My GSEC paper finally got posted, and for anyone interested it presents a significantly different view on why we are continually plauged by computer security problems today, and how things will play out in the future.

Jousting From Unicycles: Addressing Design Rather Than Adding Armor

“Tea has not the arrogance of wine, the self- consciousness of coffee, nor the simpering innocence of cocoa.” — The Book of Tea – Okakura Kakuzo, 1906

I know there is a lot of information here. I hope you don’t get lost in it. Remember that really it’s hard to make a bad cup of tea if you start with good water and good leaves. I’ve given lots of extra steps that you can experiment to make a sublime cup. But a great cup awaits you with a few steps if you are in a hurry. There are even decent bagged teas now.

I will start with a little background info.

Tea is harvested from a tree called Camellia Sinensis which can grow as tall as an oak, but is trimmed to 6’ so that the pickers can easily grasp only the top two leaf layers off each tree (the most tender leaves). Just as vintners use different grapes to make different types of wines, so too do tea plantations have different soils, harvesting periods and leaf treatments to create one of the four different types of tea.

Green tea: Popular throughout Southeast Asia. Green tea can range in color from yellow, to green, to red. Green tea represents the minimalist approach. The leaves are picked, rolled and dried. Green teas have an herbaceous grassy flavor. Almost all the great greens come from China.

Black tea: This is the tea Americans think of when they think of tea. The leaves are first dried like a green, but then fired in a wok or other device until they turn black. Black teas have a dark earthy flavor to them. Most of the great blacks come from India, though a few of note come from China too. While most teas take sugar or nothing at all, black teas are good with honey. Some like the Ceylon take honey and lemon, while others like (my favorite) Darjeeling take milk.

Oolong tea: This is simply a tea that has been fired like a black tea but not as long. Oolongs have a wonderful smokiness to them. Most of the great Oolongs come from Japan. This tea is surprisingly good iced with orange and sugar.

White tea: This is technically an offshoot of green tea. Most teas have not only the leaves but also some buds off the tree that give it an even more delicate flavor. White tea is made exclusively with these buds. Most good whites will sell for over 100 dollars a pound and after buying an ounce for myself, I can say I enjoyed it, especially for the aroma, but I wouldn’t pay that much for it again now that my curiosity has been satisfied.

Herbal tea: Any plant which is dried and consumed by steeping it in hot water and drinking the results can be called an herbal tea even if it contains no tea at all. Not to say some of them aren’t very tasty.

Tea | Water temp | Steep time | Additions
Green | Just as it begins to boil | 3 minutes Uncovered | Don’t add a thing
Black | Full boil | 5 minutes covered | Sugar or Honey Milk or Lemon
Oolong | Full boil | 3 minutes covered | Sugar, Lemon, Orange
White | Under the boil | 2 minutes uncovered | Don’t add a thing
Herbal | Full boil | Can steep forever unless it contains tea | Sugar for delicate, Honey for rooty herbals

Water: Bottled, Freshly drawn filtered water, or if you like your tap water let it run for ten seconds first. It will taste fresher that way.

Vessel: Any will do, but you might want to use ceramic or glass for very delicate teas as I sometimes taste the metal a bit when brewing herbals or greens.

Let the tea steep in a large pot free of obstructions. The tea leaves should unfurl and often will dance around the pot, this is called the “agony of the leaves”. When it has steeped to your liking strain it into another vessel for a moment (I use the pot I boiled the water in). Rinse teapot with hot water, add any additions then pour the tea back in the teapot and serve. It helps a good deal if you warmed up everything else ahead of time with hot water from the tap. Pour the water out before serving.

If you are in a hurry you can use a pot with a pull out strainer, or the Chinese style pots with a strainer in the spout. It will be tasty but a step short of greatness.

Bags: If you need the convenience of the bag go with a good brand like Tazo or better yet an herbal. Above all, resist the urge to squeeze the bag when you are finished steeping as a good portion of the bitterness comes when you squeeze the water out of the small leaves (though this is not a problem with herbals).

Iced tea: When selecting a tea go with a good one but not a great one. A lot of the more subtle aromas and flavors will be masked by the coldness. Add about 50% more leaves to the pot than you normally would. Brew it normally, then add cold water and ice. Alternatively you can make a weaker version and use ice cubes made wih tea.

Another problem is sweetness. Sugar will simply not dissolve in cold tea. There are two ways to solve the problem. A: Add the sugar while it is still hot. B: Create syrup by heating one part water and two parts sugar long enough to dissolve the sugar. You can add lemon and mint to this. Just add however much syrup to your ice tea as you desire.

Tea grading nomenclature: Teas are graded based on how intact the leaves are, how they are rolled and by the presence of and quality of the buds.

This would at first seem useful but unfortunately they still use the grading system first proposed by Twinings. Here are some examples: Pekoe (also just a P can appear on the label). Orange Pekoe (OP). Then there’s Tippy Golden Flowery Orange Pekoe (TGFOP) and dozens more. The best rule of the thumb is that the more letters there are the better the tea. A large part of this grading is done by stacking strainers with increasingly smaller holes on top of each other. The best leaves of course stay on the top while the tea put in bags are the smallest pieces (the fannings). Some tea companies like Lipton just use the dust left over.

Tea bags: The reason tea bags are inferior to using a good quality loose leaf teas are two-fold. First a large intact leaf simply holds more of the tea essence than does a fanning. While you can pull some good flavor out of the fanning it is harder to do so without pulling some bitterness out of the leaves. And if the tea manufacturer uses tea dust it is impossible to get a good cup.

In an effort to make tea drinking easier there have been numerous inventions to allow steeping and serving in the same pot. I will give you one suggestion. But you can go with any. The two things you need to look for is A: will my leaves be cramped together too much and not get a chance to experience “true agony” (full flavor), and B: Will my leaves be sitting in the tea I am drinking (adding bitterness to the flavor after a while). If you answer yes to either of these pick something else.

I believe Bodum has the best solution. Just google it.

The Assam, Shin Cha, and Bistro Nuevo lines are the best ones. In each one there is a basket that sits suspended inside the teapot that may be removed whenever you feel your tea has steeped enough..

Sweeteners: As a rule delicate teas use sugar if any sweeteners at all. (I generally only sweeten blacks and oolongs). Honey I only use with black tea since it would trample the delicate flavors or herbals and greens.

Try black tea with milk and honey at least once.

Steeping: Most fine quality teas can give you a good cup for several steepings. Most east Asians prefer the second steeping. I’ve found that if a tea keeps brewing too bitter for me I will add enough boiling water to dampen the leaves and then strain them before adding the remainder of the water.

Caffeine: Black teas have about ½ the caffeine of coffee and greens have about ½ that much. Drinking the second steeping will dramatically reduce the caffeine.

As for tea: www.leaves.com is the place I use almost exclusively. Richard Gauzakas the owner has been very responsive to all my inquiries and it’s obvious by their product that they know their tea.

Here are some suggestions:

Sweet Fennel Mint: is good and minty. Fennel has a licorice like taste but more subtle and sweet than pungent. I don’t like licorice but I love this tea.

Lemon Ginger Green: An excellent combo. And leaves.com is the only place that makes these “mixed teas” (as I call them) taste good. This is the tea you liked so much.

London Red Currant: Black tea mixed with lots of Currant juice. The aroma on this will blow your mind.

If you are a purist and want straight black or green:

I feel all of their Darjeelings are good especially the Makibari estate. Darjeeling is a certain type of black and is considered one of the best. If you aren’t ready for milk in your tea then go with one of the Ceylon teas as they go well with lemon.

Dragon Well is a great choice for a green. Also Roasted Rice and green tea is really good.

Well that’s about it for now. I will leave as I began…with a quote from a dead Asian.

“The best quality tea must have creases like the leathern boot of Tartar horsemen, curl like the dewlap of a mighty bullock, unfold like a mist rising out of a ravine, gleam like a lake touched by a zephyr, and be wet and soft like a fine earth newly swept by rain.” — Lu Yu (d. 804), Chinese sage, hermit.

Peace be with you,

Dustin Matthews

According to CNN and a number of other reports I’ve seen recently, the world is becoming more and more safe as time goes on. I have numerous reports describe how drug use is going down, teen pregnancy is on the decline, and something called “violent crime” is at an all-time low.

I’m a bit confused about these reports.

Is it just me or is anyone else of the opinion that there’s never been a more dangerous environment for raising children? Did it used to be more important that we lock our doors at night — and not so much now? Did it used to be more dangerous to have your kids play outside — and not so much now? How are people coming up with this crap?

I mean, I’m familiar with the concept of media slant and perspecitve bias based on exposure to slanted input, but can someone honestly make the argument to me that violence against children, teen pregnancy, high-school drop-out rates are all lower than they were 20 years ago? Seriously…

Those pushing this idiocy are using statistics to generate false truths, which are then pushed out to the masses in some lame PR campaign to prove we’re better off than the news says we are. I find it disturbing, and I’m curious as to why would want to push such ideas.

I’m quite taken with this Firefox theme.

It has a simple, even minimalist presentation to it, and I love greys and silvers. Do check it out if you’re into skinning at all.

emerge -uD world

Well, it looked harmless enough.

– Update: Actually, it was quite harmless; as usual the problem was between the keyboard and chair (see etc-update).

Before anyone points out that the meaning of language is most important, and that discussing minor points such as pronunciation is pointless, let me assure you that I mostly agree. I am, howeveer, having a friendly debate on this issue with a particular Check Point SE and my previously strong position seems quite a bit less tenable at this point.

Allow me to put forth some arguments on both sides so that you may decide which you like better and/or add your own:

–

Arguments for Lih-nix:

This is the side that I’ve always been on, and I’ve always been rubbed the wrong way when someone called it Lye-nix. My main reason for thinking Linux was authoritative is the mp3 file that’s available online that features Linus saying: “My name is Linus Torvalds, and I pronounce Linux, Linux.”

This file is meant to end the debate, and for me it did. You see, he pronounces it, Leen-oox, just like his name which he pronounces, Leen-oos.

So, here’s my argument: if he pronounces Linux as Leen-oox, then theres a damn good chance that he’ll pronounce the word “finish” as “feen-oosh” or “feen-ish” — either way, it’s feen. So if he pronounces a short “i” as “ee”, then it makes sense that “Linux” and “Finish” would end up being pronounced the same.

This makes perfect sense to me.

Arguments for Lye-nix:

So, I thought I had a solid case until I came upon this wiley Check Point engineer who busted out with the following argument:

We need to look at the origin of the word itself and take into account the country it came from when bastardizing it into English. Linus is Finnish and based his new OS on an OS called “Minix”. Being Finnish, he probably pronounced this “Mee-noox”. Well, what was the English pronunciation? Probably “Mye-nix”, but I need help from the old-schoolers on that one.

So, if Linux is based on Minix, and Minix was pronounced “Mye-nix” originally, why would “Linux”, which is nothing more than a “Linus” adapted “Minux” not be correctly pronounced “Lye-nix”?

This was his follow-up point, but I found it stronger than his English bastardization point which included our pronunciation of the Linus character on Peanuts — which was “Lye-nis”. His point was that when you bastardize this type of word from Finnish to English, the “i” comes across as long, not short. He couldn’t give any more examples of this, however, and the Peanuts thing just wasn’t enough for me. As a result, I’m more interested in the Minix angle.

–

Ultimately I’d probably still call the project “Lih-nix” because I think it’s more accepted and I don’t think Linus cares one way or another. I do want to know if I’m wrong about what’s “correct”, however. Why? Well, I’m a geek and I like discussing such things. I also take pride in presenting the most battle-tested, logical arguments when debating. As it stands, however, I currently have no such argument on this matter since such a solid counter to my position has been put forth.

So, thoughts? (other than that I need professional help with my OC problem)

Edit: The issue has been solved.

from safarla.com: The various ways to pronounce Linux are shown below using English letters in a phonetic way, and using the International Phonetic Alphabet (IPA). You will need a font containing IPA characters for the display to be correct. Some versions of Internet Explorer have problems displaying IPA characters, even when an appropriate font is installed (other browsers, such as Mozilla, don’t have this problem). Many websites explain the sounds of the IPA, but the best explanations are found in the Handbook Of The International Phonetic Association: There are three main ways to pronounce ‘Linux’: /ˈlɪːnɤks/ (’leenooks’) This is Linus Torvalds’ original pronunciation, based on the pronunciation of his name in Swedish. It’s rarely used by those who speak English as a first language, as it doesn’t seem very ‘natural’ to them. There is an audio file (in MP3 format) of Linus Torvalds saying ‘Linux’. /ˈlɪnʌks/ (’linnuks’) This is now Linus Torvalds’ preferred pronunciation, as he considers /ɪ/ closer to the original /ɪː/ than /aɪ/. It also follows the pronunciation of the English word ‘linen’. There is an audio file (in wav format) of me pronouncing ‘Linux’ this way. /ˈlaɪnʌks/ (’lynuks’) The other major alternative is based on the pronunciation of the English version of ‘Linus’. It also happens to be the version I use. There is an audio file (in wav format) of me saying ‘Linux’.

In addition to this evidence, it’s also been pointed out to me that a documentary called OS Revolution, Linus himself goes on record describing the various ways to say his name and such, but then goes on to explicitly say,

“… but Linux is always Linux”

…with Linux pronounced “linnux”.

So, I think that about settles it (not that it mattered all that much anyway). I just like having my ducks in a row when discussing things of this nature.

Let me know if you have comments…

Well, Brad was right — The Mars Volta is sick (quite). It’s been quite a while since I’ve heard anything this refreshing (Lamb Of God I think…). They are just utterly brilliant. Naturally, I went and bought all three albums that I could find (two via iTunes and one from Barnes and Noble).

Anyway, go check them out a few days ago or sooner.

For anyone interested, at the behest of a number of friends and colleagues I’ve decided to move forward with making this an actual project. I submitted a proposal to Sourceforge.net last night and it has been approved. At this point we are looking for developers who may be interested in working on the project, as well as anyone with ideas regarding design and/or features.

Here is the project’s homepage at Sourceforge:

http://sourceforge.net/projects/proxicus/

Feel free to contact me to discuss any ideas you may have.

I’ve always loved database, but I’ve never gotten around to actually learning it. There’s always been some obstacle or another. Well, that’s no longer the case; I’m now well on my way to building my own LAMP-based database for keeping track of all my books.

I’m doing all the database creation by hand (MySQL) so that I get a strong feel for it, and I can even see a study article coming out of the whole thing. It’d help it sink in for me.

Anyway, here are a few of the features I’m looking for:

–Authentication // prompt before allowing someone to to the data entry page –Full-featured GUI // checkboxes, radiobuttons, pulldowns, etc –Basics // be able to query on any value, add/delete records, etc

All in all, this goes well with my new push to focus on application security. LAMP servers are becoming so prolific that I think it’s worth the effort to learn their ins and outs — at least to a moderate degree. Plus it’s fun.

We’ll see how it goes, but if all goes well I should have a Tools link up on the left soon with both my http://dmiessler.com/ip and database project links under it.

“Companies face greater risks if they run their Web sites on Linux rather than Windows, a Microsoft-funded study has concluded.”