Posts Tagged ‘FSFE’

2012w27

Sunday, July 8th, 2012

Slow week, but I guess that is the way it’s supposed to be when on vacation :)

I guess I won’t EVER be buying a product from Cisco or Linksys again, as they obviously cannot be trusted (yes I know they backtracked on that, but the fact that they thought it was a good idea to begin with says all I need to know…)
And I should really take this as a sign that it is high time to flash my old trusty WRT-54GL to something freedom-respecting…

So, uh, you might want to fix this gaping security hole before you start flying drones hijacked kamikaze-devices over your own people. Just a thought…

Cryptowars… again? Really?

Thunderbird ISN’T dead, but that doesn’t mean I shouldn’t try to get my thumb out of my ass and learn to use mutt anyway.

UK seems to be getting more spy laws but with the right mix of software you can ward off most assaults on your privacy.

And while on the subject of privacy: This post makes a rather good case for privacy.

2011w25

Sunday, June 26th, 2011

Last week was rather eventful, the largest thing being the one thing I naturally forgot to write about (go figure…), my appointment as deputy coordinator of FSFE Sweden. This is nice :)

That has however meant that this week hasn’t seemed as eventful, and I don’t know, for some reason I got off to a really slow start of the week, the only worthwhile things to write about started happening this Thursday.

nginx and password-protected directories

My father asked me for help in getting a bunch of files in his possession, over to some friends of his (who are, to the best of my knowledge, as computer illiterate as he is).

This meant that my first idea, to just set up an FTP-account on my server and have them log into that and download the files, wouldn’t work. I would need something simpler, but still with restricted access.

Preferably they’d just surf to some place, enter a password, and download a zip-archive (since all Windows versions since XP handles zip-archives like compressed folders, this should fall into the realm of what a computer user should be able to handle).

Something like Apache’s htpasswd stuff. And I wanted to do it with nginx, because I really want to get better at using and working with it.

The first task, obviously, was to check if nginx had that capability at all (it has), and if so, how it works.

This post showed me that it was possible, and how to do it.

A note here though: I first tried to set a password containing Swedish characters (åäö) and this didn’t work at all.

ticket

I have been wrestling with the question of how I would manage to create a database which individual users can read from and write to, but which they shouldn’t be able to remove from the filesystem (I know, a DROP or DELETE command can be just as devastating, so I must continue thinking about this).

alamar at StackOverflow solved this for me. The solution is to let the file be read and writeable, but have the parent directory not be writable.

This however makes it impossible to add new files to the directory. But since I am working with the idea that there should be a “ticket” user with a corresponding “ticket” group, and that every individual who should have access to the tracker will be in that ticket-group, the directory could disallow writing for group and other, leaving the ticket-user free to create more databases…

Although I now realize that this would make it easy for anyone in the ticket-group to screw around with any ticket database (insert, update, delete).

This clearly needs more design thought put behind it.

ArchLinux and MySQL client binaries

I needed to interact with a MySQL database on another server, but MySQL (the server) wasn’t installed on my desktop, and I didn’t really want to have to install the entire server just to get hold of the mysql client binary so that I could interact with the remote server.

Turns out that in ArchLinux, themysql binaries are split into a clients and a server package, perfect for when you wish to interact with MySQL databases, but not have the entire frakking server installed on your machine.

Accessibility, HTML and myConf

Since FSCONS is striving to be accessible, and the little “myConf” technology demonstrator I wrote the other week was intended for FSCONS, I have been trying to figure out how to make that as accessible as it can be (first of all, I have no idea what so ever, if a screen reader even parses javascript, and as the myConf demonstrator is mostly implemented in jQuery that might present itself a showstopper).

But given the assumption that a screen reader can parse javascript, and will output that big ‘ol table which is created, how do I make an html table accessible? Since a screen reader makes use of the html code, and even a sighted person could get tripped up trying to parse the markup of a table, this looks like a worthwhile venture.

Sadly, like all documents from w3.org, they just leave me more confused and without any questions answered than when I began, but luckily, there seems to be other resources more knowledgeable, and with more understandable wording/examples, although I haven’t had the time to read through them all yet (I’m mostly just dumping them here so that I’ll be able to find the pages again once I again have the time to look into it):

Ed Weissman has taken his most insightful comments from Hacker News and compiled it into a book, which he then graciously made available for free.

Now, I have to admit, until this week, I’d never heard of Ed, and I have rarely read stuff on Hacker News, but from what I’ve read so far of his book, I might have to change this.

Optimizing Vim usage

A fellow… hmmm, a fellow Fellow made me realize just how long it is going to take me to fully grok Vim. I have been using ggVGd to:

  1. Go to the first line (“gg”)
  2. Enter visual mode (spanning entire lines) (“V”)
  3. Go to the last line (“G”)
  4. And finally delete the selection (the entire contents of the file) (“d”)

Or one could just do :%d as the fellow showed me… And I have been using the pattern :%s/foo/bar/ for quite some time, understanding perfectly that “%” in this context means “for every line do…”

I just never made the connection that it could be applied to something simpler than a sed substitution.

Links

Lack of (American) geeks is a national security risk according to DoD. Funny, anyone else who thinkgs that if they just stop prosecuting every kid who is playing around with security systems, or dowload music, or build (more or less dangerous) stuff from schematics they found online, this problem might just go away on its own?

I got “volunteered”

Tuesday, September 9th, 2008

That headline sounds so horrible, but it isn’t as bad as it sounds. Internal jokes and all the new interesting people you meet and get to work with might be the best thing about it all. So yeah, “I got volunteered” ;D into helping out at the Free Society Conference and Nordic Summit.

The conference will be held at the IT University of Göteborg (campus Lindholmen) during three days in October (beginning  on the 24th and ending on the 26th). The three big names behind arranging the conference is Free Software Foundation Europe (free software), Creative Commons (free culture), and Wikimedia Sverige (free content).

Sounds interesting? OF COURSE IT DOES! Now be so kind and clear all other arrangements during these dates, and register ;)

Seriously though, I attended last years conference as a guest (the first FSCONS ever, and when it was named Free Software Conference Scandinavia, and thusly only covered free software) and that was a big hit. I may be biased, but had I not enjoyed it the first time around, I wouldn’t really volunteer to help out, or shamelessly give it any advertising space here, now would I?

In closing, I would like to name a few of the talks scheduled, which I personally look forward to seeing/hearing:

  • Squeezing the Evil out of the Music Industry (by John Buckman)
  • The End of Free Communications? (by Oscar Swartz)
  • Agile and Scrum (by Niclas Nilsson)

and many more…