AlterEgo 2-Factor Authentication

File this under the "Why didn't I think of that" category. MailChimp just released a super cool new product called AlterEgo that enables 2-factor authentication for web apps using an IPhone application.

Check out:

• http://blog.mailchimp.com/tag/2-factor-authentication/
• https://alteregoapp.com

If you've done anything with production systems, then you've probably used 2-factor auth and have always found it to be a pain, especially if you've had to add it to some software you're building. This product looks to bring a simplified version of 2-factor auth to webapps that can provide a really nice additional layer of security to webapps that need it. I'd love to hear from anyone who has used this product, either as a user or as an integration.

Centripetal Product Review of Devolutions Remote Desktop Manager

This is a continuation of a series of product reviews of the products that make our cloud infrastructure work and make it workable. The product we’d like to show off today is one of those products that has just made the pain of managing a large server farm a whole lot easier.

Our deployment consists of numerous dedicated and cloud based servers in Rackspace datacenters in Texas, Chicago and London as well as Amazon cloud datacenters in California, Virginia, Ireland and Singapore. We run Microsoft Windows based servers as well as Redhat and Gentoo based Linux systems. Managing this type of an infrastructure has always been left up to Ops teams in my past jobs who had large teams and suites of pricey tools at their disposal. But as a small startup we needed a way for a couple of key members of our team to be able to access all our servers from one place in an easy fashion. Devolutions Remote Desktop Manager has been a life saver for us. Remote Desktop is a simple tool that organizes all of our remote servers in once place with built in configuration to work across all of them in unison with ease.

Among all of it’s features the ones that have come to be the most useful to me have been the ability to manage all of our systems, regardless of OS or location, from one console; the ability to have a central password store integrated into the tool; and the embedded, tabbed view of multiple remote sessions at once.

Manage Everything


One of the beautiful things about running a startup in this day in age is the vast resources available through cloud based deployments. A small startup company like ours has the ability to deploy hundreds of servers across all geographic locations in the world with the click of a mouse. Managing these can all be done from the comfort of our offices overlooking the beach in Southern California. However, managing this many servers can get to be quite a burden so any tool that can ease that burden is a blessing. With a disparate set of systems in our deployment we needed a tool that would allow us to view everything together in one place. Remote Desktop Manager has the ability. The Dashboard view within the tool allows me to look at all of my servers. I organize them by data center and region and then stick all of the Windows servers and Linux Servers in there together. Opening up a remote session is as easy as double clicking on a machine. The configuration of each machine is where I can setup what that session is, Windows RDP or Linux SSH console or whatever else. This ability is more rare than one might think in this type of a tool.




Central Credential Store

With this many servers, managing passwords is a serious pain. In addition, as a small company with just a couple of people who know how to access most things we needed a way for the knowledge to be accessible in the case of something happening to key people. Remote Desktop Manager has the ability to store credentials for all types of remote sessions. This can be managed centrally by our one full time operation person while still allowing access to the others that need the occasional access. There seem to be a lot of different options for storing this that include higher levels of security as well as things as simple as a centrally accessed Access database, SQL Server, XML or even Dropbox storage.



Tabbed View

One of my favorite features of Remote Desktop Manager is the ability to have multiple sessions open at once and view them all within the RDM program within a tabbed view. This makes opening up a bunch of servers and going back and forth between them a breeze. The name of the server appears in the tab at the top, as opposed to just opening up multiple RDP sessions where I have no idea what is what. This is a God-send when I am needing to compare config files across servers, monitor event logs, or need to install a new release across multiple servers at once. I can still open the sessions up in full screen if I need to, but I don’t find myself doing that a whole lot lately.


Summary

All in all Devolutions Remote Desktop Manager has been a great tool. The only thing I have found myself wanting is an automated way to reach out to my Amazon or Rackspace account to suck in new servers as opposed to manually entering remote connection information, but that is a minor issue compared to the pain that this tool has removed from my day to day life of jumping around our remote, distributed cloud infrastructure. Thanks to the guys over at Devolutions for an awesome product.

• http://remotedesktopmanager.com/
• http://devolutions.net/

Centripetal Product Review of CloudBerry S3 Explorer Pro

Part of building, running and maintaining a Software as a Service application like ours means having great tools at your disposal to make things easier. I wanted to highlight one of those tools that I've become particularly dependent on in my day to day work for keeping things running smoothly. The tool is CloudBerry S3 Explorer Pro by CloudBerry Labs.

We manage our complete backend logging, monitoring and reporting systems based on Amazon S3 at the core. There are lots of tools we run on top of that from custom built applications to Hadoop and everything in between. We currently have 10's of millions of individual files ranging in size from 100 bytes to over 1 GB. In Amazon's S3 environment we we manage over 100 buckets, spanning all Amazon worldwide regions with each containing complex directory structures that define content and date partitioning of the data in the files. We also run a lot of different portions of our applications through the Amazon CDN which is seemlessly integrated into S3. With all the applications and code we have dedicated to S3 specific functionality you'd think that we would never have a need to actually just look at the raw S3 structure and browse around for files or other things like that, but it has become a daily need to go in for one reason or another. When I have a need to go directly to S3 for something Cloudberry S3 Explorer Pro has been my tool of choice. It is indispensable when looking for individual files when debugging, doing copy or move jobs, or scripting more complex file jobs.

Debugging

A typical day finds me debugging an issue for one of our business team members. Many times I find that I need to go directly to the transaction logs of some server to determine exactly what happens. We store all of these in S3 in order to run transaction reports across them with Hadoop and other tools. Cloudberry Explorer has made the job so much easier because I can look at my different buckets through the lens of a typical filesytem that I am used to and can browse around, download and open files with a click of the mouse and can even make quick updates when I need to. Cloudberry gives me a beautiful user interface for working with some of the more advanced features of S3 like ACL's, Bucket Policies, Cloudfront distributions, External Buckets and more and it makes these features much more accessible than the straight Amazon S3 API for quick tasks I need to do. If I ad to work within the confines of the Amazon API or even the Amazon Web interface for doing this debugging I would be entirely hamstrung and my life would be in shambles from the craziness of things.....

Copy or Move Jobs

Another thing that I find myself doing a lot is moving files around within S3. We use specific naming conventions for S3 files to denote the working state of a file. We also use different buckets in each Amazon region to reduce cross datacenter chatter. But there are often times that I find I just need to copy or move a whole slew of files from one place to another. Recently I actually had the need to move over 1 million files between buckets. For this I use Cloudberry. Moving and Copying is a drag and drop task within Cloudberry. And for some of those bigger jobs (like the million files) I can use up to 100 threads to get the job done more quickly. The ease of sing Cloudberry for these types of tasks has gotten me to be a little too dependent on the tool, I've actually spun up Amazon Ec2 instances just to put Cloudberry on to do large copy/move jobs and then tore them down. That allowed me to have more CPU power going as well as even more threads working on my job.

Scripting 

One thing that we've recently discovered is that everything that is available in the CloudBerry S3 Explorer Pro version is also available in Windows Powershell snapins. We've utilized these
extensively to script out tasks that we find ourselves doing over and over again. While we have our own tools that use the Amazon S3 API to interact with S3 from within our applications, I've found that the Cloudberry Powershell snapins are more reliable and much easier to use due to the scripting capabilities of Powershell. Now each time I find myself doing something in Cloudberry I ask if it is something that I should script out for future use. Often times I find that a few minutes adding new capabilities to my script toolbox using these snapins ends up saving countless hours down the road. 

Summary

If you're using Amazon S3 for anything you're doing in your business you need to go out and get a license for CloudBerry S3 Explorer Pro. This tool is one of the most useful tools that I have found, not only do I use it daily but I bought licenses for everyone on our engineering team and they all use it pretty much daily as well. Cloudberry also makes tools for many of the other cloud based storage solutions. Pretty cool. Thanks a lot to the guys over at Cloudberry Labs for such a great tool!

http://cloudberrylab.com/

Mike Davis

Review All Your Invoices

The blog has been getting a little neglected lately, but we're still working on the products. We just released a new feature that allows customers to access their past invoices. We always email you your invoice as soon as your credit card is charged, but now you are able to go into the system and view all of your past invoices. Simply login to app.centripetalsoftware.com and click on the Account tab at the top. This will show you a summary list of all of your invoices.

From there you can click on any one of the invoices to access a detailed invoice that you can print out.

This is all done by accessing payment information that is stored in our Level 1 PCI DSS Compliant payment processor's system. So all of your credit card information is secure and no information will be available that could compromise your security.

Payment Information Updating

We’ve been working on a ton of new features and have released some of them, but the blog has been getting neglected. So I thought I’d throw up a tidbit of what we’re working on. We’ve been building out the admin section of the application to allow users to better manage the information about them and their account. The most recent bit we’re about to push out is a mechanism to update payment information. One of the downfalls of a recurring service that is automatically billed is that payment information gets out of date. It’s difficult to get people to update it, especially if there is no way to update it, so we’re working on making that a little bit easier.

 

Carbonite Review

Carbonite (found at carbonite.com) is a back up program for your computer’s files, music, videos, and more. It boasts of unlimited backup capacity, completely automatic retrieval, secure and encrypted file storage, and easy file recovery. The cost is $54.95/year with a free, no credit card required, trial.

According to their website, “The current version of Carbonite is designed for Windows XP, Windows Vista, and Windows 7. Carbonite supports both the standard 32-bit and 64-bit versions of each. Carbonite will not support older versions of Windows (Windows 98, Windows 2000, and Windows ME) or Linux operating systems. Carbonite is also available for all Intel-based Macs running OS 10.4 (Tiger), 10.5 (Leopard), and 10.6 (Snow Leopard).”


Carbonite works by installing a small application on your computer that works in the background. There are no limits on the backup storage capacity, but Carbonite does warn that because of DSL speeds, a larger file file back up will take considerably longer to upload to their server.

I signed up for the free trial and have started the process as I write this review. I am running it on an Intel-based MacBook version 10.6.4. The installation process was simple and straightforward, however I was not pleased to read, after I started the program, that the initial back up could take several days.

Because I’m running this on a laptop, my computer will not stay on continuously for that amount of time. I’m not sure how this will affect the usefulness of this program. It may be better suited for a desktop computer that can stay connected to the Internet continuously in awake or sleep mode.

Once you install Carbonite, you can just let it run its course. It works in the background when your computer is idle, backing up new and changed files. All files are encrypted twice, using the same security measures banks do, and the information stays secure, only accessible for you to retrieve it if need be.

The retrieval process seems simple as well. A few clicks and your important files are brought back to your computer. You have the option of selecting which files to backup, and it’s important to check the preferences of the program to customize the default files Carbonite updates.

As a backup system, I believe Carbonite is worth looking into and considering. However, it is subject to being connected continuously to the Internet and DSL speeds. I think it would be a great option for desktop computers and their Carbonite Pro packages for multiple computers, is worth looking into for small businesses.

*It’s been one hour since I installed Carbonite on my Macbook and my initial backup is still initializing, no files have been uploaded to the Carbonite system yet... time will tell if I will continue with Carbonite as my backup solution. I will post an update to this post when (or if) my backup completes.

Kjaere Friestad
- guest blogger :: San Francisco, CA :: for Centripetal Software

1% for the Planet

We recently became a member company of 1% for the Planet. We did this because we care deeply about our planet and for all that God created, and want to ensure that our business does everything possible to help to better the place that we live. 1% for the Planet exists to build and support an alliance of businesses financially committed to creating a healthy planet. What Centripetal Software is committing to is giving 1% of sales to one of the environmental organizations listed on the 1% for the Planet web site. We will donate directly to a nonprofits—not through 1% FTP. We do everything we can to ensure that the way we run our business causes a minimal impact on our planet and we are committed to helping organizations that are working to make this a better place to live.

A moment of panic....

We recently had a Basecamp user call us with a hint of panic in their voice. They had been working with a consulting company that used Basecamp as the means for most of the communication with this person's company and as the mechanism to exchange all files that were deliverables as part of the consulting engagement. Well, as sometimes happens, the relationship wasn't quite working out and the man on the other end of the phone was desperate to get all of the data and files out of the Basecamp account before the consulting company was able to remove his access to the data. With Basecamp a company can grant access to a project to another company in order to collaborate on a project, this is typical for consulting companies to do with their clients. This man was looking to get a copy of all of his data and files for the work he had paid for over the past 2 years in order to have a copy of it all, as well as to have a record of communications in case the worst case should find the parties in court.

He was able to use Centripetal Retrieve for Basecamp to export all of the todo's, messages, comments, files, & writeboards from Basecamp and have a local copy delivered to his desktop via Dropbox syncing. He was so excited to have this done so quickly and seemed relieved to know that he had a copy of everything that had become so important to his business. They had been using Basecamp so extensively with this consulting company that they didn't even realize how important the data had become to them and he didn't want to risk not being able to access it should the relationship further sour.

Customer Feature Request Product Release

We recently released a number of features and bug fixes to our core engine which were primarily based on customer feedback for both feature requests and bug reports. We’re pretty excited to be hearing so much from our customers and we’re always excited to be able to release software that is directly driven by what our customers want. This latest release includes the following:

• A fix to the way that we name files and directories and syncing that up with the way that we link them in the html exports. The issue was that we had some casing problems where we linked to a lower case directory name when the directory was actually camel cased. This only caused problems for our customers who are on Unix based systems where directory linking is case sensitive. Having come from Sun Microsystems and working exclusively on Unix systems for years, I feel bad that this one was missed, but working on Windows these days made this one slip by us unnoticed.
• We had a number of customers request that we add author information to the html exports for messages. We had limited what we put into the html exports with an aim of getting them released earlier. We’re open to any other enhancements that customers want to see there.
• We discovered a bug on exporting Basecamp messages from projects that are in an archived state. This was causing us to not receive the message body and so we printed out an empty message body in the html exports. We poked around and figured out how to extract this information from Basecamp.
• A recent (unannounced & undocumented) change by the Basecamp team was causing us to hit a rate limiting threshold on the API access we make to backup user data. We put in some workarounds and fixes so that we won’t hit that any more. This was simply causing our service to continually have to wait for a 20 second timeout period until we could make additional requests. With these new fixes we are now able to complete backup jobs much more quickly.

Please let us know if you have any additional feature requests. We love hearing from our customers.

 

We’re working on some new account management features now as well as an integration with Highrise for backing up all of that data.

Automated Invoice Emailing

We've been working on lots of new features and have completed a piece of our billing system updates. This latest feature enables automated emailing of monthly receipts to the email on file for the billing contact. We've opted all of our existing customers in to this new feature which will begin on the next billing cycle for each customer.