information security, the outdoors and me RSS 2.0
# Saturday, January 10, 2009


I never did post about snowboarding last winter (Jan-March 2008).  I went out and had a blast snowboarding.  Since I used to skateboard, this was nothing.  Easier and softer then mountain biking.  I went out 6 times and got to the point of hitting jumps and pulling off frontside grabs.  It was a blast.  I fell once and lightly tweaked my shoulder, but nothing significant.

So I was anticipating going out this season.  With the economy in tatters, I  wasn't sure that this was a great idea, but I certainly can't argue against a little fun now and then.  So I finally went out the Sunday before Christmas.  I was on vacation and we just got a good amount of snow.

Sure enough I got right back into it.  I was only sore for a couple of runs and then it was just pure fun (and cold).  But I pushed it and on the last run I managed to fall and bang my knee good.  (I knew I should have called it a night the run before)

Well, the weather has waffled like the politicians and I'll probably not be going back out until next week since tomorrow its gonna be C.O.L.D.

Saturday, January 10, 2009 7:46:06 PM (Eastern Standard Time, UTC-05:00)  #    Comments [0] -
Fun | Outdoors
   Boy, 2008 was a punch in the collective gut.  The year started out much like any other, but I soon saw a repeated decline in my 401k and decided to act.  I was unwilling to accept any loss due to a downturn in the economy.  It was two quarters late - I had not been keeping an eye on the market in the latter half of 2007 (when this all started).  Fortunately I acted quickly enough to avoid taking a big hit on my 401k through 2008.  I have only taken about a 6% loss in my 401k since the downturn started in 2007.  Most of that occurred in 2007.  I've since regained all loses, essentially adding the exact money I'm putting into my 401K now.    This is my tale -grateful for the chance to know woe.

  Back in Jan to March 2007, I looked at my previous two 401K statements and became alarmed that I lost thousands in those quarters.  That was outrageous.  I immediately began looking into what made up my 401k and found that mutual funds are posted just like stock is.  I was stunned (and VERY angry) I never realized this before so I set out to keep an eye on things in general.  I began analyzing the Dow index and the mutual funds I was invested in.  It was clear that a downturn had started, and I'm not a big believer in random turnarounds.  The media and market folk were starting to talk negative.  A voice in my head had begun to tell me to "get out".  Every time I kept hearing this negative chatter I felt more compelled to find ways to protect my money.

  I quickly moved over half of my monies to "stable" options in my 401k.  I then made a boneheaded move in spring and lost more money.  That loss became my final straw.  I was livid at my failure to protect myself financially.  Now, I'm not a paycheck-to-paycheck type, so this is all relative to my experience.  I was simply angry with the fact I was potentially facing a financial loss for the year, when I was the one in control of my financial destiny.

  As summer closed, I became calmer, knowing I was doing the things I should.  Then the US economy became handbasket sized .  That was instantly alarming to me.  I had been doing the right thing, but apparently the big boys hadn't.  I could easily be dragged down by them.

  I actually managed to move the remainder of my investments out of risky options the day before the market starting its big drop in September.  I quickly moved all my money into the only option that was intended to maintain existing wealth.  I was very fortunate.  But I think it was also a good helping of common sense, and a little voice in the back of my mind that was getting louder.

  I've just reviewed my finances for 2007 and 2008, and it turns out I've saved $33.88 relative to 2007.  :)   So I feel like I've done well in these tough times.  I cannot complain about my financial position right now.   My recommendation - REVIEW YOUR FINANCES!  It is very easy and will give you an idea of where you put your money.  Why so easy? Banks and credit card companies give you the ability to download the data right into a program like Money or QuickenYou are a fool not to take advantage of this free service from them.  Just go to your banks website and download all the files possible RIGHT NOW!  YES RIGHT NOW!  It's taken me ~2 weeks to go over 2 years of my bank accounts and credit cards.   Most of that time was learning quirks of the software.  Don't expect much for planning your finances, focus on reviewing usage.



I easily could just look at the summary data from my pay slips, bank statements and credit cards to figure out the basics, but financial software like Money or Quicken let you see the categories of transactions - like gasoline, groceries, CDs, etc.  That is where this software shines.  Showing you what categories you spend on. 

  I have been grateful for my persistence in 2008 to watch the market closely and listen to the big grumblings.  They were all clearly signs that anyone could have heard and acted on.  Too bad 2008 lasted a second longer then it needed to.  Just remember that you always control your destiny.  Trust no one but yourself.

Saturday, January 10, 2009 6:07:57 PM (Eastern Standard Time, UTC-05:00)  #    Comments [0] -
2008 | Finances
# Tuesday, January 08, 2008
I've seen about my billionth discussion about the splintering of linux distributions.  The simple fact that choice doesn't make people interested in using something.  If that made people happy, then blank paper would be the internet!  Nothing allows open choices like a blank piece of paper - but you have to do the work.  When you stare at a blank piece of paper, your mind churns with ideas but it takes time to put anything interesting or useful down.  (See writer's block)

 Who wants to write their own daily paper from scratch every day - no one!  We pay to have someone deliver it to our doors.  Who even wants to write their own news?  Eck!  Who wants to compile their own software...or debug their kernel dumps?

Linux has all the choices you could possibly want, but not one variant has all of the features most want/need.  Some call this progress because you get to make a choice, but it isn't.  Its just an overly splintered OS.  Just build one version that does all of this stuff (well of course).  If all these linux developers were forced to work on a single linux version, it would be incredible!  We'd have a featureful, stable OS for most everyones needs.  This could take down Microsoft, nothing less will. 

So its clear by market analysis, psychoanalysis, etc, that the primary key to a software's success is not how free it is, but rather how featureful it is.  Linux is horrible at providing a standard process for configuration modification.  Every config file could be in about a dozen different locations with a dozen different syntaxes...just in the last 6 months.  ;)

I think if the linux community had the kohones they could reverse their years of wallowing in about a year by picking a single variant and closing development on all others.  Within 356 days this OS would be close to useful for everyone.  Within another 365 days it would be robust.  Microsoft stock would plunge as vendor after vendor noticed business after business switch to OneLinux and introduce useful solutions.  I call it the two year plan.  I would also think that goverments would appreciate this consolidation and follow suit by promoting this OS.  Within 5 years, the market would be able to support multiple variants again (but a controlled few) allowing for those special needs.  But the key reason why only one variant of linux is required to make this all work is the developers and the geek community simply can't agree on working for the common good very well and there aren't enough people developing to support more than that (See the list of poor quality and insecure linux distributions here).

So charge as little as you want...I'll download it, but I'll gladly buy something that has what I need and does it well.

Tuesday, January 08, 2008 8:29:32 PM (Eastern Standard Time, UTC-05:00)  #    Comments [0] -
tech
# Saturday, October 20, 2007
I have been thinking more about trust and its importance in a computing environment.  Since there are so many ways to erode or remove trust altogether it seems that we need to do more to provide solutions to combat these attacks.

The key benefit with computing technology is that it is so dynamic.  This capability enables us to change anything in a nanosecond.  This is also a huge risk.  What would happen if you removed the element of change from a computing environment?  Would it cease to have value?  I think not.  I think that the recent surge of CD bootable OS images and virtualized images are merely one phase of this trust recovery process.  The next phase is creating "write-once" environments that cannot be modified by API.  Simply revoke ALL write API access to the disk.  Force all activity to occur in memory.  This of course has constraints, but systems are more powerful everyday.  Its only a few years away that we will have many GB's of memory in systems as a low end standard.

A write-once OS would improve the trust level it provides by preventing any changes to it on the fly.  The concern of course is that all of its flaws are persistent as well.  oh well, mankind has yet to make a perfect piece of software.  I guess we'll have to live with that human flaw.  A write-once OS should be as locked down as possible of course to reduce its attack surface area.  Of course data storage will need to happen elsewhere.  And session persistence is not a trustworthy goal as the session data needs to be stored elsewhere and could have been polluted/infected.

Now this is an area Linux could easily excel in.  The write-once OS.  This would need to be refreshed/recompiled (possible by the user as well) so any vulnerabilities or features can be released.  Sure, you need to download a 10-20GB image, but at least once you securly load it, you won't have any questions.

Perhaps its even possible to convert the concept to hardware - the hardware linux OS.  Not only is it not modifiable, but you never have to doubt it - ever.  This is merely a thought, I've no experience in OS design, but I suspect this is possible, just by forking linux.

Saturday, October 20, 2007 12:56:38 PM (Eastern Standard Time, UTC-05:00)  #    Comments [0] -
tech
# Thursday, October 18, 2007

This month I received my CISSP certification after passing the test last month!


    

Thursday, October 18, 2007 5:30:48 PM (Eastern Standard Time, UTC-05:00)  #    Comments [0] -

# Monday, September 03, 2007

So, I've been holding off my migration to Community Server 2.1 since I really don't want to deal with the differences yet.  Lo and behold...there is BlogEngine.NET!

Essentially looks like a simple blog engine good for replacing DasBlog.  I'm checking this out as my replacement, making sure I can migrate content over and that'll be that for DasBlog I think.
Monday, September 03, 2007 5:04:45 PM (Eastern Standard Time, UTC-05:00)  #    Comments [0] -

# Monday, August 20, 2007

I got to go to LA for CISSP training.  It was nice although I didn't get to explore much.  Deckard would be proud...

A nice shot of the Bradbury Building:





Monday, August 20, 2007 7:49:53 PM (Eastern Standard Time, UTC-05:00)  #    Comments [0] -
Fun | tech
# Tuesday, July 17, 2007

I have passed my CompTIA Security+ exam and I'm now Security+ and MCSA:Security 2003 certified!

 

 

 

Tuesday, July 17, 2007 5:59:22 PM (Eastern Standard Time, UTC-05:00)  #    Comments [0] -
tech
Categories
Archive
<November 2009>
SunMonTueWedThuFriSat
25262728293031
1234567
891011121314
15161718192021
22232425262728
293012345
Blogroll
About the author/Disclaimer

Disclaimer
The opinions expressed herein are my own personal opinions and do not represent my employer's view in any way.

© Copyright 2009
ydns
Sign In
Statistics
Total Posts: 68
This Year: 1
This Month: 0
This Week: 0
Comments: 3
Themes
Pick a theme:
All Content © 2009, ydns
DasBlog theme 'Business' created by Christoph De Baene (delarou)