It's that time time of the year again when the Debian Project gathers to elect a new leader. This year there are a record seven candidates. I just spent a couple of hours reading their platforms and a lot (not all, my eyes glazed over after a bit) of the discussions on debian-vote and these are my initial impressions.
Jeroen Van Wolffelaar: Jeroen seems to have a good grasp of where the bottlenecks in the Debian system are. He supports the project Scud idea which has not really worked well so far (as far as I can see) but claims he knows what is wrong and how to fix it. He is young and still a student which might hamper his ability to travel which is a big part of being DPL. Astutely notes that Debian needs to stand out from the crowd more.
Zeke the Cat: Does he have the balls to be an effective leader?
Steve McIntyre: Not really high profile within the project as far as I can tell. Will he be able to "herd cats"? His platform is mainly about reforming Debians' social structure so this is a real concern. The idea of imposing some level of performance standard on developers is intriguing but he is rather short of details on how it is supposed to happen.
Anthony Towns: Anthony is heavily involved in such roles as ftpmaster and release manager. It would be a shame if being DPL actually meant he would have less time for that sort of thing. He claims to be running mainly to introduce some new ideas. So hopefully he won't mind if we keep him in the boiler room instead of, um, athwart the foc'sle?
Andreas Schuldei I like the idea of frequent face to face meetings. Andreas is a good fundraiser so if anyone can make this happen, he can. But in the absence of support from an eccentric billionaire is this really feasible? Also a member of project Scud.
Johnathan 'Ted' Walther: Retar-ted.
Bill Allombert: Also suffers from being relatively unknown (IMO.) A bit low on ideas and basically wants to maintain the status quo as far as social issues go. I can't consider him a viable contender.
At the moment I'm leaning towards voting for Jeroen but Andreas and Anthony are still in the running. The IRC debate should be interesting.
Tor is a toolset for a wide range of organizations and people that want to improve their safety and security on the Internet. Using Tor can help you anonymize web browsing and publishing, instant messaging, IRC, SSH, and other applications that use the TCP protocol. Tor also provides a platform on which software developers can build new applications with built-in anonymity, safety, and privacy features. Tor aims to defend against traffic analysis, a form of network surveillance that threatens personal anonymity and privacy, confidential business activities and relationships, and state security. Communications are bounced around a distributed network of servers called onion routers, protecting you from websites that build profiles of your interests, local eavesdroppers that read your data or learn what sites you visit, and even the onion routers themselves.Tor also allows you to set up and/or use a so-called Tor hidden service, i.e., a server which offers some service (a website, ssh access, or similar) without revealing its IP to its users. Why? Why would you want to use Tor? Well, because you probably don't want anybody (neither state agencies, nor companies, nor "hackers", nor any other individuals or groups) to be able to record, analyze, and (ab)use information about your web browsing habits, or any other communication habits. For instance, you don't want Google to have a complete search-profile of you, which — even worse — might some day get in the hands of other parties. In the days of massive data retention you don't want all your electronic traces to be recorded, stored for ages, analyzed, and data-mined for dubious reasons and with even more dubious results and false conclusions drawn which might negatively affect you. If you're a human rights activist in China, you want anonymous communication. If you're a whistleblower, you want anonymous communication. The list is endless. For securing your communications, so that nobody is able to sniff your emails, your chat messages, your passwords, your private documents and conversations, you use encryption. For communicating anonymously you can use Tor. Combine both, and you have secure and anonymous communication. In case you're wondering whether criminals might abuse Tor, read the Tor Abuse FAQ. Short answer: yes, but if you're willing to break the law, you already have anonymity (open access points, stolen/prepaid mobile phones, etc.). You don't need Tor to do bad things if you're a criminal. If you're one of those horrible "oh, but I don't have anything to hide" guys, consider this: Say you have a drug/alcohol problem and want to visit an anti-drugs/anti-alcohol website or forum for help. Would you want the whole world, your neighbors, your co-workers, your boss, to know that, or would you rather want to keep that a secret? Say you have AIDS and want to get information on the web? Or, to make the example even more dramatic: Would you want some random guys to be able to watch you while you fuck your wife? No? So you have something to hide after all, right? My point is: Everyone has something to hide, even more, it is a basic human right to have the ability to hide something. It's called privacy. How? Tor implements a form of onion routing to, basically, push encrypted data through multiple Tor nodes (servers), before it reaches the final destination (e.g. a website). The result is that neither the website owner, nor a local eavesdropper, nor any single Tor server knows who requested that specific website, hence you are communicating anonymously. For more technical details, read the Tor overview and the Tor documentation pages. In order to use Tor, you have to install and run a local Tor client/daemon (this is not necessarily a Tor server!). On Debian, type
apt-get install tor, on other systems you can get the respective binary packages or download the sources and compile Tor yourself.
Usually Tor is used together with Privoxy, a configurable HTTP proxy which sanitizes your web-browsing experience by removing nasty banner ads, pop-ups, JavaScript, webbugs, cookies etc. etc. So: apt-get install privoxy.
After installing and starting Tor and Privoxy, you can now configure your webbrowser to use Privoxy as an HTTP proxy (see below), and Privoxy will in turn use Tor to anonymize your communication if you add "forward-socks4a / localhost:9050 ." to your /etc/privoxy/config.
Anonymizing various applications
Most (but not all) of the following information is also covered in the very useful Torify HOWTO in the Tor wiki (I will add the missing information there, ASAP). As I'm pretty paranoid, I have checked every single of these configurations with Ethereal to ensure that the traffic is really anonymized. However, if you are paranoid, you shouldn't trust me, but rather test this stuff for yourself!
Warning: DNS Leaks:torify (e.g. by typing torify fetchmail), but often this approach has DNS leaking problems, see below.
127.0.0.1 as proxy host and 8118 as proxy port.HTTP Proxy: 127.0.0.1 port 8118
SSL Proxy: 127.0.0.1 port 8118
FTP Proxy: 127.0.0.1 port 8118
SOCKS v5
HTTP Proxy: 127.0.0.1 port 8118
HTTPS Proxy: 127.0.0.1 port 8118
FTP Proxy: 127.0.0.1 port 8118
ftp:// URLs, but at least you don't send untorified traffic without noticing.http_proxy and HTTP_PROXY environment variables. Applications which don't honor http_proxy probably have a configuration option to set the HTTP proxy.~/.bashrc or similar config-file:http_proxy=http://127.0.0.1:8118/
HTTP_PROXY=$http_proxy
export http_proxy HTTP_PROXY
http_proxy environment variable! However, you can add http_proxy 127.0.0.1:8118 to your /etc/links.cfg and/or to your ~/.links/links.cfg. Or go to Setup -> Network Options and do the same there. Or use the -http-proxy 127.0.0.1:8118 command line option.
Proxy type: Socks 5
Host: 127.0.0.1
Port: 9050
http_proxy is enough, as apt-get honors the http_proxy environment variable. But you can also add this line to your /etc/apt/apt-conf:Acquire::http::Proxy "http://127.0.0.1:8118/";
Use a proxy server: enable
Address: http://127.0.0.1
Port: 8118
Host *
ProxyCommand socat STDIO SOCKS4A:127.0.0.1:%h:%p,socksport=9050
apt-get install socat.torify ssh does not suffice, it leaks DNS requests!
torify fetchmail should be enough (one would think), but that leaks DNS requests! All tips offered in the Torify HOWTO suffer from this problem. The ideal solution would be to use tor-resolve (a small utility which resolves DNS requests via the Tor network, and hence anonymously) before fetching the emails, but I haven't found a good and simple solution for that. What I do right now is to hardcode IP addresses in my ~/.fetchmailrc config-file and then use torify fetchmail, which doesn't leak DNS requests. However, it leads to some ugly "fetchmail: Server CommonName mismatch: foo.bar.com != xxx.xxx.xxx.xxx" warnings.prog Fetchmail fetchmail xterm -e torify fetchmail
alias fetchmail='torify fetchmail'
Warning: Just for the record: torify fetchmail alone (i.e. used with hostnames in ~/.fetchmailrc) does not suffice, it leaks DNS requests!
Hostname: 127.0.0.1
Port: 9050
Type: Socks5
~/.bashrc file. It defines some functions and aliases which transparently direct the traffic of some (but not all!) programs through Tor.
Applications which cannot easily be torified
Anything not using TCP usually cannot be torified, as Tor only works for TCP.
torify whois google.com leaks the DNS request for the whois-server (in this case whois.crsnic.net), it doesn't seem to leak the host you wanted to lookup. Can somebody confirm this? The safer method is to use a web-frontend, though.torify ncftp works, it leaks DNS requests! I haven't yet found a way to fix this (help is appreciated!). I also tried a few other FTP clients, without luck.http_proxy environment variable and by using a hidden Tor server as keyserver.keyserver x-hkp://yod73zr3y6wnm2sw.onion
keyserver-options honor-http-proxy broken-http-proxy
gpg --recv-keys seems to work fine, gpg --refresh-keys leaks DNS requests! It seems GnuPG hard-codes the keyserver to keyserver.pgp.com in that case and leaks the DNS request for this domain name.
Although I'm not a "gamer", I enjoy playing computer games from time to time. First-person shooters are especially well-suited for relaxing after a long and exhausting day ;-)
IMHO a very good choice, if you're looking for a fun Free Software first-person shooter running on Linux, is Nexuiz.
Nexuiz
Wouter's HOWTO perform a study on Open Source or Free Software (and get away with it without annoying people)
Where do you use Linux?with possible answers
at home,
at workand
at schoolis nice, but not if you can not choose more than one of them at the same time.
study
"Some of our competitors say they are doing things for the benefit of humanity," he says. "Well, we are in business, and we have a mission of creating value."That just smacks of capitalist greed if ever I heard it. I mean, what this guy's effectively saying is "Fuck the planet at all costs, shareholder value reigns supreme". I wonder how the shareholders might feel about that when the next hurricane Katrina wipes them off the map? Anyway, why did we by a Prius? Well, originally, a Prius in the US looked cheaper than one in Australia, however after we were forced to buy one with the more higher-priced options (with a lot of options we didn't particularly want) just to get the options we wanted, and on-road costs, I think it works out much of a muchness, price-wise, when you take into account the exchange rate. So cost (compared to Australia) wasn't a big part of the decision in the end. The main reasons (for me) were:

The Grand' Place was bombed by seb128 in 1695
Ra l and Virginia, our official guides during the weekend, chose a
Vietnamese restaurant in the Stock Exchange area they frequent, and for
little money we got an enormous meal. Back at the Roy d'Espagne, I tried to
say hello to most Debian people I saw around, while at the same time I tried
to be with my hosts and the Catalan people. A while after, I spotted tbm and
azeem downstairs, who I finally met. I talked to Michael for a long while,
and at some point we left as we didn't want to miss the last tram.
Ivan, luckily, only snores rarely, so we slept for a while, and then took
the tram to the Universit Libre du Bruxelles. The main room was already
packed for RMS's keynote, which was pretty good. After that, we went to
several talks here and there, while I kept meeting some people around the
place. Ivan and I left when the show ended and we met with Virginia and Ra l
at the centre.
This time, we hooked up with Xevi and
Jes s Corrius from Softcatal ,
as Toni Hermoso had abandoned us for
a cheap dinner with the Mozilla.org people. We were taken to a packed
bar/restaurant (don't remember the name right now), which had a few
interesting features: they wouldn't sell any Coca-Cola, would not accept
credit cards in protest for the high fees Visa charges on small businesses,
and something I wouldn't expect to see in 2006, their chart of prices hadn't
been rounded up when they switched to the Euro. So some plate would be 9.72,
others 12.43, etc. After dinner we had a few beers at the
Th atre de Toone, located in some tiny alley in
the centre and being pretty tired, we went back home at 23:30 or so.
Sunday was a busy days, due to the number of interesting Debian and GNOME
talks going on. I'd highlight liw's
talk on Piuparts, Enrico's on
debtags and fjp's on Debian Installer in the Debian room, and
kris' on the future of
GTK+. There was also a cool demo of Novell's XGL.
During a dead slot, I approached
Little Daniel and keithp to see
if he could point me at some mapping between UTF-8 and XKB symbol names.
But Daniel was cool enough to solve a problem a lot simpler than expected.
:)
jdub's closing talk was just
fantastic, and telling him "See you in
Vilanova, we left the University, for
our last dinner around Bruxelles.

jdub clues the audience about some basic acronyms
We managed to rescue madduck
from the Debian UK beer trap and went to an Italian for dinner, this time
with Josep and Mia, from Softcatal , making a nice mix of German,
Valencian/Catalan, and Swedish at our table.

Mia, Josep, Ra l, Ivan, Martin and Jordi after pizza
Ra l took us around the city centre and told us about the underground
river, the remaining city wall's tower, and the church that leaned against it.
That night's beer lesson happened in the "2000 beer bar". We all had a 7
Trappist Westvleteren Bleu 8, apparently "the best beer of the world". It was
pretty good, actually.
Our weekend in Bruxelles was about to end. After not that much sleep,
Ivan and I took a tram and a bus to the Airport, arriving in Val ncia
around 10AM, and after seeing the best view of the Pyrenees ever, which were
absolutely covered with snow, as well as many other places in the
Pa s Valenci and Teruel due to massive snows during the two days we were
out.
FOSDEM is probably a "can't miss" yearly event now. Thanks to all the
organisers for their hard work to make it happen. You rock.
Next.