The Wiert Corner – irregular stream of stuff

Jeroen W. Pluimers on .NET, C#, Delphi, databases, and personal interests

  • My badges

  • Twitter Updates

  • My Flickr Stream

  • Pages

  • All categories

  • Enter your email address to subscribe to this blog and receive notifications of new posts by email.

    Join 1,862 other subscribers

Archive for the ‘Opinions’ Category

Twee goede behulpzame zaken met vakkennis in Amsterdam: Muco Electronica en Modelbouw, Meijer IJzerwaren

Posted by jpluimers on 2012/07/27

Ik had wat spullen aan electronica en ijzerwaren nodig, en onderstaande zaken hebben me uitstekend geholpen.

Ze zijn beide niet groot, maar dat is juist hun kracht: ze weten alles van wat ze verkopen, geven juist advies en hebben vriendelijke bediening.

Daarnaast hebben ze beide naast hun winkel, ook een webshop.

Allereerst Meijer IJzerwaren. Read the rest of this entry »

Posted in About, LifeHacker, Opinions, Personal, Power User | Leave a Comment »

Beveilings issue site die persoonsgegevens bewaart; gaarne input op dit concept van melding (site slaat wachtwoorden onversleuteld op)

Posted by jpluimers on 2012/07/16

Gaarne ontvang ik input op dit concept dat ik in de loop van de dag via een webform (andere manier van melden kent de site niet) wil gaan sturen naar een site die wel op heel bizarre manier met privacy om gaat:

Als curator van iemand met een verstandelijke beperking in uw regio is het ondermeer mijn taak om te waken over zijn privacy.

Ik wilde zijn gegevens controleren die bij jullie geregistreerd staan en heb daarvoor een nieuw wachtwoord aangevraagd via de optie “Wachtwoord vergeten” op jullie site. Ik was geschokt toen ik merkte dat u het oorspronkelijke wachtwoord terugmailde.

Dit betekent dat u de wachtwoorden van uw klanten opslaat op een manier die te herleiden is tot het oorspronkelijke wachtwoord, een prio 1-security-issue!

Dat is een schending van de beginselen van beveiliging: zodra er op uw server wordt ingebroken, liggen eenvoudig alle persoonlijke gegevens in 1x op straat, zoals
– volledige adresgegevens;
– geboortedatum;
– BSN;
– inkomengegevens van het huidige jaar;
– bankrekeningnummer.

Dit zijn voldoende gegevens om een zeer geslaagde identiteitsfraude te kunnen uitvoeren, en naar mijn idee veel meer gegevens dan u in uw persoonsregister zou moeten bijhouden.

In de pers zijn afgelopen tijd voldoende van deze gevallen verschenen. Ze staan bekend als “plain text offenders” een vorm van publiciteit die als zeer onprettig wordt ervaren.

Ik geef u tot en met maandag 23 juli 18:00 West-Europese zomertijd de tijd om telefonisch en per email aan mij te melden dat en hoe u dit heeft opgelost en instaat voor de veiligheid van de gegevens van inschrijvers op uw site.

Onder oplossen versta ik dat u:
– geen wachtwoorden bewaart op een manier waarmee de oorspronkelijke wachtwoorden kunnen worden gegenereerd;
– in plaats daarvan op een deugdelijke manier – met juiste salting – een hash van de wachtwoorden opslaat;
– bij “vergeten wachtwoord” een éénmalig tijdelijk wachtwoord afgeeft dat voor een beperkte duur gebruikt kan worden om een veilig wachtwoord te kiezen

Mocht het daarna niet zijn opgelost, dan meld ik dit bij de autoriteiten die gaan over privacy en persoonsgegevens.
Die zullen ongetwijfeld in hun onderzoek mee laten wegen dat u geen verplichte wettelijke informatie (zoals KvK en telefoonnummer) op uw website voert (waarmee nu dus niet te herleiden is wie eindverantwoordelijk is voor deze site).

Met vriendelijke groet,

Jeroen Pluimers

Bij voorbaat dank!

De site schaart zich met bijvoorbeeld MyVodafone tot de Plain Text Offenders, niet echt handig met persoonlijke informatie.

–jeroen

Posted in About, Opinions, Personal | Leave a Comment »

Happy Towel Day – Today is the 11th towel day in remembrance of a truly remarkable author.

Posted by jpluimers on 2012/05/25

Today is the 11th towel day in remembrance of a truly remarkable author.

–jeroen

PS: not sure if this is legal, but I just came across a H2G2 PDF.

Posted in Opinions | Leave a Comment »

Ken Rockwell pages on Nikon D700, D300 and Sony PCM-M10 Review

Posted by jpluimers on 2012/04/30

If you love photography, be sure to read Ken Rockwell’s website. It is filled with useful information on photography and audio ranging from generic tips on making better pictures to specialized tips for many brands of equipment.

Since I use a Nikon D700 and D300, these are the most important for me, with a few quotes: Read the rest of this entry »

Posted in About, Opinions, Personal, Photography, Power User | Leave a Comment »

Nog meer oude info :)

Posted by jpluimers on 2012/04/27

Dit was 1 van de dingen die ik midden jaren ’90 van de vorige eeuw voorzag: oude info blijft tot in de eeuwigheid beschikbaar.

  • Naam: PLUIMERS SOFTWARE ONTWIKKELING
  • Vestigingsadres: HOOFDSTRAAT  207  B
  • Vestigingsplaats: 2171BC  SASSENHEIM

Toen het nog een eenmanszaak was en je de 500 meter van je favoriete vereniging naar huis blind kon afleggen.

–jeroen

via: Kamer van koophandel: handelsregister : Kiezen informatieproduct.

Edit 20230701: bovenstaande informatie is inmiddels verhuisd naar een andere server:

Posted in About, Opinions, Personal, Power User | 2 Comments »

Installing Delphi XE2: disable/uninstall WorkPace 3.0 and Data Guardian 5.2 first

Posted by jpluimers on 2012/04/10

Lot’s of corporate environments keep killing the productivity of their software developers by running WorkPace. They claim to prevent RSI, but the main thing they do is getting you out of your mental flow.

Workpace (yes, it is written in Delphi) hooks itself into processes by injecting REC300.DLL into it.

That particular DLL prevents Delphi XE2 from installing in several of the systems colleagues tried, and gives you error messages like these:

'' is not a valid integer value

Followed by a bunch of access violations, and Process Monitor indicating issues reading the key HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\REC300.DLL which is part of WorkPace 3.0 (an old 2007 version).

The next problem was Digital Guardian (an old 2010 version) hooking itself into all processes. Uninstalling that is a pain, as it requires a special uninstall key, but luckily the automated update script on the SCCM server’s distribution share contained that in an encrypted form. Uninstalling this solved the problem.

Maybe newer versions of WorkPace and Digital Guardian wouldn’t have interfered with the Delphi XE2 install. If so, that would be another example of technical debt.

WorkPace and Digitual Guardian are most likely there because of government induced regulations in the corporate environment.

I’m feeling a bit like Dilbert now: the corporate environment is interesting, but often they make “getting work done” so much harder than it could be.

–jeroen

Posted in Delphi, Delphi XE2, Development, Opinions, Software Development, Technical Debt | Leave a Comment »

Debt in IT and Software Development (via: Coding Horror: Paying Down Your Technical Debt)

Posted by jpluimers on 2012/04/04

Debt and flood insurance

Thanks to Randy Glasbergen for the debt image

I love this quote from Jeff Attwood on technical debt in 2009:

periodically pay down your technical debt

and the Computer Weekely article about half a year ago:

Short-term speed may come at the price of long-term delays and cost.

Lately, I find that I need to explain Debt in relation to IT and Software Development more and more often.

We now all know what happens with the financial system when we let debt get out of control.

The same holds for your IT and Software Development.

Debts get introduced by not “playing by the rules”. The quotes are there because you can not always play nicely, and the rules are not always clear or known.

Lets give a few examples of rules that – from experience at clients – are more often than not neglected. The examples are based on Windows, but could just as easily be Mac OS X, Unix, OS/400 or anything else.

  • Make sure you use a recent Windows version
    I often see companies lagging more than one version behind (i.e. still use Windows XP or SQL Server 2000). That’s too far.
  • Don’t run your users with too many privileges (and certainly not as Administrators)
    Especially running as Administrator will get you in trouble with User Account Control (UAC) in Windows Vista and up.
  • Using directories like C:\TEMP is a no-no.
    This should be a no-brainer, but truckloads of in-company software still thinks it can write everywhere.
    I know C:\TEMP used to be the Temporary Folder some 20 years ago.
    But that was then, and this is now: Use the %TEMP% environment variable or GetTempPath function (even better: the GetTempFileName function or the .NET Path.GetTempFileName function).
    More in general for known folders, use CSIDL or KNOWNFOLDERID whenever possible. Your favourite development tool usually has a library functions for that, for instance the .NET System.Environment.GetFolderPath function.

These few were examples ranged from technically very broad to specific. There are more, but these will give you a rough idea how wide the field of debt can be. Even debt outside the realm of Technical Debt can turn out to be really expensive.

Every time you  postpone or skip a Windows version, you collect some debt in the hope (often wrongfully called expectation) that you earn more on the money/resource you just didn’t invest and putting that money/resource to use otherwise. The same holds for any other kind of debt.

The main problem with debt is not the total of the debt, it is the interest rate that makes the accrued debt grows faster than most people and organizations realize.

This is actually one of the main causes of the current world wide financial crisis, the same holds for many IT debts.

And for all kinds of debts, you often don’t know how high the interest rate will be, so the accrued value can be way beyond what you expect.

I’ve regularly seen projects collecting so much debt, that migration costs raised to thousands of hours because of it, resulting into management taking another very bad decision: rewriting the stuff from scratch. Don’t do that: Joel on Software excellently describes what happens when you do that.

What to do about it?

You might say “don’t collect debt”, but you can’t always avoid debt.

So you need to build periods where you pay off accrued debt. And you need to do that regularly, in order to avoid the interest pitfall.

This does not limit itself to software development (though that’s what I normally focus at). It covers a wide range of IT topics.

Sometimes, you can even pay your debt in advance. For instance, I was among the first to switch from Windows XP to the x64 of Windows Vista. I knew it would cause pain, but it immediately payed back by being able to use much more memory, and run more Virtual Machines at the same time. That made me more flexible and productive.

–jeroen

via: Coding Horror: Paying Down Your Technical Debt.

Posted in *nix, .NET, Delphi, Development, Opinions, Power User, Software Development, Technical Debt, Windows, Windows 7, Windows 8, Windows Vista, Windows XP | 9 Comments »

3rd Generation iPads most important aspect: 264ppi screen resolution (via: Entering A High-Resolution, Post-PC World… | The Future of Reading

Posted by jpluimers on 2012/04/02

Ever since I bought PCs, monitors, laptops and other devices with displays, I went for the highest resolution I could afford (though I didn’t try the QXGA 2048×1536 in my Thinkpad T60 or T61p)

I bought a 13-inch MacBook Air, not a MacBook Pro not because of SSD (it is nice, no doubt), but because the screen resolution.

Small digression:

Last year, I had a huge disappointment where almost all laptop manufacturers were not only ditching 1920×1200 in favour of 1920×1080 (that’s 10% less vertical display estate right where apps waste that with higher toolbars, ribbons, task bars, etc!), but also ditched the 1920 pixel wide 15.something inch form factors in favour of 17 inch screens. Switching from 15 to 17 inch adds another 2 pounds to your laptop. Not nice!

Now the 3rd generation iPad beats all of my other displays. Not only in resolution (it does), but especially in ppi: at 264 ppi it reads like paper.

It took a long time, but this will introduce a new era of high ppi displays on mobile, and hopefully not so mobile devices so we have retina displays (measured at viewing dinstance) everywhere (and might also introduce the post-PC era, though the issue of software development on all those smart devices needs to be solved first; more on that in a later post).

So over the last 20 years, we went from lean back paper through lean forward reading displays into lean back reading iPad and ePaper at comfortable (264 / 200+) ppi.

Now that’s progress:

The 3rd Generation iPad has a display resolution of 264ppi. And still retains a ten-hour battery life (9 hours with wireless on). Make no mistake. That much resolution is stunning. To see it on a mainstream device like the iPad – rather than a $13,000 exotic monitor – is truly amazing, and something I’ve been waiting more than a decade to see.

It will set a bar for future resolution that every other manufacturer of devices and PCs will have to jump.

Having that much resolution in a handheld device will be the final step in changing reading forever. I’m not the only one who believes this. Andrew Rashbass, chief executive of The Economist Group, recently gave a fascinating presentation he called LeanBack 2.0. He postulates that in the days of print, we leaned back and read. The Web and computers made us lean forward to read. Devices like the iPad have restored our ability to lean back, relax, and read. LeanBack 2.0!

–jeroen

via: 3rd Generation iPad: Entering A High-Resolution, Post-PC World… | The Future of Reading.

Posted in Opinions, Power User | Leave a Comment »

The “San Seriffe” of PHP: “PEP 313 — Adding Roman Numeral Literals to Python”

Posted by jpluimers on 2012/04/01

At 9 years of age, PEP 313 still is a classic april fools joke. One of the hilarious parts:

This PEP is rejected. While the majority of Python users deemed this to be a nice-to-have feature, the community was unable to reach a consensus on whether nine should be represented as IX, the modern form, or VIIII, the classic form. Likewise, no agreement was reached on whether MXM or MCMXC would be considered a well-formed representation of 1990. A vocal minority of users has also requested support for lower-cased numerals for use in (i) powerpoint slides, (ii) academic work, and (iii) Perl documentation.

–jeroen (who also loves the San Seriffe joke of 1997)

via: PEP 313 — Adding Roman Numeral Literals to Python.

Posted in Development, Opinions, PHP, Scripting, Software Development | 1 Comment »

intelligent answer to “whats my ip” on Google Search

Posted by jpluimers on 2012/03/23

It looks like Google decreased traffic to many “Whats My IP” sites by automatically answering the whats my ip – Google Search query.

I’m not sure when they introduced this, but it is good and bad at the same time.

–jeroen

Via: whats my ip – Google Search.

Posted in Google, LifeHacker, Opinions, Power User | 2 Comments »