Congratulations!

[Valid RSS] This is a valid RSS feed.

Recommendations

This feed is valid, but interoperability with the widest range of feed readers could be improved by implementing the following recommendations.

Source: http://nevermind.dk/nevermind/blog.nsf/rssfeed

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <rss xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  3.  <channel>
  4.    <title>Nevermind.dk</title>
  5.    <link>https://nevermind.dk</link>
  6.    <description>Nevermind.dk...HCL Notes,HCL Domino,XPages,Life...</description>
  7.    <item>
  8.      <title>The very useful little feature of a NotesItem</title>
  9.      <link>http://nevermind.dk/nevermind/blog.nsf/subject/the-very-useful-little-feature-of-a-notesitem</link>
  10.      <description>Sometimes there are these little things that you somehow do not notice ...until one day you do.
  11. The thing I stumbled on, is that the NotesItem has a property called "SaveToDisk".
  12. You can set whether a NotesItem should be saved to disk or not when a document is saved.
  13. And that is really cool. Why ?
  14. Because this a a great way to have temporary values and calculations on the document itself, when you are working with the document
  15. and you do not have to worry about ever getting these values on the disk version of the document.</description>
  16.      <pubDate>Sun, 01 Oct 2023 20:57:00 GMT</pubDate>
  17.      <guid>http://nevermind.dk/nevermind/blog.nsf/subject/the-very-useful-little-feature-of-a-notesitem</guid>
  18.      <dc:creator>Jesper B. Kiær</dc:creator>
  19.      <dc:date>2023-10-01T20:57:00Z</dc:date>
  20.    </item>
  21.    <item>
  22.      <title>Workspace all grey - no icons - workaround</title>
  23.      <link>http://nevermind.dk/nevermind/blog.nsf/subject/workspace-all-grey---no-icons---workaround</link>
  24.      <description>If you are running Notes 12.0.2 or higher you will for sure at some point run into an error were the workspace tabs fills out the entire workspace and you can not access you workspace database icons no more.
  25.  
  26. There is nothing you can do in the UI to fix it.
  27.  
  28. The problem is due to a new setting in the notes.ini and and is easy fixable, if you know what to fix
  29.  
  30. You need to reset a new setting in 12.0.2 to default and it works again after a Notes restart.
  31.  
  32. Workspace_Navigator_Width=170
  33.  
  34. Or just create a button with the LS code and send it to the user.
  35.  
  36. Sub Click(Source As Button)
  37.         Dim session As New NotesSession
  38.         Call session.SetEnvironmentVar( "Workspace_Navigator_Width", "170",True )
  39. End Sub    
  40.  
  41. UPDATE:
  42.  
  43. Just saw another variant where workspace fills all area and no tabs. Fortunately same fix :-)</description>
  44.      <pubDate>Wed, 17 May 2023 09:11:00 GMT</pubDate>
  45.      <guid>http://nevermind.dk/nevermind/blog.nsf/subject/workspace-all-grey---no-icons---workaround</guid>
  46.      <dc:creator>Jesper B. Kiær</dc:creator>
  47.      <dc:date>2023-05-17T09:11:00Z</dc:date>
  48.    </item>
  49.    <item>
  50.      <title>HCL Verse contacts integration on Samsung phones not working - a quick workaround</title>
  51.      <link>http://nevermind.dk/nevermind/blog.nsf/subject/hcl-verse-contacts-integration-on-samsung-phones-not-working---a-quick-workaround</link>
  52.      <description>There has been a very annoying bug in HCL Verse on Samsung for a long time.
  53.  
  54. The integration from HCL Verse contacts to other apps on the phone breaks.
  55.  
  56. This meant that in recent calls, SMS  etc only a phone number would be shown, and not the name of the contact.
  57.  
  58. A reinstall of HCL Verse would normally fix this for a while and then it would break again.
  59.  
  60. HCL blames Samsung for the issue, and the issue does not seem to get fixed.
  61.  
  62. I have found a quick workaround to fix the issue when it arises.
  63.  
  64. Go to Application settings in HCL Verse and then to the "People" section.
  65.  
  66. Unclick "Export Verse Contacts", and enable it again.
  67.  
  68. This will get Contacts integration working again (...until it breaks again)</description>
  69.      <pubDate>Tue, 21 Feb 2023 09:34:00 GMT</pubDate>
  70.      <guid>http://nevermind.dk/nevermind/blog.nsf/subject/hcl-verse-contacts-integration-on-samsung-phones-not-working---a-quick-workaround</guid>
  71.      <dc:creator>Jesper B. Kiær</dc:creator>
  72.      <dc:date>2023-02-21T09:34:00Z</dc:date>
  73.    </item>
  74.    <item>
  75.      <title>HCL Domino, view indexer stuck with very high CPU usage</title>
  76.      <link>http://nevermind.dk/nevermind/blog.nsf/subject/hcl-domino-view-indexer-stuck-with-very-high-cpu-usage</link>
  77.      <description>I have a customer who has a Domino server running with very high CPU usage, and it should not, since it is not a very busy server.
  78.  
  79. It is the indexer which gets stuck with very high CPU usage
  80.  
  81.  
  82.  
  83.  
  84. I have a support case with HCL.
  85.  
  86. It seems that it is the dynamic view indexing added to the recent releases of Domino which is the reason behind this.  
  87.  
  88. This feature polls the database for data for getting information on which views are frequently updated.
  89.  
  90. https://help.hcltechsw.com/domino/11.0.0/high_usage_views.html
  91.  
  92. Disabling the feature brings back the CPU usage to normal again.
  93.  
  94. You can do this by setting NIF_VIEW_USAGE_ENABLED=0 in notes.ini, if you have enabled the feature</description>
  95.      <pubDate>Mon, 02 Jan 2023 11:39:00 GMT</pubDate>
  96.      <guid>http://nevermind.dk/nevermind/blog.nsf/subject/hcl-domino-view-indexer-stuck-with-very-high-cpu-usage</guid>
  97.      <dc:creator>Jesper B. Kiær</dc:creator>
  98.      <dc:date>2023-01-02T11:39:00Z</dc:date>
  99.    </item>
  100.    <item>
  101.      <title>HCL Notes 12.0.2 - New Signature feature seems broken</title>
  102.      <link>http://nevermind.dk/nevermind/blog.nsf/subject/hcl-notes-1202---new-signature-feature-seems-broken</link>
  103.      <description>To test the new HCL Notes 12.0.2 "Signature" feature  I created a simple form with a Rich Text Lite field for testing out the feature.
  104.  
  105. I have have removed all options,but the signature feature for the field.
  106. This what the RT field looks like in edit mode before entering data
  107.  
  108. Clicking on the button shows a dialog box for entering a signature
  109. This is what I entered in the signature dialog box
  110.  
  111.  
  112.  
  113. This is what it looks like after clicking on the OK button
  114.  
  115.  
  116. (it looks the same in read mode)
  117. Only a part of the image seem to be saved in the field.
  118.  
  119. Only a part of the image seem to be saved in the field.
  120.  
  121. (UPDATE: Apparently the issue is in 64 bit version only)</description>
  122.      <pubDate>Sun, 20 Nov 2022 23:10:00 GMT</pubDate>
  123.      <guid>http://nevermind.dk/nevermind/blog.nsf/subject/hcl-notes-1202---new-signature-feature-seems-broken</guid>
  124.      <dc:creator>Jesper B. Kiær</dc:creator>
  125.      <dc:date>2022-11-20T23:10:00Z</dc:date>
  126.    </item>
  127.    <item>
  128.      <title>Lotusphere 2000 - some interesting presentations</title>
  129.      <link>http://nevermind.dk/nevermind/blog.nsf/subject/lotusphere-2000---some-interesting-presentations</link>
  130.      <description>Some interesting presentations from Lotusphere 2000</description>
  131.      <pubDate>Sun, 06 Nov 2022 22:04:00 GMT</pubDate>
  132.      <guid>http://nevermind.dk/nevermind/blog.nsf/subject/lotusphere-2000---some-interesting-presentations</guid>
  133.      <dc:creator>Jesper B. Kiær</dc:creator>
  134.      <dc:date>2022-11-06T22:04:00Z</dc:date>
  135.    </item>
  136.    <item>
  137.      <title>HCL Notes Client - 64 bit, I am really looking forward to it</title>
  138.      <link>http://nevermind.dk/nevermind/blog.nsf/subject/hcl-notes-client---64-bit-i-am-really-looking-forward-to-it</link>
  139.      <description>I am really looking forward to the release of the 64 bit HCL Notes Clients later this year.
  140.  
  141. I tested the 64 bit clients (Notes, Admin and Designer) earlier this year and it was a good experience despite it being a beta version.
  142.  
  143. It seemed faster than the normal 32- bit version and just as stable.
  144.  
  145. Normally I can only shutdown my 32 bit Notes, Admin and Designer correctly 50% of the time,
  146.  
  147. The other 50% it will crash doing shutdown and hang. The hanging Notes tasks would then have to be killed in task manager.
  148.  
  149. I did not experience that at all with the 64-bit version.
  150.  
  151. Unfortunately I had to uninstall due to a fatal bug in the designer, but this is to be expected in a beta version.</description>
  152.      <pubDate>Thu, 09 Jun 2022 10:50:00 GMT</pubDate>
  153.      <guid>http://nevermind.dk/nevermind/blog.nsf/subject/hcl-notes-client---64-bit-i-am-really-looking-forward-to-it</guid>
  154.      <dc:creator>Jesper B. Kiær</dc:creator>
  155.      <dc:date>2022-06-09T10:50:00Z</dc:date>
  156.    </item>
  157.    <item>
  158.      <title>A wonderful and very insightful interview with Ray Ozzie on PLATO, Lotus Notes, Groove, Microsoft and more</title>
  159.      <link>http://nevermind.dk/nevermind/blog.nsf/subject/a-wonderful-and-very-insightful-interview-with-ray-ozzie-on-plato-lotus-notes-groove-microsoft-and-more</link>
  160.      <description>It is a wonderful and very insightful interview with Ray Ozzie on subjects like PLATO, Lotus Notes, Groove, Microsoft and more.
  161.  
  162. It is a bit long 4½ hours, but it does not feel that way.
  163.  
  164. Highly recommended! :-)  
  165.  
  166.  
  167. &lt;iframe width="560" height="315" src="https://www.youtube.com/embed/4Mj_zDw21xY" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen&gt;&lt;/iframe&gt;
  168.  
  169. You can also get the transcript of the interview here</description>
  170.      <pubDate>Tue, 07 Jun 2022 21:42:49 GMT</pubDate>
  171.      <guid>http://nevermind.dk/nevermind/blog.nsf/subject/a-wonderful-and-very-insightful-interview-with-ray-ozzie-on-plato-lotus-notes-groove-microsoft-and-more</guid>
  172.      <dc:creator>Jesper B. Kiær</dc:creator>
  173.      <dc:date>2022-06-07T21:42:49Z</dc:date>
  174.    </item>
  175.    <item>
  176.      <title>The Domino Passthru server security issues - follow up</title>
  177.      <link>http://nevermind.dk/nevermind/blog.nsf/subject/the-domino-passthru-server-security-issues---follow-up</link>
  178.      <description>It had bothered me for some time and I just had to get it out my system, and on to the next thing on my very long "To do" list. Sorry.
  179.  
  180. However I will be very glad if HCL would come forward and in a clear way state ...there is no security issue and explain what is going on in the Domino server when using PassThru.
  181.  
  182. They are then free to call me an idiot afterwords :-)
  183.  
  184. HCL Software does not have a Security Bounty Program
  185. However to add to the mix of all this ..I do not understand why HCL Software do not have a Security Bounty Program ?
  186.  
  187. https://www.hcltech.com/software/psirt/hcl-software-vulnerability-disclosure-policy
  188.  
  189. An easy way to report security issues.
  190.  
  191. Every other big software company does.
  192.  
  193. "Domino Does Not Get Hacked. Ever."
  194. HCL writes this on  https://www.hcltechsw.com/domino/domino-security-is-best
  195.  
  196. Now that is of course a stupid thing to write ...because there is no software which is completely unhackable and safe.
  197.  
  198. For one I wrote about the highly insecure ... (Websphere) connector
  199.  
  200. Security hole leaves IBM Domino server wide open - Part One
  201.  
  202. A feature which HCL ended removing  from Domino beginning in V12.0.1 due to its potential security issues
  203.  
  204. (and bringing it back in V12.0.2 .....why??)
  205.  
  206. Yes, HCL Domino has a great security model, because it is simple and logical in its nature.  
  207.  
  208. But anyone who has worked with Notes/Domino for years knows that it is not perfect and has its cracks here and there.  
  209.  
  210. Support Case  
  211. The reason I did not create a support case is that I do not have access to create a support case.
  212.  
  213. I am a BP and but I do not have access to create a support case. I did try many to times to get it fixed and get access to support, but in the end I just ran out on energy on the matter
  214.  
  215. Instead I have since created many cases through a customers support account, so I believe I have done my share :-) ....</description>
  216.      <pubDate>Tue, 07 Jun 2022 13:58:00 GMT</pubDate>
  217.      <guid>http://nevermind.dk/nevermind/blog.nsf/subject/the-domino-passthru-server-security-issues---follow-up</guid>
  218.      <dc:creator>Jesper B. Kiær</dc:creator>
  219.      <dc:date>2022-06-07T13:58:00Z</dc:date>
  220.    </item>
  221.    <item>
  222.      <title>Has the Domino Passthru server been a big security hole all these years?</title>
  223.      <link>http://nevermind.dk/nevermind/blog.nsf/subject/has-the-domino-passthru-server-been-a-big-security-hole-all-these-years</link>
  224.      <description>Please ignore this posting for now since the issue has not been validated by HCL
  225.  
  226. The idea of the Domino Passthru server
  227. The idea of a Domino as a passthru server is a bit like a Reverse Proxy.
  228.  
  229. If you have 5 Domino servers on your internal network, and only one external IP address, it can be difficult  to get access to more than one Domino server from the internet.
  230.  
  231. To remedy this you can set up the one Domino server you can access from the internet to be a Passthru server.
  232.  
  233. This server can then redirect the income traffic to the relevant Domino server. Pretty smart and very simple to setup.
  234.  
  235. However....
  236.  
  237.  
  238. Real life ... broken security
  239. We were all trusting IBM and then HCL that security is in good hands. In general it is ..
  240.  
  241. HCL has done a lot of catching up the last years to get "up to par" with the security and standards generally used in other products.
  242.  
  243. But somehow Passthru seem to have fallen between the cracks
  244.  
  245. In the old days you could not see if a connection was secure and encrypted on the console you had to trust IBM/HCL things were working.
  246.  
  247. But nowadays you can set these settings in notes.ini to get valuable information
  248.  
  249.   log_authentication=1
  250.  
  251.   DEBUG_PORT_ENC_ADV=1
  252.  
  253.  
  254. The server then will show details about the connections to the server
  255.  
  256. Example:
  257.  
  258. T:AES:128 E:1:  P:t:e S:AES-GCM:256 A:2:1 L:N:N:N FS:DHE-2048+X25519
  259.  
  260. The E:1 in the connection details show that the connection is encrypted
  261.  
  262. (Read more here: https://support.hcltechsw.com/csm?id=kb_article&amp;sysparm_article=KB0040530)
  263.  
  264. But if you have a Notes client trying to use the Domino server as a Passthru server you will see this:
  265.  
  266. T:AES:128 E:0:  P:p:e S:RC2:0 A:2:1 L:N:N:N FS:
  267.  
  268. As you can see now the connection is no longer encrypted!
  269.  
  270. All Domino servers here have a port setup to force an encrypted connection in their port settings. The Notes client here is also setup to use encryption.
  271.  
  272. And yet if we look at the connection details when server is accessed as a Passthu server there is no encryption.    
  273.  
  274. This is bad, ....it is actually really bad.
  275.  
  276. Mostly because I had been using Passthru for years .... that scares me a bit
  277.  
  278. but also because I have been thinking I have been in good hands with IBM/HCL all these years...but have not.
  279.  
  280. There may be a good explanation and calming words from HCL ...but I doubt it    
  281.  
  282. Next step would of course be to use a network sniffer to monitor what is actually happening
  283.  
  284. From the console it seems that it is the connection used to authenticate at the Passthru server that is not encrypted and that connection to the destination server does get encrypted  
  285.  
  286. Am I hit?
  287. If passthru is enabled on the Domino server, you are out of luck.
  288.  
  289. "But I do not use a Passthru connection from my Notes client!" ..... if your Notes client is trying to reach any unreachable server...it will try to use Passthru in the end, and connect unencrypted.
  290.  
  291. Most likely this will happen, since you will not have access to all of your servers at any given time.
  292.  
  293. Something like a scheduled replication may even trigger it.    
  294.  
  295. Even trying to access a fake server name will start a Passthru connection.        
  296.  
  297.  
  298. It is easy to test your Domino setup yourself
  299. Enable Passthru on the server.
  300.  
  301. Do a trace and see what it writes on the console
  302.  
  303.  
  304. Hopefully HCL will explain what is going on and fix the issue with Passthru servers in a release soon
  305.  
  306.  
  307. Advice - how to disable Passthru
  308.  
  309. Server:
  310. In the Server document make sure to remove ALL data in the "Route through" field. Anything in here and the server is then a Passthru server
  311.  
  312.  
  313. Client:
  314. In the local address book remove any connection documents using Passthru as way of connecting to a server    
  315.  
  316. This is what a Trace should say if server and client are correctly setup:</description>
  317.      <pubDate>Tue, 24 May 2022 19:24:00 GMT</pubDate>
  318.      <guid>http://nevermind.dk/nevermind/blog.nsf/subject/has-the-domino-passthru-server-been-a-big-security-hole-all-these-years</guid>
  319.      <dc:creator>Jesper B. Kiær</dc:creator>
  320.      <dc:date>2022-05-24T19:24:00Z</dc:date>
  321.    </item>
  322.  </channel>
  323. </rss>
  324.  
  325.  

If you would like to create a banner that links to this page (i.e. this validation result), do the following:

  1. Download the "valid RSS" banner.

  2. Upload the image to your own server. (This step is important. Please do not link directly to the image on this server.)

  3. Add this HTML to your page (change the image src attribute if necessary):

If you would like to create a text link instead, here is the URL you can use:

http://www.feedvalidator.org/check.cgi?url=http%3A//nevermind.dk/nevermind/blog.nsf/rssfeed

Copyright © 2002-9 Sam Ruby, Mark Pilgrim, Joseph Walton, and Phil Ringnalda