Search Results: "spa"

2 September 2007

Paul van Tilburg: Off to CONCUR 2007

I had some posts planned, but didn’t get around to it. I’m off to Lisbon for CONCUR 2007 now. I’m flying with TAP (flight TP661) at 18:05. I’ll be back next Saturday (September 8)!

Bastian Blank: linux-image-2.6.23-rc4-xen-686

Xen support finally landed in upstream Linux. Okay, it is rather limited yet, but usable. It supports the following: Changes to the old Xen patch: Yet missing things:

Russell Coker: Out Of Memory Errors and Apache

I’ve been having problems with one of my Xen virtual servers crashing with kernel error messages regarding OOM conditions. One thing I had been meaning to do is to determine how to make a core dump of a Xen domain and then get data such as the process list from it. But tonight I ended up catching the machine after the problem occurred but before the kernel gave OOM messages so I could log in to fix things. I discovered the following issues:
  1. 10+ instances of spf-policy.pl (a Postfix program to check the Sender Policy Framework data for a message that is being received), most in D state.

  2. All my Planet news feeds being updated simultaneously (four of them taking 20M each takes a bite out of 256M for a virtual machine).

  3. Over 100 Apache processes running in D state.

I think that there is a bug with having so many instances spf-policy.pl, I’ve also been seeing warning messages from Postfix about timeouts when running it. For the Planet feeds I changed my cron jobs to space them out. Now unless one job takes 40 minutes to run there will be no chance of having them all run at the same time. For Apache I changed the maximum number of processes from 150 to 40 and changed the maximum number of requests that a client may satisfy to 100 (it used to be a lot higher). If more than 40 requests come in at the same time then the excess ones will wait in the TCP connection backlog (of 511 entries) until a worker process is ready to service the request. While keeping the connections waiting is not always ideal, it’s better than killing the entire machine! Finally I installed my memlockd program so that next time I have paging problems the process of logging in and fixing them will be a little faster. Memlockd locks a specified set of files into RAM so that they won’t be paged out when memory runs low. This can make a dramatic difference to the time taken to login to a system that is paging heavily. It also can run ldd on executables to discover the shared objects that they need so it can lock them too.

Bernd Zeimetz: debconf7 flashback

debconf7 flashback Somehow I didn't find the time to blog during the last weeks, so there's a lot of stuff on my blog todo list. But let's start with a little flashback , back to Debconf7 in Edinburgh. Yesterday I got a film back from the lab with photos I've taken during the daytrip-day. As a few of you probably realized I was not on the train/boat to the island in the west, mainly because Andreas (afit), Julian (codemonk) and me decided to spend the day in Ediburgh, not only for some geocaching fun but also to see a bit more of this beautiful town and area. We've also been up on Arthur's Seat, Edinburgh, where I took this panorama: Creative Commons License It will be published on placesofinterest.info, which is currently in public beta state, but definitely worth a look (just don't use IE, but I doubt you use non-free software, right?). I'll blog more about placesofinterest.info as soon as the page is finished. As usual, the pano was created with the help of The Gimp, hugin and enblend. The only commercial software involved was the software for the Imacon scanner at university. Original resolution: 24044×2551 pixel, stitched from 14 slides. If anybody is interested - large format prints for Debconf participants are available for the cost of paper and ink.

1 September 2007

Russell Coker: A New Spam Trick

One item on my todo list is to set up a bunch of email addresses on sub-domains of domains that I am responsible for (with the consent of all people involved of course) and perform various actions to get the addresses noticed by spammers and measure how effective the various anti-spam measures are. As part of such tests I would click on every URL in every message sent to some accounts and see what difference it makes. My plan is to run a set of Xen virtual machines with different configurations of some common anti-spam measures used in MTAs and see how they fare with sets of accounts with similar publicity. I am not aware of any work having been done in this area (a quick Google search turned up nothing). There are many honeypots for tracking spam sources, matching email address harvesting to spamming, etc. But I’m not aware of any research into the effectiveness of various methods of combatting spam by setting up multiple honeypots. Please inform me via comments if I have missed something! The most common advice about spam is to NEVER click on the URL that supposedly removes you from a list. By clicking on such a URL the spammer can recognise that you actually read the email and therefore know that it’s a live address and a good target for more spam. I am not aware of any good studies proving this, which is why it’s one of the things I’d like to investigate. A counter theory (for which there is also a lack of evidence AFAIK) is that spammers used to measure delivery etc but now that bot-nets are large and cheap it’s easier to just send mail to all possible addresses. Even though I am not aware of any great evidence to support the idea I avoid clicking on URLs in spam messages. Refraining from hitting the spam web-sites can’t do any harm (it’s not as if the meager contribution to their system load caused by my web browser will cause them a problem). But today I was tricked. A spammer subscribed me to a mailman mailing list, as I am subscribed to many lists (about half of which use mailman) the fact that I didn’t recognise the list name didn’t necessarily mean that I hadn’t signed up to it. After signing in I saw the list archives which had only one post concerning spam. I unsubscribed (there was no other reasonable option open to me) and sent the mailman message to SpamCop. This technique will probably be effective for a while. People will think that they subscribes to a list and forgot about it and that it’s just another list that doesn’t have strong anti-spam measures. That should greatly increase the amount of time taken to black-list the spam server. So from now on if I receive a spam via a mailing list that I am not familiar with then I’ll send it to SpamCop immediately. Also this is yet another good reason for not subscribing people to mailing lists without their consent (a practice that is far too common - it’s really not difficult to send someone an email asking whether they would like to join the list). If you subscribe me to a list without prior discussion and the first post I receive on the list is a spam then it will be sent to SpamCop and this might result in you being black-listed.

Erich Schubert: Postfix under siege

Many people will have seen their postfix reporting new errors these days, like if is overloaded:
postfix/master[7287]: warning: service "smtp" (25) has reached its process limit "100": new clients may experience noticeable delays
This is not really because your system is overloaded. To me, it looks more like a (deliberate?) malfunction of some spammers software. When you rejected it's spam mail a few times, it starts opening up lots of connections to your system, but never sends any data. They just sit there and time out.The solution is simple: limit the number of connections per client. Make sure the 'anvil' service is enabled (default at least on Debian) and then add
smtpd_client_connection_count_limit = 10
to your postfix configuration.You should now begin to see messages such as
postfix/smtpd[21680]: warning: Connection concurrency limit exceeded: 11 from unknown[210.210.247.52] for service smtp
A corean cable IP. Yeah, I don't think this would have been legitimate mail traffic anyway.Feel free to pick the limit value even lower than 10 on really busy systems (or if these 'attacks' become stronger) - most people should never need more than 2 parallel connections (note: you can send multiple emails over one connection, there isn't much to be gained by using more than one connection).

MJ Ray: Vuelta a Espa a

Eurosport are broadcasting the Vuelta a Espa a at 19 east from today with commentary in English (analogue only) and German. Scheduled times:-
Sat 01.09.2007
16:30-17:30 CET
Sun 02.09.2007
16:00-17:30 CET
Mon 03.09.2007 to Thu 06.09.2007
16:30-17:30 CET
Fri 07.09.2007 to Mon 10.09.2007
16:00-17:30 CET
Tue 11.09.2007
no show (MTB at 08:45)
Wed 12.09.2007
16:00-17:30 CET
Thu 13.09.2007
01:00-01:30 and 15:45-17:30 CET
Fri 14.09.2007 and Sat 15.09.2007
16:00-17:30 CET
TVEi are broadcasting at 13 and 19 east. Scheduled times:-
Sat 01.09.2007
16:40-18:00 CET
Sun 02.09.2007
16:40-18:30 CET
Mon 03.09.2007
16:35-18:00 CET
Tue 04.09.2007 to Sun 09.09.2007
16:40-18:00 CET
I'll post more times next week. I'd bet on a strong showing from Caisse d'Epargne after a relatively quiet TdF. Who would you tip? If you've not got your satellite set yet, some Lidl specials are still available and most Maplin branches have sets. Finding the broadcasts at 19 east is pretty easy in the UK. See my asteFAQ for hints and links. I've still not fixed my dish up properly, yet it gets most 19 east transmissions.

Russell Coker: Hot-swap Storage

I recently had to decommission an old Linux server and replace it with a new machine. When I was about to turn it off I noticed a power cable of the type used for IDE hard drives leaving the Linux server and entering an NT server that was in the same rack! It turned out that a DAT tape drive used for backup had been shipped without a power cable and they had been forced to take power from another machine. Incidentally is this likely to risk hardware damage? So I had to take the NT machine down to fix it. The new cable had arrived so all I had to do was install it. One thing that wasn’t mentioned on the documentation was that the cable was designed to operate as a double-adapter and replace an existing cable. Once the phone support people had explained this (IBM support is really good - they solved the problem well within the SLA) I was able to correctly wire it. However correct wiring in this case meant having a power cable go through the side of the storage bay and a SCSI cable came from the back of the case underneath the cooling fan assembly (something like 16 separate hot-swap fans in one assembly that can be removed for maintenance). The DAT drive took up space that could otherwise have been used for three hot-swap SCSI hard drives. What I would like to know is, why can’t they make hot-swap DAT drives that use the same power and SCSI connectors as the hard drives? I don’t expect a DAT drive to be any more reliable than a hard drive, and when the system backup is mission-critical then down-time is required for a replacement. Not to mention the effort involved in the installation, my fingers are significantly longer than average, I can’t imagine how anyone with average size hands could complete the job! So IBM, congratulations on the great phone support. But please try and make everything hot-swap when designing servers. Also while on the topic, I think that servers should be designed with external DVD drives connected via USB. I really hate it when I’ve got 10 * 2U servers in a rack, my system performance is limited by the number of disks and every single server has space that could be used for at least one disk sitting idle because there is a DVD drive gathering dust. For the IBM 2U servers in question, they could design them with space for 12 disks or 9 disks and one DAT drive which were all hot-swappable if they were smart about it, the current design supports 6 disks or 3 disks and a DAT.

31 August 2007

Eddy Petrișor: handy stuff for reformatting text

<eddyp> anyone knows of a quick way to reformat a text to a certain with in vim?
<eddyp> width, even
<liw> !fmt -w 42
<pkern> Something along the lines of gq I think.
<pkern> Visual gq says :help gq
<eddyp> liw: ":%!fmt -w 42" should be correct
<eddyp> thanks
* eddyp notes the fmt command for future reference
<liw> fmt is a pretty handy command at times
<ricky> Wow, that is handy.
* seanius is a fan of the J and fmt combo
<pkern> (gq has the advantage that textwidth is obeyed. And fmt could be specified with formatprg.)
<eddyp> pkern: that gq is handy, too
<eddyp> "gggqG" and bam, everything is refromatted
<eddyp> does anyone mind if I post this on my blog?
<eddyp> pkern, liw, seanius, ricky ?
<liw> eddyp, nah
<pkern> eddyp: Please enlighten me why you could possibly need our approval (apart from copying the log verbatim perhaps).
<eddyp> pkern: exactly :-)
<eddyp> verbatim copy; irc is the best source of documentation :-)
<ricky> eddyp: Go ahead :)
<pkern> eddyp: Then please correct the obvious mistake of mine: ":help gq says Visual gq", hah. And I disagree on the usefulness of IRC logs as documentation. :-P
<ricky> As a side note, the -u option seems cut words at spaces properly, which I'd been looking for :)
<seanius> eddyp: if you find my armchair opinions valuable for some reason, then by all means :)

Adam Rosi-Kessel: Targeted Spam

There should be some name for spam blog comments are actually relevant to the entry to which they respond. Might we someday reach a point when spam becomes so relevant that we actually like it? Technorati Tags:

30 August 2007

Steve Kemp: I gotta be cool relax, get hip

Fighting Spam Lots of people get spam and don't want to fight it themselves. Many of those people elect to use a service such as Google Mail, which does an adequate job of filtering most of the time. For people who wish to host their own mailservers, and off-load their anti-spam support to another entity, there are big companies such as MessageLabs. But if you can't/won't pay for somebody else how would you handle it? Right now I run my own mailserver and mostly it rocks. However I also manage a couple of servers for other people, and this mostly means that I have identical configuration(s) scattered across other machines. (Or as I recently discovered "mostly identical" setups scattered across N hosts.) After viewing a recent thread upon the forums of my employers I'm wondering how hard it would be to setup an anti-spam mail host. The idea being that users of domain example.org would continue to run their own mailserver (+optional POP/IMAP server). However this server wouldn't be listed in an MX record. Instead the MX record would point at the antispam server, which would then process and forward the mail on. (I'm assuming that the mailserver at example.org would be firewalled such that it would only accept SMTP connections from the anti-spam host). The only challenges I see would be: The last one is the killer point which makes me wonder if I'm wasting my time on the general case; I don't believe I could persuade people to pay for such a service (on the grounds that I wouldn't!) and if ever a mail were dropped I'd be the first person who would be blamed. And probably rightly so. The simple solution would be to always accept mail - but just tag it. Then you still have the same issue, but you have the excuse that "I still delivered your mail; just tagged wrongly". The downside of that is that the recipient still has to filter the mail; and still eats the bandwidth cost. The main gain is the lack of spam-processing CPU that is eaten locally. Anti-spam, and to a lesser extent anti-virus, topics are very interesting to me, and I'd love to hear any thoughts - or even what you use for yourself. Right now I'm 50/50 on setting up my main mailserver as the proxy for a few domains I have to manage (family, friends) to see how it works, but I'm not quite convinced yet. (Single point of failure == bad. Though centralised configuration == good.)

Russell Coker: Is SE Linux only for Linux?

I have just been asked for advice on whether SE Linux is Linux specific, and therefore whether code related to SE Linux should always be stored with other Linux specific code instead of being in the main branch of certain free software projects. One example of SE Linux access controls being implemented on a different OS is the work to port SE Linux to Mac OS/X. Here is a paper on the topic presented at the SE Linux Symposium 2007, and the main site is at http://sedarwin.org. One thing I have been doing is trying to get some friends interested in doing similar work for GNU Hurd (there are some similarities between Darwin and HURD so the work done on Mac OS/X “Darwin” will help the HURD effort). I believe that The HURD has the potential to offer significant security benefits due to the micro-kernel design. One significant problem area in computer security is kernel security flaws, if the kernel can be split into a set of independent processes that run with minimal privileges then the scope of such problems is dramatically decreased - and the possibility of upgrading parts of a kernel on a live machine is provided. As people such as Linus point out there is a performance overhead to micro-kernels, but most machines are idle most of the time anyway. I believe that reliability and security are more important than getting the last 10% of system performance for most machines. The success of Xen is evidence that features other than maximum performance are desired. Another example of SE Linux access controls on a non-Linux platform is the MAC framework in the TrustedBSD project. This implements SE Linux access controls on top of FreeBSD. From reading the documentation it seems that the amount of changes required to the SE Linux code base for implementation on TrustedBSD was significantly smaller than the changes required for Darwin. Sun is also apparently considering adding type-enforcement to Solaris. It’s yet to be seen whether this happens and if so whether it is compatible with SE Linux. So it seems that a significant portion of the SE Linux code base is portable, and in particular the user-space code should port well. The interfaces for and methods labelling files etc should port well between platforms. Therefore I recommend not having SE Linux code split into Linux specific trees and instead having a compile option to enable SE Linux support.

Russell Coker: Identifying the Distribution of a Linux System

I just needed to test something so I mounted the filesystem of one of my Xen domains in the Dom0 and chroot’d into it (I didn’t need the overhead of running a DomU for a quick test). Then strangely I found that my chroot environment had no apt-get and no dpkg installed. After a small amount of thought I realised that I had accidentally mounted the filesystem for a Fedora image instead of a Debian image. It seems to me that it might be a good idea for distributions to have shell scripts replacing the package tools for other distributions. For example dpkg on a Fedora box could be a shell script that runs echo “This system is running Fedora, you want to use rpm instead of dpkg”. Such a command would have saved me a couple of minutes of thinking. This may sound trivial, but if you consider the number of people who make such mistakes (and the even larger number of people who don’t realise that there is even more than one package tool in existence) then wasting a few K of disk space on every system to help them seems like a good idea. The minimum size of new hard drives that you can purchase seems to be 36G nowadays. So it’s not as if this would really cost anything. Please leave comments to tell me if I’m being sensible or silly. If the idea is regarded as good I’ll start filing bug reports.

Pablo S. Torralba: Shell date and time tricks

One of the things I hate the most when programming is dealing with time and date functions and all the special cases which exists. Even more, I have the feeling I'm walking a path many times walked before, so it becomes one of the most unpleasant tasks for me.

Fortunately, it's true, so many others walked before that path so here are some quick tricks for shell programming using the wonderful date UN*X program:
  1. Converting epoch:
    1. From epoch to anything else: date -d @$epoch_value +FORMAT (where FORMAT is of course as described on date(1), and '@' makes the actual undocummented trick).
    2. From anything else to epoch: date +%s
  2. Calculating times
    1. One day forward: date -d "1 day"
    2. One day backwards: date -d "1 day ago"
    3. Just imagine "1 month", "3 months ago" and the like. Not only google is so friendly with human language ;-)
  3. More format conversion: '-d' option accepts several other formats as input, even with calculations:
    1. date -d "1977-08-19 30 years", yeah! my 30th birthday was on sunday. Thanks date, and it was (as epoch): date -d "1977-08-19 30 years" +%s... 1187474400 :-D
    2. Funny ls:

      ls -l while read perms links user group size d t name
      do
      echo $perms $links $user $group $size $( date -d "$d $t 1 day" ) $name
      done
      You can, of course, change the way date is shown. That's because 'YYYY-MM-DD hh:mm' is also a valid input format for date as it is 'YYYY/MM/DD'.
So '@', '1 day' and 'date' saved me the day.

Update: This features and more are indeed described in the coreutils info manual. Thanks mp for pointing it out.

Enrico Zini: procmailrc-trap

Procmailrc, TRAP and LASTFOLDER I use procmail and lbdb. lbdb is invoked at the beginning of procmailrc harvesting From: addresses from all incoming mail, so that they can later be queried with mutt. It's really neat. However, if it's put at the beginning of procmailrc, it harvests From addresses from spam, too. This causes the ldbd databse to become very big, slow to query, and in some unlucky cases, to return lots of bad results. Problem is, I run the spam filter AFTER I delivered to the mailing lists. The rationale is that mailing lists already do their own spam filtering to some useable level. At least those I'm subscribed to. So, my current procmailrc goes like:
feed a copy through lbdb
filter list 1
filter list 2
...
filter list N for N very big
filter out spam
deliver to inbox
Now, is there a way I could invoke lbdb for every mail except what is caught by the spam filter? A way, I mean, that doesn't involve hooking into each and every of the N list rules an lbdb invocation? Here is the way. In .procmailrc, add:
TRAP=~/bin/scan-nonspam
Then write ~/bin/scan-nonspam:
#!/bin/bash
if [ $ LASTFOLDER:0:4  != 'spam' ]
then
    /usr/bin/lbdb-fetchaddr
fi
exit 0
For reference, this is the documentation of TRAP:
When procmail terminates of its own accord and not because it received a signal, it will execute the contents of this variable. A copy of the mail can be read from stdin. Any output produced by this command will be appended to $LOGFILE. Possible uses for TRAP are: removal of temporary files, logging customised abstracts, etc. See also EXITCODE and LOGABSTRACT.
And this is the documentation of LASTFOLDER:
This variable is assigned to by procmail whenever it is delivering to a folder or program. It always contains the name of the last file (or program) procmail delivered to. If the last delivery was to several directory folders together then $LASTFOLDER will contain the hardlinked filenames as a space separated list.

29 August 2007

Russell Coker: The Silly BMW 745h

BMW has released a new prototype hydrogen powered car. The bmwworld.com web page about it claims the cruising range is 190 miles. Added to the 400-mile range of the normal fuel tank, the 745h can go 600 miles between fill-ups. The first issue is that 10 miles are not accounted for (maybe it finishes the 190 miles of hydrogen power at the top of a hill). But more seriously the hydrogen needed to drive for 190 miles would take as much space as petrol needed to drive for 646 miles (hydrogen needs 3.4* the volume to store an equivalent amount of energy). I wonder if that BMW has any space left in the boot/trunk? Now we have some green bloggers praising BMW. An internal combustion engine that burns hydrogen will not give no emissions other than water vapour, it will produce some nitrogen oxides. The processes to produce hydrogen for fuel all consume unreasonable amounts of energy (more than is required to charge a plug-in hybrid). BMW demonstrates their level of interest by giving the cars to some celebrities. This gets some PR but no analysis of the performance. They also introduce the prototype based on one of the most expensive models (the 745) which you almost never see on the roads. If they produced a 318 or 520 that ran on hydrogen it would demonstrate some level of interest in getting this working for the mass market. If BMW wanted to make their cars more environmentally friendly they would start by adopting some of the technology from the Prius. Rumour has it that part of Toyota’s plan to make money from Prius development is in licensing the technology that they patent. A couple of years ago I test drove a BMW 316 and a Prius. The Prius was very quiet and gave a smooth ride (you might call these luxury features), and also gave decent performance (it’s widely regarded that luxury cars should perform well - pity the BMW 316 is a slug). In Australia the concept of “badge engineering” of cars is well established. When government subsidies favoured large manufacturing runs the Ford Laser and Mazda 323 were essentially the same car. Maybe BMW could adopt this concept and sell a re-badged Prius i-tech with a few extra luxury features as a BMW 4 series (it’s a much better car than the 3 series BMW). Finally bmwworld.com has an amusing FAQ about hydrogen power, here are some of the mistakes that they make:
  1. They say “About 45 billion kilograms (50 million tons) [of hydrogen] is produced every year enough hydrogen to fuel 250 million fuel cell cars“, but only if the average fuel-cell car uses 180Kg of fuel per year. According to Wikipedia hydrogen has slightly more than 3* the energy density per mass than petrol, so 180Kg of fuel would be equivalent to 540L of petrol per year. The Australian Bureau of Statistics states that in 1996 the average annual distance travelled by car (it’s not clear whether this is per car or per person) was 14,600Km while among the countries listed the lowest was Japan with 10,130. When efficiently using hydrogen in a Prius (that is quoted as using 5.4L of petrol per 100Km) you might expect that 540/5.4*100=10,000Km could be travelled on the 180Kg of hydrogen. So the FAQ claim that 250M cars could be powered by the current hydrogen production would only apply if the cars are of Prius efficiency and driven the typical distances of Japanese drivers, or the cars were 46% more efficient than the Prius and driven in the Australian manner. Of course in the US things are even worse with 17,862Km being the average distance driven which means that their hypothetical fuel-cell car would need to be 78% more efficient than a Prius.

  2. They state that “the majority of merchant hydrogen is produced by a process called steam methane reforming“. Why not just run cars on methane then? Anything that burns can be used to fuel cars, and methane has a much higher boiling point than hydrogen so it would be easier to store and transport (see the Wikipedia page on methane).

  3. In regard to hydrogen production they say “about 95% of the total global hydrogen production is captive meaning it is used at the site where it is produced“, that is of course because it’s difficult and expensive to transport hydrogen.

  4. The final amusing fact is that it is noted that most hydrogen comes from fossil-fuels. What problem are they trying to solve here? Hydrogen isn’t going to help the environment if it comes from fossil fuels, it will be more expensive than other fuels. Apart from getting government grant money for BMW it doesn’t seem to do any good.

Jeff Bailey: Ready to ride again!

We're in Albuquerque, NM now and have been for a couple of days. We made such excellent time across Oklahoma and Texas that we were able to stop and take a break for three nights.

Texas: Holy *crap* is Amarillo a dirty place. We spent three times what we've spend on any hotel this trip in order to get a place that we were sure was insect-free. And what we wound up with was a place over top of a bar. Luckily it wasn't all country, so we didn't mind too much. It was also (surprisingly) the best breakfast I'd had on the trip. They did hash-browns on a griddle, and had lots of ketchup (do I have to spell it catsup now?), tabasco, and pepper to go on it. Weirdly, they also had pre-mixed peanut butter and honey. Otherwise, the truck stop we stopped at had cockroaches on the floor, the bottled-water bottles were dirty on the outside, and the place smelled like an airport tarmac.

We left early and headed out to Albuquerque. Aside from the fact that whoever laid out the roads was certainly drunk at the time (We drove around in circles three times trying to get to a hotel we could see, but not find a way to legally drive to before giving up and going to a different hotel) this place is really pretty. I came here for my last meeting as a Regional Organising Consultant for Young Adult and Campus Ministry and got a chance to see a bit of the place and really wanted to show it to Angie. Instead we decided we'd had enough of driving and traveling. This hotel has laundry facilities and the town has a Whole Foods Market, so we stocked up on microwaveable foods, washed our clothes, watched TV and I finally finished Harry Potter during a nice long bath.

The next day (Yesterday), we headed out to the Puebo Cultural Centre to see the art pieces and learn a little about their successful resistance against the spanish resulting in actual land grants to the 19 local groups. We also got to see how different groups have influenced them over the years, with ancestry tracing something like 12,000 years back. From there we managed to find the old town and got to see the type of architecture that I wanted to show Angie. The little pink houses don't *just* exist in DisneyLand. ;) We went to a restaurant that looked really familiar - I think we ate there when I was here last. We had some wonderful New Mexico food and I introduced Angie to what the local sopapillas are like. Here's they're large puffy things, whereas the sopapillas in Texas and back home look like soft tortilla chips.

I've started uploading some pictures to Flickr, but it turns out that I hadn't done so since before Juniper's wedding and have over 400 pictures to send. Between hotel wireless being slow and f-spot being a fragile piece of crap I managed to upload something over 100 pictures of Leif to the family-only archives before giving up. I'll probably post the Opus pictures up on Facebook rather than flickr so that it's easier for other Opusers to find them

The next target is Flagstaff, AZ for Thursday night. We're meeting Karina and her husband for a day of wandering around the Grand Canyon, so we'll see if there's some interesting things between here and there. I suspect there will be. =)

*hugs*, all! Less than a week until I start my new job! I'm excited!

Peter Makholm: Best Current Practice for mail forwarding?

While SPF seems to be among the currently used technologies for spam protection, SRS looks rather dead. But forwarding mail breaks SPF without workarounds. So what is the best current practice? The forwarding part of SRS is rather simple, but I havn’t found any clear way to implement the actual handling of bounces. It wouldn’t be hard to hack some usage of Mail::SRS onto postfix but there doesn’t seem to be an off the shelves solution?

Miriam Ruiz: Internationalized hex-a-hop

The first serious i18n effort for the Games Team is now bearing fruit. The newer version of the game hex-a-hop is now entering Debian. All the merit goes to Jens Seidel, who has developed the patches for making it work with SDLPango and to support all the spectrum of Unicode characters, instead of the limited ASCII set included in the game, as well as to all the people of Debian i18n who have done the translations (Helge Kreutzmann, Damyan Ivanov, Enrique Mat as S nchez, Bas Wijnen, Piotr Engelking, Yuri Kozlov and Clytie Siddall). The game has already been translated to Bulgarian, German, Spanish, Dutch, Polish, Russian and Vietnamese. Thanks Jens, both for taking care of the changes in the code needed to achieve this, and also for coordinating all the t10n and i18n process, as I don’t really have much experience in those areas.

Joachim Breitner: Internet Trading Game Idea

Reviving parts of my old MuMer idea, I thought of this trading game yesterday. Before I start hacking: What do you think? Who would want to be beta-tester? Any other things to consider?The idea is to freely trade goods (think wood, stone, gold as currency etc.) online, on your trading partners website. The whole point will be that you will more or less stumble across other people to trade, e.g. on their blog, on some wiki page or their myspace or StudiVZ page. There you will see that he wants to trade MuMer goods, maybe with a list of things he d sell and buy, and for what price. From there (and only from there) it is only one click to the MuMer page where you can actually trade, maybe leaving a message as well.On the MuMer page itself, there would be no list of users or so. To find someone to trade you ll actually have to look somewhere else and trade again you have to go to the other persons blog again. (I imagine this can be reasonable enforced by checking the referrer.) So taking part in the game, you also draw some people to your web site.For the reward I could imaging that once you have a certain amount of specific resources, you can buy special items or even buy the skill to manufacture more special and hopefully attractive items.This is the rough sketch. What do you think?

Next.

Previous.