Archive for the 'tech' Category
Tuesday, May 22nd, 2007
oh woot.com, why must you be the bane of my existance?
So I picked up a pair of the RAZER in-ear headphones tonight, they’re pretty sweet. Photo Here:
$29.99 + $5.00 shipping for 2 pairs. Apparently they’re rated pretty nice. Here is a link to the discussion on the headphones.
I’ll post up a review when I get them.
http://www.woot.com/Forums/ViewPost.aspx?PostID=1270103
Wednesday, January 10th, 2007
here’s one for the boss.
Okay, so my boss has this fascination with writing things down. This would be perfect for him.
Monday, January 8th, 2007
OQO Model 2 - ME WANT!
This is quite possibly the sexiest UMPC on the market right now.
At less than 1lb and with these features:
1.5Ghz Processor
1GB Ram
60GB Hard Drive
800 x 480 Screen Resolution, 1900 x 1200 display resolution external
Wifi, EVDO for Verizon Wireless, and Bluetooth 2.0
Check out other pictures and more info on the product page.
The guys over at CrunchGear.com got to play with it! Wahhhh! Video
Monday, January 8th, 2007
A sit down with the Bill.
Here is an interesting podcast with Robert Scoble and a bunch of other tech editors that got a chance to sit down with Bill Gates at this year’s Consumer Electronics Show in Las Vegas. Some of the highlights in the podcast were Bill talking about the Live! platform, and how it will soon expand onto Vista, Media Center, and Xbox. He mentions an Xbox Live! version of IpTV, Windows Home Server, and some new idea’s for non-DRM certificates for the Zune.
Check it out if you’ve got 45mins to spare. You may also want to pause it and do some research on the new technology he babbles on.
Wednesday, September 27th, 2006
Things to remember
Two new technical tips for those reading that don’t want to seem like total douchebag idiots at an IT job:
1) when creating an Active Directory domain controller, remember to go into Administrative tools -> Active Directory Sites and Services -> plus out to the server name you added as a domain controller using the server wizard, and right click on NTDS settings -> go to properties and select ‘Global Catalog’ to index the server into replication between all servers. This makes sure that the other servers in the site will replicate all necessary information needed to fully host the domain on that box.
2) when creating a Cisco Site to Site vpn, remember to add the access rules to both firewalls. Example:
isakmp identity address <-- this is needed
isakmp nat-traversal 20 <-- this is also needed
Change the no-nat ACl to be -
access-list inside_outbound_nat0_acl permit ip ‘xxx.xxx.xxx.xxx’ 255.255.255.0 ‘yyy.yyy.yyy.yyy’ 255.255.255.0
Change the crypto map ACL to be the same -
access-list outside_cryptomap_20 permit ip ‘xxx.xxx.xxx.xxx’ 255.255.255.0 ‘yyy.yyy.yyy.yyy’ 255.255.255.0
substitute xxx.xxx.xxx.xxx for your sites internal class c address and yyy.yyy.yyy.yyy for the opposite site’s internal class c range
Sunday, August 13th, 2006
this is just a test after upgrading to the new version of wordpress
Saturday, June 10th, 2006
cisco pix
my oh so wonderful remembering experience with cisco firewalls has brought me to this conclusion, i needed to write the things i did down so i wouldnt forget them, last week i setup a failover pix 506e for our office co-location and these are the things i re-learned.
static routes from the outside interface need to be configured on the pix, they are not auto-detected.
(example, if you’re going to route the outside interface traffic from everyone through a router, you will need to setup 0.0.0.0 to point to your outside interface)
make sure you remember your vpn group name once you’ve set it up in the wizard mode, and don’t enable pre-authentication or individual usernames and passwords… unless you need them (i made the mistake of naming my vpn group ‘vpn’ and then forgetting that, tried to use the standard we always use)
if you are not using dhcp, remember you must configure an ip pool for clients to use
you must set the static outside interface address, its not dhcp. (to do this, launch pdm and go to configuration > system properties)
site-to-site vpn must be configured on both firewalls, and use the same hash and pre-shared keys (ie md5 must also use md5)
if your pdm always crashes, check the version of java you’re using.. for some reason cisco only likes a few versions.
remember to setup nat through ‘translation rules’ for ip addresses you want to use publicly.
remember to change your enable password through console, doing it in the device’s pdm will cause it to crash and wipe your firmware.
more to come when i remember, maybe i’ll get unlazy and post ss
Saturday, June 3rd, 2006
Microsoft Mobile and SSL
If you’re planning on using exchange with smarphones and implimenting SSL, check this first. I ran into this problem at my office AFTER we had purchased a geotrust certificate. Here is the situation, currently we have 5 windows mobile 2003 devices that are from cingular. I setup mine, and my co-worker was setting up his to do AUTD.
For those that don’t know what AUTD is, it maintains a connection to the exchange server when new items arrive via SMS messages, as a new email comes in, your phone is sent a text message telling it to connect to the server and download the new message. You never see the text message on the phone, its just a simple sms message (be warned, if your plan doesnt include text messaging you will be charged for it!).
After putting in our mobile addresses (cingular is 10 digit number@cingularME.com and verizon is 10digitnumber@vtext.com, fyi) there is an option to use SSL or not. We both chose SSL since its a secured connection that is signed by both parties. Ie my phone and exchange server know exactly who their talking to when downloading/sending emails. We both got INTERNET_45 errors, explained “INTERNET_45 (ERROR_INTERNET_INVALID_CA): Synchronization failed. The security certificate on the server is invalid. Contact your system administrator or ISP to install a valid certificate on the server and try again.” Yea yea, okay so what the hell.. its a valid cert right? WRONG, mobile 2003 and 2002 only support these following certs
- Verisign Class 1 Public Primary CA
- Verisign Class 2 Public Primary CA
- Verisign Class 3 Public Primary CA
- Verisign Class 3 Public Primary CA (2028)
- GTE Cybertrust ROOT
- GTE Cybertrust Solutions ROOT
- Thawte Server CA
- Thawte Premium Server CA
- Entrust.net Secure Server
- Entrust.net CA (2048 bit)
You can however get by this, grab the cd you got with your mobile device and browse to support/tools/disable SSL/ and copy the as_cert_off.cab file onto your mobile device, run that and you should be able to accept any SSL certs.
NOTE: THIS DOES NOT WORK ON MOBILE 5.0 SO DONT TRY IT!
Alternatively, there is this option. That disables Cert Checking on the exchange server itself.
But this will mess with mobile 5.0 as well, the moral of this story… ditch all mobile 2002 and 2003 devices and just go 5.0, or dont use SSL