This weekend will see the second Bug Squashing Party hosted in Utrecht, this time to help get Debian Lenny released. Stichting NLnet has generously provided funding for the cost of food and drink. For all details see the wiki page.

Here's a selection of pictures from a recent visit to the Efteling.

Click the icons for full versions or view full set. I'm still planning on making yet another web photo album software of my own based on a revolutionary idea. Maybe I will actually do it sometime, who knows.

For a project I was looking for a way to use GNU Mailman for mailinglist management (especially its powerful web based moderation, bounce handling and attachment scrubbing features) but storing the mailinglist member information in a SQL database. That's useful when you want to relate mailinglist members to extra information already in a database and functionality on an interactive website, and it's possible on a per-mailinglist basis. This turned out to be not very difficult but just not that clearly documented. What I used:

• Mailman. I used the 2.1.x version packaged in Debian etch: an "open" system is just one apt-get away!
• The MySQL Member Adaptor available from rezo.net. There are several versions of MySQLMemberAdaptor around the web, but this one seems the most recent.

This explanation assumes you know how to work with Mailman in a regular setup, and things like creating databases and users under MySQL. Take the following steps:

1. Install and set up mailman as you would otherwise.
2. Put the MysqlMemberships.py file into the dir that is Mailman's base, this normally already has files like MemberAdaptor.py in it. For Debian this is /usr/lib/mailman/Mailman. You only need to add MysqlMemberships.py, the other files from rezo.net are not needed.
3. The create table query in MysqlMemberships.py does not work with MySQL 5, I had to apply this patch which I've sent to MySQLMembership's author in the meantime. This patch has been applied by Fil.
4. Create a database and a MySQL user, and add that information into your mm_cfg.py, like this:

   MYSQL_MEMBER_DB_NAME = "mailman"
   MYSQL_MEMBER_DB_USER = "mailman"
   MYSQL_MEMBER_DB_PASS = "somethingrandom"
   MYSQL_MEMBER_DB_HOST = "localhost"
   MYSQL_MEMBER_TABLE_TYPE = "wide"        # wide means one table per list, flat = one large table

5. Create a mailinglist like your normally would (e.g. via newlist). To enable the MySQL backend for just that list, create a file extend.py under /var/lib/mailman/lists/listname with the following content:

   from Mailman.MysqlMemberships import MysqlMemberships
   def extend(list):
           list._memberadaptor = MysqlMemberships(list)
   

   (whitespace is significant in Python).
6. It should work now! Upon receiving the first request for your list, the database table will be created automatically, which you can then populate. You may need to restart the mailman qrunner after you make further changes to your setup.

My previous entry features the first ever comment on this blog to arrive over IPv6. Fantastic! I guess this will be the final breakthrough that the protocol needed!!

A survey has shown that 16% of youth doesn't know why we're celebrating the 5th of May. According to quality news show Editie NL, this is a worrying fact. Well, is it? I find it rather reassuring that appearently 84% of the younger generation do know that 5 May is about the libration from German occupation (I remember now that I forgot to thank the Canadiens when I was there two weeks ago). 16% is not much: if you get a 16% discount you're usually not making a great deal. Actually, I would be very surprised of a survey that would show that less than 16% of people are completely ignorant of the world around them. These same people probably would't know the connection between the colour of the national team's shirts and the royal house, or be able to tell whether St Nicolaas is a protestant or catholic. Or the ones that claim money because -6 is larger than -5. Every country has its fair share of "challenged" people. Also in recent news is that Barack Obama is losing votes because he admitted to eating rucola (arugula) from time to time. Voter's "reasoning" boils down to "if I don't know what that is, then a president that eats it can't be trusted". It gets even more sad when you realise that these people probably do know it, but don't realise they call it rocket. Great way to lose votes.

A survey has shown that 16% of youth doesn't know why we're celebrating the 5th of May. According to quality news show Editie NL, this is a worrying fact. Well, is it? I find it rather reassuring that appearently 84% of the younger generation do know that 5 May is about the libration from German occupation (I remember now that I forgot to thank the Canadiens when I was there two weeks ago). 16% is not much: if you get a 16% discount you're usually not making a great deal. Actually, I would be very surprised of a survey that would show that less than 16% of people are completely ignorant of the world around them. These same people probably would't know the connection between the colour of the national team's shirts and the royal house, or be able to tell whether St Nicolaas is a protestant or catholic. Or the ones that claim money because -6 is larger than -5. Every country has its fair share of "challenged" people. Also in recent news is that Barack Obama is losing votes because he admitted to eating rucola (arugula) from time to time. Voter's "reasoning" boils down to "if I don't know what that is, then a president that eats it can't be trusted". It gets even more sad when you realise that these people probably do know it, but don't realise they call it rocket. Great way to lose votes.

There is some discussion again about what should be on topic for Planet Debian, whether it should be used for Debian-related announcements and what the archival policy should be. I believe that this discussion is rooted in two circulating views of what Planet Debian should be:

1. A forum for DD's to post Debian-related thoughts and ideas, to be used for those cases where they think a mailing list post may be less appropriate;
2. A way to collect stories about what DD's do and think in any context, the human interest angle: get to know your Debian peers more than just in technical matters.

Although I always regarded Planet Debian to be the latter and I appreciate reading posts telling me about someone's job or other interests, either one isn't an invalid approach per se. They do however prompt different choices about listing policy (Debian-only feeds vs. everything goes), how much effort it is to keep up with them and perhaps archival. The best way to match the expectations of those two groups would be to create two "planets", one for each group. Create an aggregator where any DD can add any of their feeds, and another one with a strict listing policy: only feeds that carry posts actually related to Debian development matters (probably a subset of the first). Then only the question remains which one will get to carry the Planet Debian name...

We escorted Sarge to its last home. 3.1r8 is done, thanks to all the people who made it possible. A big thanks goes to James Troup, our ftpmaster of the day doing all the grunt work of getting a new point release out of the door. To bring in a more personal feeling of who makes this all possible, here is a list of people contributing uploads to 3.1r8 (mostly people from our fabulous Security Team):

• Alberto Gonzalez Iniesta
• dann frazier
• Darren Salt
• Devin Carraway
• Florian Weimer
• Gregory Colpart
• Julien Cristau (who is glad that he finally got rid of xfree86)
• Luk Claes
• Martin Pitt
• Michael Koch
• Moritz Muehlenhoff
• Noah Meyerhans
• Patrick Schoenfeld
• Roland Mas
• Russ Allbery
• Sean Finney
• Steffen Joeris
• Thijs Kinkhorst

I would also like to thank dann frazier, Luk Claes, Martin Zobel-Helas and Neil McGovern for helping with the preparation of the point release.

Since about half a year now we have a fibre to the home connection. This means that two fiber lines terminate at a box in our living room. It is a blown fibre which means that a tube is buried to your house, after which they use air pressure to put the actual fibre from the house to the POP. There are two fibers: one for bidirectional data (IP), and one that does nothing more than carry the analog cable TV signal. We started out with only the internet facility but now have so-called triple play: phone, analog tv and internet connectivity. The results are in: I find it to be just as good or better than the previous offerings: phone from KPN, tv from Casema or internet from Surfnet. But there's nothing revolutionary. Phone and tv just provide the same service over a different medium. The internet connection is with the standard of 24 Mb/s more than fast enough for any day to day use and an upgrade to 50 Mb/s is pending. A real improvement is that the upstream speed is just as high, very useful when uploading photos, packages or the text of this blog post. One drawback is that they only provide one IP address instead of 32. Also, the service provider (XMSnet) does seem to be a bit stuck in the late nineties with an unfriendly help desk telling you that your situation is impossible , and bad billing, There are plans however to open up the line to other providers in the future. So for now it's just a convenience bundling of services, but nothing really ground breaking. Let's see what the future brings.

This weekend, like past years, I'm off to the Free and Open Source Developers European Meeting in Brussel(s), joining Jeroen and Joost in our friend Geert's car. I recently leared that Belgium is the only seaside country that doesn't have an island. If that information is not worthy of a blog entry then I don't know what is. As you can see I'm certified to attend:

This January I've put some research (together with Dick) into the security of electronic waste registration techniques. About 25% of Dutch municipalities employ some kind of tariff differentiation ("diftar"): a household pays per quantity of waste. A traditional way of implementing this is to use coloured, taxed garbage bags, but more modern municipalities employ bins with RFID tags or underground containers which can be opened with (again) RFID cards. These underground containers then communicate their records of disposals to the central office. We visited a number of municipalities around the country, scanned ID cards and containers and even tooka ride on a garbage truck. Some highlights of our findings:

• Most access cards for underground containers can be trivially cloned; they are EM4x05 type cards with factory UNIQUE.
• In one municipality, we could open the underground containers with any card of the EM4x05 type, regardless of origin. With one notable exception: 0x0 doesn't work.
• One type of tag has preventive measures against readout (and hence cloning), but these features are not used.
• Virtually no encryption is used in any of the communications, e.g. plain HTTP was used for worldwide access to the adminsitrative backend interface. Again one exception: a new version of a system used WEP to "secure" wireless transfer of data...
• There's no security awareness among municipalities. Defined requirements concern the physical robustness of systems or collection costs, but no demands are placed on information integrity or confidentiality.

We saw many different systems with each having their own flaws. It would be better if municipalities joined forces and designed one or two good systems instead of a dozen half-baked ones. These public systems funded with public money should then have a similarly public security evaluation.

While stuff is upgrading I can update on a previous entry. In Delft Hieke and I had an excellent dinner in restaurant l'Escalier, who specially prepared a vegetarian menu for us. The establishment was fully booked yet not very noisy, with very personal and friendly service with a good wine selection. The next day was the big day of Rudy's defense. We (Rudy, David and I) started at 8 in the morning to put on our costumes, after which we went to prepare the defense. From my point of view it all went quite smoothly. David and me could even be of useful assistance by reading out some of the propositions during the ceremony. It turned out that Rudy's research into Multi-Agent Model Predictive Control was convincing enough for the committee to hand him his PhD degree (see below). After which there was the appropriate celebration in the form of a good dinner and some welcome beverages after a very long day.

There's completely no one here. As it should be. Except for myself of course. klecker should be hosted here aswell. But which machine could it be? I'm not sure who left the [what's the English word for schrift/Heft/cahier] with the cat here? Seems to be an AFC Ajax fan. Hope he types better than he writes. This phone makes acceptable pictures for small resolutions. Back to work.

The two principal thigs I despise:

1. People with folding bikes on the train. (They're very common here; I'm not sure how well known this concept is internationally, but it seems quite a self-explanatory term to me.)
2. People that complain that up-market restaurants "always serve such small portions".

On a more positive note, I'm here in Delft for Rudy's promotion tomorrow. The hotel is set in a pervasive seventies style (deliberately), but still does offer wireless internet.

The NW-Europe Programming Contest NWERC is over (for two weeks already). The winners were from Oxford, and the best Dutch team were our Utrecht prodigies at number 7 (full standings). If I may, I think it's been a great success, but of course, there's in our eyes much to be improved. And we will, in 2008. We also got some compliments about our own jury system DOMjudge, which is nice to hear. Even more good news is that we were allowed to send three teams off to the ICPC World Finals. These finals are in Bannf, Canada and I'll probably be there aswell.

Two weeks from now, the NW-European Programming Contest (NWERC) of the ACM ICPC will have started here in Utrecht. Things are going well - the problem set is ready - but, as always, a lot of small things are still to do: ordering t-shirts and balloons, finalizing food and buildings, etc. However, I think if we would halt all preparations now we would at least have a basic contest in two weeks. Registration is almost over, and the list of teams shows that we have participants from nine countries representing 26 institutions distributed over 51 teams.

I spent some time today trying to find out why in a simple quota configuration on Debian etch, edquota keeps failing:

# edquota thijs
Segmentation fault

I haven't pinpointed the exact cause, upgrading the kernel didn't help, but what did help is taking the quota package from unstable and recompiling it for etch. I'm posting it here so it might help someone else with the same problem; I may create a backport for etch of quota when I get home later.

Last Saturday we organised the Utrecht Programming Championship, which apart from declaring a local champion also selects for the Benelux championship. Team A-Cognito won by solving 6 out of 8 problems, the best score of all cities organising parallel contests. See the results here. We organise this every year, but this year was special as it was a general rehearsal for the North Western European contest that we are also hosting this autumn. This is part of the ACM ICPC worldwide network of contests which culminate in the ICPC World Finals. Luckily everything went great. Of course there were some problems, but they were resolved in a calm and adequate fashion. It gives good hope that NWERC will be a success, at least from the techinical side...