April 30, 2003

Cracked Up

Good news is come at last.

  • The network is running smoothly after we built a replacement fileserver, moved data over — data files were not compromised — and reset users and passwords. Due to Microsoft setting a unique SID for each user account and computer, each user and computer had to be rejoined to the network: a repetitive task well-suited to tired computer folk.
  • An ungrateful email server complained about an unmatched SID and balked at joining, a red herring that sent us scurrying to research uncovering lost identifiers. Finally, after a series of missteps (fatigue-driven perhaps), we created a Microsoft Exchange 5.5 SP3 box and restored the email database without fault, despite its several suicidal threats. And as of something like 4 pm DST Eastern, 29 April the email server was dishing out email. And soon we had users nearly happy.
  • Today we reset the profiles, moved to IPP for printing to avoid the erratic behavior of Windows clients using Samba, possibly due as much to restarting services as indicating a problem.

Next steps: replace Exchange with an IMAP server, move back to a print server from IPP, reset roaming profiles (maybe), determine how best to provide local and network file copies.

I'm not the only one having fun at work. A most eloquent rant from Ad Rem: I'm also really sick of dictatorial commands made on a whim to demonstrate someone's power. I'd also hoped/thought (but have been severely disabused of the notion) that adults didn't act like clique-ish junior high students. A little respect and a little appreciation would be nice, though the core temperatures of certain netherworlds would have to radically change before that would happen.

Posted at 04:02 PM | Comments (0)

April 29, 2003

Cracking

I'm not sure who is going down first the Exchange Server or the Info Sys staff. Crossing fingers that the last iteration (getting rid of the log files so Exchange will really start) may work

Posted at 01:45 PM | Comments (0)

Cracked Again, the Headache

Well, the network is back up, and all seems to be well ... except for one tiny problem: the bloody email server. The unique identifier for the Exchange server was lost in all the recreation of the network passwords and users. And just as promised, there is a unique one for each user, never to be regained if that user is deleted or the identifier is lost. So the server couldn't join the network, although everything was talking nicely. Solution (and yes we read the hacks): rebuild the server. Long process, which does not appear to have worked out as planned ... Good news is email queues nicely, so little seems to have been lost.

Posted at 07:43 AM | Comments (2)

April 28, 2003

Cracked, Again

The buffer overflow problem strikes again. No data file damage, but the network is crippled. No ps, no ls. glibc is damaged so functions depending on it won't work. Well, not quite all is lost. Still have DNS and DHCP and internet access.

Probable cause: rpc buffer overflow undiscovered from the previous attack.

It's Decided Then
No Crack
Cracked
Posted at 09:20 AM | Comments (0)

April 25, 2003

Pause

Senator Santorum’s comments have provoked sufficient retorts elsewhere. Suffice it to say, I have trouble with the concept of a limited constitutional government being pushed into bedroom policing without any compelling state interest other than that the behavior offends Mr. Santorum. Offense is not a compelling state interest. Even adultery, which arguably (and I do mean arguably) violates a contract, is rarely reason for bringing in the power of the state.

Far more interesting, however, is research showing the central role of tolerance— as distinguished from liking or approval — in the creation and maintenance of democratic institutions:

A society’s commitment to gender equality and sexual liberalization proves time and again to be the most reliable indicator of how strongly that society supports principles of tolerance and egalitarianism.

Employing the World Values Survey, this article delves into how views expressed toward egalitarianism between the genders, tolerance of homosexuality and similar marks of self-expression distinguish democratic from nondemocratic societies, not views held on the value of elections or political free speech.

In other words if tolerance as the hallmark of an enduring democratic society. Senator Santorum's lack thereof is the greater risk to our society. Membership in a society of over 250 million souls will test one's patience and one's beliefs, to be sure. (Mr. Santorum's remarks sorely have tested mine.) But that perhaps is the reason why tolerance is so essential: the need to recognize universal rights no matter how despicable you find the person holding them to be.

As an aside, read the article as it focuses on democracy and the Middle East.

Posted at 02:22 PM | Comments (0)

Math and Marriage

Math and marriage may go together like a horse and carriage. Terrible pun. Anyway, /. referenced an article from the Chronicle of Higher Education on using nonlinear mathematical equations for evaluating the dynamics of marital conversations.

Posted at 09:53 AM | Comments (2)

Sharing

Ad Rem writes, Hydra claims that it allows ‘all users to type anywhere in the text without locking parts of the text for other users.’ I wonder if there is anything similar out there for PCs.

Certainly useful stuff. I haven’t found anything yet, but there may be some open software that does this.

Posted at 09:48 AM | Comments (0)

April 24, 2003

Just Because It's On Google

Just because it's on google, doesn’t mean it’s true: The myth of the manual typewriter that William Gibson cannot squelch.

[Well, it seems Google page rankings have caught up with the news. Still, it remains a useful reminder not to equate page rankings with facts.]

Posted at 05:38 PM | Comments (0)

Un Decided

After all, we’re holding with Debian Linux

While FreeBSD offers some useful features, the drawback centers around the filesystem. We've been using SGI's XFS filesystem, a 64-bit journaling filesystem. Journaling allows for rapid recoveries from crashes by obviating special filechecks for consistencies. XFS is designed for handling large files: a 1 million terabyte file limit and 2 TB filesystem limit on Linux. Incidently, backups can run while files are in use. *BSD employs the Berkeley FFS, which cannot match some of the above XSF features and which loses more user data in the event of a crash and requires a longer restore time as it runs fsck post-crash.

It's Decided Then
No Crack
Cracked
Posted at 12:52 PM | Comments (0)

April 23, 2003

Settling in with SARS

  • SARS appears to be mutating rather quickly, based on comparisons of the viral structure between cases in southern China and Beijing. Whether this will result in greater or lesser virulence is as yet unknown.
  • Cumulative cases: 3,947 reported cumulative cases with 229 deaths.
  • The New York Times noted yesterday Hong Kong's outbreak was stabilizing, although the daily death rate from SARS still exceeds the total for all other types of pneumonia.
  • Also from the New York Times: Beijing is closing its primary and secondary schools until 7 May. Officially China has reported about 2,158 cases, with the number in Beijing reaching 588.

To put this disease in context: malaria, HIV and tuberculosis kill over 5 million people per year and cause 300 million illnesses. Not of small import is that causes, prevention and treatment are available for the three diseases mentioned here.

Posted at 09:37 AM | Comments (0)

April 22, 2003

Disturbing

From Ad Rem Not only are some breeders managing to create structurally unsound animals, the Globe and Mail reports that some people are altering dogs’ appearances through surgery to win.

What is the point to the competition? Unless it is to show off the surgeon’s work? Since obviously ethics are out the window, how about a freaky art show with the top awards for the weirdest enhancement to dogs?

Posted at 10:35 AM | Comments (0)

It's Decided Then

  • FreeBSD on the servers and OpenBSD on the firewall.
  • Quake is going on Sean's machine to, ahem, test the network's robustness.
  • And we tested videophones yesterday with one videophone and NetMeeting. Very cool, not too much pixellation.
Posted at 10:22 AM | Comments (1)

April 20, 2003

No Crack

In response to being cracked, we're considering moving from Debian Linux to BSD, a flavor of UNIX. The logic is thus: it would be really fun to learn BSD, fewer systems use BSD Unix, so the potential number of crackers is smaller, security is a focus of the BSD community, our programs (Samba, Apache, sendmail and similar) all run on any unix flavor, and finally it would be cool to do. The mail server has been running uneventfully for three years on FreeBSD: no cracks, no reboots.

Flavors of BSD under consideration: FreeBSD, OpenBSD, and NetBSD. A quick comparison, although I need to check out their history too.

  • FreeBSD
    • Runs on 4.4BSD
    • Project is to provide stable, simple code. Used by Yahoo, and until recently, ran Microsoft's Hotmail servers
    • Uses a “package,” a gzipped binary distribution for custom installation work.
    • Easy to install and uninstall. A “port” holds the patch to modify the original application source code to compile an application for running on FreeBSD. The installation is as as easy as 1-2-3: download, unzip, and run make
    • Has 8,600 packages available.
    • Has IPSec and IPv6 in the kernel
    • Software written by a core team of 9 with 200 contributors having access to the CVS.
    • Free software. Free as in “ free of charge” and “free to use as you like.” Coding is under the GNU public license , GNU library license, and BSD license
  • OpenBSD
    • OpenBSD is a derivative of NetBSD with the goal of building the most secure operating system.
    • The project audits code to eliminate software bugs on the assumption that bugs will be discovered and exploited.
    • The original package is set to install a minimal operating system, also a security measure. The system administrator is intended to add only desired packages, reducing vulnerability.
    • Open code, either GNU general public license or BSD license
    • Code includes IPsec, IPv6, key engines, Kerberos, free-AFS. OpenBSD is developed and released from Canada under which law exporting cryptography is legal.
    • Reports very few bugs in BUGTRAK
  • NetBSD
    • Focus is on developing BSD for as many platforms as possible. Portability is the watchword for this flavor.
    • Good flavor for research and development environments. The portability factor covers the most hardware; used by FreeBSD to move to PowerPC and by Linux as the basis for the Penguin bootstrap.
    • Uses pkgsrc for applications; can be compiled from source or binary distributions. 3,746 packages available.
    • Supports 802.11 standard (wireless networking)
    • Used by internet service providers for its combination of security and network
    • License is generally in accord with the Berkeley license.

From all of this, what are the trade-offs of each program?

  • All are variants of UNIX and some descendant of 4.xBSD.
  • FreeBSD appears to be the easiest to set up, add applications to and run by a small margin. It has hardware limitations; cutting-edge hardware probably won't have drivers. On the other hand, our servers run on the older equipment.
  • OpenBSD obviously would fit the security bill. But, the auditing procedure necessarily builds in a time delay between new package source code and its compilation into OpenBSD.
  • NetBSD has the super hardware support, and appears to be the neatest. It does have fewer packages, although the ones we use are covered.

Gut reaction is FreeBSD (simplicity and stability). OpenBSD definitely trumps on security, but we don't have extraordinary requirements, such as transmitting federal court trial documents and evidence. Need to look a bit more into the VPN standards of each as we use that for communicating with remote offices. Also, will we want wireless (that is NetBSD)??

Or should we put OpenBSD on the firewall and one of the other two on the other machines??

Cracked

Posted at 06:43 PM | Comments (1)

April 18, 2003

Kevin Mitnick Rules

He acquired passwords and other private information to crack systems, by asking people. La plus ça change. Now systems administrations install patches, provide passwords, train users, rotate passwords. And guess what? The majority of workers would exchange confidential information for a pen! Okay it's not quite scientific, but the study's point remains: people are the strongest or weakest security link, not the equipment.

Posted at 04:53 PM | Comments (2)

Cool History

Siberian ice cores turn out to contain 400,000 year old plant DNA, the oldest yet known specimen. The cores also contain soil samples with DNA fragments from horses, mammoths and bison.

And, 8,600 tortoise shells carved with signs appear to be the oldest evidence yet of written language. The shells were found in graves in Jiahu, Henan Province in China.

Posted at 12:53 PM | Comments (0)

SARS Again

The current count is 3,389 cases of SARS and 165 deaths.

Of note:

  • China's figures have not included cases in military hospitals, but perhaps the decision to report military cases in Guangdong will set a national precedent.
  • The coronavirus has conclusively been proven to cause SARS
  • Australia and Mongolia each have reported their first three probable cases of the disease.
  • A reliable diagnostic tool does not yet exist. The WHO states hospitals have no option other than to isolate patients and manage them according to strict infection control practices as precautionary measures.
Posted at 12:48 PM | Comments (0)

April 17, 2003

Lost History Part Deux

The Washington Post today reports the resignation of the chair and a member of the President's Advisory Committee on Cultural Property. Martin Sullivan, the chair, wrote, While our military forces have displayed extraordinary precision and restraint in deploying arms—and apparently in securing the Oil Ministry and oil fields—they have been nothing short of impotent in failing to attend to the protection of [Iraq's] cultural heritage.

[May 8, 2003: Salon, the New York Times, and the Washington Post with similar sources have been reporting over the last week or so that while objects have disappeared, some objects were intentionally removed for safe-keeping and many have been returned, whatever the original reason for their removal may have been. US customs officials and military assisted in the recovery.]

Posted at 12:19 PM | Comments (0)

April 15, 2003

Lost History

It's gone for good, much of the history of Mesopotamia. As a letter writer scribed, these items survived the Babylonians, Assyrians, Persians, Ottomans and Iraqis only to be destroyed for lack of a few soldiers. Two laments one terse and one verbose express it better than I.

One of the lost pieces

Posted at 12:01 PM | Comments (1)

spam

./ posted Why Am I Getting All This Spam?

  • Conclusion: Robots can easily harvest emails from public websites, and these generate by far the most spam.
  • Easy solutions: post email to sites in human-understandable form, such as email at domain dot com or using HTML character coding to obscure the address.

Several sites have also written about AOL's suits against spammers and an enterprising Marylander who posted a spammer's contact information.

Sounds like I have some website work to do, because frankly my organization has limited bandwidth and storage (who doesn't?), and better things to spend limited funds on than unwanted, unsolicited advertising that annoys end-users.

Posted at 10:19 AM | Comments (0)

April 14, 2003

Cracked

We was cracked. Samba could be attacked using a buffer overflow. Fortunately, it was an opportunistic crack and possibly ethical. As in Samba was shut down on vulnerable servers, but no actual damage incurred.

Posted at 02:16 PM | Comments (0)

Unspooled SARS

Canadian scientists have uncoded the genome behind the coronavirus causing SARS, named the Urbani strain. This means (1) testing for the disease is now possible and (2) the search for a remedy can begin. The test makes it possible to confirm suspected cases (and identify silent carriers, if there are any). The WHO reports 2,960 reported cases and 119 deaths worldwide as of April 12th, of which 166 cases were reported by the United States.

More on the lab which mapped this coronavirus. The lab used a Linux-based Beowolf cluster.

Posted at 10:18 AM | Comments (0)

April 10, 2003

Total Befuddlement

Salon provides more details on the privacy risks inherent in the new computer-assisted passenger screening system (CAPSSII), designed to replace the current “no-fly” list for airlines. The known flaws of the old one (who is put on the list and why is apparently classified as is the rationale behind assembling the list) are to be replaced with credit reports with their well-reported shortcomings.

The counter-argument is this new system will help prevent terrorists boarding planes. Not necessarily, as CAPSSII can be reverse-engineered. Random searches of passengers remains more effective: there is no system which someone can counter.

Total Information Awareness
Freedom or Free-ish?
Posted at 04:36 PM | Comments (0)

SARS Again

Several useful bits, to help understand the SARS outbreak.

SARS has been identified as a member of the coronavirus family.

About coronaviruses:

Corona viruses are named for their corona-like (halo) appearance in electron micrographs. The corona or halo is due to an array of surface projections on the viral envelope, one of which is the E2 glycoprotein, the viral attachment protein and target of neutralizing antibodies. Corona viruses are second only to rhinoviruses as a cause of the common cold. Infection is of the epithelial cells and remains localized, due to the optimum growth temperature of the virus which is 33 to 35 degrees.

Posted at 11:02 AM | Comments (1)

April 08, 2003

Junk

It's time for spring cleaning. At least that's what I told myself, when looking at the mess of clothes in the closet, on the washer, hanging above the dryer. Of course, on a lovely spring day, staying inside to consider laundry, let alone fold one shirt, is just not possible for this human. Absolutely not. My legs had me outside in no time at all.

Of course, were the spring cleaning merely limited to the temporal, no problem would exist. It is just as easy to put on a shirt in the laundry room as take one from the closet. The problem is more spiritual, I suppose. My head feels jumbled, unsorted, like a pile of clean, crumpled laundry. Somewhere in that pile is what I seek, but it lies buried, wrinkled, and then I notice my favorite pants still rest in the dirty laundry pile. Surely if I just sort through all these thoughts, put something to paper — writing sorts them out — the world will be clearer.

But then I remember the confusion isn't in the thoughts themselves, but in the larger issues: what do I want to do when I grow up? Oh wait I am grown up. So why don't I have a better answer? I enjoy fiddling with computers and reading about them as much as anything. But this is a large field, how to narrow it down? And in 5 years what should/could/would I do? I don't know. I have no idea. I never have an answer for that question.

How then to consider the non-work fun? My piano playing is horribly rusty and I should revive that. In the meantime there is the discovery of gardening (okay, an excuse for more tools and trips to the hardware store). And hiking and reading, and seeing plays. How many have I already missed this year? And cooking for friends. Then there are the talks around town. And I haven't been to many art shows lately. What about music? Is there an adventure I must do, a book I must write? Maybe is about as strong an answer as I can provide.

Well writing this down only shows the jumble is as jumbled as ever. Blast. Somehow, I feel as though I should have a life's plan, instead of a pile of interests unsorted and compelling. Must be the result of living in a country devoted to 10 days to a happier, healthier, wealthier and more spiritual chicken soup for life guide.

Posted at 09:50 PM | Comments (3)

SARS

Here's a picture of the new coronavirus behind SARS. So far the numbers are 2,671 stricken with SARS; 103 have succumbed.

Posted at 05:07 PM | Comments (2)

Adjustment

I finally moved the blog to the folder /carpedecorum so the URL [http://latitudinarian.org/carpedecorum] now looks something like the blog's name.

Posted at 11:03 AM | Comments (0)

Silliness on a Grey Day

I am a Fedora.

The hat of the adventurous, I am spontaneous and active, perhaps sometimes a little foolishly. Regardless, I always come out alright. What Sort of Hat Are You?

Quiz found by Janni

Posted at 10:30 AM | Comments (3)

April 07, 2003

Total Information Awareness

The Practical Nomad reveals all the little secrets your travel plans may contain, both corporate and private, already stored in a few handy databases and ready for mining by your friendly US government. John Poindexter would be proud.

Freedom or Free-ish
Posted at 02:33 PM | Comments (0)

April 06, 2003

Dictating Doctrine

Talking Points Memo points to a lucid critique of the Bush administration's doctrine of regime change. Ken Jewitt's piece for the Policy Review raises the clear and compelling point that threats of regime change probably encourage nuclear proliferation, not lessen it (North Korea has already called our bluff). And, historical references should not be bandied about lightly: Iraq is not post-war Germany during the Cold War and creating democracy is not simple. Finally, so goes Iraq, so goes the Middle East contains more wishful than thinking.

Posted at 09:38 PM | Comments (0)

April 04, 2003

Ante Up

Go and chess may not be the best games for military strategy after all; the information is all there; it's only a matter of uncovering it. Poker on the other hand employs strategem and deceit, propaganda and ruthlessness. Specifically no-limits poker. Goal: all the chips (winner-take-all). Requirements: chutzpah, psychology, steel nerves, and of course a poker face. Lady Luck need not apply.

Posted at 03:46 PM | Comments (0)

Funny Bones

A nice little piece on unfurling history from the study of DNA noting that only about one gene in a hundred separates any one from any other given human. It also raises the question again of whether language set us apart from other human creatures.

Accidents Happen

Posted at 12:43 PM | Comments (0)

April 02, 2003

Day 14

It's the 14th day into the war and already yesterday the NYT reported the briefings are getting heated. The military's feud has gone public full-scale too: Myers roundly chastized the military in Iraq and at the Pentagon for criticizing The Plan.

Freedom or Free-ish?

MSNBC reports in its 31 March piece, Profiling by grocery receipts? that the US government is skirting laws prohibiting the gathering of data about citizens by relying on data — credit card receipts, grocery receipts and similar — collected by private companies. In theory, the data mining is to profile potential terrorists among us. Two huge problems: we don't know it works and the government is deliberately skirting laws designed to prohibit this very action.

Third problem: relying on databases maintained by profit-maximizing companies. Companies don't gather accurate data; they rightly gather sufficiently accurate data. At a certain point more accuracy is too costly to meet a company's goals. That's entirely different than maintaining a secured database for who is permitted entry into a sensitive location. Different set of trade-offs. So determining who boards a plane and who is a threat and who is detained for questioning on the basis of company-maintained data is just plain foolish. (Not to even touch on the problem of people who share the same name.)

Posted at 01:58 PM | Comments (1)

TCP/IP security

./ reports a new bit to be added to the TCP/IP header to enhance security. The request for comments outlines how the evil bit will distinguish unusual packets from malicious ones.

Posted at 09:28 AM | Comments (3)

Mystery Flu

The WHO recommends no travel to Hong Kong and Guangdong until the means by which SARS is transmitted is better understood. So far treatment for the disease consists of isolating the patient and treating symptoms. No drug can be recommended for prophylaxis or treatment at this time, according to the WHO, nor are antibiotics effective (the disease appears to be caused by a virus).

Posted at 09:20 AM | Comments (0)

April 01, 2003

The biowarfare you should really worry about

Antibiotics have reduced many of the scourges that damaged or killed many of us; indeed pencillin in World War II all but eliminated the number one killer of soldiers: infections from war wounds. Others include strep throat, pneumonia, tuberculosis, food poisoning and meningitis. Sadly, many diseases once again threaten lives as the bacteria that cause them have become resistant to antibiotic treatment: typhoid, tuberculosis, malaria, strep, to name a few.

Running short on supplies such as ammunition can be deadly in warfare. Antibiotics are weapons in medicine, and they should be treated as gingerly as weapons, as their indiscrimate use saps their potency. Today's news on that front:

The Annuals of Internal Medicine published the findings today that while antibiotic use is falling in the United States, the rate of broad-spectrum use doubled from 24% to 48%. Too frequently doctors prescribe broad-spectrum antibiotics without a clinical rationale. As a result, the medical profession risks losing some of its most potent therapies for patients with the greatest need.

Antibiotics are among medicine's most powerful tools. However, their popularity is their Achilles' heel. The more frequently antibiotics are used, the more they promote the bacterial resistance that undercuts their effectiveness (9). As a result, physicians can be tempted to use newer and broader-spectrum agents, thereby fueling the expanding cycle of resistance (2, 14, 20). ...

Our study shows some encouraging signs. Overall, community-based outpatient physicians prescribed substantially fewer antibiotics over the course of the 1990s, particularly among children. Moreover, antibiotics are being used less often for illnesses for which they have limited utility, such as upper respiratory tract infections and acute bronchitis. This may reflect the success of many recent educational interventions to discourage unnecessary antibiotic use.

[But] increasing use of broad-spectrum antibiotics also has important implications for bacterial resistance. In addition to their broad-spectrum activity, quinolones, amoxicillin–clavulanate, and second- and third-generation cephalosporins are widely used for empirical treatment of severe or complicated infections and for directed treatment of otherwise resistant organisms (31-34). The expanding use of these agents, which by the late 1990s made up more than one third of all adult antibiotic prescriptions, can promote escalating antimicrobial resistance within both individuals and communities (35-37). As a result, the medical profession risks losing some of its most potent therapies for patients with the greatest need

For more reading on drug resistance to antibiotics:

And here's what you can do, according to the CDC:

  • Antimicrobial drugs intended for bacterial infections should not be taken for viral infections such as colds, coughs, or the flu.
  • If your health care provider determines that you do not have a bacterial infection, ask about ways to help relieve your symptoms. Do not pressure your provider to prescribe an antibiotic.
  • Take medicine exactly as your health care provider prescribes.
  • Take the antibiotic until it is gone, even if you are feeling better. Do not save the medication to treat yourself or others later.
  • Protect Yourself from Contagious Diseases.
    • Always handle, prepare, and store food correctly.
    • Get immunized. Ask your health care provider which immunizations you or your children should receive.
    • Wash your hands thoroughly using soap and water for 10-30 seconds.

The CDC website provides useful information to parents about antibiotics and children's illnesses.

Posted at 10:20 AM | Comments (0)