Well, its 7pm local time here in Western Australia now on May 21. I'm thinking "dinner". Same as yesterday. And the day before, Probably be the same tomorrow...
Use standards for everything you can. Don't use some product because some propreietry feature is a must-have, or you'll be locked in to that vendor for ever, and if they go away, then you're stuck. And dont just go with what one company calls their "standard", but something that is common and interoperates between vendors.
Design your corporate network with some level of security; know your risks, compromise to make things work smoothly for staff, but understand the compromise. Give people the "least surprise" when having to get on your WiFI, use your printers, etc.
I think a core is to get some central authentiation. Look at LDAP. Then look at using that LDAP data for building an authenticated Wiki. Consider using radius fed from LDAP to secure your ethernet ports (802.1x) - so get a managed switch that supprots that. Its a standard, so you dont HAVE to go for Cisco - I had a lot of joy with the now very old DLink business class gigabit swiches (GDS3224 I think they were) - but don't use propriatry stacking as you'd be stuck to always using that switch/firmware - use LACP and MSTP.
Encourage yourself to have an always-accurate LDAP. Make an internal directory that is auto populated with all relevent fields from LDAP. Extend your LDAP to contain everythign needed. If you find someone in some department is copying all the names to excel to make a phone directory, try and ind out what your current online phone directory doesnt give them, and fix it. Up to them if they want a printed hard copy - but that should be just a case of hitting print in a browser.
Put two Wireless networks in each office - one that uses certiicate based WPA as a secured network for staff, and one that is protected by a simple shared password for guests. Put up signs so that guests are welcomed to use your guest wifi, more than using a wireed ethernet port (which would also, as above be protected with 802.1x - except that's not always possible with ports for printers, etc - but even still you can MAC address lock those ports).
Design your VLANs into areas of shared security risk. Printers. Finance Staff workstations. Common File Servers. Tech Admins. HR. Bridge these staff VLANs to wireless using cert-WPA so that people aren't having to circumvent your security.
Put in a Jabber server, authenticated using LDAP. Let your Jabber server talk out to other networks. Encrypt your internal IMs via your Jabber server.
Put in a SIP server, and use softphones for most people.
The exception to using standards and doing it yourself: Offload email to GMail or similar. Use their calendaring. Get android phones and be done with it. Then use Thunderbid to work with your GMail accounts and calendars... using STANDARD protocols, such as ICAL, IMAPS, etc.
2nd'ed. Great little box. The originalk Atom 220 CPU on the original Revos are a little slow on true 1080p at times (though the video is off-loaded to the GPU for decoding); the followup Atom 330 based units were a dual core CPU. I've been using mine as combined backend & front end for some time - plus file server, NTP, DNS server, IPv6 gateway and tunnel endpoint, music DAAP server, and DLNA server (mediatomb).
Was wondering what the product line is for this small form factor from Acer. Atom has continued to evolve, but I havent seen any more products....
Now my DVD player is going to be slow to respond to UI, just like my mobile phone is now. Next they'll be putting Windows Mobile on these things too, and it will take 45+ seconds to 'boot' the damn thing, like with the Orange C500 phones....
Well, it's been a few days, and no one has written to me; either the person hasn't seen my post, or this confirms this is a troll. Move along; nothing to see here.
Please contact me immediately; I cannot see any Austrian, German or Egyptian people who registered for the conference who were not accounted for. Please email me at james_AT_rcpt.to and give me your full name, real email address, and other data you entered in the conference registration form, the date this incident apparently occurred, the names of your 3 friends you were with, the flight number you were on, and the full names of the Qantas staff you dealt with. If you send me this information, we (the LCA2003 organisers) can track this down. If you do not send me this information, I will assume this is a complete fabricated troll (esp. since this was posted as an 'Anonymous Coward').
Using hdparm(1) to tune up the disks, gets a sustained 35 MByte/s reconstruction. Very good as a small-medium environment file/print/mail/proxy/dns server.
I have a machine with MSIE 6.00.2600.0000, and it STILL does not install. Take a look at this page I have written with a screenshot clearly showing the MSIE 6 version dialog box, and this package not wanting to install because it requires MSIE6!
So how long before the FBI virus is modified to carry a different payload, almost identically matching the same visus (eg, MagicLanternA)? Will they detect this then, if it is no longer doing the dirty work that the original virus was supposed to do? Looks like an easy way to cause havoc to me...
We're also hoping to run a small Debian Conference for the Asia-Pacific Debian developers and users. It'll be pretty informal; we're asking people who would like to talk about a subject to also email lca-cfp_AT_linux.org.au. See this for more information. It'll be on the Monday and Tuesday, with LCA 2002 starting on the Wednesday.
My Debian Root RAID 1 ReiserFS + DevFS HOWTO: www.james.rcpt.to/programs/debian/raid1/.
Just get two largish IDE disks, because they are cheap, and reasonably fast now days.
Australian IT may have beaten the BBC.
on
Linux Is 10 Today
·
· Score: 1
The Australian (National daily newspaper) had this story on their site from around noon WST (+0800). In Australia, regional LUGs are doing a nationwide InstallFest to celebrate.
These were taken when Buran was in Sydney, January 2001. The first few pictures are from Linux.conf.au 2001, the last few is when the Perth, Western Australia mob went to the exhibit in Darling Harbour. http://www.james.rcpt.to/2001/lca-2001/day5/.
Re:Why people use Netscape instead of IE or Mozill
on
Netscape 6.1
·
· Score: 1
I'm in a corporatation that still uses Netscape 4. We have some users on Cirtix, and IE does bad things on multi user MS systems: it fiddles with explorer.exe (not iexplorer, but the system shell). Plus, there is (or has been) so many bad JavaScript sniffers out there, it just hasn't been worthwhile. Unfortunately, up to now IE has had a better renderer on the PC, and with the release of 6.1, I'm looking forward to rolling this out. *Not* being integrated into the OS can be an *advantage*.;)
I have been doing web development since 1995; for 3 years I was the main webmaster for a Australian G8 University. As the article says, it is workarounds for buggy browsers that are causing the problems. Inconsistencies and bad rendering are to blame here -- most./ers will agree that this is why we are so glad to see Mozilla/NS6, since this is an open implementation that should do it as the spec says.
I wouldn't go to such extreme lengths as to mandate everyone use Javascript to give people an upgrade message. There are better ways; just use strict markup - use HTML4.01 strict or XHTML. Heh... use CSS1 exclusively for your layout, so when people with non-CSS browsers come along and see an ugly site, you can say <SPAN STYLE="display: none">Upgrade your browser to a CSS compatible one</SPAN>.
Raise the bar and encourage people to upgrade that way. You do not want to lock out users of other 'non-mainstream' browsers (lynx, IBM Webspeak, etc) by given them a redirect. However, taking out this 'compatability code' is a very tough case to present in many organisations, where management want it to look like a DTP document.
Did anyone see the ABC's[1] satire The Games tonight, where Games Management Head of Administration, John Clarke, had to re-launch the Games website! These guys are right on the money when it comes to their material. Indeed, about a month ago, the satire made a point of possible delays at Sydney Airport, and within 24 hours there was a power blackout at the airport, with huge delays!
Where do their writers come from, and what do they think this week's lottery numbers are?
If you get a chance and you like satire, don't miss it, ABC[1], Monday 8pm, with repeats on now at 6pm M-F until the real Games start. But please, remember that it is a comedy, not a documentary!
Just to reassure everyone that there is no such thing as the last minute to get people to upload: here is a graph of the number of files in Incoming!;)
Seriously, congratulations to all package maintainers.
Slashdot Mirror
Well, its 7pm local time here in Western Australia now on May 21. I'm thinking "dinner". Same as yesterday. And the day before, Probably be the same tomorrow...
Use standards for everything you can. Don't use some product because some propreietry feature is a must-have, or you'll be locked in to that vendor for ever, and if they go away, then you're stuck. And dont just go with what one company calls their "standard", but something that is common and interoperates between vendors.
Design your corporate network with some level of security; know your risks, compromise to make things work smoothly for staff, but understand the compromise. Give people the "least surprise" when having to get on your WiFI, use your printers, etc.
I think a core is to get some central authentiation. Look at LDAP. Then look at using that LDAP data for building an authenticated Wiki. Consider using radius fed from LDAP to secure your ethernet ports (802.1x) - so get a managed switch that supprots that. Its a standard, so you dont HAVE to go for Cisco - I had a lot of joy with the now very old DLink business class gigabit swiches (GDS3224 I think they were) - but don't use propriatry stacking as you'd be stuck to always using that switch/firmware - use LACP and MSTP.
Encourage yourself to have an always-accurate LDAP. Make an internal directory that is auto populated with all relevent fields from LDAP. Extend your LDAP to contain everythign needed. If you find someone in some department is copying all the names to excel to make a phone directory, try and ind out what your current online phone directory doesnt give them, and fix it. Up to them if they want a printed hard copy - but that should be just a case of hitting print in a browser.
Put two Wireless networks in each office - one that uses certiicate based WPA as a secured network for staff, and one that is protected by a simple shared password for guests. Put up signs so that guests are welcomed to use your guest wifi, more than using a wireed ethernet port (which would also, as above be protected with 802.1x - except that's not always possible with ports for printers, etc - but even still you can MAC address lock those ports).
Design your VLANs into areas of shared security risk. Printers. Finance Staff workstations. Common File Servers. Tech Admins. HR. Bridge these staff VLANs to wireless using cert-WPA so that people aren't having to circumvent your security.
Put in a Jabber server, authenticated using LDAP. Let your Jabber server talk out to other networks. Encrypt your internal IMs via your Jabber server.
Put in a SIP server, and use softphones for most people.
The exception to using standards and doing it yourself: Offload email to GMail or similar. Use their calendaring. Get android phones and be done with it. Then use Thunderbid to work with your GMail accounts and calendars... using STANDARD protocols, such as ICAL, IMAPS, etc.
But, use Standards where you can.
2nd'ed. Great little box. The originalk Atom 220 CPU on the original Revos are a little slow on true 1080p at times (though the video is off-loaded to the GPU for decoding); the followup Atom 330 based units were a dual core CPU. I've been using mine as combined backend & front end for some time - plus file server, NTP, DNS server, IPv6 gateway and tunnel endpoint, music DAAP server, and DLNA server (mediatomb).
Was wondering what the product line is for this small form factor from Acer. Atom has continued to evolve, but I havent seen any more products....
I visited in July this year with GLUGG. Great day out. Had a fly-past too.
Now my DVD player is going to be slow to respond to UI, just like my mobile phone is now. Next they'll be putting Windows Mobile on these things too, and it will take 45+ seconds to 'boot' the damn thing, like with the Orange C500 phones....
It looked different, so I snapped it with my EOS-300D: www.james.rcpt.to/2004/newyork/IMG_3876-p.html
Link: Root raid 1 on Debian.
Nuff said.
Well, it's been a few days, and no one has written to me; either the person hasn't seen my post, or this confirms this is a troll. Move along; nothing to see here.
Please contact me immediately; I cannot see any Austrian, German or Egyptian people who registered for the conference who were not accounted for. Please email me at james_AT_rcpt.to and give me your full name, real email address, and other data you entered in the conference registration form, the date this incident apparently occurred, the names of your 3 friends you were with, the flight number you were on, and the full names of the Qantas staff you dealt with. If you send me this information, we (the LCA2003 organisers) can track this down. If you do not send me this information, I will assume this is a complete fabricated troll (esp. since this was posted as an 'Anonymous Coward').
Debian Raid1
Using hdparm(1) to tune up the disks, gets a sustained 35 MByte/s reconstruction. Very good as a small-medium environment file/print/mail/proxy/dns server.
And like Novel Groupwise, IIRC.
Help the free public wireless networks: Perth, Canberra, Melbourne, Adelaide,Sydney, Gold Coast (QLD), Tasmania, etc.
I have a machine with MSIE 6.00.2600.0000, and it STILL does not install. Take a look at this page I have written with a screenshot clearly showing the MSIE 6 version dialog box, and this package not wanting to install because it requires MSIE6!
So how long before the FBI virus is modified to carry a different payload, almost identically matching the same visus (eg, MagicLanternA)? Will they detect this then, if it is no longer doing the dirty work that the original virus was supposed to do? Looks like an easy way to cause havoc to me...
We're also hoping to run a small Debian Conference for the Asia-Pacific Debian developers and users. It'll be pretty informal; we're asking people who would like to talk about a subject to also email lca-cfp_AT_linux.org.au. See this for more information. It'll be on the Monday and Tuesday, with LCA 2002 starting on the Wednesday.
My Debian Root RAID 1 ReiserFS + DevFS HOWTO: www.james.rcpt.to/programs/debian/raid1/. Just get two largish IDE disks, because they are cheap, and reasonably fast now days.
The Australian (National daily newspaper) had this story on their site from around noon WST (+0800). In Australia, regional LUGs are doing a nationwide InstallFest to celebrate.
These were taken when Buran was in Sydney, January 2001. The first few pictures are from Linux.conf.au 2001, the last few is when the Perth, Western Australia mob went to the exhibit in Darling Harbour. http://www.james.rcpt.to/2001/lca-2001/day5/.
I'm in a corporatation that still uses Netscape 4. We have some users on Cirtix, and IE does bad things on multi user MS systems: it fiddles with explorer.exe (not iexplorer, but the system shell). Plus, there is (or has been) so many bad JavaScript sniffers out there, it just hasn't been worthwhile. Unfortunately, up to now IE has had a better renderer on the PC, and with the release of 6.1, I'm looking forward to rolling this out. *Not* being integrated into the OS can be an *advantage*. ;)
I have been doing web development since 1995; for 3 years I was the main webmaster for a Australian G8 University. As the article says, it is workarounds for buggy browsers that are causing the problems. Inconsistencies and bad rendering are to blame here -- most ./ers will agree that this is why we are so glad to see Mozilla/NS6, since this is an open implementation that should do it as the spec says.
I wouldn't go to such extreme lengths as to mandate everyone use Javascript to give people an upgrade message. There are better ways; just use strict markup - use HTML4.01 strict or XHTML. Heh... use CSS1 exclusively for your layout, so when people with non-CSS browsers come along and see an ugly site, you can say <SPAN STYLE="display: none">Upgrade your browser to a CSS compatible one</SPAN>.
Raise the bar and encourage people to upgrade that way. You do not want to lock out users of other 'non-mainstream' browsers (lynx, IBM Webspeak, etc) by given them a redirect. However, taking out this 'compatability code' is a very tough case to present in many organisations, where management want it to look like a DTP document.
http://www.rcpt.to/~james/2001/lca-2001/
Seems like there is no support in the final NS6 for MathML? See this link for the tex V MML demo page. Anyone know what the plan is here?
Did anyone see the ABC's[1] satire The Games tonight, where Games Management Head of Administration, John Clarke, had to re-launch the Games website! These guys are right on the money when it comes to their material. Indeed, about a month ago, the satire made a point of possible delays at Sydney Airport, and within 24 hours there was a power blackout at the airport, with huge delays!
Where do their writers come from, and what do they think this week's lottery numbers are?
If you get a chance and you like satire, don't miss it, ABC[1], Monday 8pm, with repeats on now at 6pm M-F until the real Games start. But please, remember that it is a comedy, not a documentary!
[1] Australian Broadcasting Corporation
Mutt.
"All mail clients suck. This one just sucks less." Jeremy Blosser, circa 1995.
Just to reassure everyone that there is no such thing as the last minute to get people to upload: ;)
here is a graph of the number of files in Incoming!
Seriously, congratulations to all package maintainers.