Font Size: A A A   Layout: Left | Right

greg hughes - dot net

Security, IT and anything else that matters... to me, that is



Saturday, August 13, 2005 4:26:21 PM (Pacific Daylight Time, UTC-07:00) ( Humor | Random Stuff )

We interrupt this IT/tech blog for the following random cult video interlude....

Flashbacks of Deliverance run through your mind. Be afraid.

This, my friends, has to be the greatest video ever on the Intarweb. I am so glad someone sent this:

Whatever you do, DO NOT CLICK THIS LINK!

Ok, just kidding. Click it. No, really. Enjoy. Know a better one? Leave a comment.

Update: Apparently this video is a party promotion for a local (Portland, Oregon) media firm, Borders Perrin Norrander, Inc. Cool. Also, a lower bandwidth version is here: http://www.bpninc.com/evideo/video_mac_lo.mov


Saturday, August 13, 2005 2:55:39 PM (Pacific Daylight Time, UTC-07:00) ( SharePoint | Tech )

Bil Simser has taken the lead in creating a place for the community to create and share SharePoint templates. This is terrific - one of the more difficult things about getting people using SharePoint has always been the lack of templates and general resources available to get people started building the custom apps people dream of (but can't necessarily create themselves).

Link: The SharePoint Template Project on SourceForge

Now that we have the place to do this, all we need are participants. Microsoft recently released a set of 30 great site templates, and there are a few others out there as well, but this has the potential to be much bigger.

Bil's own words describe the SharePoint Template Project perfectly:

Not having custom solutions has been one of the larger gaps in SharePoint but demonstrates that you can accomplish a lot with just a little configuration and some creative thought. On numerous occasions I find myself in the newsgroups seeing people asking if they can build a Help Desk with SharePoint, or an Expense Tracking System, or a Call Board. The answer is of course yes. Always has been and always will. The problem however is that you don't get a lot of business solutions delivered without some work. Enter the SharePoint Template Project.

I created a new project site on SourceForge (yes, I'm not a big fan of GotDotNet and we haven't created my utopia of SharePointForge just yet) to accomodate this. The project provides an outlet for the SharePoint community to contribute and share list and site templates for the products under the Microsoft SharePoint technology banner (SharePoint Portal Server and Windows SharePoint Services).

These templates come in the form of binary .stp files or plain text xml schema files (along with any additional files like images, etc.). Users create the templates either using SharePoint itself (saving them in .stp format) or with whatever xml/text editor they prefer. The templates are uploaded to a SharePoint server and used as a boilerplate by SharePoint during site creation.

Templates in this project will be created by the community and packaged in a common installer format (MSI) so that end-users need only download the MSI and run it on their SharePoint server. A template MSI will be provided for contributors to the project which includes the template installer, full or custom selections for installation (users will be able to choose what templates they want to install), graphical preview for each template (if the developer includes them) and option to create sample sites based on the templates chosen.


Saturday, August 13, 2005 10:40:11 AM (Pacific Daylight Time, UTC-07:00) ( Geek Out | IT Security | Tech )

WirelesspclockLast year, I picked up a couple Wireless PC Lock devices, to see if they'd work in a business environment to control workstation security. What I found was that I'd purchased what seemed to be some cool hardware, packaged with really crappy software. In fact, the software was so bad, it made the hardware pretty much useless. Useless doesn't help in the security world, so I was disappointed overall.

Then about a week later, I discovered that Bryan Batchelder, another security type, had also picked one up, reverse engineered how it works, and written his own software for it. Bryan's software was a vast improvement - measurable in orders of magnitude - over the software that shipped with the hardware.

Then Scott Hanselman, a coworker and friend of mine, found the device and software and decided to contact Bryan and work with him to use take it to the next level, using the new .NET Framework v2.0, to control and take advantage of the hardware.

And today, a new article was published that Scott wrote for hobbiest programmers, as an installment in his excellent "Some Assembly Required" series on Microsoft's MSDN Coding4Fun site. The article is entitled, "Is that you? Writing Better Software for Cool USB Hardware." In this edition, Scott explains how the new software, built from Bryan's base, is made and how it can be extended by anyone who wants to (since it's an open source program published on SourceForge).

UsbwirelesssecuritytrayI've installed the new software myself (after downloading and installing the .NET v2.0 Beta 2 framework) and have it running, and I can tell you this: The new software really shows how cool the hardware is, as opposed to the original software, which made the hardware look sloppy and bad.

The hardware consists of a USB stick (it looks much like a USB storage device) and a small round button you can hang on your keychain (or wherever). With the new software, a tiny green icon appears in the Windows status notification area (the tray) and flashes to show you it's getting a heartbeat from the key fob button. If you turn the button transmitter off (it lasts for-freakin-ever on one battery, mine's almost a year old and it's still going strong), the software on the compute notices and does whatever it's configured to do. The image below gives you an idea of the things it can do out of the box, and it's plug-in-able, so if you want something else, you can go build it.

Hmmm, gotta go see if I can learn enough to be able to write a plugin now. 

     Usbwirelesssecurity


Saturday, August 13, 2005 8:22:01 AM (Pacific Daylight Time, UTC-07:00) ( Blogging | Tech )

Eagerly anticipated and full of great new features and enhancements, dasBlog v1.8 has been officially released.

Scott covers the details and pontificates the important readme file information on his blog. Here's a list of many of the cool new features:

New Features of Note

  • Anti-Spam Features
    • Automatic Referral and Trackback blacklist update
    • CAPTCHA for non-admin users (Font warping has also been increased in this version)
    • Logging and display of Comment IP addresses and resolved Hostnames for Admins
    • DasBlogUpgrader can strip spam from existing content folders
    • Support for rel="nofollow"
    • Ability to delete referrals and trackbacks directly from the Admin UI
  • Security Features
    • HttpOnly cookies
    • Admin access auditing
    • SMTP Authentication for outgoing mail
  • Syndication Features
    • Improved RSS Comments support for SharpReader and RSS Bandit
    • Upgraded Atom support from 0.3 to Valid Atom 1.0. ATOM Syndication permalink changes but 301 is issued.
    • RSS 2.0 and Atom 1.0 validates via FeedValidator.
    • Ability to mark entries as "syndicated" or not. Entries can appear on the site but not in RSS/Atom.
    • New between RC1 and Gold: Plugable, configurable pinging of Blog Search engines like pubsub and technorati.
  • Performance Features
    • Search Highlighting is optional now
    • Referrals are logged but not stored in XML by default. Configurable.
      (This has huge performance benefits for high traffic sites.)
    • DasBlog Upgrader can optionally remove all referrals.
      (Again with high traffic sites some folks had 5meg XML files full of referrals)
    • Theme templates are now cached in memory.
  • Installation Features
    • New VBS for IIS permissions and VDir creation
    • Support for running under ASP.NET 2.0
    • Support for running on Win2k 2003 without changing permissions when impersonation is enabled
  • Content Features
    • Ability to pre- and post-date entries
    • Permalinks based on Title and Date optional: 2005/06/06/title.aspx
    • Latest build of Free Text Box including ability to upgrade FTB without upgrading DasBlog.
    • Text Editor (FTB) supports IE7
    • Text Editor (FTB) supports FireFox
    • Blog Statistics macro
    • Mail-To-Weblog continues to improves. Works with Thunderbird.
  • Extensibility Features
    • Custom Macro Plugin model without recompiling DasBlog (see the source for the example custom macro)
  • Theme Features
    • DasBlog now ships with 16 themes and a Theme Combo to change between them.
    • New theme.manifest file makes themes and image assets more portable.

Saturday, August 13, 2005 8:05:21 AM (Pacific Daylight Time, UTC-07:00) ( Tech )

One thing I really need, and for which I have yet to find a truly good solution, is a clipboard manager tool that will do a great job (defined below) of managing a number of different clipped chunks of text, images or whatever. I often need to copy and paste multiple items over and over, but when the contents of the single-items clipboard change, its a pain in the butt to go a re-copy an items I used just a few minutes ago, just to paste it once or twice before I have to copy something else. I need a good clipboard library, with all the bells and whistles. I wish I didn't have to search for and install five or six apps to do what I want.

Improving the clipboard is a age-old problem in the Windows computer world (hey Microsoft - the clipboard idea is great, but in practice it sucks! Enhance it!), and I have tried a few different utilities that tried to solve this problem over time, but I've never seen one that really worked well.

There's been so many attempts at these sorts of programs, it's almost impossible to test them all without mucking up a computer (many of them programs don't install or clean up nicely). I'm sure there's one or more out there that people love. So - maybe you have one to recommend?

Here is what the ultimate clipboard tool would need to do (in my perfect little world):

  • Hold and intelligently manage multiple items clipped from any application
  • Clipped items of any media type (text, images, yada yada)
  • A smart, easy to access, unobtrusive interface for managing content
  • Let me save libraries of organized content
  • Let me have a one-time pad of clippings for the session, and let me move things around, save items I want to keep, etc.
  • For text items, ability to clip as rich text or plain text and convert from/to same (a la PureText)
  • Built-in ability to capture non-clippable text from the screen (scrape like Kleptomania or Screen OCR)
  • For image clips, let me select a rectangle by drawing it, a free-form area by drawing it, a window that needs to be scrolled, etc.
  • Send-to-BlogJet (for that matter, send-to-anywhere) function
  • Installs and uninstalls cleanly
  • Small footprint, lightweight program that works reliably
  • Free is great, but not necessary - I'll pay if it's quality software

Anyone have suggestions? Let me know - thanks!

P.S. - For what it's worth, I have a new-found level of utmost respect for anyone who has to complete RFPs (requests for proposal) for a living. I've spent a large chunk of time this past week, between a zillion other assignments, doing a fairly important RFP. I had to write most of it from scratch for the first time, so there was no boilerplate copy to start with. Now that I have a good set of boilerplate information built, I want to be able to take best advantage of it. Hence this post - I want to reduce the effort required to repurpose content like that the next time around, plus a great copy/clipboard/conversation program would be awesome for blogging.


Thursday, August 11, 2005 3:57:14 PM (Pacific Daylight Time, UTC-07:00) ( Random Stuff | Tech )

Note: This weblog is my personal site, and does not represent my employer. What I write here is my own opinion, etc. I am posting a couple job openings here because I figure some quality people reading this might have an interest, based on the readership of this weblog. I am not compensated for posting this, and I don't get a bonus or anything if these positions are filled. I am the hiring manager for these positions, so if that doesn't scare you away...

My employer, Corillian Corporation, is hiring for a number of positions. We're an awfully-darn-cool software company that's fun to work for and where employees have opportunity to really challenge themselves professionally. Corillian is a leading-edge technology company - and some of the smartest people I have ever met work there. I work among technical giants. It can be a little intimidating for me at times (in a healthy, good way), but mostly it's just very, very inspiring.

Among the openings at Corillian, we're looking for three employees to work in our Security department, focused on development and support of our commercial security software products. These positions are at our Portland, Oregon area location. The people filling these positions will be getting in early in the process of developing and selling the next generation of a truly cool and innovative software application. Maybe, just maybe you're the person we're looking for? Here are the positions I'm talking about:

  • Security Software Engineers - two positions - mature OO programmers (.NET's a plus) with solid n-tier app experience
  • Security Sales Engineer - works in concert with sales execs to meet pre- and post-sales technical and support needs

While I can't go into the specific software applications here on the blog (if you interview, we'll talk more), let's just say if you think security is important and cool, you'll enjoy working on this stuff.

For the Software Engineer positions, you're an experienced OO programmer and you approach things from a whole-design, architecture direction. We're not looking for people who need a list of tasks handed to them. We're looking for people who can organize and make good decisions based on requirements, which they can transform into a terrific software product. You're probably experienced in .NET development and have worked in an iterative/extreme dev environment. you challenge yourself and others, but you're a great person to work with.

For people interested in our Sales Engineer position, you're an excellent presenter in all sorts of situations and audiences, and experienced supporting technical sales efforts related to commercial software products, maybe even related to security software. You're able to deal with matching the priorities and needs of a talented and demanding sales staff, and thrive on doing an excellent job and delivering real, measurable results. You're also able to travel when needed.

To find out all the details about these open jobs, visit Corillian's web site and browse through the openings. You'll find we're also looking for employees to work as QA professionals and support engineers, as well as an IT Help Desk crew member (at least as of the date of this post).

If you have any questions, email or call me. You'll find my contact info over on the right side-bar of this web site. Call or email me - I'll be glad to chat.


Wednesday, August 10, 2005 1:38:55 PM (Pacific Daylight Time, UTC-07:00) ( Random Stuff )

Like Scott, I am always curious where my readers are from. Here's my guest map - please add your location! Just click on the guestmap image below to open a new window to view and "sign" it (I had to change this, the heavy iFrame version was killing my site - and I fixed the issue that was preventing some people from being able to sign the map):

     Guestmap


Tuesday, August 09, 2005 3:28:49 PM (Pacific Daylight Time, UTC-07:00) ( Random Stuff | Tech )

Looks like Microsoft on Tuesday released Microsoft Messenger v5.0 for Mac OS X. And since I recently became a Mac owner and added the Apple brand to my computer family, stuff like this make me a happier guy.

"Messenger for Mac 5.0 makes it easy to take advantage of the full power of instant messaging. Messenger for Mac offers two types of communication services - a personal account and a corporate account. A personal account works with the MSN® Messenger service on the Microsoft Passport Network. Contacts that you add to your personal account will include friends and family members. A corporate account uses the Microsoft Office Live Communications Server service and can include contacts who use other instant messaging services, such as AOL Instant Messenger (AIM), Yahoo Messenger, and iChat users who are signed in with AOL accounts."

More info here, and download here.


Monday, August 08, 2005 2:03:33 PM (Pacific Daylight Time, UTC-07:00) ( Geek Out | Tech )

At http://wigle.rustyredwagon.com/ you can search for an address and see a whole list of WiFi connections mapped by war drivers from all over.

I noticed no one is war driving out in my ultra-remote neck of the woods, though.

And they say there's LOTS of WiFi in Portland - this pic proves it (click for full size - and check out the error, heh):

Wifimapkiller


Monday, August 08, 2005 12:48:30 PM (Pacific Daylight Time, UTC-07:00) ( IT Security | Tech )

"...wouldn’t it be wonderful if there was a native Windows version that resided totally on CD and could be used to recover your distressed PC..."

Yes, it would. And as JK points out, there is one available. It's called BartPE (Bart Preinstalled Environment), and it lets you construct an awesomely useful boot CD. There's lots of plugins available, too.

Okay for personal use, and for business use in your company, but not free to redistribute.


Monday, August 08, 2005 11:54:15 AM (Pacific Daylight Time, UTC-07:00) ( AudioBlogging | Geek Out | Random Stuff )

Astronaut Steve Robinson has done the first Podcast from space... Say what you want about Podcasting. You have to admit that when someone does it from the space shuttle, that's pretty big deal.

And to think a year ago nobody had ever heard of podcasting...

Listen here (MP3)

"At any rate I will close this very brief first podcast from space with a greeting to all Earthings and a thank you for your interest and support. Whether you support the space program or not, you're learning from it. You're learning from it the very moment you hear this and think about what we're doing. And I think that learning is what looking over the horizon is all about, and don't forget that learning can be exciting and fun, too, because that's certainly what this mission has been all about."


Sunday, August 07, 2005 1:09:44 PM (Pacific Daylight Time, UTC-07:00) ( Office 2003 | SharePoint | Tech )

Fact is, unless you're developing from scratch, there hasn't been a whole lot of help out there in terms of building apps on top of Windows SharePoint Services in order to enhance business.

Until now, that is.

Last week, Microsoft released 30 new application templates that enhance WSS and let you use the platform to solve more problems and meet more needs common to business. And these are out-of-the-box applications, not just starting points, although knowledgeable people could certainly use them as a beginning for something bigger if they like.

This is exactly what we need more of - help extending the platform without having to do it all ourselves. This is the kind of thing that makes SharePoint viable for smaller businesses that can't or don't want to take the time to customize from the ground up.

You can see them all in action, live and for real, at Bil Simser's public SharePoint site (found via Mark Harrison).

Also - for help installing them all, check out Raphael Londner's weblog post.

Here are the new apps, and they are no slouching solutions - these looks to be some solid business templates:

Scenarios Available for Download
arrow Absence and Vacation Schedule
arrow Board of Directors
arrow Case Work Management
arrow Change Management
arrow Classroom Management
arrow Competitive Intelligence
arrow Employee Activities Site
arrow Employee Timesheet and Scheduling
arrow Employee Training
arrow Event Coordination
arrow Expense Reimbursement
arrow Help Desk
arrow HR Programs and Services
arrow IT Developer Team Site
arrow Legal Document Review Workflow
arrow Loan Initiation Management
arrow Marketing Campaigns
arrow Meeting Management
arrow New Product Development
arrow Performance Review
arrow Professional Svcs Contracts
arrow Professional Svcs Site
arrow Project Team Site
arrow Public Official Activity
arrow Public Relations Work Site
arrow Publication Editorial Review
arrow Recruiting Resource Center
arrow Request for Proposal Management
arrow Room and Equipment Reservation
arrow Travel Request


Sunday, August 07, 2005 10:44:21 AM (Pacific Daylight Time, UTC-07:00) ( AudioBlogging | Blogging | Tablet PC | Tech )

Here's a shameless plug of my very own... I guest-co-hosted the Tablet PC Show with James Kendrick today, filling in for the one and only (and much-better-at-this-than-me) Marc Orchant. It's been published, so check it out if you like:

The TABLET PC Show #19 (MP3 - 21MB - 60min)

LISTEN TO THE PODCAST HERE

Marc Orchant was away but guest co-host Greg Hughes graciously stepped in and we have an action packed show. Greg fills us in on the Lenovo ThinkPad Tablet PC that he’s been lucky enough to use for the past month so anyone interested in this fine convertible (or those anxiously awaiting delivery) will get some good information to take away. After the break we shift focus to the hot topic of the week, WindowsVista Beta 1, and round up the information that is starting to emerge from those brave enough to install it on a Tablet PC. Enjoy the show and as always we appreciate your feedback! (We missed you Marc!)

The Tablet PC Show #19 (MP3 - 20.9MB - 61min)
LISTEN HERE

00:00 Intro- Greg Hughes & James Kendrick

05:45 Greg has a Lenovo ThinkPad X41 Tablet PC

25:00 The Podcast Network

26:00 WindowsVista Beta 1 information roundup

eWeek- will your Tablet run Vista?
Random Elements- Colin Walker installs the beta
Greg punches a cat in the face
IE7 panning with a pen
Tablet PC team has a blog
Speech recognition- command and dictation fused
Ink Analysis in Vista

60:00 Wrap up


Sunday, August 07, 2005 5:30:37 AM (Pacific Daylight Time, UTC-07:00) ( Tablet PC | Tech )

I am writing this post by speaking into my microphone on the Tablet PC.  James told me that maybe I should try this again and get a more serious shot. I have to admit I'm actually a bit surprised that it's working as well as it is.

Let's see how it handles some common text.

Now is the time for all good men to come to the aid of their country. When in the course of human events it becomes blah blah blah.

OK, I have to admit this is pretty cool. After adjusting the volume of the microphone it seems to be more accurate. The gain on the microphone was just too loud.

Very very cool.

     Voice_blogging

JK says he uses this capability all the time for writing columns and articles. I've tried it before but never really considered it to be a "real" source of input. But after hearing him talk about it, and giving it a shot, I'm convinced there are some possibilities here. The Windows Vista enhancements should make it even more usable.

What would be interesting is trying technical writing with this speech recognition engine. Somehow I think the recognition of technical (computer/scientific/etc) terms might be a challenge.

But it's pretty darned cool.