Search Results: "ag"

21 April 2010

Julien Blache: rEFIt on x64: finally fixed

When I got my Mac Mini, one of the very first things I did was to test the Debian build of rEFIt on the machine, given the EFI firmware is x64 on the newer machines whereas it s ia32 on my MacBookPro; it was the very first time I could test the x64 build. And the results weren t good: some images couldn t be loaded, and it all seemed to be random. Disabling optimization in both GNU EFI and rEFIt for the x64 builds helped somewhat, at least it made rEFIt reliable enough to be usable. Now, with this new release, I started getting error messages, requiring a key press before the menu would be displayed. It s annoying but it s also very helpful as I now had an error message to work with, and even if the error message wasn t reliable, it would still point me to some part of the code. The message was: Invalid argument. On x64, the use of a call wrapper is mandatory because the EFI x64 calling convention doesn t match the calling convention of the ELF executables we re building and later disguising as EFI executables. The call wrapper has always been the prime suspect in this issue, it d be an obvious candidate for anyone looking at this issue. Today, digging into the issue with some new data, I realized what the problem was: when using the call wrapper, all arguments need to be of the UINT64 type. That s the type the call wrapper uses when extracting the arguments from its va_list. Introduce some more macros on top of the call wrapper, build, test: voila, it s fixed! That was tricky one. Let s sum it up for the search engines: all the arguments to the EFI interface called through uefi_call_wrapper() in GNU EFI need to be cast to UINT64. rEFIt 0.14-1, available in unstable in a couple hours. Next, I ll see if I can reenable optimization in both GNU EFI and rEFIt.

Russell Coker: Upgrading a SE Linux system to Debian/Testing (Squeeze)

Upgrade Requirements Debian/Squeeze (the next release of Debian) will be released some time later this year. Many people are already upgrading test servers, and development systems and workstations that are used to develop code that will be deployed next year. Also there are some significant new features in Squeeze that compel some people to upgrade production systems now (such as a newer version of KVM and Ext4 support). I ve started working on an upgrade plan for SE Linux. The first thing you want when upgrading between releases is a way of supporting booting a new kernel independently of the other parts of the upgrade. Either supporting the old user-space with the new kernel or the new kernel with the old user-space. It s not that uncommon for a new kernel to have a problem when under load so it s best to be able to back out of a kernel upgrade temporarily while trying to find the cause of the problem. For workstations and laptops it s not uncommon to have a kernel upgrade not immediately work with some old hardware, this can usually be worked around without much effort, but it s good to be able to keep systems running while waiting for a response to a support request. Running a Testing/Unstable kernel with Lenny Policy deb http://www.coker.com.au lenny selinux In Lenny the version of selinux-policy-default is 2:0.0.20080702-6. In the above APT repository I have version 2:0.0.20080702-18 which is needed if you want to run a 2.6.32 kernel. The main problem with the older policy is that the devtmpfs filesystem that is used by the kernel for /dev in the early stages of booting [1] is not known and therefore unlabeled so most access to /dev is denied and booting fails. So before upgrading to testing or unstable it s a really good idea to install the selinux-policy-default package from my Lenny repository and then run selinux-policy-upgrade to apply the new changes (by default upgrading the selinux-policy-default package doesn t change the policy that is running we consider the running policy to be configuration files that are not changed unless the user requests it). There are also some other kernel changes which require policy changes such as a change to the way that access controls are applied to programs that trigger module load requests. Upgrading to the Testing/Unstable Policy While some details of the policy are not yet finalised and there are some significant bugs remaining (in terms of usability not security) the policy in Unstable is usable. There is no need to rush an upgrade of the policy, so at this stage the policy in Unstable and Testing is more for testers than for serious production use. But when you upgrade one thing you need to keep in mind is that we don t to support upgrading the SE Linux policy between different major versions of Debian while in multi-user mode. The minimum requirement is that after the new policy package is installed you run the following commands and then reboot afterwards: setenforce 0
selinux-policy-upgrade
touch /.autorelabel If achieving your security goals requires running SE Linux in enforcing mode all the time then you need to do this in single-user mode. The changes to names of domains and labeling of files that are entry-points for domains is significant enough that it s not practical to try and prove that all intermediate states of partial labeling are safe and that there are suitable aliases for all domains. Given that you need to reboot to install a new kernel anyway the reboot for upgrading the SE Linux policy shouldn t be that much of an inconvenience. The relabel process on the first boot will take some time though. Running a Lenny kernel with Testing/Unstable Policy In the original design SE Linux didn t check open as a separate operation, only read/write etc. The reason for this is that the goal for SE Linux was to control information flows. The open() system call doesn t transfer any data so there was no need to restrict access to it as a separate operation (but if you couldn t read or write a file then an attempt to open it would fail). Recent versions of the SE Linux policy have added support for controlling file open, the reason for this is to allow a program in domain A to open a file and then let a program in domain B inherit the file handle and continue using the file even if it is not normally permitted to open the file this matches the Unix semantics where a privileged process can allow an unprivileged child to inherit file handles or use Unix domain sockets to pass file handles to another process with different privileges. SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 Unfortunately when support was added for this a bug was discovered in the kernel, this post to the SE Linux mailing list has the conclusion to a discussion about it [2]. The symptom of this problem is messages such as the above appearing in your kernel message log. I am not planning to build a kernel package for Lenny with a fix for this bug. The command dmesg -n 1 will prevent such messages from going to the system console which is something you want to do if you plan to login at the console as they can occur often.

Jan Hauke Rahm: Mini DebConf 2010 Berlin. See you there?

Hi everyone!Mini DebConf 2010 Berlin - I'm attending I hope you all have already seen at least parts of our preparation for a Mini DebConf in Berlin this year. There are various posts on planet, some mails on -project and -events-eu and as I saw just today even identi.ca is not spared. If you haven t heard of it, this is your chance. Every year the LinuxTag (Linux day) is a four-day event in Berlin, Germany, likely comparable to other OpenSource events. It provides talks, discussion and a lot of booths of various Free Software projects. This year s LinuxTag will be on June 9th till 12th. Since it s held on a huge fairground, we were able to get quite some piece of it for our own use. We will have two areas, one for talks, the other as a hack lab and use right the middle of the LinuxTag for the Mini DebConf: June 10th and 11th with the hack lab open all through the night of course. Finding sponsors was the hardest deal in the beginning and we re not done with it yet. We got enough money, though, to make the decision and we still hope to get everything covered. Luckily we also have hardware sponsors and help on various issues we would not be able to deal with on our own. What s still missing, is you! :) The schedule for the talks is almost full, yet the hack lab could need more man power. Our idea is since we will be in freeze by then, right? to do a BSP incl. help for newbies. That means we will not only try to help users, we also would like to teach how to squash bugs and thus attract possible maintainers and other contributors. All that of course only works if we are enough people there. Now I understand this might seem to be only attractive to german developers as most of the talks will be held in german. But I strongly believe we can deal with it if you don t speak german. :) And at least on the first day of the event, you can meet our new DPL zack who will have the pleasure to provide the opening talk. Yay! Having said all this, you are more than invited to attend and help. Find more info (and a way to offer help) in the debconf wiki and enjoy more press announcements within the next few weeks. http://wiki.debconf.org/wiki/Miniconf-LT-Berlin/2010 On OFTC:
/join #debian-miniconf-berlin

Jan Hauke Rahm: Mini DebConf 2010 Berlin. See you there?

Hi everyone!Mini DebConf 2010 Berlin - I'm attending I hope you all have already seen at least parts of our preparation for a Mini DebConf in Berlin this year. There are various posts on planet, some mails on -project and -events-eu and as I saw just today even identi.ca is not spared. If you haven t heard of it, this is your chance. Every year the LinuxTag (Linux day) is a four-day event in Berlin, Germany, likely comparable to other OpenSource events. It provides talks, discussion and a lot of booths of various Free Software projects. This year s LinuxTag will be on June 9th till 12th. Since it s held on a huge fairground, we were able to get quite some piece of it for our own use. We will have two areas, one for talks, the other as a hack lab and use right the middle of the LinuxTag for the Mini DebConf: June 10th and 11th with the hack lab open all through the night of course. Finding sponsors was the hardest deal in the beginning and we re not done with it yet. We got enough money, though, to make the decision and we still hope to get everything covered. Luckily we also have hardware sponsors and help on various issues we would not be able to deal with on our own. What s still missing, is you! :) The schedule for the talks is almost full, yet the hack lab could need more man power. Our idea is since we will be in freeze by then, right? to do a BSP incl. help for newbies. That means we will not only try to help users, we also would like to teach how to squash bugs and thus attract possible maintainers and other contributors. All that of course only works if we are enough people there. Now I understand this might seem to be only attractive to german developers as most of the talks will be held in german. But I strongly believe we can deal with it if you don t speak german. :) And at least on the first day of the event, you can meet our new DPL zack who will have the pleasure to provide the opening talk. Yay! Having said all this, you are more than invited to attend and help. Find more info (and a way to offer help) in the debconf wiki and enjoy more press announcements within the next few weeks. http://wiki.debconf.org/wiki/Miniconf-LT-Berlin/2010 On OFTC:
/join #debian-miniconf-berlin

Dirk Eddelbuettel: R / Finance 2010 presentations

Last Friday and Saturday the second R / Finance conference took place in Chicago on the UIC campus. As a co-organizer, it was a great pleasure to see so many users of R in Finance---from both industry and academia---come to Chicago to discuss and share recent work. There is a lot going on, and it is always good to exchange ideas with others sharing the same infrastructure. Participants appeared to enjoy the conference. My thanks to everybody who helped to put it together, from the local committee to the helping hands at UIC and of course the sponsors. I just put my slides from the Extending and Embedding R with C++ tutorial preceding the conference, as well as the RQuantLib: Interfacing QuantLin from R presentation (with Khanh Nguyen), up onto my presentations page. I do have a usb-drive with all conference presentations and will provide them via the R / Finance site in a few days. The only truly sour note is the fact that several presenters from Europe had their travels schedules turned upside down by the disruption to international air travel caused by the Icelandic volcano eruption and the resulting ash clouds. While we are glad to have had them for a little longer in Chicago, we understand that they are getting eager to return home. I hope this extended stay in the Windy City does not take away from the overall usefulness of the trip.

20 April 2010

Andrew McMillan: DAViCal 0.9.9 - Tickets, Binds & CalDAV Scheduling

I've now released DAViCal 0.9.9, after five pretty intensive weeks of work. This includes a number of features that were implemented to support dotCal, which has now replaced their old Cosmo backend with DAViCal to break through a performance bottleneck. That turned into a six-week challenge, because Cosmo had wandered some distance from where calendaring standards are currently going, and so there was a lot of work under the covers of dotCal to switch from using various Cosmo-specific features to do the same thing, using open calendaring standards like CalDAV. One standard that Cosmo did support, and which DAViCal now supports also, are WebDAV tickets. Unfortunately the draft RFC for webdav tickets expired, and was never very well thought through, but the functionality is useful, in order to be able to hand people a secret 'ticket' that they can use to grant specific privileges to a single calendar. There's no UI in the DAViCal admin pages for this yet, but expect one to arrive in 0.9.9.1. Something that dotCal lets people do in the web calendar, is to add subscriptions to other dotCal user's calendars, which is a very nice feature, and certainly one we didn't want to lose. In Cosmo this was done by simply duplicating the calendars on a regular basis - a very resource intensive approach! So in order to support this in DAViCal I decided to add support for the WebDAV 'BIND' method, allowing calendars to be linked from one place into another, without requiring all the events to be duplicated. Mixing that up with the WebDAV tickets, it turns out to be very easy to make that stuff work in a read/write manner, and so I did that as well. Again, unfortunately there is no UI to see this at 0.9.9, but something should be in place for 0.9.9.1 because I know that this combination will be particularly useful to people using principal-centric CalDAV clients like the iCal, and especially like the iPhone, which can't see delegations, and where this would be an especially useful feature. The other major feature added in 0.9.9 is the long-awaited work on the Scheduling Extensions for CalDAV. This is currently an expired draft, but I've checked with Bernard Desruisseaux and there will definitely be a new draft out very soon with a few minor changes, and then there will be a push to finalise it as an RFC. Most of the work on this was done by Rob Ostensen, who has been working on a few DAViCal features now, and it was great to meet up with him in person at LCA 2010. Rob has also added support for pulling groups from LDAP into DAViCal 0.9.9 too, which will please a few people. This is the 0.9.9 release for a reason, too: it implements pretty much all of the functionality that a CalDAV server can usefully do at this point. The work that Rob did to get the scheduling extensions done was really the only hole in coverage of what current clients can do, and in the 0.9.9 series I plan to polish up what we have, add some basic UI to expose the tickets and binds (since no clients really do that at all, other than dotCal, which is proprietary :-). I'll also be working on implementing the bones of CardDAV support, and Rob will be moving on to implementing some parts of the iSchedule draft for server-to-server calendar scheduling. Enjoy!

Julian Andres Klode: GNOME Icon Theme 2.30 looks really ugly

The 2.30 version of gnome-icon-theme is really one of the worst icon themes I ve ever seen in the last years. First of all, it does not fit into the system due to the colors chosen. I was always satisfied with the GNOME icon theme, but with the 2.30 release I can t use it anymore since it makes my system look like a piece of sh**. Secondly, it just does not fit with the tango icon theme. I m currently using the tango icon theme on my laptop, and after installing g-i-t 2.30, some logos suddenly started to turn black and they just did not fit anymore. For now, I downgraded gnome-icon-theme to 2.28 to have a usable UI again. But once there are new icons in gnome-icon-theme I will be lost. Hopefully someone with a sense for UI design will fix this design hell created by the idiots those who created this icon theme. We don t need a 90s icon theme. Update: Here s one problem, the network icon just does not fit:
(not under the same license as the blog, due to legal reasons). Update 2: I don t like changes, but after a months or so I will probably accept it. Anyway, Google did even worse things with reordering the icons in Chromium 5. Previously, all actions were on the left (IIRC); now some are on the left, and some in the input box. Anyway, I replaced the idiots with those now, as some people felt this was overly offensive. Update 3: I just filed two bugs at gnome.org: 616324 and 616325. Others will probably follow.
Filed under: General

Jan Hauke Rahm: VoIP of different quality

Dear lazyweb, I m using VoIP stuff of different kinds already and I actually enjoy it. Thing is, a friend of mine always complained about the quality of sound when speaking with me. He said I should switch the software but I never believed it would make a difference. Well, now I tried and it did. I used ekiga before and now switched to twinkle (which looks uuugly in Gnome at least). What can I say? It really is better. But why? I tried to get more output from twinkle but didn t quite manage. So what is so different? And don t you dare answer codecs or something! I actually don t need details. I just want ekiga to be as good as twinkle sound quality-wise. If you know a solution, tell me! :)

Jan Hauke Rahm: VoIP of different quality

Dear lazyweb, I m using VoIP stuff of different kinds already and I actually enjoy it. Thing is, a friend of mine always complained about the quality of sound when speaking with me. He said I should switch the software but I never believed it would make a difference. Well, now I tried and it did. I used ekiga before and now switched to twinkle (which looks uuugly in Gnome at least). What can I say? It really is better. But why? I tried to get more output from twinkle but didn t quite manage. So what is so different? And don t you dare answer codecs or something! I actually don t need details. I just want ekiga to be as good as twinkle sound quality-wise. If you know a solution, tell me! :)

Biella Coleman: On Internet Punditry and Engendering Change

One day a very well known Internet theorist writes a rant on women. The rant generates controversy, controversy lands theorist on WYNC on the media , despite the fact the he does not really work on the politics of gender. If this is so, why then give him more air time and focus on the NPR show? There are three lessons that precipitate from this social fact that are worth highlighting: 1.The fact that NPR chose him to pontificate and not a woman nullifies Shirky s thesis that behavior is one of the most important factors in keeping women behind, unless of course NPR asked a bunch of women but they were too meek to be on the air (not likely). If they wanted to keep the star power that is Shirky, the very least they could have done is had a woman respond. The solutions to get more women in the limelight are so easy to implement but they do require some thoughtfulness and foresight. 2.So what I am saying, it is about networks and Shirky, isn t he a theorist of networks and behavior? It seems to be to more controversial, he really did not address how important networks are for the politics of visibility, instead he focused on individual behavior. If famous highly networked folks, most of them men, don t highlight women in their blog posts, their twitter feeds, and don t invite them to conferences, it is going to make very little difffernce whether a woman is meek or confident. So if there are more guys that are visible, which is certainly the case, it is as much their job to help engender change, not so much by pontificating but acting. 3. I realized that though I first thought his rant was a reflection of his personality (at least his public persona, I am sure he is a nice guy), in fact the rant is valuable to an anthropologist interested in digital media because it is an auto-ethnographic snapshot of web 2.0 punditry culture. It often comes across as smarmy and snarky, which is due in part, to how difficult it is to get your message heard in the sea of many voices. Just like there is an aesthetic of audaciousness in a lot of Internet memeology, for example, the pundits too must often act in extreme ways to get attention which might inf fact be one of the reasons why they are reluctant to share the stage once they have worked hard to get there.

Biella Coleman: On Internet Punditry and Engendering Change

One day a very well known Internet theorist writes a rant on women. The rant generates controversy, controversy lands theorist on WYNC on the media , despite the fact the he does not really work on the politics of gender. If this is so, why then give him more air time and focus on the NPR show? There are three lessons that precipitate from this social fact that are worth highlighting: 1.The fact that NPR chose him to pontificate and not a woman nullifies Shirky s thesis that behavior is one of the most important factors in keeping women behind, unless of course NPR asked a bunch of women but they were too meek to be on the air (not likely). If they wanted to keep the star power that is Shirky, the very least they could have done is had a woman respond. The solutions to get more women in the limelight are so easy to implement but they do require some thoughtfulness and foresight. 2.So what I am saying, it is about networks and Shirky, isn t he a theorist of networks and behavior? It seems to be to more controversial, he really did not address how important networks are for the politics of visibility, instead he focused on individual behavior. If famous highly networked folks, most of them men, don t highlight women in their blog posts, their twitter feeds, and don t invite them to conferences, it is going to make very little difffernce whether a woman is meek or confident. So if there are more guys that are visible, which is certainly the case, it is as much their job to help engender change, not so much by pontificating but acting. 3. I realized that though I first thought his rant was a reflection of his personality (at least his public persona, I am sure he is a nice guy), in fact the rant is valuable to an anthropologist interested in digital media because it is an auto-ethnographic snapshot of web 2.0 punditry culture. It often comes across as smarmy and snarky, which is due in part, to how difficult it is to get your message heard in the sea of many voices. Just like there is an aesthetic of audaciousness in a lot of Internet memeology, for example, the pundits too must often act in extreme ways to get attention which might inf fact be one of the reasons why they are reluctant to share the stage once they have worked hard to get there.

Jon Dowland: new job

I'm changing jobs! From June 1st, I will be team leader of the Computing Support team for the School of Computing Science at Newcastle University. I will be leaving my current job as a Computing Officer within the central IT department's UNIX infrastructure team (ISS). My professional career began within ISS nearly 6 years ago. I have made many friends and will miss working with them as closely as I have. I am really looking forward to getting stuck into my new role. Working within a school means I will be a lot closer to the University's business of teaching and learning. As a Computing Science graduate I've always had an interest in computing research and my new role will have me up close and personal with world-class researchers.

Sandro Tosi: My nerd score is...


I am nerdier than 99% of all people. Are you a nerd? Click here to take the Nerd Test, get nerdy images and jokes, and talk on the nerd forum!


oh my...

Matt Zimmerman: Lucid ruminations

A few months ago, I wrote about changes in our development process for Ubuntu 10.04 LTS in order to meet our goals for this long-term release. So, how has it turned out? Well, the development teams are still very busy preparing for the upcoming release, so there hasn t been too much time for retrospection yet. Here are some of my initial thoughts, though. A more complete set of retrospectives on Lucid should give us some good ideas for how to improve further in Maverick and beyond. Update: Fixed broken link.

Adrian von Bidder: Google and the Linux Kernel Community

The Android developers seem to feel that they have been singled out for a level of criticism which few other embedded vendors including those demonstrating much worse community behavior have to deal with.
This is from Jonathan Corbet's coverage of the Collaboration Summit and matches my impression. I guess what some Google folks don't necessarily see is that they work for a company that has a big sign outside that effectively says we are not Microsoft or Apple or Sony or the RIAA/MPAA (implied: we're the good guys.) If you put up such a sign, and then disappoint people's expectations, you got to live with the consequences. (Google's marketing was once more successful with their recent actions in China. Get lots of good press coverage, get rid of quite a few critics, and pull out of a market where you didn't make big money in any case.)

John Goerzen: Moral obligations of Free Software authors?

I ve got a bit of a problem. I enjoy writing software. I often write software to solve some sort of problem that I ve had. Usually virtually any code I write winds up in my git repositories, on the theory that it might be useful to someone else. Some of the code that I think might really be useful to people gets even better treatment. OfflineIMAP, for instance, has a very comprehensive manpage, heavily commented example config file, wiki, mailing list, public bug tracker, etc. Most of these I did the majority of the work to create, but OfflineIMAP does occasionally receive code and documentation contributions from others. Now here s my dilemma. For my purposes, OfflineIMAP is, well, finished. It does everything I ever wanted it to do, and does it better than I ever expected it would. There are some people that would like it to do other things; for instance, optimize performance for IMAP folders with 100,000 messages in them, do UTF-8 folder name translation, and retry a sync if a connection is lost rather than crash (OfflineIMAP was designed to crash gracefully and be automated, so this has never bothered me.) None of these are features that I care about, and I don t have much time to devote to OfflineIMAP these days. It is not an interesting problem to me anymore as, well, I ve solved it already. Yet I ll be honest and say I feel guilty about the bug reports that are stacking up in the OfflineIMAP bug tracking system. OfflineIMAP is used by people that have an expectation for improvement. My efforts to hand over maintainership of OfflineIMAP have failed (the people have gone AWOL shortly after agreeing to maintain it). This problem is even more acute for hpodder, my command-line podcatcher. hpodder works great and is simple. But I no longer listen to podcasts. At all. (I blame my Kindle for that.) Therefore I no longer even use hpodder. Again, I feel guilty for not working on it; for instance, when language changes broke its UTF-8 support, I haven t gone in to fix it. Neither has anybody else, for that matter. This leads me to a dilemma. If I do nothing with my code but toss it on git.complete.org, few people will benefit from it. Most people need documentation, packages for their distribution, etc. git repos don t tend to show up highly in search engines. So, although technically I ve shared things with the world by putting them there, practically speaking I haven t done people many favors. On the other hand, if I go the whole responsible maintainer route, writing documentation, wiki, mailing list, Debian packages, etc., then I have the problem of, well, actual users who want actual support. I feel bad if I m not in a position to give it to them. Many people seem to have the expectation that software is never finished and will continue to be improved. (Ah, if only my name were Knuth I might stand a chance to evade that one. But only a chance, given all the TeX spinoffs.) This expectation, in turn, reduces my enthusiasm for publishing my code online as Free Software. Because now I can t just toss it up there and say help yourselves . Now I get angry emails about all the bug reports piling up. On the other hand, I also get occasional small contributions via my PayPal tip jar , which are awesome and motivating. Despite my grumbling, I do continue to maintain OfflineIMAP, primarily as a patch reviewer these days. I take an aggressive stance on quality, and when I get patches that add features without documentation, I usually write documentation for them before committing them. If I have evidence that a patch hurts quality, I yank it (as I had to do with IDLE support, which was a great feature, but the patch caused all sorts of stability problems due to its requirement of imaplib2.py). For that reason, I suspect, forks haven t taken off. So what s a person that writes niche software to do? OfflineIMAP isn t at the level of popularity of something like Gnome, or even debhelper, and never will be; its userbase consists of people that think that IMAP support in $MUA isn t good enough. hpodder is the somewhat small domain of console-loving podcast listeners. What are your suggestions? Should I abolish the bug trackers and just go for simple? Is there something more I could be doing to make the community feel more empowered? Is simple posting on git.complete.org not as bad as I thought?

19 April 2010

Mike Hommey: A new world of possibilities is opening up

Account created for myaddress<at>glandium.org with hg_mozilla and mg_mozsrc bits enabled.
Yes, this means I now have commit access on hg.mozilla.org. Thanks to those who vouched for me, namely Justin Wood, Christian Biesinger and Benjamin Smedberg. And thanks to the Mozilla governance for having changed the commit access requirements just in time for me to take advantage of the new ones: under the old rules, it was required that the vouching superreviewer had never reviewed a patch from the person applying for commit access. Of the 31 superreviewers, 14 (almost half of them) already had reviewed one or more patches from me (which is not really unexpected, considering the number of patches I sent in the past). One could wonder why I never applied for access earlier, though.

Martin F. Krafft: Orangutans at the Nestl shareholder meeting

Bravo Greenpeace Switzerland! At Nestl s annual shareholder meeting 2010 last week, you descended from the ceiling in the middle of the presentations with flyers and a banner asking for the company to take responsibility for their reckless actions in Indonesia. Thousands of square kilometres of forest are cleared every day so that companies like Nestl can make vast sums of money off consumers. Orangutans asking Nestl  for a break Meanwhile, Orangutans outside the venue were protesting Nestl and asking for a break (copying Nestl s own slogan Have a Break! Have a ). The Orang Utans are pushed towards extinction by capitalist interest. One of my closest friends was part of the act, and he recounts breaking into the ventilation system before sawing through the ceiling, and descending on a rope. The police detained them for more than 24 hours, but the message has been sent. Bravo! Read more (and watch videos of the spectacular descent) on the Greenpeace webpage, the Greenpeace press announcement and their blog (all in German), or on 24heures (in French). Planetsave has a decent coverage in English. NP: Emerson, Lake & Palmer: Brain Salad Surgery

Wouter Verhelst: Re: Kerberos and LDAP

Petter Reinholdsen asks about Kerberos and LDAP. While I'm not sure about an implementation that does just the ACLs in LDAP, there are several implementations that support having the kerberos principals stored in LDAP (i.e., heimdal has supported it for ages, and MIT Kerberos implements it since fairly recently, too). This allows not only for easy replication of the principals to a secondary KDC; it also allows for using LDAP ACLs to decide who gets to create and maintain users. In addition, there's supposed to be an OpenLDAP overlay that allows for updating the Samba and/or heimdal hashes in an LDAP directory when the OpenLDAP 'change password' extended operation is used, thereby making it somewhat easier to keep passwords in sync. I should note that I've never tried any of the above, though.

MJ Ray: Samsung N150 Netbook and Ubuntu Netbook Remix

That was a pretty good weekend. I set up someone s new Samsung N150 netbook with Ubuntu Netbook Remix. If you like Windows, you might want to skip this long paragraph: the N150 came with Microsoft Windows 7 Starter. When I realised what that was, I thought it was some sort of joke. It s more like an advert for Windows than a proper operating system. They even removed the option to replace the branded backdrop image, which gives you an idea of the pettiness of that distribution. I read that Win7 Starter used to have a 3 simultaneous application limit but an update removed it because of the sheer volume of complaints and rumblings about court cases to get money back. Microsoft justify all the limits with the argument that it s optimised for low-power netbooks, but the N150 goes like stink compared to my own (7-year-old) work laptop and how much power is saved by loading the Windows logo backdrop instead of a nice picture anyway? What did that make me want to do? Well this:
Windows 7 Sins But I d read that Samsung view nuking Win7 Starter from orbit as voiding the warranty and I couldn t see anything to confirm or reject that in the paperwork, so I made it dual-boot with Ubuntu netbook remix. If it ever has to go back to the shop, I ll hide the boot menu. I had enough trouble installing it that I did contemplate get.debian.net with some of the Debian Eee PC things, but I wasn t sure what I needed and I didn t have that much time. There were two big gotchas when installing:
  1. When you switch between Ubuntu and Windows, it won t boot the first time. Second and subsequent boots are fine, but the first one just reboots immediately. I suspect this would be the same for all GNU/Linux distributions.
  2. I didn t realise that the current ndisgtk (or the underlying ndiswrapper?) couldn t use Win7 drivers. Once I downloaded some XP drivers, it worked. There are some native drivers for the rtl8192 but I didn t have time to go compiling on it yet.
After figuring those out, Ubuntu seems to work fine. Better than the Windows. I got particularly appreciative comments about the large clickable spaces on the launcher that netbook remix uses (which is what I d expect from Fitts s Law). Debian probably has a similar launcher, but I don t know what it s called yet. It looks like some Gnome window or file manager and I m a GNUstep throwback. Setting up the mobile phone for internet access was also a breeze. It s a later model than my old k608i, so it supports PANU, so after the Bluetooth pairing, it appeared in the networking menu on the top panel bar and it just worked. On Sunday, I cycled to Clevedon (7 miles away as the crow flies, but 12 by bike because of a missing river crossing). Pretty good weekend.

Next.

Previous.