella Coleman: Ninja Mind Tactics

Over the years far too many years I have occasionally chronicled the slow death of my mother, a death of mind, personality, really person that comes with Alzheimers. She has officially had the illness for 7 years now but had symptoms prior to this time, in the form of perceptual disturbances that are the defining feature of the rare type of Alzheimers she has, Benson s syndrome. As her illness progressed and we saw her doctors they would always ask: what other illnesses or health problems does Vera have? And I would answer none. Without fail and almost immediately, the inquiring doctor would respond back none? often with a slightly raised eyebrow, the one word uttered not to challenge the veracity of my answer, but used instead to convey another meaning, often bathed in some mixture of compassion and pity. It was an acknowledgement of the future that awaited us, basically stating with no other illness, this is going to be on heck of long and difficult haul of a life experience, which has indeed been the case. However, after nearly two years of being bed bound in a nursing home, physical health problems are now creeping in and my mother is descending into different type of hell, especially since she can no longer communicate the physical pain she might be in. The words she knows are few: no and a few other words (she likes to tell people they are loco and indeed I can only imagine how true this accusation of crazy is given that we are keeping her alive against her wishes). Her consistent and persistent wailing, agitation and crying do of course communicate the depth of suffering this being the hardest thing to bear witness to. She does have periods of calm, coaxed in part by the drugs she is given but these are not enough to override the pain she and we feel. About two months ago, her body started to give, the first problem being a fracture that led to significant internal bleeding and required a blood transfusion and a brace she is still wearing. A few weeks ago when I was visiting her, she basically developed these black and red welts on the bottom of her feet in a manner of two days, so instead of boarding a plane to NYC, I took her to the emergency room and stayed a full week while she was pumped with intravenous antibiotics. At first, doctors thought it might be gangrene, which was mortifying mostly because of all the associations that come with it. The doctors determined that it was not in fact gangrene but that she has a bone infection technically called osteomyelitis a tricky condition to treat that requires at minimum 45 days of IV antibiotics. The hospital/doctors who had originally determined she would stay there for her treatment, changed their mind unexpectedly and announced their intention to ship her to a long-term care facility, which in theory we were not opposed to, except for the fact that it is very far from where my sister lives, and also it is a facility we had not verified for ourselves. On top of it, we knew she had a legal right stay in the hospital (though some doctors informed us otherwise). We preferred the hospital because it is so close to our house, we would be able to hire someone to visit her when my sister is at work, and we suspect that she will have additional complications from 45 days of IV abx so why not stick around and receive treatment and care from the same internist who had been nothing but a great doctor. The story took a turn toward the surreal when the infectious disease doctor decided to release her to her nursing home with a treatment of oral antibiotics, even though every single doctor we saw from the emergency room doctor to the weekend internist who subs for her regular doctor, repeatedly informed us the only treatment is IV antibiotics for at least 45 days, possibly more (which is the normal treatment protocol).
Since so many people don t know how to maneuver complaints and take action in hospitals, doctors and other staff can exploit this to make medically dogdy decisions (which happened in fact when a feeding tube was put into my mom, but that is another long story I don t think I ever wrote about here). I am sure also that some doctor s are less willing to take questionable action with certain patients depending on the class and background of their family members but I bet the first impression I give off to doctors, to invoke Erving Goffman s work on self-presentation, is not someone willing to take swift action. In the hospital, I have the sense that most doctors don t take me all that seriously, probably thinking that I am 5 foot slacker/artistic type that I admittedly do look like as I dress in jeans, a hoodie and a winter cap because the hospitals are so effing, ridiculously cold in PR (and I can t help my height nor the fact that I look 24 or so). So it usually comes as a surprise when I bring out my mind ninja tactics developed over years of being and thinking like an academic, whose craft is research, whose passion is arguing, and for some of us who are politically inclined, who love the challenge of righting wrongs. So when this happened I contacted lawyer-friends, talked to the social worker and promptly complained to the head of client services/ombudsperson and made a stink but of a very particular sort: it was packaged in massive tact. I was very deferential (especially since those folks have nothing to do with the mess, they are there to help and are your allies), repeatedly pointed out how the doctor s decision amounts to medical negligence, and made it clear that I was willing to take action, leave my work if need be and get my ass down there, and casually mention how in the 5 hours between their decision and my phone calls, I have already taken action (how I have contacted lawyers on the island, etc). Needless to say, the hospital decided that my mom is staying put in the hospital and I am relieved. But this solace is only of the tiniest sort. I am still reeling from the absurdity of her condition and her suffering. She is only alive because of a feeding tube that I am opposed to, her state of being a modern day zombie that in reality, or at least from my perspective perpetuates her suffering. For this reason, truth be told and at one level relieved that her body is finally failing, that there is a chance, a light at the end of this lonely, now horrific tunnel that her life will end sooner than later. This, however, makes it no easier emotionally nor ethically as it is my mother who must journey alone through significant pain and suffering as her body now goes elsewhere a journey we can watch in person yet are powerless in its face.

Russell Coker: Computer Security and Political Censorship

I ve just been disappointed to read about the DNI (Defence in the National Interest) web site closing down [1]. The final blog post says In the meantime, I ll leave everything up unless we start having more security problems , but unfortunately they have had a number of security problems in the past. I doubt the ability of a Wordpress installation to remain unscathed on the Internet if it s not upgraded regularly. So I think it s only a matter of time before a new bad Wordpress bug is discovered and DNI goes offline for good. In the past I did idly consider volunteering to help them run their site, but apart from a lack of spare time there is the issue that a number of their policy positions are things that I strongly disagree with. I can agree with paleo-cons on a number of issues, but there are also significant areas of disagreement. So it seems that the combination of a lack of skilled system administrators and a lack of good security in their software is reducing their ability to spread their message. While the site content is going to be mirrored on other sites the URLs will break and Google will give it a lower rank. In many ways losing Google ranking is a way of being silenced. I wonder whether the apparent lack of moderate-right political expression on the Internet is partly due to that demographic having less IT skills than the groups who have centrist to left-wing political views and those who have extreme-right views. Naturally anyone can pay to have someone run their web site, but having to pay raises the barrier to entry and eliminates some of the potential contributors. I think it s a bad thing for democracy if the only people who get their voices heard are those who have significant amounts of money or technical skill. One of my hopes for the SE Linux project was that it would increase the longevity of servers while also decreasing the amount of money required to run them. But of course if you have buggy PHP code then there s not much SE Linux can do to help you.

24 November 2009

Russell Coker: Car Drivers vs Mechanics and Free Software

In a comment on my post about Designing Unsafe Cars [1] Noel said If you don t know how to make a surgery, you don t do it. If you don t know how to drive, don t drive. And if you don t know how to use a computer, don t expect anybody fix your disasters, trojans and viruses. Later he advocates using a taxi. Now I agree about surgery apart from corner cases such as medical emergencies in remote places and large-scale disasters. I also agree that it s good to avoid driving if you aren t very good at it (that would be much better than the current fad of sub-standard drivers buying large 4WD vehicles). But I don t think that people who lack computer skills should avoid using computers. When cars were first invented everyone who owned one was either a mechanic or employed one. Driving a car often involved being well out of range of anyone else who might know how to fix it, so either the car owner or their chauffeur had to be able to fix almost any problem. As the car industry evolved the level of mechanical knowledge required to own and operate a car has steadily decreased. I expect that a significant portion of drivers don t know how to top up the oil or radiator water in their car and probably don t know what is the correct pressure for air in their tires. To a large extent I don t think this is a problem, owning a car involves regularly taking it to be serviced where professionals will (or at least should) check every aspect of the car that is likely to fail. If I used my windscreen-washer less frequently I could probably avoid opening the bonnet of the car between scheduled services! When budgeting for car ownership you just have to include regularly spending a few hundred dollars to pay for an expert to find problems and fix them with of course the occasional large expense for when something big breaks. When the computer industry matures I expect that the same practice will occur. Most people will buy computers and plan to spend small amounts of money regularly to pay people to maintain it. Currently most older people seem to plan to have a young relative take care of their PC for them essentially free mechanic services. The quality of such work will vary of course, and poorly designed OSs that are vulnerable to attack may require more support than can be provided for free. Due to deficiencies in city design it is almost essential to drive a car in most parts of the US and Australia as opposed to countries such as the Netherlands where you can survive quite well without ever driving. When a service is essential it has to be usable by people who have little skill in that area. It would be good if driving wasn t necessary, I would be happy if I never drove a car again. The need to use computers however will continue to increase. So we need to make them more available to users and to support users who can t disinfect computers etc. The only skill requirements for using a computer should be the ability to use a keyboard and a mouse! This requires a new industry in supporting PCs. Geek Squad in the US [2] seems to be the organisation that is most known for this. I expect that there will be multiple companies competing for such work in every region in the near future, just as there are currently many companies competing for the business of servicing cars. We need support for free software from such companies. Maybe existing free software companies such as Red Hat and Canonical can get into this business. One advantage of having such companies supporting software is that they would have a strong commercial incentive to avoid having it break unlike proprietary software vendors who have little incentive to do things right. The next issue is the taxi analogy. Will software as a service with Google subsidising our use of their systems [3] take over any significant part of the market? Of course the car analogy breaks down when it comes to privacy, no-one does anything remotely private in a taxi while lots of secret data is stored on a typical home computer. Google is already doing some impressive security development work which will lead towards low maintenance systems [4] as well as protecting the privacy of the users to the extent that you can trust whoever runs the servers. My parents use their computer for reading email, browsing the web, and some basic wordprocessing and spreadsheet work. The mail is on my IMAP server so all I need is to have some way to store their office documents on a server and they will pretty much have a dataless workstation. Moving their collection of photos and videos of their friends and relatives to a server will be a problem, transferring multiple gigabytes of data on a cheap Australian Internet access plan is a problem.

23 November 2009

Russell Coker: Designing Unsafe Cars

The LA Times has an interesting article about problems with Toyota and Lexus cars [1]. Basically there are problems where the cars have uncontrolled acceleration (there seems to be some dispute about whether it is due to engine management or the floor mat catching the accelerator pedal). When that happens the brakes don t work (due to the vacuum power-assistance for brakes going away when the engine is at full power) and a terrible crash seems inevitable. There are suggestions that the driver should shift the car to neutral and discussion about how the Toyota gear selection makes that difficult. Some years ago I was driving an automatic car on a freeway at 100Km/h and the engine stalled (due to a problem with the LPG system). I had become used to never touching the gear lever while driving so the possibility of moving the gear lever one notch to neutral didn t occur to me. With a dead engine in gear the car slowed rapidly which is quite dangerous when surrounded by 100Km/h traffic. Fortunately I was able to swerve into the emergency lane (across one lane of active traffic) before the car slowed much. That was in a relatively controlled environment with a gear shift mechanism that is a lot simpler than that which is common in some of the more expensive cars. According to Wikipedia the maximum speed limit in the US is 80M/h [2]. It seems to me that Toyota is being irresponsible by selling cars that can sustain 120M/h, while the probability of surviving a crash at 80M/h is quite low, it seems likely to be a lot greater than the probability of surviving a crash at 120M/h. Also if a car is out of control at 80M/h then the driver will have a lot more time to work out how to put the engine in neutral or turn it off the lower speed will extend the time available by more than 50% because bends in the road can be better handled at 80M/h. It seems to me that it would be a feature for the car owner to have the car limited to a speed that is not much greater than the speed limit. According to Wikipedia the highest speed limit in Australia is 130Km/h (in NT), but it s 110Km/h in all places where I have driven. If my car had a governor to limit the speed to 115Km/h and a switch to change the limit to 135Km/h in case I ever drive to the NT then it would not affect my driving patterns (I rarely drive on roads with a 100Km/h limit and almost never drive on roads with a 110Km/h limit) but it could reduce the probability of things going horribly wrong. Also one thing to note is that last time I checked car tyres sold in Australia were only required to operate safely at speeds below 190Km/h (118M/h), so a Lexus that went out of control at 120M/h in Australia might risk a tyre blow-out which admittedly would only make things marginally worse. A governor for the reverse gear would also be a good feature. Some time ago a granny got her foot stuck on the accelerator in a car park and caused serious damage to her car and a parked car after passing close by where I was standing. I don t think that there is a real need to do more than 5Km/h in reverse, limiting the speed would give pedestrians a better chance of escaping parking accidents. One serious problem with some of the Toyota and Lexus vehicles is that it apparently takes 3 seconds to turn the engine off in an emergency! I ve been driving for almost 20 years and experienced a number of dangerous situations, all of which were essentially resolved (for better or worse) in significantly less than 3 seconds. A 3 second delay is as good as a 1 hour delay for safety critical systems. Also if the accelerator and brake pedals are pressed at the same time then the brake should take precedence. It seems quite obvious that whenever both pedals are pressed hard then the driver would probably prefer hard braking to hard acceleration. If you look at industrial machinery (robots, lathes, etc) you will always see big red buttons (or whatever color is used for emergency stop in your region) that are clearly marked and obvious to the workers and to bystanders. Escalators have less obvious red buttons but they can still be shut down in an emergency. It seems to me that there are potential benefits to having an emergency shutdown button in a car, maybe in a position that is accessible to the front-seat passenger in case the driver is incapacitated. Such a shutdown button wouldn t do anything extreme such as fully activating the brakes (which would be very bad on a road that has high-speed traffic), but would prevent acceleration (with some sort of hardware control to avoid software problems) and maintain power to the brakes and the steering. One thing that needs to be considered is that people tend not to do the most logical things when in an emergency situation. It needs to be possible to do whatever is necessary to save your life without any great deal of thought. Pushing a big red button is easy, holding down the on button for 3 seconds or even navigating a gear shift to an uncommon setting is a lot more difficult. It seems to me that there is also an issue of driver training. If putting an automatic car into neutral and cruising to a stop was part of the test for new drivers then the results of such car problems might not always be so bad. But I don t expect there to be any serious changes to driver training or car design. People are too accepting of road deaths. Don Marti has expressed a plan to never buy a vehicle with an automatic transmission because of this issue [3]. But the number of new vehicles being sold with a manual transmission is steadily reducing. An automatic transmission allows better performance (F1 cars have used them for ages), better fuel efficiency (you could never make a manual Prius), a more comfortable ride (the Hybrid Lexus keeps winning the Australian Luxury Car of the Year award), and allows less skillful drivers. Unless Don wants to ride a moped or drive an old car then I expect that he will be forced to get an automatic transmission. Then of course he will still be at risk of other people having car problems (the LA Times article mentions a third party being killed after an out of control car hit them). Also I expect that the extra safety features that are implemented in luxury vehicles such as the Lexus would save a few lives, they should save enough to outweigh the number that are lost on the rare occasions when the car goes out of control. Other luxury cars such as the Mercedes S class have great safety features and don t have a history of going wrong in a newsworthy way. A second-hand S Class Mercedes was surprisingly cheap in the UK last time I checked, cheap enough to make it worth considering the importation of one to Australia. But my solution to these problems is to try and minimise my driving. A 1.5 ton Lexus driving out of control at the maximum speed possible in urban streets won t do much damage to a 20 ton tram.

22 November 2009

Russell Coker: Planning Servers for Failure

Sometimes computers fail. If you run enough computers then you encounter failures regularly. If the computers are important then you need to plan for the failure. An ideal situation is to have redundant servers. Misconfigured clusters can cause more downtime than they can prevent and it requires more expensive hardware to properly implement a cluster (you need at least two servers and hardware to allow a good node to kill a bad node) as well as more time (from people who may charge higher rates). Most companies don t have redundant servers. So if you have some non-redundant servers there seem to be two reasonable options. The first one is to use more expensive hardware on a support contract. If a server is really important to you then get a 24*7 support contract it only takes an extra mouse click (and a couple of thousand dollars) when ordering a Dell server. I am not going to debate the relative merits of Dell vs IBM vs HP at this time, but I think that most people will agree that Dell offers significant advantages over a white-box server, both in terms of quality (the low incidence of failure) and support (including 24*7 part replacement). The second option is to have a cheap server that can be easily replaced. This IS appropriate for some tasks. For example I have installed many cheap desktop systems with two IDE disks in a RAID-1 array that run as Internet gateway systems for small businesses. The requirements were that they be quiet, use little power (due to poorly ventilated server rooms / cupboards), be relatively reliable, and be reasonably cheap. If one of those systems suddenly fails and no replacement hardware is available then someone s desktop PC can be taken as a replacement, having one person unable to work due to a lack of a PC is better than having everyone s work impeded by lack of Internet access! This ability to swap hardware is dependent on the new hardware being reasonably similar. Finding a desktop PC in an office today which can support two IDE disks and which has an Ethernet port on the motherboard and a spare PCI slot is not too difficult. I expect that in the near future such machines will start to disappear which will be an incentive for using systems with SATA disks and USB keyboards as routers. This evening I had to advise someone who was dealing with a broken server. The system in question is mission critical, was based on white-box hardware, and had four SATA disks in a LVM volume group for the root filesystem. This gave a 600G filesystem with less than 10G in use. If the person who installed it had chosen to use only a single disk (or even better two disks in a RAID-1 array) then there would have been a wide range of systems that could take the disks and be used to keep the company running for business tomorrow. But finding a computer that can handle four SATA disks is a little more tricky. Of course running a mission critical server that doesn t use RAID is obviously very wrong. But using four disks in an LVM volume group both increases the probability of a data destroying disk failure and makes it more difficult to replace the computer itself. Some server installations are fractally wrong.

21 November 2009

Eddy Petrișor: Vote at the presidential elections!

Yesterday was the last day of presidential campaign, the most poisonous campaign since 1989, when the communist rule has fallen ... or so says history.

This campaign period was one of firsts of all kinds, mostly bad.

This is the first presidential campaign:This is the first time I realise how important it is for everybody to go and cast a vote for the candidate they prefer to dilute the effects of the frauds.

Go and vote for the candidate you agree the most!

Don't cast a "useful vote", otherwise you will disservice your prefered candidate in three ways:

Don't forget, tomorrow, the 22nd of November spare some 15-30 minutes and vote for the person that represents you most! Don't follow the flock, vote sincerely!


Vote, because your vote counts! Otherwise why would they bother to convince you to vote for them?

20 November 2009

Steve Kemp: I am not stupid, you know. They cannot make things like that yet.

I've really enjoyed reading some of Matthew Garrett's entries about legacy PC hardware features - specifically the cute hack involving A20 and the keyboard controller. Reading things like that really takes me back. I remember when the z80 was cutting edge, and I discovered you could switch to a whole new set of shadow registers via "exx" and "ex af,af'". I remember using undocumented opcodes, and even now I can assemble and disassemble simple z80 machine code. (Don't get me started on the speedlock protectors and their fiendish use of the R register; that'll stick in your mind if you cracked it. I did.) I remember being introduced to the PC, seeing subdirectories appear in MS-DOS 2.0, network redirectors appearing in DOS 3.x, and support for big hard drives appearing in MS-DOS 4.0. I remember the controvosy over the AARD code in the betas of Windows 3, and the focus that was given in the book "Undocumented DOS" which mostly focussed upon the "list of lists". (At that time I'd have been running GEM on an IBM XT with hercules (monochrome) graphics.) I remember learning about that a .COM file was a flat image, limited to 64k which loaded at offset 100h, to accomodate the PSP (program segement prefix) for compatbility with CP/M (something I've never seen, never used, and known nothing about. I just know you could use the file control blocks to get simple wildcard handling for your programs "for free") I wrote simple viral code which exploited this layout, appending new code to end of binary, replacing the first three bytes with a jump to the freshly added code. Later you could restore the original bytes back to their original contents and jump back to 100h (I even got the pun in the name of 40Hex magazine.) I recall when COM files started to go out of fashion and you had to deal with relocation and segment fixups. When MZ was an important figure. I even remember further back to when switching to protected mode was a hell of tripple-faults, switching back from protected mode to real mode was "impossible" and the delight to be had with the discovery and exploitation of "unreal mode". All these things I remember .. and yet .. they're meaningless to most now, merely old history. Adults these days might have grown up and reached age 20 having always had Windows 95 - never having seen, used, or enjoyed MS-DOS. How far have we come since then? In some ways not far at all. In other ways the rise of technology has been exponential. Back then when I was doing things I'd not have dreamed I could update a webpage from a mobile phone whilst trapped upon a stalled train. There are now more mobile phones than people in the UK. In some ways that's frightening - People miss the clear seperation between home & work for example - but in other ways .. liberation. I have no predictions for the future, but it amazing how far we've come just in my lifetime; and largely without people noticing. The industrial revolution? Did that happen with people mostly not noticing? Or was there more concious awareness? Food for thought. ObFilm: Terminator

Matthew Garrett: Why SHMConfig is off by default

Bastien mentioned the Chromium OS xorg.conf file, which includes an irritating wart - namely, Option "SHMConfig" "on". This tells the Synaptics touchpad driver to export its configuration data to a shared memory region which is accessible to any user on the system. The reason for this is that in the past, there was no good way for configuration information to be passed to input drivers through the X server at runtime. This got fixed with the advent of X input properties, and synaptics can now be configured sensibly over the X protocol.

But why was it off by default? Because, as I said, the configuration data is exported to a shared memory region which is accessible to any user on the system. And while it contains a bunch of information that's not terribly interesting (an attacker being able to disable my touchpad or turn on two finger emulation may be a DoS of sorts, but...), it also contains some values that are used to scale the input coordinates. Which means that anyone with access to the SHM region can effectively take control of your mouse. The current position is exported too, so they can also track all of your mouse input.

Now, this isn't stunningly bad. The attacker can only do this while you're touching the pad. You'll see everything that happens as a result. There's no way to fake keyboard input. They need to be running code as another user on the system - if they're running as the logged in user then they can already do all of this. And for a device as single-user as Google seem to be looking at, it's obviously not a concern at all.

But there's still plenty of places on the web suggesting that you enable SHMConfig, and various distributions that ship with it turned on (Ubuntu on the Dell mini used to, but got turned off after I contacted them about it). It's absolutely fine to do this as long as you're aware of the security implications of it, but otherwise please use X input properties instead.

Next.

Previous.