please update your wordpress installation. it's not secure.

Whoever that is, thanks for reminding. Wanted to do it long time ago, but too busy. Although you sounded like a hacker who would hack my blog if I don't upgrade, but anyway, thanks again.

Upgraded to version 3.0 now, but didn't notice much changes in the user interface from back-end. Shall spend some time to explore soon.

It's not as "advanced" and user-friendly as it was advertised. I still feel that it's strictly for geeks, unless you are using that machine like a netbook, then it wouldn't be much problem for you.

As a programmer with some 3 years working in Red Hat terminal, still I need some time to get use to the file structure as the things are not placed exactly what it were in Red Hat.

Since I normally prefer to get use to the software that comes with the OS, I find that Finder (or you may call it file explorer) is the hardest thing you need to get use to. Many in the web would suggest you to use alternatives, but some how, I managed to adapt to it already.

Switching from Ctrl key to the Command key is the worst part of the whole migration process. Using Windows for more than a decade, why would anyone press Win Key + C to copy a thing?!

However, with all those complaints, it's not really that bad actually. I managed to adapt to the "damn" machine in less than a month. More than 10 years of working in Windows, and I could adapt myself to Mac in less than a month.

My praise for the machine is mainly on the hardware. It's really stable. There's once when some metal accidentally went into the USB port and caused a spark. The Snow Leopard just tell you gracefully that the USB port uses more power than it should be, then it automatically disable to port.

When you are in Windows, it only tells you that you can't remove your pendrive because something is still using it, but in Mac, it tells you exactly what needs to be closed so you could remove your pendrive.

I must say that Apple have put much effort on the little things, and it is these little things that makes them grow to what they are today.

The exterior of the machine, the screen, the keyboard. It all look so perfect that you would always try to protect it, even the power adapter. Apple put so much effort to every small things, like the magnet of the power adapter that suck itself to the port, the sensitivity of the touchpad.

The endurance of the battery is perfect. I have a feeling like using a phone which you would normally charge for a few hours at night and using it for one whole day on the second day. Did you ever bring your phone adapter with you on a normal working day? It almost achieve that, with at least 6 hours of wireless productivity, compared to my last AMD laptop that only runs for at most 2 hours.

I highly recommend people to switch to it, if you don't mind to spend a struggling month to adapt, but once that's over, it's really a great machine to work on. The price of owning one is no longer that high, compared to few years back.

I must say it's not a cheap deal at the price of RM3,899, but comparing it to high-end Sony, Fujitsu or Lenovo laptops, it's still acceptable.

After spending few hours with it, I think I barely know anything about Mac. Even something as easy as opening command prompt (or it's called Terminal in Mac) requires a google search.

I didn't expect that setting up my Blackberry to work with Snow Leopard would took me almost an hour. Had to explore everything from scratch again. Luckily I had 3 years experience with Red Hat and vi.

Hopefully the Mac would make me revive this blog again, writing some post as a log to remind myself on how to configure my new machine to fit my needs (in case I format this machine some day).

Share with me in the comments (or laugh at me), if you find me posting anything wrong. I'm surely a noob in this new world..

Photo by Mzelle Biscotte

It all started with an notification on top of my Gmail account, asking me to reconfirm my secondary email account, which is my Yahoo Mail. The notification reminds me of the news of a Twitter employee got his Gmail account hacked:

About a month ago, a hacker was able to access a Twitter employee's personal email account, according to a blog post by Twitter cofounder Biz Stone. Once there, the hacker struck the mother lode: access to the employee's Google Apps account, which contained Docs, Calendars and other Google Apps that Twitter uses for sharing notes, spreadsheets, ideas, financial details and so on.

If you didn't follow the story, the hack happened through Gmail's password recovery procedure, which sends password recovery information to the user's secondary email, which is an expired hotmail account:

At Hotmail, Hacker Croll again attempted the password recovery procedure - making an educated guess of what the username would be based on what he already knew. This is the point where the chain of trust broke down, as the attacker discovered that the account specified as a secondary for Gmail, and hosted at Hotmail was no longer active. This is due to a policy at Hotmail where old and dormant accounts are removed and recycled. He registered the account, re-requested the password recovery feature at Gmail and within a few moments had access to the personal Gmail account of a Twitter employee. The first domino had fallen.

In fact, not only Gmail, but all email services has similar recovery process. Most of the time, things like this has to be learned the hard way. All free email accounts expire if you don't log in after some time, approximately 3 months.

Let me continue with my story. So, I believe Google gave that notification to all users to make sure everyone had a valid secondary email account (after somebody got attacked, of course). I thought it might be a good idea to check my Yahoo Mail to see if the account is expired or not.

When I logged on to Yahoo Mail, Yahoo said they found some suspicious activities with my account and forces me to change my password! I changed it.

Then I was brought to my inbox, I was greeted by the name "Heather", and my profile picture shows a girl, a hot babe! All my information in profile was changed!

The first question was how does this "girl" broke into my Yahoo? Why she did not change the password? Does she have any bigger motive after hijacking my Yahoo Mail?

Immediately, I changed the secondary email of my Gmail. Suddenly, I felt the internet is so insecure. Anything could happen overnight.

My advice (conclusion) to everyone:

• Probably backup is good. Lifehacker has got a good guide on Gmail backup.
• Strong password is important. Alphanumeric + symbols. Best password is a combination of easy to remember, hard to guess. Using first characters of words in a sentence to create a password seems to be a good way.
• Avoid using same password across different websites!

Can you afford to lose your main email account? How do you prevent that from happening?

It's debatable if the ads are raising funds to support freewares like TortoiseSVN, but the ads is confusing the users. The first thing the user sees in the Download Page is the link to VisualSVN, which I suppose to be another company selling similar product.

Of course, the user would be clicking on the link especially when the download links are only shown after the user scrolls down. I assume this would generate good money for them and gets the user confused in the website of another product.

Is this something right? I'm not sure. What I know is TortoiseSVN is a good software.

Update: Forgot to mention about AdSense's Competitive Ad Filter, which is good to filter out competitor's ads, but if the user is not there for that product, would they be interested to buy a car in a software website? Very unlikely, though possible.

Most of the time, I am having problem with Internet Explorer 6, which most web designers tend to ignore nowadays. Sometimes, you find that the spacing is different. Sometimes, the alignment is different. These are minor problems that you can't really recall it very well, but it always happen.

You could be spending only few minutes to fix it, and that few minutes can turned up to be few hours of research.

If I can test my system on Firefox and Internet Explorer, can I actually test everything on Opera? Safari? (Yeah, I am the sole programmer and the tester of all my systems! My office is still on the way..)

To avoid spending unnecessary time to deal with the minor problems, I locked my systems to run on Mozilla Firefox only. I'm not sure whether it's a good move, but at least I have a small group of users which I can control and force them to install Firefox.

Finally, I found a website that has the ultimate answer: Do websites need to look exactly the same in every browser?

Cool, huh?

Anyhow, I would still spend time to make sure my system acts the same in every browser, if possible.. How about you?

As with every Firefox release, I was expecting that it would reduce memory consumption, but it's didn't happen, or it wasn't obvious. With only four tabs running, it's using 125MB of memory.

On the UI, I notice a "new tab" button on the tab bar. I would normally have to double click on the tab bar to create new tab. Now, I can do it with single click on that button.

In the Options, I notice a new tab, the Privacy tab. But the content of the tab seems to be taken from other tab to create this new tab.

Nothing interesting. Still, it's worth upgrading. They had put lots of effort to enhance the stability and security of the browser.

Get yours: Mozilla Firefox

So, I went to Digital Mall to get an Automatic Voltage Regulator (AVR). I find that most AVR came with surge protection. At most, the AVR will get spoiled and replacing an AVR only costs me RM50.00. Replacing power supplies, modems and motherboards costs much more!

The normal rating for AVR is at 800A. Looking at it, what is the ampere of a lightning? According to Wikipedia, an average one could go up to 30 kiloamperes (kA)!

What is 800A compared to 30kA?! So, the salesperson recommended me to use Belkin SurgeMaster Surge Protector which claims to protect up to 45kA (or higher, depending on model). It also came with insurance for your equipments connected to power through the Surge Protector.

There are a few models, I get the one that protects up to 45ka with maximum RM10,000 insurance. The price is at around RM150 only. Much cheaper than motherboards!

Consider getting one for yourself!

For your information, my PHP-MySQL system is running on Apache HTTP server version 2.2 in Microsoft Windows XP environment.

I see the following errors repeating in the log file:
[Fri Jul 03 15:20:52 2009] [warn] (OS 121)The semaphore timeout period has expired. : winnt_accept: Asynchronous AcceptEx failed.
[Fri Jul 03 15:20:52 2009] [warn] (OS 64)The specified network name is no longer available. : winnt_accept: Asynchronous AcceptEx failed.


If you are not sure where's the log file:
C:\Program Files\Apache Software Foundation\Apache2.2\logs\error.log

Solution that works:

As recommended by the Apache documentation, I added Win32DisableAcceptEx directive to the apache configuration file.

Apache configuration file can be found at:
C:\Program Files\Apache Software Foundation\Apache2.2\conf\httpd.conf

I am expecting this to be a Windows specific problem that should be mentioned in Platform Specific Notes for Windows, but it didn't.

Anyway, I solved my problem.

--

But... on another installation of my system, I encountered a different error in the log file.
child process exited with status 3221225477

It also causes the httpd.exe process to die off suddenly and the user is experiencing the same problem when submitting data. Every result in Google shows a different problem. It seems like the error is a generic one. Do let me know if you have any idea on how to fix this.

With few of my clients running on this same configurations, the actual disaster only happen few days ago. The lightning strike hit the server computer and it failed. Totally dead. Replacing the power supply didn't help.

So, I had to do disaster recover by moving the hard disk to another computer. I didn't realise that Microsoft Office 2007 actually detects what hardware it is running on.

This morning, the Microsoft Office didn't work. It says something like:

The Microsoft office systems detected hardware changes on your computer.

The PHP script that called Microsoft Excel COM failed. It requires reactivation. Reactivation is easy, can be done with just 2 clicks of mouse. But would Microsoft disable the license and ask me to buy another new copy?

A sane mind will agree that evil Microsoft will force me to do so. The office has spent more than RM10,000 on Microsoft licenses. They will definitely find more ways to squeeze more money from us!

Unbelievably, the reactivation was successful.

Although it good for now, I'm not sure whether I will get another message like "You are running a pirated version of Microsoft Office, please get a genuine version" tomorrow.