Ubuntu 9.10 Launch on Oct 29!
You all know I use Ubuntu heavily. I love the application management and update scheme used – APT.
A new version of Ubuntu is scheduled for release this week – 9.10. While this isn’t an LTS – Long Term Support release, so it isn’t suitable for production servers, it does have enough new and useful things to be worth migration consideration.
I plan to migrate my main desktop to it, but I’ll really be waiting for xubuntu, the lighter weight GUI version.
As I consider the new features included and made significantly easier, I came across an article where someone compared the so-called new features in Windows7 with other OSes.
Big new features in Ubuntu 9.10, from my point of view?
- EXT4 – this will be the default file system. Testing has shown it to be faster than most other alternatives. I’ll be staying with JFS on physical hardware and ext3 on virtual hardware. IMHO, more time is needed before I’ll risk my data. I really want ZFS, but since the license isn’t working with GNU, my best hope is btrfs at some future date. Linus is running btrfs on his daily workstation, so that’s a good sign.
- Cloud Computing infrastructure with Eucalyptus. Eucalyptus was introduced in an earlier release, but I didn’t use it. Ok, so it isn’t new, but it is_ new to me._ This is both compute and storage infrastructure that is compatible with Amazon EC2 and S3. Ubuntu has decided to call this UEC going forward. Very nice.
- KVM – Ubuntu has decided to leave my beloved Xen for KVM. That means it will be easier for me to change from Xen to KVM for virtual servers with the next LTS server release. I’ll need a few months to get ready and test.
- Easy HOME directory encryption – Don’t know that I’ll use this, but I will encrypt a subdirectory. Yes, I know TrueCrypt has been available for a long time and is cross platform. Ubuntu adds an auto-mount / dis-mount as you log in and out of your account. The resulting encryption can be moved, but only with the key provided at create time.
- Bluetooth tethering with cell phones. This means you’ll be able to use a cell data connection from your laptop, fairly easily. Great if you travel much.
- New kernel – In every new kernel, there are lots of new features that don’t matter to most of us and a few new features that matter a bunch. My kernels are so old that there are many, many new to me features. Some are security and others are performance related. KVM is built-into the kernel now. That’s better than getting Xen updates that don’t get tested well enough and occasionally break.
Ubuntu is also excited about free cloud storage they will offer. Of course, there’s a storage amount that will force a payment, but ease of use will make this useful to many people. Even if all you do is share your desktop settings or back them up to the cloud, you’ll be better off.
Anyway – Look for bittorrent downloads on 10/29 and get yours running. Seed after you complete for the entire weekend to help your fellow users out, please.
How to End Private Data Leaks?
It is really simple to end all the personal data leaks that we read about all the time, make the penalty of the leak so high that no company would ever allow it to happen. Further, make the fine be paid directly to the impacted persons, so it isn’t the class action lawyer or some neutral party being paid.
A few years ago, my college leaked 20,000 transcripts on the internet. Mine was not one of the leaked, but if I were going to cost $2,000, per instance, for the fine, I suspect my University would be more careful. That fine would have cost them $40M. Yep, they wouldn’t leak anything, that’s for certain.
There are a number of systems out now that are known to leak private data, MySpace, Facebook, and Paypal are constantly found to be deficient with security practices. If there was a $2,000 fine for each failure, I bet they’d fix it or refuse all private data. Or, they’d go out of business, which would give them an opportunity to come back with better security after bankruptcy. Further, venture capitol would demand excellent security processes to prevent any private data breaches.
How is any of this bad? I suppose the companies (slime?) who make money offering bogus privacy insurance would be harmed. They would convert into audit companies or fold. I suspect lawsuits against Microsoft for common program breaches would increase, forcing them to create a secure OS if they wanted to retain customers. I can get behind that. The people and companies certifying private data won’t be leaked will be held accountable if their system fails too.
Is financial data the only private data or is anything not found in either the telephone book or government documents to be considered private? Is there an expectation of privacy for all other information that should be protected?
Reinstalling Windows? Get Common Apps at Once 1
http://ninite.com/ helps make installation of commonly used applications easy. Lifehacker covered this tool nicely.
If you install test and virtual machines, this is a real time saver. A few clicks to select your apps, I selected about 10, then about 5 minutes of downloads and installs. Only once did I have to “Accept”, but that was a Windows7 UAC.
Have you seen any issues with this solution? Let us know.
For example, I did have to decrease the security so ninite could create and download the custom installation package, but that was expected. That part was expected AND necessary. After all the installations were completed, I removed it from my trusted sites. Good enough.
Some of the installed apps were not the latest and had updates available. Doing an update rather than searching for the apps, downloading, installing, is much quicker. Of course, addons for Firefox still needed to be added.
Which apps did I install?
- Firefox
- Thunderbird
- OpenOffice
- Opera
- Skype
- IrfanView
- KMplayer
- VLC
- Java 6
- Foxit
- WinSCP
- Putty
- Notepad++
Which Firefox addons did I install?
- NoScript
- Sage (Sage Too forbids AdBlock)
- AdBlock Plus
- Scroogle
- Tree Style Tab
You don’t want too many firefox addons or it will get slow.
Internet Hosting Setup
To get your piece of the internet as it were, you need a host, DNS, and a domain registrar. Some companies make this really easy as a 1-stop shop. Yes, it is easier, but you really don’t want to do it that way.
Verify Your Backups, Please.
Step 1 – backup your data.
Step 2 – recover your data as a test from a friends home or business.
The stuff you learn in step 2 is critical. We don’t backup data just to see it complete. We intend to get that data back at some point.
- Do you have access to the encryption keys used during backup? No encryption? – WHAT!? ARE YOU CRAZY?
- Do you have enough of the backup software (or can you down load it) to recover your data from bare metal, if needed?
Testing is critical to know what does and what doesn’t work. Don’t forget to fix the uncovered restore issues.
Security-what services to turn off?
You hear all the time that to be secure on your PC or server, you need to disable unused services. A few of us have done this, but even for the most experienced person, knowing what each service does isn’t easy.
What are we all to do?
How do you explain to a non-technical person what they need to do?
This guy at BlackViper.com is a trusted source of this type of information. At a minimum, turn off MS-Messenger if you don’t use Microsoft Live. You know, that icon that nags you to login using your old passport login.
BTW, I’ve NEVER had an MS passport login. It hasn’t always been easy since they NAG, but it was worth it to me.
One-Time Passwords
Came across an old and interesting solution to login security … one-time passwords.
OTPW – A one-time password login package
Links
These are the main links I send friends:
- Slickdeals
- BensBargains
- Woot
- /.
- Freshmeat
- Lifehacker
- Linux.com
- http://www.voipgo.com/
- http://www.hotwire.com/
- Weather-Marietta
- http://bigal.jdpfu.com/
- Security Now!
- SwansonRules
- http://manifestinvesting.com/ – [[NAIC-based|http://www.betterinvesting.org/]] Investing Site; [[M* Dashboard:TinCup|http://www.manifestinvesting.com/dashboard/20]]; [[M* Dashboard: Solomon’s Select|http://www.manifestinvesting.com/dashboard/334]] [[M* Dashboard: NAIC Growth|http://www.manifestinvesting.com/dashboard/1222]] [[NAIC Discussions|http://community.compuserve.com/n/pfx/forum.aspx?webtag=ws-naic]] on CompuServ
- http://www.stockcentral.com/
- http://earnings.com/ – quarterly company conference calls.
- http://portableapps.com/
- http://portablefreeware.com/
- PDALinks
- http://pda.jdpfu.com/
- http://www.jdpfu.com/dr/ – Disaster Recovery Lists for Home Evacuation
- http://www.zkoss.org/zkdemo/userguide/ – ZK – Simple AJAX/Scripting WOW!
- http://give.org
- http://charitynavigator.org
- http://RetailMeNot.com
- http://BugMeNot.com
Best Spam Filter - 3 August 2006
/. article – which spam filter is best?
Fast forward to 39:42 into the movie to see his rankings.
Here’s what I saw (YMMV):
1) bogofilter
2) ijsSPAM2
3) spamprobe
4) spamasas-b (learning only)
5) crmSPAM3 (1:40 ham eaten)
Of course, he immediately showed other views of the data and had different rankings. Basically, you need to decide how much real email you are willing to lose to fight any spam getting in.