Patch your Linux distros

There’s a nasty vulnerability in recent SSL libraries that an Apache-based worm is currently exploiting. The patch is obviously the most critical on machines that are running secure Apache sites. But if you don’t like vulnerabilities, and you shouldn’t, go get your distribution’s latest updates.
This is why I like Debian; a simple apt-get update && apt-get upgrade brings me right up to speed.

CERT pointed out that Apache installations that contain the ServerTokens ProductOnly directive in their httpd.conf file aren’t affected. (I added it under the ServerName directive in my file–it’s not present at all in Debian by default.) This will hurt Linux’s standings in Netcraft, but are you more interested in security or advocacy? Increasingly, I’m more interested in security. No point in bragging that you’re more secure than Windows. Someone might make you prove it. I’d rather let someone else prove it.

While you’re making Apache volunteer as little information as possible, you might as well make the rest of your OS as quiet as possible too. You can find some information on that in an earlier post here.

Feeling cynical

I went out looking for a fridge and washer/dryer.
I came home with the new Aimee Mann CD and Office Space on DVD.

Yeah, I’m feeling really cynical. Yeah, something happened at work Friday. No, I’m not at liberty to talk about it (but Charlie knows because he was in on the project too).

Aimee Mann’s Lost in Space is a very typical Aimee Mann record. She plays half a dozen different instruments and she’s as cynical as usual, though she’s lost the potty mouth. I went looking for this record’s “I Should Have Known”–the tune that reaches out and grabs your consciousness and won’t let go of it–but didn’t find it. This one will have to grow on me, like most of her records.

And Office Space… Well, I started building up a Windows box with my DVD drive out of some spare parts, and ran into a lot of problems. First, my junk Cirrus Logic-based AGP video card didn’t support DirectX, which my DVD app needed for playback. So I pulled it and replaced it with my old STB Velocity 128, which had nVidia’s first chipset. At the time, it was the fastest video card I’d ever seen. Seems really slow now. Well, that card caused any OS I tried to install to hang. I guess it’s the end of the road for that card. A shame, really.

So I figured I’d install Debian and see if I could figure out how to make it play DVDs. The Velocity 128 worked a lot longer in Linux than it did in Windows, but eventually it kicked into a corrupted text display similar to what I got in Windows. So I couldn’t just blame Windows. Rats. So the Cirrus Logic–definitely the Neifi Perez of video cards–came off the bench.

I couldn’t get any of the rogue DVD software for Debian to work, so I ended up pulling the S3 Savage4 card out of one of my working systems to put in there, since it supports DirectX. I need to order a couple of ATI Radeons from Newegg.com to replace some of these junk cards I’ve got. They’re solid and cheap–$42 delivered.

Windows 2000 ran fine with the S3 in it.

I think this is God’s way of telling me I’m a better journalist than computer tech at this point.

Replacing my IDE CD-ROM with a SCSI CD-ROM

I pulled the IDE CD-ROM drive out of my main Linux box today and replaced it with a SCSI model, mostly because I like to keep a spare IDE CD-ROM drive loose and I had a couple of Toshiba 4X CD-ROM drives in my closet. I don’t use the CD-ROM drive in my Linux box very much, so a 4X is fine. Plus, making my Linux box into an all-SCSI system means I can compile out all the IDE support in my kernel if I ever feel ambitious.
I can never remember how to tell Linux I’ve swapped drives though. I’ve had to do this a number of times because not all my SCSI cards support bootable CDs, but all of my systems can boot off an IDE CD-ROM drive, so all too often I do my Linux install with an IDE drive.

The trick is to remember that SCSI CD-ROM devices are named srx, where x is a number. So when I installed a single SCSI CD-ROM, it became sr0.

So I went into /etc/fstab and found a line that looked like this:

/dev/cdrom /cdrom iso9660 defaults,ro,user,noauto 0 0

As far as I can tell, /dev/cdrom is a special device Debian creates during installation. I changed it to this:

/dev/sr0 /cdrom iso9660 defaults,ro,user,noauto 0 0

Now I can mount a cdrom from a command line with this command:

mount /cdrom

Upgrading an eMachine

One of the most common search engine hits on this site involves the words “emachine” and “upgrade” or “upgrades.”
There are a number of things to keep in mind. Some of this advice also holds for low-end units from Compaq and Gateway and the like as well.

First things first: eMachines don’t have the best reputation. The majority of their problems are due to the power supply though. Aftermarket replacements are readily available, and I recommend them. Don’t buy a factory replacement; it’ll just fail again like the original. A quality replacement from Sparkle or PC Power & Cooling will run you less than $50. I’ve seen 180-watt Sparkles go for $35. The stock 145-watt unit isn’t very adequate and isn’t of the utmost quality. If I bought an eMachine, I’d buy an aftermarket power supply and install it as soon as I could. I wouldn’t wait for the factory unit to fail.

If I had an eMachine I wanted to upgrade, I’d track down a PCI video card. The problem with integrated video on a lot of motherboards is that the CPU and video chip have to share memory bandwidth. What’s that mean? Part of the time, your nice 64-bit memory bus is reduced to 32 bits, that’s what. Steve DeLassus told me a couple of years ago about putting a cheap PCI ATI video card in his wife’s Compaq, which had integrated video, and everything about the system sped up, dramatically. I made fun of him. But it wasn’t his imagination. I was wrong, and the explanation is simple: After he disabled the onboard video, he finally got the computing power they paid for.

Besides that, any add-on card is going to be faster than the integrated video in anything but an nVidia chipset anyway. Last I checked, eMachines weren’t using nVidia nForce chipsets for anything. If you’re into 3D gaming, you shouldn’t have bought an eMachine in the first place, but look for a PCI card with an nVidia chipset. If you’re just into word processing and e-mail, something like an ATI Xpert98 will do nicely. Yeah, it’s an old card, but it’s still more than adequate for 2D applications, and it’s cheap.

If you’re wondering if your system’s integrated video is holding you back, the best tell-tale sign to look for is called “shared memory.” Enter your PC’s setup program and look for an adjustable amount of shared memory. If you find that setting, you’ll almost certainly benefit from disabling it and plugging in a video card.

The next thing I’d look to do is replace the hard drive. Hard drive speed is significant, and sub-$500 PCs don’t come with blazing drives. Pick up a 7200-rpm drive of adequate capacity. They’re not expensive–you can be in business for under a hundred bucks. The performance difference is dramatic. Most retail-boxed drives even come with all the software you need to move all your data to the new drive. CompUSA frequently has something on sale. I prefer Maxtor drives over Western Digital because they’re faster and more reliable; CompUSA’s house-brand drives are just repackaged Maxtors, so those are fine as long as you can find a 7200-rpm model.

The modems that came in eMachines are worthless. If you don’t have broadband yet, replace it with a USRobotics 2977 modem immediately. That factory modem is costing you 35% of your CPU power. The USR will give that back, give you better throughput on top of it, and costs $40 at newegg.com. Good deal. But don’t settle for anything less than that–any modem that costs less than $40 is going to have the same problems as the factory modem.

Most eMachines can take more memory, but a lot of eMachines already shipped with adequate memory. There’s rarely any reason to put more than 256 MB in a PC. If your machine doesn’t have 256 megs, you can pick up a 256-meg stick pretty cheaply.

Most eMachines can take a faster processor, but I rarely bother. Unless you can increase your clock speed by 50%, you’re not likely to really notice the difference. Doubling is better. You’ll get better results from adding a video card and a faster hard drive.

Likewise, a high-end sound card from the likes of Creative or Turtle Beach can reduce the amount of work your CPU has to do and give you much better-sounding audio than what your eMachine has on the motherboard, but is it worth putting a $100 sound card in a computer you paid $399 for?

It’s easy to see you can very quickly spend $300 on upgrades for a computer that originally cost $399. That makes it hard to justify, when you could just get a new $399 computer. So should you do it? It depends. Don’t spend more than half the price of a new computer to upgrade an old one. But also keep in mind that a new computer won’t come with first-rate components, and the aftermarket parts you’re buying are first rate, or very close to it. If that PC you’re looking to upgrade has a 600 MHz processor or faster, it’s likely that when it’s upgraded, it’ll hold its own with a new computer. In that case, you should think about it.

But if you’ve got a four-year-old eMachine with a 300 MHz processor in it, you’re better off buying something new. When you can buy a 900-MHz PC without an operating system from walmart.com for $299, it’s just not worth wasting your time. Load your eMachine’s copy of Windows on the new computer and stick the eMachine in a closet somewhere as a spare. Or pony up a couple hundred bucks more to pick up a brand-name PC with Windows and a monitor, then get a couple of network cards and network your computers together. Your family will appreciate being able to share a printer and an Internet connection. If you pay a little extra to get wireless cards, the computers don’t even have to be close to each other.

One last thing: A lot of people sniff at eMachines. Yes, they are cheaply made. But they’re not all that bad of a machine, aside from the skimpy power supply. Replace it, and you’ve got a lot of computer for the money. Packard Bell did a lot to ruin the reputation of cheap computers in the 1990s, but the problems they had were mostly due to skimpy power supplies that were odd sizes so there weren’t many aftermarket replacements, and due to junky integrated modems and/or combo modem/sound cards that did both jobs poorly, killing system performance and causing software incompatibilities. Today’s highly integrated motherboards have eliminated that combo sound/modem problem. I know I malign the company all the time, but in all honesty, once you put real modems and sound cards into Packard Bells, they did OK as long as the power supply held up. I’ve got an old Packard Bell P120 with Debian Linux loaded on it. I ripped out the sound card/modem combo. I left the power supply alone because it looked decent. The machine’s run several years for me without any problems. Of course I covered up the Packard Bell logos on it.

Today, the same holds true of an eMachine–it’s just the power supply and video card you have to worry about now.

The best Linux distro meets the best file system

So what’s so special about this server? It’s running Debian 3.0 on XFS, which is SGI’s industrial-strength journaling file system. It’s faster than ext3, more feature-complete than ReiserFS, and it’s been reliably shuffling bits as part of SGI’s IRIX operating system for the better part of a decade. You know you want it.
Read more

Dude! I’m getting a… Packard Bell!

Oh wait. No, I’m thinking of Steve. Although he and I did just get identical Dell Optiplex GX1 P2-450 workstations to use as Web servers. We learned a little bit about them too.
Read more

Update your BIND servers

A buffer overflow vulnerability exists in a large number of versions of BIND. CERT released an advisory over the weekend. I haven’t seen this on most news sites yet. Read more

An easy way to get Debian 3.0 before you can buy it

Debian 3.0 hasn’t officially been released yet, but that hasn’t stopped people from making unofficial installation floppies and CDs.
I just built a Debian 3.0 system that will be hosting this site and another (I’m not going to talk yet about the other site, but it won’t be hosted by R. Collins Farquhar IV–do I hear cheers?–and it won’t be fiction). I used this 185 MB CD image to do the install. The system used up a whopping 88 megs when I finished initial installation. After I installed Apache, MySQL and PHP4 to make a usable web server, disk usage rocketed to 118 megs. Not shabby at all in this era of multi-gigabyte installs. Read more

Possibly the first Apache worm

I just found this article describing a worm that attempts to infect vulnerable Apache servers running on FreeBSD.
This doesn’t have much effect on Linux or other Unix variants (other than probably crashing lots of Apache sessions, which the machine may or may not recover gracefully from) but chances are this is just a harbinger of things to come.

You should upgrade to Apache 1.3.26 or Apache 2.0.39 immediately to avoid any problems, especially if you use FreeBSD. I’ve been running version 1.3.26 on Debian here for about a week without any issues, as I’ve come to expect from Apache.

Introducing the Silicon Underground Portal

Tonight, as I was preparing for my upcoming mission trip (read: doing laundry and waiting around on it), I started messing with a piece of software called bk2site.
Like most cool software, it’s included with Debian. RPMs and tarballs are available if your distro of choice lacks it. Its purpose is to take your Netscape/Mozilla/Galeon bookmarks file and a few RSS feeds of your choice and make a site out of it, much like the Yahoo! of many years ago before its size got out of hand.
Read more