Comments for Michael On Security http://michaelonsecurity.com Thoughts on IT Management and Security. Trying to Make it All Come Together. Sat, 19 Jul 2008 21:25:13 +0000 http://wordpress.org/?v=MU Comment on Staying On Top of Things by David http://michaelonsecurity.com/2008/02/19/staying-on-top-of-things/#comment-34 David Mon, 26 May 2008 17:33:48 +0000 http://michaelonsecurity.wordpress.com/?p=20#comment-34 Hi Michael, >I use a text file with vim. Seriously. >It is located on a remote server that >I can access from anywhere, and it >has a very obvious format: >Apply patches to front-end IIS >servers: >x verify that a policy exists >x schedule change >- apply patch on 2/20/2008 @ 00:01 I found that Gmail draft mode is the most bang for buck way of storing to-do-lists and/or similar stuff. For something a little more serious I would put them on mind maps by using FreeMind. By the way, nice article. Hi Michael,

>I use a text file with vim. Seriously. >It is located on a remote server that >I can access from anywhere, and it >has a very obvious format:

>Apply patches to front-end IIS >servers:
>x verify that a policy exists
>x schedule change
>- apply patch on 2/20/2008 @ 00:01

I found that Gmail draft mode is the most bang for buck way of storing to-do-lists and/or similar stuff. For something a little more serious I would put them on mind maps by using FreeMind.

By the way, nice article.

]]> Comment on Staying On Top of Things by Michael Gorsuch http://michaelonsecurity.com/2008/02/19/staying-on-top-of-things/#comment-33 Michael Gorsuch Sun, 06 Apr 2008 01:39:02 +0000 http://michaelonsecurity.wordpress.com/?p=20#comment-33 Ron, I could see the truth in that study. All too often, I adopt a process and stick to it for a few good months. Eventually, I stop following it for who knows what reason, and things start to stagnate. Then, I either rediscover my old method or pick a new one, and things take off again. Results probably has more to do with the commitment to get things done than they do with sticking to a particular dogma. Ron, I could see the truth in that study. All too often, I adopt a process and stick to it for a few good months. Eventually, I stop following it for who knows what reason, and things start to stagnate. Then, I either rediscover my old method or pick a new one, and things take off again. Results probably has more to do with the commitment to get things done than they do with sticking to a particular dogma.

]]> Comment on Staying On Top of Things by ronperris http://michaelonsecurity.com/2008/02/19/staying-on-top-of-things/#comment-32 ronperris Sat, 05 Apr 2008 20:41:40 +0000 http://michaelonsecurity.wordpress.com/?p=20#comment-32 Whether you gather all tasks from email folders, physical in-boxes, notes and verbal commitments and carve them into a stone tablet with a 2 inch chisel. Or choose to manage them in Microsoft Project with GNATT charts showing relationships of all tasks. Or simply list them in an ASCII text file. Is the increase in productivity from the method you choose or from your dedication to following a particular method and reviewing all your commitments regularly? Even when a method is working well, I find myself doing something novel like using sticky notes on my monitor. Even with a detailed list of tasks and all my ongoing projects and appointments documented I still toy with different methods to increase my focus. It would seem that the desire to always evolve the method will tend to increase your productivity in general. I was searching for a link to an IBM research paper that talked about a study that documented the productivity of groups using different software development methodologies. I think it included agile, waterfall, and extreme programming. The study concluded that all groups that changed from any one to another saw an increase in productivity in the period for which the test was conducted. Anyone seen this paper? It would be interesting to find information to support the idea of continual process refinement or adoption of a new model consistently increasing productivity. Whether you gather all tasks from email folders, physical in-boxes, notes and verbal commitments and carve them into a stone tablet with a 2 inch chisel. Or choose to manage them in Microsoft Project with GNATT charts showing relationships of all tasks. Or simply list them in an ASCII text file. Is the increase in productivity from the method you choose or from your dedication to following a particular method and reviewing all your commitments regularly?

Even when a method is working well, I find myself doing something novel like using sticky notes on my monitor. Even with a detailed list of tasks and all my ongoing projects and appointments documented I still toy with different methods to increase my focus. It would seem that the desire to always evolve the method will tend to increase your productivity in general.

I was searching for a link to an IBM research paper that talked about a study that documented the productivity of groups using different software development methodologies. I think it included agile, waterfall, and extreme programming. The study concluded that all groups that changed from any one to another saw an increase in productivity in the period for which the test was conducted. Anyone seen this paper? It would be interesting to find information to support the idea of continual process refinement or adoption of a new model consistently increasing productivity.

]]> Comment on Staying On Top of Things by Jason Faulkner http://michaelonsecurity.com/2008/02/19/staying-on-top-of-things/#comment-31 Jason Faulkner Sat, 22 Mar 2008 00:25:50 +0000 http://michaelonsecurity.wordpress.com/?p=20#comment-31 I tend to use VIM to organize my thoughts, but I usually use a list on a whiteboard or a todo list management software to manage my todos. Most of the time, however, when it comes to work-related things, if it's going to take me too long to do it right away, I'd just rather file a ticket and get on with life. That way it can be tracked and someone else has the ability to do it if I get too much on my plate. I tend to use VIM to organize my thoughts, but I usually use a list on a whiteboard or a todo list management software to manage my todos.

Most of the time, however, when it comes to work-related things, if it’s going to take me too long to do it right away, I’d just rather file a ticket and get on with life. That way it can be tracked and someone else has the ability to do it if I get too much on my plate.

]]> Comment on Staying On Top of Things by Raymond http://michaelonsecurity.com/2008/02/19/staying-on-top-of-things/#comment-29 Raymond Wed, 12 Mar 2008 02:50:26 +0000 http://michaelonsecurity.wordpress.com/?p=20#comment-29 I use Vim to keep track of almost anything and everything i do on the computer in the office and at home. And the names of my files normally have a naming convention like _.txt And even then, things can get really messy over time; so in addition to that i use a folder system to categorized stuff that i do and placing the files into the appropriate folder. I use Vim to keep track of almost anything and everything i do on the computer in the office and at home. And the names of my files normally have a naming convention like

_.txt

And even then, things can get really messy over time; so in addition to that i use a folder system to categorized stuff that i do and placing the files into the appropriate folder.

]]> Comment on Staying On Top of Things by Eric Talevich http://michaelonsecurity.com/2008/02/19/staying-on-top-of-things/#comment-28 Eric Talevich Mon, 10 Mar 2008 15:56:19 +0000 http://michaelonsecurity.wordpress.com/?p=20#comment-28 Vim does make a good to-do list editor. I use it roughly the same way you do. For syntax highlighting, I butchered a copy of the built-in yaml.vim, named it todolist.vim, and added a few more things to highlight automatically. However, I don't keep a todo.archive; instead I chop the list into sections (delimited by headings starting with the '{' character, so [[ and ]] can be used to jump around) and move completed tasks to the bottom of the file -- separated by month, if necessary, for monthly reports. The uncategorized top of the file makes a good dumping ground for e-mails full of suggestions and ideas. I'll admit the result is not free of entropy. Abandoned projects and ideas need to be cleaned out occasionally. But it works well for tracking multiple longer-running projects with lots of "nice-to-haves" that will most likely evolve or be scrapped over time. Vim does make a good to-do list editor. I use it roughly the same way you do. For syntax highlighting, I butchered a copy of the built-in yaml.vim, named it todolist.vim, and added a few more things to highlight automatically. However, I don’t keep a todo.archive; instead I chop the list into sections (delimited by headings starting with the ‘{’ character, so [[ and ]] can be used to jump around) and move completed tasks to the bottom of the file — separated by month, if necessary, for monthly reports. The uncategorized top of the file makes a good dumping ground for e-mails full of suggestions and ideas.

I’ll admit the result is not free of entropy. Abandoned projects and ideas need to be cleaned out occasionally. But it works well for tracking multiple longer-running projects with lots of “nice-to-haves” that will most likely evolve or be scrapped over time.

]]> Comment on Staying On Top of Things by James Mitchell http://michaelonsecurity.com/2008/02/19/staying-on-top-of-things/#comment-27 James Mitchell Sun, 09 Mar 2008 03:39:33 +0000 http://michaelonsecurity.wordpress.com/?p=20#comment-27 At the risk of promoting myself, those who are interested in this topic should read my article on David Allen: www.bostonconvivium.com/jm_essays/david_allen As I state in this essay, Stephanie Winston is second generation time management -- no underlying theory, just a collection of tips from the first generation. Third generation is David Allen, currently the most insightful thinker in the world on this subject. James Mitchell jmitchell@kensingtonllc.com At the risk of promoting myself, those who are interested in this topic should read my article on David Allen:

http://www.bostonconvivium.com/jm_essays/david_allen

As I state in this essay, Stephanie Winston is second generation time management — no underlying theory, just a collection of tips from the first generation. Third generation is David Allen, currently the most insightful thinker in the world on this subject.

James Mitchell
jmitchell@kensingtonllc.com

]]> Comment on Staying On Top of Things by Dane http://michaelonsecurity.com/2008/02/19/staying-on-top-of-things/#comment-26 Dane Sat, 08 Mar 2008 16:44:51 +0000 http://michaelonsecurity.wordpress.com/?p=20#comment-26 I'm a big fan of the todo text file as well. My issue is that I don't currently store it in an interpipes-accessible location which leads to synchronization issues. Also, I’ve really started to appreciate Google Calendar’s ability to send SMS reminders. I find it’s handy for appointments and things that have a tendency to slip out of my mind when I’m waist-deep in the task at hand...and it’s also handy for stuff you’d like to be reminded of even when you’re not in front of a keyboard (perish the thought). My email inbox is a variation on what you've described. The only things that reside in my inbox are currently relevant email conversations that don’t qualify as “real” action items (i.e. organizing a social event for that night/weekend, correspondence with old co-workers and pen pals, etc.). Anything that has a longer significance window (i.e. doesn't need to be in my face, but is important for down the road...like flight itineraries, hotel reservations etc.) gets starred (I'm a Gmail guy) and archived. I'm also a bit of a label fanatic, but I'm not so sure I'm getting any real payoff as I can usually find emails just as quickly or quicker by searching as by snooping through label-filtered lists. Another pattern I’ve noticed is that I generally end up with 2 or 3 notepad windows open throughout the day that contain bits and pieces that are relevant to one of the tasks I'm working on. I've looked around for something more structured that might help with this, but most of what I've seen gets in the way too much for my liking. Actually, this is one of my "And today I learn Python" type tasks where I'll whip up a quick tool to cover this...something with lots of malleable tabs and lists. I’m a big fan of the todo text file as well. My issue is that I don’t currently store it in an interpipes-accessible location which leads to synchronization issues. Also, I’ve really started to appreciate Google Calendar’s ability to send SMS reminders. I find it’s handy for appointments and things that have a tendency to slip out of my mind when I’m waist-deep in the task at hand…and it’s also handy for stuff you’d like to be reminded of even when you’re not in front of a keyboard (perish the thought).

My email inbox is a variation on what you’ve described. The only things that reside in my inbox are currently relevant email conversations that don’t qualify as “real” action items (i.e. organizing a social event for that night/weekend, correspondence with old co-workers and pen pals, etc.). Anything that has a longer significance window (i.e. doesn’t need to be in my face, but is important for down the road…like flight itineraries, hotel reservations etc.) gets starred (I’m a Gmail guy) and archived. I’m also a bit of a label fanatic, but I’m not so sure I’m getting any real payoff as I can usually find emails just as quickly or quicker by searching as by snooping through label-filtered lists.

Another pattern I’ve noticed is that I generally end up with 2 or 3 notepad windows open throughout the day that contain bits and pieces that are relevant to one of the tasks I’m working on. I’ve looked around for something more structured that might help with this, but most of what I’ve seen gets in the way too much for my liking. Actually, this is one of my “And today I learn Python” type tasks where I’ll whip up a quick tool to cover this…something with lots of malleable tabs and lists.

]]> Comment on Staying On Top of Things by Michael Gorsuch http://michaelonsecurity.com/2008/02/19/staying-on-top-of-things/#comment-25 Michael Gorsuch Sat, 08 Mar 2008 12:37:20 +0000 http://michaelonsecurity.wordpress.com/?p=20#comment-25 @Michael: I can't stand the tension, either. I am constantly having to adapt my system to allow for a little bit of breathing room. It seems that things are extremely busy as of late, and I am not making the headway that I used to. There are lots of regular interruptions in my line of work that make staying on task very hard. Rather than feel bad for not getting all of my major tasks completed, I am going to try only focusing on one 'big' task per week. If I can accomplish that, at least I will feel that I have progressed. @Mun: I read the David Allen book several years ago, and tried to do it all with notecards. That worked awesome, until I started leaving notecards behind ;-) The textfile thing works much better for me, and am glad to have found something that works. @K: Thanks for the pointers about the TRAF system. This may add a little more method to my system, thus making it more effective. I need to focus more on the regular meetings with myself, if only to review my list and ditch the cruft. @Michael: I can’t stand the tension, either. I am constantly having to adapt my system to allow for a little bit of breathing room. It seems that things are extremely busy as of late, and I am not making the headway that I used to. There are lots of regular interruptions in my line of work that make staying on task very hard. Rather than feel bad for not getting all of my major tasks completed, I am going to try only focusing on one ‘big’ task per week. If I can accomplish that, at least I will feel that I have progressed.

@Mun: I read the David Allen book several years ago, and tried to do it all with notecards. That worked awesome, until I started leaving notecards behind ;-) The textfile thing works much better for me, and am glad to have found something that works.

@K: Thanks for the pointers about the TRAF system. This may add a little more method to my system, thus making it more effective. I need to focus more on the regular meetings with myself, if only to review my list and ditch the cruft.

]]> Comment on Authenticating Against Active Directory With Python by Michael Gorsuch http://michaelonsecurity.com/2008/02/04/authenticating-against-active-directory-with-python/#comment-24 Michael Gorsuch Sat, 08 Mar 2008 12:29:43 +0000 http://michaelonsecurity.com/?p=14#comment-24 Jacob - from rote, the Python LDAP module will do LDAP over SSL if you change your connection string to 'ldaps://mydomain.local'. Remember, though - a lot of LDAP servers have SSL off by default, including Active Directory. You may want to include a helpful test for customers that at least looks for basic connectivity to port 636 or 3269 before accepting the parameter as valid. I think a lot of people assume that SSL support is on out of the box. Jacob - from rote, the Python LDAP module will do LDAP over SSL if you change your connection string to ‘ldaps://mydomain.local’.

Remember, though - a lot of LDAP servers have SSL off by default, including Active Directory. You may want to include a helpful test for customers that at least looks for basic connectivity to port 636 or 3269 before accepting the parameter as valid. I think a lot of people assume that SSL support is on out of the box.

]]>