Wednesday, January 23, 2013

DNS Issues

Sorry about the site being down for a while. I moved my domain over to, and completely forgot to update the DNS settings....

Tuesday, November 20, 2012

Samsung ARM Chromebook Review

Samsung ARM Chromebook Review

I've been a fan of Chromebooks ever since Google shipped me the CR48. For what seemed like a pretty under-specced netbook, the potential was really the main thing that hooked me. I used the CR48 religiously until I upgraded to the new Samsung Series 5 (3G/Atom). It became my main computer in college courses, doing pretty much everything I needed a computer for, minus a few programming assignments. For those types of projects, I relied on LogMeIn to get me through, but it wasn't a great solution.

With the old Chromebook, I encountered quite a bit of slowdown when streaming some high-def content or streaming music and browsing image-heavy websites (non-recovering Reddit addict here). I had to make a rule for Chromebook use, no Gmail in the background if I wanted to keep things running smoothly. For the most part, this wasn't a huge problem, but over time it starts to get grating.
I'm happy to report, as I write this review from my new $250 Samsung Chromebook, that I am streaming music, keeping an eye on Gmail, streaming 720p from YouTube, Redditing, and writing this review in Docs (Drive?) with only a few hiccups here and there as new songs and videos load, not even enough to be an issue. If there's any general-purpose computer that could make me believe in the power of ARM, its this.

The good news is that Google has finally done away with the under-powered 'feel' of the old Chromebooks. This computer feels fast, and in reality, that's the only thing that matters. It finally feels good to use. If I were Intel, I'd be reviewing the battle strategy right about now.

As far as software goes, the stable build of Chrome OS is nice enough, its still mostly cloud based, although the majority of what I use Drive for works offline. I had to restart the system to switch to the Dev channel, and Chrome OS restored my tabs and windows to the exact location where I had them open on the screen, that's pretty cool. You can even pin files for offline access (think pinning Google Books or Music in Android). Chrome OS also has support for VPN connections (L2TP/IPsec [PSK or User Cert] and OpenVPN), although as of this writing, I haven't had the chance to test this functionality.

Now, lets get to hardware. Initially, the build quality feels a bit plasticy and cheap, although this wears off once you get your hands on the keyboard. The whole machine is incredibly lightweight, so much so that it feels more like a toy or display model than an actual computer. Its light enough that carrying it from room to room with one hand almost feels natural. The keyboard is rather nice to type on and feels very natural. The whole system has a very sleek look of it. With a slightly-shiny silver paint job and a matte black keyboard, it really has a professional look going for it. Google Goggles even thought I was taking pictures of a Macbook Pro. I can only imagine how cool it would look with a backlit keyboard. Battery life seems less than other Chromebooks I've used (from my averages, about 6ish hours of high usage / high brightness), but I don't see this being a problem. The power adapter scares me a bit, it uses a very thin plug that seems like it may get bent out of shape if a wayward child or dog ran at it from the wrong angle, but time will tell on that point. In this build, Samsung decided the majority of ports would be better places on the back of the system, and given the sleek design, I'm inclined to agree with them. Full-size HDMI, 1x USB 2.0, 1x USB 3.0, SD slot (with a really nice auto-flap that you can't break off), 3.5mm Audio Out, and Sim Slot. The Mali-T604 GPU really shines when streaming 720p video. I watched an entire movie streaming from Google Drive with 2 performance hiccups, much better than previous models. Next year, I'm placing my bets on ARM.

But this is a Chromebook after all, and Google is all about  building open platforms, so lets talk dev options. Samsung did away with the physical 'jailbreak' switch in favor of a key combination to launch into recovery mode. I can't say I really blame them, as long as the feature is well documented (and it is). Even the boot flash is writable (if you remove the write-protection screw from the bottom first), much better than taking the CR48 apart to put it into write-mode. Theoretically, you could hack the software on this as much as you wanted without prying apart the case once. This is absolutely wonderful. Check out the developer page for everything from component information to disassembly guides to dev mode guides:

All in all, for $250, you can't really go wrong. This is an outstanding build for the money, and I finally feel that Chromebooks have hit the price point where they are considered more than a joke or a nerd product. Friends of mine have actually purchased this model at retail stores because the price was right. I do still dream of a day when you can buy a Chromebook for $100, and it looks like Acer is moving that direction already.

Check out the gallery for some pictures of the machine:

Thursday, May 10, 2012

Eject the Warp Core: A practical look at filesystem segregation and encryption.

Here's my presentation I gave at Ohio InfoSec Forum today about the "Ejectable Core Backtrack Machine" and how filesystem segregation and encryption can help keep your data out of the wrong hands.

To get the full experience, open up the speaker notes to read along with what I'll be saying. It won't replace actually being there, but hopefully it'll help you grasp the concepts.

Future considerations (from InfoSec):

  • tmpfs instead of /tmp
  • Find a way to disable direct memory access on the kernel level (firewire and PCI can exploit this)

Monday, April 9, 2012

Tom's Tutorials: TrueCrypt - Easy Mode

I've been looking to post some more tutorials on various tech things, so here's the first. In this video, I explain getting started with TrueCrypt. Just the easy stuff for now, how to create normal and hidden volumes. Later, I'll explain full disk encryption and hidden operating systems.

If you want to subscribe to the playlist, you may do so here.

Chrome OS: Aura Window Manager

Google made a major update to Chrome OS today, releasing the Aura window manager on the Dev channel users. Check out the full rundown and screenshots in the Google+ post here.

Monday, November 7, 2011

Chromium OS Bootable Flash Drive! (Built on: 11/4/2011)

This version brings a bunch of beta design functionality and some speed increases! Enjoy!
I did notice some driver weirdness on some machines with this build, let me know what you find out.

Credits and Utilities:
To unpack this file, you will need the totally awesome and free unzipping utility: 7zip
This pack contains the Image Writer for Microsoft Windows, which is a great, simple way to take or place images onto drives. Give these guys a hand!
Instructions are included in a text file in the download!

Thursday, October 27, 2011


As a coder, I've never found cloud-based IDEs to be very useful. Sure, its a great idea, all of your data and project work accessible from any location and securely stored. It sounds like the perfect development environment. I had played around with Cloud9IDE, but I never felt that they were getting it quite right, they had moved in a good direction, but their scope was too limited. I didn't just want to store my open source projects in the cloud, I wanted shell and FTP access, I wanted a small hosting platform for testing, I wanted the ability to share and publish my creations at will. No cloud IDE could give me that... until now.

Enter: Kodingen. Kodingen is a web developer IDE, plus FTP server, plus SVN/Git/CVS host, plus web host, plus platform. Its hard to describe all the things Kodingen does, or... will do, rather. Lets get that point out of the way first. The first thing you should keep in mind when building things on Kodingen is that it is a beta platform. Work has been progressing fairly rapidly as they gear up for their big stable release, but in using this as a development platform, you'll run into things that just aren't built yet. For instance, the integrated domain purchasing/linking: I have no idea how this will work in the future, it looks like a good idea, but the final product has yet to be released. As far as version control systems go, don't count on it just yet, those are still in development. For every feature that Kodingen has, there's another feature that just isn't finished yet. I don't really see this as a downside, however, instead, I feel very excited for what the future holds.

For a very-much-in-beta project, Kodingen is one of the slickest HTML5 applications I've laid eyes on. Everything slides in panels, smooth animations permeate every little thing, right click menus are abound and easy to use, and the interface is extremely clean for how powerful it is. They rely on a bunch of open source tools and technologies, which is a huge benefit for them (no licensing) and for their users (we can move away if we want). The major gripe I have is that we haven't heard from the developers in quite a while, the last public post was from March 16th. When you get into the backstory of the project, though, you can't really fault the guys. Kodingen was built from savings, without investors, without VC funding, without Techcrunch Distrupt or the LAUNCH conference. This incredibly useful, incredibly cool project was built by a very small team of developers with their own money. Very cool.

One thing that I wish worked now was the ability to pay for an account, out of all the features to lock out in the beta, I was initially surprised this was one of them. When thinking about it, you wouldn't want people paying for a half-baked, unfinished product, though. These guys are smart, they aren't greedy, and they know how to make their users happy. Progress is slow, but the site is fast and stable, and I'm sure when they finally release 1.0, its going to make a lot of people happy (and hopefully make them a lot of money as well). In the mean time, why don't you sign up for the free account over at and consider throwing these guys some dough if you like what you see.