2006-05-31

Chocolate Update

The Milka summer editions are out. The white chocolate with lemon is nice, the strawberry and lemongrass tastes pretty much exactly like ordinary strawberry (good enough, but meh, little innovation there) -- but whatever you do, don't buy the "Maracuja & Hibiskusbluete" (passion fruit & flower of rose of sharon) kind.

It tastes just like you would expect, but I'm a chocolate completist, so I had to suffer through it.

2006-05-30

[COMPUTING] YAAOTD

(Yet Another Annoyance Of The Day)

Dear Sun,

I dearly love your products, but it's really annoying when pprosvc ignores proxy settings made using pprosetup - as documented - but smpatch picks them up first try. Also, why config utilities in the first place?

Your customers are Unixers; we have our $EDITORs and $VISUALs, and there's a perfectly good /opt/SUNWppro/lib/patchpro.conf. Why use screws when we have perfectly good hammers and nails would be cheaper anyway?

The time invested in the whole config tool bull would have been better invested into getting pprosvc not to throw bare exceptions to terminal and syslog when it hiccups, but rather decent one-liners that explain the problem.

TYVM, HAND.

2006-05-29

[COMPUTING] Annoyance of the Day


getfacl(1) does not display setuid, setgid and sticky bits. Especially nice if you want to save the perms of a tree for feeding to setfacl.

You can always backup the whole tree with star and specify the exustar format, but that gets you nowhere if you only want to "repair" permissions to a known good state (it does happen...), or audit privileges in one simple pipe.

Don't forget, Unix is still the best environment we have, and that's how far it gets us quickly and easily. IT's a mess.

It's a pity that I know how gardening pays, or I'd at least have a dream to hang on to. OTOH, I might just enter the field of driving customer satisfaction in the field of liver- and genital utilisation by leveraging music and booze in a world-class center of excellence in gig execution, to put it as enterprisey as possible.

2006-05-27

[FILM] X-Men 3

1word: ambivalent.


It's not that it isn't a competently executed action movie, it's just so much worse than the previous installments.

There's hardly any depths, there are the good guys and the bad guys and that's it; Magneto is fighting not because of his history and his insights, but because he hates people. Yawn.

If there's little depth, there are no surprises whatsoever.

Go see it for the effects, but expect Generic Explosion Movie 10000, not a real X-Men movie. It could have been done, but this film isn't it.

2006-05-23

[COMPUTING] Two Long, Hard Weeks

When I saw that the update finally arrived, I just ordered my new notebook.

"10-14 days" delivery.

It's a MacBook Pro 15.4". 2GB RAM, 120GB HDD, OS X Tiger, the works. The best machine I ever got (relative to the state of the art) since my old IBM A21m.

But don't be fooled: I deserve it. No, really. Now, for the DV cam to go with it... ;)

Let's just hope I don't have to wait for even longer. By the time two weeks have passed I'll be climbing the walls all day - and wailing to the moon at night - anyway.

2006-05-21

[COMPUTING] Every OS sucks

While I haven't found anything (yet) that even just matches a Mac as a desktop platform, it does have its annoyances.

The - with me - probably biggest of these is that Apple is quite insistent on pushing all of its software stack and services on its loyal users who just don't have an interest in some of their products.

Mind you, we're talking about people who did pay the Apple premium for the box and OS in the first place [in Austria, that's almost factor 2 at the low and high ends, and less-but-still-much in between] and who generally do purchase their regular updates on OS and applications, if they are convinced that these are useful.

But sometimes convincing people of your usefulness is an awful lot of a bother, so why not just poke them with a stick until they flinch - and buy?

E.g.:

  • iTunes does not have an API to enable players other than the iPod.
  • iPhoto does not honour the set default associations for video files, but opens them in Quicktime, which is somewhat misnamed - it does take its time, but it sure ain't quick. All this to push a player of which you have to purchase a "Pro" version to view video in full screen. I'm throwing a WrongMilleniumException right here and now; I mean, come on: There's a [goddamned - the ed] free video encoder for [motherfucking - the ed] Windows Media Player nowadays. [In case you wonder - WMP can do fullscreen.]
    I guess we can count ourselves lucky that Apple does not sell digital cameras, or iPhoto would support three models, priced between USD 500 and 2500. As it is, you can attach any camera I've seen so far, including exotic old stuff that doesn't use DCIM folders, without bothering with drivers and it just works. That's the kind of stuff that makes people switch: Not being annoying.
  • But I digress, on with the rant:
  • Some Apple apps, including iPhoto itself and iCal, force Mail.app on the user and don't honour the user's choice of mail app - which is set in Mail.app(!). It's definitely not a problem with the API, Safari 1.3 does just fine.
  • The Backup app (+ iDisk) and iWeb as well as all other applicable tools make your life as miserable as they possibly can if you don't use .Mac (ie, mac.com). Nevermind that the iDisk is ridiculously small for backups nowadays - we're talking a maximum extension to 4GB (incl Mail) here, at which point you pay 99$ US a month. I see that .Mac is the default for that stuff, but there should be an API that allows alternative services, especially for companies.


The whole stuff turns from tragedy into farce when we consider the bigger picture and include the interests of Apple:

Nagging people and being pushy is a very un-Mac experience and obviously (and empirically demonstrable, just google for what people think e.g. about the .Mac lock-in) the adoption rate, especially in companies.

But who, even among the established user base, will buy the whole stack because of the pushyness? I'd say very few, because there is a (normally completely correct) assumption that stuff that you have to foist on people with that kind of crabbyness can't be very good to begin with.

I could understand nagging your customers when it actually brings more sales on one margin than you lose customers (or just adoption rate) on the other; but the way this is heading I can't imagine that it's a net profit to Apple themselves.

After all, by rule of thumb a "marginal switcher" needs to read five times as many raves to be pushed over the edge towards apple than rants to be kept at their current.

Oh well, it's not like I'm going anywhere - Microsoft are still Apple's marketing tools, Solaris sucks on the desktop and Linux sucks. ["period"]

2006-05-18

[SANE06] I, for one, don't welcome our new biometrically enhanced overlords.

I'm, right now, in a talk about biometric passports.

The technical contents are the usual bullshit about security by obscurity; closed source but monitored code quality (really! we promise!); secret government procedures "to protect against faking them", and the usual arguments of not having anything to hide if you haven't done anything wrong don't apply in that case of course, and so on, and so on.

The really interesting thing is the behaviour of the presenter and the audience:

The good professor is joking, e.g. about weaknesses of the system and the political nature of the entropy-weak cryptography chosen; an (admittedly, impolite) heckler shouts objections that seem perfectly reasonable in content, if not in style, and the presenter just dismisses him with dry jokes, and the audence certainly laughs.

The presenter tells us how much he is distrustful himself, but if poor technological decisions were made, that's political and he couldn't do anything (but he still continued in the process). After all, "just following orders" never gets out of vogue.

Last but not least, he (seemingly proudly) mentioned his good working relationship with the relevant ministry. Well, duh, he is helping them. Good scientist, here's a cookie. Now roll over!

After the talk I heard from another audience member that the professor was against the biometric passports himself, one of the "good guys". Couldn't have told from his presentation.

The idea was that the introduction of such passports had been decided upon, so there was no changing that anymore, and now the question was just getting technologically better ones, "working within the system".

And of course the bureaucrats will dutifully and patiently listen to all complaints, and nod politely and invite critical (but not too critical!) scientists to a cocktail party or two. And once they feel they have done enough to create a feeling of taking the experts seriously, they will do whatever they wanted to do in the first place.

This is a fundamentally bad strategy, because once you let some multinational bureaucracy dictate the terms of the discussion, it doesn't matter much what details you manage to eke out. Appeasement doesn't work. The next time, the basic terms of the discussion gets reset to a position giving even more power to the governments. Then you manage to once again eke some minor compromises out of the deal. And so on.
And you'll feel you have "made a difference" all the way to the camps.

The right strategy would be to protest. Not at the international meetings, which happen in the middle of nowhere or in cordoned-off cities off-limits to the public who has to pay for the cabal.

Where the protests should happen are the private homes of the politicians responsible. If thousand angry people turn up on your porch every day, you re-think some things.

Now, will this happen? The answer is: No, it won't. That would be uncivilised, not inside the accepted terms of discourse. It would even be undemocratic. As opposed to choosing one of a few clubs of power-hungry old people every few years.

And isn't the sky still blue and the spring still green? Why worry?

In fact, I'm boring you right now. Let's not talk about policy, it's boring and depressing.

In the end, nothing can save people who want to be slaves.

[SANE06] Swag! Sun! Rapping Rabb^WAdmins! (conference report nonsense edition)

So far, I only got Sun stuff (now, maybe a Google polo shirt and I'm content), but it's magnificient:

I swiped two beautiful mugs, one light blue and one yellowish orange, and all that after I ranted about the state of Java and Solaris patch and package management for a while. The Machine God is a merciful lord. ;)
OTOH, I got 90% on their quiz - knowing that f(x)="Who wrote x?" is "Bill Joy" for all x really helps there - and raved on and on about how great their T1 chips and Solaris 10 are; so that might have helped a bit. Normally they only gave out one mug, anyway, so yay for me!

Also, WTF? Trick questions in vendor quizzes? "How many disks are at least needed for a 0+1 RAID set?" - of course it's 2, as one mirror to stripe to is still a stripe set, but it's an edge case and I promptly chose 4. My 1337!!!1! clicking skills actually beat out my not-so-"leet" thinking skills there...oh well, I got my swag.

Finally, I got to their booth too early, the orange is great but the light blues are worse than the dark blues, and they opened the dark blue ones just after I left. Oh well, it's not that the light blue one is bad, just worse.
Not at all the same thing, just like better does not make for good; remember that Vista will surely be better than Windows ME.


On a different note, also at the Sun booth, I got one of those keychain necklaces, but I never got the point of those. They are ugly to boot, and if I want to look like a rapper I still have to purchase a clock that attaches to key chains. But how mellow it would look together with a Sun mug full of hot chocolate!

"Watch MC Fork-A-Lot lay down some hot rhymes over dis SSH logizzle!"

I'm the whitest person alive.
/me fixes his tie
On an actually useful and still Sun-related note, tomorrow I'm going to see Liane Praza (again!) and Casper Dik (for the first time) live, so I'm really looking forward to it. Yay for conferences.

[SANE06] Yesterday & Sedgewick

Yesterday I was in a pretty interesting tutorial on cfengine by Mark Burgess himself.

Mark has not only thought very long and hard about the topic of configuration management, but is a very good presenter as well. I normally like more humorous presenters, but in a pinch passionate competency does just fine. ;)

I always thought that cfengine was too complicated and created too much overhead for something that's a question of a svn up and a script that fixes permissions (which can be right there with the config in the repository - in fact you can use getfacl(1) output and feed it back to setfacl(1)).

Basically, his tutorial more cemented the opinion I already had than challenging it - I'm at "nifty but over-engineered" regarding the toolkit now - but I'm still gonna try cfengine on my playground box. Its monitoring features - including long-term trend and "site normality" learning that takes weeks to create an accurate image but then automates trend analysis - seems more than useful, and if I have to swallow the configuration overkill to get it, so be it.


Right now I'm in the "Unix On My Mind" talk by Bill Sedgewick, who is a bit of a state-of-Unix hater, but you can't resist the charms of a man who can rant for minutes about "head(1) being redundant because you can use sed nq anyway". He's incredibly interesting when he talks about how we have too many suid binaries and open ports, but too few good sandboxing solutions.

2006-05-16

[SANE06] Delft: RPM Packages; Bridging and Routing and the 'net in General

First things first:
Even in Europe, amongst Unix admins Macs now seem to have a notebook market share of about 50%, and the rest of the notebooks seem to be company issues.


I've been kept pretty busy by conference, "hallway track" and the evenings with other attendees (Nerds! In a Restaurant!).

Yesterday I attended a talk on RPM building that had the problem that oh so many "tech people" face when presenting:
They sure know their stuff, but they can't present worth a dime. Which is (now, repeat after me) why it is many nerds' own fault that Microsoft wins over the managers, since they send slick people with the right metaphors for the technologically afflicted.

Given the assessment, I won't talk further about it except note that it was obvious that the presenter was competent at the contents and could hold great talks with nothing more than better presentation tools than some "not-even-Prosper"-looking LaTeX slides and a more lively style -- nothing that can't be bought or learnt.

What a contrast was today's talk by Radia Perlman, on officially "Bridging and Routing", and effectively how the Internet was won and where it got us.

She had even worse slides (arguably - they were more boring, but the stock LaTeX slides class isn't really uglier than rainbow colour gradients in the background), but she is such a witty and simply incredibly passionate presenter. She's not only incredibly knowledgeable (after all, she invented half the 'net) but also knows how to get it across.

So, just what I said last year: If you can catch a talk of hers, go.

2006-05-13

[COMPUTING] The One Where Bernd Professes His Undieing Hatred Of Windows

User has to login as an administrative user to be able to get a new IP address when the notebook was on sleep long enough to forget its DHCP lease. Fetching addresses on boot does work. It really seems to be a permission error, as ipconfig /renew doesn't work either.

(a) Why the fuck has the current console (clickety colory in this case) user anything to do with what background services do?

(b) Searching for a registry key to fix the brokenness yielded a load of completely redundant places with the same information. Also, Windows remembers which interface is which not by a short code (as Unix does) or vanity names (as Solaris will soon be able to do), but by an endless string of the "{numbers-numbers-numbers-numbers-numbers-andsoon}". WTF? No, really.

On a real OS, this would be a case for a NOPASSWD sudo entry, a desktop icon and much rejoicing. If things like this happened in the first place on real OSs.

On the other hand, I fail to get worked up much about this obvious breakage, as I'm typing this open-air in the Netherlands, the weather is fabulous, and it's my vacation and I'm just lending a friend a quick hand. But boy, would I ever be pissed off about this if something really depended on having this working, right now.

But on the other hand, if something important was depending on Windows, I'd be pretty much fucked at that point anyway...

2006-05-11

[COMPUTING] Anecdotes in Focus Stealing

Scenario: Mac Updater foregrounded itself to ask whether to reboot after upgrades, I was just typing something. Thank goodness, at least the applications with unsaved data asked whether to quit.

Mac OS X has a perfectly good jumping-in-dock feature when applications want to signal that they need attention - and we have the convention that system dialogs should just "jump" Finder.

Yet, still we can't get rid of focus stealing. We clearly need a campaign here. I offer my face for the "Focus has a posse" stickers. ;)

On a different note - I would pretty much call the focus stealing challenge another benefit of maintaining critical systems using automated and/or text-based interfaces.

The pty/shell interface was never designed to multi-task [within one session] and the utilities that have remediated the drawbacks of the design, like screen(1), have created focus-requesting interfaces that are very much like Mac's hopping doc icons in that they ask for the focus, instead of stealing it.

For screen-newbies, I'm of course talking about C-a M (monitor for output) which creates a message when a window shows output, or, on the other hand, running commands with ' ; echo -e "\a"' appended so that the user will be notified of a bell on that window once the command returns - which is especially nice for long jobs that you can't just "monitor" because they should generate terminal output all the time, like make-runs, as in './configure && make && echo -e "\a" && sudo make install'.

I really wonder how often bad things happen to Windows Administrators just for lack of such a facility; things that just don't happen to terminal-bound roots.

Please note that I haven't had any chance so far to play with OS X server, so I don't know how reasonable the server tools are in this regard. Judging by the client OS, this could affect Mac administrators just as well.

2006-05-10

[FILM] Slither

1word: Awesome.


That's all, basically [IMDB].

2006-05-09

The Gonzo Treatment

We were coming in on the motorway, the usual mind-numbing strip of asphalt stretching on and on like a desert in and of itself, carefully shielded away from the world by endless hedges of carelessly planted arbitrary green, lest anything disturb the drivers in their stupor. I was still passing out every now and then, lapsing into shallow sleeps whenever the memory of yesterdays bender got me.

We reached the town and suddenly everything was so old; the artificially grave podunk marinated in history as if it had been made for tourists a thousand years ago, the sorry lot that had to live there only staffage that gave an imitation of normal life to the tourist trap that had been so richly bestowed by our graceful lord who had obviously deigned not to give a fuck for the poor children who grew up in that timeless imitation ye olde normalyte for paying strangers.

The exercise in absurdism was perfected by some schoolchildren who their minders had driven in front of the washed-out concrete monstrosity that had been built next to the house were the Great One had been born. The uncultured brats obviously couldn't have cared less, and who could blame them.

We finished our walk back to the car and took off.

Swerving a bit to avoid a young hare that shot back into the meadows as if it had been stung instead of almost squished like so much dead meat on the borders of our concrete veins we broke out of the carefully preserved neverland of Stratford; and in the glowing green of the English spring glory was restored to life.

2006-05-08

[LIBERTY] In capitalism...

...the poor serve the rich by keeping prices low for those who would not comparison shop and the rich serve the poor by doing the bleeding at the leading edge.

It's all in Schumpeter, and then it wasn't new. Now think about it. ;)

2006-05-05

[TRAVEL] London Calling

It's incredible how beautiful this city can be when the weather is good, and the weather is absolutely fabulous.

I'm pretty much in the process of maxing out my credit card though, as there are three Apple stores in this city (of which I have, due to varying availability of kit between stores, already seen two). Mini review: iLife '06 makes iPhoto finally usable on my iBook, it's about one to two orders of magnitude faster than the craptastic iPhoto '04 that was included with my trusty old G4. Griffin's iTalk is a fun toy, but the sound quality seems worse than expected so far so I'll have to see whether it will be useful. iWork '06 doesn't look too shabby either, let's see what I'll come up with.

What's more out of character is that I've been shopping for clothes two times in three days already - I love Marks & Spencer's: The clothing there isn't flashy but looks pretty cool; in Austria there is a lot less to be found in the space between "business dress" and "stuff that makes you look like a parakeet" - which in turn, by python transitivity, makes you look like Henry Kissinger, which is obviously a Bad Thing.


Take that, sk8r bois with your garish shirts and atrocious baggies!

But I digress.

So, bottom line is that I enjoy London; and since I'm travelling alone (until today in the afternoon), I can avoid all the tourist traps and sightseeing spots and just wander around aimlessly, watching the crowd, blazing electronica on my iPod* and spending like a drunken sailor (I am, in fact, not a sailor).

* In one of the Apple stores, I got a new one yesterday - without engraving this time, so "steal this iPod" ;-( - after the hard disk crapped out on me the second time in two months the day before. Not to speak of the battery exchanges. If not for the garish looks and horrible interface, I would have ended up with a Creative Labs player long ago.

** While I'm at it; I'm only now going online once again with my iBook because I had problems with SysPrefs not updating my resolv.conf properly any more; the Genius Bar at the Brent Cross Shopping Centre helped there - "Repair Permissions" in DiskUtil seems to be a cure-all with such things, as it seems to repair much more than just wayward mode bits.

2006-05-02

[COMPUTING] More fun with sudo!

somecomputer : Apr 19 12:39:07 : someuser :
command not allowed ; TTY=pts/4 ; PWD=/some/home ; USER=root ;
COMMAND=/usr/bin/ssh someotheruser@someothercomputer
Note that it's always the users with such a fine understanding of what requires which privileges who are first to cry for full root access, "or I can't do my job".

2006-05-01

[COMPUTING] Geee, I wonder what platform $PERSON grew up on!

Also sprach sudo:

somecomputer : Apr 18 19:18:45 :
someuser : TTY=pts/4 ; PWD=/ ; USER=root ;
COMMAND=/bin/cp *.* /some/path
"But guvnah, how shoulda RTFM! 'TFM' wasint there after the copy!"