Tuesday, June 26, 2012

How Much Data Do You Have?

This should be fun. I published this for the individuals who use our Lawtrac application for pre-Discovery work and manage large blocks of data in document banks, but the numbers can apply to everyone.

HOW MUCH DATA DO YOU HAVE?

CD = 650 MB = 50,000 pages.
DVD = 4.7 GB = 350,000 pages.
DLT Tape = 40/80 GB = 3 to 6 Million pages.
Super DLT Tape = 60/120 GB = 4 to 9 Million pages.
***************************
Page Estimates:
1 MB is about 75 pages;
1 GB is about 75,000 pages (pick-up truck full of documents).
Aver. pgs. per email: 1.5 (100,099 pages per GB).
Aver. pgs. per word document: 8 (64,782 pages per GB).
Aver. pgs. per spreadsheet: 50 (165,791 pages per GB).
Aver. pgs. per power point: 14 (17,552 pages per GB).
***************************
For the average .PST or .NSF Email File:
100 MB .PST file is 900 emails and 300 attachments.
400 MB .PST file is 3,500 emails and 1,200 attachments.
600 MB .PST file is 5,500 emails and 1,600 attachments.
A 1.00 GB .NSF file is 9,000 emails and 3,000 attachments.
A 1.5 GB .NSF file is 13,500 emails and 4,500 attachments.
***************************
Note: Many variables will affect ALL of the actual numbers above, including especially large image and video files, and recursive files.
***************************
Bits and Bytes Sizes:
•8 bits are equal to 1 byte (one or two words),
•1,024 bytes are equal to 1 kilobyte (KB).
•1,024 kilobytes (KB) are equal to 1 megabyte (MB or Meg).
•1,024 megabytes are equal to 1 gigabyte (GB or Gig) (truck full of paper).
•1,024 gigabytes are equal to 1 terabyte (TB) (50,000 trees of paper).
•1,024 terabytes are equal to 1 petabyte (PB) (250 Billion Pgs. of Text).
•1,024 petabytes are equal to 1 exabytes (EB) (1 000 000 000 000 000 000 bytes).

Friday, June 22, 2012

Go Daddy identified as spammer

imageI never really did care for Go Daddy’s service and my research into the ton of email getting through our spam filter has got me upset with them even more.

The first thing that I hold against Go Daddy is the way they dupe people into registering a URL (web address). They will do it for you for a couple of bucks, but then THEY own it. It is your idea and your website, but they own the web address. Once they have it you can’t move it to a more secure environment or use one of the more dynamic programming languages because they own your ass.

Now they are allowing these spam pushers to register a quick URL and use their SMTP servers (send mail server) to process thousands (perhaps even hundreds of thousands) of spam emails.  The spammers are doing this for only a couple of bucks.

Even their own Forums board (link below) is pleading with them to stop this practice of allowing so many spam email mills to use their servers to push JUNK.

Go Daddy identified as spammer | Forums | Groups | Go Daddy Support

Sunday, June 10, 2012

Cold War Soldiers Get No Credit - Here's Proof



 I don't wish to take anything away from the men and woman who server our country today, but I thought I would take a moment and let everyone know that those of us who served during the "Cold War" era get little if any respect.

A prime example below is a benefit for education benefits that are a loan of $1,000 that you have to pay back.

So it isn't a grant, just a help someone may want to use to get that additional certification or a little training to get a job or perhaps a promotion. 

I qualify for the perk, but many I served with will not.

Lawmakers at the state and national level need to remember that the cold war era service men and women participated in the nuclear build-up in Europe, were held hostage in Iran, helped search for Pablo Escobar, stood guard at the DMZ in Korea, got shot at by the Red Guard in Germany, the list goes on and on.

The fact that there were not out-right hostilities or a declaration of war passed by congress does not deplete the efforts of those who served between June 1975 and August 1990. 

Eligibility: Veteran must have served in the U.S. Armed Forces during one of the following periods: in Indochina between December 22, 1961 and May 7, 1975; served in the U.S. Armed Forces in the hostilities that occurred in the Persian Gulf from August 2, 1990, through September 10, 2001; served in the U.S. Armed Forces in the hostilities that occurred in the Persian Gulf from September 11, 2001, to the end of hostilities; served in the U.S. Armed Forces in the hostilities that occurred in Afghanistan from September 11, 2001, to the end of hostilities.

Lost cat, free puppy, yard sale, charity event


Each Pin Has A Story
Seems every neighborhood has one if not every street; that one pole that touches a multitude of lives.  Lost cat, free puppy, yard sale, charity event, if you need it known, you post it here.

Roofing nails, industrial staples, thumbtacks; seems everyone continues experimenting to determine the best system to use. It only has to be up a few days.

Vintage staples from generations back obtained the family pet only to be buried by the tack offering her offspring.

Every time I see one of these I ponder what stories each staple could tell.

Wednesday, June 6, 2012

Failure to Restrict URL Access

OWASP Logo
Back to web application security....

The Open Web Application Security Project (OWASP) places something called "Failure to Restrict URL Access" as the ninth item on their list of the ten most prevalent security problems on the Internet today.

What is meant by the phrase is some web applications allow individuals to change the address in the web browser to access pages (or screens) they otherwise should not be allowed to see.

For example, if your dentist has a website where by you can go look up when your last appointment was and schedule a new appointment there should be a way for him (or her) or someone on their staff to go look who has set-up appointments or mark some days no appointment will be scheduled because the doctor will be out.

Those screens should only be accessible by the individuals who are employed by the dentist, and perhaps only a select few of those.

The OWASP rates this as something that offers a 'moderate' security rating. A security auditor may fail your application for corporate use altogether if this is allowed.

Even if these "administrator only" screens are password protected just finding the log-in screen by manipulating the URL it is cause for failure.

What can you do to manage this?  Plenty.

First, make sure your application makes good use of session controls. As individuals are using your online application we don't necessarily need to know who they are, but that they are there and are using the application.

Next, make sure the only way the screen will display is if the viewer is coming from an authorized link. The very bottom of the main application screen may have "Site Admin Click Here". That link should carry some kind of dynamic variable (i.e. DayOfYear) that can be used to double check the referring URL and this dynamic variable. Both must be in place in order to see the admin log in.

One thing you may want to try is running your admin screens in a 100% IFRAME. If you do that then place the snippet below atop all your admin screens. If someone accesses the screen by changing their browser address directly to that screen they will be bumped back to the main application screen.

<script type='text/javascript'>
   if(top==self)
   this.location='../../default.htm'
</script>

So this is #9 of the OWSAP Top Ten list of security problems on the Internet. We can work together to get this moved off their list as begin to focus on other things.

Tuesday, June 5, 2012

For My Christian Friends

There are a ton of doves here on Long Island; so many that they keep me up at night.

Never-the-less; here are two pictures you can use for your emails and such.

Yes, these are my photographs.

If you need larger or ones you can put into publications please let me know.

Dove 01


Dove 02

wordballoon.com

this guy talks like he knew Asimov; no way.

wordballoon.com

Monday, June 4, 2012

Picture Of The Day

This is a bakery on the street where I live here on Long Island.

I think it turned out too good not to share.


Bakery - May 3, 2012



Sunday, June 3, 2012

Sunday Walk

Call Box
So I was able to get out with my camera this morning.

I took over 500 pictures, my theme (if there is such a thing) was 'everything'.

I made it to the parking lot of a local mall at around 8 a.m.  I wanted to see what the advantage was from the top of the parking garage which is about four stories above ground.

While I was up there I was able to get some fantastic pictures of a hawk that was making his home behind one of the signs.

From up there too I got some pictures of a water tower with my zoom lense that makes it look like I had used a helicopter or something because I'm almost exactly even with the big green thing.

Everything was going great until mall security cornered me and kicked me off the mall's 'private' property.

Oh well....  



Pink Rose
 

Friday, June 1, 2012

Weekend Outlook

APIR
Friday....  a long short week.

Meetings shuffled, international customers who don't celebrate the US holiday of  Memorial Day.

After playing catch-up and responding to the juggled agendas I'm looking forward to the weekend.

My plan was to get up tomorrow and play some more with my new camera. This time walking towards the nearby shopping mall called Rosevellt Field.

But the rain clouds have been gathering and 'they' (whoever they are) are calling for quite a bit of rain tonight through tomorrow morning.

Oh well, perhaps Sunday.

What do you have planned for the weekend?