Debian and Ubuntu

Mark Shuttleworth has an insightful post about the relation between Debian and Ubuntu on his blog. It’s quite refreshing to see such a positive take on the sometimes difficult relationship between my two favourite distributions. Worth reading.

Posted in Free Software/Open Source | Leave a comment

phishers are getting smarter

I received this e-mail today:

MBNA Logo

Dear customer!

Due to high fraud activity we constantly increasing security level both for
online banking and card transactions. In order to update our records you are
required to call MBNA Card Service number at 1-800-976-5713 and update
information on your MBNA card.

This is free of charge and would not affect any transactions with your card.
Please note this is necessary to provide highest security level for all
transactions with your card.

Thank you.

David Morones,
Chief Officer,
MBNA Card Service Department

It’s a scam, of course – the headers say it came from a host called h219-110-29-179.catv02.itscom.jp (219.110.29.179) which is probably a compromised mailserver.

The interesting thing about this e-mail, though, is that the only contact mechanism is a US-based 1-800 number. There is no url to click on. The only image in the e-mail is an MBNA logo, which is linked in from the actual MBNA site.

I have not tried to call the 1-800 number. I wonder which phone company has sold the scammers that number…

Posted in Everything else | Leave a comment

oh, microsoft…

Microsoft skipped the whole Patch Tuesday circus and took only 3 days to get a patch out the door for a ‘vulnerability’ in its PlaysForSure DRM system. Basically, the patch is aimed at blocking the FairUse4WM program that can strip the DRM from protected Windows Media 10 and 11 files. Bruce Schneier lays out quite clearly what matters to Microsoft:

Now, this isn’t a “vulnerability” in the normal sense of the word: digital rights management is not a feature that users want. Being able to remove copy protection is a good thing for some users, and completely irrelevant for everyone else. No user is ever going to say: “Oh no. I can now play the music I bought for my PC on my Mac. I must install a patch so I can’t do that anymore.”

But to Microsoft, this vulnerability is a big deal. It affects the company’s relationship with major record labels. It affects the company’s product offerings. It affects the company’s bottom line. Fixing this “vulnerability” is in the company’s best interest; never mind the customer.

So now it’s blatantly obvious what Microsoft cares about. I’m not surprised. Needless to say this patch has already been bypassed by the FairUse4WM people.

Posted in DRM | Leave a comment

Boston’s weekly dig on DRM

Nice article, though there are a few inaccuracies: for instance, the FSF’s address (and the Catholic gift shop) are on Franklin street, not on Federal street which is a cross street a couple of blocks over from the FSF office.

Posted in DRM | Leave a comment

Brussels airport finally comes to its senses

The security nonsense at Brussels airport seems to be finally finished. As of Monday September 4th, Brussels’ hand luggage policy falls in line with all the other airports on the European continent:

As from Monday 04 September 2006, US-bound passengers can take one single piece of hand luggage on board the airplane.

The measure introducing the plastic bag has been withdrawn.Passengers are requested to check in 3 hours prior to their scheduled departure time.

Elektronics are again allowed in the hand luggage.

Liquids and gels must be packed into your luggage for check-in. Exceptions to this rule: liquids mentioned below are allowed:
- Drained mother’s milk, babyfood and fruit juice for accompanying babies or little children
- Prescribed medicines for the traveller whose name is on the flight ticket, insuline en necessary medicines without prescription.

Liquids, gels or creams can be purchased at the airport’s shops but they will be delivered by airport staff to the aircraft where passengers can take them on board. Airport shop assistants will happily help passengers with this procedure and answer any questions passengers may have.

These security measures do apply also to passengers transferring to a US-bound flight at Brussels Airport

For passengers flying to all other destinations, no additional security measures apply.

That’s exactly 3 weeks after even the UK started allowing hand luggage again. The UK, you know, that’s where the alleged terrorist plot was uncovered.
I don’t know what to say. It’s too ridiculous for words. Three weeks. What exactly were they trying to prove? Shame on you, Brussels.

Posted in Completely clueless | Leave a comment

remote Debian install on a BL20

If you’re trying to do a remote Debian install on a BL20 blade from HP via the ILO interface, you should use the sarge install cd (I used the business card edition) via the ILO’s virtual CD feature, and use ‘expert26′ to make the installer boot with the 2.6 kernel. The default 2.4 kernel does not see the cd it just booted from.

Also, make sure to open ports 23, 443, and 17988. If you omit 23 your remote console won’t work. If you omit 17988 the virtual media won’t work. And if you omit 443 you can’t get to the webinterface, naturally :)

Posted in Sysadmin | Leave a comment

startup sounds in Vista

So; you will not be allowed to change or turn off the startup sound in Windows Vista. This has taken Microsoft months to decide, and the decision has involved lawyers, marketing, engineers, and no doubt countless managers. If you were ever wondering why Vista is so delayed… It’s also a good idication of the path Microsoft has chosen – it’s all about you can’t rather than you can. I’ll take my GNU/Linux distribution, thank you, where I can do simple things like disable or modify startup sounds. And where that decision has not taken up countless hours of time that could have been spent on improving the product.

Posted in Completely clueless, Completely useless, DRM | 2 Comments

the Nokia 770 rocks

I’ve been greatly enjoying my 770 this summer. It’s the perfect tool to debug (wifi) networking issues in a big building with wifi – no more need to lug a bulky laptop around. Awesome.

The other night I was visiting a friend in Cambridgeport and needed to look something up online, quickly. I opened up my 770 and saw no less than 18 wireless networks. My friend has a 20 inch Imac, on which she could see only 7 of those 18 networks. If you ever wondered how good the antenna is in the 770, here’s your answer…

Posted in Everything else | Leave a comment

how Brussels airport is making itself superfluous

So there’s been a bit of a scare with regard to flights to the US, after a terrorist plot was uncovered in the UK. Or, more accurately, after the Associated Press reported that the plot was uncovered. All sorts of new rules were instituted, particularly in the UK where hand luggage was outright banned for a couple of days.

Other airports on the European continent followed the new TSA regulations for flights to the US, which banned all liquids and gels from
carry-on luggage: Paris, Frankfurt, Geneva, Amsterdam all issued statements describing the new rules. Most of the above airports don’t even mention extra delays.

Meanwhile, flights from the UK started to allow carry-on luggage again yesterday, minus liquids of course.

But not Brussels. While every major airport on the European continent decided that banning liquids was enough, Brussels felt that banning carry-on luggage was necessary. I’m pasting the entire security bulletin here:

PASSENGERS TO THE US – new security measures
(12 August 2006)
Passengers to the United States departing from Brussels Airport are requested to be at the airport 4 hours prior departure. They will be allowed to take through the airport security search point, in a single (ideally transparent) plastic carrier bag, only the following items. Nothing may be carried in pockets :
• pocket size wallets and pocket size purses plus contents (for example money, credit cards, identity cards etc (not handbags));
• travel documents essential for the journey (for example passports and travel tickets);
• prescription medicines and medical items sufficient and essential for the flight (e.g. diabetic kit), except in liquid form unless verified as authentic.
• spectacles and sunglasses, without cases.
• contact lens holders, without bottles of solution.
• for those traveling with an infant: baby food, milk and sanitary items sufficient and essential for the flight (nappies, wipes, creams and nappy disposal bags).
• female sanitary items sufficient and essential for the flight, if unboxed (eg tampons, pads, towels and wipes).
• tissues (unboxed) and/or handkerchiefs
• keys
• 1 book
• 1 newspaper
• Mobile phone
• 1 laptop (inclusive adapter) in case
• PDA / black berry
• all duty free goods except: liquids, camera, not-allowed electronic articles (eg I-pods, gameboy, MP3-player,…)

My wife and parents in law are flying back to the US today. They had to follow the above rules. They have been allowed to take glasses but not cases for those glasses. In a plastic bag with their keys, amongst other stuff. And maximum one book. They had chewing gum and a candy bar in their plastic bag, but were told these would surely be confiscated.
These are 8 hour long flights, yet passengers are not allowed to take any water with them. Dehydration anyone? There were people in line who had to check their expensive camera – and of course the security personnel made clear that the airline would not take responability for any damage this could result in.

There was a family with four young children, who were each allowed one book only. People had to re-pack all their stuff right at the check-in counter to comply with these new rules.

For an unknown reason, baggage trolleys were not allowed while queuing for the US check-in – making the whole process even slower. People were given plastic bags to put their things in – but because people could not take their usual hand luggage, everyone was carrying far more (small) stuff to the check in counter, making things hugely slow and impractical.

On top of that, the security personnel told some outright lies. They claimed that the whole plastic bag nonsense is US law – and when it was pointed out to them that that is not true, they claimed it was ‘Belgian law’. That, too, is nonsense of course; it’s an airport regulation instituted by the clearly overzealous ‘Lokaal Veiligheids Comite’ (local security committee) of Brussels airport.

I want to know how plastic bags are going to make flying safer. I want to know how having 2 books is more dangerous than one. I want to know why a case for your glasses is dangerous in an aircraft cabin. I want to know how having candy bars and chewing gum is a danger to in-flight security. I want to know how having lots of small plastic bags with loose, badly packed items in an aircraft cabin is going to make flying more secure than before. And most of all I want to know why all of this is supposedly essential and for our security.

I’m flying to Switzerland today. It took me 3 minutes to check in. I have hand luggage. No plastic bags. I have 2 books. I have an mp3 player. I have candy bars. Heck I have a bottle of water! Will my flight now be less secure?

Guess what, Brussels airport: next time I come to Europe I’m going to seriously consider avoiding you. Paris and Amsterdam are only a couple of hours away on the train. Hey, and if anyone in government is listening – you don’t think this might hurt tourism a little, do you?

I suggest the security people at Brussels Airport start reading Bruce Schneier’s Crypto-Gram – particularly this article. And talk to their peers at other large airports nearby. Maybe that will bring some common sense to this airport. Until that day, I hope I don’t have to fly from here to the US again.

Posted in Completely clueless | 4 Comments

debian and HP

So. HP is finally going to provide some more Debian support. Very good. And basically just what I want; I don’t need paid support. I just want Debian packages for their hardware monitoring tools. I want the necessary drivers to be in the stock kernel, but having at least some basic Debian support is a start. HP, are you listening? Just get the drivers into the stock kernel and maintain them. The community will do the rest.

Posted in Free Software/Open Source | Leave a comment