Problem solving
pumpkinhead
[info]thisisthehabit
  • User calls. "How do I make a PDF smaller to email it" ?
  • Me: [talks user through PDF optimiser]
  • User: it still doesn't work, it comes back to me.
  • Me: Odd. Did you have a look at the file size?
  • User: No. [looks] It's exactly the same as the old file. 2.5 Mb.
  • Me: Hmm, that's not very big. Got the bounce message? Have a look and see what the error is.
  • User: Its in my trash. [looks] blah blah unknown address
  • Me: Well, that's a hint, then.
  • User: Guess so :S
    • The point? You don't have to be technically savvy to use simple problem solving skills, whether with computers or anything else. Instead, people seem to jump to a random conclusion, or at least one that's been the right answer one or more times in the past (but not always), try that, and get stuck.

      I don't get it. I'm honestly puzzled and confused. We learned this stuff in primary school, right? Simple problem solving is a basic life skill. Why is it that so many people can't, or won't, do it?

      Sure, they're often scared of computers and "turn their brain off" to an extent, but I see this all the time in other areas, technical and non-technical, to the point where I wonder how some people manage to live day to day.

Tags: ,

Maginot line
pumpkinhead
[info]thisisthehabit
Peter Thrush of ICANN recently commented that the Australian Internet Filter proposal is akin to the Maginot Line of WWII French fame. We all know how well that worked.

This is a surprisingly good analogy. The Maginot line presumed that the attacker would do what was expected of them, and wouldn't take the defenses into consideration when planning what they were doing. In much the same way, the Australian internet filter presumes that if it blocks what people do now, they won't change their behavior to circumvent the blocking with trivially available tools and techniques like encryption, tunneling, outside proxies, etc.

We already know that's an invalid assumption - not only is it rather contrary to general human nature, but it's being seen over and over in China with the Great Firewall. This despite the fact that China's Great Firewall is much more restrictive than Australia's is ever likely to be even under the most moralistic, conservative, idiotic government. Let's not forget, also, that in China it can be unhealthy to circumvent blocks that prevent you from accessing or posting information that's not meant to get around ... something I don't see becoming the case here.

So - in much more hostile circumstances, people still just waltz through the Great Firewall. Heck, I've done it myself - I had a workmate in China who needed unfiltered access, and it was the work of a few seconds to help him set up an encrypted SSH tunnel to a proxy on work's servers from which he could get to whatever websites he liked and do so undetectably. It's not even possible to tell that the encrypted data is web browsing data rather than something else.

Once again, it's clear that the only way the internet filter can work is if it's a whitelist. If a site isn't approved, you can't access it. If a protocol can't be inspected and content-filtered, it's blocked. No encryption of any sort may be used. Even that's imperfect due to cracking of whitelisted sites and use of them for proxies, etc.

It's a dumb idea. Why are we still wasting time and taxpayer money on such blithering idiocy?

Free stuff
pumpkinhead
[info]thisisthehabit

Anyone want:

  • A couple of different sizes of pine bookshelf
  • Up to four off-white armchairs (very comfy)
  • Some white deck chairs.

They're all just outside Perth city, off Lord St north of the freeway. Details on request.

There also might be a 24 inch CRT monitor (like this but without the hood and colourmeter) going later, though it's not a sure thing yet. Mention if you'd be interested. It's a great monitor, but do be aware that it's incredibly heavy - something like 40Kg - and not small.

Now ... I'm going to slip into blessed unconsciousness for a while.

Tags: , ,

Rebuilding debian/ubuntu packages
pumpkinhead
[info]thisisthehabit
This post is mostly a note-to-self reminder, but might be quite handy for other Debian / Ubuntu users. )

Getting central certificate management working on modern Linux
pumpkinhead
[info]thisisthehabit

Modern Linux systems actually have a central certificate store. It's a bit lacking in management UI so far, but it works, and you can use it instead of loading your PKCS#12 certificates into every app you use manually.

First, import your certificate into the GNOME keyring with:

gnome-keyring import /path/to/certificate.p12

Install the libnss3-tools package (containing modutil).

Now exit every application you can, particularly your browser and mail client. Kill evolution-data-server too.

Find all instances of the nss security module database on your homedir, and for each one (a) test to make sure it's not open and (b) install the gnome-keyring PKCS#11 provider in it. The following shell script snippet will do this for you. Just copy and paste it onto your command line:

for f in $(find . -maxdepth 5  -name secmod.db -type f  2>/dev/null ); do
  echo "Testing: `basename $f`"
  if fuser `dirname $f`/cert8.db >&/dev/null; then
    echo -n "In use by: "; fuser `dirname $f`/cert8.db; echo " - Skipping"
  else
    modutil -force -dbdir `dirname $f` -add GnomeKeyring \
            -libfile /usr/lib/gnome-keyring/gnome-keyring-pkcs11.so
  fi
done

Now all your NSS-based apps should know about gnome-keyring and use the gnome-keyring certificate store.

If you use Evolution and want client certificate support, patch evolution-data-server as per GNOME bug 270893 to enable that too. It'll use gnome-keyring automatically.


Getting GNOME Evolution to offer a client certificate for IMAP SSL/TLS
pumpkinhead
[info]thisisthehabit
GNOME Evolution isn't noted for its client certificate support. Entries in the bug tracker about it have rotted for years, and it has absolutely no acknowledged support whatsoever. Most other mail clients have had client cert support for years if not decades.

Unfortunately, Evolution is quite attractive in other ways - calendar integration, LDAP address books, etc. Unlike Thunderbird (especially when large images are involved) it also has acceptable performance over remote X11 connections.

So - I'd rather like to be able to use Evolution, but it's client support ... isn't.

It turns out, though, that Evolution uses the Network Security Services library from Netscape/Mozilla . It's used, among other things, for IMAP SSL/TLS support. This library does support client certificates; after all, Thunderbird and Firefox support client certificates and they do their crypto through NSS.

Is it not then possible to introduce a client certificate at the libnss level, so Evolution doesn't even know it's doing client certificate negotiation during its hand-off to NSS for SSL/TLS setup?

Why, yes, it is, and it takes one line of code in camel-tcp-stream-ssl.c to do it.

camel-tcp-stream-ssl.c:
-	/*SSL_GetClientAuthDataHook (sslSocket, ssl_get_client_auth, (void *) certNickname);*/
+	SSL_GetClientAuthDataHook (ssl_fd, (SSLGetClientAuthData)&NSS_GetClientAuthData, NULL );

Dongles are evil. E.V.I.L.
pumpkinhead
[info]thisisthehabit

The device you see on the right is actually the devil. Or, at least, it's close enough if you are a system administrator.

It is a single piece of hardware that controls your access to business-critical programs. Lost the dongle? Whoops, no classified ads in the newspaper this week. Dongle broke? Ditto. Dongle fried by a computer malfunction or power fault? Ditto. Computer stolen? Ditto.

What's even more fun is that as computers move on and older interfaces become obsolete, it becomes hard to even find a computer you can plug the dongle in to. Most machines don't have parallel ports anymore, so parallel dongles like this one are a big problem. At least that can be worked around using USB adapters.

Of course, then you run into exciting issues like XP being unable to allow 16-bit code access to the parallel port. The program would work fine on XP, but for the stupid bloody dongle. So you're forced to maintain legacy hardware or waste time on complex emulation/virtualisation options just to get the program working, when it'd be just fine but for this dongle.

So, if you are ever offered software for any reason that requires a dongle, just say no.

Getting a Rainbow CPlus or Sentinel CPlus working under XP )
Tags:

Gilligan got a free 19" monitor
pumpkinhead
[info]thisisthehabit
Details that no longer matter )
Tags: ,

Argh! Laptops! Computer vendors! Die, die, die!
pumpkinhead
[info]thisisthehabit
Soo ... my Dell XPS M1330 just died. It's an absolutely fantastic laptop model; not only that, but it'd cost more to replace it with an equivalent-performance model than I paid for it two years ago.

It worked half an hour ago on the train here. I opened it here, and fizz. Vertical coloured lines, no POST, no external display init. GPU fried. Thanks, nVidia.

It's not really Dell's fault; it's an issue with NVidia's 8400M, 8500M and 8600M GPUs that was discovered well after release. See: report. NVidia knew much earlier but kept it hush-hush. However, once the issue did come to light Dell did nothing to act on it until forced, and their "fix" was a driver and BIOS update to lower fan cooling thresholds - in other words, to hopefully delay the failure until the warranty expired. Thanks guys, nice work.

They did extend the warranty by a year. It's not clear if that extension applies if you already have the 3 year warranty, but it'd better.

I'd be frothing and ranting about Dell except that in this regard, every laptop manufacturer I've ever dealt with is exactly as bad. Sometimes they do a great job and handle the issue really well; others they do crap like this.

I still haven't got a straight answer out of them as to whether the spare part will have the same defect as the original or not.

Oh, and Apple fanboys: this is not a good time for you to speak up. I have a list of Apple hardware defects, plus denials and lies about those defects, so long you'll be crying way before I get to the end. Know anyone who got to their fifth iBook motherboard before their warranty ran out? I do, and you probably do to.

(update: but wait, there's more...) )

What is wrong with electric cars
pumpkinhead
[info]thisisthehabit

Fully electric and Petrol/Electric hybrid vehicles are currently all the rage. Based on manufacturer numbers and demos, they look pretty cool, too ... minimal fuel consumption with long ranges and decent driving performance at city/highway speeds.

Unsurprisingly, there's a lot that's not highlighted by the manufacturers and press releases. Some of it is rather troubling.

The batteries, oh god, the batteries

Electric vehicles require batteries. Batteries, unfortunately, are one of those "fast, quiet, cheap - pick two" technologies. In the case of batteries, there's a trade-off between size&weight, energy density (battery capacity), lifetime, and cost.

( See Battery University for more than you ever wanted to know about batteries. )

All the modern battery chemistries have downsides.

  • Lithium-ion batteries are small, very powerful and don't suffer from problems caused by repeated small charges - but they age with time and use, falling rapidly in capacity such that under medium use a lithium battery will be under 40% capacity in 18 months to two years. Lithium batteries also degrade rapidly in heat, so if you leave your car out in the sun in Western Australia its batteries will probably be useless within the first year. Once they wear out, there's no bringing them back - they need to be broken down to extract the lithium salts and re-manufactured. New battery packs will be eye-bleedingly expensive. Oh, did I mention that lithium-ion batteries like to explode under extreme conditions and when damaged?
  • .
  • Nickel metal hydride (NiMH) batteries aren't as powerful as Lithium ion, and aren't as robust in the face of repeated small charges. They last a bit longer, though. NiMH batteries are used in the Prius, and seem to be a fairly sensible choice for hybrids ... but once they die, there's no bringing them back. New battery packs will cost quite a bit. At least NiMH packs aren't full of toxic nasties.
  • Nickel-Cadmium batteries are even less powerful (energy-dense) than NiMH. They also don't like lots of small charges ; they tend to need to be fully charged and fully discharged regularly. Not ideal in a commuter vehicle. On the upside, they last a long time and can be reconditioned to most of full capacity when they begin to wear out (say, as part of regular car servicing). Unfortunately, cadmium is nasty stuff.
  • Lead-acid batteries have low energy densities, so they weigh a lot and take up lots of room. They also contain lead, which isn't lovely stuff, but is at least easily contained and disposed of. The upside is that they're cheap and they last nigh-on forever, which is why they're the main car battery in use in normal cars even now.
  • </li>

    As you can see, there isn't really a great battery technology for cars. Take your pick: toxic and poorly suited to lots of small charges, short-lived and expensive, toxic and less than happy with small charges, or bulky and heavy.

    Of course, the bigger, heavier, and bulkier the battery the more work the car has to do hauling its own batteries around, so there's a HUGE incemental improvement in efficiency as you increase energy density. This makes lead-acid even less attractive.

    So ... before you go "wow" when you see that new Lithium-ion powered city smart car, think about how you'll feel about it when the "replace battery" light begins flashing when it's 18 months old, you discover that the battery isn't covered by the warranty, and it can now only make it to your work and half way back.

    (The first person to comment with a suggestion that the "Hydrogen Economy" will solve all these issues will be ... oh, I don't even know, you should already know better)

    As if that wasn't enough, some other issues with hybrid and electric vehicles )
Tags:

SCUBA
pumpkinhead
[info]thisisthehabit
I'm back from SCUBA dive training in Exmouth with my brother Paul at the Exmouth Dive Centre. This involved classroom work and pool dives for two days, a day's break, then four open-water dives across two days in Lighthouse Bay on the Ningaloo reef. It was absolutely awesome, not least because of our two lovely instructors - and the fact that Paul and I were the only two people in the course group!

During the various open water dives I saw innumerable interesting tropical fish. I was followed around by a confused-looking Remora. I watched sea snakes swimming around and poking into little holes in the rock. There were hordes of green sea turtles swimming around, surfacing to breathe, or sometimes just sleeping nestled in the rock. White tipped reef sharks were snoozing on the bottom or zooming around - I love the power with which they swim. Octopi were hiding in crevices in the rock, as was a cute little moray eel. I even saw a Wobigong shark (totally awesome - almost ray shaped, but all camouflaged and uneven and knobbly) nestled in a big crack in the rock.

The dive instructor and her assistant who we were diving with surfaced after every dive and said things to the effect of "wow, that's the best dive I've ever had at this site". Paul and I just seemed to be good luck charms for attracting awesome things.

The dive instructor Paul and I were studying with was just fantastic. Very capable and experienced, good communicator, confident, clear. Also great fun and good humoured - and not in any sort of forced way. The dive master who was along to observe as part of her own training was also great, so between them we had a brilliant course. We powered through the classwork and had no trouble with the pool dives, so there was plenty of room for run and silliness.

Diving is so free and comfortable and easy that it's hard to really explain. It's the closest thing I can imagine to microgravity. Once you get the hang of your buoyancy control device and of using your breathing to tune your buoyancy, the freedom to move in all dimensions and not even care about orientation is amazing. Hanging head-down to peer under a ledge just seems natural, as does swimming up-side-down watching the bubbles rise while a turtle swims overhead on its way up for air.

Diving would be fun even if there wasn't awesome stuff to see.

It's not effortless, though. There's a fair bit of work involved just in moving around; you don't realise it at the time but when you surface to change tanks or to return for the day you realise you're well and truly tired, and utterly ravenous. There's also a lot to learn to dive properly and safely, though once you understand it and get the hang of it it's not a big deal. You do need to be confident in and under the water, since you'll be taking your mask off under water and putting it back on, dropping your regulator then grabbing it and clearing it to breathe from it again, etc.

So .... now I'm a qualified Open Water Diver. I'm also hooked, and am likely to be doing a lot more of it. I want to do a night dive SO badly, and I'm itching to learn a bit about underwater photography (and to get a decent housing for my camera).

I can't recommend the Exmouth Dive Centre enough, by the way. Great instructors, great boat operators, good facilities, good quality gear that's clearly well maintained, etc. They do nice little touches like "squeeze" the tanks, too - let them cool down after initial filling, then top them up so you get an extra 10% or so of air for your dive. They're well organized and generally excellent. Plus, as a place to learn to dive, Exmouth is just incredible.

Joy
pumpkinhead
[info]thisisthehabit
It's Easter long weekend, and Swancon is on.

Which is, of course, why I seem to have got thoroughly sick AGAIN. As if tonsilitis a couple of weeks ago followed immediately by a nasty 'flu wasn't bad enough. I haven't been sick for ages ... maybe I've been saving up?

Sigh. The Masquerade this year will be totally awesome (I have advance costume knowledge) and I'm basically stuck in bed.


Oh: an error of timing and inflection in a Transperth recorded announcement at the train station today amused me strangely. I don't think they intended to say:

Passengers, bicyles, wheelchairs and prams are prohibited on escalators.


... since that'd render the escalators quite useless. Sometimes you do need to pay attention to those colons when reading things, you know.

Very nice, NetworkManager
pumpkinhead
[info]thisisthehabit
I'm yet to encounter a cellular modem that NetworkManager 0.7 (in Ubuntu 8.10 and 9.04-beta) doesn't automatically recognize without any user configuration, driver installation, or anything. Just plug it in (if not built in) and start using it.

Very nice work.

Whoops! Sorry, Dell (somewhat)
pumpkinhead
[info]thisisthehabit
Sooo .... that SIM-locked Dell 5530 HSPA Mini-PCI-E card?

It's not SIM-locked. It (actually a rebranded Ericsson F307G) is just incompatible with a HUGE variety of SIM cards. It appears to be deeply confused by anything with a voice service attached, and by some data-only SIMs as well.

Ericsson REALLY need to release a firmware update for this card. The older Dell 5520 (internally a Sierra Wireless HSDPA modem of some flavour) is compatible with every SIM I've ever tried it with, and "just works", so I know the SIMs _can_ be made to work.

I'm still well and truly steamed that I spent two days being call-dumped, transfered randomly to the wrong people without explanation or warning, and generally screwed around. That's a separate issue, though; the hardware is OK, and I *know* that Dell's call centre is a screaming hell-hole, just like most other OEMs.

(I actually give Apple a little credit here - they're marginally less crap than most of the others. However, the technical knowledge of their service reps tends to range from poor to abominable, so while you can easily get to talk to someone, they tend to be frickin' useless).

Soo.... I have a working cellular broadband card, and two days of wasted time. Sigh. I have an XPS support rep by the name of Angel Ibarra to thank for keeping me sane, though, since she actually took the issue on and stuck with it rather than dismissing/ignoring it or ditching me. It's great to run into good people in otherwise poor environments.

Getting access to "Planet 3" on a non-3 mobile, or a cellular modem
pumpkinhead
[info]thisisthehabit
If you use Three (the mobile provider) with a cellular modem or a non-three-supplied mobile, read on. )

ARRGGGHHHHHHH Dell
pumpkinhead
[info]thisisthehabit

UPDATE/CORRECTION: See the update here. Dell, your call centre still sucks, but the hardware is fine. Just like normal.

(Original text) )

Use Linux software RAID? Cron RAID scrubbing or lose your data.
pumpkinhead
[info]thisisthehabit
This post is bought to you by the fun of unnecessary wasted time and work rebuilding a server after a double-disk RAID array failure. RAID scrubbing is essential - and is finally supported by Linux's software RAID, but not used without explicit user action.

Read on if you admin machines that use Linux's `md' software RAID )
Tags: ,

Torn - life's good here but over east...
pumpkinhead
[info]thisisthehabit
Of (very) late, I've found myself periodically reiterating: snuggles with nice fun folks are good. And kind of addictive. In fact, in general things are pretty pleasant.

It's kind of upsetting, though, that life proceeds apace here while over east the world's been turned upside down. Putting in financially doesn't feel very ... significant ... though it's better than nothing (hint, hint). However, it's not like going over there would help unless one has SAR experience, has been a volunteer firefighter, has worked with the SES, etc. It'd just be one more person to feed and shelter.

Though nobody should need to think that way before they want to help, it's worth remembering that it could just as easily happen here.

The police think they've caught the bastard who lit some of the fires. Unsurprisingly, he's fairly clearly mentally ill. It's one of those awful cases where punishment undoes nothing, brings nobody back, and is unlikely to even deter others from similar acts. The helplessness of it is horrible.

What really bothers me, even though I know it's inevitable, is the activity of the "human" vultures. The people who're looting. The people trying to fraudulently claim the government relief funds ($1000/person + $400/dependent child) by lying and saying their ID was destroyed. How low can somebody get? It's just vile, and made worse by the nigh impossibility of doing anything about it. I hope at least some of them are turned in by people they know who're revolted by what they've done. It's a pity they're not marking people who've claimed benefits with highly removal-resistant ink or something like that (think: the Iraq vote) so that (a) repeat claims are harder and (b) if you see someone you know who's marked, you can call the police and have the bastards strung up.

It's incredibly tempting to be vindictive to the suspected arsonist now that one has been identified - and frankly I don't care much what happens to the asshole himself, but I hope people leave his family and friends (unless involved) alone. It's perhaps best to leave the guy himself to the police rather than try to dispense more preemptory "justice" too - after all, tempting as it is to jump to the conclusion that he's the one responsible, that's far from proven and mistakes have been made in the past. It'd hardly help anything to go and lynch the wrong guy, would it? Anyway, I don't rate his chances of surviving long in prison if convicted, and mental illness or no I'm not sure it'll be any great loss.

Unfortunately, that still won't bring anybody back.

By the way, I was in New Zealand during the last big fires over east. They were much smaller and considerably less destructive than these, but even then it was possible to smell the smoke from New Zealand. Additionally, the air was hazy and visibility was significantly reduced - you could barely see the ground at all when flying in to the country. That gives you an idea of the scale of those significantly smaller fires. Terrifying.
Tags: ,

Rain rain rain, we love rain, fun fun fun, splash splash splash
pumpkinhead
[info]thisisthehabit

"I wanna be a mongoose."



A park and a a playground (two, even) in the middle of the night with friends. What's not to love? Even got to share delight at (admittedly half-assed) rain with the like-minded.

I did manage to look pretty dodgy, though, walking up to a playground carrying a bottle in a scrunched brown paper bag and commenting that the only thing stopping it from being a perfect scene was that there was too much light...

Speaking of friends, though, it's a pity to find out that someone I've grown to rather enjoy hanging out with is skipping the state. It's all for the future best and it's a happy thing, but ... far.

The pirates are silent
pumpkinhead
[info]thisisthehabit
Anyone know of an issue that might cause a Nokia phone (N95-3) to randomly fail to ring (and to vibrate) when it receives a call? Mine's been doing it lately and it's driving me nuts. [info]mexicanjewlizrd dropped by home today and I didn't even know thanks to the stupid damn device. Grr.

All I can think of, unless it's a hardware issue, is that it's using a MIDI ring tone on an SD card. This has now been corrected (bye bye discrete Monkey Island pirate music!). Of course, like any respectable technical fault it never seems to do it when I call it or during any other attempts at testing the fault.

Anyone else had similar issues?

(Also - maybe it's smarter to SLEEP rather than, say, going out when my brain is only semi-functional from tiredness... sigh).

Home