October 29, 2005

Is someone tracking your printouts?

Filed under: Uncategorized — spiro @ 1:52 am

It appears that the US Government has scored a new low. Oh what surprise, they do that everyday, war in Iraq, the Katrina crisis, and more recently the vice president’s chief of staff being indicted. It makes our very own “sponsorship scandal” look so petty. It makes me feel really bad for the American people.

Now here’s one you might be surprised. According to this article on EFF’s web site, some color laser printer manufacturers are sneaking in a feature that outputs, along with the printed document a secret code, that would allow someone, by looking at the output with a microscope, to determine which printer printed it. No this aint sci-fi. This is real. Scary eh?

The reason for this? To prevent counterfeiting. I guess the US economy is so dependent of parents breaking all their pay check to buy CDs and DVDs for their teenie boppers. I guess the strategy is simple, keep em dumb, they won’t notice they are screwing themselves.

October 28, 2005

Back on ICQ!

Filed under: Uncategorized — spiro @ 2:37 am

Those were the days when I was eagerly waiting for what was going to be a brand spankin new Compaq Presario 4180 so I could finally be able to run ICQ, as it would kindly refuse to run under Windows 3.1 (as well as many other things).

I finally decided to ditch another Microsoft application, MSN Messenger. Why? Because I simply could not stand the bloat they decided to add into version 7.0, and little messages informing me that a new version of Messenger is out, a new version of MSN Toolbar, or that I just received spam in my hotmail account. I really don’t care to know! There’s no time to sit down in front of my computer updating software all day long. I replaced it by the Windows port of Gaim, what I have been using on Linux for quite awhile now. It supports many protocols (at least all the ones I use), its free, lightweight, well, it’s GNU!

So now I could be reached on Google Talk, MSN Messenger, and ICQ!

Oh, and that Compaq Presario’s still kickin! It’s running Slackware, but I want to install Gentoo on it when I get a chance. It is also a possible candidate to host this site, pretty soon.

October 22, 2005

The Friday of DOOM!

Filed under: Uncategorized — spiro @ 2:55 am

What a day! Or, shall I say, what a week!

As you probably know from previous blog posts, I had three midterms this week. Requirements (SOEN342) on wednesday, Statistics (ENGR371) on thursday, and Design (SOEN343) on friday. Needless to say, it has been a hard week. One exam to prepare after another, nonstop. It was a tradeoff: do I get my required sleep so I don’t get brain dead by the time the exam comes, or do I stay up late, cramming.

Though I think today went well. Although it might have been the hardest exam, I knew precisely what material to study, and what was expected from us. You see, our professor has this approach to teaching, where in order to stimulate participation, he asks questions to students and once in awhile distributes excercise sheets, and let me tell you it works. It’s the only class I would really mind skipping, because I know I am going to learn. Reviewing the lecture notes and doing the exercise sets was really all it took, within 24 hours, including sleep!

Next in line was the tutorial, where we had to form teams for class projects. I am happy to say, this was also a success! I think we got ourselves a great team, with awesome people, eager to kick some serious ass, while those guys are getting drunk at the campus dive.

Comming home, my brother wanted to go see DOOM. Being in deep study mode, and so out of touch with the entertainment industry, I had absolutely no clue whatsoever as to the existence of such a movie. Hell, I even missed a couple of days of slashdot. So I hand $20 to my brother to buy the tickets for him, his friend and I. He gets carded, and I for the first time ever, get carded, too. I am 22. I have been to bars. I have bought ahcohol. Never, ever been carded. But I get carded to go see a movie that contains moderate violence (nothing compared to some web sites), intense swearing (which is really a subset of my daily language) because it is rated 16 years or older. I mean, what the hell is wrong with this world for dumb soccer moms (or security moms-whatever the heck the call them nowadays) to get their way like this with movies, when you can be exposed to much worse just by turning on the nightly news. You see, many (shallow) people like to blame video games for all evils people do, because it’s easy. Perhaps the way they reason it, well the liberal way of looking at things, is that the gaming industry is doing well, an industry that is doing well is evil, thus, the gaming industry is evil. Sure, many corporations are not exactly good citizens, but you can’t blame corporations for all evil. I like to see it the other way around. The arts are a reflection of the times, the people, etc. Games, movies, cartoons are violent because the people are. I think Michael Moore showed that pretty well in Bowling for Culumbine. But then again, I have a backwards-revolutionary mentality, as my brother suggested. Yep, I just don’t get it.

So anyway, I take out the first card on hand in my wallet. It was my gym ID card. It didn’t have by date of birth on it, so she refused it. OK, so, I dig in for my driver’s liscence, which is refused, because it supposedly doesn’t have my date of birth on it, which is actually embedded in the liscence number (and everybody knows that), and in Quebec, you have to be 16 to drive, not to mention that you have to be at least 18 to get a full, non-probationnary liscence. Then I lose it, I am visibly frusrtated.

OK, so I throw in my Medicare card. Finally. Two pieces of ID just to go see a movie rated 16 and over. I bet a 15-year-old could get into Club Super Sexe without such an exhaustive inquiry on his age. Sure, the girl at the tichet office was blonde, maybe she didn’t know better, I forgive, but, being Greek involves two very simple rules: (1) you are always right, and (2) when rule 1 does not apply, rule 1 applies.

Into the theater we go, while trailers have started playing. No little safety lights on the steps. And the movie was out of focus, my eyes were hurting. I have been going to this theater for awhile (well it’s the only decent aptly named movie theater in the south shore of Montreal) and the focus is usually excellent. I guess they decided to hire some amateurs for the busy Friday night shift. But still, you pay 10$ to go see a movie on friday night, after a long week, and this is the crap you get?

October 18, 2005

RSA Decrypter

Filed under: Uncategorized — spiro @ 5:58 pm

As I promised, I am posting the code to decrypt RSA. The assignment was due in yesterday.

Get it here.

Stupid Midterms!

Filed under: Uncategorized — spiro @ 5:44 pm

To tell you the truth, I hate midterms, I hate taking tests. I guess I am too smart for university, but too dumb to buy a diploma online and get it over with it and start earning money instead of wasting my time memorizing downright useless crap, just for the kicks to see who’s better at it in the class.

I am in ENGR371 right now. Laptop open, of course, blogging and doing all kinds of other things… The prof comes in the class and announces, as stated on his web site he just updated today, that the midterm scheduled on thursday (in two days, btw) will include material from today’s lecture. Nope, he could not remote-ssh to the school’s server to update his site. Why bother after all? He’s paid to do research, not teach!

Now this guy’s bad, in a hidden way. He’ll come in, be all smiles and shit, then surprise! No. I hate surprises, simply because 99.99% of them end up being bad, so I’d rather not have any surprises at all, you know, to keep things simple. But this ain’t a surprise. It’s pure dishonnnesty. After all, he didn’t really have to wait until he was at his conference to realize that he needed to tell us what’s on the exam? Sure, you might say, just listen in class. Yeah well , for that, you might have to learn something called “engrish”.

So that’s where it’s at. Read the book and practice. That’s what I usually do, and that’s what works. That’s not a problem. The problem is comming to the lecture before the midterm and learning what I need to study for instead of… say, last week, so I could have looked it over during the weekend. But that’s Concordia for you. The student is a renewable resource. Teaching ain’t really that important.

October 10, 2005

Asus.com

Filed under: Uncategorized — spiro @ 6:11 pm

As far as corporate web sites go, www.asus.com.tw is a nightmare. Just about as slow and unresponsive as it was 8 years ago, when the company started getting known. What have they done to improve the site? They added some bandwidth-consuming, cycle-wasting, flash animations. And lately they put in a little extra. Every 2-3 pages you click, it will print out a message, telling you to choose another mirror, taking you back to their home-page, so you have to find your way all over again, which, given the speed of the web site takes at least 5-10 minutes.

Asus Web Site Screenshot

OK, so how about this: “Due to the high stupidity of Asus, where hosting a proper support site where people can download drivers is impossible, Spiro will not be buying another Asus product again. Indeed, I’d much rather go for the superior quality of Intel, where “customer service” and “quality control” are not foreign, obscure words.

Common sense dictates, that if you can’t get more bandwidth for the site, you shrink it, removing big images, flash animations, etc, so that the site loads faster and consumes less bandwidth. Some people don’t get that, like Asus. Maybe it’s time for web site decisions to be taken by competent, technology-savvy personnel, not by a retarded PR or graphic design department?

So, here I go, a customer, like any other, trying to get drivers for some of the devices on my board, I have to go through a gauntlet of stupidly-designed flash pages just to download the manual for my board. After about 20 minutes, I finally get to it. it takes another 5 minutes to download it at the ridiculous speed of 25-30 Kb/sec. (Gentoo Linux downloads at 530 Kb/sec. from gentoo.risq.qc.ca on my cable connection). At this moment, I can do without these flash animations. I really, really don’t care if the support pages are bland, plain black on white text. All I want is the bloody manual!

Unfortunately, Asus was the target today, but there are plenty such examples. I’m not criticising Macromedia Flash technology, but I think it does have its time and place. When it hinders the user, or tries to entertain him when the last thing he wants is to be entertaines, it’s really, not a good place to put it. The same think applies to javascript, java applets, popups and other common web annoyances.

Edit: Another example might be www.cmedia.com.tw. Slow as ever, and their FTP site is unresposive. What the hell is up with these taiwan sites? What kind of high technology do they produce over there? Dialup?

Wireless config on Linux

Filed under: Uncategorized — spiro @ 2:47 am

I spent much of the weekend getting rid of RedHat on my laptop, and replacing it with Gentoo Linux. I like Gentoo because it lets me do most of the work, instead of copying binaries while showing a flashy setup screen. It’s an excellent way to build a system the way you want it, and really learn about Linux. Also, there is a good community built around it, with lots of support documentation.

I inevitably wound up with the same problem as many people. Using wireless networking on Linux. The way they’ve designed and implemented it just boggles my mind. I am quite sure there were no liscenced software engineers part of that project!

I installed my driver, using emerge ipw2100, because that’s what I have according to lspci. I followed the procedure at http://gentoo-wiki.com/HARDWARE_ipw2100, compiling my kernel to fulfill the requirements.

Now, what I would like is to be able to connect to my D-Link DI-714P+ at home, using WEP and my school’s Wi-Fi, which uses PEAP. The first one is simple enough, but the second one complicates things, a lot. I read a bit about it, and found that Xsupplicant would handle PEAP authentication. So I tried installing Xsupplicant, emerge xsupplicant, only to get compilation errors. Well maybe that’s why it’s marked as unstable!

Next thing I tried was WPA Supplicant. So, it apparently does PEAP, according to its documentation. So, here we go, emerge wpa_supplicant. Tried slapping in a configuration that would make it connect to my access point at home (according to this howto), but it would kindly refuse to bring up the interface:

r2d2 init.d # /etc/init.d/net.eth2 start
 * PCMCIA support detected
 * Starting pcmcia ...
cardmgr[9826]: no sockets found!
 * cardmgr failed to start.  Make sure that you have PCMCIA
 * modules built or support compiled into the kernel                      [ !! ]
 * Starting eth2
 *   Starting wpa_supplicant on eth2 ...
ioctl[IPW_IOCTL_WPA_SUPPLICANT]: Operation not supported
ioctl[IPW_IOCTL_WPA_SUPPLICANT]: Operation not supported
Failed to set encryption.
ioctl[IPW_IOCTL_WPA_SUPPLICANT]: Operation not supported
Failed to set encryption.
ioctl[IPW_IOCTL_WPA_SUPPLICANT]: Operation not supported
Failed to set encryption.
ioctl[IPW_IOCTL_WPA_SUPPLICANT]: Operation not supported
Failed to set encryption.
ioctl[IPW_IOCTL_WPA_SUPPLICANT]: Operation not supported
ioctl[IPW_IOCTL_WPA_SUPPLICANT]: Operation not supported                  [ ok ]
 *     timed out                                                          [ !! ]

OK, the PCMCIA stuff I know about, PCMCIA doesn’t work, but that doesn’t matter, I don’t have any PCMCIA cards anyway, ill make my pcmcia slot work some other time. But what the hell are the ioctl[IPW_IOCTL_WPA_SUPPLICANT]: Operation not supported errors all about? I tried looking them up, but to no avail. Some suggest to patch my drivers, others to load a new firmware into the card, meh…

Then I settled for Wireless Tools, emerge wireless-tools. I just entered my access point ESSID, my WEP key, and voila!

Anyway, tomorrow ill take a break from this. to work on some assignments.

October 5, 2005

Spread Firefox Hacked!

Filed under: Uncategorized — spiro @ 2:44 am

I hate to report this, because myself I am a very big proponent of Firefox. IE users will notice the big, oversized advertisement on my page, urging them to get Firefox. Users using other browsers won’t see that!

SpreadFirefox.com, a “community” style web site that promotes Firefox, mainly by selling shirts and proposing people use banners on their blogs (like this one) to promote Firefox. It is interesting to note that, unilke Mozilla, a non-profit organization, SpreadFirefox is a for-profit, separate entity.

So, their web site got hacked. Twice in the last few months. It is believed that attackers used vulnerabilities in Drupal and TWiki, server-side scripts that allow streamlined content management, and the display of user feedback on their site. Moreover, these vulnerabilities were discovered prior, and patches were released, though they were not applied to the site. It really looks bad, and is bad for them. The site has been shut down, and will be redesigned from scratch. They claim that they will evaluate the security of the site software before putting it back online. Good, but that’s only 1/2 the job. You must also apply securtiy patches as vulnerabilities become known.

Security is no laughing matter today, but is a serious matter that must not be overlooked when using computer systems for production. Break-ins, site vandalism, and most importanly, leakage of personal information are usually signs of not taking security seriously. That’s inexcusable today. There is no shortage of sysadmins looking for a job nowadays, so the mediocre ones need to go, period.

October 1, 2005

Assignments Can Be Fun!

Filed under: Uncategorized — spiro @ 5:48 am

Some people may think that with such a post title I may be on crack. No, I went to the gym awhile ago, so I may have a high level of endorphines, but I think that’s settled by now :P

Though, who would have said that, seeing me in high school or CEGEP. I looked more like a bum, rather than a future university student. My marks sucked, bigtime. My parents, at some point really doubted that I would do post-secondary studies, and questionned their investments they made to get me through university. But yes, I did give them good reason to do so. Now, I can see why things were going as they were. I was not happy. I hated high school, I hated CEGEP. Procrastination was a big problem, because ANYTHING was more fun to do than writing an essay about mythology, computing what I’d get if I mix product X with product Y, calculating what initial velocity to throw a ball to reach the roof of the school. Instead, I’d much rather play with VB, HTML, hardware, Windows, Linux, and all these wonderful toys we have around here.

This of course, all changed when I got into University. Doing assignments became something I looked forward to, rather than a chore. I enjoy spending hours trying to solve a discrete mathematics problem, or coding some obscure algorithm, writing software requirements, and of course, I get great satisfaction to see the final product.

All this to say that last Tuesday, I got my first assignment from SOEN321 (Information Systems Security). It read:

This is an exercise in cracking RSA cryptosystems. Some programming will be required.

WOW! This puts a new meaning to the words “fun assignment”. This is what I am talking about! Immediately, I started reading up on RSA cryptosystems, and began writing snippets of code which I continued during these boring Software Requirements lectures. Yes, talk about that. She assigns something to be read before the next class. Comes the next class, she reads the bloody document. Worse, a deluge of dumb questions filled the room. Can it be made more blatant that nobody even read her document? Then, before you know it, the class is over. Well, at least I found the prime decomposition of m.

Oh, and here’s the decoded text, for a fun read. Oh what are the douches going to do? Google the text to find the book and submit a random passage?

============================================================================ 27

Mrs. Archer, who was fond of coining her social philosophy into axioms,
had once said: "We all have our pet common people--" and though the
phrase was a daring one, its truth was secretly admitted in many an
exclusive bosom. But the Beauforts were not exactly common; some people
said they were even worse. Mrs. Beaufort belonged indeed to one of
America's most honoured families; she had been the lovely Regina Dallas
(of the South Carolina branch), a penniless beauty introduced to New
York society by her cousin, the imprudent Medora Manson, who was always
doing the wrong thing from the right motive. When one was related to the
Mansons and the Rushworths one had a "droit de cite" (as Mr. Sillerton
Jackson, who had frequented the Tuileries, called it) in New York
society; but did one not forfeit it in marrying Julius Beaufort?

The question was: who was Beaufort? He passed for an Englishman, was
agreeable, handsome, ill-tempered, hospitable and witty. He had come to
America with letters of recommendation from old Mrs. Manson Mingott's
English son-in-law, the banker, and had speedily made himself an
important position in the world of affairs; but his habits were
dissipated, his tongue was bitter, his antecedents were mysterious; and
when Medora Manson announced her cousin's engagement to him it was felt
to be one more act of folly in poor Medora's long record of imprudences.

============================================================================

I will post the code, but only when the assignment’s due. Because I hate people who copy.