Not blown away as Altec Lansing goes into orbit

Just over a year ago, I bought an iPod speaker system from Altec Lansing. Easily as good as the Apple equivalent (and at less than half the price), I’ve been really pleased with them, so when Altec Lansing‘s public relations team got in touch and asked if I’d be interested in a new portable speaker for review, I was pleased.

Unfortunately, my pleasure didn’t last too long once I received the speaker (yes, singular). You see, I’m now in the second half of my thirties… closer to 40 than to 30 and I have two kids, so I guess I’m entitled to be a grumpy old man. I find it offensive when people (generally teenagers) walk around playing their music on their phones or other portable devices through poor quality, low powered speakers and can’t help thinking that at least in my day I had a “ghettoblaster” the size of a large piece of luggage to annoy people with my idea of good music (I won’t embarrass myself by divulging any further details…). What’s that got to do with the iM207 speaker (also known as the Orbit) that Altec Lansing sent me? Well, quite a lot as it happens as I’ve had my Orbit for a couple of weeks now and I have been trying to think of something good to write about it:

  • I could say that the Orbit is small. But it’s not really – just look at the picture of one next to a standard iPod.
  • Product shot of Altec Lansing Orbit portable speaker

  • I could say that the Orbit looks good. But it doesn’t. I’m sorry but I just don’t find black and chrome-effect plastic very attractive (although, now I come to think of it, that’s what the iPod uses…).
  • What about battery life? To be honest, I don’t know (Altec Lansing claim 24 hours on three triple-As) and anyway, that will vary according to a number of factors including the battery brand and characteristics, as well as the type and volume of music being played.
  • What about sound quality – surely that’s the most important thing? Yes, it is, but my iPhone’s internal speakers are better and when I plug the Orbit into my iPod I can only listen at up to about 25% volume before the distortion starts to kick in.
  • I could say that the Orbit is inexpensive. But I think £29.99 is a lot for something that’s not really very good. £14.99 would be a different story.
  • The best thing I can say about the Orbit is that the cable storage is well thought through and it’s iPhone friendly. There’s also a 2.5mm converter for use with mobile phones that don’t have a 3.5mm headphone jack.
  • There is one more thing too… you can get an Orbit for free – and hey, maybe you’ll like it better than I did. Just go to the YouGroove site and sign up.

So, I’m sorry Altec Lansing… you asked for a fair review and I really tried but the Orbit just doesn’t do it for me. Maybe I’m just not in that target “YouGroover” audience and I like my music to either be personal (i.e. in-ear) or to be played through a decent speaker system.

Dara Ó Briain talks about IT

So there I was, lying in bed in my hotel room, when Dara Ó Briain comes on the telly and starts talking about IT… it made me laugh a lot. So much that I thought I’d reproduce it here:

“[IT is] full of amazing bullshit job titles that didn’t exist 10, 20 years ago. You’re a developer for Christ sake eh! Do you have a web master in the office? [Yes] Of course you do. Yeah. Web master is my favourite of all of those – walking around the office going ‘I Am A Web Master. I Am Master Of The Web. Feel The Power Of My Fire Wall. It is not actually a wall of fire, no it is more of a protocol for e-mails, anyway, nevermind – I Am A Web Master. I am not social situation master – no I can’t do that at all no. I am not talking to women master – no there are too many variables in that situation as well I can’t be handling that’.

That, and my favourite thing about your industry by the way is ‘solutions’. You do love the solutions don’t ya? You know, when your computer’s not working and you’re kinda going, ‘ah, it’s not working, get the guy’ and one of your people arrives, in a cape, going ‘I, am a Solution Provider. You, you’re a problem provider, back away problem provider – you would not understand my solution, it is too technical for you, get out, get out of the room. Do not look at the computer – your eyes hurt the computer – get out! Have they gone? Lovely. Control – Alt – Delete…'”

[Dara Ó Briain, Comedian]

Microsoft security suffers from “the Škoda badge problem”

I’m attending a Microsoft Forefront Security course and it was interesting to hear the analogy that the instructor used to describe how people perceive Microsoft and security when used in the same sentence… he referred to it as the Škoda badge problem – i.e. that everyone knows a modern Škoda is a well engineered car built on a trusted Volkwagen platform but Škoda is still struggling to discard its image as a producer of cheap eastern-European cars. Similarly, Microsoft has some excellent security products (e.g. ISA Server) but the perception is that they are from Microsoft so they can’t be secure.

SnagIt

For the last few days, I’ve been writing a migration process for an Active Directory and Exchange migration that I’m working on.

It shouldn’t be necessary to cram documents for technical people full of screenshots but experience tells me that:

  • It’s what many IT team leaders expect.
  • If you don’t provide lots of pictures then people don’t follow the process correctly.

Unfortunately, experience also tells me that:

  • People don’t follow the process correctly anyway.
  • Adding many screenshots to a document greatly increases the time it takes to produce the process and the cost of maintaining it.

Anyway, getting back to the point, I’ve just written a document with a lot of screen shots in it. It makes very dull reading (and it wasn’t much fun to write either) but the process of taking the screenshots was greatly improved using the SnagIt screen capture software from TechSmith.

Why not just stick with Alt+PrtScr? Because that needs me to paste the screen grab into something afterwards (and before someone leaves a comment – yes, I do know that Linux and Mac users can just save a .PNG file to the desktop). SnagIt will let me select the region of the active window that I want to grab (e.g. just a particular menu), control output of the screenshot, name it for me, put it in a folder, etc. and generally save me a load of time.

Microsoft releases a beta for Hyper-V

Windows Server 2008 beta testers are probably aware that the release candidate distributions include a pre-release version of the new virtualisation platform that is now known as Hyper-V (formerly known as Windows Server Virtualisation and codenamed Viridian).

With Hyper-V due to follow Windows Server 2008 release (within 180 days), it was widely anticipated that no formal beta would be available until Windows Server 2008 was finalised but Microsoft is announcing the first Hyper-V beta release today, including support for quick migration and high availability, ability to run Hyper-V as a Server Core role and integration of Hyper-V into Server Manager. Further details of Hyper-V are available on the Microsoft website.

WordPress blog fails with more than 10 e-mail addresses on a page

Arghhh! I’ve just spent the last 3 hours trying to write a post on another site that I manage using WordPress. I can’t find anything on the support forums but it seems that every time a page or post includes more than 10 items that look like an e-mail address then the following message is displayed when an attempt is made to save it to the database:

Internal PHP Processing Error (#99911 – q:numberofemailaddresses) in /usr/home/username/public_html/wp-admin/post.php. Please contact support and include this message.

In my case we’re at a critical stage in the campaign and encouraging people to contact their local Councillor. With 11 Councillors on the committee the 10 e-mail address limit is frustrating…

I’ll post a link here if I ever get a resolution to this. In the meantime, if any WordPress or PHP experts have a suggestion for a fix or workaround, please leave a comment!

One month with the iPhone

The Internet is full of Apple iPhone reviews but at least three people have asked me what I think of mine so I thought I’d write a post about my experiences over the last few weeks.

Firstly (and mostly for the benefit of those who compare the iPhone to a Windows Mobile device) – the Apple iPhone is not a business phone. Period. It’s very definitely a consumer device – if only because O2, who have an exclusive agreement with Apple for iPhone service provision in the UK, specifically state in their iPhone terms and conditions that:

All [mobile data and Wi-Fi] usage must be for your private, personal and non-commercial purposes.

[O2 iPhone Terms and Conditions]

So what about the feature set? Well, despite rumours to the contrary before the European release of the iPhone, there is no 3G model (yet – although O2’s CEO has indicated that there will be a 3G model in the second half of next year). There’s also no GPS chipset. No removable/user-replaceable battery. And at £269, unsubsidised, on an 18-month contract, it’s not cheap either (here in the UK we are not used to paying high prices for handsets as they are generally subsidised by the airtime agreement – possibly why the iPhone hasn’t sold too well in the UK), especially when you consider that none of the available tariffs are particularly generous (e.g. unused inclusive voice calls do not roll over from one month to the next.

But none of that matters because, unlike every other mobile handset that I’ve ever owned, I enjoy using my iPhone. Not very long ago, I sold my HP iPAQ PDA because I didn’t use it. I never really got on with a Symbian smartphone and, whilst a Windows Mobile device would be perfect for work, the iPhone seems to have struck the right balance for me in my personal life. Apple products are often praised as being intuitive and the iPhone is no exception – maybe it’s down to the touch-screen interface (and “pinching” works really well) but something about the iPhone just feels right. Even so, I still have a shopping list of features that I’d like to see (and there’s no reason why some of these shouldn’t be provided in a software update):

  • A keyboard update to show lowercase letters in lower case mode and upper case letter in upper case mode (I know there’s a highlight on the shift key, but entering wireless network keys is a right pain!). A Caps Lock key would be useful too.
  • Cut and paste functionality.
  • Undo options (e.g. my fat fingers accidentally touched the wrong part of the screen and deleted my email signature, which I then had to re-enter manually).
  • A character count on SMS messages (so that I know when I’ve hit the 160 character limit and actually sent multiple messages).
  • Multimedia messaging services (MMS – what’s the point in having a camera phone that can’t send picture messages?).
  • Browser support for popular plugins (Microsoft Silverlight might be asking a bit much, but what about Adobe Flash?).
  • Screen rotation in all applications.
  • The ability to save files on the device and access them through the iPhone interface (e.g. a PDF with a list of The Cloud hotspots).
  • To-do lists.
  • The ability to set different e-mail autocheck values (the iPhone does not have push e-mail) for Wi-Fi and cellular networks.
  • The ability to use my normal earphones – the standard Apple earbuds are still uncomfortable.
  • Voice-activated dialling.
  • A cradle for integration with fully-fitted in-car handsfree equipment.
  • The ability to set up my own ring tones without charge (an alternative to paying for ringtones via iTunes is iToner from Ambrosia Software).
  • Third party application support (an SDK is due in February 2008).
  • Freedom to choose networks!

So, what else have I found?

  • Knowing that I have unlimited data has stopped me from worrying about the costs of using a phone to access the ‘net. In practice, I’ve found that I don’t use that much at all for the odd web page, autochecking e-mail once an hour, etc., although it is easy to rip through a couple of megs when you do need to look something up (this is the real Internet with full-size pages – not specially formatted pages for the mobile web, although the iPhone Safari implementation is prone to hanging when it encounters a page with unsupported content – e.g. Flash). Today is the last day of my billing period and I’ve used around 52.7MB of data on O2’s EDGE network this month but I spend most of my day with a notebook computer and it would be easy to double or triple that if you used the iPhone as a primary communications device.
  • EDGE and GPRS status bar icons

  • Whilst on the subject of data – free Wi-Fi is not very common in the UK and O2’s EDGE coverage seems patchy so I seem to spend a lot of time with a blue box (no E) indicating a plain old GPRS signal, which is painfully slow. EDGE is just about fine for Google Maps and downloading e-mail messages but 3G broadband would make a big difference for Safari and YouTube (which only works on EDGE or Wi-Fi connections).
  • I’ve resisted buying a TomTom for years now (I have a £9.99 mapbook in the car together with a very good knowledge of a fair chunk of the road network in England and Wales!) but I really like the iPhone implementation of Google Maps – even without GPS (which I have to admit would be handy). I would also like it to do some of the things that the web version does – like dragging to adjust the route – and providing public transit/traffic information (which seem to be a US-only features). Also, searching for places seems to be very much biased towards the US (when I’m on a UK network and I search for “Reading” I probably mean the town in Berkshire, not Massachusetts).
  • Leaving the original screen protector in place is not a good idea as I found when I nearly returned my iPhone for replacement beacuse I could hardly hear people calling me, then I realised the problem was that the speaker was covered by a piece of plastic! Apple and Carphone Warehouse both sell screen protectors (I bought the Carphone Warehouse ones for £4.99).
  • The camera is possibly the worst digital camera that I’ve ever used, with a huge shutter delay, slow focus, low resolution and apalling image quality – even considering that it does have a tiny lens.

For Apple’s first attempt at a phone, the iPhone is pretty damn good. Sure, it’s been overhyped and there is a lot that the iPhone doesn’t do but what it does do, it does well. I can’t help thinking that Apple is learning that mobile telecommunications is a cut-throat business and, as I wrote back at the start of the year:

“Now it’s Apple’s turn for hard lessons – to find out that telcos don’t want what consumers want – instead, they want to control the platform, lock down functionality, introduce their own unique selling points, and encourage customers to upgrade to the next greatest device, in the process locking themselves into another lucrative airtime contract, as soon as the current one ends.”

(Oh yes, and to play on consumers insecurities in order to sell them overpriced mobile phone insurance that they probably don’t need.)

I think The Times summed up the iPhone perfectly when they described it as:

“Expensive but exceptional”

[Jonathan Richards, Times Online, 8 November 2007]

Even so, I’d like to finish up by quoting the eccentric but eloquent wordsmith, Stephen Fry:

“We spend our lives inside the virtual environment of digital platforms – why should a faceless, graceless, styleless nerd or a greedy hog of a corporate twat deny us simplicity, beauty, grace, fun, sexiness, delight, imagination and creative energy in our digital lives? And why should Apple be the only company that sees that?”

“All the big guns want an iPhone killer. Even I [Stephen Fry], mad for all things Apple as I am, want an iPhone killer. I want smart digital devices to be as good as mankind’s ingenuity can make them. I want us eternally to strive to improve and surprise. Bring on the iPhone killers. Bring them on.”

[Stephen Fry, “Devices and Desires”]

“The rest of the world can mock as much as it likes. If you’re going to have a phone/video player/slideshow/music centre/web browser/camera in your pocket, is it so wrong to want one that makes you grin from ear to ear? Not with smugness […] but with delight.”

[Stephen Fry, “Not sensible, but, oh, the joy of it!”]

Windows Server 2008 moves a step closer to release

I don’t normally cover new product releases here but there are one or two products on the horizon that are what might be considered "significant releases".

The first of these is Windows Server 2008 and around about now, Microsoft is due to announce release candidate 1 (RC1), marking another step forward towards product release (and launch in February 2008).

Windows Server 2008 RC1 doesn’t include any major build updates (compared to RC0) but it also coincides with Windows Vista service pack 1 (SP1) RC1, effectively bringing Windows Vista onto the same codebase as Windows Server 2008.

Also on track for launch in the same timeframe as Vista SP1 is Windows XP SP3 (whilst I’ve not seen any details yet on the ship date for this, I expect it to be made available at around about the same time as Windows Vista SP1 and Windows Server 2008).

Active Directory and relative identifiers

Last night, I wrote a post about how a little logical thinking was required in order to resolve some issues with the dcdiag.exe utility from the Windows Server 2003 Support Tools.

Since then, I’ve been examining the dcdiag test results and was a little alarmed to find that two of the domain controllers (DCs) for the domain that I intend to migrate several hundred users into were reporting a lack of available RIDs:

Starting test: RidManager
   * Available RID Pool for the Domain is 17352 to 1073741823
   *
domaincontrollername.domainname.tld is the RID Master
   * DsBind with RID Master was successful
   * rIDAllocationPool is 14352 to 14851
   * rIDPreviousAllocationPool is 12352 to 12851
   * rIDNextRID: 12849
   * Warning :There is less than 1% available RIDs in the current pool
   …………………….
domaincontrollername passed test RidManager

For anyone who doesn’t appreciate the potential significance of this, relative identifiers (RIDs) are necessary in order to create new Active Directory objects.  Because Active Directory uses a multi-master model, any DC can create an object, which is then replicated between the various DCs in the organisation.  Objects are actually identified by their SID, part of which includes the domain identifier, and part of which is the RID.  In order to maintain uniqueness, the generation and allocation of RIDs is controlled by the DC holding the RID Master role for the domain, allocating pools of 500 (by default) RIDs to DCs for use when generating the SIDs for new objects.  Still with me?  Microsoft knowledge base article 305475 has more details.

Active Directory DCs (at Windows 2000 SP4 and later revisions) request a new RID pool from the RID master once the pool is 50% depleted, so 1% of available RIDs concerned me somewhat.  Other tests had confirmed that replication was working, and switching the RID Master role to another DC didn’t appear to make any change.  I also checked to see that there were no duplicate SIDs in the domain.  As it happens, everything was working normally but the labels, and the warning, are very confusing. This is what I found:

  • rIDPreviousAllocationPool is not, as the name suggests, the last pool that was used – it’s actually the RID pool that is currently being used.   So, in the example above, 12352 to 12851 is the list of RIDs currently being allocated. When this becomes exhausted (rIDNextRID gives an indication of how soon this will occur), Windows copies rIDAllocationPool into rIDPreviousAllocationPool and starts using the new RIDs as needed. There is a global RID pool size limit that the RID Master can allocate from (the Available RID Pool).
  • rIDAllocationPool is the next batch of RIDs to be used (supplied by the RID Master).  In this case, 14352 to 14851 will be the next batch of RID numbers (500 in the pool) for this DC.  This is generated automatically via a request to the RID Master once the pool is 50% depleted.
  • rIDNextRID is the last RID allocated (not the next one to be allocated).  So the next object to get created in the example above will get RID 12850.

I tested this by creating some new users and running further tests with dcdiag.exe, observing the DC reach the end of the pool and then start using the next pool (originally called rIDAllocationPool):

Starting test: RidManager
   * Available RID Pool for the Domain is 17352 to 1073741823
   *
domaincontrollername.domainname.tld is the RID Master
   * DsBind with RID Master was successful
   * rIDAllocationPool is 14352 to 14851
   * rIDPreviousAllocationPool is 12352 to 12851
   * rIDNextRID: 12851
   * Warning :There is less than 0% available RIDs in the current pool
   …………………….
domaincontrollername passed test RidManager

Starting test: RidManager
   * Available RID Pool for the Domain is 17352 to 1073741823 
   *
domaincontrollername.domainname.tld is the RID Master 
   * DsBind with RID Master was successful
   * rIDAllocationPool is 14352 to 14851
   * rIDPreviousAllocationPool is 14352 to 14851
   * rIDNextRID: 14352
   …………………….
domaincontrollername passed test RidManager

Once I have created another 249 or so users, I should see a new rIDAllocationPool generated.

Screenshot showing the RID as part of a SID in the additional account informationJust to be sure that I understood this fully, I installed acctinfo.dll, after which I could clearly see the RID at the end of the SID for the test user account (when viewing the Additional Account Info tab on the user properties in Active Directory Users and Computers).

In short, if you see a message about less than a certain percentage of RIDs in the current pool, don’t worry about it (as long as rIDAllocationPool is different to rIDPreviousAllocationPool)!  The pool will gradually be used until it reaches 0% and tips over into the next allocation.  The problem is the confusing language used (rIDAllocationPool should really be rIDNextAllocationPool, rIDPreviousAllocationPool should really be rIDCurrentAllocationPool and rIDNextRID should be rIDPreviousRID).

TNO

There is a well known phrase in IT security – trust no one (often abbreviated to TNO).  A couple of weeks ago, a United Kingdom government department admitted to having lost a couple of discs containing, among other things, names, addresses, dates of birth and bank account details for my family.  Thanks.  For nothing.

Then, yesterday, a Senior Marketing Manager at Microsoft was not having a good day.  First of all, she sent a survey invitation to a list of "Microsoft Influencers" in the EMEA region but the bulk mailing tool she was using failed part way through dispatch.  After preparing a second message to the remaining recipients, she hit the wrong button and mailed a bunch of people she didn’t mean to.  So far, no real harm done, and an apologetic e-mail was sent to those affected.  Except that somewhere along the way she attempted to recall the message, the names of the recipients went to everyone who received the recall request, and two bright sparks on the list said (in jest, I think) something to the effect of "wouldn’t it be good if I could sell the e-mail addresses of all these people that Microsoft considers influential" (all 884 of them).  So that’s my e-mail address potentially compromised too.

And a few weeks back I had an e-mail from Fasthosts (through whom many of my domain names are registered) letting me know that they had experienced a security breach and that my account may have been compromised (but they couldn’t be sure)… so I could have been subject to a domain hijack if they hadn’t already locked my account for me.

Then there’s the various online and telephone-based services (including banks and credit card providers) that use ludicrously low security, with a myriad of single factors for authentication (and really, what use are my mother’s maiden name and town of birth for "security" questions as both of those items are publicly available information?).

It seems that avoiding identity theft is fighting a battle that can’t be won.  I have to entrust organisations with my personal details but, based on recent history, those organisations (including my government) cannot be trusted.

Maybe it’s time for me to find a new identity?

TNO.