Tuesday, November 23, 2004

WPA Wireless Security Update in Windows XP: SP2 includes WPA

Overview of the WPA Wireless Security Update in Windows XP

I'd been wondering if I could switch my home WLAN from WEP to WPA. The clients are iBooks, but occasionally I need to add a Windows portable to the mix. Looks like that may be possible now, at least with SP2.
For wireless clients that are running Windows XP Service Pack 1 (SP1) or Windows Server 2003 and that are using a wireless network adapter that supports the Wireless Zero Configuration service, you must obtain and install the Windows WPA Client. For wireless clients that are running Windows XP service pack 2 (SP2) and that are using a wireless network adapter that supports the Wireless Zero Configuration service, the Windows WPA Client is included in Windows XP SP2.


http://support.microsoft.com/kb/826942 instructs how to download the WPA client for XP SP1.

iKey 2 with an Adam Engst authored manual too

TidBITS#756/22-Nov-04: "Take Control Expands with iKey 2 Manual"

iKey 2 is an OS X automation tool. I'd not have considered testing it, but now I see it comes with a manual authored by Adam Engst. That puts it in a whole new light. I love manuals (I know, it's a perversion). So now I'll try the software.

Software who's primary sale point is the manual?

What a revolutionary idea.

Why Macs are so vulnerable to bad RAM

MacInTouch Home Page

Because they've missed a step in computer evolution:
I manage about 150 Macs in a creative agency. Over the last year and a half I have noticed a sharp increase in the discovery of bad RAM.

My fifty or so G5s (all dual 1.8 or 2.0) have been subject to about 5 instances of bad RAM. That's a ridiculously high percentage (granted we have 4 DIMMs in each, but please...). I don't understand why this would suddenly become such a bigger problem. We have more mirrored-door machines (and more DIMMs) and don't have anywhere near this level of trouble. I pull RAM from machines at the first sign of multiple kernel panics now. I never used to think that way, but if a user is getting panics, the odds are these days that it's the hardware, not my system.

What's more (and most importantly) is that none of the available utilities diagnose the bad DIMMs. I have to send them to a break/fix shop with a hardware-based RAM tester to see if the RAM is OK. I recently ordered 4 GBbytes from CDW and immediately just sent it to the shop for a check. 1 of the 8 was bad. I'm now pricing a RAM tester to use in-house so I can be rest assured about what I'm putting in my machines.

The bottom line is that this is a major quality concern that both Apple and the VARs need to take more seriously. Aren't they testing this stuff themselves? Why does it seem like G5 RAM is much more prone to problems? My main point is to check that stuff (with a hardware-based diagnostic) and don't be surprised to find your OS is fine but your RAM is not.

[The Xserve G5 is the only Mac that bothers to use ECC memory to avoid this pernicious problem. Here's Apple's description from the Xserve G5 Architecture page. -MacInTouch:

Xserve G5 uses Error Correction Code (ECC) logic to protect the system from corrupt data and transmission errors. Each DIMM has an extra memory module that stores checksum data for every transaction. The system controller uses this ECC data to identify single-bit errors and corrects them on the fly, preventing unplanned system shutdowns. In the rare event of multiple-bit errors, the system controller detects the error and triggers a system notification to prevent bad data from corrupting further operations. You can set the Server Monitor software to alert you if error rates exceed the defined threshold.]

PC's use ECC memory. So vendors know the ECC will catch errors of a certain type -- it's no longer cost effective to prevent those errors from occurring. This makes sense -- you get more reliable memory for less money.

Problem though -- Macs don't use ECC. So they get the less reliable and cheaper memory -- without the compensatory mechanism. Bad news.

Monday, November 22, 2004

Aren't you glad you use Firefox/Safari/Opera/Omni?

Bofra exploit hits our ad serving supplier | The Register: "Important notice Early on Saturday morning some banner advertising served for The Register by third party ad serving company Falk AG became infected with the Bofra/IFrame exploit. The Register suspended ad serving by this company on discovery of the problem.

Bofra/IFrame is a currently unpatched exploit which affects Internet Explorer 6.0 on all Windows platforms bar Windows XP SP2. If you may have visited The Register between 6am and 12.30pm GMT on Saturday, Nov 20 using any Windows platform bar XP SP2 we strongly advise you to check your machine with up to date anti-virus software, to install SP2 if you are running Windows XP, and to strongly consider running an alternative browser, at least until Microsoft deals with the issue.

We have asked Falk for an explanation and for further details of the incident, and pending this we do not intend to restart ad-serving via the company. Falk will, we understand, be making a statement regarding the matter on Monday.

Although the matter was beyond our direct control, we do not regard it as acceptable for any Register reader to be exposed in this way, and wish to apologise sincerely to anyone who was. Further information about this particular exploit is available here or here. "

Don't buy Lexmark products?

Lexmark accused of installing spyware - ZDNet UK News: "Reports on the comp.periphs.printers Usenet newsgroup claim that Lexmark has been planting spyware on its customers' PCs in the form of undocumented software that monitors the use of its printers and silently reports back to a Lexmark-owned company Web site.

One user said that after initially denying the allegations, Lexmark acknowledged installing tracking software that reported printer and cartridge use back to the company for survey purposes. He claimed that Lexmark said no personal data was taken by the program, and that it was impossible to identify anyone by it.

However, users installing the software are prompted to fill in a registration form including their name and the serial number of the product.

The newsgroup posting claims that the program, found on the X5250 installation software, embeds itself in the registry and monitors the use of the printer through DLL files in the c:\program_files\lexmark500 folder.

The program sends the information, which includes print and scanning data, to the URL www.lxkcc1.com. According to the Internet Whois database, this domain name belongs to Lexmark International in Kentucky."

If true, they are idiots.

Is OS X 10.3.3 the sweet spot?

MacInTouch Home Page
['Photo Tim'] I finally have had enough dealing with Apple's updates. So on Thursday I did a 'archive & install' and reverted Panther back to a stock Mac OS X 10.3 install. Then I ran the combo updater to 10.3.3. I also reinstalled the latest ATi drivers. All is well; everything is very snappy and that is that.

One thing to note, if someone is going to do this: Macromedia apps need a 'reset.'...

Every OS release has a "sweet spot" -- especially for older hardware. I think the G3s are moving off the radar. I wonder if 10.3.3 is the best choice for a G3 iBook.

Troubleshoot exchange/outlook synchronization problems

How to troubleshoot synchronization problems when you synchronize your Exchange Server mailbox with your .ost file in Outlook 2000

Despite the title these problems occur with Outlook 2003, even in the new synchronization mode. No wonder it's hard to reliably sync a PDA with Outlook/Exchange.