The Design and Implementation of laffer1

U2 brought in the most money in 2009

2010-02-28T21:50:00.000Z

According to this BBC article, U2 brought in the most money last year. I can't speak for others, but the Chicago concert rocked.

Games

2010-02-28T15:13:00.000Z

I've noticed a new pattern among game developers. Software has always been licensed, but now we're only buying unkown length licenses to these products. With a game like World of Warcraft, I know I'm subscribing month to month, but I don't know if they will keep running the server indefinetely. Eventually the game will die. WIth a MMORPG, this is acceptible and inevitable. However, other games like the new Assassin's Creed 2 require a constant Internet connection to play. They actually download part of the game engine on each load. If they decide to turn off the servers or go out of business, you lose access to the game forever. This is the same problem that happened on the Xbox. I bought an Xbox to play games online. Soon, EA started turning off sports titles servers. They want you to buy the new title each year. That means I'm paying $50 a year to keep playing and the game experience changes each year. Perhaps with an NBA game, I want to play the Pistons in 2004 instead of 2010. I realize it costs some money to run servers, but this is rediculous. Either they build in the cost to run the game servers for several years into the game or they warn people that the servers are only guranteed up for a year.

I'm in favor of explicit minimums on the boxes (by date). I want to know if the game comes out March 2010 that it will work until at least March 2011. I also want to know in February 2011 that I have a month to play possibly. It dramatically changes how much I'm willing to pay for a title. If it's so important, they can add a sticker if they extend the time frame to the box. This is only reasonable. With other subscription models, I know how long I have. SInce I'm obviously paying for server time now, I should know how long it lasts.

I often buy games on Steam. I know that if Valve decides to pull the plug, I could lose all those games. It's a risk I've chosen to take. WIth some games, I don't know how long i have now and in a retail box from a store like best buy, I expect to play the game for several years. I still play age of empires 2. I love it. The game doesn't even run on 64bit windows, but I still play! I even run 32bit windows just to play. What if I like a game? Will I be cut off forever?

Planning IT Projects

2010-02-25T04:30:00.000Z

I started wriing this entry with a real world experience I had today. Instead, I think I'm just take some constructive points from the situation.

When making a big picture roadmap with many IT projects, understand what each part is trying to accomplish. You don't need the how for the first draft, but you do need the why.
Don't create three level deep diagrams of one component in the system that interoperates with other peices not even discussed yet.
It's ok to talk about when you need a project complete, but don't start makin details timelines or final deadlines until the requirements are known. You can't plan how long something will take when you don't even know what it is you're planning. If you have a hard deadline, start with absolute necessities first. Good software can always be enhanced.
Don't assume everyone is against your idea.
When you're asking someone to spend a great deal of money on a project, take the time to write down why you need it.. It really is the least you can do.
User stories are one way to obtain an initial list of requirements, but they do not replace a techical oriented view before one starts work.
When writing user stories, you must capture ALL of them or it is useless. One user case left out could dramatically change the requirements for a project. Programmers do write themselves into corners.
Reading one book will not make you a good project manager. Reading this list won't either.
Don't trust any one website for information on software. They can be wrong. Some IT websites suggest products because vendors paid them or gave them an insentive. Others just have a bias. For example, I might suggest BSD because I prefer it to Linux. That doesn't mean Linux isn't useful in many environments.
Programmers need to sleep sometimes.

The other side of the coin

2010-02-25T04:08:00.000Z

I just read a blog for CIOs about planning IT projects. In this blog, it suggested that CIOs or a "core" team plan deadlines for large projects. As a software engineer who essentially is the project manager in my office, I found this article disturbing. The reasoning behind the aritcle makes sense from a CIO's perspective given several other requirements.

The company must have one goal in mind with the project. Personel cannot be "stolen" for other projects. There cannot be fire drills every day. Most importantly, the CIO needs to understand how long it will take to create a project. A reasonable time frame must be defined. My experiences have shown that management has no idea how long projects take. That poor, young project manager might not have a good idea how to do estimates yet, but (s)he does know how large a project is.

In some companies, this approach would work well. It will not work in all companies. The approach is getting used more frequently in my company. The net result is dropping everything and putting everyone on a task. It does get that one task done as quickly as possible, but the quality of the project suffers. Further, it puts every other project behind schedule. Sometimes project managers are right. Things happen during development. Odd bugs pop up. New requirements are brought in during development.

While I'm on the subject, it's also important to have clear goals for a project at the beginning. This approach reminds me of the waterfall method. WIthout a very clear, well thought out specification, large software projects will always fail or at least be delivered well after the due date regardless of who sets the timeline. You get some leway with agile methods, but you still need to know what you're trying to make.

I agree with one point. It's important to have clear goals defined for your IT staff. Tell them what you need this year. Give them time to implement long term solutions. It will save you time and money.

I better stop here.

HTML cleaning in Java

2010-02-17T20:23:00.000Z

HTML Cleaner

JTidy

TagSoup

JTidy cannot create valid XHTML strict pages. A combination of HTML cleaner and JTidy cannot make valid XHTML strict pages for some input. double br tags, some attributes like height, and duplicate id attributes cause problems.

Windows vulnerability confirmed

2010-02-10T14:05:00.000Z

http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0232

http://www.microsoft.com/technet/security/advisory/979682.mspx

Microsoft has issued a fix. This was for the previously mentioned NT 3.1 through Windows 7 vulnerability I talked about in my blog.

DNS and DNSSEC

2010-02-06T16:57:00.000Z

About ten years ago, dnssec was invented to deal with a problem plaguing the Internet. There is no trust in the DNS system.

Background

Many people might have heard the term DNS, but never thought about what it is. DNS, or the Domain Name System, is the process by which a domain name like midnightbsd.org is translated into an IP address 70.91.226.201. Without this system, one would need to type in IP addresses to access websites, send email, or chat online.

The system was invented at a simpler time when people trusted each other on the Internet. This was before worms, massive spam, or websites.

Today, many people try to impersonate others on the Internet or worse yet, their websites. You could create a DNS poisoning attack so that a user accessing a DNS server to lookup google.com is redirected to a fake site. This site could log information and pass requests to the real google.com through a proxy. The user may never know the difference.

Systems like DNSSEC validate DNS queries by a trust relationship.

Using DNSSEC

Individuals don't need to do much to use DNSSEC aside from purchasing updated software. Windows 7 had DNSSEC on it's list of new features (not confirmed it was added in final builds). The client (your computer) must be able to understand DNSSEC queries for it to be of any use. Otherwise, it is simply ignored.

System administrators must enable DNSSEC on their DNS servers (resolvers) as well as on zones to get the full benefit. You can think of a zone as a domain name. Things can be further divided into sub zones such as .com vs midnightbsd.org.

Enabling DNSSEC on BIND 9.4+ resolvers

In options:

dnssec-enable yes;

dnssec-validation yes;

dnssec-lookaside "." trust-anchor "DLV.ISC.ORG";

...

trusted-keys {

dlv.isc.org. 257 3 5 "BEAAAAPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE1+lLy2 brhQv5rN32RKtMzX6Mj70jdzeND4XknW58dnJNPCxn8+jAGl2F

ZLK8t+ 1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te9fZ2kJb56dhgMde5 ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucMTwFlgPe+jnGxPPEmHAte/URk Y62ZfkLoBAADLHQ9

IrS2tryAe7mbBZVcOwIeU/Rw/mRx/vwwMCTgNboM QKtUdvNXDrYJDSHZws3xiRXF1Rf+al9UmZfSav/4NWLKjHzpT59k/VSt TDN0YUuWrBNh";

};

Further Reading

http://ftp.isc.org/isc/pubs/tn/isc-tn-2006-1.html

https://www.isc.org/files/dlv-policy.pdf

http://blog.techscrawl.com/2009/01/06/dnssec-101/

http://blog.techscrawl.com/2009/01/13/enabling-dnssec-on-bind/

http://onlamp.com/pub/a/onlamp/2004/10/14/dnssec.html

Microsoft patches 17 year old bug in Windows

2010-02-06T06:33:00.000Z

Microsoft is patching a 17 year old bug in Windows that affects WOW (not the game) in current versions of Windows that allows it to run old programs. The BBC is reporting it's a bug carried over from NT 3.1.

I wonder what other goodies are hiding in our copies of Windows.

Cayenne 3.0RC2

2010-02-06T00:50:00.000Z

I just read that Cayenne 3.0 RC2 is out. Cayenne is an ORM. I've been using it for almost a year now. It's a very easy way to do data access in Java. There are a few quirks. Most people love Hibernate and don't consider alternatives. Cayenne is very easy to work with. It has a client gui to configure and setup your mappings or you can write an XML file by hand.

Perl XML Parser bug

2010-02-05T03:16:00.000Z

not well-formed (invalid token) at line 299, column 46, byte 12454 at /usr/local/lib/perl5/site_perl/5.10.0/amd64-midnightbsd/XML/Parser.pm line 187

This is caused by using two apostrophe's escaped in a row in an RSS feed. I can't find anything that says that's invalid. I even tried switching from the ' to '

New server

2010-01-30T23:22:00.000Z

I bought a new HP server for hosting my websites and email. I've spent the last day trying to get the system into shape to run MIdnightBSD current. So far, the NIC isn't supported, the DVD-ROM drive causes some issues with shutdown in "Compatibility mode", I have to disable turbo mode to avoid an inturrupt storm (Xeon 3430), and some of the CPU features aren't detected properly. Since, 0.1.1 couldn't boot and 0.2.1 amd64 wasn't working well, I had to partition from 0.2.1 and then run a current live cd, copy some files with cpdup, and then chroot it and run make buildworld to get it ready to go.

At this point, I'm running with USE_MPORT_TOOLS and starting to install ports. Chris's mport tools have been working pretty well on my desktop; I figured it was time to run them on the server.

The system currently only has 2GB of RAM, but I figure I'll be upgrading that later this year. I bought a SSD last month for the OS boot drive and the 160GB drive is for /home and swap. I considered var on there but since i only run email on it, i figured it would be tight but OK.

The CPU is awesome. I've been pro AMD lately, but I must say this Intel chip is quite nice. I'm glad Caryn talked me into it.

I've found a number of bugs with MidnightBSD while installing the OS on the server so far. I've got a lot of work ahead of me.

VMWare Fusion 3 review

2010-01-30T23:14:00.000Z

I purchased a copy of VMWare Fusion 3 for my iMac today. In the past, I've used Parallels for intel Macs. While there are a few features I miss, I must say that VMWare is quite fast. I haven't found a way to run concurrent VMs like Parallels can do, but I don't use that feature often anyway.

I have not tested it with Windows yet. Most people use it for accessing their bootcamp partition or running Windows applications. I use it to test MidnightBSD software and to work on ports. I have a real PC for windows.

The updater is nice and it has tools for Windows, Linux, Solaris and FreeBSD. I can't get the FreeBSD tools to install under MidnightBSD. There are many levels of OS version checks and I'm missing one somewhere. X.org worked perfectly under MidnightBSD 0.1.1 i386. I'm updating to current now.

The networking code works really well. It seems much more stable so far. I'm running on Snow Leopard.

I've had mixed feelings about VMWare products in the past. The windows versions have caused BSODs on me. Recent versions of VMWare player have been a lot more stable and based on that I decided to give it a shot for my Mac. I've also used quite a few of their free products over the years. Lastly, I found that Parallels hasn't been innovating much and also not putting enough testing time into other OSes.

nmap 5.20 out

2010-01-21T00:59:00.000Z

o 30+ new Nmap Scripting Engine scripts
o enhanced performance and reduced memory consumption
o protocol-specific payloads for more effectie UDP scanning
o a completely rewritten traceroute engine
o massive OS and version detection DB updates (10,000+ signatures)

This looks awesome. In case you're not familiar with nmap, it allows you to scan a host to determine the OS it is running and look for services by way of a port scan.

Setting up RAID in debian

2010-01-21T00:56:00.000Z

http://wiki.xtronics.com/index.php/Raid

See the difference?

FreeBSD gmirror

2010-01-21T00:54:00.000Z

After my little rant, I decided to backup my claim about FreeBSD. Here are some articles on setting up gmirror in freebsd

http://www.freebsd.org/doc/handbook/geom-mirror.html

http://www.freebsddiary.org/gmirror.php