Archive for December, 2009

2010 Plans – Phase 1: Production Network

Tuesday, December 22nd, 2009

The first thing I need to do this year is finish getting my production network in order.

  • Document the existing production network.

Status: This has been completed. Well as completed as such a thing can be. It will always be in flux. Please see http://wiki.knownelement.com/index.php/Network_Stuff for details. It’s a very long page, and is quite thorough.

  • Backups and restores

Status: This is now completed. The production server, production server replica and development server is backed up to an external USB drive on a nightly basis. Home directories and system configuration (/etc and all mysql databases). Cisco gear is backed up nightly via rancid.

  • Redo development rack wiring from scratch and clean up office.

A few months ago Rufus and I redid the rack from scratch. Very happy with the layout (documented at the above wiki link), but the wiring leaves a bit to be desired.

Status: Completed.

  1. The production Ethernet and power has now been cleaned up. Much better then before. Liberal use of zipties, and more slack.
  2. Dev wiring is completed.
  3. Cleaned up office and outside storage space. I can now find things very quickly. :)

Denial of insight

Wednesday, December 9th, 2009

Me no love centralized systems not under my control long time.

I’m all about open source, distributed systems.

Earlier this year I

1) Got off of facebook (it was just mirroring my twitter updates anyway).
2) Stopped using google services (though one of my blogs had other authors with g00g accounts so a blog of mine is still there) (I use live search).
3) Started using Status.net (twitter replacement)
4) Wordpress/mediawiki/redmine/trac etc for blogs/doc/knowledge/project management

Now twitter has proven to be very interesting and useful to me, and to many other folks (iran situation was/is particularly illustrative of uses).

With virtual machine images for all of the above (or apt-get or wget src, untar, mysql create, appurl/install.php) there is no excuse to not do your own stuff in my opinion. I get the whole time management thing. I just decided that owning my data was critical.

Now I host this on my home server, attached to an AT&T DSL line. So if that goes down (whether for layer 1-7 reasons, or layer 8) then I’m off the air. This is where things like autonomous mesh comes in (see http://netsukuku.freaknet.org/ for example).

However….. how do we solve search? How do we make that distributed and under control of no one? Do we care about searching the internetz or do we focus on vertical portals?

Right now a  duoply exists on search:

1) bing (powers yahoo and of course ms search)
2) google

I don’t know how to solve that problem. Do people here? How many of you have thought about this? Is there enough open source talent and spare compute resources to build internet scale applications in a sustainable manner? What sort of forums discuss this stuff with a good signal to noise ratio?

There is a little something called “denial of insight”, and is a very real concern of certain large three letter agencies and some of the larger public safety agencies in the United States. Why do you think there is an opensoruce.gov portal feeding into intelink, and the Homeland Security Operations Center? They want to know what’s going on, and they want to know now.  The US govt has a large enough budget to independently verify open source intelligence with their own observers. The majority of us average citizens do not. I happen to have friends at a public safety agency in Los Angeles which relies very heavily on real time open source intelligence as well as their own intelligence assets. Without these data sources people die. Denial of insight is ossed around at Gartner conferences and meetings where the target customers reps wouldn’t even provide you their last name (and you could be fairly certain the first name of bob or jim was also made up). It’s not getting a lot o!
f main stream attention. Google and Bing don’t want it getting attention for obvious reasons.

Denial of insight is actively practiced by corporate and government espionage organizations. Think blackhat SEO (what you thought all the botnets were used for spam and DDOS of gambling organizations) meets highly targeted phishing (i’ve seen 0 day exploits against very specific server/os/iis plugin combinations at a high value target) meets DNS cache poisoning (one vulnerable linksys router of one employeee out of a 100k user organization logged into the corporate VPN = foothold) meets SSL mitm (defcon presentations are usually at the tail end of the previous generations use of exploit methodologies).

Thank you for affirming google should be avoided. In fact, now that I think about it, there’s all this superciliousness towards all things Microsoft in this group but for some reason Google’s offenses are so much more egregious and yet it all goes kind of “… but Google is a our friend. Google, please violate me some more.”

I have noticed that to a certain extent, however it appears to be dropping off, as they continue to expand their reach and make people nervous.  And now they are releasing an operating system. :)

Sorry for the rambling…. I just want people to think deeper about this.

They said it

Tuesday, December 8th, 2009

My guess is that most people just ignore you. Which might be a shame,
because your point of view is different enough from the average member
of the list that you are valuable here just by being different. I think
of you as a pompous egomaniac nut case, but that’s just my opinion; I
have no Greek or Latin quotations to back it up and no 5-point treatise
about how some part of scripture says you’re a bad person. It’s just
what I believe, based entirely on what you’ve said here.

In your world you’re a fancy professor with power and authority. You’re
probably the intellectual terror of [your] postal code. Here in my
world of cyberspace you’re just an arrogant twit who knows Greek. If
you want to spend your time making impassioned arguments to the people
who already agree with you, then just keep doing what you’re doing. If
your goal is to change somebody’s mind about one of the topics that you
address, then you need to learn both some manners and some rhetorical
technique. If you want to teach somebody, to expand somebody’s
understanding, to increase the number of people in the world who agree
with you, then please listen to me, because here in cyberspace I’m the
guy with the power and experience and authority and you’re just an
insect. …

Let me give you a few pointers on being taken more seriously.

* First, you have the habit of making arguments from authority, rather
than as an individual. Sometimes it is important to establish
your authority in some area, in much the same way that an expert
witness in a courtroom establishes his credibility and authority on the
topic for which he is to testify.

You may think of yourself as an authority on the matters that you are
expounding on, but we don’t yet. Your academic pedigree and your
quotations from ancient languages are just bluster here on the Internet.

The general principle here in cyberspace is that we participate as
individuals and not as representatives of authoritative bodies. You can
earn the right to wield the authority of some body on whose behalf you
speak, but you don’t walk in our door holding that authority just
because you are B.A., M.A., Ph.D. and have a white beard.

[...]

If your goal in writing to the Internet is to change somebody’s mind
about some topic that you care about, then you really must learn to
communicate in a very different style.

* Second, you are constantly trying to impress us with how much better
educated you are than we are. This might be related to the first item,
above, since if you’re going to be arguing from authority then you
probably need to keep establishing that you have some authority. I
think you’ll find that this is a pretty highly educated crowd, but you
don’t catch us relying on our academic pedigrees instead of on our
ability to communicate. I am quite certain that I have absolutely as
many degrees as you do, and I am completely certain that I know many
more obscure languages than you do, but if I can’t win an argument with
you based on what I say and how I say it, then my degrees are all just
puffery, aren’t they?

But in establishing a precedent of authority and pedigree as the basis
for power, you are treading on dangerous ground. Here in cyberspace you
aren’t in your world, you’re in mine. If you make the mistake of trying
to establish some ground rules in which argument by authority is the
norm, then you’d better make sure that you don’t ruffle the feathers of
somebody who has more of it than you do. I can make the Internet do
anything I want it to do. I can perform the digital equivalent of
heaving lightning bolts in front of your chariot, and rending the earth
beneath your mail reader. I can turn your hard disk into a toad. I’m a
technocrat. But I won’t, because we professionals don’t act that way. I
don’t have to brandish my power and authority and education and
knowledge of arcana in order to get people to listen to me. I try to
make a crisp argument and let my words carry that argument. If I fail,
then I don’t go running for some Greek derivation or invoke some
long-dead philosopher. Heck, I don’t even go running for analogies from
Clint Eastwood’s “Unforgiven”, which is every bit as fine a piece of
literature as Aristophanes.

* Third, you convey a complete disdain for your reader. Your writing
style reeks of the belief that your time is so much more important than
the time of your reader that you can’t be bothered to write correctly
or to edit what you write. If you’d like to have more readers, then it
would be very worthwhile for you to be more respectful of them. Among
other things, this means that you need to write in a way that makes
it easier for your reader to read: use real sentences with real
capital letters at the beginnings of them, and do try to spell as many
words right as you can muster.

So mind your manners, learn to communicate better, stop insulting your
readers, and then come back and contribute your intellect to [this]
mailing list. If you keep acting like a jerk I’m going to wake
up some morning, yawn, make a cup of tea, and then vaporize your
mailbox. Sometimes we supremely powerful technocrats just have a bad
day.