Why you need to guard your Backup Exec servers

Dave Farquhar security , , ,

If you have a Windows domain, there’s a fairly good chance you have Backup Exec servers, because you probably want to take backups. Because you need them. (As a security guy, I no longer care how you get backups; just that you’re getting them somehow.) Backup Exec is a popular solution for that. But there’s a problem.

A security problem, that is. The quality of Backup Exec as a product hasn’t been my problem since 2005. The problem I have with it now is that Backup Exec stores its passwords in a database. The passwords are encrypted, but it’s possible to decrypt the backup copy, if you’re determined enough.

Read more

Finding a connection to my Dad in a suburban St. Louis estate

Dave Farquhar Toy trains , , , , , ,

Yesterday I wrote about my greatest estate sale find ever. Well, the very same month as that one, I found another estate sale featuring a Lionel 1110 locomotive, which happened to be my Dad’s first train. So of course I put that sale on my list. The 1110 wasn’t among Lionel’s finest moments, but I’ll note that in 1986 when Dad and I pulled his postwar Lionels out of storage, it was the first of Dad’s locomotives that we got running, and in 2003 when I got them out again, it was the only one that still ran.

Well, this 1110 didn’t run. The motor assembly was cracked and it wasn’t worth the asking price. But behind the locomotive, I found some paperwork. “Build these realistic models!” it urged. It was marked $4. The tag warned it was very delicate. I took it out of the plastic bag it was in, decided against trying to unfold it, and bought it unseen. Read more

My greatest estate find

Dave Farquhar Toy trains , , , , , , ,
My greatest estate find

If you’ve been reading this blog for a few years, you know I kind of like trains. But my favorite way to buy them isn’t to buy them at a train store. I like to buy them from estates.

One week, I spotted a few late-production Marx 6-inch cars and a plastic locomotive in an estate ad. I tallied up $30 worth of trains in the picture, and figured I’d be lucky if they asked $60 for it. But I decided to take another look at the picture,  just in case.

This wasn’t an ordinary train. Read more

The world’s fastest budget PC

Dave Farquhar Hardware , , , , , , , , , , , , , , , ,

So, a relative’s PC was getting a bit aged, and runs Windows XP, barely, so I talked them into an upgrade. I noticed that Micro Center had HP/Compaq DC5700s for $99. They were standard issue office PCs a few years ago, and there are a lot of them in the refurb channel. We went and got one over the weekend.

“What are you going to do with that?” the sales rep asked. “We only use them as cash registers.”

“Word processing,” I said.

“You sure you want to run Windows 7 on an 8-year-old PC?”

“I wrote the book on running Windows on older PCs. Literally. It’ll be fine.”

I hate calling rank like that, but sometimes it’s what you have to do.

And really, for $99, it’s awfully good. Web browsing is plenty fast, Libre Office runs fine on it, and think about it. Windows 7 retails for $100-$109. So it’s like getting the hardware for free. Or Windows for free, however you want to look at it.

Read more

More about Pfsense, the alternative to the crappy consumer router

Dave Farquhar security , , , , , , , , , , , , , , ,

I spent some time over the weekend playing with Pfsense, and I can’t say much about it other than it does what it says. I didn’t throw a ton of hardware at it–the best motherboard I have laying around is a late P4-era Celeron board, and the best network card I could find was, believe it or not, an ancient Netgear 10/100 card with the late, lamented DEC Tulip chipset on it. Great card for its time, but, yeah, nice 100-megabit throughput, hipster.

If you actually configure your routers rather than just plugging them in, you can do this. Plug in a couple of network cards, plug in a hard drive that you don’t mind getting overwritten, download Pfsense, write the image file to a USB stick, boot off the USB stick, and follow the prompts. Then, to add wireless, plug in a well-supported card like a TP-Link and follow the howto. Read more

How I freshened the paint on a Lionel RW transformer

Dave Farquhar Toy trains , , ,

I have a Lionel RW transformer that I would like to put on Christmas tree duty next year. I had a KW on that duty last year, which is a nice transformer, but it’s overkill, and my sons find it easier to operate the whistle with a button like the RW has than with the KW’s handle.

Lionel RW
This Lionel RW transformer doesn’t look pristine after my paint touch-ups, but it certainly looks presentable.

I repaired the RW last year, but I didn’t do anything about the paint. The original paint wasn’t in too bad of shape, but it had some scratches and dings in it, as you would expect a well-loved 60-year-old toy to have. But since the paint wasn’t perfect, I could repaint it without offending anyone, which is what I wanted to do, seeing as the original paint dated to before 1978, and therefore might contain lead.

The job didn’t take long. I didn’t do a full disassembly, and I didn’t do anything resembling a professional restoration. My goal was to make the transformer presentable and safe, and I think I succeeded at that. Read more

Consumer routers are the security vulnerability of the year, so far

Dave Farquhar security, Servers and Networking , , , , , , ,

Today I found an article in PC World that gives a somber assessment of the state of consumer routers, like the device that probably sits between you and the Internet.

I’m glad this is getting attention. There’s a lot more to it than what’s in the PC World article, but I’ve droned enough about what’s bad about consumer routers. It’s bad now, and it’s going to get worse before it gets better. Kudos to PC World for providing a bit of an action plan.

What if you want to go beyond what PC World is talking about? I’m glad both of you asked. Read more