To reiterate what others have said, they almost always come on a personal recommendation. Someone good to great themselves seeing an opportunity to hook up two parties that each has the pieces of the employer-employee relationship the other wants.
How do multiple external ip addresses cause an issue? I've been able to successfully have plenty of external ip addresses, and more particularly, multiple internet connections each with its own WAN and or CIDR block.
The trick to the former (multiple ips, one internet connection) is really managing via subinterfaces. Firewall rules to deal with the packets associated are pretty easy. This lets you DNAT things into the appropriate place via iptables. If you want to actually build a DMZ, you could use a proxy arp setup like this: http://www.sjdjweis.com/linux/proxyarp/
As for multiple internet connections, look into multiple routing tables via the ip command. Example: ip route add default via table 100
Then use ip rule statements to choose when to use the particular route tables: ip rule add to table 100 ip rule add from table 100
You can also pretty simply setup multiple SNAT rules to SNAT traffic over each link for different purposes. This lets you do things like SNAT to a specific host (read: internet connection) based on protocol, internal source address or destination. Handy for lots of things.
One nice thing to do with multiple internet connections is to have verbs in your firewall script that will allow you to manually failover your internet connection if one goes down. This obviously doesn't help external entities trying to reach hosts that sit in your DMZ on a failed connection, but it can let you continue to work with outgoing traffic while the problem is resolved.
If you're slick, you have your DNS hosted externally and you can then use this to update DNS for the DMZ to an alternate zone which specifies those public facing hosts as existing on the internet connection you just did a failover to. Make sure your A record TTL values are low.
This leads to a reconfiguration of the DMZ unless you have done full SNAT/DNAT mappings for each DMZ host in the firewall. Doing so can be a lot more work, but you can build a set of symmetric (or controlled in a script by a variable) configurations that swap out the DMZ nat rules so that they exist for one specific internet connection or the other.
I wouldn't be personally considering the decision if I couldn't easily migrate off of ALAC. Given the open source decoder and open source AtomicParsley tagging utility, I could very quickly write a perl script that would migrate me away from ALAC and back to FLAC. That way there is no ultimate platform lock-in for Mac OS X because of my music collection. It would only be a point to consider in terms of momentum required to get off the platform. If I were making a switch for other reasons, it wouldn't be a prime consideration to me anyway.
I'm using flac for our entire library. However, I'm at the point of seriously considering a switch to ALAC. I use some custom scripts for ripping the tracks on OS X, tagging them with audiotag (http://www.tempestgames.com/ryan/), and then some mirroring scripts that check filestamps and output a mirror of a selected portion of the flac tree in a lossy format.
I'm possibly switching to ALAC because iTunes will play it back natively, and I can use it under FrontRow in a Mac OS X media center frontend. The only reason I haven't switched is because I'm currently combining aacgain and the open source alac decoder to create alacgain. Once I've tested that iTunes actually obeys gain tags on ALAC, I'll move ahead with development.
Unfortunately the keychain access doesn't extend to personal certificates, it still uses an underlying PKCS#11 keystore accessed via the NSS libraries.
I've been thinking about publishing the scripts, though they are not generally good programming examples.
Drop me a line to heeltoe2005 (at) gmail (dot) com and I'll send you what I've got as soon as I've had a chance to clean it up a little bit.
One thought on that Power Mac of yours - what processor is it? I've recently came across lame 3.96.1 and up binaries / patches that by optimizing for altivec make encoding with lame MUCH better on PowerPC chips.
I use Mac OS X and Linux at home, so some of this may not apply...
I wrote a script that rips a CD to properly tagged flac based on command line inputs of Artist, Genre, Year, Album Title and Mac OS X creating a/Volumes/CDName with "TrackNum TrackTitle.aiff" files using GraceNote CDDB. For compilations, soundtracks, etc., I also have some scripts that let me paste freedb.org web page data and retag everything in a given directory.
I store two identical copies of the flac on one of my desktop machines and a server, using rsync from desktop (where I rip or scp the rips) to server. The flac tree is artist/album/*.flac. I put an albumart.jpg (may soon allow for multiple jpgs, albumart*.jpg) in each album directory.
On the server, I use another script that takes as input the flac root, a list of album dirs to process, and the mp3 root. It checks file timestamps to only convert modified or new flac files to mp3. It converts filenames to something shorter with no spaces and populates the mp3 tree with artist-album/*.mp3. It decodes the flac and uses lame to encode MP3 at a command line specified bitrate & constant/variable flag. It populates all the id3v2 info in the mp3s it encodes, adds albumart, and runs mp3gain across each mp3 album subdirectory it writes files into.
The mp3 root is scanned every 300 seconds by mt-daapd, which shares the library out on my local network using Apple's proprietary protocol. iTunes clients pick it up. Mostly this is for the benefit of the guest room (old style) iMac, which has not the disk space for a collection, but is nice to provide guests with browsing, email, iTunes. My laptops maintain a live iTunes library since they do go with me at times. One of them puts all that data on my iPod.
I also have MPD running with its output going to a Griffin iMic USB audio card (GREAT electrical isolation from noisy components in the computer), into an amplifier with multi-room capability and an FM transmitter hanging off one of the tape outputs. By setting the inputs up properly and hooking up amps, I will eventually get time-synchronized output in my home theater, living room, and on the deck, as well as FM transmission to anything capable of receiving it on my property. There are many clients that can control MPD - it would be nice to use something like this to control it, but we'll see if it ever gets released and open sourced. I mostly like iTunes (except no FLAC support), but I'm not willing to have a user session open and sitting there just to play audio through my stereos - MPD is a much better solution, though I've not figured out a way to have a "carry it around" remote control for it.
My workflow is generally to use a laptop to rip the flac from the command line (though I'm building a CamelBones-based frontend for my wife to do it with a GUI) to local storage. I usually grab a large-size JPG from amazon.com while it's ripping, and copy it into the flac directory named albumart.jpg. I then scp the directory to the desktop machine according to my naming scheme where the "master" copy is. If I'm anxious, I can kick off the script that rsyncs then mirrors to mp3 manually, otherwise it just happens at the next scheduled interval. Once the mp3's are in place on the server, I just load them into my iTunes library - they show up under the mt-daapd share automatically. I've not figured out a way for automatic scanning on MPD, but since I'm not using that much it's not an issue at the moment.
Are these presets a set of command line arguments to dcraw, or are you using the GIMP Plugin? If you have a set of command line arguments to dcraw, it would be nice to see what you're using.
It seems to me this idea is a bit too much wishful thinking in the current patent litigation climate. Combine 3-5 technologies in a unique way for solving some problem that will be acute for a few months time, get hit with patent lawsuits from three different directions.
Of course, maybe you can rake in the cash in solving that acute problem for a few months, close up shop and get out of Dodge before the lawsuits do much harm. Put the money overseas in a non-patent-litigious society's banks and kick back?
I used to use Photoshop 6 and 7 for work in 16 bits per channel (some grayscale work and also some color work). However, I no longer have access to a legal copy of it.
Unfortunately, Photoshop Elements does not handle it either, and it's about as much as I'd want to spend as is.
Until GIMP offers 16 bits per channel and correction layers, I will have a really hard time using it for my negative scanning / retouching work.
Thanks for the suggestion on CinePaint - I've actually used it as well, but it suffers from the correction layers issue. It is workable for a number of things I do, like clone-brushing out dust and scratches from negatives, but full-on editing usually requires me to sample down to 8 bit per channel colorspace and pick up with Photoshop Elements. Undo history is so limiting in adjusting images, whereas with correction layers you can just remove the layer you're concerned about the effects of.
Re:Holes and what to use to get around them now.
on
First Look at GIMP 2.4
·
· Score: 2, Informative
Color depth. GIMP will not do anything on a 48 bit color image. How to get around it? Use other software.
Do you honestly believe that any software will be able to access the output from these cablecard compatible cards without supporting content protection?
I never gave it much thought. I have only expected to make use of OTA signal. Given the industry's current panic over locking down their content, I wouldn't place high odds on it. However, if you see the ability in Windows software on x86 processors, my guess is someone will figure out how to use the dll's under Linux at some point.
Then again, if you believe that, you probably also believe that Tivo added content protection because they wanted to (rather than being forced to because they want to keep their Macrovision license).
TiVo's reasoning for content protection is irrelevant to me. I have always too highly valued the ability to watch my legally captured content wherever, whenver, and on whatever device I choose to have given a TiVo more than passing consideration. I suppose at times I have wished to pay the $15/month to save the hassle of MythTV, but mostly it is no longer a hassle for me.
Bandwidth consumptive. You pretty much need to transcode shows (unless 15-25GB/hour sounds good to you). You will also need a pretty serious CPU to handle record, playback, transcode simultaneously. Disk bandwidth is probably ok with most recent drives. My PATA drives keep up with it fine, but the CPU can't decode it fast enough to stream it without the occasional glitch. Plan on an Athlon 64 3200+ or better. Make sure your bus and video card can handle the bandwidth, too.
Right now you can really only get clear cable channels and over the air content. I'm not sure what cable card compatible PC cards are on the horizon.
Are you more interested in a dynamic website (a la Gallery FTA) or an up-front generated static html + pictures directory tree? I've written the latter for myself, and though it has not been worked on in a while, I've been looking to do a rewrite and major overhaul/enhancement this winter. If you're more interested in pre-generating html, I definitely could use some help with this project.
So why not an HTTP response header that indicates to the browser an operation request to clear the credentials it used in making the request? Then the browser could have support for whether to automatically honor the request, prompt the user, or ignore it.
I wish I had mod points. I'm not sure your idea would work exactly as stated, but I bet someone could come up with something along very similar lines with respect to copyright that would.
To reiterate what others have said, they almost always come on a personal recommendation. Someone good to great themselves seeing an opportunity to hook up two parties that each has the pieces of the employer-employee relationship the other wants.
How do multiple external ip addresses cause an issue? I've been able to successfully have plenty of external ip addresses, and more particularly, multiple internet connections each with its own WAN and or CIDR block.
The trick to the former (multiple ips, one internet connection) is really managing via subinterfaces. Firewall rules to deal with the packets associated are pretty easy. This lets you DNAT things into the appropriate place via iptables. If you want to actually build a DMZ, you could use a proxy arp setup like this: http://www.sjdjweis.com/linux/proxyarp/
As for multiple internet connections, look into multiple routing tables via the ip command. Example:
ip route add default via table 100
Then use ip rule statements to choose when to use the particular route tables:
ip rule add to table 100
ip rule add from table 100
You can also pretty simply setup multiple SNAT rules to SNAT traffic over each link for different purposes. This lets you do things like SNAT to a specific host (read: internet connection) based on protocol, internal source address or destination. Handy for lots of things.
One nice thing to do with multiple internet connections is to have verbs in your firewall script that will allow you to manually failover your internet connection if one goes down. This obviously doesn't help external entities trying to reach hosts that sit in your DMZ on a failed connection, but it can let you continue to work with outgoing traffic while the problem is resolved.
If you're slick, you have your DNS hosted externally and you can then use this to update DNS for the DMZ to an alternate zone which specifies those public facing hosts as existing on the internet connection you just did a failover to. Make sure your A record TTL values are low.
This leads to a reconfiguration of the DMZ unless you have done full SNAT/DNAT mappings for each DMZ host in the firewall. Doing so can be a lot more work, but you can build a set of symmetric (or controlled in a script by a variable) configurations that swap out the DMZ nat rules so that they exist for one specific internet connection or the other.
Yeah, agreed.
I wouldn't be personally considering the decision if I couldn't easily migrate off of ALAC. Given the open source decoder and open source AtomicParsley tagging utility, I could very quickly write a perl script that would migrate me away from ALAC and back to FLAC. That way there is no ultimate platform lock-in for Mac OS X because of my music collection. It would only be a point to consider in terms of momentum required to get off the platform. If I were making a switch for other reasons, it wouldn't be a prime consideration to me anyway.
I'm using flac for our entire library. However, I'm at the point of seriously considering a switch to ALAC. I use some custom scripts for ripping the tracks on OS X, tagging them with audiotag (http://www.tempestgames.com/ryan/), and then some mirroring scripts that check filestamps and output a mirror of a selected portion of the flac tree in a lossy format.
I'm possibly switching to ALAC because iTunes will play it back natively, and I can use it under FrontRow in a Mac OS X media center frontend. The only reason I haven't switched is because I'm currently combining aacgain and the open source alac decoder to create alacgain. Once I've tested that iTunes actually obeys gain tags on ALAC, I'll move ahead with development.
Heck, he did it with dhcpd, they didn't need to spoof anything, just assign a static address.
Oil is Fungible.
Unfortunately the keychain access doesn't extend to personal certificates, it still uses an underlying PKCS#11 keystore accessed via the NSS libraries.
Thank you.
Glad to share some ideas.
I've been thinking about publishing the scripts, though they are not generally good programming examples.
Drop me a line to heeltoe2005 (at) gmail (dot) com and I'll send you what I've got as soon as I've had a chance to clean it up a little bit.
One thought on that Power Mac of yours - what processor is it? I've recently came across lame 3.96.1 and up binaries / patches that by optimizing for altivec make encoding with lame MUCH better on PowerPC chips.
On most modern shells ^W will delete the previous word.
Delete would be displayed as ^?.
I use Mac OS X and Linux at home, so some of this may not apply...
/Volumes/CDName with "TrackNum TrackTitle.aiff" files using GraceNote CDDB. For compilations, soundtracks, etc., I also have some scripts that let me paste freedb.org web page data and retag everything in a given directory.
I wrote a script that rips a CD to properly tagged flac based on command line inputs of Artist, Genre, Year, Album Title and Mac OS X creating a
I store two identical copies of the flac on one of my desktop machines and a server, using rsync from desktop (where I rip or scp the rips) to server. The flac tree is artist/album/*.flac. I put an albumart.jpg (may soon allow for multiple jpgs, albumart*.jpg) in each album directory.
On the server, I use another script that takes as input the flac root, a list of album dirs to process, and the mp3 root. It checks file timestamps to only convert modified or new flac files to mp3. It converts filenames to something shorter with no spaces and populates the mp3 tree with artist-album/*.mp3. It decodes the flac and uses lame to encode MP3 at a command line specified bitrate & constant/variable flag. It populates all the id3v2 info in the mp3s it encodes, adds albumart, and runs mp3gain across each mp3 album subdirectory it writes files into.
The mp3 root is scanned every 300 seconds by mt-daapd, which shares the library out on my local network using Apple's proprietary protocol. iTunes clients pick it up. Mostly this is for the benefit of the guest room (old style) iMac, which has not the disk space for a collection, but is nice to provide guests with browsing, email, iTunes. My laptops maintain a live iTunes library since they do go with me at times. One of them puts all that data on my iPod.
I also have MPD running with its output going to a Griffin iMic USB audio card (GREAT electrical isolation from noisy components in the computer), into an amplifier with multi-room capability and an FM transmitter hanging off one of the tape outputs. By setting the inputs up properly and hooking up amps, I will eventually get time-synchronized output in my home theater, living room, and on the deck, as well as FM transmission to anything capable of receiving it on my property. There are many clients that can control MPD - it would be nice to use something like this to control it, but we'll see if it ever gets released and open sourced. I mostly like iTunes (except no FLAC support), but I'm not willing to have a user session open and sitting there just to play audio through my stereos - MPD is a much better solution, though I've not figured out a way to have a "carry it around" remote control for it.
My workflow is generally to use a laptop to rip the flac from the command line (though I'm building a CamelBones-based frontend for my wife to do it with a GUI) to local storage. I usually grab a large-size JPG from amazon.com while it's ripping, and copy it into the flac directory named albumart.jpg. I then scp the directory to the desktop machine according to my naming scheme where the "master" copy is. If I'm anxious, I can kick off the script that rsyncs then mirrors to mp3 manually, otherwise it just happens at the next scheduled interval. Once the mp3's are in place on the server, I just load them into my iTunes library - they show up under the mt-daapd share automatically. I've not figured out a way for automatic scanning on MPD, but since I'm not using that much it's not an issue at the moment.
Are these presets a set of command line arguments to dcraw, or are you using the GIMP Plugin? If you have a set of command line arguments to dcraw, it would be nice to see what you're using.
Thanks.
It seems to me this idea is a bit too much wishful thinking in the current patent litigation climate. Combine 3-5 technologies in a unique way for solving some problem that will be acute for a few months time, get hit with patent lawsuits from three different directions.
Of course, maybe you can rake in the cash in solving that acute problem for a few months, close up shop and get out of Dodge before the lawsuits do much harm. Put the money overseas in a non-patent-litigious society's banks and kick back?
Hmm...
I used to use Photoshop 6 and 7 for work in 16 bits per channel (some grayscale work and also some color work). However, I no longer have access to a legal copy of it.
Unfortunately, Photoshop Elements does not handle it either, and it's about as much as I'd want to spend as is.
Until GIMP offers 16 bits per channel and correction layers, I will have a really hard time using it for my negative scanning / retouching work.
Thanks for the suggestion on CinePaint - I've actually used it as well, but it suffers from the correction layers issue. It is workable for a number of things I do, like clone-brushing out dust and scratches from negatives, but full-on editing usually requires me to sample down to 8 bit per channel colorspace and pick up with Photoshop Elements. Undo history is so limiting in adjusting images, whereas with correction layers you can just remove the layer you're concerned about the effects of.
Color depth. GIMP will not do anything on a 48 bit color image. How to get around it? Use other software.
Also check out Fedora Directory: http://directory.fedora.redhat.com/wiki/Main_Page
Do you honestly believe that any software will be able to access the output from these cablecard compatible cards without supporting content protection?
I never gave it much thought. I have only expected to make use of OTA signal. Given the industry's current panic over locking down their content, I wouldn't place high odds on it. However, if you see the ability in Windows software on x86 processors, my guess is someone will figure out how to use the dll's under Linux at some point.
Then again, if you believe that, you probably also believe that Tivo added content protection because they wanted to (rather than being forced to because they want to keep their Macrovision license).
TiVo's reasoning for content protection is irrelevant to me. I have always too highly valued the ability to watch my legally captured content wherever, whenver, and on whatever device I choose to have given a TiVo more than passing consideration. I suppose at times I have wished to pay the $15/month to save the hassle of MythTV, but mostly it is no longer a hassle for me.
How is MythTV when it comes to HD?
Bandwidth consumptive. You pretty much need to transcode shows (unless 15-25GB/hour sounds good to you). You will also need a pretty serious CPU to handle record, playback, transcode simultaneously. Disk bandwidth is probably ok with most recent drives. My PATA drives keep up with it fine, but the CPU can't decode it fast enough to stream it without the occasional glitch. Plan on an Athlon 64 3200+ or better. Make sure your bus and video card can handle the bandwidth, too.
Right now you can really only get clear cable channels and over the air content. I'm not sure what cable card compatible PC cards are on the horizon.
Are you more interested in a dynamic website (a la Gallery FTA) or an up-front generated static html + pictures directory tree? I've written the latter for myself, and though it has not been worked on in a while, I've been looking to do a rewrite and major overhaul/enhancement this winter. If you're more interested in pre-generating html, I definitely could use some help with this project.
Will the refresh banning behavior still apply?
Pointer to those useful sounding scripts?
Thanks.
So why not an HTTP response header that indicates to the browser an operation request to clear the credentials it used in making the request? Then the browser could have support for whether to automatically honor the request, prompt the user, or ignore it.
I wish I had mod points. I'm not sure your idea would work exactly as stated, but I bet someone could come up with something along very similar lines with respect to copyright that would.
Civil disobedience!
Shoot weddings, events, etc.?
Lots of technical details to master, both on and off location.
Lots of moving around, etc.