Author: Dave Farquhar

Webserver Wednesday

Dave Farquhar Apache, security , , , , ,

Yesterday must have been Webserver Wednesdsay, because two things happened. A new version of Apache was released, and a new tool for testing the vulnerability of webservers to denial of service (DoS) was released.

Read more

A more likely use of the Medtronic exploit

Dave Farquhar Health, security , , ,

Yesterday morning, as I completed the long journey from my parking spot to my office, another more likely use of the security vulnerability in Medtronic insulin pumps occurred to me. Yes, the risks involving insulin are very real. And yes, a determined attacker could use this vulnerability to take a Medtronic owner’s life. But those chances are slim.

But nothing says this vulnerability has to be used to do mortal harm. An attacker could use it just for exploitation. And there’s enough difference that some people wouldn’t have a problem with crossing that line.
Read more

Fix weird Internet connection problems with ipconfig

Dave Farquhar Windows , ,

One of the most maddening things that can happen when you’re using a computer is that a web site you visit routinely quits working. Your Internet connection appears to be fine, but suddenly, for some reason, you can’t go to the site you were just using. Try to go to another site you haven’t visited in a while, and it’s fine. But whatever site you were using a minute ago doesn’t work anymore. The site becomes accessible again immediately after you reboot, but that’s a really big hassle.

There’s a much less drastic fix. It’s easy too, but non-obvious.

Read more

Shame on you, Medtronic

Dave Farquhar Health, security , , , , , , ,

Insulin pumps marketed by Minneapolis-based Medtronic have a serious, life-threatening security flaw, and the company couldn’t care less.

For these two reasons, this isn’t your typical security flaw, and Medtronic’s response–in 30 years, we’ve ever seen a problem that we know of–is beyond deplorable. Ford’s infamous decision to pay lawsuits rather than fix a deadly flaw in the Pinto comes to mind.
Read more

A bargain SSD for the masses

Dave Farquhar Hardware

I spotted a bargain SSD: The Kingston SSDNow V+100 96 GB  is available at Amazon for $130. (It’s available other places for about the same price, but with Amazon’s free shipping, it’s probably cheaper there.) It uses a Toshiba controller that (by some accounts) lacks NCQ, but other than that, it’s a modern controller, and it has a good track record, having been the controller Apple used in its Macbook Air.
Read more

My first really bad day in IT

Dave Farquhar security, War Stories , , , , , , ,

Next weekend is Labor Day weekend. I can’t remember if it was one Thursday or two Thursdays before Labor Day weekend in 1997, but one of those two days happened to be the beginning of the first crisis of my career.

Whichever Thursday it was, it was getting close to midnight when my phone rang. It was Max. The print server wasn’t working. That happened a lot. That server had IBM’s Services for Macintosh on it, which never worked all that well, and, worse, tended to make the rest of the server act up a lot. That in and of itself shouldn’t have been a crisis. But I’m getting ahead of myself.
Read more

A tip for selling something: Stage another interested buyer

Dave Farquhar Landlording

I stumbled into something today that I’m sure I’ve read elsewhere and had forgotten about.

We’re trying to rent this house out, you see. And so far, everyone I’ve showed it to has jerked me around about it. And most people don’t want to rent it. They want to buy it for nothing. It’s a little irritating, but I try to stay cheerful. I have to.

Today, I showed the house to a guy who kept going on and on about how it’s not very much house for what I’m asking–I’m asking what an experienced and successful realtor who knows the area says to ask–and finding tons of nitpicky things to dislike about it.

And then another car drove up.

Read more

Maybe this is how Apple does it

Dave Farquhar Macintosh , , , , , , , ,

Sitting in the stands at a baseball game the day after Steve Jobs’ surprise resignation from Apple, of course the subject came up.

“I wish I knew how Apple does it,” I said.

“I have an idea,” my friend Tom Gatermann said.
Read more

Watch out for this Apache bug

Dave Farquhar Apache, security ,

There is a nasty Apache exploit going around right now that exploits a vulnerability in versions 1.3.x, 2.0.x and 2.2.x. Basically, it allows the process to exhaust all available memory and crash by sending GET requests with overlapping byte ranges. The methodology seems to borrow a page from the teardrop attack. Yes, I’ve been studying for a security certification….

And now it’s Apple’s turn

Dave Farquhar Macintosh , , , , , , , , , , , ,

It’s been a weird month for technology. And as always, Apple had a way to get people to stop talking about anything else, though it’s not the news Apple wanted do deliver this week. I can only think of one bit of news Apple would want to deliver less.

Steve Jobs is stepping down as CEO. He’s becoming chairman, but perception is everything. Especially with Apple. I don’t think any company in recent memory has leveraged perception the way Apple has.

Read more