<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>

<channel>
	<title>MentalRise</title>
	<atom:link href="http://mentalrise.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://mentalrise.com</link>
	<description>Observations of Business, Adventure, Entrepreneurism and Entropy.</description>
	<pubDate>Mon, 27 Apr 2009 06:20:41 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.3</generator>
	<language>en</language>
			<item>
		<title>Brain Trust: 100 Ivy League Business &#038; Entrepreneurship Courses You Can Take for Free</title>
		<link>http://mentalrise.com/2009/04/brain-trust-100-ivy-league-business-entrepreneurship-courses-you-can-take-for-free/</link>
		<comments>http://mentalrise.com/2009/04/brain-trust-100-ivy-league-business-entrepreneurship-courses-you-can-take-for-free/#comments</comments>
		<pubDate>Mon, 27 Apr 2009 06:07:42 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Marketing]]></category>

		<category><![CDATA[Reading]]></category>

		<category><![CDATA[education]]></category>

		<category><![CDATA[entrepreneurship]]></category>

		<category><![CDATA[online college]]></category>

		<guid isPermaLink="false">http://mentalrise.com/?p=61</guid>
		<description><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2009/04/brain-trust-100-ivy-league-business-entrepreneurship-courses-you-can-take-for-free/&t=Brain Trust: 100 Ivy League Business &#038; Entrepreneurship Courses You Can Take for Free&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p><em>From BSchool.com:</em></p>
<p>Just because you don’t have the deep pockets or stellar grades it takes to get into top tier schools doesn’t mean you can’t enjoy some of the same resources these establishments offer. Through open courseware programs, you can access course materials from a wide range of top universities. Whether you decide to take these courses on your own time or just skim through the information, <strong>we’ve compiled a list of 100 places</strong> to start looking for great business and entrepreneurship information.</p>
<p>Full Article: <a href="http://www.bschool.com/blog/2008/brain-trust-100-ivy-league-business-entrepreneurship-courses-you-can-take-for-free/">http://www.bschool.com/blog/2008/brain-trust-100-ivy-league-business-entrepreneurship-courses-you-can-take-for-free/</a></p>
]]></description>
			<content:encoded><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2009/04/brain-trust-100-ivy-league-business-entrepreneurship-courses-you-can-take-for-free/&t=Brain Trust: 100 Ivy League Business &#038; Entrepreneurship Courses You Can Take for Free&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p><em>From BSchool.com:</em></p>
<p>Just because you don’t have the deep pockets or stellar grades it takes to get into top tier schools doesn’t mean you can’t enjoy some of the same resources these establishments offer. Through open courseware programs, you can access course materials from a wide range of top universities. Whether you decide to take these courses on your own time or just skim through the information, <strong>we’ve compiled a list of 100 places</strong> to start looking for great business and entrepreneurship information.</p>
<p>Full Article: <a href="http://www.bschool.com/blog/2008/brain-trust-100-ivy-league-business-entrepreneurship-courses-you-can-take-for-free/">http://www.bschool.com/blog/2008/brain-trust-100-ivy-league-business-entrepreneurship-courses-you-can-take-for-free/</a></p>
]]></content:encoded>
			<wfw:commentRss>http://mentalrise.com/2009/04/brain-trust-100-ivy-league-business-entrepreneurship-courses-you-can-take-for-free/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Breaking the Holding Pattern - Moving Forward on Your Path</title>
		<link>http://mentalrise.com/2009/04/breaking-the-holding-pattern-moving-forward-on-your-path/</link>
		<comments>http://mentalrise.com/2009/04/breaking-the-holding-pattern-moving-forward-on-your-path/#comments</comments>
		<pubDate>Sun, 26 Apr 2009 02:05:52 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Observations]]></category>

		<category><![CDATA[motivation]]></category>

		<category><![CDATA[procrastination]]></category>

		<category><![CDATA[urgency]]></category>

		<guid isPermaLink="false">http://mentalrise.com/?p=56</guid>
		<description><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2009/04/breaking-the-holding-pattern-moving-forward-on-your-path/&t=Breaking the Holding Pattern - Moving Forward on Your Path&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>Planning the future in spans of 6-12 months requires deciding with certainty what paths to follow.</p>
<p>The present is most valuable when its events are the results of past planning. Knowing not only where we are currently, but where we should be, sets an internal pace, and an objective measure of progress along our path.</p>
<p>Even in writing this, I stumble over words and concepts I know to be almost universally true. Why? Because their truth is uncomfortable, and as such, they are shown to be all the more timely and important for me.</p>
<p>Some of us, myself included, have tried to avoid planning for fear of missing some larger but hitherto unknown opportunity. We must realize however, that the negative effects of continued stagnant procrastination, a self-glorified, self-righteous, self-justified holding pattern we daren&#8217;t break, wastes away our precious time and focus.</p>
<p>While those action-oriented individuals spend their time continuously planning, executing, processing input from successes and failures, and repeating, those in the eternal holding pattern gain zero units of real world experience. This withdrawal from reality into an unproductive feedback loop is where many of us find ourselves today.</p>
<p>So now, what is the first action?</p>
<p>It seems that I must repeat the most boring, generic, cliche advice that all of us claim to know, but few actually rise to act upon - <strong>brainstorm and write out goals, now!</strong></p>
<p>Work backwards from these to the present, and take <strong>immediate</strong> action.</p>
]]></description>
			<content:encoded><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2009/04/breaking-the-holding-pattern-moving-forward-on-your-path/&t=Breaking the Holding Pattern - Moving Forward on Your Path&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>Planning the future in spans of 6-12 months requires deciding with certainty what paths to follow.</p>
<p>The present is most valuable when its events are the results of past planning. Knowing not only where we are currently, but where we should be, sets an internal pace, and an objective measure of progress along our path.</p>
<p>Even in writing this, I stumble over words and concepts I know to be almost universally true. Why? Because their truth is uncomfortable, and as such, they are shown to be all the more timely and important for me.</p>
<p>Some of us, myself included, have tried to avoid planning for fear of missing some larger but hitherto unknown opportunity. We must realize however, that the negative effects of continued stagnant procrastination, a self-glorified, self-righteous, self-justified holding pattern we daren&#8217;t break, wastes away our precious time and focus.</p>
<p>While those action-oriented individuals spend their time continuously planning, executing, processing input from successes and failures, and repeating, those in the eternal holding pattern gain zero units of real world experience. This withdrawal from reality into an unproductive feedback loop is where many of us find ourselves today.</p>
<p>So now, what is the first action?</p>
<p>It seems that I must repeat the most boring, generic, cliche advice that all of us claim to know, but few actually rise to act upon - <strong>brainstorm and write out goals, now!</strong></p>
<p>Work backwards from these to the present, and take <strong>immediate</strong> action.</p>
]]></content:encoded>
			<wfw:commentRss>http://mentalrise.com/2009/04/breaking-the-holding-pattern-moving-forward-on-your-path/feed/</wfw:commentRss>
		</item>
		<item>
		<title>10 Startup Steps for Hiring a Great Sales Team</title>
		<link>http://mentalrise.com/2008/11/10-startup-steps-for-hiring-a-great-sales-team/</link>
		<comments>http://mentalrise.com/2008/11/10-startup-steps-for-hiring-a-great-sales-team/#comments</comments>
		<pubDate>Thu, 20 Nov 2008 05:34:56 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Observations]]></category>

		<category><![CDATA[Rants]]></category>

		<category><![CDATA[Startups]]></category>

		<category><![CDATA[hiring]]></category>

		<category><![CDATA[sales]]></category>

		<category><![CDATA[startup]]></category>

		<category><![CDATA[team]]></category>

		<guid isPermaLink="false">http://mentalrise.com/?p=45</guid>
		<description><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/11/10-startup-steps-for-hiring-a-great-sales-team/&t=10 Startup Steps for Hiring a Great Sales Team&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>For some of us, the products we develop and market need to be sold directly to clients via direct sales and eventually, referral building.</p>
<p>At the beginning of our ventures, it is imperative to personally develop a strong, benefits-based sales method for our product. But what about afterwards? We aren&#8217;t supposed to sell each and every widget ourselves, right?</p>
<p>Enter the Sales Team.</p>
<p><object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="425" height="344" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param name="allowFullScreen" value="true" /><param name="allowscriptaccess" value="always" /><param name="src" value="http://www.youtube.com/v/fsvWVbBowXo&amp;hl=en&amp;fs=1&amp;rel=0&amp;color1=0x3a3a3a&amp;color2=0x999999" /><embed type="application/x-shockwave-flash" width="425" height="344" src="http://www.youtube.com/v/fsvWVbBowXo&amp;hl=en&amp;fs=1&amp;rel=0&amp;color1=0x3a3a3a&amp;color2=0x999999" allowscriptaccess="always" allowfullscreen="true"></embed></object></p>
<p>But wait - there are a lot of amateurs, yahoos, and slackers out there! There is a real danger that the wrong pick could:</p>
<ul>
<li>Damage your reputation</li>
<li>Waste your precious seed money</li>
<li>Get you in legal trouble</li>
<li>&#8230;Impregnate your daughter?</li>
</ul>
<p>Anything is possible! With that in mind, pay close attention to <strong>The 10 Startup Steps for Hiring a Great Sales Team</strong><br />
</p>
<div style="width: 500px;">
<ul>
<dl>
<li>
<dt>Properly define the job. </dt>
<dd>Most managers try to determine whom they want to hire rather than hiring the best fit for the job. If you profile the person whom would do a superior job, the resulting profile might define some one totally different than originally planned, filling the position based on skills, behaviors and motivators inherent to the job.</dd>
</li>
<li>
<dt>Benchmark the position. </dt>
<dd>Job Benchmarking is a definitive tool designed to take the guesswork and bias out of the hiring process. It assesses the job based on the merits of the work required by the employee and not on their perceived abilities and personality. It also eliminates comparing the new employee to others already doing the job. Hiring as hired in the past will not target super stars needed to excel and grow your business.</dd>
</li>
<li>
<dt>Re-write your ad. </dt>
<dd>Most ads ask what the candidate has done in the past, and while it might be important, it doesn’t tell you what they can do or how well they will do the job. Specifically state the outcomes you want each candidate to display while employed. Most will not apply if they feel pre-screening will not meet your requirements.</dd>
</li>
<li>
<dt>Pre-screen the applicants. </dt>
<dd>To many, this means going over the resume to qualify backgrounds, experience or education. Instead, E-mail each applicant a set of questions to weed out ones who are clearly a poor choice for the job especially if they interface with internal or external customers, and are unable to represent the company in a professional manner.</dd>
</li>
<li>
<dt>Screen the applicants. </dt>
<dd>Most companies have set pro-cedures in place to screen out prospects that do not meet the basic requirements of the job. However, pre-screening via email and a set series of questions will help to further weed out unprofessional or less than desirable candidates.</dd>
</li>
<li>
<dt>Pre-interview meeting. </dt>
<dd>Many companies have multiple employees interview prospective candidates. What they fail to do is preplan the interview process to consistently obtain the same information from each of the candidates. When possible, interviewers should also be included in the benchmarking process to ensure buy in and accountability.</dd>
</li>
<li>
<dt>Interview the Candidate. </dt>
<dd>Most managers have not been trained on how to interview a perspective new employee. When possible, companies need to hire a coach to train managers on how to interview and determine a good fit for the organization. Most interviewers make the decision to hire based on a person’s past performance and within the first five minutes of an interview. Companies need to teach how to avoid these pitfalls by reducing the hiring bias and taking the guesswork out the hiring process.</dd>
</li>
<li>
<dt>Assess the Candidate. </dt>
<dd>Talent assessments tell how closely the candidate matches a job. Many feel this part of the process should come after the interview. A well-designed talent report will help determine not only if a candidate can do the job but also how well they might do it. It will often highlight deficiencies that might detract from the individuals’ overall performance as well. Why waste more time and money interviewing a candidate requiring compromise to hire?</dd>
</li>
<li>
<dt>Post-interview meeting. </dt>
<dd>Debrief each of the interviewers on their choice of candidate(s). Interviewers need to justify choices based on the sample questions each asked and on relevant feedback and agree as a group. If you did your benchmark correctly, and you have already run a talent report, there should be a stand out candidate.</dd>
</li>
<li>
<dt>Don’t hire to just to fill a slot. </dt>
<dd>Some just want the hiring process to stop because it is taking to long and fill the position with a “body”. Managers who are willing to settle for a so-so employee are probably just so-so managers. Either you did not throw a wide enough net to capture enough good prospects or your ad writing needs improvement. It costs just as much to find a good employee as it does to find an incompetent one.</dd>
</li>
</ul>
</div>
<p>(<a href="http://www.linkedin.com/answers/startups-small-businesses/starting-up/STR_STP/118813-10124651?browseCategory=STR_STP&amp;goback=.avq_98700_27590_0_*2">View Full Source Article Here</a>)</p>
<p>What other tips have helped you while hiring Sales Representatives?</p>
]]></description>
			<content:encoded><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/11/10-startup-steps-for-hiring-a-great-sales-team/&t=10 Startup Steps for Hiring a Great Sales Team&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>For some of us, the products we develop and market need to be sold directly to clients via direct sales and eventually, referral building.</p>
<p>At the beginning of our ventures, it is imperative to personally develop a strong, benefits-based sales method for our product. But what about afterwards? We aren&#8217;t supposed to sell each and every widget ourselves, right?</p>
<p>Enter the Sales Team.</p>
<p><object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="425" height="344" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param name="allowFullScreen" value="true" /><param name="allowscriptaccess" value="always" /><param name="src" value="http://www.youtube.com/v/fsvWVbBowXo&amp;hl=en&amp;fs=1&amp;rel=0&amp;color1=0x3a3a3a&amp;color2=0x999999" /><embed type="application/x-shockwave-flash" width="425" height="344" src="http://www.youtube.com/v/fsvWVbBowXo&amp;hl=en&amp;fs=1&amp;rel=0&amp;color1=0x3a3a3a&amp;color2=0x999999" allowscriptaccess="always" allowfullscreen="true"></embed></object></p>
<p>But wait - there are a lot of amateurs, yahoos, and slackers out there! There is a real danger that the wrong pick could:</p>
<ul>
<li>Damage your reputation</li>
<li>Waste your precious seed money</li>
<li>Get you in legal trouble</li>
<li>&#8230;Impregnate your daughter?</li>
</ul>
<p>Anything is possible! With that in mind, pay close attention to <strong>The 10 Startup Steps for Hiring a Great Sales Team</strong><br />
</p>
<div style="width: 500px;">
<ul>
<dl>
<li>
<dt>Properly define the job. </dt>
<dd>Most managers try to determine whom they want to hire rather than hiring the best fit for the job. If you profile the person whom would do a superior job, the resulting profile might define some one totally different than originally planned, filling the position based on skills, behaviors and motivators inherent to the job.</dd>
</li>
<li>
<dt>Benchmark the position. </dt>
<dd>Job Benchmarking is a definitive tool designed to take the guesswork and bias out of the hiring process. It assesses the job based on the merits of the work required by the employee and not on their perceived abilities and personality. It also eliminates comparing the new employee to others already doing the job. Hiring as hired in the past will not target super stars needed to excel and grow your business.</dd>
</li>
<li>
<dt>Re-write your ad. </dt>
<dd>Most ads ask what the candidate has done in the past, and while it might be important, it doesn’t tell you what they can do or how well they will do the job. Specifically state the outcomes you want each candidate to display while employed. Most will not apply if they feel pre-screening will not meet your requirements.</dd>
</li>
<li>
<dt>Pre-screen the applicants. </dt>
<dd>To many, this means going over the resume to qualify backgrounds, experience or education. Instead, E-mail each applicant a set of questions to weed out ones who are clearly a poor choice for the job especially if they interface with internal or external customers, and are unable to represent the company in a professional manner.</dd>
</li>
<li>
<dt>Screen the applicants. </dt>
<dd>Most companies have set pro-cedures in place to screen out prospects that do not meet the basic requirements of the job. However, pre-screening via email and a set series of questions will help to further weed out unprofessional or less than desirable candidates.</dd>
</li>
<li>
<dt>Pre-interview meeting. </dt>
<dd>Many companies have multiple employees interview prospective candidates. What they fail to do is preplan the interview process to consistently obtain the same information from each of the candidates. When possible, interviewers should also be included in the benchmarking process to ensure buy in and accountability.</dd>
</li>
<li>
<dt>Interview the Candidate. </dt>
<dd>Most managers have not been trained on how to interview a perspective new employee. When possible, companies need to hire a coach to train managers on how to interview and determine a good fit for the organization. Most interviewers make the decision to hire based on a person’s past performance and within the first five minutes of an interview. Companies need to teach how to avoid these pitfalls by reducing the hiring bias and taking the guesswork out the hiring process.</dd>
</li>
<li>
<dt>Assess the Candidate. </dt>
<dd>Talent assessments tell how closely the candidate matches a job. Many feel this part of the process should come after the interview. A well-designed talent report will help determine not only if a candidate can do the job but also how well they might do it. It will often highlight deficiencies that might detract from the individuals’ overall performance as well. Why waste more time and money interviewing a candidate requiring compromise to hire?</dd>
</li>
<li>
<dt>Post-interview meeting. </dt>
<dd>Debrief each of the interviewers on their choice of candidate(s). Interviewers need to justify choices based on the sample questions each asked and on relevant feedback and agree as a group. If you did your benchmark correctly, and you have already run a talent report, there should be a stand out candidate.</dd>
</li>
<li>
<dt>Don’t hire to just to fill a slot. </dt>
<dd>Some just want the hiring process to stop because it is taking to long and fill the position with a “body”. Managers who are willing to settle for a so-so employee are probably just so-so managers. Either you did not throw a wide enough net to capture enough good prospects or your ad writing needs improvement. It costs just as much to find a good employee as it does to find an incompetent one.</dd>
</li>
</ul>
</div>
<p>(<a href="http://www.linkedin.com/answers/startups-small-businesses/starting-up/STR_STP/118813-10124651?browseCategory=STR_STP&amp;goback=.avq_98700_27590_0_*2">View Full Source Article Here</a>)</p>
<p>What other tips have helped you while hiring Sales Representatives?</p>
]]></content:encoded>
			<wfw:commentRss>http://mentalrise.com/2008/11/10-startup-steps-for-hiring-a-great-sales-team/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Staying Motivated When You Least Want To</title>
		<link>http://mentalrise.com/2008/11/staying-motivated-when-you-least-want-to/</link>
		<comments>http://mentalrise.com/2008/11/staying-motivated-when-you-least-want-to/#comments</comments>
		<pubDate>Sat, 15 Nov 2008 10:50:25 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Rants]]></category>

		<category><![CDATA[motivation]]></category>

		<category><![CDATA[productivity]]></category>

		<category><![CDATA[self discipline]]></category>

		<guid isPermaLink="false">http://mentalrise.com/?p=41</guid>
		<description><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/11/staying-motivated-when-you-least-want-to/&t=Staying Motivated When You Least Want To&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>Every day we lose precious time to Motivation Malfunction. Little by little, it tries to sap away our precious focus, to dwell on &#8216;what ifs&#8217; and &#8216;boo hoos&#8217; that lurk about in the peripheral of our consciousness. This article, &#8220;<strong>Staying Motivated When It All Goes To Hell</strong>&#8220;, is a great wake up call to keep moving forward, faster than ever.</p>
<p>I use it as part of my &#8220;Emergency Motivation Arsenal&#8221;, in case I find myself moping about instead of pursuing my goals.</p>
<blockquote><p>It’s easy to get motivated by an idea. A plan. A goal. We tend to get easily excited by and obsessed over these (and other) four-letter words. The thought of them is intoxicating, and when you’re caught up in the euphoria, suddenly all things seem possible. You want it bad, and you chase it with a smile on your face.</p>
<p>But there’s another four letter that most people don’t like to face, and that’s work.</p>
<p>When your goals just aren’t doing it for you, when you’re not getting excited enough to chase them anymore, something is wrong. You feel like you’re going through the motions, doing what you have to in order to chug along, and the hot idea that once dominated your thoughts has lost its luster. What used to be a driving passion becomes just another chore. You start entertaining thoughts of giving up.</p></blockquote>
<p>Full Article: <a title="Staying Motivated When It All Goes To Hell" href="http://www.rockyourday.com/staying-motivated-when-it-all-goes-to-hell/"><strong>Staying Motivated When It All Goes To Hell</strong></a></p>
]]></description>
			<content:encoded><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/11/staying-motivated-when-you-least-want-to/&t=Staying Motivated When You Least Want To&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>Every day we lose precious time to Motivation Malfunction. Little by little, it tries to sap away our precious focus, to dwell on &#8216;what ifs&#8217; and &#8216;boo hoos&#8217; that lurk about in the peripheral of our consciousness. This article, &#8220;<strong>Staying Motivated When It All Goes To Hell</strong>&#8220;, is a great wake up call to keep moving forward, faster than ever.</p>
<p>I use it as part of my &#8220;Emergency Motivation Arsenal&#8221;, in case I find myself moping about instead of pursuing my goals.</p>
<blockquote><p>It’s easy to get motivated by an idea. A plan. A goal. We tend to get easily excited by and obsessed over these (and other) four-letter words. The thought of them is intoxicating, and when you’re caught up in the euphoria, suddenly all things seem possible. You want it bad, and you chase it with a smile on your face.</p>
<p>But there’s another four letter that most people don’t like to face, and that’s work.</p>
<p>When your goals just aren’t doing it for you, when you’re not getting excited enough to chase them anymore, something is wrong. You feel like you’re going through the motions, doing what you have to in order to chug along, and the hot idea that once dominated your thoughts has lost its luster. What used to be a driving passion becomes just another chore. You start entertaining thoughts of giving up.</p></blockquote>
<p>Full Article: <a title="Staying Motivated When It All Goes To Hell" href="http://www.rockyourday.com/staying-motivated-when-it-all-goes-to-hell/"><strong>Staying Motivated When It All Goes To Hell</strong></a></p>
]]></content:encoded>
			<wfw:commentRss>http://mentalrise.com/2008/11/staying-motivated-when-you-least-want-to/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Obama CTO - Top Priority Idea</title>
		<link>http://mentalrise.com/2008/11/obama-cto-top-priority-idea/</link>
		<comments>http://mentalrise.com/2008/11/obama-cto-top-priority-idea/#comments</comments>
		<pubDate>Wed, 12 Nov 2008 02:03:13 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Observations]]></category>

		<category><![CDATA[Rants]]></category>

		<category><![CDATA[cto]]></category>

		<category><![CDATA[escalation]]></category>

		<category><![CDATA[fraud]]></category>

		<category><![CDATA[hosting]]></category>

		<category><![CDATA[isp]]></category>

		<category><![CDATA[obama]]></category>

		<category><![CDATA[phishing]]></category>

		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://mentalrise.com/?p=29</guid>
		<description><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/11/obama-cto-top-priority-idea/&t=Obama CTO - Top Priority Idea&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p class="textilish">When http://www.ObamaCTO.org posed the question &#8220;Barack Obama is going to appoint the nation&#8217;s first CTO.  What are the top priorities?&#8221;, it struck me as a very good time to come up with something truly useful.</p>
<p class="textilish"><img class="size-thumbnail wp-image-30 alignright" title="uplink-hacker-elite-3" src="http://mentalrise.com/wp-content/uploads/2008/11/uplink-hacker-elite-3-150x150.jpg" alt="" width="150" height="150" />There are a lot of different tasks that need tackling by the new CTO (whoever he/she/it is), but as a Security Administrator for a hosting company, my perspective is a bit different. The explosion of the web has led, of course, to the explosion of hostile code, fraud, and network attacks, with the United States leading the pack.</p>
<p>My Idea?</p>
<blockquote>
<h2>Negotiate escalation procedures between ISPs/Providers</h2>
<div class="description">
<p class="textilish">ISPs and owners of large networks (hosting companies, colo facilities, Military networks, large corporations) should have an established method of escalating incidents between each other.</p>
<p class="textilish">Any company with a minimum network size of ____ IPs is required to register. Only registered members can escalate between each other, ensuring that each complaint/escalation is properly formed.</p>
<p class="textilish">Anyone reporting an incident would provide proof (logs, urls, etc) as necessary.</p>
<p class="textilish">Depending on the reputation of the reporting entity (i.e. military vs. small ISP), automated action can be taken against the offender(s)</p>
<p class="textilish">Volunteer organizations, corporations, and other good netizens can join the fight against botnets, spammers, and virii-laden machines.</p>
</div>
<p class="textilish">Companies would have a responsiveness score, showing the community how quickly and seriously they respond to threats.</p>
</blockquote>
<p class="textilish">What do you think? Send me a twitter @MarcelChastain , and vote at <a href="http://www.obamacto.org/">http://www.obamacto.org/</a>.</p>
]]></description>
			<content:encoded><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/11/obama-cto-top-priority-idea/&t=Obama CTO - Top Priority Idea&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p class="textilish">When http://www.ObamaCTO.org posed the question &#8220;Barack Obama is going to appoint the nation&#8217;s first CTO.  What are the top priorities?&#8221;, it struck me as a very good time to come up with something truly useful.</p>
<p class="textilish"><img class="size-thumbnail wp-image-30 alignright" title="uplink-hacker-elite-3" src="http://mentalrise.com/wp-content/uploads/2008/11/uplink-hacker-elite-3-150x150.jpg" alt="" width="150" height="150" />There are a lot of different tasks that need tackling by the new CTO (whoever he/she/it is), but as a Security Administrator for a hosting company, my perspective is a bit different. The explosion of the web has led, of course, to the explosion of hostile code, fraud, and network attacks, with the United States leading the pack.</p>
<p>My Idea?</p>
<blockquote>
<h2>Negotiate escalation procedures between ISPs/Providers</h2>
<div class="description">
<p class="textilish">ISPs and owners of large networks (hosting companies, colo facilities, Military networks, large corporations) should have an established method of escalating incidents between each other.</p>
<p class="textilish">Any company with a minimum network size of ____ IPs is required to register. Only registered members can escalate between each other, ensuring that each complaint/escalation is properly formed.</p>
<p class="textilish">Anyone reporting an incident would provide proof (logs, urls, etc) as necessary.</p>
<p class="textilish">Depending on the reputation of the reporting entity (i.e. military vs. small ISP), automated action can be taken against the offender(s)</p>
<p class="textilish">Volunteer organizations, corporations, and other good netizens can join the fight against botnets, spammers, and virii-laden machines.</p>
</div>
<p class="textilish">Companies would have a responsiveness score, showing the community how quickly and seriously they respond to threats.</p>
</blockquote>
<p class="textilish">What do you think? Send me a twitter @MarcelChastain , and vote at <a href="http://www.obamacto.org/">http://www.obamacto.org/</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://mentalrise.com/2008/11/obama-cto-top-priority-idea/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Transcription - More Content, Less Time</title>
		<link>http://mentalrise.com/2008/11/transcription-more-content-less-time/</link>
		<comments>http://mentalrise.com/2008/11/transcription-more-content-less-time/#comments</comments>
		<pubDate>Thu, 06 Nov 2008 03:44:52 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Companies]]></category>

		<category><![CDATA[Marketing]]></category>

		<category><![CDATA[Tools]]></category>

		<category><![CDATA[automation]]></category>

		<category><![CDATA[blogging]]></category>

		<category><![CDATA[copywriting]]></category>

		<category><![CDATA[dictation]]></category>

		<category><![CDATA[documentation]]></category>

		<category><![CDATA[sales letter]]></category>

		<category><![CDATA[transcription]]></category>

		<guid isPermaLink="false">http://mentalrise.com/?p=23</guid>
		<description><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/11/transcription-more-content-less-time/&t=Transcription - More Content, Less Time&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>Transcription services are becoming more popular as outsourcing and other automation techniques are being explored in depth. Bloggers, internet marketers, content creators, and copywriters alike all see the vast potential for using transcription services to create more natural, realistic, attractive-sounding text for use in their products.</p>
<p>Let&#8217;s talk about some of the potential uses for transcription services, and where to find the best deal. <span id="more-23"></span></p>
<ol>
<li><strong>Bloggers</strong> need to generate a huge amount of content daily and do so in a very conversational, straightforward kind of a tone. Typing all of this information and formatting it consumes a huge amount of time, in addition to the original amount of time it took to research this topic.</li>
<li>For those that are involved in <strong>Highly Technical</strong> or highly detailed subjects, <strong>Documentation</strong> is another huge area where transcription can ease the burden on the writer. As a programmer myself, I regularly have to send one out of every three hours in documentation, especially for extremely sensitive or highly technical projects.</li>
<li><strong>Copywriters</strong> need to generate a lot of ideas off the top of their head in a conversational tone, in a compelling, salesman-like way in order to appeal to their prospects. We can see that transcription helps in all of these cases because it allows you to speak instead of typing.</li>
<li><strong>Sales Letters</strong> are typically extremely long, detailed, conversational pieces, sometimes 15 or 20 paragraphs long, for use with internet marketers and direct mail. Using transcription services, a copyrighter creating a new sales letter can get a rough draft going in maybe one to two hours with only a basic outline to start with</li>
<li><strong>Product Reviews</strong> are another popular type of content on the internet nowadays. With new products coming out, people want to hear from an expert how it works and what features are attractive, and what should motivate them into investing in a product.Reviews of products are often very simple.  Sometimes there is some technical data that needs to go inside of those, but that consumes a minimal amount of time for the review process.  Most of the time is spent typing, formatting, and arranging conversational and natural speech on a keyboard.</li>
<li>Finally, one of the newer sides on the Internet, is <strong>MicroBlogging</strong>.  A great example of this is Twitter tweets or Facebook updates. All of these services encourage person-to-person communication and reward those that speak to their users and their readers in the most conversational tone.</li>
</ol>
<p>Effectively communicating to the reader in a way that they can understand is the one of the most important things, second only to content.  Once you have a topic that you would like to discuss, a transcription service can help you get that data entered onto the computer for easy formatting and publishing.</p>
<p><strong>Investment</strong><img class="alignright" title="Investment" src="http://www.trendlines.com/images/pics/coins.JPG" alt="" width="279" height="356" /></p>
<p>The costs of transcription services vary according to the quality.  We&#8217;ve seen published rates from major, mainstream American companies as low as $1.50 per minute to $2.50 per minute.  There are additional premiums if your text contains highly technical legal or medical words as these slow down the transcription process immensely and require a specially trained transcriber.</p>
<p>Of course, you can find less expensive transcription specialists on eLance, but the quality varies tremendously.</p>
<p>What I have found is a wonderful flat rate service called <a href="http://CopyTalk.com">CopyTalk.com</a>.  For a <strong>flat rate</strong> of $79.95 per month they allow you to make an unlimited amount of transcription pieces.  The only catch is that each one can only be four minutes long.  That&#8217;s no problem!  All that happens is you get cut off after four minutes and you can continue right where you left off.  I&#8217;m using it right now as we speak and it&#8217;s incredible.</p>
<p>At $1.50 per minute for some of the less expense transcription services, you would rack up a bill of approximately $90 for one hour of transcribed text, just to start off! To go through your first and second drafts, your revision, and other extremely busy times such as particularly busy news day or a release of it for a major product that you&#8217;re reviewing, you can easily accrue an hour worth of transcription time that will hit your pocket book pretty heavily.  $90 for one hour is what we&#8217;re up against.</p>
<p>In comparison, $79.95 for Copytalk.com gives you an unlimited amount of transcription time but it needs to be cut up into four minute pieces.  This was originally introduced to me or suggested to me by Tim Ferriss, the author of the best selling novel book, The 4-Hour Work Week.</p>
<p>Right now I can see on their website that they&#8217;re offering a one week free trial, you can try out the services and see the quality.  Normally they deliver to your e-mail inbox within four hours as per their website SLA.  I hope this helps all of you would-be entrepreneurs, bloggers, Internet marketers, and other content providers to generate more content quicker and build up the power on your side - easily.</p>
]]></description>
			<content:encoded><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/11/transcription-more-content-less-time/&t=Transcription - More Content, Less Time&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>Transcription services are becoming more popular as outsourcing and other automation techniques are being explored in depth. Bloggers, internet marketers, content creators, and copywriters alike all see the vast potential for using transcription services to create more natural, realistic, attractive-sounding text for use in their products.</p>
<p>Let&#8217;s talk about some of the potential uses for transcription services, and where to find the best deal. <span id="more-23"></span></p>
<ol>
<li><strong>Bloggers</strong> need to generate a huge amount of content daily and do so in a very conversational, straightforward kind of a tone. Typing all of this information and formatting it consumes a huge amount of time, in addition to the original amount of time it took to research this topic.</li>
<li>For those that are involved in <strong>Highly Technical</strong> or highly detailed subjects, <strong>Documentation</strong> is another huge area where transcription can ease the burden on the writer. As a programmer myself, I regularly have to send one out of every three hours in documentation, especially for extremely sensitive or highly technical projects.</li>
<li><strong>Copywriters</strong> need to generate a lot of ideas off the top of their head in a conversational tone, in a compelling, salesman-like way in order to appeal to their prospects. We can see that transcription helps in all of these cases because it allows you to speak instead of typing.</li>
<li><strong>Sales Letters</strong> are typically extremely long, detailed, conversational pieces, sometimes 15 or 20 paragraphs long, for use with internet marketers and direct mail. Using transcription services, a copyrighter creating a new sales letter can get a rough draft going in maybe one to two hours with only a basic outline to start with</li>
<li><strong>Product Reviews</strong> are another popular type of content on the internet nowadays. With new products coming out, people want to hear from an expert how it works and what features are attractive, and what should motivate them into investing in a product.Reviews of products are often very simple.  Sometimes there is some technical data that needs to go inside of those, but that consumes a minimal amount of time for the review process.  Most of the time is spent typing, formatting, and arranging conversational and natural speech on a keyboard.</li>
<li>Finally, one of the newer sides on the Internet, is <strong>MicroBlogging</strong>.  A great example of this is Twitter tweets or Facebook updates. All of these services encourage person-to-person communication and reward those that speak to their users and their readers in the most conversational tone.</li>
</ol>
<p>Effectively communicating to the reader in a way that they can understand is the one of the most important things, second only to content.  Once you have a topic that you would like to discuss, a transcription service can help you get that data entered onto the computer for easy formatting and publishing.</p>
<p><strong>Investment</strong><img class="alignright" title="Investment" src="http://www.trendlines.com/images/pics/coins.JPG" alt="" width="279" height="356" /></p>
<p>The costs of transcription services vary according to the quality.  We&#8217;ve seen published rates from major, mainstream American companies as low as $1.50 per minute to $2.50 per minute.  There are additional premiums if your text contains highly technical legal or medical words as these slow down the transcription process immensely and require a specially trained transcriber.</p>
<p>Of course, you can find less expensive transcription specialists on eLance, but the quality varies tremendously.</p>
<p>What I have found is a wonderful flat rate service called <a href="http://CopyTalk.com">CopyTalk.com</a>.  For a <strong>flat rate</strong> of $79.95 per month they allow you to make an unlimited amount of transcription pieces.  The only catch is that each one can only be four minutes long.  That&#8217;s no problem!  All that happens is you get cut off after four minutes and you can continue right where you left off.  I&#8217;m using it right now as we speak and it&#8217;s incredible.</p>
<p>At $1.50 per minute for some of the less expense transcription services, you would rack up a bill of approximately $90 for one hour of transcribed text, just to start off! To go through your first and second drafts, your revision, and other extremely busy times such as particularly busy news day or a release of it for a major product that you&#8217;re reviewing, you can easily accrue an hour worth of transcription time that will hit your pocket book pretty heavily.  $90 for one hour is what we&#8217;re up against.</p>
<p>In comparison, $79.95 for Copytalk.com gives you an unlimited amount of transcription time but it needs to be cut up into four minute pieces.  This was originally introduced to me or suggested to me by Tim Ferriss, the author of the best selling novel book, The 4-Hour Work Week.</p>
<p>Right now I can see on their website that they&#8217;re offering a one week free trial, you can try out the services and see the quality.  Normally they deliver to your e-mail inbox within four hours as per their website SLA.  I hope this helps all of you would-be entrepreneurs, bloggers, Internet marketers, and other content providers to generate more content quicker and build up the power on your side - easily.</p>
]]></content:encoded>
			<wfw:commentRss>http://mentalrise.com/2008/11/transcription-more-content-less-time/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Top Ajax Techniques: Bring these features to your site easily</title>
		<link>http://mentalrise.com/2008/11/top-ajax-techniques-bring-these-features-to-your-site-easily/</link>
		<comments>http://mentalrise.com/2008/11/top-ajax-techniques-bring-these-features-to-your-site-easily/#comments</comments>
		<pubDate>Tue, 04 Nov 2008 07:20:30 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Programming]]></category>

		<category><![CDATA[Tools]]></category>

		<category><![CDATA[AJAX]]></category>

		<category><![CDATA[jquery]]></category>

		<category><![CDATA[web 2.0]]></category>

		<category><![CDATA[web development]]></category>

		<guid isPermaLink="false">http://MentalRise.com/?p=13</guid>
		<description><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/11/top-ajax-techniques-bring-these-features-to-your-site-easily/&t=Top Ajax Techniques: Bring these features to your site easily&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>Web applications have made huge leaps and bounds in improving user experience thanks to a lot of recently developed Ajax technology. When you combine some neat functionality courtesy of PHP with the cleverness of javascript you can produce some pretty cool results. In an effort to help you take it up a notch, we’d like to share some methods for helping your site anticipate a user’s next move.</p>
<p><a href="http://www.noupe.com/javascript/most-wanted-ajax-techniques-50-ajax-examples-and-tutorials.html">Full Article from noupe.com</a></p>
]]></description>
			<content:encoded><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/11/top-ajax-techniques-bring-these-features-to-your-site-easily/&t=Top Ajax Techniques: Bring these features to your site easily&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>Web applications have made huge leaps and bounds in improving user experience thanks to a lot of recently developed Ajax technology. When you combine some neat functionality courtesy of PHP with the cleverness of javascript you can produce some pretty cool results. In an effort to help you take it up a notch, we’d like to share some methods for helping your site anticipate a user’s next move.</p>
<p><a href="http://www.noupe.com/javascript/most-wanted-ajax-techniques-50-ajax-examples-and-tutorials.html">Full Article from noupe.com</a></p>
]]></content:encoded>
			<wfw:commentRss>http://mentalrise.com/2008/11/top-ajax-techniques-bring-these-features-to-your-site-easily/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Eben Pagan Recommended Reading List</title>
		<link>http://mentalrise.com/2008/10/eben-pagan-recommended-reading-list/</link>
		<comments>http://mentalrise.com/2008/10/eben-pagan-recommended-reading-list/#comments</comments>
		<pubDate>Sat, 01 Nov 2008 02:30:53 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Marketing]]></category>

		<category><![CDATA[Reading]]></category>

		<category><![CDATA[eben pagan]]></category>

		<category><![CDATA[internet marketing]]></category>

		<category><![CDATA[reading list]]></category>

		<guid isPermaLink="false">http://MentalRise.com/?p=12</guid>
		<description><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/10/eben-pagan-recommended-reading-list/&t=Eben Pagan Recommended Reading List&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>Eben Pagan, Internet Marketing Expert extraordinaire, recommends some books for anyone looking to improve and enhance their understanding in the IM industry.</p>
<p>I&#8217;ve had the pleasure of reading quite a few of these, and agree wholeheartedly with the recommendations.</p>
<p><a title="Eben Pagan Recommended Reading" href="http://myvirtualpartner.com/blog/2008/03/12/whats-on-eben-pagans-recommended-reading-list/" title="Eben Pagan Recommended Reading">http://myvirtualpartner.com/blog/2008/03/12/whats-on-eben-pagans-recommended-reading-list/</a></p>
]]></description>
			<content:encoded><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/10/eben-pagan-recommended-reading-list/&t=Eben Pagan Recommended Reading List&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>Eben Pagan, Internet Marketing Expert extraordinaire, recommends some books for anyone looking to improve and enhance their understanding in the IM industry.</p>
<p>I&#8217;ve had the pleasure of reading quite a few of these, and agree wholeheartedly with the recommendations.</p>
<p><a title="Eben Pagan Recommended Reading" href="http://myvirtualpartner.com/blog/2008/03/12/whats-on-eben-pagans-recommended-reading-list/" title="Eben Pagan Recommended Reading">http://myvirtualpartner.com/blog/2008/03/12/whats-on-eben-pagans-recommended-reading-list/</a></p>
]]></content:encoded>
			<wfw:commentRss>http://mentalrise.com/2008/10/eben-pagan-recommended-reading-list/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Malicious Code Injection - Sans JavaScript!</title>
		<link>http://mentalrise.com/2008/10/malicious-code-injection-sans-javascript/</link>
		<comments>http://mentalrise.com/2008/10/malicious-code-injection-sans-javascript/#comments</comments>
		<pubDate>Mon, 20 Oct 2008 17:18:11 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Rants]]></category>

		<category><![CDATA[injection]]></category>

		<category><![CDATA[malware]]></category>

		<category><![CDATA[scripting]]></category>

		<category><![CDATA[xss]]></category>

		<guid isPermaLink="false">http://MentalRise.com/?p=11</guid>
		<description><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/10/malicious-code-injection-sans-javascript/&t=Malicious Code Injection - Sans JavaScript!&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>The fellows over at i8jesus.com have a great article on injecting malicious content into site that block javascript.</p>
<p>I&#8217;m looking forward to incorporating their findings into my Malware scanning methods..!<br />
<a title="Permanent link to HTML/CSS Injections - Primitive Malicious Code (or, What’s the worst that could happen?)" href="http://i8jesus.com/?p=10" title="Permanent link to HTML/CSS Injections - Primitive Malicious Code (or, What’s the worst that could happen?)">HTML/CSS Injections - Primitive Malicious Code (or, What’s the worst that could happen?)</a></p>
]]></description>
			<content:encoded><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/10/malicious-code-injection-sans-javascript/&t=Malicious Code Injection - Sans JavaScript!&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>The fellows over at i8jesus.com have a great article on injecting malicious content into site that block javascript.</p>
<p>I&#8217;m looking forward to incorporating their findings into my Malware scanning methods..!<br />
<a title="Permanent link to HTML/CSS Injections - Primitive Malicious Code (or, What’s the worst that could happen?)" href="http://i8jesus.com/?p=10" title="Permanent link to HTML/CSS Injections - Primitive Malicious Code (or, What’s the worst that could happen?)">HTML/CSS Injections - Primitive Malicious Code (or, What’s the worst that could happen?)</a></p>
]]></content:encoded>
			<wfw:commentRss>http://mentalrise.com/2008/10/malicious-code-injection-sans-javascript/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Howto: LDAP Aliases on Courier</title>
		<link>http://mentalrise.com/2008/07/howto-ldap-aliases-on-courier/</link>
		<comments>http://mentalrise.com/2008/07/howto-ldap-aliases-on-courier/#comments</comments>
		<pubDate>Tue, 08 Jul 2008 02:11:35 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Programming]]></category>

		<category><![CDATA[alias]]></category>

		<category><![CDATA[courier]]></category>

		<category><![CDATA[courierldapaliasd]]></category>

		<category><![CDATA[forwarder]]></category>

		<category><![CDATA[ldap]]></category>

		<category><![CDATA[ldapaliasrc]]></category>

		<category><![CDATA[mail]]></category>

		<category><![CDATA[maildrop]]></category>

		<guid isPermaLink="false">http://MentalRise.com/?p=10</guid>
		<description><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/07/howto-ldap-aliases-on-courier/&t=Howto: LDAP Aliases on Courier&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>We decided to setup a mail server based entirely around the courier suite of mail applications on debian. This should end the incessant problems we are having with our poorly designed Qmail based mail server, hopefully.</p>
<p>Step 1 was to get user authentication working (via LDAP) against our local Domain Controller/Active Directory box - so far, so good (I&#8217;ll be sure to describe that struggle in another post).</p>
<p>Step 2 was getting the Aliases setup, which was a bit more involved.</p>
<p>We installed a local copy of openldap and courier&#8217;s ldap plugins using apt-get:</p>
<pre>sudo apt-get install slapd courier-ldap</pre>
<p>Next, to delete all the example data that came with openldap (NOTE: This will remote the contents of your ldap data folder! If you have anything important in there, back it up first!)</p>
<pre>cd /var/lib/ldap/ &amp;&amp; sudo rm -rf *.* alock</pre>
<p>We&#8217;ll go ahead and import the base ldap structure. Referencing some old ldap data, we came up with this dump for the domain &#8216;example.local&#8217;, and stored it in /root/base.ldif :</p>
<pre>dn: dc=example,dc=local
objectClass: top
objectClass: dcObject
objectClass: organization
o: example
dc: example
structuralObjectClass: organization

dn: ou=aliases,dc=example,dc=local
objectClass: top
objectClass: organizationalUnit
ou: aliases
structuralObjectClass: organizationalUnit</pre>
<p>Great! Let&#8217;s load it in the into ldap!</p>
<p><span id="more-10"></span></p>
<pre>sudo slapadd -vv -f /root/base.ldif</pre>
<p>Now, the data is loaded inside of ldap, but all the physical data files are owned by root. Assuming ldap is running as the user &#8216;openldap&#8217; on your system, let&#8217;s chown them:</p>
<pre>sudo chown -R openldap: /var/lib/ldap/</pre>
<p>Great. Let&#8217;s generate an admin password</p>
<pre>slappasswd
New password: &lt;hidden&gt;
Re-enter new password: &lt;hidden&gt;
{SSHA}d5+W6qGRDcMbsnIAvYasklajdklaO7N3Kby</pre>
<p>Copy that last line, and let&#8217;s start editing your openLDAP configuration file, slapd.conf</p>
<pre>sudo vi /etc/ldap/slapd.conf</pre>
<p>Find the following items, and change them as needed:</p>
<pre>suffix      &quot;dc=example,dc=local&quot;
rootdn      &quot;cn=admin,dc=example,dc=local&quot;
rootpw      {SSHA}d5+W6qGRDcMbsnIAvYasklajdklaO7N3Kby
index           mail,objectClass eq</pre>
<p>(Note: your &#8216;rootpw&#8217; should be different from above. Also, look through the rest of the file for any mention of &quot;dc=nodomain&quot; and replace it with &quot;dc=example,dc=local&quot;, or whatever your LDAP base is.)</p>
<p>Awesome!</p>
<p>Now, by default Courier bases its mail aliasing on a few different attributes, some of which are nonstandard or undefined. To fix this, we&#8217;ll create a quick schema file of our own. On Debian the schema files are stored in /etc/ldap/schema/, so we&#8217;ll create a new one named &#8216;local.schema&#8217;:</p>
<pre>sudo vi /etc/ldap/schema/local.schema

# Copied and pasted from the 'mail' attributetype,
# with a different OID, Name, and Desc
attributetype ( 0.9.2342.19200300.100.1.3.1
        NAME ( 'maildrop' )
        DESC 'Courier alias, will be used to deliver mail to'
    EQUALITY caseIgnoreIA5Match
    SUBSTR caseIgnoreIA5SubstringsMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )

# Subclass of inetOrgPerson, with a different
# OID, Name, Desc, and MUST
objectclass     ( 2.16.840.1.113730.3.2.2.1
    NAME 'courierAliasPerson'
        DESC 'Courier mail alias person'
    SUP organizationalPerson
    STRUCTURAL
        MUST (  mail $ maildrop )
        MAY (
                audio $ businessCategory $ carLicense $ departmentNumber $
                displayName $ employeeNumber $ employeeType $ givenName $
                homePhone $ homePostalAddress $ initials $ jpegPhoto $
                labeledURI $  manager $ mobile $ o $ pager $
                photo $ roomNumber $ secretary $ uid $ userCertificate $
                x500uniqueIdentifier $ preferredLanguage $
                userSMIMECertificate $ userPKCS12 )
        )</pre>
<p>Save and exit your editor, then add this new schema file near the top of your slapd.conf, underneath the existing schema declarations:</p>
<pre># Schema and objectClass definitions
include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/inetorgperson.schema
# Our new courier schemas
include         /etc/ldap/schema/local.schema</pre>
<p>Let&#8217;s go ahead and import 1 alias for testing. If 1 works, they all should work!</p>
<pre>cat &lt;&lt;__EOD__ &gt;/tmp/testalias.ldif
objectClass: top
objectClass: courierAliasPerson
cn: bob
sn: bob
mail: bob@example.local
maildrop: my-email-address@gmail.com
__EOD__

sudo slapadd -vv -f /tmp/testalias.ldif
sudo chown -R openldap: /var/lib/ldap/</pre>
<p>At this point we are done with the local ldap stuff for now. Let&#8217;s mess with courier&#8217;s ldap alias config file, stored at /etc/courier/ldapaliasrc .  This is what mine ends up looking like, minus all the comments:</p>
<pre>LDAP_ALIAS              1
LDAP_SERVER             localhost
LDAP_PORT               389
LDAP_NUMPROCS           5
LDAP_BASEDN             ou=aliases, dc=example, dc=local
LDAP_BINDDN             cn=admin, dc=example, dc=local
LDAP_BINDPW             my_awesome_password
LDAP_TIMEOUT            5
LDAP_MAIL               mail
LDAP_MAILDROP           maildrop</pre>
<p>Replace the LDAP_BASEDN, LDAP_BINDDN, and LDAP_BINDPW appropriately. Note, the LDAP_BINDPW is your password in plain text, so make sure this file isn&#8217;t world readable!</p>
<p>If you were to start all of your services (slapd, courier-mta, courier-ldap, etc) right now, would it work? NO! Instead, you would get this mysterious error message:</p>
<pre>Jul  8 00:56:09 localhost courieresmtpd: error,relay=::ffff:127.0.0.1,
ident=user,from=&lt;testuser@gmail.com&gt;,
to=&lt;bob@example.local&gt;: 400 Service temporarily unavailable.</pre>
<p>No details at all. This error message shows up because the &#8216;courierldapaliasd&#8217; daemon is not running. Let&#8217;s fix that, and make sure the service starts up properly in the future.</p>
<pre>ln -s /usr/sbin/courierldapaliasd /etc/init.d/
update-rc.d courierldapaliasd defaults
/etc/init.d/courierldapaliasd start</pre>
<p>One last thing - if you have been following along, you might notice I didn&#8217;t start the other services. Let&#8217;s do that too.</p>
<pre>/etc/init.d/slapd start
/etc/init.d/courier-mta start
/etc/init.d/courier-ldap start
/etc/init.d/courier-imap start
/etc/init.d/courier-authdaemon start</pre>
<p>There we have it. You should be able to send a message to our test user &#8216;bob@example.local&#8217;, and it will forward to the email address you specified. From this point forward you can populate your ldap database with similar entries.</p>
<p>Keep in mind that each courierAliasPerson entry can have a potentially unlimited number of &#8216;maildrop&#8217; attributes.</p>
<p>Wanna test it? (everything I typed in appears in bold)</p>
<pre>examplemail01:~# <strong>telnet localhost 25</strong>

Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 [examplemail01] [UBE Prohibited] Go ahead...
<strong>HELO fakehelo</strong>

250 examplemail01 Ok.
<strong>MAIL FROM: &lt;fakename@gmail.com&gt;</strong>

250 Ok.
<strong>RCPT TO: &lt;bob@example.local&gt;</strong>

250 Ok.
<strong>DATA</strong>

354 Ok.
<strong>Hi!

.</strong>

250 Ok. 4872CE5A.00005C7B</pre>
<p>My logs show the sweet alias success that I crave.</p>
<pre>Jul  7 19:18:08 localhost courierlocal: id=00003F83.4872CE5A.00005C7B,
from=&lt;fakename@gmail.com&gt;,addr=&lt;my-email-address@gmail.com&gt;,
size=187,success: Message delivered.</pre>
<p>Hope this saves some time for the rest of you out there <img src='http://mentalrise.com/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /></p>
]]></description>
			<content:encoded><![CDATA[<div class="diggthisplugin" style="float: right; width: 42px; padding-right: 10px; margin-left: 10px; margin-bottom: 0px;"><iframe src="http://digg.com/tools/diggthis.php?u=http://mentalrise.com/2008/07/howto-ldap-aliases-on-courier/&t=Howto: LDAP Aliases on Courier&k=#FFFFFF" scrolling="no" style="border: none; height: 80px; width: 52px;"></iframe>
		</div><p>We decided to setup a mail server based entirely around the courier suite of mail applications on debian. This should end the incessant problems we are having with our poorly designed Qmail based mail server, hopefully.</p>
<p>Step 1 was to get user authentication working (via LDAP) against our local Domain Controller/Active Directory box - so far, so good (I&#8217;ll be sure to describe that struggle in another post).</p>
<p>Step 2 was getting the Aliases setup, which was a bit more involved.</p>
<p>We installed a local copy of openldap and courier&#8217;s ldap plugins using apt-get:</p>
<pre>sudo apt-get install slapd courier-ldap</pre>
<p>Next, to delete all the example data that came with openldap (NOTE: This will remote the contents of your ldap data folder! If you have anything important in there, back it up first!)</p>
<pre>cd /var/lib/ldap/ &amp;&amp; sudo rm -rf *.* alock</pre>
<p>We&#8217;ll go ahead and import the base ldap structure. Referencing some old ldap data, we came up with this dump for the domain &#8216;example.local&#8217;, and stored it in /root/base.ldif :</p>
<pre>dn: dc=example,dc=local
objectClass: top
objectClass: dcObject
objectClass: organization
o: example
dc: example
structuralObjectClass: organization

dn: ou=aliases,dc=example,dc=local
objectClass: top
objectClass: organizationalUnit
ou: aliases
structuralObjectClass: organizationalUnit</pre>
<p>Great! Let&#8217;s load it in the into ldap!</p>
<p><span id="more-10"></span></p>
<pre>sudo slapadd -vv -f /root/base.ldif</pre>
<p>Now, the data is loaded inside of ldap, but all the physical data files are owned by root. Assuming ldap is running as the user &#8216;openldap&#8217; on your system, let&#8217;s chown them:</p>
<pre>sudo chown -R openldap: /var/lib/ldap/</pre>
<p>Great. Let&#8217;s generate an admin password</p>
<pre>slappasswd
New password: &lt;hidden&gt;
Re-enter new password: &lt;hidden&gt;
{SSHA}d5+W6qGRDcMbsnIAvYasklajdklaO7N3Kby</pre>
<p>Copy that last line, and let&#8217;s start editing your openLDAP configuration file, slapd.conf</p>
<pre>sudo vi /etc/ldap/slapd.conf</pre>
<p>Find the following items, and change them as needed:</p>
<pre>suffix      &quot;dc=example,dc=local&quot;
rootdn      &quot;cn=admin,dc=example,dc=local&quot;
rootpw      {SSHA}d5+W6qGRDcMbsnIAvYasklajdklaO7N3Kby
index           mail,objectClass eq</pre>
<p>(Note: your &#8216;rootpw&#8217; should be different from above. Also, look through the rest of the file for any mention of &quot;dc=nodomain&quot; and replace it with &quot;dc=example,dc=local&quot;, or whatever your LDAP base is.)</p>
<p>Awesome!</p>
<p>Now, by default Courier bases its mail aliasing on a few different attributes, some of which are nonstandard or undefined. To fix this, we&#8217;ll create a quick schema file of our own. On Debian the schema files are stored in /etc/ldap/schema/, so we&#8217;ll create a new one named &#8216;local.schema&#8217;:</p>
<pre>sudo vi /etc/ldap/schema/local.schema

# Copied and pasted from the 'mail' attributetype,
# with a different OID, Name, and Desc
attributetype ( 0.9.2342.19200300.100.1.3.1
        NAME ( 'maildrop' )
        DESC 'Courier alias, will be used to deliver mail to'
    EQUALITY caseIgnoreIA5Match
    SUBSTR caseIgnoreIA5SubstringsMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )

# Subclass of inetOrgPerson, with a different
# OID, Name, Desc, and MUST
objectclass     ( 2.16.840.1.113730.3.2.2.1
    NAME 'courierAliasPerson'
        DESC 'Courier mail alias person'
    SUP organizationalPerson
    STRUCTURAL
        MUST (  mail $ maildrop )
        MAY (
                audio $ businessCategory $ carLicense $ departmentNumber $
                displayName $ employeeNumber $ employeeType $ givenName $
                homePhone $ homePostalAddress $ initials $ jpegPhoto $
                labeledURI $  manager $ mobile $ o $ pager $
                photo $ roomNumber $ secretary $ uid $ userCertificate $
                x500uniqueIdentifier $ preferredLanguage $
                userSMIMECertificate $ userPKCS12 )
        )</pre>
<p>Save and exit your editor, then add this new schema file near the top of your slapd.conf, underneath the existing schema declarations:</p>
<pre># Schema and objectClass definitions
include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/inetorgperson.schema
# Our new courier schemas
include         /etc/ldap/schema/local.schema</pre>
<p>Let&#8217;s go ahead and import 1 alias for testing. If 1 works, they all should work!</p>
<pre>cat &lt;&lt;__EOD__ &gt;/tmp/testalias.ldif
objectClass: top
objectClass: courierAliasPerson
cn: bob
sn: bob
mail: bob@example.local
maildrop: my-email-address@gmail.com
__EOD__

sudo slapadd -vv -f /tmp/testalias.ldif
sudo chown -R openldap: /var/lib/ldap/</pre>
<p>At this point we are done with the local ldap stuff for now. Let&#8217;s mess with courier&#8217;s ldap alias config file, stored at /etc/courier/ldapaliasrc .  This is what mine ends up looking like, minus all the comments:</p>
<pre>LDAP_ALIAS              1
LDAP_SERVER             localhost
LDAP_PORT               389
LDAP_NUMPROCS           5
LDAP_BASEDN             ou=aliases, dc=example, dc=local
LDAP_BINDDN             cn=admin, dc=example, dc=local
LDAP_BINDPW             my_awesome_password
LDAP_TIMEOUT            5
LDAP_MAIL               mail
LDAP_MAILDROP           maildrop</pre>
<p>Replace the LDAP_BASEDN, LDAP_BINDDN, and LDAP_BINDPW appropriately. Note, the LDAP_BINDPW is your password in plain text, so make sure this file isn&#8217;t world readable!</p>
<p>If you were to start all of your services (slapd, courier-mta, courier-ldap, etc) right now, would it work? NO! Instead, you would get this mysterious error message:</p>
<pre>Jul  8 00:56:09 localhost courieresmtpd: error,relay=::ffff:127.0.0.1,
ident=user,from=&lt;testuser@gmail.com&gt;,
to=&lt;bob@example.local&gt;: 400 Service temporarily unavailable.</pre>
<p>No details at all. This error message shows up because the &#8216;courierldapaliasd&#8217; daemon is not running. Let&#8217;s fix that, and make sure the service starts up properly in the future.</p>
<pre>ln -s /usr/sbin/courierldapaliasd /etc/init.d/
update-rc.d courierldapaliasd defaults
/etc/init.d/courierldapaliasd start</pre>
<p>One last thing - if you have been following along, you might notice I didn&#8217;t start the other services. Let&#8217;s do that too.</p>
<pre>/etc/init.d/slapd start
/etc/init.d/courier-mta start
/etc/init.d/courier-ldap start
/etc/init.d/courier-imap start
/etc/init.d/courier-authdaemon start</pre>
<p>There we have it. You should be able to send a message to our test user &#8216;bob@example.local&#8217;, and it will forward to the email address you specified. From this point forward you can populate your ldap database with similar entries.</p>
<p>Keep in mind that each courierAliasPerson entry can have a potentially unlimited number of &#8216;maildrop&#8217; attributes.</p>
<p>Wanna test it? (everything I typed in appears in bold)</p>
<pre>examplemail01:~# <strong>telnet localhost 25</strong>

Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 [examplemail01] [UBE Prohibited] Go ahead...
<strong>HELO fakehelo</strong>

250 examplemail01 Ok.
<strong>MAIL FROM: &lt;fakename@gmail.com&gt;</strong>

250 Ok.
<strong>RCPT TO: &lt;bob@example.local&gt;</strong>

250 Ok.
<strong>DATA</strong>

354 Ok.
<strong>Hi!

.</strong>

250 Ok. 4872CE5A.00005C7B</pre>
<p>My logs show the sweet alias success that I crave.</p>
<pre>Jul  7 19:18:08 localhost courierlocal: id=00003F83.4872CE5A.00005C7B,
from=&lt;fakename@gmail.com&gt;,addr=&lt;my-email-address@gmail.com&gt;,
size=187,success: Message delivered.</pre>
<p>Hope this saves some time for the rest of you out there <img src='http://mentalrise.com/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /></p>
]]></content:encoded>
			<wfw:commentRss>http://mentalrise.com/2008/07/howto-ldap-aliases-on-courier/feed/</wfw:commentRss>
		</item>
	</channel>
</rss>

<!-- Dynamic Page Served (once) in 0.232 seconds -->
