Monday, October 5, 2009

Spyware Doctor - stay away!!!


On another support call for a virus, and I tell the client to download Malwarebytes, and they see an ad for "Spyware Doctor", nearly clicking on it - I yell "NOOOOOOOOOOO DOOONNT CLIIIICK IIT!!!!!" Not sure how, but this program must have some serious ad campaign money, it shows up all over the place. 

While its not a virus, Spyware Doctor is nearly worse - it will turn even the fastest computer into a 1969 VW Beetle (aka 'slug bug'). I have seen it actually remove some spyware and viruses, but there are at least a dozen other programs that do this far more efficiently without clobbering your CPU all day long while you try to work. If you have it, you can easily remove it via Add/Remove Programs in your Control Panel and regain vast amouts of speed.

To make a long story short - DO NOT USE Spyware Doctor!!! Unless you want your PC slow forever more.

Tuesday, September 22, 2009

New virus resembing Microsoft Windows Defender

Who would have thought - what an original idea - 

I come to you today from phone support - on the line with a customer, his antivirus is saying several threats are found and he needs to pay.

Whats the antivirus product called - "Windows PC Defender" - how interesting that this resembles an anti spyware product from Microsoft called "Windows Defender" and how interesting that the interface is an exact clone of the Microsoft product:

"ISN'T THAT ORIGINAL" I thought.

To get rid of it go here:

http://www.bleepingcomputer.com/virus-removal/remove-windows-pc-defender

Tuesday, August 11, 2009

Apple having firmware issues on hard drives

My fellow orange lovers will love this. Just read this engadget, they have fessed up to having some software/firmware conflicts on 500 gb drives (and reportedly others), that cause the laptop to randomly "sleep".

Thursday, August 6, 2009

FreePBX v3 on the horizon with Freeswitch


I am happy to announce that finally the thing I have been waiting so long for has arrived - FreePBX will be releasing their newest version 3 trunk which has been built to support FreeSWITCH natively - finally a powerful configuration engine for Freeswitch - this is an innovation in the telephony software arena.

Of course FreePBX will continue to support Asterisk, but Freeswitch is a next generation platform with wide compatibility and feature set at its core goals, something Asterisk has talked about, but has had minor issues with. v3 is a major platform overhaul that has become engine agnostic.

Some of my readers may ask about all this free stuff, and how they can get it. These are Open Source platforms that are "Freely Developed upon" - meaning that anyone is free to contribute to them and many have, which means they are not limited to the funds of a single company's development budget and 'the skies the limit'. And of course anyone is free to download these applications, but what makes an enterprise phone system that is comparable to the reliability of the old Lucent / Avaya / Nortel style phone systems is not just these little programs, you need a reliable hardware platform such as a SmplPBX, and experienced telephony engineers with a heavy background in Unix and Communications to properly configure it.

A developer release of v3 is currently available, read more about this upcoming release here. While a final release is undoubtedly many months away (still much work to be done on this major platform overhaul), a new release of 2.6 will be immediately available.

Moblin Mobile Linux for Atom platforms

Just thought I would mention this interesting new distro - seems to be a lesser known group, but its 100% dedicated to mobile platform development unlike projects like eeebuntu.

Check it sometime- http://www.devshed.com/mobile-linux/

Sunday, July 5, 2009

Learning Linux/Unix

Some of my associate techs call me a *nix god when I fix their problems, and ask how I do it; while some of my other associate who truly are *nix Pros would call me an amatuer, I must admit after maintaining Linux and Unix systems everyday I have got the basic concepts down very good, which can be impressive to some ;).

You can get around with a few basic commands, knowledge of file locations, networking configs, an archiver (tar) and an editor, but if you want to become truly good as a *nix sys-admin, you must have a solid understanding of bash commands- so to those associates that ask me how I do it - here is a great site for you to learn:

http://tldp.org/LDP/abs/html/

That will step you through shell scripting and bash commands from beginning to end, warning - it starts with the assumption that you know NOTHING, but moves along very fast into advanced areas.

Friday, June 19, 2009

FreePBX vulnerabilities

Just saw this Secunia advisory - if you have http open to your asterisk system managed by FreePBX, 1st off you are'nt being too swift, 2nd, you may have a new vulnerability. Luckily FreePBX has provided updates to fix this (update all your modules), but you are still best not giving any public access to your PBX.

Freeswitch gets bought

Just saw this post from Tony Lewis at Schmoozecom about the changing of hands of the Freewitch product (an open source telephony platform), it seems Baracuda Networks (a major player in spam and network security) has made a major stake in Freeswitch, and the 2 primary developers have become employees of Baracuda (as in 'owned by').

While I can definitely relate with Anthony Minessale having to pay the bills, I am skeptical of Baracuda and their intent. A different product comes to mind (green), which gained commercial backing and soon began a downward spiral into worthlessness while crucial decisions bounced back and forth as to whether to give key development to the commercial offering, or the free open source offering. Other questions come to mind, PR representatives from Baracuda have said they will not be announcing their stance on the project until some time depending on several factors. What are they waiting for? What might change their stance on the product - ie "how high public demand is" - if lots of people want it, then so does Baracuda? Why have they decided to jump into the voice arena?, of which they have not even remote past experience.

It worries me greatly, as Freeswitch was going to be my replacement for Asterisk, which seems to be a great product, but at times decisions dont seem to be made with the project's best interest in mind (asterisk that is). Freeswitch gets its roots from Asterisk, but its goal is more openness, better compatibility with 3rd party components, and more logical programming logic (duh - or it wouldnt be logic;).

Anyways I had been keeping my eyes open on Freeswitch, awaiting its maturity, but now I keep a skeptical eye on it, awaiting political redirections.

UPDATE: July 5

As so kindly noted by Brian West in the comments, in this interview with Kerry Garrison, Anthony Minessale has cleared up any doubts posed by Baracuda's failure to answer key questions.

As for other questions readers might have about freeswitch and its roots, you might start by reading how it started at this site.

Monday, June 8, 2009

Bing it!!!

Well it looks like Microsoft is again trying to regain some footing from Google in the search engine arena, they have abandoned Live.com and now release Bing.com. Bing is a simplified search page in which they have stripped out the many hundreds of links found on your typical microsoft landing page - no doubt in an effort to assimilate googles method of "simply searching and nothing more".

They have some nice features, for instance "Safe Search" restricts all adult content from searches, however safe search is easily turned off allowing all those unwanted search results back in again.

Microsoft has reportedly launched a multi-million dollar ad campaign to promote bing, so dont be surprised to see it on TV. Typically I would tell someone to "Google it" if they were searching for something, but I doubt anytime soon that you will hear anyone say "Bing it" as a friend mentioned to me the other day - the 'force' is strong with Google.

We shall see - competition keeps the knife sharp.

Friday, June 5, 2009

Windows 7 expected in October


Per this article, Windows 7 is scheduled to be released October 22nd - so expext it to be in full gear by Christmas. 

Thursday, June 4, 2009

New LED technology allows Asus laptops to run 9.5 hours

The new eeePC 1000HE has arrived from Asus packed with new LED backlit displays, this new low power technology allows the little netbook too run even longer with a claimed 9.5 hours of battery life on the standard battery. 

Saturday, May 23, 2009

PowerLESS Atom - real world power usage

|

So I picked up a Kill-a-watt the other day (thanks Joe), which is a power meter that sits between the electrical outlet and any device.

I have been measuring everything on earth, a few specs from some devices I checked out:

|

-------------------------------------------------------------------

Atom Dual Core Desktop PC:

  • Intel embedded mb D945GCLF2
  • Atom 330 1.6ghz embedded CPU (8 watt)
  • 1 Stick Kingston DDR2-6400 2gb 9905316-132.A01LF
  • Hitachi HDP725032GLA360 320gb SATA2 low power harddrive
  • DVDRW LG GCC-H23N IDE DVD Burner
  • 5in1 USB Card reader
  • 150 Watt no-name PSU with 60mm fan

Average power usage measured over a 4 day period was 1.22 kw per day. It uses  a mere 48 watts during normal usage, and 63 watts when burning a DVD (most processors alone burn 65-95).

At $.13 per kilowatt, this PC is costing me $58 per year to run 24/7 - its GRRREAT!

-----------------------------------------------------------------------------------------------

My Asus eee 901 Atom netbook is even less @ 11 watts with screen on medium brite, this little laptop would cost me $12 per year if I ran it 24/7 - luckily I only use it half that much ;)!

My Westinghouse 22" LCD is running a cool 33 watts compared to the 300 watts of my 61 inch rear projection (old skool) HDTV, fortunately I dont watch much TV.

Low power computing = big power applications


Today we are going to look at some ultra low power PCs - would you believe this is a PC:

------------------------------------------------

Of course, but what about this:

-------------

Yes this little guy is a PC as well. Marvell makes this little wall outlet PC called the Sheevaplug, while its not truelly a desktop PC as it has no video, it does have a 1.2ghz cpu, gigabit LAN, 512 RAM, 512 flash, and a USB port - which makes it a great fit for Linux driven embedded applications, and Linux 2.6 kernels are already supported. Rumor has it these will sell for around $99.

Back to the first pic which is the Nvidia ION, a dual core 1.6ghz Atom that sports every connection you would ever need including HDMI, DVI, and esata paired with a powerful Nvidia 9400m graphics engine which is capable of full 1080p HD video playback, making it a perfect fit for home  theater PCs (HTPC). ION still hasnt hit the streets, but you can find more pics and info here. -------------------------------------------------------------

On to the next amazing computing device:

This is another board roughly larger than a card box called the Robin by Toradex, it sports Intels Z530 Atom which runs from 1.6ghz to 1.2 and as low as .65 watts power usage. These boards are fully loaded with an expansion board that has video out, Gig LAN, PCIe slot, onboard MicroSD slot, DVI, TV out, SATA port and much more, making it the perfect candidate for a small home NAS or low end HTPC or other appliance. They fully support Windows from XP to 7 as well as CE, and  many flavors of Linux.

-----------------------------------------------------------------------------------------------------------------

On to the final heavy hitter, the FIT (not the Honda):

This little demon sports an Intel Atom Z530 1.6ghz  and a hardware H.264 decoder which allows HD video playback while using just under 7 watts for the whole PC:

Support for all major operating systems could make this a low end desktop work horse, or even a HTPC. Below are the specs, or read more at their site:

  • 1.6GHz x86 CPU
  • 1GB RAM 
  • SATA hard disk 
  • DVI with graphics acceleration 
  • High definition audio 
  • LAN and WLAN 
  • 6 USB ports

Thursday, May 21, 2009

New low power NAS devices and new NAS softwares

VIA has just released a new low power motherboard called the NAS7800 with a C7 1.5ghz, 8 SATA ports, dual gig LAN, CF slot and more... 

This is the ideal platform for low power embedded storage, 8x 1.5 tb drives could yield a great high performace RAID6 system with 9 terrabytes of capacity. So unfortunate it sells for $550, and currently with a minimum order of 500 pieces with no distributors willing to pick it up. 

Next up, we have new appliances from QNAP that uses the ultra-efficient Intel Atom to perform RAID on up to 6 sata drives (+2 esata), with 2 Gig LAN, 5 USB ports all in a nice shiny case. While at nearly $2k it does not come with drives, the features  are extremely rich.

  • Online capacity expansion/migration
  • RAID 0,1,5,6, 5+spare
  • Dual OS on flash - if one fails, the other takes over
  • Rich addon apps like Joomla, MySQL, backup suites, IP Cam DVR
  • Click here for more

------------------------------------------------------------------------------------------------------

I also came across this interesting item today - Port Mutlipliers for SATA - convert a single  SATA port into several - however the SATA interface must support FIS switching for port multipliers, for instance the Adaptec 1430SA (or also Marvell 88SX7042) is a 4 port SATA RAID card that can be expanded by these port multipliers to 20 port RAID card and still maintain wire speed on all channels. These are quite diverse devices with support for internal expansion or eSATA expansion - for instance the device pictured can be installed in an external enclosure and plugged into a single eSATA port on your PC to add 5 external drives. 

On to other items - NAS/RAID softwares:

FlexRAID is a new file system simulating RAID type features with many advantages and without the RAID card. It perform software parity on your data to prevent data loss in case of a drive failure much similar to RAID5, but unlike RAID5 where if a 2nd drive fails the whole array of data is lost, FlexRAID only looses the data on that lost drive, all other drives remain available for access. FlexRAID also offers automatic rebuilding to spares, use if non-similar disks and much more. Drivers are available for both Windows and *nix.

Another interesting NAS OS I have found is called UnRAID, which is mainly aimed at home based users looking to archive movies. Unraid uses many features of FlexRAID in that its all software based, and different drives can be used, and data loss is minimal in the event that more than 1 drive fails. It has free/paid licensing tiers which are quite reasonable, the free version handling 3 drives, and the 'PRO' version handling up to 21 drives. It has been stated this is not for everyone, the system is reasonably fast, but definitely lacks the speed available to true hardware based RAID/NAS systems.

If you missed this other article on Openfiler, you might also check that out for a NAS OS.

Excuse the poor formatting, blame it on Blogger.com

I just wanted to put this out there:

Blogger.com stinks!!!!!!!

I hope my readers will excuse the poor formatting of many of our articles, and the broken image links. The WYSIWYG editor of blogger is terrible, it gives you very little choice as to how images are placed, they simply bump text in random portions, and pictures which are supposed to open full size when clicked on are usually broken. I feel like I am limited to a 2 inch newspaper column. I have also tried imputting articles in raw html, but blogger does not seem to honor html formatting either.

Oh and the auto-save feature for editing, sometimes it decides to reload the whole page and loose all your editing since the last save.

Google - come on, get it fixed, with all those resources surely this is simple!!! I cant wait to get my new site up with integrated blog.

Wednesday, May 20, 2009

Corporate spam prevention on Exchange server and more

Another post about spam, today we will cover:
  • Nolisting (non-Exchange spam fighting method)
  • Exchange IMF
  • Exchange Sender/Recipient Filtering
  • Exchange Connection Filtering
  • Barracuda Networks DNSBL goes public
  • Tip on closing Exchange vulnerability
  • Vamsoft ORF (Open Relay Filter)

I will start off with something non-Exchange related - Nolisting!!! This looks like a wonderful spam prevention technique, that only requires that you have your own domain and control over the MX records.

Nolisting involves creating 2 fake mx records that point at nowhere. Spammers will usually attempt to only send to one server, if it fails they will abandon the attempt, normally they will send to the highest priority server, but some spammers seem to be taking a new approach of pin-pointing the lowest priority server with the assumption that only the primary server will have spam a filtering system - my method will nix both of those attackers.

For my domain I have created the following MX mail records:

  • Priority 1 dummyserver.smpltechno.com
  • Priority 20 mail.smpltechno.com
  • Priority 30 backupmail.smpltechno.com
  • Priority 40 dummyserver2.smpltechno.com

My true mail server being the 2nd one, the dummy servers being simply that, a record that points to a non-existent server name. Read more on Nolisting here.

On to Exchange Spam fighting with native tools:

Exchange 2003 SP2 comes with some new filtering tools to help you significantly fight spam. To configure these filters go to the Exchange System Manager and open the Message Delivery Properties under Global Settings.

First off I will start with the most basic spam prevention filter, Recipient Filtering. This will not do any real active spam blocking, but by checking the box there that says: "Filter recipients that are not in Active Directory", you can aide in preventing directory harvests which spammers use to list out all the addresses in use. You can also use it to prevent certain users from receiving outside email.

Next in line is the Sender Filter tab, you will want to check the box that says: "Filter messages with blank sender." -If you dont know them, block em. You can also use this tab to block individual spammers, but this would be a very tedious method of blocking spam.

On to the hardcore spam killers, Intelligent Message Filtering (IMF), uses heuristics to analyze each message and assigns each message a score (SCL). Filtering is then performed on 2 thresholds, if the score is equal or higher than a certain rating it will filter it at the gateway (1st setting), the next threshold sends the message to the Junk Mail box in Outlook. By lowering the  thresholds on these 2 you can fight more spam, but raising the chance of false positives. I have set mine to very minimum scores, 9 or higher will reject messages at the gateway, and 8 will send them to the Junk Mail folder in Outlook. It is recommended that you read the manual on IMF and filtering here. I should also mention this gets updated bi-monthly through Microsoft Update, an alternative update script can be found here.

Finally the most useful filter probably is the Connection Filter, which use Realtime Block Lists (RBL), aka DNS Blacklists, to look up a sending servers address to see if they are a known spammer.

There are several organizations that publish these DNS blacklists, but today we will be using the new Barracuda RBL, which they have just recently opened for public use. Barracuda Networks manufactures industrial spam filtering   gateways that sit in front of your mail server, if you dont have Exchange and cant use ORF, its a good alternative. To use this list you must register on their site and list the IP of any server that will be using the list. Go to the Connection Filter tab and click add to configure your blacklist provider like the image shown. This is most likely the most efficient method of preventing spam, as users will never have to review messages blocked by the Connection Filter, and many spammers are on these lists.

Now that all your filters are configured you need to enable them. In the Exchange System Manager expand Servers>Your Server> Protocols>SMTP> and open the Properties for the SMTP Virtual Server. On the General tab, click the Advanced button and click Edit button and check off the filters you wish to use. 

While in the SMTP Virtual Server properties it is well advised that you disable external relaying. Click the Access tab and click the Relay button, in here unless you know what you're doing only your subnet should be allowed to relay, and you should uncheck the box that says: "Allow any authenticated user to relay". This could allow a weak account to be hijacked by external spammers allowing them to use your server as a spam sending monster.

Once finished you must stop/restart the SMTP Virtual Server for the settings to take effect. Here is a block diagram that shows how messages flow through the different filtering points:

The above settings should aide in dramatically reducing spam, but if you find your users are still receiving significant amounts of unwanted email, you may need to move on to some 3rd party filtering. I have tried many different platforms for spam filtering, and there is ONLY ONE....

Vamsoft Open Relay Filter for Exchange

I have tried programs from GFI, Symantec, Trend Micro, Sonicwall, and many others, but only ORF provides all the features at a light price, in a light weight package that will nearly eliminate even the largest bulks of bulk mail with a very low false positive rate. A new release has just come out with some great new features.

  • DNS Blacklists
  • Automatic whitelists - if you send to them, they must be on the list
  • Sender/recipient/IP blacklists/whitelists
  • SPF lookups
  • Keyword filtering with regular expressions
  • Attachment filtering with regular expressions
  • URL blocklists - HTML emails are scanned for known URLs of spammers
  • Tarpit delays
  • Greylisting
  • New! Honeypot test - if a spammer sends to a dummy address you set they are banned
  • Integration with external apps like antivirus scanners
  • Quick import/export of settings to transfer golden settings to other servers
  • SQL integration for reports and list management if needed
  • Excellent reporting tools

Some of the other great features of ORF that I have yet to find in other programs:

  • One low price from SBS to Exchange Enterprise 
  • Low footprint 15-30 mb RAM and low CPU usage
  • No annual fee one time license

Finally here is a great article from Vamsoft (if you are using ORF) on preventing spam that shows your address for both the sender and recipient. You might look at some of the other spam related articles here if you are interested in other ways to prevent spam.

Tuesday, May 19, 2009

Once again Windows 7 might be a big UHOH! for consumers


This time around things might be different, but not in the way many we're hoping. In comparison to Vista, Windows 7 is much more user friendly and a bit more conservative resource wise, on average it should run smoother and faster - whats not to like?

However, it looks like Microsoft is in some trying times as is the rest of the world and they have decided they need to fill the gaps by raising the price of Windows 7 compared to Vista. So far this is scaring OEMs like Dell away as they are the first to market for the new software, and it is projected the same will happen for retail consumers. Vista was a bit more than XP, and now they are attempting to inch it up there once again - the cost of living? - well I have not received any cost of livign raises in the past couple of years, if anything my boss gave me a pay cut for the cost of living!

Monday, May 18, 2009

Less power for your CPU



   Would seem to be a common misconception that CPUs are only happy when they are sucking lots of power, well today we will cover the cost of this power, and discuss why this misconception is mostly false. 

Your average conventional desktop CPU uses 95-130 watts (a measurement of joules per second), however both Intel and AMD are making conventional CPUs as well as "low power CPUs" that somehow run in the same gigaherts, and on average produce nearly the same calculations per second as their conventional counterparts. 

Some of the new Core2Duo and Phenom CPUs even suck 145 watts.

We have covered the heavy weight contenders, no on to the slim distance runners. Intel makes several low power processors in starting at 65 watts, and going down to around 40 watts, and they have a special platform called the Atom that makes as low as 0.65 watts. Personally, in my home and everyday business use, we only use Atom based platforms.

My atom desktop is a dual core 1.6 ghz, does everything I need for severe web browsing, document editing, some pretty regular photoshopping and even DVD ripping, this little power house uses 8 watts of power.

My atom laptop is a single core 1.6 ghz, still just as potent, I have 25 browser tabs open this very moment, along with a pdf and excel sheet. This unit uses a whopppping 2.5 watts.

Now thats all great, I have reduced my power usage by over 90%, I am reducing my carbon footprint dramatically, but the real joy is when I leave my charger at home in the morning, work throughout the day on my 2 pound laptop, then come home, have dinner, sit on the couch with my wife, and work some more, and finally go to bed and plug my laptop in to charge, all without burning my legs (i like to call those 17 inch Dells leg warmers;).

Moving on to servers, these things need some real computing power, conventional servers use one or 2, or even more 140-160 watt CPUs, some of my clients have a few of these. Now these things run day and night 24/7/366 - that could be some considerable consumption. But even here there is room to spare, Intel has low power Xeon server processors starting at 80 watts, and going all the way down to 38 watts, and they are real computers, a single one of these does what 2 CPUs did 5 years ago and at a great power savings.

Moving on to the numbers that actually matter:

Your power company bills you by the kilowatt hour (1000's of watts per hour). The average power company charges $0.11 per kwh, but here in Southern California, since power is greener than the rest of the nation we pay $0.13, so being greener pays all the more.

So the conventional CPU (just the processor) if run 8 hours per day, would cost as follows:

95 watts= .095 kwh x .13 x 8 hours x 365 days = $36 per year

If it was an 8 watt 1.6 ghz dual core Atom CPU:

8 watts= .008 kwh x .13 x 8 hours x 365 days = $3 per year

Or if you desire more processing power, there are several options in 45 watt area: = $17/year

Or if you for instance use my Atom based eee netbook @ 2.4 watts: $0.95/year

Now a Xeon server cpu running 24/7 @ 160 watts would use:  $182/year

Ok, some may say thats barely negligible, but many companies have many workstations, and sometimes even many servers. Most workstations are not on 24/7, but looking at making your next server purchase as an experiment in efficiency may put you on the road to savings soon.

The average 'green' cpu will cost 15-20% more than its conventional counterpart, and sometimes 15% less even. Lets say a 3 ghz 160 watt xeon is $330, and its 65 watt counterpart is $380, the $50 difference would be recovered in less than 6 months: $182 vs $74/year. You may only have 1 server now, but who knows next year you may need 2, 3-4 servers saving you $100 each could be quite helpful.

Other things to think about:

There are several other areas in the computer that can be optimized, such as:

  • high efficiency hard drives
  • low power memory
  • low power fans

Not too mention, less power will mean less heat generation, which converts to less cooling costs, overall power savings could be considerable, just as Google did with their servers.

Not saying some people dont need true high power computing, for instance one of my customers runs a photolab and where they run Photoshop on 10-15 layers, with 25 megapixel cameras out now, you can burn some gigahertz really fast, they truelly needed a Quad Core i7 with 6gb ram. 

For more information on processor power usage Intel list all of their CPUs here.

32 nanometer CPUs on the table @ Intel

I am planning on deploying a number of high power servers in the coming weeks, and have been doing some research on CPU efficiency (as in how much money the electric company charges you to run that quad core i7). More on that in another article, in the mean time, I found some interesting info on future 32nm chips from Intel here. Current quad core 45nm processors (Core2Duo quad) have around 800 million transistors inside, 32nm chips are already on the test bed with 1.9 billion transistors, which will mean a significant increase in computing power, and more importantly to me, lower power consumption. I couldn't care any less about how much your gigahertz, todays computers are blazingly fast, even if its the slowest model, but being able to run the same applications at an energy savings is quite enticing when you are a company with several dozen computers.

Thursday, May 14, 2009

New old NAS

ok a quick one here - I have been in the dark ages it seems using freenas, all this time there has been Openfiler which while its not as slim as freenas, its got some nice features:
  • Point-in-time snapshot support with scheduling
  • Online volume size expansion
  • Volume usage reporting
  • Volume migration & replication

    It looks well established, developed back in 2001, and feature rich, and it runs on the other nix which seems to adapt faster than BSD. www.openfiler.com/
  • Tuesday, May 12, 2009

    Labs: Server 2008, Exchange 2007, MS Forefront and Enterprise Spam Filtering

    Well this was a long day in the lab. We have tested Server 2008 a bit here and there over the last year and recently a client requested a full update to the all the "latest and greatest" server software, so today we decided to put together a full blown lab with a server and fresh client workstations even, using all the latest applications available today (not including betas such as Exchange 2010), the end goal being to test the full capabilities of Forefront security.





    So a preview: we have tested the above software and finally end up taking a non-MS route and using alternative softwares. Read on to find out....

    Microsoft Forefront is not a single program, its their new flagship platform for security and network stability. It is everything from an antivirus/anti-spyware/antispam suite to a full blown 3 server networked security and connectivity suite that securely connects every aspect of your Microsoft life, from more secure VPN to internet web caching (results in faster internet, formerly ISA server), to less workstation viruses with better AV, and WSUS (Windows Software Update Server) - the Forefront platform ties all this together with its myriad of Forefront applications.

    We went with the standard installs of Server 2008 and Exchange since the desired Forefront suite does not support Small Business Server - this took approximately 10 man hours to prep the platform from installing windows, to installing Exchange, SQL Server (required by Forefront), and finally Forefront for Exchange and Forefront Client Security for the server (note we are pretty proficient at slapping a server into shape). - What a PAIN!!!

    Forefront Security for Exchange was surprisingly easy to installed (compared to all the rest), it took only about 3-4 minutes to install, and another 15 to configure - WOW!!! Forefront plugs right into Exchange and will scan all mail for viruses and spam before users ever see it. It looks like Forefront is VERY good at stopping viruses, it comes out of the box integrated with 8 different Antivirus scanners, and actually recommends you enable at least 4 of them (hmmm, I wonder how efficient that is in production), oddly 5 of these AV scanners were very obscure to the extent that I have never seen them before, the other 3 were somewhat obscure (no Symantec here). The spam area is pretty typical, it has keyword filtering, spam blacklist lookups, whitelists, and blacklists.


    Now on to Forefront Client Security, this has several aspects, there is a ginormous server aspect. It uses the following items on the server to secure clients

  • WSUS to deploy approved critical Windows updates silently to workstations
  • A SQL database to store a client and software info
  • A SQL database for reporting
  • Management Console for pushing the installation to client computers and monitoring

    Then the workstations get a very slim Forefront client (called MS Security Essentials) which uses around 10 megabytes of RAM - very impressive. This client scans for viruses and spyware very efficiently and is actually a 'spiffed up' version of Windows Defender (finally MS gets something right).

    Unfortunately this solution would fit only a couple of my clients, as it requires a massive IT output to implement it, and licensing models are very prohibitive to sub 150 node networks, and doesnt really start to 'come in handy' until the 300-500 node network.

    Forefront for Exchange requires Exchange Enterprise licenses (more $$ than Exchange Standard)
    If you have lesss than 50 PCs you should definitely be using Small Business Server (75 max), which Forefront does not support due to its resource needs at the server (its a hog).

    ******* Key reading: *****************************
    A BETTER SOLUTION for the SMB and possibly Enterprise:

    If you are a candidate for Small Business Server (75 users max), a far more efficient and cost effective solution is:

  • Vamsoft ORF for Exchange to handle virus and spam filtering in emails

  • Comodo Antivirus business edition or NOD32 bus. ed. for workstation security

    Vamsoft ORF actually works better than Forefront on all fronts, and even for the Enterprise deployment. Vamsoft supports regular expressions (Forefront lacks), which allows it to scan emails and get those odd variations of words like v1agr@ or m0rtg@ge that we so often see now - a keyword filter just isnt enough, it must grab the variations, and ORF does. ORF also supports a number of virus engines, as well as blacklists and whitelists, and even automatic whitelisting of people you email, another thing I didnt notice in Forefront was greylists, and tarpit delay. The best of all ORF is layed out with far more options {than 4front}, and yet I can configure it in the same amount of time, and ORFs memory and CPU footprint is very small at around 10mb ram. Settings are saved in a text file, so I can quickly pass my golden installation on to other clients Exchange servers, making configuration even quicker - like 3 minutes.

    Whats more the, the reports in ORF are very clear and concise and actually solved a problem for me in 3 minutes, at which 4 hours of trying to use microsoft resources failed.

    Coming in at just under $300 one time license, ORF is worlds below the microsoft platform, and at that same cost it will work on any version of Exchange from SBS to Enterprise, and includes SQL integration for settings and reports at no additional cost.

    On to viruses and spyware:
    Comodos antivirus engine is great at around 15 mb ram, and NOD32 uses a bit more at about 30 mb- still worlds below Symantec at 200 mb.

    The Forefront platform looks great, seems well thought out, seems to work well, looks thorough, but I am reluctant to recommend it at all because it still lacks a couple of minor items that competing solutions have, and the implementation cost would be staggering compared to other solutions, even if your IT is on salary, they might have something better to do, finally not to mention the actual cost of the licenses. I dont know what Forefront costs (we used a 120 day trial), but I know its pre-requisites are very costly, like SQL server and Exchange Enterprise, and multiple servers for its recommended deployment like Windows Essential Business Server (actually 3-4 server solution for network security and management). As said, it would most likely fit very well on a 500 node network that has unlimited IT staff on salary, and would most likely in the long run save time and run very efficient, but it does not even belong on a medium sized network of 100 users.
    ****************************************

    The same goes for Server 2008 Standard and Exchange 2007, there are some advantages over previous versions, but unless your infrastructure *requires* them, its not worth it - a client with less then 50 users recently requested an upgrade from their Small Business Server 2003 platform to full blown Server 2008 Standard - nix!!

  • Friday, May 8, 2009

    Anonymous-e-Mail AntiSpam



    A common misconception in spam prevention seems to be "I just need to filter it", well I spit in the face of that concept, here is a new one - the less people with your address, the better - plain and simple. The more spam you filter, the more chances you will get legit mail confused with spam, an important client email in your spam box, or junk in your inbox.

    The first rule for spam prevention - dont give your address out if you dont know what you will receive - you may say "i really need to join this mailing list" or "I *need* to register for this online sweepstake" - well in comes anonymous mail accounts, and the number one being spamgourmet.com

    www.spamgourmet.com will not only hide your true email from receiving junk, but will also allow you to send/reply to mail without revealing your true address as well. The best part - its all done using your regular email program, no need to check some other site, no need to install any software. Just hand out your spamgourmet address to any site, or anyone, and spamgourmet will auto-forward any mail to your real email, if you reply, it actually replys back to the spamgourmet server, strips your real address out, and forwards it on to the recipient showing your fake email. 
     
    You set a number for how many emails you wish to receive at this address and once that amount has been exceeded any further spam gets "eaten". There is a max of 20 emails (there is even a way around this...keep reading).
     
    Read their FAQ - it is amazing, try the advanced mode out for some added features, for instance if you want to exceed the maximum 20 spam emails, its right there in advanced. They also have several dozen other email domains that you can use so it doesnt say @spamgourmet.com, just enable advanced mode, and click "send a message".  

     This is an open source system that was started in 2000, so I think it really is the best around, and its free.

    www.gishpuppy.com also lets you send/receive, but they dont seem to be as reliable as the gourmet site.

    And finally here are some more temporary junk mail sites:

    http://www.sizlopedia.com/2007/05/27/top-20-temporary-and-disposable-email-services/

    Ok - I wish I had some really cool spam filters to post here, but I think I will leave that to another article.

    Monday, May 4, 2009

    Apple + Google = uhoh??

    Was reading some of my junk feeds just now and saw this, looks like someone doesnt like the close board of directors that google and apple share (2 members reside on both boards at the moment), i guess this violates one of the old anti-trust acts so there may be some trouble to be had. I - well I am suspicious of both of them at all times;)... just thought it interesting.

    Green Machines....

    Verdiem has  released a new program called Edison that can actually tell you how much power your PC is using, and aide you in better managing your PC's power usage. - I am going to install it on my Atom asap - with that much power savings on an Atom I should be able to displace a new V8:)~~~

    Thursday, April 30, 2009

    Well - this is something interesting I found at a client site:
    Nearly 2 gigabytes of drive space being used by google desktop search, which my client says they weren't even using. Sometimes I say "If you dont use it, its no big deal." - but this program is a hog, use it or not.

    Tuesday, April 28, 2009

    A Better Anti-virus

    This post will be a kind of work in progress as I dont have time to thoroughly compose it at the moment.

    Over the past year I have been dealing with several highly disappointing antivirus programs. My biggest problem being that 95% of the antivirus suites available nearly clobber your pc in the quest to scan viruses - once installed the AV program just uses up all your CPU and RAM making your pc not so fun to use - whats worse the desease or the cure. Personally I dont even run an antivirus suite on my netbook, they kill my battery life, and I know pretty well to stay away from viruses (knock on silicon).

    My favorite AV program for some time was AVG Free 7.5 which has just been completely abandoned for updates by AVG (upgrade asap to 8.5). I was a little disappointed when 8.0 came out using a bit more resources, and then 8.5 even worse, but I guess you need to keep up with the competition (viruses that is). For a free AV program AVG is pretty decent, and its relatively speedy still - note that the free version is for NON-commercial use only - meaning you must pay to use it at work.

    Currently my preferred paid antivirus suite is NOD32 from ESET, although I am not quite thoroughly excited with it, it does seem to use a low amount of resources (and thats their moto) compared to most other AV programs, but its definitely not the 35 mb of ram advertised on their site.

    Here is my no-no list either due to system hogs, or bad interface:

    • Symantec / Norton Antivirus - anything they make - stay away
    • McAfee - definitely stay away from their desktop apps, the corp versions are so-so.
    • Kaspersky - totally shutdown a servers network connection at one site
    • AVG Pro corp version- not bad, but not great, some sloppy design work on the admin side
    • TrendMicro - what a mess
    • eTrust Ez Antivirus - not very good at detection
    • CA Computer Associates - same thing
    • Clamwin - no active scanner, very dangerous
    • Panda - tends to be too restrictive
    • Sophos - not really a corporate competitor, but it works 'ok'
    • Webroot - kind of a pig
    • Spyware Doctor - severe system hog - remove this asap
    • PC Tools Internet Security - definite resource hog also, get rid of it
    • ParetoLogic Antivirus - resource hog

    Heres a couple of reviews I found that dont really seem to have much basis, and maybe quite skewed, but I plan to make a first hand assessment at some point soon:

    The latter site recommends Pareto Logic which I tried and found the above review to be a scam, that program is a ginormous memory hog.

    Programs that I endorse:
    • AVG Free 8.5
    • Eset NOD32
    • Panda Cloud Antivirus - the very best AV I have found to date, just needs network version
    • Windows Defender - in addition to a normal antivirus program

    Some that I definitely plan to check out:

    • Avast antivirus
    • Antivir
    • Comodo Antivirus  **Did it, great product
    • Panda Cloud Antivirus **Checked it- TOP NOTCH free product
    • F-Prot
    • Microsoft Forefront **Checked, unfortunately its not a good choice for most users
    ...more to come...

    UPDATE:

    I tried Comodo Internet Security which is a very impressive program, however, it is not perfect... The program is very thorough, it has an antivirus/spyware engine, and a full firewall, the installer gives you the option of installing one or both the AV and Firewall components, I opted out on the firewall. Once installed you can set the program to run in various modes depending on how hard you want it to work at detecting viruses (how much of your PCs resources you want it to use). During the normal use "out of the box" settings, it uses very little memory/CPU, a mere 30-35mb of RAM and no CPU, during a scan RAM usage remains the same and CPU floats between 2-10%. There is a "paranoid" mode which seems to scan with extreme scrutiny, using slightly more CPU. Now - the thing that prevents me from slapping this on just anyones PC, under the "normal mode" it monitors all activity and warns you when anything suspicous happens - ie a flash video creates a temp file - it will ask you to first confirm the action. I believe this can be minimized, but I havent dug quite deep enough yet. Some people that are annoyed by Vista's nagging confirmations may not deal well with this. But its options are very well layed out, it seems like it would be very good at detecting most any virus without taxing your resources:


    ...more to come...

    NEW!!!: I found these charts below at this site, it DOES NOT mention a few that are worth mentioning such as AVG or Comodo Internet Security, both of which perform better than anything listed in the images below, although the data is definitely valid and worth noting:

    ***************

    ***UPDATE 5/10/09

    Well I finally found something that is the very best at what it does. Panda Cloud Antivirus is a free virus scanner that only uses about 15 megabytes of ram and so far after installing on several client systems it seems to catch the viruses.

    The cloud uses a new cutting edge technology of peer to peer virus prevention, all of the installations of this program subscribe to each other to prevent viruses and there is no such thing as automatic updates - its ALWAYS up to date!!! The options are very slimmed down, and the program never bothers you with stupid questions, it just works.

    This is a great program except that its rather new and they have not yet developed a corporate version with centralize management. 

    ***UPDATE 8/1/2009 Panda stay away - unfortunately Panda has proven by some of my clients to be inefficient at preventing viruses. Back to Eset and AVG.

    ***Update 2/6/2010: Theres a new wolf in the pack, check out Security Essentials here.

    Thursday, April 23, 2009

    Push email for your mobile


    Having trouble getting push email to your smart phone?

    (Push is instant delivery vs periodically checking).

    Several new phones support push email, but your mail provider may not, in comes mobipush.com who offers free push forwarding. They allow you to forward up to 5 Accounts free. Just click on Free signup on their site.

    The setup is drop dead simple, just give it your current email and password, and the site will detect the proper settings.

    Next you are presented with 2 choices , you can send a txt to your phone which will have a link to a .cab file installer (for Windows based phones only) that will install the settings to your phone or else you can manually enter the settings to your phone. A step-by-step guide on how to configure your device is on their site.

    Many phones only support one push account, Mobipush allows you to funnel several accounts into one, using several accounts allows you to centralize your email, but also keep it segregated and organized. For instance check your work email, personal email and junkmail like facebook all from one phone.

    There are several other similar services such as emoze.com, but mobipush seems to be the best bang for your buck.

    SMPL-Route

    Today we will cover some of the options and features available on the SMPL-Route appliance group. This appliance comes in a number of flavors including:

    • SMPL-Route - Enterprise class router/firewall
    • SMPL-Route-CF Content Filter Gateway
    • SMPL-Route-VPN - VPN Gateway
    • SMPL-Route-MW - Wireless Mesh Router
    • SMPL-Route-LRW - Long Range Wifi Bridge(1-25 miles)

    Each product is custom designed around its particular purpose, using optimal hardware and software for its end purpose. These appliances are driven by open source software powered by Linux or BSD Unix platforms for the highest levels of stability and feature sets.

    The base SMPL-Route includes features such as:

    • Nat Firewall with 100,000 States
    • Up to 256 interfaces per system
    • Max 4096 firewall/NAT rules
    • Firewall rules independant of NAT Rules
    • Reverse Outbound NAT
    • SSL VPN
    • PPTP VPN
    • IPSEC VPN
    • Software and Hardware VPN clients/peers
    • VLAN and VLAN Routing/Switching
    • Multi-WAN Load balancing
    • Multi-WAN Failover
    • Dynamic DNS
    • Traffic Shaping to ensure bandwidth to the desired services (ie VOIP)
    • QOS
    • Customizable Views
    • Real time service and traffic reports
    • Basic spam filtering (product like ORF is better recommended for Exchange server)
    • Bridging (ie wifi bridge)
    • Supports most major routing protocols
    • Based on FreeBSD Unix

    SMPL-Route-CF is a content filtering gateway that can be used as a router as well, while it lacks some of the features of the standard SMPL-Route, the two can be used in unison to provide an unmatched routing and filtering solution. It provides all of the features found on popular commercial products like Sonicwall and Watchguard, with one key differentiating factor - no annual support contract or update contract required. Some of the features include:

    • Web filtering - category based, or static site lists
    • Phishing filter
    • Active X Filter
    • Virus scanning at the gateway (before it hits your PC)
    • Spam filtering with per-user quarentine
    • By-pass login
    • Very concise per-user reports to show who 'problem' users might be
    • Based on Debian Linux

    SMPL-Route-MW is a mesh wifi product aimed at providing backbone connectivity to large campuses or rural areas where hardwired access is difficult to find. Some features include:

    • Multiple Radios to dedicate channels or frequencies
    • 2.4 ghz
    • 5 ghz
    • 900 mhz
    • Self healing - when a unit fails other nearby nodes connect to rebuild the routes
    • VLANs
    • Multiple internet gateways
    • QOS
    • Linux OS

    SMPL-Route-LRW provides Long Range Wireless bridging to give connectivity to sites that are difficult to provide hard wired connections. This is industrial strength wifi that can span up to a 25 mile distance with near wire speed throughput. Features include:

    • Multiple Radios to dedicate channels or frequencies
    • 2.4 ghz
    • 5 ghz
    • 900 mhz
    • VLANs
    • QOS
    • 108 mb Turbo bandwidth
    • Linux OS

    All of these products have been selected for their robust feature sets, often found on far more pricier commercial products. Since they are based on Open Source, some of them provide features that commercial products just have not caught up to yet, making them the logical choice on which to build your network.

    For more information about the SMPL Appliances please see the contact page on our website.

    Thursday, April 16, 2009

    Atom cell phones coming soon...

    Was just reading this interesting article that talks about Symbian S60 being developed for the Intel Atom platform. S60 is the OS used on Nokia smartphones. With the prototype being made for the Atom, this could mean a new market niche for higher powered hybrid phone / netbooks (small laptops) - a fully integrated communications platform with your normal PC type application capabilities as well as voice.

    Sunday, April 12, 2009

    SMPL Appliances

    Simple Technologies introduces SMPL Appliances, these appliances are highly specialized enterprise grade appliances based on open source software. These appliances include:

    • SMPL-NAS - Network Attached Storage server
    • SMPL-PBX - Asterisk based telephone system
    • SMPL-Route - FreeBSD based router, VPN gateways and wifi appliances

    These products are custom built around their specific purposes using the latest in industry standard open source software, with a significant cost difference compared to competing commercial products and many more features, in the end they equate to lower TCO and higher productivity - a logical choice for businesses large and small. Our R&D department has spent months pouring over the various offerings available, and they have settled on this collection of products as being the best in their areas of expertise.

    Look forward to more details on these products soon...

    Friday, March 27, 2009

    MIPs Routers being targeted by virus???

    Well not really a virus, but to the techno laymen, per say, you could call it that. There is a new botnet that is targeting certain routers and taking control of them. According to this security site, it seems that any router or DSL modem with a MIPS based processor - (ie many variants of the popular Linksys WRT54G wireless internet router), can be potentially hacked if all of the following criteria are met:
    • Have a MIPS CPU
    • You have opened ports 80, 22, 23 to the public internet
    • Have an easy password (anything found in a dictionary)

    ALL of the above need to be met, and trully this is not a hack, it is a vulnerability created by you the user, which someone has chosen to take advantage of. To my knowledge, I have never seen a router that opens the above noted ports to the public internet, although 99% of them give the user capability to do so in the router settings.

    On to what it does: A botnet as discussed earlier is a group of several infected devices that work together to spread their infection to other devices and perform other ill-will over the internet, all of this done in complete autonomous fashion - in other words its creator {Dr. Frankenstein} unleashes it on the world, and it grows and lives completely independent of its creator.

    This botnet attacks weak routers using its dictionary of passwords, once it logs in it replaces a service on the router with one of its own, this new infected service then blocks all access to the router to you the user, then it logs into a chat service where it receives commands from the other bots, kind of a cloud of nastiness. This site lists all of the possible commands a device may perform; there are several, from scanning the internet for other compatible devices that it may infect, to sending massive amounts of traffic to someones network (causing them to loose internet connection).

    MIPS based devices can probably be found on a good half of the worlds internet routers, so this is something people should be careful of, most likely nobody has unknowingly opened the noted ports - duh thus they would have awareness of it, at which point the password they use is extremely crucial. Passwords should be at least 8 characters with both numbers and letters which cannot be found in the dictionary, and other signs if allowed by your platform.

    This is a truly scary because the infected device may go on un-noticed for days or even weeks doing its dirty deeds, whereas a virus infected computer will usually quickly be noticed by its user. More than likely a user would notice slow internet due to an infected router, but many of its day to day actions may not affect your internet speed.

    How to stop an infected device - unplug your internet, then run a factory reset to erase all settings, please first consult your routers manual (usually available for download on the manufacturers website), then start from scratch with a BETTER PASSWORD!!!

    What is DroneBL.org?- Well plainly stated at the top of their site: "DroneBL is a realtime monitor of abusable IPs, which has the goal of stopping abuse of infected machines." Which means it may be of interest to security geeks unlike myself (I am not insecure;).

    Thursday, March 26, 2009

    Intel writing Open Sores for the Atom???

    Yes its true Intel likes open sores - they are writing an open source linux platform optimized for the Atom platform. It is aimed at becoming a Mobile OS for Atom based mobile appliances. It boots super fast and has support for hardware like the MSI Wind - read more about it here.

    Biggest virus in history - NOT

    Its even on the 10 o'clock news - ConfickerC will 'strike' on April fools - I myself wonder what it will be striking - Iraq? the Pentagon? should we get in our bunkers?? - I doubt it.

    I seem to remember the last largely publicized virus being Nimda - when was that like 1999? Surely this will be no bigger than the Schmitfraud rootkit virus, my techs and I have removed that virus and its variants over the last 3-4 years 100s of times, yet I don't see it on the news.

    Well - lets get on to the meat of it, maybe there is some truth here. ConfickerC is a botnet virus, meaning all the infections create a 'domain' that communicates with each of its nodes, kind of a cluster of madness, and they all phone home, but not to a central server like some might think, it calls its relatives to see if they have any updates, if so it downloads them, this is a peer2peer virus that is totally self sufficient once its creator releases it into the wild. The 'do-gooders' of the world are attempting to block these domains, find the source and stop it. So this is were the creators got creative, they developed the bot with several dozen randomly generated domains to use thus making it x times more difficult to prevent.

    Here is a complete write-up on the Microsoft site covering the prior variant, ConfickerB, which is now for the most part rendered useless through MS patches.

    Compared to the first 2 variants, what differentiates ConfickerC is that it is programmed to use THOUSANDS of domains, making it virtually impossible to accurately block, along with new vulnerability holes to once again allow it access.

    Its purpose: ASSIMILATION - just like a cancer, no purpose other than uncontrolled reproduction.
    There are many side affects, however they are all towards the end goal of spreading to other computers:

    • stop all antivirus programs and windows updates
    • lock down permissions on the system so that only it has control
    • it will block access to any virus related websites

    Once it has complete control of its host it will use a list of passwords to attempt connections on any other computers it finds on the network so that it can authenticate and perform remote code executions to seed its offspring. It will also spread itself via USB flash drives.

    Who does it attack?- well the majority of computer users of course, any Windows system will be attacked - my MAC men are probably gloating 'better reason for you to get a MAC' - well please note, MACs get viruses also.


    How do you block it?- make sure to have the latest updates from microsoft and your antivirus vendor - daily Automatic updates are your best friend. STAY AWAY FROM ANY popups that report you need antivirus - especially one you have never heard of - google it first.

    If you have Symantec Antivirus or AVG and you get a pop-up like this:

    IT IS DEFINITELY NOT LEGIT!!!

    Virus notifications should plainly come from your antivirus program and you should be familiar with it.

    This is all well and good (or bad really), but the first 2 variants were supposed to have caused utter destruction world wide as noted here, but of my dozens of customers, {and they love to get viruses daily} only 3 had a Conficker infection. I prefer to keep all of my customers systems up to date with the latest antivirus, and latest MS updates, with most sites fully monitored for updates. We use antivirus gateway appliances to stop the virus before it touches the network.

    So really I wont be surprised to get a call or 2 on April fools.

    More than likely I will get dozens if note hundreds of emails from clients and family warning me of the new 'biggest virus ever' they saw on the 10 o'clock news. I still get chain letters from clients warning of the latest snopes verified Hallmark virus from 2005.

    UPDATE 4/15/09: Well so far I have only heard of one person getting this conficker infection, and to my delight, it was not one of my customers - this bomb sounds like a real dud.

    Friday, March 13, 2009

    The best little rat I have cought in a long time



    In my field I often come across quite impressive examples of advanced technology, so usually I am unimpressed by such things...

    so i found a steal on this Gyration Gyrotransport ($13 @ ebay), and I was a little disappointed when it arrived and it was much smaller than I expected. But after trying it out, this thing is amazing, and the size is actually perfect - its a great difference from the bulky microsoft mouse (actually it was compact) I had. You dont use it like a conventional mouse you dodo - its just like a car alarm remote - you just point it and click with your thumb. 

    The transmitter has a 1gb flash built in which came with the software for the mouse, and can go with any files I put on it - geek factor+ 

    It works as advertised - 100 foot range, I can go out in the yard and it still works - now i can control my media center while I mow the lawn, and being that my media center controls 2 TVs this thing means I am not locked to one screen - I can just take it with me to the other room. Of course I will probably get another if I cant find a decent steal on the Gyration Media Center remote. 

    Its the most functional mouse I have seen so far, and in a light weight package - it will probably get lost fast in the deep pits of the couch.

    Thursday, March 12, 2009

    Google - the new antichrist?

    The phone company may think so- In case you didnt hear- they are taking over the world- https://www.google.com/voice/about + http://www.youtube.com/profile?user=Google&view=videos

    tons of features, and so far they say its all FREE!!!

    Its the obvious Grand Central "single point of contact" or UM on steriods.

    *Complete merging of voice calling, SMS messaging, and email
    *Follow-me to all your phones
    *Voicemail to text
    *Rules based routing
    *FREEEE outbound dialtone to US and possibly Canada, + low international rates.

    How it works - you get a new phone number from google - I know sounds like a pain, but they are obviously trying to get you to take the great plunge of commitment (if you truly use it for an extended period you will probably be torn bleeding to abandon it).

    Then you abandon all your other numbers as far as the world is concerned and only provide people with your new "G-number", and pledge your allegance to "G".

    Next use your googler number to forward to your cell, home, office - where ever you may roam it will ring them all at once or in other methods.

    When you get vmail - it actually goes to text in your email or you can call into your "G-number" and check it.

    If you call into your "G-number" it will give you the option to dial back out to any US number for free, or of course theres always the Jabber PC clients, or of course Asterisk/Freeswitch jabber module will then let you call out google from any PBX.

    Vonage is going to mess their dividends!!!!

    EDIT 4/15/09: Well it seems google has found some insecurities in their service and have shut off all SIP access to google voice, this is a real downer for SIP PBX users like myself, but everything still works as advertised through their application. So far there are no plans to remedy this, hopefully they will, but in my thinking it is only to their advantage to lock users to their platform - duh - how will they see adwords.