2006/12/26

Another suspected NASA hacker indicted

By Joris Evers, CNET News.com
Published on ZDNet News: December 1, 2006, 9:10 AM PT

A Romanian man was indicted Thursday for allegedly breaking into more than 150 U.S. government computers.

The indictment charges Victor Faur, 26, of Arad, Romania, with leading a hacking group called the "WhiteHat Team," according to a statement from the U.S. Attorney’s Office in Los Angeles. The group allegedly hacked into the government systems because of their reputation as some of the most secure in the world.

"After hacking into and taking control of the government computers, Faur allegedly caused the compromised machines to display screens that flaunted the computer intrusion," the U.S. Attorney's Office said.

Faur is charged with conspiracy and nine counts of computer intrusion. If convicted of all counts, he faces up to 54 years in federal prison, the prosecutors said.

However, a trial isn't likely to happen soon. Faur is currently in Romania, where he was arrested and then released on bond on separate, Romanian charges, Assistant U.S. Attorney Brian Hoffstadt said in an interview.

"The next step for us is to seek extradition from the Romanian government," he said. There is an extradition treaty between the U.S. and Romania, but an extradition procedure can take up to two years. "It takes a long time," Hoffstadt said.

Computers that were compromised included machines at NASA's Jet Propulsion Laboratory and Goddard Space Flight Center, the Sandia National Laboratory, and the U.S. Naval Observatory, according to prosecutors.

The breached computers were used to collect and process data from spacecraft. Because of the break-ins, systems had to be rebuilt and scientists and engineers had to manually communicate with spacecraft, resulting in $1.36 million in losses for NASA and nearly $100,000 in losses for the Energy Department and the Navy, prosecutors said.

Several suspected NASA hackers have been dealing with law enforcement recently. In Sweden, a teen suspected of hacking into systems belonging to the U.S. military, NASA and networking giant Cisco Systems was charged recently. Earlier this year, London resident Gary McKinnon lost a crucial battle in his fight to avoid prosecution in the U.S.

No charges have been filed against any other suspected members of the WhiteHat Team, Hoffstadt said. "But the charges against Faur may not be the last charges," he said.

U.S. warns of possible al-Qaida financial cyberattack

Reuters
Published on ZDNet News: November 30, 2006, 6:55 PM PT

The U.S. government warned American private financial services on Thursday of an al-Qaida call for a cyberattack against online stock trading and banking Web sites beginning on Friday, a source said.

The source, a person familiar with the warning, said the Islamic militant group aimed to penetrate and destroy the databases of the U.S. financial sites. The Department of Homeland Security confirmed an alert had been distributed but said there was no reason to believe the threat was credible.

The U.S. Computer Emergency Readiness Team issued a "situational awareness report to industry stakeholders," said Homeland Security spokesman Russ Knocke. The warning said the threat called for attacks to begin Friday and run through the month of December in retaliation for the United States keeping terrorism suspects at the Guantanamo Bay naval base in Cuba.

"Denial of service is what it called for," said a Homeland Security official who spoke on condition of anonymity.

A person familiar with the warning said the threat came from a group calling itself "ANHIAR al-Dollar." The effort was related to al-Qaida and intended to avenge "Muslim brothers in the crusaders' Guantanamo prison camp," the source said.

Reaction in the financial community was muted, with markets showing little or no reaction.

New York Republican Rep. Peter King, chairman of the House of Representatives Committee on Homeland Security, said the report was "nothing to panic over, but it will be looked at very carefully."

Robert Albertson, chief investment strategist at Sandler O'Neill & Partners in New York, said it was unlikely al Qaeda members could do serious harm to financial Web sites.

"I'm not saying there aren't precautions to be taken, but I just can't fathom how there would be serious havoc," he added.

Brian Jenkins, a terrorism expert with the RAND Corp., said that such threats were not unusual.

"There is a regular stream of Jihadist exhortations to attack various targets," he said. "Financial organizations stay at a fairly high level of readiness anyway because of regular assaults."

A government source said regulators were being briefed on the warning.

Alleged NASA hacker loses extradition ruling

By Colin Barker, ZDNet (UK)
Published on ZDNet News: May 10, 2006, 5:27 AM PT

Accused hacker Gary McKinnon has lost a crucial battle in his fight to avoid prosecution in the United States after a British judge ordered his extradition to America.

Judge Nicholas Evans, sitting at Bow Street Magistrates' Court, ruled on Wednesday morning that McKinnon must face U.S. courts.

McKinnon, who lives in London, is accused of hacking into 53 U.S. government computers, including some used by NASA, and causing $700,000 worth of damage.

Evans rejected the defense arguments that McKinnon would not face a fair trial in the U.S. or that he risked being treated as a terrorist suspect.

The two countries "have had extradition arrangements in place for over 150 years. I have no reason to believe that McKinnon will not receive fair treatment," Evans said.

McKinnon was instructed that he must prepare himself to be flown to America on May 17. However, he is likely to appeal the decision.

The final decision on whether McKinnon should be sent to the U.S. for trial rests with Home Secretary John Reid.

McKinnon has admitted accessing U.S. government networks but denies causing any damage. He has claimed that he was looking for, and found, evidence of UFOs and secret military technology.

Speaking outside the court, McKinnon indicated he was not hopeful about his future.

"Virginia (where his case will be heard) is famously conservative. I am practically hung and quartered there already," he said.

Most security tools not quite ready for Vista

By Joris Evers, CNET News.com
Published on ZDNet News: November 30, 2006, 2:54 PM PT

Microsoft released Windows Vista for businesses on Thursday, but most security companies look like they need more time to deliver tools to protect the new operating system.

Symantec, Trend Micro and CA are still working on products for Vista, representatives for the each of the companies said Thursday. McAfee is the only major security software maker that has products available now for the long-awaited Microsoft operating system.

"The absence of security software from the major vendors will be another reason why business will not migrate to Vista right away," said Natalie Lambert, an analyst at Forrester Research. That's in addition to the lack of support for Vista in general applications, which are the tools businesses need to run their operations, she noted.

Microsoft celebrated the launch of Vista in New York on Thursday. It is the company's first major Windows client release since Windows XP shipped in 2001. On the back of Microsoft's announcement, Symantec, McAfee, Trend Micro and CA all put out news releases promoting software for Vista PCs. Yet none announced actual product availability, except McAfee.

"McAfee is the only major security vendor with products available today that support Vista right out of the gate," said Rees Johnson, McAfee's vice president of product management. McAfee VirusScan Enterprise 8.5 and McAfee AntiSpyware Enterprise 8.5 support Vista and are available now, the company said.

The other large security vendors plan to release their corporate products for Vista over the next months. Symantec plans to release an update to AntiVirus Corporate Edition by December 31; Trend Micro expects to have a new version of OfficeScan ready in the first half of 2007; and CA's new antivirus and antispyware is due out by early February.

"I really expect all vendors to have shipping solutions before the end of the first quarter," Lambert said. "But even then, Vista rollouts will be time-consuming." Forrester doesn't expect mass deployment of the new operating system until 2008, she said.

So, while lack of security tools for Vista could mean some people will hold off from upgrading right away, it is not a major issue for the majority of business users, Lambert said. "This is not a big deal, as we will not see enterprises switching to Vista immediately," she said.

Microsoft is more optimistic. The Redmond, Wash., company predicts that Vista will be adopted by companies at twice the speed as its predecessor, Windows XP. Twelve months after the release of Vista, Microsoft expects that usage share of the oft-delayed operating system in businesses will be double that of XP a year after it shipped, the company has said.

Microsoft has promoted Vista as the most secure version of Windows yet, but has also emphasized that users will still need to run security software to protect their PCs. For example, 3 of the top 10 types of malicious software that hit PC users today can bypass Vista's security defences, security company Sophos said on its Web site Thursday.

"Microsoft continues to encourage customers to follow all of the steps of the 'Protect Your PC' guidance of enabling a firewall, applying all software updates and installing antivirus software," a Microsoft representative said.

2006/12/22

Die, C, die! 5 reasons to UN-learn C

November 28th, 2006
Posted by Ed Burnette @ 12:01 am

I've been programming in C for over 20 years now. I've written C compilers, C debuggers, other languages, games, clients, servers, you name it. Dog-eared editions of K&R and Steele decorate my shelves. So I know C. And yet, I'm sick of it. SICK.

So it was with some trepidation that I read a blog on why every programmer should learn C. Turns out it's good for a laugh if you're a professional developer, though the author probably didn't intend it that way. This rebuttal makes a bit more sense, but still doesn't capture the essence of why C should go the way of the dodo. So let me turn it around. Here are 5 reasons why developers who know and use C now should not just use something else, but UN-learn all the bad things they learned in C.

1. Memory allocation. I could write a whole article just on this one. A book. Maybe a small wing of the library. Memory allocation and deallocation is the bane of my existence. Either you allocate too little and write off the end, or too much and waste it. Then there's the question of whether to zero it or leave it uninitialized. But freeing memory is the worst. Entire toolkits have been written to help you make sure you have freed every little bit you allocated, never use it after freeing, and God forbid, never free it twice. To add insult to injury, allocations and frees are slow in C, very slow. I don't want to even think about all the special cases I've had to put in to *avoid* memory allocation and use stack or pre-allocated structure space if the problem size fit. Well, I've got better things to worry about. Whoever invented garbage collection should win a Nobel.

2. Multi-threading. I used to like C, really. Until I started to develop and maintain multi-threaded servers with it. C doesn't help you at all with protecting data from access by conflicting threads. Every intuition you had from single-threaded days is wrong. At least Java has the synchronized keyword, and a documented (but weird) memory model, but even that falls apart on massively parallel machines unless you use the new javax.concurrent stuff. Flashback - in C: 1 week standing up (true story) in a data center debugging a deadlock problem in a simulated production environment. In Java: Ctrl+Break! Ahhh.

3. Pointers. Pointers are insidiously evil; there's just no polite way to say it. Months of my life are just gone from debugging problems with wild pointers. I used to go for all the tricks, such as incomprehensible casts and unions and offsetof and reusing the last couple of bits for flags, and all that. It's just not worth it. Statically typed references are your friend.

4. Premature optimization. Speaking of tricks, have you ever wasted any brain cells wondering if *p++ was faster than p[i]? Have you spent time trying to do shifts instead of multiplies, or reversing for loops to try and make them run faster? Agonized over the speed of passing parameters as opposed to filling in a structure and passing that? STOP IT! Algorithms are the key to speed, and developer productivity is the key to algorithms. Get the idea that you can make your program any better or faster with little tweaks out of your head. Yeah, there are a few cases where maybe… no, just don't go there.

5. Tests. What's your favorite C unit testing tool? Umm….. can't think of one? Unit testing must not be important then, right? Or too much trouble. Hard to keep up to date. Waste of time. You could spend that time shaving .001% off your execution time. Or debugging that problem that only occurs with 100 simultaneous users, in the data center, on an optimized image with no symbols.

I could go on, but 5 is enough for now; I feel better already. C was wonderful… in 1984. It amazes me that new code is being written in C, even today. C++ is only marginally better if you ask me. If you want to learn something old, try Forth, Lisp, or APL. At least those can teach you some different and elegant ways of thinking about programming.

2006/11/17

The truth about the IPv6 transition

Posted by George Ou @ 1:02 pm

Just about everyone in the IT business has heard the promises of IPv6. Why continue leasing Class A blocks to individual companies when most companies have to beg for a Class C block of 256 IP addresses?Many have read that IPv6 will solve everything from spam to security to saving the Internet. But has anyone read the fine print on what an IPv6 transition will encompass and what it actually buys? To understand where we are with the current Internet IP addressing scheme, let us start with a telephone system analogy.

Everyone knows that a telephone in North America has 10 decimal digits which theoretically supports 10 billion devices but in practice it's far less than that because of the way area codes are broken down. The reality is that there really aren't enough phone numbers to give every company and organization a large pool of phone numbers and those who have blocks of phone numbers pay for the privilege. As a result, many organizations don't have enough public phone numbers for every telephone in their organization so they use private phone extensions that are typically 3 to 5 digits long. This means that a single public phone number can translate to 100,000 (counting from 0 to 99,999) phones in the case of a 5 digit extension.

In the current world of IPv4 networking, the same kind of scarcity exists and many companies simply can't afford to buy large blocks of IP addresses nor are there enough IP addresses to go around. NAT (Network Address Translation) was created to allow a single public IP address to support hundreds or even thousands of private IP address. This is analogous to the private telephone extension scheme in the previous paragraph where a public phone address is translated to many private phone addresses.

But a lot of people don't like the use of NAT because they were initially hard to deal with just like a lot of people don't like the use of telephone extensions. NAT has a tendency to break things like VoIP (Voice over IP) and VPN (Virtual Private Networking) technology which lead to many headaches. But in recent years, VoIP and VPN technologies have matured and gotten smart enough to work around the intricacies of NAT. Technologies like Skype and STUN have fixed the NAT issues for VoIP. Technologies like NAT-T and SSLVPN have made VPN NAT issues a thing of the past. But many people still yearn for the day that NAT itself will be a thing of the past and IP addresses will be as abundant as the number of atoms in the oceans and the IPv6 address standard was created. IPv6 has four times the number of digits as IPv4 and has a pool size of 34 with 37 zeros behind it which is a massive number. But before we sing for joy, let's see what it takes to get to the promised land.

Let us imagine that telephone companies started offering a new telephone service that used a 40 decimal digit phone number which is practically limitless. You'll need brand new telephones for it and you'll need to replace all your phonebooks and personal address books. The catch is that you can't call any 10 digit telephones. If by chance you actually want to call any of the other billion people on the planet, you'll have to also set up and pay for a traditional 10 digit telephone number. Don't be surprised if the thickness of the phone book doubled since it now lists everyone's 40 and 10 digit telephone numbers. You will also need some extra equipment and some changes in your infrastructure to translate the new phone signals in to the old phone signals since the existing public phone infrastructure doesn't always support the new phone signals. That may slow performance down but it's probably a small price to pay for such a massive pool of phones, or is it?

This 40 digit telephone system is just an example I made up, but it's the perfect analogy to IPv6 and the nightmare of a transition some Governments are headed for. An IPv6 migration will involve upgrading all applications, hosts, routers, and DNS infrastructure. Anyone who moves to IPv6 will have to bear the burden of backward compatibility and the idea that those who move to IPv6 first will leave everyone behind is nonsense. Who in their right mind would move to a network without the ability to talk to the old network where the rest of the world lives? Any organization moving to IPv6 will also have to maintain a complete IPv4 infrastructure parallel to the new IPv6 infrastructure along with all the transitional technologies that make NAT issues look like a walk in the park.

What about the support issues? Has anyone checked what it's going to take to teach the helpdesk staff how to troubleshoot basic networking problems with a dual IPv4/IPv6 stack? Does the networking staff understand what 6to4, Teredo, and ISATAP is and how they work let alone the helpdesk? Anyone who has worked for the helpdesk knows what it's like to have to call out IP addresses to an end user on the phone. Has anyone ever tried to call out and explain 23DF:84FA:5423:3300:2341:CB3S:384A:042B over the phone to another engineer let alone an end user?

The primary benefit of going to IPv6 if we get past all the IPv6 hype is that it practically offers a limitless supply of IP addresses which leads some to think that the need for NAT would end. But is ending the use of NAT really that important? Many IPv4 companies with abundant supplies of IPv4 addresses at their disposal still choose to use NAT as a way of masking their internal network topology as a form of security so what is the business case for migrating to IPv6? IPv4 is kind of like prime real-estate where the short and simple IP addresses are and where everyone lives and it's not going away even if a majority of organizations have successfully transitioned to IPv6. Those who migrate to IPv6 will bear all the costs of upgrading and maintaining dual compatibility while those who do nothing and remain on IPv4 will bear none of the costs. If anything, waiting will only result in fewer application compatibility problems and cheaper/simpler transition technologies in the future.

If it ever gets to the point where IPv4 addresses are running low and address rationing starts, there is absolutely no reason that a company couldn't be perfectly happy with a block of 32 public IP addresses for the main site and a single public IP address for branch offices. Even something like www.google.com with tens of thousands of servers only needs a single public IP address per physical site with modern load balancer technologies.

Furthermore, do corporations like GE or Apple actually need 16.8 million public IP addresses just because they registered early when they don't use most of them publicly? Since IP address leases are worth a lot of money between 10 cents to a dollar per IP per year in smaller lease increments, companies hogging Class A (Class A = 16.8 million block of IPv4 addresses) leases could be compensated for the trouble of being forced off those blocks. Why continue leasing Class A blocks to individual companies when most companies have to beg for a Class C block of 256 IP addresses? If a company hogged 16.8 million IPv4 addresses, why not chop them down to 65 thousand IP addresses, offer them some shared revenue from the recovered IP addresses to pay for the transition costs to private IP address and call it even. Heck, we can even offer them a block of 4.3 billion IPv6 addresses as a bonus. Just get rid of Class A leases and we'll all be saying "what IPv4 shortage" 20 years from now.

2006/10/05

HP unveils printing technology for high-end office market

By Erica Ogg, CNET News.com

SAN FRANCISCO--Hewlett-Packard's newest ink-based printing technology, HP Edgeline, will be built into printers geared toward the high-end office market, the company announced Tuesday. The technology was first introduced last spring in in-store retail photo-printing kiosks.

"It's ink-based printing for huge-volume workloads," said Vyomesh Joshi, executive vice president of the HP Imaging and Printing Group, as he introduced the technology at a press conference in downtown San Francisco. The technology is aimed at companies that print hundreds of thousands or even millions of brochures or direct mailings.

HP will begin incorporating the patented technology into some business printers in spring 2007. Edgeline technology refers to HP printers constructed so that the print heads are laid in wide arrays, or side by side, to stretch across a whole page. Instead of the print heads moving and squirting ink onto a page like most inkjet printers, with Edgeline, the paper will move while the print heads remain stationary, and the job can be completed in just one or two passes.

"It's four times faster than anything we've done before," Gary Cutler, vice president of digital printing technologies at HP, said in an interview following the press event. And because the print heads are motionless, that amounts to more accurate ink placement and better image quality, he added.

Joshi said printers with Edgeline technology will also dispense smaller drops of ink at a rate of 1.8 billion per second. Previously, HP's best was in the "low hundreds of millions" of drops per second, according to Cutler.

The design is cheaper to build and more reliable because there are fewer moving parts, Hatem Mostafa, senior vice president of inkjet systems said in an interview.

Between now and 2009, there's about $30 billion worth of business in the retail, industrial and high-volume office printing markets that HP hopes to grab, Cutler said.

Google's Universal Gadgets woos developers

By Tom Espiner, Builder UK

Search giant Google has announced it is opening up its Gadgets framework to Web developers, allowing them to add Universal Gadgets to their pages.

Google Gadgets has been available to end users to add to their Google home pages and desktops since the May release of the Desktop 4 beta. Google announced on Tuesday that users will now be able to use Gadgets in their own Web pages.

Like many other widget frameworks, Google Gadgets use HTML, XML and JavaScript to create mini applications. These applets have typically accessed data from other Google services, such as Calendar or Maps, or from independent applets created by developers. The applications are promoted as an easy way to add dynamic content to Web pages.

Web page creators have been able to create their own Gadgets for some time using the Google Gadgets API, and can use pre-existing Universal Gadgets from Google or third parties--which include date and time, jokes and horoscopes--to add to their own sites.

Google is encouraging developers to share their code with others by publishing them in its Gadgets directory.

"Google encourages gadget authors to share their specifications," states the Google Gadgets API developer guide. One of the advantages to developers is that you "can get your name out there," according to Google blogger Matt Cutts.

"Now anyone can have a great-looking Web site with automatically updating content," said Adam Sah, Google Gadgets architect. "By making Google Gadgets available for you to add to your Web page, we're working to connect developers with enthusiastic consumers and to make information universally accessible and useful to the individual user."

The code for Gadgets is published as XML files on the Web, where Google's servers can access them and process the code. The XML file can contain all of the data and code for the gadget, or have a manifest of components that includes URLs for finding the rest of the elements. Gadgets are used by including some JavaScript in the developer's Web pages, and because they do need to pass through Google's systems, they can't be used offline or independently of the company.

Tom Espiner of Builder UK reported from London.

2006/09/26

Activists unveil stealth browser

By Matthew Broersma, ZDNet (UK)

Hacktivismo, a group of human-rights advocates and computer security experts, has released a Firefox-based browser designed to allow anonymous Web surfing.

The Web browser, called "Torpark," is a modified version of Portable Firefox. Released last week, it can be run directly from a USB drive, meaning it can be used on public terminals in cybercafes. It creates an encrypted connection to the TOR (The Onion Router) network, which supplies a succession of different IP addresses.

"Torpark causes the IP address seen by the Web site to change every few minutes, to frustrate eavesdropping and mask the requesting source," Hacktivismo said in a statement.

For example, a user could be in London and Web sites would see an IP address from a university in Germany, or other addresses belonging to the TOR network.

Hacktivismo operates under the aegis of the influential group the Cult of the Dead Cow. Developers said the browser is different from other anonymous browsers, such as Anonymizer or SecretSurfer, in that it doesn't cost anything and is small and portable.

Torpark uses English by default, but includes language packs for Arabic, German, French and simplified Chinese. More than 30 other language packs are available via links built into the browser, which is available here.

The Torpark site was available intermittently this week, because of heavy download traffic, developers said.

The browser encrypts data sent to the TOR network, but data isn't encrypted between TOR and the destination Web site, Hacktivismo cautioned. "Therefore, the user should not use his or her user name or password on Web sites that do not offer a secure login and session," the group stated.

The browser session is somewhat slower than with an unmodified browser, testers have reported. The browser resembles Firefox, but displays the IP address being used at the time, and includes a button for resetting the server connection.

The official launch follows more than a year of development work on Torpark. A sister application called Torbird is also available; it uses the TOR network for e-mail.

Matthew Broersma reported for ZDNet UK from London.

Taking passwords to the grave

By Elinor Mills, CNET News.com

William Talcott, a prominent San Francisco poet with dual Irish citizenship, had fans all over the world. But when he died in June of bone marrow cancer, his daughter couldn't notify most of his contacts because his e-mail account--and the online address book he used--was locked up.

Talcott, 69, a friend of beatnik Neal Cassady, apparently took his password to the grave.

It's a vexing, and increasingly common problem for families mourning the loss of loved ones. As more and more people move their lives, address books, calendars, financial information, online, they are taking a risk that some information formerly filed away in folders and desks might never be recovered. That is, unless they share their passwords, which poses security threats.

"He did not keep a hard copy address book. I think everything was online," said Talcott's daughter, Julie Talcott-Fuller. "There were people he knew that I haven't been able to contact. It's been very hard."

"Yahoo (his e-mail provider) said it wouldn't give out the information due to privacy laws, but my dad is dead so I don't understand that," she said.

But it's not a question of privacy rights so much as property rights, said Marc Rotenberg, executive director of the Electronic Privacy Information Center.

"The so-called 'Tort of Privacy' expires upon death, but property interests don't," he said. "Private e-mails are a new category. It's not immediately clear how to treat them, but it's a form of digital property."

Attorneys advising clients on estate planning should ask them to determine who they want to have access to their computers when they die, Rotenberg said.

That's exactly what San Francisco-based estate planning attorney Michael Blacksburg does. "I advise clients to put all their passwords to things online in an estate planning document," he said.

Blacksburg also asks his clients what they want to have happen with their electronic media, like music in iTunes and photos in Shutterfly.

"The older generation is just getting in the habit of using computers," Blacksburg said. This problem will become more acute in coming years as more and more people become computer savvy, he added.

The situation poses a dilemma for e-mail providers that are pilloried by privacy rights advocates at the mere suggestion of sensitive data being exposed, at the same time they are expected to hand over the digital keys to family members when a customer dies.

Last year, Yahoo was forced to provide access to the e-mail of a U.S. Marine killed in Iraq to his father, who got a court order in the matter.

"The commitment we've made to every person who signs up for a Yahoo Mail account is to treat their e-mail as a private communication and to treat the content of their messages as confidential," said Yahoo spokeswoman Karen Mahon.

Beyond acknowledging that Yahoo complies with court orders, Mahon declined to discuss Yahoo's requirements for providing family members access to the e-mail accounts of their deceased loved ones.

Google will provide access to a deceased Gmail user's account if the person seeking it provides a copy of the death certificate and a copy of a document giving the person power of attorney over the e-mail account, said a Google spokeswoman.

America Online follows the same policy, according to spokesman Andrew Weinstein.

"In terms of tips for estate planning, it's much easier if a family member already has the password, or a person could entrust their key passwords (for online access/banking/stock accounts, etc.) to a trusted friend or attorney," Weinstein wrote in an e-mail. He said the situation comes up "fairly regularly."

And "Microsoft's policy allows next of kin to gain access to the content of the Windows Live Mail account (burned on CD/floppy disk) of the deceased upon proving their relationship," a Microsoft spokesman wrote in an e-mail. "We have tried to institute a policy that is very focused on privacy, but at the same time honors the request of bereaved family members going through a difficult time."

Talcott didn't leave a will, unless it is stored on his computer somewhere, so his family is still working out who will be his executor, his daughter said. Once that is established, Talcott-Fuller said she will approach Yahoo again for access to his e-mails.

However, an electronic will is not necessarily valid, according to Ronald Cooley, an estate planning attorney in the retirement enclave of Sun City, Ariz.

"A will in a computer is no good. It has to be printed out, signed and witnessed" to be valid in California and Arizona, Cooley said. "You can't leave it in a Word document on your computer."

Although his password remains a mystery, Talcott, who worked as a mainframe programmer when he wasn't traveling around Europe, acknowledged the importance of data retention for posterity in a poem titled "Eating Salad With My Fingers:"

"Our office romance is over because I am no longer employed," Talcott wrote. "Where is our offsite backup tape?"

2006/09/22

Who is killing desktop Linux?

C. Marc Wagner

Services Development Specialist, Indiana University "An education IT veteran"

Last week my colleague, Chris Dawson, wrote Will Vista kill Linux for Ed Tech? and he did a really nice job of it. Of course, he wasn't talking about Linux as an OS, or as a subject of serious study or utility. What Chris was referring to was Linux as a desktop computing environment geared toward personal productivity. Chris reminds us:

Indiana claims to be saving about 1 million dollars by rolling out Linux at 25 high schools (see Million Dollar Linux), but we have yet to see any information on end user experiences, long-term support and training issues, and, most importantly, total cost of ownership.

And then Chris shares his own experience:

I even gave Linux a shot, attempting to save Windows licensing costs on a bunch of donated computers, but ran into enough hurdles that $70/machine (roughly what we're paying per seat for XP pro) seemed a small price to pay for easy network integration and minimal training for students and teachers (see Back to Windows?).

I've long preached that life-cycle funding is a critical component of any IT infrastructure and each new project needs to be developed with TCO (total cost of ownership) in mind.

Before I go any further, it's worth noting that things are different in higher education. We still face the challenges of limited funding but projects are more compartmentalized — and are usually amortized over a three-to-five year time horizon. Nothing is open-ended and budgets are not built upon one-time funding. Instead, one-time funding is used to establish projects which are then provided a budget for ongoing 'care and feeding'.

Despite the opinion of many readers, in such an environment purchasing decisions are not based on "inertia" — each new project has its own set of requirements. Most of those project requirements can be performed equally well by UNIX, Linux, or Windows. Some require Windows interoperability but many don't. The deciding factor is most often total cost of ownership.

Given these facts, why isn't desktop Linux a serious contender? And don't tell me it is…

At my university, my group is by far the largest single provider of student computing workstations. Of those workstations that we own or support, 3000 are running Windows, maybe 450 are running MacOSX, another 50 or so are running some (other) flavor of UNIX/Linux. That's 14 percent non-Windows.

These numbers have certainly changed over time — based upon shifting demand from our students and our faculty, but the shift has always been away from Macintosh — and especially from UNIX/Linux as more and more applications have been ported to Windows. (At one time we were maybe 40% non-Windows.)

Admittedly, we are one of the smaller providers of UNIX/Linux workstations at the university but the total number of such workstations on campus is in the hundreds while the total number of Windows workstations most certainly exceeds 10,000!

So why ISN'T desktop Linux a serious contender?

The answer to this question may be less clear in the consumer space than it is in education since the vast majority of consumers are interested only in e-mail, surfing the web, word processing, and spreadsheets — and we all know that Linux can do all these things for absolutely no cost. Right?

Well, not quite …

While one can download and install Linux and OpenOffice for free, you need to know HOW to do that. Few consumers are daring enough to do any thing more than stick a CD in a drive click OK when asked in order to install new software.

Unless you have the bandwidth and the patience to download hundreds of megabytes of data and the knowledge to burn bootable CDs, a copy of Linux will cost you $60. Granted, that's for a feature-rich release of Linspire (http://linspire.com/) and includes an office suite but Linux is NOT 'free' unless you have the knowledge and the patience to install it from scratch. Very few consumers are even willing to do that with Windows.

What about availability?

Today, the consumer can walk into almost any retailer selling electronics and buy a computer with Windows (and usually MS Office) pre-installed — no muss, no fuss. Finding an Apple retailer is much more of a challenge but at least the consumer knows about Apple and can find a retailer if they are looking. How easy is it to find a Linux workstation retailer?

To be sure, you can find a handful of mostly-unheard-of computer vendors selling entry-level systems running Linspire but what about SuSe or RedHat? They've got great software but where are their Linux desktop hardware offerings? Sure, Dell sells RedHat servers and the big guys like IBM and Sun will sell you Linux desktops if you ask for them but that doesn't cut it for the consumer.

Enter Ed tech …

As Chris has alluded to, his time is worth more to him (and his employer, the school district) than the cost savings of him downloading a free (and unsupported) Linux distribution — making it work on a variety of, often outdated, hardware, and then distributing it across multiple machines with varying configurations.

Window's ability to detect most major brands of hardware, and the willingness of most major component makers to provide Windows drivers greatly simplifies his job of installing Windows on as many machines as he wants.

And what about specialized software? In an educational setting (as in a business or industrial setting), dependence upon specific applications software plays a large role in the TCO equation. If introducing a new OS (or supporting multiple operating systems side-by-side), one must assess the costs associated with cross-platform compatibility. Most specialized software is available for both Windows and Macintosh — and many UNIX/Linux titles are easily ported (by vendors) to Windows (and now Macintosh) but the transition from Windows (or Macintosh) to UNIX/Linux is far less straightforward.

So who is killing desktop Linux?

The answer is clear. It's the Linux vendors who are 'killing desktop Linux' — or more accurately, letting the Linux desktop die a slow agonizing death.

Some would argue that Microsoft is keeping Linux off the desktop but how could Microsoft possibly stop IBM or Sun Microsystems, Novell or RedHat from making Linux on the Desktop as easy to buy from Dell or HP as Microsoft Windows? They simply couldn't!

HP even certifies it's hardware on a number of Linux distributions but do they sell hardware with Linux pre-loaded? Not that I can find!

Microsoft gained market dominance by offering Windows preloaded on every commodity OEM workstation it could from 1987 forward. (It all started with Windows 2.11 on the IBM PS/2 line of workstations.)

Today, Windows is competing for the lucrative machine-room market. UNIX is fighting on two fronts to keep both Windows and Linux at bay. In this environment, where TCO rules, the competition is fierce. So why not on the desktop?

It's not because Windows is technically superior to the UNIX/Linux. It isn't!

It's simpler than that. The bottom line is that there is not enough profit margin in the commodity desktop market for any of the front line Linux vendors to pursue it. Instead, the big UNIX/Linux vendors have decided to concede the commodity desktop to Windows. (Just as Apple conceded that market to Microsoft in the 1990's.)

The lone exception is Linspire, a small company who has done remarkably well in developing a consumer-oriented product and made it easily available on-line. But once again, Linspire suffers from not having a first-tier OEM hawking Linspire workstations. Even Novell, who has gone out of its way to position NLD and SuSe LED as desktop Linux solutions has done little to market them.

No matter what the Linux aficionados (some call them zealots) might want, until desktop Linux is available pre-loaded on a variety of workstations at [insert your favorite electronics retailer here], Linux is not going to found on many of our dining room tables or in many of our schools.

Sun Fire X4500, world's first hybrid data server


Meet the world's first hybrid data server.

Creating a new compute category, the Sun Fire X4500 Server includes integrated server and storage technologies and is being called the best server for Web 2.0, the next wave of the Internet. The Sun Fire X4500 Server is one of three new enterprise systems Sun introduced on July 11.

Web 2.0 encompasses a second generation of online services built on wide-scale sharing and participation. At Sun's product announcement last week, Tim O'Reilly, president and CEO of O'Reilly Media, Inc., described Web 2.0 as "systems that get smarter the more people use them."

O'Reilly calls Google the prototypical Web 2.0 service, but notes that the company "did it the hard way - they have kind of rolled their own." Many companies now emulate the Google model, yet they "don't want to roll their own, or grow [their infrastructure] from the ground up."

That's where the Sun Fire X4500 Server makes such a difference. "This is the Web 2.0 server," says O'Reilly. "[The Sun Fire X4500 Server] doesn't quite fit into any existing category, and I really think it's the category of the future. Now companies can get hardware like this and build next-generation applications."

"Sun is clearly not just in the x64 space," says Jonathan Eunice, one of the founders of industry analyst firm RedMonk. "It is innovating there--and with gusto."


Scott Yara, CEO, Greenplum and Tim O'Reilly, CEO and Founder, O'Reilly Media, Inc. - Watch the Video

Hybrid Server, High Performance

The Sun Fire X4500 Server (code-named Thumper) brings together state-of-the-art server and storage technologies in a single box to deliver high-performance I/O. The server combines a four-way x64 server with up to 48 disk drives and 24TB of storage. Those specs yield a storage cost starting as low as $2/GB.

And because the Sun Fire X4500 Server comes bundled with Solaris ZFS, you can count on data integrity across very large datasets. "One of the most exciting things to see is companies joining massively parallel databases," says Andy Bechtolsheim, Sun chief architect and designer of the Sun Fire X4500 Server. "This new machine has a cost-performance that people could only dream about until now."

Those efficiencies are far-reaching, according to Ian Dwyer, Oracle's Senior Director of Global Alliances. Dwyer sees the launch of the Sun Fire X4500 Server as a real-estate announcement, not simply a hardware announcement: "You don't have to acquire new data centers to use this latest high-performance technology. Likewise, you're seeing greater energy efficiency, thereby reducing costs."

"Beautiful Machine"

When the Tokyo Institute of Technology set out to build one of the world's fastest supercomputers, it turned to Sun. Professor Satoshi Matsuoka, the Institute's Head of Research Infrastructure, led the project, and he spoke at last week's product announcements to tell the story of the supercomputer.

Getting to the desired level of performance required the compute grid be fed an astonishing amount of data. To store that data, and make it accessible at the speed needed by an HPC environment, the Institute's grid relies on Sun Fire X4500 servers.

The supercomputer operates at a capacity of 85 trillion floating point operations per second, or teraflops, making it the seventh-fastest supercomputer in the world.

"It's such a beautiful machine," says Matsuoka.

Systems Innovation

For Hector Ruiz, chairman and CEO of AMD, the Sun Fire X4500 Server is impressive: "This new class of products, a server and storage hybrid, will dramatically change how people address and solve their problems. I'm sort of in awe by the tremendous work Sun's engineering team has done and very proud that AMD x64 [processors] are a part of it."

Sun innovation extends to every level of a system. "When we develop a system, we look at every possible way we can attack customer problems because we have the breadth and depth of R&D to do that," said Sun CEO Jonathan Schwartz at the launch of the Sun Fire X4500 Server. "These systems are true innovations, and they give customers what they are looking for."

Adding VoIP to your legacy networks

Speaker: Jennifer Stafford, voice engineer, CNET

Description: If you think switching to VoIP means ripping out your traditional phone network, think again. CNET's Jennifer Stafford shows how a few simple steps can make the transition less daunting.


Hi, I'm Jennifer Stafford and I'm a Voice Engineer here at CNET Networks. I'm here today to talk to you about adding voiceover IP to your legacy network. So most companies have spent a good deal of money on their existing PBX and voicemail infrastructure. Generally they don't want to just tear that out in the interest of trying something new. So we're going to show you how you can introduce VoIP a little at a time to your legacy network.

In the traditional model you have a PBX connected to a separate voicemail system and generally you would connect your remote office using the public switch telephone network or telephone companies. And this calling generally has a permanent cost associated with it.

So before I show you how to add VoIP to your legacy network, let's define a few terms. The call control is really the set-up and tear-down or beginning and end of each call and monitoring readiness of each line. The gatekeeper is really a table or list of numbers and information responsible for knowing where each line in the system and each extension lives relative to each other.

The gateway is really just a piece of equipment, a switch usually that's used to join your legacy equipment to the IP network. So let's put this into action. We'll start by installing a gateway at headquarters. We'll connect it with perhaps a T1 or perhaps even just a cable. We'll install another gateway here at the remote office. And between them, connect them with our IP network or WAN.

The great thing about this, fixed cost compared to the recurring charges. So no per-minute charges for your phone calls here. The functions of the call control and the gatekeeper, which are basically software, live here next to the gateway and enable us to connect IP phones connected on our LAN and over the VPN we can extend the same high quality phone service to the user at home. Same service as the user in the headquarters office and remote office.

So as you can see, with a little bit of equipment and software you're able to add voiceover IP to your legacy network without ripping out the guts of the system.

Web Office will be much different than Microsoft Office

Posted by Richard MacManus @ 7:24 pm

There's been a lot of talk about the pros and cons of a web-based office lately, prompted by Nick Carr's excellent post entitled Office generations. In it he suggested the following timeline for office software:

Office 1.0 (1980s): a set of discrete and often incompatible applications for word processing, spreadsheets, presentation creation, and simple database management. Archetype: Lotus 1-2-3.

Office 2.0 (1990 - present): integrated suites of PPAs, with expanded, if still limited, collaboration capabilities. Archetype: Microsoft Office.

Office 3.0 (present - early 2010s): hybrid desktop/web suites incorporating internet-based tools and interfaces to facilitate collaboration and web publishing.

Office 4.0 (c. early 2010s): fully web-based suites.

I was at first quite surprised that Nick Carr thinks a fully Web-based office suite will be common place by the early 2010s. The key point about the current and near future generation of office software is that Web technology is driving the change I had kind of pinned him as a 'Web/desktop hybrid' guy - but no, he's convinced (like me) that the office suite will be fully web-based in 5 or so years. Of course I've been banging on about Web Office for some time on this blog. Indeed my most popular post ever here was a September 2005 piece entitled The Web-based Office will have its day. Although I have learned much more about Web Office apps since I wrote it a year ago, I stand by the main message from that post:

"The time for the web-based office will come, mark my words. When broadband is ubiquitous, web functionality is richer, issues of security and reliability have been put to rest, and most importantly of all - when Corporates are ready to make the jump. It may be 5-10 years down the track, it may be longer."

So I generally agree with Nick Carr's timeline of a Web Office suite being commonplace by early 2010s. I don't think it's worthwhile arguing over version numbers (Office 2.0, 4.0, etc), as some commenters have done. The key point about the current and near future generation of office software is that Web technology is driving the change.

On that point, it's important to remember that with new technology comes new functionality. A term I use for this is 'Web native', meaning that the next generation of office software will not necessarily be the same as the past PC-based generation (typified by Microsoft Office). The new generation will have Web native functionality - including, but not limited to, collaboration. Rod Boothby likes to say that blogs and wikis are the first major 'office 2.0' apps, but I think a web-based suite will be so much more than publishing and collaboration features.

One new feature that I think will be common place is 'mashups', whereby data is sourced and combined from a variety of internal and external sources. Imagine an online spreadsheet for a marketing report where you gather data from all over the Web and across internal business units too.

There will be other Web native functionality too, things that we can't yet predict. On this point I liked Michael Bernstein's comment on the Bb Gun blog:

"The main problem that most of these 'Office 2.0' apps have is that they are ‘Horseless Carriages’, still pretending to be something they’re not, rather than Automobiles. […] a new breed of productivity apps that bear as little resemblance to desktop PC productivity apps as VisiCalc did to minicomputer apps will arrive soon enough and surprise us all."

We're beginning to see those kinds of apps appear on the scene - Zimbra is not a traditional office suite, even though they recently added word processing and spreadsheets. Their main strength is as a messaging collaboration system, for example the ability to do all kinds of mashups inside email (integrating salesforce data, Fedex tracking numbers, yahoo maps, etc). I'm also keeping my eye on fledgling startups such as DabbleDB and Morfik, which are creating totally new types of web-based office functionality.

Web Office specialists such as Zoho and ThinkFree are also building up a lot of expertise in web-based office systems, which will over time result in new functionality. Plus as Dan Farber pointed out, Microsoft is well aware of these trends and is working to web-enable its office products (Office Live is just the beginning of that process, I believe).

The Web Office will happen and probably in the early 2010s, as Nick Carr predicts. It's still too early to tell what form the Web Office will take, but one thing I know is that it will be something very different to Microsoft Office.

2006/09/18

The 100 Best Products of 2005

The Editors of PC World

All Products Listed by Ranking

  1. Mozilla Firefox Web Browser
  2. Google Gmail Web Mail
  3. Apple Mac OS X Version 10.4 (Tiger) Operating System
  4. Belkin Wireless Pre-N Router and Notebook Network Card Wireless Networking
  5. Dell Ultrasharp 2405FPW 24-Inch Wide-Screen LCD
  6. Alienware Aurora 5500 Performance PC
  7. Seagate USB 2.0 Pocket Drive Portable Hard Drive
  8. Skype VoIP Service
  9. Canon EOS Digital Rebel XT Digital SLR Camera
  10. PalmOne Treo 650 PDA Phone
  11. Zone Labs ZoneAlarm Antivirus Antivirus and Firewall Software
  12. Mysoft Technology Maxthon Browser Plug-In
  13. Rio Carbon Midcapacity MP3 Player
  14. Webroot Window Washer 5.5 Utility
  15. Maxtor H01R300 Shared Storage Drive Network Hard Drive
  16. Google Search Engine
  17. Netgear 54 Mbps Cable/DSL Wireless Travel Router Model WGR101 Travel Router
  18. OnlyMyEmail Pro Spam Filter
  19. Sony PlayStation Portable Handheld Gaming Device
  20. NVidia GeForce 6600 GT Graphics Board
  21. APC Back-UPS RS 800VA 120V Uninterruptible Power Supply
  22. 2BrightSparks SyncBackSE Utility
  23. Moon Software Password Agent Password Manager
  24. HP Officejet 7210 All-in-One Multifunction Printer
  25. Winternals Software ERD Commander Data Recovery Software
  26. Ubuntu Linux 5.04 Linux Distribution
  27. Epson PictureMate Photo Printer
  28. Mozilla Thunderbird E-Mail Program
  29. Cloudmark Anti-Fraud Toolbar Browser Security Plug-In
  30. Vonage VoIP Service
  31. Cloudmark SafetyBar Spam Filter
  32. Adobe Photoshop CS2 Image Editor
  33. The New York Times on the Web Web Site
  34. Apple ITunes Media Player
  35. Seagate USB/FireWire Hard Drive External Hard Drive
  36. Canon CanoScan 9950F Scanner
  37. IRiver IFP-895 Flash-Based MP3 Player
  38. Valve Half-Life 2 PC Game
  39. Samsung HL-P5063W Rear-Projection TV
  40. Tor Privacy Software
  41. LG Flatron L1981Q 19-Inch LCD
  42. Dell 3000cn Color Laser Printer
  43. BlackBerry 7100t PDA Phone
  44. Verbatim Store 'n' Go Pro USB Memory Key
  45. Seagate Barracuda 7200.8 SATA NCQ Internal Hard Drive
  46. Compaq Presario V2000 All-Purpose Notebook
  47. Microsoft Windows Media Player 10 Media Player
  48. Canon Pixma IP4000R Inkjet/Photo Printer
  49. Best Software Simply Accounting Accounting and Personal Finance
  50. Orb Media Streaming Service
  51. Flickr.com Photography Site
  52. Dell Inspiron 6000 Desktop Replacement Notebook
  53. DirecTV HD DVR HR10-250 HD Receiver and DVR
  54. ACD Systems ACDSee 7 Photo Organizer
  55. Dell UltraSharp 1704FPV 17-Inch LCD
  56. Olympus C-8080 Wide Zoom Digital Camera
  57. Qnext Instant Messenger
  58. IBM ThinkCentre A51p All-Purpose PC
  59. SightSpeed Video Instant Messenger
  60. Wikipedia Online Resource
  61. Cerulean Studios Trillian 3.1 Instant Messenger
  62. CMS 80GB USB 2.0 ABSplus Notebook Backup System Portable Hard Drive
  63. Nikon Coolpix 7900 Digital Camera
  64. Contour Design RollerMouse Pro Mouse
  65. Adobe InDesign CS2 Desktop Publisher
  66. Shuttle Computer XPC i8600b Small PC
  67. IBM ThinkPad X41 Ultraportable Notebook
  68. Adobe Premiere Elements Video Editor
  69. Dell Axim X30 PDA
  70. A9.com Search Engine
  71. Toshiba RS-TX20 Digital Media Server DVD Recorder
  72. Roxio Easy Media Creator 7.5 Burning Software
  73. Plextor PX-716UF Rewritable DVD Drive
  74. Casio Exilim EX-Z750 Digital Camera
  75. Apple Mac Mini Small PC
  76. Google Desktop Search Desktop Search Tool
  77. Mitsubishi LT-3050 30-Inch LCD TV
  78. Apple IPod Photo Large-Capacity MP3 Player
  79. Dell 3300MP Projector
  80. FileMaker Pro 7 Database
  81. Sunbelt Software CounterSpy Anti-Spyware Software
  82. Six Apart TypePad Blogging Tool
  83. Acronis True Image 8 Backup Software
  84. Asus A8N-SLI Deluxe Motherboard
  85. Brother HL-5140 Monochrome Laser Printer
  86. Apple ITunes Music Store Music Downloads
  87. Internet Archive (Archive.org) Web Site
  88. Opera 8 Web Browser
  89. Copernic Desktop Search Desktop Search Software
  90. Motorola Razr V3 Cell Phone
  91. Delphi MyFi Satellite Radio
  92. PDAapps VeriChat Standard Edition Mobile Instant Messaging
  93. Sonos Digital Music System Streaming Media Device
  94. EMC Dantz Retrospect Professional 7 Backup Software
  95. Garmin StreetPilot C330 GPS Navigation Device
  96. Klipsch ProMedia Ultra 2.0 Portable Speakers
  97. Logitech Z-5500 Digital PC Speaker System
  98. Antec P160 Desktop Case
  99. Corel Painter IX Paint Program
  100. Citrix Online GoToMyPC Personal Remote Access

SE W950i, Ponsel Walkman dengan Touch Screen


Dewi Widya Ningrum - detikInet
W950i (ist)

Jakarta, Sony Ericsson mengumumkan peluncuran ponsel terbarunya, W950i yang dilengkapi fasilitas UMTS (3G), memiliki kapasitas penyimpanan sebesar 4GB dengan fasilitas touch screen (layar sentuh). Tidak hanya mendengarkan musik, W950i juga bisa untuk mendukung aktifitas ber-email dan browsing situs.

"Sony Ericsson W950i adalah ponsel walkman ke-6 yang telah diperkenalkan sejak pertama kali. Perilaku konsumen dalam mendengarkan musik pada ponsel semakin berkembang pesat," ujar Alino Sugianto, Country Manager Sony Ericsson Indonesia melalui keterangan tertulis yang diterima detikINET, Minggu (17/9/2006).

Berbasiskan Symbian v9.1, W950i diklaim memiliki kemampuan dan kualitas suara yang selaras dengan alat stand alone. Grafik antarmukanya diharapkan dapat memudahkan pemutarkan lagu dengan menggunakan stylus dan touch screen. Kualitas suara stereo juga dihasilkan pada ponsel W950i didukung dengan Bluetooth streaming. (dwn)(dwn/)

Selamat Ulang Tahun Harddisk!

Usia Ke-50
Selamat Ulang Tahun Harddisk!
Oktoria Yulius Darmawan - detikInet
RAMAC (Wikipedia.org)

California, Kemarin tepatnya tanggal 13 September, usia harddisk telah mencapai 50 tahun. Untuk merayakan hal ini IBM dan Hitachi memamerkan produk-produknya pada Computer History Museum di Mountain View, California.

Pada 1956 silam, untuk yang pertama kalinya IBM memperkenalkan hard disk magnetik IBM 305 Random Access Method of Accounting and Control (RAMAC).

Keluarnya harddisk ini menandai berakhirnya era punch card dan magnetic drum sebagai media penyimpanan utama.

Kapasitas penyimpanan RAMAC saat itu hanya sebesar 5 MB dengan jumlah piringan mencapai 50 buah, dimana masing-masing piringan berdiameter 24 inci. Ukuran perangkat ini sendiri kira-kira bisa disamakan dengan dua kali ukuran kulkas besar dengan berat beberapa ton.

Menurut Wakil Presiden IBM divisi Storage Portfolio Management mengatakan, harga produk tersebut diperkirakan mencapai US$ 50 ribu (US$ 1 = Rp Sumber: detik.com) pada saat itu. Saat ini ukuran kapasitas penyimpanan telah meningkat hingga 70 juta kali lipat, dengan ukuran yang semakin mengecil.

Saat ini Seagate Technology sendiri telah mengeluarkan harddisk berkapasitas 750 GB atau sekitar 3/4 Terabyte.

Dengan kapasitas besar, penggunanya diklaim mampu menyimpan data-data yang luar biasa banyaknya. Seagate mencontohkan, harddisk ini mampu menyimpan 15.000 lagu, 15,000 foto, 50 jam film, 50 game komputer, serta 25 film DVD dengan masih menyisakan tempat sebesar 300 GB untuk menyimpan data-data komputer lain. Demikian dikutip detikINET dari Vnunet, Kamis (14/9/2006).
(oyd/)

2006/09/14

Intel server revamp to follow AMD

By Stephen Shankland, CNET News.com

Intel is getting ready to introduce a chip communications technology that mirrors an approach central to recent successes of rival Advanced Micro Devices.

If Intel's newly competitive chips recently brought to market act as the brains of a server, then the Common System Interface (CSI) is its nervous system. The technology, set for release in 2008, provides a new way for processors to communicate with each other and with the rest of a computer.

And alongside CSI, Intel plans to release an integrated memory controller, which is housed on the main processor rather than on a separate supporting chip. This will speed memory performance and so dovetail with the new communications system, the company expects.

Together, they could help Intel provide a much-needed counterpunch to AMD, which in 2003 introduced an integrated memory controller and a high-speed interconnect called HyperTransport in its Opteron and Athlon 64 processors. The two communication technologies, marketed together as "Direct Connect Architecture," deliver lower processor costs and chip performance advantages, which AMD has used to win a place in the designs of all of the big four server makers.

"Intel is hoping CSI will do for them in servers what 'CSI' did for CBS in ratings," said Insight 64 analyst Nathan Brookwood, referring to the hit TV series "CSI: Crime Scene Investigation."

Intel has been tight-lipped about CSI. However, Tom Kilroy, general manager of the company's Digital Enterprise Group, did confirm some details in a recent CNET News.com interview. Further glimpses have come from server makers, who are eager for CSI's debut in the "Tukwila" Itanium chip, due in 2008.

Tracking CSI
CSI brings two major changes. First, it will boost processor performance compared with Intel's current chip communication technology, the front-side bus.

"From a pure performance perspective, when we get to Tukwila and CSI, and we actually get some of the benefits of that protocol introduced into our systems, I think it's going to be really a big deal," said Rich Marcello, general manager of HP's Business Critical Server group.

CSI will be instrumental in helping double the performance of the Tukwila generation of servers, he noted.

Second, CSI will help Itanium server designers take advantage of mainstream Xeon server technology. Both chip families will use the interface, Kilroy said. That's particularly useful for companies such as Unisys, whose servers can use both processor types. It will make it possible for elements of a design to be used in both kinds of machine, reducing development costs and speeding development times.

"CSI allows us to continue to consolidate and standardize on fewer technologies," said Mark Feverston, Unisys' director of enterprise servers. "We can now go to a more common platform that allows us to build the same solutions in a more economical fashion."

CSI hasn't been easy to bring to market, though. In 2005, Intel dramatically altered the schedule for its introduction. Initially, the plan was for it to debut in 2007 with the Tukwila Itanium processor and the high-end "Whitefield" Xeon. But in October, Intel delayed Tukwila to 2008 and canceled Whitefield.

Whitefield's replacement "Tigerton," and a sequel called "Dunnington," both use the front-side bus for communications. That means CSI won't arrive in high-end Xeons until 2009.

In the meantime, Intel has used other methods to compete with AMD--speeding up the front-side bus and building in large amounts of cache memory, for example.

"We've taken a different road, but down the road we'll end up getting an integrated memory controller and CSI in our platform," Kilroy said. "It's just a matter of priority for us."

Why add CSI?
Memory communication speed is a major factor in computer design today. In particular, its increasing performance sluggishness compared with processors is causing problems. To compensate, computer designers have put special high-speed memory, called "cache," directly on the processor.

But in multiprocessor systems, cache poses a problem. If one processor changes a cache memory entry, but that change isn't reflected in the main memory, there's a risk that another processor might retrieve out-of-date information from that main memory. To keep caches synchronized--a requirement called "cache coherency"--processors must keep abreast of changes other processors make.

With Intel's current designs, an extra chip called the chipset coordinates such communications between processors via the front-side bus. In contrast, with HyperTransport and CSI, the processors communicate directly with each other.

Intel also relies on the chipset to help with the communication between chips and the main memory. But technology such as CSI makes it easier for processors to communicate directly with memory. That's because one processor can quickly retrieve data stored in memory connected to another chip.

"The biggest advantage CSI offers is performance and the fact that you basically get a direct connection between the processors. That results in reduced latency between the processors," said Craig Church, Unisys's director of server development. The integrated memory controllers, too, will reduce latency, or communication delays, when a chip is fetching data from its own memory, he added.

AMD has adopted the integrated memory controller in all its x86 chips, but it's not alone in endorsing the approach. IBM's Power and Sun Microsystems' UltraSparc, which compete with Intel's server line, have had integrated memory controllers for years.

With a chipset controlling memory instead of the main processor, "You basically have this middleman, and that introduces a significant amount of latency in the memory transaction," said Mercury Research analyst Dean McCarron.

An integrated memory controller not only lets main memory respond faster, it also allows cache sizes, and therefore chip-manufacturing expenses, to be reduced. Indeed, smaller cache sizes have helped AMD remain competitive with Intel, even though it's about a year behind in its transition to more advanced manufacturing with smaller circuitry elements.

Intel defends its decision to stick with the front-side bus as long as it has, arguing that the choice has given it flexibility in memory standards and that it's been able to compensate elsewhere to keep up with performance.

"Our competition had to go to an integrated memory controller because they can't get the same...amount of cache on a die as we can," Kilroy said. "And we've been able to scale the front-side bus far greater than ever thought. We're now at 1333MHz. The speculation was that we wouldn't be able to scale to that."

Lowering design barriers
CSI is designed to lower hardware barriers, making it less expensive for server makers to design servers using both chips. Indeed, the word "common" refers to the fact that Itanium and Xeon use the interface.

With CSI, a server could be designed to be totally "plug-compatible," meaning the chips would be interchangeable, Church said. "From a Unisys perspective, if a customer wants an Itanium system, we take an Itanium processor and plug it into our common platform. If they want Xeon, we plug a Xeon into our common platform," he said. "That essentially is the nirvana, and it is the goal."

Nevertheless, server makers are faced with some differences in CSI for Xeon and Itanium, Marcello said. "The CSI implementations are 95 percent the same, but there's a little bit of difference there. For that reason, we'll be close but not exactly the same," he said. However, they will be similar enough that some joint design work can be shared, he added.

Keeping up with the Joneses
Once Intel matches AMD's chip communication technologies, it will become a better competitor, Brookwood said.

"The big issue for Intel is moving from the front-side bus architecture to more of a distributed architecture," Brookwood said. "Once they get that in place and have workable schemes for managing cache coherency and memory access across processors, then they will be well-positioned to compete on almost any basis with what AMD has been doing. The Direct Connect architecture has been AMD's not-so-secret sauce for the last four years."

But AMD has plans of its own. In 2007, it will move to HyperTransport 3.0. The update increases communication speeds and enables construction of 16-processor servers instead of the eight-processor machines that HyperTransport currently permits, said Marty Seyer, a vice president in AMD's commercial business unit.

In addition, the company believes the openness of HyperTransport is an advantage. The technology is governed and licensed by the HyperTransport Consortium.

One company very interested in HyperTransport's openness is Cray. "It's a huge benefit," said Jan Silverman, senior vice president of corporate strategy at the supercomputer maker. "It's not free, but the terms are much more palatable than anything that I have seen from Intel in the past."

The openness also means Cray can use HyperTransport to connect Opteron chips to its own networking chips. And when it wants to use HyperTransport to plug calculation acceleration engines into a computer, it can buy them from a company called DRC Computer that specializes in the engines, instead of having to make its own.

AMD's Opteron years have left an impression on Silverman that Intel will have to work hard to reverse. "There was a point in time when Intel used to lead the industry. Now they're following AMD on 64 bits, following on dual-core, following on low-power consumption chips, and now they're going to follow AMD in exposing their Intel architecture," Silverman said.