My 2nd Head

Your Brain is Green Of all the brain types, yours has the most balance. You are able to see all sides to most problems and are a good problem solver. You need time to work out your thoughts, but you don't get stuck in bad thinking patterns. You tend to spend a lot of time thinking about the future, philosophy, and relationships (both personal and intellectual). What Color Is Your Brain?

Jeff Bonwick writes about ZFS license announcements and how it rocks.

Robin Haris ( zdnet ) and Jörg ( c0t0d0s0 ) are writing about RAID6 respectivly ZFS. RAID6 will surely be a marketing success as most people do not know about ZFS, or are thinking that making the move from RAID5 to RAID6 will solve all their problems. Those companies who have heard about ZFS have certainly had a look at it. Most companies are rather conservative when implementing new technology. This is not a bad thing, especially when trusting your precious data to a new filesystem. Paradoxically, without proper checksumming like ZFS does, your data could be at higher risk, even if ZFS is a rather new technology. While there have been some problems with ZFS, none of them have affected the on-disk data. This is certainly the result of thoroughly testing ZFS like no other filesystem (leaving real-world "testing" beside). There are still some issues, that may prevent ZFS to be deployed in a broader area: -Performance issues on Storage Array with stable storage (not ignoring cac...

There is a new fix to improve performance for databases on ZFS. Can't wait to see OLTP benchmarks where ZFS is being faster than UFS with DirectIO for. Oh, and did you know there is some work going on for getting the ZIL onto seperate devices (NVRAM or Solid State Disks) (For those who don't know what the ZIL is, look here )

After almost waiting a year, the Lego bricks are falling neatly into place. This means, that it is finally possible to run Windows under Solaris (where needed :-).

Yeaah!!! Just found out that Splunk 3.0 will support access control. This means e.g., that developers can debug production problems without logging in to that host. They will see only logfiles relevant to finding the problem... This is a huge step forward, as logs often contain classified data.

As close to the data as possible! Yesterday's post from Erik reminded me about a paradigm, that came up when I implemented the SSH Tectia Suite . It's the question where to do security properly. The answer is as close to the data as possible. The problem with today's corporate networks is, that the "enemy" is already inside. There are so many people (internal/external) connecting to a company's network, which makes firewalls almost irrelevant. This effect is called deperimeterization. Firewalls have a false reputation, that they protect everything. But because there are so many people who have access to both sides of firewalls, this doesn't make it very secure. What could be a new approach? The Jericho Forum (a security focused group) says: "Individual Hosts should be able to defend themselves". I certainly agree with that. Most operating systems contain integrated firewalls waiting for activation. Many applications provide extended authenticati...