Categories
Computers Storage

Synology’s speed lie

Since a while I own a new Synology NAS, a DiskStation DS414. Synology advertizes this model with speeds of

Over 207.07MB/s Reading, 135.63MB/s Writing

However I never came even close to those speeds in my daily use of the DiskStation, so I tried to set up an ideal scenario in which I would get the fastest speed the NAS could deliver.

I did so by using a very fast client (a MacBook Pro Retina with a 2.5 GHz Core i7 CPU and SSD drive), and connected that directly “back-to-back” (i. e. without any network device in-between that could potentially slow the network traffic down) to one of the networking ports of the NAS.

The NAS contains three hard drives, a Western Digital WD30EURS (3 TB, max. speed according to benchmarking >130 MByte/s both reading and writing), a Seagate ST32000542AS (2 TB, max. speed at least 109 MByte/s), and a Western Digital WD40EFRX (4 TB, max. speed 146 MByte/s), in a SHR compound (technically a form of RAID5, so due to the striping involved speed should increase compared to a single drive configuration).

I then copied about 25 GB of large files (movies) between the Mac and the NAS.

The fastest speeds I could get was a meager 79.5 MByte/s on reads, and 39.4 MByte/s on writes. That was extremely disappointing, but it confirmed my subjective feeling that the NAS is slow.

To confirm the read data rates I executed the following command directly on the NAS, to have a means of a “plausibility check:”

nas1> hdparm -t /dev/sda /dev/sdb /dev/sdc

/dev/sda:
 Timing buffered disk reads: 328 MB in  3.01 seconds = 109.09 MB/sec

/dev/sdb:
 Timing buffered disk reads: 332 MB in  3.00 seconds = 110.66 MB/sec

/dev/sdc:
 Timing buffered disk reads: 392 MB in  3.00 seconds = 130.66 MB/sec

This shows that the NAS is capable of reading at a higher speed than it could deliver to the client via the network — possibly an issue with the CPU being too weak to deliver the full speed Synology promise?

Anyway, I find these disappointing results inacceptable, and it makes Synology’s statement a “lie.” Also, I found severe instability and defects with respect to the VideoStation package and recording from a DVB-T stick. Plus the massive issues Synology have with the power-saving “Hibernation” feature that never worked for me (neither on this box, nor on its predecessor DS212+.) And I’m not alone, a lot of people have the same issue, but Synology seem unable to solve it.

Considering the high price of the NAS (almost 400 EUR!), my strong opinion is that the device simply is not worth its money. It would have been better to buy a HP ProLiant MicroServer and get more power for less money. 🙁

Categories
Mac

Mac SSD speeds

There have been some complaints recently about speeds of SSD drives built into Mac computers, mostly MacBook Pro and Air. Supposedly current models are much slower than earlier models, sometimes as slow as only 50% of the transfer rates.

As I was curious I benchmarked mine. I used Blackmagic Disk Speed Test which is available for free from Apple’s App Store.

I got 416 MByte/s for writing, and 474 MByte/s for reading for my 512 MB SSD drive, which I consider pretty fast:

 

Blackmagic Disk Speed Test results

I have a MacBook Pro Retina, 15-inch, Early 2013 with 2.4 GHz Intel Core i7. My SSD is a APPLE SSD SD512E Media which is obviously made by SanDisk.

What about yours? Please comment here in my blog, giving your machine and SSD details.

Categories
Computers Mac

“SSD-Lotterie” mit Apple

Ein Artikel bei heise online hat mich gerade nachdenklich gemacht: Dort wird berichtet dass SSDs unterschiedlicher Zulieferer teilweise dramatisch unterschiedliche Geschwindigkeiten aufweisen was dazu führen kann, dass ein aktuelles Modell des MacBook Air nur halb so hohe Transferraten erreicht wie ein Vorjahresmodell. Und das ist nicht das einzige Beispiel dieser Art, es gibt noch mehr.

Ich frage mich was “den typischen Mac-Käufer” dazu bewegt, diese Politik von Apple zu akzeptieren. Ist es schlicht Unwissenheit — was noch irgendwo “verzeihlich” wäre — oder ist es blinde Folgsamkeit, Hauptsache man besitzt das geliebte “Statussymbol”?

Zugegeben, die Formulierung ist ein bischen provokativ. Ich selbst besitze drei MacBook Pros, würde mich aber dennoch durchaus als sehr kritischen Apple-User bezeichnen. Nach zwei iPhones habe ich beispielweise Apple den Rücken gekehrt und bin “ins Android-Lager gewechselt”, weil die Plattform für mich einfach “offener” ist und mir mehr Möglichkeiten bietet.

Wie seht Ihr das? Sollte man Apple nicht durchaus mal spüren lassen dass man sich als Verbraucher nicht gerne auf den Arm nehmen lässt? Gibt es überhaupt eine Möglichkeit dazu? Oder kommt man in bestimmten Situationen bzw. Konstellationen nicht darum herum, “in den sauren Apfel (Apple?) zu beißen” und trotzdem zu kaufen? ;-)

Eure Meinung interessiert mich sehr — hier habt Ihr ein Forum. :-)

Categories
Security

ESTsoft leaked personal information

It seems ESTsoft leaked personal information. How can I tell? Well, continue reading…

Yesterday I received spam on a unique e-mail address I only ever used to communicate with ESTsoft, makers of ALzip.

So they either had a security incident where customer data was stolen, or they deliberately passed (possibly “sold”) my e-mail address to a third party.

I tried to contact them, but eventually they’re no longer in business because their support e-mail address does no longer exist. See below non-delivery notice:

Delivery has failed to these recipients or groups:
support@estsoft.com
The email address you entered couldn’t be found.

 

Is there anyone out there who have similar experience with that company? If so, I’d like to hear from you…

Categories
English Usability Web Browsers WTF

Firefox 29 “Sync” nightmare

The — as I later found out — completely revamped “Sync” feature in Firefox 29 caused me a lot of grief yesterday, and I wasted more than 3 hours due to it. :-(

The issue started after I had to set the system time back on one of my Macs which I hadn’t used for a couple of weeks, so the Firefox data on that machine was outdated and not in-sync with the other machines synced to the same Firefox Sync account. Not sure whether setting the date back was the root cause, but anyway… I suddenly noticed that I had old passwords on another machine, too. Obviously it had received them via Firefox “Sync” from said Mac.

So, what to do?

I first cleared the data stored in my Firefox Sync account by logging on to the old account management (https://account.services.mozilla.com/), to make sure that the outdated passwords do not propagate to more machines.

I then disassociated the machines that had already received the outdated passwords from Firefox Sync.

Afterwards I wanted to add the device back the same way I did when adding a new machine in the past. But it didn’t work as it used to work. No way I could display the sync code I needed to enter on the “master” machine. :-(

Categories
English Mac WTF

“MacX DVD Ripper Pro Halloween Edition” expires and lies to you

Halloween 2012 MacXDVD Software, Inc. gave away free copies of their “MacX DVD Ripper Pro” as a special “Halloween Edition”. This was a very generous gesture which I would like to explicitly recognize and thank them for.

When I recently wanted to reinstall that piece of software on my new MacBook Pro Retina and tried to enter the serial number I noticed that you can’t — the software said that it had expired. I was very disappointed. I didn’t remember that you had to activate the software before the end of the promotion. So I set back my system clock to November 2012, and presto, I could install the software again. 🙂

After I ripped a DVD I set back the date to the current date, only to notice later when I wanted to rip another DVD that the software had expired(!). It does not explicitly say so, but it “lies” to you as follows:

MacX DVD Ripper Pro Halloween Edition lying to you

This message appears regardless of which DVD is in the drive (even very old ones that were released well before “MacX DVD Ripper Pro” itself was released), and even if no DVD at all is in the drive. So it is obvious that the above is not the truth, but a lame excuse for not telling you the truth that the software was time-limited from the very beginning.

Mind you, I’m not complaining about the fact that the software is time-limited as such. Even a software that is free only for a year or something is still a nice gift. What I’m complaining about is that MacXDVD Software, Inc. is lying to me. Why did they not originally include the notice that this is a time-limited copy of the software only?

The solution to this problem of course is to again set back your system time. This is not very convenient, but if you only occassionally rip a DVD it should not be a big problem.

Categories
Cell Phones Communications Networking WTF

OpenWRT Quality-of-Service module caveat: speed limit

As I still have “issues” with my DSL line being extremely slow during certain times (especially between 18:30 and 23:00), I wanted to use USB tethering from my OpenWRT router to my Android LTE phone to enjoy the massive speed I have in our area (up to 90 MBit/s downlink and 70 MBit/s uplink, according to the Ookla Speedtest.Net).

So I configured the router according to the OpenWRT wiki. The internet connection did not come up immediately, and I couldn’t find out why, so as a last resort I rebooted the router. After I switched on USB tethering again on my mobile phone (which seems to be required each time you reboot the router since the mobile phone then loses the USB tethering connection), I suddenly had a working Internet connection.

However, for some reason the Internet speeds I was seeing in Ookla’s web browser-based speed test (which is a Flash applet) were very disappointing, around the same speeds I’m used to with my DSL line (14 MBit/s downlink, about 0.8 MBit/s uplink). I thought it might be an issue with USB tethering not working well in my build of OpenWRT (still r39582), so I tried USB tethering with my Mac (using HoRNDIS). I got the full speed I expected. So back to OpenWRT…

Then suddenly I suspected what might be going on: Since I had more or less exactly the same speed as my DSL connection (with the uplink of less 1 MBit/s being dramatically slower than what I should get via LTE) I thought about what could possibly limit the speed. And then I remembered that in the “Quality of Service” (QoS) module I configured the speeds of my DSL line (at the top of the page, in the Download speed (kbit/s) and Upload speed (kbit/s) fields). Could it be that these settings actually limit your speed to these values?!

I disabled QoS, and immediately thereafter I got the full LTE speed I expected.

So, another thing learnt.

I hope this helps people who might be in a similar situation…

Categories
Security

Outlook.com breaks DKIM signatures

I’m currently implementing DKIM support for my Exim mail server, and due to this I’m sending a lot of test messages to all major freemail providers in Europe and the USA.

I noticed that Outlook.com breaks DKIM signatures since they modify one header as follows:

The original header I sent is

Content-Type: text/plain; charset=ISO-8859-1; format=flowed

while the header which I see when I fetch the received message with IMAP is the following:

Content-Type: text/plain; charset="ISO-8859-1"; format=flowed

Noe the extra “double quotes” around the charset which are not transparent to “relaxed” Header Canonicalization. This causes Thunderbird’s “DKIM Verifier” extension to fail on this message.

What’s strange is that Outlook itself succeeds internally to verify the DKIM signature, so the modification to said header probably occurs after checking the original header. See below for what the header of the received message says about authentication:

Authentication-Results: ... dkim=pass (identity alignment result is pass and alignment mode is strict) header.d=example.org;

To solve this small issue I modified Exim’s list of headers to be signed as follows. Original set is

Content-Transfer-Encoding:Content-Type:Subject:To:MIME-Version:From:Date:Message-ID

while I now only sign the following (which I consider to be sufficient):

Subject:To:From:Date:Message-ID

Let me know if you have any comments or suggestions.

Categories
Computers Security

Insecure self-updates via plain HTTP

Yesterday I discovered by chance (since I was running the program whose name I will not disclose yet on my Mac where I’m using Little Snitch to control outgoing connections) that a program created by one of the few software giants does not use SSL to ensure the integrity of self-updates, but just uses plain HTTP so that attackers can modify downloads and thereby introduce malicious code.

Immediately I got in touch with the manufacturer of the application, and only 9 hours later they came back to me with the below response:

Right now <unnamed product> download server supports only HTTP and not HTTPS, so we don't have any immediate solution to offer. However we are keeping notes of this concern and we will address it.

Is this not simply unbelievable?!

Remember we’re not talking about someone who does this for a hobby, who may not have the money or time or even knowledge to implement SSL on their server. But we’re talking about one of the largest IT companies in the world… 🙁

I will now wait for a while, and if they haven’t fixed the issue by then I will disclose it on my blog anyway to put pressure on them… But maybe they do it intentionally in order to aid the NSA?! :-/

Categories
Computers Networking

How to properly benchmark your broadband connection

Since a while my broadband connection gets slow frequently, so I wanted to perform regular benchmarking probes and create a graph to illustrate the actual uplink and downlink speed.

Your first approach to this might be to download and upload a payload, measure the time this took, and divide the sizes of the files you downloaded and uploaded by the times it took. But this approach is seriously flawed… Why? Simple. In a usual scenario you have a router that terminates your internet connection, so eventually other LAN clients will cause traffic at the same time you’re performing your probe. This would “limit” the bandwidth you have for your probe, and thus artificially reduce the speed you calculate.

So how to do it properly? You should ask your internet gateway (your router) for the traffic it sees.