ydns' blog

Free gets the download, features get the dough

Wed, 09 Jan 2008 01:29:32 GMT

I've seen about my billionth discussion about the splintering of linux distributions. The simple fact that choice doesn't make people interested in using something. If that made people happy, then blank paper would be the internet! Nothing allows open choices like a blank piece of paper - but you have to do the work. When you stare at a blank piece of paper, your mind churns with ideas but it takes time to put anything interesting or useful down. (See writer's block)

Who wants to write their own daily paper from scratch every day - no one! We pay to have someone deliver it to our doors. Who even wants to write their own news? Eck! Who wants to compile their own software...or debug their kernel dumps?

Linux has all the choices you could possibly want, but not one variant has all of the features most want/need. Some call this progress because you get to make a choice, but it isn't. Its just an overly splintered OS. Just build one version that does all of this stuff (well of course). If all these linux developers were forced to work on a single linux version, it would be incredible! We'd have a featureful, stable OS for most everyones needs. This could take down Microsoft, nothing less will.

So its clear by market analysis, psychoanalysis, etc, that the primary key to a software's success is not how free it is, but rather how featureful it is. Linux is horrible at providing a standard process for configuration modification. Every config file could be in about a dozen different locations with a dozen different syntaxes...just in the last 6 months. ;)

I think if the linux community had the kohones they could reverse their years of wallowing in about a year by picking a single variant and closing development on all others. Within 356 days this OS would be close to useful for everyone. Within another 365 days it would be robust. Microsoft stock would plunge as vendor after vendor noticed business after business switch to OneLinux and introduce useful solutions. I call it the two year plan. I would also think that goverments would appreciate this consolidation and follow suit by promoting this OS. Within 5 years, the market would be able to support multiple variants again (but a controlled few) allowing for those special needs. But the key reason why only one variant of linux is required to make this all work is the developers and the geek community simply can't agree on working for the common good very well and there aren't enough people developing to support more than that (See the list of poor quality and insecure linux distributions here).

So charge as little as you want...I'll download it, but I'll gladly buy something that has what I need and does it well.

The Write-Once OS

Sat, 20 Oct 2007 17:56:38 GMT

I have been thinking more about trust and its importance in a computing environment. Since there are so many ways to erode or remove trust altogether it seems that we need to do more to provide solutions to combat these attacks.

The key benefit with computing technology is that it is so dynamic. This capability enables us to change anything in a nanosecond. This is also a huge risk. What would happen if you removed the element of change from a computing environment? Would it cease to have value? I think not. I think that the recent surge of CD bootable OS images and virtualized images are merely one phase of this trust recovery process. The next phase is creating "write-once" environments that cannot be modified by API. Simply revoke ALL write API access to the disk. Force all activity to occur in memory. This of course has constraints, but systems are more powerful everyday. Its only a few years away that we will have many GB's of memory in systems as a low end standard.

A write-once OS would improve the trust level it provides by preventing any changes to it on the fly. The concern of course is that all of its flaws are persistent as well. oh well, mankind has yet to make a perfect piece of software. I guess we'll have to live with that human flaw. A write-once OS should be as locked down as possible of course to reduce its attack surface area. Of course data storage will need to happen elsewhere. And session persistence is not a trustworthy goal as the session data needs to be stored elsewhere and could have been polluted/infected.

Now this is an area Linux could easily excel in. The write-once OS. This would need to be refreshed/recompiled (possible by the user as well) so any vulnerabilities or features can be released. Sure, you need to download a 10-20GB image, but at least once you securly load it, you won't have any questions.

Perhaps its even possible to convert the concept to hardware - the hardware linux OS. Not only is it not modifiable, but you never have to doubt it - ever. This is merely a thought, I've no experience in OS design, but I suspect this is possible, just by forking linux.

CISSP certified!

Thu, 18 Oct 2007 22:30:48 GMT

This month I received my CISSP certification after passing the test last month!

well now...that is interesting

Mon, 03 Sep 2007 22:04:45 GMT

So, I've been holding off my migration to Community Server 2.1 since I really don't want to deal with the differences yet. Lo and behold...there is BlogEngine.NET!

Essentially looks like a simple blog engine good for replacing DasBlog. I'm checking this out as my replacement, making sure I can migrate content over and that'll be that for DasBlog I think.

Attack ships on fire off the shoulder of Orion...

Tue, 21 Aug 2007 00:49:53 GMT

I got to go to LA for CISSP training. It was nice although I didn't get to explore much. Deckard would be proud...

A nice shot of the Bradbury Building:

Security+ and MCSA:Security 2003 certified!

Tue, 17 Jul 2007 22:59:22 GMT

I have passed my CompTIA Security+ exam and I'm now Security+ and MCSA:Security 2003 certified!

new forums setup

Fri, 09 Feb 2007 02:15:42 GMT

I have setup CS 2.1 for my new blog content at http://ydns.no-ip.com/cs/blogs/ydns/default.aspx. Probably gonna abandon DasBlog as it is infrequently updated and lacks the feature set of Community Server.

What is trust?

Fri, 26 Jan 2007 21:34:52 GMT

Trust is an reliance on the integrity or nature of a entity. It does not protect you. Just assures you of its virtue of topic. So, you can have trust of identity, trust of intent, trust of protecting your credit card number, etc.

Validation is what is used to determine the state of trust.

Website use SSL certificates to provide a level of security for users. The nature of those certificates is built upon a "chain of trust" that emanates from their root certificate, held by some other entity usually. So the reason you don't need to fear someone seeing your email on gmail is not that it has been encrypted per say, but that the only entity that can see that traffic is actually Google. If Google sold their SSL certificates private key, they would risk exposing everyone's email to that buyer. Hmm...quite a lucrative market there I bet. :)

Trust is a odd thing. If you have to prove it did you have any to begin with? So why call it trust, why not call it something else like Validated Identity Recognition - "I see that certificate and I have determined it to be proof of your identity so lets talk in private now". You have essentially validated Google's identity in the example above, not placed trust in them. Hey, they may not have a clue how to protect their servers or customers.

So why mention this distinction? Well it seems that there is one current problem with open source - a lack of trust. I don't play with guns because I don't trust them in the situations I would place them in; Leaving them unsecured for hours a day, etc. Trust isn't the only thing encouraging someone to buy a product though. There are lots of reasons. But I suspect companies see things differently. Users (and companies) don't trust this stuff just because they could take a look at its code. Most users have no clue how to review code. They also have no reason to trust something based on its existence. That's like trusting a bomb because you see it. Exactly not what you would do.

So the point I'm making here is that somehow it becomes important to increase the amount of trust related to open source projects. It therefore becomes necessary to give "outsiders" a standard method of accepting (or refuting) the measure of trust of a open source project.

So why not start creating a trust based solution for open source projects. A way of saying "I've reviewed the project or part of it and I can validate it does what it is supposed to". Repeated hundreds of times for a project and you can begin to see how "supporters" and developers" begin to assign levels of trust to specific people. I trust ProjectX so therefore I trust developer John. Or vice-versa.

Using things like certificates as a identity placeholder, you can associate Trust Points in some public manner that enforces the notion of trust in open source projects. So as you gain Trust Points in general you may be generally more accepted regarding your input to a project. This is kind of like the forum policing that moderators (and user) perform, but in reverse. Don't focus on tearing a person down. Instead focus on building up trust. Those that continue to fail in that regard will not achieve much trust. The same for projects.

I can see modules being implemented similar to blogs posts using Captcha, but signing with a public cert. Since you can only sign once, re-signing is irrelevant and easily blockable. Getting around the system becomes difficult and only coersion is a concern. So could you either convince or force others to sign? Of course. That is certainly a risk here, but no more then other repudiation systems. You could be notified and have the ability to renounce a signing (with limited options) and an impact on your Trust Status.

I think this idea of Project Trust has merit and could even be implemented in companies on a much smaller scale for internal projects. More or less rated on their quality of work rather than the trust that they aren't putting backdoors in, but both are still relevant.

So validate the code, then trust the code.

The Future of Information Security

Sat, 20 Jan 2007 19:16:40 GMT

What will come in the future for Information Security? Here is a list of things I see clearly becoming relevant in the next 20 years.

Standardized definition of a file - An ISO (universal) standard defining a "file". this standard will allow for more robust security measures such as signatures, thumbprints, reliable timestamps, content validation, etc. Making a file more into a container with approved slots for required features. This will place more integrity in the files. A previous post I made about secret sharing can be combined with this to appease any Board of Directors.
Full auditing computer systems - A computer designed to fully audit every single change to it for providing a reliable audit trail. This will require isolated logging features, likely open source analysis, and an insane amount of storage space, memory and features.
Multi-factor authentication - Two ain't enough. Eight may be. See next entry.
Split secrets - The old missile launch key solution to major risks will become more pervasive in corporate environments where data security is mandated. An erosion of trust masked in a technological solution will be quickly accepted by management.
Templatized security code analysis - This is already found in limited capabilities at some large companies. But the days of 300Kb exe's is going the way of the dodo. Imagine MBs of security code to protect the actual code. Writing a C++ app for the government? You need to implement at least one of 3 possible security enhanced services within your code or no acceptance. This will protect from all known exploits for a language and provide the intense logic analysis needed to actually do its job. I imagine protected updates will be mandatory. Think TPM here.
Restrictive Operating Systems - So locked down, you may be able to revert to a mainframe concept and reduce usage to specific commands and applications options. Corporate users will cry today, but thank us later, when millions of social security numbers, credit card numbers are actually abused in a vast breach. All those unknowing employees fired/jailed without a thought by their companies to protect their investors. Then not being able to run Solitaire will bring a sigh of relief to the worker bee who fears some strange program from ruining their career.
Big Brother - Think you have someone watching your every move today? Ha! Its nothing like will be present in 20 years. Mandatory recording, tracking, home auditing will all be part of getting a job in the future. Remember Back to the Future 2, they'll watch every transaction you perform at home as well and be able to act instantly on it. All because you'll want a job that pays well. Cheap jobs will still be generally unmonitored. Homeland Security will push for this program design, you'll see.
Open source - After years of struggling with acceptance open source solutions will go critical as technology provides some of the solutions above. Once code security is modularized, implementing secure open source solutions raises their trust factor significantly. I imagine modularized solutions for code performance and feature provisioning will also occur reducing the effort in producing well built open source solutions that don't require a degree to use. Most open sources apps today have a handful of active developers and likely numerous hackers attacking the published code, with opposite goals. The changes mentioned will make hacking much more difficult at the code level.

Setting a default category on Outlook calendar items (and likely contacts also)

Sun, 14 Jan 2007 20:23:11 GMT

I've been looking at getting a cell phone that can handle all my needs, including calendaring. Well, the problem is I'd like to sync my personal calendar and my work calendar without publishing my personal calendar to work.

I use Outlook 2003 at work (Exchange 2003) and home.

So there are several Outlook sync apps out there, but they all seem to require the use of Outlook categories. You then select which categories to sync and in which direction. This allows granular control. So in order to separate my personal calendar from my work calendar, I have to at least identify ALL of my personal calendar items with a category. Not so bad to manually change them once. But I would have to manually set a category for every calendar event I create! Ah, but I can just set a default category so I never have to think about it, right? No, the silly problem is that there is no easy way to have a default category set on your calendar items. OK, so now you're saying "this guy has no idea what he's talking about." Go and check...I'll wait here. OK, now onward. ;)

How on Earth could Microsoft have been releasing this Outlook product and be considered the premier product without such a seemingly simple setting (Set a default category for appointments and/or contacts)? Apparently, just by never doing it.

So here is:

How to set a default category for all Outlook appointments:

Open Outlook 2003 or higher.
Open (select) the default Calendar folder or create a new folder for calendar items.
While the correct calendar folder is selected, click "Tools/Forms/Design a form"
Select Appointment from the "Standard Forms Library".
The Form Designer will open the "Appointment" template.
Click on the Category button in the lower right of the Appointment tab.
Select (or create) at least one category to use as the default for all items in this calendar and click OK. You can choose multiple categories if you want.
Click "Tools/Forms/Publish form as".
At the top left, select the "Personal Forms Library", then provide a useful name for your form (such as PersonalAppt or WorkAppt) and click Publish.
Click File/Close. Do NOT save changes.
Right click the calendar folder you wish to use this new "default category" on and choose Properties.
Change "When posting to this folder" to use the form name you created in step 9. (You may have to browse by choosing Forms...) Click OK.
Now create a new calendar appointment in this calendar. Note that it should automatically have the category (ies) that you set in the template. If not you may have not selected the correct form or saved it on the properties window.

This same process can be performed for any pre-existing form type such as contacts, appointments, notes, etc. just make sure to change the correct folder to use the new form you created. Enjoy!

What was that you said?

Tue, 02 Jan 2007 00:44:39 GMT

So the new is that a whole bunch of information was declassified by the US government at midnight 12/31/2006. These types of information declassifications always seem to be meaningless when you don't know everything else that may have been learned. The expected (perceived) value of government information is accountability and truth. But how do we know that no one twisted the information's focus over time or transcribing generations?

http://politics.slashdot.org/politics/07/01/01/1657224.shtml

I've been pondering this problem and I thought that a public system that tracked the thumbprints of various documents and information (of any digital format) would help to assuage the publics fear of misinformation without releasing any information for use by foreign intelligence. This being one of the primary concerns of governments secrets. The system would also be key in assuring the governments people that there government wasn't abusing its knowledge or trying to obfuscate its meaning.

A "secret sharing" system that was certified by appropriate international organizations and reviewed by information security bodies could achieve this goal if well designed. Similar to a Nuclear materials review, a "shared secrets" review could be performed to assure that the related procedures were being followed.

I can see a digital system managed in part by organizations such as the U.N. and monitored universally by peoples such that more accurate criticism can be leveled at participating governments.

Any form of this system would place personnel at risk since information without witnesses is pointless. I see a multitiered system of witness lists, references, etc such that the individual personnel who may have obtained the information (field agents) may be protected. Of course information itself may not be needed to determine its focus. Sometimes simply a datestamp can be enough evidence to direct foreign intelligence to its content. This can easily be misdirected (counter-intelligence style) by claiming minutia of information, such as "The sky is cloudy today" and recording these in the system as well.

Now, I certainly understand (being in IT and all) the potential amount of information (and misinformation) being gathered here, which is why these "shared secrets" would cost money to the governments listing them. In addition a multitude of processes (checks and balances) would need to be formalized and protected in various ways, including technological means.

As an example a field agent discovers an assassination plot against the US President and they document this as a "secret" in a system, either indirectly or directly due to exposure concerns. Presumably a superior ranking professional will receive this "reported secret" an in turn acknowledge its existence and its origin. this creates definitively the first "digital secret", with a full record of its contents (video, email etc) with several digital signatures stored in public fields (its Digital Secret Signature or DSS) using approved protocols, etc. Any forwarding (presumably digital) of this information would result in further (automatic?) acknowledgement of secret sharing and result in a digital trail of evidence which is stored in the "Secret Sharing System" of the US government. This "database" exposes its DSS lists and they are synched with external systems in "real time". Each acknowledgement of secret reception results in a new entry associated with the original secret (perhaps its DSS only?) and therefore there is a fairly reliable breadcrumb trail.

Now, of course this whole system relies on a lot of process and technological innovation that doesn't exist quite yet. With technology becoming more pervasive in our daily lives, is it too much to expect that government employees would need to comply with participation in such a system? This may mean extensive monitoring of the work environment and all communication devices owned, as well as GPS tracking, microchip-under-skin, etc. Essentially until there is such encompassing auditing of persons, this would merely be a Orwellian future. Not to mention the petabytes of information to be stored to audit all of this.

There would never be a need to demand release of information. Anything that was deemed releasable could be. It would validate that the information released was factually represented in the past and provide accountability for any mistakes. Now you at least have names tied to information in a formal manner. If people aren't willing to take the accountability for the information they handle they should not be a government agent. Prescribe jail time and related sentences to those who fail to abide by the universally accepted law. Now you have a globally backable justice system brewing...no need for a UN court, just make the various goverments courts abide by international laws when treating related cases and you have provided transparency to government sourced injustice.

But you see what I mean, right?

What does an Help Desk Technician do when his fresh Redhat Linux install bombs out?

Sat, 30 Dec 2006 00:24:26 GMT

"Well, I must say having an OS choice other than Micro$loth seems really cool, like I'm not trapped by the system! I'm glad I've installed RedHat on this old box I had layin around. This should be fun! I'll come back in five minutes and continue my foray into Linux..."

<5 minutes pass>

"Ahh, ready to go again...just wiggle the mouse to get the screensaver off..."

"oh, I must have to click the keyboard."

<click, click...CLICK!CLICK!CLICK!>

"What the #%^@? OK, I'll just reboot by pressing the ever handy Reset button."

"Hey, what does this mean "Corrupt XF86Config; Initialization Failure"? Oh, I'll just go in to the command prompt and fix this there."

"Uh, nothings wrong with this config...it hasn't changed a bit! I'll just call a old friend. He'll help."

<beep, beep, beep,beep,beep,beep,beep....ring,ring>

"Uh, hullo?"

"Hey Lloyd, it's Scott. Remember me?"

"Uh, no."

"OK, well I have this problem with my Linux XF86Config. I think the system just hosed up for no apparent reason."

<chuckle, chuckle>

"Hey what're ya chucklin at Lloyd? Find something funny on the web?"

"So, Scott have you tried to edit the config file?"

"Yeah, it seems fine."

"OK. Have you reinstalled the drivers through the config util?"

"Uh, what?!?! I have to reinstall the friggin drivers??!?!?!"

<sigh>

"Have you tried editing the timings for the Horiz. and Sync modes?"

"Uh, I have no idea how to read that stuff, it's like in PigLatin binary or something!"

<oy, vey!>

"OK, Scott what you need to do is go to Borders and buy a book."

"Oh, is there some book that's good for troubleshooting this kinda problem?

"Yeah, it's called Computers For Dummies."

<Click....brrrrrrrrrrrrrrrrrrrr>

"Uh Lloyd, I think we got disconnected...."

Needless to say I have not ventured back into the RedHat zone even though I have decent Unix skills. And I'm still trapped by the system. Oh, Neo when will you come rescue us?

What if you needed technical support on your home?...

Sat, 30 Dec 2006 00:21:36 GMT

"I can't seem to get into my place."

OK, first- what type of place do you have? Is it a apartment? A House? A tent in the woods?

"I don't know, it's got windows....."

OoooooooK. <preparing to become frustrated> Well do you have a key to get in?

"I have a bunch, but none of them work. The one marked Ford fit but it wouldn't open the door."

Nah, nah, nah, that one DEFINITELY won't work. Did you get one from a person who helped you buy the place there?

"Yeah, I think..."

OK, let's try that one. Now before I start [BEEP,BEEP,BEEP....]...What's that noise?

"Uh, nothing. [BEEP,BEEP,BEEP....]"

No, WHAT IS THAT NOISE? I NEED to know. [BEEP,BEEP,BEEP....]

"I think I have some kind of security alarm." [BEEP,BEEP,BEEP....]

[SLAP!!!!] <Techie slaps his forehead hard>

OK, STOP what your doing! Listen to me, try putting the key you got, from the person we mentioned, in the keyhole and turn it clockwise. [BEEP,BEEP,BEEP....]

[BEEP,BEEP, bee...] "Hey the noise stopped! Wow thanks!"

Alright, have you pushed the door open now?

"Left handed or right handed?"

It doesn't matter.

[chhk] "Hey thanks for getting me in. Hey while I've got you, could you tell me what that box out front is for?"

The mailbox?!?!?

"Is that what it's for? How do I get my mail?"

Ummm.<dreading a longer conversation> I'm not sure. Could I get in touch with you----<click....RRRRRRRR> (phone dialtone appears)

Dryer Road 10-22-2006

Fri, 27 Oct 2006 01:37:31 GMT

Had some good riding with some friends. Probably the last ride of the season.

Ride with Rob stats:

Ride with Rob Vert Profile:

Google Maps track of the ride with Rob. Google Earth track of the same.

Riding with everyone

Ride with everyone stats:

Ride with everyone vert profile:

Google Maps track of the ride with everyone. And the Google Earth track of the same.

Dryer Road 10-8-2006 - beautiful day to ride

Tue, 10 Oct 2006 01:02:03 GMT

Here are the details:

The track is here. And here is the Google earth view.

Dryer Road 9-24-2006 - great riding

Sat, 30 Sep 2006 14:54:14 GMT

Here is the track from 9-24-2006. Some great challenges for the beginner I was with.

The Google Maps GPS track (without track splits)

A view from Google Earth.

The elevation profile:

Dryer Road excursion - great riding day

Mon, 18 Sep 2006 11:45:01 GMT

Went out both days this weekend and had a lot of fun riding.

The overall stats:

Heres a set of tracks.

Here is the Google Earth view. (save to disk first)

Here is the elevation profile:

Simple DeskNotes 1.01 released

Mon, 04 Sep 2006 23:23:12 GMT

I have fixed a couple of annoying bugs with this version. Now it works cleanly. Download here.

Another sweet day at Dryer Road park

Tue, 29 Aug 2006 03:24:09 GMT

Nice ride with a co-worker. (its Google Map, so you can zoom in on the track via the control)

Dryer_Road_8-26-2006.htm (106.36 KB)

Vista and the new netsh

Thu, 10 Aug 2006 02:43:13 GMT

The new netsh in Vista is simly updated with a new section for outbound filtering. I took some time and made a few example rules for those struggling with the syntax. The rules below are linked here (Vista-Outbound-Firewall-Rules.bat.txt (1.23 KB)).

Pretty nice. Finding some processes trying to access the internet such as Windows Error Reporting. More a pain to translate the event log entries generated then anything.

netsh advfirewall firewall add rule name="IE (TCP)" dir=out program="c:\program files\internet explorer\iexplore.exe" protocol=TCP localip=any localport=any remoteip=any remoteport=80,443 action=allow
netsh advfirewall firewall add rule name="IE (UDP)" dir=out program="c:\program files\internet explorer\iexplore.exe" protocol=UDP localip=any localport=any remoteip=any remoteport=80,443 action=allow

netsh advfirewall firewall add rule name="Firefox (TCP)" dir=out program="C:\Program Files\Mozilla Firefox\firefox.exe" protocol=TCP localip=any localport=any remoteip=any remoteport=80,443 action=allow
netsh advfirewall firewall add rule name="Firefox (UDP)" dir=out program="C:\Program Files\Mozilla Firefox\firefox.exe" protocol=UDP localip=any localport=any remoteip=any remoteport=80,443 action=allow

netsh advfirewall firewall add rule name="Windows Messenger (TCP)" dir=out program="c:\program files\msn messenger\msnmsgr.exe" protocol=TCP localip=any localport=any remoteip=any remoteport=80,443,1863 action=allow
netsh advfirewall firewall add rule name="Windows Messenger (UDP)" dir=out program="c:\program files\msn messenger\msnmsgr.exe" protocol=UDP localip=any localport=any remoteip=any remoteport=80,443,1863 action=allow

Encrypted and bit by bit it goes away?

Wed, 09 Aug 2006 23:39:16 GMT

Yikes, read this post on a Microsoft forum and it has scared me a little bit about Vista's BitLocker feature.

http://windowshelp.microsoft.com/communities/newsgroups/en-us/default.mspx?dg=microsoft.public.windows.vista.security&tid=9550eb1d-edd7-4905-8e8a-fcaa997faa99&lang=en&cr=US&sloc=en-us&p=1

This essentially means that your system "may" have a significant failure because of a single bit error on a drive. Now I know I'm sounding a little brazen here, but this is a legitimate concern for users, especially corporate users - the ones most likely to implement this feature.

The only workarounds to this problem are:

Don't use BitLocker - Less security is safer?
Perform regular backups of your system - this may help but a typical user won't be capable of restoring their system without administrative intervention. So you end up taking a user down for a day to get their system restored or rebuilt from image - great, just great.

I guess we'll just have to wait for a RAID-able solution. or some type of parity option.

Encrypted and tasty

Mon, 31 Jul 2006 11:09:41 GMT

I'm posting from inside Windows Vista, the next OS and I must say its pretty sweet. I've encrypted my main partition using BitLocker and messed around with a featureful firewall. Too bad the firewall and its associated parts needs some work. It says that it will notify me when something is blocked, but I never received a single alert for anything.

For more on Vista --> http://www.microsoft.com/windowsvista/

Updated Dryer Road Park Trail Guide (temp)

Sat, 08 Jul 2006 21:39:06 GMT

Here is an updated Dryer Road Park trail guide that has numerous mistakes due to GPS inaccuracy (?), but I wanted to get this posted as there are many more trails.

Enjoy! Be aware that it can be very slow to load.

Some NH mountain biking

Tue, 04 Jul 2006 17:39:11 GMT

Rode here a couple times this week. Almost 8 miles of technical riding. Click the pic for the interactive Google map.

Here is the profile of that trail (careful! - its huge so you can see the most detail). The way we rode this trail it goes in a figure 8, starting at the bottom right and going across to the bottom left, then to the upper right, across to the upper left, then down to the bottom right.

Here is a Google Earth version, with altitude data included so you see a wall indicating the trail altitude. Clearly not great accuracy, but probably somewhat close.

"No, there is another..."

Sat, 24 Jun 2006 21:44:21 GMT

Other then riding at Dryer Road Park, which rocks, there is another place to ride near Rochester. Royal Coach Parkland, which is public property as far as I know.

Royal Coach Parkland race course

sweet Dryer Road Park trail guide

Sat, 03 Jun 2006 00:31:52 GMT

I made this with GPS based on my rides at Dryer Road Park recently..click pic for the full experience. Click trail names to blink them. See my updated version.

something I found artworthy

Sun, 28 May 2006 04:09:31 GMT

Like it? I title it "My Day 5-19-2006".

MCSA here

Thu, 18 May 2006 22:50:00 GMT

I easily passed the 70-299 exam today! :) That makes me a MCSA. Next month I'm gonna try the "ISA 2004" exam for my MCSA+Security.