Yearly Archives: 2004

Fairtrade

After reading news like these, now I try to buy Fairtrade products whenever I could.

Today I bought chocolate drink from them instead of from Cadbury, and their banana instead of Del Monte’s.
I wish that there are more of their products.

If you can do it, please do buy Fairtrade products.
It may be nothing / cause you only very little inconvenience – but it makes difference to others not so fortunate.

Sufi – bagian kedua

Satu lagi masalah besar dengan berbagai aliran sufi yang ada adalah ketergantungan yang sangat besar dengan gurunya. Di berbagai aliran sufi, posisi guru sudah hampir sama / melebihi Nabi Muhammad. Di beberapa aliran malah sudah menyamai Alah swt sendiri.

Beberapa contoh dari sebuah aliran sufi di Kanada:

  • Berdoa adalah sambil membayangkan wajah sang guru
  • Guru tidak bisa salah
  • Ridho Allah swt hanya bisa didapatkan dengan ridho sang guru
  • Taqlid / patuh buta kepada guru adalah kewajiban
  • dst

Padahal berbagai sahabat / ulama besar Islam sendiri justru mempunyai banyak guru. Dan sebagai guru, mereka tidak segan untuk dikritik jika mereka melakukan kesalahan.

Jangan mau dibodohi oleh oknum-oknum ini.

Patching: A horror story with Microsoft products

Note: My interest would be on security updates.

Just another reason to avoid Microsoft products – when you upgrade their product, you expect it to become better. But other things may happen instead :

  1. It may wreck your computer
  2. It may wreck other software in the computer
  3. It may create new security holes

It’s even more ridiculous for the fact that you’re paying a LOT of money for it

If you’re concerned about security of your computer system, you’ll be better off with the open-source alternative – since they tend to be more frank about the bugs, patch them quickly, and patch them cleanly.

Kerja Helpdesk

Karena backlog yang cukup banyak (1700 open calls !), minggu ini tim kami ditugaskan untuk membantu IT Helpdesk.

Kemarin mulai melihat-lihat seperti apa saja request yang ada. Ternyata, sebagian besar adalah masalah dengan Microsoft Word & Excel *hiks* – MS-Word crash, file yang tidak bisa dibuka, dst.

Duhhhh… kalau kami menggunakan StarOffice, maka saya tinggal mengkontak Sun dan membiarkan mereka yang mencoba mencari tahu solusinya. Tapi dengan Microsoft, budget kami sudah habis hanya untuk membeli lisensi software; sehingga walaupun kami memiliki ribuan lisensi MS-Office, tapi tidak ada support contract dengan Microsoft.

Kalau saja MS-Office adalah produk open-source, maka saya masih bisa bertanya kepada developernya, atau debug sendiri. Tapi, karena MS-Office adalah produk proprietary / tertutup; duh gimana caranya ya ? Kalau asal oprek-oprek saja, takutnya nanti malah jadi membuat masalahnya tambah parah.

Pantesan teman-teman di Helpdesk pada banyak yang stress :-O

Oldies but goodies

I’m a big fan of old IBM keyboards. The one I’m currently using was manufactured in 1985.
OK, so what’s so special about them ?

Well, they’re tough for starter. Which is very important when you have kids 🙂

Second, they just feel GOOD. I’ve yet to find a modern keyboard with the responsive tactile feel of this oldie. It’s a joy to use.

Third, they just keep on working. As you may have noticed, the one I own is about 20 years old. And I can expect to be able to use it for YEARS to come.

Fourth, they’re dirt cheap. This one cost me only 1 poundsterling !

The downside ? Well, they’re quite hard to find 🙁 so if you’re lucky enough to found one – don’t let it go! Also they’re quite heavy; my friend joked that they’re created to be bulletproof.
And, some may find it a bit noisy, but to me the sound is very satisfying; like a classic typewriter. You just got to hear it for yourself.

Good luck to you in finding one.

URGENT – security hole di phpBB

Ada sebuah security hole yang baru ditemukan di phpBB yang sangat serius:
howdark.com exploit

Saya sudah coba exploit-nya, dan memang betul kita bisa eksekusi perintah di server ybs.
Karena howdark.com menyediakan contoh exploitnya yang bisa dengan mudah dijalankan, maka kelihatannya ini akan menyebabkan banyak server phpBB yang dijebol oleh script kiddies.

Jadi – SEGERA PATCH instalasi phpBB Anda !
(mudah kok, cuma edit 1 baris saja)

OpenLDAP as Metadirectory

This past few weeks I have been messing around with OpenLDAP in the interest of using it on a role as a metadirectory – the master directory that “glue” all other directories (Active Directory, eDirectory, Lotus Notes directory, etc) together.

Among things I’ve learned so far:

  • You can synch TO Active Directory using slapd/slurpd; but the tree on both directory MUST be identical.
    My config in slapd.conf :

    replica         uri=ldaps://10.100.299.199:389
                    binddn="cn=administrator,cn=users,dc=bcc,dc=test"
                    bindmethod=sasl saslmech=GSSAPI credentials=mypassword
    replogfile      /usr/local/openldap/var/replog-bcc-test
    
  • A better way would be to setup another OpenLDAP server, and run slapd-ldap (back-ldap) there. It’ll act as the intermediary between the master OpenLDAP server, and Active Directory server.
    The big advantage with slapd-back is with it’s proxy & rewrite capability, the tree on both server does not have to be identical.
  • An even better way would be to setup another OpenLDAP server, and run slapd-meta (back-meta) there. While back-ldap can only proxy for one directory, back-meta can proxy & rewrite (eg: act as a metadirectory) for multiple directory services at the same time

I do suspect though that back-meta would be a PITA to configure 🙂 but that’s the price we gotta pay for its power.

References:
slapd-ldap
slapd-meta

Cara mudah belajar Regex (regular expression)

Andrei Zmievski, developer PHP & fasilitas regex di PHP & software engineer Yahoo, baru-baru ini melakukan presentasi mengenai Regex di seminar php-works. Presentasi ini sangat bagus bagi para pemula yang ingin belajar mengenai Regex.

Syukurlah kini presentasi tersebut sudah ditaruh di website Andrei, sehingga bisa kita download secara cuma-cuma.

Download dari sini : [ Regex Clinic ].
Atau, [ download via email ] (14 MB)

Setelah menonton presentasi tersebut, jangan lupa untuk berlatih regex dengan bantuan dari Regex Coach.

Selamat belajar Regex.

Berbagi Ilmu

Ikhlasul Amal mengajak kita untuk saling berbagi pengetahuan di sebuah entry di blog-nya.

Saya kemudian menuliskan sebuah komentar, tapi ketika di-submit tidak muncul. Mungkin ada moderasi komentar, anyway saya akan dokumentasikan saja disini juga; dengan beberapa tambahan spt link ke cwRsync dll :

=======================
Saya kira ide http://planet.terasi.net sudah bagus.

Kita jadi bisa sharing pengetahuan kita dengan mudah. Saya sendiri posting ke agregat tsb via email (well, sebetulnya posting ke kategori teknoblogia di blog saya, yang kemudian “disedot” oleh planet), sehingga sangat memudahkan proses sharing knowledge-nya.

Lalu situs planet.terasi.net ini juga mudah di-index oleh search engine (barusan sudah saya submit ke http://google.com/addurl), sehingga kemudian mudah ditemukan oleh yang membutuhkan.

Sebetulnya, memang saat ini planet.terasi.net masih belum membatasi bahwa hanya topik IT yang boleh ditampilkan, jadi saya mulai dari saya sendiri dulu, mengikuti sebuah ide yang dilemparkan di forum teknologia.
Saya pikir bagus kalau bisa disediakan 2 agregat – satu menampilkan blog umum, dan satu lagi menampilkan blog khusus mengenai teknologi/IT.

Mengenai wget – hati-hati, IlmuKomputer.com sudah pernah diusir oleh berbagai webhoster mereka karena overquota bandwidth – salah satunya adalah karena pengguna wget / kegiatan me-mirror situs ini. Situs Isnet.org juga pernah mengalami masalah yang sama; terakhir terpaksa pindah dari webhosternya di Amerika dan sekarang dihosting di Indonesia.

Jadi kalau bisa memesan versi CD-nya, mungkin itu lebih baik. Dan untuk update rutin bisa menggunakan rsync yang hemat bandwidth.
(pengguna Windows bisa menggunakan software cwRsync, dll)

Mengenai menggugah masyarakat untuk menjadi kontributor – selama ini pengalaman saya masalahnya adalah waktu. Banyak kawan-kawan yang ingin berkontribusi, namun terbentur pada kendala waktu.
Jadi kalau proses kontribusi bisa dilakukan dalam waktu yang sesingkat-singkatnya dan nyaman, mungkin bisa lebih banyak yang berkontribusi.

Salah satunya mungkin adalah dengan menyediakan fasilitas blog yang bisa diisi via email. Bagi yang bisa memberi manfaat bagi komunitas IT Indonesia, saya bersedia menyediakan fasilitas ini secara cuma-cuma.
Beri saya sedikit informasi mengenai Anda / CV, dan apa yang ingin Anda bahas.
=======================

Anti-spam untuk WordPress

Sudah beberapa waktu ini saya mencari-cari solusi anti-spam untuk spammer yang mengiklankan produk-produk mereka di berbagai blog.

Sebetulnya sih saya sudah menemukan plugin Trencaspammer, yang menampilkan sebuah gambar yang menampilkan kode, dan mengharuskan komentator untuk menuliskan kode tersebut. Ini cara paling ampuh untuk mengalahkan blog spammer, dengan usaha minimal dari kita.

Tapi “teracuni” Priyadi yang mengutamakan accessibility (Trencaspammer misalnya akan memblokir pengguna Internet tuna netra), akhirnya saya memilih menggunakan Comment Preview.
Selain menyulitkan spammer (karena biasanya software spam mereka tidak mengantisipasi form komentar dengan fasilitas preview), ini sekaligus memungkinkan Anda untuk melihat bagaimana komentar Anda akan ditampilkan.
Jadi kalaupun spammer bisa mengatasi ini, saya tidak rugi karena masih mendapatkan fasilitas preview (dan kemudian tinggal memasang Trencaspammer)

IPcop v1.4 telah dirilis

IPcop v1.4 telah dirilis.
IPcop adalah firewall yang bisa di-install dengan mudah dan dalam waktu beberapa menit saja. Saya sendiri sudah menggunakan versi 1.3-nya selama bertahun-tahun, dan belum pernah mengalami masalah.

IPcop memang harus dipasang komputer tersendiri, tapi ini lebih bagus karena lebih aman. Beberapa firewall yang dijalankan di Windows ternyata bisa dimatikan oleh virus/hacker.
Lagipula, IPcop tidak membutuhkan komputer mewah – komputer 486 bekas dengan memory 12 MB sudah mencukupi.

Walaupun gratis, ternyata kemampuan IPcop tidak kalah dengan berbagai firewall komersil ! Administrasi via browser, VPN, traffic shaping/limiting, pemisahan network (red/internet, orange/dmz, green/LAN, blue/wireless), Intrusion detection, Proxy server, dll – lebih detailnya bisa dilihat misalnya [ disini ] dan [ disini ].

[ Situs IPcop ]

Intellectual Property

…standing on the shoulder of the giants
— Linus Torvalds in his biography, attributed to Isaac Newton.

The quote above means to be able to utilise others’ achievements in order to make progress. It’s the reverse of “reinventing the wheel”.
Great scholars and inventors of the past benefited from this greatly.

However, international patent laws are set to stifle this – the system enable the rich & greedy to acquire large number of patents, thus disabling others from basing their work on it:
http://economist.com/opinion/displayStory.cfm?story_id=3376181

Worse, the patent applications are flooding the patent offices, so the overworked staff are granting it even to the ridiculous ones.

An example is the notorious hyperlink patent, owned by British Telecom. Even though Sir Tim Berners-Lee doesn’t patent this invention of his, BT applied for patent for it instead – and got it.

Somebody may commented that you can always challenge a patent – the problem is, the process is not doable to most people.
It takes time, and most of the time, a LOT of money.

So the big corporations are getting away with it. And the rest of humankind just have to enjoy this new kind of slavery – ideas slavery.

Interestingly, America was able to flourish due to the lack of patent system:
http://www.nytimes.com/2002/10/14/technology/14NECO.html

Ideally, the solution is to abolish patent.
But, with current condition, this will just make the big boys to copy the small fishes’ innovations, and kill them with advertising and cheap price brought by mass production.

For now, the solution probably is to set the fee of patent application variably, depending on the applicant’s last year income. And then the patent may not be transferred to other party.
This way, patents will become affordable to the poor (but creative), and will stop the big corporations from putting a burden on the system.

The world we live in today

The following is such an excellent summary of the world we live in today:

…On that note, f*ck America (or more specifically its government). It has ceased to care about any person without a million dollar pocket book. The laws of America now exist to enslave its poor and empower its rich.

Although, the sad part is that the comman man is just as responsible as anybody else for this outcome. We have empowered them through our complacency and utter lack of regard for anything other than what is on our damn televisions every night. We have been enslaved to technology, and as a result those that produce that technology own us all. Especially, now that what we see on television (our defacto standard for the propogation of our culture) tells us that men have to be ignorant fools who are only interested in football, sex, gadgets, and being retarded with their friends to fit in. And women just have to buy everything including a perfect body to do the same. We are trained to be submissive idiots, questioning those who are otherwise.

Oh well, at least we still have our sweet… sweet capitalism. At least we have a choice of where we buy things. You know ma & pa shop down the street or Wal-Mart up the street for 70% less (which coincidentally enough is all you can afford now that you work there). Good thing McCarthy came along and kept us from falling into the hell hole of desperation that is communism.

And at least we still have our voice in our government. You know our solitary occasional whispering voices, compared to industries full time lobbyists. I am perfectly satisfied with all of my governmental representatives are you ;-). So when’s the next civil war?

Source:
http://yro.slashdot.org/comments.pl?sid=129665&cid=10817291

Fedora Core 3 & Solaris 10

Lots of goodies today in Slashdot:

Fedora Core 3 released

I must admit that I was very sceptical when FC1 was released – I’ve had bad experience with previous releases of RedHat, and I never liked RH as a distro.

Then I tried FC2, and fell in love with it straight away. Here’s what I found:

# Truly free (as in speech), open, community-backed distro. Reminds me of Debian.
# Distro that “Just Works” – even on high-end server hardware (which usually uses strange chipset/configuration)
# Good on desktop role, Excellent on server role.
# Sensible setup process, with ability to go into great details if necessary.
# Great momentum – a LOT of people are using Fedora.
# Great choice in software management – I’m using apt on FC2 servers as we speak; yum & up2date are also available.

The last one is particularly important, because I’ve had enough spending days managing software on many servers – I now demand apt (or similar facility) whenever I could to save my time on mundane things and actually enable me to do things that’s more interesting.

I expect FC3 to be even better than FC2, well I guess I’ll find that out soon enough.

A note – contrary to a comment on that post above, I don’t think that SElinux – as it is – will make FC3 suddenly very secure. Don’t get me wrong – any security enhancements should be most welcomed by any security-conscious administrators; but I just think that the commentator is getting hyped up on one thing, and he may miss other similarly important things.
For example, you need to understand how it works to get maximum benefit from it. Otherwise, you’ll fell into false sense of security.

Solaris 10 released

I have a mixed feeling about this. First, I agree that Solaris is an excellent OS. But, I somehow doubt that Sun is able to pull such a huge leap (from Solaris 9) in such a short time – ZFS alone is quite unbelievable, then they promised Linux-compatibility (while I have had problems as silly as applying patches created by GNU/patch using Solaris’ patch), revolutionary TCP/IP stack, etc.
So I think it’ll be ridden with quite a lot of bugs.

Also, open source Solaris ? Doubt it, most probably there’ll some limitations on its license. Probably we’ll see the detailed analysis of it in Groklaw soon.

A commentator in the post above said that he’s heard McNealy promised it (open-sourcing Solaris) himself on an interview. Sorry, but I have problem believing a guy who flipped in an instant and now sleep in the same bed with his previous biggest enemy.

However, if it comes out as true – open-source developers are in for a joyride. Various solid technologies on Solaris are then available for picking by them.

But personally I still won’t use Solaris 10 for production unless I got loads of money to spare to subscribe to its bugfix/patches service….

btw, as I said before, if you use open-source software on Solaris, I think you’ll be very interested on Blastwave.org

Gentoo dan Debian

Salah satu hal yang disenangi oleh pengguna distro Gentoo adalah karena software-software yang terpasang sudah optimal untuk komputernya – karena di-compile / optimized untuk komputer tersebut

Ternyata Debian juga bisa…

apt-get build-dep package
apt-get –compile source package
dpkg -i package.deb

(kaget sendiri 😀 )