SOLVED: HOWTO mount an external, encrypted LUKS volume under Linux

Tags: , , , ,

My daughter recently dropped my computer flat on the floor from a standing height (she’s only 5), catastrophically crashing both hard drives in the laptop. I limped along for a few days because I had to function with it for work, and only just today, decided to rip it apart, back up the data that could be read, put in two new 500GB/7200 drives and reinstall everything from scratch.

The painful part, was that my original configuration was a dm-crypted LUKS volume inside an encrypted LVM container, and mounting the volume without booting to it, is not straightforward.

The first piece was to back up the data on it, as best as I could. That was a bit trickier than I’d originally assumed, because I had to be sure I wasn’t going to “fix” the area of the drive that contained the encryption key that unlocked the encrypted LVM container.

After booting in single-user mode and putting in my passphrase to unlock the volume, I ran:

Read the rest of this entry »

How to Become a High-Tech Minimalist

Tags: , , , , , , , , , ,

clean, clear and simpleThis will be the first in a series of posts I’ll write about going minimal as a technologist in today’s world.

The mere mention of the word “minimalist” or “minimalism” to most people means “getting rid of luxuries and convenience”, and going back to basics. The former is just a myth, but the latter is really the goal. Everyone can get by with a lot less “stuff” in their lives, but what remains can certainly be very convenient and still remain current, “cool” and functional.

Being a high-tech minimalist means reducing what you have, but not necessarily spending less to achieve that goal. To achieve the goal of reducing the amount of things in your life, you may have to spend more, to get less, so you can ultimately spend less in the future.

There are certainly extremists in this field, who want to try to get their lives down to zero-impact, zero-waste, zero consumption, but I am not personally on that side of the dial.

My life is surrounded by ones and zeros. Lots and lots of them. I have a lot of high-tech gear at my fingertips at any one time. This is my digital life. Multiple laptops, servers and dozens of chargers and cables are all jacked in at any one time in my life, not including my office at work and its various sundry items.

But I also have my analog life, which includes archives of paperwork going back 10-15 years. Boxes and file cabinets of paperwork, files, documents, articles, magazines, books and other material that I’ve needed to capture or save over the years.

As I move to the next stage of my life, I’m looking very hard at everything I own, everything I use, and making a very binary decision:

  1. Keep it (because I need it or use it on a regular basis)
  2. Let it go (because I no longer need it, use it, or have replaced it with something better)

There is no third option.

I’m approaching this new lifestyle change because frankly, I have too much stuff.

Stuff leads to clutter.
Clutter leads to chaos.
Chaos leads to living a confusing, unfocused life.

I need to reduce the complexity of my life, by reducing the clutter and chaos within it.

Read the rest of this entry »

Wait, McDonald’s runs Linux? Yes, yes they do!

I ran into my local McDonalds in Norwich, CT yesterday morning to grab an orange juice (which happens maybe once a year), and while I was at the counter waiting, I noticed a woman behind me playing with one of the “KidzPlace” kiosk units sitting in the lobby.

I turned around to see what the “video-slot-machine-like” sounds were coming from and when I looked, something struck me as… oddly familiar…

(click thumbnail images below for larger version)

KidzPlace runs Linux?!
KidzPlace runs Linux?!

Yes, that really is a Linux boot screen on the left, in a crashed state because the filesystem is trashed. A simple repair in single-user mode would fix that, as would recreating that filesystem with ext2 (instead of using a journaled filesystem) and mounting / read-only, async and sourcing it from flash media instead of a spinning hard drive, but I digress.

It’s just neat to see Linux all around me now. Everywhere.

Encrypting EVERYTHING With geli On FreeBSD

Tags:

New FreeBSD LogoI’ve been a long-time user and supporter of FreeBSD ever since I was exposed to it by Greg Lehey and Ceren Ercen back in the Linuxcare days. I’ve come to enjoy its security, speed and powerful simplicity. The FreeBSD documentation is also unrivaled in the community.

But I also realized that securing the system itself only means so much, if I don’t actually encrypt the data it stores locally on those platters, so I had to do better.

You can lock down externally-facing services, ports and daemons.. but someone who has physical access to your systems can bypass almost everything if they have the tools and the skills. This includes a clueless operations person working in a datacenter (which I’ve been fighting quite a bit lately, as my own hosting provider rooted one of my machines, because I refused to give them the root password. Grr!).

Enter “geli” encryption under FreeBSD!

But getting geli encryption working isn’t quite as straightforward as you’d think. It requires some prior planning and preparation to make sure you’re doing it correctly. We’ll do this in two steps:

  1. Set up encrypted swap
  2. Encrypt the secondary drive and mount /home to it, encrypted

Read the rest of this entry »

What to Buy Your Geek for the Holidays: A Black Friday Post-Mortem

What to buy your Geek for the HolidaysIt’s that time of year again. The time of year when everyone rushes out to the malls and stores, to push and pull everything off of the shelves, to strip stores bare, in search of that “door-buster” deal of the day. There’s thousands of stores, genres, clothes, tools, toys and gadgets out there for everyone.

But what do you get your geek for the holiday? How do you please the geek who already has everything?

The first thing you want to identify, is how much are you willing to spend (or not spend) to make your geek smile over the holidays? Gadgets, gear and goodies can range wildly in price, even for the same item. Some things you can get for 1/2 the price depending on where you purchase it.

Also, not everything requires you to pay for it. There are plenty of places where you can get some free gear for your geek, without spending a dime on it. Check your local Freecycle group or CraigsList free postings. You can also find some really amazing deals at woot!.

The second important point is to determine what kind of geek he/she is. Are they a music or band geek? A math geek? A science geek? A computer geek? Or all of the above.

Ok, once you’ve got that figured out, let’s get right into it…

The Don’t

  1. DO NOT buy them computers, software, or peripheralsWhy, you ask? Because most geeks already have the computers they want or need, and software is such a complicated decision (with much of it being freely downloadable anyway). Is it supported on your geek’s operating system? patch level? hardware?

    Peripherals are such a personal choice too. Does your geek prefer a corded or cordless mouse? clicky or silent keyboard? standalone or integrated webcam?

    Chances are that unless you know your geek very well, whatever you get in this category will likely be a.) incompatible, b.) something they already have, or c.) something they don’t want or can’t use.

  2. DO NOT buy them technology booksI know, this seems counter-intuitive, but most geeks already have the technical books they want, and the rest they can probably get somewhere online through O’Reilly Safari Bookshelf, Google Books or similar places.

    Most HOWTO docs for programming languages are already online, as well as Usenet groups, mailing lists and helpful forums on every language imaginable (for example: Tech Books for Free, Computer Books Online and the Baen Free Library).

    If a geek wants books, they usually want things like sci-fi, autobiographies or books on subjects like robotics or similar. They probably do not want another book on another programming language they’re learning. Books like Neuromancer, Ender’s Game or Hyperspace are examples of the type any geek would cherish. Check NerdBooks or this large list for some ideas for books for your geek.

    If you’re not sure, take a look at your geek’s bookshelf first (if they have one), or take a peek at their existing book collection and see what they like or do not like.

  3. DO NOT buy them phones or PDAsUnless they ask for a specific model or type, don’t buy your geek a smartphone or PDA device. Chances are they already have the best unit for their specific tastes, and anything else would probably be sub-par. Avoid the temptation, and just get them an accessory for their current model phone, or a spare battery. I’ve amassed quite an enormous collection of PDAs and smartphones myself (yes, that really is my personal collection, as of late 2006).

The Do

  1. DO buy them clothesAll geeks need clothes. Lots of clothes. Mostly t-shirts. Lots and lots of t-shirts. The geekier the better!

    All kidding aside, our t-shirts are our “uniform” for the geek. It helps define us when we’re in a sea of “normal” people in public. It’s also a beacon to other geeks who seek out one of their own “kind” in the same crowded public spaces. Some great places to shop for geek t-shirts are Jinx, Geeklabel, NerdyShirts and of course… ThinkGeek.

  2. DO buy them storageAll geeks need storage and a place to put their digital “stuff”. The bigger the better (for capacity), but the smaller the better (for space savings; in-pocket or in-bag). Best (and cheapest) places to buy storage are at NewEgg, TigerDirect and Geeks.com.

    Large storage is just one piece. Let’s not forget the smaller stuff; media cards for all of those gadgets and devices. USB thumbdrives, memory cards (CF, mmc, SD, microSD, oh my!). Check NewEgg and Amazon for those too.

  3. DO buy them games for their gaming system of choice (or upgrade their current system to a new version/model)All geeks like to entertain themselves with a little gaming now and then. Some go for the historical games and military first-person shooters, while others like puzzle and strategy games. The trick here, is finding one your geek a.) doesn’t already have, b.) hasn’t played before, and c.) will enjoy.

    Sneak a peek at his/her current game collection, write the titles down, and take it to your local game store. The staff at most of these stores are very hip to the trends, and they can recommend games that will fit perfectly with your geek’s style. Many stores also sell “gently used” games a a deeply-discounted price, which can help if your geek beats the game in the first 48 hours of owning it!

    BestBuy has a really broad selection of games for most of the gaming systems out there: PS3, XBox, Wii and others. Also check GameSpot and EB Games online or in your local mall for more games and deals.

  4. DO buy them a magazine subscription or threeThere are literally hundreds of Technology, Geek and Nerdy magazines out there on every topic and genre. Hit your local Borders Books or Barnes and Noble, walk through their magazine section and pull the reply card out of the magazines you think your geek would like, and sign them up.

    If you don’t want to do that, just write the name of the mag down and go online later and sign them up for a subscription. Not only will it be new and exciting every month, but there are valuable articles, tips, tricks and references in every issue.

Gift cards are also nice, though they should be used as a last resort. Gift cards to your local book store or even to the iTunes Gift Card to buy movies or music on iTunes can be one of your last-minute stocking stuffers.

If you’re still not sure what to get your geek for the holidays, just ask, and let them tell you. We may be very particular, but we don’t bite.

Good luck!

SOLVED: How to Disable Ctrl-Q in Firefox

As a hardcore Firefox user with no less than 30-50 tabs loaded in the browser at any given time, it always annoyed me that they put the shortcut for closing a tab (Ctrl-W), right next to the shortcut for closing the entire browser itself (Ctrl-Q). I have 38 extensions loaded into Firefox right now as I type this blog post, and next to my keyboard itself, Firefox gets the most use.

When I’m working in the dark, or not looking at the keyboard and I fat-finger the ^W key-combo, I frequently hit ^Q by mistake, closing the browser and all of the tabs with it. ARG! Not fun.

I finally got tired of having to restart the browser all the time when I close it by accident, and decided to look for a fix. Luckily I found it in an extension called “keyconfig” that does exactly what I need!

“keyconfig adds the ability to create new or modify existing shortcuts defined by a element, but only changing those which itself call a function (those with a command or oncommand attribute) has an effect (all others fulfill only cosmetic purposes it seems and are grayed out).”

Once I installed keyconfig and restarted Shiretoko, I was able to go into the prefs for it as shown here:

Firefox keyconfig prefs menu

Scroll down to find the “Quit” menu accelerator in the list. Highlight it and click “Disable”

Firefox keyconfig prefs menu

Closed out of the prefs, and went to File, and voila! No more Ctrl-Q next to the Quit option!

Firefox keyconfig prefs menu

For those who might be wondering about my 38 Add-ons in Firefox, they currently are:

  1. AdBlock Plus version 1.1.1
  2. Better GCal version 0.3
  3. Better Gmail 2 version 0.9.5
  4. BetterPrivacy version 1.45
  5. CacheViewer version 0.6
  6. ChatZilla version 0.9.85
  7. ColorfulTabs version 3.9.7
  8. Console2 0.5
  9. CustomizeGoogle version 0.76
  10. DOM Inspector version 2.0.3
  11. DownThemAll! 1.1.7
  12. DownloadHelper version 4.6.4
  13. Evernote Web Clipper version 3.0.0.57015
  14. FireGPG version 0.7.10
  15. Firebug version 1.4.5
  16. Firefox Showcase version 0.9.5.1
  17. Flashblock version 1.5.12a2
  18. FoxyProxy version 2.14
  19. Google PageRank Status version 1.0
  20. Googlepedia version 0.6.1
  21. Greasemonkey version 0.8.20090920.2
  22. Hyperwords version 5.6.1
  23. Linkification version 1.3.6
  24. Linky version 2.7.1
  25. Live HTTP Headers version 0.15
  26. NoScript version 1.9.9.14
  27. PageSpeed version 1.3.0.1
  28. Power Twitter version 1.37
  29. PrefBar version 4.2.0
  30. Read it Later version 0.9948
  31. Remember The Milk for Gmail version 1.0.4
  32. Resurrect Pages version 2.0.4
  33. Tab Mix Plus version 0.3.8.2pre.091012
  34. Tab Sidebar version 2.5
  35. TimeStamp Converter version 1.4.3
  36. Total Validator version 6.1
  37. VMware Remote Console Plug-in version 2.5.0.122581
  38. Web Developer version 1.1.8
  39. keyconfig version 20080929

There is No Anonymity with that Torrent

Tags:

I’ve been running a public BitTorrent tracker for about 7 years for several of the Open Source projects I host (Plucker, J-Pilot, pilot-link).

People ask me all the time in private email, how they can be “completely anonymous” when torrenting. I can only assume they want to share some copyrighted material with their torrent client, and don’t want the MPAA or RIAA chasing them down.

The quick and dirty answer is: you can’t!

Azureus Peers List

There are plenty of tools out there that let you lock down your torrent client, block domains, even block an entire country, but your IP and connection state are still shared across all peers you’re sharing with, or downloading data from.

Even tools like Tor can’t be used for this, because you never know who runs the exit nodes, and that is where your actual IP address is exposed. You can’t trust those endpoints.

What this means is, you can block all of the peers emanating from within US network and netblocks, and only allow connections from non-US peers, but those non-US peers are probably allowing connections from the same US peers you’re blocking.

Let me explain:

  1. You block all US peers using SafePeer, PeerGuardian, MoBlock or other tools.
  2. You connect to a peer in Romania using your “trusted” BitTorrent client (such as Vuze [formerly Azureus])
  3. Romania peer connects to some US peers (possibly those running on RIAA or MPAA harvesting hosts)
  4. Your IP and connection state have just been exposed to those US hosts you’re trying to block

There are ways to attempt to anonymize your traffic and connection state from the tracker (the main point of leakage, and the primary target of the MPAA/RIAA), but it requires that you understand and implement technologies like I2P, and configure them appropriately, end-to-end.

“I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties.”

I’ve been toying with i2p lately as a means of securing some internal IRC chat servers that I run. It’s a bit slower, but it does do the job, and does it very well.

I don’t personally need to ride BitTorrent behind the i2p network, but plenty of others are doing exactly that with i2p.

i2p is a bit earlier in the game of creating free, anonymous network traffic, and others have come before it that provide more flexibility and a more-distributed network (like Freenet), but it is maturing fast, and is very capable.

The main thing Freenet provides that i2p does not (at this point), is distributed data storage. However, the i2p developers are working on that [i2p] [http] (warning: the i2p URL won’t work unless you have your i2p proxy and tunnels configured correctly).

Just keep in mind, if you want to “hide” yourself, you need to use an entirely new network, one that relies on de-centralized peers, who do NOT trust each other, and the entire network has to use encryption at every possible turn, to ensure nothing is peeked, sniffed or re-transmitted.

p.s.: If you must, use iMule or these instructions for i2p-enabling Azureus

My First 15 Minutes with DriveSafe.ly for BlackBerry

Tags: , ,

DriveSafe.lyI recently stumbled upon an app called “DriveSafe.ly” while perusing some new software in the BlackBerry App Store the other day.

From their page:

DriveSafe.ly reads your text messages and emails out loud so you can concentrate on the road. Eliminate the temptation to reach for your phone by letting DriveSafe.ly read to you and automatically respond for you.

Stay connected by listening to your messages without texting while driving or reading emails in your car. DriveSafe.ly is the answer to texting while driving TWD .

For even more functionality download DriveSafe.ly Pro – also available on BlackBerry® App World. DriveSafe.ly Pro adds the ability to use additional voices, listen to text messages and emails without sponsor messages and much more!

Read on for more of the Pros and Cons of this piece of software…

Read the rest of this entry »

SOLVED: Install ALL Internet Explorer Versions on ONE Machine

I’ve been fighting some “interesting” proxy issues inside my Windows XP/SP3 virtual machine recently, after an upgrade to Internet Explorer v8 (IE8).

My goal was to see if something inside IE8 itself was blocking external sites when using my internal proxy. Of course everything works perfectly fine in Firefox, but behaves very oddly with IE8. I know this worked with IE6, and it wasn’t a routing issue because Firefox worked with the same proxy configuration, but IE8 would not work!

I searched around looking for a way to get IE6 on the same machine as IE8, without breaking either of them, and found only weird hacks and suggestions about running multiple virtual machines, or using one of the web-based “browser test” sites (yeccch!). None of these would work in my situation.

And then I found… the “Internet Explorer Collection“!

The Internet Explorer Collection is a packaged offering that ships with the following IE browsers:

Internet Explorer Collection

Yes, all 13 versions of Internet Explorer! Now I can run IE6 alongside IE8!

With this, I was able to validate, test and fix the MSIE proxy issues I was facing, and now everything works flawlessly.

Additionally, now I have all of these browser versions installed and working inside my VM, so I can run them again and again to test any other routing, network or proxying issues I might run into.

Nice!

The Cashier Who Knew Too Little

Cashiers are bad at mathI usually go to my local PANERA Bread to work for an hour every Monday morning after dropping my daughter off at school. The staff there has become quite used to my face showing up on a regular basis.

Recently, they’ve been hiring some new cashier staff to man the front registers. These look like holiday “fill-in” folks who are pretty fresh out of school.

This morning I showed up and got the usual breakfast + iced chai latte and a fudge brownie, and the cashier printed the receipt before the register told her what the change was.

She stared at the screen, then looked at the receipt. The conversation went like this:

Me: “Is something wrong?

Her: “Yes, the register didn’t tell me what your change was.

Me: “Well, I gave you a $20.00 bill. How much was the total?

Her: “$9.72…

She continued to stare blankly at me. We sat there for an uncomfortable moment of silence while she looked at me with this “help!” look on her face. I said

Me: “So just subtract, you don’t need the register for that.

Her: “I’m sorry, I’m not good at…

Me: “…$10.28 should be my change.

She sighed a breath of relief, leaned over while looking down the galley to where her manager was standing talking to another employee and said “Thank you.

Seriously?

Do cashiers really not even know how to do basic subtraction now?

Can they really not count, and rely on “The Machine” to tell them what to do and how to react?

I don’t expect these people to know how to do complex algebraic functions, but a competency test for a front-counter cashier should probably include testing whether or not they can add and subtract!

If this really is what we should expect these days, we’re really heading down a slippery slope as a country with our education here.

Bad Behavior has blocked 879 access attempts in the last 7 days.