Removing paint from old plastic models and toys

So, someone got the bright idea that my Dad’s Lionel 6017 caboose needed a gold roof and painted it. Great, huh?

Believe it or not, it’s possible to remove paint from plastic and metal toys and models, using household items, easily and inexpensively. Whether you’re wanting to restore an old Lionel train to what it’s supposed to look like or wanting to strip chipped paint off a Matchbox car to prepare it for repainting, it’s easy to do.All you need is an old toothbrush, a pair of rubber gloves, a bottle of pine cleaner, and a plastic container–ideally one large enough to hold the item but with very little room left over.

Pine Sol isn’t as good for this as the cheapy knock-offs. The formula seems to have changed in recent years, making it more gentle than it used to be. Place the item in the container, pour in some of the cleaner, and let it sit.

In the case of Dad’s caboose, I should just pour in enough to immerse the roof since that’s all that’s painted. The cleaner will also gladly take off the white lettering that came from the factory, and I want to leave that alone. If the entire item is painted, cover the whole thing.

Within a few minutes the paint will start to bubble. Let it sit overnight, then put on the gloves, pull out the item and start scrubbing. Most of the paint will peel right off. If you have any stubborn spots, immerse it again and let it sit a while longer. Change the bath if it’s too stubborn.

You’ll be amazed at how easily it works.

If you intend to repaint, remember to primer first. Apply two thin coats. Just hold the can a few inches from the item and spray a fine mist. It doesn’t have to cover completely. Let it dry, then apply another fine mist. Ideally, the primer should be as similar to the top coat as possible, but it’s not necessary.

To apply the final coat, again, spray a fine mist. Shake the can liberally beforehand to mix in all of the pigment. Three or four thin coats look much better than one thick coat. If you’re going to apply decals, use a glossy finish. If you want a flat finish, you can apply a flat lacquer finish after applying decals. Take your time, and you’ll have an item to be proud of.

As for Dad’s Lionel 6017, no paint for it once the paint removal is complete. It’s staying red plastic with simple white lettering, just as the guys in New York intended 50 years ago.

Thoughts on backups

Backups have weighed heavily on my mind lately. When you have 125 servers to tend to at work, chances are one of them is going to fail eventually. Really what seems to happen is they fail in bunches.

One of my clients has a problem. He’s out of capacity. And that’s gotten me thinking about backups in general.You see, my client’s golf buddies are telling him nobody backs up to tape anymore. Backing up to disk is the hot thing now. Here’s the theory. Your network is fast, right? Why make it wait on the tape drive? Back up all your servers to disk instead, and they can all back up at once, and hours-long backups take minutes instead, and restores take seconds. And no more paying $3,000 for tape drives and $6,000 for a rotation of tapes for it!

Now here’s the problem. A CIO hears "disk" and he thinks of that 400-gigabyte IDE drive he saw in the Sunday paper sales ad for $129 with a $60 mail-in rebate. (It wasn’t really quite that big, and it wasn’t really quite that cheap, but these things are always better on Monday morning than they were the day before.)

No enterprise bases something as important as backups on a single consumer-grade IDE disk. For one thing, it won’t be fast enough. For another, they’re not designed to be used that heavily, that frequently. An enterprise could get away with something like HP’s $1200 entry-level NAS boxes, which use cheap IDE drives but in a RAID configuration, so that when one of those cheap disks fails, it can limp along for the rest of the night until you swap out the failed drive. The chances of one drive failing are small but too large for comfort; the chances of two drives failing at once are only slightly better than Ronald Reagan winning the Republican primary this year. With Abraham Lincoln as his running mate.

One can set up some very nice backups on a Gigabit Ethernet setup. Since Gigabit’s theoretical bandwidth is about 3 time that of Ultra320 SCSI’s theoretical bandwidth, you can back up three servers at once at full speed. Drop in a second NIC, and you can back up six. In reality, the disks in the NAS box can’t come close to keeping up with that rate, but the disk can still back up everything much faster than tape will. Even a lightning-fast state of the art 200/400 GB LTO drive.

Frankly, with such a setup it becomes practical to back up your most important servers over the lunch hour, to avoid losing half a day’s work.

But you don’t get it for $129.

And in reality, no enterprise in its right mind is throwing out tapes either. If they back up to disk, they spool that backup to tapes the next day, so they can store the tapes offsite for archival and/or disaster recovery purposes.

How important is this? I remember about a year ago getting a request for a file that was changed in the middle of a week, and the person wanted that copy from the middle of the week, not from our Friday backups that are archived longer. Even with a tape rotation of 40 tapes, I couldn’t get the file. The tape had been overwritten in the rotation a day or two before.

While rare, these instances can happen. A 40-tape rotation might not be enough to avoid it. Let alone just a couple hundred gigs of disk space.

But what about home?

Consumer tape drives had a terrible reputation, and based on my experience it was largely deserved. The drives had a terrible tendency to break down, and the failure rate of the tapes themselves was high too. The lack of comfort with enterprise-grade tape that I see in my day-to-day work may stem from this.

The last time I was in a consumer electronics store, I don’t think I saw any tape drives.

I suspect most people back their stuff up onto optical disks of some sort, be it CD-R or RW, or some form of writable DVD. The disks are cheap, drives that can read them are plentiful, and if floppies are any indication, the formats ought to still be readable in 20 years. My main concern is that the discs themselves may not be. Cheap optical discs tend to deterriorate rapidly. Even name-brand discs sometimes do. We’ve had great luck with TDK discs ever since Kodak took theirs off the market, but all we can say is that over the course of three years, we haven’t had one fail.

The last time my church’s IT guy called asking about backups, we happened upon a solution: a rotation of USB hard drives. Plug it in, back it up, and take the drive home with you. It’s cheap and elegant. Worried about the reliability of the drives? That’s why you use several. Three’s the minimum; five drives would be better. Use a different drive every day.

It’ll work, and it’s pretty affordable. And since the drives can be opened up and replaced with internal drives, it has the potential for cheap future upgrades.

How about the reliability of hard drives? Well, I have a box full of perfectly readable 120-meg drives in my basement. They date from 1991-1993, for the most part. I bought them off eBay in the mid 1990s, intending to put them in computers I would donate to churches. The computers never materialized, so the drives sat. I fire one up every once in a while out of curiosity. The copies of DOS, Windows 3.1, and the DOS Netware client that were on them when I got them are still there.

Some technology writers have observed that modern IDE hard drives seem to have a use-by date; they just seem to have a tendency to drop dead if they sit unused for too long. I see this tendency in a lot of devices that use inexpensive electric motors. Starting them up every once in a while and giving them a workout to keep the lubricants flowing and keep them from turning glue-like seems to be the best way to keep them working.

At this stage, I’m less worried about the long-term viability of hard drives than I am about optical discs. Ask me again in 20 years which one was the better choice, and I’ll be able to answer the question a lot better.

If you’re stuck using optical discs, the best advice I can give is to use a brand of media with a good reputation, such as TDK, make multiple copies, and store them in a cool, dark, dry place. The multiple copies should preferably be stored in different cool, dark, dry places. Light seems to break down optical discs, and cooler temperatures as a general rule slow down chemical reactions. Dryness prevents chemical reactions with water and whatever the water might manage to pick up.

Your Fair Use rights are in danger (again)

In case you haven’t yet, you really need to read about The INDUCE Act. The potential is for any device that could be used to illegally copy copyrighted material to become illegal, and the manufacturers of said devices liable for their use.

This is wrong for so many reasons. Take the example of the crowbar.I can use a crowbar to break into my neighbor’s house. By this logic, a crowbar should be illegal. Never mind that a crowbar is a useful tool. I own two of them. I bought them so I could pry out the rocks that make up my patio so I can put down a weed control mat under them. I hope I’ll never have to use one to free someone from a car whose doors and windows won’t open, but I can. If I use a crowbar to free my neighbor from a car wreck, I’m pretty sure he’ll be glad I had that tool. Even if I could have used it to break into his house.

The main target is P2P networks. But the bill is too broad. Under some interpretations, an iPod would be illegal because you might load CDs that you borrowed from me into it. I suppose a camcorder would be illegal too, because someone might take it into a movie theater. Never mind that 99.999% of camcorder owners use them to shoot home movies. The risk of someone using a camcorder to make an illegal copy of a movie is too great to allow you to preserve family memories.

Is this really the direction we want to head? Do we want to be a dictatorship run by big media conglomerates?

Mr. Hatch, I suppose you believe that when someone uses a firearm to kill someone, the manufacturer of said device should be held liable? I suppose you believe that the risk of consumers using firearms to kill one another is great enough that firearms should be illegal? Am I following your logic correctly?

Don’t get me wrong. I’m not a pinko Commie who doesn’t want to pay for anything. I’m actually a Republican. But real Republicans believe in balance. I respect intellectual property. I’ve written and published a book. A few people even liked it. I really didn’t make enough money off it to make it worth my while–I could have made more working the late shift at a fast-food restaurant. The biggest things I have to show for it are a published book on my shelf with my name on it, and the thrill of having walked in to Borders and seeing it.

So I didn’t make as much money as I would have liked. That’s my problem. I don’t blame photocopiers and scanners for my book not selling 4 million copies. I can blame my publisher for not promoting it and not getting more copies of it into the niche marketplaces where it sold well, and I can blame myself for not promoting it and not sending out news releases saying I got published, and I can even blame myself for not targetting it properly.

If I write a book that people want to read, and my publisher and I do a good job of getting the word out about it, I’ll make money. If I can make more money fixing computers or mowing lawns than writing books, then the answer isn’t to try to manipulate the legal system. The answer is to either figure out how to make money producing intellectual property, or spend that time doing something else.

If my desire to protect my rights starts infringing on your ability to do things you need to do, then it’s gone too far. As my former journalism professor Don Ranly was fond of saying, my constitutional rights end at the tip of your nose.

Why do Orrin Hatch and his buddies cooperate in the creation of what’s essentially a welfare state for large corporations, at the expense of our liberties?

Would you please ask your Congresspeople these questions?

Leave your DIY PCs at home

This is a response to the eWeek editorial Bring DIY Systems to Work. Nice theory. Unfortunately, lab theory and the real world don’t always mesh.

I like building PCs. I built my first PC in early 1994, back when everything was on a separate card and you had to set interrupts and DMA channels using jumpers and DIP switches and in most cases you had to tell the BIOS exactly what size drive was in it–it wouldn’t detect anything for you. I built my main PC at home myself. I built my secondary and tertiary PCs at home myself too. And my girlfriend’s PC, and my mom’s PC, and my sister’s PC.

Get the idea?

Read more

A model railroad scale conversion chart

Plans in model railroad books and magazines are often in a different scale from your favorite. Having a model railroad scale conversion chart helps.

I’m into O scale and the rest of the world, it usually seems, is not. Dimensions for published plans are almost always sized to HO scale, or even S scale of all things. Of course, after A. C. Gilbert imploded in 1967 and took American Flyer with it, it seemed like the “S” is S scale stood for “scratchbuild,” because building it yourself was the only way you were going to get anything, so I guess that’s fair.

Here’s a cheatsheet you can use to convert measurements from one scale to another.

Assumptions: O scale is 1:48, G scale is 1:22.5. If you use a different measurement for either scale, I’m sorry. This won’t be much use to you.

G Scale O ScaleS ScaleOO ScaleHO ScaleTT ScaleN ScaleZ Scale
G Scale213%284%339%386%533%711%977%
O Scale47%133%158%181%250%333%458%
S Scale35%75%119%136%188%211%289%
OO Scale30%63%84%115%158%211%289%
HO Scale26%55%73%87%138%184%253%
TT Scale19%40%53%63%73%133%183%
N Scale14%30%40%48%54%75%138%
Z Scale10%22%29%35%40%55%73%

Find your scale in the table along the top. Then scroll down to the desired scale and find out the factor you need to enlarge or reduce. So, if, say, I have HO scale plans I want to enlarge to O scale, I run across the top to HO, then down to O scale, and see that I need to enlarge the plans to 181%. If I have O scale plans I want to reduce to S scale, I run across the top to O and down to S, and see I need to reduce the plans to 75%.

You can also do this if a building you want exists in kit form for a different scale. Measure it. Then do the math based on the chart to figure out what size to build everything for your scale of choice.

Further reading

I hope you find this model railroad scale conversion chart useful.

On a somewhat related note, if you’re unsure what scale something is, here’s how to figure that out before you convert it. You might also find my cross-hobby scale conversion helpful.

The second-cheapest way to get household necessities

The topic at lunch at work turned to saving money around the house earlier this week, largely because one of my coworkers suddenly found himself with full responsibility for his two pre-teen nieces. The coworkers who are parents started talking about the best places to get good used clothes, the best places to get food cheap, and other stuff. Not being a parent, I just listened. I’m not at that stage in life.

I’m in a different stage of life, still a relatively new homeowner. Yesterday I paid a grand total of $5 for an ironing board and a stepladder, two things I’ve been surviving without. I’m about ready to quit going to the hardware store and to Kmart.The secret is estate sales.

Estate sales are usually crowded affairs, as people swoop in from all corners of the globe to cram themselves into tiny houses in search of things that are rare, things that are cheap, or best yet, rare and cheap.

I see two types at estate sales. The first is the well-to-do, who are there in hopes of securing antiques and collectibles for pennies on the dollar. The other is recent immigrants, who are generally there in search of inexpensive household necessities. They already know the secret.

The best time to go to estate sales is either really early or really late. If you get there early–it seems like people show up an hour early sometimes–you’ll get the best selection but you’ll pay top dollar. In some cases I’ve seen things priced at literally 10 times what they’re worth. In less extreme cases, I’ve seen tools priced the same as a new one at Sears.

Then again, yesterday I bought a pair of small pruning shears for 50 cents and a sharpening file for a quarter.

If you get there on the last day, reality has kicked in, the sucker prices have generally gone away, and dickering becomes the rule of the day. Prices drop by a factor of two or three, and the later it gets, the more willing they are to listen to prices.

If you’re shopping for household necessities, this is a good thing. The antique furniture dealers have no interest in ironing boards and laundry baskets and trash cans. Recent immigrants do, but chances are they already have those things. Stuff like this is often priced low to begin with, and it gets cheaper as time marches on because the chances of someone buying it are pretty low.

You can get household appliances cheap too. I saw a 20-inch Zenith TV marked at $50 yesterday. I know it works because they had it turned on. I’ll bet someone will get it for $20 today. I saw a washer and a dryer priced around $200 each yesterday. The washer was less than two years old. The dryer was a bit older but it was a Maytag. Those prices were decent, and could go way down if they sat long enough. If you’re willing to live without a warranty, you can save yourself a bundle. Two years ago I paid $900 for a washer and a fridge. A friend gave me a dryer. It looks like it could be 25 years old but it works and I was happy to save $250.

But yesterday I wasn’t looking for appliances. I wasn’t necessarily looking for household necessities either, but I’ve been needing a stepladder and a full-size ironing board. So when I spotted one marked at $4.50 and $6, respectively, I wasn’t going to pass them up. It was around noon, and it was a Friday-Saturday sale. They’d be closing up shop in an hour or two. Anything under $20 was automatically half price. I dragged the ironing board and the stepladder up to the checkout. “Five dollars is fine,” she said.

And it was fine with me too. I still remember the day when I went out to either Wal-Mart or Kmart (I try not to shop at Wal-Mart anymore but I did then), days before I moved out of my mom’s house for good, to buy household necessities. After spending more than $200 on things like trash cans and laundry baskets, there was still a lot of stuff I lacked.

If I’d known then what I know now, I probably could have gone to three sales, spent a grand total of 50 bucks, and ended up lacking a lot less.

A super-cool Mozilla extension

I’m about to get you to dump Internet Explorer for good.

And no, this has nothing to do with the latest security exploits (there were only four revealed this week, right?). This has to do with functionality.

Super Drag & Go is what I call a disruptive technology. It’s like multitasking. You won’t understand what the big deal is when I explain it to you, but once you try it out, you’ll find it impossible to use a computer that doesn’t have it.It’s dead simple. You’re using the Web for research. You’re tooling along, finding lots of information you didn’t know about ancestors, obscure toy train manufacturers, or whatever it is you like to use the Web to research. You hit upon a name or phrase or topic or book title that’s useful, so you highlight it with your mouse, copy the text, then open a new browser window, go to Google or Amazon or Dictionary.com or Wikipedia or whatever the appropriate research tool is, paste it in, and keep on going, right?

Wrong. That’s what you used to do.

What you do is you install Mozilla Firefox, then you click on that Google icon and install the interfaces for whatever search engines besides Google you like (there’s plumbing that hooks you up with Wikipedia, Amazon.com, Dictionary.com, and everything else you can possibly think of). Then you install Super Drag & Go. Then you instantly become about 40 times as productive as you were 20 minutes ago.

How? I tool along the same way I always did. Then, when I find reference to, oh, say, Voltamp, I highlight it like I was going to copy and paste it, but instead of hitting copy, I just drag it with my mouse over to some blank area on my browser window.

Boom-shakalaka, a browser window opens with that phrase punched into Google for me with my results. So then I can read the three–wait, now it’s four!–webpages that make mention of the first company that made an electric toy train that used a transformer plugged into a household AC wall socket.

(You can thank me later for putting that song in your head. Change browsers and I promise I won’t do it again.)

Of course, if you’ve changed your default search engine to something else, then it’ll go to that other page. Now you know why it might be useful to set your default search engine to Wikipedia or Amazon.com. It changes back easily–it’s just a matter of clicking the icon in the browser’s search bar.

Next time I see him, I’ll have to thank Todd, the coworker who showed me how this works. I’d read about it and dismissed it, until he showed it to me. And now?

It’s not a habit, it’s cool. I feel alive. If you don’t have it you’re on the other side. I’m not an addict…. Maybe that’s a lie? –K’s Choice, Not an Addict

Some painting tips for around the house

My mom and girlfriend and sister spent some time this past week painting my house. I can paint a little, but it’s not something I enjoy as much as they do, and I’m definitely not as fast as they are.

I made a couple of small contributions. It was strictly a case of me applying things I’ve learned from model railroading. So there is some tangible benefit to that time I’ve spent playing with trains after all.

So here’s everything I know. (This is gonna be a short one.)Remove latex paint drips and spills with rubbing alcohol. Latex paint is water-soluble, but alcohol does even better. A rag dipped in alcohol makes quick work of the nasty stuff.

Don’t paint wall plates and registers with latex paint! In a lot of older houses, you’ll run across these things, painted in a misguided attempt to make them match the room color. The result always looks like crap, because latex paint is intended for drywall, which is porous, and plastic and metal aren’t. The result is you get a thick, gloppy mess that peels really easily.

If you want to paint those metal registers or plastic wallplates, paint them with a paint designed for a nonporous surface. Find a can of spray paint whose color is a nice complement to the room color (you probably won’t find an exact match). First, prime it with two superthin coats. Spray a thin coat that just puts a colored haze over the surface and let dry. A few hours later, put on another thin haze. Next, paint with the desired color in the same fashion. About 3-4 of these coats will cover it with a very nice, smooth, durable layer. People who’ve been doing this much longer than me say Krylon is the best brand.

What to do if someone already ruined your register with several thick coats of latex. I had a return vent cover that was covered with about three thick, ugly layers and the texture of a poorly done ceiling. I took it out to the garage, chucked a wire wheel into my drill, and ground off all that paint, all the way down to the metal. For stubborn spots, I used my Dremel rotary tool with a grinding bit chucked into it. I then primed and painted it. The result doesn’t look quite new, but it looks far, far better than it would with any coat of latex paint on it.

For plastic wall plates, it’s not worth the effort. Buy a 25-cent one and paint it the color you want. But saving a vent cover is easy.

Free stuck and painted-over screws with a pair of locking pliers. Lock a pair of pliers (I use the Vise-Grip brand) around a stuck screw as tightly as it will go, and turn. You’ll have to re-lock and turn several times but if you work at it, the screw will come out. To clean off the paint so you can reuse them, you can just carefully chip off the paint–you’re more likely to injure yourself than the screw–or soak in alcohol. I cleaned out two slotted screws by sawing along the painted-over slot with a small razor saw intended for hobby use. After just a little convincing, the paint just lifted out. I guess slotted screws have one advantage–just one–over Phillips screws after all.

For rusted screws, try soaking them overnight in a glass of cola. The phosphoric acid in the cola attacks the rust. You could also try chucking a bit of aluminum foil in your drill or rotary tool and polish it. Aluminum oxidizes much more quickly than iron, so the aluminum rubbing against the rust will de-oxidize the iron and give you a shiny surface again. Drive the screw into a piece of scrap wood and then paint it to keep it from oxidizing again. Then remove the screw and re-use.

It\’s 2004, and that means a new presidency

I am Lutheran. Lutheran in both senses. Dad was Lutheran because his mother was Lutheran and she was Lutheran because her grandparents were Lutheran when they got off the boat in Philadelphia. But that’s not the end of my Lutheran background–my ancestry hits Baron Jost Hans Hite (Heydt) at least twice.

But I’m not a Lutheran just because my forefathers were Lutheran. I left the church, and at 22 found myself at another church that I sensed was teaching things that were wrong, but I wasn’t sure why. So I read the Bible cover to cover trying to find out why. And in the end, I realized the Lutheran explanation of all this stuff made more sense than anyone else’s.

So here’s my take on the Lutheran Church-Missouri Synod’s much publicized convention.The semi-underground Christian News reported the following: “MAJORITY IN THE LCMS VOTES THAT LUTHERANISM IS NOT WHAT THEY WANT IN A CHURCH – KIESCHNICK IS RE-ELECTED; OKLAHOMA D.P. DIEKELMAN ELECTED AS 1ST V.P.”

I define “Lutheranism” as a discipline that teaches people to read and interpret the Bible and not necessarily take the clergy’s word for it because the clergy can be wrong and needs those checks and balances. That’s my Lutheranism.

In my Lutheranism, God chooses us, not the other way around.

In my Lutheranism, we believe that faith without works is dead, but we teach that it’s God who does those works through us. It’s by grace that we’re saved, not those works. Works are a symptom of that disease called faith. We don’t do it ourselves! That’s what Jesus came here for, because we spent 4,000 years proving that all we could do was mess it up! In my Lutheranism, we don’t compare works and beat each other up trying to prove who’s the better Christian.

In my Lutheranism, “grace” is a simple concept: God’s riches at Christ’s expense. And that’s Lutheranism’s greatest treasure.

I may have ruffled a few feathers by not saying anything about tradition. Funny thing about tradition. It explains things that were never officially written down, and that can be a good thing. But tradition can get in the way too. The Pharisees had tradition. In spades. Jesus had some problems with them.

And I wonder sometimes too if we Lutherans might be a bit too smug. The Lutheran stereotype is someone with a whole lot of education and a whole lot of money. We’re successful, and that makes us not too eager to try out something we never thought of before, because, well, look where my way has gotten us!

There’s room for tradition and excellence in my Lutheranism. But when tradition and excellence get in the way of that last thing Jesus said before the ascension (“Go to all nations, baptizing them in the name of the Father, Son, and Holy Spirit”), then they become a problem.

When publications like the New York Times and the St. Louis Post-Dispatch call you “The Taliban of American Christianity,” I think we have a problem.

Now, I know I don’t have as much education as some people, but when I look at the election results, I don’t see it as a majority of delegates rejecting Lutheranism. I see it as a majority of delegates rejecting the power plays and the infighting that happened after an LCMS pastor offered up a prayer in mixed company at Yankee Stadium after the Sept. 11, 2001 terrorist attack.

Some believed that wasn’t a very Lutheran thing to do. And some believed it wasn’t a very Lutheran thing for our president to do, approving this despicable act of praying in mixed company. Now I’m not saying that this was the motivation, but what happened next appeared to be an attempt by the president’s political opponents to bring him up on charges so they could take the presidency, since the next person in line for the presidency was one of the president’s political opponents.

It left a bitter taste in some people’s mouths.

And I think that’s why Dr. Gerald Kieschnick won re-election by a reasonably comfortable margin on the first ballot this year, and why another person much like him won the #2 slot, and other like-minded people took three of the remaining four slots.

I have one question for those of you who are Lutheran like me.

If–without changing any of your fundamental beliefs, but simply losing a label–if giving up that “Lutheran” label would cause one–just one–person to be in heaven who otherwise wouldn’t, would you do it?

No one’s asking you to do that. I’m just trying to get you to decide where your priorities sit.

If you use Mozilla, you need to read this

No sooner than I presented Mozilla, specifically Mozilla Firefox, as a safe alternative to Internet Explorer did an exploit for Mozilla show up. Argh!

At least the fix came out swiftly and installs painlessly. Visit the page, click another link, wait a minute or so, and then restart the browser. Badda bing, badda boom, you’re patched. No reboot necessary.I still stand by my recommendation of Mozilla, whether it’s the entire bloatware Mozilla suite or the lightweight Mozilla Firefox, over IE. Why? Lessons learned from Linux.

When a vulnerability is discovered in a Microsoft product, an unpredictable length of time passes before the vulnerability is patched. Sometimes it’s a matter of days, but sometimes the length of time is just plain ridiculous. Forgetting for a minute how frequently patches come out–a case can be made that Linux gets more patches than Windows but just as strong of a case can be made that it gets less–the length of time that passes between the instant the vulnerability is discovered and announced and the release of a patch is usually very small. Usually it’s a matter of hours.

The reason is simple. Lots and lots of eyeballs looking at the code. And in Open Source, having your name in the code is a badge of honor. It’s a big, big line on a resume to say you wrote a line of code in the Linux kernel.

Other open-source software gets patched just as quickly, however. Not every open source programmer is comfortable maintaining operating system kernels. And no self-respecting programmer wants his or her system hacked due to a vulnerability in a piece of software she or he was perfectly capable of fixing.

This particular vulnerability stems from a little-known capability in Mozilla. I’m sure there was a legitimate use for it at one time, but were Mozilla being designed and rewritten from scratch today, I can’t see how it would possibly be implemented because the potential for abuse is huge. The code’s gone now. It won’t be in Firefox 0.92 or the next revision of the Mozilla suite.

Will there be other instances of this? Sure. Probably less of it, since Mozilla was a total rewrite of Netscape and the engine is entirely different from the one in Netscape 4.x. The IE codebase goes back to the early 1990s, as it’s based on the old NCSA Mosaic code, which Microsoft licensed from Spyglass. (Go into IE and hit Help, About to see for yourself.) There’s much more potential for harmful dead wood in IE than in Mozilla, but the presence of some in either is inevitable.

But at the end of this year’s storm season, I expect Mozilla to come out a lot stronger because most of the dead wood will be shaken out. I don’t expect the same from IE. The codebase is too old, the teams too disparate, and the motivations behind the changes that have been made were too different from Mozilla.

I’m standing by my browser.