Archive for February, 2010

SSL cert shopping sucks :(

Sunday, February 28th, 2010

I hate shopping for SSL certificates almost as much as I hate shopping for auto insurance – in fact I think I’d rather enter all the grisly details of my driving career (which really aren’t all that much, really) than try to figure out the hidden costs associated with SSL certs.

Our first certificate was signed by GoDaddy. I used to be the biggest GoDaddy fanboy ever back when they were the cheapest around – but realistically the total cost of ownership on anything sold by GoDaddy is so insanely high really. Sure that first year where your domain is $1.99 or whatever is great, but then you forget about it and they auto-renew it the month before it’s going to expire for $16. That cert that’s $12 with a free year of .com/.net/.org registration suddenly becomes $30.

I’m so sick of their predatory billing and doing the coupon dance every year that I moved all of our domains over to Moniker instead. But now it came time to renew the cert for Sabrienix’s portal… I found namecheap, who resell RapidSSL for a ridiculous $10.95 a month and as near as I can tell there’s no scams or anything.

I was going to just pay for the verification for StartSSL, but unfortunately our car probably needs a tire, and the portal certificate expires tomorrow (which would break Google Checkout) so I wouldn’t be able to get the verification done in time. Boo. :(

Maybe next year.

Not exactly PC…

Saturday, February 27th, 2010

Don’t get me wrong – I’m not one of those jerkoffs that goes around insisting we have to watch our mouths lest we hurt someone’s feelings over something so irrelevant as pigment…

… but there’s something just wrong about this. If you moused over the image, you read correctly: his name is Mr Wasup and he’s an NPC in this goofy little MMORPG a few of us have been messing around on called WonderKing. He enjoys talking in horrendous ebonics (both the “double-click sound effects” and his NPC text), beat-boxing and presumably gang warfare with oversized hammers against an eastside group of cacti.

His form is grossly caricatured and basically everything that was wrong with racist cartoons of yesteryear (or today if you’re one of those unfortunate enough to be on the fax-to list for racist cartoons), in fact you’re almost left wondering why the artists and designers didn’t go whole hog. Negotiate product placement for some Kentucky Fried Chicken and some Black and Mild cigars and make some money off the whole thing.

Nope, I’m not entirely sure who’s idea it was, but I just don’t think it was such a great idea. I am, of course, going to hell for laughing when I first saw him.

Mumble Advocacy

Tuesday, February 23rd, 2010

I thought I’d address this issue on my blog – and encourage folks to comment on it – because our company website isn’t really the place to do it. A lot of people ask me “what’s so great about Mumble? Why should I use it instead of a competing product?”

Here are the few reasons I could come up with off-hand:

  • The Overlay. This is a huge feature in my opinion, and it’s all set to get better. Basically you can have either an opaque or transparent overlay over most any game (as long as hackshield/gameguard/punkbuster doesn’t mess with Mumble’s ability to inject the overlay code) so you can still see what’s going on in a full-screen game.It’s set to get better too… open up a Steam game, and press shift+tab. Rumor has it, that’s the direction Mumble’s overlay is headed in.
  • The Translations. This is pretty much a non-issue for people like me who only really speak English, but for non-english speakers, it’s a godsend. Instead of half-arsed automated translations that say shit like “Oh, Dios mío, el Minka Aire!” when they really mean “Enable Push-to-Talk”, Mumble has a dedicated group of volunteer translators, most of whom are very skilled in their own language and instead of taking the source text and translating it out-of-context, will translate it based off their own usage of Mumble and knowing what the function does.
  • The Quality. Not only does Mumble sound awesome (full disclosure: TS3 rivals it at times because they share the CELT codec), but it’s well written code as well. The bulk of the software is written using publicly available libraries like QT4 and Google Proto Buffers which means that much of the code has already been audited and vetted by thousands of other developers and any bugs show up quite quickly.

    We have a disclaimer on our Mumble servers webpage about how Murmur is constantly under development and “Bad Things” can happen because we were expecting Murmur to crash every so often. We  typically track the git HEAD at each release and we build on a not-terribly-well-supported OS (FreeBSD) so naturally we were expecting to have a few bombs here and there.

    So far though, we’ve had exactly one (knock on wood) Murmur crash, and the cron script brought it straight back up. Our UK server was unsatisfactory, but that was the host’s fault not Murmurs.

  • It’s Growing and Evolving. Mumble hasn’t really stagnated at all in it’s history – it’s constantly evolving and there’s always something new to look forward to. It doesn’t sit with the same release for two years because there’s been no security bugs.

Overall, if you’re a voice-chat user and you haven’t given it a shot (or worse, you used it in the 1.1 days and wrote it off), I genuinely urge you to give it a shot. :D

Nagios monitoring Mumble servers

Friday, February 19th, 2010

We’ve been using Pingdom for about a year and a half now, but with a baby on the way and the economy falling to pieces around us… I can’t really justify $10 a month to monitor 5 services, when I could be checking all of the services on our four servers for less than that. It’s time to downsize a little and be a bit smarter with our money, putting it into things that benefit the customers instead of websites with nice interfaces that make me feel all warm and fuzzy. :(

So we setup Nagios on a small VPS and we now have it monitoring all our servers, including the public instance on each of our Murmurs. We were monitoring Murmur using check_tcp, which is basically the same check Pingdom uses… unfortunately it’s really bloody noisy in the logs!

So I went on IRC and bugged pcgod for his Python Mumble-Pinger script, which implements the UDP ping-sweep used by the Mumble client’s connect dialog, and returns your ping to the server, how many users are on it, etc.

It was a hop, skip and a jump to modify it to output something useful to Nagios – I removed the timestamp and added “OK ” in front of the output – I believe this is optional because Nagios mainly goes off the return code of the script. Speaking of which, I modified the exception for the socket timeout (to indicate the server’s down) to print something like “CRITICAL – UDP Socket Timeout”, and to exit with return code 2.

A quick command definition in Nagios, and it’s working. It’s not great – there’s no support for warnings for elevated pings or anything like that… but it’s working. I’ll probably go through and write a better one and post it eventually, but right now I’m busy going through moderating all the junk from my comments… Viagra? Slimquick review? GTFO. :(

Not feelin’ it!

Thursday, February 18th, 2010

Man, today I’m just not feelin’ it. :(

Last night’s karate class was one of the worst-feeling experiences I’ve had in a long time – if that sounds bad, I don’t mean it to… I had an absolute blast, but jesus I’m sore.

One of our instructors has been doing some Kali seminars, so he ran us through some real basic Kali training in the last few weeks. It’s not the sort of school where they do an 8 hour training seminar and then come try to teach us, no no… that’s not the purpose here. We’re not actually trying to train in Kali, our interest is in how to defend it. But if no one knows how to swing a stick, our practice is going to be pretty unrealistic and uninteresting.

So last night it was decided that the kids weren’t putting enough into it, they weren’t taking it serious enough. So we did a little bit of light sparring with foam covered escrima… let me tell you, the foam doesn’t do a whole lot when you get a couple of adults who should know better acting like kids (Tyler and I). I’ve a couple of nasty bruises on my body that hasn’t really seen these kind of welts since I quit playing paintball on a regular basis. :(

I took a couple of shots to the wrists as well, courtesy of Tyler’s training. After that we moved onto disarms and takedowns, which basically involved rolling into wristlocks at it’s core… more stress on the wrists.

It was a total blast though, I learned a lot and got some real good practice in… I’m just sore as shit. :(

Today I was supposed to split some more wood, but I knew as soon as I woke up it just wasn’t going to happen. I experimented with our new Nagios system, despite the fact it’ll probably be tore up when the box it’s on moves to it’s new host. We’ll probably be ditching Pingdom – which sucks, because I kind of like it, but it’s just cheaper and more effective to rent a decent VPS and run Nagios from it than paying to monitor all our services from Pingdom.

I went through and moderated some comments on this blog and on the Moodoo forums – same spammy crap really, water filters, diet pills, accutane reviews, but strangely no porn. I suppose I wouldn’t really mind unsolicited email and links if they were remotely relevant to my interests, but they never seem to be.

I’ve been playing a little bit of MAG lately, which is probably what I’m about to go do in a moment. My brother in law bought it on the advice of a friend of his, and then promptly decided he hated it. I was in on the original Beta (one of the few beta invitations I got from Twitter, but not the one I really wanted) and I thought the game was just not fun.

I’m sure I’ll wind up writing a review eventually, but here’s the long and short of it… in an FPS, if you’ve got one or two noobs on your team but otherwise the rest of your team is evenly matched to the rest of everyone on the other team, you’re bound to lose. MAG is like that, except that with 256 players you’re bound to have a lot more noobs. During the Beta, I never played a single game that wasn’t a roll one way or the other, either my team lost by a landslide, or we won by a landslide.

I don’t know what they changed since Beta, but it’s actually a lot more fun. It might just be that at the lowly level of 7 I’m not high enough to play with the good players, because most every game I’ve gone into I’ve kicked ass – and I don’t say this to toot my own horn, because I’m really not that great at FPSes. But it’s definitely a whole lot more fun than it was, and it’s a lot prettier too. It doesn’t have the visual polish of say, Modern Warfare 2 – but fuck, when there’s 256 people in a map, with vehicles and artillery and everything else going on, it’s no surprise there.

If you played it during Beta and like me, wrote it off – I’d urge you to at least rent the game and give it another shot.

Call of Juarez: Bound in Blood

Tuesday, February 16th, 2010

Fastin‘ yer britches and getcher guns ready!”

Perhaps it’s because I’m Australian, but the “cowboy” fantasy thing growing up was never really there – the only real exposure I had to cowboys was that my dad was a huge fan of Mel Brooks, so I saw Blazing Saddles at an age that was most likely far too early.

That lack of cowboy hysteria growing up didn’t stop me from enjoying Call of Juarez: Bound in Blood though. Nope, what follows is an interesting story (even if a little far-fetched) that spans from the civil war onwards. The civil war parts are actually pretty cool – they show how fucked up it must have been for both sides, without taking the southern-apologetics stance that pisses everyone off. Nope, Barnsby is every bit the racist southern scumbag we all love to hate.

As a first person shooter, CoJBiB ain’t terrible. It’s not awesome, nor is it gorgeous for showing off the PS3′s capabilities in the same way as say, CoD4… but it’s solid and I had a good time playing it. The story’s a bit far-fetched, but hey, what good cowboy story isn’t – and it kept me up until 4am one morning playing it.

If it’s starting to sound like I don’t have any real complaints about it, well, think again. First of all the most aggravating thing is that the game freezes for a half second or so at every checkpoint – the way it does this doesn’t make me think it’s intentional.

The controls are also not very customizable, with you only having about five choices for control schemes and no ability to change anything manually. That’s fine in the instance of say, MAG… who’s controls closely mirror the standard used in CoD et al. But if you’re going to change things up, you bloody well better have a way to change them back.

At first the weapons-select thing pissed me off, but I quickly got used to it and it actually worked out pretty well, particularly when you have an inventory full of weapons.

My final gripe – this game suffers badly from assuming you have a great new TV: the Indians in the mountains of Arizona are almost impossible to see at times, so you basically wave your reticule around until it turns red. I’m not sure how badly it affects those with HDTVs, but my SD CRT turned into a nightmare on that level.

The gunslinger duel portions of the game are pretty intense, depicting really well the nervousness that must have gone into the whole thing – though I’m not entirely sure why everyone waits for a bell to draw in the game. They can get aggravating if you’re not good at them, but once you start figuring out the best place on the screen to keep the enemy and the perfect spot to keep your hand you can breeze through them most of the time. Barnsby, who’s supposed to be really really quick on the draw, was down for the count on my 4th try on medium difficulty – which didn’t seem too terrible to me.

Online Multiplayer in Bound in Blood is “there”, and there are some clever additions such as bank robberies and western-twists on the whole “marked man” thing but it’s not exactly a dynamite experience, and it’s also a bit of a ghost town at the moment (though you can definitely find a game, unlike F.E.A.R.2).

I think I would have been upset if I’d paid full price for this game, on account of it wouldn’t have kept my attention for very long at all. But now it’s down under $20 used, I think it’s worth a play. When it drops down below $15, without question pick it up.

Pondering certification

Monday, February 15th, 2010

I still have a ton of stuff I need to get sorted out before I can go get a work-outside-the-house job, which is frustrating because a friend of mine works for a company who was hiring someone for a position I’d be really well suited to. Another friend in Canada has been trying to get me to work for an IT security company he’s a partner in for the better part of a decade now.

A part of me’s still convinced that our company is the path forward – in a shady job market the most secure job is one you create for yourself, and that’s where I see our long term plans pointing. Our company’s growing steadily, and I certainly don’t resent the hours I’m putting in any more.

Either way, whether I go work in the IT field for someone else while our company grows or whether I continue to pour my soul into it and branch out, certification would go a long way. I’ve been managing UNIX-like operating systems for in excess of half my lifetime – almost a decade and a half to be precise. I have a pretty decent background in security (though it could be better, if I’d apply myself to any one thing) and I’m a competent hacker when it comes to programming, though I’m by no means a developer (again, could be better if I could apply myself to any one language for a length of time).

But to all but the most enlightened employer, all of this means nothing – most of them look purely at certification and my resume would probably not knock most folks’ socks off. Thankfully our company gets precious little clients who actually ask what our qualifications are, most of them are usually pleasantly surprised when the proverbial hits the fan to know that I do know my stuff… but any who were to ask beforehand would again, be less than impressed.

I’ve been looking at this Western Governors University, which is one of the first schools offering online degrees that are actually worth more than the fancy paper they’re printed on. Their online IT degree… Well, I was particularly looking at the security program, which incorporates Cisco’s CCNA and the CCNA-Security certification, as well as A+ and Security+ – which, while I’ve never been terribly keen on them as a measure of someone’s worth, would substantially pad my resume.

The course has a Microsoft component too – I’m not entirely sure how much of it is Microsoft-centric, but I’m pretty confident I could get the hang of that rather quickly. According to Wikipedia, WGU is a “competency-based” education, so you’re free to take the exams whenever you think you’re ready, so chances are I could speed through a few sections of the courseware. About 10 years ago I was reasonably confident I could pass the MCSE exams, I just couldn’t afford them. I’ve poured over the CCNA/CCNP courseware periodically for the last ten years too.

It’s ridiculously cheap though – at the time of writing it looks like a hair under three grand for a semester’s tuition, and because it’s not one of those goofy online “colleges” there’s federal financial aid available (though again, I have no idea whether I’d qualify).

Does anyone who happens to be reading this have any familiarity with how quickly someone like myself could pass such a course? WGU charges tuition based on semesters, so obviously the faster I complete everything the better off I’ll be. Most of my familiarity is with the FreeBSD operating system, so I’m not kidding myself that I’ll have quite a bit to learn.

It’d be awesome to have some pieces of paper to prove what I know. :(

Sicky Puppy all better

Monday, February 15th, 2010

So about a week ago Ruby wasn’t feeling too great – it seemed like she’d pulled a muscle in her hips or something, she wouldn’t get up and would frequently yip while walking. Climbing the stairs appeared to hurt her, but going down was a non-issue.

We deliberated over taking her to the vet, because it looked like something she could have easily gotten over with just a bit of rest… but I just had this nagging feeling that if we didn’t take her and we woke up to a dead puppy the next day I wouldn’t forgive myself.

So we braved a forecast-terrible storm which actually gave us a break while we were out in it, and drove to Bluffton to the vet. Unlike the last time she was there, Ruby was pretty terrified and snappy, so I had to muzzle her for the first time.

The vet checked her out and couldn’t locate the source of the problem, so he just subscribed some meds for her and we were on our way. We call it puppy-vicodin because it seemed like it helped her within a few hours, but as ar as I know it’s just some kind of anti-inflammatory/muscle supplement.

Now it’s nearly a week later and she seems much better. She just took the last of her puppy-vikes and is still a little squeamish about going up the stairs, but she’s otherwise back to normal. So I figure we basically spent about $50 on peace-of-mind in the form of a vet visit.

F.E.A.R. 2: Project Origin

Saturday, February 13th, 2010

The “Horror” game genre is pretty much not much younger than videogames themselves, and it’s had a few notables along the way in the field of horror-FPSes: Corridor7 took the Wolfenstein 3D engine and turned it into a space-horror game to moderate success. Doom, Doom II and to a greater extent Doom 3 all dabbled in the horror element.

But F.E.A.R. took it in a completely new direction being one of the first (that I can think of) popular games that genuinely scared the shit out of most folks on a regular basis. F.E.A.R. 2: Project Origin was the much-anticipated sequal to this, and doesn’t disappoint in the horror department.

I’m by no means an expert in the FPS deparment – I’ve said this before – so take my reviews of FPSes with a grain of salt… but F.E.A.R.2 is a reasonably solid FPS in it’s own right.

When I go to scary movies, I don’t usually jump much. Every so often, sure – fuck sometimes if I’m not paying attention I’ll jump at shit that’s not supposed to be scary and just happens all of a sudden. I’m also pretty much a skeptic when it comes to ghosts and such. But this game just generally freaked me out on a good few occasions.

The story mode is a solid adventure, starting out set in the moments briefly before the events of the original F.E.A.R. and continuing outwards. It progresses nicely, and doesn’t really contain any aggravating sections which just completely piss you off because of how hard they were. On the hardest difficulty I found the game’s progression a good solid slog and never really hit a cement wall, which is exactly how a game should be – as opposed to games like Call of Duty 4 and Modern Warfare 2, who have several parts that are just straight up hurdles and then other parts of the game that are smooth sailing.

On the whole I felt satisfied when I got done bashing my way through the story mode, I didn’t pick apart the holes in the story or do anything else I usually do with horror storylines. The campaign didn’t suffer from the “abundance of ammunition” problem most shooters do, it was nice switching between several different weapons just to make it through the mission.

It’s pretty reasonable on the trophies too, but some of them require multiplayer (so forget about platinuming it)… which brings us to:

The downsides? Multiplayer is an absolutely ghost town. If you’re lucky enough to sign on at a time when you can find a game, expect it to be no more than three or four people at a time and for one of them to ragequit at some point. Most of the time when you sign on you simply won’t find a game, or you’ll find one with one other person who AFKed looking for their eczema treatment and won’t ever ready-up.

Given that this game has now dipped down below the $15 mark used, it’s well worth the money for the single player campaign. There’s also one piece of DLC that I haven’t tried yet, but have heard good things about it. It’s a worthy addition to your budget collection. :)

Back into the MW2

Saturday, February 13th, 2010

So I basically straight up ran out of shit to do on Borderlands – which sucks because I was really enjoying it… alas, until The Secret Armory of General Knoxx is released, it’s on the shelf. :(

Since Tidler’s on his California adventure/job search, which currently isn’t going so well, we’ve done quite a bit of gaming. Borderlands platinum trophy in about a week bit of gaming. So we decided to jump back into MW2 – he’s been playing it with other friends off and on so we figured we’d bang out some of the special ops in the hope I could add a second platinum trophy to my collection.

When I first played Modern Warfare 2, I thought the special ops was kind of… well… garbage. A rip-off. A cheap way to add a little extra content to the game without actually adding much in the way of extra content.

It actually adds quite a bit though, it’s a surprising amount of fun. Teaming up with another person against a computer army is a huge blast – in fact I think that’s maybe why I didn’t like doing it at first, because I was flying solo. Now we’ve got three ops left to ace, and I’ll have my 69/69 stars. Then it’s just a few-skill based trophies that should be pretty easy to do on regular difficulty, and I’m home free. :D