xkcd: Password Strength

As always, xkcd makes a great point through a comic with “Password Strength”.

Password Strength

Password Strength

I do not know if the point he is making is actually valid, some research will be required.

Update: Ben Rockwood comments on the webcomic with “Password Myths”.

I believe that Mr. Rockwood is correct in his appraisal that we should all start using the term pass phrase.

Rands In Repose: Lost in Translation

As always, Rands has something interesting to say about becoming a manager for the first time:

Your confidence is going to be artificially high. This new job, hobby, or sport is going to appear magically easy. You’re going to feel gifted. Those watching your miraculous aptitude keep saying, “beginner’s luck”, but that’s neither what you’re hearing nor what they’re saying. What you’re hearing them say is, “We are jealous that you are gifted at this thing you totally don’t understand”, but what they’re actually saying is, “We understand it’s intoxicating to instantly feel like an expert and we will most certainly bite our tongues when you painfully discover how much you have to learn.”

via Rands In Repose: Lost in Translation.

Obama

As I listen to the speech being given by Obama, one line stands out for me:

As for our common defence, we reject as false the choice between our safety and our ideals.

This man is a breathtaking orator.

Quote of the Month: Steve Jobs on Spending Money

At Apple Inc.’s May 10 annual shareholder meeting, a member of the audience questioned Jobs on Apple’s relatively low figure of reinvestment in R&D, saying that he felt the company was missing low handing fruit with new product opportunities, particularly with the delay of Leopard. Jobs responded:

I wish it was just a matter of writing checks. If it was just a matter of spending money, Microsoft would deliver good products.

Terrific quote. :-)

Oxford

For the purpose of beating my lovely wife to the punch, here are photos of our new Miniature Schnauzer, Oxford

IMG_1268.jpgIMG_1264.jpg

Severe concentrated cuteness. :-)

Update: I lost. By like over an hour. :-(

I Did It

Today is the Big Day! :-)

IMG_0212.JPGIMG_0213.JPG

I officially proposed to the wonderful Ana Cristina Fernandez Gonzalez. Now, wish me luck! Oh, and she did say yes. :-)

Open Source Includes Support Options

O’Reilly’s ONLamp has a great article which is most interesting. The premise is that Open Source software includes support options instead of support futures. I love it:

[Open source is] converting warrants on future maintenance and enhancements into options, which means that instead of having a sole supplier (warrants), we have created a third-party market (options) of these derivatives.

How capitalistic is that?

Very well said indeed. Found it from here.

Apple’s Patched OpenSSH doing SRV lookups?

Recently, while trying to figure out why ssh is taking so long to connect to many systems under Mac OS X 10.4.1, I sniffed the DNS traffic. To my surprise, I see SSH is doing SRV lookups:

0.000000  10.100.0.23 -> 10.100.0.10  DNS Standard query SRV _telnet._tcp.mariesa.techsupport.local
0.001124  10.100.0.23 -> 10.100.0.10  DNS Standard query SRV _telnet._tcp.mariesa.techsupport.local
0.001272  10.100.0.10 -> 10.100.0.23  DNS Standard query response, No such name
0.001989  10.100.0.23 -> 10.100.0.10  DNS Standard query SRV _telnet._tcp.mariesa.techsupport.local
0.002321  10.100.0.10 -> 10.100.0.23  DNS Standard query response, No such name
0.002848  10.100.0.23 -> 10.100.0.10  DNS Standard query SRV _telnet._tcp.mariesa.techsupport.local
0.003176  10.100.0.10 -> 10.100.0.23  DNS Standard query response, No such name
0.003993  10.100.0.10 -> 10.100.0.23  DNS Standard query response, No such name
2.027353  10.100.0.23 -> 10.100.0.10  DNS Standard query SRV _telnet._tcp.mariesa.techsupport.local.techsupport.local
2.027840  10.100.0.23 -> 10.100.0.10  DNS Standard query SRV _telnet._tcp.mariesa.techsupport.local.techsupport.local
2.028764  10.100.0.10 -> 10.100.0.23  DNS Standard query response, No such name
2.029120  10.100.0.10 -> 10.100.0.23  DNS Standard query response, No such name
2.029562  10.100.0.23 -> 10.100.0.10  DNS Standard query SRV _telnet._tcp.mariesa.techsupport.local.techsupport.local
2.030249  10.100.0.23 -> 10.100.0.10  DNS Standard query SRV _telnet._tcp.mariesa.techsupport.local.techsupport.local
2.030829  10.100.0.10 -> 10.100.0.23  DNS Standard query response, No such name
2.031551  10.100.0.10 -> 10.100.0.23  DNS Standard query response, No such name
4.042563  10.100.0.23 -> 10.100.0.10  DNS Standard query A mariesa.techsupport.local
4.043651  10.100.0.10 -> 10.100.0.23  DNS Standard query response A 10.100.0.103
4.064124  10.100.0.23 -> 10.100.0.10  DNS Standard query A mariesa.techsupport.local
4.065093  10.100.0.10 -> 10.100.0.23  DNS Standard query response A 10.100.0.103

That is very aggravating, since I don’t see a way to turn it off. Some Googling reveals a post on the topic.

Update: Stany did a little digging, found lots of patches, but not what I was looking for:

Now, regarding SRV lookups…. I’ve not noticed anything magic in the source that causes that to happen. Maybe that’s part of GSSAPI stuff – I frankly weren’t looking too closely. Maybe it’s something that libSystem.B.dylib does on behalf of ssh. Further investigation is needed, as it didn’t jump out at me.

So I’m thinking that this must be a part of the resolver. Although, it is doing lookups for _telnet._tcp.

DrunkenBlog: Behind the Red Shed, with Jonathan ‘The Wolf’ Rentzsch

In this post on DrunkenBlog, Jonathan Rentzsch gives a terrific interview. Notably, he discusses Apple’s enterprise software development gem, WebObjects, which I’ve always wanted to know more about.

Anyone know if there is a downloadable developer’s version somewhere?

Update: Yes, you can download a 1 month evaluation copy from http://connect.apple.com/.