If I had a dime for every time I had to explain what SIP is... Well, let's just say I'd be okay hanging out at Starbucks for a week or two anyhow... It's one of the least-understood and most-misused acronyms around technology shops these days. I certainly don't mind explaining it to people, but it can get a little complicated. Having a good fundamental understanding of Session Initiation Protocol is critical in the growing world of connected, collaborative applications. It's the protocol where the telephony people finally meet the application and data network people.

Over the past couple of years, SIP has become an underlying part of a number of different networked applications, and many people (most?) don't realize that. You'll find it in IP phones, voice terminal adapters, integrated into instant messaging systems, and all kinds of other places. I think it would be somewhat safe to say (loosely) that SIP is to IP voice communication as TCP is to IP networking. If that's not a good analogy, someone tell me a better one.

Anyhow, I decided it might be best to find a useful link to point people to. RMFB, if you will.

So here it is... Over on the VOIP Now blog there's a great explanation of what SIP is and what it means to computing, users, and technology pros:

SIP 101 - Session Initiation Protocol Explained

Session Initiation Protocol or SIP refers specifically to a language that various computers can communicate to one another in so that they can complete voice calls. It has become vitally important in recent years as it plays a central role in VoIP or Voice Over Internet Protocol. VoIP Is the rapidly growing technology which has millions of Americans throwing out their local and long-distance telephone bills and replacing them with free calls made over the Internet.

While Session Initiation Protocol sounds like technobabble, it helps if you can imagine SIP as the common language that new generation operators use to complete calls over the Internet. With SIP, however, the operators are no longer hundreds of people in a room...

There's a bit of chat about regarding handwriting recognition on the Tablet PC, and the new feature/functionality in the Vista beta version of the OS.

I used to write in block letters or carefully crafted print on my Tablet PC. Then I decided (thinking naively that it would be a miserable failure) to write in cursive script. Much to my surprise, I found it worked much better.

With the Vista Beta One TIP (Tablet Input Panel), the ability to enter text and make changes is greatly improved. I've found it's even more accurate. In fact the whole TIP behaves much better all the way around - not so much in the way, more flexible, and all-around better recognition. I'd post pictures but I'm afraid I'd be breaking an agreement (although screenies of the Vista desktop and stuff seem to be very common on the Internet these days).

It also seems to recognize non-standard characters that are written by hand. Stuff like smilies and whatnot. That's cool. There's similar thoughts over on the Tablet PC Blog. It will also be interesting to see what Beta Two holds.

How hard is it really to tell a real smile from a fake one?

On the BBK web site, you can take a quiz to check your skills of perception when it comes to checking facial expression honesty.

You might be surprised how many you'll miss. How can you tell if a smile is real or fake? What do you look for?

• This experiment is designed to test whether you can spot the difference between a fake smile and a real one
• It has 20 questions and should take you 10 minutes
• It is based on research by Professor Paul Ekman, a psychologist at the University of California
• Each video clip will take approximately 15 seconds to load on a 56k modem and you can only play each smile once

My score: 16 out of 20.

You?

Take the "Spot the Fake Smile" quiz here.

Cutting through all the hype and hyperbole, Dominic White summarizes Microsoft vulnerability patch MS05-039 and the Zotob virus. Anyone who has to protect from this group of viral variants or who cares about security should take the time to read this summary article:

http://singe.rucus.net/blog/archives/510-MS05-039-and-the-Zotob-summary.html

That pesky msnbot/1.0 is a pretty busy bot today. That's MSN Search's spidering robot. I've had more than 10,000 hits from it today, and a friend with another blog has had about 4,000. These numbers are way larger than normal.

Hmmm... Something coming soon from MSN Search maybe? We'll see!

UPDATE: Looking at my web server log details, it looks like the spidering that's going on is touching mainly a whole lot of RSS content. Main feeds and category feeds are being pulled frequently. Is MSN Search pushing the RSS envelope? With RSS going native to the OS, this might make some real sense?

ANOTHER UPDATE: A member of the MSNBot Team (who, by the way, responded post-haste to a question I sent through, uh, channels) asked me to volunteer some of my web server logs earlier today and the traffic's dropped off since. Maybe it was just a little behavior problem (that happens). Interesting!

I have a request for makers of Tablet PC hardware - one that I think would be totally feasible, and would greatly simplify my Tablet PC ownership.

The one thing about using a Tablet PC that regularly haunts me, as an adult male approaching midlife crisis age (and with all the associate baggage in areas like memory, concentration, etc), is the fact that the pen/stylus I love to use with the Tablet is really, really, reaaaaally easy to misplace. It's a problem.

Cuz ya know, there's nothing quite like having a fancy-dancy convertible notebook Tablet PC without a pen. Heh.

Just ask the IT guys at my company who loses the most styluses (styluses? stylii? hmmm). They'll just roll their eyes, laugh and point at me.

So, here is my idea, recorded here for posterity: Build in a proximity device that I can turn on that will make the pen chirp or something if it's more than, say, about 15 feet away from it's home (the Tablet PC, that is) for some extended period of time.

Heck, it might even be worth enabling the pen to speak out loud and say something like, "That dork Greg Hughes at 503-629-xxxx left me sitting here all alone. Please call him and tell him to come pick me up, and that he needs to go put a quarter in the jar."

Or something like that. I'd settle for just the chirping alarm.

Any other bright ideas?

If you're responsible for (or just into) computer security - at a fairly involved level - check out (IN)SECURE Magazine, a PDF distribution, at http://www.insecuremag.com/.

Issue 3 is out. It's 67 pages. Serious stuff. Lots of great, practical, useful stuff.

Check it out.

In the August issue:

• Security vulnerabilities, exploits and patches
• PDA attacks: palm sized devices - PC sized threats
• Adding service signatures to Nmap
• CSO and CISO - perception vs. reality in the security kingdom
• Unified threat management: IT security's silver bullet?
• The reality of SQL injection
• 12 months of progress for the Microsoft Security Response Centre
• Interview with Michal Zalewski, security researcher
• OpenSSH for Macintosh
• Method for forensic validation of backup tapes

(via Scoble)

His weblog may not be an official Microsoft site - it's his own site, a place to publish his own opinions - but the fact is, Robert Scoble's a Microsoft blogger, albeit "unofficial."

And one Microsoft site - Microsoft for Business and Organizations - has published an article called "Agent of Transformation," where Robert is interviewed about corporate blogging.

Good read. It's also linked from Microsoft's Executive Circle. Interesting, really - Robert's an insider, of course, but he speaks his mind from time to time - He's been known to express opinions critical of Microsoft's products and positions if that's where he stands. So, it's also interesting to see Microsoft publishing interviews with Robert to talk about how corporate blogging benefits business.

"So there are times when we are having an online conversation out in public, which is fascinating and scary. It's like living naked. Sometimes it's not all that pleasant. We both believe very strongly in transparency and believe that it makes you make better decisions overall."

He also talks about being a smart business blogger. It's worth a look for anyone interested in the blogging world, and for anyone who blogs about - or for - work. Read the interview here.

And... Coming up in September, Scoble's gonna be webcasting:

Robert Scoble on Blogging - September 21, 11:30 AM Pacific Time. Catch this webcast with Microsoft's most well-known blogger, Robert Scoble, and learn how to build your own blog presence, brand, and traffic.

We interrupt this IT/tech blog for the following random cult video interlude....

Flashbacks of Deliverance run through your mind. Be afraid.

This, my friends, has to be the greatest video ever on the Intarweb. I am so glad someone sent this:

Whatever you do, DO NOT CLICK THIS LINK!

Ok, just kidding. Click it. No, really. Enjoy. Know a better one? Leave a comment.

Update: Apparently this video is a party promotion for a local (Portland, Oregon) media firm, Borders Perrin Norrander, Inc. Cool. Also, a lower bandwidth version is here: http://www.bpninc.com/evideo/video_mac_lo.mov

Bil Simser has taken the lead in creating a place for the community to create and share SharePoint templates. This is terrific - one of the more difficult things about getting people using SharePoint has always been the lack of templates and general resources available to get people started building the custom apps people dream of (but can't necessarily create themselves).

Link: The SharePoint Template Project on SourceForge

Now that we have the place to do this, all we need are participants. Microsoft recently released a set of 30 great site templates, and there are a few others out there as well, but this has the potential to be much bigger.

Bil's own words describe the SharePoint Template Project perfectly:

Not having custom solutions has been one of the larger gaps in SharePoint but demonstrates that you can accomplish a lot with just a little configuration and some creative thought. On numerous occasions I find myself in the newsgroups seeing people asking if they can build a Help Desk with SharePoint, or an Expense Tracking System, or a Call Board. The answer is of course yes. Always has been and always will. The problem however is that you don't get a lot of business solutions delivered without some work. Enter the SharePoint Template Project.

I created a new project site on SourceForge (yes, I'm not a big fan of GotDotNet and we haven't created my utopia of SharePointForge just yet) to accomodate this. The project provides an outlet for the SharePoint community to contribute and share list and site templates for the products under the Microsoft SharePoint technology banner (SharePoint Portal Server and Windows SharePoint Services).

These templates come in the form of binary .stp files or plain text xml schema files (along with any additional files like images, etc.). Users create the templates either using SharePoint itself (saving them in .stp format) or with whatever xml/text editor they prefer. The templates are uploaded to a SharePoint server and used as a boilerplate by SharePoint during site creation.

Templates in this project will be created by the community and packaged in a common installer format (MSI) so that end-users need only download the MSI and run it on their SharePoint server. A template MSI will be provided for contributors to the project which includes the template installer, full or custom selections for installation (users will be able to choose what templates they want to install), graphical preview for each template (if the developer includes them) and option to create sample sites based on the templates chosen.

Last year, I picked up a couple Wireless PC Lock devices, to see if they'd work in a business environment to control workstation security. What I found was that I'd purchased what seemed to be some cool hardware, packaged with really crappy software. In fact, the software was so bad, it made the hardware pretty much useless. Useless doesn't help in the security world, so I was disappointed overall.

Then about a week later, I discovered that Bryan Batchelder, another security type, had also picked one up, reverse engineered how it works, and written his own software for it. Bryan's software was a vast improvement - measurable in orders of magnitude - over the software that shipped with the hardware.

Then Scott Hanselman, a coworker and friend of mine, found the device and software and decided to contact Bryan and work with him to use take it to the next level, using the new .NET Framework v2.0, to control and take advantage of the hardware.

And today, a new article was published that Scott wrote for hobbiest programmers, as an installment in his excellent "Some Assembly Required" series on Microsoft's MSDN Coding4Fun site. The article is entitled, "Is that you? Writing Better Software for Cool USB Hardware." In this edition, Scott explains how the new software, built from Bryan's base, is made and how it can be extended by anyone who wants to (since it's an open source program published on SourceForge).

I've installed the new software myself (after downloading and installing the .NET v2.0 Beta 2 framework) and have it running, and I can tell you this: The new software really shows how cool the hardware is, as opposed to the original software, which made the hardware look sloppy and bad.

The hardware consists of a USB stick (it looks much like a USB storage device) and a small round button you can hang on your keychain (or wherever). With the new software, a tiny green icon appears in the Windows status notification area (the tray) and flashes to show you it's getting a heartbeat from the key fob button. If you turn the button transmitter off (it lasts for-freakin-ever on one battery, mine's almost a year old and it's still going strong), the software on the compute notices and does whatever it's configured to do. The image below gives you an idea of the things it can do out of the box, and it's plug-in-able, so if you want something else, you can go build it.

• Buy the hardware if you don't have it
• Download the new USB Wireless Security software (source also available at that link)
• Download the .NET Framework v2 (beta 2) for x86

Hmmm, gotta go see if I can learn enough to be able to write a plugin now. 

Eagerly anticipated and full of great new features and enhancements, dasBlog v1.8 has been officially released.

Scott covers the details and pontificates the important readme file information on his blog. Here's a list of many of the cool new features:

New Features of Note

• Anti-Spam Features
  • Automatic Referral and Trackback blacklist update
  • CAPTCHA for non-admin users (Font warping has also been increased in this version)
  • Logging and display of Comment IP addresses and resolved Hostnames for Admins
  • DasBlogUpgrader can strip spam from existing content folders
  • Support for rel="nofollow"
  • Ability to delete referrals and trackbacks directly from the Admin UI
• Security Features
  • HttpOnly cookies
  • Admin access auditing
  • SMTP Authentication for outgoing mail
• Syndication Features
  • Improved RSS Comments support for SharpReader and RSS Bandit
  • Upgraded Atom support from 0.3 to Valid Atom 1.0. ATOM Syndication permalink changes but 301 is issued.
  • RSS 2.0 and Atom 1.0 validates via FeedValidator.
  • Ability to mark entries as "syndicated" or not. Entries can appear on the site but not in RSS/Atom.
  • New between RC1 and Gold: Plugable, configurable pinging of Blog Search engines like pubsub and technorati.
• Performance Features
  • Search Highlighting is optional now
  • Referrals are logged but not stored in XML by default. Configurable.
    (This has huge performance benefits for high traffic sites.)
  • DasBlog Upgrader can optionally remove all referrals.
    (Again with high traffic sites some folks had 5meg XML files full of referrals)
  • Theme templates are now cached in memory.
• Installation Features
  • New VBS for IIS permissions and VDir creation
  • Support for running under ASP.NET 2.0
  • Support for running on Win2k 2003 without changing permissions when impersonation is enabled
• Content Features
  • Ability to pre- and post-date entries
  • Permalinks based on Title and Date optional: 2005/06/06/title.aspx
  • Latest build of Free Text Box including ability to upgrade FTB without upgrading DasBlog.
  • Text Editor (FTB) supports IE7
  • Text Editor (FTB) supports FireFox
  • Blog Statistics macro
  • Mail-To-Weblog continues to improves. Works with Thunderbird.
• Extensibility Features
  • Custom Macro Plugin model without recompiling DasBlog (see the source for the example custom macro)
• Theme Features
  • DasBlog now ships with 16 themes and a Theme Combo to change between them.
  • New theme.manifest file makes themes and image assets more portable.

One thing I really need, and for which I have yet to find a truly good solution, is a clipboard manager tool that will do a great job (defined below) of managing a number of different clipped chunks of text, images or whatever. I often need to copy and paste multiple items over and over, but when the contents of the single-items clipboard change, its a pain in the butt to go a re-copy an items I used just a few minutes ago, just to paste it once or twice before I have to copy something else. I need a good clipboard library, with all the bells and whistles. I wish I didn't have to search for and install five or six apps to do what I want.

Improving the clipboard is a age-old problem in the Windows computer world (hey Microsoft - the clipboard idea is great, but in practice it sucks! Enhance it!), and I have tried a few different utilities that tried to solve this problem over time, but I've never seen one that really worked well.

There's been so many attempts at these sorts of programs, it's almost impossible to test them all without mucking up a computer (many of them programs don't install or clean up nicely). I'm sure there's one or more out there that people love. So - maybe you have one to recommend?

Here is what the ultimate clipboard tool would need to do (in my perfect little world):

• Hold and intelligently manage multiple items clipped from any application
• Clipped items of any media type (text, images, yada yada)
• A smart, easy to access, unobtrusive interface for managing content
• Let me save libraries of organized content
• Let me have a one-time pad of clippings for the session, and let me move things around, save items I want to keep, etc.
• For text items, ability to clip as rich text or plain text and convert from/to same (a la PureText)
• Built-in ability to capture non-clippable text from the screen (scrape like Kleptomania or Screen OCR)
• For image clips, let me select a rectangle by drawing it, a free-form area by drawing it, a window that needs to be scrolled, etc.
• Send-to-BlogJet (for that matter, send-to-anywhere) function
• Installs and uninstalls cleanly
• Small footprint, lightweight program that works reliably
• Free is great, but not necessary - I'll pay if it's quality software

Anyone have suggestions? Let me know - thanks!

P.S. - For what it's worth, I have a new-found level of utmost respect for anyone who has to complete RFPs (requests for proposal) for a living. I've spent a large chunk of time this past week, between a zillion other assignments, doing a fairly important RFP. I had to write most of it from scratch for the first time, so there was no boilerplate copy to start with. Now that I have a good set of boilerplate information built, I want to be able to take best advantage of it. Hence this post - I want to reduce the effort required to repurpose content like that the next time around, plus a great copy/clipboard/conversation program would be awesome for blogging.

Note: This weblog is my personal site, and does not represent my employer. What I write here is my own opinion, etc. I am posting a couple job openings here because I figure some quality people reading this might have an interest, based on the readership of this weblog. I am not compensated for posting this, and I don't get a bonus or anything if these positions are filled. I am the hiring manager for these positions, so if that doesn't scare you away...

My employer, Corillian Corporation, is hiring for a number of positions. We're an awfully-darn-cool software company that's fun to work for and where employees have opportunity to really challenge themselves professionally. Corillian is a leading-edge technology company - and some of the smartest people I have ever met work there. I work among technical giants. It can be a little intimidating for me at times (in a healthy, good way), but mostly it's just very, very inspiring.

Among the openings at Corillian, we're looking for three employees to work in our Security department, focused on development and support of our commercial security software products. These positions are at our Portland, Oregon area location. The people filling these positions will be getting in early in the process of developing and selling the next generation of a truly cool and innovative software application. Maybe, just maybe you're the person we're looking for? Here are the positions I'm talking about:

• Security Software Engineers - two positions - mature OO programmers (.NET's a plus) with solid n-tier app experience
• Security Sales Engineer - works in concert with sales execs to meet pre- and post-sales technical and support needs

While I can't go into the specific software applications here on the blog (if you interview, we'll talk more), let's just say if you think security is important and cool, you'll enjoy working on this stuff.

For the Software Engineer positions, you're an experienced OO programmer and you approach things from a whole-design, architecture direction. We're not looking for people who need a list of tasks handed to them. We're looking for people who can organize and make good decisions based on requirements, which they can transform into a terrific software product. You're probably experienced in .NET development and have worked in an iterative/extreme dev environment. you challenge yourself and others, but you're a great person to work with.

For people interested in our Sales Engineer position, you're an excellent presenter in all sorts of situations and audiences, and experienced supporting technical sales efforts related to commercial software products, maybe even related to security software. You're able to deal with matching the priorities and needs of a talented and demanding sales staff, and thrive on doing an excellent job and delivering real, measurable results. You're also able to travel when needed.

To find out all the details about these open jobs, visit Corillian's web site and browse through the openings. You'll find we're also looking for employees to work as QA professionals and support engineers, as well as an IT Help Desk crew member (at least as of the date of this post).

If you have any questions, email or call me. You'll find my contact info over on the right side-bar of this web site. Call or email me - I'll be glad to chat.

Like Scott, I am always curious where my readers are from. Here's my guest map - please add your location! Just click on the guestmap image below to open a new window to view and "sign" it (I had to change this, the heavy iFrame version was killing my site - and I fixed the issue that was preventing some people from being able to sign the map):