Diary of a Network Geek

You may not realize it, but typography is actually very important to me.

Longtime readers of this blog may have noticed that it looks just a little different.  That's because I've changed how I make the fancy titles on my posts.  Instead of using an older plugin which relied on TrueType fonts and good, old PHP programming to generate titles on the fly, I've moved to a much newer plugin that relies on FontBurner fonts, which are Flash-based.  There are a couple of reasons for this, actually, but the main one is that my webhost has had server utilization issues with my blog since I've been with them and after digging through log files, some signs point toward that older plugin being the issue.  But, what you all haven't seen is the horror of trying to find an appropriate font that is readable and still conveys the sense of technical whimsy that I think represents this blog well.  It hasn't been easy.

Now, I understand that not all my readers will share my quiet obsession with typography, but for those who do, I think you'll enjoy the link I'm bringing you this week.  Have you ever tried to explain to people what the different parts of a font really are?  Or maybe wanted to know yourself?  Ever wonder why "kerning" is so important to that crazy web designer you hired to do your site?  Well, you may still wonder about that last one, but for almost all your other questions about what goes into a typeface and what it's all called, go check out Typography Deconstructed.
They bill themselves as a single, central location to find as much high-quality information on type and typography as you could want.  And, I really think they have done it!  There are two main sections to this site; Anatomy of Type and Type Glossary.  They both show you what the different parts of a typeface are and what the different parts are called, just in two slightly different formats.

Also, for you typography fanatics, or teachers, there are posters for download or purchase that do a great, graphical, job of showing and explaining just what goes into type.

Whether you're into typography or not, this site is worth a look, just to understand how type works and get some idea of how deeply it effects our daily life.  After all, without type and typography, you couldn't have read this blog!

Today is St. Valentine's Day.

Today, for reasons that are mostly attributable to the evil machinations of greeting card companies, we are expected to engage in a conspicuous display of romantic passion.  People mistakenly call it "love", but, in my experience, love often has little to do with what we celebrate on this strange, little holiday.  We put so much pressure on each other, and ourselves, to be in the right kind of loving, romantic, passionate relationship that, frankly, it's almost guaranteed that things will go horribly wrong.  And, yet we continue with it anyway.

For years, I was single on St. Valentine's Day, and wished beyond all reason to be in a relationship with someone, anyone, with whom I might share the day.  Then, of course, I was and the event couldn't possibly live up to any of the expectations I had set up for the holiday, my partner, nor myself.  It seemed to me that with every passing year, whatever I did was less and less appreciated.  More fault was found with how I tried to make the day special for her, until that last year, my ex-wife was actually complaining about the roses I'd saved my lunch money, literally skipped lunches out with the people at the office, to pay for to continue what I'd hoped was a tradition.  For ten years, I bought her at least a dozen red roses, usually, a dozen red and a dozen white, carefully requesting that they not include baby's breath, because she was allergic to it, only to have her complain that the flowers I'd been so proud of getting in spite of financial difficulty, were aggravating her allergies and always had.  For ten years, she let me buy those flowers and complained about them, often behind my back, and let me think I was doing a good thing.  All for "love".

Well, I can't speak for my ex-wife, but I don't think I knew what love really was when we were together.
In church, Sunday, of course, they read First Corinthians, Chapter 13, verses 4-7, which are "Love is patient and kind. Love is not jealous or boastful or proud or rude. Love does not demand its own way. Love is not irritable, and it keeps no record of when it has been wronged. It is never glad about injustice but rejoices whenever the truth wins out. Love never gives up, never loses faith, is always hopeful, and endures through every circumstance."  Now, I doubt that Paul was talking about romantic, passionate love in this letter, since he wasn't particularly in favor of marriage, among other things, but, still, it's often invoked as the kind of love we should have for a partner.
It's certainly an ideal I strive for these days, on that rare occasion that I find myself involved with someone of the fairer sex.  But, it's also how I simply try to treat everyone, regardless of how they feel about me.  Of course, some days I do that better than others, but it's a goal for all days, not just this artificial, high-pressure holiday that was seemingly invented to make so many feel so inadequate.

And, I have to admit, my feelings about this holiday aren't aided by my interest in history, especially Chicago history.  You see, I think of this day as the anniversary of when a fellow Chicagoan, Al Capone, rounded up seven of his closest buddies and gunned them down in the back alleys of the South Side of Chicago. Yes, that's right, I'm talking about the St. Valentine's Day Massacre! It was on this day, in 1929, that the rivalry between Bugs Moran and Al Capone reached its violent and bloody peak, leaving seven, bloody corpses in its wake, along with damaging both Moran's North Side Gang and, ultimately, bringing so much attention to Capone from the FBI that it effectively ended his criminal career, as well.
Truly, a turning point in the criminal history of Chicago.

So, you all go out and have your romantic dinners and make cow-eyes at your object of desire, but, have yourself an extra bloody steak and remember how they used to celebrate this romantic holiday on the South Side in the old days.  And, remember, your relationship isn't measured by how well or poorly things go today, but how you treat each other the other 364 days of the year.

Not all 404 pages are created equal.

Most of us will never see a 404 page.  In fact, if things are going well on your website, 404 pages shouldn't normally come up.  (For those of you not familiar a 404 page is the error page you get on a website when the page you're looking for is missing or can't be found.)  In the old days, 404 pages were pretty much blank, outside of the error message itself.  They were meant for developers to troubleshoot and debug their websites, really.  They were a kind of place-holder page and, at best, an irritant to the average internet browser.
But, as the web grew up and became more sophisticated, so have 404 pages.  On many sites, they've become a kind of "Easter egg", offering a look at the wit and sense of humor of the site designers and programmers.  What was an annoyance has become a fun bit of art!

Clearly, not even all "fun" 404 pages are created equal, so here are the best 404 Pages according to Gizmodo, one of the premiere gadget and technology blogs.  My favorite is the one they feature first, which strikes me as especially funny, considering my frustrations with Match.com lately.  There are some really good ones there, some more fun and some more useful than others, but all worth another look.  And, even though I know these are Gizmodo's favorites, there are plenty of good ones that haven't been listed here.  If you have any, please, leave a link in the comments!

And, hey, why not go check out that gallery today?  It is, after all, Friday, and surely you've earned some slack time by now!

DNS has inherent weakness.

In it's current form the Domain Name System, by it's open nature, is pretty primed for exploitation.
Some of these attacks are more obvious than others, but there are two that I find particularly troubling.  More so that I can see them being used together to really mess with a website owner.
The first of these two attacks isn't new.  But, the fact that it isn't new and has been dealt with before doesn't mean that it has suddenly stopped being effective.  The attack is called "DNS poisoning" and it works by corrupting the DNS cache on a server, which then forwards those poisoned DNS records as legitimate to other, unsuspecting servers.  The end result is that the attackers can redirect traffic from a legitimate website to their own site.  It's hard to flat out stop right now, though, once discovered, it can be fixed with relatively little trouble.  This attack was used recently against several websites who were supporting SOPA and PIPA.  Of course, since these folks were trying to make a statement, it was pretty clear what had happened, so techs were working to fix it pretty quickly.
The second attack, which I would think include the first attack at its initial stages, is sub-domain hijacking.  In this attack, the attackers redirect the sub-domain of an existing site to another location.  This is a little more subtle and hard to detect.  In this case, the attackers are looking to profit from a well-established domain by "piggy-backing" on their reputation.  They poison the DNS records to point something like Viagra.google.com to their actual website, selling Viagra, or a site filled with spammy links that redirect a potential victim to their website selling Viagra, or whatever.   This attack takes a proactive system administrator to catch.  Since it doesn't redirect any of the main, honest, actual site anywhere, but only uses its reputation to improve their own spammy links, it's not always obvious that it's going on.  Regular DNS record audits are about the only way to catch this, barring an angry end-user contacting the main site.

The internet is still a wild and wooly place sometimes, folks.  The reasons the professionals get paid what they do is because, theoretically, they have to deal with all that stuff and keep us safe!  Which reminds me, I have to go check my own company's websites and DNS records, not to mention my own!
(The title, incidentally, was inspired by the movie that helped get me into this business, Sneakers. "Cattle mutilations are up.")

Hey, can the folks at 132.3.57.68 , which seems to be an Air Force network operations center, please stop hammering my blog?  Not sure what y'all are looking for or trying to do here, but if you would contact me directly, I'd be happy to help you out.  In the mean time, though, my web host would really appreciate it if you'd stop doing all the aggressive GETs on my site.  It's playing havoc with their servers.
Thanks!

UPDATE: Hey, it seems like someone in 754th Electronic Systems Group is taking an extreme interest in this blog for some reason.  From public records, someone in either Montgomery, Alabama, or Henderson, Nevada, or Colorado Springs, Colorado.  But, I still have no idea why they'd be interested in this blog.  Anyone have any ideas?

I love energy bars, but, at heart, I'm a cheapskate.

Besides, most of those store-bought energy bars aren't even really all that healthy for you!  I love them for a lot of reasons.  They're quick, easy, portable and can easily be thrown in a bag when I head out on an adventure.  But, like I already mentioned, there are downsides.  The store-bought ones generally aren't cheap, or all that good for you.  So, what to do?
Well, naturally, make your own!

Let's start with one from Men's Health magazine; Peanut Butter and Chocolate Energy Bars.  Not bad, but that's just one recipe and I tend to like a lot more variety than that.
So, here are FOUR very different recipes for energy bars from Chow.  One of the things I like about these four is that they're inspired by some of my favorite mass-produced energy bars, so I have some idea what I'll be eating even before I make them.  Also, more variety!  Yea!
And, then, there are three from Alton Brown, which he featured on Good Eats at the Food Network.  These include protein bars and granola bars, for even more variety!

I don't imagine these will keep too terribly long, but if you use them regularly, making your own can really save you a lot of money.  And, of course, controlling the ingredients means that you can keep them healthier!
Now, you have a project for the weekend!

There are more free sysadmin tools for Windows than you can shake a memory stick at these days.

But, here are a few of the better collections of them.
First, from Infoworld, 15 "Essential" Open Source Tools for Windows Admins.  I'm not sure I'd say these are all essential, but they are a pretty good start.  I can only vouch for three of them on this list; Wireshark, Nmap, and ClamWin Antivirus.  Though I'm familiar with them from the Linux/Unix world, these are the Windows equivalents and they work just fine.  Old network geeks will recognize Wireshark and Nmap as a reliable packet sniffer and a security vulnerability scan tool, respectively.  You may not be as familiar with ClamWin.  It's based on the ClamAV engine, which in its Linux boot-disk incarnation, has saved my bacon more than once!  There are a couple inventory tools in this list I plan on looking more closely at, not to mention the add-on for Nmap they talk about.  Good stuff and worth checking out!

Secondly, from TechRepublic, there's Five Free Windows Registry Cleaners.  Again, I've only used two of these five; CCleaner and Wise Registry Cleaner.  CCleaner does everything I generally need in regards to shoring up old, creaky registries, but I'm always looking for new tools.  The version of Wise Registry Cleaner I used was an older one, but it worked well enough.  And, it does have the nice feature of being able to backup and restore older versions of your registry.  Believe me, that can come in handy sometimes!

Thirdly, also from TechRepublic, Five Microsoft Tools to help with Server Management.  Of these five, again, I've only used one; dcdiag.  Naturally, it's the only command-line tool in the bunch.  Though, I hear Microsoft has been talking about going back to a command-line, terminal interface for their server products.  I'm a little leary of any security utility that is based on a wizard, but I have to admit, at least it's something that might encourage Windows sysadmins to do some work at securing their servers more.  And, I have to admit, I wish I had known more about the file server migration wizard a few years ago.  It sure would have helped me more than once!

And, finally, the venerable, but ultimately useful, More Sysinternals for Windows Admins.  Now, these I've used quite a bit!  At least, some of them.  All the disk usage utilities have been super helpful over the years in determining who has been sucking up all the drive space on my servers!  And I've used PsInfo to attempt to gather information in various attempts to inventory my various networks.  And, these days, everyone will need the RootKitRevealer sooner or later.  Sadly, almost everyone has been, or will be, effected by a rootkit virus of some kind.  It seems inevitable.

So, there you go, system administrators.  There's my gift to you in the form of links to tools to do your jobs, faster, easier and more efficiently.  Enjoy!

You ever wonder how hackers in the movies type code so fast?

Okay, maybe it's just me, but when I see programmers cranking out code on a TV series or a movie, I always wonder how they're typing so much so fast.  And, I'll be honest, I wonder how accurate their code really is.  So, I'm sure most people don't really care about all that, but just assume all computer people bang away on the keyboard to churn out code.  Hey, they probably don't even notice what keys we hit at all!
Well, I've finally found out how Hollywood simulates what they think coding is like!  It's a site called Hacker Typer!

You go, open up the application, which looks like an old-school terminal, and just start banging on the keyboard.  It literally does not matter what keys you hit!  And, the app does all the work, producing line after line of what looks like decent, usable code.  I actually have no idea if that code will do anything or not, but it looks good, and, in Hollywood, that's all that matters.
So, what the heck, it's Friday.  Go hit that site and pretend to be a hacker!

I love science-fiction.

I love sci-fi in pretty much all its forms, but I have to admit, I especially like science-fiction television and movies.  And, these days, as Hollywood produces more and more of the same stuff over and over, unwilling to take risks, I find myself loving sci-fi television more.
Now, with cameras and equipment as reasonably priced as they are, it's possible for small, independent film-makers to roll their own media, in both film and television.  Combine that kind of low-budget, but high-level of passion for production, with all the different ways people are funding their favorite projects and, well, what you've got is Pioneer One.

Now, I have to admit, I haven't shelled out the money for it just yet, but go check out the trailer and tell me if you aren't at least a little intrigued by what you see.  I know I was.  Kind of looks like the X-Files, but crossed with Operation Blue Book.  Seems like it might lead somewhere.
Oh, and they must be doing okay, because they've got six episodes now, so someone is coughing up the money to keep this worth pursuing for them.

In any case, it's Friday, so why not at least check out the trailer?  You won't be sorry!

And the word is techno.

My musical tastes are varied and variable.  There is no telling what trend or style will suddenly catch my fancy and become my obsession.  Really.  Of course, my musical tastes are also tragically unhip, I've been told, by more than one of my music loving friends.  And, I'm rarely in step with anything current or any hot trend.  So, believe me when I tell you that I haven't seriously listened to any techno in years.  Honest.
But, recently, thanks to Boing Boing, I found an interesting techno project: Techno is the Word.

It's pretty straight forward, really, go to the site, then enter a word and let it generate the techno.
The site prefers Chrome or a recent build of Webkit installed, but as a way to kill time and annoy your music snob co-workers on a Friday, it can't be beat.  I recommend just installing Chrome.  It's worth it!  Besides, you may find you enjoy the browser even after you get tired of the techno.
Enjoy the generated music and your weekend!