A Django site.
May 16, 2008

Jordan Gunderson
jordy
Jordy Blog
» Dwight Schrute on Google Friend Connect

Dwight SchruteWhen I first read about Google Friend Connect, an upcoming service that will allow website owners to easily add social network functionality to their own websites, I immediately thought of these lines from NBC’s “The Office”:

Dwight: Why am I being forced to come in tomorrow and pretend that a website made sales that I made?
Ryan: This is a temporary measure to increase the legitimacy of the site.
Stanley: I don’t like when my clients call me to help them use the website, I’m not seeing commissions on that.
Ryan: I hear you Stanley, that is a great observation. Problems like that will not happen when we launch Dunder Mifflin Infinity 2 point O.
Stanley: When will that be?
Ryan: TBD. Phyllis?
Phyllis: Did the police solve the problem with the…
Ryan: Yes, yes they did, yes they did.
Ryan: Yes, the social networking feature of the Dunder Mifflin Infinity website was infiltrated by sexual predators.
Dwight: I don’t understand why our website has to have social networking at all.
Jim: Yeah, I actually have to agree with Dwight on that one.
Ryan: It’s all about creating a one stop shop consumer experience, alright? You’re chatting with your friends, you’re talking about the latest music, about the election; all of it is happening in our virtual paper store.
Jim: And then an older gentleman asked you “Boxers or briefs?”
Creed: I don’t get the big fuss here, I like the site.
Kelly: If I’d have created a website with as many problems, I’d kill myself.
Ryan: Do you have a question Kelly?
Kelly: Yeah I have a lot of questions. Number one, how dare you?
Michael: [slow clapping] Ryan has done a very good job, and I am not applauding sarcastically. Think about it, a month ago nobody would go on this site because we were worried about getting molested, or losing our identity, having it stolen. But now, at a time TBD, all of the problems will be in the past. Ya done good kid, ya done good.
– Source: OfficeQuotes.net

I thought all this was pretty funny, but the ability to drop social features onto your website with little more than some pasting of JavaScript might just prove us all wrong.  :)

Example:

3 of your friends liked SemiGloss Oxford White Cardstock #80.  Click here to get new friends!


Jesse Stay
obfuscated, Uncle_Jesse
Stay N' Alive » OSS
» Google Bullies Blogger to Surrender “GoogleAppsEngine.com”

Google-is-evil.jpgA friend of mine, Ali Akbar (@aliakbar), has made me aware of an interesting development going on with the domain he bought, googleappsengine.com (note the “s”). When he bought it, he approached me asking if I would be a blogger for the site, with intent to blog about Google App Engine news and announcements on the domain. He seemed quite excited about it, and, as a fan of Google App Engine, saw this as the perfect domain to write under since Google didn’t seem to be using it.

On Friday, without even time to set up the blog he was intending to create, Ali received the following very generic letter from Google (which he shared with me), asking him, in a very bullied fashion, without any offer to even make it right, to surrender the domain or face legal consequences:

Dear Sir/Madam:

Google is the owner of the well-known trademark and trade name GOOGLE, as well as the domain name GOOGLE.COM. As you are no doubt aware, GOOGLE is the trademark used to identify our award-winning search engine, located at www.google.com. Since its inception in 1997, the GOOGLE search engine has become one of the most highly recognized and widely used Internet search engines in the world. Google owns numerous trademark registrations and applications for its GOOGLE mark in countries around the world.

Google has used and actively promoted its GOOGLE mark for a number of years, and has invested considerable time and money establishing exclusive proprietary rights in the GOOGLE mark for a wide range of goods and services. As a result of its efforts, the GOOGLE mark has become a famous mark and a property right of incalculable value.

You have registered, without Google’s permission or authorization, the domain name googleappsengine.com (the ‘Domain Name’). The Domain Name is either confusingly similar to or incorporates the famous GOOGLE mark in its entirety, and, by its very composition, suggests Google’s sponsorship or endorsement of your website and correspondingly, your activities.

Your use of the Domain Name constitutes trademark infringement and dilution of Google’s trademark rights and unfair competition. Your use of the Domain Name is diluting use because it weakens the ability of the GOOGLE mark and domain name to identify a single source, namely Google. Further, your registration and use of the Domain Name misleads consumers into believing that some association exists between Google and you, which tarnishes the goodwill and reputation of Google’s services and trademarks. Moreover, your registration and use of the Domain Name is also actionable under the Uniform Dispute Resolution Policy (’UDRP’). Under similar circumstances, Google has prevailed in numerous UDRP actions. These decisions are located online at www.icann.org/udrp/udrpdec.htm.

In view of your infringement of our rights, we must demand that you provide written assurances within 7 days that you will:

1. Immediately discontinue any and all use of the Domain Name;
2. Take immediate steps to transfer the Domain Name to Google;
3. Identify and agree to transfer to Google any other domain names registered by you that contain GOOGLE or are confusingly similar to the GOOGLE mark;
4. Immediately and permanently refrain from any use of the term GOOGLE or any variation thereof that is likely to cause confusion or dilution.

Sincerely,
The Google Trademark Team

What???!! “You have registered, without Google’s permission or authorization, the domain name googleappsengine.com (the ‘Domain Name’).” So wait - now I have to get Google’s permission before I get any name that even resembles the Google trademark?

I am astounded at the bullyish nature of this letter, and to assume that anyone that buys any name even resembling the Google trademark to be a violation against their trademark name. Google clearly hasn’t been very good at defending this in the past - just searching with their own search engine, I’m finding tons of examples of sites using the Google name in their own domain name (yes, I “Google’d” it):

googlefight.com
googlesystem.blogspot.com
googleguide.com
googlealert.com
googlerankings.com

The list just gets started from there…

Now, let me preface this with the fact that I am not a Lawyer, but I did learn this in Law class in college. The “Uniform Dispute Resolution Policy” which Google references can be found here, and in the document, it states:

c. How to Demonstrate Your Rights to and Legitimate Interests in the Domain Name in Responding to a Complaint. When you receive a complaint, you should refer to Paragraph 5 of the Rules of Procedure in determining how your response should be prepared. Any of the following circumstances, in particular but without limitation, if found by the Panel to be proved based on its evaluation of all evidence presented, shall demonstrate your rights or legitimate interests to the domain name for purposes of Paragraph 4(a)(ii):

  (i) before any notice to you of the dispute, your use of, or demonstrable preparations to use, the domain name or a name corresponding to the domain name in connection with a bona fide offering of goods or services; or

  (ii) you (as an individual, business, or other organization) have been commonly known by the domain name, even if you have acquired no trademark or service mark rights; or

  (iii) you are making a legitimate noncommercial or fair use of the domain name, without intent for commercial gain to misleadingly divert consumers or to tarnish the trademark or service mark at issue.

Based on Ali’s approaches to me, there was no intention for commercial gain, nor to tarnish the trademark or service mark at issue. I also have e-mail to prove his demonstrable preparations to use the domain in connection with a bona fide offering. Let me also add that my intention to blog for him was simply in my own support of the Google App Engine. I personally had nothing huge to gain from it other than possibly a little exposure from what could possibly be a good blog.

Let me also add that Trademark issue is a very different issue than the Copyright issue I mentioned before with the Mormon Church and Wikileaks. That issue was about Wikileaks knowingly stealing the content owned by the Mormon Church and using it for unintended purposes. This issue is simply about using the Google domain to further promote Google and its properties. Ali had intent to do such, and with my limited knowledge he should have every right to do so.

What if Facebook were to go after my other blog, FacebookAdvice, or even the book I co-wrote, “I’m on Facebook — Now What???“? What about my friend Nick O’Neill’s AllFacebook, or my other friend, Justin Smith’s InsideFacebook. What about my other blog, OpensocialNow? Does this mean I’m the next target to be bullied by Google?

Of course, GoogleAppsEngine.com isn’t my domain, and I don’t know what would make Ali feel better, but my suggestion to Google is to apologize to Ali for such a rude and inappropriate letter to what may be one of their biggest fans, and make right with him. How about, instead of threatening to take it away from him, offering him at least some swag and a little money for the domain? Come on Google - let’s not be evil here. I know you’re better than that.

As for Ali, last I heard he is not backing down. It’s a David vs. Goliath battle, but let’s hope Google can be a little better than Goliath in this case and just back down a little.

What do you think? Am I wrong on this issue? Is this just the same as the copyright issue I mentioned earlier? I’m very interested to hear your thoughts - this seems very unfair to me.

Photo courtesy http://mathmath-ecomm.blogspot.com/2007/11/google-is-useful-but-worried.html

Share This


Phil Windley
pjw
Phil Windley's Technometria
» Plaxo and Comcast

I'm still trying to make sense of the news that Comcast is buying Plaxo (reported value of the deal between $100 and $200 M). I can't tell you how happy I am for Plaxo and especially Joseph Smarr who I have great respect for (see our Technometria interview with Joseph Smarr here).

Still, the discontinuity between what Plaxo is and what Comcast does is jarring--at least on the surface. I believe there is a fundamental conflict o interest between a company that does both transmission of traffic and sells other Internet services. Yeah, I know they all do it, but if the FCC wants to do something useful, they ought to separate those functions.

The fact that they have little real competition leads to problems like not treating customer fairly and throttling BitTorrent. That's a problem--but one that I believe will work itself out with more competition--and that's going to come one way or another. But the real problem is that Comcast offers many services that directly compete against the traffic they carry. Do we expect them to act in an unbiased manner in that regard? Sorry, I don't. Where's the Anti-Trust Department when you need them?

Tags: media internet itconversations

May 15, 2008

Scott Morris
nexangelus
OpenSUSE Linux Rants
» Verizon picks Linux—but not Android—for mobile platform

This is pretty cool… Verizon, my cell carrier, has chosen to use Linux on their cell phones. Here’s an excerpt from the article I saw:

“Mobile carrier Verizon Wireless has joined the Linux Mobile (LiMo) Foundation and has announced plans to adopt the open source software platform. Linux-based phones will be available from Verizon next year, alongside other devices that run competing proprietary operating systems.”

“The LiMo Foundation is an industry group that was founded by leading handset makers. Their goal is to collaboratively develop a comprehensive Linux-based mobile software stack that can be modified easily and used at no cost on a wide range of hardware devices. Key members include Motorola, NEC, NTT DoCoMo, Panasonic, Samsung, and LG.”

“The LiMo platform includes a wide range of infrastructure components and high-level application reference implementations and is designed so that individual parts can be easily modified or replaced. The application user interface framework is built on top of GTK+, the widget toolkit used by the GNOME desktop environment. In addition to supporting native application development, LiMo will also offer a Java SDK and support for building widget-like applications in HTML and JavaScript on top of the WebKit HTML renderer. The first LiMo-based handsets will reach the market later this year. ”

Read the rest of Verizon’s Linux adoption story


Lars Rasmussen
lars-ut
Lars Rasmussen (Lars-UT)
» 50.7 cents per GB - WD External 2.5" USB-Powered Drive - WDMLZ3200CN

The going rate for consumer storage is $0.20/GB or less you say? Why pay so much?



Ah, but that's in 3.5" internal SATA drives. Once you're able to fit 320GB(298GB as reported by Windows) in a coat pocket without needing an additional bulky power adapter to lug around, you'll see the instant appeal of such a device.

Make sure you get one with a carrying case - which is to say - you'll likely buy the Western Digital My Passport™ Elite™ from Costco.

Starting today there is $30 off coupon in the Costco mailer on a 2.5" external 320GB drive(298GB as reported by Windows OS) - I spent $151.12 including tax today for mine. Comes with a carrying case and an LED capacity gauge on the side that lights up to indicate remaining capacity - 320gb of portable goodness.

You can sometimes ask the Customer Service desk at the warehouse for coupons if you don't have the mailer.

Otherwise you'll pay right around $160.95 to purchase online from Costco.

The device comes formatted as FAT32, which doesn't support files larger tha 4GB(2 32−1 bytes to be more precise), so format it with NTFS - that'll work with the latest *NIX & Windows OSes.

Disclaimer: I like Costco quite a bit.


Joseph Hall
no nic
blog.josephhall.com
» Chicago Lifts Foie Gras Ban

An interesting item found its way into my news reader this morning. Yesterday the city of Chicago lifted its foie gras ban, by a vote of 37 to 6. The ban was in place for a couple of years before city officials realized what gourmets all over the country were thinking: it was just ridiculous.

Why did they put the ban into place? I would bet that most Americans don't even know what foie gras is, and why it's so controversal. Allow me a moment to inform you. I'm told it literally translates to "fat liver", an accurate name considering that it's nothing more than the fattened liver of a goose, or more commonly these days, a duck. The traditional methods used to fatten that liver are what are under attack, and understandably so.

For those of you who may be squeemish about animal treatment, this is a good time to stop reading.

The centuries-old method of producing foie gras generally involved restraining the bird, sometimes by locking all but its head in a box too small to move in, and even nailing its feet to the bottom of that box. The grower would then force-feed the bird, who's liver would fatten as it had no opportunity to work off the excess calories. Come to think of it, it reminds me of my past life in the tech support world, minus the nailed feet.

To say that this method isn't really common anymore would be an understatement. In fact, I don't think it's even been legal for a long time (citation needed). Certainly, quality growers in the United States decry such abuse and have opted for far more humane methods. Birds now are free to roam around, and when feeding time comes, I've been told that most birds actually look forward to stuffing themselves beyond belief. Reminds me of being in cooking school, except for the part about being free to roam around.

Whether or not this still qualifies as humane is left to the consumer. Personally, I think it's far more humane than, say, your average chicken farm. Why not attack chicken farms instead? Let's face it, delightful as it may be, foie gras is still a niche market. It's an easy target with far less legal power to fight back than, say, KFC. If somebody were to fight against animal cruelty, there's much less risk in picking on the little guys, twisting facts into misinformation for their own self-righteous purposes. In truth, it's the same tactic the big guys would probably use if they had to, but it's apparently okay with smaller special-interest groups, because they're doing it all in the name of humanity.

Anyway, I'm okay with Chicago lifting the ban. My wife and I are planning on heading out there towards the end of summer for a friend's wedding. We're hoping we can save enough money to dine at Alinea while we're out there. Maybe if we're lucky, Grant Achatz will have added foie gras to his tasting menu.


Jesse Stay
obfuscated, Uncle_Jesse
Stay N' Alive » OSS
» Facebook Adds Small Features to Chat

Picture 3.jpgI just noticed today a few new features in the Facebook chat window. When a new chat message comes through you may now hear a small, “pop”. It appears as though Facebook has begun adding sounds to their messaging, a much needed addition for those trying to know when people are trying to chat with them on Facebook. I have Facebook open most of the time in a separate tab, and often don’t realize until it’s too late that someone has been trying to chat with me in another tab. Now, assuming I hear the “pop”, that seems to be resolved. You can turn this feature on or off by clicking on “Settings” under the chat box in the chat bar, then checking or unchecking the box labeled, “Play Sounds for New Messages”.

The other addition, which I believe may be new (or I just barely noticed it), is Facebook seems to have added picture emoticons to the chat window. Now if I type, : - ) (without the spaces), it appears as a smiley face like this: :-) I’d love to get a list of these.

Anyone know of any other new features added since the “pop”?

Share This

May 5, 2008

Steve Dibb
beandog
wonkablog
» planet larry policy update

I’ve made an awkward and difficult decision that I hope doesn’t make anyone feel bad: effective immediately I’ve removed any feeds from Planet Larry / Larry the Universe that were from developers who have retired from the Gentoo project.

I setup the planet feeds mainly so that regular users of Gentoo Linux could talk about and share their experiences, and I want to get back to keeping it with them primarily in mind. I tend to think that ex-developers have more weight with their posts, which tends to cause some unbalance that I was never comfortable with.

Speaking of users, I am always looking for new bloggers to get added, so if you are a Gentoo user who blogs about computer experiences, be sure to sign up.

That’s all for now.

Edit: I originally took this post down, and am now restoring it. I still haven’t decided if this is a permanent change or not. I might create a planet just for ex-developers, or reintegrate them somehow. I dunno. Comments and suggestions are welcome.

May 14, 2008

Hans Fugal
no nic
The Fugue :
» Stuff StuffIt!

I wish StuffIt would just die, already. I'm sick of running into .sit and .hqx files. Thankfully these are quite rare, and usually an indication that the project is ancient and unmaintained. If you ever find you do need to open one, though, head on over to The Unarchiver. Do not under any circumstances even visit the StuffIt website. Only you can prevent StuffIt fires!

I'm sick of Firefox asking me if I want to open archive files (zip, tar, etc.) with "StuffIt Expander (Default)". Earth to Firefox! StuffIt Expander hasn't been included with the OS for several versions now. It is not and never will be installed on my computer. Incidentally, it works just fine—opening files with the appropriate application. In other words, Firefox is a big fat liar. But we knew that.

I applaud Apple for finally dropping StuffIt a few years back. There has never, ever been a good reason (other than "I'm stuck in the 1990s OS 9 mac scene") to use StuffIt on OS X. Please join us in the 21st century. Use zip, tar+gzip, or tar+bzip2. Even better (for OS X recipients) use a .dmg. For the love of all that is green, do not do .dmg.sit! You won't get any more compression over a compressed disk image, and you will only make rational people foam at the mouth.

Die. Die. DIE.


Jesse Stay
obfuscated, Uncle_Jesse
Stay N' Alive » OSS
» The Mormon Church/Wikileaks Fiasco (or not-so-fiasco), A Mormon’s Perspective

home-04.jpgNote that I’m not going to provide any links to the mentioned content here - you can go research yourself. Unlike Wikileaks, I respect others’ copyright.

One thing you may notice on this blog is that while I rarely pipe in with religious thoughts and my own personal religious beliefs (although I used to quite often), I will not hesitate to step in when a Social Media-related religious event occurs. An interesting Groundswell is happening today between the Headquarters of my Faith, and the controversial anonymous sharing site, Wikileaks. However, I don’t think it’s occurring in the way people think it is.

This morning on Slashdot you may have seen an article about the Mormon Church (or “The Church of Jesus Christ of Latter-day Saints“, which is the Official name of the Church) sending a Cease and Desist to Wikileaks for posting links to a Copyrighted, yet old version (1999) of the Church’s “General Handbook of Instructions” for others to freely download.

I don’t understand why this is news. Having been in LDS Bishoprics before as a Clerk and Executive Secretary, I am very familiar with this manual. It is simply a guide for leaders of the Church to know how to council and guide members of the Church, and according to my understanding, NOT (fully) DOCTRINE. It is simply a Policy manual, and while Bishops and other Leaders of the church may follow its council, in the end they are left up to their own judgement (encouraged by the Church “to follow the promptings of the Spirit”) to decide how to handle matters in the Church. The Church considers the Bible, Book of Mormon, Doctrine and Covenants, and Perl of Great Price to be the Official Doctrine of the Church.

The Mormon Church is simply requesting Wikileaks remove the content because it is their own IP, not Wikileaks, and they are removing it as they would any other Church-owned and copyrighted document. Wikileaks and other sites are also portraying the contents of the manual as though it is doctrine for the general membership of the Mormon church, when in reality it was only intended as a guide for Leaders in the first place. The Mormon church has to protect the dissemination of false information as well.

In Charlene Li’s and Josh Bernoff’s book, Groundswell, she starts out with an example that happened last year on Digg.com where a user shared a blog post about how the HD-DVD Encryption standard had been broken. AACS LA quickly sent a cease and desist to Digg.com and the Digg.com founders promptly removed the link. Before Digg knew it, their own users began to backlash against them, occupying the entire front page of Digg with copies of the HD DVD encryption algorithm. Digg had a Groundswell of its own between its own users and it knew it had to do something. What did they do? They listened to their users and put the link back up, stating they would go down fighting rather than ignore their users.

I think with the post on SlashDot this morning some people may be thinking (and some hoping) a similar Groundswell is going to occur with the Mormon Church. Those that think so will be pleasantly surprised - there’s a difference between a Groundswell of your own members and those outside of your membership talking about you. How do you handle a Groundswell of people outside of your customer-base/user-base/member-base? You get in the conversation!

I want to share with you a video from Elder Russell M. Ballard, a member of The Church of Jesus Christ of Latter-day Saints Quorum of 12 Apostles - religious or not, I’d like to encourage you to read this not just from a religious perspective, but also a business perspective and how you can disseminate correct information about your business:

The Church of Jesus Christ of Latter-day Saints is getting in the Groundswell through its own members. They encourage their members to blog, Twitter, get on Facebook, and clarify misconceptions. The Mormon Church will overcome this Groundswell (if you can even call it one) via its own membership, correcting misinformation Socially rather than through news releases and other means and letting the general media and blogosphere say what it believes. They have a Youtube channel here. They are on Twitter. They have a Facebook Page.

I encourage other churches and even businesses to take this response - there is a lot that can be applied from a religious, or even non-religious perspective from this. When you get your own followers of any business, brand, or religion to spread correct information about your brand it can overcome any misinformation spread about it.

Wikileaks is wrong in this case - they are sharing copyrighted information, not owned by themselves, and without the permission of the owner. The LDS Church isn’t going after them because the shared links are “secret”, but rather it is copyrighted material, and Wikileaks does not have permission to share it! As a book author and software developer I don’t want people using my content without my permission (which I’m generally pretty relaxed on in my personally owned content). Why would I want Wikileaks sharing the content I personally own on their site let alone others?

Share This


Phil Windley
pjw
Phil Windley's Technometria
» One Is the Lonliest Number: Relationships on the Internet

Bob Blakely is speaking about building a relationship layer for the Internet. A relationship is the context within which we observe one another. Past history and even attitudes are not directly observable. This is imperfect--distant relationships are the basis for inaccuracies. More observations at a closer distance make for a more useful and feature rich relationship.

Bob puts forward the emergence of the credit card industry as an example. Rather than requiring shoppers to create intimate relationships with every merchant, you create a single intimate relationship with your bank and the merchant has an intimate relationship with their bank and then the banks form a relationship (contract) that connects those.

Generalizing this thought to identity, in situations where you don't have one good relationships can two relationships provide the answer? Intermediaries need to have a trust relationship with the user. Phone companies, utilities, even shipping companies have a great advantage here. They can out compete banks.

Relationships are the type information about edges in the social graph. Bob presents a schema for relationships. Relationships have a creator. Relationships have a type (FacebookFriend). Creators establish rules and roles. Rules might be "can't copy." Roles are descriptions of individuals who can participate in the relationship.

There are other elements in the schema. Consents are what you agree to (i.e. enter into a relationship, you can send email, etc.). Promises are things you're held to (i.e. abide by terms of service). You also have claims (i.e. this is my name, this is my email address, etc.) There might be blocks to list other participants. The schema is a contract sorts. In privacy, for example, this shifts the discussion from one of rights to one of contract law.

Employees present an expensive relationship. Contractors are a less expensive way of having an employee relationship. This is relationship federation. The contracting company provides context about the relationship and there are rules, etc. that govern the relationship.

Identity providers present a similar scenario. The IdP can, in theory, create the expensive relationship with the user and with the RP. The difference is that IdPs can't make money from the expensive user relationship. You're not selling identity. If you sell identity, like Equifax, people hate you. You're selling relationships. They should compete on the basis of cost and quality.

"X-centric" is dysfunctional nomenclature no matter what the value of "X." Functional relationships happen when both parties gain value and agree to treat each other with respect.

Tags: iiw2008a iiw identity vrm


Jeremy Robb
scothoser
Scothoser's Corner
» Home in Second Life: Caledon Downs

It’s taken a while, but I finally have my home in Second Life.  I figured I really didn’t need a large home, so I opted for a smaller home that I bought.  It’s a Celtic round house, and I love it.  It didn’t have many prims, so it made for a better design overall.

So instead of having a huge house with no yard, I have a tiny house with a huge garden.  I haven’t placed any flowers out yet, but I will soon.  Right now, I’m more concerned with meeting spaces to allow students to come and visit me during office hours.  

In the near future I will be adding a video feed to the screen in my home, and will be working on some presentation tools for my students.  Stay tuned for more developments on the Second Life distance education tools. 

If you have a second life account, feel free to visit!  If not, feel free to sign up!  It’s free, and there are a lot of fun things you can do in Second Life.  For instance, if you go to the Paris 1900 sim, you can ride up to the top of the Eiffel Tower, and parachute off.  ^_^  

To visit my home in Caledon Downs, follow this URL: http://slurl.com/secondlife/Caledon%20Downs/59/144/45

Hope to see you there! 


Jordan Gunderson
jordy
Jordy Blog
» Plugging a Family Friend

A family friend recently moved to Utah so his wife could attend BYU.  He’s looking for work and has experience coding in C and Python.  If you know of any opportunities, would you please let me know?


Jason Hall
jayce^
Jayce^
» Upcoming Downtime

Coming soon to this server, Downtime.

With my change in employment, I have to move my server, and I really want to move a lot of it off the physical hardware.  Well I have a lot moved, but the family and lug-nut sites aren't yet.  I'm awaiting some different hardware still, so tomorrow I have to take this box down, and migrate it home for a while, before I can set up my replacement box.

Not that it matters too much, I mean how often have I posted this year :)  Oh, it's my *other* services that matter to me.

» SPPL 2008 UT

I didnt' get a chance to blog about the early start to paintball this year.  The regional SPPL qualifiers was held in Utah on May 2nd and 3rd this year, which as those who know me will note was the last day at my previous job :).  What an exciting day.

What was really fun is this year DesertEdge fielded two squads (Yin and Yang), which gave me the chance to captain the Yang group.  This had several seasoned team members, as well as a complement of our Junior group, and a couple of team tryouts (talk about trial by fire).

Through two days on very challenging fields though, we proved ourselves. As the sun set on the championship game in the Masters division, it was DesertEdge vs. Desertedge for first and second places. (gee, who won?).

What a great way to start the tournament season, with a nice first and second place standing, and nationals qualifications.


Hans Fugal
no nic
The Fugue :
» Vermiculite

Debatably, we're behind the curve here (the last frost date here was mid-April), but we just built our Square Foot Garden.

Our Square Foot Garden

The biggest challenge, by far, was finding vermiculite. Mel (the SFG guy) says it should be easy to find, but to call around first. Sure enough, it should have been easy to find, but everyone was out of stock, with no accurate estimate of when it would come in. Since we were already late, waiting a couple of weeks was out of the question, so I persevered.

Wal-Mart, Home Depot, Lowe's, etc. only had it in small (expensive) bags. To get enough would have been about $80. Most nurseries I called usually had it in 4 ft3 bags, but were out of stock (they had the small bags in stock too). The price across the board was in the area of $30. Finally I called the local brickyard (after the weekend—they're only open during normal business hours). They had #3 grade (the kind Mel likes) in 4 ft3 bags for $15. They had 149 in stock. Yeah, if you're going to buy vermiculite (or perlite), be sure to call the brickyard.

Why does a brickyard have it? Vermiculite is a great insulator and is used around e.g. brick ovens (or around fireplaces, etc.). Its place in garden soil is that it holds a lot of water and air and makes the soil more friable (loose), all of which are great for roots. Some people have success using perlite, but I read that it holds less water, and in our hot dry summer I think I want all the water-holding capacity I can get, so I held out for vermiculite and ended up saving $15 in the end because of it.


Clint Savage
herlo
Sexy Sexy Penguins » Tech
» Fedora 9 is out!

https://www.redhat.com/archives/fedora-announce-list/2008-May/msg00007.html

Get yours today! http://fedoraproject.org

Be sure and digg it too:

http://digg.com/linux_unix/Fedora_9_Sulphur_Released


Jordan Gunderson
jordy
Jordy Blog
» Arson, Rent Control, and the Perverse Incentives of Socialism

Allan Young plugged my last post in a piece he wrote about the potential of arson as a scapegoat of housing-bubble hardships.

His post reminds me of a similar report of arson, this time related to government rent control.  In Thomas Sowell’s excellent book, Basic Economics - A Citizen’s Guide to the Economy, he explains that in places where the government puts price ceilings on rent to make housing more affordable, rental properties often suffer major losses, and many owners end up torching their own properties to avoid suffer ongoing losses.  This trend is well-documented, by the way.  Introduce rent control in a city, and you can bet the level of arson in that city will increase.

So a socialistic program intended to make housing more available will actually make it less available; and because artificially low rents ensure that existing housing is filled while reducing profit incentive to build more housing, renters who might have a place to live under a free market system are forced to flee to another city without rent control, or become homeless.

Yes, it’s just another example of the way the perverse incentives of socialism love to backfire.

Anyway, the arson connection is interesting.  The Government should look at the real-world incentives of policies it creates, which often trigger results exactly opposite of those it intends.  The incentives leading to crash of the housing market demonstrate the exact same principle, but I’ll cover that tomorrow.

May 13, 2008
» OpenSSL & OpenSSH Vulnerabilities : Confirm & Fix Instructions

I’m sure many of you have heard by this point that there is a reported vulnerability in openSSL and openSSH.  The basis of this is that they keys that are generated when you use these tools (ie; installing openssh-server, etc) are generated in a weak manner and can be prone to simple brute force attacking.

If you’ve never installed openssh-server, used openssh-clients or generated an X.509 certificate you should be safe.  If you have done any of the above keep reading for a validation and fix instructions.  It can’t hurt to run the validation script in either case, just to be safe.

Security patches have been deployed to the Ubuntu archives so the first step is to, of course, apply any security patches available.

Am I Affected?

The first item at hand is verifying whether or not you have been affected by the vulnerability.  As mentioned above there are some common tasks that would qualify, but lets test your machine to make sure.

Download the script linked below and run it using the example syntax below:

dowkd.pl.gz (Download this file and unzip)

dowkd.pl PGP signature (Optionally verify the signature of the script)

Cut-n-Paste command-line example of downloading and running the test:

wget -c http://security.debian.org/project/extra/dowkd/dowkd.pl.gz
gunzip dowkd.pl.gz
chmod u+x dowkd.pl
./dowkd.pl user
./dowkd.pl host <hostname>

If you see output similar to:

/home/username/.ssh/id_dsa.pub:1: weak key

…then you have been affected by the vulnerability.  If you do not see “weak key” reported then you are OK.

How Do I Fix My Machine?

To update your machine and patch the vulnerability the first thing you want to do is check for and apply any system updates available.  The main Ubuntu archives have been updated with the fixes.  If you are using an alternate mirror the fix may not have propagated yet, so you may not see it available for another few hours.

Apply any updates:

sudo apt-get update
sudo apt-get upgrade
sudo apt-get dist-upgrade

You should see an update for openssl and openssh packages (along with anything else available).

After these new packages have been applied you’ll want to regenerate any keys that you’ve generated (ie; openssh keys, CA cert, etc).

UPDATE: The latest package release will automagically re-create any server-side ssh keys for you and notify you of the reason. Also, there is a new utility built into the latest release that will check keys for you. After your updates are applied try the tool:

ssh-vulnkey

To generate a new openssh key for your user: (This only required if ‘./dowkd.pl user‘ reports weak)

ssh-keygen -t dsa -b 1024

To generate a new openssh key for your server: (This only required if ./dowkd.pl host <hostname> reports weak)

sudo rm /etc/ssh/ssh_host_{dsa,rsa}_key*
sudo dpkg-reconfigure -plow openssh-server

You should now run the validation script again and make sure it does not report any errors.  If you still see reported warnings such as:

/home/username/.ssh/authorized_hosts:1: weak key

…this means that you have authorized_host keys saved that are still affected.  Open the .ssh/authorized_hosts file with a text editor and delete the affected line (:1: means line 1, etc).

Continue to run the ./dowkd.pl script until no weaknesses are reported.

These steps should be run on any system that you manage to ensure they are sufficiently patched.

Random Posts


Steve Dibb
beandog
wonkablog
» blu-ray dvd drives

An interesting post came up the other day on the Gentoo forums about how to rip Blu-Ray discs on Linux. Short summary: I have no idea if it’s possible, and the original poster is still investigating. It has gotten me thinking though. The Blu-Ray player that I want to get it is $600, and it looks like it’s being phased out of production anyway, so why not get a disc drive instead and rip the movies? It’d save me some money, and I’d eventually buy one anyway.

Well, the questions that come to mind are, will the software actually work, will the drive firmware let me do that, and am I going to have to use Windows?

I haven’t done any research at all, mostly because I can’t afford to buy a DVD drive right now, but the whole thing does have me curious. I always assumed there was no way to rip the stuff under Linux, but I haven’t gone looking for possible solutions either. The only thing I am sure about though, is that once ripped, you can play the content just fine. At least, I think so. I’m not positive about the HD audio codecs, pretty sure about the video ones though.

I tend to buy hardware first and figure out how to get it working second, but because the DRM is so finicky in this case, I really don’t want to take that approach and be out a couple hundred bucks.  In the meantime, I really wish I could at least demo the stuff at home.  That would be cool.  The only 1080p content I’ve seen so far is the movie trailers I’ve downloaded from Apple’s website.  I gotta say that stuff looks pretty good.


Phil Windley
pjw
Phil Windley's Technometria
» Judging Credibility

Jeff Jarvis points out the flaws in Newscred.

It's very simple --- though that's the problem; credibility isn't so simple. They list articles and you get to "credit" or "discredit" them. These scores are, in turn, compiled for writers and publications.

The first and most obvious problem, which TechCrunch points out, is that this is bait for grudges. Fox from one side, the Times from the other will get discredited by their detractors all day long. One man's bias is often the other man's truth.

From BuzzMachine » Blog Archive » Credibility is not binary
Referenced Tue May 13 2008 09:45:47 GMT-0700 (PDT)

Precisely: reputation, credibility, are personal judgments. We often think of the New York Times having a reputation, but in fact, there's not some single, magic score somewhere. There are millions of opinions. But there are also millions of reputations. Each person judges what the reputation of the NYT is based on what they think others are thinking. Any system that doesn't allow each person to have a personalized reputation for a given entity is doomed to suffer this problem.

But Jeff points out a second problem:

The second and more fundamental problem is that there's no basis to decide credibility. Does one error ruin an article's credibility? How many discredits does it take to ruin a reporter's or a publication's? And then what does that mean? That they lied? That you don't believe them? That you don't like them? That they make mistakes? That they don't report enough? That they use anonymous sources? That they relied on bad sources? That they wrote it badly? That they weren't transparent?

From BuzzMachine » Blog Archive » Credibility is not binary
Referenced Tue May 13 2008 09:49:44 GMT-0700 (PDT)

Just as each person keeps an individual idea of the reputation of every other entity they care about, they also use their own basis for making that judgment. Apes are remarkably good at this--we have to be to create large social structures. Our frustration with computational systems that attempt to do this for us is partly rooted in the fact that they don't come close to the nuanced sophisticated social judgments that any 6 year old can make.

Tags: reputation


Jordan Gunderson
jordy
Jordy Blog
» Big Government Responsible for Housing Bubble

 I wish more people understood the substance of this recent article from Ron Paul:

Big Government Responsible for Housing Bubble

The House passed two bills attempting to rehabilitate the housing and mortgage market this week.  There doesn’t seem to be any shortage of criticism and blame for the bad decisions, and rightly so.  Lenders and banks do share much of the blame for the overheated market.  Lending standards were relaxed, or even abandoned altogether, creating an exaggerated pool of homebuyers that led to ballooning home prices that many, especially real estate investors, expected to continue forever.  Now that the bubble has burst, the losses are staggering.

However, many in Washington fail to realize it was government intervention that brought on the current economic malaise in the first place.  The Federal Reserve’s artificially low interest rates created the loose, easy credit that ignited a voracious appetite in the banks for borrowers.  People made these lending and buying decisions based on market conditions that were wildly manipulated by government.  But part of sound financial management should be recognizing untenable or falsified economic conditions and adjusting risk accordingly.  Many banks failed to do that and are now looking to taxpayers to pick up the pieces.  This is wrong-headed and unfair, but Congress is attempting to do it anyway.

These housing bills address the crisis in exactly the wrong way, by seeking to hide the problem with more disastrous government bail-outs and interventions.  One measure, HR 5830 the Federal Housing Administration (FHA) Housing Stabilization and Homeowner Retention Act would allow the FHA to guarantee as much as $300 billion worth of refinanced home loans for those facing threat of foreclosure.  HR 5818 the Neighborhood Stabilization Act, would provide $15 billion in loans and grants to localities to purchase and renovate foreclosed homes with the object of then selling or renting out those homes.  Thankfully, President Bush has vowed to veto both of these bills.  It is neither morally right nor fiscally wise to socialize private losses in this way.

The solution is for government to stop micromanaging the economy and let the market adjust, as painful as that will be for some.  We should not force taxpayers, including renters and more frugal homeowners, to switch places with the speculators and take on those same risks that bankrupted them.  It is a terrible idea to spread the financial crisis any wider or deeper than it already is, and to prolong the agony years into the future.  Socializing the losses now will only create more unintended consequences that will give new excuses for further government interventions in the future. This is how government grows - by claiming to correct the mistakes it earlier created, all the while constantly shaking down the taxpayer.  The market needs a chance to correct itself, and Congress needs to avoid making the situation worse by pretending to ride to the rescue.

The only change I would make is to note that, despite its intentionally misleading name, the Federal Reserve is not a government entity; it’s a privately owned bank.

By the way, if everybody wants “change”, and everybody is worried about the economy, why does the Utah GOP (and the GOP in general) go out of their way to ensure that the only presidential candidate that is talking about meaningful change at the very root of our financial problems gets no serious consideration from the mainstream.  Ron Paul has been talking about sound monetary policy for years; and even thought the bubble has burst (making the validity of his tenets even more painfully obvious), he still gets no love from the powers that be at the Utah Republican Party Convention.

Be sure to follow Ron Paul’s weekly columns. They really are excellent.


Jesse Stay
obfuscated, Uncle_Jesse
Stay N' Alive » OSS
» Utah Startup Series: Bungee Labs

logo_bungeelabs-flat_md.png(Sorry it’s been awhile since my last blog - it took me several days to figure out how to get my Flip video imported and exported to and from iMovie. To make a long story short, if you want to export from iMovie and have both picture and sound, you must import your source as something other than MP4 or AVI.)

This is the first article in my “Utah Startup Series“. Starting today I will be circling Utah to find the best and most innovative startups in Utah, and featuring them here on Stay N’ Alive. If you have a hot startup (early to even late stage) and would like to demo for me what your product can do, please contact me - if I have the time and like your idea I’d love to come out and take a look at it!

While at Web 2.0 Expo I had the opportunity to meet with Bungee Labs, a local, well funded Utah company who had “Platform as a Service” down before Google even started thinking about their App Engine. In our meeting they demoed their Bungee Connect “IDE” (written entirely on the web). You can see the video below.

My thoughts - you have to see this stuff in person to understand the full ramifications of what they’re doing. One of the cool things about their service vs. Google’s is they actually integrate with Amazon’s EC2 service (which was announced during Web 2.0 Expo), so you can actually host your other stuff on Amazon’s EC2 platform with the same licensing as your Bungee Connect account. Their licensing structure is very appealing as well - Bungee only charges based on the number of registered user sessions using their platform, not traffic, not bandwidth. If I understand correctly, it’s all based on the number of users actively using your application on their platform. For Facebook and Social Media developers this is appealing, as most Applications are rated based on Application use, not number of users or traffic. With Bungee you only pay for the users that actively use your system.

Overall, the guys at Bungee were Rockstars at Web 2.0 Expo. With their announcements about EC2 integration, flexible licensing terms, features on TechCrunch, EWeek magazine, and a dozen other publications, you can bet Google has a watchful eye on them. Ironically, it was interesting seeing Kevin Marx, head guy over the OpenSocial (and other) efforts at their party on Thursday evening.

Bungee will be presenting at our Social Media Developers meeting this coming Tuesday, showing us a simple “Hello World” example on how to build a Facebook App using their platform. Follow me on Twitter and if we can stream it live you can watch it via my Ustream channel. After demo I may just write my own Facebook App to try out their system - it should be interesting.


Bungee Connect Demo - Web 2.0 Expo from Jesse Stay on Vimeo.

Share This


Phil Windley
pjw
Phil Windley's Technometria
» What's Your Architecture's Agenda?

One of the topics that came up in today's free range small groups discussions are IIW2008A was the idea that architectures have agendas. Brad Templeton voiced the idea that all designs have defaults and those defaults represent an encoding of some kind of agenda.

For example, let's say that you collect click streams from your web site visitors in order to give them recommendations, optimize banners, or whatever. What is the default for how long that data is stored? One week? A month? A year? Forever? You might not think of that default as an agenda, but it is in the sense that it enables or disables certain behaviors in the future.

"But wait!" you say. "I didn't even think of that! My site stores it forever because I haven't written a purge function--yet." Even implicit acts create defaults and those defaults represent an agenda. For example, if your agenda were different with respect to storing private data, you'd have prioritized your development differently.

I've been using privacy as an example, but it's larger than that, of course. Designs are full of defaults--some explicit and most of the implicit. Programmers don't pay enough attention to defaults. Rail's "convention over configuration" is a great example of a system that carefully thought through defaults. 37 Signals calls this concept opinionated software.

The best software has a vision. The best software takes sides. When someone uses software, they're not just looking for features, they're looking for an approach. They're looking for a vision. Decide what your vision is and run with it.
From Getting Real: Make Opinionated Software (by 37signals)
Referenced Mon May 12 2008 17:14:47 GMT-0700 (PDT)

I like that idea.

Tags: iiw2008a iiw identity arcitecture software+design


Steve Dibb
beandog
wonkablog
» planet, packages: small bugfixes

I took a few minutes today and cleaned up a few small bugs on Planet Larry and friends.

One thing I get asked for every now and then is if I have archives of past posts. Well, I do now. I just copy the HTML file of the last post to $date one each run. A simple and unelegant solution. I’ll be doing the same thing for Planet Gentoo soon.

Also, fixed the FeedBurner link on the main page — I didn’t even realize it was broken. While I was at it, I created one for Universe as well.

On the packages website, I finally fixed it so you can search against just packages again. That’s been annoying me for a while. By default the search is way too wide, I think. It will search the full atom, the package description and the package name. I have to do the package name twice because of regular expressions (starting with, ending with, exact matches, etc.). And there’s still no simple way to search for packages containing multiple words, which is also an annoying little bug. Advanced searches for GPNL and Packages has been something I’ve wanted to do for a long time, but have been putting off since I started the projects. Sheesh. Every time I sit down and start to poke at it, though, I realize just how big a beast it is, based on what I’d like to accomplish. I really need something for the interim, though.

Anyway, I better quit before this post gets any more boring. One last thing — we can use more users who are Gentoo users and have a blog on Planet Larry. Just drop me an e-mail and I’ll get you setup.

May 12, 2008

Jeremy Robb
scothoser
Scothoser's Corner
» Autism and Vaccines

Any parent with an autistic child will look for something that may have triggered autism in the family.  As there has yet to be a gene discovered that causes autism, more focus is being made on the possible causes in the environment.  

One modern concern is that vaccines with thimerosal, a mercury-based compound used in some vaccines as a preservative, could be causing autism.  Why?  Because autism is very similar in symptoms to mercury poisoning, and all children get several series of vaccines before they are 2.  The timing is right, the source is identified, everything seems to be pointing in the right direction:  Except there is no scientific proof that thimerosal causes autism.  

But that isn’t stopping some families, which have gone to court.  Most studies rejecting thimerosal as a cause of autism were conducted before 2004.  Since then, according to the plaintiff’s lawyer, 35 articles that were peer-reviewed and published suggest a possible link.  That is what their court argument is running on.  

The problem is they have a huge opponent:  The US Center for Disease Control has not found any link, and therefore considers the claim baseless.  Instead they warn parents to the dangers of not having their children vaccinated.  In fact, there was a recent article on a national outbreak of measles among children.  The MMR vaccine should be protecting them, so either the vaccine is not working or parents are not letting their children have the vaccine. 

What’s my take on it?  Children need to be vaccinated.  Vaccines are very important, particularly for those diseases that are very dangerous (small pox, polio, measles, etc.).  The good news is that thimerosal is being used less and less, and was actually removed from most infant vaccines in 1999.  

Where is it still being used?  The Flu shot.  So, don’t give your children the shot, have them use the nose spray instead.  It was recently approved for child usage, and works just as well.  There are some other shots that you should look out for, and if you have any questions or concerns, ask your doctor.  There are alternatives to thimerosal vaccines for those parents that are concerned, and your doctor can help you make that decision.   

 


Hans Fugal
no nic
The Fugue :
» Feijoada

You haven't lived until you've had Brazilian cuisine, and feijoada is as Brazilian as it gets. (Personally, churrasco beats the pants off feijoada any day, but churrasco is in a class all its own.)

I finally got up the courage this weekend to make feijoada, even though I had no Brazilians to guide me except ye olde internet. I'm happy to report the experiment was a success. It was delicious, and probably not entirely unlike authentic feijoada (it has been over 9 or 10 years since I had some, not counting Tucanos).

The trouble with trying to make feijoada from the cookbook of Google is that the dish is at once both incredibly simple and incredibly complex and varied. It's simple in that it's essentially just beans and pork. It's complex and varied in that most recipes call for a half dozen kinds of pork, make huge amounts, and generally contradict each other.

The recipe I ended up using as a basis was from Maria's Cookbook. It's a veritable gold mine of Brazilian recipes.

So, let's get down to my experiment. I went to Albertson's and grabbed one 1-lb bag of black beans, 1 package (about 1 lb) of salt pork, and 1 kielbasa sausage (about 1 lb). For some reason my wife didn't let me get pig's feet, but that would have been fairly traditional. I also picked up some yuca, since farofa was nowhere to be found. Oh, and I grabbed some kale.

Saturday night I started the beans soaking, then realized the timing might be a little off. I read somewhere that you don't want to soak more than about 12 hours, but we were to be at church from 12–4. So I began contemplating slow cookage.

The next morning, into the crock pot on high. I sautéed about half the onion and 2 small cloves garlic in a bit of olive oil, and threw that in too. Then some 3 hours or so later I chopped up the salt pork and kielbasa and put it in as well, and a couple pinches of kosher salt (I think I had to add a touch of water at this point too).

After church, the beans were still not quite done, but the meat definitely was. However, the salt pork was still a lot of solid fat. I think next time I would render the fat before putting it in, and since it was so fatty I'd probably just use bacon or pork butt next time (or pig's feet if I could get away with it). It was also a tad too salty, so if I were using salt pork or something equally salty in its place, I'd skip the pinches of kosher salt.

While it continued cooking I boiled the yuca and made the rice. When the yuca was fork-tender, I drained, dried, and cut into strips. Then I fried it. It was disgusting, I think because it was probably really old. I wonder if you can order farofa online…

About 5:30 or 6 the beans were nice and tender, so I chopped up the kale and just barely wilted it in butter (per this recipe for couve a mineira, though it was kale instead of collard greens). Then dinner was served to salivating family.

The long cook had made the meat bloated and a bit too soft, and though most of the salt pork fat was melted in the end I still wished I had rendered it or used something else. The kale garnish was delicious and contributed as much as anything to the authenticity. We threw the yuca away.

So here's the recipe I'll try next time:

Feijoada

1 lb black beans
1 lb bacon, pork butt, ham hock, pigs feet, salt pork, or any other pork
1 lb kielbasa sausage
1/4 of a medium onion
1 clove garlic

Soak beans, bring to a boil and simmer one hour. Sauté garlic and onion in
olive oil, render fat out of garlic or salt pork as needed, and add to the
beans. Continue to simmer about another half hour, add salt to taste, and
simmer until beans are tender. Mash some beans to thicken. Serve over rice
and garnish with greens and farofa.

I'm making two assumptions here that need bearing out: it really does take about 2.5–3 hours to cook soaked black beans, and that the meat will cook thoroughly in the 1–1.5 hours time. I think the latter assumption is fairly safe, but I'm not sure about the former. Why don't you give it a try and let me know?


Jeremy Robb
scothoser
Scothoser's Corner
» Summer Projects: Food Storage and Urban Farming

My parents have been really concerned with food storage lately, and feeling an urgency to get it in place.  As such, they are looking at ways to augment the food storage they already have in as many ways as possible.  The main method?  Self-sufficient urban farming.  

I’ve talked about urban farming before.  It’s a process of growing and raising farm food in an urban environment while complying with city ordinances.  Now, most cities allow quite a lot of latitude, depending on the reaction of the neighbors.  So if you are not on good terms with your neighbors, you may want to warm them up to you.  

The first and easiest method of urban farming is growing a garden.  many people will plant whole sections of their yards in garden, others in selected areas.  I chose selected areas, because our yard isn’t that big to begin with.  I have one small section in the back that has some eggplant, artichokes, corn, beans, pumpkin, peas, radishes, lettuce, cucumber and grapes growing.  It’s small, so there isn’t a lot growing in this location.  But the plants are well managed, allowing for good usage of the land.

This week I will be planting some watermelon in the front yard, in what is currently a garden plot covered with bark.  It will give the appearance of green in the plot while utilizing less water.  Why less water?  Because the bark and weed barrier will keep the weeds down, leaving more water for the melons.

But, because the food that is grown isn’t going to be able to feed us all, or provide all the nutrients we need, more needs to be done.  Unfortunately, there isn’t enough land in an urban environment to have livestock (nor is it zoned as such, generally).  So, what can one do to get their farm-fresh foods?

First, you can learn how to make cheese.  I’ve tried one recipe, and the cheese was pretty good.  Now, this summer my family and I will be making more cheeses by investing in some cultures, rennet, and probably building a cheese press.  Cheese was originally developed as a way to provide the benefits of milk and milk protein without worrying about it going sour in a short amount of time.

Next, there is preserved meats.  We plan on making jerky this summer, along with some bottled and preserved meats.  It requires some investment in a bath bottler (instead of just steam), but it’s worth it in the end.  Along with that, my family has a killer recipe for sweet pickled beets, dill pickled green beans, and hot pickled carrots.  Perhaps this year I’ll get to use my purple carrots I planted (assuming my son hasn’t killed them all already).  

But once you have all this done, where do you store them?  A basement is great if it’s rarely used.  Unfortunately, our basement is being used.  So what to do?  Well, you can build a root cellar.  Root cellars are great, because they can double as cheese caves.  They stay naturally cool in summer, and don’t freeze in the winter.  Also, they don’t have to be really large.  You can build a small pit that is covered (so no one falls in), and then cover it up with a decent covering.  As long as there is a drainage area for rain, you should be good to go.  

So, are we planning on the end of the world?  Is that why we are going nuts with this urban farming plan?  No, not really.  It’s because we want to have good food, save some money on gas and buying at the store.  It’s all about economics.  The fact that the food supply will still be useful and very viable in the case of a disaster is just icing on the cake.  

And the real great thing about these projects this time is my wife’s support of it.  Before she thought I was just crazy, but now she understands the benefits of fresh vegetables and fruits that are just a short walk away.


Mike Basinger
MikeB-
Mike's Planet
» Intrepid Ibex Development Forum

The Intrepid Ibex Development forum has been open on the Ubuntu Forums for discussion of the development of Ubuntu 8.10. Enjoy and let me know if you have any suggestions for thr forums.

May 11, 2008

John Anderson
sontek
sontek ( John M. Anderson )
» Python with a modular IDE (Vim)

On Thursday, May 9th, 2008 the Utah Python User Group decided to settle the debate that has plagued us developers since the beginning of time: If you were a programming language, what editor would you use?

I was tasked with showing Eclipse with the PyDev plugin in all its glory–but we all know–real men / developers don’t use IDE’s, so we are going to talk about using Python and Vim together, reaching a state of Zen that the Dalai LLama would be jealous of and establishing more Feng Shui than Martha Stewart’s Kitchen.

Freely jump between your code and python class libraries

There are 2 ways to add your ability to jump between python class libraries, the first is to setup vim to know where the Python libs are so you can use ‘gf’ to get to them (gf is goto file). You can do this by adding this snippet to your .vimrc:

python << EOF
import os
import sys
import vim
for p in sys.path:
    if os.path.isdir(p):
        vim.command(r"set path+=%s" % (p.replace(" ", r"\ ")))
EOF

With that snippet you will be able to go to your import statements and hit ‘gf’ on one of them and it’ll jump you to that file.

Continuing accessibility of the Python class libraries we are going to want to use ctags to generate an index of all the code for vim to reference:

$ ctags -R -f ~/.vim/tags/python.ctags /usr/lib/python2.5/

and then in your .vimrc

set tags+=$HOME/.vim/tags/python.ctags

This will give you the ability to use CTRL+] to jump to the method/property under your cursor in the system libraries and CTRL+T to jump back to your source code.

I also have 2 tweaks in my .vimrc so you can use CTRL+LeftArrow and CTRL+RightArrow to move between the files with more natural key bindings.

map <silent><C-Left> <C-T>
map <silent><C-Right> <C-]>

You can also see all the tags you’ve been to with “:tags”

Code Completion

To enable code completion support for Python in Vim you should be able to add the following line to your .vimrc:

autocmd FileType python set omnifunc=pythoncomplete#Complete

but this relies on the fact that your distro compiled python support into vim (which they should!).

Then all you have to do to use your code completion is hit the unnatural, wrist breaking, keystrokes CTRL+X, CTRL+O. I’ve re-bound the code completion to CTRL+Space since we are making vim an IDE! Add this command to your .vimrc to get the better keybinding:

inoremap <Nul> <C-x><C-o>

Along with code completion, you will also have call tip support. Here is a screenshot:

Vim with Code Completion
Documentation

No IDE is complete without the ability to access the class libraries documentation! You’ll need to grab this vim plugin. This gives you the ability to type :Pydoc os.path or use the keystrokes <Leader>pw and <Leader>pW to search for the item under the cursor. (Vim’s default <Leader> is “\”). Here is a screenshot:

Vim with PyDoc integration

Syntax Checking

Vim already has built in syntax highlighting for python but I have a small tweak to vim to give you notifications of small syntax errors like forgetting a colon after a for loop. Create a file called ~/.vim/syntax/python.vim and add the following into it:

syn match pythonError "^\s*def\s\+\w\+(.*)\s*$" display
syn match pythonError "^\s*class\s\+\w\+(.*)\s*$" display
syn match pythonError "^\s*for\s.*[^:]$” display
syn match pythonError “^\s*except\s*$” display
syn match pythonError “^\s*finally\s*$” display
syn match pythonError “^\s*try\s*$” display
syn match pythonError “^\s*else\s*$” display
syn match pythonError “^\s*else\s*[^:].*” display
syn match pythonError “^\s*if\s.*[^\:]$” display
syn match pythonError “^\s*except\s.*[^\:]$” display
syn match pythonError “[;]$” display
syn keyword pythonError         do

Now that you have the basics covered, lets get more complicated checking added. Add these 2 lines to your .vimrc so you can type :make and get a list of syntax errors:

autocmd BufRead *.py set makeprg=python\ -c\ \"import\ py_compile,sys;\ sys.stderr=sys.stdout;\ py_compile.compile(r'%')\"
autocmd BufRead *.py set efm=%C\ %.%#,%A\ \ File\ \"%f\"\\,\ line\ %l%.%#,%Z%[%^\ ]%\\@=%m

You will have the ability to to type :cn and :cp to move around the error list. You can also type :clist to see all the errors, and finally, sometimes you will want to check the syntax of small chunks of code, so we’ll add the ability to execute visually selected lines of code, add this snippet to your .vimrc:

python << EOL
import vim
def EvaluateCurrentRange():
eval(compile('\n'.join(vim.current.range),'','exec'),globals())
EOL
map <C-h> :py EvaluateCurrentRange()

Now you will be able to visually select a method/class and execute it by hitting “Ctrl+h”.

Browsing the source

Moving around the source code is an important feature in most IDE’s with their project explorers, so to get that type of functionality in vim we grab the Tag List plugin. This will give you the ability to view all opened buffers easily and jump to certain method calls in those buffers. Here is a screenshot of it in action:

Vim TagList Plugin

The other must-have feature of an IDE when browsing code is being able to open up multiple files in tabs. To do this you type :tabnew to open up a file in a new tab and than :tabn and :tabp to move around the tabs. Add these to lines to your .vimrc to be able to move between the tabs with ALT+LeftArrow and ALT+RightArrow:


map <silent><A-Right> :tabnext<CR>
map <silent><A-Left> :tabprevious<CR>

Debugging

To add debugging support into vim, we use the pdb module. Add this to your ~/.vim/ftplugin/python.vim to have the ability to quickly add break points and clear them out when you are done debugging:

python << EOF
def SetBreakpoint():
    import re
    nLine = int( vim.eval( 'line(".")'))

    strLine = vim.current.line
    strWhite = re.search( '^(\s*)', strLine).group(1)

    vim.current.buffer.append(
       "%(space)spdb.set_trace() %(mark)s Breakpoint %(mark)s" %
         {'space':strWhite, 'mark': '#' * 30}, nLine - 1)

    for strLine in vim.current.buffer:
        if strLine == "import pdb":
            break
    else:
        vim.current.buffer.append( 'import pdb', 0)
        vim.command( 'normal j1')

vim.command( 'map <f7> :py SetBreakpoint()<cr>')

def RemoveBreakpoints():
    import re

    nCurrentLine = int( vim.eval( 'line(".")'))

    nLines = []
    nLine = 1
    for strLine in vim.current.buffer:
        if strLine == ‘import pdb’ or strLine.lstrip()[:15] == ‘pdb.set_trace()’:
            nLines.append( nLine)
        nLine += 1

    nLines.reverse()

    for nLine in nLines:
        vim.command( ‘normal %dG’ % nLine)
        vim.command( ‘normal dd’)
        if nLine < nCurrentLine:
            nCurrentLine -= 1

    vim.command( ‘normal %dG’ % nCurrentLine)

vim.command( ‘map <s-f7> :py RemoveBreakpoints()<cr>’)
EOF

With that code you can now hit F7 and Shift-F7 to add/remove breakpoints. Then you just launch your application with !python % (percent being the current file, you can declare your main file here if its different).

Another tweak I use is to have my vim inside screen with a horizontal split, that way I can see the python interpreter and debug while still having vim there so I can easily fix my code. Here is a screenshot of that in action:

Vim with Screen

Snippets

A great time saver with stanard IDE’s is code snippets, so you can type a few key strokes and get a lot of code out of it. An example of this would be a django model, instead of typing out the complete declaration you could type ‘mmo<tab><tab>’ and have a skeleton of your model done for you. To do this in vim we grab the Snippets EMU plugin.

Check out a great screencast of snippetsEmu in action here

You can get my full setup here

Emacs

Here is a great post on how to do the same with Emacs.


Peter Abilla
no nic
shmula
» It’s the People also, not just the Tools

I spoke at a Lean Six Sigma conference last week, held in Chicago.  The conference was packed with Supply Chain, Logistics, Fulfillment, Manufacturing, Transportation, Healthcare, and Service executives.  

During the conference, I heard a lot of chest-beating, neutron-jack-welch type of comments and also a lot of focus and emphasis on the “tools” of Operational Excellence.  I truly found this part to be quite disappointing, given that the audience and speakers were mostly executives from large Fortune 500 companies.

I thought and expected that people knew better but that’s okay — this represents a challenge and opportunity to do good.

How has Lean Manufacturing and Six Sigma gotten to the point where it has forgotten its roots and become a subculture all in itself?  Lean Manufacturing hinges upon 2 pillars — (1) Respect for People and (2) Continuous Improvement.  Why do people focus on (2), but completely forget (1) Respect for People?

L.A.M.E

Mark coined the term L.A.M.E a while ago and I mostly agree with it.  One aspect I’d add is that the term ‘misguided’ also applies to an overfocus to one dimension of Lean and forgetting the other dimensions.  The ironic thing about this is that each dimension of Lean actually supports each other and WAS built from each other.  

Another thing as way of background: the work ‘Lean’ was a term coined by MIT’s International Motor Vehicle Program, led by Jim Womack.  The term was coined to explain how Toyota got by with “half of everything” — how they did so much with so little — fewer people, less space, less inventory, less effort, less safety incidences, less defects, and less capital investment and cash.  

I hear people use “Toyota Production System” and “Lean” separately.  In fact, during the conference I heard a number of people say things such as “We use Lean, Six Sigma, and The Toyota Production System.”  That’s like saying “I drink water, liquid, and H2O”.  

Not L.A.M.E

Toyota describes its system as a combination of (a) Philosophy, (b) Management, and (c) Technical.  Each was built upon the other and exist to support each other.  

For example, some people c