amd

Why I generally buy AMD

Dave Farquhar Hardware , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

I was talking to a new coworker today and of course the topic of our first PCs came up. It was Cyrix-based. I didn’t mention my first PC (it seems I’m about four years older–it was an Am486SX2/66).

With only a couple of exceptions, I’ve always bought non-Intel PCs. Most of the Intel PCs I have bought have been used. One boss once went so far as to call me anti-corporate.

I’m not so much anti-corporate as I am pro-competition.

Read more

The best way to optimize your firewall: Use hardware

Dave Farquhar Windows , , , , , , , , ,

Let’s get back to talking about utility replacements. We last talked about antivirus programs, but what about the other component of what’s commonly now called a “security suite,” the firewall?

The answer is, don’t use firewall software if at all possible–which means every man, woman and child who has a cable or DSL connection. Use a separate device.There are several good reasons for this. First, there’s the fundamental problem with running your security on the same system you’re trying to protect. If your firewall software goes haywire and crashes, you run the risk of being unprotected. It’s much safer to rely on an external device that doesn’t have an Intel or AMD processor in it and isn’t running Windows. So when someone tries to send a Windows exploit or virus to it, it bounces off because the device just doesn’t understand.

The second reason is price. A plain no-frills cable/DSL router/firewall costs about $20 at Newegg today. The unit I generally recommend is the Linksys WRT54G, which sells for about $50 new or as little as $25 used and adds wireless capability. That’s about the same as the retail price of a software firewall anyway, and it gives you better protection without robbing your system of performance.

A cheaper alternative, which was what I used to do when these devices cost $200, was to take an obsolete PC, put in a couple of cheap network cards, and run Freesco on it. It will run on any PC with a 386 processor or better (I recommend a Pentium with PCI slots for ease of setup). A 100 MHz Pentium is more than powerful enough and if you don’t already have an obsolete PC to run it on, you probably won’t have to ask around very long before finding one for a very low price or free. Today I prefer a Linksys-type box though, since they take less space, consume less electricity, generate less heat and noise, and take less time to set up.

Performance is the third reason. Two years ago I was working at a large broadband ISP that will remain nameless. It provides a “high speed security suite” as part of the subscription price. The system requirements for this suite are ridiculous–the suite itself needs anywhere from 128 to 192 megabytes of RAM all to itself to function. Basically, if you have a PC with 256 megs of RAM (which is what a fair number of PCs out there still have), loading this security suite on it will bring it to its knees. But if your firewall is running on a separate device, 256 megs of RAM is a comfortable amount of memory to run Windows XP or 2000 and basic applications.

Reliability is the fourth reason. Every high-speed security suite I’ve ever dealt with, be it a freebie provided by your ISP, or an off-the-shelf suite, hooks itself into winsock.dll. Three of the last four computer problems I’ve fixed have been related to this problem, and the symptoms are difficult to diagnose unless you’ve seen the problem before. Basically the computer loses any and all ability to do any networking, but when you call tech support, enough things work that tech support will probably tell you to reload your operating system. Unfortunately, the WinSockFix utility doesn’t seem to be well-known at ISPs.

If messing around with your Winsock isn’t bad enough, the security suite my former employer provided was overly paranoid about piracy. If you did any number of things, including but not limited to trying to install it on a second PC without getting a second key from the ISP, it would disable itself and not necessarily warn the user that it had left the PC unprotected. It was my job, when I was working there, to go through all of the disabled accounts by hand. It wasn’t an automated process. So if the security suite decided to go jump off a cliff sometime on Friday after I’d pulled the current report, it would be sometime on Monday before I would even be aware of the problem. Given that it usually takes about 20 minutes for some exploit to find an unprotected Windows box sitting on the Internet, that 48-72 hour window that you could be sitting unprotected is anything but ideal.

Things may have changed since I left that employer in November 2005, but if it’s my PC, I’m not willing to risk it. I’d much rather spend $20-$50 on a cable/DSL router to give myself firewall protection that I know I can just set up once and then ignore for a few years and won’t cause my PC to constantly fall behind on the upgrade treadmill.

And finally, the fifth reason to use a hardware firewall is apathy. Software firewalls tend to throw a lot of popups at the user, warning the user that this or that is trying to access the Internet, or come in, or whatever. Most users are likely to do one of two things: either allow everything or deny everything. The result is either a PC on which nothing works, or whose firewall is full of so many holes there might as well not be one. It’s much better to have a hardware firewall that just does its job. If you’re worried about unauthorized applications hitting the Internet, that’s the job of antivirus and antispyware software, not the firewall.

Replace your Antivirus software with this freebie and regain your performance

Dave Farquhar Windows , , , , ,

Antivirus software is the worst culprit in PC slowdowns. I am not alone in this belief. I don’t suggest going without (not completely) but it’s certainly possible to save lots of money, eliminate subscriptions, eliminate most of the overhead, and still practice (relatively) safe computing while running Windows.

Use Clamwin, the Windows version of ClamAV, and don’t engage in risky behavior (more on that later).Clamwin is free, GPL software, meaning you never have to pay for or renew it. It lacks a realtime scanner, which is the main resource hog for PCs. This may leave you vulnerable to infections, but think about where the majority of infections come from: E-mail, downloads, and drive-by installations. Clamwin comes with hooks into Outlook to scan e-mail attachments for you, and Clamglue is a plugin for Firefox that automatically scans all downloaded files. Of course you’re using Firefox, right? Using a non-Internet Explorer browser is the most effective way to prevent drive-by installations. I don’t use IE on my personal PCs for anything other than running Windows update.

Realtime protection made lots of sense when the main distribution point for viruses was infected floppies, but those days are long gone. This approach protects you against modern viruses without making your multi-gigahertz computer run like a Pentium-75.

I do suggest periodically scanning your system, something that even antivirus packages with realtime protection do. It makes you wonder how much confidence they have in that resource-hogging realtime protection, doesn’t it? Weekly scans are usually adequate; daily scans are better if you suspect some users of your computer engage in risky behavior.

Risky computer behavior

The last virus that ever hit any computer I was using was LoveLetter, which was way back in May 2000. The only reason I got that one was because I had a client who got infected and she just happened to have me in her address book. I don’t know the last time I got a virus before that.

It’s not because I’m lucky, it’s because I’m careful. There are lots of things I don’t do with my computers.

I stay off filesharing networks. Not everything on your favorite MP3-sharing site is what it claims to be, and there are people who believe that if you’re downloading music without paying them for it, they are entirely justified in doing anything they want to you, such as infecting you with a computer virus.

I don’t open e-mail attachments from strangers, or unexpected e-mail attachments from people I know. For that matter, if I don’t recognize the sender of an e-mail message, I probably won’t open it at all, attachment or no attachment.

I don’t run Internet Explorer if I can possibly avoid it. Internet Explorer’s tight integration into the operating system makes it far too easy for people to run software on your computer if you so much as visit a web page. Google tries to identify web pages that might be trying to do this, but a safer option is to use a different web browser that doesn’t understand ActiveX and doesn’t have ties into your underlying operating system.

I don’t install a lot of software downloaded from the Internet. A good rule is not to install any “free” software whatsoever unless it’s licensed under the GNU GPL or another similar open-source license. If you don’t know what that means, learn. Open source means the computer code behind the program is freely available and outside programmers can examine it. If a program distributed that way does anything malicious, someone’s going to figure it out really fast. If I’m going to download and install something that isn’t open source, I only do so when somebody I trust (be it a trusted colleague, a magazine columnist, etc.) recommends it.

I don’t rely on software firewalls. I have a separate cable/DSL router that acts as a firewall and sits between my computers and the Internet. So when the random virus comes around looking for a computer to infect, my firewall doesn’t even speak their language (it doesn’t run Windows and doesn’t have an Intel or AMD processor inside), so the potential infection just bounces right off.

Use a web-based e-mail service instead of a program like Outlook or Outlook Express if you can. If you use something like Yahoo Mail or Hotmail, that company’s servers scan your incoming and outgoing e-mail for viruses, so if someone sends a virus to your Yahoo account, you won’t get it. Does your ISP scan your e-mail for you? If you don’t know, you probably should consider getting your e-mail from someone else. Your antivirus should catch it, of course, but it never hurts to have someone else looking out for you too.

If you avoid these practices, you can join me in throwing out your commercial, for-pay antivirus software and reclaim a lot of computer performance too.

Upgrading my mother in law’s Compaq Presario S5140WM

Dave Farquhar Hardware , , , , ,

About the time my wife and I started dating, my mother-in-law bought a new computer. With an Athlon XP 2600+, that Compaq ought to be faster than anything I own. Even though it’s almost three years old now, it ought to still be pretty good.

It wasn’t. I fixed that.It has the Compaq name on the front but anymore that doesn’t mean much of anything. It’s a clone made in the Far East, with bog standard parts inside. When I visited earlier this month, she complained about its speed. I couldn’t find anything obviously wrong, but I checked the memory usage. It was over 250K with nothing loaded. Not good.

I happen to know the F-Secure-based security suite her ISP issued her can use nearly 256 megs all by itself sometimes. Not good.

So I paid Newegg.com a visit and ordered her 512 megs of memory. For 35 bucks, shipping included, why not? It’s overkill, but memory requirements are going to go up before they go down, and there was little point in buying half as much memory for 10 bucks less.

I bought Viking. I prefer Crucial or Kingston, but in my days doing desktop support, the people who insisted on Viking did OK, and it was cheaper the week I ordered it, so I got it. Don’t buy the cheap and nasty no-name stuff; the failure rate on no-name commodity memory has always been very high–somewhere near 30 percent, in my experience, and computers are more sensitive to memory today than they were in 1995 when I got my first job doing desktop support.

When I got the computer open, I saw it has an AGP slot. I really should get an AGP video card to put in the computer. Built-in video steals some system memory, which isn’t a big deal when you have 768 megs, but it also steals memory bandwidth. It’s like that bridge I cross over every day to go to work–it’s normally three lanes, but they have it closed down to two or even one lane some days. So it takes a longer time to get over that bridge. If I put a video card–even my old Nvidia-based card I bought back in 1997, if I could find it–with its own memory in her computer and disabled the onboard video, it would be like reopening that lane, and her CPU would have a full three lanes to work with when accessing memory.

I just checked Ebay, and found an Nvidia TNT2-based card for 99 cents Buy-it-now, with $9 shipping. The shipping is a ripoff, but the seller is probably paying a couple of dollars for the card and making $4 on shipping. At $10, the card is more than anyone needs for word processing and Internet use, and it’s probably better than the built-in video would be for light gaming. It’s a cheap way to soup up a computer like this.

If you can’t afford to buy any memory for this or any other computer with built-in video, but you’re running short on memory, here’s a free upgrade: Go into the BIOS, and set the amount of memory dedicated to the video card as low as you can. In this case, I can go to 8 megs. You won’t be able to run high colors at high resolution after doing this, but if you’re happy with 1024×768, it’ll give your system some memory back and make it a little more peppy.

I sure wish Intel or AMD would steal the old Amiga concept of chip memory, which was a bank of memory that could be used by either the video chip or the main CPU, at the expense of speed of course. But slow memory is still way faster than the swap file. The system just gave priority to the main memory (called fast memory) when it was available. It’s amazing how many good ideas were out there 20 years ago, some of which we’re enjoying today but some of which are sadly lost to history.

And, as always, a newer, faster hard drive is a good way to hot-rod an aging PC if it feels a bit sluggish.

But, $35 worth of RAM and a $10 video card goes a long, long way.

Cheap hardware won’t stop software piracy

Dave Farquhar Software , , , , , , , , , , , , , , , , , ,

Who’s to blame for rampant software piracy? According to Steve Ballmer, AMD and Intel. Oh, and Dell. Charge less for the computer, and there’ll be more money to pay for Windows and Office.

Steve Ballmer doesn’t know his history.

Read more

Intel scraps its 4 GHz P4!

Dave Farquhar Hardware ,

Intel has announced it’s scrapping its 4 GHz P4. That’s a big turnaround.Intel got where it is today by cranking the megahertz, and then the gigahertz, just as high as it could and as quickly as it could, hoping competitors wouldn’t be able to keep up, and trumpeting clock speed as the only thing that really mattered.

When it designed the P4, it extended its pipeline to ridiculously long lengths, allowing it to pump up the clock rate, but the efficiency was so low that Intel had to be ashamed of it. The last of the P3s cleaned the P4’s clock. As did a number of AMD’s chips.

Now Intel is having difficulty reaching 4 Ghz. AMD still has room to ramp up its speeds, but it hasn’t even reached 3 GHz yet. They’ve been taking other approaches to increasing speed.

Now Intel’s taking yet another page from AMD’s book. First, Intel clones AMD’s 64-bit instruction set, next, Intel replaces clock speed with model numbers, and now it throws in the towel on the gigahertz race.

It’ll be interesting to see how Intel’s marketing adjusts. And while I don’t expect AMD to topple them any time soon, if ever, it’ll be interesting to see if AMD manages to turn this into another opportunity.

Is this Apple a surprise to anyone?

Dave Farquhar Macintosh , , , , , , , ,

So, Apple unveiled its new Imac today. (I’m sick of improper capitalization. We speak English, not C++.) To no one’s surprise, I’m sure, it has a bigger screen. And I’m sure it’s not too surprising that they crammed everything into the unit next to the screen. It’s the next logical step, after the lamp-shaped Imac.

So how’s it gonna do?I think it has potential. Do people really want laptops because they can carry them everywhere they go, or do they want laptops because they can move them about the house freely and don’t have to have a dedicated “computer room”?

I suspect to most people, the latter is more important. Most people have better things to do with their lives than surf the ‘net at Starbucks or Panera Bread.

This new Imac can go on a small desk in a study or spare bedroom and not take over an entire wall the way computers have been doing since the late 1970s. As long as there’s a way to add some memory, and there are ports for people to plug in their digital cameras and their portable MP3 players and a printer, they’ll be happy.

Who knows, maybe demand for wireless printers will increase too.

Some analysts have said they don’t think all-in-one is the slam dunk it was in 1998. I agree it isn’t, but small is a slam dunk. Witness the explosive popularity of cube PCs. Yes, it flopped for Apple, but Apple’s cubes lacked the flexibility, there was too much confusion about their expandability and what exactly they were compatibile with–I designed a Mac network for a client right around the time the Cube was released, but the rumor was it would only work with Apple monitors. That alone killed the deal. They bought G4 towers instead, which would work with NEC and Viewsonic monitors.

But the other problem with the Cube was the price. Yes, it was cheaper than a G4 tower. But the price difference wasn’t enough to make people willing to take a chance on it. And besides, if it was cheapness you wanted, there were at least four companies willing to sell you a PC for half the price of a Cube. Emachines would even sell you a PC for half the price of an Imac.

And that’s the biggest problem I see with this new Imac: price. $1299 gets you in the game. Ten years ago, that was cheap. But this isn’t 1994. Emachines didn’t exist in 1994, and while a Mac would cost you more than a Packard Bell, there wasn’t much price difference between a Mac and a Compaq or an IBM. Compaq or IBM usually had one model that sold for a hundred or two less than the cheapest Apple, and Apple usually wouldn’t give you quite as much CPU speed or quite as much disk space, but if you walked into the store with $1500 in your pocket, which was pretty much the selling price of an average PC, you could walk out with a Mac just as easily as you could walk out with something that ran Windows.

What will Dell give you today for $800? 2.8 GHz, 256 MB RAM, 40 GB hard drive, CD burner, printer, 17-inch monitor, and some software.

For the same money, Apple gives you 1.25 GHz, 256 MB RAM, 40 GB HD, CD burner, and a 17-inch display. No printer.

For $1,299, the price of the new Imac, Dell gives you twice the CPU power and twice the memory. Just not as much wow factor.

Yes, I know the Pentium 4 is a horribly inefficient processor but the design does scale surprisingly well, and efficiency alone won’t make up a 1.6 GHz speed deficit. Besides, if you’re willing to spend four figures, you can get an AMD Opteron. Just not from Dell.

Will this Imac sell? Yes. Will it do much to increase Apple’s 2.2 percent market share? I doubt it. The main audience is going to be people with aging CRT-based Imacs who’ve been holding out for something with a G5 in it. They’ll buy it, find it’s a lot faster than their old one and takes up less space. Of course they’ll like it. But it’s still the Amiga problem. The Amiga didn’t take over the market because it it only sold 6 million units. The Amiga was a commercial failure because those 6 million units sold to 1.5 million people.

People will ooh and ah over how little space this new Imac takes and how convenient its wireless keyboards are. But most of them will buy a Dell because it’s faster. Or cheaper. Or both. Maybe they’ll complain about how much less convenient it is, but it’s just as likely they’ll forget about it.

It happened with the first Imac and it happened with the Cube and it happened with the dual G4 and it happened with the G5. Who are we kidding? To some extent, it’s been happening since 1983 when the Lisa came out. People see the machine and it knocks their socks off until they see the price tag. The classes buy it anyway, while the masses figure out how to get by with something cheaper.

History is going to repeat itself one other way too. Somewhere in the Far East, I guarantee you a no-name maker of whitebox PCs is designing a box that puts the brains of the outfit behind the LCD, just like this Imac. Maybe the thought didn’t occur to the designer until this week. Maybe the designer has been working on it for months already.

It will look a lot like this new Imac, only it will have an AMD or Intel processor in it, and it will run Windows. It might be three months before we see it. It might even be six. But it will appear, and it will be priced under $1,000.

It will sell. And within another six months, everyone will be doing it. This new form factor may not come to dominate the market, but it won’t take much for it to outsell this new Imac. A small percentage of 97.8 percent is likely to be a lot bigger than even a large percentage of 2.2 percent. Compared to the new Imac, these clones will look like a runaway success.

And Mac fanatics will be screaming about another Apple innovation stolen by someone else.

VMWare’s P2V is mildly disappointing but can still save the day

Dave Farquhar Software , , , ,

The order came from higher up: Migrate these seven servers to VMWare. That would be easy if you were running Linux, FreeBSD, OS/2, or basically any operating system not made by Microsoft. Give me an OS/2 hard drive out of a 386 with Microchannel, and I can have it booting on a P4 in a matter of minutes and probably have it operational in half an hour.

But Windows ties itself to the hardware too tightly. So you need a $10,000 software package to migrate it. That package is P2V, which stands for "PC to VMWare." I assume.Actually it’s a $2,000 software package with $8,000 worth of training. Whether you need that training, well, that’s another story.

P2V advertises that it’ll take an image of a server, replace all of its hardware drivers with drivers for the hardware VMWare emulates, and off you go.

It does the most critical part of it just fine. It doesn’t matter if the original server was SCSI, IDE, or something nasty like RLL or ESDI–unlikely, but I’ve seen what desperate times sometimes cause to be put into a production server–and it’ll get it booting on VMWare’s emulated LSI Logic SCSI card.

The biggest thing it doesn’t do is migrate your TCP/IP settings to the new network card. If you happen to have an AMD PCNet-based NIC in the server you’re migrating, you’ll have no problems, but the chances of that are slightly better than my chances of finding an 1897 Carlisle & Finch train set at that estate sale on Itaska Street this weekend. More likely, you’ll have a 3Com or an Intel card in your source server.

That may not be a problem for you. But if you’re migrating a web server that’s hosting twelve dozen sites, each with its own IP address, you’ll be stringing together some curses after paying that kind of money.

Worth it? It is in the sense that a telephone saves you thousands of dollars in travel costs, so you could justify paying $600 for it. If you’ve got a fleet of aging NT4 servers and an expensive maintenance contract to match, and it’s over someone’s dead body that the applications they host will go away, you can save that 10 grand in a fiscal year, get those servers moved to newer, better hardware that’s cheaper and easier to maintain, and get them moved in less than a week. It could take you nearly that long to get NT4 running on brand-new hardware. Once.

So, yes, you can justify it to your accounting department.

As far as the time involved, there’s the time it takes to image and re-image the server. That depends on how fast your network is. There’s the time it takes to build a helper VM that P2V runs on. It’ll take you about 5 minutes per server to set up the VMWare instance. If you’ve got new hardware, it’ll only take a few minutes for P2V to run. Then you have to boot the VM, reconfigure anything that needs reconfiguring, boot it again, and repeat until you fix everything that’s broken. Sometimes that’ll be nothing, and sometimes it might be a lot.

I budgeted 4 hours per server. A couple of them took less than an hour. A couple took 8.

Do I wish it were a better product? You bet your boots I do. Was I glad to have it at my disposal this week? You bet that Carlisle & Finch train set I’m not gonna find this weekend I am.

Thanks to P2V, I get to do something fun this weekend instead of building servers.

Leave your DIY PCs at home

Dave Farquhar Hardware , , , ,

This is a response to the eWeek editorial Bring DIY Systems to Work. Nice theory. Unfortunately, lab theory and the real world don’t always mesh.

I like building PCs. I built my first PC in early 1994, back when everything was on a separate card and you had to set interrupts and DMA channels using jumpers and DIP switches and in most cases you had to tell the BIOS exactly what size drive was in it–it wouldn’t detect anything for you. I built my main PC at home myself. I built my secondary and tertiary PCs at home myself too. And my girlfriend’s PC, and my mom’s PC, and my sister’s PC.

Get the idea?

Read more

Easy and secure remote Linux/Unix file transfers with SCP

Dave Farquhar Linux , , , , , , , , , , ,

Sometimes you need to transfer files between Linux boxes, or between a Linux box and some other box, and setting up Samba or some other form of network file system may not be practical (maybe you only need to transfer a couple of files, or maybe it’s just a one-time thing) or possible (maybe there’s a firewall involved).
Well, you should already have SSH installed on your Linux boxes so you can remotely log in and administer them. On Debian, apt-get install ssh sshd. If you’re running distro based on Red Hat or UnitedLinux, you may have a little investigative work to do. (I’d help you, but I haven’t run anything but Debian for 2 or 3 years.)

The cool thing about SSH is that it not only does remote login, but it will also do remote file transfer. And unlike FTP, you don’t have to stumble around with a clumsy interface.

If you want to transfer files from a Windows box, just install PuTTY. I just downloaded the 240K PSCP.EXE file and copied it into my Windows directory. That way I don’t have to mess with paths, and it’s always available. Make sure you’re downloading the right version for your CPU. The Windows NT Alpha version won’t run on your Intel/AMD/VIA CPU. Incidentally, Putty.exe is a very good Telnet/SSH client and a must-have if you’re ever connecting remotely to Unix/Linux machines from Windows.

SSH includes a command called SCP. SCP works almost like the standard Unix CP command. All you to do access a remote file is append a username, followed by the @ sign, and the IP address of the remote server. SCP will then prompt you for a password.

Let’s say I want to move a file from my Linux workstation to my webserver:

scp logo.jpg root@192.168.1.2:/var/www/images

SCP will prompt me for my password. After I enter it, it’ll copy the file, including a nice progress bar and an ETA.

On a Windows machine with PuTTY installed, simply substitute the command pscp for scp.

I can copy the other way too:

scp root@192.168.1.2:/var/www/index.php .

This command will grab a file from my webserver and drop it in the current working directory.

To speed up the transfers, add the -C switch, which turns on compression.

SCP is more secure than any other means of file transfer, it’s probably easier (since you already need SSH anyway), and since it’ll do data compression, it’s probably faster too.