Search Results: "jan"

27 April 2006

Martin F. Krafft: Almost crying in Bagan

I guess you could say I am now on the verge of tears, or at least have been for a while (and it's wearing off) -- since I came back from a little expedition on a horse cart around Bagan, visiting some of the poorest villages in the area to drop off a good share of the presents I still have with me (like marbles, balloons (latex ones, so biodegradable), soap bubbles, hair pins, fake jewellery, balls, and pens and paper), as well as a bunch of tubes of toothpaste, bars of soap, and bottles of shampoo, which I had picked up on the way just before. My sadness comes from two aspects of this experience. The first, which is minor because I had expected it, was simply to (once again) witness the conditions under which the poorest of the poor live: in bamboo houses together with their cattle and pigs (everyone here seems well aware of bird flu and have taken the appropriate precautions; the government apparently did a good job in educating its people), with trash and feces all over the place, kids with almost no clothing and the elderly obviously sick from a distance. But I've actually seen worse in Laos and expected it, so that wasn't the main source of my tristesse. What almost made my eyes water was rather the fact that in the first village of the two I managed today, my arrival and obvious wish to give out gifts resulted in fights among the kids, and in dishonest behaviour by some, while the mob was almost ready to run me over as everyone (including grownups) was stretching out the hand and grabbing at whatever I pulled out of my bag. Call me naive, but that part I did not expect. It's understandable, as for these people, anything makes a difference, sometime and existential one, but they are Bhuddist after all, and among the teachings of the Bhudda you can find such lines as "do not be dishonest", and its philosophy (which carries throughout many non-Bhuddist Asian countries) includes the rule to never lose one's face, which covers shouting or fighting. On my first trip to Southeast Asia -- Vietnam -- I reached some remote villages in the Tonkinese Alps in the country's north -- villages which where equally poor, but which were also quite detached from civilisation as found around larger cities. While money still served as the main means of exchange, it appears to have a much lesser meaning to the people, who are mostly self-sufficient to a point of independence from the government as far as you can get (I guess). In these villages, I also passed out presents, but never had an experience such as the one today (nor did we experience something of this sort in some of the villages in Laos, equally removed from the main lines of infrastructure). Rather than fighting for the gifts, the kids would share them. Rather than tears, the gifts brought smiles. It thus seems that civilisation as we know it causes the competition even among kids, and that's the part that fills me with sadness at the same time as it disillusions me quite a bit, because that kind of civilisation will inevitably spread. Going off on a tangent (without the intention to return), I have been thinking a lot about my "mission" in Myanmar, which was to bring clothing and medication, as well as gifts to the poor. While one could interpret this mission -- carrying more than 15 kg of "stuff" through the stifling heat -- as an altruistic act, I also cannot deny the selfish component, because I take great joy in helping people. If you recall, dropping off the clothing I had brought in a village a couple of miles outside of Pyin Oo Lwin didn't fill me with the satisfaction I had hoped to gain, mainly because I was obviously misinformed about Myanmar (btw: I am calling it Myanmar again, which is actually what locals use, unless they speak with tourists). Fortunately, however, I quite easily managed to accept that the mission was still a success for the people undoubtedly were helped quite a lot. If there is one thing I have learnt for sure this time around, then it's that I will return, sooner rather than later, and hopefully with a lot more goods than this time around. This trip has been self-funded, which is why I am also (trying to) spend most time on vacation. I could well imagine that the next time might see me just running the goods there and fly back after only a couple of days. Of course, there are no details, but keep this in the back of your heads (and pass it on), just in case you'd be willing to donate funds to finance the trip. This brings me to another, somewhat related topic, which I have been pondering ever since I arrived in Myanmar, and especially so after I met and talked to a Portuguese globetrotter, last night: the topics of beggars and how to support these countries in effective ways. Let me address those in turn, the second one first as it's more closely related to my braindump you just read (thanks for that), and because I am nowhere near a resolution and can thus sum it up in three sentences: even though individual aid trips, like the one I am on, are helping, I would guess their effectiveness to be quite low, and raising this effectiveness certainly requires a lot of effort and infrastructure. Thus, it may be more beneficial if I were to donate my will to help to an existing organisation already established and connected in the Southeast Asian countries. I am not talking Unicef and other, similar large organisations (some of which I do support already, and if only financially), but rather much smaller endeavours that concentrate on this area only -- surely the need for help exists in all developing countries, but I am most interested in helping Southeast Asia, for the people here have taught me so many valuable things that have changed my life. On the first topic -- beggars -- let me say this much: if you've been to developing countries, you know what I am talking about. If you have not, just imagine all sorts of people (but mostly poor-looking) coming up to you with their hand stretched out, saying "money, money" repeatedly and not respecting a "no" in any way. Any guide book advises you not to give any money, because it will increase the "nuisance" these beggars are to future tourists. But at one point during my time here, I was as far as giving a small amount to everyone who came up (unless there were more around, at which point it would just get out of control too fast) by reason that it doesn't hurt me a bit, and that despite the syndicates and other arguments against it, if you are actually helping one out of ten beggars, that's one more than zero. Since then, however, I've found some more compelling arguments, and the one that's been the most persuasive so far is that a beggar's success attracts more beggars, and while the guide books call that a "nuisance", the real problem is that these people come from villages to cities, from places where they are self-sufficient (at least in Myanmar with its vast resources) to places where they'll end up sleeping on the streets. Enough of that for now, you can be sure there will be more another time; on to something completely different: This is the first time I am travelling Southeast Asia while blogging, and I have very mixed feelings about it. First of all, Myanmar isn't the place for easy Internet access, so it's been quite painful to keep publishing (which was only possible thanks to the help of Hanspeter back at home; thanks), nor is it the place where you'd be inclined to spend a couple of pensive hours in front of the screen while serialising your thoughts into writing -- the power keeps coming and going every couple of minutes, and frequently the battery-backed power supplies most people have cannot bridge the downtime. But that's not the reason why I am not really too satisfied with my blog entries so far. I have found it difficult to write even in Thailand, where Internet access was excellent, and I guess it's mainly due to two reasons: first, there is too much going on outside and the fear of losing a minute of "street action" to these godaweful computers just keeps me from taking the time to think before writing. The second reason is related: impressions need time to settle, and I guess in some ways I do prefer very much to just "be", rather than experiencing with the objective to blog about it in the back of your head at all times (I am a geek after all, don't forget that). I guess I'll try it another time since having Aline along for the first part, and then being subjected to Myanmar's suboptimal information infrastructure, may be factors of larger value than I see them right now. By the way: this blog does not contain all of my writings while I am here, for obvious reasons, so there is more to come if you are interested, but not via this channel. I'll let you know. Now, on the boring side: I returned to the temples in the late afternoon yesterday and saw another three or four, before sprawling out on top of another in aspiration of the sunset to be Obscured By Clouds (which is when I talked to the aforementioned globetrotter for an hour or so). I did find that after all, Bagan didn't have much in store for me, having seen some of the temples at Angkor. The scenery is breathtaking, and some temples are really astonishing views, but as soon as you get on the inside, they are mostly walls and Bhuddas, one similar to the others, and thus quite unlike to what I'd seen in Angkor last year. Since I am also not the type of guy to go off meditating for a day in a remote location, or take my book far away to read in peace, I think that this one day between the temples was enough for me. Maybe the temperature did play a role too, but there was no question for me: I was to do something else the next day (which is today), rather than go out again on that horse cart. I thus joined up with some Australian travellers on their overland way to their new home, London, and hired a taxi to Mount Popa, home of the 37 Nats (spirits) which are closely knit into the Burmese culture. After a 25 minute climb up steep stairs, I found myself again disappointed by a somewhat dirty and absolutely non-pretty stupa on the top of the hill. The view (and temperature) was great though, so no hard feelings, but also no time lost to head back to the hotel, to get on with the village hopping I had planned for the afternoon. Tomorrow morning I am leaving for Hohe and Inle Lake, where it'll be much cooler (or so they say). Stay tuned. PS: And of course, Murakami's novel is not called "Kafka at the Beach", as I wrote in yesterday's entry, but "Kafka on the Shore". I guess it must have been yesterday's intense heat causing that Freudian slip. Anyway, the book is truly captivating and I am afraid I'll zoom through those 600 pages faster than I'd like, given that it's the last of the books I brought. Hopefully I'll find something to pick up on the way that's not Agatha Christie, Dan Brown, Jane Austen, or the other wonderful writers of entertainment fiction, which I'd rather not read even if you paid me for it.

Antti-Juhani Kaijanaho: Unnamed pie recipe

Note: Somebody help me name this thing! :) Serves 8.
Base liquid
4 dl water
2 dl (red) grape juice
0.5 dl white vinegar (10 % acid)
50 g baker’s yeast
100 g sugar
Base solids
2 dl oatmeal
1 dl oat bran
1 dl rye bran
2 dl textured soy protein
Seasoning
1 g cardamom
to taste:
garlic
oregano
mint
Flour
ca. 6 dl wheat flour (bread flour)
Finishing touches
1 dl oil
100 g grated cheese
  1. Mix the base liquid ingredients in the tin, making sure that the finished liquid is lukewarm (~37 °C), and that the yeast is thoroughly dissolved. The tin must be large enough that this mixture takes less than a third of the volume available.
  2. Add the base solids and mix thoroughly.
  3. Add the seasonings.
  4. Add the flour in small batches, kneading the would-be dough well after each batch. There is enough flour in the mixture when it starts behaving like dough instead of gruel. The dough can well be fairly loose.
  5. Mix in the oil.
  6. Put the tin containing the dough in a warm place with no draught, cover it with a cloth, and let the dough leaven for about 30 minutes, or until the dough has doubled in size.
  7. Bake in an oven preheated to 200 °C for an hour.
  8. When the pie is almost ready, cover it with the cheese and put it back to the oven, letting the cheese melt.
Serve warm (reheating if necessary) with fresh vegetables. Rough nutrient breakdown Computed from recipe and individual ingredient nutrient content.
recipe
Energy 16200 kJ
(3870 kcal)
Carbohydrates 494 g 52 E%
– sugar 100 g 10 E%
Protein 143 g 15 E%
Fat 139 g 33 E%
Dietary fiber 38 g 2.32 g/MJ
This pie is high in both fat and sugar, but both are within the limits of recommended intake for healthy adults. Just make sure to have the other parts of the meal to be similarly or better balanced in terms of sugar and fat :)

23 April 2006

Brett Parker: Ooooops!

So, that was Saturday then... I managed to get nothing at all done, but I did manage to watch some snooker, Taxi, Taxi 2 and Taxi 3... So maybe it wasn't wasted? Apparently it's St Georges' day tomorrow... Hmm... I think that means that I shall find a pub sometime after lunchish and have a few celebratory pints for the old, somewhat dead, bloke! Otherwise, just did the beginnings of an extendable buildd, sometime I might get it to actually build stuff! At the moment it's very skeletal, need to finish building the foundations for it to be stupidly generic before going much further... but then, extending base classes to make it "just work" (tm) and having a nice base set of classes should make it all soooo much better. Will probably use it initially for automatically building django packages from svn, you know, as a test case - might then extend it to build bpgallery packages - though that's less useful (afterall, I haven't bothered packaging that yet, it being, erm, a shell script :). Hmm, now is probably a good time for sleep, though.

21 April 2006

Antti-Juhani Kaijanaho: Ibid s mush

Serves 2
ca. 1 L bouillon
500 g frozen precooked vegetables (a mixture of e.g. peas, beans, carrot, cauliflower)
ca. 2 cl oil
1 dl rice
1 dl oat bran
100 g meat in small pieces (usually pork or beef)
2 dl red wine
seasonings to taste
Start these “background processes” at the beginning: Heat the bouillon close to boiling point and try to keep it there while preparing this dish (try not to let it boil). Thaw and cook the vegetables by steaming. Mix rice, bran and meat in an oiled frying pan. Toast these in the pan until the meat is brown at least in the surface. Add the red wine and stir it well. When the liquid has properly soaked in the bran and/or boiled off, add just enough bouillon to make the mixture resembles thin gruel. Let the mixture boil, adding bouillon as required to keep the thin-gruel likeness. Continue this long enough that the rice has cooked properly (the time required depends on the rice variety used). Then stop adding bouillon and boil the mixture down into a thin porridge. Add the vegetables and season to taste. Serve immediately. Rough nutrient breakdown Computed from recipe (assuming pork as the meat) and individual ingredient nutrient content.
recipe E%
Energy 4600 kJ
(1100 kcal)
Carbohydrates 127 g 55 %
Protein 48 g 21 %
Fat 24 g 24 %
Dietary fiber 24 g
Notes Meat can be replaced with TSP. The wine can be replaced with (possibly thinned) grape juice.

14 April 2006

Jordi Mallach: 75 years of the Spanish dream

Recently Spain remembered the 65th anniversary of our tragic Civil War, an episode which broke the state in two halves which still today haven't been glued together at all. The origin of that nightmare is the dream of many Spanish people of the early 20th Century. In the morning of the 14th of April, 1931, the Second Spanish Republic was proclaimed in Madrid, after two days before, a majority of republican and leftist parties won the local elections; many people celebrated throughout the Spanish territory, and the tricolour flag was shown in many town hall buildings. With the king in exile after these quick happenings, Spain was again a Republic, as decided by the election results. The Republic brought many social measures to Spain: women suffrage, eight-hour day and many other labour related improvements. The nobility titles were abolished, and those properties were confiscated by the government. And this was just the provisional government. All of this is regarded like a big social and cultural revolution, which was just starting. Not everyone was happy about this, of course. The newly approved Constitution of December 9 gave the government power to confiscate many of the Church's properties, and limit their great power in political matters. Soon, the episcopacy came with a strategy to defeat the Republic in any possible way. The Royalists were also not happy. There were a series of revolts in the South, and an attempt of coup d'etat by General Sanjurjo. These attacks were repealed; the Republic was still strong. In 1933, the Anarchists started to be seriously unhappy about the moderate path the government was leading and started striking, which led to violent repression by the Government. The General elections of November brought a victory of the right and extreme-right, and many social and anti-church measures were repealed. Riots and strikes spread throughout the territory. The Martial Law proclaimed by the right wing government resulted in thousands beings imprisoned. Things went even worse when three ministers of the fascist CEDA entered the Republican Government. A big worker uprise started the 1st of October in Asturies, and Catalunya proclaimed the Catalan Republic. The revolts were supressed by General Franco, who would be well known in the world just a few years later. Thousands were killed and injuried during the few weeks of revolt, and the Socialist Party was dissolved, leaving the Spanish Courts with barely no left representation. The next years saw a very unstable government from the right due to internal disputes within the parties that formed it. New elections were called in 1936, and the left united under the Popular Front, which won by a slight margin; Manuel Aza a was the new president. The right, the church and the army continued to undermine the Republic in any possible way. In an attempt to make the military heads more loyal to the established government, the fascist Falange Espa ola was dissolved. The 2nd Spanish Republic received a massive blow on the 17th of July, 1936 when Franco and other generals attempted a new coup d'etat in the Northern African territories. The Republic started to die as people started fighting the coup back, and the Spanish Civil War started throughout the territory. With the aid of Fascist Germany and Italy, Franco managed to seize control of more and more areas of Spain during the nearly three years of war, and the Government of the Republic had to move a number of times, to Val ncia and Barcelona. In January 1939, most of Spain was in Franco's hands, and Catalunya soon fell. Two months later, the fascist troops entered Madrid, and hours later, Val ncia surrended. Still today, people talk about dos Espa as , the victorious and the defeated. Still today, the is much difficulty in having official recognition for the thousands who died while defending what a majority of people had voted for in a democratic way. Still today, one of the major political parties in Spain refuses to acknowledge what the forty years of Franco meant for the disidents, for the exiled, and for the dead. They are the legacy of Franco. Today Spain celebrates the 75th anniversary of our Second Republic, with many events in many cities, which will be ongoing for a few weeks. Izquierda Republicana has a good list of events.

12 April 2006

Matt Brown: Loading GPG / SSH Keys from a USB Key, Round 2

Back in January I talked about setting up some scripts to automatically load ssh/gpg keys into the appropriate agents when you plugged in a UBS key. I had quite a number of people ask me for my scripts, but they just weren’t quite ready. I’m still not entirely happy with the solution that I’ve come up with, but I figure its working well enough to get some feedback now. It’s based very heavily on the usb-storage script originally written by Sean Finney, so I think that means I owe him Pizza now. However while its based on the usb-storage script it has changed in a few major ways: The mounting of the partition is the key change and I’m still tossing up whether the way I’m doing it is best or whether I should return to having it handled by the script. The primary reason for changing it was to allow the partition to be mounted in a stable location (as opposed to a random directory under /var/tmp) so that I could symlink from appropriate places in my home directory to the partition on the key. The symlinking is needed to keep GPG happy as the gpg-agent seems to store only the passphrase and requires access to the private key whenever you need to sign/encrypt something. The way ssh-agent works is much nicer in this respect, in that once you’ve loaded a key into the agent it doesn’t need to refer to it on disk again. Currently I’m using autofs to mount the partition as needed and this seems to be working well. It’s probably possible to go back to mounting the partition at a stable location from within the script without too much hassle. You can grab the script from http://www.mattb.net.nz/debian/misc/manage-keys The remaining details for my configuration are below: First, setup udev to rename the key partitions to a static name and then fire the script at the appropriate times
/etc/udev/rules.d/usbkey.rules

ACTION=="add", KERNEL=="sd?2", SYSFS serial ="A0494386139B005B", NAME="%k", SYMLINK="usbkeys", RUN+="/usr/local/bin/manage-keys"
ACTION=="remove", KERNEL=="sd?2", RUN+="/usr/local/bin/manage-keys"
Then setup autofs to mount the partition on demand
/etc/auto.master

/media/usb /etc/auto.usbkey --timeout=10

/etc/auto.usbkey

keys -fstype=ext3,ro,noatime,nosuid,nodev :/dev/usbkeys
I keep only id_dsa and secring.gpg on the key and symlink from the appropriate places in my homedir to /media/usb/keys/

matt@argon:~$ ls -l .ssh/
total 76
-rw------- 1 matt matt 612 2006-04-12 22:45 authorized_keys
-rw-r--r-- 1 matt matt 2694 2006-04-12 22:46 config
lrwxrwxrwx 1 matt matt 22 2006-04-13 01:08 id_dsa -> /media/usb/keys/id_dsa
-rw-r--r-- 1 matt matt 612 2006-04-12 22:46 id_dsa.pub
-rw-r--r-- 1 matt matt 58851 2006-04-12 23:10 known_hosts
matt@argon:~$ ls -l .gnupg/
total 2336
-rw-r--r-- 1 matt matt 126 2006-04-12 22:56 gpg.conf
drwx------ 2 matt matt 4096 2006-04-12 23:07 private-keys-v1.d
-rw------- 1 matt matt 1175737 2006-04-12 23:29 pubring.gpg
-rw------- 1 matt matt 600 2006-04-13 01:51 random_seed
lrwxrwxrwx 1 matt matt 27 2006-04-13 01:08 secring.gpg -> /media/usb/keys/secring.gpg
-rw------- 1 matt matt 10560 2006-04-12 23:27 trustdb.gpg
And that’s basically it. The script takes care of the rest. The main problem I’m having with the script at the moment is that it doesn’t autolock the screen when you remove the key because gnome-screensaver-command is lacking the necessary environment variables to find the DBUS socket it needs to talk to its backend. Need to read up on DBUS/gnome-screensaver and sort out how to fix that tommorrow. Update: Updated example udev config so it doesn’t run a script out of /home

8 April 2006

Erich Schubert: Alexa.com wildy inaccurate

I just checked out alexa.com, and was very surprised to see graphs for my blogs domain. (Note: the other stuff in the same domain has even less visitors; alexa says 75% are on the blog) Alexa graph for blog.drinsama.de Apparently, one day beginning of april, drinsama.de made it into the top 100.000 domains at alexa again (happened in january and february, too). This very likely was my blog posting on running MSIE on Linux (whyever you might want to do that...). But their numbers are just absurdly off. They claim my blog has a reach of 20 Mio users. My ModLogAn, which uses the actual access logs, lists a peak of 358 visitors on April 4 (average is around 300 for March, 220 average in April so far). This doesn't include readers on Planet Debian, which is probably the largest share. At alexa, the domain peaked at .6 million pageviews - ModLogAn says 10k. I have, however, lots of referrals from Digg.com, Reddit.com and del.icio.us this month, since they've picked up my MSIE posting. Maybe this will happen again with the Cross-platform virus posting. I do think it has to do with users using the alexa toolbar and similar things (there is a nice firefox extension for showing Google Pagerank and Alexa traffic rating). My personal homepage, which is totall overrated in Google and has had an average of 1000 unique daily visitors in December and January, never made it that highly into alexa. While having three times as many visitors, alexa thinks it's 3-4 times worse. The difference is probably the power users. My personal page doesn't have "power visitors" like my blog.

5 April 2006

Adeodato Sim : grep-dctrl -s Source:Package

I just wanted to say thanks to Antti-Juhani Kaijanaho, the author of grep-dctrl, for implementing a fix for my wishlist bug #355960. Now it is possible to obtain the value for a field (eg. Source) from some other field (eg. Package), when the former is not present. For example, to obtain a list of source packages that need to be rebuilt in a MusicBrainz transition: grep-dctrl -FDepends musicbrainz -ns Source:Package. Formerly, one would have to list binary packages, and do some juggling to get the list of sources. I think regular grep-dctrl users will surely appreciate this capability. NP: Almod var & McNamara, Suck it to me

4 April 2006

Antti-Juhani Kaijanaho: Duh!

[IMAGE]

Erich Schubert: Intel PRONoMgr.exe

Whoever came up with that name, he really made me think that Windows box had some trojan on it. But the "PRONoMgr.exe" doesn't handle P0rn, but is for managing the Intel gigabit e1000 adapter. I don't think it matters if you kill it, it probably only displays that icon in your system tray.

3 April 2006

Mike Beattie: A small side trip..

So, today, I've just arrived back from Sydney with a few of my fellow LCA 2006 organisers where we'd been attending the annual LCA Ghosts meeting. Next year, as you all know, LCA will be held at UNSW in Sydney, Australia. The venue looks great, and a lot of the ideas the Seven team have in the pipeline sound fantastic. If they pull a couple of them off, then this is going to be a fairly significant turning point in LCA growth. All things considered, this will make LCA 2007 even better than LCA 2006.. if that's even possible :). Raewyn also came along on this little trip, so that she could have a little holiday, and go shopping - also to add some stamps to her passport, she'd never been outside of New Zealand before.. One of her memorable comments was something like "That's really the Sydney Opera House, not just a postcard". She spent some of her time with the wife of one of the other 2006 organisers, who was there just for the shopping. This may not have been a good thing. We didn't get to do a whole lot together, since I was tied up for most of the weekend at Jeff and Pia's place. We did however manage to slip in a visit to see a good friend (bod, for those that know him), a BridgeClimb, a diamond ring, and a wander around the city on Sunday evening. I'd highly recommend the bridge climb, if you can manage to go around dusk, it's fantastic to watch the sunset in the west over the Blue Mountains. We also had a lovely dinner after the climb on Saturday with everyone else at James Squire Brewery down on the King St Wharf. I had the kangaroo - there's something pleasing about eating a national icon :) Yeah, for those of you that read that last paragraph and went "diamond ring?!? Wha?!".. I finally gave in, and proposed to Raewyn on the top of the Sydney harbour bridge. I'm still coming to terms with having a fianc , rather than just a girlfriend :). For those that are wondering, how do you take the ring up on the bridge, when you can't carry loose items? Well, it turns out it's not uncommon for guys to propose on the bridge.. So the BridgeClimb folk have this thing called an ERD - an Engagement Ring Device. Basically an elastic armband with a ribbon attached. The ring is placed over one side of the ribbon, and the two ends are placed through a small plastic toggle - like the one you have on your sleeping bag cover. When you are up on the bridge, you loosen the toggle, and place the ring on the appropriate finger, hold hands together, and slide the elastic from you to your (now) fianc . It's a bit hard to describe, but it works quite well. Anyway, This happened underneath what the Aussies call 'Blinky Bill' - the flashing red light on the top of the bridge used as a bit of a warning/navigation aid to aircraft. Our climb group were on the western arch of the bridge awaiting the descent, and the group behind were on the eastern arch after just arriving. Both erupted into applause, and cheering when I went down on one knee... quite an experience! The amusing anecdote of the whole thing was about 3-4 minutes later, as we were descending, Raewyn said "Oh my god, I'm engaged" - it had just sunk in.. At that dinner afterwards? We walked up to join the others, and they erupted into more applause and cheering, in front of the all the other diners.. Bastards. Right, now back to the real topic... The Seven crew really do have this LCA job all sorted out, and Sydney in January 2007 is the place to be.. Hell, even I'm tempted to put in a paper submission this time around - normally I'd try and avoid it! (I need to get back into this blogging thing again, it's so easy to just fall out of the habit when you get busy with other things.. I promise to try harder from now on!)

2 April 2006

Joey Hess: daylight savings crime

(Hmm, it's time for my bi-yearly DST rant. Here goes.) One of the many lame excuses given for daylight savings time is that it cuts down on crime, since more crime occurs after dark. This might be true of violent crime, since fewer people will be out after dark, but what about other crimes? It's interesting to think about ways that criminals could exploit possible confusion, broken data-keeping, etc around the discontinuity caused by daylight saving time changes. Q: Where were you on the night of October 30th 2005 between 1 and 2 am?
A: Well, I was at this bar with my friends that whole hour, I have an alibi. Ok, that's a bit easy to catch (although there's a real life story of a similar trick being used to avoid manslaughter charges), but what about more subtle cheats? All-night workers last night could pretty easily cheat their employer out of an hour's pay, for 2 am to 3 am. Conversely, if they're not careful, their employer might cheat them next fall. The only people I've ever heard discuss this are all-night radio jockies, but those guys love to hear themselves talk enough that an extra hour to do it in is not a problem to them. I'll bet that a fry cook would rather get some extra sleep. But this is still small, er, potatoes. For really nice exploits you have to take advantage of explicit failures of technology. One such failure is in the way Windows manages daylight savings changes. Unlike Unix, which elegantly flips between two time zones, such as EST and EDT, but still keeps counting each second from Jan 1st 1970, Windows actually changes the clock. Despite a brainwashed nation that has been taught that moving the hands back or forward is the right thing to do, in the world of computers, it's bloody stupid. A google for "daylight savings windows bug" turns up a million or so hits caused by this behavior, describing problems like this:
Windows reports erroneous file modification times, which change according to daylight savings.
And this:
When Windows NT automatically adjusts for daylight savings time, the times on files on Windows NT file system (NTFS) partitions and the events in the event logs are retroactively shifted by one hour, even though the files and event records were created before the daylight savings time change.
Now, I think there's all kinds of potential for criminal fun in file modification timestamps being wrong, and log files having innaccurate times. Throw in the odd backup that fails to run due to being scheduled to run at a time that never exists, and the time slip begins to seem like an ideal time for shady activities. (And a very poor time to be in a hospital hooked up to windows-controlled life-support equipment. Double-dose of morphine, anyone?) True story: A year ago I was at a fancy hotel, which was burgalarised. This hotel had electronic locks on the doors, which logged when the doors were opened, and by whom. The techies whose possessions were stolen were able to use this information, plus what they knew about when the theft must to have occurred, to narrow down the suspects to one or two hotel employees who opened the door at the right time. If those logs went to a machine running windows and the theft occurred during England's change to DST, it's quite possible the logs would have been useless. It's not too far from this kind of scenario to something suitable as an entry in Schneier's movie-plot terrorist threats contest. Although it's worth noting that the airline industry deals with timezone changes all the time, so if they have any sense, the DST change is not an exceptional event for them. One of the interesting things about plane travel to me is the way a plane in flight between timezones is a space in which no defined time zone exists. But I digress.. I suspect that the real source of fetile bugs related to DST is in the interstices between operating systems where programs have to deal with the peculuarities of multiple OSes to behave correctly. Such as this unison/linux/windows bug. Put different systems together and they fail in myriad ways, and there's room in the cracks for criminal activity. Thing is, I don't have a very good criminal mind, at all, so if any of the slightly weak approaches I've detailed above is feasable, it seems to me there must be some terrific scams, techniques, etc, that people who are good at thinking that way, and have the right motivation can use.

Jose Carlos Garcia Sogo: ekiga in Debian

For those of you wondering about why Ekiga is not in unstable yet, the problem seems to be some discussion about MPL in debian-legal of which nobody has informed any of ekiga/opal mantainers (Thanks again for your communication folks!). The main problem is point 3.2, which reads
3.2. Availability of Source Code.
Any Modification which You create or to which You contribute must be made available in Source Code form under the terms of this License either on the same media as an Executable version or via an accepted Electronic Distribution Mechanism to anyone to whom you made an Executable version available; and if made available via Electronic Distribution Mechanism, must remain available for at least twelve (12) months after the date it initially became available, or at least six (6) months after a subsequent version of that particular Modification has been made available to such recipients. You are responsible for ensuring that the Source Code version remains available even if the Electronic Distribution Mechanism is mantained by a third party.
Also, as a comment in annotated MPL 1.1 you can read:
This provision is intended to ensure availability of code, while minimizing the burden on each Contributor. You do not need to ship Source Code to your Modifications with each Executable, as long as you make it available on-line and tell the recipient where it is. It does not require that you return Modifications to mozilla.org or any other named organization. However, you may do so if you choose, and we hope that you wish to participate in the development community that mozilla.org is chartered to foster.
You don't have to ask a lawyer to see that Debian does yet comply with this. As Alioth is now an official Debian system, and as OPAL is being mantained using Alioth and svn.debian.ORG, every patch we can make to OPAL source will be kept not only for those required 6 months, but forever. And nobody can comply about a SCM system not being an accepted Electronic Distribution Mechanism. For those wondering why OPAL is not relicensed using GPL/LGPL, you can ask yourself by performing a quick Google search. Basically the problem is that there were many conributors in the past and that some parts of the code were written sponsored under the condition of the code be kept under MPL. So, please, stop being so integrist and GPL centric. There are other licenses that have problems (as GPL have) but are as DFSG compliant like GPL and BSD are. We have to keep main clean, but we have a lot of problems to solve and we don't need to make up any more.

23 March 2006

Antti-Juhani Kaijanaho: Pigeon

As I was waiting for a bus to take me to work after today’s stint at the court house, a pigeon was making its merry way among all the people. In the heat of the moment, I took this picture (okay, well, the picture this image is derived from).

Antti-Juhani Kaijanaho: Planet Haskell

Per Isaac Jones’s request, here it is: Planet Haskell. (The current URI is hopefully not the final one, but this one will redirect to the new one once we have one.) Haskellers: please email me your blog feed URIs (English only, please; no need to restrict to Haskell only, though). I will not add you if you don’t.

18 March 2006

Martin F. Krafft: Explaining Debian at parties

Josh isn't quite sure how to answer questions about Debian at parties without being stamped nerd. I have often met this challenge. And I think I got good at it. Rule number one: stay away from opinions, comparisons, and technical details (at least in the beginning). Give them the humanly-comprehensible facts and do not mention Windows or OS X unless asked. For me, Debian is "an operating system ("computer system") that is completely free, which lets me do a lot of cool stuff with the computer." I don't mention that I am a developer so as to not scare people off. After this 20 second introduction, you can usually tell whether your peers are interested. If they are, give them a little more: "It is developed by thousands of volunteers who all help out without getting paid, because they all use the system and want to make it better." By now, the first questions should come, and usually they mention other operating systems. A great line is "well, I've found XYZ to be inadequate for my needs, but to each their own". Don't go confrontational. And don't grow over-enthusiastic, that's what nerds do. At other times, the first question will be about how anything can be free (as in beer) these days. Be careful not to answer with too much idealism. Also, I've found few to care about "free as in speech" at this point of the conversation. If your audience is still with you at this point, now is the time to dive into depth. Now you can talk about idealism, technical superiority, security, whatever, but always keep in mind that you don't want to compare (laymen don't care about comparisons too much) and that you want to draw from metaphors as much as possible to make them understand. I usually take the opportunity to touch upon privacy issues and trojans, faked email senders and that kind of stuff. My audience usually grows quite pensive after some time, and I have yet to meet some layman who didn't ask "just why would anyone care about my data". Explain "pwned" computers and distributed denial of service attacks, or the scenario where someone impersonates you can does bad stuff. Finally, I've often found it to be fun to play somewhere along the lines of "do you really want to know" and exciting their interest by being somewhat discrete about it all. I've also had success with the direct approach: "ah, but I'm a geek, you couldn't care less about my stuff." People usually ask for more infos. After all, you are at a party and not in front of your machine; anyone with something else but mush between the ears will put two and two together and suspect that you aren't actually a geek, at least not at the moment. Those are the people worth talking to. Anyone else (including drunkbolds) is a waste of time, IMHO. It helps to have some Knoppix or Ubuntu CDs in your pocket and just hand them out. People really get excited about free stuff. And a live CD can work wonders. Do not try to convince people to try it out or you will become a support hotline. Instead, tell them about LUGs and mailing lists (and how cool it can be) and put the challenge on them: "if you try it, those are your support channels. Are you up for it?"

16 March 2006

MJ Ray: debian-legal Package Lists

Just realised I've not actually posted this yet. Oops. If you're interested in these packages, check and maybe improve the discussions and bugs:
February
autoconf digikam gnome-vfs2 libgsm mysource-cms php-netcheckip portaudio python-web shishi sl-modem-source
January
adodb asterisk-prompt-es darcsweb datamatrix digikam display-dhammapada fglrx-driver kernel-image latex-mk libecw libpreludedb libqt4 Matrix3D openoffice.org oracle-instant-client php-net-smtp php-net-socket php-pear php-xml-parser [+ many more php-*] php-net-imap tailor sed shishi ttf-bitstream-vera ttf-gentium uddi4j yics fetchyahoo

12 March 2006

Ross Burton: Sound Juicer "Let's Go Back, Let's Go Way On Way Back When" 2.14.0

Sound Juicer "Let's Go Back, Let's Go Way On Way Back When" 2.14.0 is out. Tarballs are available on burtonini.com, or from the GNOME FTP servers. Bug fixes: Translators: Ankit Patel (gu), Clytie Siddall (vi), Daniel Nylander (sv), Duarte Loreto (pt), Elian Myftiu (sq), Francesco Marletta (it), Francisco Javier F. Serrador (es), Funda Wang (zh_CN), Gabor Kelemen (hu), Gnome PL Team (pl), Hendrik Richter (de), Ignacio Casal Quinteiro (gl), Ilkka Tuohela (fi), J r my Le Floc'h (br), Jordi Mallach (ca), Kjartan Maraas (nb, no), Lasse Bang Mikkelsen (da), Leonid Kanter (ru), Maxim V. Dziumanenko (uk), Mugurel Tudor (ro), Petr Tome (cs), Priit Laes (et), Rajesh Ranjan (hi), Raphael Higino (pt_BR), Rhys Jones (cy), Rostislav "zbrox" Raykov (bg), Satoru SATOH (ja), Tino Meinen (nl), ygimantas Beru ka (lt).

11 March 2006

Axel Beckert: Blacklisting comment spam in blosxom

Since the demand for blosxom anti-comment-spam solutions respective appropriate blosxom plugins seems to be really high, I’ve decided to polish up my apparently quite well working although still in beta state being anti-spam enhanced version of the comments plugin (ZIP) by putting the blacklist outside in an external file and writing some (still short) docs. I use it since 11th of January this year and got only two spam comments and many more normal comments since then, so it should work. Although: I also got a question if my trackback doesn’t work. Hmmm. So no warranties, just an offer for help fighting against comment spam. ;-) Another feature which is basically ported from the writeback notify plugin is notification of the blog owner about new comments by mail. Since on the server on which my blog runs the used Perl module Mail::Sendmail was not available, I used Mail::Send instead for my version. For installation you first need to download the ZIP file of the original comments plugin, install it’s templates and then install my anti-spam enhanced version of the plugin itself.

Now playing: Rockapella — Come on Eileen

Holger Levsen: videos from the fosdem debian developers room

Two hours after I blogged about having no camera I got one :-) Being hit by #350333 I had to reboot another kernel anyway, so I decided to try a newer one, namely 2.6.16-rc5, to see if that bug is fixed there. It is, but I got hit by yaird bug #352010 when I installed it. Fun :-) Especially because Jonas provided a fixed yaird quickly...

Oh Shock and horror! The videos show ugly artefacts! The grabbed files and on the cameras lcd, though they disappear on the lcd, when I unplugg the firewire cable. Strange! p2-mate suggested electrical interference as the cause and was right. Using different power-outlets for the notebook and the camera made the artefacts go away. Oh joy!

To end a long story quickly: Here they are!

For yet unknown reasons these ogg theora files play well in vlc, kaffeine, xine and totem, but not so in (my version of) mplayer.

Better quality oggs are being encoded and uploaded atm, followed by xvid files (highest quality) and mpeg2s (for producing a video DVD).

The forth talk, "The Debian GNU/kFreeBSD port" by Aurelien Jarno was recorded in HDV and will be released soon... Due to circumstances beyond our control, the video team failed in recording "Women in Free Software: Findings from FLOSSPOLS"... Luckily an audio recording was made, which hopefully can be made available once the study quoted by Halla Wallach is published.

Currently only four out of ten slides are available. Pointers welcome!

My other notices about FOSDEM still need to published :-) When (or if?) I find time...

And finally, I succeeded in producing my first video DVD, yay! The DVD contains all videos from the debian-edu/skolelinux gathering in January in Erkelenz. Since it was made with webdvd, which Ben Hutching wrote after producing the debconf5 videos, I think I can have reasonable good confidence that this DVD will also work in most standalone DVD players.

Now I'll take a break and go out to enjoy the snow landscape in mid march :-) Even though I'm real busy atm (video was only number three of my current priorities) it's important to take a break and relax once in a while.

Next.

Previous.