<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Allen Pomeroy</title>
	<atom:link href="http://www.networkforensics.us/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.networkforensics.us</link>
	<description>Blog of an IT security specialist  .: beta :.</description>
	<lastBuildDate>Tue, 08 Jun 2010 16:59:49 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=5280</generator>
		<item>
		<title>Epitome of bad software</title>
		<link>http://www.networkforensics.us/2010/06/epitome-of-bad-software/</link>
		<comments>http://www.networkforensics.us/2010/06/epitome-of-bad-software/#comments</comments>
		<pubDate>Tue, 08 Jun 2010 16:59:49 +0000</pubDate>
		<dc:creator>edhacker</dc:creator>
				<category><![CDATA[school]]></category>
		<category><![CDATA[tech]]></category>
		<category><![CDATA[tools]]></category>
		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=119</guid>
		<description><![CDATA[There is a reason many people loathe Microsoft software. Before you consider flaming me for that statement, I realize all software has flaws, bugs and eventually crashes. In my experience, even if it&#8217;s patched and up to date, the following image happens FAR too frequently with Microsoft software. I don&#8217;t recall having the same issues [...]]]></description>
			<content:encoded><![CDATA[<p>There is a reason many people loathe Microsoft software. Before you consider flaming me for that statement, I realize all software has flaws, bugs and eventually crashes. In my experience, even if it&#8217;s patched and up to date, the following image happens FAR too frequently with Microsoft software.<br />
<a href="http://www.networkforensics.us/wp-content/uploads/2010/06/i-fucking-hate-microsoft.png"><img src="http://www.networkforensics.us/wp-content/uploads/2010/06/i-fucking-hate-microsoft-300x180.png" alt="Microsoft bugs" title="i-fucking-hate-microsoft" width="300" height="180" class="alignnone size-medium wp-image-118" /></a><br />
I don&#8217;t recall having the same issues with <a href="http://www.conceptdraw.com/en/">Concept Draw</a>, even with complex diagrams. Since I&#8217;m just tired of having to redo work over again, good-bye Visio, I&#8217;ve just purchased your replacement.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networkforensics.us/2010/06/epitome-of-bad-software/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mom did it all</title>
		<link>http://www.networkforensics.us/2010/05/mom-did-it-all/</link>
		<comments>http://www.networkforensics.us/2010/05/mom-did-it-all/#comments</comments>
		<pubDate>Sat, 22 May 2010 04:46:24 +0000</pubDate>
		<dc:creator>edhacker</dc:creator>
				<category><![CDATA[personal]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=116</guid>
		<description><![CDATA[Jan Pomeroy passed away in May 2010. This is what some of her family had to say at her memorial: John: Mom was the quiet strength behind our family. We grew up in a very busy household, first on the Acreage then at Vicary Place. The activities that we participated in while growing up, be [...]]]></description>
			<content:encoded><![CDATA[<p><span style="font-size: medium;">Jan Pomeroy passed away in May 2010. This is what some of her family had to say at her memorial:</span></p>
<p>John:</p>
<p><span style="font-size: medium;">Mom was the quiet strength behind our family. </span></p>
<p><span style="font-size: medium;">We grew up in a very busy household, first on the Acreage then at Vicary Place. The activities that we participated in while growing up, be it; academic, sport or social were facilitated by Mom. </span></p>
<p><span style="font-size: medium;">Throughout my life friends have expressed surprise when they learn that I can cook dinner, wash the dishes, clean the bathroom, iron my shirts, and take out the trash. Of course I can, Mom would not have had it any other way. </span></p>
<p><span style="font-size: medium;">I started mountaineering when I was young. Dad introduced it as one of the many activities the 31</span><sup><span style="font-size: small;">St</span></sup><span style="font-size: medium;"> Tiger Scout Troup was involved in. Climbing became a passion of mine, for many years I spent weekends and the summers climbing at Alpine Club camps or with a few friends. It was Mom that made sure that it was all possible, she made gorpe for breakfasts, she made biscuit and meat bars for my lunches, and she dehydrated everything required for suppers. Mom arranged transportation until I was old enough to drive, she then gave up her own car until I had my own. </span></p>
<p><span style="font-size: medium;">The winters where for skiing, again it was Mom that made all the parts come together. Mom sewed gaiters for us. She then taught us to operate the sewing machine so we could make our down jackets and pants. </span></p>
<p><span style="font-size: medium;">Mom had that ability to keep all of us kids under her protective umbrella while living a very busy and rich life herself. </span></p>
<p><span style="font-size: medium;">It was not until a little later in life when I truly appreciated just how special Mom was. Mom rarely showed or gave voice to her fears about our life style choices.  Although it did poke its head up a few times. Once, I was very late coming down off a particular climb on Yamnuska because we got had gotten off the route, a little lost. When the two of us were sitting behind the car taking off our climbing boots a RCMP cruiser pulled up, the constable rolled down his window and asked “Are you Pomeroy” I said “Yes”, and I got told “Call your Mother”.</span></p>
<p><span style="font-size: medium;">Whatever I did in life Mom supported it, both the failures as well as the successes.</span></p>
<p><span style="font-size: medium;">I consider myself very blessed to have been Janet Pomeroy’s son. I feel like I will always be under her umbrella as I continue through the journey that is my life.</span></p>
<p><span style="font-size: medium;">I am very grateful that I was able to return a little bit of that protective care as Mom needed it.</span></p>
<p><span style="font-size: medium;">Good Bye Mom.</span></p>
<p>Allen:</p>
<p><span style="font-size: medium;">People say that parents set the value and moral goal posts and hope their kids develop the ability to make judgment decisions that would make the parents proud.  Jan did it.</span></p>
<p><span style="font-size: medium;">Mom could cook.  The whole gamut.  For example .. Fresh bread right out of the oven; the kids slicing the heel off both sides of the loaf (before we got caught) .. of course smothered in butter and sometimes, brown sugar.   Her famous Pomeroy family chili.   The chili was just another example of Mom&#8217;s consideration for others.   If the dinner table included guests that didn&#8217;t appreciate the Pomeroy level of spice, she made both Family and Company chili.   Jan just did it.</span></p>
<p><span style="font-size: medium;">Mom exhibited traits that we kids wanted to emulate .. humour, kindness, loyalty, class, complexity and yes .. clairvoyance.   She almost always anticipated what was troubling us or what kind of trouble we got into.  Mom&#8217;s really do have eyes in the back of their heads .. or maybe they are just very good at reading child behavior.  As it turns out, sometimes those forensics really didn&#8217;t have to very good .. she just had to look for the abnormally clean house to know there was a party while the parents were away.  Then Jan really did it.</span></p>
<p><span style="font-size: medium;">Mom really knew how to do things.  Whether it was her kids or her long time friends asking for help or advice on how to tackle a particular problem, we all thought: “Jan will know”.  Of course.  Jan&#8217;s done it.</span></p>
<p><span style="font-size: medium;">Mom was the organizational glue that held the family and her friends together whether it was camping, skiing, hiking, making wine, or just keeping all of the kids in line, Jan did it.</span></p>
<p><span style="font-size: medium;">Mom could make all of us kids (including Dad) and her friends succeed by quietly and gracefully supporting and encouraging us to do the right things. Jan just did it.</span></p>
<p><span style="font-size: medium;">Mom will be missed, but she leaves a rich legacy: her kids and grandkids can cook, hike, camp, make beer, build houses and companies, perform forensics, engineer, and continually strive for more education and growth.   I know her family and friends are richer because of her influence.</span></p>
<p><span style="font-size: medium;">Now we all do it.</span></p>
<p><span style="font-size: medium;">I would like to take this chance to extend a deep thank you to all the out-of-town travelers, our in-town friends and family, as well as the skilled and caring staff at EMS, Foothills Medical Centre Unit 100 and Chinook Hospice.</span></p>
]]></content:encoded>
			<wfw:commentRss>http://www.networkforensics.us/2010/05/mom-did-it-all/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Apple Exemplifies Fine Software Engineering</title>
		<link>http://www.networkforensics.us/2010/04/apple-exemplifies-fine-software-engineering/</link>
		<comments>http://www.networkforensics.us/2010/04/apple-exemplifies-fine-software-engineering/#comments</comments>
		<pubDate>Wed, 28 Apr 2010 03:57:06 +0000</pubDate>
		<dc:creator>edhacker</dc:creator>
				<category><![CDATA[tech]]></category>
		<category><![CDATA[mac]]></category>
		<category><![CDATA[tools]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=114</guid>
		<description><![CDATA[So I&#8217;ve been a recent Apple user for a mere eight years, when I purchased my first iBook  running the new OS X (10.1). I&#8217;m a fan of the form engineering that goes several steps beyond the basic function engineering that is so prevalent in consumer technology these days. For Apple, it&#8217;s not good enough [...]]]></description>
			<content:encoded><![CDATA[<p>So I&#8217;ve been a recent Apple user for a mere eight years, when I purchased my first iBook  running the new OS X (10.1). I&#8217;m a fan of the form engineering that goes several steps beyond the basic function engineering that is so prevalent in consumer technology these days. For Apple, it&#8217;s not good enough that there&#8217;s windows, they have to <em>look good</em> too &#8211; like a master craftsman that puts finishing touches on the product rather than just slapping some cheap molding on and calling it done (or Windows).</p>
<blockquote><p><em><strong>This is too fine for words.</strong></em></p></blockquote>
<p>After working through successively newer notebooks (iBook, PowerBook, MacBook Pro), I have recently upgraded my first gen MacBook Pro to a new uni-body MBP. All the way through the online store (with the complication of being a grad student and navigating the education part of the online store), the process was pretty painless. But the real wow was when my new MBP showed up three weeks ago and I decided to use the Migrate function to just suck the contents of my old MBP to my shiny new uni-body MBP (thanks for the encouragement, Jonathan). I figured since I didn&#8217;t have the time or energy to setup another computer from scratch, I would try this migrate feature &#8211; with a heavy dose of battle earned skepticism. When I turned on the power on my new MBP, it seamlessly guided me through the setup .. and asked me if I wanted to migrate from an existing Mac or even a TimeMachine backup of a Mac.  I said yes, hooked the old and the new together .. fully expecting this to not end well and have to restart some install process.  Well a little while later, the migrate was done .. I restarted my new MBP (didn&#8217;t have to), and it looked <strong><em>exactly</em></strong> like my old MBP. All of my Applications were there. All my documents where there. iTunes was there. iPhoto was there. The positioning of the icons and documents on my desktop was <em><strong>exactly</strong></em> like my old MBP. Wow. A migrate function that actually worked.  Really. All the way.  Ok, well I did have to re-setup my home wireless connection .. for some reason that didn&#8217;t seem to come across, but with the totally customized settings I use, I&#8217;m not too surprised although it only added about 120 seconds onto my migrate time.</p>
<p>So at the time I&#8217;m writing this, Apple has announced the next generation of the MacBook Pro (the Intel i5 and i7 processors).  Since I&#8217;ve only had my shiny new uni-body MBP for a week, I call the folks at Apple and speak to a very pleasant customer service rep (send me an email or website message and I&#8217;ll forward his name), who not only cheerfully agrees to accept my new MBP back, but helps me order the new generation. They waived the return shipping and any refurbishment fees, as well as the express shipping for the new unit to me.  Gives me his direct line so if the Apple provided UPS return sticker expires before I get the old-new MBP migrated to the new-new MBP, I can call and get a new label. All this (and I ordered a new mouse) and they refunded a net of nearly $900 back to my credit card.</p>
<p>Well, I&#8217;ve just finished the migrate from the old-new MBP to my new-new MBP and again, it was seamless. I don&#8217;t think I&#8217;ll rebuild a new Mac from scratch any more &#8211; this is just too fine for words.  So I can get back to my Master&#8217;s thesis and life in general, and not worry about the software out there that is half baked or just barely good enough to get by .. with lots of manual care and feeding.</p>
<p>Thanks Steve and crew &#8211; this is why I&#8217;m an Apple shareholder.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networkforensics.us/2010/04/apple-exemplifies-fine-software-engineering/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Steve Jobs commencement address at Stanford University</title>
		<link>http://www.networkforensics.us/2010/03/steve-jobs-commencement-address-at-stanford-university/</link>
		<comments>http://www.networkforensics.us/2010/03/steve-jobs-commencement-address-at-stanford-university/#comments</comments>
		<pubDate>Thu, 25 Mar 2010 15:00:53 +0000</pubDate>
		<dc:creator>edhacker</dc:creator>
				<category><![CDATA[school]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=113</guid>
		<description><![CDATA[Stanford Report, June 14, 2005 &#8216;You&#8217;ve got to find what you love,&#8217; Jobs says This is the text of the Commencement address by Steve Jobs, CEO of Apple Computer and of Pixar Animation Studios, delivered on June 12, 2005. I am honored to be with you today at your commencement from one of the finest [...]]]></description>
			<content:encoded><![CDATA[<h4><a title="jobs-address" href="http://news-service.stanford.edu/news/2005/june15/jobs-061505.html">Stanford Report</a>, June 14, 2005</h4>
<blockquote><p><em>&#8216;You&#8217;ve got to find what you love,&#8217; Jobs says</em></p></blockquote>
<p>This is the text of the Commencement address by Steve Jobs, CEO of Apple Computer and of Pixar Animation Studios, delivered on June 12, 2005.</p>
<p>I am honored to be with you today at your commencement from one of the finest universities in the world. I never graduated from college. Truth be told, this is the closest I&#8217;ve ever gotten to a college graduation. Today I want to tell you three stories from my life. That&#8217;s it. No big deal. Just three stories.</p>
<p>The first story is about connecting the dots.</p>
<p>I dropped out of Reed College after the first 6 months, but then stayed around as a drop-in for another 18 months or so before I really quit. So why did I drop out?</p>
<p>It started before I was born. My biological mother was a young, unwed college graduate student, and she decided to put me up for adoption. She felt very strongly that I should be adopted by college graduates, so everything was all set for me to be adopted at birth by a lawyer and his wife. Except that when I popped out they decided at the last minute that they really wanted a girl. So my parents, who were on a waiting list, got a call in the middle of the night asking: &#8220;We have an unexpected baby boy; do you want him?&#8221; They said: &#8220;Of course.&#8221; My biological mother later found out that my mother had never graduated from college and that my father had never graduated from high school. She refused to sign the final adoption papers. She only relented a few months later when my parents promised that I would someday go to college.</p>
<p>And 17 years later I did go to college. But I naively chose a college that was almost as expensive as Stanford, and all of my working-class parents&#8217; savings were being spent on my college tuition. After six months, I couldn&#8217;t see the value in it. I had no idea what I wanted to do with my life and no idea how college was going to help me figure it out. And here I was spending all of the money my parents had saved their entire life. So I decided to drop out and trust that it would all work out OK. It was pretty scary at the time, but looking back it was one of the best decisions I ever made. The minute I dropped out I could stop taking the required classes that didn&#8217;t interest me, and begin dropping in on the ones that looked interesting.</p>
<p>It wasn&#8217;t all romantic. I didn&#8217;t have a dorm room, so I slept on the floor in friends&#8217; rooms, I returned coke bottles for the 5¢ deposits to buy food with, and I would walk the 7 miles across town every Sunday night to get one good meal a week at the Hare Krishna temple. I loved it. And much of what I stumbled into by following my curiosity and intuition turned out to be priceless later on. Let me give you one example:</p>
<p>Reed College at that time offered perhaps the best calligraphy instruction in the country. Throughout the campus every poster, every label on every drawer, was beautifully hand calligraphed. Because I had dropped out and didn&#8217;t have to take the normal classes, I decided to take a calligraphy class to learn how to do this. I learned about serif and san serif typefaces, about varying the amount of space between different letter combinations, about what makes great typography great. It was beautiful, historical, artistically subtle in a way that science can&#8217;t capture, and I found it fascinating.</p>
<p>None of this had even a hope of any practical application in my life. But ten years later, when we were designing the first Macintosh computer, it all came back to me. And we designed it all into the Mac. It was the first computer with beautiful typography. If I had never dropped in on that single course in college, the Mac would have never had multiple typefaces or proportionally spaced fonts. And since Windows just copied the Mac, its likely that no personal computer would have them. If I had never dropped out, I would have never dropped in on this calligraphy class, and personal computers might not have the wonderful typography that they do. Of course it was impossible to connect the dots looking forward when I was in college. But it was very, very clear looking backwards ten years later.</p>
<p>Again, you can&#8217;t connect the dots looking forward; you can only connect them looking backwards. So you have to trust that the dots will somehow connect in your future. You have to trust in something — your gut, destiny, life, karma, whatever. This approach has never let me down, and it has made all the difference in my life.</p>
<p>My second story is about love and loss.</p>
<p>I was lucky — I found what I loved to do early in life. Woz and I started Apple in my parents garage when I was 20. We worked hard, and in 10 years Apple had grown from just the two of us in a garage into a $2 billion company with over 4000 employees. We had just released our finest creation — the Macintosh — a year earlier, and I had just turned 30. And then I got fired. How can you get fired from a company you started? Well, as Apple grew we hired someone who I thought was very talented to run the company with me, and for the first year or so things went well. But then our visions of the future began to diverge and eventually we had a falling out. When we did, our Board of Directors sided with him. So at 30 I was out. And very publicly out. What had been the focus of my entire adult life was gone, and it was devastating.</p>
<p>I really didn&#8217;t know what to do for a few months. I felt that I had let the previous generation of entrepreneurs down &#8211; that I had dropped the baton as it was being passed to me. I met with David Packard and Bob Noyce and tried to apologize for screwing up so badly. I was a very public failure, and I even thought about running away from the valley. But something slowly began to dawn on me — I still loved what I did. The turn of events at Apple had not changed that one bit. I had been rejected, but I was still in love. And so I decided to start over.</p>
<p>I didn&#8217;t see it then, but it turned out that getting fired from Apple was the best thing that could have ever happened to me. The heaviness of being successful was replaced by the lightness of being a beginner again, less sure about everything. It freed me to enter one of the most creative periods of my life.</p>
<p>During the next five years, I started a company named NeXT, another company named Pixar, and fell in love with an amazing woman who would become my wife. Pixar went on to create the worlds first computer animated feature film, Toy Story, and is now the most successful animation studio in the world. In a remarkable turn of events, Apple bought NeXT, I returned to Apple, and the technology we developed at NeXT is at the heart of Apple&#8217;s current renaissance. And Laurene and I have a wonderful family together.</p>
<p>I&#8217;m pretty sure none of this would have happened if I hadn&#8217;t been fired from Apple. It was awful tasting medicine, but I guess the patient needed it. Sometimes life hits you in the head with a brick. Don&#8217;t lose faith. I&#8217;m convinced that the only thing that kept me going was that I loved what I did. You&#8217;ve got to find what you love. And that is as true for your work as it is for your lovers. Your work is going to fill a large part of your life, and the only way to be truly satisfied is to do what you believe is great work. And the only way to do great work is to love what you do. If you haven&#8217;t found it yet, keep looking. Don&#8217;t settle. As with all matters of the heart, you&#8217;ll know when you find it. And, like any great relationship, it just gets better and better as the years roll on. So keep looking until you find it. Don&#8217;t settle.</p>
<p>My third story is about death.</p>
<p>When I was 17, I read a quote that went something like: &#8220;If you live each day as if it was your last, someday you&#8217;ll most certainly be right.&#8221; It made an impression on me, and since then, for the past 33 years, I have looked in the mirror every morning and asked myself: &#8220;If today were the last day of my life, would I want to do what I am about to do today?&#8221; And whenever the answer has been &#8220;No&#8221; for too many days in a row, I know I need to change something.</p>
<p>Remembering that I&#8217;ll be dead soon is the most important tool I&#8217;ve ever encountered to help me make the big choices in life. Because almost everything — all external expectations, all pride, all fear of embarrassment or failure &#8211; these things just fall away in the face of death, leaving only what is truly important. Remembering that you are going to die is the best way I know to avoid the trap of thinking you have something to lose. You are already naked. There is no reason not to follow your heart.</p>
<p>About a year ago I was diagnosed with cancer. I had a scan at 7:30 in the morning, and it clearly showed a tumor on my pancreas. I didn&#8217;t even know what a pancreas was. The doctors told me this was almost certainly a type of cancer that is incurable, and that I should expect to live no longer than three to six months. My doctor advised me to go home and get my affairs in order, which is doctor&#8217;s code for prepare to die. It means to try to tell your kids everything you thought you&#8217;d have the next 10 years to tell them in just a few months. It means to make sure everything is buttoned up so that it will be as easy as possible for your family. It means to say your goodbyes.</p>
<p>I lived with that diagnosis all day. Later that evening I had a biopsy, where they stuck an endoscope down my throat, through my stomach and into my intestines, put a needle into my pancreas and got a few cells from the tumor. I was sedated, but my wife, who was there, told me that when they viewed the cells under a microscope the doctors started crying because it turned out to be a very rare form of pancreatic cancer that is curable with surgery. I had the surgery and I&#8217;m fine now.</p>
<p>This was the closest I&#8217;ve been to facing death, and I hope its the closest I get for a few more decades. Having lived through it, I can now say this to you with a bit more certainty than when death was a useful but purely intellectual concept:</p>
<p>No one wants to die. Even people who want to go to heaven don&#8217;t want to die to get there. And yet death is the destination we all share. No one has ever escaped it. And that is as it should be, because Death is very likely the single best invention of Life. It is Life&#8217;s change agent. It clears out the old to make way for the new. Right now the new is you, but someday not too long from now, you will gradually become the old and be cleared away. Sorry to be so dramatic, but it is quite true.</p>
<p>Your time is limited, so don&#8217;t waste it living someone else&#8217;s life. Don&#8217;t be trapped by dogma — which is living with the results of other people&#8217;s thinking. Don&#8217;t let the noise of others&#8217; opinions drown out your own inner voice. And most important, have the courage to follow your heart and intuition. They somehow already know what you truly want to become. Everything else is secondary.</p>
<p>When I was young, there was an amazing publication called The Whole Earth Catalog, which was one of the bibles of my generation. It was created by a fellow named Stewart Brand not far from here in Menlo Park, and he brought it to life with his poetic touch. This was in the late 1960&#8242;s, before personal computers and desktop publishing, so it was all made with typewriters, scissors, and polaroid cameras. It was sort of like Google in paperback form, 35 years before Google came along: it was idealistic, and overflowing with neat tools and great notions.</p>
<p>Stewart and his team put out several issues of The Whole Earth Catalog, and then when it had run its course, they put out a final issue. It was the mid-1970s, and I was your age. On the back cover of their final issue was a photograph of an early morning country road, the kind you might find yourself hitchhiking on if you were so adventurous. Beneath it were the words: &#8220;Stay Hungry. Stay Foolish.&#8221; It was their farewell message as they signed off. Stay Hungry. Stay Foolish. And I have always wished that for myself. And now, as you graduate to begin anew, I wish that for you.</p>
<p>Stay Hungry. Stay Foolish.</p>
<p>Thank you all very much.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networkforensics.us/2010/03/steve-jobs-commencement-address-at-stanford-university/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Accessing Ubuntu desktop from Mac Snow Leopard</title>
		<link>http://www.networkforensics.us/2010/02/accessing-ubuntu-desktop-from-mac-snow-leopard/</link>
		<comments>http://www.networkforensics.us/2010/02/accessing-ubuntu-desktop-from-mac-snow-leopard/#comments</comments>
		<pubDate>Sun, 07 Feb 2010 18:06:34 +0000</pubDate>
		<dc:creator>edhacker</dc:creator>
				<category><![CDATA[tech]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[mac]]></category>
		<category><![CDATA[tools]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=109</guid>
		<description><![CDATA[Accessing my Ubuntu 9.04 Gnome desktop from the built in Mac OS X 10.6.2 VNC viewer took a bit of tweaking on the Ubuntu Gnome side. I have an OpenVPN SSL tunnel between the Mac and the Ubuntu desktop, however a SSH tunnel could also be used to protect the VNC session. In this post, [...]]]></description>
			<content:encoded><![CDATA[<p>Accessing my Ubuntu 9.04 Gnome desktop from the built in Mac OS X 10.6.2 VNC viewer took a bit of tweaking on the Ubuntu Gnome side.  I have an OpenVPN SSL tunnel between the Mac and the Ubuntu desktop, however a SSH tunnel could also be used to protect the VNC session.  In this post, I&#8217;ll just cover the VNC server setup assuming a secure connection between the Mac and the desktop.</p>
<p>Initially I followed the guidance at sanity, inc.&#8221;<a title="mac-screen-sharing-with-linux" href="http://www.sanityinc.com/articles/mac-screen-sharing-with-linux" target="_blank">How to OS X Leopard Screen Sharing with Linux</a>&#8220;, on Ubuntu I installed tightvnc:<br />
<code><br />
apt-get install tightvncserver<br />
</code><br />
Then tested it out by starting up the vnc server on the Ubuntu system as the user I want to run the remote session as:<br />
<code><br />
tightvncserver -geometry 1024x700 -depth 24 :1<br />
</code><br />
As tightvncserver starts up the VNC service, it will check for a .vncpasswd file in the user home directory.  If it doesn&#8217;t exist, you will be prompted for a password to use to protect the remote session.  Note VNC is not designed to be used for multi-user remote access.<br />
On the Mac, rather than use Bonjour to automatically discover the Ubuntu screen sharing service, I just referred to the VNC session directly within Finder  which invokes the built in VNC viewer. Enter the VNC session password when prompted and the Ubuntu desktop is displayed. <a href="http://www.networkforensics.us/wp-content/uploads/2010/02/connect-to-server1.png"><img class="alignright size-full wp-image-112" title="connect-to-server" src="http://www.networkforensics.us/wp-content/uploads/2010/02/connect-to-server1.png" alt="connect-to-server" width="316" height="86" /></a> Within Finder, either use Go -&gt; Connect to Server or Apple-K to bring up the Connect to Server window.  The server address is the URL that points to the Ubuntu VNC instance <code>vnc://10.10.1.2:5901</code> where the port is 5900 + the display number specified when starting up the tightvncserver (5901).</p>
<p>This all worked fantastic, except for the keyboard mapping within Gnome &#8211; it was scrambled.  After googling several possible solutions, the only one that was successful for me was to disable the keyboard plugin in Gnome<br />
<code><br />
<a title="gnome-keyboard-fix" href="https://bugs.launchpad.net/baltix/+source/tightvnc/+bug/112955">Amit Gurdasani  wrote on 2008-04-28:  	  #51</a></code></p>
<blockquote><p>I&#8217;ve also encountered this issue with TightVNC and the hardy release. My solution was to capture the xmodmap -pke output as ${HOME}/.Xmodmap at the login screen (DISPLAY=:0 XAUTHORITY=/var/lib/gdm/:0.Xauth sudo xmodmap -pke &gt; ${HOME}/.Xmodmap). When gnome-settings-daemon starts up and finds an .Xmodmap, it asks if it should be loaded &#8212; I answer yes. As a side effect, if gnome-settings-daemon were to be restarted without the .Xmodmap, it&#8217;d scramble the keyboard layout again. With an .Xmodmap in place, it&#8217;ll load the .Xmodmap every time.</p>
<p>Due to another issue (#199245, gnome-settings-daemon crashing with BadWindow every time a window is mapped), <em><strong>I disabled the keyboard plugin using gconf-editor, at /apps/gnome_settings_daemon/plugins/keyboard.</strong></em> Since it&#8217;s not being loaded, I suspect it might not garble the layout even if I remove the .Xmodmap now.</p>
<p>So maybe disabling the keyboard plugin is a better fix.</p></blockquote>
<p>On the Ubuntu system, invoke the Gnome configuration editor (gconf-editor on command line), then navigate to  apps -&gt; gnome_settings_daemon -&gt; plugins -&gt; keyboard  uncheck the Active keyword.  Kill the VNC daemon and relaunch it &#8211; problem fixed.<br />
<code><br />
pkill vnc<br />
tightvncserver -geometry 1024x700 -depth 24 :1<br />
</code><br />
Various methods exist to automatically start and kill the VNC server, but for now this will do it for me. </p>
]]></content:encoded>
			<wfw:commentRss>http://www.networkforensics.us/2010/02/accessing-ubuntu-desktop-from-mac-snow-leopard/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Diving site wishlist</title>
		<link>http://www.networkforensics.us/2010/01/diving-site-wishlist/</link>
		<comments>http://www.networkforensics.us/2010/01/diving-site-wishlist/#comments</comments>
		<pubDate>Tue, 19 Jan 2010 23:04:11 +0000</pubDate>
		<dc:creator>edhacker</dc:creator>
				<category><![CDATA[travel]]></category>
		<category><![CDATA[wish list]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=105</guid>
		<description><![CDATA[Here&#8217;s a list of the sites I&#8217;ve heard are worth checking out: Thanks Adam S: Kay Op in Tulum Dosojos (2 cenotes there Bat Cave and Barbie Cave)]]></description>
			<content:encoded><![CDATA[<p>Here&#8217;s a list of the sites I&#8217;ve heard are worth checking out:<br />
Thanks Adam S:</p>
<ul>
<li>Kay Op in Tulum </li>
<li>Dosojos (2 cenotes there Bat Cave and Barbie Cave)</li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.networkforensics.us/2010/01/diving-site-wishlist/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>bash_history</title>
		<link>http://www.networkforensics.us/2010/01/bash_history/</link>
		<comments>http://www.networkforensics.us/2010/01/bash_history/#comments</comments>
		<pubDate>Sat, 09 Jan 2010 17:42:20 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[notes]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[mac]]></category>
		<category><![CDATA[scripts]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=103</guid>
		<description><![CDATA[Here&#8217;s some notable cli entries that I refer to occassionally: Mac OS X: sudo /usr/sbin/sysctl -w net.inet.ip.fw.enable=1 sudo /sbin/ipfw -q /etc/firewall.conf sudo ifconfig en0 lladdr 00:1e:c2:0f:86:10 sudo route add -net 10.2.1.0/24 10.3.1.1 Linux:]]></description>
			<content:encoded><![CDATA[<p>Here&#8217;s some notable cli entries that I refer to occassionally:</p>
<p>Mac OS X:<br />
<code><br />
sudo /usr/sbin/sysctl -w net.inet.ip.fw.enable=1<br />
sudo /sbin/ipfw -q /etc/firewall.conf<br />
sudo ifconfig en0 lladdr 00:1e:c2:0f:86:10<br />
sudo route add -net 10.2.1.0/24 10.3.1.1<br />
</code><br />
Linux:</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networkforensics.us/2010/01/bash_history/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>One of those days .. where&#8217;s Batman?</title>
		<link>http://www.networkforensics.us/2009/12/one-of-those-days-wheres-batman/</link>
		<comments>http://www.networkforensics.us/2009/12/one-of-those-days-wheres-batman/#comments</comments>
		<pubDate>Wed, 23 Dec 2009 19:31:32 +0000</pubDate>
		<dc:creator>edhacker</dc:creator>
				<category><![CDATA[humour]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=100</guid>
		<description><![CDATA[Thanks Rachel (Maui Tattoo) and Amanda, this is perfect for today&#8217;s theme &#8230; From: http://digg.com/pets_animals/I_hope_to_god_that_s_batman_Pic?t=26320410]]></description>
			<content:encoded><![CDATA[<p>Thanks Rachel (<a href="http://www.mauitattoocompany.com">Maui Tattoo</a>) and Amanda, this is perfect for today&#8217;s theme &#8230;<br />
<img src="http://www.networkforensics.us/wp-content/uploads/2009/12/batman.jpg" alt="batman" title="batman" width="367" height="480" class="alignnone size-full wp-image-99" /> </p>
<p>From:<br />
<a href="http://digg.com/pets_animals/I_hope_to_god_that_s_batman_Pic?t=26320410">http://digg.com/pets_animals/I_hope_to_god_that_s_batman_Pic?t=26320410</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.networkforensics.us/2009/12/one-of-those-days-wheres-batman/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>IMAP mailstore migration .. again</title>
		<link>http://www.networkforensics.us/2009/11/imap-mailstore-migration-again/</link>
		<comments>http://www.networkforensics.us/2009/11/imap-mailstore-migration-again/#comments</comments>
		<pubDate>Tue, 17 Nov 2009 02:47:07 +0000</pubDate>
		<dc:creator>edhacker</dc:creator>
				<category><![CDATA[tech]]></category>
		<category><![CDATA[imap]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[mail]]></category>
		<category><![CDATA[scripts]]></category>
		<category><![CDATA[server]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=97</guid>
		<description><![CDATA[So last weekend, I discovered that Spamhaus decided it would be a good idea to place all of the public IP addresses for Slicehost (my Linux VPS hoster) into their Spamhaus block list (SBL). This covered both my slice in Dallas and the one in St. Louis &#8211; meaning an impressive chunk of inbound mail [...]]]></description>
			<content:encoded><![CDATA[<p>So last weekend, I discovered that <strong><a title="www.spamhaus.org" href="http://www.spamhaus.org/" target="_blank">Spamhaus</a></strong> decided it would be a good idea to place all of the public IP addresses for <a title="www.slicehost.com" href="http://www.slicehost.com" target="_self">Slicehost</a> (my Linux VPS hoster) into their Spamhaus block list (<a title="http://www.spamhaus.org/sbl/index.lasso" href="http://www.spamhaus.org/sbl/index.lasso">SBL</a>). This covered both my slice in Dallas and the one in St. Louis &#8211; meaning an impressive chunk of inbound mail to my domains was being trashed by the sending MTA and an even bigger chunk of my outbound mail was being outright rejected since the sending IP&#8217;s were on the SBL.  Slicehost worked hard to convince Spamhaus to recind the blocklist, so the Slicehost IP&#8217;s got moved over to the less-nasty-but-you&#8217;re-still-probably-a-spamming-dirtbag <a title="PBL" href="http://www.spamhaus.org/pbl/index.lasso" target="_blank">Policy Block list</a> (PBL) assuming affected IP owners would request to be removed from that list.</p>
<blockquote><p><em><strong>Sample query to see if you&#8217;re on any Spamhaus block list:  http://www.spamhaus.org/query/bl?ip=10.11.12.13</strong></em></p></blockquote>
<p>It seems it&#8217;s time to relinquish the care and feeding of my own Postfix mail system and turn to a hosted solution.  This means I need to migrate about 5GB of IMAP store to another site (again).  Last time I did a wholesale migration, I used <em><strong><a href="http://freshmeat.net/projects/imapsync/">imapsync</a></strong></em> to make the transition painless.  In the code example below, an SSL connection to the IMAPS server at imap-server.sourcedomain.com is made with username@sourcedomain.com and the password stored in the plaintext file secret1.  An SSL connection is made to the target system (which happens to be the server on which the imapsync tool is running, but could just as easily be another IMAPS server somewhere on a network accessible to the host where imapsync is running).  The &#8211;delete and &#8211;expunge1 arguments will clean the successfully moved messages from IMAP store #1 .. so be sure you have your messages on the target successfully!  Imapsync can be run iteratively to ensure you have got all the messages from your source.</p>
<p><code><br />
/usr/bin/imapsync \<br />
--host1 imap-server.sourcedomain.com \<br />
--ssl1 \<br />
--authmech1 LOGIN \<br />
--user1 username@sourcedomain.com --passfile1 secret1 \<br />
--host2 127.0.0.1 --user2 username@targetdomain.com --passfile2 secret2 \<br />
--ssl2 \<br />
--delete --expunge1 \<br />
--buffersize=128<br />
</code><br />
And one can use the<br />
<code><br />
--dry<br />
</code><br />
option to just test the process but not actually move any of the messages.</p>
<p>So that&#8217;s it &#8211; I&#8217;m about half way though migrating my current IMAP stores over to a hosted mail solution, so that I don&#8217;t need to keep up with the increasing level of care and feeding that running your own mail service requires.  Before I get too many darts about that .. I first started running my own personal MTA in 1995, adding spam and av filtering over time, and adding substantial redundancy (servers, sites, storage) so I could rely on it and fix things that broke as I had time rather than right when they broke (which was <em><strong>always</strong></em> at a bad time).  My new hosted solution takes over from two VPS servers running Postfix, Spamassassin, ClamAV, Greylisting with the IMAP store replicated across data centers in different states (15 minute rsyncs).  So soon, the (hopefully) last Allen Pomeroy owned and operated MTA can be turned off, while I get to work on fun stuff, rather than figuring out why my email is bouncing.  :-)</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networkforensics.us/2009/11/imap-mailstore-migration-again/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to secure your home PC</title>
		<link>http://www.networkforensics.us/2009/11/how-to-secure-your-home-pc/</link>
		<comments>http://www.networkforensics.us/2009/11/how-to-secure-your-home-pc/#comments</comments>
		<pubDate>Fri, 06 Nov 2009 17:24:39 +0000</pubDate>
		<dc:creator>edhacker</dc:creator>
				<category><![CDATA[tech]]></category>
		<category><![CDATA[fw]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[router]]></category>
		<category><![CDATA[tools]]></category>
		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=94</guid>
		<description><![CDATA[Whether you have a Mac or a Windows PC, there are some basic steps you can take to reduce the risk and personal impact of a malware infection.  This advise is especially impactful when you have just purchased a new Mac or Windows system. There are several steps that you can take to protect your [...]]]></description>
			<content:encoded><![CDATA[<div class="sticky_post"><p>Whether you have a Mac or a Windows PC, there are some basic steps you can take to reduce the risk and personal impact of a malware infection.  This advise is especially impactful when you have just purchased a new Mac or Windows system.  There are several steps that you can take to protect your new investment and more importantly your information.  In the following detail, I mainly focus on Windows as that&#8217;s the main technology that my non-IT type friends ask about.</p>
<p>Basically what you should be doing is:</p>
<ol>
<li>Ensure that a hardware firewall/router is in between the internet and the PC (I&#8217;ll just call it a firewall from now on)
<ul>
<li>Use a recognized brand name like Linksys, avoid the no-name generics as they often have bad defaults and don&#8217;t implement the stateful-packet-inspection that you want to filter out most of the cruft on the Internet from reaching your PC</li>
</ul>
</li>
<li>Ensure all default passwords on the firewall and PC have been changed
<ul>
<li>When you initially turn on the power to your PC and to your firewall, do NOT have them connected to your cable or DSL modem initially.  Do the setup of your firewall and PC first in order to ensure malware doesn&#8217;t have a chance to get at your shiny new PC before you&#8217;ve turned on the needed protection</li>
<li>Point a browser to your firewall (likely 192.168.0.1 or 192.168.1.1) and change the default administrator password.  This is very important, as some malware will seek out your firewall and try to use the manufacturer default password to change things like your DNS server settings &#8211; inserting the bad guys in between you and the rest of the Internet (eg. forcing your traffic to them first before it goes to your bank)</li>
</ul>
</li>
<li>All normal accounts used for day-to-day business on the computer should NOT have administrator privilege (see my post on <a title="run without admin privilege" href="http://www.networkforensics.us/2009/05/reducing-malware-risk-by-removing-local-administrator-privileges/" target="_self">running without admin privileges</a>)
<ul>
<li>On Windows XP, Vista (and I think 7), the default &#8220;user&#8221; that accesses the PC has full administrative privilege, that enables software  installation and configuration changes.  This is very dangerous, as malware that you come in contact with from infected emails or websites use this privilege to install their spyware, keyloggers, backdoors and other nasty stuff on your PC &#8211; without your explicit permission</li>
<li>Set a password for your Administrator account</li>
<li>Create a new user right away, before you setup your email, music, photos, documents, etc; ensure that new user is NOT a Computer Administrator</li>
<li>Always login with this non-Administrator username for your day-to-day use; only use the Computer Administrator username for software installation and configuration changes.</li>
</ul>
</li>
<li>Never surf the Internet with an account that has administrative privilege</li>
<li>If this is a common PC for a business, ensure employees accounts are individually assigned (if practical). Ensure those employee accounts are not administrators (unless there is a need and a high degree of trust)</li>
<li>Run a good commercial anti-virus program with annual software support (or a subscription)
<ul>
<li>There are some good free AV packages (AVG, Clamwin, Avast) .. Google them for the links</li>
<li>Sophos makes a good Mac AV package .. yes, Macs are vulnerable to malware as well; it&#8217;s just not as prevalent</li>
</ul>
</li>
<li> Finally ensure regular (daily) backups are being run to protect your business, financial, customer information from loss if there is a problem with the PC</li>
<li>For setup of your wireless access point (if you have one .. sometimes it&#8217;s built into the router/firewall)
<ul>
<li>Chose wireless encryption of at least WPA or WPA2 .. never use WEP or no encryption</li>
<li>There is no significant increase in security by obscuring your network name (SSID)</li>
<li>Don&#8217;t use any personally identifiable information in your network name</li>
</ul>
</li>
</ol>
<p>If you are unsure of how to do any of these steps, get one of your computer knowledgeable friends to help you.  Of course if you are purchasing a new system right now, I&#8217;d strongly recommend you check out Apple&#8217;s Mac products.  They&#8217;re not immune to malware, but the architecture and core are by design much less vulnerable to the types of malware that plague Windows.</p>
</div>
]]></content:encoded>
			<wfw:commentRss>http://www.networkforensics.us/2009/11/how-to-secure-your-home-pc/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
