Showing posts with label infrastructure. Show all posts
Showing posts with label infrastructure. Show all posts

05 May 2018

Migrating plain-http Github-Pages to https

Since early May 2018, Github allows https for github-pages with custom domains - which was a longstanding requirement of many users. It was made possible by a cooperation between Github and LetsEncrypt. I'm operating a few sites via github pages, so far all of those lacked https (aim42.org, docs.arc42.org, faq.arc42.org, patterns.arc42.org, venom-story.org, esabuch.de).

Github Pages with custom domains

Up to now, the procedure to serve these sites via Github with a custom domain was the following:
  1. create an A-record in the domain providers' DNS (that's independent of Github) containing Github's IP addresses (they provided two different for availability / scalability reasons)
  2. create a CNAME file in the Github repo containing the domain name in uppercase (oftentimes that was created automatically by the appropriate Github repository settings dialogue.
  3. commit, push and done.

How to Migrate to https

To migrate this to the new https system, follow these steps:
  1. change the DNS A-record(s) at your domain provider to the new Github https address (now they provide four different IP's instead of the previous two) - e.g. 185.199.108.153, 185.199.109.153 etc.
  2. Remove the old CNAME file from your repository, commit and push this deletion to Github.
  3. Open the Github repository settings page and manually enter the domain name.
  4. Wait a few minutes until your certificate is generated - invisible for you.
  5. If you're using Jekyll to generate your site, it's a good idea to change your _config.yml configuration from "http://yourdomain" to "https://yourdomain". That's not absolutely required, but will ensure that Jekyll will use the more secure https protocol for all cross-references on your site.
  6. Now you can check the "enforce https" checkbox - which was disabled until this very last step
That's it. Thanx again Github for making this possible!

Appendix: Why should I do that?

As of July 2018 (with the release of Chrome v68), Google will clearly mark plain-http sites as insecure. See their announcement. Computerworld has written up a few arguments (speed being one of them). Some sources (this one, for example) claim that search engines (especially Google) favour https over http, so your page rank might decrease (!) if you stick with http much longer.

26 July 2014

Connect your Kindle® to password-protected WiFi

Just in case you need to connect your Amazon-Kindle® to a password-protected WiFi network - and it does not work... That often happens in hotels, at airports or other locations with protected WiFi access. An unconfortable but working solution is the following: You need a real computer (or tablet or smart smartphone) to find out the IP address of the WiFi router... If you don't know what that is - this solution is not for you, sorry. 1.) Use a computer to find out the IP address of the router of the protected WiFi. Window 2.) On your Kindle®, enter this IP address as browser URL. 3.) Your Kindle® browser will display the appropriate login or registration page. It won't look nice, and typing username and password won't be comfortable. But it will work! 4.) nothing more to do :-)

04 November 2013

Java JDK on OS-X (here: 10.9, Mavericks)

Boredom warning: This post describes some commands to configure Java-7 on Mac OS-X. Now fun to read.

 

After my recent upgrade to 10.9, I had to install Java again (Apple seems to be regarding Java as something evil…)

The Apple-Java is still 1.6 - if you’re happy with that: use the proposed download from Apple and you’re all set.

If, e.g. for software development, you want something a bit more recent...

 

Downloading from Oracle, running the installer… but still, 1.6 is the active JDK.

(Simple) solution: In any shell (e.g. Terminal, iTerm):

sudo ln -sf /Library/Java/JavaVirtualMachines/jdk1.7.0_45.jdk/Contents /System/Library/Frameworks/JavaVM.framework/Versions/CurrentJDK

 

On your system, the PATH to java might be set at three different locations:

 ~/.profile
 /etc/paths
 /etc/paths.d

If you happen to have / need  a JAVA_HOME environment variable:

export JAVA_HOME="/Library/Java/JavaVirtualMachines/jdk1.7.0_45.jdk/Contents/Home"

Make sure, JAVA_HOME is set in one of the abovementioned locations. I suggest you get rid of it… (delete it from ~/.profile)

 

 

 

09 September 2013

Emacs on Mac-OS: Configuration for Alt- and Meta-Key

Oh what a nuisance, having to configure key-bindings so that Emacs becomes usable on Mac-OS...

The Problem

  • You need a proper META-key to use Emacs.
  • With non-US keyboards, you need the ALT-key to type characters like [, ], { or }. 

 

Command-as-Meta? No way...

People discuss wether to configure the COMMAND-key (aka "apple-key" or CMD) as META. 

Imho impossible, as in *all* other Mac applications, CMD plays a central role (new, open, duplicate, quit, minimize etc.). No way I can unlearn these key combinations.

 

Escape-as-Meta? Your Fingers Run Marathon...

Some people use ESC as Meta. For every of the numerous Meta-commands in Emacs, send your little pinky finger all the way up north-east to Escape-country… no, that feels like an unhealthy amount of movement to me.

 

Left-ALT-as-Meta, Right-Alt-for-Special-Characters

Whow - that's clever: Using the left-Alt key for something different than the right-Alt key...

Simple put the following line in your emacs configuration file (~/emacs.d/user.el or similar):

(setq ns-right-alternate-modifier nil)

That works fine for me...

 

Of course, I have CAPS-Lock mapped to CTRL (in Mac-OS system settings under keyboard)

 

Some more Emacs Links

@pschirmacher pointed me to  http://www.braveclojure.com/basic-emacs/, which contains both a nice setup and pragmatic introduction.

I use the "vanilla Emacs" - of course the key config from above also works in terminal-Emacs. 

09 August 2013

The Privacy Tragedy or NDA Considered Impossible


The classic tragedy is a sad story - as protagonists usually suffer from serious losses.

The last few weeks have shown that our privacy had been lost years ago - without us (protagonists) realising it.

Now, with the heroic help of guys like Ed Snowden, the magnitude of this privacy-loss became visible:

* Governments (especially from the US, Germany, UK and maybe several others) violate fundamental privacy rights (like the American Constitution and the German Grundgesetz).

* Companies trying to keep their users' data private are forced by governments to either shut down their operation or violate privacy rights.

* All Internet traffic is systematically monitored by government agencies - without users' consent. They are reading ALL our communications.

The Root of All Evil: Yes - We Scan!


The root of this evil is located in the USA and its villains (Germany and the UK as prime examples). Storing and processing (private) data and communication via companies located in these countries has from now on to be considered unsafe, sometimes harmful!

Ok - you probably already knew that. And you knew Obama's slogan "Yes, We Scan"?

The Tragedy


We cannot do a single thing about it - without giving up the comfort zone:

* Our operating systems are designed (sometimes well, sometimes worse) in the USA. I personally find it *very* likely that modern operating systems already contain backdoors for governments.

* Most communication and social networking services are located in the US (Facebook, Twitter, Google, Yahoo, LinkedIn) or Germany (Web.de, GMX, Telekom) - and actively cooperate with governments! They freely give away your private data!

* Many convenience services are located in the US (Dropbox, Evernote, GoogleDrive, Microsoft-SkyDrive). Despite their claims to keep our data private, they all cooperate with Governments.

* The fundamental infrastructure for large portions of software development is tightly connected to US companies (Java -> Oracle, C# and dotNet -> Microsoft, VMWare (SpringSource), JavaScript (Apple, Google)).

* OpenSource is only better in theory: For larger systems (like Linux, Firefox, BSD, Gnome, KDE, MySQL) it is simply not viable to inspect the source code for potential security or privacy issues. How can I keep my trust in systems like TrueCrypt or the EncFS (encrypted file system)?

We Are Lost


I have never in my life been more frustrated with politics and these so called "democratic" governments (this incompetent morons that failed in protecting our Grundgesetz or the US constitution). They value secret agencies higher than our rights to keep private information private!

We lost privacy in digital life. No (comfortable) way out of this!


NDA Considered Impossible


I earn my money with software and computer stuff. It involves private and sometimes even secret information.

I usually sign privacy agreements (NDA, non-disclosure-agreement). I promise in this legally binding documents not to give away *any* private or secret data.

From now nobody in our business can keep such a promise! Somebody gives me digital data - some rogue government will be able to read it!


Hope In Small And Painful Doses


Yes - you can encrypt your email (PGP, GPG or S/Mime). All of these solutions require a considerable investment in software and organizational infrastructure.

Yes - you can move to self-compiled Linux kernels and window drivers. If you're willing to invest days to get the most fundamental system up-and-running. None of the sexy software packages run on your exotic system. It's not nearly as comfortable as the commercially available alternatives.

And - what will be a trustworthy compiler? Is the backdoor already build into your hardware (which is most likely driven by US-designed chips…)

Yes - you can move away from *all* the comfortable network and cloud-based services. No Google or Bing searches, no tweets, no Facebook, no Dropbox, LinkedIn or Xing any longer.

Despite myself trying some of these steps - tragedy struck. We're lost our privacy.

Thanx, Ed, for making this clear.

06 February 2013

Parallels, Windows, Enterprise-Architect and Retina

in principle, a great combo. With Win-7, Parallels works like a charm, nicely integrated with my Mac, no issues with the high Retina display resolution.

When I used EnterpriseArchitect for some UML modeling, I encountered serious display
issues: diagrams were suddenly scattered with overly large fonts and became utterly unreadable.

So back to virtual machine configuration: Shutdown the VM instance and open the Parallels configuration "graphics" tab. Choose "optimized for retina" mode, as shown below:


parallels-vm-graphic-config-retina.jpg





Not that difficult... boot Windows again.

Open the "display preferences" page and try the following screen resolution:



Windows Screen Resolution Config (Win 7).jpg

That completely solved the issue for me.

23 June 2011

Apple-TV: Set Favorite Radio Stations...

To set any internet radio station as favorite, just press the middle-button for a few seconds (see image below) while this station is playing... and a menu appears!

On the iPad Remote app it's even simpler - in the lower left corner you find a "favorite" button...

apple_tv_remote_radio_favorites

02 September 2009

I stopped using Eclipse...

Ever had hassle with your numerous Eclipse plugins? With update-manager complaining about missing dependencies, which nobody ever could resolve?

With re-installing your (free) development environment every now and then?

After giving the latest Eclipse ("Galileo") a try, I just dumped it: After configuring Spring, Scala, webservice, subversion and a few other plugins, the whole app did not even bother to start...

Having been Eclipse user for several years, I am really grateful for their contribution to (Java) software development. But it has become an overly complex monster in my (humble) opinion.

I lighthearted moved over to IntelliJ-IDEA - their slogan "develop with pleasure" became true within the first hour of using IDEA (I tried both 8.1.3 and their early-access version 9). Grails and Groovy support is excellent, Scala plugin working fine, subversion support the best I ever had, even Clojure working (ok - that one can definitely be improved, but true lisp programmers should stick to Emacs)

Proud user ofThe best Java IDE

24 March 2009

Linus Thorvalds on GIT

It's already beyond hype: GIT, distributed version control system.

Linus talks (at Google) about his source-code-management history,
his aversion (hatred...) of CVS and subversion,
on distribution and other interesting stuff.

Not too good for subversion-lovers :-)

27 May 2008

The Ultimate Authentication Device - but currently without market

That's what I was looking for the last years: A tiny, sleek, affordable, secure and really cool device for authentication: Forget about this plethora of different passwords and login-names. Just press the green-glowing button of the Yubikey - an imho revolutionary device invented and produced by Swedish company Yubico: It plugs into any USB port and behaves like a regular USB-keyboard. With the exception that it has only one single (mystically illuminated) key - and emitts a highly secure one-time-password every time this key is pressed.

Good to know: Their sdk (development kit) is open source, their business model is selling the hardware (starting from 35 US$ for a single USB-key, going down to approx 10 US$ for larger quantities).

I could really solve all login and authentication problems - would there be enough acceptance around the great players. Steve Gibson had a great coverage in his security-now podcast - but my favorite sites still don't use neither OpenID nor YubiKey...

But hey - wait: Most revolutions took a few month to really take off...

13 February 2008

Store arbitrary documents in Google-Mail

Just in case you want to store some documents (or mails) online (and you don't mind the Google guys beeing able to search it...):

OpenLoops gives a nice tip for this - just send the document to your own gmail address, but instead of sending to
yourname@gmail.com
you now send to
yourname+docs@gmail.com
... the string "+docs" is ignored by gmail - and you can use a simple filter rule to add a label to all those mails...


Update (March 11th 2008): Some people asked, wether it is safe to store documents in GMail. IMHO it is not. I would currently not store any sensitive information there (nor at any other online-location!). But not every document is really sensitive...

01 January 2008

GSM Security...

If you plan to discuss *really* important secrets over the GSM mobile network, read this article (pdf) first:


We have presented a simple-to-implement known-plaintext at-
tack on the A5/1 stream cipher, and given an implementation
on a small FPGA. The attack is novel over previous attacks
in that it needs only a very small amount of plaintext frame
data. A distributed implementation on specialized hardware
was projected to derive a key within half a minute on the av-
erage. We conclude that the A5/1 algorithm is not secure for
longer phone calls.



Actually I didn't know it was feasible for non-government groups to crack GSM... but it seems to be...

Further info on this wiki. There is even a video available, from the 2007 CCC convention.

30 November 2007

Three links you for GPG ("gnu-ish PGP) on Mac

Just in case you need to setup a PGP-like infrastructure on Mac-OS: I recommend the GNU-GPG-tools
for it - and found helpful instructions on MacGPG-site.


  1. Download the files from Sourceforge. You'll surely need "GnuPG for OSX" and "GPG KeyChain Access" (makes life much easier).

  2. Point your browser to the cool docu (by Zeitform).

  3. In case you need to pgp-encrypt EMail (I'm sure you need to!), get GPGMail (from SENTE), also free.



Installation is very straightforward.

Then you

  • (must) generate your own key (unless you already have one and it's still valid!),

  • (should propably) upload your public key to a keyserver (the default keyserver of GPG works fine),

  • (have to) find the keys of your communication partners, either on the public keyservers or from them directly,

  • (should) publish your key's fingerprint, so others can verify a downloaded key... (put it on your website, find mine here). In case your're too lazy to klick: 9E64 477B 0BCF A2C6 C868 68B3 CF32 9C31 4E1A 26BA



And you're done: From now on, your mails or files can look like (snippet from the pgp'd version of this post:)




-----BEGIN PGP MESSAGE-----
Version: GnuPG v1.4.7 (Darwin)
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....

26 November 2007

Sh** happens - therefore everybody needs a backup strategy

Did you ever lost data due to an accidental "rm -r *" command? Or because your spouse just installad the newest service pack of any operating system which caused your machine to cease working?

I know about failures of humans and machines. I never want to loose digital assets due to such failures, therefore I designed and implemented a broad backup strategy.

But first things first. Let's start with the kinds of sh** that can happen:

Risks to Digital Assets



  • Theft: Some nice guy steals your precious notebook with your even more precious digital assets on its drive.

  • Damage: Your drive gets sick due to headcrash or an overdose of spilled coffee (I mostly stick to green tea, but they say that is equally fatal for harddrives).

  • Accidental deletion: Wether it is "rm -r *" on unix machines or its equivalent on graphical user interfaces - users sometimes (involuntarily) erase their own data. All right, you might get it back from the recycle bin... unless somebody cleans that one

  • Viruses or other data corruption: My special friends are office applications, killing large documents. I'm sure you've experienced that one yourself...



My Goals Concerning Backups



  • Continue working as fast as possible.

  • Highly automated backup - the fewer manual processes the better.

  • Cover different computers with various kinds of valueable data

  • Affordable. Keep the price-tag in personal range.



My Infrastructure


I'm working as freelancing IT-consultant in Germany, therefore I don't have too many machines to care for. The following diagram shows my infrastructure - which is primarily used by my wife (Cheffe Uli, for text processing, billing, accounting and other organizational tasks required to run a business).
zorg-computers.jpg

  • My primary machine is a MacBook Pro

  • I use two different external USB drives. They contain all our digital music (approx 40GByte) and a copy of all our photos.

  • An old PC runs OpenSUSE Linux 10.2 (very smoothly!) and contains two 160 GByte drives, which I configured as RAID-1 (mirrored) with the SUSE Yast configuration utility. The OS itself is located on a third drive. A few directories of the RAID can be mounted via Samba on our other machines.




The Pillars of My Backup Strategy


zorg-backup-strategy.jpg

  1. Of course I use a version control system (Subversion). I setup my (home) repository on our win-XP machine. Every project file I work on is regularly commited to subversion.

  2. I fall in love with CrashPlan, a Java-based (commercial) lifesaver to backup arbitrary files and directories to arbitrary other machines (which must have a free version of CrashPlan installed). I backup the following things:

    • My Mac's valueable data to our home PC and to my RAID-1 linux server.

    • My wife's data from the home-PC to my Mac and to the RAID-1 server.

    • Not on the diagram: I backup all our data to my parents PC.



  3. Every week I copy my complete MacBook-drive to one partition of an external drive (with SuperDuper). Uneven weeks are copied to partition #1, even weeks go to partition #2.

  4. All my valuable data (especially project-related files and photos) are copied to Amazon S3 (TM) offsite storage with a small utility called JungleDisk (a little webdav-server). JungleDisk encrypts the files, so nobody without my key can read my files.

  5. I copy the whole disk of our home-PC with Acronis TrueImage.

  6. (not on the diagram): I keep a USB-stick with a pre-configured JungleDisk installation with me at all times. In case I need to access some files, I just plugin the stick into ANY machine (Win, Mac or Linux) with an Internet connection - and can start working a few minutes later...

  7. (not on the diagram): I use Versomatic on the Mac (there is a Windows equivalent called RealTime Backup), which stores versions of all my working files in its own repository. Whenever I save a file in any application, Versomatic creates a new version in its repo... so I can go back in time (like TimeMachine, but I can configure Versomatic to just backup what I need!).

  8. (not on the diagram): I backup files with iBackup - creating timestamped backup-sets on external drives or sometimes even on CDs or DVDs. I tried several others, including DobryBackup, but iBackup is simply better...

  9. (not on the diagram): I keep a copy of SpinRite, the awesome disk analysis and repair utility from fabulous Steve Gibson. It can recover even bad disk failures (but is way to slow for USB-connected drives...)



Now what?


Let us review the list of risks from the beginning:

  • Theft: If somebody steals my Mac, I'll have to get a new one. Bad enough. I'll be productive within minutes due to my SuperDuper backups.

  • Damage: Every drive in our infrastructure is backed up somewhere. It might take a while to replace the computer, but I can easily restore every file, from JungleDisk or CrashPlan or Subversion or another of my copies.

  • Accidental deletion: It'l be fatal if I deleted my subversion repository, but even that is safely copied by CrashPlan to several destinations (and not automatically deleted there!). Looks like I can survive a few of my own brain-blackouts...

  • Viruses or other data corruption: See above. Several possibilities to get back to consistent versions, depending on the kind of damage.


I'm not fully automated in my backups - but that's ok for me.


Apart from those (technical) risks, what else can happen?

  • You forget your passwords? Print out a list of important passwords, seal it in an envelope and deposit with trusted friends.

  • Your house burns down. All computers within are destroyed. As long as you remember your JungleDisk password or your CrashPlan-ID, you're done... External backups have their merits...

  • I keep a number of boot-CD's ready... for example a grand-universal-windows-boot-disk



Conclusion


I'm pretty sure you guys come up with some risks I forgot. The major pillars in my backup strategy are CrashPlan, JungleDisk and redundancy...

29 October 2007

How to Use Multiple Versions of MagicDraw UML without Interference

(on Mac OS X):

At least versions 12.5 and 14.0 ff. need their "libraries" directory named "MagicDraw UML". If you want two versions on your machine, you either need to install them into different directories (which I did no like!) or patch the installation just a little:


  1. Install MD to any tmp-directory.

  2. Right-click on the executable, which in reality is a hidden directory. "Show content".

  3. Navigate into the "Content" directory, there you'll find a file called "info.plist"

  4. Edit this file (with a text editor, NOT with the default property-list-editor!)

  5. Search for the text $APP_PACKAGE/../MagicDraw UML

  6. replace with (e.g.) $APP_PACKAGE/../MagicDraw UM 14.0L

  7. save info.plist

  8. rename the MagicDraw UML directory of the MD installation accordingly: MagicDraw UM 14.0



Don't forget to move the now changed files (directory plus startup file) to your favorite application directory (mine's called "development tools" under "Applications".)

11 September 2007

Update on Security-Key

The cool security key (on which I blogged a while ago) finally arrived -
and here's a short screenshot (thx to PayPal) how it is used to login
to your paypal account:


paypal-security-key-screenshot



Now my login is based upon TWO assets, one I KNOW (my passphrase) and one I HAVE (the security key)...

10 September 2007

Website-Update

Thanx to my website management tool-chain (based upon RapidWeaver) I updated my complete website with a new layout, a variety of smaller changes and corrections in just below 30 minutes yesterday night.

I moved to a grayish look, sidebar-navigation and included tags & categories for some pages.

22 August 2007

Good News for Security-aware Internet-Shoppers...

Maybe I'm the last one to notice - but PayPal offers a smart password-generating
device called "Security Key". It's one of those cute one-time password generators - and (currently) works for both EBay and PayPal accounts.

Why don't the banks offer those devices for free??

I'm actually using PayPal only for a few transactions per year - but that's likely to increase - as their device (which costs only 5Euro / 5 USDollars) drastically increases security...

Anybody out there already owns one? They are currently (in 2007) sold in US, Germany and Australia, with many more countries to be included soon...


15 August 2007

"Lock-Screen" on Mac

Working with *really* sensible data recently, I needed a quick way to lock my Mac... unlike Windows-XP, there's no predefined hotkey, even the beatiful Dockables did not provide a solution :-(

A little research revealed the following helpful command


/System/Library/CoreServices/"Menu Extras"/User.menu/Contents/Resources/CGSession -suspend


Paste into an Automator workflow, save that (with file-type "application"), drag into the dock (and your application folder) - and you're all done!! You can even drag this to your finders' toolbar - cool!

(I know - there's an entry in the menu bar - but that's too hidden - and I needed a Quicksilver-enabled solution).



19 July 2007

Virtualization on the Mac

Yesterday I installed the new version of Parallels Desktop (3.0). It feels a bit smoother, but still cannot handle two monitors... (my usual setup at home).

What every Windows user will surely like: The excellent snapshot manager, which allows even branches :-)

Too bad I don't have any graphics-intensive games to test the DirectX improvements...