Monday, January 4, 2010

Lessons on Efficiency from Starbucks

Originally Published 2009-01-18 13:42:19

The other day I purchased an espresso from Starbucks and then went right next door to purchase a sandwich from a Togo's franchise. It occurred to me, while waiting 6-9 minutes to complete my sandwich transaction but barely a minute for my coffee, that Starbucks has a vastly superior queuing system.

Starbucks' system touches the customer twice. There are two queues -- two wait states -- but the queues are completely disconnected from one another. This allows resources to be distributed more efficiently to the two queues. This could be because of employee specialization -- perhaps one employee is a whiz at juggling cups while another can make change in her head while half-asleep. Or, more duplicate-able and scale-able, one can simply apply an additional employee to either barista or cashier duties. So, when there are 15 empty cups awaiting caffeine juice and only one person in line, the third person can start steaming milk. When the roles are reverse and there are only two empty cups but fifteen in line, a second cashier can be manned.

Compare this with the system at Togo's. There is one line serviced by 1-4 employees. A customer is handled, from start to finish, by the single point of contact. Occasionally, they'll adjust their system, having a manager handle cash for everyone while 1-4 employees focus on sandwich making. Both approaches are inferior to the two-queue system because they are serial. Even when a dedicated cashier is present, cash never changes hand until the sandwich making process is almost complete. So one large order upsets the entire system. The customer experience is further compromised by simply forcing the customer to stand in line, focusing on the wait and any inefficiencies perceived, rather than socialize, make a call, or otherwise spend their time in a more productive (or at least less negatively focused) manner.

Now, granted, a sandwich takes longer to prepare, generally speaking, than your daily stimulant of steamed milk fortified bliss. But that should make the need for disconnected queueing -- or, in geekspeak, "asynchronous messaging" -- even more impactful, if not downright necessary. Starbucks's superior system allows more production per employee. It, point blank, increases productivity -- generally considered by all to be the single biggest contributing factor to raising the standard of living of a population. In other words, creating long term wealth. Go look up the sales per employee of Starbucks and compare it with any retail food service company that uses the single queue model. I haven't looked them up, but I predict that Starbucks will report roughly double the sales per employee.

Maybe another day I'll put together a list just to prove it...

(Incidentally, I propose that this is one of the reasons why email is more efficient than a phone call. A phone call is serial -- two parties must connect at exactly the same time, whereas with email, the two interactions are disconnected. Asynchronous messaging, once again.)

Comments

On 2009-01-18 21:05:03 Bobbie McGowan-Ottawa Real Estate Expert said:
Very perceptive and I think you hit the nail on the head with that one, Starbucks has a business model many could learn from.On 2009-01-18 21:15:17 Jim Dolanch-Pittsburgh Real Estate Expert said:
Starbucks does have their efficiency down pat-this can easily be transferred to any job or business too.On 2009-02-26 16:33:52 snocon said:
We have a sandwich shop here called Jimmy John's that makes their sandwiches extremely fast. The first time I went there, I said what sandwich I wanted, handed the cashier my credit card and right after she handed my card and a receipt back, my sandwich was being handed to me as well. They have a dedicated cashier and 2 areas with all of the sandwich ingredients, with 3 sandwich makers manning each station. As soon as you say what sandwich you want, the cashier tells the sandwich making crew, and the 3 of them put it together in a few seconds. It's a delicious sub-style sandwich with fresh ingredients too!

I was wondering how they make enough money to pay all of those workers when there are only a couple people in line whenever I go in, but then I realized that there are so few people in line because the majority of their customers are like me. They walk in, decide on a sandwich, pay and get their sandwich in a minute or two, and head out.

Their prices aren't the best, but I'll often go there when I'm in a hurry and want a good sandwich.On 2009-05-08 13:11:56 Josh - Web Design Kansas City said:
It is a similar model to fast food where a person takes and order and it goes to the specialized person. This is why some sub places like Mr. Goodcents are slow and ones like Jimmy Johns that uses an assembly line for each ingredient is so fast.On 2009-05-29 00:50:49 Dean Lee - Applied Asian Languages said:
Interesting post. Here in Singapore, McDonald's operates a similar queing system - once your order has been taken, you're directed to a different line to collect it.On 2009-06-25 09:48:34 Myles said:
wow that's an interesting way to look at it. Now that I think about it it's that way with most internet businesses too. Customers can place orders/ask questions though an ordering form and we can have someone or something pass them off to people specialized in those areas. But customers still like the one on one interaction. Like for Togo's (mmm pastrami sandwich I had yesterday...) it was nice that I could dictate exactly how I wanted my sandwich right when he was creating it to my specific instructions. It made me feel like I was getting more for my moneyOn 2009-08-04 15:48:28 Andy - Spanish mortgages expert said:
Its amazing how simple changes to these every day systems can make such a difference to service.
As for email over phone calls, well when i am delaing with a client I refer to email. When i am dealing with a bank, I prefer to call.
i guess it depends how much i want to say and how urgetn the communication is.

Nice post though - shows why Starbucks is such a successful franchiseOn 2009-08-12 12:33:04 Justin Show said:
I just read on Yahoo (I think) last week that Starbucks had hired an efficiency firm to try to make their people even more efficient (this is a tough economy). They are looking at serving a latte in 30 seconds instead of 40 seconds, or something like that. Some of their stores aren't too happy with the program... It's an interesting news story if you can find it. ~ Justin ShowOn 2009-08-13 10:13:29 tony said:
that's called BPM, y'know ;-) s'what I do 4 my day job :-D (B.P.M that is not working for *five-bucks)On 2009-08-27 04:58:25 gilbert said:
Efficiency is a worthy goal, but not at the price of expecting humans to act like automatons. I dread the day I see a Starbucks employee behind the counter whirling and kicking like Bruce Lee just to fix my java more quickly.On 2009-09-14 08:35:11 Acai Beere said:
It always amazes me when you see something from everyday and you realize something cool and it totally changes your perceptionOn 2009-09-23 14:43:29 Daniel Laming said:
As an avid Starbucks fan I couldn't agree more! I end up spending something like $3000 a year there and my coffee is practically there before my money is! I'm not sure how they do it - reckon they stalk me lol.On 2009-09-25 17:54:31 wlb said:
The book 'The E-Myth' covers a lot of this. Basically people need to start thinking of a business as a franchise and create a process for everything. We do it here, it's what I call idiot proofing things :)On 2009-10-20 02:19:39 Estrelas Barra said:
Yes, the secret is asynchronous messaging. This is the secret behind very successful technologies like Erlang too. And each day more people is paying attentions in this simple principle.On 2009-10-29 00:15:04 gabby said:
This is great, I love your attention to detail! Yes, Starbucks is superior in the queing sense, they have truely mastered the system. Though I have had a few instances of not being quite with it (early morning cloudy head) and therefore not being ready for the questions and directions of the baristas. When I come too and realise that I have been in a day dream the baristas tend to not look too happy with my non aggressive super quick attitude!On 2009-11-01 09:34:25 Luxury Yoga Bags said:
But the sandwich shop wants to feel like a custom sandwich. They want you to watch and see the sandwich being made. Plus most people need to see the vegetables and condiments to decide what they want on their sandwich. If you asked someone what they wanted on it without any visual queues they would most likely not know what to choose.On 2009-11-03 05:35:04 Ornella Kinderchat said:
I am not a fan of Starbucks and prefer small places where to trink a coffee. Starbucks is a sort of McDonald's for coffee and cappuccino!On 2009-11-09 02:58:31 Adrian Cameron said:
Yes, of course they have a system... they are a chain built on systems that charge accordingly.

For me in the UK, Starbucks is full of drones, "me-too" purchasors with too much money to spend on coffee.

I'd go local everytime. Unearth the juicy local provider who may be a bit slower, a bit more disorganised but are at least local.On 2009-11-12 05:14:22 John Célibataire said:
Very interesting analysis. I will start loking closer at fast food employees now.On 2009-11-12 08:21:42 Joe Mcelderry said:
It's like the saying goes. Efficiency is the centre of all good franchising businesses. Look at how quick McDonalds serve you.On 2009-11-17 10:56:55 New York Debt Relief said:
They could probably increase efficiency further by having the orders through internet or computerOn 2009-11-19 19:32:49 Dave said:
Well I must say I still go to Starbucks for the great coffee and not their line efficiency. Lets put it this way, if I had a choice of a longer line but better coffee I would pick that one. ;)

Actually Starbucks has both covered so nothing to complain there.On 2009-11-24 14:19:38 baby bottle holder said:
I understand that Starbuck's business model is used as an example in many universities. That means a lot. Great post Johnny.On 2009-11-25 15:05:14 Simplicity Bags said:
I'm the the old school customer service is everything a forgotten techniqueOn 2009-11-27 06:09:12 search engine optimization consulting said:
you are right bobbie. Starbucks has a business model that a lot can learn from, Just like me.. Reading this article, taught me on some ways that I could get from the trick starbucks has on running a business. I should sure apply this in my own business soon.On 2009-12-03 11:53:03 Mark A said:
This single-queue system is not so bad if only the ones who go by it know how to improvise or adapt in situations where customer-load is heavy, for example during peak hours.

I have noticed that in some fastfood chains where single-queueing is implemented, when there are too many customers, they don't let the customer wait at the cashier for his/her order to finish. Instead, what they do is give a number. Another employee is then given the charge of the dining area. It's his/her responsibility to deliver the order to the customer. Quite different from Starbucks in that you have to get your order yourself once it's done.

It is similar to Starbucks-style, would you agree?On 2009-12-03 13:23:56 Manhattan said:
Maybe that's true in your Starbucks, but it's certainly not true in all of them. A lot of the time, the employees seem overworked, and they make mistakes as a result.On 2009-12-06 11:02:24 Jared @ Gas Scooters said:
I have not had the opportunity to observe the efficiency of Starbucks queuing system. This is probably due to Starbucks coffee being the lowest on my coffee list since I've never really liked their coffee. Anyways, you've prompted me to go and check this out in my part of the country, I'd like to see if the same efficiency is also seen here. Thanks for this post.On 2009-12-07 11:59:02 Joe Crawler said:
I've read the starbucks history book - few years ago (now the book is lost) and I am amazed by the founder walking dor to dor to find investors and how the efficiency is done in that company.On 2009-12-22 08:39:16 bankowned said:
I always believe in setting goals, but that’s probably to do with my sad excuse for a memory. I’ve read a few books on personal development and it seems to be highly recommended by the professionals.On 2009-12-24 15:03:50 pThomas said:
i never thought of email as Asynchronous messaging before but do agree. I wonder how this que spliting could be translated into other types of businesses.On 2009-12-28 07:20:52 cyanoacrylate said:
Could it also be because Starbucks customers need their fix or they'll lose their mind?On 2009-12-28 16:02:38 Portable Photo Printer said:
Thats pretty perceptive to notice the system behind how Starbucks and Togo's do their business.
I also agree about email being much more at conveying information, but not as much for building customer loyalty through relationship building.
Good post!On 2010-01-03 05:25:18 Beth said:
Hi:

I'm just wondering if you have abandoned this site.

I notice that the last comment approved is six months ago.

I would like to participate with an active blog moderator, especially if the comments disappear until the moderator gets around to approving.

Lessons on Efficiency from Starbucks

Originally Published 2009-01-18 13:42:19

The other day I purchased an espresso from Starbucks and then went right next door to purchase a sandwich from a Togo's franchise. It occurred to me, while waiting 6-9 minutes to complete my sandwich transaction but barely a minute for my coffee, that Starbucks has a vastly superior queuing system.

Starbucks' system touches the customer twice. There are two queues -- two wait states -- but the queues are completely disconnected from one another. This allows resources to be distributed more efficiently to the two queues. This could be because of employee specialization -- perhaps one employee is a whiz at juggling cups while another can make change in her head while half-asleep. Or, more duplicate-able and scale-able, one can simply apply an additional employee to either barista or cashier duties. So, when there are 15 empty cups awaiting caffeine juice and only one person in line, the third person can start steaming milk. When the roles are reverse and there are only two empty cups but fifteen in line, a second cashier can be manned.

Compare this with the system at Togo's. There is one line serviced by 1-4 employees. A customer is handled, from start to finish, by the single point of contact. Occasionally, they'll adjust their system, having a manager handle cash for everyone while 1-4 employees focus on sandwich making. Both approaches are inferior to the two-queue system because they are serial. Even when a dedicated cashier is present, cash never changes hand until the sandwich making process is almost complete. So one large order upsets the entire system. The customer experience is further compromised by simply forcing the customer to stand in line, focusing on the wait and any inefficiencies perceived, rather than socialize, make a call, or otherwise spend their time in a more productive (or at least less negatively focused) manner.

Now, granted, a sandwich takes longer to prepare, generally speaking, than your daily stimulant of steamed milk fortified bliss. But that should make the need for disconnected queueing -- or, in geekspeak, "asynchronous messaging" -- even more impactful, if not downright necessary. Starbucks's superior system allows more production per employee. It, point blank, increases productivity -- generally considered by all to be the single biggest contributing factor to raising the standard of living of a population. In other words, creating long term wealth. Go look up the sales per employee of Starbucks and compare it with any retail food service company that uses the single queue model. I haven't looked them up, but I predict that Starbucks will report roughly double the sales per employee.

Maybe another day I'll put together a list just to prove it...

(Incidentally, I propose that this is one of the reasons why email is more efficient than a phone call. A phone call is serial -- two parties must connect at exactly the same time, whereas with email, the two interactions are disconnected. Asynchronous messaging, once again.)

Friday, January 1, 2010

Securing/encrypting avantgo m-business databases (virgil) on device

Originally Published 2004-08-23 12:02:39

The following is a technical note written to address Vigil database encryption requirements using Afaria 5.1. Any questions, comments, or feedback is greatly appreciated.



Currently, the device-side Virgil databases used in M-Business Anywhere applications (e.g. Mobile Sales) do not have an on-device encryption solution. In the technical services group, we encountered this problem during a recent project proposal. In the future, it may be possible to take advantage of encrypted UltraLite databases using the UltraLite Pod, for applications such as Mobile Sales (depends on the product Roadmap and isn't guaranteed). For an immediate solution, we looked at the Afaria 5.1 Security Manager technology. The Security Manager channels created by Afaria can encrypt specified files while the device is powered off. This encryption, partnered with forced password-protection, provides additional security to the Vigil database files on a device. However, unlike an UltraLite database, the database files are not encrypted while the device is in use.



The following technical note highlights the general use and steps required to implement encryption on the Virgil database using Afaria 5.1. This procedure has undergone minimal testing, but has proven to work on both Windows CE and Palm devices. It would be recommended that extensive testing is made before a production deployment.



Usage Illustration:



1) The device is turned on

2) All files marked for encryption by the Afaria Security Manager are currently encrypted.

3) The user is prompted for a password.

Note: Afaria can be configured to deny non-administrator access to the PDA after a specified number of failed logins. Other possible actions include deleting all encrypted data or performing a hard-reset.

4) The user is successfully authenticated.

5) All files marked for encryption by the Afaria Security Manager are decrypted and are now readable.

6) User shuts down device

7) All files marked for encryption by the Afaria Security Manager are encrypted.

Note: Afaria Security channels can be configured to encrypt the desired files using one of the following algorithms:

- Blowfish

- AES

- Triple DES

- RC2

8) Device is powered down.



Note: It may be not feasible to use this solution with larger Virgil databases due to the delay of encryption/decryption of the database files. It is recommended to test the performance of the encryption with several encryption algorithms on sets of data that represent typical and high-end deployments.



Implementing this solution requires a workaround on Windows CE devices and is rather straight forward on Palm devices. Security channels designed for the CE device cannot encrypt files found in or underneath the \Program Files and \Windows directories. Since Virgil databases are installed underneath \Program Files, they will have to be moved to take advantage of the Afaria encryption features.



Windows CE implementation:



Requirements:

Afaria 5.1 Server

Windows CE Device with a synchronizing M-Business Server application using Virgil technology.

Windows CE Registry Editor - http://www.phm.lu/products



Implementation Steps:

1) Install a Windows CE Registry Editor on your CE device

2) Change the following two registry values:

HKEY_CURRENT_USER\Software\AvantGo\DatabaseLocation from \Program Files\AvantGo\Databases to \AvantGo\Databases.

HKEY_CURRENT_USER\Software\AvantGo\SRSDatabaseLocation from \ProgramFiles\AvantGo\Databases\srs to \AvantGo\Databases\srs.

3) Move the entire Databases directory found in \Program Files\AvantGo to a newly created AvantGo directory off of the root.

Note: Steps 1-3 can be accomplished using an Afaria Session Manager channel. What you would do is include both the session and security channels inside the channel set and send this to the CE device.

4) Synchronize your M-Business Anywhere application to ensure the move was successful.

IMPORTANT NOTE: If we want this to be a viable solution for customers, it would be beneficial to have a version of the M-Business Client installation that contains registry values similar to those changed in previous steps.

5) Disable any password on the CE device. Start | Settings | Password

Note: You can also use Afaria Session Manager channels for this because enabling/disabling the CE password is controlled by a registry flag.

6) Create a Afaria security channel for CE devices on the Afaria 5.1 server.

i) On the Channels, Administration bar, click New and then choose Security Manager channel.

ii) In the Client types dialog, label the channel and choose the WinCE Client type and click Next.

iii) Accept the selected Enforce power-on password check box.

iv) To allow an administrator's password to unlock a locked down device, select the respective check box, then enter and confirm the password.

v) Specify the allowable number of invalid password attempts before the device locks down and choose the desired lockdown behaviour.

vi) Select Next twice to complete the channel. (Encryption settings are handled later)

vii) In the left pane of Channels, Administration, select the newly created Security Manager channel.

viii) Select Set encryption options

ix) Select the Allow user to select additional files / databases for encryption check box.

x) Click the Add link and specify \AvantGo\*.* for encryption. Select the Include sub-folders check box and click OK.

xi) Return to Channels, Administration, click Save and then Close.

xii) Right-click on the newly created channel and select "Publish". You need to 'publish' a channel before a client can 'subscribe' to it.

7) Install the Afaria client on the CE device.

8) Configure the Afaria client to connect to your Afaria 5.1 server machine

i) Start the Afaria Client in Start | Program Files

ii) Select View | Configuration

iii) Specify the name of IP address of the Afaria 5.1 server machine.

iv) Enter the newly created security channel in the Channel Name field. The channel name must be preceded by a backslash.

v) Select OK.

9) Synchronize the device to obtain the Security Channel from the Afaria server.

10) Power down the device and test the encryption behavior.



Palm Implementation:



Requirements:

Afaria 5.1 Server

Palm OS Device with a synchronizing M-Business Server application using Virgil technology.



Implementation Steps:

1) Disable any password on the Palm device. Start | Settings | Password

Note: You can also use Afaria Session Manager channels for this because enabling/disabling the CE password is controlled by a registry flag.

2) Create a Afaria security channel for Palm devices on the Afaria 5.1 server.

i) On the Channels, Administration bar, click New and then choose Security Manager channel.

ii) In the Client types dialog, label the channel and choose the Palm Client type and click Next.

iii) Accept the selected Enforce power-on password check box.

iv) To allow an administrator's password to unlock a locked down device, select the respective check box, then enter and confirm the password.

v) Specify the allowable number of invalid password attempts before the device locks down and choose the desired lockdown behavior.

vi) Select Next twice to complete the channel. (Encryption settings are handled later)

vii) In the left pane of Channels, Administration, select the newly created Security Manager channel.

viii) Select Set encryption options

ix) Select the Allow user to select additional files / databases for encryption check box.

x) Click the Add link and specify your M-Business Anywhere application database file for encryption and click OK.

Note: This requires the administrator to know the names of all M-Business application database files. Repeat this step for all sensitive database files.

xi) Return to Channels, Administration, click Save and then Close.

xii) Right-click on the newly created channel and select "Publish". You need to 'publish' a channel before a client can 'subscribe' to it.

3) Install the Afaria client on the Palm device.

4) Configure the Afaria client to connect to your Afaria 5.1 server machine

i) Start the Afaria Client in Start | Program Files

ii) Select View | Configuration

iii) Specify the name of IP address of the Afaria 5.1 server machine.

iv) Enter the newly created security channel in the Channel Name field. The channel name must be preceded by a backslash.

v) Select OK.

Note: Afaria requires a direct TCP/IP connection to interact with Palm devices. There are several communication options available including: Windows RAS connections, Ethernet cradles, and Wi-Fi connections.

5) Synchronize the device to obtain the Security Channel from the Afaria server.

6) Power down the device and test the encryption behavior.

It never ends

Originally Published 2004-07-28 11:54:13

Are you talking about the deductions you made because the credit card statement didn't match the expense report on some of the meals?



I pay tips in cash an awful lot of the time. Is there any allowance for that? No, I don't have a receipt, yes, I paid them out, and no I'm not risking my job and integrity over $20-$30.



I don't want to fight about this and I don't want to delay $1200 in reimbursements over such a small amount, but you know how I feel about this. It's extremely lame. You spend all this time pouring over my report and verifiying literally pennies (which certainly costs more than $20-$30 in labor), then cause me all kinds of frustration... the business sense of this eludes me.



If there's anything you can do to make this right, I'd be very appreciative. If not, it's fine, I'll just make sure I don't pay out tips in cash any more. And roll my eyes after selling all my SY stock.



Johnny



--

May S.

07/26/2004 03:10 PM



To:

cc:

Subject: Expense Report ER00150465 - Meals





Johnny,



There has been a change made to your expense report. Please go to eTrip and open the above document. Double click on the line that is zero out. Click on the "notes" button to view the comments made. You can use the scroll bars on the side to navigate around the "notes" section.



Please feel free to let me know if I can help you in any way.



Regards,

May




Undocumented AvantGo client JS objects

Originally Published 2004-06-28 15:47:36

In 5.3 and 5.5:



avantgo.currentServer.user

avantgo.currentServer.password (readonly)

avantgo.currentServer.serverAddress (host/ip)

avantgo.currentServer.port

avantgo.currentServer.secure (boolean)



These were all avantgo.preference.xxx pre 5.3.

revisiting ancient history

Originally Published 2004-06-11 15:26:18

- what is the high-level technical design



Um... ok, I'll do my best. I didn't develop the channel. The channel has a form or forms on it that hit a forms processor running on the server. These are then compiled into a text file based on a customer-defined spec. I don't know anything about the guts of this. These files are then dropped into a folder designated to be processed. Under the old system, this folder was read once a day by a perl script that uploaded it to a server GM (or their SI) specified. About a year ago, they insisted that we make the upload secure, using something like SFTP. Great, just add an 's' to the script at the connect time, right?



Well, in actuality, the secure ftp protocol req'd another library. 15 levels of requisite libraries later, one of the requirements was upgrading perl from 5.6 to 5.8.x. Easy enough, except that other stuff on the box is using perl (i.e., everything), and ops told me that if I break other stuff I'd be strung up on a pole and they'd sick accounting on me with various forms of torture. They were pretty confident that bad things would happen if perl was messed with.



They also said, at the time, a year ago, that the server in question was being phased out ASAP anyway, and that anything I did to automate the process would be re-evaluated and either thrown away or migrated "shortly".



Which is a nice segue into the next topic...



- what is the current manual process that you run to forward leads



Ok, so I wrote a little command line batch file that automates the send process. Easy enough, right? Just launch an sftp session, pause for a few seconds, and feed the app the files.



Except it pretty much never works. I get an alert every day that says it failed, and I log on to the server, check the upload log, figure out what wasn't sent, retrieve those from the archive, and send them up by hand. 5 minutes of work. Last time I was in Europe, about a month went by before the upload was processed. Part of the problem was just that I was in hell. The other part was that the root password was changed and I had to hit up DanH for the new password. I hadn't been home in so long by that point that the dude thought I'd been fired. Go figure.



- what do you think needs to be done to automate the process



Well, I just logged on to look at the code, and it's so incredibly simple that there are a lot of things that could be done. I'm not a linux shell coder by training, and I put this together in two days -- the batch file creation making up only a couple of hours on the 2nd day.



The best solution would be to use the old code written in perl that never ever failed. There's like 500 lines of error checking in there, and all that needs to be done is an upgrade of perl. If I knew the other channels better, I'd probably have just done it anyway a year ago, but I have never had a clear understanding of everything that server is doing.



Unfortunately, I don't think anyone else does either, so the best bet is to move the GM channel off of that server altogether.



I considered, at one point, just downloading the files to my windows desktop at the office and writing my own tool using whatever libraries I wanted to perform the upload. I could actually still do that... it would be less than a day's work, but it's not a very pretty solution. We get power outages and have lurking IT staff in Dublin. Plus, well, it's my desktop for godsakes.



So there you have it.



:-)



Enjoy.

.NET permissions

Originally Published 2004-06-10 09:52:59

This is a pain in the ass everytime I install mpharma. We really should automate this stuff into the installer executable.



http://www.dotnet247.com/247reference/a.aspx?u=http://msdn.microsoft.com/webservices/building/security/default.aspx?pull=/library/en-us/dnnetsec/html/thcmch19.asp#c19618429_025

A1 Law issues

Originally Published 2004-04-27 17:49:11

I'm having a problem on across all workstations when using the external MS Word Spell Checker. The error reads "winword.exe has generated errors and will be closed by windows. You will need to restart the program. A error log is being generated."



A brief search on msdn with the error message text produced several hits indicating that updating to the latest office service pack would fix the problem. Interestingly enough, after updating from Office 2K sans any SPs to SR-3, the spell check appeared to complete, but crashed rather than returning to A1 correctly. Prior to updating Office, the spell check typically crashed after only progressing through a portion of a given document.



Disabling virus protection had no effect on the error. Nor did logging in as a Windows administrator. The issue occurs on all workstations, regardless of the A1 user login credentials.



I also lowered macro security settings in MS Word from "high" to "medium" on the possibility that A1 is running a macro. (It would appear that no macros are present, but it was worth a shot.) No success there either.



At any rate, the error appears to be document-specific, not workstation specific. A given document in A1 crashes winword on all systems. I can probably send you an email with a sample of the document contents from one of the offending docs if it will help. I see nothing obviously problematic about the document I've been testing with such as international characters or control codes. I have not, however, examined the content in any level of detail.



The user who first noticed the issue claims that the error rate is 50% or more, but based on the number of users reporting the issue and my own observations, I'd place the error rate at about 15-20%. Again, I have not tried to determine any patterns within the document contents, although I can do this if it will help facilitate resolution.



About our standard setup:



+ Client PCs are all well-equipped P4s

+ A1 v5.00d

+ Office 2K SR-3

+ Symantec AV Corporate Edition v8.1.0.825

+ Windows 2K SP-4 with the latest security patches per windows update



Let me know if I can provide additional data. Looking forward to your suggestions.



Cheers,



Johnny Fuery

IT Consultant

925.997.3878

whine, whine, whine

Originally Published 2004-04-26 13:50:42

[from TonyP]



I've thought of a great analogy for [our project manager] during this period of time - remember he likes to refer to sailing, well........



okay, imagine you are in a rowing boat, floating across a lake and the boat has a hole in it and you need to find it or you're going to sync.(pun intended)



okay, our PM is on the boat rocking it from side to side, so when you're trying to find the hole, the water keeps splashing over the edges of the boat making it very difficult to identify where the water is coming in from! After a while the hole is submerged under the amount of water now in the boat, so the boat is very quickly starting to sync and may possibly be beyond recovery, so it looks like the ship is going to do a titanic!!!

the only positive of this analogy is that now the hole is covered by water, air bubbles should identify the hole in the water, so should be able to find the hole quicker!!!! if you remember to bring a container you could start bailing out the excess water and you just might recover and be able to get to the other-side of the lake! hee!hee!hee!



btw - it looks like MBiz server issue was a red-herring, the reason it was taking so long to save the updated web pages, is because each of those web pages was a huge .NET exception error web page....

[end]



Or, you make it across the lake, but one the first mate got drowned along the way trying to fix the hole from the outside. :-)

Customer Feedback on mPharma

Originally Published 2004-04-08 03:21:35

mPharma pros:

+ (most emphatically and repeatedly conveyed) platform independence. They have an old PDA app operating in Italy that they cannot continue using because their PDAs are dying and the app doesn't work on PPC 2003. They won't have that problem with us. He even mentioned that he liked having Palm as an option, even given my disclaimer that I couldn't guarantee good performance of our custom code on Palm. (he asked how long it would take to clean it up, I said I didn't know, but that the other pros he mentioned -- outlined below -- would still of course apply. I guesstimated a few weeks. I don't think they're planning on supporting palm in their corp IT anyway)



+ Performance. "Your on device performance is PHENOMENAL." He went on to point out that the device performance was better than the laptop, noting things like searching, sorting, and page transitions. Several of the users said this in passing as well, even given some of the speed bumps we encountered (which centered around sync times because the siebel guys forgot to tell us they were doing a data backup in the middle of the day during a demo/training session -- Argh)



+ Flexibility. This centered around ease of deployment and the quick turnaround on changes, so some of this is because Tony and I rock . Still, the automated updates of new code on the fly was absolutely key here. For the past two weeks, we've lived (however informal the process) extreme programming -- dev/deploy/qa/demo/train nearly simultaneously -- all against a moving server (siebel) system undergoing the same treatment. It hurt a lot, but it wouldn't have been possible at all without our flexible platform.



mPharma cons:

+ Lack of internationalisation. He actually was ambivalent about this one, because we're so flexible. We were doing language translations on the fly, literally, as we went -- switch windows, search for "less", change to "menos", etc. He pointed out that in Siebel's mobile solution, the language widgets are all centralized, allowing a single translator to change everything en masse once. We, on the other had, require multiple instances of the app to handle this. This was a double edged sword for the client, however, because the de-centralized approach combined with our flexibility means that each country can has the ability to customize the ui. He didn't even mention the limitation on internal AG client english alerts. In short, Siebel manages internationalisation better, but our flexibility pretty much negates that advantage. Combined with the other pros, this was a footnote.



+ Our salespeople shouldn't quote 64mb as a minimum PPC memory requirement. Or, if they do, note, with emphasis, that they can't run ANYTHING ELSE with that amount of memory. Sounds fair.



+ He mentioned that he didn't like the AvantGo interface. I wanted to probe him more on this, but we were busy at the time and it just never came up again. Not sure if he meant mPharma or AG client.

That was my project

Originally Published 2004-03-23 02:33:10

Hot damn. That six weeks in the UK last summer was actually worthwhile.



http://biz.yahoo.com/prnews/040322/nem005_1.html



DUBLIN, Calif, March 22 /PRNewswire-FirstCall/ -- iAnywhere Solutions, Inc., a subsidiary of Sybase, Inc. (NYSE: SY - News), and Eli Lilly, a top ten global pharmaceutical company, today announced the completion of a pilot project in Italy to provide a PDA-based sales force automation solution to Eli Lilly's cancer specialist sales team. The solution leverages Mobile Pharma from iAnywhere to improve the quality and quantity of sales data, while eliminating time spent on paper administration. The iAnywhere® technology provided Eli Lilly with flexibility in the choice of mobile device while enabling it to mobilize its Siebel ePharma (6.x) system, business pages from the company intranet and information from other applications.



iAnywhere configured its Mobile Pharma solution specifically for Eli Lilly, allowing the sales team to capture call report information immediately following meetings with physicians, thereby enabling Lilly sales executives to build stronger relationships with physicians more quickly. The solution will also enable Eli Lilly to get more accurate, timely and pertinent drug information out to its sales force in order to boost productivity.



"Previously, our pharmaceutical sales executives spent a significant amount of time filling out data on paper, which then needed to be transferred to laptops. Eli Lilly realized that this system was not only time consuming, but also affected the quantity and quality of information from remote staff," said Geoff Kretzschmar, European CRM implementation manager for Eli Lilly. "We looked at various mobile options when considering the pilot trial in Italy and iAnywhere's Mobile Pharma was chosen as it offered the most flexible solution. The iAnywhere Professional Services team not only adapted Mobile Pharma to suit Eli Lilly's requirements, it also provided training to the IT administrators."



"Pharmaceutical companies operate in one of the most fiercely competitive industries, and it is becoming increasingly difficult to build strong relationships with physicians in order to enhance sales. Mobile applications offer a means to significantly improve the effectiveness of the sales executive, while increasing productivity and lowering costs throughout the sales process," said Alan Mair, new business development manager at iAnywhere. "The Mobile Pharma trial has given the Italian team of sales executives a more strategic view of the company/physician relationship, as well as easier access to the information they need to be more knowledgeable for the sales calls, such as key product messaging and data vital to the physician. In the future, Eli Lilly can also extend the mobile application to encompass more enterprise information so that sales executives can get all of the information they need anytime, anywhere."



Eli Lilly conducted a user survey with the participating sales executives three months into project. The feedback revealed that there has been excellent adoption among users with a marked increase in the number of updates made to its Siebel system, coinciding with an improvement in quantity and quality of data. Based on the increase in the motivation and effectiveness of the Italian sales force following the pilot project, Eli Lilly is now looking at other implementations of the Mobile Pharma solution across its European businesses.


pLog

Originally Published 2004-03-18 07:32:33

Successfully determined the problematic Siebel objects today.



1000 Problems retrieving Siebel objects. need to determine which one is failing. Begin troubleshooting with TonyP

1100 Shove Tony off to work on developement/internationalisation tasks. Need to focus, approach scientifically, not trial-and-error

1100 Begin by turning off all objects EXCEPT Pharma Professional Call. Works in IE. Data stream is too large to enable PDA sync, but object is working. Also write some scripts to speed troubleshooting process (automated log flushing, etc)

1130 Turn on Action, (company name) Core Action for Calendar, Account Leave remaining three objects off

1137 Test successful. I have a hunch that the problematic object is actually the last one, so I turn on Pharma Personal Products & samples and Contact, leaving only the last one, Pharma Meeting disabled.

1142 Test successful. Just to be sure I haven't missed something, I turn the last object, Pharma Meeting, back on to recreate the error state.

1144 Error state confirmed. Leaving Pharma Meeting enabled, I begin refining the search on the components.

1145 Disable (company name)coreemployeeinvitee, (company name)coreotherinvitee, pharmameetingpharmameeting, leaving only the pharmameeting component enabled.

1151 Test successful. Re-enable (company name)coreotherinvitee and (company name)coreemployeeinvitee. I have a hunch that pharmameetingpharmameeting is the culprit, so skipping right to it.

1155 Test successful. Pharmameetingpharmameeting object confirmed as the problem. Begin filtering fields. Disabling all except contactFirstName and contactLastName.

1157 Test successful. Re-enabling (company name)CoreClassification, (company name)CorePhoneNumber, address, (company name)CoreCity, Comment, associatedCost.

1200 Test successful. Re-enabling (company name)CoreSpeakerFlag, leaving only callStatus, primarySpecialty and (company name)CoreClassification.

1204 Test failed. Disabling (company name)CoreSpeakerFlag, re-enabling callStatus, primarySpecialty and (company name)CoreClassification.

1206 Test failed. Disabling callStatus.

1209 Test failed. Dang! Is the schema changing as I work? Disabling primarySpecialty.

1211 Test failed. Disabling (company name)CoreClassification. This should work again...

1212 Test failed. Hmm. Resetting back to 1155 test. Seems to be a discrepancy in my own log. Either I've made a mistake or the schema is changing behind the scenes while I've been testing.

1216 Test successful. TonyP looks over my shoulder and suggests that primarySpecialty is the problem. disabling primarySpecialty only accordingly.

1220 Test failed. Disabling ONLY (company name)CoreSpeakerFlag, callStatus,primarySpecialty,(company name)CoreClassification -- half of the remaining questionable fields. These were also among the questionable fields in my previous tests above.

1224 Test failed. Leaving those fields disabled, additionally disable (company name)CorePhoneNumber. The remaining fields worked in previous testing.

1228 Test failed. Disabling all except FirstName, LastName, and associatedCost. I expect this to work.

1230 Test successful. Enabling comment ONLY. 1-by-1 field testing. The 50/50 narrowing is causing me to overlook something.

1233 Test successful. Breaking for discussiong with Dave Thomas and TonyP.

1253 Enabling (company name)CoreCity.

1254 Test successful. Enabling address.

1257 Test failed. Disabling address -- address is definitely a problem. Enabling callStatus.

0100 Test failed. Disabling callStatus -- another definite problem. Enabling (company name)CoreSpeakerFlag.

0104 Test successful. Enabling primarySpecialty

0108 Test successful. Enabling (company name)CorePhoneNumber.

0112 Test successful. Going to lunch.

0217 Logged in, reloaded required files/components/scripts.

0221 Enabling (company name)CoreClassification.

0225 Test successful. Problematic fields determined: callStatus and address. Leaving these disabled.

UK

Originally Published 2004-03-16 06:41:08

Just arrived in Warwick, UK, at the IBM Data Centre for the mPharma project (company unnamed). Working with TP.



This place is totally locked down. We're terminal serviced to one box, then TS'ing from there to the actual mbiz and mpharma servers. Unbelievable. The actual real-world connections from device to Siebel/Oracle is unreal... we're talking like 6 hops, a VPN connection, and a firewall between the two.



Having access rights issues with c:\winnt\microsoft.NET\ from the mpharma application. Tried adding localhost\everyone and localhost\aspusr with full control rights; no dice.



Will keep playing...

Bridging two wireless networks

Originally Published 2004-03-02 12:24:45

Found on comp.os.ms-windows.networking.windows via google groups. Poster was anonymous ("Jim"). The most complete discussion on the topic that I've seen.

--Ok, hold on...

So you each have and will continue to maintain your own broadband access.You just want to "bridge" these otherwise disparate networks for some filesharing. Each of you has a 24/7 PC for Internet routing purposes (which youintend to maintain), but no hardware routers are currently in use, justswitches.

Solution # 1:

Peer-to-peer. This is by far the simplest and cheapest solution, theconstraints are range and antenna placement. What you can do is installwireless network adapters (I prefer USB-based, one w/ a 6' cable is ideal)on each network (config'd for adhoc mode, not infrastructure). NO AP (accesspoint) is involved. I would place them on your respective 24/7 PCs, sincethese already provide routing services to your respective Internetconnections. It should be a trival matter to ADD the remote networks tothese routers. Of course, you could use ANY PC, the 24/7 PCs just make sensesince they're always available and already have routing software. I can'tspeak to the flexibility of ICS in this matter (you didn't mention yourcurrent software), I don't use it myself, I typically use a hardware router,or when software-based, WinGate, WinRoute, etc.

Again, it's a matter of range. I find that even a few inches in theplacement of my antenna can be the difference between connecting and NOT, soI tend to stay away from PCI card and PCMCIA solutions. IMO, USB-based w/cable works best, I have the flexibility of working on almost any PC orlaptop w/ freedom of movement.

SPECIAL NOTE: On a peer-to-peer setup, you might want to be especiallycareful in comparing products. Some brands are notoriously BETTER in termsof range than others, so it might be worth a few extra $$$ to get a pair ofthese HIGH-END wireless adapters. Check the specs and visit some hardwarereview sites for comments (which you should be doing for ALL the equipmentmentioned here anyway!).

Solution # 2

Infrastructure (AP-based). In this case, you use two APs (access points),each patched into an available LAN port (wired) on your respective LANs. Inturn, the APs are bridged to each other wirelessly. The advantage of thissolution is RANGE and SIMPLICITY. It's the functional equivalent of using acrossover cable. The APs simply move traffic back and forth between theswitches. For all intents and purposes, you have a SINGLE, LOGICAL network.It can get more complicated, depends on what you want. For example,depending on the AP purchased and features, it may come w/ its own DHCPservice, firewalls, etc., thus you could each maintain some isolation, somecontrol over your respective networks, even use different IP addressingschemes. You would have to resolve the issue of whether you have a shared IPpool, which may have to be negotiated w/ the DHCP services provide by theAPs (if featured), or subnet your networks to avoid potential IP conflicts.None of this any different than if you were connecting "wired" networks, sono point in elaborating here. Sometimes people want separate networks andthus "route", other want ONE network, thus "switch". The wireless issues arebasically the same as wired once bridged. Depending on AP product, youroptions may be limited, so check carefully (of course, more features == more$$$).

In general, an AP-based solution is more likely to give you greater rangesince that's it's primary function. Since it's patched to your switch, youcan also have a VERY long lead, anything within the Ethernet spec (~300 ft,as I recall). In other words, you don't become BOUNDED to the placement ofyour PC as in solution #1, instead, it's a function of where your switch isPLUS the distance of the CAT5 cable. You can stick the AP up high, out awindow, whatever makes sense. Considering that BOTH of you could do this,you can potentially deminish the PHYSICAL distance between the APssubstantially, thus increasing the EFFECTIVE range. And you can add as manyAPs as you need to extend the range even further, creating a "chain" of APs.A very powerful solution. However, they can get expensive for thefull-featured models. That's why I suggested the peer-to-peer solutionfirst, it may work just fine, especially given the distances mentioned,line-of-sight, no other 2.4GHz interference (assuming you go 802.11b), andnot many obstacles. It's worth trying anyway, esp. since you have all theother necessary elements established (24/7 PC, routing software, etc.). Acouple of D-Link DWL-120 wireless adapters here in the U.S.A. might run$20-40 USD, either after rebate if new, or used off eBay. An AP, incontrast, could run from $80-200 (or more) USD depending on features.

Btw, the peer-to-peer solution's range can be extended considerably (haveheard of 3-5 miles in cases!) using after market antenna, concentrators(ideal for line-of-sight), etc. There are even websites dedicated to the"pringles can" solution (search Google). But don't underestimate the rangeof basic 802.11b wireless (esp. w/ line-of-sight), there's a reason hackersare continually invading unsecure corporate networks from basic, unenhanced802.11b wireless laptops on park benches ;)

Solution # 3

APs (infrastructure mode) + wireless adapters. In this example, you maintaincompletely separate networks and allow each other access via your respectiveAPs like any other wireless clients, such as laptop roamers. This config isclearly the most expensive so far (just more equipment), but highlyflexible. You could isolate access to the other's network to a single PC,i.e., wherever you wish the wireless adapter to be installed. Why might youconsider this? Because I'm not sure that your APs in solution # 2 wouldallow bridging *AND* local wireless access (roamers via infrastructure mode)AT THE SAME TIME. Maybe most APs do, maybe not, again APs vary widely as tofeatures, you need to check. But if you went w/ solution #2 and bridged,roaming might not be supported. Using the solution proposed here, you arecapable of supporting BOTH your neighbor and roaming clients because BOTHAPs are running in infrastructure mode, NOT bridged, so EVERYONE is happy.But of course, roaming may not be of concern to you, it's your call. Youcould always replace your switches w/ wireless routers sometime later toresolve that limitation. Just something to think about.

Solution # 4

Wireless Routers + AP. You could replace your existing switches w/ wirelessrouters (w/ integrated switch). Or, just supplement each of your currentswitches with a wireless router (simple crossover cable will do). Then useONE (possibly TWO or more if range is insufficient) APs to bridge them. Mostconsumer oriented wireless routers (e.g., D-Link DI-614+, Netgear MR814) doNOT support bridging, a requirement for your purposes. But they DO support abasic, simple AP for roaming wireless clients. The fact that these deviceshave LIMITED AP functionality is what keeps the prices down! But they'restill great products, they give a small, local networkswitching+routing+wireless in ONE, neat little package. Frankly, I stronglyrecommend hardware-based routers over your current software-based router.You created a dependency that has many negatives, like time-to-boot, heat,power usage, probably security vulnerabilities, cost of licensing, amongothers. In the end, it's usually cheaper and easier to buy a hardwarerouter, at least here in the U.S.A. (running $40-50 USD). If you can believeit, I recently picked up a Netgear MR814 for a measly $20 USD.

The only remaining issue is, how to bridge them. That's why you need atleast ONE AP (note how solution #2 required TWO APs, because you didn't havethe wireless routers as in this solution to BOOT the process). So a singleAP may be sufficient to bridge the wireless routers (if not, add more), andcould EVEN be placed mid-way (which may be ideal, depends on conditions),like at a third (otherwise not-involved) neighbor (or maybe the pole youspoke of, just kidding)! Or you can simply patch it to one of the twonetworks over a LAN port, and your neighbor's AP can reach it in bridgingmode. Your choice.

The nice part here is that you've greatly improved your local LANconfiguration (IMO) with the wireless routers, irrespective of anythingelse. So even if at some point, this relationship breaks down, neighbormoves, etc., you still have use of your investment, just add wirelessadapters and your off. The additional costs comes in the way of that AP,something you could probably agree to split, and you're done(equipment-wise).

Solution # 5

Wireless Routers + wireless adapters. Essentially, this is a hybrid ofsolution # 1 and #5. It assumes the range is sufficent with wirelessadapters as in solution #1 but drops the APs of solution # 4 (to save $$$),for the less expensive wireless routers (as you recall, switches w/ low-endAPs).

By now, I hope you're getting some of this. You're just allowing access toeach other's networks as roamers, hopefully in range like anyone visitingyour home w/ a wireless laptop. Actually a very simple config, probablyeasier to understand and configure than any other solution here. No APs, nobridging, no reconfig of software routers (no routing at all frankly, you'rejust PURE wireless clients to each other networks). It does limit you to aSINGLE client machine, however, unless you are willing to introduce routingon the machine w/ that wireless adapter! In that case, you're back tomanaging a software router again (maybe ICS, or maybe a simple bridgeconnection under WinXP will do, not sure), which sort of defeats the purposeof having invested in wireless routers. This solution works best IF youreally only need access to the other network from a single machine. It'ssimple, effective, but limited.

Summary

That's basically it (as I see it), there are lots of nuances, of course. I'mgiving a BROAD picture, there are even competing wireless standards, withvarying range and capabilities. For this discussion, I've assumed 802.11b(2.4GHz) wireless since it is cheapest and readily available. It's limitedto 11mbps (by spec), but actual is closer to ~2-4mbps (btw, SHARED,HALF-DUPLEX), under good conditions. Under stress, (extended range, other2.4GHz devices, other wireless networks, even weather), range may drop to1mbps or less. I've already outlined possible workarounds, from third-partyantenna to APs. Then there's 802.11a, its theorectical throughput issubstantially higher >50mbps (actual, probably ~20-25mbps under ideal conditions), but it achieves that at the expense of range. It may notfulfill your needs UNLESS you supplement it w/ range extending solutionssimilar to 802.11b. And then there's 802.11g (not even a standard as yet),which is backward compatible w/ 802.11b (note, 802.11a is NOT backwardcompatible w/ 802.11b, one of the reasons it's faultering in the marketright now). Confused yet? We're now seeing dual-mode (802.11a/b) and eventri-mode (802.11.a/b/g) APs, wireless adapters, and routers!!! Even moreexpensive, but these provide LOTS of options, esp. if you're not sure whatwill work best for your circumstances.

In the end, YOU will have to decide what makes sense for your circustances,and you may make a mistake or two along the way, be daring and at least tryit. A little experience and you'll probably come up w/ your own uniquesolution. But almost ANYTHING will be better than trying to lay down CAT5between your homes, that solution is problematic.

corrupt fonts

Originally Published 2004-03-01 16:46:42

Ran across a box that didn't display the basic system fonte correctly anywhere... it was like Arial had disappeared. Then when adding fonts, the font folder immediately showed nothing (even though the font obviuously loaded).



I blitzed the entire fonts directory and reloaded it from a ghost image. No dice.



What worked was reloading all of the font related regkeys in HKLM\software\microsoft\WindowsNT\CurrentControlSet\



FONT*

and

GXE_init



What a pain in my ass. This took way too long to resolve.

Sync still Rules.

Originally Published 2004-02-11 16:07:21

Some positive publicity despite my low morale:



http://techupdate.zdnet.com/techupdate/stories/main/Sybase_and_iAnywhere_for_database_synch.html?tag=tu.arch.link



"In the interest of mobilizing database applications--particularly ones that require some form of synchronization--few solution providers give you the freedom and flexibility that Sybase and iAnyWhere do."

tidbits

Originally Published 2004-01-30 15:54:12

Stored Procedures in MS SQL come with the schema file in mssql/data. Just cut my deployment time in half. Wee! No query analyzer for me today...

unicode defined

Originally Published 2003-11-17 16:25:42

Good shit.



http://www.joelonsoftware.com/articles/Unicode.html

Corporate IT sucks

Originally Published 2003-11-12 10:57:17

So here I am with two machines -- a laptop and a desktop -- and I can't install Visual Studio for .NET on either of them.



My desktop was Kuwaited by my corporate IT cops and my administrator privileges were removed, so my developer platform just became a friggin' email and web client. Um, excuse me? I'm a developer? I might need to install, oh, I dunno, WINZIP? F'k me.



My laptop was delivered to me with local administrator privileges (which I used to promptly disable EVERYTHING... Remote admin, Terminal Services, Timbuktu... hahaha! If you want to eavesdrop on me you'll have to do it the old fashioned way: monitoring my network traffic!) so I can install to my heart's content, only I don't happen to have the XP Pro installer, so I can't install IIS. AhhhhH! My grassroots sources failed, and IT tells me that they can't loan me an XP CD (even though they have 400 of them lying around) because it's not supported.



Um, excuse me? It's not like I put XP on this mother f'ker myself here! I'd have been perfectly happy with Windows 2000, but you guys gave it to me like this!



F'k me. I mean, seriously. The logic of all of this escapes me completely.



Oh well. At least I have WiFi.

ActiveSync, Pylon, and AvantGo not playing nice

Originally Published 2003-11-06 10:49:23

11/06/2003 07:14 AM

Subject: ActiveSync error





Hi,

Error just started occuring.

ppc2002 device with avgo 3.3 in rom.

activesync 3.7

installed avgo 5.1.60



everything was fine yesterday and this morning, but now im getting the following error when syncing via activesync...



"device components missing or out of date".



modem sync works fine (device connected to computer via sync cable)

uninstalling and reinstalling avgo client doesn't fix the problem.



anyone seen this?



--



11/06/03 09:42 AM

Re: ActiveSync error



Yeah, I've seen it. The good news is that it's Microsoft's problem. The better news is that you can get around it by closing all the other apps on the device, then syncing.



Look out for the gators.



--



You can also fix it by getting the latest AvantGo client and the latest Pylon Anywhere client. The problem is that Pocket PC 2002 has a fixed VM size of 32mb, and so if you are running a few things, whoever comes last doesn't have room to load their dll's. Remind you of windows in the old days?



At any rate, Synchrologic did a lot of work in the 5.2 client specifically to work better with our client (you could have argued that it was our problem as much as theirs, but you know how easy it is for us to blame things on other software). They did more work in 5.3. If you have either of these versions, your problems should go away. However, I would recommend getting at least our 5.2 AG client as well.

Services vs. Sales

Originally Published 2003-10-27 13:50:02

Courtesy of a chain mail letter rec'd from Kerry:



> A man in a hot air balloon realized he was lost. He reduced his altitude and spotted a woman below. He descended a bit more and shouted, "Excuse me... can you help me? I promised a friend I would meet him an hour ago, but I don't know where I am."

> The woman replied, "You are in a hot air balloon approximately 30 feet above the ground. You are between 40 and 41 degrees North latitude and between 59 and 60 degrees west longitude."

> "You must be in Professional Services," said the balloonist.

> "I am," said the woman, "How did you know?"

> "Well", answered the balloonist, "everything you told me is technically correct, but I have no idea what to make of your information, which means I'm still lost. Frankly, you've not been much help so far."

> The woman below responded. "You must be in sales."

> "I am," replied the balloonist, "but how did you know?"

> "You don't know where you are or where you're going," replied the woman. "You have risen to your present height due to nothing more than the buoyancy of hot air. You made a promise which you have no idea how to keep, and you expect me to solve your problem."

> She continued after a moment: "Moreover, you are in exactly the same position you were in before we met, but now, somehow, it's my fault."

Sendmail vs. Qmail

Originally Published 2003-10-15 22:16:10

Sendmail vs Qmail

Extracted from askslashdot

Tip provided by ?

ChiChiCuervo asks: "I've been wrestling with Sendmail for the past few months

because it's configuration system is a nightmare. So I was wondering what the

differences between/benefits of each (sendmail and qmail) mailer were, and what

everyone thinks of each."



Differences :

Well, there are some. At first, sendmail is an old dog - it's being hacked on for

long, much code was removed and much new was added. That's why it is at 8.9.2 now.

Of course, this gives you some kind of "guarantee" that is portable, stable and bug

free - however, there were posted many attacks against sendmail in the past which

is a nightmare from the PR standpoint. However, it really has matured and you are

on the safe side, if you use a modern version. qmail was written "with security in

mind", if you need a quick solution for e.g. a secure gateway, you should use qmail

instead of sendmail.

The configuration of both is fundamentally different. If you want to try sendmail,

you should really consider to get the sendmail book from O'Reilly, I would not have

been able to do anything useful with sendmail without that book. The documentation

on sendmail is rather non-existing, at least I have not found anything on the net

which describes sendmail comparable to the book. Once you understand, how sendmail

works, it is really easy to setup and maintain. You can do about everything you can

think of using sendmail's configuration file. You don't need to hack the source

code to use e.g. a new mapping for domains.

On the other side is qmail: It has its control files, a simple directory with 5 to

30 different files containing one special configuration (e.g. virtual domains or

host infos). These are explained nicely in their respective man page (man

qmail-control). However, I feel uncomfortable doing anything extended with qmail. I

don't like the structure of the source code, you have to dig far into it before you

understand how the things work.

Over the past, I've converted my personal boxes to run qmail. Why? There is no

special reason. Perhaps, because sendmail is updated every once in a while, while

qmail is at 1.03 since months (years?).

I'd recommened to try both - set up a personal system and play a little bit with

each MTA. Learning to administer a system is the most fun sport in the world :-)



Sendmail vs. Qmail :

Qmail is a much smaller mail server, and it lacks many of the features that most

mail servers have today. It has no spam filtering whatsoever. For example, unlike

sendmail, it does not verify the domain of the envelope sender, to make sure that

it resolves in DNS. It has no support for the RBL, the current sendmail supports

the RBL natively. Also, unlike sendmail, Qmail can't reject E-mail addressed a

mailbox that doesn't exist. Qmail will accept the E-mail message, and then it will

generate a "no such user" bounce internally.



But that's just the standard feature set. If you want extras like that, you'll be

able to find a patch or an add-on, somewhere, because chances are that someone has

already done it. Qmail's author has a reputation of being very inflexible, and over

the last couple of years people have come up with a plethora of patches and hacks.



Qmail's biggest problem is sending E-mail to many recipients. If you have a large

message with many addresses in the same domain, sendmail will connect to the

receiving mail server once, and it will send one copy of the message. Qmail will

connect multiple times, in parallel, and transmit a separate copy for each

recipient. If you routinely send large messages to many addresses, you'll waste a

lot of bandwidth. You can think of it this way: sendmail is optimized for saving

bandwidth, Qmail is optimized for saving time. If you have good bandwidth

available, Qmail will be faster. If you have limited bandwidth, and generate a lot

of mailing list traffic, sendmail will be faster.



Don't overlook the security aspect. Sendmail is bloatware. It's been hacked,

revised, and patched for years. There's so much bloat in there, Bill Gates is

envious. If it weren't for sendmail's existing large user base, Eric Allman would

be laughed off the Internet. On the other hand, Qmail is smaller and leaner, but it

still provides the basic SMTP functionality. Although the source code is not very

well commented, you'll be able to figure out how to get things done, if you need to

patch it.



One of the nice features of Qmail is that it supports an alternate mail storage

format, that's directory-based, instead of one huge file containing all your

messages. If you do a lot of POP3 serving, you can save a lot of CPU cycles and

disk activity with Qmail. Unfortunately, Pine does not natively support this

storage format. But, again, there are patches for that out there.



There, that should give you a rough idea of the strengths and weaknesses of Qmail.



Advantages of Qmail (mailing lists) :

Qmail had the advantage of having each user be able to set up a mailing list

without root permission. Thus, the "foo" account could create mailing lists called

foo-slashdot, foo-linux, foo-chickens, and foo-spam all without root permission.

For better functionality, there's ezmlm (EZ Mailing List Maker) which adds things

like auto-subscribe and unsubscribe, indexing, and all the other fun stuff you'd

see in Majordomo, but all CLI driven - few files to edit.

I've found that Qmail works great for small machines, and installed them for

domains where I have only a few accounts (or have to manage mailing lists). Larger

sites may want the vast configurability of Sendmail instead.



Postfix :

If you're gonna be looking at alternatives to sendmail, you should also check out

PostFix. (Used to be called Vmailer.) It was written by the same guy who wrote

TCPWrappers.

I've never configured it myself, so I don't know how easy or hard it is, but you

should have a look for yourself. We're running it at work, now, and it outperforms

sendmail by a fairly large margin.

http://www.postfix.org/

If you do stay with sendmail, I stronly urge you to use M4.

Here's how to do it on a RedHat system:

First, create your mc file:



# cd /usr/lib/sendmail-cf/cf

# cp redhat.mc myconfig.mc

# vi myconfig.mc





Customize it using information found on the links from http://www.sendmail.org . Pray for

divine inspiration.

Now build a cf file:



# cp -p /etc/sendmail.cf /etc/sendmail.cf.orig

# m4 ../m4/cf.m4 myconfig.mc > /etc/sendmail.cf

# /etc/rc.d/init.d/sendmail restart



Good luck!



Sendmail configuration nightmare-> SOLUTION :

Check this site



http://www.harker.com/webgencf



Also check out Exim :

Open source, very easy to configure, quite secure. Big installations would probably

prefer Postfix but I like exim and run it at home and so (now) do all my friends -

I also hacked up a mailing list manager for it.

http://www.exim.org/



Easy Sendmail Configuration w/ Linuxconf :

I use sendmail because linuxconf will generate all your configuration files for

you. It even does virtual hosts. So grab sendmail and linuxconf:

http://www.solucorp.qc.ca/linuxconf/



Use postfix :

I've never actually used sendmail, but I've looked at the config files, and they

look nasty. sendmail also is a big suid root, sgid bin binary which scares me to

death.



qmail is easier to configure, a whole lot more secure (from a design standpoint, I

neither know nor care how many holes are actually left in sendmail), and allows

users to admin their own lists (which is quite useful). It, however, is not a

sendmail replacement. It doesn't use .forward (which all of your users probably

use), it doesn't use /var/spool/mail (or the incorrect /usr/mail, /var/mail or

/var/spool/mail) but instead insists on putting mail in the users home directory.

It also lacks some of the more obscure features of sendmail (such as mail to news

gateways). I would say that qmail is just fine if you're the only user of your

system or if you have all very educated users. qmail's license prohibits

redistribution differing from the original package unless said distribution is

approved by the DJB (the author)



Postfix (www.postfix.org) is a new mailer by Wietse Venema co-author of SATAN and

author of TCP Wrappers and it's very cool. It was designed from the ground up to be

secure. It has an extremely easy to use configuration syntax allows for mail to be

places either under the users name in a specified directory (/var/spool/mail) or

under a specified name in the users directory, and allows for mbox or maildir

formatted mailboxes (most people use mbox, but maildir has better integrity). It

also is extremely flexible and can (I believe) do everything that sendmail can at

this point. It also allows for users to maintain their own lists. Basically the

only reason I would suggest you choose something other than postfix is that postfix

is currently in Beta and still under development. (Note that I'm not saying it's

not stable. I've been running it and it appears quite stable and secure to me, but

it is beta software) postfix is licensed by IBM and the license is sort of odd: it

tries to guarantee that the source will be available but makes if very clear that

all changes are to be available.



In summary:

* If you absolutely demand truly open software, use sendmail. Though the other

two licenses aren't awful, they leave much to be desired.

* If you're running a large server and demand high security (i.e. Hotmail, pobox,

Yahoo), do a lot of research and write your own so that it's optimized to your

system.

* If you have a bunch of lusers; you don't demand much security, and don't have

time to keep up with updates to a beta daemon go with sendmail.

* If you are the only user on your system, or it's just you and your Linux hacker

buddies and you don't want to bother with keeping up with updates to beta

software go with qmail

* If you want a really cool MTA and don't mind tracking updates (about one a

month) go with postfix



Qmail is quick and simple :

Qmail is the best if you want something secure and easy to configure. I was able to

set it up in about an 2 hours compared to 2 days with sendmail, and I still didn't

have sendmail working how I wanted it.

It will do many of the things that sendmail does - you just need to download some

additional packages. Qmail will do .forward with the dot-forward package, you can

use procmail or what ever one you want. You can use the /var/spool/mail setup all

you have to do is change a setting in the /var/qmail/rc file. It contains great

documentation.

It has some spam filtering abilities with add-on packages. I am using it on a

dial-up connection and masquerading as another user and machine. It will work with

pine, just just need to set some env variables and use /v/s/m



Qmail runs very well :

I've been using qmail for a couple years and it works great. It does feature SPAM

filtering and prevention techniques, though some of them aren't distributed with

the man package. However from being on the qmail mailing list for a while I can

tell you SPAM prevention was a big focus.

Additionally when paired with serialmail qmail runs really well over modem links.

You can setup a virtualdomain to hold mail in a queue until a user connects and

then flush the mail to the users personal linux box for delivery into user's

mailboxes. I realize this can be done with other tools, but qmail does this easily

and it works great.

Also regarding a POP server, personally I use a patched version of the University

of Washington's POP/IMAP server and it runs really well. I know a large ISP who

does this as well.

Finally you may be interested to know that there are some very large sites on the

net using qmail, or at least they appear to be (you never know for sure). I believe

Rocketmail (or maybe it was hotmail), and Internic were both believed to be using

qmail.

Overall I highly recommend using qmail, it runs great and is easier to configure

than sendmail.

pagefile framentation

Originally Published 2003-10-09 11:01:26

***Read the following if your machine seems to do excessive I/O during even simple UI operations (like repainting the active window).***



Since getting my new hard drive and XP template a few weeks ago, I had noticed that my machine performance was exceedingly poor. The OS appeared to be I/O bound on most common operations. I didn't suspect fragmentation initially, because the OS had just been templated and there was plenty of free space. However, doing a defragment analysis showed moderate filesystem fragmentation. I did a defrag, but performance gains were marginal. Then, I came across the following article: http://www.cyberwalker.net/columns/nov01/081101.html



The problem appears to have been fragmentation of the pagefile. Doing a regular defragment with the built-in Windows defragmenter will not fix this problem (if you are using a 3rd party defragmenter like Diskeeper, you may not have this problem). After following the instructions in the article, my machine performs dramatically better. As an example, the minaccept test suite runs for me in about 1/3 the time it took yesterday, and Notes and IE are responsive enough to use while the test is running. Caveat emptor, but if you are having similar problems, take a look at this.

Net::SSH::Perl

Originally Published 2003-10-06 01:46:26

...is required for Net::SFTP and has dependencies on everything known to man. Looks like net-ssh-perl-1.23 requires a later version than 5.6.1. Joy.



Here's my list of dependencies:



Package Dependencies

dev-perl/Math-GMP dev-perl/string-crc32 dev-perl/math-pari dev-perl/Digest-MD5 dev-perl/Digest-SHA1 dev-perl/Digest-HMAC dev-perl/crypt-dh dev-perl/crypt-dsa dev-perl/math-pari dev-perl/MIME-Base64 dev-perl/convert-pem dev-perl/Crypt-Blowfish dev-perl/Crypt-DES dev-perl/crypt-idea dev-perl/Crypt-OpenSSL-RSA dev-perl/crypt-rsa dev-perl/digest-bubblebabble >=dev-lang/perl-5.8.0-r12



Run-Time Dependencies

dev-perl/Math-GMP dev-perl/string-crc32 dev-perl/math-pari dev-perl/Digest-MD5 dev-perl/Digest-SHA1 dev-perl/Digest-HMAC dev-perl/crypt-dh dev-perl/crypt-dsa dev-perl/math-pari dev-perl/MIME-Base64 dev-perl/convert-pem dev-perl/Crypt-Blowfish dev-perl/Crypt-DES dev-perl/crypt-idea dev-perl/Crypt-OpenSSL-RSA dev-perl/crypt-rsa dev-perl/digest-bubblebabble



Dear god have mercy. And, of course, I have 5.6.1 on avanthost.com. Fuck me. Upgrading perl with all of those modules on a production web server?



I'm so screwed. Fuck!

Wi-Fi SSIDs

Originally Published 2003-10-03 12:50:49

We were having problems connecting an iPAQ h5550 and a Tungsten C to our Sybase Wi-Fi network. Other iPAQs and our laptops could connect without any problem. It turns out that these PDA devices can only support an SSID of 31 characters and the Sybase SSID is 32 characters. When the SSID is shortened on the APs to 31 characters, things work fine.

more domain issues

Originally Published 2003-10-03 08:08:05

From: Alison Stone

To: fuery

Sent: Thursday, October 02, 2003 12:27 PM

Subject: Continuing website problems





Dear Johnny,



I'm writing on behalf of Lisa. It appears the mncabinet.com is once again linked to the porno site. Any suggestions?



Thank,

Alison



---



Hello Allison,



The problem hasn't changed. Since your company doesn't own the domain mncabinet.com, the new owner can (and has) post anything there he or she wishes.



What we were able to do was get it removed for awhile and update the search engines databases so that a search for your company name no longer sends potential customers to mncabinet.com.



In my last correspondence with Lisa, I touched on this:



[snip]

Date: Thu, 28 Aug 2003 11:55:39 -0700 (PDT)

From: "Johnny Fuery"

Subject: RE: mncabinet.com questions

To: "Lisa F

CC: "Stephen N



> 1) If the site is now being redirected to

> mnbuild.com, do we need to do

> anything else??



Well, it's not being redirected. Links directly to

mncabinet.com are simply going nowhere -- your browser

displays a "Page Not Found" error. The domain is

effectively dead.



> 2) Do we have to buy back the site from

> Slutnames.whatever or will the

> redirect stand? And do we know whether or not they

> actually "own" it or

> stole it.?



I'm pretty sure they own the lease to mncabinet.com

fair and square. Unethically, perhaps, but not

illegally.



If you actually want a redirect, i.e., typing in

"http://mncabinet.com" yields your site located at

mnbuild.com, then yes, control of the domain must be

reobtained from Smutnames.



Please note that much of the damage has been done,

however. The prominence of mncabinet in the google

search results went away when we asked google to

remove it from it's directory and cache (remember, it

was linking to the smutnames obscenities). I'm not sure

if you agree, but it seems to me that the largest

value of that domain was in it's prominence in the

google engine. Even if it were recovered, I'm

unfortunately not confident that the google placement

would return. It very well may, but it's difficult to

guarantee that behavior.

[end snip]



In terms of options, there are only two choices at this point are:



+ continue the efforts to phase out mncabinet.com. Since the search engines have been updated already, this means making sure that all of the sites you control do not refer to it. It also means keeping your eyes open for links to mncabinet.com in "the wild", i.e., on the internet at large that you do not control and contacting the webmasters of those sites asking them to update their sites. This actually tends to happen on its own (webmasters don't appreciate linking to smut either), but you should nonetheless make certain your own sites are completely updated. This effort is largely complete already; I had thought based on the lack of response from my last message to Lisa (quoted above) that this course of action was the decision.



+ buy control of mncabinet.com from the new legitimate owner. He quoted me $500 in my initial correspondence with him. I can handle this or I can simply forward you his contact information.



Let me know what I can do for you.



btw, thanks for the opportunity to work with you.



Johnny Fuery

925.997.3878

DOM, da-DOM, DOM, DOM

Originally Published 2003-10-02 16:23:19

tinyJS can traverse the DOM when using a 5.3 enterprise client!



(Syncing AvantGo Client 5.3, Enterprise, against the MyAvantGo/AMI service... I'm assigning an option value held in a select pull-down list to the window.location object for navigation purposes.)

IT Certifications (article)

Originally Published 2003-09-29 22:55:27

http://story.news.yahoo.com/news?tmpl=story&cid=620&e=2&u=/nf/20030929/bs_nf/22380



I should get some of these with Sybase's education reimbursement program -- especially if my St. Mary's classes won't be covered.

Can't get perl to attach to ASA

Originally Published 2003-09-29 01:54:53

I'm having a heck of a time attaching to ASA from perl. Here's what I did (on win32):



+ installed Apache 1.3.x

+ installed ActiveState perl

+ installed ASA 8.0x

+ installed DBI and ASA::DBD using PPM



I can log into ASA from the query manager (i've loaded the data correctly now, btw). I've copied the credentials verbatim from what I'm using in the query manager GUI and I have the following connect string, which I lifted from the ianywhere website ASA DBD documentation:



use DBI;



my $database = "INTEL_MSI_CONFERENCE_DATABASE";

my $data_source = "DBI:ASAny:$database";

my $username = "UID=DBA;PWD=sql;ENG=intel_msi_conference_database";

my $dbh = DBI->connect( $data_source, $username, 'na' );



I have played with the case of $database, uid, pwd, and eng. I also tried replacing 'na' with 'sql' in the last statement -- in connect strings I've used in the past, this third argument has been the password.



There are a couple of add'l combinations I can try...

Loading an ASA database

Originally Published 2003-09-25 11:46:31

Pretty easy. The toolkit is not as straightforward or feature rich as MS SQL, however.



Loading data for the intel conference wi-fi project... Developing from two screen shot mockups and a data model. Yay.

Cancelled my blackberry service today

Originally Published 2003-09-23 15:29:13

May another badge of geekdom rest in peace.

pods for ami?

Originally Published 2003-09-19 01:35:08

Ugh! So I'm supposed to build this app launcher piece of shit, which should take me a whopping hour to do, and I can't because I don't have the right pods.h -- the app has to run on the service.



Fuck me!



One day, we'll be big enough so that the damn thing is included with Embedded Visual Tools. NOT!

gobcl.com does PDF conversion now, too

Originally Published 2003-09-16 15:42:19

Used to be just conversion to html. That rocks... send off a doc to pdf@gobcl.com, and voila! PDF of your doc in your mailbox.

The world needs Jot conversion tools

Originally Published 2003-09-16 15:40:37

I might just have to write some. No one but AvantGo could find a use for a jpeg-to-jot conversion tool. But, hey, where there's a need, eh?



I'm thinking... parse through the jpeg pixel by pixel and create a jot "stroke" for each pixel, monochrome only. Kind of an inefficent approach, but it's the simplest algorithm in terms of development time. I can't believe some linux geek hasn't already done this, but then again, no one else on the planet uses the scribble input tag, now do they? :-)



Kind of a geeky project... When I get finished with the 20 conference calls I have this week, anyway. Oh yeah, and my billable on-project work.



Sigh. How do people with real responsibilities do it? Oh yeah... they don't work out, they don't have second jobs, and they don't date hot chicks.



I definitely have nothing to complain about.

Problems when a domain isn't renewed

Originally Published 2003-08-28 13:56:45

Date: Thu, 28 Aug 2003 11:55:39 -0700 (PDT)

From: "Johnny Fuery"

Subject: RE: mncabinet.com questions

To: "Lisa F

CC: "Stephen N



> 1) If the site is now being redirected to

> mnbuild.com, do we need to do

> anything else??



Well, it's not being redirected. Links directly to

mncabinet.com are simply going nowhere -- your browser

displays a "Page Not Found" error. The domain is

effectively dead.



> 2) Do we have to buy back the site from

> Slutnames.whatever or will the

> redirect stand? And do we know whether or not they

> actually "own" it or

> stole it.?



I'm pretty sure they own the lease to mncabinet.com

fair and square. Unethically, perhaps, but not

illegally.



If you actually want a redirect, i.e., typing in

"http://mncabinet.com" yields your site located at

mnbuild.com, then yes, control of the domain must be

reobtained from Smutnames.



Please note that much of the damage has been done,

however. The prominence of mncabinet in the google

search results went away when we asked google to

remove it from it's directory and cache (remember, it

was linking to the smutnames obcenities). I'm not sure

if you agree, but it seems to me that the largest

value of that domain was in it's prominence in the

google engine. Even if it were recovered, I'm

unfortunately not confident that the google placement

would return. It very well may, but it's difficult to

guarantee that behavior.



Let me know if there are more questions I can address.



Johnny



--- Lisa wrote:

> Johnny,

>

> Well, if nothing else you are very thourough. But i

> must admit - its so

> much info i get really really lost.

>

> I guess i should contact Verio and ask them what is

> this renewal for.

>

> But if you could answer two simple questions for me

> (without too much

> computer explanation for my pea brain):-)

>

> 1) If the site is now being redirected to

> mnbuild.com, do we need to do

> anything else??

>

> 2) Do we have to buy back the site from

> Slutnames.whatever or will the

> redirect stand? And do we know whether or not they

> actually "own" it or

> stole it.?

>

> Lisa

>

>

>

> -----Original Message-----

> From: Johnny Fuery [mailto:jfuery@yahoo.com]

> Sent: Tuesday, August 26, 2003 11:34 AM

> To: Lisa F

> Cc: Stephen N

> Subject: Re: FW: Account Renewal Confirmation

> mncabi, 50220

> mncabinet.com

>

>

> Lisa,

>

> Sorry for the delay in responding. My travel

> schedule

> prevented me from replying promptly. Note that you

> can

> always contact me via mobile phone in the event I

> fail

> to turn around email in a timely enough fashion.

>

> Verio is a hosting company. While they may handle

> domain registration issues as a value-added service,

> their primary business is selling server space,

> i.e.,

> resources on servers attached to the internet

> backbone.

>

> With this in mind, it's difficult to tell from the

> text below whether this is a bill for hosting

> service

> -- which would not have any effect on your domain

> registration -- or some sort of renewal fee

> associated

> specifically with the mncabinet.com domain. The

> reference to mncabinet (as opposed to mnbuild) may

> simply be an anachronism based on when the account

> was

> opened. Or, it may simply be that the server space

> isn't used for anything. Leasing server space from a

> company like Verio unfortunately does not

> necessarily

> mean that anything useful is actually being done

> with

> said space.

>

> If none of this makes sense, perhaps I can offer an

> analogy. Suppose you lease some commercial space in

> a

> downtown office building. You'd undoubtedly have to

> fill out a form and possibly pay a small fee to have

> your company name placed on the lobby directory

> (e.g.,

> Acme Company, Suite 123). To further exaggerate the

> metaphor, suppose you went ahead and paid for

> signage

> on the exterior of the building. This would

> definitely

> be an extra fee, probably billed from the owner(s)

> of

> the building on an annual basis. It's worth it,

> though, right? Instead of a full address, you could

> get away with referring to your location as "The

> Acme

> Building".

>

> Now, suppose you moved offices. You might still

> leave

> that signage up until the end of that year's annual

> billing cycle. This is akin to your domain

> registration. You're translating an internet address

> -- something like 212.204.192.76 -- into a mnemonic

> that is easier for us humans to remember --

> mncabinet.com. In my example, the Acme company

> changed

> their address from something like "100 West Santa

> Clara, San Jose, CA" to "The Acme Building".

>

> The metaphor continues. Even if the signage were

> removed and the office was no longer being used, you

> still might be locked into a long term lease and

> would

> thus have unused office space. Having this office

> space and continuing to pay for it would have little

> to do with your new office or the exterior signage.

> In

> a similar manner, the domain registration has little

> effect on your server space.

>

> In terms of next steps, it needs to be determined

> what

> exactly this bill is for. I suspect that this is NOT

> for domain registration renewal and is rather for

> server space. Here's why:

>

> + Domain registration is for a minimum of 1 year.

> This

> bill refers to a quarterly renewal.

> + Domain registration is inexpensive, starting at

> around $8 or $9 a year with a maximum price of ~$35,

> based on the vendor.

> + The dates show no correlation with the dates

> provided by the global domain registration database.

> + The global domain registration database doesn't

> typically have problems like this, i.e., it doesn't

> get hacked into by folks trying to steal domains.

> We'd

> definitely hear about it if it did. I also expect

> folks would go after higher profile targets were

> this

> the case. (Think high profile domains like

> "business.com", which sold for ~$7 million at the

> height of the dot.com hysteria)

> + I went out to Verio's site, and I think this is

> the

> service you're paying for:

> http://hosting.verio.com/index.php/dnr.html (Note

> that

> the "park your site" fee is not registration-related

> -- it's simply server space)

>

> I do have one question. Were you notified in any way

> that the mncabinet.com registration was expiring?

> Most

> domain registration companies (Network Solutions,

> Register.com, your ISP -- verio, perhaps, in your

> case) promise to notify you before the domain

> expires.

> This is in their best interest, since they're in the

> business of selling domain registration services

> (i.e., they have jumped through hoops to gain access

> to the global domain registration database and

> profit

> from that status) and want the follow on revenue. I

> would be extremely surprised if you were not

> notified.

> Email alerts are typically sent several times before

> the domain actually expires. These would have gone

> to

> the email address provided at the time of purchase.

> Perhaps an individual no longer working with you

> handled this transaction?

>

> If no notification was sent, you may have some

> recourse with the registration company. That's a

> tough

> battle, however. I'm sure there are a number of

> protections for the registar in the contract that

> was

> agreed to at purchase.

>

> At the very least, you probably do not need to

> continue buying server space from Verio. After

> verifying that my suppositions are correct, you can

> go

> ahead and cancel the service.

>

> Let me know how I can help further.

>

> Johnny Fuery

> 925.997.3878