Contact pictures, whether you want them or not

I am an early adopter (but then if you’ve been reading this blog for more than 10 minutes, you knew that already). Recently, two fairly new pieces of technology have been working together in a, shall we say, unexpected way.

First is Outlook 2010, which I’ve been running for some time. Overall I like it a lot; it performs well, it supports multiple Exchange accounts, and it has lots of grace notes (like the configurable "Quick Steps" feature) that make using it both easier and more pleasant than earlier versions.

Second is the newest release (3.1) of the Facebook client for the iPhone. It has the option to automatically sync Facebook data (including profile links and pictures) for contacts it finds in your iPhone address book.

Put these two together, and what do you get? Pictures of people you don’t really know showing up in Outlook, like this:

image

Yes, that’s right: any time I exchange mail with someone whose e-mail address is registered with Facebook, I get their picture! In this case, a college student bought a book I had listed on Amazon, and she was writing to ask whether I’d shipped it or not. Imagine my surprise to see a picture of her and her two BFFs (at least that’s who I assume the other two girls are.)

What’s making that happen? Outlook 2010 has a feature called "Suggested Contacts" that automatically adds the e-mail addresses of people you correspond with to a new "Suggested Contacts" folder. This replaces the old .nk2 file that earlier versions used for nickname autocompletion. Unfortunately, Suggested Contacts appears to most applications (well, the ones that aren’t Outlook 2010) as a regular Contacts folder. On the iPhone (and in Mail.app) that means that people you’ve exchanged e-mail with show up in your contact list until you manually purge them.

The Facebook app on the iPhone is trying to be helpful, so it looks for people in your address book—which now includes the contents of Suggested Contacts—and downloads their pictures. Ta da! Instant confusion.

The contact-picture feature is one of my favorite Outlook 2010 enhancements, so I’m not going to turn it off. Likewise, having up-to-date pictures of my actual Facebook friends is a neat feature, so i"m leaving it on as well. For now, that means that I’m stuck occasionally seeing pictures of people I don’t know—part of the price for being an early adopter, I guess.

Comments Off on Contact pictures, whether you want them or not

Filed under UC&C

Tag cloud now working

Good news: I have tag clouds working on my blog, about five years after the rest of the Internet got them working.

Bad news: now I have to go back and retag a thousand-plus posts if I want the cloud to be useful.

Comments Off on Tag cloud now working

Filed under General Tech Stuff

SecureDoc full-volume encryption for Mac OS X

Windows users have more security options, and that’s just the way it is. Or is it?

Let’s start with the obvious: I love BitLocker and I cannot lie. Despite its faults, it remains a great example of a real-world security feature that delivers immediate value. It’s fully supported by the OS manufacturer, meets government security standards, and doesn’t have to rely on skanky hacks to work its magic.

Windows laptop users can also take advantage of Seagate’s Momentus FDE line of disk drives. These disks, sometimes called self-encrypting disks or just SEDs, perform hardware encryption, and they are qualified by the US National Security Agency as meeting NSTISSP #11. Unfortunately, these drives require support in the BIOS. Since Apple’s laptops all use EFI instead of the standard x86/x64 BIOS, you can’t just plop a Momentus FDE into your Mac and expect it to work.

The only solution I’ve found to get an SED to work in a modern Mac laptop is from WinMagic. Their SecureDoc product is essentially a full-volume encryption tool that competes directly with BitLocker, as well as with other FVE products from PGP, PointSec, and so on. The big difference: the Mac version of SecureDoc supports Momentus FDE disks. Naturally I had to try it.

Installation is simple: you run an installer, which adds a couple of kernel drivers and modifies the boot loader. If (and only if) it detects an unlocked Momentus FDE as the boot volume, it will ask whether you want to use hardware or software encryption. (The installer also tells you that it will change the system’s hibernation mode, but let’s not get ahead of ourselves yet…)

When you’re done, you must reboot, at which point you see the new (and quite ugly) SecureDoc login screen. When you log in here, the SecureDoc bootloader unlocks the FDE disk and the normal Mac OS X boot cycle proceeds.

The docs ask that you turn off pagefile encryption by unchecking the "Use secure virtual memory" option in the General pane of the Security preferences tool. This makes sense: there’s no reason to ask the OS to encrypt the page file if the disk on which it lives is already encrypted. You must also turn off the "Put hard drive to sleep whenever possible" checkbox, as the OS doesn’t deal well with having the disk go to sleep (and thus get locked) while you’re using it.

In my test install, I ran into an odd problem: the machine would freeze when waking from sleep. The cursor and keyboard would work normally, but I’d get the spinning rainbow pizza of death. After doing some digging, and with the help of WinMagic’s tech support folks, I determined that the system’s hibernation mode wasn’t properly set by the installer. (Page 4 of this document is the only place I’ve found the different hibernation mode codes explained.) Uninstalling the SecureDoc software, manually setting the hibernation mode with the pmset tool, and reinstalling it fixed the problem and it has worked flawlessly since.

The standalone version of SecureDoc doesn’t have the same set of management or control features that BitLocker does. Of course, that’s because WinMagic wants you to buy their server-based toolset, which uses a group policy-like mechanism to enforce whatever encryption policies you choose. Without having tested either the server tool or the Windows version, I’m not ready to pick a winner between BitLocker and SecureDoc, but for the Mac it’s a low-impact solution that does what it says, and I’m happy with it so far.

Comments Off on SecureDoc full-volume encryption for Mac OS X

Filed under General Tech Stuff, Security

How I got into the writing business, part 2

In part 1, I started talking about how I got into the writing business. Part 1 ended with me having written a couple of non-Windows-related books (including this) and contributing to several Windows-oriented books (like this). I began to wonder if it made sense for me to get an agent, so I started talking to David Rogelberg, the owner of StudioB. He offered me the tempting possibility of being able to write for O’Reilly, something I had always wanted to do. I signed on as a StudioB client and, true to his word, David got me in touch with O’Reilly about writing a book on programming for the Palm Pilot.

Of course, I didn’t know anything about programming for the Pilot, but I wasn’t about to let a minor technicality stop me.

What did stop me was a communications mixup between Robert Denn, my editor at O’Reilly, and another ORA editor who shall remain nameless. This other editor had signed Rhodes and McKeehan– the experts who had written a book on Newton development too– to write a Palm programming book. That left them in the position of having two PalmOS books under contract, only one of which would be written by, y’know, people who knew what they were doing.

Robert offered to let me write a book on another topic. In fact, he even gave me my pick of topics. I wish I could say that I jumped at the chance to write about Exchange, but I didn’t. I had to be more-or-less bullied into it my my agent, who realized the long-term potential of working in the Exchange market. I didn’t know anything about Exchange either, but I was quickly determined to learn, given that I had just signed a contract to write about it. I started joining every Exchange-related mailing list in sight, printed out all the product documentation, and set up Exchange using Virtual PC on my Powerbook. (Yes, that’s right; my O’Reilly Exchange book was written on a Mac– a trend which continues to this day).

I learned sooooo much from the folks on the swynk Exchange list. Not only were there rock stars like Andy Webb, Missy Koslosky, and Ed Crowley there; there were also a ton of Exchange developers. Just to cite one example, one of the primary perpetrators of the Exchange 5.5 MTA was on the list, as was Laurion Burchall, one of the key ESE developers. Everyone on the list was super generous with their time and knowledge, and it didn’t take me long to get up to speed. (My first “live” exposure to the community, though, was attending the 1998 MEC. I was there when Tony Redmond made his famous “I’ll pass on the clap” remark, and I heard Pierre Bijaoui explain that the average human has one breast and one testicle!)

Coincidentally, at about the same time I got a call from O’Reilly: Windows NT Pro magazine was looking for someone to write a regular Exchange column. Was I interested? You bet I was! I started writing it in September of 1998 and it’s been in print ever since, although it’s morphed into a few different forms.

All this time I was still holding down a real job at LJL Enterprises, writing crypto code on the Mac. Eventually my agent brought me an offer that was too good to refuse: Ford Motor Company wanted someone to write a book about their CAD system. I gave my two weeks’ notice, set up my home office, and got ready to hang out my own shingle as a full-time author. That’s when the real adventures started…

3 Comments

Filed under General Stuff, Musings

300, 200, and the New Year

A thoughtful post from my pal Bo Williams on his decision that he wants to weigh less than 300 lbs. I am right there, except that 200 is my personal high-water mark (and one, frankly, that I’m already over). I was holding steady at about 190 for a good while, but not long after Dad died I put on around 10 lbs. Not for any reason, mind you; it just sort of happened. Since then I’ve hovered right around 205, which is a bit more of me to love than I think there should be.

In the back of my mind lurk two things. First is the shadow of Dad’s diabetes. At his funeral, I was sitting around a table with a first cousin, two aunts, and two uncles… all of whom are either diabetic or pre-diabetic. The last time I had my bloodwork done (in September), my glucose was 94; the cutoff for being considered pre-diabetic is 100. I have a huge weakness for sweets, and that’s something I need to really work on. Apart from that, my lipid levels are all pretty good, so I’m not immediately worried about them.

Second is what my kids see: they see me making essentially no daily effort to exercise. In the past I’ve been regular about running on our treadmill (which, sadly, is now gone), but with the dawn of a new year it’s time for me to get back in the groove. Accordingly, today I went and signed us up at the local Anytime Fitness. Arlene, David, and I now have 24/7/365 access to a really nicely-equipped gym less than 2 miles from our house.

I plan to couple that with a return to logging my food intake, which worked pretty well the last time I tried it. Seven years ago I said my target was 181, and this time I really mean it!

2 Comments

Filed under General Tech Stuff, Musings

RSS feed for Exchange 2010 KB articles

I love using RSS to keep track of various information sources, and I just found out that there’s an RSS feed of KB articles for Exchange Server 2010. Use this feed along with your preferred aggregator to keep track of the latest support information for Exchange 2010. (If you don’t already know how to use an aggregator, try Google Reader for a quick, easy, and free introduction.)

Comments Off on RSS feed for Exchange 2010 KB articles

Filed under UC&C

End-of-the-year randomness

Wow, how did it get to be the end of the year already? I’ve fallen down on my blogging bigtime, but I have ambitious plans for 2010– mostly consisting of posting a batch of articles at once and letting MovableType publish them on a schedule. That way when I’m in the blogging mood I can write up a bunch of stuff and post it.

A few end-of-the-year notes:

  • Christmas was wonderful, even though (or perhaps because) we were here by ourselves. We gave Mom and our boys a Disney cruise, which means I’ll miss the MVP summit this year. I think it’s a reasonable tradeoff, though.
  • Julie and Paul gave me Cruise Ship Confidential, which was a real hoot. The author struck me as someone I’d love to sit down with over lunch. If you like true-confessions-style books, this one’s excellent.
  • Lego Rock Band is a ton of fun, especially with the boys. We also gave them Lips: #1 Hits, which is way more fun than I expected it would be. No surprise that the Lips wireless mic works with the Rock Band family, and having a wireless mic makes those games more fun (and easier for us to stage).
  • I bought a USMC license plate frame from the Stars and Stripes Shop. It was cheaper than any place else I found, I got it in two days, and they sent me a 10% off code to share: sssfrienddec09. Share and enjoy!
  • This year’s Aviation Week & Space Technology photo contest winners are even more awesome than usual. The little tiny online versions don’t really do the pictures justice; if you can find the print magazine, you’ll see what I mean.
  • One of my coworkers is an Iowa fan– the first one I’ve ever met in the flesh. Too bad his team is going down when they play the mighty Yellow Jackets.
  • Speaking of work, I’m really excited about some of the stuff we’re going to be doing. I can’t share any details yet but there are some exciting things coming up.

I probably won’t be posting again this year, so until next time, have a wonderful New Year’s Eve and get ready for a great 2010!

1 Comment

Filed under Friends & Family, General Stuff, Musings

Group Metrics and Exchange 2010 MailTips

I had quite a merry chase through the Exchange documentation this morning trying to figure out the best way to explain something.

Exchange 2010 MailTips come in several flavors. You can set MailTips for individual mailboxes using Set-Mailbox, but most MailTips are automatically generated in some way. You can use the Set-OrganizationConfig cmdlet to control several of these generative behaviors, but there are a few quirks.

One type of MailTips come from data that the CAS pulls from queries against the mailbox server. That’s how the “recipient out of office” and “recipient mailbox full” MailTips work. As long as the CAS can make RPC queries against the mailbox servers, these MailTips will work just fine.

The “external recipient” and “large audience” MailTips rely on data from the Group Metrics component that runs on the mailbox server. Here’s where the quirks start. By default, these MailTips are turned on by default in the organization configuration. However, if you read this you might get the impression that GM data are generated by every mailbox server in the organization. However, if you run Get-MailboxServer and look at the results, you’ll see that the GroupMetricsGenerationEnabled setting defaults to $false.

Where does the GM data come from? That’s the rub. Exchange 2010 always generates GM data on the server that generates the OAB but only if there is an OAB generated. If you use the default Exchange install settings, you’ll get GM data even though it may look like GM generation is turned off. On the other hand, if you turn off OAB generation, you get no GM data until you manually enable GM generation. Neither of these behaviors are documented as clearly as they should be. The “Understanding Group Metrics” topic does mention the latter point, but it took some work to find the topic in the first place. If you do what most admins will do and start searching for info on GroupMetricsGenerationEnabled you’re not likely to find it. Hopefully this will be fixed in a forthcoming update to the documentation.

(Thanks to EJ Dyksen, Nate Waddoups, and Robert Gillies of Microsoft for helping figure out what was going on with this stuff.)

Comments Off on Group Metrics and Exchange 2010 MailTips

Filed under UC&C

Playing Exchange 2010 protected voice mail messages

Exchange 2010 offers protected voice mail that works roughly like the “mark as private” option that many legacy voicemail systems provide. The difference is that Exchange 2010 uses Active Directory Rights Management Service (AD RMS) to apply restrictions to the message that prevent clients from forwarding it. This gives the same protection as legacy VM systems, which implemented message privacy by keeping VM recipients from forwarding messages.

This is a nifty idea, given that it ties together Exchange UM with AD RMS in a logical way. It has some implications, though, that may not be obvious at first glance.

First, of course, is that you have to use a compatible client to play the voice message. A client that doesn’t support AD RMS won’t even see that the message has an audio attachment. It just shows up as the familiar “this message is protected with…” text. In this context, “compatible” means Outlook 2007, Outlook 2010, or OWA 2010. There’s no Mac client (yet; the forthcoming version of Outlook for Mac is alleged to support AD RMS messages), nor are there mobile clients.

Second, when you play the message, the way you play it may vary according to the policies in effect on your system. The UM mailbox policy defines a setting named “Allow multimedia playback of protected voice messages“. When this setting is false (e.g. when it does not allow multimedia playback), users can only play protected voice mail messages through the Exchange Play on Phone mechanism or through Outlook Voice Access (e.g. over the phone), not through the inline media players in Outlook and OWA. This is useful in some contexts to prevent users from playing sensitive messages on their laptop speakers at the coffee shop, at high volume in a cubicle farm, and so on.

Unfortunately, the documentation says this setting is set to false by default… in other words, the default settings (according to the docs) only let you play protected VMs on the phone. In reality, the settings is true by default, so that users can play protected messages back on the phone or through the local media player. In other words, the docs are 100% wrong. I blame this on the fact that the attribute name in the UM mailbox policy is RequireProtectedPlayOnPhone– the opposite wording. If “require X” is false, that’s the same as “allow not-X” being true. So, this is now bugged with the Exchange UE team.

In playing with this feature, I also wasn’t able to make Exchange protected voice mail messages show up consistently in Communicator’s VM notification system. I think that’s because my test machine was using Outlook 2007, in cached mode; the protected VMs didn’t show up in its “Voice Mail” search folder either. I’ll have to test this some more with an Outlook 2010 machine to see what happens, but my expectation is that Communicator should show protected VMs just like it does normal ones.

Comments Off on Playing Exchange 2010 protected voice mail messages

Filed under UC&C

Wrapping up my bachelor week

Last Saturday was my 41st birthday. Thanks to all who shared birthday wishes with me– I appreciate the positive energy! I got some great gifts from my family, including COD:MW2, which I didn’t even open until I finished Stephen King’s latest book (Under the Dome). My mom sent me a copy of David McCandless‘ spectacular The Visual Miscellaneum, which I’ve been very much enjoying. Some unknown benefactor also sent me a Cop Tool
, which I’d had on my Amazon wish list.

On Monday, I was in Redmond teaching the MCM unified messaging class– always a fun gig. I’ve clearly lost a lot of my good travel habits, as I forgot both my laptop charger and my iPhone charge/sync cable. I got to have lunch with Tim, though, so that was a big plus. The best part: it was a very short trip, with only one night away from home.

Tuesday Arlene left for her “New Moon” sabbatical, so the boys and I have been baching it since. Tuesday night there was a youth activity at church, and Tom had campout prep time with his Scout troop, so Matt came to the activity with me. Wednesday Matt and I went to his Cub Scout pack meeting, and Thursday David and I had a home teaching appointment. I’d like to say that we had nutritious home-cooked meals, but… well, not so much. Enough said about that.

Yesterday Tom and Dave had a Scout campout at New Brighton State Beach, so Matt and I played some Lego Star Wars, had a delicious meal at the local Red Robin, and watched UP. (Interestingly, Disney’s making a rental version of the disc– it had more commercials, no special features, and no way to skip to the menu.)

This morning I slept in until 0820 (luxury!), then Matt and I watched Ohio State beat Michigan, did some laundry, and waited for the electrician to come. Shortly we’ll go pick up the boys from their campout, then it’s off to the Scout Store for some uniform items. I don’t know what we’ll do for dinner, but it’ll be something simple.

I’m certainly looking forward to tomorrow for two reasons. First, my wonderful wife is coming back. Second, it’s a Sunday, which means a slower-paced Sabbath day to help recover from the hectic week. Peace out.

2 Comments

Filed under Friends & Family, Musings

A real-life Exchange 2010 DAG success story

We currently have a two-node database availability group (DAG) protecting our mailbox databases. Over the weekend, a person or persons unknown shut down the physical server hosting one of the DAG members. No one, including me, noticed any difference— all our users continued to work normally.

Failover was completely seamless, and neither our Outlook nor OWA nor mobile users contacted me to complain. I only became aware of the problem when I was troubleshooting our back pressure incident.

Exchange 2010 rocks!

Comments Off on A real-life Exchange 2010 DAG success story

Filed under UC&C

Exchange 2010 back pressure

So, over the weekend my users stopped getting mail from external senders. No one reported it until yesterday; I happened to be in Redmond teaching the MCM Exchange UM course, so I didn’t find out about it this morning. A quick check of the queues revealed that there was no mail backing up on any of the Exchange servers, so I sent a few test messages. The test messages never arrived. However, mail from internal users was arriving just fine. “Couldn’t be back pressure,” I reasoned, “because the server’s still accepting connections.”

I dug a little deeper and found that our Linux MX host had a ton of queued mail– all with “4.3.1 insufficient system resources” errors . Of course, that was a dead giveaway. I checked the system event log, found an event 15006 from Saturday night: low disk space had forced Exchange to stop accepting messages. After a little disk fu, the transport service again began accepting messages– but why was any mail arriving?

It turns out that Exchange 2010 back pressure handling has a major difference from Exchange 2007. In 2007, if disk space or CPU become a bottleneck, the transport will stop accepting SMTP connections. In Exchange 2010, it will still accept the connections, it just won’t accept the messages. There are also some nuances (explained here), too. For example, the transport will attempt to keep accepting messages from other Exchange servers unless resources get really, really tight; the first thing it stops doing is accepting messages from external servers.

Exchange 2010 can also throttle the flow of incoming messages as a back pressure reliever, but that’s a topic for another day…

1 Comment

Filed under UC&C

Exchange 2010 Deployment Assistant launches

Now this is a neat idea; I wish I’d thought of it.

Microsoft’s released the Exchange 2010 Deployment Assistant, a web site that interviews you about what your deployment plans are and then assembles a customized subset of the Exchange 2010 documentation for you.

You start by indicating whether you’re moving from an existing deployment (either 2003, 2007, or mixed) or creating a new one. Once you’ve done that, you answer questions (such as "will you be using public folders?" or "do you plan to deploy unified messaging?"), and you get a checklist like this one:

eda-sample

The tool is clearly still in the early stages of development; it only includes content for upgrading from pure Exchange 2003 environments. However, it’s an improvement over the old deployment wizard in two major ways. First, it’s more highly customized for your particular migration plans. Second, it gives you a single point of access to everything you need to know about a particular topic (like installing a mailbox server).

I’m looking forward to seeing how the product group improves the tool in future releases. Check it out and you’ll see what I mean.

2 Comments

Filed under UC&C

Cisco turns PostPath into hosted service

I’ll ignore the easy route of poking fun at Cisco’s massive product introduction. 61 collaboration and communications product? That’s not a strategy; it’s a yard sale. Even IBM does a better job at acquiring others’ technologies and making them into something cohesive (well, except for Workplace Messaging, but why beat that dead horse again?) Instead, I want to dig a little deeper into Cisco’s announcement of Cisco WebEx Mail—not too deep, since I haven’t had time to watch the videos from Cisco’s virtual launch event. They won’t play on Windows 7, using either IE8 or Firefox 3.5. Oh well. (Also: Cisco, your video portal is weak sauce compared to PKS. Call 3Sharp, stat!)

WebEx Mail is based on Cisco’s PostPath acquisition. After the purchase, my guess was that Cisco would turn PostPath into an e-mail appliance that could nestle in a rack next to other Cisco gear. Turns out I was wrong; instead, Cisco’s turned it into a hosted service. This is an interesting play for a couple of reasons. One is that a historic PostPath weakness is the admin experience. Keeping customers from being exposed to that level of awfulness is a great idea. Another is that offering a black-box hosting solution plays to PostPath’s strength: mostly seamless interop with Outlook.

If you compare the last release of PostPath (which emulated Exchange 2003) to Exchange 2007, you could argue that some of the storage and performance improvements in Exchange 2007 were obviated by the fact that PostPath uses a completely different method of message storage. However, in the testing Tim and I did, we documented lots of other Exchange 2007 improvements (PowerShell, CCR/SCR, full Exchange ActiveSync support, and MRM, to name a few) that PostPath didn’t have.

In the interval since Cisco bought PostPath, I’m sure they’ve made improvements. So has Microsoft, though. Exchange 2010 offers a number of hosting-oriented features, but the biggest is probably the option to have seamless interoperability between hosted Exchange and on-premises servers. Being able to do an online mailbox move between the cloud and your own server room is pretty darn useful. I haven’t seen enough details to tell whether Cisco’s claim "frictionless migration" is real or baloney. In addition, Exchange 2010 offers a very powerful set of confidentiality tools: between Outlook protection rules and IRM in transport rules, you can easily set up an environment such that your hosters can’t read your mail, no matter their motivation.

Another area where WebEx Mail appears to fall short: integration. Of course, we’re all familiar with the integration between Outlook, Communicator, Exchange, SharePoint, and other MS products. Less familiar is the fact that you can take advantage of that integration using Microsoft’s BPOS hosting offering, too. Does Cisco have an equivalent? Not that I can tell. Are they working on one? My guess is yes, but delivering a seamless experience is not an easy problem to solve, and Cisco is hampered by having lots of individual products that have to be sewn together. Seems like MS has a clear lead in this area.

Props to Cisco for describing their security infrastructure, though. This white paper makes clear what security measures they use for various parts of their system. In particular, they call out security policy, physical security, and auditing, and they mention that they follow the NIST STIGs for server hardening. This is just the kind of detail that we need to evaluate cloud-based service security, and it stands in sharp contrast to Google, which says nothing about their security. Even Microsoft basically says "hey, we’re SAS70 certified, trust us"—they can do better.

Bonus interlude: Windows 7? What’s that? Cisco apparently never heard of it.

One last thought: terrible name. Most people who know the WebEx brand associate it with conferencing, not e-mail. Most people who know the Cisco name don’t associate it with WebEx (and probably vice versa). Surely Cisco could have done better than this. I’m reminded of the old Jerry Pournelle jape about AT&T: if they bought Kentucky Fried Chicken they’d advertise it as "hot, dead chicken."

I’ll have more to say about WebEx Mail once I’ve had a chance to dig into it more thoroughly.

Comments Off on Cisco turns PostPath into hosted service

Filed under UC&C

Walking Dead (Rucka)

This is Rucka’s latest book in the Atticus Kodiak story arc that started with Finder, and in my opinion it’s the best of the series so far.

The book opens with Kodiak and Alena Ciskova, the assassin from Critical Space, living in hiding in Kobuleti, a small town on the Black Sea. When their neighbor’s family is killed, and the neighbor’s 14-year-old daughter abducted, Kodiak begins to try to figure out what happened to her.

Mayhem ensues, along with visits to Amsterdam, Turkey, and Las Vegas (among others).

Rucka isn’t subtle. The theme of this book—the trafficking and sexual exploitation of young girls – makes for supremely unpleasant reading. Kodiak is forced to confront some despicable people, and this gives Rucka the opportunity to delve into some ends-justify-the-means internal dialogue that helped flesh out Kodiak’s character beyond that of a bodyguard-turned-reluctant-assassin.

Highly recommended.

Comments Off on Walking Dead (Rucka)

Filed under Reviews