Wednesday, 15 December 2010

BCS - Retro computing

Most IT staff work in fairly small groups; even in the larger companies, teams break down into groups of just a few people. As a result, it's easy for people to develop a "silo" mentality, and forget that there is a larger world out there.

For that reason, I like to try to get to various events where there is an opportunity to speak to others within the profession. It's really useful to be able to share ideas, talk about common problems, to know that there are other people that have exactly the same pressures on them and all too often, the same feeling that their work is not appreciated.

The BCS in the South West organise a number of events throughout the year, although there tend to be more during the Winter and Spring terms. During the Summer months, most of the organisers are busy with educational exam systems as they tend to be in academia.

The latest event at the University of Plymouth was a talk on "Retro computing"; a look back at some of the hardware and software systems of the last half century. It was quite amazing to recall the changes that have occurred over that time, to see once again the boxes that seemed so modern and powerful at the time.

They had an amount of older equipment on display, items that have been picked up over the years and kept to be part of a "museum of computing". People had the opportunity to use a few of these old devices; it was quite interesting to be able to once again play a game of Lemmings on the old Amiga.

However, it wasn't just about games; they had some emulation software there that showed how some of the older systems used to run and what kind of business systems were running on them. As someone who had once had the opportunity to create a program from scratch, by designing the flow chart then creating the commands on a series of large punch cards to be processed on the main frame at County Hall, I had a strange sense of nostalgia.

For some of those there, most of the hardware was beyond their recall; several students were actually younger than some of the exhibits, which is quite a scary thought! It just makes me wonder if my nice new shiny HP laptop will seem as ancient and irrelevant in another 20 years.

The BCS South West are also starting a new web site to act as a repository for some information on older computing. The site is there but nothing is available just yet (http://retrocomputing.org). I'm told that they intend to slowly build this up with the help of a few volunteers in the months to come.

In all, it was a really interesting evening, with a lot to see and do. It was also amusing to see who were the highest scorers in "Crazy Taxi"! Clearly there were a lot of the people with grey in their hair that had spent just as much time playing games as some of the younger generation.

Saturday, 11 December 2010

Sec-1 Penetration Workshop

On Friday 10th I went to a workshop event held in Bristol. It was organised by Sec-1 a specialist security firm http://www.sec-1.com/ - note the correct address, if you get it wrong you end up at a completely different type of business!

Obviously, these events are to promote the company and their services; however, it wasn't just a massive sales pitch. The main purpose was to offer people advice about maintaining good security practice by illustrating just how easy it is to break into systems and highlighting the reasons why.

The speaker was Gary O'Leary-Steele and he spoke with passion, conviction and great deal of knowledge. He indicated that they have carried out many investigation tests over the years, and in most cases they could use the same report over and again, but just change the name of the organisation. This is particularly the case in the 150 NHS trusts they have investigated, but is also often true of many private sector businesses.

He stated that in many cases, people have failed to adequately install patches which have been issued for specific problems, often long after the issue has been identified. As it happens, I did a quick search on MS06-040 & MS08-067, the two main culprits and the autocomplete worked in each case after just the first 4 characters, the problem is so well known.

He went on to discuss some of the most common problems and illustrated how they could be used to access systems. He also went on to demonstrate how easy it can be to identify vulnerable systems, get access to accounts with innappropriate levels of security permission, crack passwords and elevate permissions. In most cases, the team of testers expect to get access within 30 mins - if they take longer than an hour, the others tease them unmercifully!

Most of the tools that they use are available quite freely on the Internet. In some cases, they do use items that have been commercially written and there is a small charge, but generally those ones are for the real high end stuff. Each has their own favourites in much the way that people do with most other kinds of software.

Whilst going through the potential problems, Gary also indicated some of the possible solutions, often by using the software tools to confirm the problem, then implementing suitable practice or policy to ensure that something is done to minimise the problem or reduce the impact.

It should also be identified that many of the exploits that were identified were in Microsoft OS or software; but the speaker also very carefully highlighted that issues are just as prevalent in other software products. Mac, Linux, Adobe etc, were all shown to be just as insecure. In many cases, this was due to installation or configuration, but equally there were many flaws straight out of the box.

I'm not a security specialist, although I have had some training in this area. I also enjoy some of the work involved, although it has to be said I don't think that I have the necessary skills to make this my specialism. However, I think that I know enough to be able to state that there are a lot of people that suffer with "delusions of adequacy"; they think that because they use a particular product, or do a specific thing, that makes them invulnerable. Often, they are so wrong that it is difficult to know how to take them seriously in anything.

I'm going to say that it was a great day, a really useful workshop and I was very impressed by the whole event. If they organise any more (and I'm told they certainly hope to) I would very strongly suggest that you grab the opportunity to get along and take advantage of the information and advice that they are willing to hand out free of charge.

Sunday, 5 December 2010

V Two

Following on from last week's blog.

So we bought the hardware, and after it had been delivered, installed everything in the rack, and sat back to start planning the installation. I started up one of the host machines to get a look at the POST and boot processes. To my surprise, an operating system had already been installed - and it was Windows Server 2008 R2 Datacenter. We had purchased the licences for this, but hadn't expected that they would pre-install it.

Well no problem, just have to install the VMWare ESXi. I had a version of the ESXi software, but it was an older version, so first I had to download an updated version of the software which was an .iso image, then create an install disk. Having created the disk, I was then able to do the install. I was really quite surprised; it went through very quickly. Very little to see, just a few linux type screens showing the progress of the install. But after just under 15 minutes, it was all done.

So obviously, it also made sense to do the other two hosts at the same time. Away I went and the second machine was done in much the same time, everything complete with no issues. I then started the third machine, and decided to go for a quick cup of tea as there seemd to be no point in me hanging around watching a series of dots advancing across the screen.

But when I got back, I had a bit of a shock; the process had stalled part way through. The equipment didn't seem to respond to any keystrokes, so I took the disk out to check if there was a fault, but it didn't seem so. I tried to start the install again, and unfortunately, once again it stalled. A third attempt fared no better, so I decided to take a break and look at the vSphere client install whilst I thought about what could be the issue.

I already had installed a copy of the latest version of vSphere client on my laptop for our test a short while ago, and just had to change the logon details. It connected to the host machines without any issues and I could play around with the various bits. I even did a quick install of a guest Operating System to create my first Virtual Machine. Everything looked really good.

However, I then noticed that there seemed to be something odd about the disk allocation on the datastore on the server. There were several partitions, none of which I had created. Worse, it seemed that several of these were unusable by either the VMware or by the guest OS. Having given it some thought, it seemed to me that when the ESXi software was installed, it didn't re-partition the disk in the way that might be expected, and part of the disk would never be available for use, which might be an issue.

At that point, it seemed appropriate that I should go back over the ESXi software install. I did this, checking the process, and at no point did it actually indicate that there was an option to manage the partition. In the end, I simply put the Windows disk in, then used the install routine to start up, and delete all existing partitions. After that, I ran through the ESXi install, and this time, it made all of the disk available for use. I then decided that I would do the same on the others, and the second machine completed without any issues.

The third machine also allowed me to delete the partitions OK and there seemed to be be no reason why the ESXi software shouldn't install. But still it would only go so far, then it stalled everytime. I went through this a couple of times, before going back to my desk to give it some more thought. And at that point, I discovered the reason why, and it was so frustratingly simple, I am almost embarassed to tell you what it was.

We use a very clearly structured IP address range within our network; servers get a static address in one subnet, and all addresses assigned via DHCP are in a slight different subnet. The address that I had input as part of the install routine was an address within the server range and one that had been specifically reserved for the virtualised platform.

But somehow, the address allocated for the third machine had also been given to a secondary network card on an old server. Someone had added a cable to the NIC and then plugged it into a network point. The install routine had failed because it detected that the address I tried to give it was already in use! Once I sorted out the superfluous NIC, the install routine went through without any more issues.

At this point I had 3 host machines, all installed and a connection to each tested with the vSphere client software. A good start and I felt that I was starting to understand VMware. I still had a few other things to go over, but I was feeling really quite positive about the various processes and was looking forward to getting on with it.

But the next step will have to wait for another day 8-)

Friday, 26 November 2010

V for Virtual

For some time now, we have been looking at a project to implement virtualisation. I decided that this would make for some interesting blog entries, and I thought that I might focus on this for a while.

First of all, I suppose that I should go right back to the beginning to explain some of the reasons behind the decision. When I first joined the company, the servers were mostly tower models, that were stood on a table in a small room. These devices had limited processing power, low memory and disk storage even by the standards of the day, and were not really up to the task required of them. It should be said that they were most definitely not cheap, but certainly could not be described as being good value for money.

It was identified that we needed to buy some newer machines to replace this old equipment and as a matter of some priority in order to provide urgently needed resources. As part of the project, it was agreed that we would move to rack mounted equipment; this made far better use of the available floor space, we could get a lot more in the same area. The equipment was not totally top of the range, but was very good quality, a good specification and thanks to some quite keen negotiation (though I say it myself) was pretty good value for the money.

This made a huge difference to operations. Within a short time, staff could see significant improvements in speed of operation, we had much better storage facilities, and it was all much more flexible. This all helped demonstrate that the investment was appropriate; and I was also able to confirm some of the benefits using some standard metrics.

But that was some 5 years ago. That same equipment is still functioning, and thanks to some upgrades is still providing a good level of service. However, it has been identified that across the estate, much of the processing power is underutilised. Although some machines made full use of their memory, more than half do not. We have a couple of servers with disks getting quite full, but the rest are using less than a quarter of the available space. The most obvious excess is in the network cards; generally, they are using less than 5% of the available capacity.

It was also identified that the specific servers were manufactured before the newer energy saving devices now available; they use quite a lot of electric power, both to operate and to cool. We ran some tests and found that they would operate just as well at a warmer temperature than had previously been used, and this helped to reduce the need for cooling, so it did save some electricity, but we felt that it should be possible to do better.

Of course, it was also identified that with equipment getting 5 years old, there was an increasing chance that we would see some hardware failure. This was the main concern for me; it seems foolish to be miserly with spending on hardware, when a failure could cause huge losses to the business due to loss of data or operational capacity.

After identifying the need for replacement equipment, we started to look at newer versions of the same hardware; this had a number of green options for power saving, but I was still concerned that we would be paying for extra capacity that never got used, even allowing for growth within the business.

Like a lot of people, I'd heard about virtualisation, but wasn't sure if it would really work for us. I was offered the chance to see some Dell kit in action, along with the Equalogic SAN units. These were really impressive, and gave a lot of options. I also compared these to some HP hardware with StorageWorks; these looked a little better if also a bit more expensive.

The next step was to consider what virtualisation software to use. I had some spare hardware and installed evaluation copies of both Hyper-V and VMWare. I also took the opportunity to see some Citrix systems in action. It wasn't really possible to do as a full a test as I would have liked due to pressure of work, but it soon became clear that the decision would come down between Hyper-V and VMware. I liked both and felt that either could do a really good job; it was just a case of which we felt we would be happier with in the long run.

At this stage, I managed to get some basic technical books for the two software products; I had hoped that this would help to make the decision a bit easier, but unfortunately, it didn't really help at all. In the end, I decided that we would go with VMWare; the product looked a bit more polished, it's been around longer and is more mature.

So at that point, I started to do some negotiation with the suppliers. This went on for a while, and yes, I played them off against each other. But ultimately, I managed to get a deal that I thought was worthwhile, that the supplier was happy with and that I could sell to the senior managers. There was a slight delay getting the stuff onsite, but it's all here now, and we are starting to install it; but that's going to be the topic for another occasion.

Thursday, 18 November 2010

Bookworm part 2

Just a (fairly) brief addendum to my previous post about the Amazon Kindle. I've taken a weeks holiday (I had a very nice time, thank you) and I made realy good use of the Kindle whilst I was away.

I'd ordered and downloaded a number of books beforehand; a bit of a mixture, some thriller, some technical stuff, some historical and some classics. I should note that all of these were free!

I'm not a sunbathing freak; I will do a bit of lying around, but generally get pretty bored after a while. I mostly used the Kindle in the evenings, after supper and just before going off to bed. However, there were a couple of occasions when I sat out on the balcony to catch some rays and used the Kindle to occupy my mind.

The screen is really easy to read even in bright sunlight (and it was bright) and the text is really clear. Changing pages is really simple; the buttons are on each side and have a nice solid feel to them. Changing books is not too difficult; but I do feel that the square button with ring for the selection and entry functions is a bit less solid.

If I had tried to take the same books with me in paper format, I would have required a much larger suitcase; stood on top of one another, they would have been at least 35-40 centimetres in height (14-15 inches in old money).

There is no doubt in my mind, the Kindle is a great little toy. If I didn't have one, I would say that it would be top of my wish list. I would say thought that I would advise getting a proper cover for it; I got a rather nice black leather one, but there are others in different colours and patterns. But each to his (or her) own.

I haven't seen the Sony e-reader, so can't compare it; but I have shown my device to some others who seem to think that they prefer the Kindle. (But that's just their opinion.)

At some stage, I think that I will subscribe to a magazine as well, and I'll do a write up to confirm how I get on.

Tuesday, 2 November 2010

Springboard Tour 2010

It's been a pretty busy weekend. I went up to Wembley to watch the NFL and stayed overnight so that I could get to Reading early on Monday morning to visit the Microsoft campus for the UK leg of the Technet Springboard Tour. This event was the only one in this country; the others are in major cities across Europe.

http://springboardseriestour.com/

The Springboard tour is about promoting the latest technology and providing opportunities for people to see the products in use. They also covered some of the reasons for migrating to the latest versions and highlighted tools and resources that can be used to make the process a lot easier.

I really like visiting the Microsoft Campus; there is always an energy and a buzz about the place that just makes you feel that it is great to work in technology. I believe that all too often, those of us at the sharp end get very isolated and develop a silo mentality to the work we do. It's important to take the chance to get out to see other people and understand that we are all part of a much larger community, that there are others that have exactly the same kind of problems and that there is more than one way of tackling the issues that we face.

The presentations were introduced by Stephen Rose - and I have a link to a video that he made a while ago. He says that he had drunk about 2 gallons of coffee before the filming and I can believe it!

http://www.youtube.com/watch?v=H2ewOGNGmZY

During the presentations, they made really good use of the demos to show just how you might improve the rollout and migration process. The tools provided are all available through the Technet site and many are improved versions of things that are already in use. There was someone with a video camera filming the event, so some of these may be added to the main site (link above) in addition to the preprepared videos.

Unfortunately, the sessions slightly overran - and there were a number of people that had to leave early, missing the final demo. This was of the Diagnostic and Recovery Toolset (DART). I'd very briefly heard of this before, but hadn't really had the chance to work with it. It looks like a really valuable asset for anyone providing any level of support to end users, and in particular anyone providing support for fatal errors. We will definitely be downloading it to give it a try in the next few weeks.

There was a bonus for those that attended; a free copy of Office 2010! There were also a few other little giveaways and prizes just to say thanks for being there. If you missed it, then you would have to go to one of the events on the continent, as there won't be another one in the UK. However, the presentations and information on the resources are on the Springboard site and I would recommend that you take the time to check it out.

As you may gather, I found the whole day a very good use of my time and really enjoyed the chance to talk to the various people. I am sure that I will be making really good use of the information that I picked up there in my daily work over the next few weeks.

Thursday, 28 October 2010

Bookworm

I've always been a bookworm. As a child, I was one of those that used to take a torch to bed so I could read under sheets. I used to go to the library and draw out a couple of books and read through them in a matter of hours.

Even now, I have large personal store of books. At the last count well over 700; a mixture of hard back and paper back. About 150 of these are technical reference books for various things or books for my studies.

When the concept of the ebook reader was first publicised, I was quite keen to see one. I thought that the concept was good and could see real value in it; but I wasn't quite so sure about the price. I've been hoping that some kind person would buy me one for a present (yeah right!) or that I might win one in some prize draw. But sadly, no such luck.

Anyway, a couple of weeks ago I decided that it was time for me to get one for myself. I had a number of Amazon vouchers which were from various sources, and I decided that I could trade these in as part payment on a Kindle. I bought one and a small leather wallet to keep it in. I also downloaded the software and got a number of free ebooks from the Amazon site.

The Kindle turned up just over a week ago, and I've been playing with it ever since. It is so good! The text is really easy to read even in strong light; I don't need to change the font size although that is an option. I had a couple of issues getting in synched through the wireless, but that was down to me typing the encryption key in wrong. Once I got correct, the device connected and updated everything straight away.

I've already gone through a number of books, and really enjoyed using the device. I don't think that I'm going to have a problem as it is supposed to hold about 3500 titles. At the moment, I've got some 2 dozen books stored; that should be enough for me to take on holiday in a couple of weeks.

The alpha numeric buttons are a bit on the small size, but as I don't use them that much, I don't see that as an issue. There are a couple of big buttons on the side to change pages and they are quite firm to use. The only real criticism is the silly button with the tiny square around it for the selection / entry; I'm sure that they could have designed something a bit more solid.

The Kindle also gives the option to have newspaper and magazine on the device; as you have to pay for those, I'm not so keen on the idea. But there is a particular magazine which I might sign up for, just to try it out. At 99p per month, I think that I can afford it. It's also supposed to allow you to read certain other types of files, but I haven't tried that yet.

As you can tell, I think that this is a great little device. I'm really pleased that I bought it, and I think it's well worth the money.