Cisco ASA and ASDM

Cisco has a nice client side java app, ASDM, for managing their
firewalls. Unfortunately if you go to the web page for the firewall (https://
<ip address of firewall>) and click "Run ASDM" then you just end up
with a downloaded file "asdm.jnlp". If you have the less-secure
setting of open files after download it will likely open up an XML
document in Xcode or something like that. So how do you run the ASDM
on the Mac?

Do this at the command line:

javaws asdm.jnlp

From there it will ask you where to save the .app bundle and then
next time you can just run that application.

iPhone 3GS Update

It seems that AT&T is reading my blog :)

Anyway, they changed their stance and are now offering special upgrade pricing to early iPhone adopters.

I just checked my status and I got this back:

"A full discount on a standard handset or iPhone upgrade is not available at this time, but you may qualify on 12/12/2009.  We can offer you an iPhone upgrade at a higher price with a 2-yr commitment and an $18 upgrade fee. Please visit a participating iPhone sales location for pricing on this offer."

Since this program is targeting the early adopters:

"All of that said, we've been listening to our customers. And since many of our iPhone 3G customers are early adopters and literally weeks shy of being upgrade eligible due to iPhone 3G S launching 11 months after iPhone 3G, we're extending the window of upgrade eligibility for a limited time."

And I got the iPhone 3G the day it came out I don't understand why I'm blocked until 12/12/09.

Either their systems reports on upgrade ability don't match their press releases or they're flat out lying on the whole early adopter program. AT&T appears to just make things up and see how people react then tune/correct as they go. Not a lot of thought/planning going into what they're doing.

Anyway, even if I was eligible for the early upgrade there's little in the HW that i'd care about:

• Compass - More targeting people walking around in cities. Fortunately I dont do much of that.
• More memory - I fit just fine in the current footprint (16GB)
• Bluetooth audio - i'm not very interested in this and i'd have to buy new a new headset too
• Voice commands - i'm not much of a talker
• Better performance - This is the only one thats really appealing. Some apps are dogs and some of the delays on the phone are annoying. But thank goodness its not a Newton!

What I would like is an upgrade that would stop the phone from dropping calls 3x on a 45 minute ride on the Mass Turnpike. Unfortunately that upgrade is one that requires a new carrier. AT&T remains the weakest part of the iPhone which we all expected from the day Apple announced the first one. Its just a shame considering how much business they've received thanks to the iPhone.

Find my iPhone

A cool feature that came out with iPhone OS 3.0 today. Not sure it will help you find it while its in your house but it will at least track down what store/gas station you left your phone at.

For the house problem it has the ability to vibrate/ring (despite ring settings) for up to 2 mintes:

"Write a message that will appear on your iPhone's screen. You can also play a sound on your iPhone, even if it is in silent mode."

If you choose the sound option when its at somewhere like a gas station they'll get annoyed. Assuming you have security on your phone (a pin, which you should have or your whole life is exposed) then it will beep and vibrate continuously for 2 minutes and they can't stop it without the pin. They could power it off (I confirmed they could do this) if they know how to do that on an iPhone. I fear what they'd do otherwise...

iPhone 3Gs

Ok, I have to post on it. I'm more excited about the new iPhone 3.0
software. But in this generation of the iPhone AT&T and Apple have
made what I think is a mistake. For the first two versions I got the
phones the day the phone came out. The very first because it was new
and exciting etc. The second one before it had some significant
improvements (3G) AND they let me get it for the same price as a new
customer -- i.e. they allowed me to upgrade before my 2 years were up.
Without that I wouldnt have an iPhone 3G. This time around they've
taken an ugly approach of requiring you to pay full price ($500-$700)
AND re-up for 2 years. Thats worse than most on an early renewal. I
could live with re-upping for 2 years IF they gave me a discounted
price. But I can't live with both.

So i'll wait out my contract. Hopefully verizon will get to offer one
around the time my contract expires and i'll be rid of AT&T and get to
a new phone at the same time.

BTW, the side effect of them allowing me to upgrade at the cheaper
price would have been for me to give my 3G to my wife, caused her to
switch from Verizon and then they'd have another AT&T subscriber. AT&T
didn't think this one through especially with oncoming competition on
several fronts.

OSX Server - What works and what Doesnt

So after 2 months of using OSX server, here's the update:

What we're using it for:

1) Central file server - I often have to fix permissions on the shares as someone will copy things into a share and the file will be read only to others in the same group. Since the UI is messed in Leopard (see previous post) you have to fix this through a VNC connection on the server which means you need to be an admin. Apple really needs to fix that.

2) DHCP - this is working, although some of the engineers have complained that the OSX DHCP server seems slow.

3) DNS - no real complaints here

4) Mail - The UI around the mail setup was weak and broken. Has anyone tested that? Some things we had to do:

    /etc/postfix/master.cf -> uncomment submission inet n       -       n       -       -       smtpd
        enables port 587

    /etc/postfix/main.cf -> add tls_random_source = dev:/dev/urandom (gets rid of some error messages)
        "no entropy source specified with parameter tls_random_source" 

    /etc/imapd.conf -> add tls_ca_file: /etc/certificates/wasabi.nasuni.net.crt (gets rid of more error messages)
        "TLS server engine: No CA file specified. Client side certs may not work"
  
        http://www.corpmac.co.uk/2008/09/30/tls-no-ca-file-specified-reason-and-solution/

They also don't let you add aliases other than Groups so you need to:

sudo vi /etc/aliases
sudo newaliases

Also note that when you stop the mail server and restart it through their UI (i.e. after you changed some settings) you often lose the first email that gets sent after restart. Nice.

Generally i'd recommend using someone else's mail server. The experience was not an "apple" one.

5) Open Directory - Apple uses this for all the user/group management and I havent had to touch it.

6) Radius - We use this for Cisco VPN authentication. Note that OSX server didn't really support this in the UI, so you need to follow some instructions.

7) Software update - saves multiple macs downloading to the same spot. Note that the first time you turn this on its really painful as it brings in a lot of updates.

8) Backups - the server time machine's itself and presents itself as a time machine target for any clients to use.

What we're NOT using it for:

1) Wiki - I used the Apple Wiki quite a bit. Its VERY limited. The WYSIWYG is nice, but you don't always get what you see and it can do some odd formatting stuff. If you want to do more advanced stuff you get thrown into HTML and the HTML is cluttered and hard to manage. You can't do a lot of basic stuff and eventually I punted and went with the tried-and-true MediaWiki which i'm very happy with. Its running as its own VM.

2) Web Hosting - I didn't really even try this. I wanted a server that wasn't hosting all the stuff above to be our external web host. So I created a standard Linux VM and am hosting the site via Apache.

3) Firewall - We have a decent Cisco firewall so I didn't try the OSX server firewall.

4) Our source code control/bug tracking etc is off on Linux VMs.

OSX Server bonding issues

We had some crazy issues with our OSX server setup. When we had clients join the server we had odd permission problems, synchronization issues with passwords etc. After much mucking around it turns out it was mostly our fault. Our OSX server is also a target for SSH from the outside (not on the normal port 22 and requiring certificates). To support logging in I had created some local user accounts on the OSX server machine, and for convenience I had given them the same names as the server accounts.

DONT DO THAT

OSX server gets very confused if you have local accounts with the same names as the server accounts. And you don't need the local accounts anyway as you can enable the server accounts to login/get a shell through the admin tools. Deleting all the local user accounts and enabling the ones we needed to login helped a lot of the issues.

The Leopard client still does odd things when you're looking at group/user permissions (and ACLs) on network shares. Seems that Apple messed this up in the UI in Leopard so that if you look at them you see things that just don't make sense as the users/groups are not getting copied over from the server and displayed correctly. Under the covers of the UI the right things seem to be happening but it can be confusing for the users.

OSX Environment and IE

In our vision for an All-Mac office we sort of expected to be able to pull that off without any bumps. I mentioned previously that I ran into early bumps of some office environment management apps that required windows. Later I found out that our bank (Silicon Valley Bank) and our payroll group (ADP) both have web sites that are not friendly to non-Windows/Internet Explorer environments. I proceeded to setup a new VM with Vista Home ($199 for the full install) for our office admin to run just for IE for these sites but otherwise to use the Mac side of things. When you run into mainstream companies that lack support for non-Windows platforms with their websites you really get a sense of the size of the Linux/OSX market on the business side of things.

Another thing i'm amazed at is that Vista Business sells for $300, but I can buy a full Netbook with Vista Home for $300, or a Dell Inspirion 531 with Vista Home for $249. Vista Home sells for $199 for a fresh install which is required for VM use. So the hardware is worth $49. You can setup a VM for $199 or you can have dedicated hardware for $249. While I went the VM approach mostly because I dont want more hardware to deal with (power, cooling, all that) the economics just don't make sense. 

EveryTrail

Just got back from a bike ride with the kid. Got to use my new iPhone attachment for the bike and EveryTrail iPhone app. Thats a nice combination and lets you keep track of rides.

Ride with Lydia

Widget powered by EveryTrail: GPS Geotagging

Netflix, Flexplay, and RedBox

I'm currently a Netflix subscriber (cheap plan, 1 out at a month unlimited with Blu-Ray = $10.99/month). I average about 3 movies a month. This means each movie costs me about $3.65 to watch. Whenever possible I watch them in BluRay format. 

The other day I noticed how many RedBox outlets there are around where I travel. Gas stations, grocery stores etc. With RedBox you pay $1/night and you can reserve movies. They have pretty current movies, but no BluRay options. There's no subscription fees and you only pay for what you use. This could possibly drop my monthly cost, but i'd have to know in advance that i'd be able to watch a movie in a given night or i'd end up paying for an extra night (and feel the pressure to watch soon). The fact that the price can stack up if you don't watch it once you take it out puts me off. The lack of BluRay is disappointing too. 

Shortly after running into RedBox I noticed a 48-hour self destructing DVD option at Staples called FlexPlay. It chemically self destructs its playability (in a way that doesn't break your DVD player) 48 hours after you open it. Staples generally sells the disks for $1. The outlets aren't as convenient (in this case tied to Staples store hours) and the movies aren't usually as new as Netflix and RedBox (or updated as frequently). On the positive side your expense is capped at $1/movie and you can "queue" them up by buying several and having them handy and watch whatever suits your mood. If you rent via their web site they "rent" the movies at $4.99, they're not going to win the war with that kind of pricing. At $1 and with more outlets I can see how they could be competitive with RedBox. With the limited availability, older movies, and poor pricing direct they're out.

Ok, you're probably wondering why I dont just do video-on-demand and pay just for what I watch. A couple reasons, my bankruptcy-declaring cable company charges $5.99 per rental (HD). Thats more than my average cost via NetFlix. In addition, their movie selection is worse than Netflix and RedBox. And finally about 50% of the time there are issues with the video on demand playback.

Currently NetFlix appears to be the best option as it gives me the most flexibility when I play the movies and the quality/availability of what I want. Its largest downside is the fact that I have to wait 3-4 days after watching one to watch another. I could pay more to have more flexibility but given how few I watch it doesnt seem worth it. If someone could deliver HD video on demand at an equivalent cost to NetFlix then i'd switch but given where I live and the monopoly of the local TV provider, i'm stuck for a while.

iTunes Music Video Playing Problems

If you happen to be having problems playing music videos in iTunes I
found an odd behavior: If you use multiple speakers normally for
playing music, then Videos won't play when you have multiple speakers
selected. You have to choose just the speakers of your mac and then
the videos will play. Seems like a bug to me -- there should at least
be a warning.

Side track - The Mace

A side track from my ramblings on IT setup. Why is this blog called "The Mace's Musings"? What/Who is "The Mace"?

This goes back to high school in the days where the internet barely existed and computer bulletin board systems (BBS) were the gathering spots of the geeks like me. Basically they were computers with modems attached to phone lines that one person at a time could call from their computer to that BBS and post their comments/download stuff and log off for the next person. Some more advanced ones had multiple lines but that was pretty rare in the early days. Back then they were places to chat with people, but more often than not they were used to distribute "Warez" or software. For the most part, in those days, there wasnt much freeware/shareware and the bulk of software getting downloaded was commercial/stolen. Those were the days of 300 baud apple cat modems (with a later huge upgrade to 1200 baud) and software applications that fit on a floppy. Still downloads took forever and new file transfer protocols like xmodem and zmodem were being pushed to help speed things up and recover from broken connections etc. There was a huge culture around all of this and it was mostly an Apple II/Apple Cat world.

Anyway, I started with my Apple II and a modem and started dialing into the BBS's. Back then everyone used a handle so nobody knew who really was downloading the software etc. The handle was your bulletin board identity and people and groups like the Legion of Doom had them and became well known in the community. 

I was in my basement one day with a good friend and we both were getting started in the community and figured we needed handles. He was into comic books, especially "Thor" and picked Odin, a Nordic god associated with war. We both liked the war and fantasy games like Wizardry. My choice was a weapon, a mace, personified to The Mace. The choice was both due to the weapon(ness) of it as well as an indirect reference to my last name.

From there I used this new handle and visited many BBS's across the country and eventually ran my own, starting with a single one and eventually franchising out to multiple states and I became fairly well known for a while. I dropped off the grid when I turned 17 and decided to follow a more legal path in life. I heavily modified some base BBS software to give my own stuff its own unique feel and draw and this was the beginning of any real programming with a purpose for me.

So thats where The Mace came from. 

As an amusing aside, about 20 years after I picked "The Mace", I was chatting with someone who worked for me at work many states away from where I grew up and we were talking about the early days in computers. We eventually got around to BBS's and he found out I was "The Mace". He had frequented my system and knew who "The Mace" was. Small world.

Those formative years in remote connections, tunneling through AT&T's computers, hacking/crack systems, distributed work, and programming have shown their influence on me for the last 20 years. While i'm not proud of some of it, I wouldn't be who I am without it.

OSX Server Day 1

Now that we were limping along from an IT perspective it was time to get a real server created. I took my OSX Server, 10 Client edition, popped it in my new MacPro (Nehalem) turned it on and got a white screen. Nothing. Odd. I booted off the pre-installed Leopard and it was fine. So from there I decided to just install it from the CD versus booting the CD. It installed fine and I rebooted and had OSX server. Then I was presented with a LOT of system management options and terminology and concepts I didn't know. I thought OSX server was supposed to be easy? Turns out there are 3 modes to OSX server - Standard (simple), Workgroup, and Advanced. When you install the way I had to it treats it as a server upgrade and forces advanced mode. 

Why couldn't I boot the CD? Turns out the OSX server I bought (several months ago) was older than the hardware I had just bought and was missing drivers etc and I could not swap the disk for a newer one without paying $500 to apple again. This was nuts, I got on the phone and after speaking to 5 Apple people (just to get to the correct department), I got told that since my OSX server was purchased a while back, and even though it wasn't used, they shouldn't be supporting me. Nice, so much for planning ahead. But then they said, if you do the install by booting Leopard and then running only a piece of the OSX server install package it may let me avoid advanced mode. I got one blurb from them on how to do this:

"Install OS X client onto unit, creating an admin user with the name & password that you want on the server. 

Update all SW and then insert OS X Server install disc into unit. 

Go to Finder>Go>Volumes.

The name of the metapackage file to be run is "MacOSXServerInstall.mpkg", which is located in /Volumes/Mac OS X Server Install Disc/System/Installation/Packages.

Run this metapackage file to install OS X Server on unit. "

Nevermind the fact that this information was limited and flawed, it gave me just enough to find the package I needed. The best way I found was to do this through the terminal and then "open" the referenced package. After doing this I got OSX server setup in the way it was meant to be. 

It took a great deal of time because each attempt required OSX updates (over my crazy aircard setup) as well as OSX server updates. A few times as they were setting up the rest of my network I had wrong IP addresses/configurations which were difficult to change in OSX server so I had the pleasure of doing this several times.

In the end I think the steps are something like this (none of which I could find with google searches):

1) Boot Leopard install CD (even if your new MacPro has Leopard pre-installed)

2) Go into disk utility and set up your disks the way you want (OSX server install would have had this step but you can't boot that). Your options may be more limited than OSX server but I had 4 1TB drives and created 2 mirrored 1TB volumes. One I called "OS" and one I called "Data". I'm so creative.

3) Now install Leopard and do all the updates. If you're doing this with an Aircard bring a good book.

4) Now, while logged into leopard after all the updates/reboots are done, put in the OSX server CD and run the package above. You'll walk through OSX server install. Oddly it doesnt force a reboot. 

5) Next, don't do any updates (if you do, start over at #1 - found that the hard way), eject CD and reboot.

6) Now you get the OSX server install screen asking you about standard (stand alone) vs workgroup vs advanced. I originally chose standard but later found out I should have chosen workgroup so I started over again.

7) Now once it comes up you can do the OSX server update (another 200MB+ over the aircard). Note that if you plan on making mistakes like I did its helpful to download these update packages and squirrel them away (I put them on the data drive that I wasn't wiping on each attempt).

8) Now you have an installed OSX server. Time to figure out what it can and cant do. Thats for another episode.

The alternative is to buy/get an OSX server CD that works with your hardware. My first experience with OSX server has not been pleasant.

IT early pains

With our new office we rented space and I hired a group (Rockport Technology Group) to come in and do the wiring, phones and basic network setup. They're a great bunch of guys that i've used before and they always do a first class job. What I was left with was a CISCO ASA5505 firewall, 2 Cisco 521 WAPs, a 48 port GigE switch, a Nortel BCM 50 phone system and a Keyscan card reader system for physical security. 

With that gear I have a wired and wireless network as well as phones and card access for my office which can sit about 40 people. Note that I haven't mentioned an internet connection. Thats because we don't have one yet (!). I ordered dual T1 lines from Verizon, but T1s take time (4-6 weeks). The fallback was Comcast since they were supposedly in the building already and had a 2-3 day install time. Even though they pre-certified the site/install when the guys turned up they found no Comcast in the building. They said they need to run cable to the building and they need to wait for the ground to thaw first (yes, though its April our ground is frozen after you get down a few inches -- welcome to New England). So I cancelled that order. I had had 5 phone lines installed by Verizon for the normal phone system so we asked them to convert one to DSL. You'd think that would be fast, but it takes Verizon 7-10 days to do that too. The DSL should be live next Tuesday. The T1's follow 3-4 weeks later.

So I have an office full of people that need internet access, what do I do? My crazy fallback idea from the beginning was to use my Verizon Aircard. I bought it a while back and used it to be on the net at all times, in the car, in airports, etc. Its a decent card and fast. So in the beginning I had it in my MacBookPro and was just doing internet sharing from it to the Airport. Apple makes this dead easy and it works well. The problem is the office space is 7K+ sq ft so there's no hope of covering much range that way. I could try to extend it with other network gear like Apple's airport express but i'd be buying them to use them for a week or two. I could try to bridge it to our new Cisco wifi but that was still coming online and having its own challenges. The other issue was that I needed to use my MacBookPro for stuff and so the network connection would come and go based on what I was doing which didn't help the others.

What I didn't have were any servers set up yet. I had bought 2 of the new Nehalem MacPros to be used for "IT stuff" and decided to use one of them to bridge to the net. I used one with the base Leopard install, installed the aircard and Verizon software and turned on internet sharing bridging the aircard to the wired ethernet port. Since the Cisco WAPs (wireless points) were also connected to the same network, all of a sudden everyone had internet access whether they were on Wifi or wired. The Verizon software (VZ Access Manager) just pain stinks. I have a conspiracy theory on these cell companies and the aircards -- its that when you use too much bandwidth they drop the connection just to see if they can stop the traffic, if nothing else its a brutal throttle. VZAccess doesn't automatically reconnect. But if you look in your network settings when connected with VZaccess, they have a new network location setup with the Verizon modem. In that new location I added in the ethernet port I wanted to share. I also set that location to be my location whether I was connected or not. I then when into the advanced settings of the modem through the OSX network preferences pane and set it up to auto-reconnect, never disconnect etc. With that done the network drops at times but reconnects without my involvement and we've had a productive few days downloading tools, updates, email etc. Its no speed daemon but its something you can live with.

I used that same MacPro to create the VMWare environment for the management apps for the Nortel and Keyscan pieces that I spoke about in my previous post. I also created a basic file shares so we could move things around internally.

Now I needed a real server with permissions for the different elements of the business, that was stable, could be backed up etc. More on that to come.

OSX Office Environment

I've had the fortunate experience (kidding) to become a part time IT guy for my new company. The plan is Mac's all around to limit the IT noise and then virtual machines for those that have some need of Linux/Windows. The basic setup is OSX + MS Office for the Mac + VMWare. Note that despite recent benchmarks of Parallels vs VMWare Fusion I went with VMWare, I did this because like MS Office, they're the leading VM environment and I can download more pre-configured machines etc for that environment than any other. 

The developers need Linux to do their thing and I expected that. What I didn't expect was that some basic applications like the ones to run the Keyscan card key access to the office doors and the Nortel phone system are windows only apps. For those I spent the whopping $300 on Vista Business, installed it in a Windows VM and then installed the apps in there. Generally these infrastructure apps don't need to be running all the time so that makes it even easier. Still, not having web based management or cross-platform apps in this age just shows you how far Apple has to go.

Over the next few posts i'll be talking about my experience in setting up an OSX based office environment and in the process you'll see how little I know about basic IT concepts :)

Cloud Reliability

Building stable cloud services is a difficult thing. Even google is

struggling:

iPhone 3.0

I wont re-state all the iPhone 3.0 features they announced today as others have done that well. But there are a few that to me were key that may not be highlighted by others:

MMS - I left everyone behind on Verizon when I broke my contract and joined AT&T just to get the iPhone. I imagine there are tons of others in that camp. They all send me MMS pictures which are too painful to try to access so I miss all those family pics. 

Voice Memos - An obvious oversight. I wonder though about them putting so many 3rd party guys (iTalk for example) out of business. Why?

Search - Across apps is nice but not needed to me, but within an app like Mail and Calendar its required.

And finally one that not too many are pointing out, I can finally send stuff from my address book on the iPhone to someone else. That was a major one for me.

Note that I didn't point out other things like Copy & Paste, Tethering and some others. They'll be nice but not as basic/fundamental.

Its great to have a phone thats so flexible that they can roll out serious updates like this and do it for free. While the iPhone is still not the best phone on the planet with dropped calls etc, it sure is my favorite electronic device.

Sirius XM almost folded

I 'm on a roll. First I wrote about Apple and the DRM challenges forcing me to buy from Amazon MP3, a short while later Apple went DRM free. Then I wrote about XM radio and its flaws for me, and then they narrowly avoided bankruptcy. Perhaps if the Sirius fools han't done a $500M deal with Howard Stern and other questionable business practices they wouldn't have come so close to losing it all.

As with so many other things, companies need to study and learn their about their customers preferences, likes and dislikes etc and then work with a total focus on meeting the needs of those customers. I'm just one voice with my own set of preferences, but there are common things to learn and do if you study analyze and get to know your customers. Apple, Sirius and others, take note or perish.

Is the mac a gaming platform?

Apple has come a long way with hardware and software and has made significant inroads in its ability to be a desktop system in business. I've been using Macs for work in small and large companies for the last 6 years and its been pretty rare that that's caused me grief (the major point being Exchange/Outlook support which I hope will be fixed in Snow Leopard)

I wish I could say Apple has made a lot of progress on the video game front, but the reality is that it hasn't. Despite having some leading edge Video cards like the NVIDIA GeForce 8800 GT that  I have in this MacPro and essentially the same Intel-based hardware, there are few games for the Mac. Why is that?

Part, I would say is that Apple has continually ignored the video game industry while MicroSoft with its "Games for Windows" drive and others has encouraged the PC as a gaming platform. So the company is not supportive. Thats a major point.

Next is that the hardware support for games is not complete. I recently spent a lot of time looking for a way to get 5.1 sound on my Mac for gaming. The issue is that you can't get that. Sure it can output 5.1 sound optically from DVDs etc, but generated sound from games cannot be piped over the optical output and you can't buy a card, USB device etc that does it in the current MacPro generations. Griffin Technology did make a FireWave product that outputs sound over FireWire to a device that gives you 5.1 sound output, but both FireWire and the FireWave have been discontinued. So there is no 5.1 sound support for games on the Mac. 

Along similar lines, if you really want the best bleeding edge video cards as they come out from vendors like Nvidia that offer "upgrade" programs so you can continually upgrade your card you're out of luck. The mac hardware lacks the specific power connectors that the current generation video cards require so Mac video cards end up being custom made for Apple. If you could make the power problem work your next issue would be the total lack of video diver support for the platform.

Ok you say, I can use my Mac HW and then run windows games in VMWare or Parallels. Well, no, you can't really, while some DirectX support has been added to the virtualization platforms, the performance and compatibility limit you to games that have fairly modest requirements.

Fine, then just play games under BootCamp and let Windows own the Mac hardware. Well, thats what I do, but you still wont have 5.1 sound or the latest video card. It does well and you can play Far Cry 2, Crysis, etc in this mode, but you wont have as good as an experience you get on a PC. And you're not running OSX and you've paid a premium for Mac HW to get less out of it.

If you're a serious gamer, don't buy a Mac. That's what Apple is telling us. My love of the OS (and dislike of the alternatives) is stronger than my need for the best video gaming experience but I long for the day when Apple either gets "with it" or legalizes the hackintosh.

My good friend recently sold me his MacPro (at a great price!) and went back to the PC. He's a serious gamer. He loves the Mac and hates Windows, but the gamer side of him won. 

Wii Fit

My daughter got a Wii fit for Christmas and i've been amazed with the device. While it looks like a simple slightly raised step platform they've dramatically changed the video game experience with the introduction of this wireless board. When you step on it it knows your weight, and where the weight is placed on the board. From there you can snow board, ski, do push ups, jog etc. While I don't think its a good substitute for a gym (and some are quite upset about it) I do think forcing some more movement into video gaming beyond just the fingers is a great idea. The fit, along with the Wii itself has innovated on the video game front and despite its very dated graphics capabilities it has continued to have a serious impact on the video gaming industry. If you have Wii and dont have a Wii fit, I'd suggest you get one. Not to get in shape, but to experience one more incremental step of progress in the video gaming industry.

iPhoto and Face and Place Recognition

With the latest iPhoto update Apple added two key new features: faces and places. In faces, iPhoto does a decent job of recognizing faces in pictures and then tries to match the patterns to find the people. You give it a few hints and it tries to find more of the same person. For years i've used keywords to identify key people so I can find pictures, say, with myself, my daughter and my wife in them. With faces in theory this is made more automatic. 

My experience though has been a little different. It did force me to tag more pictures and put some structure around the naming of pictures. The actual face similarity piece is about 50/50 in my experience. An odd side benefit I found is that I enjoyed the process and we actually had fun with the program guessing a completely wrong person for a given face. How could my friends face match my sister? Combine that with an OCD tendency and you can entertain yourself for hours matching faces and names. But in the long haul, given the lack of accuracy I don't think the addition added much value and you can't rely on it.

With Places, Apple goes through a lot of trouble to point out GPS camera support and that certainly works with the poor pictures that the iPhone takes. But if you go and stroll through Best Buy, the now defunct Circuit City, or Wal-Mart, how many GPS enabled cameras do you find on the shelves? Zero. None. So is this feature solely aimed at the poor pictures taken on camera phones? If so i'd argue that Apple and iPhoto isn't the place to store them but something more online, more accessible since these cheap shots have limited use and quality.

You can, after import, add location information to your pictures, and again thats another time sink for OCD people and it provides little long term photo management value.

Would I buy the update again knowing what I know now? Probably, I love iPhoto and want to have the latest updates. But if you're buying it for new features, think again.