Empower your employees or handcuff them?

January 24th, 2009

I work for a large consulting firm and my employer has decided that instead of empowering their employers they will handcuff them.

Specifically my employer has decided to limit its consultants to only access our email via internal access to an Exchange server, or external access via either Outlook Web Access (a web mail client for Exchange) or via our corporate Blackberry BES (Blackberry Enterprise Server). The later is only an option for connectivity if you are either senior enough and get a company issued Blackberry or have management sign off on allowing you access the company owned BES.

This means for the average consultant at my company we will no longer have easy access to their email outside of the office. Will this impact the rank and file’s ability to be responsive to both internal demands and our customers? In my ever so humble opinion, yes. Will this be noticed by the people who made this decision? Probably not because they are disconnected from the the people who actually generate revenue for our firm.

The sad part is that in the name of security they migh end up encouraging insecure practices. For instance some people might start using external email addresses for business purposes which exposes potentially sensitive corporate data to outside parties. This didn’t have to happen either it is entirely possible despite this statement “IMAPS - it turns out the “S” is pretty darned weak” [1] to allow for a publicly available email solution.

Sadder still is that unless this impacts someone senior enough, which it won’t because they all have company issued blackberries, it will happen no matter how much the rank and file might complain, which they won’t anyway.

[1] I asked for clarification on this statement on Tuesday and to date have not received a response.

Obama’s Baltimore Visit - security insanity

January 17th, 2009

Here in Charm City we are experiencing the FRIGID temperature’s and the president elect is stopping to speak in the city this afternoon. Because of the security insanity involved with any presidential appearance if you are heading down you need to follow all sorts of rules about what you can bring inside the security zone. Here is what is prohibited:

  • Weapons
  • explosives
  • aerosols
  • laser pointers
  • Packages
  • coolers
  • thermal or glass containers
  • backpacks
  • structures
  • bicycles

The weapons and explosives make sense. Aerosols, maybe, but this is Baltimore what’s a good Hon supposed to do? Leaver her Aqua Net at home? What if she get’s a chance to meet the president to be? She might need to fresher up her do and look her best…..sadly fashion will have to take a back seat to ’security’. Laser Pointers make a little sense but unless you do a FULL inspection of everything a person is carrying you can’t hope to catch one as they are too small and easy to conceal. Heck I have one that is on the end of normal looking pen. Good look finding that unless your screeners are REALLY looking at everything. Now packages? well that just seems impractical to bring to an event such as this. Coolers? Come on it is colder out than in a cooler…..again impractical for today. Now thermal containers? Today when the expected high is only going expected to be 23? That seems foolish. Even more foolish when you learn that there will be no concessions near by when you could hope to purchase a hot beverage to help warm up. Backpacks? Come on, inspect them but as long as they don’t contain any contraband let them through. Structures? What do they mean by that?!? An Bicycles make some sense since with the crowds they would just get in the way.

I predict numerous problems with the cold from today’s event, partly from people being dumb, partly from poor preparedness by local emergency services, and partly from security restrictions preventing people from brings say….warm beverages with them…..

Hopefully any problems encountered today will be learned from and applied to the inauguration on Tuesday.

[update: I just learned on WBAL TV that Donna's will be inside the security perimeter service food and HOT beverage. Smart move.]

Roku’s Netflix Player

January 11th, 2009

Danielle bought me this device for my birthday. I had been hesitant to do so for myself for a couple reasons. The primary one was some of the reviews I had seen mentioned issues with video quality and streaming issues. The secondary one was I didn’t really want yet another A/V component and remote around. But I am glad Danielle didn’t consider any of this and just bought it because it is a wonderful device for my wants/needs.

The quality and streaming issues I have yet to see any problems with. For the former it is probably related to the fact that I’m still using an older standard definition CRT TV. So unless something is very noticeably pixelated or the like I don’t notice. As for any streaming issues I credit my ISP () with providing me a good quality connection.

The other great thing about this device is its core purpose streaming movies from Netflix. Both Danielle and I are more willing to add some movies to our instant queue than we would be to add them to our normal queue. Since we have unlimited streaming and there is no turn around time watching something like McLibel or Going to Pieces: The Rise and Fall of the Slasher Film makes more sense.

I am very much looking forward to Roku adding addition streaming options in addition to Netflix. Hulu would be a great start. Or if they could do something like Sling has with their online streaming and making multiple sources available via a single front end that would be even better and more user friendly.

For me the roku added to my Tivo’s with Amazon Unboxed makes me happy and have zero desire to get an Apple TV even with something like Boxee added to it (via a hack).

unlocked Blackerry + T-Mobile Internet

January 7th, 2009

Since I had a gift card and a want for a phone with a better web interface I bought a (ancient) unlocked Blackberry 7130. It cost me $2 out of pocket so I felt it was a justified impulsive purchase.

It arrive today, and tonight I set it up. I was frustrated for a long while because despite copying the exact network setting I had on my old phone (a Sony Ericsson K750i). Every time I would turn the wireless on the message “Data Connection Refused”. This was very frustrating, and I was beginning to think I might need to spend more and upgrade my T-Mobile service to one of the Blackberry options.

Thankfully I just ignored it and tried Opera Mini and it successfully loaded a web page.

Now I can go to bed happy. Tomorrow I need to figure out how to set up a personal email account which doesn’t seem to be an option at the moment.

DRM Free iTMS

January 6th, 2009

For a while now I have been advising people to purchase their music through Amazon when ever it is available rather than the iTMS. Why? Because the Amazon tracks aren’t encumbered by any DRM.

Today that changed though. Apple announced that DRM is leaving the iTMS. I am thankful for that. Now the only reason to buy from Amazon over iTMS is price.

Eye-Fi card redux

December 29th, 2008

I gave up on my Eye-Fi card about a month ago when I pulled out my camera to a dead battery, yet again! Since then I had it on my desk at home. I tossed it in my bag for holiday travel just in case I wanted to use it as a last minute gift.

Here at my sister-in-law’s house I think it would make a great gift. Bother her and her husband have beter things to do with a new baby than deal with plugging the camera in to upload pictures to flickr. The Eye-Fi seems like a natural fit, it will automatically do it for them. EXCEPT for they idea you need to effectively disable the power saving auto shut off feature of the camera for it to reliably upload all your pictures. What this would mean, is that like in my case, their newborn would be doing something very photo worthy but the camera would be dead from the last time they took a picture of her.

So back in my bag it will go. And until the card is ’smarter’ about powering down a camera when it is done transfering pictures I can’t recommend this neat gadget to most people.

ISP port 25 filtering

December 27th, 2008

I’m currently away for the holidays. Both the ISPs my kind hosts use filter out port 25 traffic to mail servers other than their own. As someone who hates spam I can understand why they do this. This helps limit spammers from using the ISP to pump out their spam.

However I have noticed a couple things at my current location. One is related to incompetence on the part of ATT the other on my employer’s part. First ATT’s incompetence:

My in-laws have BellSouth DSL service back at their home in Florida. Their Outlook client is configured to use port 25 to send mail. This doesn’t work here in Chicago where the DSL provider is, ATT. Now just in case you don’t keep up with the acquisitions in the telecommunications field, ATT & BellSouth are the SAME company. So in effect they are filtering port 25 traffic to other ATT mail servers. I can certainly understand why this would have been the case for a period of time after the acquisition but it has now been 2 years. One should reasonably expect them to allow port 25 traffic to mail servers controlled by the same company. Sadly this isn’t the case so my in-laws are forced to use the less functional webmail client to send any emails.

Now my employer’s incompetence:

For remote access if you aren’t using Outlook (with its Exchange hooks) you set up your client to use IMAP to receive email and port 25 (with authentication) to send mail. Sadly as noted above many ISPs filter port 25 to combat spam. This means that you can’t effectively use non-Outlook client to send mail from outside the corp network. The incompetence here is that they haven’t opened up port 597 (mail submission) to accommodate these situations. Why is this the case? I don’t know for sure but it almost certainly is for 2 reasons: 1) Outlook with Exchange is the supported email client 2) the people in charge of running the mail servers aren’t competent enough to think of such situations and accommodate them.

CLI reset a user’s password in Twiki

December 19th, 2008

We recently set up a TWiki install on a server that doesn’t have email nor is allowed to use port 25 to communicate out. This means that the normal way a user would reset a forgotten password won’t work.

Since the assumption by the Twiki community is that you will have email access no thought has been made to document how to do this in any other manner.

In my digging I found it to be fairly simple to do this.


cd $HTTPD_ROOT/twiki/data
htpasswd -b .htpasswd

tada all done. Oh you do need to either be root or have write access to the .htpasswd file.

SocialDevCamp East (Fall 2008)

November 5th, 2008

Saturday I made the long (5 minute) drive down to the University of Baltimore’s Thumel Business Center Building for SocialDevCamp East. SocialDevCamp is a bar camp which means the sessions are self organized by the participants at the beginning of the day. For this camp it worked out very well.

The self organizing of sessions and with times and rooms worked out very well. The only improvement I could suggest for this process is to have the proposed sessions and schedule more visible to the entire room before finalization. A quicker update of the wiki might have solved this, or using the projector to make the schedule would have also accomplished the same thing.

None of the actual sessions I attended were quiet what I expected based on the title of the session but I enjoyed all of them.

Session 1: “Can you really find work using social media?”

This session started off with a presentation by Shashi Bellamkonda who blogs for Network Solutions. While his presentation was good it wasn’t long enough to fill the time slot. Steve Fisher was in attendance and decided to file the remaining time with an impromptu presentation on his 22 rules for entrepreneurs. Steve’s presentation was good and enjoyable.

Session 2: Evaluating & Hiring Developers and hosting providers

I don’t recall the leader of this presentation. The presenter was looking more for the insight of the audience to help her more effectively find developers for her needs. Again not exactly what I was expecting. But it turned into a good discussion about hiring people what to look for beyond the resume and even experiences with using overseas developers on projects. We also touched on hosting including some attendees experience with Amazon EC2 and S3 services. In the end I also enjoyed this session.

Session 3: Crowd source data quality

This ended up being a very small session (just 5 people total). We mostly just talked about the difficulties that can be associated with crowd sourced data but didn’t really come up with any good solutions. One the people in this session was Patti Chan one of the co-founders of 600 Block. Since her site accepts user submissions for content we (well I) used it as an example for crowd sourced data. The discussion also took a turn towards security when accepting data.

Session 4: Data portability

I was looking forward to this based on my assumption from the title about what it would be, Data Portablity over time. But it wasn’t that. The presenter was a gentleman who works for an insurance company and the thrust of the discussion was having data portability of health care information and how to help empower consumers in controlling the data. It was and interesting discussion and worth my time.

After session 4 I was going to head out to Brewer’s Art for a drink or two with Jason and Greg Cangialosi (of Blue Sky Factory. We got side tracked into a session “Entrepreneurial discussion” before we left though. Again I found teh discussion interesting. We ended up cutting out about half way through the session and enjoyed a drink at Brewer’s Art before heading up to the official after part at Metro Gallery.

Over all I enjoyed the time I spent there and expect to head back for the spring 2009 edition.

I HATE my EyeFi card

November 1st, 2008

For one simple reason you have to effectively disable the power saving features on your camera to have it effectively work. If you don’t do this file transfers can get cut off in the middle when your camera decides to power down and save your battery.

Because I have no power saving features enable on my camera at the moment I have found on several occasions when I pull out my camera to take a picture it is dead.

Oh and I don’t find the wireless transfer of pictures so much better than using a SD to USB adapter that that will make me reconsider getting rid of it.