tolaris.com
Well, I finally did something with tolaris.com. Would one of you with a paid account please syndicate it? Here is the LJ syndication feed, courtesy bandicoot.
I intend to continue using LJ for personal matters; tolaris.com is my technical blog. I've found little interest from my friends on technical matters, and until recently my blog wasn't indexed on Google so what I did write about wasn't helping many people. Then I realised that I didn't really have any privacy and you can all find my name and employer quite easily. So I opened up everything, added tags, put my name on both blogs, and linked the two together.
Within a week of starting tolaris.com, I got my first comment thanking me for solving someone else's problem. That makes it all worth it. I feel like the web has given me so much, so unbelievably much since I've had access to it, and I really want to give back more.
For the last four months, my life has been two things: Pascale and work. Pascale is awesome. slownewsday has been posting daily photos of her on her blog. She giggled for the first time yesterday. When she smiles, she charms complete strangers into adoring silence. She's got me wrapped around her little finger already.
Work isn't awesome, but it's pretty good. We've accomplished some good things lately, but for all I feel good about what we have done, I'm super frustrated by difficulties with our biggest hardware provider. They are showing serious growing pains. Worse, they have an absolutely criminal stance on security. We work very hard to analyse and patch every issue they generate. Then I chew granite when they reply to my carefully prepared issue report with "the issue isn't really that important" / "it's been documented for the last 4 major versions, and has a work around, so that's like a fix" / "we're not going to fix it". Success rate at actually fixing issues I report? 3 issues in 37 reports in the last 3 years. It's basically not cost-effective for us to report issues anymore, because the time I spend writing the reports outweighs the benefits gained from the issues that do get resolved.
My current favourite reply? "Oh, that remote root exploit our software upgrade caused? Just change the root passwords, because we're not going to fix it." Get your act in gear you clowns, before someone starts writing metasploit modules targeting your platform. They won't have to work very hard.
I intend to continue using LJ for personal matters; tolaris.com is my technical blog. I've found little interest from my friends on technical matters, and until recently my blog wasn't indexed on Google so what I did write about wasn't helping many people. Then I realised that I didn't really have any privacy and you can all find my name and employer quite easily. So I opened up everything, added tags, put my name on both blogs, and linked the two together.
Within a week of starting tolaris.com, I got my first comment thanking me for solving someone else's problem. That makes it all worth it. I feel like the web has given me so much, so unbelievably much since I've had access to it, and I really want to give back more.
For the last four months, my life has been two things: Pascale and work. Pascale is awesome. slownewsday has been posting daily photos of her on her blog. She giggled for the first time yesterday. When she smiles, she charms complete strangers into adoring silence. She's got me wrapped around her little finger already.
Work isn't awesome, but it's pretty good. We've accomplished some good things lately, but for all I feel good about what we have done, I'm super frustrated by difficulties with our biggest hardware provider. They are showing serious growing pains. Worse, they have an absolutely criminal stance on security. We work very hard to analyse and patch every issue they generate. Then I chew granite when they reply to my carefully prepared issue report with "the issue isn't really that important" / "it's been documented for the last 4 major versions, and has a work around, so that's like a fix" / "we're not going to fix it". Success rate at actually fixing issues I report? 3 issues in 37 reports in the last 3 years. It's basically not cost-effective for us to report issues anymore, because the time I spend writing the reports outweighs the benefits gained from the issues that do get resolved.
My current favourite reply? "Oh, that remote root exploit our software upgrade caused? Just change the root passwords, because we're not going to fix it." Get your act in gear you clowns, before someone starts writing metasploit modules targeting your platform. They won't have to work very hard.