Damon Cortesi's blog

Musings of an entrepreneur.

Because Terrorists Never Use SSH

| Comments

Being a somewhat frequent traveler, I get to experience first-hand the sad state of airport security as it exists today. As Bruce Schneier points out, it seems the Department of Homeland Security is concerned that allowing broadband on airplanes will allow terrorists to exploit this service to activate bombs. Therefore, that is adequate justification to allow relatively immediate eavesdropping on such connections. Bruce puts it best

Terrorists never use SSH, after all.

Just more legislation to make it ever more difficult for the regular person to make a living with little or no reduction in threat. One has to wonder where this country is headed.

Ethereal Short Frame

| Comments

I was doing a simple

1
tcpdump -w file

today in the course of a little packet sniffing. I opened the output in ethereal only to find several of the packets had “[short frame]” in the summary. A quick google found the answer, but maybe if I had just read the output I would have figured it out earlier:

tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes

96 bytes doesn’t get you too far with certain protocols… Using a

1
-s0

gave me the packets I was looking for.

More on this later if everything works out as planned, but definitely not tonight - I’m going to see a private screening of Wedding Crashers. How glamorous. ;)

Holy Comment Spam, Batman!

| Comments

What the heck is going on??

In the past 12 hours, I have received 40 new comments, all of which are spam! But here’s the odd part.

This is not your common spam like “shop at jim’s casino” spam. This is…complimentary spam..cspam, if you will. This is spam that says “nice site” and “great design” and is sometimes in a foreign language. Now that wouldn’t even be so bad, but what makes it worse is that somebody is going to a great deal of trouble to put this spam here. The 40 comments come from 40 unique ip addresses!

The onlyspammish thing about these is in the referer. On occasion, I’ve noticed that the referer is actually spam in my server logs. So I guess it’s just referer spam. One of the downsides of going to a popular blog engine, I suppose.

delete

Alt-W

| Comments

I keep trying to hit Alt-W…weird.

Comments Temporarily Requiring Moderation

| Comments

I’ve had to disable comments temporarily as I started getting some really odd comment spam today… You can still post them, they just won’t show up right away. It’s coming from multiple ip’s so this is the easiest for now. And since I’m going to be away from the computer for a while (w00t fireworks), I figured it would be best. Enjoy the show and see you later!

Windows XP Install

| Comments

I must be in some sort of mood this morning. I figured since my last post was all Gentoorific, I’d post a little bit about my Windows XP install as well. I just found my personal install notes, so I’ll paste them in here.

I re-install Windows on my laptop every 3-6 months on average. I install all kinds of cruft and it usually starts to get pretty bogged down after 6 months. I also love the feeling of a brand new laptop install and use it as an opportunity to upgrade software that’s essential to the system and gets easily broken. So here goes!

# Windows Update! remapkey.exe ## Right Ctrl -> Caps ## Caps -> Left Windows # Customize folder options ## (General) ## Use windows classic folders ## (View) ## uncheck - Display simple folder view in Explorer’s Folders list ## check - Display the contents of system folders ## check - Display the full path in the address bar ## uncheck - Display the full path in the title bar ## check - Show hidden files and folders ## uncheck - Hide protected operating system files ## uncheck - Use simple file sharing ## configure details view and apply to all folders # Check for latest versions of apps ## putty (http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html) ## geoshell (http://geoshell.com) ## Trillian (http://trillian.cc) ## PGP (http://www.pgp.com) ## Tortoise CVS (http://www.tortoisecvs.org/) ## UltraEdit (http://www.ultraedit.com) ## Irfanview (http://www.irfanview.com) ## Servant Salamander (http://www.altap.cz/) ## FireFOX (http://www.mozilla.org) ## TaskSwitchXP (http://taskswitchxp.sourceforge.net/) ## Winamp (http://www.winamp.com) # Install PGP # Install googlebar (http://toolbar.google.com/) # Install Mozilla Firefox # Install Trillian # Install UltraEdit # Install Servant Salamander ## Add read/write to user Menu (attrib +r, attrib -r - Don’t open shell window) ## (Appearance) ## check - Full row select ## (Viewers & Editors -> Editors) ## Command = C:\Program Files\IDM Computer Solutions\UltraEdit-32\uedit32.exe # Install GeoShell # Configure GeoShell ## (HKEY_CURRENT_USER\Software\Geo\GeoShell\Plugins\geOTasks0_1) ## Show Captions = 0 ## Plugin Min Width = 0 ## (HKEY_CURRENT_USER\Software\Geo\GeoShell\Services\Hotkey\szIDs) ## App_RDP = win|r|”C:\Winnt\System32\mstsc.exe” ## App_Irfanview = win|i|”C:\Program Files\IrfanView\i_view32.exe” ## App_Console = shift+win|c|c:\winnt\system32\cmd.exe /K cd \tools && title Console ## App_Sal = win|e|”C:\Program Files\Servant Salamander 2.5 beta 3\SALAMAND.exe” ## App_Putty = win|p|”C:\tools\NetUtils\putty-dev.exe” ## App_UE = SHIFT+WIN|u|”C:\Program Files\UltraEdit\uedit32.exe” ## App_VPN = win|v|”C:\Program Files\Cisco Systems\VPN Client\ipsecdialer.exe” ## App_PWSafe = win|p|C:\Tools\Utilities\pwsafe\pwsafe.exe ## App_Firefox = win|m|”C:\Program Files\Mozilla Firefox\firefox.exe” ## (HKCU\Software\geo\geOShell\ShellUI\Desktop) ## Desktop Top = 10 ## (HKCU\Software\geo\geOShell\Plugins\geoMenuLaunch0_1) ## Button Caption = “” # IE Settings ## (Advanced) ## uncheck - Show friendly HTTP error messages ## (Multimedia) ## uncheck - Enable Automatic Image Resizing # Configure task manager ## check - Show processes from all users ## Options -> Hide When Minimized ## View -> Select Columns (+Virtual Memory Size # Install Tortoise CVS ## Timo Kauppinen overlay Icons ## External diff application: C:\Tools\Utilities\ExamDiff\ExamDiff.exe # Configure default putty settings ## (Window) ## 30 Rows, 100 Columns ## 500 Lines of scrollback ## (Window -> Behaviour) ## System menu appears on ALT-Space ## (Connection) ## 90 seconds between keepalives # Set screen to non bubblified classic # Effects -> Enable cleartype # Effects -> Don’t hide underlined letters ##### Things Missing ##### # Mozilla Bookmarks # Configure UltraEdit ## (Backup) ## Default Backup Directory - C:\Documents and Settings\Username\My Documents\Backups\UltraEdit ## (Edit) ## check - Use spaces in place of Tabs ## Tab Stop Value/Indent Spaces = 2 ## (File Types) ## add .php extension # Clean up start menu - Organize everything into Net, Multimedia, Utils, and Games folders for the most part # Install Ultranav driver for T40 # Install Winamp # Lock down McShield # Configure McAfee as wanted, then deny set access to the following key ## (HKLM\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration\Default) # Install winpcap, ethereal, nmap, cain, vmware # Install dameware, l0pht, mappoint, PERL # Install win2k3 admin pak and res kits # Install perl modules ppm install Net::IPv4Addr # Clean up services ## manual - server, netlogon, messenger, webclient, remoteregistry # Add perl modules ppm install file-grep # Install Outlook, Outlook Connector for Domino, Quintessential, iTunes ## Here we go again - 3/28/2005 # Install bluetooth driver # Install wildpackets atheros driver # Firefox Extensions ## SessionSaver - http://extensionroom.mozdev.org/more-info/sessionsaver ## miniT -http://extensionroom.mozdev.org/more-info/minit ## Web Developer - http://extensionroom.mozdev.org/more-info/webdeveloper ## BugMeNot - http://extensionroom.mozdev.org/more-info/bugmenot ## GreaseMonkey - http://greasemonkey.mozdev.org/ ## LittleFox Theme - https://addons.update.mozilla.org/themes/moreinfo.php?application=firefox&version=1.0&os=Windows&id=307

And pretty soon I’ll post a comprehensive list of my tools directory and maybe even give you access to my tools repository! ;)

Gentoo

| Comments

I did it. I’m in the process of replacing Debian on one of my boxes at home with Gentoo.

Ok, now calm down out there..it’s not the end of the world. Up is still up and down is still down.

For at least the past four or five years, I have been a diehard Debian fanatic. In my formative college years, I pretty much tried every distro known to man - my hobby on the weekends was installing operating systems. My first linux experience was with RedHat in my freshman year (and I had some problems of my own). After three weekends and thirty installs, I finally got my redhat system perfect…and then my hard drive crashed! Nevertheless, I was hooked. I progressed from redhat to SuSE to slackware with many in-between and ultimately settled on Debian.

Debian was a dream to me. I never had to worry about rpm-hell and the lovely release structure meant I could run a stable box and still get the latest and greatest gaim or nmap. Over time, though, I became somewhat frustrated with Debian for that exact reason. Being able to pull from stable and unstable was a great benefit, but also became a pretty big hassle. Apt-pinning is great, but it does have it’s limitations. Frequently, there were packages I wanted to install, but glibc incompatabilities would ruin my day. Yes, there is Debian Backports, but their breadth of packages left quite a bit to be desired.

It’s amazing what love does to a man and I was in love with Debian. So I kept using it, stringing things together and making do with what I had. It was still better than anything else around. And yes, I had heard of Gentoo and the flocks of people saying it was the ‘next best thing’ and even gave it a try. But I wasn’t impressed. Everybody always posed it to me as a performance thing. We live in the days where dual-cpu systems are the norm and 4Ghz chips are nothing - what do I need an extra few flops worth of performance for? The days I waste compiling it from scratch negates the benefit! And so I rolled.

Then something happened. I got a new job. And with that new job, came a new laptop. And on that laptop, I was putting Linux. I’ve tried to run Debian on laptops and desktops and it does a pretty decent job, but it’s not what it does best. So I decided to go with something different. I’d heard great things about Ubuntu, so I figured I’d give that a shot. Ubuntu is a beautiful distribution - easy to install, pretty by default, easy to maintain. But being Damon, I like to run bleeding-edge software. What was difficult to maintain in Debian, was even moreso in Ubuntu. Being that most of the other guys at work ran Gentoo, I decided to take the plunge.

Despite the lengthy and tedious install process and endless nights of Google searches for help on installing Gentoo on a T42, I had a pretty decent system going. And if I needed the latest and greatest, I could emerge that specific build. So, for me the greatest benefit of Gentoo is not that everything is “optimized”. The greatest benefit of Gentoo is that due to the fact that your packages get compiled, you don’t have to worry about library dependencies! Portage makes it easy for me to run the latest and greatest software and not “break stuff” on my system. Furthermore, Gentoo has all kinds of great documentation. Because it’s a no-frills distribution, many people have had to figure things out by themselves and posted about it online. The Gentoo Wiki has also been a lifesaver.

So why did I replace Debian with Gentoo on my home box? More likely than not just for something new to try. That box had an excessive amount of cruft on it from when I used to host my domain out of my home before moving to John Companies. So it was either remove all the cruft piece-by-piece or reinstall from scratch. Which wouldn’t have been so bad, but I have LVM over raid-1 over raid-0 on that box and the initial Debian install on that box was a very painful experience, not to mention keeping it up-to-date. Building a new initrd was a very painful process. So I decided to see how painful it would be to do so using Gentoo. I was pleasantly surprised when I found this HOWTO on installing Gentoo on an LVM2 root partition - It couldn’t have been easier. Minus a spelling error and some unchecked kernel modules, it was one of the few times I got a somewhat-complicated Linux install up and running on the first try.

So now I’m running Gentoo, I emerge every day, and emerge world on a regular basis. Despite that, I still run Debian on my colo and on another box here at home but now it happily co-exists.

Why didn’t somebody explain Gentoo like this to me earlier?!

As an update, having Debian and Gentoo try to co-exist is causing some problems. I installed Prelude-IDS on my Gentoo box recently. It was no problem at all - a couple emerges, and I was running the latest development version. I thought I would install a sensor on my Debian box, but unfortunately there isn’t a Debian package for the development version. No problem, I thought, I’ll just compile it. Unfortunately, the Debian package for one of the required libraries is not up-to-date enough. sigh I’m growing weary.

Cabana-Stripe Shower Curtain

| Comments

Well I’ve done enough posting for today.

I got a new shower curtain yesterday that I need to go put up before this morning disappears. I love Restoration Hardware, but man is their stuff expensive! Luckily I got that sucker on sale.

Paintballing in Indiana

| Comments

I played paintball today for the second time in my life - a place called Blast Camp in Hobart, IN.

This place was great! It’s an old naval base and they’ve got about 10 courses to play on - some in old buildings, some outdoors, some with trenches. You can rest assured I was booking it through those trenches. I can’t wait to go again.

I didn’t get hit too bad, like some other people. But I got a couple nice hits.

paintball/IMGP16361