robbat2: (Default)
Testing posting via LJ Talk (on Gaim 1.5)
robbat2: (Default)

I meant to blog these a while back, but it slipped by.

Here are the main ones:

Still to come:
Photo sets taken by:

  • Judy,
  • Johannes,
  • Robin's Camera (it was loaned out),
  • Marissa's Camera (it was loaned out),
  • Richard,
  • Jon Kwan,
  • Ullrich,
  • Laura?
  • Anybody else that took photos at my wedding, I'd appreciate a copy of them as well, to host from my system.

P.S. These have been scaled way down for web viewing, but I will still kick anybodies ass if they hit my bandwidth too hard.

P.P.S. If you'd like a large version of one of them to make a print or whatever, drop me an email.

robbat2: (Default)
Attention all past TechBC and present SFU Surrey students!

There's a possibility that we can get the techbc.ca domain back, and use it to our own ends (like having our student email addresses back, hosting our portfolios, and more).

I've posted further details in this posting on the TekBC Underground.
robbat2: (Default)

Recently I've been digging around in the annuls of Gentoo history, working on what will hopefully be the final tree-signing proposal before it actually becomes a full reality. During the midst of this, Stuart came up to me in #gentoo-dev:

<Stuart> robbat2: btw, did you see this week's LWN?
<Stuart> robbat2: the one of using Google Code to find PHP apps that are vulnerable to allow_url_fopen attacks
<Stuart> robbat2: you were right, all those years ago. just wanted to tell you that.

I wasn't the first to come up with the idea, the BSD ports folk were talking about it around the same time we were in mid-July 2003, and I was aware of their discussion, but I believe that Gentoo was the first Linux distribution to make this jump in turning it off. I took a lot of flak at the time for breaking many PHP applications in the name of security, but history has now shown that allow_url_fopen is a very common PHP exploit, and with the advent of Google Code, many sites may now considerably more vulnerable - and all of this could have been mostly avoided a long time ago if PHP had just included a taint mode from the start...

I hadn't read LWN yet, it's only been out a few hours, yet here the article is: "Remote file inclusion vulnerabilities". Stuart also posted a link back into the murky depths of the Gentoo CVS, with a commit I made in July 2003, that turned off allow_url_fopen by default in Gentoo.

robbat2: (Default)
Firstly, the Sun StorEdge A5000 FibreChannel array that I put on the market in March is still available. The price is now $300CAD (offers below that welcome).

I'd like to get rid of it, as well as the following stuff, because I'm really running out space in my office.

The second batch is a much larger set.
I'm asking for $3000CAD presently, but I'm willing to listen to all offers.

I'd like to be able to get rid of most of it as one bit lot.
It all works 100% - I've personally tested it under Linux, and I've had it demonstrated to me under Solaris. If you're set on buying this still, I can see about arranging a demonstration.

If you were to buy the switch, both arrays and the interconnect cable, with at least 2 controllers, you've have a fully redundant setup for your systems, with 650Gb of raw space.

If you want to leave out some of the controllers, I'm willing to make a deal as well.

Alternatively, if you are interested in an individual item here, I've included some prices.

- Fibre-Channel Switch
Compaq StorageWorks SAN Switch 8-EL
8x 1Gbit FC ports
Compaq P/N #177615-001
Includes license keys for Base, Web, Zoning and Entry Fabric.
[$600 seperately]

- Sun StorEdge T3 (2 units)
9x 36Gb 10000RPM drives.
Includes Media Converter for SC fibre ($100-$150 value).
[$1100 each seperately]

- Sun StorEdge T3 Interlink cable pair (for redundancy)
[$100 seperately]

- Sun FC Hub
(Rebranded Vixel Intralink 1000)
Fully loaded with 7x 1Gbit GBIC, SC connectors.
[$300 seperately]

- Emulex LP7000 FC controller (2 units)
[$75 each seperately]
- Qlogic QLA2200F FC controller
[$75 seperately]
- Qlogic QLA2100F FC controller
[$75 seperately]

- Fibre-Optic Cable. 10 ft. Duplex SC connector. (5 units).
[$10 each seperately]

Pickup only - I can't arrange delivery! This stuff is heavy!

Either comment here, or look at my livejournal profile for one of my email addresses.
robbat2: (Default)
Why is it that so few manufacters deal with digital optical sound in reasonable units? From the average manufacter that does computer speakers, you can only get digital optical if you go with a 5.1 or 7.1 surround system :-(.

This of course excludes anybody looking for a 2.0 sound system with optical :-(. I was pointed to using a seperate optical decoder for some cases, but means twice the number of power cables, and almost all of the optical decoders are bulky units.

However, thanks to somebody that posted on my previous query, I have now found at least one manufacter that does make what I'm after. Behold! http://www.roland.com/products/en/MA-10DBK/specs.html

Now just to figure out somewhere locally that carries them, and see if I like the sound that comes out them.
robbat2: (Default)
I've decided to start keeping a track of every cycling trip I do, including distance, start time, and end time.
Being a MySQL DB guy, I threw together a quick table for the moment, and just populated it with data from yesterday and today.

Total so far, 14.9km in 125 minutes of cycling (time estimate might be a bit high).
robbat2: (Default)
I'm on the lookout for some speakers - with optical audio in.
I presently have a 5.1 set, with analog inputs, and I want to move to a much smaller optical set mainly for reasons of space and cabling.

However, it would seem that there is no such thing as a 2.[01] speaker system with optical input. You get it in 5.1 only :-(.

I'm hoping my reader-base can point me to a solution.
Requirements
- Ideally similar to the Logitech designs, with a decoder in a seperate box that all input sources are connected to, and speakers connected to decoder - this is not a hard requirement - but I will not stand for having the decoder in the sub.
- 2.[01] sound. The sub is really optional for me.
- Optical (TOSLink) input is required.
- Having analog input as well would be handy, as would a headphones connector on the front.
robbat2: (Default)
I saw the best minds of my generation destroyed by Google - Short story by Bruce Sterling.

This is an interesting view of a potential future place - and some parts of this future have already come to pass unfortuntely.
robbat2: (Default)

While I do follow a number of other blogs and RSS feeds, I very seldom consider many of the items worth writing about, or linking to. However a new-comer to the posts I read, is the 'Language Log' - a compendium of linguistic differences and other faux pas.

A sample of recent worthwhile entries:
"Lurid language differences by the press"
"Chinglish: The Shrimp Fucks the Cabbage"
"Racy CIA investigators?"

robbat2: (Default)

I'd like to thank the relevant parties (*waves at StartCom*) for bringing an important correction to my notice.

I previously followed somebody else's summary of the Mozilla CACert inclusion battle, rather than reading the 135 entries on the official Mozilla bug for the matter. More importantly, their summary unfortuntely lead me to make a bad conclusion (probably aided by a lack of sleep on my part when writing up my presentation on the morning of BarCamp, due to the cold, hard, concrete floors), which was the statement "CACert audit by 'We!' funded by StartCom".

This was brought to my attention this morning, and I slogged through the bug mentioned as well as other sources, and found that StartCom was audited by We! Consulting, and the same was only suggested for CACert. According to one source that commented on my previous post, CACert refused We! Consulting, but I can find nothing else to back up that statement. However, I do find nothing to indicate that they presently have anybody lined up to audit them. I'd like to repeat that for good measure however - CACert is not being audited presently, nor is any audit of them being funded by StartCom.

Some other research on the matter provides the following links from the CACert wiki, which include a TODO list on CACert's audit process (in short - not yet, there's still paperwork on CACert's side in the way); as well as an invitation page listing CACert's criterion for an auditor.

robbat2: (Default)
I've been looking at the photos from my wedding - I specifically ask the photographer if I could get a copy of all of the RAW images (and I gave him plenty of DVD-Rs to put them on).

I'd heard there was some difference in processing results, but I'm surprised to see that Linux seems to be huge leaps ahead of Windows in terms of results.

Here's a small sample I put together:
http://tinyurl.com/fkmw2

- One from the wedding photographer (He used either Adobe Photoshop CS2, or the Canon utility)
- UFRAW
- DCRAW (configuration #1)
- DCRAW (configuration #2)

All image were saved/resaved with jpeg-75 compression, so that the files wouldn't be too large for online comparison.

I would suggest that you download all of them, and then compare them side-by-side, piecewise.

Thereafter, could you please vote here (if you don't have a livejournal account, please leave a comment with your vote instead)?

[Poll #814130]

Results of which file was processed by what tool will be revealed in a few days.
robbat2: (Default)

BarCamp Vancouver 2006 took place August 25th and 26th. For those not aware of it, in plain terms, it's a geek un-conference without formal talk arrangements. You turn up, have a party, camp in an office building, have breakfast, come up with mostly impromptu talks, give said talks, have lunch, do more talks, go home. My talk was on CACert Assurances, and I was also a super-assurer for the purposes of the event.

Long version )
robbat2: (Default)

[Edit: Please see the corrections regarding the CACert Audit posted here.]

This is the outline version of my Powerpoint presentation, created using information from the CACert site and wiki.

Title: CACert - Verified SSL without paying Verisign
  • Facets
    • History
    • Verification
    • CACert point system
    • Integration
    • Assurance time!
  • History
    • Thawte
      • Web-of-Trust
      • Notaries
      • Things killed by Verisign
  • Verification
    • Why?
      • Identity implications
      • Legal requirements
      • Trying to avoiding Verisign-like screwups
    • PGP/GnuPG keysigning
      • Checking IDs
      • (Known-data|shared secret) exchange
    • CACert
      • Keysigning process + point allocation
  • CACert point system
  • Integration (why doesn’t it work in my browser right now?)
    • Already in most Linux distributions
    • IE: Microsoft requirements
      • WebTrust audit
        • $75K USD upfront, $10K USD yearly
      • Not likely to happen soon
    • Mozilla requirements
      • Audit by any suitable company
      • CACert audit by ‘We!’ funded by StartCom
  • Assurance time!
    • Quick guide to filling out the form
    • Circulate!
robbat2: (Default)
Here are some notes I took during a presentation by Rob Cottingham of Social Signal.
Title: "Secrets to a Killer Technology Speech" / "End to End Speech Writing"

Start with an idea, and end with a powerful idea.
Don't spew bullshit, ever.

7 important techniques/items (you need all of them).

1. Know where to end off.
2.1. Structure - give audience exact idea of what you are covering, say there are 7 points ahead of time.
2.2. Explain it in the form of a story, using oral traditions to full effect. Hollywood uses 3 acts - your hero gets up tree first, then develop conflict, such as throwing rocks at the tree, and lastly the hero falls out of the tree.
2.3. a) Express problem (why it's needed, why we are vulnerable to it) b) Elaborate on problem, say how it affects audience c) Give them a solution, say how it will fix their issues.
3. Use visual thinking, avoid boring speakers. Give ways to escape, mental images, but pick ones that help your cause. Ujjal Dosajh used a childhood story of an ox-drawn cart on a dusty road.
4.1. Put the powerpoint AWAY. People are there for the STORY! Not the words on the screen. You can even do away with projectors entirely.
4.2. Exceptions are when walking through a new product, or you have visuals ABOUT the information, not charts.
5. Have passion for the idea. Convey passion even if you don't feel it.
6. Authenticity. Growing power. Transparency is big in new media. Don't have a speech like a speech writer would write, with stuff you would seldom say. Write your speech as you normally speak! Subject, Verb, Object!
7.1. Ending. The correct one! Use emotional High, Kathartic. Call to action. Encourge to go out and DO.
7.2 Don't give thank yous to poeple at the end of your speech, rather do it at the start!

Summary: idea at start, then thanks yous, then climax, then ending.
robbat2: (Default)

Sometimes I'm astounded by the other Gentoo developers, in unusual ways. In this case, I'd always thought Spanky was devious, but it wasn't until I saw his Cafepress store that it really came to light just how devious he was.

Behold, Gentoo Thongs! (link is work safe as long as you don't work with anybody that thinks underwear on a white background is evil).

I personally disagree with the concept of thongs. Insufficent fabric covering parts of the body that need it simply to avoid chafing and scraping, because they're damn tender! However that shouldn't stop anybody from buying them. Support Spanky's Gentoo-development-addication, and buy the Gentoo ThongTM. Maybe even send him action shots of the thong? ;-)

Edit: [livejournal.com profile] amethest adds that her concern is more of them riding up; she didn't think marketing a wedgie would be so popular.

robbat2: (Default)

After being told my posts are written in binary, and that they are "all geek, all the time", I thought a general post might be in order.

I am getting married on 2006/August/19, to [livejournal.com profile] amethest.

Now to proceed with my TODO list for today.

TODO list

Aug. 9th, 2006 11:58 pm
robbat2: (Default)
Thursday:
  1. Pickup replacement server mobo in North Burnaby.
  2. Deposit 3 cheques at bank.
  3. Pickup GPS cable from NCIX-Metrotown.
  4. Go to ICBC driver services @ Metrotown to renew license if I don't need to hand over the old one.
  5. Mop kitchen

Server Down

Aug. 6th, 2006 08:54 pm
robbat2: (Default)
Argh.

There was a faint acrid smell, then a loud pop, and thereafter my server went off...
Unplugged/disconnected/etc, and opened it up, to find that it had blown a capacitor.
I have taken pics, but obviously can't put them until until the server is functioning in some way again.
A friend with a spare mobo that's a close match is coming over a bit later, but until then, my email and website are offline.

Hopefully the board in the server is still under warranty.
If it isn't then it's time to explore a new server, maybe in one of those shuttle-style mini cases.
Is anybody aware of a SFF system that has a PCI slot and TWO LAN ports?
It would need to fit 2x 3.5" drives as well, for my 3ware RAID.
robbat2: (Default)
If applicable (if it's actually going to happen), could whomever of my friend is planning my bachelor party please give me some subtle warning as to which day it is happening?

May 2017

S M T W T F S
 123456
78910111213
141516171819 20
21222324252627
28293031   

Syndicate

RSS Atom

Most Popular Tags

Style Credit

Expand Cut Tags

No cut tags