2020-12-27 I'm still wardriving from time to time 3 weeks ago
I haven't written anything about wardriving since I noticed I fell out of the WiGLE top 100 but I still do it from time to time. At the same rate as I wrote back then, switching on the WiGLE app on an Android phone when I realize I may be in an 'interesting' area for finding networks and I have the time. I don't go out on wardriving trips on purpose, but there are enough networks to be found. By now I have dropped to the number 312 rank in the WiGLE user statistics. I guess there are other wardrivers a lot more active and plotting every day wardriving expeditions. WiGLE also logs found bluetooth devices and there are a lot of those out there.
2020-12-24 Getting caching right is still very hard 4 weeks ago
After switching my websites to https I found out caching works differently on https (for good reasons) and files included by lots of pages got reloaded a lot. So I added some caching hints. I especially did not want the stylesheet to be reloaded constantly. So I added an ExpiresByType directive to cache stylesheets for a week. But on the change of camp-wireless to a new stylesheet and programming language I got bitten by this: some browsers had the old css code cached and saw no reason to check for updates. The site looked strange (but wasn't really broken). I recently made some changes to parts of my homepage too, also going to the CSS grid model, just like the changes in Camp Wireless to the CSS grid model. And I had the same problems with the CSS in the production version. It took a bit of searching to find the source of the Expires statement, it was in the .htaccess file. Now fixed to a much shorter cache time, it is quite possible to have versions of the pagecode and CSS differ in the browser.
2020-12-23 A bluetooth speaker that is also a serial port 1 month ago
I acquired a Blaupunkt BLP6100 Bluetooth speaker. Which turns out to support the following services via bluetooth:
That last one I did not expect. I have tried opening the port with minicom and it will say carrier detect but sofar trying to wake it at 115200 or 9600 hasn't resulted in anything. As a linux audio device it works fine. Or as a bluetooth speaker for my phone so I can listen to podcasts while walking around at home. But the serial port makes me wonder!
- Headset (audio for phone calls)
- Handsfree operation (use buttons to accept, hangup or reject calls)
- Audio sink (the main function of a bluetooth speaker)
- Serial port
2020-12-22 Sunday afternoon recumbent ride 1 month ago
On Sunday I wanted to do some cycling and deliver something in another part of the city of Utrecht. Those two can be combined! After finding the right part to do my delivery I cycled out of the city in north-west direction and returned via the northern ringway.
2020-12-21 Contests can help other things, and other DX updates 1 month ago
I like participating in radio contests. Not to win them, but to improve my own score and have the fun of making a high number of structured radio contacts in a short time. There is also the factor that radio contests bring out participants in places that are normally hard to reach for radio amateurs. Last weekend I was tuning on the 20 meter band looking for phone contacts and I heard a Canadian station giving out the abbreviation Quebec Charly (QC) as an exchange. I looked it up and found out the RAC Canada Winter contest was running. I made the contacts and spun the dial looking for other Canadian stations, because I never had a confirmed voice contact with a Canadian station. That doesn't mean I haven't talked to Canadians over amateur radio, I had a really nice chat with a Canadian who knows the area where I grew up a few months ago. That's totally different from a contest contact and also very nice to have. In total I got 3 different Canadian stations in the log and I entered my log. It won't be the winner in the DX category, but I appreciate the fact that the Radio Amateurs of/du Canada organize this so I do my part in making the scoring possible. And yes the first LoTW confirmation already came in, so I now have Canada confirmed on phone. Other DX update: Patience helps, I now have the earlier contact with Cuba confirmed.
2020-12-20 SMTP credentials brute force 1 month ago
Interesting find in the logs: SMTP authentication brute force.Read the rest of SMTP credentials brute forceDec 20 20:57:22 gosper saslauthd: : auth failure: [user=iknidcam1974] [service=smtp] [realm=camp-wireless.org] [mech=pam] [reason=PAM auth error] Dec 20 20:57:26 gosper saslauthd: : auth failure: [user=iknidcam1974] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 21:54:42 gosper saslauthd: : auth failure: [user=iknikieh] [service=smtp] [realm=camp-wireless.org] [mech=pam] [reason=PAM auth error] Dec 20 21:54:47 gosper saslauthd: : auth failure: [user=iknikieh] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 21:57:14 gosper saslauthd: : auth failure: [user=iknikieh] [service=smtp] [realm=camp-wireless.org] [mech=pam] [reason=PAM auth error] Dec 20 21:57:23 gosper saslauthd: : auth failure: [user=iknikieh] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]With lots more for different names. The last one is probably this session:Dec 20 21:57:16 gosper sm-mta: STARTTLS=server, relay=[188.8.131.52], version=TLSv1.2, verify=NOT, cipher=ECDHE-RSA-AES256-GCM-SHA384, bits=256/256 Dec 20 21:57:24 gosper sm-mta: 0BKKvEuN015854: [184.108.40.206] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA-SSLDue to the fact that they abort the session when they can't log in the IP is seen as annoying by fail2ban and added to the deny list. But that list grows (suggesting a distributed attack) and is at this moment at 142 currently blocked hosts.
2020-12-18 Some people actually read instructions 1 month ago
Back when I started with world wide web things I created my own links page. For my own use, so I had my web links available on all my computers. With the rise of 'search engine optimization' I started to receive requests to add certain links. First as bulk 'link exchange' mails but later as automated "personal" requests which have their own special rant. The "personal" requests sometimes used interesting backstories such as a school project where the children had found such a good resource together and the teacher hoped to bring a smile to the childrens' faces by having the suggestion from the schoolchildren actually implemented. So I added a line at the beginning of the page:If you want to mail me to notify me about your very special link that really needs to be here to help children all over the world, enable world peace, would be the best resource ever or simply increase your pagerank: Don't. These are my links.and this seems to help. For now.
2020-12-13 Makefile logic not working perfectly 1 month ago
I noticed the certificate for idefix.net was expired according to my webbrowser. I dug up the reason and found out the scripts to maintain the ocsp files managed to confuse the Makefile to keep the haproxy certificates updated. The ocsp responses have more updates than the certificates, but a certificate update needs to be processed anyway. So I updated the Makefile in the previous post. The dependency is now certificate-stamp depends on installed certificates, installed certificates depend on copied certificates. And installing the certificate also updates the ocsp response.
2020-12-11 Put all the scams together, maybe one of them works... 1 month ago
Interesting scam e-mail today, I guess it tries all possible scams and hopes to find out which one(s) work. Sent using the invite option of google forms, which seems to be popular with scammers recently.I've invited you to fill out a form: Attention Dear Customer Attention Dear Customer, We attempted to dispatch your item at 11:29 AM GMT+1 on the 19th of November, 2020 [11-19-2020]. Your delivery attempted to be delivered was affirmed to be among the list of deliveries abandoned in our delivery factory loft in the category of the delivery file cases that consist of Stimulus Payment, Lottery Winners/Contract payments, Compensation & Inheritance Payments and unclaimed consignments(concealed funds) From 2017 - 2020 and was abandoned due to the the COVID-19 (Coronavirus) pandemic that has caused the lockdown in the country at large including the Holiday that has stopped it from getting to you respectively. The shipping charge of this delivery has been paid & covered, so this notification has been automatically sent to notify you of this parcel because if the parcel is not re-scheduled for delivery or picked up within 72 hours, it will be cancelled/confiscated along with the Tracking details which will be null & void. Yours sincerely, Bruce Springs 404-666-6485 email@example.com Secretary, FedEx Factory Loft ************************** The content of this email is confidential and intended for the recipient specified in this message only. It is strictly forbidden to share any part of this message with any third party, without a written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future. ************************************************************ 1006205-4-9-US-EN-80147623 ©2020 FedEx. The content of this message is protected by copyright and trademark laws under U.S. a
2020-12-04 Using a snapshot for an upgrade so I can roll back 1 month agoItems with tag english before 2020-12-04
This evening I upgraded the production webserver from Devuan ascii to Devuan beowulf and to have the option available to roll back everything I created a snapshot and left that running until I was satisfied with the new configuration and everything worked. The steps were simple, found via Commit or revert a Linux LVM snapshot? - serverfault: Before starting the upgrade, create a snapshot:# lvcreate -L 10G -s -n turing_upgrade /dev/conway_ssd/turing_rootDo all the upgrade stuff, reboot, make sure everything works again. The usage of the snapshot went up to 22.38 percent:# lvs LV VG Attr LSize Pool Origin Data% Meta% Move Log Cpy%Sync Convert turing_root conway_ssd owi-aos--- 30.00g turing_upgrade conway_ssd swi-a-s--- 10.00g turing_root 13.17After everything worked, remove the snapshot:# lvremove /dev/conway_ssd/turing_upgrade