Thursday trivia #6

 

  • So far, I’ve only gotten two questions using formspring.me. This is probably a good thing.
  • If I had put the iPhone 4.0 developer build on my iPhone, I might be torn between two emotions: pleasure at the improvements and abject horror at the abyssal drop in battery life.
  • I think I may tackle getting my Certified Ethical Hacker certification. It sounds like fun.
  • Today’s net weight: down 4 lbs, to 201.2. Yay me.
  • This morning on NPR I heard the tail end of this story. One lobbyist said “During the day, who watches TV? Well, now I do! Seriously, I’ve watched more Ellen DeGeneres in the last month on these devices.” So: good reason not to get one.
  • Our taxes are paid. I expect the sore feeling to go away in October or so. I support the idea of doing away with withholding so that the amount of taxes we actually pay becomes more visible. That would do more to change people’s opinion of what the US government should and shouldn’t do than practically anything else.

Comments Off on Thursday trivia #6

Filed under General Stuff

Exchange ActiveSync remote wipe and firing people

Darn it, Dr. J beat me to the punch:

Remote wipe in Exchange ActiveSync is only useful when a user loses his or her device, and even then, it is lacking since you cannot reach out to the device and wipe it. Remote wipe in Exchange ActiveSync is utterly useless when people are terminated from their employer.

In the case where you fire an employee and want to remove your organization’s confidential data from it, there’s a big ol’ hole that Jesper describes quite well. There are various mitigations that might seem to apply, but most of them revolve around preventing someone from connecting in the first place, or in blocking their ability to connect after you fire them or whatever. For example, you could use client certificates so that only devices with certificates could connect, but then only as long as the client cert remains valid. That doesn’t solve the wipe problem, though.

A related problem: the current device wipe implementation on most phones resets everything and completely erases the phone back to its factory state. Users lose all their apps, personal data, and so on: not a great experience for them (though one school of thought says that you just fired them, so who cares?)

It seems like it would be reasonable to do two things. First, allow sending the EAS wipe message to a device even if it fails to authenticate. If the device has an existing sync relationship, and it tries (but fails) to authenticate, just send the pending wipe message to it anyway. Second, give admins the choice of whether the wipe message requires a complete wipe or only deleting data that came from the organization originating the wipe message in the first place.

2 Comments

Filed under UC&C

Acuitus is hiring content authors

I’ve gotten a lot of questions about my job, so I thought it would be a good idea to explain more about what I do, mainly because we’re looking for more people who can do this kind of work.

My official title is "content author." That means that—you guessed it—I write content for our Digital Tutor. The tutor is a complex piece of software that provides students with the same experience as sitting side-by-side with an expert human tutor. We’ve proven in both lab tests and real-world use that we can take average students—not just superstars—and help them gain real expertise, not just paper-MCSE-style book learning. Our students gain expertise far out of proportion to students who study with normal methods, especially because we can do it faster than traditional solutions. (If you want to know more about how we do that, e-mail me; much of our methodology is secret sauce.)

There are two important parts to my job title. The content part means that the tutor uses several different kinds of material to help students learn. Some are the traditional items you think of when you think of computer-based tutoring: lectures, graphics, animations, and so on. Others are unique to our product. For example, we have guided activities (e.g. "First open a command prompt and type ‘telnet’. Then…") where, at each step, we can see what the student’s doing on a live Windows network and give them guidance where needed.

We also have free-form exercises, where we give the student a real-world exercise ("Your new boss is complaining that his computer is slow. Go fix it.") and offer help, but only when the student asks for it (and only as a Socratic dialog, never as prescriptive help.) These, in a word, are awesome. They’re fun to write, challenging for students, and a key part of what makes our solution so effective… but I digress.

The author part means that I create the content using our own language and toolset. However, I have engineers who work very closely with me to make sure that whatever features I need get implemented. It’s a great partnership because I’m free to focus on what I do best, not worry about how the system will figure out what a student is pointing at, or what they just changed in AD, or whatever. The engineers do that (and we need some of them as well, come to think of it!)

What makes a successful content author?

  • Deep knowledge of at least one significant aspect of IT: networking, Windows, Active Directory, etc. When I say "deep", I mean that you need to be able to talk about this stuff at any level from "ooh, shiny" down to 500-level details of internals.
  • Solid teaching experience, the more the better. Whether 1:1 or in groups, you have to be able to effectively impart what you know.
  • Excellent written communications skills. Many of our existing content folks are published, though that’s not a requirement.
  • A desire to work on something that can, quite literally, change the world.

Are you a good fit? If you’re interested, see our jobs page and fill out the online application. That will get you into our system, and we’ll take it from there. If you have questions, I’ve set up a formspring page so that you can anonymously ask ’em.

Comments Off on Acuitus is hiring content authors

Filed under General Tech Stuff

Thursday trivia #5

Not much trivia today; it’s been a busy time with a lot of things going on.

  • Are diplomats smarter than everyone else? You be the judge.
  • The 151 Best Movies You’ve Never Seen sounds like a pretty interesting book.
  • Chile or Costa Rica? Inquiring minds want to know.
  • I didn’t watch Tiger Woods at the Masters last year, so I have a ready-made reason not to watch him this year.
  • US Airways and United merging? Blecch. I’d almost rather fly Spirit. Well, not quite, but close.

Comments Off on Thursday trivia #5

Filed under General Stuff

Thursday trivia #4

  • I have never had a better cheesesteak than this. Highly recommended if you’re in Pensacola.
  • Harry Reid and I don’t see eye to eye on many things, I suspect. However, there is no excuse for the treatment he received from a congregation of his fellow Latter-day Saints.
  • Comments on my blog appear to be broken, as reported by several smart people. However, spammers are still able to leave me comments. Looks like I’ve got some fixin’ to do.
  • My plan was to write and release an iPhone app that would earn me enough money to buy an iPad. I guess that means I should start on the app at some point.
  • Did you know that April 1st is the birthday of the chief petty officer rank in the Navy? Sure enough. Happy birthday, Chiefs!
  • This brings back many happy memories of time spent swilling root beer and computing.
  • This is the first year in some time that I haven’t had a work-related April Fool’s joke ready to go. I’ll have to work harder on that for next year.
  • I’m looking forward to seeing the people who routinely condemn Bill O’Reilly react to this bit of news.

2 Comments

Filed under General Stuff, Musings

Thursday trivia #3

  • I’m glad to see that Microsoft is working on making Eclipse more usable and better-behaved under Windows 7.
  • My boy Pat Richard wrote a nice script for sending an automated "welcome" message to new Exchange users. Check it out.
  • There’s quite a concentration of Exchange and OCS talent in the Bay Area, but the only person I can think of that I’ve met is Ed Crowley. I’ve got some catching up to do.
  • "A DIY Guide to Going Nuclear."
  • It’s harder than you might think to teach a bunch of 13-16-year-old boys to safely change a tire, what with all the jokes about lug nuts and so forth.
  • Next week I’ll be in Pensacola. Waffle House, Chick-Fil-A, and Cracker Barrel, watch out! Better still, I get to drop by Alexandria and see Mom, Grandma, and the rest of the family first.
  • Health insurance reform: it’s not the work of the devil, it’s just a law. Laws can be changed. If you don’t like it, relax and remember that simple fact.

2 Comments

Filed under Friends & Family

“A mathematical career in the software industry” event

One of the unique things about working at Acuitus is the way we collaborate on writing instructional content. We essentially work on pairs, and my partner for the most recent set of work I’ve been assigned is… wait for it… a mathematician.
No, seriously.
Imagine all the people in the world with whom I could converse. Imagine me asking them a little about their prior careers or work experience. Now imagine me not understanding anything they said. That’s Geir, my partner.
Nonetheless, I give him mad props; he’s been great to work with, and he’s co-presenting a talk at Berkeley called “A mathematical career in the software industry” on April 8th. If you’re a math whiz in the Bay Area[1], please feel free to drop by and hear his talk– I think you’ll find it interesting.
[1] as if any math people would read this blog. [2]
[2] except for my cousin Jody, he of the math degrees

1 Comment

Filed under Friends & Family, General Tech Stuff

More on administering Mac OS X Server

After my previous post on OS X Server, I got a lot of good feedback from the Mac Enterprise folks. It was very helpful as I dug deeper into getting our room full of Mac minis into coherent shape.

For example, I learned that you can turn a shell script into a double-clickable executable by changing its extension to “.command”. That means that having a shell script run at logon becomes trivial, which in turn made it super-easy to start our complex Java app when the captive student account logs in. Score one for the good guys.

In regards to my complaint about binding machines to the domain, I learned (courtesy of James Relph) that you can in fact do it just like Windows does:

Regarding binding machines to the domain, just go into Server Admin > Open Directory > Settings > Policies > Binding and tick “Require authenticated binding between directory and clients”. That will ensure that when a client is joined to the domain it will ask for a domain admin account and create an associated computer record in the directory.

I learned how useful the Apple Remote Desktop “kickstart” app is, too, for setting up various aspects of ARD without manual intervention. Sadly, I also learned that there’s no way to easily apply an existing ARD task to a different set of machines, though the MacEnterprise folks helped with a couple of workarounds.

Some of the rough edges I noted earlier have disappeared as I’ve learned more about what I’m doing. One piece of excellent advice that I received is never to trust the GUI. Odd, given that Apple is supposed to be masters of all things GUI, but absolutely true. Often what you see in the GUI of the various admin tools is only loosely related to the actual status of the machine or component you’re looking at.

There are a few more serious problems lurking, too. One is that automatic logon just flat out doesn’t work if you specify an Open Directory account as the target. This is annoying, but it’s not the end of the world. Worse is that Apple pretty much leaves disaster recovery and repair up to oral tradition. There’s very little documentation on how to properly back up and restore a Mac OS X Server system. I can tell you from bitter experience that using Time Machine to back it up will only preserve files that aren’t open at the time of the backup, meaning you’ll lose your Open Directory database. Oooops. Apple doesn’t document anything about the best (or even worst) method of replacing a failed OD server, which is a real shame.

I still have a lot more to learn, including how to use the systemsetup and scutil commands, and how to tame launchd to make it do what I want to. One of these days I’ll probably feel like I know what I’m doing…

2 Comments

Filed under General Tech Stuff

Choosing emergency contacts

The world-famous Peter Shankman has an excellent piece on choosing emergency contacts. I’ve had it marked to blog about for some time, but haven’t gotten around to it for a variety of reasons. However, because of our power outage (now resolved, no particular thanks to Palo Alto’s utilities) I’ve been thinking more about emergency preparedness and planning for work. One immediate need: we need a a good system to get in touch with our employees in case of an emergency or disaster. Thinking about that reminded me of Peter’s article, which is why I’m finally posting it now.

Executive summary: your emergency contact should be someone who can handle the bad news, not necessarily your spouse or parents. Read the whole thing; it’s short and worth your time. Then go update your emergency contact information (including the ICE record on your mobile device).

This has been a public service announcement.

Comments Off on Choosing emergency contacts

Filed under Friends & Family, General Stuff

Thursday trivia #2

 

  • I can’t believe that Hubble 3D, the new IMAX movie, is playing in Cleveland but not anywhere in the Bay Area. That has thrown my weekend plans into disarray.
  • Sometimes beta testing isn’t as much fun as it seems from the outside.
  • We’re still on generator power at work. Everyone in our office is now convinced of the value of a good UPS system.
  • The NYT asks "When Is the Worst Time to Go to the Hospital?" I assume that this was a rhetorical question, as there’s no best time to go.
  • The folks at Dinan Engineering gave our Scout troop a fantastic tour and class last night. Not incidentally, I now really want one. Funny how that works…
  • I am ashamed that Georgia Tech only graduated 38% of its men’s basketball players. If that’s the price of playing Division-I basketball, I’d rather them not play.

Comments Off on Thursday trivia #2

Filed under General Stuff, Musings

Power to the people, California style

My office is currently suffering our second power outage of the year. Earlier this year, a plane carrying Tesla employees crashed into power lines, knocking out power to much of Palo Alto. Yesterday, a transformer in our office park failed, killing power to our building and the one next door. Incredibly, 18 hours later, we’re still without power! People here delight in looking down their noses at places like Athens, Alabama or Houma, Louisiana, but certainly I was never without electricity for longer than an hour or two, even during weather that would make the average Californian run for shelter.

Interestingly, outages seem to be a Palo Alto theme: there have been several other notable outages, and at least one other company has moved to neighboring Mountain View to get more reliable electric service.

Our critical servers are protected with UPS systems, but those only help provide time for a clean shutdown, not for ongoing operations. Our landlords arranged for a 1-megawatt diesel generator to tide us over; it’s set up in the parking lot but isn’t yet providing power to the building. The utility estimates that it will take two or three days to make the necessary repairs and get us back online. In the meantime, I have a fully-charged laptop and a mostly-charged MiFi, so at least I can get a few things done.

Comments Off on Power to the people, California style

Filed under California, FAIL

Thursday trivia #1

Bo does a weekly "Thursday miscellanea" series that I like, so I’m shamelessly stealing his idea.

  • NASA has a really nifty hands-on simulation of how their space communications network works. I can’t wait to show it to the kids, who will dig both the 3D graphics and the music.
  • Allegedly, more people use Facebook than watch Fox News. I am not sure what this says about the future of television news: should we expect to see FarmVille-themed programming? quizzes? "Like" buttons?
  • I’m not looking forward to the coming deluge of political ads in California for the governor’s and Senate races. Thankfully I don’t watch much TV.
  • OCS 2010 will make heavy use of PowerShell. Hallelujah.
  • This weekend I have the rest of my Scout outdoor leader training. Among other things, I’ll have to identify native plants, pitch a tent, and cook in a Dutch oven. At least I know how to do one of those things already.
  • Next week when Arlene’s gone my plan is to make let each of the boys cook dinner, by themselves, one night. That’s going to be interesting.

Comments Off on Thursday trivia #1

Filed under General Stuff

Exchange 2010 Calendar Repair Assistant

I literally had never heard of this feature until I found this excellent post by Elie Bou Issa. Turns out that the Calendar Repair Assistant, or CRA, is documented, but I hadn’t run across it.

In brief, the CRA’s job is to ensure that calendar data items stay consistent across the organizer and attendees’ mailboxes. This is a hard job given how many different clients may be in use, and how many of them (I’m looking at you, Apple) have problems handling some kinds of Exchange calendar events. Elie’s article explains things quite well, so I have nothing more to add than a delighted fist-pump that this feature even exists.

1 Comment

Filed under UC&C

A few things I learned at Scout outdoor leader training

I attended the first part of the Boy Scouts of America "Introduction to Outdoor Leader Skills" course this weekend. Here’s a brief summary of the major things I learned:

  • I’m not dyslexic, but I might as well be when it comes to tying knots. I tend to interchangeably use my right and left hands, and that meant that it took me about five times longer to learn how to tie some of the stupid things. I’ll be practicing this week.
  • The Chesebrough Scout reservation is a beautiful facility, but it doesn’t have any AT&T coverage (or, at least, not much).
  • A cardboard box, cut properly, makes a dandy split for lower-arm breaks or ankle injuries.
  • Black electrical tape is better than duct tape or masking tape for securing slings, splints, etc. It’s just sticky enough, and it stretches more than the other types, but not so much as to be useless.
  • When traveling in bear country, use unscented sunscreen to keep from becoming a bear magnet. You should also plan on wearing special clothes just for sleeping—if you sleep in your day clothes, they’ll have food scents on them, and bears love a good food scent.
  • The best way to test the fit of your hiking boots is to walk downhill. (More boot fitting tips here.)
  • The Scouts’ "Leave No Trace" program is surprisingly comprehensive; its principles include only camping and traveling on durable surfaces, minimizing campfire use, and attempting to avoid disturbing wildlife.
  • Your kitchen is probably a pit of filth, even if you’ve just cleaned it. (The food safety/prep class was a real eye-opener. Good thing it was delivered right before lunch!)

The second half of the training takes place Friday night and Saturday; we’ll be pitching tents, camping and cooking outdoors, and all that good stuff. Should be big fun.

Comments Off on A few things I learned at Scout outdoor leader training

Filed under California, General Stuff

TechNet webcast on Exchange 2010 UM

I’m doing a TechNet webcast on 16 March at 11 am. The topic: Exchange 2010 unified messaging, and what’s new and updated relative to Exchange 2007 UM.
Register here, and I’ll see you there!

Comments Off on TechNet webcast on Exchange 2010 UM

Filed under UC&C