Author: Dave Farquhar

You need a Yubikey.

Dave Farquhar security , , , , , , , ,

I mentioned the Yubikey as the ultimate solution stolen passwords on the excellent Yahoo Marx Train forum, and another member asked me to elaborate on it. Rather than take up a lot of space with some off-topic discussion, I decided it would be better to write about it here.

The Yubikey is a great idea, but I have reasons for using something else. I am a computer security professional by trade, but I will try to avoid as much techno-jargon as I can, and explain what I do use.

Read more

What to do if you’re a charity stuck on Windows XP

Dave Farquhar Uncategorized , , , , , , ,

If you’re a charity still running Windows XP, hopefully you’re spooked about Microsoft pulling the plug on XP in April 2014. If you aren’t, get spooked, because you’ll be sitting on a major security vulnerability.

The question is what to do. You do have a few options.

Read more

Deconstructing the healthcare.gov website fiasco

Dave Farquhar Uncategorized , , , , ,

By reader request, I’m going to grab onto the third rail and talk about the Affordable Care Act/Obamacare/healthcare.gov website fiasco.

As someone who has been involved in a large number of IT projects, inside and outside the government, successful and failed, I can speak to that. I know the burning question in everyone’s mind is how can three guys banging away at a keyboard for three days build a better web site than the United States Government?

The snarky answer is that the best projects I’ve ever worked on have been when someone asked for something, then one or two other guys sat down with me and we banged away at a keyboard for a little while and didn’t tell anyone what we were doing until we were done.

But it’s probably more complicated than that. Read more

How I find podcasts to listen to

Dave Farquhar Uncategorized , ,

Last week I raved about podcasts, and a reader comment asked how I find them. Good question–worthy enough to be the subject of a post, rather than just a two-line comment in response.

There are several ways to find them, and I think it’s worth the effort.

Read more

What to do when the layoff comes

Dave Farquhar Careers , , ,

An IT pro I went to high school with–he was a year or two ahead of me, so we weren’t quite classmates–got a layoff letter this past week, along with the rest of his department. It was a large, successful company making purely a financial decision to offshore a bunch of jobs, and unfortunately he got caught in the crossfire. It reminded me that I’ve been meaning to write about this for a while, so now’s as good of a time as any.

The details about his layoff and my layoffs are unimportant. What’s more important is what to do next. There are definitely things I know now that I wish I’d known years ago, so I’ll share them now.

Read more

Need a load for your Marx plastic flatcar? Look to Tonka.

Dave Farquhar Toy trains , , ,

In the late 1950s, Marx sold a flatcar, labeled #5545 and lettered for the CB&Q (Chicago, Burlington & Quincy), with a large black clip in the middle. Marx shipped it with a pair of miniature trailers. These frequently got separated from the flatcar, so frequently you’ll find the car, sans vehicles, in the cheapie boxes at train stores and under the tables at train shows. The trailers are worth considerably more than the flatcar alone.

But there are some common, relatively inexpensive toys that work well on these common plastic freight cars.

Read more

Taking back the drive time

Dave Farquhar security ,

Several months ago, I started listening to security podcasts in the car during my commute. I probably have my annual CPE requirement tripled by now–I’ll go submit my 30 in a week or two, and I don’t see much point in tracking it beyond that–but, more importantly, I’ve increased my professional awareness. Read more

Baidu: The lightweight browser for low-end Android

Dave Farquhar Android , ,

I went looking for a resource-friendly browser that would run well on a 1 GHz-ish Android tablet. Everything I read said that Baidu was the lightest browser on resources. Since Baidu is a Chinese company and very low-end Android tablets are common in China, this makes sense.

I’ve never been one to shy away from alternative browsers on low-end systems on other platforms. Usually I sacrifice some rendering quality, but I frequently found that preferable to waiting around for minutes for bloatware to load and pages to render at glacial speed.

So I tried out Baidu, in spite of criticisms of its user interface and annoying defaults. The annoying defaults, it turns out, are easy enough to turn off, and I found the user interface, though out of style, makes it easier to use. It has forward and back buttons, unlike most other browsers on Android, and tapping those buttons is far more responsive than gestures on high-end browsers. I’m willing to give up 8 pixels of vertical space for that. Read more

Benchmarking Android

Dave Farquhar Android , ,

After rooting a device and loading a ROM or two on it, it’s easy to start to wonder what tweaks and settings actually make a difference in performance or whether you’re just imagining things. For example, my devices all have the option to force Android to use the GPU for rendering (under Developer Options), but does it really help?

Benchmarks are a synthetic but objective way to measure the effect. I use Antutu. Read more

Android ROMs explained

Dave Farquhar Android , , , ,

To the uninitiated, the world of Android ROMs can be more than a little confusing. Since Android is based on Linux and therefore large portions of it are licensed under the GPL, enthusiasts are free to create and release their own builds.

That’s where some of the confusion comes from. When you buy an Android device, it comes with Android pre-loaded of course. Then, when Google releases a new version of Android, it releases it to the vendors and to the phone companies. If your device is really popular and you’re really lucky, you’ll get an update from either the carrier or the vendor. Usually the update comes with some ridealong software, which you may or may not find useful.

Enthusiast-built Android ROMs tend to come out much sooner than official ROMs sanctioned by the manufacturer, and they don’t come with the bloatware either, so they tend to run a lot better. My venerable Samsung Galaxy S4G phone, which is nearly three years old, runs better on an enthusiast-built ROM than it ever ran with the vendor-provided one, and the enthusiast-built ROMs are much more up to date. Read more