Apr 072008
 

I loath spam; all those unsolicited emails that advertise herbal mortgages, pills that will lower the interest rate, and all those lottery wins from places I’ve never heard of. Of course everyone else does too.

But what about emails that are “near spam” ? Say you bought something online 5 years ago from some company or other, and haven’t been near them since (nothing that was wrong, you just haven’t gotten into the habit of buying socks online). Now of course, you receive this “sock newsletter” once a month. Now perhaps you were once interested, or on a very slow Sunday you like to read about socks. Perhaps.

Of course you didn’t just buy a pair of socks 5 years ago. You’ve been buying stuff ever since, and everybody is desperate to get your email address to push virtual catalogues into your over cluttered Inbox. You could go and visit the unsubscribe links to get your address removed from each and every list out there.

But someone told you once that unsubscribe links are dangerous because they’re used by spammers to verify addresses, and besides which it would take you days to get unsubscribed from all the rubbish. And of course just occasionally you take a peek at one of the emails and it has something in it you want to know … a special offer or something.

What is needed is a way of keeping “near spam” emails under control. A central place to go to indicate your preferences (“no near spam”, “just one a day”, “as much as you want to send me”, “don’t send me those stupid messages that tell me I have to use a browser to view this email”). I’m currently automatically filtering “near spams” into a folder where I can ignore them … which is something that the sales critters who spew them out certainly don’t want!

Nov 232007
 

Today the UK’s Information Commissioner announced that today’s young (and in some cases not so young!) are putting their future careers at risk with some of their ‘riskier’ posts on social networking sites such as Facebook. In addition they pointed out that they were risking identity theft by putting so much personal information online.

It is worth mentioning that information can live online for a very long time … forever if the people behind Archive.Org have their way. This is not necessarily a bad thing although it can come as a nasty shock to realise just how shallow one was as a youth!

But do employers really care what people put on their Facebook profiles ? Well I dare say some do, but they probably should not. I’ve had more than my fair share of ‘youthful excesses’ in the distant past, but I’ve been a reasonably productive employee for all of that time. Now some more conservative companies may be worried about people making an association between their Facebook profile and the company they work for … fair enough. It seems perfectly reasonable to have a policy to say that one’s Facebook profile should not be linked to one’s place of work.

But not to employ someone because their Facebook profile looks a little wild ? That probably counts as cutting off one’s nose to spite your face! And quite possibly may count as age discrimination!

Now I come to identity theft. It is true that having too many personal details online may well make you more subject to identity theft which is a serious problem (although not a new one!). But is eliminating personal details online the right way of tackling the problem ? We have also seen this week that people can be subjected to the risk of identity theft through no fault of their own. Those who do not follow computer security news closely, may not realise that this is a story that is regularly repeated although not usually on such a scale.

Whilst being careful about putting personal details online is undoubtedly good practice (because no other solution is going to arrive quickly) we need to think about better ways of defending against identity theft other than hiding personal details. I have no ideal how this might be done in detail, although one obvious thing occurs … to have multiple ‘keys’ which serve different purposes … perhaps a government ‘key’, a financial ‘key’, a ‘social networking key’ (for things like Facebook and online forums), and a ‘key’ to be used for employer identity purposes. Seperating these ‘keys’ would limit the damage if a leak did occur … essentially you would need to steal multiple ‘keys’ to steal someone’s identity.

The problem of identity theft is only going to get worse unless we do something better in the future. Basing one’s identity on things like address, birth date, etc. is not going to be anywhere near like secure enough. It has always been possible to steal someone’s identity if you have these details, but the pervasiveness of IT systems makes it easier.

In the computer security world there is a truism that ‘security through obscurity is no security at all’, and what we are currently doing to protect our identity is attempting to practice security through obscurity.

Nov 072007
 

I have been spending some time looking up information on ZFS for OSX because I’ve used ZFS under Solaris and would quite like it on my new Macbook. In many of the places I looked, there were tons of comments wondering why ZFS would be of any use for ordinary users. Oddly the responders indicating features that are more useful for servers than workstations. The doubters were responding with “So?”.

This is perhaps understandable because most of the information out there is for Solaris ZFS and tends to concentrate on the advantages for the server (and the server administrator). This is perhaps unfortunate because I can see plenty of advantages for ordinary users.

I will go through some of the advantages of ZFS that may work for ordinary users. In some cases I will give examples using a command-line. Apple will undoubtedly come up with a GUI for doing much of this, but I don’t have access to that version of OSX and the command-line still works.

ZFS Checks Writes

Unlike most conventional filesystems, ZFS does not assume that hard disks are perfect and uses checks on the data it writes to ensure that what gets read back is what was written. As each “block” is written to disk, ZFS will also write a checksum; when reading a “block” ZFS will verify that the block read matches the checksum.

This has already been commented on by people using ZFS under Solaris as showing up problematic disks that were thought to be fine. Who wants to lose data ?

This checksum checking that zfs does will not protect from the most common forms of data loss … hard disk failures or accidentally removing files. But it does protect against silent data corruption. As someone who has seen this personally, I can tell you it is more than a little scary with mysterious problems becoming more and more common. Protecting against this is probably the biggest feature of ZFS although it is not something that is immediately obvious.
ZFS Filesystems Are Easy To Create

So easy in fact that it frequently makes sense to create a filesystem where in the past we would create a directory. Why? So that it is very easy and quick to see who or what is using all that disk space that got eaten up since last week.

Lets assume you currently have a directory structure like :-

/Users/mike
/Users/john
/Users/stuart
/Users/stuart/music
/Users/stuart/photos

If those directories were ZFS filesystems you could instantly see how much disk space is in use for each with the command zfs list

% zfs list
NAME                                 USED   AVAIL   REFER   MOUNTPOINT
zpool0                               3.92G  23G     3.91M   /zpool0
zpool0/Users/mike                    112M   23G     112M    /Users/mike
zpool0/Users/john                    919M   23G     919M    /Users/john
zpool0/Users/stuart                  309M   23G     309M    /Users/stuart
zpool0/Users/stuart/music            78G    23G     78G     /Users/stuart/music
zpool0/Users/stuart/photos           12G    23G     12G     /Users/stuart/photos

With one very simple (and quick) command you can see that Stuart is using the most space in his ‘music’ folder … perhaps he has discovered Bittorrent! The equivalent for a series of directories on a normal filesystem can take a long time to complete.

With any luck Apple will modify the Finder so that alongside the option to create a new folder is a new option to “create a new folder as a ZFS filesstem” (or something more user-friendly).

It may seem silly to have many filesystems when we are used to filesystems that are fixed in size (or are adjustable but in limited ways), but zfs filesystems are allocated out of a common storage pool and grow and shrink as required.

ZFS Supports Snapshots

Heard of “Time Machine” ? Nifty isn’t it ?

Well ZFS snapshots do the same thing … only better. Time Machine is pretty much limited to an external hard disk which is all very well if you happen to have one with you, but not much use when you only have a single disk. ZFS snapshots work “in place” and are instantaneous. In addition you can create a snapshot when you want to … for instance just before starting to revise a large document so that if everything goes wrong you can quickly revert.

Time Machine has one little disadvantage … if you modify a very large file, it will need to duplicate the entire file multiple times. For instance if you have a 1Gbyte video that you are editing over multiple days, Time Machine will store the entire video every time it ‘checkpoints’ the filesystem. This can add up pretty quick, and could be a problem if you work on very large files. Zfs snapshots stores only the changes to the file (although an application can accidentally ‘break’ this) making it far more space efficient.

One thing that zfs snapshots does not do that Time Machine does, is to ensure you have a backup of your data on an external hard disk. The zfs equivalent is the zfs send command which sends a zfs snapshot “somewhere”. The somewhere could be to a zfs storage pool on an external hard disk, to a zfs pool on a remote server somewhere (for instance an external hard disk attached to your Mac at work to give you offsite backups), or even to a storage server that does not understand ZFS! And yes you can send “incrementals” in much the same way too.

Currently using zfs send (and the opposite zfs receive) requires inscrutable Unix commands, but somebody will soon come up with a friendlier way of doing it. Oh! It seems they already have!

Unfortunately I’ve found out that using ZFS with Leopard is currently (10.5.0) pretty difficult … the beta code for ZFS is hard to get hold of, and may not be too reliable. Funnily enough this mirrors what happened when Solaris 10 first came out … ZFS was not ready until the first update of Solaris 10!

Unfortunately it seems that Apple have retreated back from using ZFS in OSX which is a great shame, and until they come up with something better, we are stuck with HFS+, which means not only do we lack the features of a modern filesystem, but we are also stuck with slow fsck times. Ever wonder why sometimes that blue screen of a Mac starting sometimes takes much longer ? The chances are that it is because a filesystem is being checked – something that isn’t necessary with a modern filesystem.

Sep 212007
 

Well this is not so much a letter as just a rant because I’m very doubtful that anyone from Apple never mind Steve Jobs is likely to read this. But it is good to get a good rant off your chest and out there (which basically explains this whole site … it is not for you … it is for me). Especially after a few glasses of port!

I currently own an iPod video and have been thinking about buying a Macbook, but I have been doing some rethinking after the announcment of the iPod Classic. It seems that Apple have encrypted the iPod Classic firmware again (the Nano 2g firmware is also encrypted) and have added a hash to iTunes just to make things a little more difficult for those who like to do “unusual” things with their iPods.

I am a Rockbox user (I haven’t even used the normal firmware on my iPod except when I’ve booted it by mistake) mostly because most of my CDs have been encoded in OGG format and I really did not want to re-encode them in any other format because of how long it would take. So Apple have made money out of me because I purchased an iPod; I’m beginning to regret that because Apple seems to be determined to be the kind of business that I don’t want to fund.

First of all there is the encryption of the firmware. I am sure that Apple is aware that hackers have produced not only alternative firmwares but also a utility to patch the default firmware to make interesting changes. So why the encryption ? Obviously to make things difficult for the hackers. In some situations smaller companies may be forced to do something similar because larger companies want to “protect their intellectual property rights”, but Apple is in a dominant position in the portable music player music market … they are the ones who will be dictating the contract terms.

Secondly Apple changed iTunes in an attempt to lock out other music managers. The fact that this protection has been hacked and is no longer a problem is irrelevant … Apple showed their colours by making it difficult to use anything other than iTunes.

A few years ago when it was trendy, Apple embraced the open source model by releasing some of their operating system as open source. Despite apparently trying to improve their operating system by incorporating a open source filesystem (ZFS), they seem to be rapidly retreating from this position. Or at least giving the appearance of doing so. So perhaps their earlier embracement of open source was just a marketing move … something you might expect from Microsoft.

Apple is giving the impression of trying to become a company as user-hostile as Microsoft.

Sep 092007
 

Rather than look at what is right about the new iPod Touch as everyone else seems to be doing, what about looking at what is wrong with the new device ? There is apparently plenty to like about it, but there are a few problems. Some of which only apply to certain kinds of possible customer of course.

Where Are The Higher Capacity iTouches ?

8Gbytes and 16Gbytes are quite large for a flash-based device, but this is Apple’s flagship media player … compare the price with the iPod classic! So what options are there for something a bit more usable for those who like to carry all (or nearly all) of their music with them ? Obviously making a 32Gb or 128Gb model would require more flash chips than the single-chip based iTouch, and would cost a bit more. But why not give consumers the choice ?

Several years ago I said that the lowest capacity flash-player I would be interested in would be 32Gbytes or more. With an appropriate choice of encoding format I could still fit my full CD collection into a 32Gbyte player; not much chance of getting it into a 16Gbyte player!

What About SDHC Slot(s) ?

Apple seems to concentrate on the market segment who replaces their media player every couple of years, and their products show this … no easily replaceable battery, and no expandable storage. Now there are plenty of people who will buy new iPods as soon as they are announced, but there are also plenty of people who are more inclined to buy a player and stick with it until it breaks. This includes the poor who cannot afford to replace their player every two years.

Adding a bit of ‘future proofing’ to the iTouch is hardly going to stop the gadget freaks from replacing their player regularly, but will make things a bit better for those who do not (or cannot). Why not have a screw fastened case that allows the user to get at 2-4 SDHC slots (perhaps one or two already filled with the standard flash memory) so that they can grow the player themselves ?

Where Are The Audio Codecs?

Apple’s firmware for the iPods (and presumably iTouches) supports a very limited set of audio codecs; just compare with the list of codecs supported by Rockbox (an opensource firmware that runs on many Apple iPod players and many others as well). If a bunch of hackers working part-time can produce software that can support so many audio codecs, why can’t Apple?

Most people do not care (or even know) about audio codecs, but some do. As an example, I usually use the OGG format which is widely believed by audiophiles to offer the best quality at the lowest bitrate. In non-geek terms, that means I can fit more tracks on my iBox (a rockboxed-ipod) without compromising on quality. If I were to switch to an iTouch I would have to re-encode all my audio files to MP3 (or AAC) which would take an age and I would be able to fit even less on the player.