<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Blog &#124; jim80.net &#187; Infrastructure</title>
	<atom:link href="http://blog.jim80.net/category/infrastructure/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.jim80.net</link>
	<description>Security, Systems, and Storage</description>
	<lastBuildDate>Fri, 30 Apr 2010 19:46:42 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>dropbox.com</title>
		<link>http://blog.jim80.net/2010/04/30/dropbox-com/</link>
		<comments>http://blog.jim80.net/2010/04/30/dropbox-com/#comments</comments>
		<pubDate>Fri, 30 Apr 2010 19:43:40 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Storage]]></category>
		<category><![CDATA[aws]]></category>
		<category><![CDATA[jungledisk]]></category>
		<category><![CDATA[online backup]]></category>

		<guid isPermaLink="false">http://blog.jim80.net/?p=453</guid>
		<description><![CDATA[I wanted to bring up Dropbox.com to your attention. I wanted to share what I thought was a fantastic company that&#8217;s basically taken the concept of JungleDisk and moved it one step further. How? Instead of really cheap (Jungledisk), dropbox is free for the first 2 gigs. This, combined with the below usability features, results [...]]]></description>
			<content:encoded><![CDATA[<p>I wanted to bring up <a href="https://www.dropbox.com/">Dropbox.com</a> to your attention. I wanted to share what I thought was a fantastic company that&#8217;s basically taken the concept of JungleDisk and moved it one step further. How? Instead of really cheap (Jungledisk), dropbox is free for the first 2 gigs. This, combined with the below usability features, results in rapid growth in user adoption. As of January, the company has <a href="http://blog.dropbox.com/?p=339">over 4 million users</a>. That&#8217;s over 8 Petabytes of potential disk space usage if every user was a free 2GB plan. </p>
<p>All of the public infrastructure is hosted at AWS, and can thus scale with the userbase. As Amazon charges anywhere from $0.055 to $0.150 per GB (<a href="http://aws.amazon.com/s3/pricing/">pricing structure</a>), each free user consumes from $0.11 to $0.30 per month. Even with 6.25% utilization of 8 Petabytes, Dropbox.com pays the $0.105 per GB rate,  Given their next paid upgrade is for 50 GB and costs $9.99/month, one paid customer can support the storage fees for up to ($9.99 − 50 clients × $0.105) ÷ $0.21 = 22 clients covered in the cost of a single paid user, at full utilization of each user. However, most users won&#8217;t be using their full utilization (think Google mail), and their business model becomes more lucrative.  </p>
<p>Starting with dropbox is simple. Download the client, register your account, and a folder is created where you can drag and drop your data. All data in this folder is replicated to dropbox servers, and to all dropbox client nodes that you link to your account. </p>
<p>The application ships with an intuitive user interface (no S3 accounts to configure, as this is done for you), and a rich feature set that includes automatic versioning, automatic syncing, cross-platform compatibility, intuitive web publishing, and a simple pricing model. </p>
<p>The one feature that really stood out however, was how they garner feedback for this actively developed product. Users can navigate to <a href="https://www.dropbox.com/votebox">https://www.dropbox.com/votebox</a>, where they can submit suggestions that get voted on and commented upon. This popularity contest likely helps the company focus on what projects need developing next. </p>
<p>All in all, this is an exciting company to be a customer of, and I would recommend y&#8217;all take a look at it too, as this appears to be what proper execution of a good idea looks like.</p>
<p>Kudos <a href="https://www.dropbox.com/">dropbox.com</a> on a product well done.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim80.net/2010/04/30/dropbox-com/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Setting up Hyper-V with NAT</title>
		<link>http://blog.jim80.net/2010/01/19/setting-up-hyper-v-with-nat/</link>
		<comments>http://blog.jim80.net/2010/01/19/setting-up-hyper-v-with-nat/#comments</comments>
		<pubDate>Wed, 20 Jan 2010 05:59:22 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[Hyper-V]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Virtualization]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[NAT]]></category>
		<category><![CDATA[RRAS]]></category>
		<category><![CDATA[Windows 2008]]></category>

		<guid isPermaLink="false">http://blog.jim80.net/?p=344</guid>
		<description><![CDATA[This post was originally posted by me at http://forums.serverbeach.com/showthread.php?t=6411. I&#8217;ve edited out the ServerBeach specific stuff and will post pictures&#8230;. soonish. The following link has some great pictures not included here. http://sqlblog.com/blogs/john_paul_c&#8230;h-hyper-v.aspx I&#8217;ll add some nice little pictures here once I get some screenshots together. CONFIGURE HYPERV 1. Configure an &#8220;Internal&#8221; HyperV network 2. Set each [...]]]></description>
			<content:encoded><![CDATA[<p><em>This post was originally posted by me at </em><a href="http://forums.serverbeach.com/showthread.php?t=6411"><em>http://forums.serverbeach.com/showthread.php?t=6411</em></a><em>. </em></p>
<p><em>I&#8217;ve edited out the ServerBeach specific stuff and will post pictures&#8230;. soonish.</em></p>
<p>The following link has some great pictures not included here. <a href="http://sqlblog.com/blogs/john_paul_cook/archive/2008/03/23/using-wireless-with-hyper-v.aspx" target="_blank">http://sqlblog.com/blogs/john_paul_c&#8230;h-hyper-v.aspx</a></p>
<p>I&#8217;ll add some nice little pictures here once I get some screenshots together.</p>
<p>CONFIGURE HYPERV</p>
<p>1. Configure an &#8220;Internal&#8221; HyperV network<br />
2. Set each Virtual Machine to use the Internal network and assign them and your HyperV host on the correct subnet (in this example 10.0.0.1 for the host and 10.0.0.10 for the VM).</p>
<p>ENABLE ROUTING AND REMOTE ACCESS ON THE HOST MACHINE</p>
<p>1. Click -&gt; Start -&gt; Administrative Tools -&gt; Routing and Remote Access<br />
2. Right Click on Server#### (local) -&gt; Configure &amp; Enable Routing &amp; Remote Access<br />
3. Click -&gt; Next on Welcome Window<br />
4. Select Custom Configuration Click -&gt; Next<br />
5. Select NAT Click -&gt; Next<br />
6. Select your public interface<br />
7. Select your Internal HyperV interface<br />
8. Select &#8220;I will set up name and address services later&#8221; Click -&gt; Next<br />
9. Click -&gt; Finish</p>
<p>CONFIGURE ROUTING AND REMOTE ACCESS ON THE HOST MACHINE</p>
<p>1. Routing and Remote Access should be running on the server now<br />
2. Expand out the Server<br />
3. Expand out IP Routing<br />
4. Select NAT/Basic Firewall<br />
5. Right-click your public interface. Select properties<br />
7. Network Address Translation Properties Window will open<br />
8. Select Radio Button for &#8220;Public Interface Connected to the Internet&#8221;<br />
9. Select the check box for both &#8220;Enable NAT on this interface&#8221;<br />
10. Click on the Address Pool Tab<br />
11. Click the Add button and add your secondary IP addresses. The &#8220;Start Address&#8221; and &#8220;End Address&#8221; will be the same in most cases.</p>
<p>*NOTE* You do not want the secondary IP address configured in the TCP/IP Properties of the Host machine.</p>
<p>12. Click the Reservations button and enter your static IP mappings. That is, specify that you want traffic on your secondary IP mapped to your VM&#8217;s internal IP.<br />
13. In services.msc, make sure that RRAS is set to start automatically and Windows ICS is disabled.</p>
<p>NOTES #1</p>
<p>When configuring and experimenting with the RRAS firewall, create a batch file to stop the service in case you forget to allow RDC or otherwise render the system inaccessible.</p>
<p>Code:</p>
<p>net stop &#8220;remoteaccess&#8221;</p>
<p>Then add the batch file to the scheduler and have it run some time after you apply your changes.</p>
<p>NOTE #2</p>
<p>RRAS is really finicky about the interfaces installed on the server. If an interface is changed in any significant way, it&#8217;ll have to be disabled and reconfigured.</p>
<p>Hyper-V is also similarly finicky about its virtual networks. I can&#8217;t count the number of times I had to remove and recreate networks. Thankfully, this was rather painless with only one VM to propagate changes to.</p>
<p>If you should encounter any difficulties with adding your additional VMs to the server, try resetting HyperV networking, individual VM network binding (in the VM&#8217;s settings), confirming physical host interfaces, and then reconfiguring RRAS in this order.</p>
<p>NOTE #3</p>
<p>Those who have had HyperV configuration problems solved it by disabling <strong>TCP/Offload Engine</strong>. Symptoms include, RRAS just not working, or working sporadically. If in doubt, disable TCP/Offload Engine</p>
<p><a href="http://social.technet.microsoft.com/Forums/en-US/winserverhyperv/thread/1c9be3b4-fa47-4d11-8458-d22aca6154ee" target="_blank">http://social.technet.microsoft.com/&#8230;8-d22aca6154ee</a><br />
<a href="http://support.microsoft.com/default.aspx?scid=kb;EN-US;904946" target="_blank">http://support.microsoft.com/default&#8230;b;EN-US;904946</a></p>
<p>So if this applies to you, run on the host and on any 2008 VMs:</p>
<p>$ netsh int ip set global taskoffload=disabled</p>
<p>and add the following registry key to any 2003 VMs:</p>
<p>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip\Parameters\DisableTaskOffload</p>
<p>This is a DWORD entry that should have a value of 1.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim80.net/2010/01/19/setting-up-hyper-v-with-nat/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Data Fail: Sidekick Phones</title>
		<link>http://blog.jim80.net/2009/10/12/data-fail-sidekick-phones/</link>
		<comments>http://blog.jim80.net/2009/10/12/data-fail-sidekick-phones/#comments</comments>
		<pubDate>Tue, 13 Oct 2009 03:43:42 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[Availability]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Storage]]></category>
		<category><![CDATA[Cloud computing]]></category>
		<category><![CDATA[Disaster Recovery]]></category>
		<category><![CDATA[FAIL]]></category>

		<guid isPermaLink="false">http://blog.jim80.net/?p=334</guid>
		<description><![CDATA[The Microsoft data store where T-Mobile Sidekick phones save their user data, such as contact info and pictures, has been reported to have been lost beyond repair. On October 3, T-Mobile Chief Operations Officer, Jim Alling wrote the following post on the T-Mobile forum site: Dear valued T-Mobile Sidekick customers: I realize that for many [...]]]></description>
			<content:encoded><![CDATA[<p>The Microsoft data store where T-Mobile Sidekick phones save their user data, such as contact info and pictures, has been reported to have been lost beyond repair.</p>
<p>On October 3, T-Mobile Chief Operations Officer, Jim Alling wrote <a href="http://forums.t-mobile.com/tmbl/board/message?board.id=Sidekick2&amp;thread.id=5186"><span style="color: #888888;">the following post</span></a> on the T-Mobile forum site:</p>
<blockquote><p>Dear valued T-Mobile Sidekick customers:</p>
<p>I realize that for many of you, your T-Mobile Sidekick is how you stay in touch with your friends, family and others.  I sincerely apologize for the impact the current disruption of data services may be having on you.  I assure you that T-Mobile is working very closely with Danger/Microsoft to resolve the issue as quickly as possible.  T-Mobile-supported services, such as voice calls and SMS/MMS, have not been affected and continue to be operational.  Danger/Microsoft has been working, and will continue working through the week, to restore data functionality and other features.</p>
<p>I understand that this data service disruption is very frustrating to our valued Sidekick customers.  For many years, the Sidekick has been, and continues to be, a cornerstone device for T-Mobile.  And we believe Sidekick customers are among the most loyal customers anywhere.  Recognizing that, and to address any inconvenience Sidekick data customers are experiencing, T-Mobile will automatically credit one month of data service to customers who subscribe to T-Mobile Sidekick data plans.  There is nothing you need to do to get this credit – T-Mobile will post the credit to these accounts in the coming days.</p>
<p>We will continue to post the latest information and FAQs to these Forums. I appreciate you being a loyal T-Mobile customer, and appreciate your patience as everyone works hard to resolve the current issues.  Thank you.</p>
<p>Sincerely,</p>
<p>Jim Alling, Chief Operations Officer, T-Mobile USA</p>
<div><span> </span><span><br />
</span></div>
</blockquote>
<p>Then, after a torrent of discussion on the forum site, <a href="http://forums.t-mobile.com/tmbl/board/message?board.id=Sidekick2&amp;thread.id=20218">the following update</a> was provided earlier today:</p>
<blockquote><p>Dear valued T-Mobile Sidekick customers:</p>
<p>We are thankful for your continued patience as Microsoft/Danger continues to work on preserving platform stability and restoring all services for our Sidekick customers.  We have made significant progress this past weekend, restoring services to virtually every customer.  Microsoft/Danger has teams of experts in place who are working around-the-clock to ensure this stability is maintained.</p>
<p>Regarding those of you who have lost personal content, T-Mobile and Microsoft/Danger continue to do all we can to recover and return any lost information.  Recent efforts indicate the prospects of recovering some lost content may now be possible.  We will continue to keep you updated on this front; we know how important this is to you.</p>
<p>In the event certain customers have experienced a significant and permanent loss of personal content, T-Mobile will be sending these customers a $100 customer appreciation card.  This will be in addition to the free month of data service that already went to Sidekick data customers.  This card can be used towards T-Mobile products and services, or a customer’s T-Mobile bill.  For those who fall into this category, details will be sent out in the next 14 days – there is no action needed on the part of these customers.  We however remain hopeful that for the majority of our customers, personal content can be recovered.<br />
===<br />
<span style="color: #e20074;"><strong>Dan<br />
Moderator, T-Mobile Forums</strong></span></p></blockquote>
<p>At this time, neither Microsoft nor T-Mobile have confirmed <a href="http://forums.t-mobile.com/tmbl/board/message?board.id=Sidekick2&amp;thread.id=15136">conjecture</a> that a SAN update caused the failure:</p>
<blockquote><p>So yeah..</p>
<p>I would like to know what discounts are T-mobile going to give on a new Phone. I am probably going to move to the Moto Cliq, But I and other sidekick users should get a full phone discount not just a % of it..  (Microsoft should pay for it)</p>
<p>hmm <span><span> <strong>Roz Ho</strong> haven&#8217;t you her of BACKUP&#8230;?</span></span></p>
<p><strong><span> Quoting Hiptop3 </span></strong></p>
<p><span style="color: #ff0000;"> &#8220;</span><span><em><strong>Currently the rumor with the most weight is as follows:</strong></em></span></p>
<p><span><em><strong>Microsoft was upgrading their SAN (Storage Area Network aka the thing that stores all your data) and had hired Hitachi to come in and do it for them. Typically in an upgrade like this, you are expected to make backups of your SAN before the upgrade happens. Microsoft failed to make these backups for some reason. We’re not sure if it was because of the amount of data that would be required, if they didn’t have time to do it, or if they simply forgot. Regardless of why, Microsoft should know better. So Hitachi worked on upgrading the SAN and something went wrong, resulting in it’s destruction. Currently the plan is to try to get the devices that still have personal data on them to sync back to the servers and at least keep the data that users have on their device saved</strong></em>. <span style="color: #ff0000;"> &#8220;</span></span></p>
<p>WOW.</p>
<p>Microsoft Do you understand that you are making yourself and T-mobile loose MONEY????</p>
<p>Also with me being a Sidekick owner I feel betrayed by Microsoft not T-mobile.</p>
<p>This outage I was all fine about at first but now it is just to much. We sidekick owners rely on Danger witch is now owned by Micro to keep are data stored on a secure server and that is why us users never backed up are data. I mean the sidekick does not even have a mass contact save Option. The user has to save them one by one. If I do stay with the sidekick I would like to see Options to save all on SD becuase a SIM can only hold around 250..</p>
<p>I have lost business and meetings from this outage and I am not happy.</p>
<p>So to everyone</p>
<p>It is not T-mobiles Fault so do not blame them. There customer service has been AWESOME</p>
<p>Also Danger and Microsoft do not comunicate with T-mobile as much that is why there is not much info.</p>
<p>&#8220;I wonder if we call Microsoft and bug them will they give us any info, they will probably say u have to call t-mobile. Well T-mobile is not the one who messed up,.they do not UPDATE THE SAN&#8230;..&#8221;</p></blockquote>
<p>After a week of attempting to salvage the data, it would appear as though Microsoft was unsuccessful in doing so. If the SAN speculation is correct, then it was simply a failure of the data&#8217;s underlying SAN. The question is, why should a failing SAN bring with it the data of an entire customer base? I severely doubt that this would have occurred had this been a normal hardware breakdown. Well-designed storage solutions are built with the precondition of being able to survive a head failure, network failure, any sort of failure, really, without losing data. One would thus speculate that gross human error was at fault, and frankly, that means that management was not doing their job. Not enough layers of redundancy were built into this system, and not enough protective layers were written into policy to prevent this human error, or whatever it was, from cascading into a data-lost scenario. Data management is a big responsibility, and not enough resources go into its upkeep in many firms. It would thus appear that Microsoft appears to be one of the latter.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim80.net/2009/10/12/data-fail-sidekick-phones/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>e-Mail</title>
		<link>http://blog.jim80.net/2009/06/24/e-mail/</link>
		<comments>http://blog.jim80.net/2009/06/24/e-mail/#comments</comments>
		<pubDate>Thu, 25 Jun 2009 04:15:24 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[Administrative]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[DNS]]></category>
		<category><![CDATA[Google Apps]]></category>
		<category><![CDATA[IMAP]]></category>
		<category><![CDATA[OpenDNS]]></category>
		<category><![CDATA[POP]]></category>
		<category><![CDATA[SMTP]]></category>

		<guid isPermaLink="false">http://blog.jim80.net/?p=219</guid>
		<description><![CDATA[If you don&#8217;t have to host your own email server, why do it? In fact, if any web facing application on your site can be hosted by dedicated specialists with no real appreciable loss to availability, confidentiality, integrity, or other factor, don&#8217;t fall victim of the do-it-just-because-you-can mentality. The chief services I advise folks to [...]]]></description>
			<content:encoded><![CDATA[<p>If you don&#8217;t have to host your own email server, why do it? In fact, if any web facing application on your site can be hosted by dedicated specialists with no real appreciable loss to availability, confidentiality, integrity, or other factor, don&#8217;t fall victim of the do-it-<em>just</em>-because-you-can mentality. The chief services I advise folks to outsource are e-mail (IMAP/POP/SMTP), and DNS. These critical services are often in better hands with the likes of <a href="http://www.google.com/apps/intl/en/business/index.html">Google Apps</a>, with your registrar, or <a href="http://www.opendns.com/">OpenDNS </a>(not necessarily an endorsement as these names are just on the top of my head). These folks can dedicate a lot more fault-tolerant capacity than most, taking charge of security and systems management. On top of that, they sell it mostly likely because they&#8217;re good at it (there are no doubt exceptions, but not with the above two links). With configuration and maintenance out of your scope of responsibility, you don&#8217;t have to spend countless hours tracing emails or checking DNS proliferation. Get a quote and do an analysis. If the amount of time you save by outsourcing some services is worth the price you pay to do so, then it&#8217;s a no-brainer, really. </p>
<p>Note: Speaking of checking all that stuff: some neat online tools: <a href="http://www.mxtoolbox.com/">MX Toolbox</a>, <a href="http://www.dnsstuff.com/">DNSStuff</a>, and <a href="http://iptools.com/">IPTools</a> are some handy websites in regards to mail or DNS.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim80.net/2009/06/24/e-mail/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Seagate HDD FAIL</title>
		<link>http://blog.jim80.net/2009/05/15/seagate-hdd-fail/</link>
		<comments>http://blog.jim80.net/2009/05/15/seagate-hdd-fail/#comments</comments>
		<pubDate>Fri, 15 May 2009 16:20:09 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[Storage]]></category>
		<category><![CDATA[FAIL]]></category>
		<category><![CDATA[Seagate]]></category>

		<guid isPermaLink="false">http://blog.jim80.net/?p=207</guid>
		<description><![CDATA[Ran across these tidbits while scrubbing the Interweb. It&#8217;s a bit dated, but these drives are out there&#8230; Not all of them are affected, and mostly the high capacity drives, but a couple of Seagate HDD&#8217;s have some sort of firmware bug. If you have any of thebelow models, you might want to update them. [...]]]></description>
			<content:encoded><![CDATA[<p>Ran across these tidbits while scrubbing the Interweb. It&#8217;s a bit dated, but these drives are out there&#8230;</p>
<p>Not all of them are affected, and mostly the high capacity drives, but a couple of Seagate HDD&#8217;s have some sort of firmware bug. If you have any of thebelow models, you might want to update them.</p>
<p>##From http://fora.demonoid.com/index.php?topic=45223.0: ##########</p>
<p>To see the list of models touched by this bug:</p>
<p>http://seagate.custkb.com/seagate/crm/selfservice/news.jsp?DocId=207931</p>
<p>To check your hard disk to determine its model, serial number, and<br />
firmware version download Seagate&#8217;s Drive Detector (DriveDetect.exe)<br />
from this web page:</p>
<p>http://seagate.custkb.com/seagate/crm/selfservice/news.jsp?DocId=207931</p>
<p>or use SeaTools for Windows that also can be downloaded from the Seagate<br />
site, if you don&#8217;t have the Seagate CD.</p>
<p><strong>The Seagate bug: hard disks with the bug will no longer be in working<br />
order (bricked) when the hard drive has been powered &#8220;on&#8221; 320 times.<br />
Patches will only work on Seagate hard drives that have not yet attained<br />
the 320 &#8220;start&#8221; limit.  Bricked Seagate hard drives by this bug will<br />
require you to ask for an exchange. </strong></p>
<p>Patches are specific to the models and associated firmware version.  Do<br />
not make an error in applying a patch that does not correspond to your<br />
model and firmware version or the result will kill your Seagate hard<br />
disk.<br />
###################################################################<br />
From http://forums.seagate.com/stx/board/message?board.id=ata_drives&#038;thread.id=8968 ###################################################################</p>
<p>-See here for a general rundown of current firmware issues</p>
<p>-Firmware Update for ST3500320AS, ST3500620AS, ST3500820AS, ST3640330AS,<br />
ST3640530AS, ST3750330AS, ST3750630AS, ST31000340AS</p>
<p>-Firmware Update for ST31500341AS, ST31000333AS, ST3640323AS,<br />
ST3640623AS, ST3320613AS, ST3320813AS, ST3160813AS</p>
<p>-Firmware Update for STM3500320AS, STM3750330AS, STM31000340AS</p>
<p>-Firmware Update for STM31000334AS, STM3640323AS, STM3320614AS,<br />
STM3160813AS</p>
<p>-Firmware Update for ST3250310NS, ST3500320NS, ST3750330NS,<br />
ST31000340NS</p>
<p>-For all other firmware questions, please see here &#8211; Does my drive need<br />
a firmware update?</p>
<p>####################################################################</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim80.net/2009/05/15/seagate-hdd-fail/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>BAARF</title>
		<link>http://blog.jim80.net/2009/04/14/baarf/</link>
		<comments>http://blog.jim80.net/2009/04/14/baarf/#comments</comments>
		<pubDate>Wed, 15 Apr 2009 01:06:18 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[Storage]]></category>
		<category><![CDATA[Disaster Recovery]]></category>
		<category><![CDATA[RAID]]></category>

		<guid isPermaLink="false">http://blog.jim80.net/?p=190</guid>
		<description><![CDATA[15 Apr 2009: Edited from it&#8217;s original form for clarity&#8230; and a stab at humor. -Jim I&#8217;m a card-carrying member (so to speak) of BAARF, a little online group dedicated to dispelling the myth that RAID5, or any variant thereof, is a good compromise for capacity and fault tolerance. The reason I bring this up [...]]]></description>
			<content:encoded><![CDATA[<p style="padding-left: 30px;"><em>15 Apr 2009: Edited from it&#8217;s original form for clarity&#8230; and a stab at humor. -Jim</em></p>
<p>I&#8217;m a card-carrying member (so to speak) of BAARF, a little online group dedicated to dispelling the myth that RAID5, or any variant thereof, is a good compromise for capacity and fault tolerance. The reason I bring this up is that I had two hard drives fail earlier today (on separate machines), of which one was RAID5 (it&#8217;s not mine). The RAID5 box is still rebuilding, one hard drive failure away from data oblivion. Please, for the love of all that is sacred in storage, don&#8217;t trust your data to RAID5, or even RAID6, which is not a whole lot better.</p>
<p>Also, it makes me sad that someone would dedicate some very nice 15K RPM SAS drives to a RAID5 array, presumably to offset the characteristically low IOPS performance of any RAID3/4/5 variant. Listen folks: you can have good IOPS as well as high capacity with other RAID levels, namely RAID10, which offers the best compromise of both worlds. I won&#8217;t go into too many details here, the page linked below has a number of good reference write-ups, but the gist is that dedicating resources to parity management (the calculating, reading, and writing of parity data) is a practice that sucks and deserves a swift boot into tech obscurity along with floppy drives and modems.</p>
<p>You may join the fight, or not. Either way, <a href="http://www.baarf.com/">enough is enough</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim80.net/2009/04/14/baarf/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Rackspace Delves into Cloud Computing Marketplace</title>
		<link>http://blog.jim80.net/2009/04/05/rackspace-delves-into-cloud-computing-marketplace/</link>
		<comments>http://blog.jim80.net/2009/04/05/rackspace-delves-into-cloud-computing-marketplace/#comments</comments>
		<pubDate>Sun, 05 Apr 2009 20:49:51 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[Cloud computing]]></category>
		<category><![CDATA[Hosting]]></category>
		<category><![CDATA[mosso]]></category>
		<category><![CDATA[Rackspace]]></category>

		<guid isPermaLink="false">http://blog.jim80.net/?p=135</guid>
		<description><![CDATA[Rackspace recently delved into the cloud computing arena with it&#8217;s Mosso division. Mosso delivers online presence in an application-as-a-service model and mimics Amazon Web Services and Microsoft Azure in delivering high-availabilty platforms on which to run services. With Amazon and Microsoft however, shell access remains limited and system-level access takes a back seat to stability. [...]]]></description>
			<content:encoded><![CDATA[<p>Rackspace recently delved into the cloud computing arena with it&#8217;s <a href="http://www.mosso.com/index.jsp">Mosso division</a>. Mosso delivers online presence in an application-as-a-service model and mimics Amazon Web Services and Microsoft Azure in delivering high-availabilty platforms on which to run services. With Amazon and Microsoft however, shell access remains limited and system-level access takes a back seat to stability. Mosso, in contrast, also offers provider-provisioned virtual server instances, which doesn&#8217;t require tackling a new learning curve. One can surmise that as the cloud marketplace matures, more providers will adopt this model. Ultimately, cloud computing will provide the availability and performance we want, without sacrificing the control we need.</p>
<p>Join the discussion at the <a href="http://www.opencloudmanifesto.org/">Open Cloud Manifesto</a> site.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim80.net/2009/04/05/rackspace-delves-into-cloud-computing-marketplace/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Conficker Update</title>
		<link>http://blog.jim80.net/2009/04/01/conficker-update/</link>
		<comments>http://blog.jim80.net/2009/04/01/conficker-update/#comments</comments>
		<pubDate>Wed, 01 Apr 2009 15:13:35 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[conficker]]></category>
		<category><![CDATA[Disaster Recovery]]></category>
		<category><![CDATA[downadup]]></category>
		<category><![CDATA[GRC]]></category>
		<category><![CDATA[multi-factor authentication]]></category>
		<category><![CDATA[PPP]]></category>

		<guid isPermaLink="false">http://blog.jim80.net/?p=115</guid>
		<description><![CDATA[Update: An excellent resource list is available at the Internet Storm Center. The headline at dailymail.co.uk read &#8220;April Fool&#8217;s Day computer virus is activated&#8230; but fails to cause internet chaos.&#8221; I guess the rumors were unfounded. However, it&#8217;s important to note that the virus is still rampant and speculation on the potential uses of such [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: center;"><em>Update: An excellent resource list is available at the <a href="http://www.dshield.org/conficker">Internet Storm Center</a>.</em></p>
<address style="text-align: center;"> </address>
<p>The headline at <a href="http://www.dailymail.co.uk/sciencetech/article-1166077/April-Fools-Day-virus-activated--fails-cause-internet-chaos.html" target="_blank">dailymail.co.uk</a> read &#8220;April Fool&#8217;s Day computer virus is activated&#8230; but fails to cause internet chaos.&#8221;</p>
<p>I guess the rumors were unfounded. However, it&#8217;s important to note that the virus is still rampant and speculation on the potential uses of such a huge botnet are as well. Some surmise that it might be used to DDOS the crap out of some poor server(s). It might also be used to crack passwords or encryption. Check out <a href="http://downadup.org/">http://downadup.org</a> to read more and for removal tools. It&#8217;s also a good idea to prepare your network for the potentiality of attack. Don&#8217;t be a soft target.</p>
<p>Here&#8217;s a couple (read non-comprehensive) ideas on how to not be a soft target:</p>
<ul>
<li>Backup, backup, backup
<ul>
<li>Have systems ready to leap into action if necessary, and keep at least one form of backup offline in case of <a href="http://blog.jim80.net/2009/03/24/webhostingtalk-hacked-hardcore-but-still-online/" target="_self">worst-case scenarios</a>.</li>
<li>If you don&#8217;t already have a backup strategy in place, it&#8217;s time to implement one.</li>
</ul>
</li>
<li>Control access to your critical services
<ul>
<li>Enforce strong passwords &#8211; or better yet, employ multi-factor authentication. <a href="http://blog.jim80.net/2009/03/15/multi-factor-authentication-for-cheap/" target="_self">PPP</a> is a strong candidate for the thrifty.</li>
<li>Audit your users &#8211; does that guy who quit last year still have an active user account? Do your non-administrative users have access to critical servers?</li>
<li>Use fail2ban or iptables to detect and drop password-guessing attacks &#8211; even with 10 million + IP&#8217;s to choose from, it&#8217;s not easy to crack a password/one-time password combination when you only get 3 tries per IP.</li>
</ul>
</li>
<li>Watch your traffic (not really a botnet vulnerability, but good practice in general):
<ul>
<li>Control your legacy services &#8211; seriously, it&#8217;s time to retire <a href="http://www.milw0rm.com/exploits/8055">telnet</a> and other services that transmit passwords in cleartext.</li>
<li>https &gt; http &#8211; especially when it comes to passwords. Don&#8217;t allow users the ability to transmit passwords over http.</li>
</ul>
</li>
<li>etc&#8230;</li>
</ul>
<p>I&#8217;ve hardly compiled a comprehensive list, and I welcome comments for other good practices, but the most important takeaway is to be cognizant of your security stance. Don&#8217;t make it easy for the bad guys.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim80.net/2009/04/01/conficker-update/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>WebHostingTalk Hacked Hardcore but Still Online</title>
		<link>http://blog.jim80.net/2009/03/24/webhostingtalk-hacked-hardcore-but-still-online/</link>
		<comments>http://blog.jim80.net/2009/03/24/webhostingtalk-hacked-hardcore-but-still-online/#comments</comments>
		<pubDate>Tue, 24 Mar 2009 23:13:52 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.jim80.net/?p=104</guid>
		<description><![CDATA[This week, WebHostingTalk suffered a major compromise and &#8220;the offsite backup, the onsite backup and the operational data were destroyed by the attacker.&#8221; Read the companies thread about the event here. This isn&#8217;t a news blog. I&#8217;m not so plugged in that I can write about things as they happen. That&#8217;s not my impetus. My [...]]]></description>
			<content:encoded><![CDATA[<p>This week, WebHostingTalk suffered a major compromise and &#8220;the offsite backup, the onsite backup and the operational data were destroyed by the attacker.&#8221; Read the companies thread about the event <a href="http://www.webhostingtalk.com/showthread.php?t=729727" target="_blank">here</a>.</p>
<p>This isn&#8217;t a news blog. I&#8217;m not so plugged in that I can write about things as they happen. That&#8217;s not my impetus.  My impetus is to publish articles about ideas that I believe are sound principles when planning your systems architecture. One such principle is<strong> not betting the house on a single technology</strong>, and WHT was a prime example of the benefits of such planning. After suffering an attack like that, WHT is <a href="http://www.webhostingtalk.com/" target="_blank">online and serving traffic</a>. How? They had DVD backups. Try erasing that. Yes, they&#8217;ve only managed to restore up to October 2008, and that was likely a result of corrupted media or backup operator error, but their site isn&#8217;t down.  It&#8217;s an arduous process, writing to permanent media. And it&#8217;s an arduous process restoring from it. But in a last-ditch scenario like this, it served WHT well. And it proves my point. Crossing architectural boundaries when backing up data is a necessity, and that means keeping at least one form of backup <strong>offline</strong>.</p>
<p>Would your business be able to take a hit like WHT&#8217;s and keep its doors open?</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim80.net/2009/03/24/webhostingtalk-hacked-hardcore-but-still-online/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Cloud Hosting != Unbreakable</title>
		<link>http://blog.jim80.net/2009/03/18/cloud-hosting-100-uptime/</link>
		<comments>http://blog.jim80.net/2009/03/18/cloud-hosting-100-uptime/#comments</comments>
		<pubDate>Wed, 18 Mar 2009 14:14:11 +0000</pubDate>
		<dc:creator>jim</dc:creator>
				<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[Azure]]></category>
		<category><![CDATA[Cloud computing]]></category>

		<guid isPermaLink="false">https://blog.jim80.net/?p=50</guid>
		<description><![CDATA[When Microsoft launched their cloud-based operating system last October, they branded it &#8220;Azure,&#8221; I suppose as a reference to the blue skies that supposedly hold these clouds. According to Tier1 Research&#8217;s A. Piraino, Azure suffered a 22 hour outage this weekend when a (speculatively) software related glitch caused instances to suddenly stop responding. While Microsoft [...]]]></description>
			<content:encoded><![CDATA[<p>When Microsoft launched their cloud-based operating system last October, they branded it &#8220;Azure,&#8221; I suppose as a reference to the blue skies that supposedly hold these clouds.</p>
<p>According to Tier1 Research&#8217;s <a href="http://www.t1r.com/client/view.php?rid=57373" target="_blank">A. Piraino</a>,  Azure suffered a 22 hour outage this weekend when a (speculatively) software related glitch caused instances to suddenly stop responding.  While Microsoft is yet to release the results of a root cause analysis, one can envision a NOC with stacks of monitors displaying Blue Screen&#8217;s of Death. Or rather, Azure Screen&#8217;s of Death.</p>
<p>To be fair, <a href="http://www.microsoft.com/azure/" target="_blank">Microsoft Azure</a> is still in &#8220;Technology Preview,&#8221; which is to say, pre-production. And other cloud computing platforms have suffered similar outages in their infancy as well. Amazon Web Services suffered a seven hour outage in July from faulty load balancers.  Google systems were brought down twice in the past six months.</p>
<p>The problem isn&#8217;t that the architecture doesn&#8217;t work as planned. The problem is that no amount of planning will cover every situation that can, and will, occur. Failures of critical components become huge issues in virtualized applications, because that many more (virtual) instances require the services of those components. Though a system can have <em>n </em>levels of redundancy built into it, ultimately, there is no such thing as a completely unbreakable system.</p>
<p>Folks tend to get excited about cloud computing because they envision a future of virtualized applications zipping around in a grid computing infrastructure, never failing, never dying. Even in more traditional environments, people get excited about centralized storage, and the joys of instant snapshots and multiple layers of redundancy. Though these technologies are exciting and brings with it new avenues for innovation, uniform architectures share uniform faults. Diversity in architecture is an important consideration when you&#8217;re building fault tolerance into your system.</p>
<p>Another important consideration is this: the more power we place in the hands of an administrator, the more damage he can do when he goofs. And he will goof. We all goof once in a while. Take, for example, Flexiscale, who ate a five-day outage because of one such goof. The more we consolidate technology, the more vulnerable we are if something that should never happen, happens.</p>
<p>The takeaway is simple.  Take the promises of new technology with a grain of salt. And even if the skies are blue, pack an umbrella just in case.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.jim80.net/2009/03/18/cloud-hosting-100-uptime/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
