Thursday, August 4, 2011

Oracle Solaris Security BoF at USENIX Security

I'm excited to announce that Oracle Solaris Security developers will be presenting on our recent work, talking about cloud security and doing a Q&A panel at a BoF at USENIX Security next Thursday night.

Date: Thursday, August 11, 2011
Time: 7:30-8:30 PM
Location: The Westin St. Francis, 335 Powell Street, San Francisco, CA
Room: Elizabethan A

If you're attending USENIX Security, please come by. There will be give-a-ways for excellent questions and beer. Does it get any better than that?

Tuesday, July 26, 2011

Scratch: Lagunitas Beer Dinner

I've got a huge backlog of beer related blog posts, so many that it's a bit overwhelming. So, instead of starting many months back, I'm going to restart with some recent brew dinners and hopefully get the others picked up in a retrospective of sorts.

A new restaurant in Mountain View recently opened up called Scratch. They feature upscale American "comfort food" and have recently begun doing beer dinners. This is very appealing to me, because I can walk there, which beats the myriad of trains and late nights it takes to get to the Monk's Kettle (but, wow, are the Monk's dinners good).

The featured brewery on July 7, 2011, was Lagunitas Brewing Company, based in Petaluma, California. I've been to a Lagunitas beer dinner before up at the Monk's, so I was very excited they were coming down to Mountain View. You've probably all seen their IPA in the grocery store, but don't let that fool you - Lagunitas does a lot more than just IPAs.

The first course, prepared by Executive Chef Sean Eastwood, was an ahi tuna "gazpacho". With a name like that, I was expecting a sort of soup, but what we got was a lovely, thick piece of raw tuna topped with a sweet gelee, served with an heirloom tomato confit, almond and avocado puree. This was paired with Lagunitas classic IPA, coming in at the evening low of 6.5% ABV. The IPA is their standard hop forward American style IPA, which was softened nicely with the food. An excellent pairing.

Ahi Tuna

While waiting for the next course, we got to try the Wilco Tango Foxtrot (available in the 22oz section of many local groceries - yay!), a wonderful brown ale with 7.8% ABV. Jack Alger, in charge of Ales and Marketing at Lagunitas, told us a bit about this beers origins: While most browns are low in alcohol and typically a session beer, that's just not what Lagunitas makes - yes, this beer was mild in flavor, with the slight nuttiness you'd expect from a brown, but an extra sweetness made this even easier to drink and reminiscent of a bourbon barrel ale. Approach with caution, as a 7.8% ABV beer will bite you on the butt if you're not careful!

Wilco Tango Foxtrot

The next course was sweetbreads. Not something often eaten anymore stateside, but something my husband, a Brit, had had more than enough of growing up. Scratch and the chef were awesome and prepared my darling husband some sweet pea ravioli as an alternate course.

Mark's Alternate

He absolutely loved the course and in particular the thinly sliced fried zucchini.

The rest of us at the table got the sweetbreads. I'll let you read the wikipedia entry to see what exactly sweetbreads may be (hint: all kinds of things qualified as offal), so as diners, we were left to our imagination to guess what exactly we were eating. The black lentils were delicious, but the citrus (grapefruit?) was a bit too tart for the beer and the rest of the dish. The sweetbread itself (which was later identified as the thymus gland) was very fatty, and tasted a bit like chicken livers with the texture of frog legs. I think it could've been much better prepared if it were in a bread sausage like form, where the bread could've helped to soak up some of the fat. The fried giant capers, though, were a nice touch.

Sweetbreads

Next came out the Lagunitas Hop Stoopid. With a name like that, I was worried - I like a hop flavor in my beers, but not "attack hops" - you know the kind, so bitter they make your tongue curl? Well, it was a bit like that... but, my husband and the other Brit at the table love their beers like that, and so the ABV 8.0% brew did not go to waste.

This was paired with the "Bone Marrow, Two Ways" course. As should be obvious from the picture, the first way was right in the bone. The second way was fried - a bit like a tater tot. This came with a wonderful salad, again with grapefruit, that was very delicious. I spread my bone marrow right onto the crunchy crostini, but even then it was still a bit too rich. I'm not sure how the fried quail egg fit into the picture, other than making for quite a beautifully plated dish.

Bone Marrow 2 Ways

Finally, the Lagunitas folks brought out one of my favorite styles: a red! The Lucky 13, coming in at a hefty 8.3% ABV, was a much more mellow beer than the Hop Stoopid, with toasted malts being the prevailing flavor. This paired wonderfully with the lamb ravioli served with sweet peas, pickled artichokes, mint syrup, pea and mint puree all on top of... cassoulet lamb shank! This was a meat lover's delight. The ravioli was fork tender, and the lamb simply melted in your mouth. The beer positively opened up with this course, the best course and the best pairing of the night... well, until dessert.

Lamb Ravioli

Lagunitas delighted us with the next beer, Little Sumpin' Sumpin' at 7.5% ABV. This was their version of a Belgian Wit beer, made with Belgian yeast, yet filtered (which seems, at least for me, to lower the hangover factor). While it was hop forward, the beer was still delicate and sweet, with a slight hint of peach to it, which means it paired absolutely perfectly with the Peach Buttercake. The cake, similar to an upside down pineapple cake - just with peaches, was moist and bold enough to stand up to the beer. The lavender caramel made it all just like a spa experience. I was in heaven.

Dessert

That was supposed to be our last course, but Jack had something else up his sleeve, a Cappuccino Stout (8.8% ABV). This beer, which smelled just like chocolate covered espresso beans, was actually made with a special blend from Hardcore Espresso in Sebastopol.

Cappuccino Stout

I was actually thinking at the time that I would've liked some more of that ice cream from the previous course so I could make my self a beer float. Fortunately, the chefs wanted to surprise us as well and they brought out a bonus dessert of chocolates! Splendid!

Second Dessert

Overall, a magnificent dinner right here in Mountain View. The staff was friendly and accommodating. I loved having someone from the brewery present to tell us all about the beers, and the pace of the food was perfect. For future dinners, though, I would recommend the chef try to balance the super rich and a bit strange courses more with the rest of the menu. The only bad surprise came at the end when there was a 22% gratuity added on top of the total bill (that is, food plus tax). I didn't expect that for our group of four, and only mention it so that if you join a future dinner, you can be prepared.

Now the question, do you like the picture of the course before I talk about the course, or after (as is done in this post).

This post syndicated from Thoughts on security, beer, theater and biking!

Wednesday, July 20, 2011

Woe is Me -or- Going through TSA with a broken finger...

Sorry it's been so long since I've written - I had a broken finger!  It's mostly better now, but for awhile there, I kept my typing to mostly work specific activities. Typing when down an index finger is not the easiest thing to do, especially since I've been touch typing since I was 12 years old, not to mention the finger just plain hurt.

What does this have to do with the TSA you might ask?  Well, I did this on my way to the airport when I was coming back from a trip to Fort Wayne, IN.  Being rushed, talking to my sister on the phone, and my dad and a friend in the car, while getting out to get a coffee... something fell through the cracks. Well, or got stuck in it... slammed that finger right in the door! The folks at Starbuck's were kind enough to give me a bag of ice, but that was not something I really needed at that moment. While I didn't know it was broken, I did know it hurt like nobodies business.

Fast forward 20 minutes and we're going through TSA. The Fort Wayne airport, while very small, seems to have the most well provisioned TSA division in all of America.  If there's a new process or tool, they have it.  Plus, they don't really have any lines, so what's the rush?

I'm not a big fan of the new scanning machines. I think they were rushed into the airports, aren't well studied, and are a great example of industry lobbyist pushing "safety" standards, so I wanted to opt out.  One of my traveling companions has recently had a lot of radiation (treatment for cancer) and also opted out.

This airport isn't really set up for this - as the line just puts every single passenger through the scanner, so anybody that opts out has to go through an unusual procedure.  As my friend was also a female, she had the one female agent on pat-down duty totally occupied, so I had to send all my luggage through the x-ray and wait on the outside of the metal detector.

Even though my finger was in excruciating pain, I waited until my friend cleared.  My pat down was uneventful and no worse than I've gotten before when setting off the metal detector. I was neither embarrassed nor threatened, the TSA agent was respectful and friendly, and she screened her gloves for explosives after the pat down.

But then I set off an alarm.  Hrm. Even though my finger was in excruciating pain, I had to go to another room and get another pat down, this one slightly more invasive. After awhile, the agent and her supervisor took pity on me and brought me the ice my husband had gotten for me, which helped a lot.

But then I set off the alarm again.  This time nobody knew what to do next. They decided they needed to double search my bags (by rescreaning, hand check and check for explosive residue), but that's where there was another pickle. In all that time where I was not able to get to my luggage, my husband had repacked it for me. And since he was standing with our traveling companions and TSA didn't know, 100%, if something may have been handed over - my companions all got rescreaned. They (and all of our luggage) were negative for any residue or suspicious items.

I finally thought of what might have been causing the alarm: I'd gone to an antique store with my Dad that day, and he'd looked at antique guns. Was it possible I actually *did* have residue on me?

Two TSA agents and two supervisors later, we were all on the airplane!

Coming home, my husband thought of a more likely cause: I'm always fertilizing things in our garden and may have done so in those same jeans right before I left.  Word to the wise, don't wear clothes to the airport that you may have worn in your garden! Or go antiquing ;-)

As I was walking away, one of the TSA supervisors asked the other, "Did you write down her name?", and I heard, "Yes, it's right here."  Which, of course, means I'll be sure to be extra early for all of my future flights.

Now, why is this all so frustrating? I'm sure you've all heard of the guy last month that was flying around with expired boarding passes.  He wasn't arrested the first time he was caught, but the second time.  Are we really spending our efforts in the right place?

This post is syndicated from Thoughts on security, beer, theater and biking

Thursday, June 30, 2011

Sun Metaslot and my missing keystore

By Karen Tung on Jun 14, 2005

[VAF: This entry was transfered from Karen Tung's old Sun blog, due to its relevance to the Solaris Cryptographic Framework]

Since The Solaris Cryptographic Framework is integrated into Solaris 10, we have added some new features to the framework. One of these features is the Sun Metaslot, which will be generally available in the next Solaris Update release. In case you can't wait till the next Solaris Update to try out this exciting feature, this is also available since Solaris Express 2/05, and in Solaris Patch 118918.

The Sun Metaslot will greatly simplify the life of developers who write applications that uses PKCS #11. Now that Open Solaris is a reality, I can talk about the implementation of this new feature and clarify one question I often get from users who are used to using the framework the way it was in Solaris 10.

What is Sun Metaslot?

The Sun Metaslot is a new additional slot to the The Solaris Cryptographic Framework. It provides the virtual union of capabilities of all other slots in the framework. Instead of having to deal with many slots, an application can simply choose the Sun Metaslot, which have access to features of all slots currently plugged into the The Solaris Cryptographic Framework. It also does the tedious work of managing sessions and objects on different slots so an application can use the best slot for a particular mechanism without having to move objects and sessions back and forth. The Sun Metaslot behavior conforms to the PKCS#11 Standard. Applications should treat it as if it were any PKCS#11 slot with normal PKCS#11 semantics.

When you install the next Solaris Update release (or Solaris Express 2/05 or the patch), you will get the Sun Metaslot feature by default. There is no special configuration necessary. The Sun Metaslot is always presented as the first available slot in the The Solaris Cryptographic Framework. As such, if your application is written in such a way that it just uses the first capable slot to perform cryptographic operations for your application, your application will use the Sun Metaslot with no modification at all. If your application is very particular about the exact slot in which an operation is done, all slots in the originalThe Solaris Cryptographic Framework is available as usual except a minor catch, which I am going to explain below.

Why is one of my slots missing?

Ever since I gave the beta version of my Sun Metaslot implementation to other Sun internal engineers to try, I often get this question in my email. I am sure many of you might have exactly the same question. So, it's probably useful to explain it here for the last time, hopefully.:-)

Here's the typical email:
I installed the Sun Metaslot feature into my test system, and everything seemed to work fine. However, when my application does a C_GetSlotList(), I found that the "Software RSA PKCS#11 softtoken" slot is missing. Is this a bug?

This is working as designed. When the Sun Metaslot feature is enabled, one visible difference you see on your system is the slot that is configured to provide persistent storage for "token" objects (aka keystore) is "hidden". The Sun Metaslot does not have its keystore. It uses the keystore from one of the actual slots. By default, Sun Metaslot is configured to use the "Software RSA PKCS#11 softtoken" slot, so, users will see that it is "missing".
The slot to be used as Sun Metaslot's keystore is configurable. See the cryptoadm(1M) command on how to configure a different keystore for Sun Metaslot.

During the Metaslot implementation, we found that making the keystore slot as one of the available slots will cause a problem with "object aliasing" between the Sun Metaslot and the keystore slot. If an application accesses the Sun Metaslot and the keystore slot at the same time, we won't be able to control the authentication state. For example, if the application first calls C_Login on the Sun Metaslot, Sun Metaslot will call keystore slot's C_Login(). Now, if the application makes the a sequence of a C_FindObject calls to retrieve the list of private objects from on the keystore slot, it will be able to successfully get the list. However, this is not the right behavior since the application hasn't done a C_Login to the keystore slot yet.

To prevent the above problem, we decided that it is best to hide the keystore slot. Even though an application won't be able to access the functionality of the keystore slot directly. All its functionality are still available via the Sun Metaslot.

Monday, May 9, 2011

Life is a Cabaret at Sunnyvale Community Players!

Me and the gang went out to see Sunnyvale Community Player's production of Cabaret on Saturday night and we all had a great time!

It's interesting to see a show with such a small staff. Lee Ann Payne doubled as director and choreographer (no easy task, given the complexities of the choreography in this show) and Dan Singletary was music and vocal direction. It seemed to me that this gave them a better way to focus their efforts and the results were a seamless production that was beautifully staged.

As I've said before, one of my favorite things about seeing shows with the Sunnyvale Community Players is that the actors and actresses are not typically mic'ed, leading to a amazingly rich and rewarding sound.  We could hear the gentle shakes in Emily Bliss's voice as she belted out the title song, Cabaret, as the lead of Sally Bowles. While her emotion was clearly written on her face, hearing the subtlety in her voice made the number that much more enchanting.

Dan Singletary did a great job balancing the orchestra with the vocals - I could hear both perfectly at all times!

The Emcee, Paul Araquistain, was just downright amazing! Every time he appeared, the stage brightened (or darkened, depending on his intent) and the cast just seemed to focus around him.  One of my favorite numbers was "Two Ladies", where Araquistain was joined by Cheryl Ringman (Kit Kat Girl/Susan) and Denise Lum (Kit Kat Girl/Ting Ting).

The costumes were sexy, where necessary, and total period otherwise. Great job by Ana Williams (costume design), Sue Howell, Mary Beth Buzzo and Barbara Morgen (costume construction).

It's hard to call out specific actors or actresses that stood out, as everyone was great, totally in character, always in the moment. Very impressive, indeed!

I'm not exactly sure which revival this one was based on, but did miss the darker ending of the last version I had seen.  Let's face it, Nazi Germany was not a fun place for homosexuals and Jews in the early 1930s...

One thing is for certain, this show only runs for one more weekend (through May 15th) and deserves a sold out house! Treat yourself, you'll enjoy it!

Punctate Inner Choroidopathy -Or- My Crazy Eye

Those of you that follow me on twitter are aware I've been having some major weirdness in my right eye over the last couple of weeks.

As someone that has always had bad vision, losing my eye sight has always been my biggest fear. Having an eye do strange things where one Ophthalmologist even said, "I've never seen anything like this before" ... well, it's disturbing, to say the least. I waver between wanting to share with everyone what is going on to just wanting to be left alone and hope for the best, so please understand.

About two weeks ago, I noticed a blurry/fuzzy spot in my vision. I called Kaiser, where fortunately I had already been referred a few months back to Ophthalmology due to 2 spots my optometrist detected on my retina [1]. My optometrist was concerned that I might have Presumed Ocular Histoplasmois Syndrome (POHS) - blood tests confirmed, though, that I did not.  My doctor in ophthalmology told me to come back in 6 months or if I noticed any vision changes. That brings us back to two weeks ago.

I was initially told I'd have to wait until May 10th to see someone, but as every day I had new flashes and fuzzy spots, I didn't want to wait. I showed up at the main hospital and sat until my ophthalmologist was able to see me (he took me on his lunch break). He ordered lots of tests: OCT (retina scan), Optomap (picture of the back of the retina), Visual Field Assessment (fuzzy spots and flashing lights cause problems with seeing little tiny dim flashing lights in peripheral vision...it turns out), and an optical angiogram (where I was injected with yellow dye, dilated and more pictures were taken of my eye to check for bleeding - there was none -  *whew*).

Still, my ophthalmologist was stumped. He could see there were things going on in my retina, but it was nothing he'd ever seen before.  He sent me to a retina specialist for my next visit.

My retina specialist has seen something like this before: Punctate Inner Choroidopathy (PIC for short!). I'd give you a link to a great sight on this eye disease, but... none exists. It's a very rare condition that nearsighted, healthy women in their thirties get.  My specialist gave me a great paper on it, published in the Survey of Ophthalmology in January 2011 by Dr. Radgonde Amer and Dr. Noemi Lois.  Unfortunately, the major conclusion of this paper is that PIC needs more research.

There are no known treatments, and the majority of the cases spontaneously get better on their own with no long term vision impact. It's the side effects that can be problematic, so let's hope I don't get any of those!

Fortunately, as of now, my central vision is still crystal clear and my left eye is 100% normal, so I can still totally and safely function in my daily life.

But, still very freakish.  I have toyed with whether or not to write this blog post - perhaps it's over sharing. I don't know, at this point I kind of want to share to see if anyone has any ideas or luck with any experimental treatments.

So, let's hope I'm in the majority of this one!  And let's face it, there are worse things to get!

[1] In 2008 I had very similar symptoms as to what I'm having now, but was diagnosed with having a perfectly normal vitreous detachment. Well, 2.5 years later, my optometrist noticed the retinal scarring, and presumed POHS.  Drs. Amer and Lois said in their paper, "After 2-3 years, some scars become distinct and pigmented and resemble the scars associated with POHS."  So, I'm betting I was misdiagnosed before. Not that it makes a difference, as there is no treatment for either vitreous detachment (it's caused by age and onsets earlier for the nearsighted folks) or PIC.  But, knowing I probably had this in 2008 and completely got better... well, I'm very hopeful for a full recovery).

September 19, 2012 Update:

As a lot of you have asked, and I've failed to write a new blog entry on this subject, so I just wanted to give you an update!  My eye has stabilized after one oral course of Prednisone and one injection of cortizone in my eye itself. I regained almost full vision, with just a small fuzzy spot in between my central vision and peripheral vision that correlates with scarring on my retina. I was lucky and did not get any bleeding (CNV).  I hope that it stays this way.  And, thank you everyone that has commented and brought to my attention these great sites: PIC World, Eye Wiki - PIC page.  We are not alone! Here's to stable vision!

Thursday, May 5, 2011

Review: Shattered Dreams: My Life as a Polygamist's Wife

Shattered Dreams: My Life as a Polygamist's Wife Shattered Dreams: My Life as a Polygamist's Wife
by Irene Spencer

My rating: 5 of 5 stars


This was an amazingly heart breaking tale of a young girl who's upbringing led her to seek to become someone's second wife. She was a fourth generation polygamist, growing up all over Utah and Arizona. The Church of Latter Day Saints had long ago shunned the practice, so these "pligs" were left to fend on their own, making their own churches, following their own "prophets" (all of which insisted that the more wives you had, the better your chances of securing a place in heaven were).

As you can imagine, having many wives with even more children was an untenable situation. Growing up, Irene was at the lowest level of poverty, living off of the US Government welfare system, wearing clothing made of old flour sacks, and wondering where her next meal would come from. As only one wife was recognized as the legal wife, the rest of them were "single mothers" and able to collect benefits from the Government.

Irene's mother did eventually leave her father and take up the monogamous lifestyle so much of the rest of America considered normal, and begged Irene to marry a man that was not interested in multiple wives. But would Irene listen?

Every step of the way, as a reader, I was shouting out to Irene to make different choices. To me, raised in a traditional family, it seemed obvious that Irene was making the wrong choices, dropping out of school to "marry" her half-sister's husband and move down to Mexico.

Irene recounts her time living in Mexico, Nicaragua, Utah and Arizona, often with no electricity, no running water, and no food to feed her ever increasing family. In the end, her husband had 10 wives and over 50 children.

I could not put this book down, I can't recommend it enough!





View all my reviews