<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>

<channel>
	<title>Evil Home Stereo</title>
	<atom:link href="http://evilhomestereo.net/wp/feed/" rel="self" type="application/rss+xml" />
	<link>http://evilhomestereo.net/wp</link>
	<description>what good curse can you throw?</description>
	<pubDate>Wed, 15 Oct 2008 09:02:20 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
	<language>en</language>
			<item>
		<title>I stand corrected</title>
		<link>http://evilhomestereo.net/wp/2008/10/15/i-stand-corrected/</link>
		<comments>http://evilhomestereo.net/wp/2008/10/15/i-stand-corrected/#comments</comments>
		<pubDate>Wed, 15 Oct 2008 09:02:20 +0000</pubDate>
		<dc:creator>Malte</dc:creator>
		
		<category><![CDATA[en]]></category>

		<category><![CDATA[firewall]]></category>

		<category><![CDATA[openvpn]]></category>

		<category><![CDATA[port 443]]></category>

		<guid isPermaLink="false">http://evilhomestereo.net/wp/?p=300</guid>
		<description><![CDATA[I always thought with my OpenVPN server running on port 443 I can bypass any proxy or firewall allowing me to connect to HTTPS sites. Well, it seems like at this place there is some transparent proxy in place which actually inspects the TLS/SSL handshake and OpenVPN doesn&#8217;t exactly behave like HTTPS. Jabber works though, [...]]]></description>
			<content:encoded><![CDATA[<p>I always thought with my <a href="http://openvpn.net/">OpenVPN</a> server running on port 443 I can bypass any proxy or firewall allowing me to connect to HTTPS sites. Well, it seems like at this place there is some transparent proxy in place which actually inspects the TLS/SSL handshake and OpenVPN <a href="http://thread.gmane.org/gmane.network.openvpn.devel/2104">doesn&#8217;t exactly behave like HTTPS</a>. Jabber works though, so it seems like I&#8217;ve got to find a way to encapsulate the VPN in a real TLS stream or something. Anybody an idea?</p>
]]></content:encoded>
			<wfw:commentRss>http://evilhomestereo.net/wp/2008/10/15/i-stand-corrected/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Default X session, please</title>
		<link>http://evilhomestereo.net/wp/2008/06/08/default-x-session-please/</link>
		<comments>http://evilhomestereo.net/wp/2008/06/08/default-x-session-please/#comments</comments>
		<pubDate>Sun, 08 Jun 2008 14:22:47 +0000</pubDate>
		<dc:creator>Malte</dc:creator>
		
		<category><![CDATA[en]]></category>

		<category><![CDATA[kdm]]></category>

		<category><![CDATA[x]]></category>

		<category><![CDATA[xsession]]></category>

		<guid isPermaLink="false">http://evilhomestereo.net/wp/?p=299</guid>
		<description><![CDATA[Judging from Google it seems like this is quite a common annoyance but nobody really knows how to get around it: If you use KDM as your login manager and temporarily login with a different X session than your default one, KDM will remember this and the next login will use your &#8220;previous&#8221; session.
That&#8217;s a [...]]]></description>
			<content:encoded><![CDATA[<p>Judging from Google it seems like this is quite a common annoyance but nobody really knows how to get around it: If you use <a href="http://en.wikipedia.org/wiki/KDE_Display_Manager">KDM</a> as your login manager and temporarily login with a different X session than your default one, KDM will remember this and the next login will use your &#8220;previous&#8221; session.</p>
<p>That&#8217;s a nice feature per se, but annoying if you combine it with <a href="http://docs.kde.org/stable/en/kdebase-workspace/kdm/configuring-kdm.html#kdmconfig-convenience">auto-login</a> and a heavyweight session type like my dedicated <a href="http://www.virtualbox.org/">VirtualBox</a> session (more on that another day).</p>
<p>There&#8217;s a simple workaround though: Your previous session, is stored in the file <tt>~/.dmrc</tt>. Just <del>remove</del> replace (if you remove it, login will fail) the <tt>Session</tt> option with <tt>Session=default</tt> in there and make it read-only:</p>
<pre>sed -i -e '/\[Desktop\]/I,/\($\|^\[\)/{/^Session=/Is/=.*$/=default/}&#8217; ~/.dmrc
chmod -w ~/.dmrc</pre>
<p>From now on you&#8217;ll always be logged in with the system default.</p>
]]></content:encoded>
			<wfw:commentRss>http://evilhomestereo.net/wp/2008/06/08/default-x-session-please/feed/</wfw:commentRss>
		</item>
		<item>
		<title>LVM+ext3 rocks</title>
		<link>http://evilhomestereo.net/wp/2008/06/06/lvm-ext3-rocks/</link>
		<comments>http://evilhomestereo.net/wp/2008/06/06/lvm-ext3-rocks/#comments</comments>
		<pubDate>Fri, 06 Jun 2008 13:28:07 +0000</pubDate>
		<dc:creator>Malte</dc:creator>
		
		<category><![CDATA[en]]></category>

		<category><![CDATA[ext2]]></category>

		<category><![CDATA[ext3]]></category>

		<category><![CDATA[linux]]></category>

		<category><![CDATA[lvextend]]></category>

		<category><![CDATA[lvm]]></category>

		<category><![CDATA[resize2fs]]></category>

		<guid isPermaLink="false">http://evilhomestereo.net/wp/?p=297</guid>
		<description><![CDATA[I guess this is old news to most people, but I&#8217;m still excited: The combination of LVM and ext3 makes it possible to resize a partition while it is still mounted.
The short story:
root@TreeHouse:~# lvextend -L+1G /dev/hd/kubuntu
Extending logical volume kubuntu to 6.00 GB
Logical volume kubuntu successfully resized
root@TreeHouse:~# resize2fs /dev/hd/kubuntu
resize2fs 1.40.8 (13-Mar-2008)
Filesystem at /dev/hd/kubuntu is mounted on [...]]]></description>
			<content:encoded><![CDATA[<p>I guess this is old news to most people, but I&#8217;m still excited: The combination of LVM and ext3 makes it possible to resize a partition while it is still mounted.</p>
<p>The short story:<br />
<code>root@TreeHouse:~# lvextend -L+1G /dev/hd/kubuntu<br />
Extending logical volume kubuntu to 6.00 GB<br />
Logical volume kubuntu successfully resized<br />
root@TreeHouse:~# resize2fs /dev/hd/kubuntu<br />
resize2fs 1.40.8 (13-Mar-2008)<br />
Filesystem at /dev/hd/kubuntu is mounted on /; on-line resizing required<br />
old desc_blocks = 1, new_desc_blocks = 1<br />
Performing an on-line resize of /dev/hd/kubuntu to 1572864 (4k) blocks.<br />
The filesystem on /dev/hd/kubuntu is now 1572864 blocks long.</code><br />
That took maybe two seconds.<span id="more-297"></span></p>
<p>The long story: Some time ago I replaced the harddisk in my notebook with a 120 GB one. When I reinstalled <a href="http://www.kubuntu.org/">Kubuntu</a>, I decided to go with LVM for everything. My typical partitioning scheme has one partition (or volume) for the root, a big one for <tt>/home</tt> and a separate relatively small one for <tt>/var</tt> (so eg. <tt>/var/tmp</tt> can&#8217;t fill up your root). Plus a big swap partiton and <tt>/tmp</tt> mounted as tmpfs (so <tt>/tmp</tt> can&#8217;t fill up root neither). Additionally I usually symlink <tt>/usr/src</tt> to <tt>/var/src</tt>. Only <tt>/boot</tt> is not located in the LVM. Which results in the following fstab:</p>
<p><code>/dev/hd/kubuntu       /                  ext3    defaults,noatime,errors=remount-ro 0 1<br />
/dev/hd/kubuntu+var   /var               ext3    defaults,relatime 0 2<br />
/dev/hd/home          /home              ext3    defaults,relatime 0 3<br />
/dev/hd/media         /media/Media       ext3    defaults,noatime 0 0<br />
/media/Media/music    /home/mss/Music    none    bind 0 0<br />
/media/Media/pictures /home/mss/Pictures none    bind 0 0<br />
/dev/sda1             /boot              ext3    defaults,noatime 0 2<br />
/dev/hd/swap          none               swap    sw 0 0<br />
proc                  /proc              proc    defaults 0 0<br />
tmp                   /tmp               tmpfs   size=3G,mode=1777 0 0</code></p>
<p>For a typical desktop system partitioned like that and running KDE you don&#8217;t need more than 4 GiB for the root.</p>
<p>My initial volumes looked like this:<br />
<code>root@TreeHouse:~# pvdisplay /dev/sda3<br />
--- Physical volume ---<br />
PV Name               /dev/sda3<br />
VG Name               hd<br />
PV Size               110.69 GB / not usable 1.24 MB<br />
Allocatable           yes<br />
PE Size (KByte)       4096<br />
Total PE              28337<br />
Free PE               5809<br />
Allocated PE          22528<br />
PV UUID               3aP8yu-j0R1-gnKW-DXOd-rPjd-BHXz-8gjmP7<br />
root@TreeHouse:~# vgdisplay hd<br />
--- Volume group ---<br />
VG Name               hd<br />
System ID<br />
Format                lvm2<br />
Metadata Areas        1<br />
Metadata Sequence No  20<br />
VG Access             read/write<br />
VG Status             resizable<br />
MAX LV                0<br />
Cur LV                5<br />
Open LV               5<br />
Max PV                0<br />
Cur PV                1<br />
Act PV                1<br />
VG Size               110.69 GB<br />
PE Size               4.00 MB<br />
Total PE              28337<br />
Alloc PE / Size       22528 / 88.00 GB<br />
Free  PE / Size       5809 / 22.69 GB<br />
VG UUID               FBM2Pd-5yTa-iQIE-cJzO-2ZW1-bf2j-CrYymN<br />
root@TreeHouse:~# lvdisplay hd<br />
--- Logical volume ---<br />
LV Name                /dev/hd/home<br />
VG Name                hd<br />
LV UUID                ooX4NK-rScI-0ByG-tBmd-PALp-Y58V-iGCJuy<br />
LV Write Access        read/write<br />
LV Status              available<br />
# open                 1<br />
LV Size                50.00 GB<br />
Current LE             12800<br />
Segments               1<br />
Allocation             inherit<br />
Read ahead sectors     0<br />
Block device           254:0<br />
--- Logical volume ---<br />
LV Name                /dev/hd/kubuntu+var<br />
VG Name                hd<br />
LV UUID                Dg8Dfj-JWTY-6jlj-uER8-u311-5BQp-qTlRju<br />
LV Write Access        read/write<br />
LV Status              available<br />
# open                 1<br />
LV Size                4.00 GB<br />
Current LE             1024<br />
Segments               1<br />
Allocation             inherit<br />
Read ahead sectors     0<br />
Block device           254:1<br />
--- Logical volume ---<br />
LV Name                /dev/hd/kubuntu<br />
VG Name                hd<br />
LV UUID                P3Hf92-Fg2F-JX0Z-Oa2j-nffR-gQrn-dXUYQN<br />
LV Write Access        read/write<br />
LV Status              available<br />
# open                 1<br />
LV Size                5.00 GB<br />
Current LE             1280<br />
Segments               1<br />
Allocation             inherit<br />
Read ahead sectors     0<br />
Block device           254:2<br />
--- Logical volume ---<br />
LV Name                /dev/hd/swap<br />
VG Name                hd<br />
LV UUID                jHyLo5-AEdF-kESY-zKkS-BnbI-NRnZ-EUvwry<br />
LV Write Access        read/write<br />
LV Status              available<br />
# open                 1<br />
LV Size                4.00 GB<br />
Current LE             1024<br />
Segments               1<br />
Allocation             contiguous<br />
Read ahead sectors     0<br />
Block device           254:3<br />
--- Logical volume ---<br />
LV Name                /dev/hd/media<br />
VG Name                hd<br />
LV UUID                aosr8H-zDav-aKhx-zlmx-BUc3-LWnW-glDMw0<br />
LV Write Access        read/write<br />
LV Status              available<br />
# open                 1<br />
LV Size                25.00 GB<br />
Current LE             6400<br />
Segments               1<br />
Allocation             inherit<br />
Read ahead sectors     0<br />
Block device           254:4</code><br />
As you can see I kept ca. 20 GiB spare space (who needs 100+ GiB anyway&#8230;) which I didn&#8217;t allocate to any volume.</p>
<p>That saved my ass when yesterday suddenly my updates started to fail (after I installed <a href="http://www.lazarus.freepascal.org/">Lazarus</a>). With all those installed libraries, headers and development environments my system doesn&#8217;t really qualify as a standard desktop anymore. Now I can even think about installing the <a href="http://blog.nixternal.com/2008.06.05/hardy-kde-41-beta-1-completed/">KDE 4.1 Beta packages</a> <img src='http://evilhomestereo.net/wp/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
<p>In case of less anticipatory planning, you might be interested in <a href="http://allaboutfedora.blogspot.com/2007/01/how-to-resize-or-expand-lvm-partitions.html">another article</a> which explains how you shrink one of your volumes first.</p>
]]></content:encoded>
			<wfw:commentRss>http://evilhomestereo.net/wp/2008/06/06/lvm-ext3-rocks/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Better switch off your phone when shopping</title>
		<link>http://evilhomestereo.net/wp/2008/05/19/better-switch-off-your-phone-when-shopping/</link>
		<comments>http://evilhomestereo.net/wp/2008/05/19/better-switch-off-your-phone-when-shopping/#comments</comments>
		<pubDate>Mon, 19 May 2008 18:40:05 +0000</pubDate>
		<dc:creator>Malte</dc:creator>
		
		<category><![CDATA[en]]></category>

		<guid isPermaLink="false">http://evilhomestereo.net/wp/2008/05/19/better-switch-off-your-phone-when-shopping/</guid>
		<description><![CDATA[Nice. Times Online reports:
Customers in shopping centres are having their every move tracked by a new type of surveillance that [...] has already been installed in two shopping centres, including Gunwharf Quays in Portsmouth [...].
There&#8217;s no reason to worry of course:
Path Intelligence, the Portsmouth-based company which developed the technology, said its equipment was just a [...]]]></description>
			<content:encoded><![CDATA[<p>Nice. Times Online <a href="http://technology.timesonline.co.uk/tol/news/tech_and_web/article3945496.ece">reports</a>:</p>
<blockquote><p>Customers in shopping centres are having their every move tracked by a new type of surveillance that [...] has already been installed in two shopping centres, including <a href="http://www.gunwharf-quays.com/">Gunwharf Quays</a> in Portsmouth [...].</p></blockquote>
<p>There&#8217;s no reason to worry of course:</p>
<blockquote><p><a href="http://www.pathintelligence.com/">Path Intelligence</a>, the Portsmouth-based company which developed the technology, said its equipment was just a tool for market research. &#8220;There&#8217;s absolutely no way we can link the information we gather back to the individual,” a spokeswoman said.</p></blockquote>
<p>Nobody would ever think to link your <a href="http://en.wikipedia.org/wiki/IMEI">IMEI</a> or <a href="http://en.wikipedia.org/wiki/IMSI">IMSI</a> number to your <a href="http://en.wikipedia.org/wiki/Loyalty_program">bonus card</a>, your <a href="http://www.gunwharf-quays.com/gift_card.htm">gift card</a> or even your credit card number of course. And if anybody did so, they&#8217;d probably put a notice to an easy-to-find place, like an 8pt sign at the entrance or on the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying &#8216;Beware of the Leopard&#8217;.</p>
]]></content:encoded>
			<wfw:commentRss>http://evilhomestereo.net/wp/2008/05/19/better-switch-off-your-phone-when-shopping/feed/</wfw:commentRss>
		</item>
		<item>
		<title>(A little) too much magic</title>
		<link>http://evilhomestereo.net/wp/2008/05/17/a-little-too-much-magic/</link>
		<comments>http://evilhomestereo.net/wp/2008/05/17/a-little-too-much-magic/#comments</comments>
		<pubDate>Sat, 17 May 2008 21:09:56 +0000</pubDate>
		<dc:creator>Malte</dc:creator>
		
		<category><![CDATA[en]]></category>

		<category><![CDATA[camea]]></category>

		<category><![CDATA[hal]]></category>

		<category><![CDATA[linux]]></category>

		<category><![CDATA[olympus sp-700]]></category>

		<category><![CDATA[udev]]></category>

		<guid isPermaLink="false">http://evilhomestereo.net/wp/2008/05/17/a-little-too-much-magic/</guid>
		<description><![CDATA[How do you know that Linux becomes mainstream-ready? If stuff happens magically and you don&#8217;t know where to start debugging of course.
Seriously: I always had some issues accessing my digicam (an Olympus SP-700) from KDE (actually, Kubuntu): The system always first tried to access it via some magic camera device while it actually offers a [...]]]></description>
			<content:encoded><![CDATA[<p>How do you know that Linux becomes mainstream-ready? If stuff happens magically and you don&#8217;t know where to start debugging of course.</p>
<p>Seriously: I always had some issues accessing my digicam (an <a href="http://www.olympusamerica.com/cpg_section/cpg_archived_product_details.asp?fl=2&amp;id=1196">Olympus SP-700</a>) from KDE (actually, Kubuntu): The system always first tried to access it via some magic <tt>camera</tt> device while it actually offers a standard <tt>usb-storage</tt> device. I always had to cancel the dialog which offered me to use the first one and wait for the second one to appear. Weird but it worked.</p>
<p>Since I upgraded to <a href="http://kubuntu.org/announcements/8.04-release.php">Kubuntu 8.04</a>,  the workaround doesn&#8217;t help anymore. The second dialog never appears. Not even the <tt>/dev/sdx</tt>-device is created anymore. So it seems like I&#8217;ve actually got to start debugging that stuff. My guess is that its a weird clash between the <a href="http://freedesktop.org/wiki/Software/hal">HAL</a> and/or <a href="http://www.kernel.org/pub/linux/utils/kernel/hotplug/udev.html">udev</a> and <a href="http://www.gphoto.org/">gphoto2</a>. Ie. somehow gphoto2 (which creates those weird <tt>camera</tt> devices/mounts) thinks it should handle the camera while it is actually not necessary and the default handler would handle it just fine.</p>
<p>But debugging HAL/<a href="http://vrfy.org/log/recent-state-of-udev.html">udev</a> is actually not as easy as looking at some <tt>dmesg</tt> output. Looking at <tt>/etc/udev/rules.d</tt> didn&#8217;t help, seems like I&#8217;ve got to dig deeper and somehow get some debugging output from the daemons working in the background&#8230;</p>
<p>But I shouldn&#8217;t complain: Debugging got indeed a lot more complicated, almost as tangled as the Windows stuff. But while both systems work in 99% of all cases, in the remaining 1% I can at least have a look at the sources and grep some plain text config files.</p>
]]></content:encoded>
			<wfw:commentRss>http://evilhomestereo.net/wp/2008/05/17/a-little-too-much-magic/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Update Madness?! This is Debian!</title>
		<link>http://evilhomestereo.net/wp/2008/02/12/update-madness-this-is-debian/</link>
		<comments>http://evilhomestereo.net/wp/2008/02/12/update-madness-this-is-debian/#comments</comments>
		<pubDate>Tue, 12 Feb 2008 15:02:36 +0000</pubDate>
		<dc:creator>Malte</dc:creator>
		
		<category><![CDATA[debian]]></category>

		<category><![CDATA[en]]></category>

		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://evilhomestereo.net/wp/2008/02/12/update-madness-this-is-debian/</guid>
		<description><![CDATA[I really like Debian. Or (K)Ubuntu which I actually use. And of course apt/dpkg. Great stuff. Almost as good as Portage, with the unbeatable advantage that you don&#8217;t have to compile all that stuff on your own  
But can somebody please explain something to me?
Why does a little update in KDE packages always trigger [...]]]></description>
			<content:encoded><![CDATA[<p>I really like <a href="http://www.debian.org/">Debian</a>. Or (<a href="http://www.kubuntu.org/">K</a>)<a href="http://www.ubuntu.com/">Ubuntu</a> which I actually use. And of course <a href="http://en.wikipedia.org/wiki/Advanced_Packaging_Tool">apt</a>/<a href="http://en.wikipedia.org/wiki/Dpkg">dpkg</a>. Great stuff. Almost as good as <a href="http://en.wikipedia.org/wiki/Portage_(software)">Portage</a>, with the unbeatable advantage that you don&#8217;t have to compile all that stuff on your own <img src='http://evilhomestereo.net/wp/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>But can somebody please explain something to me?</p>
<p>Why does a little update in KDE packages always trigger such an update madness?</p>
<p>Like <a href="http://article.gmane.org/gmane.linux.ubuntu.devel.changes.gutsy/9879">currently in kdepim</a>:</p>
<blockquote><p>debian/control: Added Conflict/Replaces on ksync for kitchensync. &#8220;ksync&#8221; gets shipped with kitchensync now. (LP: <a href="https://bugs.launchpad.net/bugs/133944">#133944</a>)</p></blockquote>
<p>That&#8217;s only two packages. Why do I have to update all the stuff coming from <a href="http://pim.kde.org/">PIM</a>? Actually, why do I have to update at all if its only metadata which was changed?</p>
<p>Or <a href="http://article.gmane.org/gmane.linux.ubuntu.devel.changes.gutsy/9892">in kdebase</a>:</p>
<blockquote><p>* Stable release update, support new Flash in Konqueror<br />
* Add kubuntu_9917_flash_xembed.diff, adds xembed support to Konqueror<br />
* Add build-dep on libglib2.0-dev<br />
* Closes LP: <a href="https://bugs.launchpad.net/bugs/184149">#184149</a></p></blockquote>
<p>Great,  flash should <a href="https://bugs.launchpad.net/bugs/189875">work again</a>. But why do I have to download <a href="http://packages.ubuntu.com/gutsy/kde/kdebase-data">kdebase-data</a> for that?</p>
<p>One of the reasons Gentoo switched to split ebuilds for KDE was <a href="http://www.gentoo.org/doc/en/kde-split-ebuilds.xml#doc_chap1_sect4">the advantage</a> that you didn&#8217;t have to download the whole package again just because only one small app like ksync was changed. Why does Portage manage to do that and the good olde dpkg not? Or does that only happen in <a href="https://help.ubuntu.com/community/UbuntuUpdates#head-972d2dd886329532a720f5bd381426b59f5d0f11">gutsy-proposed</a>? Can somebody enlighten me?</p>
]]></content:encoded>
			<wfw:commentRss>http://evilhomestereo.net/wp/2008/02/12/update-madness-this-is-debian/feed/</wfw:commentRss>
		</item>
		<item>
		<title>To photoshop</title>
		<link>http://evilhomestereo.net/wp/2008/01/31/to-photoshop/</link>
		<comments>http://evilhomestereo.net/wp/2008/01/31/to-photoshop/#comments</comments>
		<pubDate>Thu, 31 Jan 2008 14:29:42 +0000</pubDate>
		<dc:creator>Malte</dc:creator>
		
		<category><![CDATA[en]]></category>

		<guid isPermaLink="false">http://evilhomestereo.net/wp/2008/01/31/to-photoshop/</guid>
		<description><![CDATA[I was just musing if Adobe might soon face the same problem Xerox and Kleenex had: &#8220;I photoshop my cat pictures with Gimp!&#8221; when I stumbled upon this post at soup.io. Coincidence.
I guess the same might happen to the brand iPod.  If I worked at a department store and somebody asked me for an [...]]]></description>
			<content:encoded><![CDATA[<p>I was just musing if Adobe might soon face the same <a href="http://en.wikipedia.org/wiki/Genericized_trademark">problem</a> Xerox and Kleenex had: &#8220;I photoshop my cat pictures with Gimp!&#8221; when I stumbled upon <a href="http://found.soup.io/post/500770">this</a> post at <a href="http://www.soup.io/">soup.io</a>. Coincidence.</p>
<p>I guess the same might happen to the brand iPod.  If I worked at a department store and somebody asked me for an iPod, I&#8217;d ask them first if they really want an iPod or just some kind of MP3-player (where even that term is wrong as most of those also play WMA or Ogg). Reminds me of Sony&#8217;s Walkman, though I&#8217;m not sure what exactly happened to that brand as they still use it nowadays.</p>
]]></content:encoded>
			<wfw:commentRss>http://evilhomestereo.net/wp/2008/01/31/to-photoshop/feed/</wfw:commentRss>
		</item>
		<item>
		<title>How to secure your URL-redirector</title>
		<link>http://evilhomestereo.net/wp/2008/01/29/how-to-secure-your-url-redirector/</link>
		<comments>http://evilhomestereo.net/wp/2008/01/29/how-to-secure-your-url-redirector/#comments</comments>
		<pubDate>Tue, 29 Jan 2008 18:38:42 +0000</pubDate>
		<dc:creator>Malte</dc:creator>
		
		<category><![CDATA[en]]></category>

		<category><![CDATA[tech]]></category>

		<guid isPermaLink="false">http://evilhomestereo.net/wp/2008/01/29/how-to-secure-your-url-redirector/</guid>
		<description><![CDATA[While I wrote the previous post and did some googling I noticed that the ARD also has one of those pesky URL-redirectors. It is here. Try to attach any URL to the parameter called url, like this one. What&#8217;s the problem with redirectors on your website which allow people to redirect to arbitrary pages? There&#8217;s [...]]]></description>
			<content:encoded><![CDATA[<p>While I wrote the previous post and did some googling I noticed that the ARD also has one of those pesky URL-redirectors. It is <a href="http://www.ard.de/cmwebapp/util/redir.jsp">here</a>. Try to attach any URL to the parameter called url, like <a href="http://www.ard.de/cmwebapp/util/redir.jsp?url=%48tt%70%3a%2f%2fmsquadrat%2ede&amp;foo=bar">this one</a>. What&#8217;s the problem with redirectors on your website which allow people to redirect to arbitrary pages? There&#8217;s an article at <a href="http://www.heise-security.co.uk/news/98803">Heise Security</a> which explains it quite well (I don&#8217;t know whats worse, Google or a news site like the ARD).</p>
<p>So if you really think you need some automagic redirection like this (eg. to count outgoing clicks) please implement at least these easy rules:</p>
<ul>
<li>If its used by a form only (like in the Google case), make sure it works with POST only.</li>
<li>If you want to use it in clickable links, check the Referer. Not every browser sets that header, in those cases show a static page which explains the user what is happening and offer him a link to actually exit.</li>
</ul>
<p>Even more secure is to put every link ever used on your site in a database (you want to track the clicks anyway, right?) and add an id to the URL. Then people can only hop over your site when you posted that link yourself before.</p>
<p>Or just don&#8217;t do stuff like that.</p>
<p>Hmm&#8230; interesting, <a href="http://www.ard.de/cmwebapp/util/redir.jsp?url=../../">this</a> link redirects to <a href="http://g4035180.swr.de:9185/">port 9185 on g4035180.swr.de</a>. Not that this machine was accessible from the outside but if the rest of the CMS is written as bad as this part&#8230;</p>
]]></content:encoded>
			<wfw:commentRss>http://evilhomestereo.net/wp/2008/01/29/how-to-secure-your-url-redirector/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Dear ARD, please take a leaf out of BBC&#8217;s book</title>
		<link>http://evilhomestereo.net/wp/2008/01/29/dear-ard-please-take-a-leaf-out-of-bbcs-book/</link>
		<comments>http://evilhomestereo.net/wp/2008/01/29/dear-ard-please-take-a-leaf-out-of-bbcs-book/#comments</comments>
		<pubDate>Tue, 29 Jan 2008 17:52:44 +0000</pubDate>
		<dc:creator>Malte</dc:creator>
		
		<category><![CDATA[en]]></category>

		<category><![CDATA[ard]]></category>

		<category><![CDATA[bbc]]></category>

		<guid isPermaLink="false">http://evilhomestereo.net/wp/2008/01/29/dear-ard-please-take-a-leaf-out-of-bbcs-book/</guid>
		<description><![CDATA[I took a mental note to write something on the topic ARD vs. BBC and Open Source and openness in general some time ago but never got around to actually do so. Until now. Why now? Because of BBC&#8217;s attendance at linux.conf.au. Why in English? Well, on the one hand because I can. On the [...]]]></description>
			<content:encoded><![CDATA[<p>I took a mental note to write something on the topic <a href="http://www.ard.de/">ARD</a> vs. <a href="http://www.bbc.co.uk/">BBC</a> and Open Source and openness in general some time ago but never got around to actually do so. Until now. Why now? Because of <a href="http://www.itwire.com/content/view/16299/1090/">BBC&#8217;s attendance</a> at <a href="http://linux.conf.au/">linux.conf.au</a>. Why in English? Well, on the one hand because I can. On the other because I&#8217;m an attention whore and want it to appear on <a href="http://planetapache.org/">the Planet</a> <img src='http://evilhomestereo.net/wp/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>If you don&#8217;t know what I&#8217;m talking about, ARD is the joint organization (most of) of German broadcasters under public law. As always, Wikipedia can <a href="http://en.wikipedia.org/wiki/ARD_(broadcaster)">tell you more</a>. It&#8217;s financed by fees collected from anybody who owns a radio or a tv. All in all, it&#8217;s similar to the BBC. The main difference being that it&#8217;s not a single company but rather a federation of more-or-less independent entities. The main similarity? Same as between Germany and the UK I guess, both are rather conservative and slow in adopting changes. Especially in technology and transparency.</p>
<p>Both are taking first steps in the right (as defined by me) direction: The <a href="http://www.bbc.co.uk/iplayer/">iPlayer</a> might be a Windows-centric mess, but it&#8217;s a start. The ARD is working on a similar thing, called the <a href="http://mediathek.ard.de/">Mediathek</a>. I hope it will be better than the one the <a href="http://www.zdf.de/">ZDF</a> (the <a href="http://en.wikipedia.org/wiki/ZDF">other</a> German broadcaster under public law) <a href="http://mediathek.zdf.de/">opened</a> to the public. (I just noticed that you can search it now, that&#8217;s a new feature.) Oh, and the ARD got a bunch of <a href="http://www.ard.de/home/podcast/-/id=365212/1jzcgs8/index.html">podcasts</a> plus some kind of software called <a href="http://www.ard.de/podcastmixer">Podcast Mixer</a>.</p>
<p>And there my praise stops and the complaints start (I wouldn&#8217;t be German if I didn&#8217;t find something to complain about, right?).</p>
<p>Don&#8217;t get me started that only a handful of radio programs are available as podcasts, everything else is just streamed (at least not in RealMedia anymore, but in MP3 and sometimes <a href="http://blog.tagesschau.de/?p=944">even Ogg</a>). The really interesting stuff often isn&#8217;t available for download. Like the <a href="http://www.n-joy.de/njoy_pages_std/0,3044,SPM2162,00.html">N-Joy Soundfiles</a> and the full <a href="http://www.br-online.de/jugend/zuendfunk/">Zündfunk</a> shows. (Hmm&#8230; seems like radioeins has a nice <a href="http://www.radioeins.de/archiv/podcast/index.html">archive</a> though.) Ok, most of the other stuff <a href="http://www.zeit.de/2005/09/RettetdasRadio?page=all">isn&#8217;t worth it</a> anyway. But I&#8217;ve paid for it, so it would be nice if it was available. And don&#8217;t tell me about broadcasting rights, not in times where Amazon sells MP3s without copy protection and you can <a href="http://blog.last.fm/2008/01/23/free-the-music">listen to full songs</a> on Last.fm. If the podcast is interesting I&#8217;d even listen to the commercials on my MP3-player!</p>
<p>At least the people at ARD and ZDF <a href="http://t3n.yeebase.com/aktuell/news/newspost/ard-und-zdf-digitale-zukunft-mit-open-source/814/">think</a> about releasing content as &#8220;Open Source&#8221;; whatever they mean with that, I hope they have a look <a href="http://creativearchive.bbc.co.uk/">how the BBC did it</a>.</p>
<p>But, back to technology, the stuff which got me started. Remember that software Podcast Mixer? Well, obviously the ARD paid somebody to create it. Wouldn&#8217;t it be just fair if the source was available then? Maybe I could even port it to Linux and use it then. Ok, bad example, there&#8217;s a lot of better software freely available already. But there&#8217;s also a lot of other software created at the ARD as well.</p>
<p>I once worked for the <a href="http://www.ndr.de/">NDR</a> (the northern member of the ARD) and had to write a tool to implement access control for USB-devices under Windows. The team I worked at created a really easy-to-use tool to create, install, and auto-configure Windows images, all based on some Linux distro and <a href="http://www.partimage.org/">Partimage</a>. I had loved to use it at some other places I worked since then. And somebody else was working on an administration tool all the time, can&#8217;t remember what it was supposed to do. But all those people (including me) were payed by a public entity. By people&#8217;s money.</p>
<p>The same is actually true for government-created stuff as well, projects like <a href="http://www.muenchen.de/Rathaus/dir/limux/english/147197/index.html">LiMux</a> are a start but definitely not enough. But I&#8217;ll stick with broadcasting for now.</p>
<p>In contrast, look at the BBC. On their website they&#8217;ve got their own <a href="http://www.bbc.co.uk/opensource/">Open Source area</a>. And don&#8217;t be surprised if you search <a href="http://www.cpan.org/">CPAN</a> and stumble upon a Perl module created by a user called <a href="http://search.cpan.org/~bbc/">BBC (British Broadcasting Corporation)</a>.  Well, I was, but I&#8217;d be even more surprised if there was one called ARD.</p>
<p>And have you ever heard about a blog called ARD Radio Labs? Nope, me neither, but <a href="http://www.bbc.co.uk/blogs/radiolabs/">BBC Radio Labs</a>. (Hmm&#8230; <a href="http://www.bbc.co.uk/blogs/radiolabs/2008/01/even_penguins_can_listen_to_bb.shtml">seems</a> like they&#8217;re still streaming with RealMedia, point for the ARD here.)  <a href="http://blog.tagesschau.de/">blog.tagesschau.de</a> is a start, but not comparable to a whole, well, let&#8217;s <a href="http://en.wikipedia.org/wiki/Planet_(software)">call</a> it a <a href="http://www.bbc.co.uk/blogs/">Planet</a>.</p>
<p>What else is there?</p>
<p>I heard the BBC managed to make <a href="http://en.wikipedia.org/wiki/Digital_Audio_Broadcasting">DAB</a> quite popular in the UK, by broadcasting some programmes digital-only. The ARD was just <a href="http://followthemedia.com/alldigital/DAB29012008.htm">cut short of funds</a> for digital radio by the <a href="http://de.wikipedia.org/wiki/Kommission_zur_Ermittlung_des_Finanzbedarfs_der_Rundfunkanstalten">KEF</a>, the committee responsible for the ARD&#8217;s finances.</p>
<p>I <a href="http://www.behindertenparkplatz.de/cl/2007/11/22/871/">read</a> that 80% of the tv programmes of the BBC are already subtitled, they are aiming for 100% by April. ZDF is aiming for 25%, ZDF for 12% or less.</p>
<p>And I don&#8217;t know if  the numbers have changed in the last few years, but <a href="http://www.heise.de/tp/r4/artikel/17/17691/1.html">at least in 2002</a> the BBC had more programs, more employees, but needed less funds.</p>
]]></content:encoded>
			<wfw:commentRss>http://evilhomestereo.net/wp/2008/01/29/dear-ard-please-take-a-leaf-out-of-bbcs-book/feed/</wfw:commentRss>
		</item>
		<item>
		<title>KDE-SCM-Interest now on GMANE</title>
		<link>http://evilhomestereo.net/wp/2008/01/27/kde-scm-interest-now-on-gmane/</link>
		<comments>http://evilhomestereo.net/wp/2008/01/27/kde-scm-interest-now-on-gmane/#comments</comments>
		<pubDate>Sun, 27 Jan 2008 20:13:04 +0000</pubDate>
		<dc:creator>Malte</dc:creator>
		
		<category><![CDATA[en]]></category>

		<category><![CDATA[tech]]></category>

		<guid isPermaLink="false">http://evilhomestereo.net/wp/2008/01/27/kde-scm-interest-now-on-gmane/</guid>
		<description><![CDATA[There&#8217;s a relatively new KDE mailinglist called scm-interest. They are discussing about a potential new (distributed) SCM system for KDE (well, duh, thats what the name says). Should be interesting to follow these people as any software which can manage KDE&#8217;s massive codebase (they tend to convert everything back to KDE 1) should scale very [...]]]></description>
			<content:encoded><![CDATA[<p>There&#8217;s a relatively new KDE mailinglist called <a href="https://mail.kde.org/mailman/listinfo/kde-scm-interest">scm-interest</a>. They are discussing about a potential new (distributed) <a href="http://en.wikipedia.org/wiki/Source_Code_Management">SCM</a> system for KDE (well, duh, thats what the name says). Should be interesting to follow these people as any software which can manage KDE&#8217;s massive codebase (they tend to convert everything back to KDE 1) should scale very well in any other possible case.</p>
<p>The list is now <a href="http://news.gmane.org/gmane.comp.kde.scm-interest/">available</a> on GMANE, the archives are imported, starting with Thiago&#8217;s <a href="http://article.gmane.org/gmane.comp.kde.scm-interest/4">introduction</a>. Happy procrastinating!</p>
]]></content:encoded>
			<wfw:commentRss>http://evilhomestereo.net/wp/2008/01/27/kde-scm-interest-now-on-gmane/feed/</wfw:commentRss>
		</item>
	</channel>
</rss>
