Showing posts with label web. Show all posts
Showing posts with label web. Show all posts

05 May 2018

Migrating plain-http Github-Pages to https

Since early May 2018, Github allows https for github-pages with custom domains - which was a longstanding requirement of many users. It was made possible by a cooperation between Github and LetsEncrypt. I'm operating a few sites via github pages, so far all of those lacked https (aim42.org, docs.arc42.org, faq.arc42.org, patterns.arc42.org, venom-story.org, esabuch.de).

Github Pages with custom domains

Up to now, the procedure to serve these sites via Github with a custom domain was the following:
  1. create an A-record in the domain providers' DNS (that's independent of Github) containing Github's IP addresses (they provided two different for availability / scalability reasons)
  2. create a CNAME file in the Github repo containing the domain name in uppercase (oftentimes that was created automatically by the appropriate Github repository settings dialogue.
  3. commit, push and done.

How to Migrate to https

To migrate this to the new https system, follow these steps:
  1. change the DNS A-record(s) at your domain provider to the new Github https address (now they provide four different IP's instead of the previous two) - e.g. 185.199.108.153, 185.199.109.153 etc.
  2. Remove the old CNAME file from your repository, commit and push this deletion to Github.
  3. Open the Github repository settings page and manually enter the domain name.
  4. Wait a few minutes until your certificate is generated - invisible for you.
  5. If you're using Jekyll to generate your site, it's a good idea to change your _config.yml configuration from "http://yourdomain" to "https://yourdomain". That's not absolutely required, but will ensure that Jekyll will use the more secure https protocol for all cross-references on your site.
  6. Now you can check the "enforce https" checkbox - which was disabled until this very last step
That's it. Thanx again Github for making this possible!

Appendix: Why should I do that?

As of July 2018 (with the release of Chrome v68), Google will clearly mark plain-http sites as insecure. See their announcement. Computerworld has written up a few arguments (speed being one of them). Some sources (this one, for example) claim that search engines (especially Google) favour https over http, so your page rank might decrease (!) if you stick with http much longer.

25 June 2013

Letter to Our Governments: Germany, GB and US are Surveillance States

Dear Mrs Merkel, Mr Cameron and Mr Obama,

in transforming your countries to surveillance states you let them win - those terrorists and scoundrels of all kinds. That surely was one of THEIR plans - planting seeds of mistrust in our western democratic societies.

Now you spy on your own fellow, consciously violate privacy and the secrecy of (formerly) private communication over public networks. Mrs Merkel called for similar surveillance in Germany...

You accuse those who informed the public and media about you spying on citizens - although they deserve to become public heroes (read what Bruce Schneier says about it)

I hereby declare my high esteem to those we nowadays call "whistleblowers", the Snowdens and Mannings, the heroes of our time. They sacrifice a life in freedom, so that all others know about Prism, Tempora and potentially others. 

Liberty of speech, thought and communication is one of the pillars of democracy - and I personally see those violated by YOU.

I signed every petition website I could get hold of in favor of Ed Snowden - and very much hope he never needs to regret what he did for us! Kudos to him and other truth-tellers - that's what whistleblowing is about!

 

Bruce Schneier impressively summarizes:

"You governments are putting your own self-interest ahead of the interests of the country. That needs to change!"

Just in case you ever considered calling me a friend - forget it. 

 

From today, I'll be actively sponsoring and using privacy networks like Tor. I will at least try to break out of surveillance!

 

deeply troubled,

Gernot Starke

09 April 2013

arc42 now has open source repositories

At Bitbucket you now find our arc42.org open source code repositories. They are independent of the arc42 architecture template (will someday maybe serve as examples for the latter).
I just comitted two small utilities for Pdf manipulation (PdfStamper and PdfUtil) - both are not "finished" but working...
Pdfstamper logo
Issue trackers are live and actively monitored.

The third project, DupeDetect, handles duplicate entries in your geocaching logs… In case you don't know what that is, don't mind. Geocachers *will* know. Hopefully we make this available as a cloud-based service soon, parallel to the source code.
(did I ever mention that I absolutely *love* the Atlassian guys…)

23 September 2012

screenshots with skitch - but beware of 2.0 version!

I'm very (!) fond of the free screenshot utility Skitch - it helps me to capture nearly everything, convenently annotate it with text and light graphic elements. See example below:

screenshots with skitch - but beware of 2.0 version!



Creating crosshair shots by hitting the hotkey is quick and easy. Uploading to Flickr or Evernote works great.

Now - what am I whining about: The just-released Version 2 of Skitch breaks nearly everything: It does not sit in the menubar any longer, hotkey doesn't work, upload is havoc.

Please- fellow Skitch users: help me to convince the skitch guys to give us the fancy features back…

10 August 2010

42 rules - even in climateprediction

I participate in a distributed climate prediction project
(using the cool BOINC software infrastructure) - and recently looked up my rank. The result astonished even me - a hardcore 42-enthusiast:

climaprediction.net.august.2010-1

06 March 2010

Readable websites - no ads, no junk

The German magazin "Die Zeit" featured a very useful bookmarklet
in their March 4th edition, from lab.arc90.com, called "readability".

Try for yourself - works like a charm!

Watch the 1:13min video...

(btw: it's open source, code available here)



07 September 2009

"Escheresque" 404...

I admire the folks from Dropbox for their unobtrusive, reliable, high-performance and well-supported service...

While researching some dict.cc updates for my MacBook, I found a link
to the Dropbox-404-Not-Found-Site :-)

Well done...



24 March 2009

Linus Thorvalds on GIT

It's already beyond hype: GIT, distributed version control system.

Linus talks (at Google) about his source-code-management history,
his aversion (hatred...) of CVS and subversion,
on distribution and other interesting stuff.

Not too good for subversion-lovers :-)

07 March 2009

One of the coolest things I've seen in a long time...

an absolutely stunning T-Mobile marketing event - happend January 2009 in a London underground station...

From one reviewer at youtube:

Whoever thought of this idea can rest on this one idea for many years to come. Brilliant at many levels. Music can change the world. We've just witnessed it at a railway station in London. And old and young. And black and white. Love this video. Kudos to T-Mobile.

(happend to be my mothers' birthday...)

If you like it, I found its making of video...

01 March 2009

simplified my website...

aah - I found the time to simplify my website a bit -
thanx to RapidWeaver I even streamlined the layout in not time at all...

Vortrag über "Architekturkommunikation" online...

Die Veranstalter der WJAX haben freundlicherweise den Mittschnitt meines
Vortrags über Architekturkommunikation online gestellt.

Wer also Interesse und 57 Minuten Zeit hat... dem wünsche ich viel Spaß dabei.

27 May 2008

Cartography-paradigm used to "map-the-web"

Via the (great!) weekly newspaper "Die Zeit" I found an interesting map of important internet sites: Websites grouped by topics and drawn like Tokyo's subway map - by informationarchitects.jp.

Using the subway-map paradigm from cartography to categorize and relate internet organizations and websites was new to me - and took away a few hours of my time (which I spent surfing previously unknown sites...). They grouped around 300 sites along the major "lines".

Great stuff - well worth a peek. Downloadable in a variety of formats - even clickable :-)

The Ultimate Authentication Device - but currently without market

That's what I was looking for the last years: A tiny, sleek, affordable, secure and really cool device for authentication: Forget about this plethora of different passwords and login-names. Just press the green-glowing button of the Yubikey - an imho revolutionary device invented and produced by Swedish company Yubico: It plugs into any USB port and behaves like a regular USB-keyboard. With the exception that it has only one single (mystically illuminated) key - and emitts a highly secure one-time-password every time this key is pressed.

Good to know: Their sdk (development kit) is open source, their business model is selling the hardware (starting from 35 US$ for a single USB-key, going down to approx 10 US$ for larger quantities).

I could really solve all login and authentication problems - would there be enough acceptance around the great players. Steve Gibson had a great coverage in his security-now podcast - but my favorite sites still don't use neither OpenID nor YubiKey...

But hey - wait: Most revolutions took a few month to really take off...

19 April 2008

Video On Demand: First (positive!) Experience

In some respect I'm a little behind the "bleeding" edge in technology, and VOD (video-on-demand) is one of those areas.

Today was the first time in my life I paid money (5Euro) to watch a streamed video (the third
game in the German DEL (ice)hockey playoffs, with my favorite Cologne team playing Berlin).

It's filmed and streamed by Premiere, the imho leading German pay-TV giant.

At first I tried with Firefox on my Mac - but was informed by the Premiere system check that their DRM (digital rights management) requirements are not met. So I tried my old Dell Windows machine - which immediately played the system test trailer...

I had to register - that was a real nuisance: At least three times their payment-management system wasn't available - so I had to re-enter my data again...

The image and sound quality is very acceptable, and the price (5 Euro) was ok for this event
(although the game finally ended up with my favourite team loosing in the last few seconds...)

13 February 2008

Store arbitrary documents in Google-Mail

Just in case you want to store some documents (or mails) online (and you don't mind the Google guys beeing able to search it...):

OpenLoops gives a nice tip for this - just send the document to your own gmail address, but instead of sending to
yourname@gmail.com
you now send to
yourname+docs@gmail.com
... the string "+docs" is ignored by gmail - and you can use a simple filter rule to add a label to all those mails...


Update (March 11th 2008): Some people asked, wether it is safe to store documents in GMail. IMHO it is not. I would currently not store any sensitive information there (nor at any other online-location!). But not every document is really sensitive...

11 January 2008

major update on arc42-site...

(english version below)

Für alle arc42-Anhänger: Gerade haben wir die neue Version der Website live geschaltet -
grundlegend überarbeitet, mit der brandaktuellen Version 3.2 des bekannten Architektur-Templates an Bord.

Ausser dem neuen Layout gibt's auch viel neuen Inhalt, jede Menge neue Downloads und eine ausführliche Dokumentation des Templates ("How-To...").




English version:

Just in case you're interested in our arc42-site (free resources for software architects) - we just published a *major* update, including the brand-new version 3.2 of the template, an improved download-section and a (cool!) documentation of the template ("how-to").

Feedback welcome!

16 November 2007

Köln: Bürger dürfen mitbestimmen

Nur für Kölner: Die Stadt bietet hier die Möglichkeit, per Internet (vorher: einfache Registrierung) über Spar- und Ausgabenvorschläge abzustimmen.

Sehr schön für aktive Bürger der Stadt - unbedingt mal reinschauen (ich habe für Vorschlag 2488 gestimmt..)

07 November 2007

(Another) visual thesaurus...

I already knew the commercial VisualThesaurus, but found a free (online)
version names Visuwords - great to visualize relationships between words. Click and hold to move the image within the browswer -

Have a look at one example (from Visuwords):

visuword.jpg

worth a try - at least for me as non-native speaker (when writing english...)


11 September 2007

693B411504EDA26E4EB83FF74AF2E2C1C94C72D2815980551B9AFBB48AD41A56

Need a REALLY secure password? The title of this post IS one...

Security-Guru Steve Gibson creates free random passwords, with a detailed explanation on HOW that works. Very impressive, really:


Every time this page is displayed, our server generates a unique set of custom, high quality, cryptographic-strength password strings which are safe for you to use.


He describes all this in the second half of the superb podcast Security Now! Episode #107


10 September 2007

Website-Update

Thanx to my website management tool-chain (based upon RapidWeaver) I updated my complete website with a new layout, a variety of smaller changes and corrections in just below 30 minutes yesterday night.

I moved to a grayish look, sidebar-navigation and included tags & categories for some pages.