.knockd.

## (to) knock; knockd. however, that `d' comes from `daemon'.

% echo -e 'e.g.,\n'

% iptables -L -n
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT tcp -- foo.bar.qux.def 0.0.0.0/0 tcp dpt:22
DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22

% cat /etc/knockd.conf
[openSSH]
sequence = foobar,def,plugh,fred,xyzzy,thud
seq_timeout = 5
command = /sbin/iptables -I INPUT -s %IP% -p tcp --dport 22 -j ACCEPT
tcpflags = syn

[closeSSH]
sequence = thud,def,fred,foobar,xyzzy,plugh
seq_timeout = 5
command = /sbin/iptables -D INPUT -s %IP% -p tcp --dport 22 -j ACCEPT
tcpflags = syn

% knock -v foo.bar.qux.quux foobar def plugh fred xyzzy thud

% echo 'however, knocks can be sent via netcat, hping, packit, etc.'

% echo 'open_port command executed @foo.bar.qux.def.'
% echo 'do sleep 16; while job_done; done...'

% knock -v foo.bar.qux.quux thud def fred foobar xyzzy plugh

% echo 'close_port command now executed @specific.host. all set. w00t!'

n.b.
#01. {def,foobar,fred,plugh,thud,xyzzy} == (tcp || udp) ports.
#02. use as many as you want... anyway, 3 should be just fine (read as `secure').

 .
..:

.happy.1234567890!

date +%s was 1234567890.
we all celebrated, @##1234567890, on irc/dot/freenode/dot/net.

you might want to check some irc logs: http://data.softwareliber.ro/irc-logs/%23%231234567890/%23%231234567890.13-02-2009.log.
we also partied on #gsl (% lynx http://data.softwareliber.ro/irc-logs/%23gsl/%23gsl.13-02-2009.log | grep 1234).

happy unix epoch.

//...on the first day of y2k38, my server said to me: *epoch fail*.

 .
..:

.unix.christmas.-.console.christmas|tree.

we are going to install some perl modules, for a very line-oriented christmas.
% perl -MCPAN -e 'install IO:Tty'
% perl -MCPAN -e 'install Acme'
% perl -MCPAN -e 'install POE'
preferably as root.

want to have `Acme::POE::Tree', and execute
% perl -MAcme::POE::Tree -e 'Acme::POE::Tree->new()->run()'

meaning: `http://search.cpan.org/~rgiersig/IO-Tty-1.07/Tty.pm';
         `http://search.cpan.org/~ingy/Acme-1.11111/lib/Acme.pm';
         `http://search.cpan.org/~rcaputo/POE-1.003/lib/POE.pm';
finally: `http://search.cpan.org/~rcaputo/Acme-POE-Tree-1.01/lib/Acme/POE/Tree.pm'.

% wget http://search.cpan.org/CPAN/authors/id/R/RG/RGIERSIG/IO-Tty-1.07.tar.gz
% wget http://search.cpan.org/CPAN/authors/id/I/IN/INGY/Acme-1.11111.tar.gz
% wget http://search.cpan.org/CPAN/authors/id/R/RC/RCAPUTO/POE-1.003.tar.gz
% wget http://search.cpan.org/CPAN/authors/id/R/RC/RCAPUTO/Acme-POE-Tree-1.01.tar.gz

% perl Makefile.PL && make && make test && make install
for each mod.

or,
% perl -MCPAN -e 'install Acme::POE::Tree'
obviously, you'll have to set cpan first ($HOME/.cpan/Metadata).

% perl -MAcme::POE::Tree -e 'Acme::POE::Tree->new()->run()'
once you have it, play with it: modifying (the method) `star_delay', or `light_delay', etc.

p.s.: `IO::Tty' determines tty's properties, by importing constants. w00t!
p.p.s.: thanks to rocco for the geeky present.

        ^             !             ?
       /\            /\            /\
      / *\          /  \          /  \
     / * *\        /  * \        /    \
    /_*_*_*\      /_*__*_\      / ^^^^ \
      ^||^          /^^\           ||    .

p.s.s.: compression and a lot of solid-color areas, resulting a small image. note: this is a png; if it looks broken, get a browser that can view pngs =:: http://www.libpng.org/pub/png/pngapbr.html.

 .
..:

.2.6.28-*.

the good stuff within:

pci/kvm changes (mmap legacy_io support, pci quirks removing; kvm supporting vt-d driver).
ext4/ext3/ocfs2/ubifs/gfs2/nfs mods (e.g.,
ext4dev it's now ext4 (fs/Kconfig, fs/Makefile, fs/ext4/*), so no TEST_FILESYS anymore; error handling control option (i/o operations; buffer write errors don't get detected, if fsync() is not used, iow, determines whether to call printk() or to abort journalizing; however, ignoring will be set by default), (prominently fs/ext4/ext4.h); no HUGE_FILE flag auto-enabled; delayed allocation mode disabled (fs/ext4/inode.c).
default autodetection of a config option for raid configs.

some drivers had been held on place, aka staging.

grab the patch: http://kernel.org/pub/linux/kernel/v2.6/patch-2.6.28.bz2.

|_|

 .
..:

.jaunty alpha 2.

2.6.28 kernel; x.org server 1.6 (memory loading problems on some chipsets); gui tool (scheduled) for hacking xorg.conf, exp user-space.
wget this: `http://cdimage.ubuntu.com/releases/jaunty/alpha-2/jaunty-desktop-i386.iso'.

 .
..:

._i__n__x_'s _n_ot _x_.

console(-only) distro, ubuntu-based, runs just nice. more at http://inx.maincontent.net/info/info.html/.
wget this, to get it: `http://inx.maincontent.net/inx-1.0.iso.torrent'.
the.files: `http://inx.maincontent.net/files/'.
the.packages: `http://inx.maincontent.net/files/selections/'.
>
# foo/bar.
<
[token == '\n'].

inx's webpage.

 .
..:

.nvidia-96-kernel-source: 96.43.09.

as expected/promised, 71.86.07/96.43.09 drivers are available.
add the following line to /etc/apt/sources.list:
# `"deb http://archive.ubuntu.com/ubuntu/ intrepid-proposed restricted main multiverse universe"'.

some apt-pinning:

% sudo touch /etc/apt/preferences. then, edit it:

"
Package: *
Pin: release a=intrepid-updates
Pin-Priority: 900

Package: *
Pin: release a=intrepid-proposed
Pin-Priority: 400
".

finally, switching:
% sudo apt-get purge nvidia-96-* -V ; apt-cache show nvidia-96-kernel-source -f \.
% sudo apt-get install nvidia-96-kernel-source -t intrepid-proposed -V ; sudo apt-cache show nvidia-96-kernel-source -f \.

_d__k__m__s_ shall do the work, after that. have fun.
optionally, give nvidia-xconfig a try (appending, of course, "Option \"NoLogo\" \"True\", within the `Device' section of your /etc/X11/xorg.conf).

p.s. % glxinfo ; glxgears \. -- : ).
p.s.s. feedback /at/ here.
P.P.S. happy hackin.

UPDATE.01:
# 96.43.09 -> stable repos (currently 400). hope to see that soon.
UPDATE.02:
# 96.43.09 :: 900 ; iow, stable.

 .
..:

.routine intrepid diggings.

## 00.
nVidia:
nvidia-glx-legacy and nvidia-glx in Hardy, the 71/96 (currently 71.86.04 'n' 96.43.05) series (nVidia TNT, TNT2, TNT Ultra, GeForce, GeForce2, GeForce3, and GeForce4 chipsets) of proprietary nVidia drivers, are _not_ compatible with the X.Org included in Intrepid. ; resolution: mesa / no 3d rendering.
nVidia released some (two) betas, working with X.Org 7.4, so... waiting for these packages (http://www.nvnews.net/vbulletin/showthread.php?p=1821020/ - nVidia devs' confirmation).
ATI:
no more support[1] for Radeon 9500 - X600 Series (r300 based chips).
p.s. [1] == Support from the ATI Driver, for Ubuntu 8.10, of course...

## 01.
Audacious 1.5.1 [UNSUPPORTED VERSION] :: segmentation fault ; resolution.01: remove -purge, remove/purge audacious-crossfade or alter ~/.config/audacious/config.

## 02.
xchat 2.8.6 :: chanopt.conf feature. +1.

## 03.
mplayer segmentation fault ; using nv driver (under x).

## 04.
The possibility of $# sudo service < service.foo > [start|stop|restart] \, and $# sudo service < service.foo > status \ will report the state of service.foo (running or not).

## 05.
Nice runlevel layout, making rcconf more easy to use on managing services/daemons.

## 06.
Executable(s) randomize the in-memory location, net.services being compiled as PIE (position-independent executables) (e.g. postfix, openssh, apache2, bind9, dhcp3). +1 for security (vulnerabilities are _harder_ to exploit, on the 2.6-27-7-* kernel).

## 07.
Sun's Java OpenJDK 1.6 included into the main repo.

## 08.
the "CD eject" thing.

so, finally, happy release to you all.

## # _more_ to come. : ). #
n.b. stay tuned! intrepid shall be here.

 .
..:

.the beta is here!.

Intrepid disc.

 .
..:

.intrepid alpha 5.

Among the newest GNOME (2.23.91) with its new features (like the improved File Roller archive manager which now has extra support for ALZ, RZIP, CAB, TAR.7Z) and many bug fixes, official DKMS project testing on Intrepid (useful on third-party drivers updating, on a new kernel core update - highly increased stability/compatibility; less work for you), Ubuntu Intrepid Alpha 5 has began the official evaluation of kernel 2.6.27 (available for install since 28 August - AFAIK) for Ubuntu 8.10; also, the "Last successful boot" implementation (adding a last successful option on GRUB's /boot/grub/menu.lst, each time the boot process is successful - by making a copy of the running kernel), useful in APT's autoremove feature (by making it more safer - speaking of kernels).

 .
..:

.happy birthday to _g__n__u_!.

The 25th anniversary of the GNU Operating System.

In the film, Stephen Fry talks about freedom, comparing the free software operating system to "good science" and contrasts it with the tyranny _imposed_ by the proprietary software.
Mr. Fry also encourages people to use free GNU/Linux distributions.

http://www.gnu.org/fry/happy-birthday-to-gnu-download.html.

Download Mirror:
Best quality (125MB).
Good quality (33MB).
Medium quality (21MB).
Low quality (7MB).
Very low quality - dial-up connections (3MB).


Happy birthday to GNU, happy birthday to GNU! Happy birthday dear Freedom, happy birthday to GNU!.

 .
..:

.google chromium (beta).

while it's not yet packaged for *nix-based systems, chromium code is available for downloading/installing on a gnu/linux machine (so, i and my buddy ed tried it out last night, to see what we can get).

however, due to extreme loading, depot_tools from
src.chromium.org/svn/trunk/depot_tools/linux depot_tools's svn were unable to get the source (src path).
then I decided to throw a wget on chromium's /svn/trunk/src (http://src.chromium.org/svn/trunk/src), downloading the source (btw, you will probably have scons already installed - found on third-party/ dir, anyway).

in the meantime, the folks uploaded an updated version of chromium (equivalent of depot_tool's gclient sync - full synchronization was a subject to avoid just a few hours ago). so, check it out, compile it with scons (scons Hammer in /chromium/src/chrome/); give it a try.

update: this morning, i gave wine (wine-1.1.3) a chance. chromium ran, then crashed, but at least now I can take a tiny look under the hood (use this build).

() /exec true.

it uses the v8 javascript engine, (unique) multi-process architecture, "giving back memory" implementation, (first!) webkit implementation on mswin.
also, chromium is very challenging to debug (it has about:memory facility, its own taskman, etc.). have fun.

p.s.: the code contains _a.lot_ of libraries (like webki, npapi, libxml, hunspell, bzip2, scons, sqlite, tlslite, etc.), search for readmne.google files for details about each of these libs.

 .
..:

.kiwiLinux 8.08 is up!.

Based on 8.04.1, strong updated (as usual), also the first distro with Romanian translations of OOo and Thunderbird (done in Narro).

 .
..:

.openssl.security.mayhem.

as you probably know already, there's been a security alert for openssl.

canonical:

”A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledge of the system. This particularly affects the use of encryption keys in OpenSSH.”

debian:

“It is strongly recommended that all cryptographic key material which has been generated by OpenSSL versions starting with 0.9.8c-1 on Debian systems is recreated from scratch. Furthermore, all DSA keys ever used on affected Debian systems for signing or authentication purposes should be considered compromised; the Digital Signature Algorithm relies on a secret random value used during signature generation.” (From the Debian Alert).

launchpad:

“You need to take action to continue using Launchpad features such as code hosting. We have deleted your SSH key from Launchpad because we have discovered a potential security vulnerability in the way your key was generated.”

also reported on _the_fridge_ for ubuntu (http://fridge.ubuntu.com/node/1445/).

right; how to fix this.

## update your system:

# install the security updates, i.e.:
feisty : openssh-client 1:4.3p2-8ubuntu1.3 openssh-server 1:4.3p2-8ubuntu1.3.
gutsy : openssh-client 1:4.6p1-5ubuntu0.3 openssh-server 1:4.6p1-5ubuntu0.3.
hardy : openssh-client 1:4.7p1-8ubuntu1.1 openssh-server 1:4.7p1-8ubuntu1.1.

## once the update is applied, weak user keys will be automatically rejected where possible.

# update openssh files.

that is, one shall check whether the key is affected by running the ssh-vulnkey tool (from the security update). (if in doubt, destroy that key and generate a new one.)

# to check all your own keys, assuming they are in the standard locations (~/.ssh/id_rsa || ~/.ssh/id_dsa || ~/.ssh/identity):
% ssh-vulnkey.

# to check all keys on your system:
% sudo ssh-vulnkey -a.

# to check a key in a non-standard location:
% ssh-vulnkey /path/to/key/.

if ssh-vulnkey says "COMPROMISED", the key is vulnerable and __should__ be replaced.

# regenerate any affected user keys openssh or, generate new keys using ssh-keygen, e.g.:
% ssh-keygen.

if necessary, update the files.

however, this situation occurred as the result of a programming bug, not as the result of making some weak key.
we all thank luciano bello, who discovered that the random number generator in deb's openssl package is predictable.

 .
..:

.eee or electronic easter eggs.

*wandering* around some of my beloved systems/programs/commands/libraries/routines, I have discovered and read about a lot of hidden features/arguments/options (aka easter eggs).

## # Deprecated:
#
# Running 'whois the devil' or 'whois the antichrist' on Ark Linux.
#
# 'emerge moo' on Gentoo.
#
# 'who is god' on Gentoo.
#
# 'man tunefs' (look under "BUGS" header) on Solaris.
#
# 'make love' on Solaris.
#
# 'man c' (Coffee Distributor) on Debian/Mandrake.
#
## # .

## # Super Cow Powers, on Debian:
#
# 'apt-get --help'. At the end, apt-get shall print "This APT has Super Cow Power".
# Now, do the same with aptitude.
# 'aptitude --help'. This time, it shall print "This aptitude does not have Super Cow Powers".
# OK now. So you're wondering what's with this Super Cow, isn't it?
# Just execute 'apt-get moo'. Nice, isn't it? Hackers' love for cow is materialized in a cool easter egg. : ).
# But, what's the thing with aptitude, which doesn't have Super Cow Power?
# Again, 'aptitude moo'.
# To figure it out, increase the verbose level (appending a '-v'), until it stops telling new things. Enjoy it!
# PS: This is a reference to Antoine Marie Jean-Baptiste Roger de Saint-Exupéry's "Le Petit Prince" (The Little Prince).
#
## # .

## # Into the void:
#
# GAG: open a shell and type 'ddate'.
#
# In a shell, mistype ls (as sl)... and see the results.
#
# While at a console, type in: 'grep -r /usr/src/*'.
#
# 'grep LINUX_REBOOT_MAGIC include/linux/*.h' - parameters used in reboot() system call (like 369367448, or 0xfee1dead). Convert the\
# output using perl, e.g. 'perl -e 'print localtime(). "\n";'' (those are important dates for Linus Torvalds). : ).
#
# 'zgrep "The.*Release" /usr/share/doc/dpkg/changelog.Debian.gz' in a shell. Obviously, Debian-related.
#
# '/usr/libexec/redhat-credits' on Red Hat.
#
# In vim, type :help 42 (This is a reference to "The Hitchhiker's Guide to the Galaxy").
#
# "You don't exist. Go away." message, when invoking UID doesn't correspond to a valid user, or if the session isn't properly registered in utmp.\
# (find it out by 'strings /sbin/shutdown' - oh ,also there, "Oh hello Mr. Tyler - going DOWN?"; reference to Aerosmith's "Love in an Elevator"\
# video.).
# BTW, "Oh hello Mr. Tyler - going DOWN?" can be seen on the logout of a 'tyler'-called user name (e.g. at reboot/shutdown).
#
# Once in /var/named, open localhost.zone and localdomain.zone in a text editor.
# There, related to 127.0.0.1, somewhere the serial is set to 42; also commented ("(d. adams)") (Reference to Douglas Adam's book series
# The Hitchhiker's Guide to the Galaxy, which is famous for stating that the answer to Life, the Universe, and Everything is equal to 42.).
#
# 'cowsay -f foobar !#' in a shell, foobar == any.file.from /usr/share/cowsay/cows/.
#
# 'ar r God' in a shell.
#
# 'nice man woman' in a shell.
#
# '^How did the sex operatino go?^' in a shell.
#
# If you boot a SuSE disc, after the greeting the bootsplash, hit F5.
#
# Give it a try: 'man grep | tail -n7'. Ubuntu Specific.
#
## # .

## # GDM:
#
# type "Start Dancing" into the username field (classic gdm only).
#
# type "Stop Dancing" to stop fuckin around.
#
# type "Require Quarter", then login as usual.
#
# type "Gimme Random Cursor".
#
## # .

## # Firefox:
#
# 'about:mozilla' in the address bar.
#
# 'about:credits' in the address bar.
#
# 'about:robots' in the address bar.
#
# 'about:cvrcek' in the address bar.
#
# 'about:kitchensink' in the address bar.
#
# 'chrome://browser/content/browser.xul' in the address bar.
#
## # .

## # GNOME:
#
# Alt+F2, then type: 'gegls from outer space' on Ubuntu/GNOME.
#
# Alt+F2, then type: 'free the fish' (Wanda the fish) on Ubuntu/GNOME.
#
## # .

## # OpenOffice.org:
#
# oocalc in a shell, then cell the following: '=ANTWORT("Das Leben, das Universum und der ganze Rest")'. Yet another philosophical reference.
#
# Star Wars in oocalc: 'oocalc' in a shell and put ' =Game("StarWars") ' in any cell.
#
# OO team: in oocalc, put ' =STARCALCTEAM() ' in any cell.
#
# And in oowriter: launch 'oowriter', 'StarWriterTeam' and press F3.
#
## #.

## # Google stuff:
#
# Type 'answer to life the universe and everything' and then click "Google Search" on google.com. (Reference: Douglas Adam's\
# "Hitchhiker's Guide to the Galaxy," in which it is discovered the answer to life the universe and everything is 42.).
#
# Search for 'recursion', look at term suggestion.
#
# Type 'google l33t' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'google linux' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'google bsd' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'google aliens' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'google pirate' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'google negro' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'google light' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'google dark' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'black google' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'google gothic' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'elgoog' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'google nazi' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'google ghetto' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'google redneck' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'find chuck norris' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'who is failure' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'google' and then click "I'm Feeling Lucky" on google.com.
#
# Type 'firefox' and then click "I'm Feeling Lucky" on google.com, with Firefox Web Browser.
#
##
#
# And finally... type 'google easter egg' and then click "I'm Feeling Lucky" on google.com.
#
## # Go to http://darkartsmedia.com/Google.html and play with it!

--
To be continued. I mean it.

 .
..: