Sunday, 15 March 2009

Passwords

The issue of 'having a good password' is something that comes up in conversation from time to time although I generally suggest that, even if you think you know you what that means, you should do some research (because things change), I realise that most of my friends won't bother and that it might help of few people, those that can be bothered to read it, if I were to do a write up of my current understanding of what is a good password.

The reason I say 'current understanding', and suggest that things change, is because that is my experience; and I don't just mean my own understanding, but that of the 'industry' as a whole. While there are things that have always been regarded as insecure, there are also lots of things that were regarded as secure but are now regarded as a risk. This is largely because, as the speed of computers has increased, the crackers (people who try to break into systems) have more powerful tools at their disposal. For example I have an old programing book containing code for a 'password generator' that works be randomly choosing a couple of three or four letter words and sticking them together to create a password. These days the crackers use programs that attempt to get in by trying common dictionary words, both forwards, backwards, and stuck together in combinations. These days a password that uses actual dictionary words is regarded as relatively insecure.

A Perfect Password



A perfect password would be a completely random collection of letters, numbers, and punctuation marks. Why? Because if it is truly random then the only way for somebody to crack it is to try every possible combination. This does not mean that such a password is uncrackable; but it means that of all the passwords that we could use, this is the hardest to crack.

So, if we know what a perfect password is, why don't we all use them? And the answer is that we are human and we find them difficult to remember. There's not much point having a great password for your desktop computer if it's written on a post-it note stuck to the monitor; partly because it's could be a security risk and partly because if you lose the bit of paper you are locked out.

The security risk aspect of having a post-it note on your screen depends of course on what the password is for. For example, if I had the root password for my server (at a server farm) written on the side of my monitor at home then the only person who sees it besides me is my wife and I'm pretty confident that she's not interested in hacking my server. The post-it note is inaccessible to a cracker unless they come around to my house and although I am sure there are a whole bunch of folks on the Internet who might like to gain access to my server, I doubt very much that they'll go that far.

Doing The Math



Okay, so I've said that a random collection of characters is best and while that might seem obvious it's worth taking a few moments to consider exactly why that is the case:

If I ask you to pick a letter of the alphabet you have 26 choices. If I ask you to differentiate between upper and lower case that doubles to 52. If I say to include digits then you gain another 10 possibilities giving 62 options. If we add in punctuation marks then we increase it further but I am going to leave them out (I'll explain why later).

So you have 62 options for a single character. Now I ask you for a second character you have 62 choices for that one too. That's 62 options for the first one and 62 options for the second. Thus for our two character 'password' there are 62x62 options (which is 3844 possibilities). Each additional character multiplies the number of possibilities by 62 so by the time we have a 6 character password we have 62x62x62x62x62x62 which is 56,800,235,584 possibilities. Now unless our password happens to be the very last password that a cracker tries, they aren't going to have to try all of them, but with that many possibilities to go at the cracker is going to have to try a hell of a lot, or are they?

Bear in mind that our 56.8 billion possibilities include all possible 6 letter dictionary words, peoples names, and dates of birth. However these will be a relatively small percentage of the total number of options. Just for the fun of it, let's look at dates and let's say that I'm trying to guess your date of birth, wedding anniversary, child's birthday or other 'secret' date that you may have used as a password:

There are 12 months in a year, each of which has a maximum of 31 days. Chances are that your date is within the last 50 years so for a DD-MM-YY date (6 digits) I have 31x12x50 options which is 18600 possibilities. Now that's a lot for a human but a password cracking program could work through them in a matter of minutes.

Add every name and dictionary word, forwards and backwards, into the equation and our cracker program still only has to deal with a tiny fraction of the number of possibilities that it would have to deal with if we use a truly random password. Of course a cracker could write a program to try totally random passwords but they don't need to because many, many people out there will use a name, date, dictionary word or something else and a program that tries these first will give them access to a lot of systems.

How To Remember It



Okay, so now that I've (hopefully) sold you the idea that a password should be random, how do we go about remembering such a password?

Well one option that we already mentioned is to write it down and while there are a lot of cases where this would be a security risk, there are a lot where it is not a problem. I don't have my server password written on a post-it note but I do have a document on my computer that lists a whole bunch of passwords and PIN numbers that I didn't have any choice about and that I don't trust myself to always remember. The file is backed up so there's no chance of me losing it, and it's password protected (with a good password of my own devising) so to get in there a cracker would need to access my computer and crack that password. In other words, it is HIGHLY unlikely, so although the passwords are 'written' down, they are safe. Of course this still leaves me with the problem of how to remember the password that protects the file, and this is where my technique for remembering a random password comes into play, however I now have a confession to make: it isn't random!!!!!

What? Not random? Well, no, but almost. Let me explain:

My wife's name, let's call her Anne, would make a really poor password. First of all because it's only 4 letters and secondly because it's a name. However let's solve the length problem by adding letters from her surname until we have 6. Hell, let's be different and create a 7 letter password. Assuming that our surname is Jones we now have 'AnneJon'.

Now that's still pants as a password and of course if she'd been called Deborah then we wouldn't have needed the extra letters from the surname and it would be even worse. So, to improve things, let's change some of the letters to numbers that look a bit like them such that we get '4nn3J0n'. Now let's reverse it: 'n0J3nn4'.

Immediately it is looking a lot more random however that number swap is a common technique, and so is reversing a word. Plus, a name is a bad starting point in the first place. Clearly this gives us two areas that we can improve on: our seed word and our encryption' technique.

Now we still want to be able to remember this thing so rather than using one seed word, let's use three. Let's say I want a password for my account at Amazon, that my wife's name is Anne Jones and that I was born on the 04/03/64. By converting the site name to upper case and taking a character from each seed in turn we get: AA0Mn4An0Ze3OS6Nm4ith. However, I only want 7 characters so let's take the first 7 (because I can do that in my head without having to write anything down) and I get: AA0Mn4A.

Now that isn't truly random in the sense that it's been generated using two pieces of personal information and a modified (converted to upper case) site name but given the huge number of pieces of information that I could have used as 'seeds' and the huge number of ways in which I could manipulate them, it will be close to impossible for somebody else to guess at. In the example I used the site name, my wife's name, and my date of birth, in that order, and converted the site name to upper case. I could have used my fathers middle name, the registration number of the first car I ever bought, my sister's birthday, the last letter of each word in the first line of the song that was playing when I met my wife, the last 6 digits of my phone number or any number of other pieces of information as seeds. Furthermore I could have 'encrypted' them by reversing them, taking only the first and last letters of the names, using just the odd number letters, omiting vowels, or dozens of other techniques.

The important thing is that rather than using a memorable password I'm using memorable techniques to generate what is to all intents and purposes a random password. If I decide upon a set of seeds and a set of techniques and always use the same ones then I will always know how to generate my passwords. Note that by using the site name (or system name or something that I strongly associate with it) as one of the seeds, I can use the same seeds and my encryption techniques for the others and have different passwords for different sites/systems. Using the scheme above as an example, my password for eBay would be 'EA0Bn4A' and my password from GoogleMail would be 'GA0On4O'. What's more it means that if I register on any forums or shop checkout systems that store member/customer passwords in an unencrypted form, then a malicious person at the company can only see my password for their system; a password that gives them no clue about what I might be using on other systems.

Before we finish, I would just like to step back to my earlier decision to exclude punctuation characters when we were calculating how many possibilities there are for a six character password. Now that I have explained my technique for generating passwords it should be obvious why I did this: because the kind of seeds I suggest don't include punctuation symbols. You could however build in punctuation symbols at the encryption stage. Just in case you are thinking that 56.8 that we calculated before aren't enough.

Domain Names

From time to time I encounter people who need a domain name so I thought I'd share my thinking about choosing one:

Choosing a domain name is like naming a child in that you're as well to give it some very careful consideration because, although it's not impossible to change it again later, it can be rather difficult. In another way however, it's not at all like that because while there are a lot of people called, for example, Andy Slater, there is and can only be, one www.andyslater.com


Things to consider when choosing a domain name:
  1. Availability
    As stated above, every domain name has to be unique so if somebody has already registered the one you'd like, although you may be able to buy it from them for some exorbitant sum, it's probably just a case of hard luck.
    You can find out if a name is available at places like http://www.uk2.net
    On the front page of their site is a box where you can type the domain name that you're interested in registering and click a button to see if it's available. Chances are that your first choice won't be so be prepared for some disappointment and for some considerable time spent thinking up alternatives.
    Please note that if you are planning to ask me to host your website on my server that the whole thing is a lot easier if your domain name is registered via UK2 but please contact me before jumping in.

  2. www.
    Pretty much all domain names start with www. so you don't need to worry about that bit.

  3. .com? .co.uk? .net? .info?
    The bit at the end is called the extension and there are various different ones available. However:

    1. .com is the one that's best known. If people can't remember your extension, .com will probably be the first one they'll try so it's well worth having.

    2. Search engine results show your domain name including the extension. If you've ever used a search engine to find something you want to buy then you'll be aware that much of the time you end up looking at shops in the USA. Amongst the results however you will see sites that have a .co.uk extension and this is a valuable clue that the site is based in the UK. When I'm shopping, I make a beeline for the ones with a .co.uk extension. Thus if you are selling to the UK market, a .co.uk extension can be a bonus.

    There are many other extensions available. Check UK2 as described above for a list of what they have i.e. those available in the UK (you will see other country specific extensions when you're browsing which have to be registered in those countries). However, unless you have a good reason for using something other than .com or .co.uk, I'd stick with those. For a business I'd be inclined to want both.

  4. Name Length
    Short names are best. eBay, Amazon, Google, etc. Short and snappy. I used to run a business from a site called www.themodelmakersresource.co.uk and found that the domain name was too long to fit on till receipts, too long to get printed onto pens for promotional purposes, etc, etc. Doh!

  5. Hyphens and Underscores
    You can't use spaces in domain names but you can use hypens and underscores. If your desired name contains more than one word you could therefore:

    1. Join all the words together: www.themodelmakersresource.co.uk

    2. Use hypens: www.the-modelmakers-resource.co.uk

    3. Use underscores: www.the_modelmakers_resource.co.uk

    Although I said you could use underscores, I recommend that you don't. It's not common practice and is bound to cause confusion; people will mistake them for hypens and spaces.
    Note also that for business purposes it's probably wise to obtain all variants. You can for example access Games Workshop's site with:
    www.gamesworkshop.com
    www.games-workshop.com
    www.gamesworkshop.co.uk
    www.games-workshop.co.uk
    Smart move guys. Note however that eBay, Amazon, Google (businesses that were Internet businesses from day 1) and the like only need half as many domain names to cover all the options. Even smarter.

  6. Memorability
    My experience with The Model Makers Resource has shown me that on the web, unless you can become a household name, you're at the mercy of the search engines if you want people to 'stumble' across your site. Obviously the more memorable your name, the better your chances of people coming straight back to you rather than heading for the search engines. The Model Makers Resource Ltd is too long and clumsy for most folks to remember. There's also an issue about whether "model makers" should be one word, two words, or hyphenated and arguing that your choice is correct according to the dictionary is of little value if potential customers are failing to reach you because they are typing it in wrong.
    It is strange, but it is a fact that I would often hear people outside my shop saying "Oh look, The Model Makers Resource Centre". The sign did NOT have the word 'centre' anywhere on it but for some reason people just seemed to add it on the end. What chance have they got of remembering the domain name if they can't even read the company name off the sign above the shop window correctly?
    It's a bad name and more 'field testing' would have told me that before I invested in it.

  7. Spelling
    If you're a business, having a name that's easy to remember has to be a smart move. Even if you're not a business, obscure spellings, or things that people have difficulty in spelling, are best avoided. Choosing something that you have to explain or spell out every time you tell someone your domain name over the phone is a bad move. Choose something such that when you tell people your domain name, their first guess at how to spell it will be correct.

  8. Keywords
    'Keywords' are words that people type into search engines when they are looking for something. Having a keyword in your domain name can enhance it's position on the list (it's ranking). Perhaps more important, the search engines are fickle after all, is the fact that your domain name is displayed and can be used to say something about you.
    When I was setting up The Model Makers Resource, having the word 'model' in the name was on my list of priorities. Part of the trouble I had finding a domain name was that the word 'model' can be used in more than one context. You've got model kits, catwalk models, data modelling, model citizens and a huge range of other things. As a result, pretty much every domain name I though of was already in use. I did find one short one, models-uk, uk-models or something like that; however, all of the other 'variants' were taken up by competitors, model agencies and in one case a rather nasty porn site. I decided to steer clear.
    If you can slip a keyword into your name it's certainly worth considering but I believe that there are more important issues, as listed above, and I wouldn't compromise them for the sake of inserting a keyword.
    At the end of the day, Boots (the chemists) don't seem to have suffered from having an inappropriate name although one is inclined to wonder what ever became of Mr Chemist the cobbler?


That's about all I want to say on the subject of choosing a domain name. Hopefully you'll find some of it useful. Hopefully I haven't scared you off the idea of having a website altogether. The things above are things to CONSIDER. You don't have to comply with all or even any of it. If you're wanting a website for fun then you can probably ignore most of what I've said. The same is true if you wanted a website to which you can direct people as a means of answering a question that somebody has asked you. If your site is for business and you will want people to be able to find it and remember it without your jotting the name on a bit of paper for the, then the more of the above that you can take into consideration, the better.

HTML Special Characters

This document used to live on one of my websites however it doesn't really fit in there any more. I still need it though, so I've moved it here.

For the benefit of those who don't know, HTML special character codes are codes that you can use when writing HTML content and the exist for a number of reasons:
  1. Some characters don't appear on the keyboard. Special character codes provide a means of entering them.

  2. Some characters, the greater-than character for example, have a special meaning in HTML. If you want a browser to display those character rather than trying to interpret them as the part of an HTML tag, you need to use the special character code.

  3. Some characters are language and/or character set dependent (currency symbols being a good example). You need a way to force the viewers browser to display the correct character. Special character codes provide a way of doing this.

The list below is far from complete. There are many more codes to define all kinds of symbols and foreign characters with accents, umlauts and the like. The following list however shows the codes that I use the most frequently.

CodeCharacterDescription
&&ampersand
&lt;<less-than sign
&gt;>greater-than sign
&nbsp;nonbreaking space
&pound;£pound sterling
&euro;euro
&copy;©copyright
&trade;trademark sign
&reg;®registered trademark
&deg;°degree sign
&plusmn;±plus or minus
&sup2;²superscript two
&sup3;³superscript three
&frac14;¼one-quarter
&frac12;½one-half
&frac34;¾three-quarters
&times;×multiplication sign
&divide;÷division sign

Monday, 31 December 2007

A Brief Safari

I used Safari briefly when I first got my MacBook and also had a dabble with Camino. However I was used to Firefox from my PC days and, more importantly, had been finding FireFTP (an FTP plug-in for Firefox) very useful so I switched back to Firefox. In recent times however I've been using Webmin when I need to upload/download files to/from my servers and haven't used FireFTP in quite a long time. In fact I've shut down the FTP service on my servers as mentioned previously. I've also noticed lately that of the various pieces of software that I use, Firefox is the one that's most likely to lock up such that I have to force it to quit. (Audacity comes in second - but I don't use it nearly as much - and GIMP just bombs out occasionally when I'm rotating images). Given that Apple also claims that Safari 3 is faster than the fox I thought that maybe it was time to give it another try.

Issue number 1 was how to move all my bookmarks from Firefox to Safari but this turns out to be relatively simple. Safari's File menu has an Import Bookmarks option and although I had to search around a bit to find this out, all you need to do is navigate to Firefox's bookmarks file at
~/Library/Application Support/Firefox/Profiles/xxxxxx.default/bookmarks.html
and the job is pretty much done. At the same time I deleted most of the US biased crap that Safari had loaded by default. Grrr.

Issue number 2 was the lack of a "New Tab" button. Apple-T works as a short-cut but when I'm browsing then my hands are more likely to be on the mouse than the keyboard so the lack of a button is, to my mind, a real oversight on Apple's part.

Issue number 3: If you click on a link then under 'normal' circumstances it will open in the current window/tab. You can configure Safari such that holding down the Apple key when you click will open it as a new tab. However if the web site's author has set the link to open in a new 'window' using the target tag, that's exactly what Safari will do: open a new window. Firefox gives you the ability to force such links to open as a new tab. Safari doesn't so unless you happened to be pressing the Apple key at the same time, you end up with a new window. Grrr.

Issue number 4 is the Google search box up there on the toolbar. Now while Firefox merely defaults to Google.com but allows you to use other search engines, Safari doesn't give you any choice at all! According to what I've read on the web, this is all about money. It hadn't occurred to me before but it's fairly obvious when you think about it that sooner or later, anybody manufacturing a half decent browser with access to several search engines is going to be offered a few quid by one of them to have theirs at the top of the list.

Now while whatever arrangement Apple and Google have come to is, I'm sure, all very nice for them, it's a bit of a bummer for us. As a matter of fact I do use Google most of the time but I like to use Google.CO.UK not Google.COM and the current set up won't even let me change that. I also use Wikipedia fairly regularly and while it generally comes up with a high rank on most Google searches, that isn't really the point. Putting Google.co.uk and Wikipedia links on the bookmarks bar is probably the easiest option however, as the Customise Toolbar option presents the URL box and Search mechanism as a single entity you're pretty much forced to leave it there as a constant reminder that it's there for Google's benefit and bollocks to the rest of us. Grr.

I began to look for other options and found details of a couple of hacks (which may or may not work with version 3) for changing the search engine, and also for converting the New Bookmark button into a New Tab option, however both involved messing with the Safari code in ways that didn't appeal. Over on macupdate I found AcidSearch 0.7b4 and Safari Enhancer 3.3.1 which looked promising. The latter even offers a new tab button but on closer inspection I realised that neither of them supports version 3 of Safari. Doh!

By this point I was getting a little cheesed off with the whole thing and had pretty much decided that I was going to switch back to Firefox. Along the way however I had noticed Inquisitor 3. I hadn't paid much attention as it describes itself as "Spotlight for the Web", thus making it sound far in excess of what I was looking for. However I had already begun to draft this blog entry (so that in 6 weeks time I could remind myself why I was still using Firefox), and I figured I'd give Inquisitor a quick try for the sake of completeness.

My initial impressions of were good and if the search is your only major gripe about Safari then I suggest you check it out. However it still isn't as quick 'n' easy as the one on Firefox.

Additionally:

1. I like the error console on Firefox which has proved extremely useful on a number of occasions for solving problems with Javascript (Safari doesn't appear to have one).

2. The "View Source" option on Firefox has a nicer display. Not something I use a lot but it comes in handy.

3. I also like the Firefox option to switch off styling and get some idea of what a page looks like to a bot or a text reader.

Okay, so maybe I'm being a bit petty now, but add those niggles to my earlier gripes and it probably won't come as any great surprise when I tell you that the Safari icon is no longer in my dock and that I'm finishing off this post in Firefox.

I guess I could try Internet Explorer instead.

Ha ha.
Ha ha ha.
Ha ha ha ha ha ha ha.

Wednesday, 31 October 2007

Nobody (A Halloween Story)

A slight detour from my usual subject matter today because The Goldfish has cajoled me into writing a 'spooky' story for JackP's Halloween Story Collection. So, if you are seated comfortably, we shall begin:


It came as no surprise to Alan that nobody met him at the school gate. For a short while after mummy went to live with the angels, daddy had come instead. But life had to go on they said and he was a big boy now. Daddy had to go back to work and Grandpa John lived only just around the corner. Too far for his old legs, but near enough for a big boy like Alan to walk there on his own.

So nobody took Alan's hand at the gates and enquired about his day in school. Alan forgot to count the cedar trees at the side of the road and recalled the day's events while walking to the place where it was safe to cross. Nobody watched over him as he looked right and left, and right again, before going straight across the road.

Just a little further along, and around the corner, and there was Grandpa John looking our from the window of his house. The door was open before Alan had opened the gate and run up the garden path, and as Grandpa John welcomed him in Alan turned and waved good bye.

"See you tomorrow" he shouted.

Grandpa John looked out to the empty street. "Who are you calling to?" he asked.

"Oh, nobody" Alan replied.

Friday, 12 October 2007

Starter Motor Bush Puller

I remember my friend Tex commenting that my father "wasn't a bodger". An odd thing to say and while it wasn't a compliment, it wasn't an insult either. Merely an observation.

You see my father, in his capacity as a bench joiner had amassed an extensive collection of tools. Some of them sat in cupboards and drawers for years on end between uses however when they were used, having the right tool for the job made a world of difference. Not having the right tool, on the very rare occasions that it happened, was an intense source of frustration to him.

Tex on the other hand, though also a joiner, made his living going out and about fixing things. His need to be mobile meant that he could only carry a relatively small number of tools and he often found himself having to use things for purposes other than the one for which they were strictly intended, and having to implement less than perfect solutions in order to just get the job done - or "bodging" as he called it.

The reason this comment, which was made some 15 years ago, came to mind is that I have just installed a new starter motor in my Bay, and while the removal of the various nuts and bolts went a lot easier than I expected, the bush seemed determined to stay firmly in the clutch housing.

Not wanting to damage anything, I abandoned the job overnight in order to post on VZi asking how to remove it. Moby5153 came to my assistance as he has done before and pointed out that there's a special tool available for the job, or that I could tap into it with an M12 tap.

I didn't have an M12 tap but as the bush is copper, a high tensile M12 bolt did the job quite nicely, tapping into it and then pushing the bush out as the bolt made contact with the clutch housing. The new starter motor is now in place and all seems well.

Now, while this might be the first starter motor bush I've ever had to deal with, I dare say it won't be my last so I'm looking at that special tool in the VW Heritage catalogue and thinking that perhaps I should add the 40 quid item to my shopping list. Thus I find myself with miniature versions of my father and Tex sitting on my shoulders like angel and demon (although I'm not sure which is which), with my father reassuring me that it'll be 40 quid well spent, and Tex shaking his head in despair.

Monday, 8 October 2007

Red 9 Design EZRider - Shocks

It's taken me a couple of days longer to post this than I expected. Damned CFS. However:

In my previous post I explained my reasons for purchasing Red 9 Design's EZRider kit and my thoughts regarding the safety concerns expressed by some. In this post I'll describe what I've installed so far, namely the shocks/dampers (which I will refer to as "shocks" from here on).

The EZ Rider kit consists of 2 elements:

The first is a pair of metal bars that replace the torsion bars. These are metal rods with the necessary dimples machined into them and swivelling ends that will allow the trailing arms to pivot freely.

The second element is a pair of Spax coil over shocks.

In order to lower a van from stock height you need the rods in place or the torsion bars will continue to determine it's height, however as my intention was to raise a van that had been lowered too far it occurred to me that the shocks alone might do it. Given that they were going to be easier to fit than the rods I decided to try them on their own first and see what happened.

The only problem I encountered in fitting the shocks was that the bushes in the lower end of the dampers wouldn't go onto the spindles. I didn't measure it but we're talking about maybe a thousandth of an inch too tight, two at most. Given that this was an issue with the shocks I decided to phone Spax as opposed to Red 9 Design and they suggested, given that it was such a small amount, that I check there was no rubber fouling things and if there wasn't then maybe making the hole in the bushes a little bigger. There was no problem with rubber and I found that a 12mm drill went snugly thought the bushes. Running the drill backwards and forwards a few time removed a tiny amount of metal after which they went snugly onto the spindles. Everything was easy after that and it was unnecessary to compress the springs.

Before moving on to the results I'd just like to mention an interesting aspect of the phone call to Spax: while talking to them I found out that these shocks are made especially for Red 9, to their specification. Given that I was wanting to raise my van and was speculating that the shocks alone may be enough to do, I had wondered whether the purchase of a pair of coil over shocks alone might be enough. Indeed I asked VWHeritage about using their GAZ coil over shocks for this purpose however they doubted that their springs would be powerful enough to actually raise the van. I didn't fancy gambling 200 quid on something that might not work. Better I thought to pay 320 for something that WILL work even if it turns out that I don't need the entire kit.

So how about the results?

Here she is before:



and after the shocks were fitted:



As you can see she's now about 2.5" higher at the front than she was before; which is just what I wanted because I now have about 4.5" inches of ground clearance under the low points on the beam.

She still has low profile tyres on the front and although I'll leave them in place for now I'll change them to something bigger when they need changing. That'll take her up about another half an inch however at that point I might use the adjustments on the coils to bring her down half an inch, maybe a full inch.

She is actually about an inch higher at the front than she is at the back now but I'd like to take her up an inch at the back. At the moment you have to deflate the tyres to get them out from under the rear arches. Going up an inch will remove that hassle.

As for the ride, I can't really say at the moment. To be honest it doesn't feel much different but:

1. I haven't driven her much since doing it.

2. I haven't fitted the torsion bar replacements.

3. I haven't touched the adjustment screws on the shocks.

I'll report back on the ride in a few weeks time. By then I'll have done a few more journeys and will have Dee's opinion too. Up until now she's been complaining that if I couldn't improve it she'd have to invest in some sports bras so we'll have to see how the ol' bounceometers rate it now. I may also have twiddled with the adjusters (on the shocks, not on the bounceometers).

What I do about the torsion bars is another issue. As I said before, if I were lowering the van I'd have to swap them but given what I'm doing I can't really see much point. As I understand it, it can't improve my ride as her height is already being governed by the springs on the shocks i.e. the torsion bars ain't doin' nuffin' guv. The rubber seals on the ball joints are fubar (torn up, I've been told, as a consequence of her being lowered to much) so maybe I'll swap the bars when I deal with those rubbers. Maybe not. I haven't decided yet. At the moment I'm just chuffed that I don't have to worry about scraping the beam on every little bump in the road.