This afternoon I had another visual migraine. It was a little different from the previous ones in that it had more significant visual affects and in that it affected the right side of my vision. My central vision was OK, the left side was quite good, but the right side was mostly occluded by bright flashes. Closing my right eye seemed to make it a little better - apparently my right eye was more affected than my left. Previous visual migraines had only affected my central vision.

It happened shortly after going outside and it was a sunny afternoon, so maybe the bright light helped trigger it. The Australian optometrist chain OPSM advertise transitions - lenses that darken when exposes to UV light so they act as sun-glasses when outdoors, this sounds interesting (I don't want to have prescription sun-glasses as well as regular glasses). However there is one concerning item in the advert - "protect your eyes from dazzling sunlight, harsh artificial lighting and the glare from computer screens", I don't want my glasses to go dark when I'm looking at a computer screen (a large portion of my waking hours)!

I just filed Intend-to-package bug number #416996:

* Package name    : stereo
  Version         : 2.0 beta
* URL             : http://www.mono-project.com/Stereo
* License         : LGPL
  Programming Lang: C#
  Description     : Mono (.NET) extension for running
                    multiple applications

Stereo is an extension to the Mono (.NET/C#) platform for running multiple applications at the same time. As you probably know, C# is a language using a bytecode, called CIL: Common Intermediate Language. Using code in an intermediate language has benefits for platform and operating system independence (Java is the most prominent example of this approach), however it also means an overhead when running the applications. Various approaches have been tried to remedy these effects, such as JIT (just in time) compilers translating the bytecode to native code when needed. Applications running based on such bytecodes tend to use more memory than regular applications (for example, they need to keep the compiled code in writeable memory, whereas regular applications can use shared read-only memory for this), and you probably have heard many people complain about the memory usage of Java and .Net applications. Some people even claim the Linux .NET platform is called "Mono" because you can run at most one such application at the same time. That how "stereo" was born: an extensions to run two (or more) applications in the same mono environment, thus reducing the memory overhead significantly, and making it useful for more people. Future versions should even be able to run Python (using IronPython) and eventually Java applications in the stereo runtime. It is also planned to add support for multiple user operation. So eventually, it will be able to replace your whole system. The project will then also change it's name to Multics, to reflect it's unique multi-user capabilities. At least if we get enough funding by Dunc-Tank, who is currently sponsoring all our development efforts.

It's been two weeks I got my latest toy. And, lets be honest - I don't buy me toys very often.

My very own espresso/capuccino maker! No, it's not a pro-level machine, nor does it try to be. I'm a bit disappointed as the espresso comes out slowly and homogeneous, with no foamy layer on top - But hey, it tastes great. So far, I'm still a terribly lousy capuccino maker, but perfection comes with practice.
Now, what's bad about this? First, that -although I'm a heavy coffee drinker, pouring at least 1 liter of regular filter-drip coffee down my throat every day- I very rarely drank coffee at home. Now I do. At least, two espressos every day - Well, two mugs of espresso, mind you - that's like six or so proper espressos. Yes, I'm trying to cut down on the coffee I get at work.
Second, well... Having the rich taste of an espresso in your mouth every day makes you despise and loathe filter-drip coffee. It just does not taste right anymore. The delicious roasty after-taste does not stay in your mouth for at least twenty minutes. But here is where the addiction part comes into play: I still need it, and when my work area's coffee machine is empty, I still go with my mug begging for coffee in other areas of the building.

The mighty uClibc has been repackaged and should be on its way to the NEW queue soon. The most prominent change is that it can now be cross-compiled for a number of architectures using dpkg-buildpackage's -a switch (you might want to install dpkg-cross). There are a few regressions that will have to be sorted out by trial and error, but these only affect architectures no one cares about anyway, like i386. Known bugs:

• 32/64 bit arches that use the same compiler (like i386 and amd64) can not cross-compile for each other yet
• hppa, sh, s390 and ia64 are not supported at all
• locale support is disabled
• static libraries are built as PIC code

There is probably a lot more that will only crop up when actual other packages are built against it (so far, my shiny new busybox works, but the CFLAGS I had to pass to make that work are illegal in some states). Next up: reintegrating the magic specs file that implements (cpu)-linux-uclibc.

Mh… I tested today again cipux, a admintool which one of the two tools which will replace our(Debian-edu) old admintool wlus . Since I dislike cipux a bit I regulary test it (the last time 1 week ago) and most of the errors I announced last week are fixed. But here the new report: The CipUX team fixed many issues I mentioned the last time… but there are still very hugh errors for productive software :S During the installation an the run of cipux_setup -s I recognised an error in the script: it uses wrong options for an other subinstallation script of cipux. The cookie handling is mostly fixed but in some scripts I still got this nice picture.. Apparently there are still hugh errors in the cookie handling. Furthermore it was not possible to edit the user data (e.g. full name, …. ) in the useradmin, it allows only to add users, resetting the passwords and deleting them. I think this is not enough for an admintool as we need it in debian-edu as a replacement for webmin/wlus. While searching for editing the users data I clicked on “Userselfadmin” and … got a error 404.. this script does not exist. So here is also no possibility to change the user details. I noticed something strange… there are many groups for users, e.g: assistant, teacher, tutor, … but I don’t find an group for students, quite strange. I asked upstream but until one week I got no answer. :S Because I was a bit frustrated I want to have a look on one of the other features of cipux.. the internetadmin. It should be possible to forbid a user or a complete group the internet access…this is the theorie. When I clicked on the internetadmin-button I got the cookie error mentioned above. Mh… so it is not possible to forbid your pupils to go into the internet. :S Another important feature we need for DebianEdu. Okay… the other things works. ;-) As a conclusion: Upstream works hard on fixing the errors I found last time, but there are still hugh errors which can be found by testing the software a bit. Atm I would suggest them to work on it and don’t upload to Debian-Edu since I think many features they have in theory doesn’t work properly and are not well tested.

Had a great time at DemoCampMontreal2 tonight. There were a ton of people there, the demos were great, and the bar at the SAT was open for business, so it was possible to drink beer and watch demos. There were all very solid projects with lots of interesting stuff going on. My favorite aha! moment came from Hugh McGuire showing off Collectik, his new social-podcast-aggregation platform, when he demo'd how he uses the site, and I realized that that's how I want to organize my podcast listening, too. I also liked Kakiloc, a location-oriented social networking site. They let you tell your friends what you're doing and where you are, and the friends can see it on the Web, by SMS, or through IM. Sound familiar? Yeah. Kakiloc's advantage is that they have more geo-oriented interface, and some extremely powerful rules that trigger activity when you (say) get close to someone in your circle of friends. However, I think in a world of Worse Is Better Kakiloc is going to have a hard time making a sale. Twitter already has the mindshare in this market, and the network effect makes it more valuable for people to stay with the popular platform. I also really dug the films from OpenSourceCinema.org, although they skirted the "demo" concept pretty scarcely. One thing that was neat was that the OSC Web site was built by a real-life barn-raising: Sylvain Carle put out the call for some help, and people convened on his house to build the Web site. Cool idea. All in all I had a really good time. DemoCampMontreal2 worked out well. tags: DemoCampMontreal2 kakiloc collectik opensourcecinema

Bait and switch So, on the way out the door to DemoCamp, I grabbed a handful of loonies out of my bedside change basket for the parking meters downtown. When I got to SAT, though, I realized that the "loonies" I'd brought were in fact Sacagawea dollars. I'd gotten them as change from the ticket machines on the Las Vegas monorail. Doh! Fortunately, downtown Montreal parking meters take credit cards, so I was OK. tags: loonie sacagawea parking meter monorail

Feisty Upgraded to FeistyFawn on Wednesday. Worked fine, nice smooth upgrade (who expects that?). Nothing revolutionary, but the software works well. tags: feistyfawn ubuntu upgrade

A relatively recent addition to the Google range is Google Docs. I'll be testing it shortly, but I see it has already suffered google's usual security/privacy bugs Apart from encouraging the larger Atom feed format, dropping RDF support and unreliable alternatives to its eyetests, Blogger is one of Google's best services. The basic service seems to work in a half-decent manner. Of course, it still has bugs and that let someone post a hoax Google news release Google's search results are still unstable: here's a consultant spotting lots of turbulance in the results. If Google's actions were unfair and harmed your performance, you can't touch them, as kinderstart discovered (but that ruling might be an interesting reference for other ratings sites, so there's a silver lining). The site complains constantly that I don't let it rampage through my browser and I haven't downloaded the latest from Adobe. It's a bit less annoying now that ytplay is available, but it shows that Google doesn't care much for free software support. An interesting twist has been Viacom suing Google for a billion dollars and calling them all sorts of names. (Beware bias in the BBC reporting on this, as BBC just signed up for Google-YouTube [BBC] - is there a monopoly that the BBC won't befriend?) Adwords and adsense looks like some of Google's top mass-market money-makers. I have mixed reports about them, including some of my customers that are happy to use them, and others that get results like this commenter at Problogger which suggests that adsense referrals maybe don't always report accurately. There is also a privacy/trust problem with having one company seeing so much of the world's searches. This was the basis for a recent Ask.com ad campaign (nice idea, shame about the microsite's poor accessibility and various other things - it gave one Google-worker a good laugh and got better commentary from Susan Hallam Communications). Privacy bodies backed Google's step towards allowing user privacy [BBC] but there's more that should be done. That's enough for now. I've got some more positive news which I'll post along with the Docs review.


- - -=-=-=-=-=- Don't Delete Anything Between These Lines =-=-=-=-=-=-=-=-
e0acebd2-71f1-4df8-ae4d-50355ad7aa81
[ 6 ] Choice 1: Wouter Verhelst
[ 6 ] Choice 2: Aigars Mahinovs
[ 3 ] Choice 3: Gustavo Franco
[ 3 ] Choice 4: Sam Hocevar
[ 2 ] Choice 5: Steve McIntyre
[ 4 ] Choice 6: Rapha l Hertzog
[ 1 ] Choice 7: Anthony Towns
[ 6 ] Choice 8: Simon Richter
[ 5 ] Choice 9: None Of The Above
- - -=-=-=-=-=- Don't Delete Anything Between These Lines =-=-=-=-=-=-=-=-
My rationale follows, if you care... I've been pondering how to vote for well over a week, and I'm still not entirely happy that the ballot I've chosen accurately expresses my wishes, but it's the best approximation of them that I can come up with at this time. My dilemma has two parts

1. I don’t think the current office of the DPL is effective, due to how it is viewed by a significant proportion of the project (if not an outright majority), so regardless of how much I might like the goals and ideas proposed by an individual candidate I’m very pessimistic that being electing as DPL will actually bring those things to pass.
2. Much of what will make a good DPL is about how a specific set of ideas and goals will be put into action, and how interpersonal relationships between the DPL and various parties will be managed. This comes down to the personal character, experience and leadership skills of the candidate While I can form some level of an opinion about each of these aspects from mailing list archives, and IRC, etc. I don’t really feel comfortable making judgements in these areas until I’ve actually met them in real life. Too many people come across badly in the (severely limited) online communication methods we use, and are actually very decent reasonable people in real life. Out of the candidates, AJ is the only one that I’ve ever actually met and talked to.

Given these problems, my first step in choosing how to vote was to eliminate those candidates who I will rank below NOTA based on their published platforms. I have nothing personal against any of these three people, but given the other possible candidates I think that we’d be better off having another election than just electing one of these three for the sake of it.

• Wouter Verhelst - Wouter’s platform lacks any detail that tells me what he stands for or where he wants to see Debian go. Wouter’s platform also seems very conflict averse, it favours discussion and agreement over making hard decisions. I think Debian needs to make some hard decisions and the project leader needs to be someone who is able to willing handle (civilised) conflict.
• Aigars Mahinovs - Most of the topics that Aigars proposes to work on do not make my list of the most important issues for Debian to solve, and as others have pointed out, are possible better dealt with by other organisations.
• Simon Richter - Simon doesn’t actually state what he wants to achieve as DPL or where he sees Debian’s future direction as being, other than some vague hints that he is against projects that are similar to ‘dunc-tank’ and that we need a common goal. Stating what that common goal should be, would have lifted this above NOTA.

That leaves five remaining candidates:

• Anthony Towns - AJ gets my top ranking because I think that having some consistency in the DPL is a worthwhile goal. While I think that the whole Dunc-tank fiasco could have been managed much, much better, there were obviously hostile factions that would have made anything AJ did look bad. AJ’s platform seems to mostly involve him leading infrastructural improvements (good) and encouraging others to work on things that they want to see changed (also good). The one area where I possibly disagree with Anthony is around what the DPL role should look like. Anthony appears happy with the current state of the DPL office, I think that some significant changes are needed. However that’s going to require constitutional changes, so I’m not going to rank Anthony down on that basis alone.
• Steve McIntyre - Steve comes second primarily because he’s implicitly endorsed by AJ and everything that I’ve seen online related to Steve suggests that he is a level-headed, decent individual with good leadership skills. If I can’t have consistency in the DPL office via AJ, then Steve would definitely be the next choice. Steve’s platform also doesn’t contain anything that I disagree with.
• Sam Hocevar and Gustavo Franco - Sam and Gustavo are ranked equally based purely on the basis of their (relatively similar) platforms containing lots of great ideas and vision for Debian that I agree with. I don’t for a minute think that they will be able to achieve all of it, but at least by providing clear goals and a mandate for implementing them we might be able to start down the track of regaining some common purpose as a project. I have some reservations about Sam’s style based on what I’ve read in archive, but seeing as I’m giving the benefit of the doubt to people I haven’t personally met, I’m going to assume, that if elected Sam will be a great DPL.
• Rapha l Hertzog - Rapha l gets my final vote above NOTA to indicate that I support the idea of a board governing Debian, but that I don’t think his particular proposal is the correct way for the board to run. If Rapha l were to win, I wouldn’t object to him placing his suggested board in ‘office’ for the upcoming year, but I hope that a major piece of their workload would be to lead the discussion, drafting and passing of a constitutional change to replace the DPL with an elected board with rotating terms of reasonable length (2-3) years.

*yawn* It’s made me tired writing all of that out. Maybe sometime soon I should explain in more detail exactly what parts of Debian’s governance model I think need changing or maybe I need to wait until I’ve achieved a few more technical things and gained enough respect before anyone will listen to my opinions…

TurboGears RemoteForm tip In case your RemoteForm misteriously behaves like a normal HTTP form, refreshing the page on submit, and the only hint that there's something wrong is this bit in the Iceweasel's error console:

Errore: uncaught exception: [Exception... "Component returned failure
code: 0x80070057 (NS_ERROR_ILLEGAL_VALUE) [nsIXMLHttpRequest.open]"
nsresult: "0x80070057 (NS_ERROR_ILLEGAL_VALUE)"  location: "JS frame ::
javascript: eval(__firebugTemp__); :: anonymous :: line 1"  data: no]

the problem can just be a missing action= attribute to the form. I found out after:

1. reading the TurboGears remoteform wiki: "For some reason, the RemoteForm is acting like a regular html form, serving up a new page instead of performing the replacements we're looking for. I'll update this page as soon as I figure out why this is happening."
2. finding this page on Google and meditating for a while while staring at it. I don't speak German, but often enough I manage to solve problems after meditating over Google results in all sorts of languages unknown or unreadable to me. I will call this practice Webomancy.

I just received a question about SE Linux via email. As I don't want to post private messages containing material that's globally useful I'll answer through my blog:

> other than strict and targeted policies......other policies like
> RBAC, MCS, Type Enforcement are also there....how are these policies
> implemented

The two main policies are the strict policy and the targeted policy. The strict policy is the earliest and was originally known as the sample policy (but was given the name "strict" after targeted was developed).

The strict policy aims to give minimal privileges to all daemons. The targeted policy aims to restrict the programs that are most vulnerable (network facing daemons) and not restrict other programs (for ease of use). There is currently work in progress on combining those policies so the person who compiles the policy can determine which features of strict they desire.

RBAC means Role Based Access Control. The strict policy assigns users to roles and the role then limits the set of domains that can be entered. For example the user_r role does not permit the sysadm_t domain so a user who is only permitted to enter the user_r role can not perform sys-admin tasks. Like many terms RBAC is used in different manners, some people consider that it means direct control by role (EG role user_r can not write to /dev/hda), while SE Linux has a more indirect use of roles (role user_r can not run programs in domain sysadm_t or any other domain that allows writing to type fixed_disk_device_t - the type for /dev/hda). You may consider that the strict policy supports RBAC depending on which definition of the term you use.

Generally the targeted policy is not considered to support RBAC, although if you consider a role to merely be a container for a set of accesses that are permitted then a SE Linux domain could be considered a in the RBAC sense. I don't think of targeted policy as being a RBAC implementation because all user sessions run in the domain unconfined_t which has no restriction. I think that to be considered RBAC a system must confine user logins.

Type enforcement is the primary access control mechanism for SE Linux. Every object that a process may access (including other processes) has a type assigned to it. The type of a process is known as a domain. The system has a policy database which for every combination of domain, type, and object class (which is one of dir, file, blk_file, etc - all the different types of object that a process may access) specifies whether the action is permitted or denied (default deny) and whether it is audited (default is to audit all denied operations and not audit permitted operations).

MCS is a confidentiality protection mechanism where each file has a set of categories assigned to it. The set may be empty, may contain all 1024 categories, or any sub-set. Each process has a set of categories that determines which files it may access. File access is granted if Unix permissions allow it, if the domain-type model allows it, and if MCS allows it (on an MCS system). I have just had an article on MCS published in Linux Journal.

MCS is an optional feature for people compiling Linux from source or for distribution vendors. For Red Hat Enterprise Linux, Fedora, and Debian the decision was made to include it, so the strict and targeted policies for those distributions include MCS.

There is another policy known as MLS. This is a policy build that comprises the strict policy plus Multi-Level Security. Multi-Level Security aims to give the highest confidentiality protection and comply with the LSPP (Labeled Security Protection Profile - roughly comparable to B1) Common Criteria certification. It would be possible to build a targeted policy with MLS but that wouldn't make sense - why have the highest protection of confidentiality with anything less than the highest protection of integrity?

As for how the policies are implemented, I'm not about to write a tutorial on policy writing for a blog post, I'm sure that someone will post a link to a Tresys or Fedora web page in the comments. ;)

> there r some packages of linux in which some changes has been made
> to support linux......for eg:- coreutils, findutils

That is correct. Every program that launches a process on behalf of a user at a different privilege user (EG /bin/login, sshd and crond) and every program that creates files for processes running in different domains (EG logrotate creating new log files for multiple daemons) needs to be modified to support SE Linux. Also ls and ps were modified to show SE Linux contexts as well as the obvious programs in coreutils.

> 'Z' is the new thing that have been added to most of the
> utilities......wherever I search I get the changes made only in few
> utilities like ps, mv, cp, ls
>
> Can u help me by giving all the changes made in each of the utilities.....

Unfortunately I can't. This has been identified as an issue and there is currently work in progress to determine the best way of managing this.

I think it's time to start blogging more often about this topic, and fill this section a bit more. I mean, Mermaids was a long time ago... And debconf in Mexico with my first try on skirts, getting rid of my beard and dying my hairs red is history in the meantime, too. So, what has happened in between... Well, there was of course the Regenbogenparade which I attended and which was nice. I even ordered a special t-shirt from a shop in Australia that I totally love. In summer I met up in Bratislava with a longtime friend from a MUD I played way back, and enjoyed running around in a skirt there, too. Gladly it was a sunny day. It was though... people back here in Vienna looked more awkward at me than in Bratislava. At least that was my impression... Had been to Extremadura for the i18n meeting which was quite nice. It was quite productive, even though I have to admit that I haven't done much on that front since. Even in Spain people didn't look that strange at my skirt as over here in Austria... At our company's Christmas party I got into a talk with a work colleague about the topic and she informed me that a former working colleague of us is starting with hormone treatment after the year change and if I'd fancy a meeting with him. I was quite happy about that offer so we arranged a meeting on December 23rd. It was a bit strange at first to address him as he, and we didn't know how to start talking because said working colleague was late, but after a while we talked about various things and even were finished with the more interesting topics when she finally appeared. We arranged to visit the next Trans-X meeting after the year change.
I left them for leaving home, but I wasn't able to catch my bus on time—the subway had serious problems. Well, I thought I might spend the night in the Flex so I called another working colleague who usually hangs out there about what was going on that evening, and interestingly he told me it was Gay Heaven night. I stopped believing in coincidence long ago... Anyway, was a nice evening all in all, they had a Christmas rabbit handing out "I love you" stamps with pink ink-pads. :) The Trans-X meeting wasn't too bad. It was some discussions about various topics. After a while my first shyness dropped a bit and I started to join in the discussion at some points. After the first started to leave I had some more direct talks with two of the women from there, one of them had mostly the same trip home as me so we talked on in the subway. A week later they had set a transgender weekend—no wonder, it was the weekend of the Rosenball. They were meeting in a cafe on Friday and I joined them, a bit less shy now that I at least knew some of the faces. Maria was quite ill and was sitting in her jacket within the cafe, shivering like hell... But all in all it was a nice meeting too, got to know some more nice people. I was a bit lazy from there on, didn't join another meeting... But another working colleague did invite me to the carnival party of his sister. I thought I could try a bit more than before, in the disguise of the carnival party, so I used a bra my former wife left behind, filled it with some socks, and put up some eye makeup (quite discreet, I hate overdone makeup already on natural females...) The light there wasn't the best, so they just saw my tall body at first. It took them a while to even notice the skirt, and only after I put off my long-sleeve they haven't noticed my breast. But well, I don't really blame them, my working colleague has announced me as a he, and given the low lights it's not too bad. Though, after the host noticed my breasts he asked if he could touch them and I even received a quite nice kiss from him. :D I stumbled upon the Gaia TG Guild on Gaia Online—a quite interesting web-based community. In general Gaia is filled with mostly kids, many of them immature, not able to spell and considering that even cool, but there are some quite special guilds that are lots of fun. But still, when I stumbled upon the TG Guild I was in awe of that such a thing could exist there. What I read made me feel totally happy and more confident on the path I'm having ahead of me. Last week I finally had been to an Trans-X meeting again, and Maria showed some quite interesting reportages about transsexual people—including one that was on TV just the day before about a 14 year old girl who is already on hormone treatment and has the absolute support from her family since she was 4 and confronted them with cutting "it" off when they don't allow her to wear skirts when going out, too. All the best to you, Kim! I so envy your strength... I'm sorry about the length of this entry—but I'm sick of people who tell me that I'm only playing it, or that I would hide... And I also see it as a chance to document my path for myself. I promise—the next entries will be more often and thus shorter.

One of my dedicated servers was in bad need of major LVM surgery today. Since the rescue system delivered with the server by the housing provider suffers from lack of LVM support, I needed to pull a creative stunt with grub and grml to accomplish this. The dedicated server rented from strato is the Box I tested in a different article. Installing the LVM-based Debian system via the LVM-less rescue system involved first installing without LVM in the partition which was originally supposed to be swap, booting the just installed system and using this temporary system to finally bootstrap the target. I had originally planned to go this way again in case rescue should become necessary. Today, I checked first whether the provider supplied rescue system had improved in the mean time (which it hadn’t), and I didn’t feel like installing a new temporary system. Instead, I decided to go through a different route, using grml. grml is extremely versatile regarding boot. All you need is to get the grml kernel to boot and point it towards the grml initrd, and the initrd automatically searches the available drives for the compressed file system image, mounts it and continues the boot process. This was the point where I hooked myself into grml. I put an ext3fs on the swap partition and copied the contents of a grml CD to that partition. After thinking a while about how to get ISOLINUX to boot this grml, I remembered that the disk already has grub installed, and decided to use grub to boot grml. This was possible because the provider offers a serial console for the machine. If no serial console had been available, things would have been a lot harder since there would be no feedback and one would have to talk to grub via offline editing of menu.lst. Thanks to the serial console, things were a lot faster. Booting grml via grub is actually easy. After finding out which partition grml is on (find /linux26) and setting this partition as root, all you need is “kernel /linux26 ramdisk_size=100000 init=/etc/init lang=us BOOT_IMAGE=grml console=ttyS0,57600n8”, “initrd /minirt26.gz” and finally “boot”. The “57600” given on the kernel command line was actually the hardest part: Strato operates the serial console at unusual 57600 bps, and grml’s serial console feature starts mgetty with hard-coded 9600 bps. The rather frustrating symptom was that you can watch grml booting, with “Finished execution of main grml startup” as the last sign of life. Knowing that there is a login prompt waiting for you at the wrong baud rate. After talking to Mika from the grml team for some minutes, we decided to take two “roads” to solve the issue. Mika hacked grml’s startup process to parse the baud rate to be used for mgetty from the kernel command line. Since I couldn’t wait for Mika’s fix, I used a grml.sh script to put a fixed mgetty.config over the file contained in grml. After fixing some stupid mistakes on my part, I finally received my grml login prompt and could start with the LVM surgery. Grml is a perfect tool for such tasks since it is extremely flexible and not selective in which medium and partition types it can boot from. It has saved me a lot of grief today and has helped me in solving a difficult problem. Oh, btw, pvmove --alloc anywhere can move a logical volume inside a pysical volume without the need of a temporary physical volume, and it is thus possible to “manually” defragment a physical volume in order to allow more clean resizing of logical values. While it is debateable whether this does really make sense, it satisfies my sense of order to have an LVM setup unfragmented.

While looking at the bugs against the release-notes package I saw still some open bugs for sarge?! I think they should be either closed or marked properly, though for now I just left them untouched. Because I don't have write access (yet?) to the CVS repository, I prepared some patches for some issues. As I know I'm quite dense in explanations, I hope some people can improve them so they can be safely included in the Release Notes I spotted quite some bugs regarding the sarge to etch upgrade path and some bugs which are already acted on, but only need a last review AFAICS. As both these categories are already worked on by other people I'm happy to skip them for now I hope my patches fasten the work on the Release Notes as the release is very near...

I took this photograph last weekend at Consuegra where we went to observe the night sky, just for fun, as we used to do. I'm sure you don't need to be told that Polaris and Ursa Major are the start on the left and the constellation on the right side. And that's why I am not telling you ;-)

Anyway, the interesting thing for me here is the effect of the Earth rotation movement. Polaris is said to be in the Earth rotation axis prolongation (it is also said this will change with time, a lot of time indeed). But, by now, for us, it can be considered a fixed point in the sky: the north point which remains a point in the picture regardless of rotation. Every other star appears as rotating around Polaris, despite the truth is we are the ones rotating. I almost can imagine I see the Earth from outside.

Dear Lazyweb: Is it really impossible to find a full-sized USB keyboard with a built-in trackpoint mouse device but no touchpad? The logical manufacturer would be IBM/Lenovo; however, the current Lenovo keyboards either provide no built-in pointing device or have both a trackpoint and a touchpad (”UltraNav”). I’ve checked in all the regular places: eBay, Pricewatch, Amazon, Froogle, craigslist, etc., and no one has a keyboard with just a trackpoint. I’m sure I’m not the only one with this simple request. This eBay auction is the closest I could find. That keyboard is “French Canadian,” which might not matter, but it is also a “SpaceSaver” model with no numeric keypad and is generally more compressed than I need. On a related note, it is next to impossible to find a Touchstream Keyboard anymore, another brand I was interested in. I often run into this sort of problem. It undermines my faith in the web as approximating a perfect marketplace.

Recently I rebooted one of my Debian Xen servers and suddenly all the Ethernet devices which used to be eth0 in the domU's became eth1.

vif = [ '', 'bridge=xenbr1' ]

I used to have the above as the interface definition and for domU's that had only a single interface that worked well (if there is only one interface then it should be eth0). However in a recent etch update this changed, so I had to use ifrename as documented in my previous blog post. It's annoying when things break because a reasonable assumption which previously worked suddenly stops working.

Even if the bug in question (if it is regarded as a bug) is fixed I'll keep using ifrename, it doesn't do any harm.

The Children’s Online Protection Act, or COPA, requires website operators who provide commercial material that could be “harmful to minors” to verify their users’ age, for example, with a credit card. The statute was immediately challenged as unconstitutional under the First Amendment. A preliminary injunction against enforcement of the law was upheld by the Supreme Court, which remanded the matter for factual development as to whether filters could accomplish the same purpose while interfering less with free speech. (Ironically, the ACLU found itself in the unusual position of arguing for Internet filters in this case.) It was just about one year ago that the Government sought to enforce a subpoena against Google for records of user queries and URLs stored in Google’s database. The court granted the motion with respect to stored URLs but not queries in Gonzales v. Google. It was never quite clear what the Government would really do with the data or why they pushed so hard to get it after receiving what they needed from other search providers. (The U.S. apparently argued Google’s search results would “add luster” to its analysis). In any case, the statute has now finally been held unconstitutional. As Ed Felten insightfully points out, unlike in previous instances where courts have struck down Internet speech regulation, in his opinion, Judge Reed did not provide a roadmap for Congress to try yet again to enact a law that would pass First Amendmend muster. Maybe Congress will leave the issue alone for a while:

Two things make the judge s ruling relatively roadmap-free. First, it is based heavily on factual findings that Congress cannot change things like the relative effectiveness of filtering and the amount of HTM material that originates overseas beyond the effective reach of U.S. law. (Filtering operates on all material, while COPA s requirements could have been ignored by many overseas sites.) Second, the alternative it offers requires only voluntary private action, not legislation. Congress has already passed laws requiring schools and libraries to use content filters, as a condition of getting Federal funding and with certain safeguards that are supposed to protect adult access. The courts have upheld such laws. It s not clear what more Congress can do. Judge Reed s filtering alternative is less restrictive because it is voluntary, so that computers that aren t used by kids, or on which parents have other ways of protecting kids against HTM material, can get unfiltered access. An adult who wants to get HTM material will be able to get it. Doubtless Congress will make noise about this issue in the upcoming election year. Protecting kids from the nasty Internet is too attractive politically to pass up. Expect hearings to be held and bills to be introduced; but the odds that we ll get a new law that makes much difference seem pretty low.

In June I plan to attend the DebConf 7 in Edinburgh. I like train riding and after all it s good for the climat, so I ruled out flying.If you want to go to UK by train, you have to take the EuroStar through the tunnel. The Deutsche Bahn offers a nice package including a sleeper train for 86, so I got that part covered. But that only gets me to London, and I need to go to Edinburgh.So today, I orderd a one way ticket from London to Edinburgh for 28.50 from GNER, one of the private british rail companies, and payed by credit card. Right after I sucessfully booked the ticket, I noticed some problems with the shipping address: An Umlaut in the street name has turned into weird characters and it did not display the counry (Germany) that I m sure I selected. So I immediatelly sent this mail to GNER:

Hello, I just booked this ticket online. It seems there are problems with the German address, though. The correct address is: Joachim Breitner
Ehb hl 33
71083 Herrenberg
Germany (you can replace by ue if necessary) My Booking Reference: xxxxxxxx Thank you,
Joachim Breitner

And got this response:

Dear Joachim

Thank you for your recent e-mail regarding delivery address of tickets.

I can confirm that we do not deliver tickets overseas. However, since our system is automatic, as soon as you click on the 'Buy tickets' button, the tickets are printed and sent in post.

Please remember that once the booking is confirmed, the delivery address/method cannot be changed.

In this case, if we receive the tickets back from the General Post Office, they can be reissued to a UK address and if we do not receive the tickets back, you will have to buy new tickets as your tickets are non refundable.

Please reply to this e-mail with a UK address, where you would like the tickets to be delivered so that I can update it on the notes, and the tickets will be posted, once received back. If we do not receive the tickets back, you will have to buy new tickets.

If you have any further queries, please do not hesitate in contacting us.

Kind regards

Saurabh

Now I really wonder:

• If they don t send tickets abroad, why do they allow me to enter a German address?
• Should I ask my credit card company to deny the payment (if that is possible)?
• How do I get my ticket now?
• And do we really want to privatize the Deutsche Bahn?

Update: I gave them an address in the UK now, I hope it works out (thanks Ben). And the Deutsche Bahn is already privatized, just not publicy traded yet and is 50% owned by the state, I was confusing that.

Tomorrow at 9 in the morning some officers from the Valencian regional Government will drive up to the mountains of the Bartolo, Serra Perentxissa, Montd ver and Carrasqueta to power off the set of antennas which have broadcasted the signal of TV3, the Catalan public television, during the last 20 years for the entire Valencian territory. These news have been responded with protests from most of the Valencian cultural collectives. You can sign a petition, or send an e-mail, which will be swiftly ignored by the people in charge. Behind the official reasoning for this attack to our freedom of choice -the broadcast is illegal- there is a set of good reasons for the usual suspects, the Valencian Partido Popular to do this. The biggest one is that two months before the local and regional elections, the right-wing are doing their math and it may not be working out too well for them. They need to scrape as many votes as they can, and an easy granary is attracting the extreme right-wing, which is a bit active but fragmented in the region, and mostly in the city of Val ncia. This social group is greatly virulent against anything which sounds like Catalan , especially the people known as blaveros , who claim our culture and language has no common root and has nothing to do with the culture and language from the North. Fortunately, the ISO 639 standard and the entire scientific community agree that they are nuts. But back to my rant. So, how can the PP try to get a handful of votes from the right-wing? Easy, start an anti-TV3 show on the media and start scalating it until the final act -tomorrow-, where milions of citizens are deprived of one of the best channels available in our TV sets. This will surely be sold as a major victory against the Catalan invasion or as the end of an "alegal situation", although there are like 30 other channels in the same situation in the city of Val ncia, and the PP-controlled Canal 9 channel is broadcasted in the Balear Islands (also controled by PP) in the same legal situation. In a time when watching Middle-East or American channels is trivial using a satellite set, some people think the best thing they can do is to end a service paid and provided for free by Acci Cultural del Pa s Valenci , an important cultural entity, during the last 20 years, ending the right to choose one of the only channels with all the programs in our language for milions of Valencians. Their right to do it is also challenged in court, but there is no doubt that tomorrow they'll go ahead and shut it off. We could have a reasonable government who would maybe want to accept the Catalan TV and radio channels in our territory, if the Catalan government would also accept our (crappy) channels in theirs, but they refuse this as well, because they now feel insulted . All in all, I had enough of PP long ago, and am hoping I am not the only one. In less than a month, Valencians will celebrate the 300^th anniversary of the Batalla d'Almansa on the 25th of April of 1707, although we seem to be fighting a new battle now in 2007. The Batalla d'Almansa meant the end of the War of the Spanish Succession in Spain, but also the start of tough times for our culture, language, and people, when Felipe V abolished the Valencian furs. But this story can make a blog post of its own next month. Quan el mal ve d'Almansa, a tots alcan a...

I'm proud to announce the next DemoCamp that we're holding in Montr al. DemoCamp Montreal 2 (Fran ais) is a gathering of people, both in high-tech and not, to see demonstrations given by people doing cool stuff. Anyone is welcome to show up and we've got some interesting talks lined up. I'll be there to take photographs again and to chat with people about the projects they've been tending. It should be an exciting and interesting evening. How do you attend? DemoCamp Montr al 2
Thursday, 29 March 2007
18:30 20:30
Societ des arts technologiques
1195 boul. St-Laurent
Free admission ( Sign up Upcoming.org Google Maps ) I hope to see you there!