You've reached the internet home of Chris Sells, who has a long history as a contributing member of the Windows developer community. He enjoys long walks on the beach and various computer technologies.
Wednesday, Jan 19, 2005, 12:18 PM in The Spout
The Reason For Code Access Security
I had a question in my inbox the other day that went something like this:
"Since programming within the partial trust sandbox I get by default when using ClickOnce is so hard, why wouldn't I just kick it up to FullTrust and let the user press the OK button?"
You can do that. Since ClickOnce supports user management of permission awarding for code deployed via ClickOnce (aka there's a dialog that the user has to approve if the app wants more permissions than are the default), you could ask for FullTrust.
If I were you, I wouldn't ask for FullTrust in my ClickOnce apps and not just because I don't want users to be freaked out by the dialog box I expect to see that says "Danger, Will Robinson, Danger, Danger!" Personally, I don't want the liability. If I write code the requires FullTrust, I have to write my code to take full responsibility for its actions, including if the code is hijacked by other code to do bad things.
On the other hand, if I request the minimal set of permissions that I need, I'm walking with a net. If I miss an exploit, I'm limited to doing bad things inside of the limited set of permissions that the user has awarded to me and not the whole darn thing.
Full trust isn't easier; it's much, much harder. I like partial trust because I'm lazy: I don't want to do the work to warrant the user's full trust.
Monday, Jan 17, 2005, 7:26 PM in The Spout
Email Throughput
To get technical work done, I sometimes let my inbox fill up beyond what makes my comfortable. Today, that caught up with me, but I plowed into it and handled it like a man:
- Handled 206 incoming emails (filed, deleted or dealt with in some other way):
- Started with 47 emails in my inbox
- Received 177 emails
- Ended with 18 emails in my inbox
- Sent 92 outgoing emails
I don't normally track such things, so I can't say if that's a lot or a little, but it sure seemed like a lot to me. <whew>
Sunday, Jan 2, 2005, 9:50 AM in The Spout
Death As A Possible Consequence
Here. The one where I describe my recent run-ins with the Oregon traffic police and my availability as the "Bad Boy" in your boy band.
Saturday, Jan 1, 2005, 12:00 AM in The Spout
Death As A Possible Consequence
When something legal comes up, I like to dig into it. For example, I did my own consulting contracts for years, I've testified against an Oregon state bill mandating Open Source Software (a bill that was never passed), I wanted to serve on a jury and I've recently become very familiar with the Oregon state eviction and small claims procedures for a rental unit I own. I find laws and procedures to be fascinating and, like most things, showing up is 80%.
However, I don't like the law so much when I'm the defendant, as was recently the case when the state of Oregon was hell bent on suspending my driver's license. It seems that if you get 4 tickets in 2 years that they like you to stay home for 30 days or at least take the bus more. I've had speeding tickets on and off for most of my life, but before this 2-year period which included a total of 6 tickets (thank goodness that the state of Oregon doesn't count tickets in Washington), I hadn't had a ticket for about 5 years. Incidentally, if I could manage to spread them out in a Bell Curve instead of in a Mandelbrot Set, I wouldn't even have to be in this predicament, but natural has it's laws and who am I to consider myself above them?
Anyway, the tickets should hardly count. One was 'cuz I didn't slow down fast enough in one of those coastal towns where half of the tourist revenue comes from their 100 feet of road along the highway that drops from 55 to 25 with a sign posted behind a tree. Another was on the way to Burning Man. Sure, I was going a little fast, but I spent the next week driving the dusty BM roads on my bike -- can't we do some averaging here?!? Another was an actual speeding ticket around town and that one I'll admit to, but the forth one was when I passed into a turning lane through a solid yellow line in rush hour traffic 'cuz I wanted to turn left and the line of traffic was way shorted than the line of traffic going straight, so I cheated over a few feet early. I mean, come on, that's just an efficient distribution of traffic! I was avoiding gridlock! It was practically my patriotic duty to move over into the left lane early!
However, the truck that was waiting patiently to move over into the left turn lane until he had passed the solid yellow line just ahead of me didn't see it that way. Nor did the police car that had just turned the corner coming towards me as I scooted around the truck, neatly avoiding the oncoming traffic, all executed flawlessly while my wife dug her nails into my leg.
So, I did what I do with all my tickets: I signed the back and I paid the money. I mean, it's not like my hairy cleavage is going to change any cop's mind, so what else could I do?
When the letter from the state came that said they'd like me to turn in my driver's license for a month is when I started exploring options real quick.
So, I called my tax/business/family attorney, who gave me the names of three traffic attorneys. Unfortunately, each of them specialized in Driving while Under-the-Influence and I began to think that I'd have been better off if I'd have been drunk. Each of them advised me that there was nothing anyone could do for me. I signed the ticket and I was going to have to give up my license. I also felt a very "and why are you wasting my time, you sober slug, I've got important drunk people to talk to" vibe, but that could've just been me...
Luckily, once it was clear I was going to hang up the phone without giving the 3rd lawyer money, he mentioned another attorney that specialized in sober traffic offenses. This new attorney was one smooth operator. After about 5 minutes of questions over the phone, he'd figured out the "conviction" (when you sign the back of the ticket, you've agreed to be "convicted" of a crime) most likely to be turned back to trial (the passing violation, of all things). How did he determine the likelihood of getting a trial? He knew the prosecutor responsible for that part of the state! He was going to call the guy up, ask him for a solid, they run it by the judge as a formality and bang! I've got a new trial and my suspension was suspended pending the outcome of the trial.
And what did I have to do? Show up in court and plea my case? ("You want the truth! You can't handle the truth! You want me crossing that line! You need me crossing that line!") Nope.
Bring three character witnesses? (I have pictured Rory on the stand trying to provide a credible character assessment. : ) Nix.
Lie under oath? ("Yes? Mr. Sells? This is Nancy Reagan. I'd like that Eagle Scout Award that my husband signed back, please. Seems you lied to get out of a traffic ticket...") Nine.
All I had to do was send in a $750 check and do it quickly, please. As soon as it cleared the bank, I'd have my new trial (although it's illegal for him to give me "odds" on my ability to get a new trial, my attorney was clear that it wouldn't be a problem).
Plus, I didn't even have to go to the trial. In fact, in a very carefully worded letter from my attorney, he let me know that I should only come to court if I could say that I didn't do it with feeling and confidence. If I couldn't do that, I should just go about my business. Note that he never actually asked me if I did it or not. I find that a particularly fascinating and scary part of our legal system.
Anyway, at the trial, my "conviction" (I have to put it in quotes or you might think I was a criminal [I mean, just 'cuz I committed a crime, doesn't make me a criminal, does it?]) was over-turned in exchange for 8 hours of "driving school." This time, I'm using the quotes because there ain't no actual driving schooling going on. Instead, this is a replay of those driver's education movies where they show you "Faces of Death 3" in an effort to scare you onto the straight an narrow in a very Old Testament, fire and brimstone sorta way. Here's the descriptive paragraph from the letter I got in the mail yesterday:
"You have been given the opportunity to participate in the High Risk Driving Course... The course is designed to educate drivers to the potential and very real consequences of 'high-risk' driving behaviors. You will spend eight hours [in the course]. During this time you will hear several presentations on the consequences of high-risk driving, have contact with victims of traumatic injuries and their families, and discuss death as possible consequences of high risk driving choices. Participation in the course will include group discussions and testing, including essay questions and an evaluation of the course. We anticipate that facing the reality and potential consequences of high-risk driving behavior will positively affect the attitudes and behaviors that contribute to choices which place [you] and others at risk of serious injury and death... I understand that what I see and hear in this program is meant to have an emotional impact on me. I may experience psychological discomfort..."
I believe that participation in this program should qualify me as a "bad boy" and thereby make me the recipient of all of the benefits thereof, e.g. the alleged "good girls" that can't stay away from "bad boys" should now feel free to throw their undergarments onto the stage and to mob my limonene (it's a white '98 Volkswagen Cabrio Convertible "limo" [note the quotes] in case you're confused). The fact that my financial portfolio is fully diversified using CFA-certified asset allocation techniques, that I was a Boy Scout, that I'm married to my first real girlfriend, that I was a member of the marching band, that I was going 20 miles/hour when I committed my most recent traffic "crime" and that I wouldn't actually drive with a suspended license, thereby causing all kinds of havoc in my life, should not detract from my obvious reckless, dangerous, "high-risk" persona. Anyone need a bad boy for their boy band? I'm available...
Friday, Dec 31, 2004, 9:03 AM in The Spout
Earthquake Disaster Relief Information
I can't begin to imagine what the earthquake survivors are feeling after so much death and tragedy. If you can help, please do so.
For more information, you can visit the International SOS organization's Tsunami Update page and the ReliefWeb site.
Wednesday, Dec 29, 2004, 10:05 AM in The Spout
SlashDot is Wrong: MCE05 Rocks
Here.
I'm a very happy user of Windows Media Center Edition 2005 and have been for some months. Not only does it allow me unfettered access to audio, video and recorded TV from any PC in the house, but with the XBOX Media Center Extender, I can access all of this from any TV in the house as well (so long as its equipped with an MCE Extender). Further, I was able to use MCE to record several episodes of a yoga TV show for my sister-in-law and burn them onto DVDs with an evaluation copy of WinDVD Creator, making her very happy. I don't know what the "content restrictions" who-ha is about, but MCE05 works great for me.
Monday, Dec 20, 2004, 9:28 AM in The Spout
We Need NetFlix for TV
Sometimes I miss some made-for-TV movie or series that I'd really like to see and that I didn't know about before hand so that I could point my ReplayTV or MCE at it. The world needs NetFlix for TV.
Thursday, Dec 16, 2004, 4:48 PM in The Spout
Deuce Bigalow: European Gigolo
Am I the only one actually looking forward to this movie?
Thursday, Dec 16, 2004, 10:50 AM in The Spout
Getting Out The Vote: Save Ctrl+F5 in VS05!
When I noticed the behavior that Ian describes in VS05b1 (that Ctrl+F5 no longer works to launch a console app with "Press any key to continue..." at the end), I assumed it was a temporary bug. To learn that this feature was removed "by design" is devastating. As a presenter and technology experimenter, I've probably used this as much as any single feature in Visual Studio with the possible exception of the text editor.
Don't just site there! Vote to Save Ctrl+F5 in VS05! (I love MSDN Product Feedback : )
Wednesday, Dec 15, 2004, 9:44 AM in The Spout
Snorkeling Is Unbelievably Wonderful
I just got back from a 3-family, 6-day trip to Cabo San Lucas, Mexico ("a pleasant fishing village paved over for tourist hotels") and it was fabulous. Since it was before "the high season," we had the place practically to ourselves. In fact, even though it was an all-inclusive place, the wait staff probably outnumbered the guests 3 to 1 at any given time. And it wasn't as if they skimped on the food or the drinks, either! Every day, we had a giant buffet for breakfast, snacks by the pool for lunch and a 3-hour, 5-course meal for dinner. Plus, the weather was great and the pools were heated, so it was practically perfect.
The one blemish was when we drove to La Paz and couldn't get out again. The detour signs pointed the wrong directions and all of the highways had the same number. We literally left and returned to La Paz 4 times, including the time we had to drive the rent-a-car guy back to his offer when something on the road disabled our car and we had to get a replacement. In 10+ years of business travel, I've never taken the comprehensive insurance until that day. I only had to pay for the half of tank of gas that I couldn't fill up myself because to do so would've destroyed the engine (the rental company failed at first to see this as an argument for charging me less than 4x the going rate for gas, but I did eventually talk them down to only charging me 2x the going rate...).
Oh, and snorkeling rocks! We went to a calm little beach with a driver that brought all of the equipment, kayaks and a cooler of beers! But, I was completely distracted at my first snorkeling expedition ever. At first, I was blown away at the clarity of what I could see under the water and the ease with which I could breath (I expected to swallow a lot of water). Then, I was completely freaked out at the shear number of fish under the water (thousands!), even in areas with humans inches away. I felt like I was in an undersea remake of Hitchcock's Birds and any moment I was going to be bait (and there were no phone booths around in which to hide). Then, I was amazed at how I was simultaneously part of and not part of this new world I was floating over. I must've snorkeled for an hour straight without pulling my head up. It was unbelievable and I got to share it with my wife and kids who'd never snorkeled before either.
After this wonderful family vacation, I can't tell you how relaxed I am. At 9:37am, I think I'm ready for my afternoon siesta... : )
Friday, Dec 3, 2004, 2:36 PM in The Spout
Another Reason To Hate The Dentist
Most of the worst experiences of my childhood involve the dentist. I have an active gag reflex and a general aversion to sitting still for long periods with nothing to do but let somebody poke my soft innards with a metal stick, so the dentist chair has never been a good fit for me. Today, I got another reason to hate the dentist.
Because Beaverton does not fluoridate their water and because he's a nine-year old boy, my youngest son Tom had 4 cavities to deal with today. He was nonchalant about the whole thing for the first hour alone in the chair while I waiting in the sitting room, never expressing concern or doubt about the experience to come, which made me believe that everything was going to be just fine. Even when he started crying a bit, I was able to maintain my seat, knowing that he leaned toward the dramatic. However, when he started screaming, that's when all 6'5" and 280 pounds of me barged through the door between the waiting area and the rending rooms, not stopping to ask the women milling around reception if that was OK and conscious but uncaring that the expression on my face stilled them to silence.
When I got back to the room where Tom was being impaled, the dentist was busy telling him that little girls cried less than he did. She further went on to tell him that he wasn't feeling "pain" at all but only "pressure," a sentiment she had to repeat several times while she asked the nurse to give her the extra gauze to staunch the profuse bleeding. I have to say that it was difficult to simultaneously comfort my son while expressing my displeasure at the dentist for both the potential physical and verified mental torture she was using on him. Probably it wasn't easy for her to concentrate on her dentistry in a completely focused manner while I loomed over her, but that's what you get for making my son cry for 30 minutes.
Anyway, at the end, as she informed me that she worked with children all the time and had two of her own (implying that the pain was somehow my son's fault, I'm guessing), she also reached for the referral pad for another dentist to fill the other two cavities, saving me the trouble of asking.
I hate the dentist.
P.S. After a McDonald's toy and chicken sandwich (eaten carefully from the un-decimated side of his mouth), Tom seems unaffected. However, I'm sure that the whole sordid experience will come roaring back to him in the future unless they've replaced the dentist with nanites and computer programs (or sledge hammers and chisels, which would be equally humane)...
Thursday, Dec 2, 2004, 4:20 PM in The Spout
On Microsoft's Transparency in 2004
Here.
Sir Black Xero (?!?) has a review of Microsoft's increasing openness in 2004, summarizing it this way:
"Granted, there are plenty of Microsoft teams that are still opaque when it comes to their roadmaps. (Office team, are you listening?) But Microsoft has taken some in 2004 in the right direction, customers, analysts and other company watchers seem to agree."
Frankly, I'm pleasantly surprised at how far Microsoft has come opening up to the world. I hope we're at a critical mass where it just can't be stopped, but as an engineer, that's hardly surprising. : )
Friday, Nov 26, 2004, 10:45 AM in The Spout
Hurray for IE QA!
"It appears that the overall quality of code, and more importantly, the amount of QA, on various browsers touted as 'secure', is not up to par with MSIE; the type of a test I performed requires no human interaction and involves nearly no effort. Only MSIE appears to be able to consistently handle [*] malformed input well, suggesting this is the only program that underwent rudimentary security QA testing with a similar fuzz utility.
"This is of course not to say MSIE is more secure; it does have a number of problems, mostly related to its security architecture and various features absent in other browsers. But the quality of core code appears to be far better than of its 'secure' competitors.
"[*] Over the course of about 2 hours; I cannot rule out it would exhibit problems in a longer run."
Thursday, Nov 25, 2004, 7:34 AM in The Spout
Microsoft Amnesty for Software Pirates
Wow. This is nice of us...
Friday, Nov 19, 2004, 11:52 PM in The Spout
A Reason For A Home Gigabit Network
I finally figured out why I need a gigabit LAN, especially at my house: the Windows Media Center Extender (mine's for my XBOX, which I bought especially for this purpose). It lets you get at the music, video, pictures, radio, PVR, live TV and pretty much everything else that Media Center exposes, but from any TV in the house and all with the fabulous 10-fit UI that MCE provides. I had to duct tape down the extra long wire from my office to my bedroom (I explicitly left out a network connection in the bedroom when I wired the place -- who knew?) and my megabit LAN works just fine, but I can see needing more when I put one of these things on every TV in the house, which is pretty likely, since it rocks so hard. Wahoo!
Oh, and as if that weren't enough, the XBOX Media Center Extender kit comes with a remote and remote sensor that works for playing DVDs, too, thus saving you the trouble of buying both. I'm in love!