<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/css" href="/stylesheets/rss.css"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/">
  <channel>
    <title>0x0E bits</title>
    <link>http://news.skelter.net</link>
    <language>en-us</language>
    <ttl>40</ttl>
    <description>raised in a barn by hippy wolves</description>
    <item>
      <title>seasonal fortune</title>
      <description>&lt;p&gt;I had no idea that fortune had seasonal or time-based fortunes.  Or is it conincidence.  hmm.  flash backs to an earlier more &lt;strike&gt;innocent&lt;/strike&gt; less sophisticated age&amp;#8230;&lt;/p&gt;

&lt;pre&gt;
_/I\_____________o______________o___/I\     l  * /    /_/ *   __  '     .* l
I"""_____________l______________l___"""I\   l      *//      _l__l_   . *.  l
 [__][__][(******)__][__](******)[__][] \l  l-\ ---//---*----(oo)----------l
 [][__][__(******)][__][_(******)_][__] l   l  \\ // ____ &gt;-(    )-&lt;    /  l
 [__][__][_l    l[__][__][l    l][__][] l   l \\)) ._****_.(......) .@@@:::l
 [][__][__]l   .l_][__][__]   .l__][__] l   l   ll  _(o_o)_        (@*_*@  l
 [__][__][/   &lt;_)[__][__]/   &lt;_)][__][] l   l   ll (  / \  )     /   / / ) l
 [][__][ /..,/][__][__][/..,/_][__][__] l   l  / \\  _\  \_   /     _\_\   l
 [__][__(__/][__][__][_(__/_][__][__][] l   l______________________________l
 [__][__]] l     ,  , .      [__][__][] l
 [][__][_] l   . i. '/ ,     [][__][__] l        /\**/\       season's
 [__][__]] l  O .\ / /, O    [__][__][] l       ( o_o  )_)       greetings
_[][__][_] l__l======='=l____[][__][__] l_______,(u  u  ,),__________________
 [__][__]]/  /l\-------/l\   [__][__][]/       {}{}{}{}{}{}&lt;R&gt;

In Ellen's house it is warm and toasty while fuzzies play in the snow outside.

&lt;/pre&gt;</description>
      <pubDate>Tue, 30 Dec 2008 08:56:00 -0800</pubDate>
      <guid isPermaLink="false">urn:uuid:e6353eae-0a2e-43a6-a818-334c27dc02b2</guid>
      <author>skelter</author>
      <link>http://news.skelter.net/articles/2008/12/30/seasonal-fortune</link>
    </item>
    <item>
      <title>emerge --unmerge vmware-workstation</title>
      <description>&lt;p&gt;portage has failed to provide a working vmware-workstation release for me for months now. &lt;/p&gt;

&lt;p&gt;Uncle.&lt;/p&gt;</description>
      <pubDate>Tue, 16 Dec 2008 14:25:00 -0800</pubDate>
      <guid isPermaLink="false">urn:uuid:3c795d0e-c155-4812-8b1f-99cb7bed82df</guid>
      <author>skelter</author>
      <link>http://news.skelter.net/articles/2008/12/16/emerge-unmerge-vmware-workstation</link>
    </item>
    <item>
      <title>Today's fun with Grails</title>
      <description>&lt;div class="typocode"&gt;&lt;pre&gt;&lt;code class="typocode_default "&gt;def service = new WebAppService(name:'ww36',externalName:'ww36',host:'c0ww36',serviceName:'_resin-indigo',production:false)
println service.save()
println service.version
println service.requestSuccessful

def listthem = {
WebAppService.findAll().each {
  print &amp;quot;${it.name}-${it.status},&amp;quot;
}
}

listthem()

println 'Deleting ww36 records'
WebAppService.findAllByName('ww36').each { it.delete() }

listthem()

&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;</description>
      <pubDate>Mon, 15 Dec 2008 13:54:00 -0800</pubDate>
      <guid isPermaLink="false">urn:uuid:a72df4a0-820d-43c1-bb42-d75fc5527668</guid>
      <author>skelter</author>
      <link>http://news.skelter.net/articles/2008/12/15/todays-fun-with-grails</link>
      <category>Software Development</category>
    </item>
    <item>
      <title>Go, Josh, Go!</title>
      <description>&lt;p&gt;Josh is still working on the javafx web site.  Looks like they are having a rough time deploying. &lt;/p&gt;

&lt;p&gt;&lt;div style="" class="flickrplugin"&gt;&lt;a href="http://www.flickr.com/photos/stevesuehs/3082888136"&gt;&lt;img src="http://farm4.static.flickr.com/3058/3082888136_61286b8636.jpg" width="500" height="398" alt="JavaFX website in transition" title="JavaFX website in transition"/&gt;&lt;/a&gt;&lt;p class="caption" style="width:500px"&gt;Josh is still working on the javafx web site.  Looks like they are having a rough time deploying. 
&lt;/p&gt;&lt;/div&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;UPDATE&lt;/em&gt;:
There they go, they got it now.
&lt;div style="" class="flickrplugin"&gt;&lt;a href="http://www.flickr.com/photos/stevesuehs/3082177383"&gt;&lt;img src="http://farm4.static.flickr.com/3056/3082177383_12f41b5b7e.jpg" width="500" height="398" alt="Screenshot-JavaFX - Mozilla Firefox" title="Screenshot-JavaFX - Mozilla Firefox"/&gt;&lt;/a&gt;&lt;/div&gt;&lt;/p&gt;</description>
      <pubDate>Thu, 04 Dec 2008 09:42:00 -0800</pubDate>
      <guid isPermaLink="false">urn:uuid:f182993f-025b-4754-b0e2-4f1442390c41</guid>
      <author>skelter</author>
      <link>http://news.skelter.net/articles/2008/12/04/go-josh-go</link>
      <category>Software Development</category>
    </item>
    <item>
      <title>JavaFX presentation at AJUG</title>
      <description>&lt;p&gt;Last night I made it to the AJUG in time to catch some pizza and listen to Josh Marinacci talk about JavaFX.&lt;/p&gt;

&lt;p&gt;JavaFX looks very cool for developing rich applications deliverable over the web (or locally).  It makes applets not suck, and UI development looks surreally easy.&lt;/p&gt;

&lt;p&gt;My notes from last night:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Sdk will be available on http://JavaFX.com  &lt;/li&gt;
&lt;li&gt;Linux support not ready yet! Trajedy!!! &amp;#8220;we are comitted to supporting it!&amp;#8221; &lt;/li&gt;
&lt;li&gt;New site will be cut over on Thursday. (I think Josh is doing it before he gets on a plane?)&lt;/li&gt;
&lt;li&gt;Inkscape plugins by campus? ambassador? in Brazil&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Very frustrated it won&amp;#8217;t be available on Linux right away.  For Mac will require 10.5+.  requires Firefox 3 and IE 7.  I think but am not sure that Safari will work.&lt;/p&gt;</description>
      <pubDate>Wed, 03 Dec 2008 14:30:00 -0800</pubDate>
      <guid isPermaLink="false">urn:uuid:8f05a040-54bf-4ce6-9c1d-311daa584bf4</guid>
      <author>skelter</author>
      <link>http://news.skelter.net/articles/2008/12/03/javafx-presentation-at-ajug</link>
      <category>Software Development</category>
      <category>Java</category>
      <category>Javafx</category>
    </item>
    <item>
      <title>More spam viruses targeting Windows</title>
      <description>&lt;p&gt;As Microsoft slowly improves its software, the viruses still target human fallibility.&lt;/p&gt;

&lt;p&gt;My father just spent a few weeks without a fully-functioning workstation because of virus-infested Microsoft software. &lt;/p&gt;

&lt;p&gt;This morning I got a virus sent from the comcast.net ISP, titled &amp;#8220;Your Statement number: 330709.&amp;#8221;&lt;/p&gt;

&lt;p&gt;In it, we see a short message like this&lt;/p&gt;

&lt;div class="typocode"&gt;&lt;pre&gt;&lt;code class="typocode_default "&gt;Good evening

As you requested, we are sending you this report with details on your account transactions made between 9/1/2008 and 10/28/2008.

Untill we meet again
Nora Connell
Attachment: Details.zip&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;

&lt;p&gt;That details.zip is the problem.  Let&amp;#8217;s take a look at it.&lt;/p&gt;

&lt;div class="typocode"&gt;&lt;pre&gt;&lt;code class="typocode_bash "&gt;~/tmp $ mv Details.zip virus/
~/tmp $ cd virus/
~/tmp/virus $ ls
Details.zip
~/tmp/virus $ unzip Details.zip 
Archive:  Details.zip
  inflating: Details.doc                                                                               .exe  
~/tmp/virus $ 
&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;

&lt;p&gt;I didn&amp;#8217;t change or screw up the formatting.  The file in the zip contains enough spaces to attempt to dis-associate the &lt;tt&gt;.exe&lt;/tt&gt; extension from the rest of the &lt;tt&gt;Details.doc_ _ _ _ _ _ _ _ _ _ _ _ _ _ _.exe&lt;/tt&gt; name. It&amp;#8217;s a dirty trick, but that&amp;#8217;s what the bad guys do.  What does Details.doc.exe do?  It&amp;#8217;s most likely a trojan.  f-propt, updated today (29-Oct-2008) did not find anything, but Kaspersky Labs viruslist.com identifies it as &amp;#8220;Worm.Win32.AutoRun.rkt&amp;#8221;.  This appears to be a fresh variant, and I haven&amp;#8217;t found a clear description of what it does.  It&amp;#8217;s 38k.  Autorun indicates it probably copies it self to usb sticks, zip drives, etc.  &amp;#8220;rkt&amp;#8221; looks suspiciously like an abbreviation for rootkit which is a mechanism for a hacker to take over the infected machine.&lt;/p&gt;

&lt;p&gt;Also see &lt;a href="http://www.hoax-slayer.com/fraud-transactions-malware.shtml"&gt;this site&lt;/a&gt;
and &lt;a href="http://www.f-secure.com/v-descs/worm_w32_autorun.shtml"&gt;f-secure&amp;#8217;s description of Autorun&lt;/a&gt; &lt;/p&gt;

&lt;p&gt;How is the human tricked, here?  Microsoft Windows software presents an icon that appears to be a document but is really an executable program.  The action for opening a document and running a program are the same.&lt;/p&gt;

&lt;p&gt;I remember in my younger days how I found UNIX to be paranoid, with its &amp;#8220;executable&amp;#8221; permission.  It was just right.&lt;/p&gt;</description>
      <pubDate>Wed, 29 Oct 2008 08:14:00 -0700</pubDate>
      <guid isPermaLink="false">urn:uuid:e9ed8aed-2ac2-425e-ac8e-1160ff59ba0c</guid>
      <author>skelter</author>
      <link>http://news.skelter.net/articles/2008/10/29/more-spam-viruses-targeting-windows</link>
      <category>Microsoft</category>
      <category>Anybodybutmicrosoft</category>
    </item>
    <item>
      <title>One-click deploy/configure for J2EE stack</title>
      <description>&lt;p&gt;Today was supposed to be get-home-early-and-stirfry-pork-broccoli.&lt;/p&gt;

&lt;p&gt;I&amp;#8217;m working on a new deploy mechanism.  We have 20-25 servers that we need to be able to one-click-install-and-configure the front two-thirds of a J2EE software stack, including IIS-&gt;Resin running on Windows, JBoss on Linux.  My predecessor has a mouse-trap-game of ant scripts involving telnet to do it.  &amp;#8220;As long as nothing goes wrong, it works every time.&amp;#8221;&lt;/p&gt;

&lt;p&gt;I started off with a verification mechanism so that once everything is up, the stack can self-check.  Now I&amp;#8217;m working on a mechanism to reliably update from version control, and run scripts and save the logs so we can A) detect when something goes wrong and B) what went wrong.  The end result app will be kind of like a dashboard for 25 cars.&lt;/p&gt;

&lt;p&gt;Just as my day starts to wrap up, something I worked on a couple of months ago blew up.  Now that we have the capability to run our builds so quickly, a new trend has started: running more than one build at the same time on the same machine.  This means that JUnit tests that open temp files in the temp directory collide with each other.  Well, I wrote a utility a while back to help dodge that.  It wasn&amp;#8217;t a complete fix; it was just unlikely&amp;#8230;very unlikely, to happen.  Except when you are running enough builds that the number of dice you roll overwhelms the randomness of the dice. This was already supposed to be unlikely. Every once in a while, two copies of the same tests come up with the same random directory number, even with a test-specific prefix.  So I spent an hour with the guy who ran into it, or rather had it dropped in his lap, writing a mechanism that actually exclusively locks access (native io) to the temporary working directory created in the temp directory for the test.  We&amp;#8217;ll see if it works tomorrow.&lt;/p&gt;

&lt;p&gt;Dinner was late.&lt;/p&gt;</description>
      <pubDate>Mon, 27 Oct 2008 20:24:00 -0700</pubDate>
      <guid isPermaLink="false">urn:uuid:53ebb2e0-8d5f-4654-80db-50d352efd4d0</guid>
      <author>skelter</author>
      <link>http://news.skelter.net/articles/2008/10/27/one-click-deploy-configure-for-j2ee-stack</link>
      <category>Software Development</category>
      <category>resin</category>
      <category>jmx</category>
    </item>
    <item>
      <title>apache commons exec</title>
      <description>&lt;p&gt;Not finding an available commons-exec module in the maven repos, but found one by criticalsection.org.  Thanks guys!&lt;/p&gt;

&lt;div class="typocode"&gt;&lt;pre&gt;&lt;code class="typocode_default "&gt;     &amp;lt;!-- dependency&amp;gt;
            &amp;lt;groupId&amp;gt;org.apache.commons&amp;lt;/groupId&amp;gt;
            &amp;lt;artifactId&amp;gt;commons-exec&amp;lt;/artifactId&amp;gt;
            &amp;lt;version&amp;gt;1.0.0-SNAPSHOT&amp;lt;/version&amp;gt;
        &amp;lt;/dependency --&amp;gt; 
        &amp;lt;dependency&amp;gt;
            &amp;lt;groupId&amp;gt;org.criticalsection.commons-exec&amp;lt;/groupId&amp;gt;
            &amp;lt;artifactId&amp;gt;commons-exec&amp;lt;/artifactId&amp;gt;
            &amp;lt;version&amp;gt;1.0-cs-01&amp;lt;/version&amp;gt;
        &amp;lt;/dependency&amp;gt; &lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;</description>
      <pubDate>Mon, 27 Oct 2008 13:24:00 -0700</pubDate>
      <guid isPermaLink="false">urn:uuid:f6052849-4b4a-4809-a7e8-1ba061bbaa2c</guid>
      <author>skelter</author>
      <link>http://news.skelter.net/articles/2008/10/27/apache-commons-exec</link>
      <category>Software Development</category>
    </item>
    <item>
      <title>Wicket quick start</title>
      <description>&lt;p&gt;Evaluating &lt;a href="http://wicket.apache.org/quickstart.html"&gt;wicket&lt;/a&gt; via a maven quickstart.&lt;/p&gt;

&lt;p&gt;First I ran into a strange mvn problem:&lt;/p&gt;

&lt;div class="typocode"&gt;&lt;pre&gt;&lt;code class="typocode_default "&gt;$ mvn archetype:create -DarchetypeGroupId=org.apache.wicket  -DarchetypeArtifactId=wicket-archetype-quickstart -DarchetypeVersion=1.3.5 -DgroupId=com.mycompany -DartifactId=useradmin
 [INFO] Scanning for projects...
 [INFO] Searching repository for plugin with prefix:  'archetype'.
 [INFO]  ------------------------------------------------------------------------
 [INFO] Building Maven Default Project
 [INFO]    task-segment: [archetype:create] (aggregator-style)
 [INFO] ------------------------------------------------------------------------
 [INFO] Setting property: classpath.resource.loader.class =&amp;gt; 'org.codehaus.plexus.velocity.ContextClassLoaderResourceLoader'.
 [INFO] Setting property: velocimacro.messages.on =&amp;gt; 'false'.
 [INFO] Setting property: resource.loader =&amp;gt; 'classpath'.
 [INFO] Setting property: resource.manager.logwhenfound =&amp;gt; 'false'.
 [INFO] [archetype:create]
 [INFO] Defaulting package to group ID: com.mycompany
 Downloading: http://private-artifactory.drillingxxx.com:8081/artifactory/combined/org/apache/wicket/wicket-archetype-quickstart/1.3.5/wicket-archetype-quickstart-1.3.5.jar
 [INFO] ------------------------------------------------------------------------
 [ERROR] BUILD ERROR
 [INFO] ------------------------------------------------------------------------
 [INFO] Error creating from archetype

 Embedded error: OldArchetype does not exist.
 http://private-artifactory.drillingxxx.com:8081/artifactory/combined/org/apache/wicket/wicket-archetype-quickstart/1.3.5/wicket-archetype-quickstart-1.3.5.jar
 [INFO] ------------------------------------------------------------------------
 [INFO] For more information, run Maven with the -e switch
 [INFO] ------------------------------------------------------------------------
 [INFO] Total time: 52 seconds
 [INFO] Finished at: Mon Oct 27 10:04:26 CDT 2008
 [INFO] Final Memory: 10M/162M
 [INFO]  ------------------------------------------------------------------------&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;

&lt;p&gt;This may have been a problem with artifactory locally; not sure.  I tried pulling down different versions and even the quickstart pom itself (which didn&amp;#8217;t build readily due to not being able to resolve a component).  Then I got a complaint that the directory already existed.  At some point it worked.  So, maybe our local artifactory couldn&amp;#8217;t hit the original repo.  Dunno.  Ok&amp;#8230;it&amp;#8217;s working.&lt;/p&gt;</description>
      <pubDate>Mon, 27 Oct 2008 09:02:00 -0700</pubDate>
      <guid isPermaLink="false">urn:uuid:21811217-a029-4025-9579-d5cb2b6c0df2</guid>
      <author>skelter</author>
      <link>http://news.skelter.net/articles/2008/10/27/wicket-quick-start</link>
      <category>Software Development</category>
    </item>
    <item>
      <title>jConsole and jmx</title>
      <description>&lt;p&gt;I now have a real-time peek into heap and non-heap memory usage on a production server.  PermGen dooms us.&lt;/p&gt;</description>
      <pubDate>Fri, 17 Oct 2008 09:20:00 -0700</pubDate>
      <guid isPermaLink="false">urn:uuid:edd85ec3-ba0e-4894-802c-0fbac0765040</guid>
      <author>skelter</author>
      <link>http://news.skelter.net/articles/2008/10/17/jconsole-and-jmx</link>
      <category>Software Development</category>
    </item>
  </channel>
</rss>
