Practical Technology

for practical people.

May 1, 2008
by sjvn01
4 Comments

Chumby: Cutest Linux Computer Ever

Linux computers are everywhere. Oh, you may not think you’re using Linux, but if you have a DVR (Digital Video Recorder) recording your television shows or a NAS (Network Attached Storage) device or a Wi-Fi AP (Access Point) on your home network, chances are you’re running Linux. None of those devices are as cute or as downright odd as the leather-wrapped Chumby alarm clock.

OK, so it’s more than an alarm clock that you could throw to the floor in the morning without breaking it. The Chumby is also a Wi-Fi-enabled Internet television monitor, digital picture frame, Internet radio player, and Web information center. Oh, and it’s also a Linux computer, albeit it’s the funniest looking PC I’ve ever seen.
Continue Reading →

April 30, 2008
by sjvn01
0 comments

Road Warrior Security

I see that a group calling itself the Association of Corporate Travel Executives is warning its members to limit the amount of proprietary business information they carry on laptops and the like because they’re afraid that government agents can seize that data at border crossings.

Excuse me if I grin a little at this. There must be thousands, tens of thousands, of laptops and USB drives stolen every day, and you’re worried about border guards? Please, get a clue. Custom agents are the least of your worries.

The real problem is carrying any proprietary business data on a laptop. Of course, the guy who swipes your notebook is probably far more likely to fence it for a dime on the dollar of its list value than he is interested in finding out your sales forecasts for the Acme SuperJuicers or even looking to see if you have customers’ credit card numbers. Still, the way I figure it, a common, every day thief is a lot more likely to look at your data than U.S. Customs and Border Protection officials.

More >

April 30, 2008
by sjvn01
0 comments

Commercial KVM-based virtual desktop program arrives

KVM (Kernel-based Virtual Machine), Linux’s own baked-in virtualization program, has been gaining popularity. Now, Qumranet, the company behind KVM, is releasing a commercial virtual desktop called Solid ICE based on KVM technology.

Solid ICE is designed to run multiple virtual desktops in a KVM on servers. While the servers need to be running Linux 2.6.20 or higher, Solid ICE can be used to deploy Windows or Linux desktops on either thin clients or repurposed PCs.

The servers must run on x86 processors that support virtualization extensions. These include Intel’s VT (Virtualization Technology a.k.a. Vanderpool) and AMD’s AMD-V (a.k.a. Pacifica) technologies.

According to Benny Schnaider, Qumranet’s CEO and co-founder, Solid ICE gives users “desktop virtualization done right. There are no compromises and you won’t be able to tell you’re working on a virtual desktop.” In Solid ICE, each VM has its own private virtualized hardware: a network card, disk, graphics adapter, and so on. The program also “hooks into existing infrastructure” to provide better desktop image management, provisioning management, policy enforcement, and security.

This isn’t all done with open source software though. To deliver outstanding desktop performance, Solid ICE also relies on Qumranet’s proprietary SPICE (Simple Protocol for Independent Computing Environments) remote rendering technology. Schnaider says that while “KVM is fully open source. Everything else [SPICE] is closed source and likely to stay that way.”

Schnaider says that SPICE is a new protocol that’s designed to “improve the user experience by not holding them back from local system resources.” So, for example, a virtual desktop user can “use full screens and their USB drives.” This works in part because Solid ICE pushes the work the client can handle itself to the PC rather than trying to do it on the server.

In the case of video, for example, older technologies, such as Microsoft’s Remote Desktop Protocol (RDP), Citrix’s Independent Computing Architecture (ICA), and Unix/Linux’s Virtual Network Computing (VNC) are “screen-scrapers.” In these, the server renders the screen and either pushes it to the client’s frame buffer and from there to the screen, as in RDP and ICA, or in the case of VNC, takes “snapshots” of the server-based virtual screen. Both methods put the graphics work on the server. So, as Schnaider says, “anything with high frame rates, like a YouTube video on a virtualized desktop, would kill the server.”

With SPICE, though, if Solid ICE determines that the client hardware can render the image, the rendering work is given to the desktop’s built-in graphics subsystem. The result is much snappier screen displays. Indeed, Schnaider even claims that if the local desktop graphics adapter and the network can handle high definition video, then a Solid ICE client can display it.

Besides what it claims to be great PC-side performance, Solid ICE’s other selling point is its total cost of ownership. Schnaider says, “The annual TCO per desktop is in the $3,000-$5,000 range. There are literally billions of dollars spent annually to keep existing desktop environments operational. There is a need for more flexible, independent, and secure computing environments, like Solid ICE, that can substantially reduce this inefficient TCO equation.”

While this could be said of any thin client system, Schnaider claims that because of KVM’s small system resource footprint, SPICE, and client operating system resource sharing, system administrators can run more desktop instances with Solid ICE than similar products. In the case of client resource sharing, Schnaider explains that when “you’re running similar operating systems, like Windows XP, you only need to have one instance of some of their resources running because you can share them between the clients. This gives system administrators two to five times higher density of clients than the competition.”

Solid ICE is available now for production deployments for $200 (list price) per concurrent virtual desktop.

A verson of ths story first appeared on Linux.com. >

April 29, 2008
by sjvn01
0 comments

I want my XP SP3!

Oh come on!

Today, April 29th, was when Microsoft was at long, long-one more time with feeling-long last was going to release Windows XP SP3. But, now, thanks to a ‘compatibility issue’ between the latest update and Microsoft Dynamics RMS, an SMB retail-chain-management application, Microsoft has delayed the general release of XP SP3.

Oh please. Does anyone buy that excuse for one microsecond? Vista, now at SP1, still breaks applications. As a matter of fact, it breaks Microsoft Dynamics RMS too. Since when has Microsoft let a little thing like breaking end-user’s programs, even Microsoft’s own end-user programs, stop them from releasing software?

I wonder if what’s really happening is that Microsoft is once more trying to boost Vista at XP’s expense. Will they get over it already? Vista is a flop. You know it. I know it. Heck, Microsoft knows it. Here’s the simple truth. I have yet to meet anyone, who’s not on the Microsoft payroll, who prefers Vista to XP. And, frankly get a drink or two into them, and you’re not going to find many Microsoft staffers or channel partners who prefer Vista either.

I don’t, generally speaking, like Microsoft products. XP SP3, however, in my opinion is easily the best Windows desktop ever. Since I pay for access to Microsoft TechNet, I get to the new stuff early. Not as early as I used to, but whether TechNet is worth the money anymore is a story for another day. Because of TechNet, I was able to start testing SP3 in late December.

How well did it work for me? Well, the short version is that by the time I was done kicking its tires, I had installed it on all my XP PCs.

For once, a service patch worked so well with existing applications while giving all the systems a bit more security and speed that I wanted to upgrade my systems. And, that mind you, was with a late beta.

I was really looking forward to everyone else being able to upgrade to XP SP3 as soon as possible, but — thanks Microsoft — now most people are going to have to wait even longer. How long? We don’t know. Microsoft isn’t telling.

So, while I can assure you that this is one upgrade you’re actually going to enjoy making to your Windows PCs, you still can’t do it yet.

A version of this story first appeared in ComputerWorld.

April 29, 2008
by sjvn01
1 Comment

Was Reiser really found Guilty of being a Hacker?

I don’t know if Hans Reiser, creator of the well-regarded, open-source ReiserFS (Reiser File System), is actually guilty of the murder of his estranged wife, Nina Reiser. We can’t actually even be sure that Nina Reiser was murdered. Her body was never found and Reiser’s attorney argued that she may have returned to her native Russia.

Never-the-less, as Wired reported, “with no body, no crime scene, no reliable eyewitness and virtually no physical evidence” Hans Reiser was found guilty of first-degree murder. In California, first-degree murder must be “willful, deliberate, and premeditated.”

I don’t see it. I’ve just gone over the case’s history as recorded in the San Francisco Chronicle and other sites. I could see the jury finding him guilty of manslaughter. I can buy them agreeing on a lesser charge of murder, but first degree? But, finding him guilty of first degree murder, with nothing but circumstantial evidence, and not even very strong circumstantial evidence at that? That surprised me.

Continue Reading →

April 28, 2008
by sjvn01
0 comments

Is Microsoft at fault for Web site cracking spree?

Last week was a lousy week for Web site administrators. Depending on your expert of choice anywhere from just over a hundred-thousand to half-a-million plus Web pages had been hacked to turn this into malware-spewing portals.

Panda, the security company, suggested that a recently unveiled ‘elevation of privilege’ flaw that could be used on XP SP2, Vista, and, far more significantly, Windows Server 2003 and 2008 could be at fault. While the elevation of privilege vulnerability can’t be used to gain full-control of a system, it can be used to get control of accounts that are often used to run Microsoft’s IIS (Internet Information Services) custom applications. So, for example, if you’re running a Web application that uses ASP.NET in full trust mode, your site is crackable.

Microsoft, however, is denying that this wave of attacks have anything to do with IIS or with this particular security hole. Instead, Bill Sisk, a communications manager at Microsoft’s Security Response Center, said the attacks appeared to be ordinary SQL injection attacks.

OK, so whose fault is it then? Much as I like to pound on Microsoft, this time it doesn’t seem to be their fault. Well, not entirely the boys from Redmond’s fault anyway.

More >