Tuesday, September 29, 2009
Disqus
(those few that comment!) if it bugs you.
Monday, September 28, 2009
DNS over VPN and Snow Leopard
Thursday, September 24, 2009
Call blocking
spammers and once I identify them from the "missed calls" log (since
no phones ring if they're not in my address book) I can block them so
they get the tone of disconnect. Love it, sweet sweet revenge on the
spammers.
Wednesday, September 23, 2009
iPhone 3.1 woes update
Saturday, September 19, 2009
ScanSnap 510M and Snow Leopard
Monday, September 14, 2009
iPhone 3.1 Woes
Mint and Intuit
Online and I guess Intuit is paying attention. I'm glad to see them
recognizing this and picking up the cool team at Mint.
For the record, Quicken for the Mac STILL has not been updated and
since they don't have an Intel version wont even run on Snow Leopard.
I say fire the group and get some startup to start over, it will be
cheaper and better. Look at Mint.
Saturday, September 12, 2009
Snow Leopard - wait it out
came out. Thanks to some FedEx fiasco's I didnt install until the next
day but I think I still qualify as an early adopter. I have to say i'm
seriously disappointed. The quality and compatibility is poor. Worse
than any other release i've experienced from Apple. Here's some of
what i've seen:
1) Many applications are incompatible and not yet updated. Perhaps you
can blame developers for not being on top of things, but I think not.
I expected PPC apps to have an issue as this is an intel only release,
but I was shocked at the number of apps that broke even though they
had intel support. Here's a short list:
Medialink, EyeTV, Growl, ScanSnap, 1Password, Contribute, and many more
Why did so many apps break? Why didn't apple warn people in advance?
The upgrade from PPC to Intel machines was smoother.
2) I've seen several "black screen of death" events where I must power
cycle the machine. I was perfectly stable before that. For the record
the machine I saw that on I did a complete wipe (disk format) and
fresh install of Snow Leopard and then only installed the latest
versions of apps I needed. Can't blame some less tested upgrade path
for that one.
3) I've had many hangs in Mail and Safari where I have to force quit
the apps. Didn't have those issues before the upgrade. This is a fresh
install, Apples apps and basic ones. Quality Control?
4) We've seen some odd behavior -- VPN to work using Apple's native
VPN to a Cisco firewall worked great before Snow Leopard. After the
upgrade DNS doesnt work. You can connect but you cant resolve anything
on the other end so you end up having to edit /etc/hosts and add
systems by hand. How'd they brake that one? And why? (multiple people
have experienced this)
5) Some vendors, like the Agile folks, makers of 1Password, have
chosen to use this as an opportunity to charge for an upgrade and not
support you unless you upgrade. Considering i'd owned 1Password for
less than 10 months I was shocked to see them require me to pay for an
upgrade. On all other fronts the Agile team is amazing but this
decision is flat out wrong. Others have gone down that route and
you'll be paying for upgrades to apps that worked fine prior to Snow
Leopard. The OS may be cheap ($29) but the time sink and the apps you
have to pay to upgrade are not.
So i've had issues, what about the good stuff? Um, what good stuff?
Frankly I haven't noticed a performance improvement and the
frustrations of a semi-stable OS wipes that out anyway. There are a
few very minor visual improvements, but fundamentally almost nothing
is noticeably different.
Its too late for me now, but I wish I had waited 6 months+ to upgrade.
Not the normal experience with Apple.
Home Media Servers
Banks and Scanners
(although with Snow Leopard its somewhat crippled). The banks are onto
this whole scanning thing.
Bank of America switched over to allowing you to feed the checks
directly into the ATM without a deposit slip or envelope. The scanning
works pretty good. One problem, I have to press about 4 buttons per
check. It takes me 10x as long to deposit a batch of checks as it used
to. Sure, you used new cool technology, but you just wasted more of my
time. Give me back the old machine or let me bulk feed my deposit
checks. Technology gone wrong.
USAA on the other hand has taken a different approach. I guess they're
forced to be creative having branches only in Texas. Anyway, you get
checks to deposit, scan them or snap pictures with your iphone. Upload
them to USAA and then shred them. Seems crazy but the system works
great. No need to leave my house, nothing to mail, cost efficient. The
first time or two it takes some fiddling to know what they need in
terms of an image but once you get it its a breeze. Its the future.
Banks Stink
using ATMs, they charge you fees up to $3 per transaction if you use
someone elses ATM. Meanwhile you're saving them money for a teller etc.
I was moving out of Citizens bank recently due to their crazy fee
structure. I asked them how to close my account. They said take all
the money out (get it to zero) and they'd auto-close after 7 days. I
proceeded to get the balance to zero. A few days later my silly
insurance company took out an automatic payment for $10.35, so I went
negative by that amount. I saw it quickly and immediately transferred
$10.35 back in. I figured I was set. Meanwhile Citizens charged me $39
for going negative and sent me snail mail over labor day weekend). I
was away and when I got back I was swamped so I didnt look at anything
for essentially 2 weeks. Since I remained negative (by the $39) for
more than a few days they charged me another $35. Then since more days
passed, another $35. They never called, and they were assessing fees
on their fees. They refused to credit me back any of the $109 when I
finally addressed it. I paid the money and filed a complaint with the
Better Business Bureau. That bank should not be in business.
I have a real issue with banks that want you to keep your money with
them but then they slowly drain your accounts with their fees. What a
scam.
Google Voice Rocks
Friday, September 11, 2009
iTunes 9
some silly things they're doing which I think are basic that need to
be addressed:
1) Finally they let you have the concept of home shared libraries with
a common iTunes account. The problem though is that if my wife and I
want to sync the same songs to our iPods we have to have them in the
local library. In other words we're being forced to copy music around.
Why?
2) The iTunes Store got a major overhaul which is cool. But they still
have a very broken behavior in that they give you NO indication that
you already own a song. Go to "iTunes Essentials" and you'll see
recommended songs and pricing but you may already have/own the songs.
Why cant they search and indicate this?
Anyway its a good app and getting better.
Sunday, August 23, 2009
ESX and virtual machines losing time and hanging
VMWare guys had no idea about it and after 3 hours on the phone with
them with little progress I started experimenting on my own and found
the solution.
Remember that I migrated my VMWare Fusion hosted VMs to ESX using the
VMWare converter tool. Prior to conversion I removed all snapshots
created by VMWare fusion.
The symptoms were that the machines under ESX were losing time and
network connectivity intermittently with no log entries on ESX and no
errors on the machines other than the massive time jumps. You could
see the machines "disappear" for 2+ minutes at a shot.
Turns out the issue was VMWare Fusion's autoprotect feature. I didn't
disable that on the VMs prior to migration and while ESX doesnt
support that feature it appears to break it. ESX was creating some
kind of snapshots frequently and there was no way at ESX to disable
this functionality.
My solution was to use VMware converter to go back from ESX, load the
machine into VMware fusion, turn off the Autoprotect feature, then re-
convert the machine back to ESX. Since then everything has been perfect.
The VMWare support people were friendly but not helpful and despite
the obvious client hangs and lots of snapshots getting created by ESX
were unwilling to admit it was an ESX issue. Obviously if my fix above
fixed the issue then it was a VMWare issue. I made no changes to the
guest operating systems.
Saturday, August 15, 2009
Quicken delayed -- again
VMWare Fusion -> ESX
through converting 5 VMs from an OSX VMware fusion environment to ESX
server. A few observations along the way:
1) VMware needs a TON of help on marketing. Their product names,
portfolio etc are confusing as all get out.
2) Get the "VMWare vCenter converter standalone" app (Windows/Linux
only) to do the conversions
3) Since you can only run on Windows or Linux you'll have to move your
VMs to somewhere that the app can access them for import
4) The VMs must be shut down. Also the snapshots don't seem to import
so remove them first (saves space)
5) As you go through the wizard for the converter, make sure you
choose to make your disks "thin" versus "flat" in the last step. The
default is flat which will eat your ESX disk space.
6) For the ones that wont convert with a "the object or item referred
to could not be found" error, downgrade the image in VMWare fusion and
then repeat the process.
7) If you're moving around Linux machines this way you may need to fix
the networking config. For us this was:
rm /etc/udev/rules.d/70-persistent-net.rules*
8) Their web access for ESX just gives a "503 Service Unavailable". It
seems out of the box this doesnt work and ssh into the console doesnt
work.
In the end everything moved and we're up and running on a real
environment. The tired desktop with flaky fusion is now retired.
Tuesday, August 11, 2009
Yet another OSX Server'ism
seemed like. Turns out what started it was a configuration change we
made a couple days ago. We enabled SSL for LDAP via the Server Admin
tool. Turns out SSL auth is broken in OSX server without some fixes.
It also turns out that once you click this button, it appears that
local client apps like Workgroup Manager start using SSL to
communicate and when you turn this back off they don't stop using SSL.
In other words, once you go SSL you can't go back just by shutting it
back off, so you're forced to fix the SSL issue.
Anyway, here's what you need to do if you're having SSL issues with
Open Directory on OSX server (10.5):
Add:
olcDisallows: bind_anon
to:
/etc/openldap/slapd.d/cn\=config.ldif
then: sudo killall slapd
Also see: http://www.afp548.com/article.php?story=20071203011158936
To test on a client:
ldapsearch -v -x -W -D
"uid=<auser>,cn=users,dc=<host>,dc=<domain>,dc=<com>" -H ldaps://
<host>.<domain>.<com> -b "dc=<host>,dc=<domain>,dc=<com>"
Replacing the things in <>'s with your appropriate information. You
can test this with and without the user ID section to see if anonymous
access is allowed.
If you're using a self-signed cert you may need to do this on the
client:
Edit:
/etc/openldap/ldap.conf
Change:
TLS_REQCERT demand
To:
TLS_REQCERT allow
From there you should be able to ping your LDAP server (make sure you
allow access through firewalls etc).
Thursday, July 30, 2009
Unlimited iPhone Ringtones for free on OSX
Another OSX Server-ism
machine to DNS. I found out the hard way that if you insert a comment
with parenthesis "()" in it in the description fields OSX server DNS
crashes in interesting ways. The GUI crashes and eventually all of DNS
comes down, specifically the line that crashed this piece of OSX server:
machinename IN HINFO "Virtual Machine running on anothermachine
(description)" "more text"
The same line without parenthesis works just fine.
Makes me wonder if anyone is using OSX Server for real prime time
operations.
Cisco ASA and ASDM
firewalls. Unfortunately if you go to the web page for the firewall (https://
<ip address of firewall>) and click "Run ASDM" then you just end up
with a downloaded file "asdm.jnlp". If you have the less-secure
setting of open files after download it will likely open up an XML
document in Xcode or something like that. So how do you run the ASDM
on the Mac?
Do this at the command line:
javaws asdm.jnlp
From there it will ask you where to save the .app bundle and then
next time you can just run that application.
Friday, June 19, 2009
iPhone 3GS Update
- Compass - More targeting people walking around in cities. Fortunately I dont do much of that.
- More memory - I fit just fine in the current footprint (16GB)
- Bluetooth audio - i'm not very interested in this and i'd have to buy new a new headset too
- Voice commands - i'm not much of a talker
- Better performance - This is the only one thats really appealing. Some apps are dogs and some of the delays on the phone are annoying. But thank goodness its not a Newton!
Wednesday, June 17, 2009
Find my iPhone
Monday, June 8, 2009
iPhone 3Gs
software. But in this generation of the iPhone AT&T and Apple have
made what I think is a mistake. For the first two versions I got the
phones the day the phone came out. The very first because it was new
and exciting etc. The second one before it had some significant
improvements (3G) AND they let me get it for the same price as a new
customer -- i.e. they allowed me to upgrade before my 2 years were up.
Without that I wouldnt have an iPhone 3G. This time around they've
taken an ugly approach of requiring you to pay full price ($500-$700)
AND re-up for 2 years. Thats worse than most on an early renewal. I
could live with re-upping for 2 years IF they gave me a discounted
price. But I can't live with both.
So i'll wait out my contract. Hopefully verizon will get to offer one
around the time my contract expires and i'll be rid of AT&T and get to
a new phone at the same time.
BTW, the side effect of them allowing me to upgrade at the cheaper
price would have been for me to give my 3G to my wife, caused her to
switch from Verizon and then they'd have another AT&T subscriber. AT&T
didn't think this one through especially with oncoming competition on
several fronts.
Sunday, May 31, 2009
OSX Server - What works and what Doesnt
What we're using it for:
1) Central file server - I often have to fix permissions on the shares as someone will copy things into a share and the file will be read only to others in the same group. Since the UI is messed in Leopard (see previous post) you have to fix this through a VNC connection on the server which means you need to be an admin. Apple really needs to fix that.
2) DHCP - this is working, although some of the engineers have complained that the OSX DHCP server seems slow.
3) DNS - no real complaints here
4) Mail - The UI around the mail setup was weak and broken. Has anyone tested that? Some things we had to do:
/etc/postfix/master.cf -> uncomment submission inet n - n - - smtpd
enables port 587
/etc/postfix/main.cf -> add tls_random_source = dev:/dev/urandom (gets rid of some error messages)
"no entropy source specified with parameter tls_random_source"
/etc/imapd.conf -> add tls_ca_file: /etc/certificates/wasabi.nasuni.net.crt (gets rid of more error messages)
"TLS server engine: No CA file specified. Client side certs may not work"
http://www.corpmac.co.uk/2008/09/30/tls-no-ca-file-specified-reason-and-solution/
They also don't let you add aliases other than Groups so you need to:
sudo vi /etc/aliases
sudo newaliases
Also note that when you stop the mail server and restart it through their UI (i.e. after you changed some settings) you often lose the first email that gets sent after restart. Nice.
Generally i'd recommend using someone else's mail server. The experience was not an "apple" one.
5) Open Directory - Apple uses this for all the user/group management and I havent had to touch it.
6) Radius - We use this for Cisco VPN authentication. Note that OSX server didn't really support this in the UI, so you need to follow some instructions.
7) Software update - saves multiple macs downloading to the same spot. Note that the first time you turn this on its really painful as it brings in a lot of updates.
8) Backups - the server time machine's itself and presents itself as a time machine target for any clients to use.
What we're NOT using it for:
1) Wiki - I used the Apple Wiki quite a bit. Its VERY limited. The WYSIWYG is nice, but you don't always get what you see and it can do some odd formatting stuff. If you want to do more advanced stuff you get thrown into HTML and the HTML is cluttered and hard to manage. You can't do a lot of basic stuff and eventually I punted and went with the tried-and-true MediaWiki which i'm very happy with. Its running as its own VM.
2) Web Hosting - I didn't really even try this. I wanted a server that wasn't hosting all the stuff above to be our external web host. So I created a standard Linux VM and am hosting the site via Apache.
3) Firewall - We have a decent Cisco firewall so I didn't try the OSX server firewall.
4) Our source code control/bug tracking etc is off on Linux VMs.
OSX Server bonding issues
OSX Environment and IE
EveryTrail
Ride with Lydia
Widget powered by EveryTrail: GPS GeotaggingSunday, May 3, 2009
Netflix, Flexplay, and RedBox
iTunes Music Video Playing Problems
found an odd behavior: If you use multiple speakers normally for
playing music, then Videos won't play when you have multiple speakers
selected. You have to choose just the speakers of your mac and then
the videos will play. Seems like a bug to me -- there should at least
be a warning.
Saturday, April 4, 2009
Side track - The Mace
OSX Server Day 1
IT early pains
OSX Office Environment
Monday, March 23, 2009
Cloud Reliability
Building stable cloud services is a difficult thing. Even google is
struggling:Tuesday, March 17, 2009
iPhone 3.0
Sunday, March 15, 2009
Sirius XM almost folded
Saturday, March 7, 2009
Is the mac a gaming platform?
Wii Fit
iPhoto and Face and Place Recognition
Wednesday, February 11, 2009
Voicemail
Thursday, January 22, 2009
Circuit City
Wednesday, January 21, 2009
XM Radio
Off topic - Disney
having just gotten off the phone with Disney Dining Reservations I
can't resist. The reservation agent was extremely helpful and the
process was as efficient as a human could have been. But my point was
I had to speak to someone. Now all the guide books etc recommend
booking dining spots for your stay in disney and doing that as far in
advance as disney allows so you can get into the places you want. We
like to eat and i'm a planner so we mapped it all out where/when then
I needed to book the 12 reservations. They have NO ONLINE SYSTEM.
Thats NUTS. Can you imagine the volume of calls, duration of calls and
human mistakes they're experiencing with a manual dining booking
system? This should not be a complex technical problem and they have
piles of "Imagineers" on staff. What are they thinking?
And yes, we're off to Disney in April. We promised the kid when she
was 5 we'd take her back when she was 10 (5 year decompression cycle).
With that booking experience complete all we have to do is turn up.
Tuesday, January 20, 2009
GPS Updates
Today I got an ad in the mail for a GPS update for my Lexus. The GPS update is $265. Sure the Lexus is a luxury car and you should expect to pay more when its involved. But $265 for a $0.50 DVD that they're mass producing? And one thats out of date the day its produced? Thats getting a bit crazy. You can't even plug in addresses while you're moving, it has no traffic updates etc.
Lets see for $247, I can buy a high end Garmin Nuvi 760 or dozens of other types for that or much less and most include more advanced features than the Lexus GPS. You can get a decent portable GPS for $129 these days.
So I could have a GPS that moves with me from car to car and I could buy the latest version every year or I can pay for a DVD from Lexus.
What are they thinking?
Friday, January 9, 2009
Quicken Online & Mint
Tuesday, January 6, 2009
Wow DRM free
As Mel Gibson would say "FREEDOM"!
Addendum:
I went to buy a song today (i'll spare you my taste) and sure enough the song I was looking for was in iTunes Plus format (DRM free, 256 bit AAC). Thats nice, its DRM free, but AAC is not a very portable format. When I burn MP3 CDs for my Car they have to be MP3 not AAC, so I still have a conversion problem. I found a tool called Advantageous MP3 that helps you jump to the Amazon MP3 store from the iTunes App. Its not perfect (has to be an artist or album not just a song) but it reduces the time to purchase while using the better interface of iTunes.
Will Apple eventually let us choose our download format or cave to the one everyone else uses?
iPhone App addendum
Saturday, January 3, 2009
iTunes & Music
a better person. Several years ago I decided that all my software,
music and movies should be legally paid for and went on a buying/
purging spree to get to that state. When you pay for everything you
really know the value before you buy and you don't end up with a hard
drive full of useless apps, music you don't listen to, etc.
Anyway, a few things I found out along the way:
1) Software application licenses often don't make sense. The software
vendors need to think about the multiple machine users (I use 3
regularly) and the multi-user households (I have 3 in my family). Some
do offer family licenses, but several require a license per copy.
Sometimes licensing schemes can be so broken that you can't buy more
than one copy at a single email address forcing you to violate the
license or create a fake/new email just to buy it. Anyway, if you
really try hard to pay for everything you have in terms of software
(perhaps most people do that but I didn't always), you'll find a lot
of inconsistencies and annoyances along the way.
2) DRM for music is painful for people who try to follow the law. It
feels like I'm getting penalized for the crimes of others. So for a
while when I bought music off iTunes, i'd create a playlist, burn it
to CD, and then immediately rip it back as MP3. That keeps the
metadata and gets it in an unprotected form. Not so I can share it or
do anything illegal, but so I can use it where I want to use it
without worrying about odd formats and protection. About 6 months ago
I switched to buying all my music off Amazon MP3. The music comes DRM
free and is cheaper or the same price as iTunes. Its not many more
clicks to get it and it saves me wasting a CD and the other clicks to
get rid of the DRM. I think Apple has to go the DRM-free route.
There's no added value to me from buying it off iTunes and their
"Genius" approach isn't going to make me buy more music from them.
So, the thing that bothers me is that if you went into someone's house
and tried to audit their household for compliance with the music and
software licensing laws who would pass? How would you prove that the
2,635 songs in my music library were all bought and/or ripped from
CD's I owned? They are, but i'd hate to try to go through such an
audit. What if I lost a CD after I ripped it? Was I even allowed to
rip it in the first place? Where are the receipts for the music I
bought off iTunes, Amazon etc?
What it comes down to is you doing your best to adhere to the intent
of these broken licenses and concepts and paying (at least once) for
every piece of music and software that isn't free that you have in
your house (yes, even if you have music you don't listen to - if you
have it you should have paid for it or you should delete it).
People that know my past will find this post funny. A long time ago I
ran a multi-state computer piracy bulletin board that was quite
popular in its time. That was back in the days of speedy 300 baud
modems (you're likely accessing this at 15,000x or more faster speeds
now). I've either evolved or gained a lot more respect for Bubba.
iPhone & iPhone 3G
day it came out. What did I do with my old iPhone? Unlike many that
sold them on eBay etc, I gave mine to my daughter. Its not enabled as
a cell phone so its basically and iPod touch. She loves it and does
all sorts of things on it - email, pictures, games, videos, music. And
I can honestly say that after watching her (she's 10) abuse it for the
last 6+ months that the original iPhone is a TOUGH device. Like my
Lexus RX300 that I gave to my wife when I got a new car (Acura MDX), I
feel sorry for it. It was kept in such good shape and now its abused,
but both are tough and can take it. Then again, my girls are tough too.