Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Sunday, June 5, 2011

Packing for the Zombie Apocalypse

I was blithely ignorant about the zombie apocalypse until a nephew mentioned that his roommate had a zombie apocalypse emergency pack.

Credit: CDC


And from Mark Gibbs at Network World, I learn one prepares differently for The Rapture than for the zombie invasion, in his article, The Rapture, Zombie Apocalypse, and Risk Planning.

A must-read is John Cox's article, 10 Things IT groups Need to Know About The Rapture.

"Experienced survivalist," Justin, has a zombie survival guide list over on Amazon. 

What's in your zombie apocalypse pack list? 

Wednesday, April 20, 2011

The Beauty of Redundancy

Yesterday, my second camera arrived from the ebay seller. If you'll recall, I thus have two used Canon SD600s, my response to getting my camera stolen in Ethiopia.

On one hand, it felt very satisfying yesterday to have two identical cameras. It's relatively inexpensive (about $55 each), I enjoy the economic benefit (monetary, space savings, and convenience) of using interchangeable accessories, and I have an almost-immediate replacement in case one camera gets stolen again, or one breaks, or gets dropped in a latrine.


Also, there is beauty in redundancy. Didn't Monet paint eight million haystacks?













Andy Warhol's Marilyn Monroe
 
 Or how about Warhol's Marilyns?





On the other hand, I felt a little obsessive-compulsive. Did I really need to have a back-up camera? How likely was it for my camera to be stolen again? Wasn't portable, rootless me having two cameras a little like having millions of people take off their shoes at airports the world over, because one guy hid something in his shoes, once?

Ah, but then I saw this today: Amazon Gets Black Eye From Cloud Outage. Zowie! Just another example of the theory that all systems will fail - our goal is to ensure we fail smartly. I love what Rachel Dines said in her zdnet, Forrester Research, article, How Resilient Is Your Cloud Service Provider, about the Amazon web hosting cloudburst:

"When you use a cloud service, whether you are consuming an application (backup, CRM, email, etc), or just using raw compute or storage, how is that data being protected? A lot of companies assume that the provider is doing regular backups, storing data in geographically redundant locations or even have a hot site somewhere with a copy of your data. Here’s a hint: ASSUME NOTHING. Your cloud provider isn’t in charge of your disaster recovery plan, YOU ARE!" [Emphasis mine.]


I had really been impressed with Amazon S3 cloud data storage. [Note: The Amazon S3 data storage is a separate enterprise from Amazon EC2 web hosting enterprise.] What I said: "If I were a little more tech-savvy and if I knew I'd stay put in the U.S., I would have gone with Amazon S3 in an instant. I liked it for what appears to be an above-and-beyond security level, and that Amazon has a lot to lose if it were to compromise its customers' confidence in its service." I wasn't alone in that assessment, based, at the end of the day, on the quality of the Amazon brand and not on any subject matter expertise.  

I'd already had the experience of being too smart for my own good.  And being reminded that a fallback only works if the fallback is accessible.
 
So I'm good with having the two cameras.

.... On the other hand, evidently the immediate cause of the Amazon EC2 problem was, per Mashable article, What We Can Learn From Amazon's Cloud Collapse, too much redundancy! "The trouble was apparently due to excessive re-mirroring of its Elastic Block Storage (EBS) volumes — this essentially created countless new backups of the EBS volumes that took up Amazon’s storage capacity and triggered a cascading effect that caused downtime on hundreds (or more likely thousands) of websites for almost 24 hours." ....


I do need to get on to my overdue task item to work out my unsatisfactory flash drive back up system.

Monday, April 18, 2011

Ethiopia Round-up: My New, New-Old Camera

Back here, I described the camera I bought to replace the camera stolen from me in Ethiopia.

Alas, there was a problem with the used Canon SD800 I bought, and I had to return it.

From Amazon: Canon SD600
Today, I received my new, new-old camera - a Canon SD600, which is the same model stolen from me! It was a damn good camera, and since I already had a second battery and the battery charger, why not? The new-old camera came with another battery, another battery charger, and a nice case.

So, in case you lost count between one and .... two, I now have: one camera, one memory card, two batteries, two camera cases, and two battery chargers. For redundance simplicity, I'll buy a second Canon SD600 and a second memory card.

The replacement Canon SD600 cost me $62.50 on ebay, including shipping. If all goes well, I'll buy the second SD600 for $52.00, including shipping.**

Having my camera stolen was a sad experience, and I regret the beautiful photos I never got to take. With economical redundancy, and very little extra "mass," I feel better prepared for the next trip.

**Update: Done.

Tuesday, April 12, 2011

Security: Changing Passwords


I changed many passwords last week.


Two reasons:
  1. It was on my google calendar to do so, as my last set of changes occurred three months previously; and 
  2. Just got back from an extensive trip outside my home country, where I'd relied on internet cafes. 




It took some time to change my passwords. This is because: .

  • I have a lot of accounts that require passwords, and I don't use the same password for all of my email, banking, purchasing, and other accounts. 
  • Changing the passwords on some email accounts meant reconfiguring another email's info so it could properly fetch the mail from those accounts.
  • I needed to update the encrypted tool I use to manage passwords.

But about calendaring my password-change prompt - Here is a counter-intuitive article by Bruce Schneier, along with interesting discussion about the need to change passwords at all.




Sunday, March 27, 2011

Rootless Rule #1: Spare Glasses Don't Help if You Don't Have Them With You

When I went to Ethiopia, I took a spare pair of reading glasses with me. Didn't need it, fortunately,

Photo credit: Today's Deals
So after I return, I chill for a few days, then go to one of my vacation homes on the Missouri Rivieria (@ Chez Katherine), only to leave my spare safely in a drawer at home base. What happens? My glasses break.

Important lesson: When one is rootless, that means keeping a spare set of glasses in one's bags at all times. I now have a spare in both of my bags.

Another thing - I purchased my glasses (bought two pairs at once) at Walmart Vision Center. Yes, I freely admit this. Two pairs for a hundred bucks. If my glasses break I can go just about anywhere in the country and get them repaired. If they're still under the one-year warranty (at no additional charge, thank you very much, Sears), I can get my lenses popped into replacement frames on the spot.

It happened that the local Walmart was out of my frames, but the employee called my home-base Walmart, which had one last pair. That Walmart set this pair aside til I returned the following day. Replaced my old frames. No charge.

Thursday, March 24, 2011

Ethiopia Roundup: How'd the Pack List Turn Out?


10 most useful things I packed:
  1. Flashlight
  2. Wide-brimmed hat - the Ethiopian sun is brutal, and shade is sometimes scarce; sunglasses alone were not sufficient for protection from light for vision, not to mention skin protection.
  3. Anti-diarrhea medicine -- should have taken even more. I was able to buy Cipro in Ethiopia, but not Imodium or similar. 
  4. Camera
  5. Two, one-cup size Rubbermaid "take-along" cups with screwtop lids, which I used for brushing my teeth every day or drinking coffee on a bus. 
  6. Universal plug (and a largish prescription bottle filled with powdered laundry detergent)
  7. Wristwatch with alarm - for those early buses. Inexpensive and alarm only sounded for 20 seconds, but it did the trick.  
  8. Flash drive for uploading photos onto same; because I had this and used it, I still had half of my trip photos when my camera was stolen. (But I'd also uploaded the same onto Facebook, so that was another safeguard.)  
  9. Paperback books that I released to the wild along the way
  10. Pacsafe money belt with plastic buckle (I also wore an Eagle Creek hidden pocket, which is very good) -- the belt was so ordinary, casual, and comfortable - loved it; fit many bills; and it was very inexpensive.














    Things I most wish I'd brought:
    • Immersion coil or mini kettle for coffee or oatmeal in my room in the morning. I looked, but never saw one in Ethiopia. (There were kettles, but too large.)
    • Scarf or bandana to protect mouth and nose from the cursed dust on Ethiopian side streets (and sometimes main streets); I did finally buy one in Ethiopia, but it would have been so much more convenient to have brought one with me. 
    • A serious exfoliater for my feet, such as a pumice stone, specifically for my heels. I looked for this in Ethiopia; could not find anywhere.

    Things I'm glad I brought, though not essential:
    • MP3 player plus mini speaker - this plus the voice recorder provided sustenance when the electricity went out in hotels, a not-infrequent occurrence in Ethiopia
    • Voice recorder onto which I'd loaded inspirational podcasts
    • Single-serve powdered drink "straws," e.g. Crystal Light; wish I'd brought more, especially since I gave some out to curious wait staff along the way.

      Saturday, March 5, 2011

      Ethiopia: Housekeeping in Awassa, Day 6, Saturday

      Awakened at 7:00-ish feeling much better than I did last night.

      I was almost ready to go out for breakfast-reading-writing when my electricity went out. Oh, well. Hopefully, it'll be back on this afternoon, as I have a date with Oprah. I must know what happened between her and Iyanla something-or-another!

      One agenda item for Awassa is to rent a boat to go out and see hippos in the lake! Another agenda item for today is to get more cash.
      Dashen Bank ATM in Awassa piazza. Photo credit: "Abnet" at skyscrapercity


      I did conduct a little banking via email yesterday. I'm very happy that, before I left the U.S., I stopped by my credit union, where a teller and I worked out an arrangement where I can email her (and a fall-back staffer) and ask her to conduct some transactions for me. All I need to offer is some key info that we agreed on. This means I do not have to risk accessing my account online in an insecure environment. In yesterday's case, I was able to facilitate the payment of a bill.

      As far as tools go, the hands-down most useful item I brought with me was my flashlight. I used it on the flight to Ethiopia and almost every day since to:

      1. Illuminate dark rooms in historic buildings and a cave
      2. Provide me with security when I walk "home" at night
      3. Expose the diverse bone breakers, such as gigantic, yawning openings in pavement (usually into a storm drainage system), unexpected upward or downward ramps, narrow and shallow drainage trenches that are inside many businesses, and sudden curbs
      4. Read in bed
      5. Provide light when the power goes out (a frequent occurrence, regardless of where I've been in Ethiopia)
      6. Read menus in dark restaurant lighting
      7. Look for the correct bus at 5:00 in the morning

      I know the headband lights are popular, but I'm just as happy with the tiny, one-battery, hand-held light I brought.

      The things I most wish I brought are:

      • Bandana (for the dusty, dusty, dusty side streets)
      • Beverage heater (immersion coil)

      I did finally get some cash today, but took several abortive visits to the bank, as the ATM was experiencing technical difficulties. Plus I guess it ran out of cash at some point.

      Saturday, February 19, 2011

      Ethiopia: Saturday in Addis, Day 2 - Camera Gone!

      Credit: Home Owner Care
      This morning I had a killer shower at the Ankober Guest House! Tremendous water pressure! Hot water! It was a sensual experience!

      Later, I walked across to the Wutma Hotel Restaurant. Although the food is only so-so, it is close to my hotel, the ambiance is nice, and the staff are cheerful and friendly. Rahel, one of the waitresses, greeted me with a surprised and welcoming smile when I walked in.

      I settled down to a leisurely breakfast and coffee, along with writing and a little reading. (I borrowed a book from Stephanie's library, The Ghost, by Robert Harris.) And who should appear? British Mike! Still here! He reported his new departure date is March 7. He did finally get his "paper," which I think is the affidavit from the police. I get the impression this paper is being processed by the British bureaucracy. In the interest of fairness to British Mike (seeing as how I've mentioned him in a public venue via my blog), I told him that I'd shared his story with a fellow Brit (Stephanie) and that she could not believe it! (OK, one can take that statement several ways.) Mike indicated that this is just the way the British Embassy is. At any rate, he said, it hasn't been all bad. He put on a Valentine's Day event at the restaurant and it was a grand success. He said he's been working to help the manager build new and repeat business.

      I returned to the Ankober, as I needed to change rooms because mine had been previously reserved by another party. Once the transfer was complete, off I went for lunch - an egg sandwich at K Corner, a nice little place with jazzy bluesy music, a shady, cool terrace that provides a quiet escape from the hurly-burly bustle on the street. I smiled as I reviewed some of the photos on my camera.

      After lunch, I walked around the corner to the Dashen Bank, in hopes the ATM was still accessible on this Saturday afternoon. It was! Flush with cash, I bounced brightly along the sidewalk, feeling good. I stopped to take a picture of a large building with a rooftop terrace on which colorful table umbrellas fluttered.

      Omar Khayam Restaurant in Addi Ababa
      I continued back toward my hotel, enjoying the sights, sounds, and smells on this sunny day. I'd take a little break in my room, then go to the internet cafe to upload my new pics from the school and get caught up on more journal entries. A teenager offered me gum or "soft." At first I declined, but as he walked away, I changed my mind and bought a package of "soft" for 2 birr. While I was completing that transaction, another teen approached me with his tray of gum and soft, which I declined. Then darned if the first teen didn't ask me to buy a second item, which I declined.

      I got back to my hotel, unloaded my gear onto the bed and realized, hell, my camera wasn't in its case! I searched my pockets, turned out my bag, looked all over and around the bed. No camera! Oh no, I left it at the K Corner Restaurant! Nope - I took the picture of that building with the umbrellas.

      With a sinking feeling, I determined to retrace my steps in case the camera fell out of its case and it was laying on the ground. It was entirely possible that when I returned it to its case, it fell out if I didn't latch the case properly. On my reverse trek, I ran into Rahel and her fellow waitress from the Wutma Hotel Restaurant. I  explained the situation, and the two were confident it had been stolen. Bummer. However, I expressed faith
      that it could turn up and that I intended to give it a go. I did retrace my steps, then reversed again. I thought I might make a sign in Amharic offering a reward for finding my lost camera. I did broach that subject with
      two men sitting by the magazines-for-sale section of the pavement. They recommended I go to the police station. They gave me directions.

      Not having much faith in that plan, I nevertheless started in that direction, and went by two security guards, one man and one woman, in front of a building. I starting explaining my quest to both, and saw that the woman had begun to laugh, at which point I said there were pictures on the camera of school kids from Nazret, and I needed them to help gain donations to their school. She kind of sobered up a little then, and about then a man walked by, and asked what the problem was. I explained it all again, noting the important thing was the photos. He also suggested I go to the police, and accompanied me to the station. Along the way, I learned he was a member of the Addis Chamber of Commerce!

      This gentleman delivered me to the police station, gave a policeman a synopsis of my predicament, got my phone number, and then went on his way.

      My first impression of the police station, sorry to say, was the walloping stench of urine. It was horrific. Otherwise, I noted men sitting on a couple of benches. I was invited by one to wait my turn on a bench as well. I also saw two Brits standing in the open-air corridor. Eventually, I asked them what their deal was, and one said they were at the station regarding his Ipod. I inquired, "Stolen"? He replied, "Long story," so I took that as a signal that he really didn't want to talk about it.

      At one point, one of the "bench men" asked what I was about, and I mentioned the camera. He invited me to follow him, which I did, and we walked across the street to a car with two men in it. He briefed them on my deal, and the guy in the passenger seat asked me, "Did someone sell you 'soft'"? Whoa! "Yes!" I exclaimed. And the guy asked if the vendor was a skinny dude, to which I was noncommittal -- the teen had a t-shirt and an over-shirt on, so it was tough to remember his build.

      Inexplicably, this exchange seemed to go nowhere further, as the "bench man" returned to the station across the street and I followed. I resumed my place on the bench, waiting my turn for an audience with the investigator, who was closeted in what was evidently the station's action room.

      In time, the investigator came out of the action room, approached me, and said, improbably, "What's up?" I kind of smiled, maybe even repeating what he said, then he said, "Come on!" and went back into the action room. I followed.

      The investigator had me take a seat. The only nearby chair was impossible; it looked like the seat cushion had once been bound in leather (or a facsimile thereof), but it had been chewed through to the point where only the barest layer of stuffing remained. I sat on it gingerly and surprisingly, it held.

      The investigator was a tall, handsome man with a big smile and a blue and white striped shirt.

      I told him my sad tale and he asked a few questions related to when and where. Then he grabbed a police officer and gave him some instructions. Obviously a man of few words, he instructed me, "Go with him."

      I ended up with two escorts, a uniformed officer and a plainclothesman. I asked the uniformed officer about the other, "also a policeman"? The guy in street clothes laughed and said, "CIA. FBI." Along the way, the uniformed officer asked my religion (a very common question I receive). We three chatted amiably, I  showed them the area where the camera disappeared, and we returned to the station.

      Upon our return, I was invited again to take a bench. The two Brits were still about. A Muslim "bench man" stood up, carefully laid his jacket on the cement porch where we sat, then stepped down to a water
      spigot at the bottom of the steps, and washed his face, hands, and feet. Meanwhile, his companion prayed standing, then knelt on the jacket and prayed. The first man completed his ablutions and then conducted his own prayers on the jacket.

      Photo credit: The Telegraph

      Eventually, the investigator summoned me back to the action room. He had paper with carbon between pages and commenced to write a report. He asked if I had insurance and, surprised, because I'd forgotten that I DID have insurance, I said yes. The investigator asked the value of the camera, then said, "Do not file insurance for the camera" because he was certain his people would retrieve my camera. This was great
      news to me.

      The investigator asked me my full name, where I was staying, and then asked my age. Wha?! "Do you really need my age"? I asked. He indicated yes. I wondered aloud if it needed to be the true age and his response
      was more or less a shrug. I looked him square in the eye and said, "30."

      As I sat chuckling gleefully to myself about my outrageous response, he asked some more questions, ending with "What is your identity"? Huh? I told him I didn't understand the question, the realized he was asking my national origin. Oh, got it.

      His report complete, we chatted awhile informally, and then I left, returning to my hotel.

      Although I felt very hopeful about getting the camera back, it was a depressing loss in the moment.

      Monday, January 3, 2011

      Computer Guest Accounts

      I like that I password-protected entrance to my laptop. I like that I don't have any site for which I'm automatically logged in.

      However, until recently, I'd inexplicably overlooked the fact that if I lend computer access to a friend or relative, they have complete access to all of my files.  Gee, that's kind of a gaping hole.

      I trust my friends and family completely. That's not the issue. It's that my files are private. No explanation or excuse needed for me to want to keep them that way.

      Another reason to have a guest account is to keep guests from adjusting your settings and making other changes that will surprise or irk you when you get back on. It's like lending someone your car and when you next drive it, you find that the mirrors, seats, steering wheel, and radio stations have been adjusted.

      So I felt a little stupid when a cousin was telling me about applications that help people catch those who steal their laptops. For some of these apps to work, you have to set up a guest account (if you have a password-protected account). 

      Doh. Even if I don't invest in an application to catch a thief, it is still a no-brainer to create a guest account on my laptop. Which I've now done.

      But here's some info on laptop retrieval applications. I already mentioned whereisjenny.com's excellent article on security back here. She mentions these four applications: 

      Sunday, January 2, 2011

      Email Accounts Maintenance

      Too many email accounts?

      I dumped one email account today. Which brings me down to eleven. How'd I get so many email accounts? I've got:

      1. The one with my real name that I use professionally;
      2. The one I use for newspaper and other media registration so I can submit online commentary;
      3. The one I use for a flickr account;
      4. and 5. The two "stupid" accounts I set up with two different providers for when I am on the road;
      6. The one I set up to join a listserv and maintain anonymity;
      7. The one I had to set up with a particular provider so I could join a group related to the listserv;
      8. The one I set up to replace the one google shut down, only to regain the earlier one just a few days after I created the replacement account;
      9. The one I use with facebook
      10. The one I use for administrative stuff; and
      11. The one I set up for a genealogical archive, which I'll hand off one day.

      It's absurd. Can I be rootless with so many email accounts? Does having 11 email accounts fall into the too-much-stuff category? I don't know  Probably yes Yes, but I'm not ready today to delete any more than the one I released today. Perhaps tomorrow.

      Here's what some others have to say on the topic:

      You can also get a 10-minute email account. Genius.

      Account maintenance today:

      I made sure every account had a designated password-recovery account the provider can send a password reset email to.

      I reviewed all of the passwords to make sure they were strong, but still simple for me to remember. I changed many of them.

      Microsoft has a password checker.

      Or you can go here to find out how long it would take for a "brute assault," using computers, to crack your password. It's suggested you not enter the exact password you use or intend to use. The site's owner, Eric Wolfram, writes this interesting article about good passwords.


      From howsecureismypassword.net

      Wednesday, December 29, 2010

      Flashlights

      There are people who are besotted by light. They test flashlights and talk about them, their throw and their emitters and their rings and beam patterns and artifacts ...

      Then there's size, battery source, weight, durability ....

      Here are some nice articles about choosing a flashlight:


      This option combines flashlights with carabiners.

      For me, I wanted a flashlight with these qualities:
      • Small size for maximum portability and packability
      • Uses AA battery, as I already have a device that uses AA batteries, so want to simplify battery packing -- plus AA batteries are available just about everywhere (except in Playa del Carmen's Walmart ... )
      • Uses only one AA battery, which impacts on flashlight size and also on need for quantity of replacement batteries
      • Has more than one light setting to maximize functionality
      • Durability
      • Good light

      I went with onebag.com's recommendation:



      Photo from onebag.com
      Photo from amazon.com

      Sunday, December 26, 2010

      Health Insurance Coverage When Outside the US

      My understanding is that most U.S. health insurance coverage stops at the borders. Even Medicare.

      For me, this is not so relevant, because my U.S. health insurance coverage is going to end at midnight, December 31, 2010, anyway. Which is why I've been getting well-person screenings in the last few months in the event work is needed before the midnight hour. Fortunately, all has been clear.

      I'll do some checking in the next couple of days into the possibility of affordable health care effective 1/1/11, but I suspect my definition of "affordable" and my country's definition of affordable will not intersect. This will likely mean I'll be going commando for awhile.  Hopefully, I'll get an ESL teaching job that provides health care coverage.

      On the other hand, many countries outside the U.S. have decent and very affordable health care (affordable by average-Joe American standards; perhaps exorbitant by average, in-country resident standards), so no insurance may be needed.

      Trip insurance for American travelers outside the U.S.:

      At nunomad.com, Ricardo wrote How to Choose the Best Travel Insurance - Ricardo's Experience

      World Nomads seems to garner most travelers' affections, but it's by no means the only game in town.

      Other than various bells and whistles of particular policies, factors that affect the cost of travel insurance appear to be:
      • Traveler's home country
      • Destination country
      • Traveler's age
      • Length of time in the destination country

      Tuesday, December 7, 2010

      Rootless rehearsal: Money and banking

      My stay in Mexico turned out to be a good rehearsal for future rootless forays outside the US.

      On Plans A, B, and C

      I took some cash with me to Mexico, along with a debit card and a credit card. 

      The first thing I learned was: The Mexican banks were not exchanging cash dollars into pesos. Euros yes; dollars no. This apparently went into effect in September, in an attempt to manage the flow of narco money. Result: I did change some cash at a casa de cambio, but at a lower exchange rate than I would have gotten at a bank.

      Fortunately, I'd already arranged with my financial institution to open one of my debit cards and my credit card to international use, so it wasn't a big deal. For the remainder of my stay, I used my debit card to withdraw pesos at a bank ATM. The credit card was a back-up for the debit card. 

      For future: Always have a Plan B and C for accessing money. In this case, I had both a debit and a credit card in addition to the cash. In the reverse, though, it would mean if I planned to depend primarily on cards, then I'd still better also bring some cash (and even some old-school travelers checks, depending on the country).


      Withdrawing $$ from checking or savings accounts via debit card

      The debit card I used was for my primary account. If someone had compromised access to the account, and then to its related accounts (such as a related savings account), I'd have been screwed in a major, major way. Even if my financial institution caught on to such a breach early, it would be a bummer, because the first thing the financial institution would do is disable my debit card, making it more difficult to access my money.

      For future: This week, I opened a new checking account with a new number and with a segregated access portal. I opted out of the overdraft service, so if the account should be compromised, the $ will dry up when the funds in that account are depleted. It will be for travel only. I will only deposit enough in that account to cover what I think I'll need plus a cushion for modest emergencies. My goal is that any damage will be self-contained.


      Here's what others have to say about money and banking while on the road:

      What's Your Travel Back-Up Plan? at travelbooklocker.com
            
      Get Online as Safely as Possible While Traveling at glyphobet.

      How to Bank Securely While Traveling at Bootsnall.com, the one-stop indie travel guide.

      Banking While Traveling at How to Travel the World.com.


      .... and then there's the suggestion I read to open a skype account, load it up with calling credit before leaving the country, and bank by phone. This seems to make the most sense to me right now.

      Sunday, December 5, 2010

      Security of web-based data storage

      A while back, I said I looked for but didn't find any best practice standards for web-based data storage. Today, I found something. Whether it's any good or not, I don't know yet, but there is the Cloud Security Alliance.

      "The Cloud Security Alliance is a non-profit organization formed to promote the use of best practices for providing security assurance within Cloud Computing ... "

      Regardless how effective this organization - and technical failsafes - may be, the one constant is that all systems will fail at one time or another. Anything that involves "unstable" variables, such as human beings, will have intrinsic flaws. 

      One takes the prudent measures one can and strives to fail smartly.

      Monday, November 22, 2010

      System failure

      Ah, the cascade effect.

      This morning I had a lesson to teach. I don't have a printer at the condo, so I must print documents at the school. We are not supposed to connect our laptops to the school printer. So I email my documents to a web-based email account, access that at the school on a school PC, then print the documents.

      So this morning I arrived at school, accessed my email account, retrieved my two-part lesson plan, and discovered that where I thought I'd attached Lesson Plan A and Lesson Plan B, I'd attached duplicate copies of Lesson Plan A.

      Uh and oh.

      No problem. I'll just pull out my laptop, send it to myself again, and I'll be good. No. I didn't think I'd need my laptop, so I'd left it at the condo.

      No problem. I'll just go online with the school PC and access my web-based backup files (which I hated to do since I really don't trust the school PCs' security). So I pull up the website, enter my login and then my password, only to find I'd entered the wrong password. Hmmm, don't want to re-enter the wrong password, because I don't want to be locked out of that account altogether (like I'd been locked out of a gmail account the week before - more on that later).
       
      No problem. I'll just go to another account and retrieve that ol' password (which I hated to do because I don't trust the school PCs' security). Oh damn it. My password for that other account is such that it includes some keys that are very different from those in the U.S., and I could not figure out how the heck to get to certain symbols, which was the cause of my lockout last week with an entirely different web-based account.

      Result: I walk back to the condo, fire up my laptop, send myself Lesson Plan B, pack the laptop in my bag, and trudge back to school. All making for a very poor start to my day.

      Important lessons learned:

      • ALWAYS have at least one accessible Plan B in my pocket (i.e. I should have taken my laptop with me), even when it's kind of a pain in the ass; and
      • Select passwords that are strong, but which don't undermine you when you encounter foreign keyboards.

      You might ask - hey, why don't you just take your flash drive with you and insert that into the school PC? That would be much more portable, to be sure. The problem is I don't trust the PCs and I ain't gonna do it if I don't have to. In another scenario, I may have to do that with a strange PC, but I don't have to do that now. 

      A note on the email account I got locked out of last week. Super annoying and still unresolved. Thank God it wasn't a critical email account for me. In response, I set up a brand-new email account with three features: 1) It has a good password that's easy for me to remember, 2) which doesn't use symbols that require advanced study of the foreign keyboard, and 3) which has as its sole purpose homework stuff. It's what I call my "stupid" account. If it were to get compromised, there's nothing lost. I wish I would have thought of doing this earlier.

      Monday, October 18, 2010

      Virtual document and data storage, part 3

      External device backup (storage)

      Sometimes, knowledge is not power. Sometimes knowledge is just pots banging together until you get a headache.


      Decision point #1:  What kind of external device do I want for backing up my files?

      My decision: I decided to alternate two usb drives for my external-device backup.

      Why:  I want to be as portable as possible. Space in my rootlessness state is very limited.

      Thus, I ruled out DVDs (doh! not just for movies, I discovered) and external hard drives. Nothing wrong with these. I just don't want to carry around a stack of DVDs. And although there are small external hard drives, like Brother1's beloved Passport, I wanted the even-smaller portability of usb drives.

      But why go with alternating usb drives? Several reasons:

      • If one gets corrupted or stepped on by an elephant, I want the spare. 
      • Loss or theft.  
      • Avoid the Glad-I'm-Not-That-Guy-in-Alaska scenario.
      • Redundancy, redundancy.

      Decision point #2:  What capacity do I want on my usb drive?

      My decision: 16G in each flash drive.

      Why: Because I could, due to price and availability. I wish one of the 'whys' was that my technical know-how informed me it was the right capacity for my needs. But, frankly, I don't have a clear understanding of my needs, and this ignorance also led me to go big (at least as far as flash drives go).


      Decision point #3: Do I want my usb drive to be backup-ready or do I want to mess with that myself? 

      My decision: There's software out there that will make my flash drive backup-ready. I'll choose the one that I think is the best fit for me.

      Why:  I would have preferred to get something like the Sandisk Ultra Backup Drive, with its stupid-proof backup button.

      But I found that the more I pored over reviews (which are a mixed blessing, anyway), the more paralyzed I became.

      For whatever reasons (none particularly logical), I moved away from the Sandisk Ultra Backup Drive. Maybe I felt stifled; don't know.

      Well, maybe I do have an inkling. I've got a Sandisk 2G already. It feels flimsy to me; I don't like how it seats into the usb port; and just the other day, it went strangely kaput on me in the desktop PC. An important lesson: I was willing to suspend my own experience with a brand in favor of a bunch of strangers and their presumed superior technical know-how to mine. On the other hand, I find some Sony products shine (e.g. my Walkman mp3 player) while others completely suck (e.g. anything to do with a CD player). 

      It seemed I could choose from a much broader range of products if I took the backup-readiness out of the equation.

      From there, it was a little easier. I went with these two:

      Where's the aspirin?

      Saturday, October 16, 2010

      Virtual document and data storage, part 2

      Online (or remote) backup 

      What is online backup?  Here is a very easy-to-understand, thorough explanation.

      Some popular remote backup services: 



      I would add, as well, Google Documents, for down-and-dirty, convenient storage and piecemeal backup.  No automatic backups, and uploads do not occur in bulk, but otherwise, this is a fine place to keep copies of selected documents, spreadsheets, photos, etc. Users can make individual documents or folders completely private, or open to specific invitees (with permissions for view only or editing privileges), or public to any passerby.

      Here are various reviews of online backup services:


      Questions to ponder:

      1. Who owns these services? 
      2. Can I trust the company? Trust the employees? 
      3. Does the company have good training, processes, oversight practices? Will the company inform customers of security breaches or cover them up? 
      4. Is there an organization that establishes business standards for online backup and storage enterprises?
      5. Is there a regulatory authority that oversees these companies? 

      I can find out the answer to #1. As for the rest, I just don't know.

      I haven't spent too much time looking, but I did not see any place where I can find generally-accepted standards regarding the different dimensions of online backup, such as privacy, security (from hacking, natural disasters, power outages) and data recovery. If someone tracks that down, let me know.

      Ditto re: any regulations that oversee online backup.

      To some extent, one is buying a pig in a poke.

      User security stupidity:

      See discussion about protected sex in part 1 here.

      If I'm using an online backup service for storage and for privacy (in the event my laptop is stolen, for example), what good is the provider's state-of-the-art security if I don't require a password entry to see my laptop's dainties?

      Or if I pick a weak password?

      ... and then tape it onto the laptop keyboard?
       
      My desktop PC "remembered me" for just about every site that required a login. No need to enter passwords. It was like having an EZ Pass on a toll road.

      I want my laptop to remember nothing; I re-enter a password (or swipe my fingerprint) for almost everything. This is less convenient, but it's no more onerous than locking the doors to my house or car.

      So what'd I pick?

      I pored over the reviews for the online backup services. Each has its unique pros and cons related to features and price. Some of the technical terms and processes were over my head, so I felt unable to make a completely informed decision. To a certain degree, I could do just fine by choosing one at random.

      Nevertheless:

      If I were a little more tech-savvy and if I knew I'd stay put in the U.S., I would have gone with Amazon S3 in an instant. I liked it for what appears to be an above-and-beyond security level, and that Amazon has a lot to lose if it were to compromise its customers' confidence in its service.

      Instead, I went with a different service - Dropbox . It seemed to have the highest overall reviews of both the so-called professionals and the regular-Joe customers like me. Interestingly, it uses Amazon S3 to store its customers' data.

      Likes:
      • Easy to use right out of the virtual box. 
      • Synchronizes all docs/data amongst any computers or smart phones one has. 
      • Super-easy to access all my stuff on the web. 
      • Automatic back-up.

      Dislikes:

      • While I'm good with the automatic back-ups occurring immediately when one adds a new or revised file, I would like the ability to suspend a back-up.
      • As a universal good practice, I wish Dropbox required users to create strong passwords.
      • I'd prefer a stronger encryption than Dropbox uses, but its level is acceptable.

      Thursday, October 7, 2010

      Virtual document and data storage, part 1

      All systems fail.

      Which is why we all back up our data.

      Yeah, OK, now that everyone has finished tittering --
       
      While rooted to a desktop PC, surrounded by the bricks and mortar of my house, I felt comfortable with one form of back-up for my data, such as a usb (flash) drive.  

      But now that I'm going rootless, I need two forms of back-up. This is because my laptop is more portable, thus subject to theft, being left on a bus, eaten by dingos, or falling into a lake. Or I might visit a place where a laptop will be more trouble than it's worth, and I won't even take it with me.

      When my system fails, I want it to fail smartly. (This link goes to a September 2002, edge-of-your-seat article by Charles C. Mann, in the Atlantic Monthly, on system failure, terrorism, and Homeland Security.)

      In addition to an external device (e.g. usb drive) that carries my little universe of data, I also need to have a web-based storage unit.

      Security versus convenient access:

      It's like sex. If I want to reduce the odds of getting an infection, there's a continuum of choice, including abstinence, having protected sex with a responsible partner, and just being stupid out there.

      I'm opting for choice #2.

      The protections I buy depend on the answers to these questions:
      • How much storage I need; 
      • How secure I need it to be; 
      • How accessible it needs to be; and 
      • How much I want to spend

      'course, like any protection, buying it does no good unless I actually use it.