The rise of ransomware and the devil that is Cryptolocker

Over time, with advancements in anti-virus and anti-spyware, the ne'er do wells would eventually evolve. Their cunning and understanding of human behaviour has resulted in the devil that is ransomware. An innocent email from Australia Post arrives or a letter from the Australian Federal Police turns up in your inbox - most people are curious, even excited by an unexpected package, or concerned about a letter from the AFP and so they click the link. Boom! All their data starts to be infected - encrypted with heavy encryption and a lovely letter to say pay us or never get your stuff back.

We've seen it live and in the field on at least 5 occasions and had one or two clients actually pay the ransom - buying their Bitcoins and getting their decryption key back. Sadly, we've had people try this only to find out the website they need to talk to has been closed down by the authorities and their data irretrievably lost - until we restore it from backups that is... but sometimes even this doesn't work if people haven't moved data to the servers for backup. It's not good.

It seems like it was inevitable that a new mode of making money from people would have to emerge. Stealing credit card details and personal information - while profitable - is also fraught with danger of being identified when you try to use them. An anonymous ransom - helpfully supported by an anonymous currency - means a relatively straightforward exchange - a key for your own data back. It's kind of elegant in a way. This doesn't mean I don't think these people should be prosecuted - I've seen and experienced the stress and pain of business owners as their data becomes inaccessible and I'd love to pass that back to the perpetrators.

There are ways and means of protecting yourself from this, but it comes down to being systematic about it - just like these thieving bastards have been. Consider your vectors of risk:

• external influences
• email
• websites
• physical influences
• users
• dodgy USB keys
• active attacks
• hack attempts
• social engineering

There could be more.

Defending against these requires defence in depth. Some of these things are passive - they do the job all the time, with managed updates and some are active - people actually need to think about what's happening. Here are a few examples:-

• email scanning (externally if possible)
• strong firewall
• internet scanning (if possible)
• anti-virus and anti-spyware on the machines
• Chrome instead of good old IE (or awful Edge)
• user education - the single best form of protection and typically the one with the least amount of time and resources put into it. Honestly, it makes me experience sadness that people aren't trying to get their staff skilled up a bit on the computer. It doesn't take all that much!
• backups
• backups of backups offsite
• restorable backups

Of course, this kind of systematic approach doesn't just cover the awfulness of ransomware, but could be helpful against many other risks - attacks, environmental (fire / flood / famine / Justin Bieber), malicious employee activity (still identified as the Number #1 risk by many security dudes) and other "out of the box" issues.

I haven't mentioned patching or updating your system although I know this is critical. Updates are a beast of a thing, and anyone caught with a SharePoint update that means a database rebuild will feel where I'm coming from with this - security updates can cause more pain than if the damn thing was hacked or compromised in some way. Understanding the impact of an update on key infrastructure is very important and it isn't a passive security mechanism like some of the other things I've mentioned.

Reporting is also a tricky thing - yes it's great to have all this stuff going on, but who wants to plough through 20 or 30 system generated emails in a morning? I have for the last 12 years and it's bollocks. I don't care for it at all, and to be honest - it becomes so rote and routine that I miss things (sometimes very important things) because I'm just skimming. I urge you to consider some sort of consolidation report or webpage with information colour coded according to rules so that things going wrong are immediately obvious. We only have a limited attention time (and I think I've written about this elsewhere) and so we need to make sure that time is being carefully put to use and not wasted on stuff that's all OK and we don't care about. Likewise, with Nagios or other monitoring software I'm using, the thresholds for things going wrong is quite high - i.e. tell me when something is really going to be in trouble, not that it's just experiencing some sadness now. 

This post has diverged somewhat from cryptolocker, but the principles in keeping that piece of garbage out of your network are similar across a wide range of threats. 

The struggle towards productivity

Anyone working in the IT sector knows how hard it is to get a flow going without interruptions. Working in a small business and supplying support for everything in IT to our clients, the phone rings constantly (desk and mobile) and email never stops pinging in the background. Add to this our obsession with multiple screens, a billion web pages open, Twitter, FaceBook, Instagram etc and there is a huge amount of data overwhelming us.

We also get jobs logged from our other staff members, clients can create their own and the phone calls / emails generally generate work to be done. Keeping up with all of this is hard, and the hardest part is keeping all the tasks straight and on point. We use multiple systems - OTRS and another, non-cool job management system for our tasks. This is a nightmare too - jobs coming in to both, keeping them updated and trying to remember if you've actually updated the job or not. Plus trying to keep on track with a complex task long enough to get the thing done.

I've been working with my guys on being task oriented and not worrying too much about time. If they are working on a task for a client, and it's all billable, then move onto the next task and do it, then their time is being used productively and everyone is happy. This seems to be the best way to work with tasks.

I have also found that when the pressure is on, I leave my dual monitor setup and take my laptop off somewhere to work, usually the boardroom with no direct extension and leave the mobile phone on my desk. The more I do this the more I wonder if having dual monitors is a hindrance and paying attention to my multiple mobile devices is worth doing. I read research that suggested after a break in concentration it could take up to 20 minutes to get the focus back on what you were doing.

We have been aiming to have 90 min stretches working on a single task, then a break for a bit, then back into it. It's incredibly hard, but getting the other staff around us on board is making it easier. With a bit of luck we can continue to push this forward. Leave a message in the comments if you have productivity tips that work for you!

Service - what does it mean to you?

Recently our little company has been very busy and while it has been tricky to maintain a high level of service, it's something we are managing very carefully. Interestingly though, we have had clients ask us to do things quickly, easily or cheaply. Generally there is no difference in the service provided, however, as our time becomes more precious, it's easy to take the client's request and act on it in the manner they have requested.

For example - "Can you quickly wipe these computers and then roll them out to be sold?"

"Sure - how much time and effort do you want us to put in to this?" (read: how much money do you want to spend on using our valuable time).

"Not much, just make sure our data's wiped and then get them out the door."

OK, so we clear the data, wipe the free space or re-install after a Darik's Boot And Nuke (DBAN) and then roll them out.

Now our client says to us that it hasn't been done properly and they want an explanation. For the first time ever, I reckon, I pointed at the email trail and said to them "You wanted fast, easy and cheap. You got it. If you want well done, comprehensive and completely satisfying, that does not fall into the fast/easy/cheap categories".

Interestingly the client sat back for a moment, said "You've got a point there. Can you sort this out properly?" Well sure I can and I have, but the cost in my time is there.

There's a line in the movie Tango and Cash where Jack Palance replies to two of his underlings telling them "Quick and Easy. Quick and Easy is how you make a cake." and then goes on to talk about killing Tango and Cash. My point to the client today was "Quick and Easy is how you make a cake - not have a well thought, solid and reliable IT infrastructure." Wake up peeps - spend some money and do it right the first time and stop being disappointed when you pay minimal dollar and get minimal effort.

Why I won't use MelbourneIT for domains any more

Recently I have had three new clients come to our company for IT support. Each one uses MelbourneIT's domain name services - MelbourneIT hosts the domain name, the registry of that name and the web sites. In all three cases I've needed to make changes to DNS records and have been unable to get usernames and passwords for the managed services from MelbourneIT, despite having the authorised users available and requesting the changes themselves. Emails with reset account details have never arrived and after an estimated 3.5 hours on the phone I've given up. We'll set the DNS records up somewhere else and migrate the domain to a new registrar.

Poor customer service like this is not unusual in the IT world. Often a client will ask who to use for the domain names, where to host their DNS etc. I've always had very good experiences with Westnet and now with iiNET, reasonable experiences with Telstra on the Business Broadband and associated services and good experiences with Netregistry. While my company is a Telstra Fixed and Data dealer, I'm not personally involved in that part of the business and we don't resell any of the other companies services. I've used Netregistry personally for some years now, and I have my DNS hosted with Westnet still. Both organisations have been great to work with and I'm very pleased with the experiences I've had. I recommend them both to people I have as clients and friends. Contrast that with MelbourneIT's apparently poor customer service and I won't recommend them to anyone - not until I see a real improvement there.

I don't quite understand why so many companies - some with great products - skimp on customer service. Most of the time, the client is buying the sales chap or the customer service rep as much or more than the product in question. I always keep this in mind with my own clients - great customer service makes for sticky clients - they won't leave. Admitting mistakes can be seen as very detrimental, but I've always found that the admission, an apology and a plan for reparation have always been very positive. I've read too that in medical circles, some hospitals and doctors are apologising if things go wrong and people forgive them enough to drop law suits. That's a bit off topic, so I'll drag it back. The technical support staff I spoke to at MelbourneIT offered support but have failed to follow through and this is something that is now impacting on my relationship with the clients - they've started seeking a scapegoat for the things that aren't happening in a timely manner and unfortunately we IT people all get tarred with the same brush to a greater or lesser degree. It's been frustrating enough I'll take my business elsewhere and my clients too. Unfortunate for MelbourneIT but good for others.

Appalling Palin

What was McCain thinking with Palin? And what the hell are Americans thinking with Palin? I know that here in the US we have idiots like Julia Gillard, but at least she has spent time in the political system at the top end, not just in state politics or even worse, as a mayor of a city and claiming that to be a justified credential for the top job. This Palin person seems to be uneducated and completely unaware of any broader issues. I mean honestly, if you can *see* a place you are not an expert on it. I can *see* the airport - does this mean I'm qualified to be an air traffic controller? But enough of such easy attacking.

I read a fair bit of stuff on the net and I see other women reacting to Palin very positively. Have they taken leave of their senses? They do not seem to be questioning her credentials for the position she hopes to assume, i.e. Vice President of the US. Sure Dick Cheney is a meglomaniac and all, but he at least has the ability to make his crazy ideas work. Palin doesn't seem to have any ideas and appears to be there to attack Obama. When Australian news anchors said that she did well in the debate against Joe Biden, Obama's VP candidate I laughed out loud. I saw the debate and frequently buried my head in my hands with embarrasment for Palin. She just doesn't have a clue - and what's worse is, no-one else wants to point it out! I guess it's like Al Gore. He was too smart for them. Sarah Palin is about the same intelligence as the mob and as such, they are comfortable with that. Let's have the country run by someone who isn't much brighter than we are! It's not as if her job is bigger, or has more responsibility than "Joe Six-pack" does. 

This is a rant and it's a rant at stupidity which I cannot abide. Every time I find myself being stupid about something it's makes me very unhappy indeed. It's an interesting juxtaposition though, Obama vs McCain, Biden vs Palin, New Ideas (including *gasp* diplomacy) vs Entrenched Old Ideas (mostly about using force to negotiate). New vs Old energy. Although Palin is young, she has an old mindset. A "we're the most powerful country on earth, let's blow some shit up! Hoo UH!"

Personally I think a vote for McCain/Palin is a vote for the past and for the ways things are currently run (i.e. Bush/Cheney) and a vote for Obama/Biden is a vote for the future and for the chance at something better.

It reminds me of this old adage: Insanity is defined as continuing to act in the old way and expecting something different to happen (or words to that effect).

*Update*

It now appears that the initial positive upswing of support for Palin is failing miserably as people realise she is unqualified for the job. More people are looking at McCain and saying: "He's pretty old, and he's had cancer - do we really want Palin as the President?" A damned interesting question I think.

Ubuntu 8.04 Review

As my legion of fans will know I've been a Linux advocate for many years. Back in the old days I started out with Mandrake and Debian. Debian for servers, Mandrake for the desktop flavour of things. I stayed with Mandrake for several years and then switch to SuSE. When this upstart Ubuntu appeared on the scene with it's livecd goodness I gave it a crack - I think it was version 6?

Now with the latest and greatest version on my Dell desktop I've decided to review it's usefulness as a desktop operating system and share my thoughts. My first thought is, I like it. The interface for upgrade/installation is easy as pie to work with, I like the fact you can include encryption for filesystems and overall it's quite polished and nice to drive. The interaction with the windows network here at work is acceptable, I do a lot of terminal server based stuff and that all works a treat. I like the enormous array of software one can install and use and I've found nmap and nessus to be so handy as I probe our network for various weaknesses.

Possibly the only thing I'm not a fan of is the default theme. Brown is just not my colour, but this is a very minor annoyance. I've had no problems at all with the installation, it just works and for me, that's a very important factor. Like a plumber with a leaky tap at home, the last thing I want to do is to be trying to solve my own IT problems in the midst of trying to help others.

All the normal Linux goodness - multiple desktops, excellent shortcut key support, terminals, Firefox 3, Amarok and the like are present and work very well. I'm using it on a P4 2.0GHz Dell GX240 with 512MB of RAM and a baby hard disk (about 20GB) in it. I've pieced this machine together from parts because I like the small form desktop. I find Ubuntu to be much more user friendly than Vista and there is nothing I can do on Vista that can't be done here on Ubuntu. Printing, device detection etc all excellent. I recommend you give it a try. I'll be installing OpenSuSE 11 over the weekend (hopefully) onto a very similar PC I have at home and I'll review it once I'm done.

Review: Treo 750

Recently my JasJam decided (after it's 5th graceless crash to the ground) that it would only work under certain conditions. These include the 4th blue moon of the year, only on days starting with X and the like. You get the picture. Adios JasJam.

So being phoneless is no fun (although very quiet :-) ) Being a geek and needing email access and the like, but refusing to have a crackberry, I opted to have a bit of a look at the Treo 750. Compact, nice weight, nice screen and the keys feel good. Okey dokey. So being a high powered manager I demand and receive one immediately (ahh sweet sweet power). I've been using it for a couple of months now and here are my thoughts:

Windows Mobile 6 - much nicer than 5. Speedy and hangs up in a quick manner. I like that. Interface is nice, the green is very pretty and it has some useful functions. These things I like. Very easy to set up mail and stuff and I like the way it handles text messages using threading. Aye, that's pretty. I *still* don't like that you can't have an MP3 for the alarm tone. Come on! It's 2008 - catch up Microsoft!

Stylus - cunningly placed, nice weight, unlikely to get lost in the pocket and works well. I like it.

Keypad - I like the keypad too, although the buttons are small and I sometimes hit the wrong ones when I'm not paying enough attention they have a lovely tactile response to them.

Generally it's a good device. It hasn't crashed yet on me and it holds a good charge given I use it extensively throughout the workday. I can get probably 3 days of battery life out of it which is great. It's weight, shape and size are pleasing also. In general I feel this device to be a better one than the JasJam was. It has mini-SD memory (bit of a change from micro like everything else). I promptly put a 2GB card in there and it works great.

It lacks a front camera for video calls (but I never make video calls so who cares). Also, the camera that's built in has poor resolution and the like but again, that isn't why I got it. It does a reasonable job and that's really all I care about. Sound and voice quality are fine, dialling easy.

So I'm quite happy with it. It's not quite as good as my e61 though on calls and the like, but is smaller and easier to deal with than the e61. So in conclusion - not a bad bit of kit at all.

Self Worth

What do you think of when someone asks you about self worth? Is it merely a financial thing? Or does it refer to an overall way you think about yourself, your values and value or where you are going in life?

I ask these questions because I have recently had great cause to question my own self worth. Someone I care deeply about lost a someone they love recently and I was helpless to do anything. I am still feeling this way as I cannot do anything to save the person in question. This naturally led me to question my own self worth, my self-esteem, and confidence in myself. I've learned a few lessons and I'm not sure if they'll help others if they go through this, but I'll offer them anyway.

It's not always about you
This is something I've struggled with. When something bad happens to someone else and you can't help them, it's not about you. It's their grief, pain and anger that is shaping the situation. All you can do is offer support and if they choose to take it, then so be it. If they don't then that is their choice and you have to accept it, hard as it is.

Some of it *is* about you
Questioning your own self worth, feelings of inadequacy and jealousy in this sort of situation is about you. These things spring from internal conflicts or problems, not external ones. My challenge has (and still is) to move through these feelings without allowing them to impact on my loved ones. Jealousy in particular is dangerous. Sometimes it's warranted and sometimes it's not. When it isn't, then it is critical it can be controlled because it may very well develop in control issues. I refuse to allow this to happen - controlling someone in a relationship is the antithesis of why I'm in the relationship.

Focus on your blessings
Put the positive thoughts and images back into your life. Our thoughts shape the way things happen. Fear, jealousy and the like are negative influences on our life and shape things in the way we fear. Replacing negative thoughts with positive thoughts is a key factor to moving past these problems.

Seek help
Find a therapist, or a kinesiologist, or whatever to talk to about this. They will offer (if you get a good one) ways and means to work through feeling low self worth. Self Worth is tied up with lots of aspects of your life including (but not limited to):

• self esteem
• prosperity
• confidence
• love of self
• love of others

Of course, these are pretty big things for anyone. For me, it's been about how I feel about myself and what my life path is. In context with my life, the double hit of what has happened and the sudden and immediate requirement for me to address these problems has put me through a loop. Most of the time I don't know how I feel with the exceptions of pain, loss, confusion and frustration.

My final piece of advice is this: Once you start to build or re-build your self-worth it's a tough road. It is your choice walk it or to remain where you are. My choice is to walk that path. I recommend you do it too. Once you look at where you were and the changes you've made to get to where you are, it's pretty amazing. I don't think I could go back to being the person I was before. So much of the sweetness of life passed me by. Now I'm actively looking for it and finding a small measure of peace as I go along.

New Games and the Quality of their Storylines

I'm a fairly avid gamer. Since I was a wee fellow, I've enjoyed PC games and console games. Over time, though, it's become less of an interest as the story lines and general plot development of games seems to be in a decline. The imagery, the music, the sound have all improved. The hardware requirements have likewise increased to match pace with the increased demand on processing power and available RAM. What gets me is that older games were more interesting. Less bling and more substance if you understand what I mean. Take the early Police Quest, King's Quest and Space Quest games. There was a lot of work involved in those games and I can remember being immersed in them for hours. Then there was the F117, F15, Test Drive and various other simulator games that worked so hard for realism. And let's not forget the excellent role play games like Pool of Radiance and the games following it.

Nowadays I've got an Xbox 360, Xbox, PS2, and PC to play game on and none of the current titles really grab my interest. I've finished playing Halo 3 recently and while it wasn't a bad game, it was far too short for my liking. I started with Halo on the original Xbox and loved it. The game was great. Halo 2 never seemed to run properly for my liking on the Xbox and I tired very quickly of the long load times. I'm not there to sit around waiting for the next bit to load, I've got more things I want to do. Likewise, Gran Turismo 4 is not as good as Gran Turismo 3 to my way of thinking. Sure it had a few better bits and stuff, but at the end of the day, I played GT3 for a lot longer than GT4.

Take for example the Need for Speed games. I've been playing those since the first one came out. I loved NFS High Stakes and its sequel NFS HS II. Gold. Loved the cars, loved bringing other cars in. When NFS Underground came out I liked the new driving challenges. NFS Underground 2 was a revelation. Cruising the city, driving wicked cars - all good. But there was a discordant note. It was becoming easier to do everything in the game. Once you had to have a clue about sliding the car into a high speed drift. Gradually it became so easy that retaining control of the car in the slides became more difficult. The most often response I got regarding this from people was so that kids could do it. I see - let's not force them to learn how to do it properly, let's instead dumb it down so the lowest common denominator can handle it. Seems to be the way of all things these days. Task too hard? Aww poor kid. We'll make it easy for you so you can do it with even less effort than your putting in now. Lets dumb down everything! Yay! Fortunately this seems to have changed for the better - NFS Carbon had some difficult driving required in it and it paid off if you had the time and skill to put moves together successfully.

One of the few games I've truly enjoyed in the last few years has been Knights of the Old Republic 2: The Sith Lords. I've played this through four or five times already and the story is excellent. It's a decent trip to go on. I like to read novels and see the advancement of plot and KoTOR II provides that kind of entertainment. You have to think - consider your options, consider the outcomes and the writers and designers of this game have done a fantastic job with it all. I'm slightly biased though - I love the Star Wars universe and the Jedi. Of course, a game with choices that change many things at once, some subtle, some gross, is not a game with some stress. A good choice is worth some stress over and the rewards are in the results.

Thinking on it further, I guess that shorter games are more appealing for the attention deficit children of the current age. If it's more than 8 minutes without a break, they'll probably lose focus and need an ad break to let their minds recover from the exertion. Does this reflect back on real life? I think it does. The gaming industry seems to reflect the market quite well and so shorter, easier games are going to sell better than longer, more complicated games that have greater depth and require analytical skills and planning.

I really hope they bring out another KoTOR game!

The Culture of Fear and it's prevalence within society

It seems to me as I read my daily doggdot.us compilation of stories from such sites as digg.com, reddit.com, del.ico.us and slashdot.org that the apparent culture of fear in the US, UK and Australia (and various other countries) is maintaining itself very ably through the political machinations of the various governments, most notable of which is the US government. I can only imagine how the members of these groups little hearts shrivel with fear at the thought of the next terrorist attack - or more accurately, at the thought that they could be losing power in some way. And that's what their real fear is. The US continues it's warrant less wiretapping, listening in on countless constitutionally protected conversations while proposing to allow those who have caused this to happen, and those who have facilitated it, to get away with it all. I was pleased to note that the US House of Reps have rejected the telco's immunity bill. I think at some point, all the folks involved are going to have to take responsibility for their actions in this area. And that, gentle reader, is probably their greatest fear.

But using fear as a tool is an old government trick. Hitler used it, and so is Bush. The constant, ominous warnings about terror strikes come at any point his attempts to subvert the US Constitution are curtailed is a source of snorting amusement to me. "If you don't let me torture people for information - there will be another 9/11!" Wow, I bet that's true How about this: the more people you torture, imprison without adhering to the vaunted US laws and the more involved you are with other people's countries and religions, the more likely it is that someone is going to want to attack you. It's a simple act of trying to protect themselves. I liken this somewhat to the Palestinians and Israelis. Israel bomb a bunch of them, cut off food and supplies and what do the Palestinians do? The only thing they can - one of them puts bombs on him/herself and goes and detonates it where it will have maximum shock value. The cycle of violence continues. I don't condone this behaviour, but I understand it. After all, Israel has enormous backing from the US - and why that is is a question I'd like an answer to. I realise that the news reports out of that region are probably tainted by the agenda of the various news and government agencies and are most likely to be biased in some way or another, but I feel that the Palestinians have probably copped a raw deal out of it all.

That's a bit off topic though. I was ruminating on fear and the consequences of having fear drive your life. Bush's veto of the bill against torture is such a thing, and I feel it to be in the worst interests of all involved. It's no longer a possibility that he will take the award for the most craven, mentally challenged President of the United States - I believe he'll hold that award in perpetuity. But, he's a cunning bugger for all his apparent deficits. After all, he has fairly successfully manipulated things so that the "democracy" of the US is powerless. And fear has been his tool.

It was fear too that led to the death of a gay teenager in the US too. WTF? I hear you ask - where did that come from? It's not that much of a leap really. People fear what they don't understand, they fear what is different, and in the case of homosexuality, they fear they may have their own proclivity for it. This kid wore clothes that proclaimed his sexuality and as one of the folks there put it: "That was freaking the guys out." (source: The LA Times) Freaking them out why? Fear!

It is apparent throughout our society. It's not just in the US. Australia has it too and it's appalling. The longer we live our lives afraid, the worse things will be. At some point people have to say: "I'm not afraid of that. I can live with it and it has no power over me." For example, I'm not going to live in fear that the terrorists may strike in Australia. If I live that way, I give them power over me. That's just not cool. No can do and no will do. I call on all people to get a can of Harden Up and drink it. Fear doesn't deserve your obedience. As Yoda put it:

“Fear is the path to the dark side. Fear leads to anger. Anger leads to hate. Hate leads to suffering.” (source: Yoda Quotes)

So very true....



Links:
http://www.ecommercetimes.com/story/House-Rejects-Telecom-Immunity-as-FISA-Clock-Ticks-Down-61671.html?welcome=1203024707

http://news.yahoo.com/s/afp/20080214/pl_afp/usbushcongressintelligenceveto

http://dailykos.com/storyonly/2008/2/14/114259/280/987/456673

Struggling with Creativity

I had attempted to write each day for December, but it's really not working out. When I want to write is generally when I'm trying to work and the great ideas I have are often swamped by the complexities of my tasks here at the office.

Plus, I'm just finding it damn hard to write something interesting! And this led me to an ongoing thought stream I've had and that I pondered in some depth yesterday. You see, yesterday I watched the movie "The World's Fastest Indian" with Anthony Hopkins in it. Basically, the movie is about a Kiwi fellow by the name of Burt Munro who wants his 1920 model Indian motorcycle to be the fastest of its type in the world. He was focussed on his goal, lived, ate and breathed it and eventually it came to fruition. That passion, that burning desire to achieve a single goal - I don't have that.

Nope, no passion for anything in particular. Even the things I really like doing, if I couldn't do them any more I'd miss them but I'd probably move on without lamenting the fact on a daily basis. While I find this lack of passion somewhat disquieting it does have it's benefits. I find a balanced approach to life is much more easy. There is no sporting team that I love, no vehicle I love and no place I love. Likewise for the myriad other things that people are passionate about. I like certain cars, I like certain places and I enjoy various activities. But I'm not so passionate about it that I'll devote my life to them.

Is this mediocrity? A cover for a lack of self-confidence - a feeling that I can't be the best at anything so why try? I don't think so. As long as I'm giving my best effort I'm happy with the outcome. There is always some place to improve, but I'm not so crazed about it that I'll feel awful for ages afterward. I'd like to think I'm a bit Zen about the whole thing. The variables I can control are my own variables - the effort I'm making, the focus I've got etc. I find that the more passionate I am about something, the more pressure is on me to succeed and less enjoyment I ultimately get from it (even when I am successful).

I think that this could be applied to a few things for many people. Sport is the obvious example. I'm tied up with hockey and the like in my home town and nothing disgusts me more than moron spectators screaming at their kid, or someone else's kid or the umpire for what is happening on the field. There is very rarely a positive slant to these comments and it doesn't serve to help anyone out. Isn't the object to enjoy one's self whilst on the field? Don't we want to encourage our kids to do well - but praise the effort they make, in case the results aren't as wonderful as we expect from our progeny? At least this gives you an out -if they make a big effort but don't get to the line in the manner they/we expect, then you still have something great to say to them. And the effort is the only thing they can really control isn't it?! The results are often dependent on others, the environment or just dumb luck.

I guess I do have a passion after all - a passion for people to be reasonable and to look a bit beyond the moronic behaviour that is so often exhibited in this society. I'm not looking to apportion blame, but rather to suggest that things be considered in a slightly different light.

Expect this post to be edited :-)

Firefly and Serenity

Over the course of the weekend I watched the entire (short) season of Firefly and then the movie Serenity. I cannot for the life of me understand why Firefly was cancelled. The characters were awesome, the environment they were set in was great and there was so much scope for different stories. I love watching it.

Possibly the thing I like most about Firefly is the characters and how there seems to be a nice balance amongst them. No single character takes all the limelight, although Malcolm Reynolds is fairly central to most of it, he is not the focus. Joss Whedon and Tim Minear have done a fantastic job of writing the series and the movie. No wonder it has such a following.

It raised another point that I've been pondering a little bit. The people we admire most have qualities that are reflected in us. I've heard this said before and I see in Firefly how the mix of characters allows so many people to find something in the characters that they can relate to, admire and connect with. Be it the strength of Simon's love for River, Kaylee's love of engines and food, or Jayne's role as the tough, but dumb guy. It may be in the funny nature of Wash or in his wife's tenacity and loyalty. Truly a diverse cast and one that has so many strengths.... and also so many frailties.

It is our faults that make us human. To have heroes that are without fault is totally unrealistic. A character with a real, identifiable hubris is a character that we can relate to and empathise with. Bravo to the writers and directors of Firefly and Serenity for creating characters we can identify with so closely.

A damn shame it was cancelled. I curse the greedy money making mofo's who did it.

Musings on System Administration

I was reading an article discussing forensic preparation for computer systems. Some of the
stuff in there I knew the general theory of, but not the specifics of how to perform. As I
thought about it, it occurred to me that Systems Administration is such a vast field. There
is no way I can know all of this stuff. I made a list of the software and operating systems

I currently manage. They include:
- Windows Server 2003, Standard and Enterprise
- Exchange 2003
- Windows XP
- Windows Vista
- Windows 2000
- Ubuntu Linux
- OpenSuSE Linux
- Mac OSX (10.3 and 10.4)
- Solaris 8
- SQL 2005
- Various specialised software for the transport industry

I have specific knowledge on some of this, broad knowledge on all of it, and always think "There's so much I *don't* know". It gets a bit down heartening sometimes. For one thing - I
have no clue about SQL 2005 and I need to make it work with another bit of software. All
complicated and nothing straightforward. Irritating doesn't begin to explain it. As to the
Microsoft Software - because of it's prevalence throughout the world, there is a lot of
online information available. Likewise with Linux - it's incredibly rare to encounter a problem someone else hasn't already come up against.

So how to function within such an environment? Understanding I think is the key. The more
you understand about the process, the easier it is to figure things out. To my reckoning, understanding the "why" of how things work makes the job of learning new things fast to fix
problems much easier. For beginning sysadmins it's probably the most important thing. That
and curiosity. I'm always interested in learning about new things and trying new stuff out. Having sufficient hardware to indulge in this obsession doesn't hurt either. If you can't have all new stuff - second hand stuff is a good way to play.

Thoughts - Means of Problem Solving

I'm not sure how other people really think - I have a degree in Psychology but I'm still not entirely convinced by the ideas on theory of mind. I have a few observations that I'd like to share. For one thing, and this is kind of strange, when there is a problem I need to solve I can't "think" through it. If I try to reason my way through it, my conscious mind wanders off to God knows where and I get nowhere. But if I relax, clear my mind and just allow some internal process to work, all of a sudden the answer appears. This is the gap in the internal monologue to which I refer. This does *not* work with mathematical problems. I have always struggled with those sorts of problems. I refer more to the interpersonal problems or even IT problems of which I encounter on a daily basis. Even the lead up to writing this was only a vaguely conceived idea until I started typing and the right words appear on the screen.

I wonder how other people "think" their way through problems? Do they have a specific process they go through to find the answers? In a movie I saw once, one of the characters is telling another about finding the B's and C's. His boss was able to skip from A to D, but a normal person needed to find those B's and C's. I certainly do not subscribe to the idea my thought methods are unique or special, but I merely wonder at the other types of thoughts. Is it possible to learn how to think in the opposite way. I wonder at the efficacy of intuitive problem solving against a more step-wise approach.

I think that these are innate means of thinking and we are born that way. As hard as I've tried to learn a more structured means of thinking it escapes me. Trying to be organised and have everything planned out doesn't work. I can maintain it over the short term, but I get tired of the effort and go back to a more messy/non-linear style of thinking. I wonder how many others experience this?

Hmm I want a MacBook Pro too while I'm rambling. They are very sexy.

Oh and in case you're wondering at the nature of this post - remember the name of the blog is "somewhat" thoughtful thoughts. Sometimes I haven't worked them all the way through :)

Linux on the Desktop

I read a fair few reviews about running Linux on the desktop. One of the things that always springs to my attention is people moaning about hardware support. All things considered, I have an opinion about this.

My XP Installation at home does not work without significant time spent downloading (after I've installed a driver for the network card) drivers for sound/video/mainboard stuff. I have an ASUS mainboard, nothing fancy or special. It does not work natively with the drivers supplied with XP. It does, however, work just fine with Linux, specifically Ubuntu, but also SuSE. I run Ubuntu on a series of machines, including two Dell GX260's, a GX270, a Dell Server (the name of which escapes me) and various put together machines. I find fewer issues with drivers than I have had with XP. Don't even get me started on Vista. It's hardware support might be better, but you've got to have a *lot* more of everything to get it to work properly. Drivers for my printer - a HP 1022, were only released a little while ago for Vista. Ubuntu chatted away happily to said printer straight away.

As to usability, well I'm a little bit of a geek so I have no problems with it. I decided to test it on my girlfriend. Yes, I took my life in my own hands with this experiment. She loves it though. She likes all the games, can work the office software and everything else. She plugs in her Kensington USB key and it works fine. I'm about to add her to my wireless network with a Belkin wireless card - we'll see how that goes. But she has no problems working the machine. It's not a crappy machine either, an AMD 2200+ with lots of RAM and decent innards. Oh and an ASUS mainboard that XP required special drivers for.

When people talk about GNU/Linux being ready for the desktop, I'd like to point out that Windows isn't really ready for the desktop either. How many businesses etc are now saying No to the migration to Vista? Lots is the answer to that - check out on doggdot.us to see how many of the articles reflect the lack of interest in the upgrade path. I've been running Vista on a Dell GX270 and a Latitude D620 and so far, I'm a bit meh about the whole thing. Sure it's pretty and stuff. The low power gear is alright, but honestly? It's slower than XP and a *lot* slower than Ubuntu.

In terms of interoperability, I've got no trouble making my Windows machines talk to my Linux boxen or to my two Macs running OSX. There are lots of guides out there and they make it easy to get things working properly. I say "Bah!" to those who suggest Linux isn't ready for the desktop. I also reckon that in the future we'll see more of a move to an operating system that has open standards for longevity purposes.