Older blog entries for ianmacd (starting at number 64)

So, I won an Xbox last night in a raffle at the Disaster Recovery BoF. A few hours prior to that, I hadn't even heard of the Xbox.

Walking through the vendor exhibition hall with a colleague earlier that afternoon, he remarked how cool the Xbox was. "What's an Xbox?" I asked. "A game console", he replied.

I told him how glad I was that I didn't have one, because I didn't have enough time for my interests and hobbies as it was. My life would be over if I had such a device.

Now I own one.

Hmm...

So, I'm at LISA 2001 in San Diego this week.

The downloads of my bash completion code have been very encouraging. Expect to see a new release at the weekend to fix a few silly bugs.

Highlights of LISA so far have been Jim Reid's excellent advanced DNS tutorial and KC Claffy's presentation on Internet traffic statistics, which debunked a surprising number of commonly held beliefs. Her Answer Lies in Measurement folk song was particularly entertaining.

I've finally put up a page for my bash completion and other cool bash stuff.

We spent Thanksgiving in the Santa Barbara area, in Carpenteria to be specific, staying at Prufrock's Garden Inn.

Saturday evening, I'm flying down to San Diego for the LISA 2001 conference. That should be fun. I just hope they have a wireless LAN for my laptop so that I can still do stuff.

On Sunday evening, we'll probably head down to tacky Tijuana, just over the Mexican border.

Flight prices are still ridiculously cheap right now, so Sarah and I have decided to go for a long weekend on Maui in January. So it's the rainiest month of the year in Hawaii, but who cares?

Spent some time hacking on Junkbuster today. It's rare that I get to hack on C code in my day job (or even outside of my day job).

Basically, Google needs to be able to strip out the Referer header from HTTP requests when said URL refers to an internal Google document, just in case the file name compromises confidentiality.

We now have a trio of Junkbuster proxies running on a single machine. Port 8000 filters out Referer and User Agent headers, port 8001 filters out both of those headers as well as ads, and port 8002 filters out those headers, ads, and cookies.

All in all, a decent step in the direction of anonymous browsing. It's just unfortunate that Referer and User Agent information can also be retrieved via JavaScript. Nothing is infallible.

Looks like tomorrow is going to be taken up with documenting the proxy implementation and putting together an LDAP design document.

On the home network front, I now have monitoring, thanks to mon. I've also replaced wu-ftpd with vsftpd and syslogd with syslog-ng, which is a vastly superior piece of code. CVS is one of the next things I'll need to set up, but that's pretty simple.

Hi mperry. It sounds like you've arrived at a crossroads in your life and I wish you the best in your future endeavours.

Your diary entry yesterday was most tantalising and I find myself wondering how much of the change in your life is related to unstoppable events at work.

Will Linuxcare implode on itself like a dying star? Almost no news comes out of that company these days. Once upon a time, people would dread the poison pen of Maureen O'Gara as she sought to trash Linuxcare and all other Linux companies. These days, Linuxcare isn't even important enough to be worthy of her bile.

It's true what they say: the only thing worse than being talked about is not being talked about. Anyway, I successfully migrated all services from my old machine in Amsterdam and now have everything running on a new machine in my apartment, down here in Palo Alto.

The last few weeks have seen me fine-tuning the configuration of Postfix and BIND, as well as nailing down the security of my network as tightly as possible.

I've now got IPSec based access into Google, which is very convenient when I'm on-call.

I also installed an excellent Web based e-mail client for family and friends to use to access their e-mail account. I didn't want to be offering either POP or IMAP over the Internet, so SquirrelMail provided an excellent alternative.

Future projects will see incremental improvements in the network here. I require more flexible logging, which I'll get from either msyslog or syslog-ng.

Then I'll need a more secure FTP daemon, for which I'll probably go with vsftpd. Another worthy project is monitoring, where I'll probably use mon, since that has served me well in the past. Somewhere down the road, I also want to install a news server to gate some of the mailing lists I'm on to newsgroups.

In short, projects aplenty. The only issue, as always, is finding the time.

I dropped Sarah off at San Jose airport this morning. I felt as nervous as hell while she was in the air. I'm flying out to the east coast Friday night and I'm not worried for my own safety at all, but it was awful knowing that the person I care most about in the world was in what has been exposed as an extremely vulnerable position. To my great relief, she arrived safe and sound.

First of all, hi to mperry. Welcome to Advogato! It was always a pleasure to work with you and who knows, maybe our professional paths will cross again in the future.

The stuff you're doing with your iPAQ sounds very cool, but I wonder how much you must have spent on all of those accessories. I would love one of those things, but know that it wouldn't stop at the initial cost of the unit itself. There would be the card expansion pack, the extra memory, etc. Life's hard when you have to justify expenditure to your fiancée. Maybe I'll reassess when the H3800 comes out. That looks like it will be a great unit.

Well, I spent some time configuring Apache last night and should be ready to make the switch to hosting www.caliban.org sooner rather than later. Hopefully, I'll manage to grab some time today to start working on e-mail.

As a former employee of @Home Benelux, it comes as no big surprise to read about the chapter 11 filing of the US variant and shareholder. Management at that company was always in disarray, with a fatal unwillingness to listen to the wisdom of others.

More illuminating, though is this article on how the whole @Home/Excite merger was doomed from the start, with cynical executives and VCs looking for artificial ways to bump up the stock value so that big investors could cash in and bow out, without any care for the long term future of the business, its employees, its customers, or minor investors in its shares.

This is cynical big business at its worst, especially when one considers that those guilty have what I disaffectionately call resumé buoyancy. They've risen so high on the totem pole that they can just waltz into a similar position elsewhere and rape and pillage in the same fashion all over again. OK. that's my Saturday morning rant out of the way. Time to go and do something useful now...

Wow, things have been really busy lately.

Google is ticking along nicely, though I need to get my teeth more into the production stuff than I have done so far.

No date set for the wedding yet, though it's almost a certainty that 30th August 2002 will be the date that lives in infamy.

We finally got DSL last week. After 18 months in the USA, with nothing more than dial-up service (and poor dial-up service, at that), I finally have a fast connection to the Net again. What a difference this makes to one's quality of life.

In the wake of recent events, it seems almost absurd to find happiness in something so trivial, but it really is nice to have this little luxury.

So, I've installed one of my servers with bind 9.2.0rc4 and configured that securely. Next in line is Postfix, followed by Apache.

Once those are optimally configured, I'll start pointing to my own box for Web and e-mail, moving it away from The Netherlands for the first time in 7 years. The end of an era.

I've already modified my whois information to point to this new box for DNS, but that DNS currently just points back to The Netherlands for Web and e-mail. I'll migrate those services one at a time over the weekend. My Netgear MR314 arrived yesterday. This really is a nice piece of kit, though I was disappointed to discover that, unlike the RT314, it has no selective packet filtering capabilities. I guess I'll fix this by placing my RT314 in front of it.

The MR314 also doesn't have the ability to syslog to a log-host and its Telnet interface is very limited, requiring most duties to be performed via an admittedly very easy to use Web interface.

There's also no serial port, which is a shame.

Still, the main reason I wanted it was for its wireless capabilities, and it seems to be performing very well in this area. A firmware flash to the latest version added the ability to restrict on MAC address, which is a nice security measure (though not infallible). So, the net result of all of this is that I can now hermetically seal off the computer room (which now sounds like there's a DC10 taking off in there) and sit on the couch with my laptop, obtain a DHCP address and surf away, protected behind the NAT of this clever little gateway.

The only thing wrong with the MR314 (and any product like it) is that it's not open source, so it's a trade-off between trusting Netgear's code and not having to purchase another computer with moving parts for the purpose of firewalling my network.

Anyway, time to go to work...

Still unpacking in the new apartment and still settling into the new job. These things take time.

Sarah and I got engaged while in England, but haven't yet set a date for the wedding. The venue is also unknown, but is likely to be somewhere in New England. It won't happen any earlier than next spring, with the summer being a likelier bet.

Godverdomme, ik ga trouwen. Ongelooflijk! Nu maak ik me al zorgen over hoeveel mensen er zullen zijn aan mijn kant van de kerk...

We drove up to San Francisco on Saturday and spent five hours with a jeweller before finally finding the ring we wanted. So, now I'm skint again. Je moet er wat voor over hebben.

Back from holidaying in the UK, back at work at Google, and in the process of unpacking in our new apartment in Palo Alto. It's been a busy time as usual.

Currently playing with Netgear RT314 router/firewalls. Give me iptables over this thing any day of the week.

So, two full weeks have now passed since starting my new job at Google. It's a very interesting experience, and culturally worlds apart from my previous employer, Linuxcare. It will take me a while to get used to working in an environment where the intellectual property is considered essential business leverage and not an abomination, where all company information is treated as privileged and confidential, and where inventions are patented, not released for incremental improvement. I guess this explains why my best efforts to find any of my new colleagues on Advogato turn up blank.

Right now, I feel rather useless in my job. I'm a sysadmin with very little clue how each piece of the infrastructural puzzle fits together to make the whole. I already have business cards and a cell phone, but am not yet self-sufficient in my work. These things take time. No doubt I will one day yearn for my erstwhile empty plate and lack of responsibility.

So, what else is going on?

Well, Sarah and I are moving to Palo Alto this coming Thursday. That will place me within healthy biking distance of work (Sarah will be a lot further away, since she still works in San Francisco) and give us a much roomier apartment with lots of daylight, a swimming pool, etc. I won't be sad to leave the dinginess of our current apartment behind. We'll be getting a lot more for our hard-earned cash in Palo Alto.

The day after that, Sarah and I fly to England for two weeks of holiday fun in London, Cornwall and the Isles of Scilly. I can't wait.

hacker seems to have come up with exactly the same basic CVS completion routine for bash that I wrote and that is included in the source distribution of bash 2.05, as well as on the Linuxcare BBC.

Incidentally, bash 2.05 improves the completion facility significantly with the addition of the -o parameter to complete. So, if you need CVS completion in bash 2.05, use this instead:

_cvs()

{ local cur prev

COMPREPLY=() cur=${COMP_WORDS[COMP_CWORD]} prev=${COMP_WORDS[COMP_CWORD-1]}

if [ $COMP_CWORD -eq 1 ] || [[ "$prev" == -* ]]; then COMPREPLY=( $( compgen -W 'add admin \ checkout commit diff \ export history import log \ rdiff release remove rtag \ status tag update' $cur )) fi

return 0 } complete -F _cvs -o default cvs

This is as basic as it gets, since there's no attention paid to any switches, but it does cover a great many cases of basic CVS operation. If someone could extend this to cover all of the cases, as I have done for rpm, that would be great.

Since joining Google, I've added p4 (Perforce) completion and intend to extend my iptables and tcpdump completion routines when time allows.

Anyway, I need to get packing, or we won't be ready for our move on Thursday.

55 older entries...

New Advogato Features

New HTML Parser: The long-awaited libxml2 based HTML parser code is live. It needs further work but already handles most markup better than the original parser.

Keep up with the latest Advogato features by reading the Advogato status blog.

If you're a C programmer with some spare time, take a look at the mod_virgule project page and help us with one of the tasks on the ToDo list!