Tuesday, December 9, 2008

Find out and compare grocery price in all major hypermarkets & supermarkets

The Ministry of Domestic Trade and Consumer Affairs (MDTCA, a.k.a. Kementerian Perdagangan Dalam Negeri Dan Hal Ehwal Pengguna - KPDNHEP) has setup a Price Watch section in their website and list out the grocery price in all major hypermarkets and supermarkets including Carrefour, Giant, Jusco, Mydin, Tesco, The Store, etc.

The price lists are made according to state. You might be surprised to find out how much different can the highest and lowest price of the same item among them, and different hypermarket under the same group might have different price for the same item in different area.

Here are the grocery price list downloadable from their website:

Monday, December 8, 2008

Secret code to enter Service Menus of Sony Ericsson handphone

There is a secret code to enter the Service Menus of Sony Ericsson handphone. Different information might be shown in different model number. And here is the code... (warning: use it at your own risk! Don't do it if you feel uncomfortable to try!)

Enter the following sequence in Standby Screen.

For handphone with joystick or arrow keys:
1. Press the [right] key
2. Press the [*] key
3. Press the [left] key
4. Press the [left] key again
5. Press the [*] key
6. Press the [left] key
7. Press the [*] key

For handphone with jog dial:
1. Rotate jog dial up (just rotate a bit, don't make circular rotation)
2. Press the [*] key
3. Rotate jog dial down (just rotate a bit, don't make circular rotation)
4. Rotate jog dial down again
5. Press the [*] key
6. Rotate jog dial down
7. Press the [*] key

Here is what I get on the Service Menus of Sony Ericsson P1i:
1. Service Information

  • Model information
  • Software information
  • Hardware information
  • SIM locks
  • Configuration
2. Service tests
  • Display
  • Camera
  • Touch screen
  • Illumination
  • LED's
  • Keyboard
  • Vibrator
  • Speakers
  • Microphone
  • FM radio
  • Memory Stick
3. Format internal disk
  • Are you sure you want to format your internal disk? (you should answer NO or else you might get into trouble)

You might probably want to play around with the Service Tests available to your handphone. It is a handy tool to check if the respective hardware portion of your handphone is functioning or not.

Disclaimer: I shall not be liable to any losses or damages if you intend to use the secret code mentioned in this article.

Sunday, December 7, 2008

Procedures for the approval for house extensions and/or renovations

The following serves as a useful FAQ that you should know as a house/building owner who plan to extend and/or renovate your house/building in Malaysia.

What is meant by building extensions / renovations?

  • Any demolition work to the original building
  • Any extension work to the original building (enlarging floor area)
  • Any renovation work to internal building layout
  • Construction of car porch, fencing wall and refuse chamber
  • Any other extension / renovation as prescribed in Act 133, Road, Drainage, and Building Act 1974, and Building By-Laws 1984

Steps to be taken by home owner for submission of extensions / renovations application:

  • Obtain letter of consent from neighbours should extension / renovation work involving housefront bordering neighbour's house
  • Appoint an architect or a registered draughtsman for preparation of building plans
  • Appoint professionals should extension / renovation work involving concrete structures
  • Obtain Development Order approval from municipal council should the extension work exceed 50% of the original floor area
  • Ensure the proposed extension / renovation work comply with the Building Guidelines & Standards
  • Ensure construction work commence only after proposed extension / renovation application has been approved

Documents in submitting application for building extension / renovation:

  • Form A
  • 4 complete copies of the building plan
  • 1 copy of the most recent income tax returns
  • 1 copy of the Certificate of Fitness
  • 1 copy of the Title Deed or the Sales & Purchase Agreement
  • Consent letter from neighbouring residents (if applicable)
  • 1 copy of the structure plan and structure measurement from a certified consultant engineer (if applicable, or purchase the Standard Plan from Department of Building)

Examples of standard plan available:

  • Back extension
  • Front awning extension
  • Building of gazebos
  • Concrete fence
  • Air-well
  • Store and fish pond

Processing fees for plan submission:

  • RM500 for extensions / renovations that involve the lower level / storey
  • RM1000 for extensions / renovations that involve the lower and upper level / storey

Steps to be taken by home owner after extensions / renovations approval:

  • Apply for permit to place building materials on the road shoulders prior to commencement of renovation work.
  • Contact Alam Flora for collection of debris of building materials before construction begins.
  • Display Letter of Approval of the extension / renovation application during construction work.
  • Ensure construction works is carried out within own boundary and adhere to the approved extension / renovation plan.
  • Notify construction stages to municipal council by submitting the relevant forms.

Saturday, December 6, 2008

40% of IT jobs will be related to open source by 2020

Last week, the 78 pages 2020 FLOSS Roadmap Version 2.16 has been tabled in the Open World Forum (OWF) in Paris. OWF is a forum dedicated to free/libre/open source software (FLOSS), its players and projects.

This 2020 FLOSS Roadmap report is the OWF’s main manifesto, and is designed to support discussions taking place during the different OWF seminars and forums. It is a prospective and projection to the influences that will affect FLOSS between now (2008) and 2020, with descriptions of all FLOSS-related trends as anticipated by OWF contributors over this period of time. It also highlights all sectors that will, potentially, be impacted by FLOSS, from the economy to the Information Society.

Studies have been carried out in seven key areas:

  • Theme 1: Public policies: promoting sustainable development of sharedresources
  • Theme 2: FLOSS: the key to future innovation and competitive differentiation?
  • Theme 3: Ensuring sustainability for FLOSS developer communities and businessecosystems
  • Theme 4: Technological and economic breakthroughs: challenge or opportunityfor FLOSS?
  • Theme 5: IT 3.0: towards new governance for information systems?
  • Theme 6: FLOSS: a lever for employment and careers
  • Theme 7: FLOSS in an Open World: Innovations and best practices from Brazil

The report predicted that within the next 12 years, 40% of IT jobs will be related to open source, and open source-based cloud computing will be solving many problems in the real world.

The roadmap has outlined seven areas of change for 2020, which are:

  • FLOSS will become mainstream. It will be the de facto standard for areas such as development tools, infrastructure and scientific computing, as well as being widespread in other sectors
  • 40% of IT jobs will be related to FLOSS
  • FLOSS will free businesses from vendor lock-in, providing a "vaccine against abusive behaviour from a commercial vendor"
  • FLOSS will help reduce the global digital divide, as it is a collaborative effort that works for sustainable development of a shared resource
  • Open source communities will help build business ecosystems for specific markets
    Green datacentres will lead to business models with a low ecological impact, in "the next industrial revolution"
  • Cloud computing will be ubiquitous, and social networking will be the main way to communicate with businesses and government

Click here to download the comprehensive 2020 FLOSS Roadmap Version 2.16.

Friday, November 28, 2008

Developing and implementing .NET applications in Linux, Unix, Mac, etc. with Mono 2.0

Microsoft has been promoting their .NET application platform quite some years ago, and supporting the development of .NET applications with their Visual Studio development tools. They even introduced a new programming language named as C# targetting to the .NET frameworks.

If you have the impression that .NET applications can only run on MS Windows platforms, and that you can only develop .NET applications using Visual Studio in MS Windows, probably you are still not aware of Mono which frees up all the .NET developers and their applications to the rest of the world other than Microsoft, which includes Linux, Unix, Solaris, BSD, Mac OS X, etc.

Mono is an open source development platform based on the .NET framework, which allows developers to build Linux and cross-platform applications with improved developer productivity. Mono's .NET implementation is based on the ECMA standards for C# and the Common Language Infrastructure (CLI).

The Mono runtime contains a just-in-time (JIT) compilation engine for a number of processors including x86, SPARC, PowerPC, ARM, S390 (in 32-bit and 64-bit mode), x86_64, IA64 and SPARC for 64-bit modes.

The Mono project started in Ximian since 19 July 2001, which was about 7 months earlier than the release of Visual Studio .NET 2002 (first release of Visual Studio that supports .NET framework) by Microsoft. Ximian was a company that provided free desktop applications for Linux and Unix based on the GNOME platform, and has been acquired by Novell in 2003. Mono is currently sponsored, led and supported by Novell.

Mono version 1.0 was released in June 2004, one year after Visual Studio 2003 was released. Current version of Mono is 2.0.1, which is API complete in regards to .NET 2.0 and supports for Visual Basic.NET as well as C# versions 2.0 and 3.0.

Mono includes compilers, an ECMA-compatible runtime engine (the Common Language Runtime, or CLR), and many libraries. The libraries include Microsoft .NET compatibility libraries (including ADO.NET, System.Windows.Forms and ASP.NET), Mono's own and third party class libraries.Gtk#, a set of .NET bindings for the gtk+ toolkit and assorted GNOME libraries can be found in the latter. This library allows you to build fully native Gnome application using Mono and includes support for user interfaces built with the Glade interface builder. Furthermore, Mono's runtime can be embedded into applications for simplified packaging and shipping. In addition, the Mono project offers an IDE called MonoDevelop, Debugging, and a documentation browser called MonoDoc.

As an open source software, you can download, copy, distribute and use Mono for free. Here is the download page of Mono.

There are a lot of information about Mono in Wikipedia. There are also many resources and documentations about Mono in its official website.

TM revised Lets Talk packages to give more benefits

Recently, TM sent me a notice about the changes in their Let's Talk plans, which would replace the existing from 15 November 2008 onwards.

Here are the new Let's Talk packages:

Let's Talk 38

  • Monthly fee: RM38
  • Local calls: free unlimited
  • National (STD) calls to TM's fixed lines: free 60 minutes/month, thereafter 18 sen/min
  • Calls to mobile & other fixed lines: flat rate @ 25 sen/min
  • International (IDD) call: normal rate

Let's Talk 68

  • Monthly fee: RM68
  • Local calls: free unlimited
  • National (STD) calls to TM's fixed lines: free unlimited
  • Calls to mobile & other fixed lines: free 60 minutes/month, thereafter flat rate @ 25 sen/min
  • International (IDD) call: normal rate

Let's Talk 108

  • Monthly fee: RM108
  • Local calls: free unlimited
  • National (STD) calls to TM's fixed lines: free unlimited
  • Calls to mobile & other fixed lines: free 90 minutes/month, thereafter flat rate @ 20 sen/min
  • International (IDD) call: up to 80% discount. The discount is based on destination country.

Click here for information of the IDD normal and discount rate.


From the "2008 Q1 Communications & Multimedia - Selected Facts & Figures" bulletin published by the Malaysian Communications and Multimedia Commission (MCMC, a.k.a. Suruhanjaya Komunikasi dan Multimedia Malaysia - SKMM), we can notice that TM feels the challenge in sustaining their fixed line subcriptions, while the cellular phone subscription has been growing steadily.




I believe the declination in fixed line subscription could be even greater if not sustained by the Streamyx broadband service which relies on the fixed line infrastructure. However, the emergence of faster and more stable wireless Internet technologies such as 3G Mobile, Worldwide Interoperability for Microwave Access (WiMAX), High-Speed Downlink Packet Access (HSDPA), and so on, will definitely introduce new challenges to the fixed line business of TM.




It is good to know that TM realises their situation, and has taken some action to try to maintain their fixed line business which they have been dominated in the country.

You might probably also interested to read my other article about "is it wise to change your phone plan to Let's Talk?".

Thursday, November 20, 2008

Cellular phones penetration rate

10 years ago, you might find only 1 or 2 out of 10 people around you had a cellular phone. Today, the scenario has reversed, you can hardly find anybody around you without a cellular phone, especially those above 18 years of age.

The graph below shows the number of cellular service subscription in Malaysia over the years.






We can clearly see that prepaid subscription greatly outnumber postpaid subscription. The sum of them in 2007 is already very close to the population of Malaysia.

The graph above can be converted into the one below to show the enetration rate per 100 inhabitants in Malaysia.


As you can see, we have a penetration rate of 85.1% in year 2007, which is quite a high figure. Let's break down that figure by state, and we have the penetration rate in each state for year 2007 as below.





We have a high penetration rate in urban area, such as Kuala Lumpur, Selangor, Penang, etc. Melaka also has a high penetration rate of 85.5% by 2007. The penetration rate in East Malaysia (Sabah & Sarawak) is the lowest, probably caused by the lack of coverage of cellular network in rural areas there.

The next graph compares the penetration rate among ASEAN as well as some other countries. It is a very interesting graph.




In 2007, among the ASEAN countries, Singapore has the highest cellular penetration rate, followed by Malaysia and Thailand.

Notice that in certain places such as Singapore, Australia, Taiwan, UK, Hong Kong, etc., the cellular penetration rate has already gone above 100%. This mean that in those regions, there are quite a lot of people subscribed to more than one cellular number at the same time. Hong Kong has a really high penetration rate that out of 2 people on the street, you can probably find 3 mobile phones from them.

All raw data is obtained from the "2008 Q1 Communications & Multimedia - Selected Facts & Figures" bulletin published by the Malaysian Communications and Multimedia Commission (MCMC, a.k.a. Suruhanjaya Komunikasi dan Multimedia Malaysia - SKMM).

Wednesday, November 19, 2008

How many SMS did you send out last year?

According to data provided in the "Communications & Multimedia - Selected Facts & Figures" bulletin published by the Malaysian Communications and Multimedia Commission (MCMC, a.k.a. Suruhanjaya Komunikasi dan Multimedia Malaysia - SKMM), total amount of SMS sent out by cellular phones in Malaysia in 2007 is 56.8885 billion or 2,590 per subscription SIM card.

This means that on average, we sent out 7.1 SMS per day last year. If you sent out more than 7 SMS everyday, you are contributing more than average to the figure.

The graphs below show the growth of SMS amount sent over the years.



Assuming that each SMS is charged for 5 sen, this will be a hefty RM2.85 billion business for telco operator in 2007, which is still growing exponentially.

Tuesday, November 18, 2008

Simple way to confirm a long term trend reversal

The term "trend reversal" is very common in technical analysis for share, index, commodity, derivative, or other kind of securities. Technical analysis has many kind of complicated signals to catch the "trend reversal" based on price movement, trade volume movement, and/or the combination of both.

However, technical analysis might be too difficult to master for layman like you and me. The "simple way" that I'm going to discuss here is indeed a very simple way. It is so simple that can be described in the sentence below:

"A trend reversal is very possible if a bottomed price doesn't drop beyond its bottom made, or a topped price is unable to produce another record high."

You might want to question that what's so special with the above sentence, every Tom, Dick and Harry also know about it.

But I notice many people doesn't know how to apply this simple and straightforward sentence to their investment strategy.

Believe me, it is really as simple as that, and its accuracy is no worse than using technical analysis. Especially when looking for long term trend, it is particularly effective.

To apply this simple saying to your investment strategy, you need to determine the nature of your target. You need to find out from its historical record that, does it has high volatility with drastic price movement (high beta), or does it pretty stable with low beta?

Then, add in the time factor into the sentence by determining a suitable time period. Your sentence should now sound like this:

"A trend reversal is very possible if a bottomed price doesn't drop beyond its bottom made after X number of days, or a topped price is unable to produce another record high after X number of days."

If the beta is high, apply a larger X factor, otherwise, you may apply a smaller X factor. Your X should not be too large that it takes too long until every Tom, Dick and Harry also know the trend has reversed, as you will lose the opportunity to buy/sell at a less risky position.

A good X value for common stock is 1 month, which you need to adjust based on the volatility of your target. Beware that X would be of not much meaning if it is higher than 3 months.

Let's take an example. ICAP (5108) made a bottom on 29-Oct-2008 at the price of 1.15. Let's say you give it a 2 months period for your observation. Therefore, if by 29-Dec-2008, the price of ICAP is still all the way staying above 1.15, and there is no short term tendency sign for it to fall back to 1.15, you can predict that 1.15 made on 29-Oct-2008 is its bottom, and you can start accumulating it at the price near to its bottom.

Of course, this is just a simple and stupid method, which is not bullet proof. But it is a good method, because by the time your simple "signal" triggered with this method, you will notice that almost all the technical analysis indicators are pointing to a bullish position, since technical analysis is meant to sense the trend in a much faster timeframe. So, technically speaking, you are quite unlikely to be wrong, unless market affected by unforeseen sudden factor.

Disclaimer: This article is intended for sharing of point of view only. It is not an advice or recommendation to buy or sell any of the mentioned stock counters. You should do your own homework before trading in Bursa Malaysia.


Friday, November 14, 2008

Top 10 CIO priorities for 2009

Recently, the US National Association of State Chief Information Officers (NASCIO) released the US State CIO's Top Ten Policy and Technology Priorities for 2009 based on their annual survey done.

The lists has reflected the budgetary uncertainty faced by state governments in the face of an extended economic downturn. But by prioritizing their IT strategies, the lists can serve as a good reference and roadmap for ICT solution providers hoping to grow their US state government business.

The Top 10 Priority for Strategies, Management Processes and Solutions are:

  1. Consolidation: Centralizing; consolidating services, operations, resources and infrastructure.
  2. Shared Services: Business models, sharing resources, services and infrastructure.
  3. Budget and Cost Control: Managing budget reduction, strategies for savings, reducing or avoiding costs; activity based costing.
  4. Security: Security safeguards, enterprise policies, data protection and insider threat.
  5. Electronic Records/Digital Preservation/E-Discovery: Strategies, policies, legal issues, opportunities for shared services and emergency preparedness.
  6. ERP Strategy: Acquisition, implementation, expansion and upgrade.
  7. Green IT: Policies, energy efficiency, power management, green procurement and e-waste.
  8. Transparency: Open government, performance measures and data, and accountability.
  9. Health Information Technology: Assessment, partnering and implementation.
  10. Governance: Improving IT and data governance.

The Top 10 Priority for Technologies, Applications and Tools are:

  1. Virtualization: Storage, computing and data center.
  2. Document/Content/E-mail management: Active, repository, archiving and digital preservation.
  3. Legacy application: Modernization and upgrade.
  4. Networking: Voice and data communications and unified communications.
  5. Web 2.0: Services, collaboration technologies and social computing.
  6. Green IT: Technologies and Solutions.
  7. Identity and Access Management.
  8. Geospatial Analysis and Geographic Information Systems (GIS).
  9. Business Intelligence and Analytical Applications.
  10. Mobile Workforce Enablement.

I wonder if any similar survey has been done for government and corporates CIOs in our local region.

Thursday, November 13, 2008

Bill Clinton to give lecture in Malaysia

Great news! There is an opportunity to listen to the lecture of Bill Clinton (former president of US) in Malaysia, and the ticket will be given free of charge.

On 6 December 2008, Clinton will present the inaugural BC Sekhar memorial lecture organised by the Sekhar Foundation (founded by Datuk Vinod Balachandra Sekhar, president and founder of Petra Group) and the Asian Strategy & Leadership Institute (ASLI).

In that event, he will also receive the BC Sekhar Medal for Transformational Leadership, a new award given to individuals who have demonstrated a lifetime of commitment to bringing about positive change in the world. The medal would be awarded to Clinton for his tireless work to tackle the root causes of poverty in the world. Other factors included his steadfast commitment to foster understanding in divided communities and his determination to see people working together in friendship to bring about change.

Clinton will be in Kuala Lumpur for about 2 days right after the Clinton Global Initiative meeting in Hong Kong.

If you are interested in attending, just send an email to clintonlecture@petragroup.net with your name, address, contact number and MyKAD or passport number from 1pm today (13 November 2008). Up to 500 members of the public will be given seats for the lecture.

Wednesday, November 12, 2008

Malaysian household monthly income distribution 2007

Today, there is a report in the Chinapress newspaper which provides us a set of figures about the Malaysian household monthly income distribution based on Household Income Survey (HIS) done in year 2007 by the Department of Statistics Malaysia. Here are the figures:



With the data above, we can derive the constituent of household by ethnic which has participated in the HIS 2007, as shown below. The percentage is pretty much in line with the ethnic group percentage of population of Malaysia.


And we can interprete the data in the table with a bar graph like this:

You can compare this graph with the one in my earlier article posted on 18 September 2008, which is based on data from a different source. With no surprise, they look very alike. The graph above is able to show more information. What can you see from it?

Remember there is another pie chart in my earlier article posted on 18 September 2008? You can compare it with this one which is based on our new set of data. They are pretty much the same, aren't they?

Now look at another graph to reveal more information. What can you see from it?

If you see each of the income group vertically, you can actually rank how each ethnic group performs for each of the income group. The Kadazan and Orang Asli have a big population in the lower income group, and very low percentage in the higher income group. Majority of the Chinese are in the 5k-10k income group.

You can also clearly see the "M shape" in the Chinese and Indian lines, and the formation of "M" in other ethnic groups can also be sensed.

What else can you see from the graphs above?


Satyam acquires Motorola software development center (SDC) in Cyberjaya

India's Satyam Computer Services Ltd, which is the 4th largest IT solutions and service provider and has its own building block in Cyberjaya Malaysia, has just initiated an acquisition to its Cyberjaya neighbour - the software development center (SDC) of Motorola in Malaysia.

On the recent Monday, the 128 staff in Motorola SDC were briefed about the acquisition, that all of them, together with the SDC’s assets, will be diverted from Motorola to Satyam by the end of the year. Anyhow, they are assured by the management that their contractual bonus for the year will not be affected.

The SDC is part of Motorola's Home and Network Mobility business and focuses on network management system development. After the acquisition, Motorola will outsource the business to Satyam and get the same level of service as before.

Both Satyam and Motorola are listed in New York Stock Exchange (NYSE). To date, Satyam has a staff strength of over 500 in Malaysia.

Monday, November 10, 2008

WPA Wi-Fi encryption cracked!

If you are using a wireless network, especially in office environment, you should be well awared that running Wi-Fi without any encryption is a big no-no, and that the depreciated Wired Equivalent Privacy (WEP) encryption is extremely weak and can be cracked within seconds. As such, you probably are using Wi-Fi Protected Access (WPA) encryption to protect your Wi-Fi from unauthorized access and/or information stealing/leaking.

But now, bad news is that 2 German researchers - Martin Beck and Erik Tews - have found a way to crack the Temporal Key Integrity Protocol (TKIP, which was supposed to fix all problems with WEP) of WPA encryption within minutes, and they are going to share their cracking tools to the public during the PacSec Conference in Tokyo this 12-13 November 2008. In fact, some of the code used in the attack was already quietly added into the Aircrack-ng Wi-Fi encryption hacking tool about two weeks ago.

In short: WPA is no longer secured!

So what can you do to safeguard the security of your wireless network? Ensure that your wireless access points and equipments support WPA2, and switch over to it. WPA2
implements the mandatory elements of IEEE 802.11i standard, and is still uncracked by now, if it doesn't make use of the TKIP, and is instead set to use Advanced Encryption System (AES) with its Cipher Block Chaining Message Authentication Code Protocol (CCMP).

Click here to read more about this new crack on WPA Wi-Fi encryption.

Hardening PHP security with Suhosin

Suhosin (수호신) is a Korean word that means “guardian-angel”, originally developed by Stefan Esser, a German developer who loves Korean language.

Originated from the Hardened-PHP project, Suhosin is an advanced protection system for PHP installations. It was designed to protect servers and users from known and unknown flaws in PHP applications and the PHP core.

There are 2 parts in Suhosin:

  • Patch to PHP that hardens the Zend engine to protect from possible buffer overflows and related vulnerabilities.
  • Standalone Suhosin extension module for PHP to provide many security features that are not present in PHP itself.
Both of them can work together, or the extension module alone can be used.

Some of the features of Suhosin are:
  • Logging of errors to syslog or arbitrary logfiles
  • Create blacklists and whitelists per virtual host
  • Filter on GET and POST requests, file uploads, and cookies
  • Transparent encryption of sessions and cookies
  • Set memory limits
  • ... and many more
If your web applications are developed in PHP, you should seriously consider installing Suhosin to harden its security. It is already included in most major Linux distributions. Search for "php5-suhosin" or "php-suhosin" in your Linux distribution to install it.

For more information about downloading and installing Suhosin, click here.


Securing Apache web with ModSecurity

If you are hosting your websites with Apache web server, which is mostly the case if your web server is running on Linux platform, you should seriously consider installing ModSecurity to provide intrusion detection and prevention for your web applications.

ModSecurity is an open source, free web application firewall (WAF) Apache module. According to Forrester Research, it is the most widely deployed web application firewall nowadays.

WAFs are deployed to establish an external security layer that increases security, detects and prevents attacks before they reach web applications. It aims at shielding web applications from known and unknown attacks, such as SQL injection, cross-site scripting, path traversal, etc.

Features of ModSecurity includes:

  • HTTP Traffic Logging - ModSecurity makes full HTTP transaction logging possible, allowing complete requests and responses to be logged.
  • Real-Time Monitoring and Attack Detection - ModSecurity can monitor the HTTP traffic in real time in order to detect attacks. In this case, ModSecurity operates as a web intrusion detection tool, allowing you to react to suspicious events that take place at your web systems.
  • Attack Prevention and Just-in-time Patching - ModSecurity can also act immediately to prevent attacks from reaching your web applications.

ModSecurity supports the following security models:
  • Negative Security Model - Looks for known bad, malicious requests. This method is effective at blocking a large number of automated attacks, however it is not the best approach for identifying new attack vectors.

  • Positive Security Model - When positive security model is deployed, only requests that are known to be valid are accepted, with everything else rejected. This approach works best with applications that are heavily used but rarely updated.

  • Virtual Patching - With ModSecurity, applications can be patched from the outside, without touching the application source code (and even without any access to it), making your systems secure until a proper patch is produced.

  • Extrusion Detection Model - ModSecurity can also monitor outbound data and identify and block information disclosure issues such as leaking detailed error messages or Credit Card Numbers, etc.

ModSecurity is included in all the major Linux distributions. Look for "libapache2-mod-security" or just "mod_security" in your Linux distribution to install it.

Click here for detailed documentations about ModSecurity.


Friday, November 7, 2008

Lower EPF contribution from 11% to 8% for 2 years from Jan 2009

Following an announcement made by Deputy Prime Minister and Finance Minister YAB Datuk Seri Najib Tun Abdul Razak during the winding up speech for the Ministry of Finance on the 2009 Budget on Tuesday 4 November 2008, the Employees Provident Fund (EPF, a.k.a. Kumpulan Wang Simpanan Pekerja, KWSP) has now made an official statement on the execution of this decision.

The reduction of the employees’ contribution to EPF from 11 % down to 8 % will be made automatically, effective from January 2009 until December 2010 wage. The employers' 12% contribution remains the same.

This means that if you don't explicitly inform EPF to maintain your 11% contribution as before, by January 2009 onwards, your contribution will be automatically reduced to 8% for the next 2 years. If you intend to maintain your 11% contribution, or any portion other than 8%, you have to inform your employer, as well as submit the "Form KWSP 17A (AHL) - Khas" to EPF office.

As at 31 December 2007, the total membership of EPF stood at 11.69 million. A total contributions amounting to RM28.93 billion were made during year 2007. Assuming the figure does not change too much in 2009 and 2010, a 3% reduction will mean (RM28.93 billion/23% x 3% x 2 years) = RM7.55 billion to be freed up for spending in the economy, in the optimistic case that all EPF contributors opt for the rate cut and don't maintain the 11% contribution rate by submitting the "Form KWSP 17A (AHL) - Khas".

This is not a high figure to stimulate the national economy, but it does facilitate a similar effect of lowering the bank interest rate, which is happening in many other nations right now. This also hints that the Malaysian government is trying hard to avoid an interest rate cut, which would probably further weakening the forex exchange rate of Malaysian Ringgit.

As an employee, this change in contribution rate means that if your monthly salary is RM2k, you will have an additional RM60 monthly disposible income; if your monthly salary is RM5k, then your figure will be RM150; and if your monthly salary is RM10k, it will be RM300.

Should you opt for the lower contribution rate, or should you submit the "Form KWSP 17A (AHL) - Khas" and maintain your normal 11% contributions? One thing to consider is that since the economic climate is not so favourable this year, we won't expect a good dividend payout by EPF to be announced.

I would say that it is not a bad idea to reduce your EPF contributions, and spend your money wisely to make more value from it. For example, you can use it for personal development (education, books, workshops, ...), investments, insurance, etc. just to name a few. However, if you think that you are not a wise person in money spending, you might want to opt for maintaining your 11% contributions to EPF as a form of "force saving".

What do you think?

Click here to download the "Form KWSP 17A (AHL) - Khas" for individual employee.

Click here to download the "Form KWSP 17AA (AHL) Khas" for employers who wish to apply on behalf of more than two employees.

Tuesday, November 4, 2008

Watch Honda ASIMO live in road tours

Honda ASIMO (アシモ), named after "Advanced Step in Innovative Mobility", is an intelligent multifunctional robot of 130cm tall with 54kg weight, made of magnesium alloy covered with plastic resin.

It is an innovative result from 22 years of R&D in Honda, showcasing their determination and belief in the Power of Dreams.

Today, ASIMO can run up to 6km/h and in circular pattern, walk at various speed up to 2.7km/h, climb stairs, and is able to recognise distance, position and details of people with Honda's IC Tag.

ASIMO can also perform the task of a receptionist, information guide or carry out delivery service using a tray or cart. It can also act in sync with people, for example, walking with you while holding your hands.

Eager to watch ASIMO in action? You can meet with him in the upcoming road tours as follow:

  • 14-16 Nov 2008 - New Wing, 1 Utama Shopping Centre, Selangor.
  • 20-23 Nov 2008 - City Square Shopping Centre, Johor Bahru.
  • 27-30 Nov 2008 - Queensbay Mall, Penang.
There will be exciting games, ASIMO prizes and limited edition of ASIMO goodies available during the road tours.

Click here to learn more about the wonders of ASIMO.

Sunday, November 2, 2008

Pairing Sony Ericsson P1i with HBH-PV710 bluetooth headset

Sony Ericsson HBH-PV710 is a mid-range bluetooth headset with 3 buttons, one for call handling, another 2 for sound volume control. It does not have fancy features such as automatic sound adjustment, background noise reduction, etc. However, for a retail price of only RM128, it is still a good pick and value for money.

It can share the same charger with my Sony Ericsson P1i handphone, as well as using the CDS-65 Desk Stand that comes along with P1i as its charger. Of course, it also comes with its own charger, which can also be used by P1i.

The printed user guide of HBH-PV710 is written in 4 languages, which the layout is quite inconvenient for the reader. The flow of document is also quite confusing. Therefore, I decided to reproduce the guide here in a more readable way, for my future reference and also for other HBH bluetooth headset users' reference. Here is it:

After purchase, before usage:

  • You need to charge up the bluetooth headset for 8 hours before usage.
  • In future, when you see the headset's red light is flashing, it is time for it to recharge.

First time usage:

  • Turn on the bluetooth function in your handphone.
  • Make sure the bluetooth of your handphone is visible to other devices.

  • Press and hold the "call handling" button of your bluetooth headset for 3-5 seconds, until you see the indicator light flashes red and green.
  • If the headset only flashes green, press and hold both the "volume control" buttons of your bluetooth headset for 3-5 seconds, until you see the indicator light flashes red and green.
  • Your handphone should now find the bluetooth headset, and lists it in its bluetooth device listing. Tap on it and connect to it. When passcode is asked, key in "0000".
  • The headset beeps and the indicator light flashes green when the pairing is successful. It is ready to use now.
  • To turn off the headset after use, press and hold the "call handling" button of your bluetooth headset for 3-5 seconds, until the flashing indicator light turns off.

Subsequent usage:

  • Turn on the bluetooth function in your handphone.
  • Turn on the bluetooth headset.
  • The pairing should occur automatically. Here are the screens of P1i before and after the pairing. Note that the bluetooth icon in the taskbar will change to headset icon when the headset is in use.

        Before pairing                            After pairing


Using the headset:
  • Answer incoming call - press the "call handling" button once.
  • Reject incoming call - press and hold the "call handling" button for about 2 seconds.
  • Making call - use your handphone to dial the number and talk with your headset.
  • Using voice command to dial, redial, answer and reject calls - record and enable voice commands in your phone. Say the "magic words" to your headset.
  • Transfer audio between headset and handphone - selection can be made on the phone.

Friday, October 31, 2008

Ubuntu Linux 8.10 (Intrepid Ibex) has been released

Ubuntu, the most popular Linux distribution (according to DistroWatch.com ranking) has officially released their stable version 8.10 (code name "Intrepid Ibex") for both Desktop and Server editions.

As you know, Ubuntu is usable in the form of LiveCD (boot from CD and use, no need installation) as well as installable to the harddisk as your computer's operating system (which can be co-exist and multi-boot with other operating systems in the computer). The minimum memory requirement to run Ubuntu 8.10 is only 256MB.

This new 8.10 release features:

  • 3G network support.
  • It can now also be put into USB thumbdrive which is convenient to carry everywhere, plug and use on any machine.
  • It introduces "Guest sessions" feature to allow users to lock down a session easily, so a guest (eg. at conferences, cafes, parties, etc.) can use the full system without interference with programs or data.
  • As a bonus, all Ubuntu 8.10 users will be able to enjoy streaming programmes from the BBC multimedia network.

Here are some of the interesting features in the Server Edition of Ubuntu 8.10:
  • Virtualization built on the Just Enough Operating System (JeOS). Apache Tomcat 6.0 and OpenJDK are now a fully supported options.
  • ClamAV and SpamAssassin are now available from the main repository providing a supported solution for spam detection and virus filtering for mail infrastructures.
  • Provides support for SATA "software" RAID controllers via DMRaid.
  • Administrators can now easily set-up an Ubuntu system to provide encrypted private directories which are automatically mounted when users login locally or via ssh. Sensitive data is kept secure even if the system is stolen.
  • The tool chain used to compile Ubuntu has been updated to include even more security features such as glibc function call fortification. Bugs in applications are even harder to be turned into exploitable vulnerabilities.
  • Uncomplicated Firewall makes it easier to manage a host firewall thanks to the addition of application profiles. Common services such as apache, bind9, cups, dovecot, openssh, postfix or samba declare which ports they use so that the administrator only enables a network service rather than a set of ports.
  • Bundled Landscape client provides a free reporting function at each login. Landscape is Canonical's lightweight system management tool for Ubuntu systems that allows automated deployment and monitoring.
Version of some commonly used software that comes with Ubuntu 8.10 are: Linux kernel 2.6.27, Compiz 0.78, CUPS 1.3.9, Evolution 2.24.1, Thunderbird 2.0.0.17, Firefox 3.0.3, gcc 4.3.1, GIMP 2.6.1, glibc 2.8, gtk+ 2.14.4, OpenOffice 2.4.1, OpenSSH 5.1p1, Apache 2.2.9, MySQL 5.0.67, postgreSQL 8.3.4, perl 5.10.0, PHP 5.2.6, Python 2.5.2, postfix 2.5.5, samba 3.2.3, xorg-server 1.5.2.

Click here for more information about the features of Ubuntu 8.10.

Ubuntu is downloadable from their website as well as using the BitTorrent P2P. You can also request for free distribution CD (original from Canonical) to be sent to you by postal mail. Click here for more information about how to get Ubuntu.

Thursday, October 30, 2008

Online share trading brokerage fee for RM8.88 only at CIMB Clicks Trader

Online share trading is the current trend. In majority of the securities firms, this method usually enjoy 30% lower brokerage rate than traditional trading with phone calls to remisier.

Currently, most securities firms set the brokerage rate at 0.6% for normal below RM100k trading. A 30% discount means an online trading rate of 0.42%. Day trading rate could be lower, as well as high trading value (> RM100k per transaction), which rate is negotiable with the remisier.

It is a good news for long term investors that CIMB is currently offering brokerage fee of only RM8.88 for transactions done with their online Clicks Trader system. I say it is a good news for long term investors, because its trading limit isn't attractive, which is set to only 1x cash value only. Speculators and day traders might not be attracted by such a strict limit.

CIMB has set a condition that your Clicks Trader Account must have a minimum balance of RM10,000 before the T+3 cut-off time in order to have a trading limit and enjoy the low brokerage rate at RM8.88 per transaction.

Currently, they are running a promotion until end of year 2008 for new signups of Clicks Trader Account. The first 2 matched online purchase orders via CIMB Clicks will be free. This mean the brokerage fee will be RM0 for the 2 transactions. That would save you a total of RM17.76 in brokerage fee, not so attractive but good enough for you to use the money for a good meal.

About 4 months ago, I mentioned about hold on your money and do not dump in for investment purpose because the market was sinking then. Now, I think it is a good time for long term investors to start to plan for some bottom fishing. I also wrote about how to observe a bear's bottom. Probably you can apply that simple strategy to look for the best buying time.

For more information about the CIMB RM8.88 brokerage Clicks Trader Account, click here.

Tuesday, October 28, 2008

Burn audio CD from MP3, WMA, WAV, OGG, APE, VQF, MP4 files with GoGo MP3 To CD Burner

You might have a compilation of your most favourite MP3 files ripped from various pieces of audio CD. It would be nice to burn your favourite compilation of MP3 music back into audio CD so that you could play them with CD player and/or car audio player that unfortunately doesn't support reading of MP3 CD.

I've found a freeware called GoGo MP3 To CD Burner which can perform this task. All you need to do is select and add the supported audio files into its list for up to a total of 80 minutes play time, then click the Burn CD button to create your own audio CD.

The only set back of this handy utility is that it doesn't support non-alphanumeric filenames, which include the CJK (Chinese-Japan-Korean) characters. If you intend to add those files into your list, you have to rename their filename to English first.

Click here to download GoGo MP3 To CD Burner. Its file size is just about 1MB, and it is free to use. Supported platforms are Windows 98 and above.

Fix Windows slow shutdown problem with UPHClean

Recently, I found my Windows PC became extremely slow for the shutdown process. It used to shutdown without 30 seconds, but then it took as much as 5 minutes.

A check in the Application Event Log found 2 warnings whenever I shutdown the PC. They are:

  • Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.
  • Windows saved user PCname\username registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
I'm not sure why this happened, but I've found out a solution from Microsoft to fix it. Microsoft released the User Profile Hive Cleanup Service (UPHClean) to resolve this problem, and it did solve my problem.

Click here to read about the root cause and solution of slow shutdown problem from Microsoft's knowledgebase.

Click here to download and install the UPHClean program from Microsoft Download Center.

Monday, October 27, 2008

Handphone fair @ Giant Bandar Puteri Puchong

Currently there is a handphone fair at the outdoor carpark area of Giant hypermarket of Bandar Puteri, Puchong. Apart from handphones, accesories such as bluetooth headsets, bluetooth speakers, batteries, chargers, etc. are also available. Mobile operators such as U-Mobile, Celcom, Digi and Maxis are having their booths there too.

Although majority are China brands which are selling in really cheap price and rich in features (those selling for a few hundreds ringgit only can even watch TV), there are also booths selling original Nokia, Sony Ericsson, Motorola and other renowned brands.

I have just purchased an original Sony Ericsson HBH-PV710 bluetooth headset (warranty by Midland) for only RM128. This is a decent mid-range bluetooth headset that offers a talk time of 12 hours and standby time of 300 hours.

Sunday, October 26, 2008

Getting extra mileage and save fuel cost with Fuel Saver

Ever since the petrol price in Malaysia skyrocketed by 40% from RM1.92 to the historical high of RM2.70 on 5 June 2008, I had been looking for effective fuel saving product to help in saving some fuel expenses. I heard and read that many fuel saving products are in fact non-effective, until I decided to try out this product called Fuel Saver.

The reason I gave Fuel Saver a try was that it is inexpensive at the price of only RM99 including installation. To date, I have installed this Fuel Saver in my car for more than 3 months, and so far it performs pretty well.

Before the installation, I put it near my Ultra Racing Stabilizer Bar and it shown its magnetic nature by sticking onto the steel bar. You might want to visit to Fuel Saver's website to learn more about the theory of how it works, and read about its emission test result and Dynamometers test results to show it really works.

Here are some of my observations after installation:

  • I feel that the engine run smoother and a little bit more powerful than before.
  • I notice that when the engine is started after resting for quite a while, water will be dripping from the exhaust pipe. This is a sign of complete combustion which produces only carbon dioxide and water. The water will be vapourized when the engine turns hot. In fact, the sign of water dripping already shown after I installed the Zaptor performance voltage stabilizer, but the amount was not as much as now.
  • I can get the most extra mileage when travelling long distance (>100 km) at high speed, compared with the same travelling distance and style before installation. This Toyota Avanza 1.5G auto 7-seater (using semi-synthetic engine oil) can run more than 60km further with the same amount of fuel for such a long distance journey, challenging the 600km target before the fuel tank warning light up.
  • If the car is frequently travelling in short distance with some traffic lights at speed not more than 90 km/h most of the time, the extra mileage is minimal and there is not much fuel saving. The extra distance could be merely 10km only.

I find this fuel saving gadget a good investment, even though the petrol price in Malaysia has been gradually reduced to RM2.30 now since 15 October 2008 and could be further reduced again in the near future.

Thursday, October 23, 2008

Mobile phone screen capturing with the free TOSC utility

My reader asked about how I captured the screen of my mobile phone and paste them in my blog here.

I installed a small open source utility developed by Pal Szasz called The Open Screen Capture (TOSC) into my Sony Ericsson P1i, and that is the tool I used to capture the screen.

TOSC is an open source and free screen capture utility for mobile device running on Symbian UIQ3. Example of such smartphones are Sony Ericsson P1i, P990i, W960i, G700, G900, etc.

TOSC is very simple and easy to use. You just need to set the timer for the screen capture to happen, which can be 0 second (immediately), 10 seconds or 30 seconds. Then, get ready with the screen you want to capture before the timer timeout, and TOSC will capture the screen and save it as PNG file in the root directory of your M2 memory card.

When TOSC is running, you can see a green icon on top of the screen, which will show the timer countdown when a screen capture is initiated. Don't worry, the green icon won't be captured by TOSC.

You can click here to download the SIS installation file for TOSC version 0.3.

PuTTY for mobile devices

PuTTY is an open source SSH client distributed under the MIT licence, originally written for Windows platform. Many system engineers use it as a handy tool to remotely connect to their Linux/Unix machines with the secured SSH protocol to administer the system from their desktop.

Nowadays, PuTTY has also been ported to run on mobile devices such as PDAs and smart mobile phones, so that you can access to your servers for emergency troubleshooting, restarting a service, rebooting the server, and so on. Of course, you need to have Internet access from your mobile device to your server, either using GPRS, 3G, Wifi, etc.

Here are some of the ported PuTTY for various mobile devices:

And you can see the PuTTY for Symbian UIQ3 in action in my Sony Ericsson P1i here.

Monday, October 20, 2008

Backup P1i contacts from phone to M2 memory card

There is a built-in function to backup the Sony Ericsson P1i handphone contacts information from the phone internal memory to the attached M2 memory card.

To do so, in the Contacts application, tap on the More button to pop up the menu. The menu is so long that you have to scroll down to see the Contact Manager option (and this is the reason I have been spending quite some time before I finally located it). Tap on Contact Manager, and you are presented with 3 options:

  • Synchronize - this will call up the Remote Sync application and allows you to sync your contacts / calendar / tasks / emails /bookmarks / notes information in your P1i handphone with a SyncML server in the network.
  • Backup - this is the option to backup your contacts information from the phone internal memory to your M2 memory card. It will backup into \Other\Backup\Contacts folder in the memory card. 2 files will be produced: Contacts.vcf and Groups.dat.
  • Restore - this is the option to restore your contacts from the M2 memory card to your phone internal memory. You can also tap on the \Other\Backup\Contacts\Contacts.vcf file in your M2 memory card to perform the restore.



If you have done a backup before, you will be prompted with a last backup information, and your new backup will overwrite and replace the previous backup files.

Friday, October 17, 2008

The new Maybank2u website is extremely slow

Maybank has changed their Maybank2u website to a new design since yesterday. Unfortunately, extensive use of AJAX has render the website extremely slow, to the extend that it is unusable most of the time.

Maybank should be well awared that although AJAX could bring some fancy user interface experience, as a trade-off, it greatly reduce the web application loading speed. Even great application from Google such as GMail which started to use AJAX extensively recently also experiences the same problem, and that's why Google has made available a special link to access GMail without AJAX as a backup plan for their users.

The slowness intensifies over secured SSL connection, which is a must for the bank online services. There is also increase vulnerability for the server to encounter Denial of Service (DoS) Attack, since even without attack, the service is already close to useless due to time-out respond time.

In addition, AJAX application performance is largely depends on the performance of JavaScript execution and browser DOM operations. This mean, the user's web browser play an important role in the AJAX performance too. AFAIK, Safari performs much better than Firefox in handling AJAX, and Firebox performs much better than IE 7 in handling AJAX. Unfortunately, I'm sure they have the most users using IE7, and least users using Safari.

Therefore, too much of AJAX on any website (or a full-Ajax-enabled website) is not a good idea. Maybank2u must find ways to resolve this problem, either to reduce usage to AJAX, or invest more money in upgrading their network equipments and servers. Luckily, they still maintain a link to fallback to their previous website interface. Not so fancy, but at least usable.

Tuesday, October 14, 2008

OpenOffice.org 3.0 is now on general release

Finally, the long awaited OpenOffice.org 3.0 is on general release now. Strong demand of this state-of-art open source office application suite made them to temporary changed their website into a simple download page only to overcome the traffic.

Pre-compiled installation package is available for download for Windows, Linux, Solaris and Intel-based Mac OS X in various languages.

Right from the opening screen, OpenOffice.org 3 has a fresh new look, with a new start screen, new splash screen, new icons, and a host of usability improvements.

The Writer word processor has a cool new slider control for zooming, allows multi-page display while editing, has powerful new multilingual support, and boasts improved notes capabilities. As well as conventional office documents, Writer can now edit wiki documents for the web.

The Calc spreadsheet has been given another increase in capacity - now up to 1024 columns per sheet. It also has a powerful new equation solver, and a great new collaboration feature for multiple users.

Draw can now cope with poster-size graphics (up to 3sq metres), and Impress supports multiple monitors for presentations. Chart now produces much more clean looking graphics by default, and has a range of additional features requested by power users.

The popular built-in PDF export facility has been further enhanced with PDF/A support and a range of new user-selectable options.

OpenOffice.org 3 is now also available for the first time as a full Mac OS X application, bringing the power of the world's leading open-source office suite to a whole new group of users. And it's even easier than ever to persuade MS-Office users to upgrade to OpenOffice.org, with new support for MS-Access 2007 'accdb' files, improved support for VBA macros, and a new ability to read MS-Office Open XML files (MS Office 2007 and Office 2008 documents)

OpenOffice.org's support for extensions is really coming of age with OpenOffice.org 3. A rapidly expanding number of additional features are available from different developers to add great features such as an Impress presenter console, support for business analytics, PDF import, and a whole new way of supporting additional languages.

Click here to read their official press release.

Sunday, October 12, 2008

The OAC Centennial PA Personal Accident Insurance

I believe most of us already insured with some kind of life insurance, which covers compensation on total permanent disablement (TPD). Have you ever think of what if the disablement is "non-total", for example, you just lost one single finger in an accident?

Life insurance won't cover for that, and in fact, you need to find such insurance under the general insurance category (note that not every life insurance agent is also agent for general insurance). I think you should have heard of the term before, it is called personal accident (PA) insurance.

If you are an employed employee, most probably you are already covered under the group PA policy that your company buy for you. You might also be insured with PA under some promotion of car loan, car club, credit card, bank account, etc. The question will be is the insured amount enough? What if you change company and the new one doesn't provide such employee benefit? What if you are retired?

After some consideration, I finally signed up with the Overseas Assurance Corporation (OAC) Centennial PA Personal Accident Insurance this year. What do you think of when you see the word "centennial" here? Yes, OAC is part of the Great Eastern group.

The premium of this policy is RM100 per year (less than RM9 per month) with the sum insured of:

  • Accidental death: RM100,000
  • Permanent disablement: RM100,000
  • Medical expenses: RM5,000

There is a "no claim renewal bonus" with an increase of 10% on the above sum insured for renewal each year up to 100%. This mean if no claim is made, 10 years later, the sum insured will become:

  • Accidental death: RM200,000
  • Permanent disablement: RM200,000
  • Medical expenses: RM10,000

If any claim is made, the sum insured will be reverted to the original amount.

Under this policy, the following are covered:

  • Accidental death
  • 26 items of permanent disablement
  • Medical, surgical and hospital expenses for injury
  • Bereavement allowance for death resulting from accident, dengue fever, malaria, Japanese encephalitis, yellow fever, scarlet fever or coxsackie
  • Repatriation expenses if the accidental death happen outside Malaysia
  • Rehabilitation allowance
  • Disapperance for more than 1 year (while travelling)

I believe this policy will complement my life insurance policy as well as cover up any shortage in my company's group PA insurance scheme. It is very affordable too although the premium will be burnt off every year and does not carry cash value like most life insurance products. It is renewable up to 100 years old (and I believe when we get old, we are more risky in getting accident).

Tuesday, October 7, 2008

Editing the Sony Ericsson handphone theme with Themes Creator

I find that the themes (yes, more than one...) downloaded from the Sony Ericsson website for my P1i mobile phone have a logical bug with the listing checkbox. Once the theme is applied, the unchecked items will all shown as checked, and the checked items shown as unchecked.

After some troubleshooting and confirmed that the problem is with the theme, I found the way to fix it by editing the "checked" and "unchecked" icon to the order, and here is the way.

First of all, you need to download the theme file in .utz format into your computer. Make a copy of the file and change its extension to .zip. For example, download Shards.utz, make a copy named as Shards.zip.

Then, unzip the file Shards.zip with PeaZip or 7-Zip or any other file unarchiver tool.

Use a graphics editor to edit the file named as ListboxCheckbox.png in your unzip folder. Here is how it looks like before and after the editing.

Before:

After:
(you may right click to download this edited file)

You can now use the Sony Ericsson Themes Creator to open the file Shards.utz. To fix the problem, go to "List View" tab, and click on "Check boxes". Then, click on the Import button to import your edited ListboxCheckbox.png.




You can then see from the preview display that the checkbox is showing correctly by now.

Save the theme file Shards.utz and transfer it to your phone. You have to ensure that Shards is not in use as the current theme in your phone. Delete the existing Shards theme, and install this edited one. Woolah! You are done.

Tuesday, September 30, 2008

Malaysia Salary Guide 2008/09 from Kelly Services

I have been waited for this for quite a few months.

Kelly Services published their hardcopy of Malaysia Salary guide 2008/09 around June 2008, but the softcopy only made available on their website yesterday.

You might notice that the figures in this guide is comparatively lower than those published in the ZDNet Asia IT Salary Benchmark Survey 2008 and Robert Walters Global Salary Survey 2008. One probable reason I found out is that Kelly Services' Malaysia Salary guide focuses on executives with less than 5 years of working experience, hence we can't expect the figure to be too high. In the guide anyhow, a Lead Electrical Engineer with 7 years of experience gets a salary range from RM5,000 to RM15,000.

Click here to download the Malaysia Salary guide 2008/09.

You might probably also interested to read on:

Friday, September 26, 2008

Benefits of having smartphone

I wrote about "Choosing a mobile phone" last week, and I've chosen the Sony Ericsson P1i, which is a feature rich PDA smartphone that has been around in the market for more than a year and is still a hot pick for many people. I believe now is a good timing to buy it, as its price has dropped for a few hundred ringgit since its launch, and has been stabilized and maintained over than past 3 months.

This is my first smartphone, and I find it very interesting compared with the traditional mobile phone. If you are a technology savvy who like to explore, modify and hack around the phone, then smartphone is your choice.

When I got the phone (supposingly for the Malaysia/Indonesia market), I found that Chinese was not supported by its original firmware. The first thing I did is to replace its firmware with the Singapore version with Chinese support. And now, it can read and write Chinese in SMS as well as all the installed applications. Its touch screen handwriting recognition now can recognise Chinese writing too!

Beside this, other benefits of smartphone over traditional phone include:

  • There is no limit to the contacts information (only limited by available memory). Traditional phone has fixed limit on number of storable contacts.
  • There are a lot of applications in vast variety available (free and non-free) for its OS, and the number keeps on increasing as development is continuous. Traditional phone is very much restricted to Java based small applications/games only.
  • You are able to modify (mod) and extend its existing features, such as adding the cool Touchlight function with its camera light. This feature is available in some other mobile phones, but not in the original specs of P1i. There also exist mods to the camera to add more function (such as continuous shots) and enhance the photo quality.
  • You are even able to explore and hack into the Symbian OS file system, tweaking it for faster and better performance.
  • You are able to upgrade the applications that come with the phone to a newer version.
  • You are able to add plug-in to its web browser, such as enabling the capability to display flash animation.
  • ...
Well, if you are not keen on mods and hacks, and will probably use your phone as-is without installing additional application too, then the benefit of having smartphone to you is probably having bigger memory for contacts/SMS/MMS etc. If you like mods and hacks, you can find quite a lot of such discussions in various Internet forums about your phone.

Friday, September 19, 2008

Choosing a mobile phone

Nowadays mobile phone has evolved into an integrated electronic gadget with lot of features and capabilities making it more than just a phone. It is of course good to have everything in your phone, with the richest feature, the latest technology, the finest capability, the longest battery life, ... with everything "in" and perfect.

Unfortunately, such phone doesn't exist. Mobile phone are designed to be strong in certain area, but secondary or weak in some other domain. There exist phones that are close to perfect, but always come with a skyrocking price tag that might be even higher than a brand new PC computer.

From the personal finance perspective, it is advisable to get a mobile phone with all the features that we really need, and forget about those features that are good to have but seldom or never use. Then, among the features that are required, we identify them according to importance to our need. This will help us to choose the most suitable model for us, and without wasting money in features that we will never use.

Here is my way in choosing a new mobile phone.

Firstly, I'll look into the features that I need:

  • 3G - Am I ready to pay extra in monthly bill for 3G usage? Am I always need to use the phone to check emails or surf Internet? Do I have a need to make video calls?
  • EDGE - Am I a Digi subscriber?
  • Wifi - Do I prefer this way to connect to Internet rather than using 3G? Is my home and office equipped with Wifi access point?
  • Bluetooth - Am I buying a PDA phone or Smart Phone which will frequently interact with my computer? Does my computer support bluetooth? Am I necessary to use a bluetooth headset?
  • Camera - Do I just need a basic camera or a high resolution one in the phone? Do I prefer to take pictures with my digital camera or with my phone? Is flash important? Do I need the phone to be my "torchlight"? Is autofocus, night mode, zoom, etc. important?
  • Screen - Do I need a high colour and big display for watching movies, see pictures, surf the net, use GPS, ... etc. or I just need a normal screen?
  • Video capture - Do I really need this feature?
  • Speaker - Will I use my phone as MP3/MP4 player?
  • FM radio - Will I use the phone to listen to radio?
  • TV receiver - Will I use the phone for TV, such as getting the news?
  • Keyboard design/layout - Am I often sending SMS? Can the keyboard facilitate for faster and easier typing?
  • Java - Do I plan to install additional applications or play games other than those come with the phone?
  • Touch screen - Do I really need this feature?
  • Stylus - Is this my preferred way which is faster for me to write, draw and manipulate the phone?
  • GPS - Do I really need this feature?
  • PDA functions - Do I need a sophisticated calendar or just a basic one? Will I use the phone as convenience device to take notes (or I still prefer paper and pen)? Is there occasion that need me to open and work on MS Office files with the phone?
By getting the answers for the above, I should have a clearer picture of what kind of phone do I plan to buy. This should help me in shorlisting some brands and models that suit my needs. Then I'll look into my preference for:
  • Design - what design I like? Big screen, flip, twist, bar, block, ...
  • Size - what size I like? slim, compact, normal, PDA style (bulky), ...
  • Memory - how much internal memory? Do I need the phone to support for external memory card?
  • Weight - everyone love a light weight phone.
  • Battery - how long can the battery last for standby, talking, online, playing video, using apps, ...?
  • Price - how much am I willing to pay?
Until this point, I will be able to choose the mobile phone I'm going to buy. If you are also planning to buy a new mobile phone, hope that this can give you some useful guides.

10 questions to assess your job satisfaction

Are you happy in your job? How satisfied are you with your career? Do you agree that employees are happiest and most satisfied when they consider themselves fully engaged in their roles in the company?

Well, what could be making you to have such a good feeling? The 10 questions below can help you to perform a career audit and assess your job satisfaction. Ask yourself:

  • Is the company capitalizing on my special talents?
  • Does my supervisor have my best interests at heart?
  • In the past six months, has my supervisor honestly evaluated my performance?
  • Am I receiving challenging assignments at work to help me grow professionally?
  • Do I have a mentor guiding me as I move up through the organization?
  • Do I have friends at work in whom I can confide?
  • Is there a career track to get me where I want to be in five years?
  • Does my work give me a sense of higher purpose?
  • Are my coworkers trustworthy and committed to excellence?
  • Am I receiving the training I need to do my job well?

If you are an employee, the assessment above will help you in clarifying your career prospect and worthiness; If you are an employer or a human resource personnel, the assessment above can give you some clue in improving employee's relationship and hopefully reduce turnover rate; If you are a job seeker, don't be shy off to find out the answers from your potential employer.

If most of your answers to the above questions are "no" but you are still staying with your company, perhaps you are one of those not-so-happy employees who hang around mainly because of the 11th point: remuneration.

(Source of the above 10 questions are from Allyhunt, an executive sourcing company in Malaysia)

Hint: Click on the "Older Posts" link to continue reading, or click here for a listing of all my past 3 months articles.