An old argument in favour of openness rather then obscurity

A commercial, and in some respects a social doubt has been started within the last year or two, whether or not it is right to discuss so openly the security or insecurity of locks. Many well-meaning persons suppose that the discussion respecting the means for baffling the supposed safety of locks offers a premium for dishonesty, by showing others how to be dishonest. This is a fallacy. Rogues are very keen in their profession, and know already much more than we can teach them respecting their several kinds of roguery.

Rogues knew a good deal about lock-picking long before locksmiths discussed it among themselves, as they have lately done. If a lock, let it have been made in whatever country, or by whatever maker, is not so inviolable as it has hitherto been deemed to be, surely it is to the interest of honest persons to know this fact, because the dishonest are tolerably certain to apply the knowledge practically; and the spread of the knowledge is necessary to give fair play to those who might suffer by ignorance.

It cannot be too earnestly urged that an acquaintance with real facts will, in the end, be better for all parties. Some time ago, when the reading public was alarmed at being told how London milk is adulterated, timid persons deprecated the exposure, on the plea that it would give instructions in the art of adulterating milk; a vain fear, milkmen knew all about it before, whether they practiced it or not; and the exposure only taught purchasers the necessity of a little scrutiny and caution, leaving them to obey this necessity or not, as they pleased.

-- From A.C Hobbs (Charles Tomlinson, ed.), Locks and Safes: The Construction of Locks. Published by Virtue & Co., London, 1853 (revised 1868).

How time flies...

I've been keeping busy with my project over the last month so not too much tickin' over here per se. The trick of the day is to use SSH for a SOCKS(5) proxy as per the comments here. The article is about using PuTTY to SSH to a server and open an encrypted proxy connection. As the peanut gallery says, this is even easier with ssh:

ssh -D1080 host.example.com

There, done. Tell your browser you have a SOCKS proxy at localhost:1080 and there you go! Right?

Well apparently I'm missing something cause it ain't working yet. I'll get there though, that's my goal. I'll get there...

/me mutters something about browsers

What Time is It?

So for a while there I was getting really confused. I kept getting the output from daily cronjobs on Chevette mailed to me in the afternoon but with a timestamp of the middle of the night. Lo and behold, Chevette's clock was just plain wrong.

So naturally, I needed to get me some of that NTP that the kids keep talking about. It turns out the folks over at http://www.pool.ntp.org/ are trying to organize a large number of NTP servers from volunteers. It's a really cool project and worth taking a look at since they discuss specific usage issues and how to best configure your client to update time from the 'net.

So initially I setup NTP on chevette and then I realized that neither siona nor friday were synching time so I did those too. After a little bit of reading on the above website as well as the ISC's site, I ended up deciding to try to run my own NTP server on the LAN. Okay, not really exciting, but overall, the setup is really easy and definately cool. Siona updates against the ca.pool.ntp.org servers and then chevette and friday both update against her. Kinda neet to have that working finally :D

Okay, back to work and my ever-growing TODO list.

Chevette is Loaded and She's Online Live!

Hot hot hot! Chevette is online. Took an afternoon of downloading packages and updates and about an hour of PAM/LDAP configuration and she's live and running the Icecast stream. The stream was running off Friday before but given that's the only usable computer in the house, that was rapidly getting dysfunctional.

On the fun side, the single ices feed including transcoding takes ~30-33% of her CPU. w007! She's already loaded!

In other news, I changed the google search shortcut in Konqueror (which can be done in Firefox too) from the boring "gg" to "grep". That's right, I can now grep the 'net. Who's your daddy? Or should I say:

grep: your daddy

Google returned 1 hit: archangel

Adding a test server and some rantin'

After rebuilding Siona a couple weeks ago, I went out and (finally) bought a battery backup. I got the smallest APC UPS I could get from Futureshop which cost 40CDN. I brought it home, hooked it up, and installed "apcupsd" on Siona. It's pretty bitchin. With apcupsd, I set the tolerences, e.g. if the battery level drops below 10% or 3 minutes remaining, and the battery will notify apcupsd that power is failing so apcupsd can shutdown the server.

The really fun part is that I already got to "test" the power failure events. I had set the threshold to 10 minutes but the estimated battery life, which is just w/ Siona mind you, is only 8.4 total. So the thing with the UPS is that if there are any "significant" fluctuations in the power from the line, then it cuts to battery mode. These dirty power fluctuations happen, oh, every other day or so. So even though it only cuts to battery for a second and then restores normal power, my threshold was high enough that it just issued a shutdown at the first sign of trouble. So I've now confirmed proper operation of the UPS during a "power event" and I've "tuned" the parameters (back to the mfr default).

In other cool application news, I'm finding that AmaroK really rocks! It builds a database of your music from the song meta-data and has a really fabulous interface both for playing music (queues and playlists) and for modifying the metadata (e.g. you can update many songs at once). AmaroK is pretty damned good.

So for upcoming events, I'm thinking of finally putting Chevette to use again but this time as just a test server. Her display is hopelessly foobar and upgrading RAM would also require more $$ then I want to invest in her (sadly). So I figure she'll make a good test server so I can setup stuff like a secondary mail server and test fail-over for mail delivery. Or inter-domain operation with the XMPP server. Or just try different applications. I plan to load her with Debian Sarge on the weekend and go from there.

Anyhow, back to work for me.

Destroy system files? Don't mind if I do!

So last week I was in Ottawa. The day I left for Ottawa, there was a power failure at home. I was 3 megametres from being able to troubleshoot and wouldn't be back for the rest of the week. Just typical.

So after getting home and restoring power, we were still without service. I ran fsck on the drives and mostly they were okay... Except the root partition. After a more agressive fsck, the partition mounted but lots of system stuff was missing. It was just borked.

So I pulled everything off the server (all day yesterday) and rebuilt the system (all day today). There's a couple tricks since my IP address changed during the downtime so it will be a bit before things are all back to normal but we're doing good otherwise.

The one good thing is that I got to switch the drives to an LVM scheme. I went with partitioning the primary drive into boot, root, swap, and var partitions (regular-style). The two 80GB drives got added to a volume group and I just divied up the space between user space, share (media), project (including uro forums), temp, and unallocated space. It's pretty spiffy! I can grow any of the LVM partitions live!

Okay, enough chit-chat. Clearly apache, php, and mysql are working ;)

Time to Ubuntu

So after many weeks and months of my attempts to destroy the Debian/Sarge installation on Friday, I finally gave up. I had muddled and muddled until basically every other application was failing. Yay for me.

So on the weekend I dumped that install and started loading Ubuntu. It went well be very slowly. I'm still not sure why. It kind of had the feel of a bottleneck around drive reading/writing but hdparm verified that the drives are in DMA mode and running pretty derned fast.

Nonetheless, the major applications (except UT2004) have been reinstalled including the music server. Channel Skyhook is back online! W007!

Enough chitter-chatter... Time to go back to getting things done. Know whattamsayin?