From mark.saad at ymail.com  Fri Mar  3 10:21:17 2017
From: mark.saad at ymail.com (Mark Saad)
Date: Fri, 3 Mar 2017 15:21:17 +0000 (UTC)
Subject: [talk] Bussiness Intenet in NYC
References: <1761043712.396020.1488554477584.ref@mail.yahoo.com>
Message-ID: <1761043712.396020.1488554477584@mail.yahoo.com>

Hi Everyone

  Its that time again , I am moving offices and I am trying to find a reliable network provider in nyc. 

Currently I can get 1G/s from Cogent , 25MB/s from Megapath, 60/3Mb from TWC, and 3Mb/s DLS from Verizon.
Anyone got any other ideas?

 
-- Mark Saad mark.saad at ymail.com



From spork at bway.net  Fri Mar 10 13:06:44 2017
From: spork at bway.net (Charles Sprickman)
Date: Fri, 10 Mar 2017 13:06:44 -0500
Subject: [talk] OT: Free Secondary DNS?
Message-ID: <85E67EB7-6CD7-407D-B6E9-1AD4BB112027@bway.net>

Hi all,

Any recommendations for free secondary DNS for personal use?

I?m currently using HE.net?s service, which is wonderful, but does not yet support DNSSEC (which is odd, since they run PowerDNS).

I?m mainly looking for:

- dual stack
- DNSSEC
- multiple servers and/or anycast
- free or super cheap

I?ve found a few lists, including this:

http://bornoe.org/blog/2015/10/free-secondary-slave-dns/

Any other suggestions welcome, I assume there must be at least a few people here using this type of service?

Thanks,

Charles


From kula at tproa.net  Fri Mar 10 13:32:51 2017
From: kula at tproa.net (Thomas Kula)
Date: Fri, 10 Mar 2017 13:32:51 -0500
Subject: [talk] OT: Free Secondary DNS?
In-Reply-To: <85E67EB7-6CD7-407D-B6E9-1AD4BB112027@bway.net>
References: <85E67EB7-6CD7-407D-B6E9-1AD4BB112027@bway.net>
Message-ID: <20170310183251.GP18353@gatekeeper.tproa.net>

On Fri, Mar 10, 2017 at 01:06:44PM -0500, Charles Sprickman wrote:
> Hi all,
> 
> Any recommendations for free secondary DNS for personal use?
> 
> I?m currently using HE.net?s service, which is wonderful, but does not yet support DNSSEC (which is odd, since they run PowerDNS).
> 
> I?m mainly looking for:
> 
> - dual stack
> - DNSSEC
> - multiple servers and/or anycast
> - free or super cheap
> 
> I?ve found a few lists, including this:
> 
> http://bornoe.org/blog/2015/10/free-secondary-slave-dns/
> 
> Any other suggestions welcome, I assume there must be at least a few people here using this type of service?

I've been slowly moving my personal stuff to hidden primary and using
Someone Else(TM) as the public face of my DNS. I've happily been using
Dyn's managed DNS service --- amusingly, I switched stuff over the very
week their highly-publicised DDoS attack happened. Can't say anything
about DNSSEC, but they've got the rest, they can do zone transfers from
my hidden master, and I think the base level is something like $7 a
month (I pay slightly more based on the number of records I have).

My recent project is evaluating other providers to add redundancy, but
that's in the very beginning stages. 


-- 
Thomas L. Kula | kula at tproa.net | http://kula.tproa.net/



From spork at bway.net  Sat Mar 11 02:29:20 2017
From: spork at bway.net (Charles Sprickman)
Date: Sat, 11 Mar 2017 02:29:20 -0500
Subject: [talk] OT: Free Secondary DNS?
In-Reply-To: <20170310183251.GP18353@gatekeeper.tproa.net>
References: <85E67EB7-6CD7-407D-B6E9-1AD4BB112027@bway.net>
 <20170310183251.GP18353@gatekeeper.tproa.net>
Message-ID: <C6671733-2A2B-4673-BF49-A78072AE3B8C@bway.net>


> On Mar 10, 2017, at 1:32 PM, Thomas Kula <kula at tproa.net> wrote:
> 
> On Fri, Mar 10, 2017 at 01:06:44PM -0500, Charles Sprickman wrote:
>> Hi all,
>> 
>> Any recommendations for free secondary DNS for personal use?
>> 
>> I?m currently using HE.net?s service, which is wonderful, but does not yet support DNSSEC (which is odd, since they run PowerDNS).
>> 
>> I?m mainly looking for:
>> 
>> - dual stack
>> - DNSSEC
>> - multiple servers and/or anycast
>> - free or super cheap
>> 
>> I?ve found a few lists, including this:
>> 
>> http://bornoe.org/blog/2015/10/free-secondary-slave-dns/
>> 
>> Any other suggestions welcome, I assume there must be at least a few people here using this type of service?
> 
> I've been slowly moving my personal stuff to hidden primary and using
> Someone Else(TM) as the public face of my DNS. I've happily been using
> Dyn's managed DNS service --- amusingly, I switched stuff over the very
> week their highly-publicised DDoS attack happened. Can't say anything
> about DNSSEC, but they've got the rest, they can do zone transfers from
> my hidden master, and I think the base level is something like $7 a
> month (I pay slightly more based on the number of records I have).
> 
> My recent project is evaluating other providers to add redundancy, but
> that's in the very beginning stages. 

Well, as sometimes happens, this went in an unexpected direction. :)

After some digging, I wasn?t too happy with the free options, and I?m too cheap to pay for ?just? DNS (again, for personal use).  So instead I went on a search for cheap VPS providers that would let me get two small (512MB RAM, 20GB disk or so, dual stack v4/v6) for $5 or less a month.  I landed on something called ?Vultr? and just started setting things up now.  This lets me do a few things - get powerdns talking to whatever DNS server is currently bundled with FreeBSD (unbound?), test another VPS provider, give FreeBSD 11 a spin, and of course add to my sysadmin burden.  There was a matching coupon good for up to $100 so I?m actually looking at $2.50/month for two small VPS instances.  My hope is this provider is decent.  The web UI and docs so far are great, network looks great, support for FreeBSD seems caveat-free, but we?ll see.  I have some hardware in a colo that needs retiring too?

Thanks,

Charles

> 
> 
> -- 
> Thomas L. Kula | kula at tproa.net | http://kula.tproa.net/
> 
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk



From justin at shiningsilence.com  Sat Mar 11 17:45:34 2017
From: justin at shiningsilence.com (Justin Sherrill)
Date: Sat, 11 Mar 2017 17:45:34 -0500
Subject: [talk] OT: Free Secondary DNS?
In-Reply-To: <C6671733-2A2B-4673-BF49-A78072AE3B8C@bway.net>
References: <85E67EB7-6CD7-407D-B6E9-1AD4BB112027@bway.net>
 <20170310183251.GP18353@gatekeeper.tproa.net>
 <C6671733-2A2B-4673-BF49-A78072AE3B8C@bway.net>
Message-ID: <CA+YR8=2fZV81JXCOYvihp8Hh2V1sCcGo37bV=94FdvrKt1bfZg@mail.gmail.com>

On Sat, Mar 11, 2017 at 2:29 AM, Charles Sprickman <spork at bway.net> wrote:
> for $5 or less a month.  I landed on something called ?Vultr? and just started setting
> things up now.  This lets me do a few things - get powerdns talking to whatever
> DNS server is currently bundled with FreeBSD (unbound?), test another VPS
> provider, give FreeBSD 11 a spin, and of course add to my sysadmin burden.

For what it's worth, I've had Vultr come up multiple times as a VPS
provider that is BSD-friendly, and inexpensive.



From mark.saad at ymail.com  Sun Mar 12 16:00:06 2017
From: mark.saad at ymail.com (Mark Saad)
Date: Sun, 12 Mar 2017 16:00:06 -0400
Subject: [talk] Mini sas question
Message-ID: <B8C440D6-7B3D-406E-9A7C-DCBD98B9FD01@ymail.com>

All
  I read this post on hacker news .
http://changelog.complete.org/archives/9769-silent-data-corruption-is-real

I have a server that has a similar issue ; but due to its age I assumed data corruption on that drives was a way of life . Disks get old motors burn out parts fail etc.  Zfs protected my data but I swapped 4 disks out of 60 in the last 18 months  . The part of the story I found interesting was how the disks didn't show up in the controller bios . I have that issue with a similar card on this server . So has anyone  ever seen this cabling issue ? Is it worth changing? How do I know which cable I have ? 

---
Mark Saad | mark.saad at ymail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20170312/3cdd8957/attachment.htm>

From mj at mjturner.net  Sun Mar 12 18:54:38 2017
From: mj at mjturner.net (Michael-John Turner)
Date: Sun, 12 Mar 2017 22:54:38 +0000
Subject: [talk] OT: Free Secondary DNS?
In-Reply-To: <85E67EB7-6CD7-407D-B6E9-1AD4BB112027@bway.net>
References: <85E67EB7-6CD7-407D-B6E9-1AD4BB112027@bway.net>
Message-ID: <20170312225438.k5eybaday555paoc@tesla.turnde.net>

On Fri, Mar 10, 2017 at 01:06:44PM -0500, Charles Sprickman wrote:
>Any recommendations for free secondary DNS for personal use?

I know you've now gone a different route, but I've been using 
puck.nether.net as a secondary for a number of years and it's been great.  
Only downside is that it's only a single server (so no anycast, etc), but 
that's never been a problem for me.

Cheers, MJ
-- 
Michael-John Turner * mj at mjturner.net * http://mjturner.net/ 



From fire at firecrow.com  Sun Mar 12 19:16:02 2017
From: fire at firecrow.com (fire crow)
Date: Sun, 12 Mar 2017 23:16:02 +0000
Subject: [talk] OT: Free Secondary DNS?
In-Reply-To: <20170312225438.k5eybaday555paoc@tesla.turnde.net>
References: <85E67EB7-6CD7-407D-B6E9-1AD4BB112027@bway.net>
 <20170312225438.k5eybaday555paoc@tesla.turnde.net>
Message-ID: <CAH=cS8HYSseKi5njhY4H4taPqcQHxWsbtmpc5tqrtrdvETSkRg@mail.gmail.com>

On Mar 12, 2017 7:05 PM, "Michael-John Turner" <mj at mjturner.net> wrote:

On Fri, Mar 10, 2017 at 01:06:44PM -0500, Charles Sprickman wrote:

> Any recommendations for free secondary DNS for personal use?


Ive been using buddyns. I like them a lot.
https://www.buddyns.com
~fire

_________________
talk mailing list
talk at lists.nycbug.org
http://lists.nycbug.org/mailman/listinfo/talk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20170312/784f7676/attachment.htm>

From spork at bway.net  Sun Mar 12 19:21:43 2017
From: spork at bway.net (Charles Sprickman)
Date: Sun, 12 Mar 2017 19:21:43 -0400
Subject: [talk] OT: Free Secondary DNS?
In-Reply-To: <CAH=cS8HYSseKi5njhY4H4taPqcQHxWsbtmpc5tqrtrdvETSkRg@mail.gmail.com>
References: <85E67EB7-6CD7-407D-B6E9-1AD4BB112027@bway.net>
 <20170312225438.k5eybaday555paoc@tesla.turnde.net>
 <CAH=cS8HYSseKi5njhY4H4taPqcQHxWsbtmpc5tqrtrdvETSkRg@mail.gmail.com>
Message-ID: <DAAEAED1-39BD-47AC-B296-ECE3D908A50C@bway.net>


> On Mar 12, 2017, at 7:16 PM, fire crow <fire at firecrow.com> wrote:
> 
> 
> 
> On Mar 12, 2017 7:05 PM, "Michael-John Turner" <mj at mjturner.net <mailto:mj at mjturner.net>> wrote:
> On Fri, Mar 10, 2017 at 01:06:44PM -0500, Charles Sprickman wrote:
> Any recommendations for free secondary DNS for personal use?
> 
> Ive been using buddyns. I like them a lot. 
> https://www.buddyns.com <https://www.buddyns.com/>

I looked at them, but not supporting DNSSEC (which is why I left HE.net) disqualified them:

https://www.buddyns.com/faq/ <https://www.buddyns.com/faq/>
DNSSEC
BuddyNS does not support DNSSEC because it exposes to some vulnerabilities unsuited to a high-volume DNS service.

Charles

> ~fire
> 
> _________________
> talk mailing list
> talk at lists.nycbug.org <mailto:talk at lists.nycbug.org>
> http://lists.nycbug.org/mailman/listinfo/talk <http://lists.nycbug.org/mailman/listinfo/talk>
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20170312/69c7c512/attachment.htm>

From george at ceetonetechnology.com  Sun Mar 12 20:29:00 2017
From: george at ceetonetechnology.com (George Rosamond)
Date: Mon, 13 Mar 2017 00:29:00 +0000
Subject: [talk] OT: Free Secondary DNS?
In-Reply-To: <DAAEAED1-39BD-47AC-B296-ECE3D908A50C@bway.net>
References: <85E67EB7-6CD7-407D-B6E9-1AD4BB112027@bway.net>
 <20170312225438.k5eybaday555paoc@tesla.turnde.net>
 <CAH=cS8HYSseKi5njhY4H4taPqcQHxWsbtmpc5tqrtrdvETSkRg@mail.gmail.com>
 <DAAEAED1-39BD-47AC-B296-ECE3D908A50C@bway.net>
Message-ID: <85ed2696-1f4b-50c3-8fdf-e9879cea1273@ceetonetechnology.com>

Charles Sprickman:
> 
>> On Mar 12, 2017, at 7:16 PM, fire crow <fire at firecrow.com> wrote:
>>
>>
>>
>> On Mar 12, 2017 7:05 PM, "Michael-John Turner" <mj at mjturner.net <mailto:mj at mjturner.net>> wrote:
>> On Fri, Mar 10, 2017 at 01:06:44PM -0500, Charles Sprickman wrote:
>> Any recommendations for free secondary DNS for personal use?
>>
>> Ive been using buddyns. I like them a lot. 
>> https://www.buddyns.com <https://www.buddyns.com/>
> 
> I looked at them, but not supporting DNSSEC (which is why I left HE.net) disqualified them:
> 
> https://www.buddyns.com/faq/ <https://www.buddyns.com/faq/>
> DNSSEC
> BuddyNS does not support DNSSEC because it exposes to some vulnerabilities unsuited to a high-volume DNS service.

When it comes to free services such as DNS, I imagine that it's more
about quantity than quality.

I assume it still holds, but NYI offered free backup DNS in the past to
anyone interested... but you'd have to recheck with them.

g



From viewtiful.icchan at gmail.com  Mon Mar 27 08:24:01 2017
From: viewtiful.icchan at gmail.com (Robert Menes)
Date: Mon, 27 Mar 2017 08:24:01 -0400
Subject: [talk] Anyone going to VCF East this weekend?
In-Reply-To: <CA+TaHT3Kott3wNG8scFnXJFY2sR3P4=7en0yLL+wqEvPS2Ju0Q@mail.gmail.com>
References: <CA+TaHT3Kott3wNG8scFnXJFY2sR3P4=7en0yLL+wqEvPS2Ju0Q@mail.gmail.com>
Message-ID: <CA+TaHT3C1MYdPH14MK+fr8qw9D0+sO+iNuk95SEniJoT3bQVJg@mail.gmail.com>

Hey guys,

I'm going to be at VCF East this Saturday, at the InfoAge Science Center in
Wall, NJ (http://vcfed.org/wp/). I'm curious to know if anyone else in the
group may be heading down there as well; perhaps if so we can get together
and hang out? :)

--Robert
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20170327/7dba9921/attachment.htm>

From ike at blackskyresearch.net  Tue Mar 28 15:36:42 2017
From: ike at blackskyresearch.net (Isaac (.ike) Levy)
Date: Tue, 28 Mar 2017 15:36:42 -0400
Subject: [talk] UNIX history repo
Message-ID: <2c53994c-7911-6d3f-5eb5-8275d9c4c016@blackskyresearch.net>

Hey All,

Pretty sure some of you already have seen this,

"Continuous Unix commit history from 1970 until today"
https://github.com/dspinellis/unix-history-repo

Just stumbled across it and was floored- this is truly cool, browsing
the files now...

Best,
.ike




From pvarga at pvrg.net  Tue Mar 28 15:39:45 2017
From: pvarga at pvrg.net (Peter Varga)
Date: Tue, 28 Mar 2017 15:39:45 -0400
Subject: [talk] UNIX history repo
In-Reply-To: <2c53994c-7911-6d3f-5eb5-8275d9c4c016@blackskyresearch.net>
References: <2c53994c-7911-6d3f-5eb5-8275d9c4c016@blackskyresearch.net>
Message-ID: <1490729985.3802259.926510704.644B0B02@webmail.messagingengine.com>

Yes, rejoice!  one more time. :-)

On Tue, Mar 28, 2017, at 15:36, Isaac (.ike) Levy wrote:
> Hey All,
> 
> Pretty sure some of you already have seen this,
> 
> "Continuous Unix commit history from 1970 until today"
> https://github.com/dspinellis/unix-history-repo
> 
> Just stumbled across it and was floored- this is truly cool, browsing
> the files now...
> 
> Best,
> .ike
> 
> 
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk



From venture37 at geeklan.co.uk  Thu Mar 30 11:17:04 2017
From: venture37 at geeklan.co.uk (Sevan Janiyan)
Date: Thu, 30 Mar 2017 16:17:04 +0100
Subject: [talk] Fwd: 2017-03-25-netbsd-hpcmips.img
In-Reply-To: <20170330.230319.203573543282020634.jun@soum.co.jp>
References: <20170330.230319.203573543282020634.jun@soum.co.jp>
Message-ID: <5c8e5de5-893e-1a06-efed-a72039190c2a@geeklan.co.uk>

WorkPad owners, heads up :o)

Sevan
-------- Forwarded Message --------
Subject: 2017-03-25-netbsd-hpcmips.img
Date: Thu, 30 Mar 2017 23:03:19 +0900 (JST)
From: Jun Ebihara <jun at soum.co.jp>
To: port-hpcmips at netbsd.org

I've updated 2017-03-25-netbsd-hpcmips.img.gz for hpcmips.

http://cdn.netbsd.org/pub/NetBSD/misc/jun/hpcmips/7.1/2017-03-25-netbsd-hpcmips.img.gz

Feature:
- NetBSD 7.1 201703240150Z hpcmips from nyftp.netbsd
- pkgsrc: /usr/pkgsrc: 2017-03-18
- new build of hpcboot.exe: mips-hpcboot.exe by Sevan Janiyan
  http://mail-index.netbsd.org/port-hpcmips/2017/03/30/msg000303.html
- dmesg:
  https://github.com/ebijun/NetBSD/blob/master/dmesg/hpcmips/7.1/sigmarion

- Copy image to CompactFlash
- Set hpcmips machine.
- boot hpcboot.exe
-- select Machine
-- select root partition
  and comes as you are as you want to be.
- tpctl: touch panel calibration:
  click + 5 times + return
- login root (no passwd)

Features:
  - fit size for 2GB CF Card

Installed Packages:
 not yet.


Keyboard layout checkpoint:
/etc/wscons.conf
 #encoding sv
 #encoding us.swapctrlcaps
 encoding jp

/root/.xinitrc
 setxkbmap -model jp106 jp

Build sample script:
 https://github.com/ebijun/NetBSD/tree/master/hpcmips/Image

Guide:
 https://github.com/ebijun/NetBSD/blob/master/Guide/hpcmips.rst

--
Jun Ebihara



From george at ceetonetechnology.com  Thu Mar 30 20:38:00 2017
From: george at ceetonetechnology.com (George Rosamond)
Date: Fri, 31 Mar 2017 00:38:00 +0000
Subject: [talk] a Guardian article
Message-ID: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>

Yet another article about mitigating the sale of user data by ISPs...
except this one features a picture which is piqued my interest...

https://www.theguardian.com/technology/2017/mar/30/privacy-protection-web-browsing-history-data-congress

Anyone notice the cover in the lower right corner?

Can you imagine a technical library with both *that* book and an ASP.net
AJAX book on the same floor?

funny stock photos...

g



From george at ceetonetechnology.com  Thu Mar 30 21:29:00 2017
From: george at ceetonetechnology.com (George Rosamond)
Date: Fri, 31 Mar 2017 01:29:00 +0000
Subject: [talk] Fwd: 2017-03-25-netbsd-hpcmips.img
In-Reply-To: <5c8e5de5-893e-1a06-efed-a72039190c2a@geeklan.co.uk>
References: <20170330.230319.203573543282020634.jun@soum.co.jp>
 <5c8e5de5-893e-1a06-efed-a72039190c2a@geeklan.co.uk>
Message-ID: <a965c6aa-a249-3693-60c8-3721f9c1deab@ceetonetechnology.com>

Sevan Janiyan:
> WorkPad owners, heads up :o)
> 

Anyone else out there with a WorkPad besides myself and Robert?

They seem to run around $100 on Ebay... although I was fortunate to
pickup three for that amount a while back.  Sorry.. .all the extras are
gone!

These subnotebook/whatever devices provide an idea of where things could
have gone in 1999... but didn't. To have hours and hours of battery time
in that year is incredible. I think my Toshiba Tecra from that year did
60 minutes, without any networking. And this is a MIPS chip, running
clunky WindowsCE burned in as firmware. It has a similar
weight/size/feel as a Thinkpad x120e, although the display is only 8"
(diagonal).

Some quick notes to deal with the obvious for those who do have one and
will test the image.

These boot automatically into WindowsCE and you have to 'next' 'next'
'next' through some basic stuff.

With the CF card (with the posted image below) inserted, click your way
to "My Handheld PC" then to "Storage Card" and select "hpcboot" with the
cutesy little red car icon.

It's a Windows binary that boots the system into NetBSD.  Think uboot
for Windows-only hardware.

The only options to change with the NetBSD boot program are:

the Windows path to the CF card (likely \Storage Card\)

the next field should be netbsd-GENERIC.gz

Then in the next line, the hardware, which in (our) this case is a
WorkPad z50 2601 1AU.

then boom, click "boot"

The NetBSD image will then boot.. and things will start looking more
familiar.

One particular thing with this image (as opposed to past ones).

Once the boot process (seems) is done, there's a blank screen with a
cross cursor in the middle of the screen.  It looks like X is in the
middle of booting, and it just sits for a bit. It ends up tpctl is
hanging and ultimately fails to start, which delays a login prompt for
5-10 minutes.  Removing it from /etc/rc.conf clears up the long boot delay.

Rereading below:

> 
>>   and comes as you are as you want to be.
>> - tpctl: touch panel calibration:
>>   click + 5 times + return

I realized I missed that... but then it's unclear what to "click" "five
times" to calibrate.. right or left mouse?  I tried a bunch of things,
but still have to wait those 5-10 minutes.

I tried to use resize_ffs to use up the whole 4G CF card I'm using for
the 2G image, but will have to figure out the NetBSD version of
OpenBSD's bsd.rd... or mount it from a NetBSD box to do it.

I would love to upload a dmesg to dmesgd.nycbug.org for it... but since
the wi(4) driver for my wireless PCMCIA cards isn't included in this
image, and there's no ethernet, no USB..  I have to get a NetBSD box up
to mount the CF card to post it.

Other utterly stupid things to note:

1.  if the battery isn't locked, the WorkPad will not turn on.

2.  these devices cant be powered-down, they only suspend (and give that
impressive battery-time). You have to remove the battery and unplug the
power.

Sorry for combining a how-to with a mention of the tpctl-induced headache...

Certainly worth tinkering with these things if you happen upon one.

g


> Sevan
> -------- Forwarded Message --------
> Subject: 2017-03-25-netbsd-hpcmips.img
> Date: Thu, 30 Mar 2017 23:03:19 +0900 (JST)
> From: Jun Ebihara <jun at soum.co.jp>
> To: port-hpcmips at netbsd.org
> 
> I've updated 2017-03-25-netbsd-hpcmips.img.gz for hpcmips.
> 
> http://cdn.netbsd.org/pub/NetBSD/misc/jun/hpcmips/7.1/2017-03-25-netbsd-hpcmips.img.gz
> 
> Feature:
> - NetBSD 7.1 201703240150Z hpcmips from nyftp.netbsd
> - pkgsrc: /usr/pkgsrc: 2017-03-18
> - new build of hpcboot.exe: mips-hpcboot.exe by Sevan Janiyan
>   http://mail-index.netbsd.org/port-hpcmips/2017/03/30/msg000303.html
> - dmesg:
>   https://github.com/ebijun/NetBSD/blob/master/dmesg/hpcmips/7.1/sigmarion
> 
> - Copy image to CompactFlash
> - Set hpcmips machine.
> - boot hpcboot.exe
> -- select Machine
> -- select root partition
>   and comes as you are as you want to be.
> - tpctl: touch panel calibration:
>   click + 5 times + return
> - login root (no passwd)
> 
> Features:
>   - fit size for 2GB CF Card
> 
> Installed Packages:
>  not yet.
> 
> 
> Keyboard layout checkpoint:
> /etc/wscons.conf
>  #encoding sv
>  #encoding us.swapctrlcaps
>  encoding jp
> 
> /root/.xinitrc
>  setxkbmap -model jp106 jp
> 
> Build sample script:
>  https://github.com/ebijun/NetBSD/tree/master/hpcmips/Image
> 
> Guide:
>  https://github.com/ebijun/NetBSD/blob/master/Guide/hpcmips.rst
> 
> --
> Jun Ebihara
> 
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
> 



From pooka at iki.fi  Thu Mar 30 21:20:15 2017
From: pooka at iki.fi (Antti Kantee)
Date: Fri, 31 Mar 2017 01:20:15 +0000
Subject: [talk] a Guardian article
In-Reply-To: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
Message-ID: <4312d454-8081-6884-1958-2e2eb8eed944@iki.fi>

On 31/03/17 00:38, George Rosamond wrote:
> Yet another article about mitigating the sale of user data by ISPs...
> except this one features a picture which is piqued my interest...
>
> https://www.theguardian.com/technology/2017/mar/30/privacy-protection-web-browsing-history-data-congress

Does anyone have recommendations for a daemon which creates fake traffic?



From jun at soum.co.jp  Thu Mar 30 21:44:33 2017
From: jun at soum.co.jp (Jun Ebihara)
Date: Fri, 31 Mar 2017 10:44:33 +0900 (JST)
Subject: [talk] Fwd: 2017-03-25-netbsd-hpcmips.img
In-Reply-To: <a965c6aa-a249-3693-60c8-3721f9c1deab@ceetonetechnology.com>
References: <20170330.230319.203573543282020634.jun@soum.co.jp>
 <5c8e5de5-893e-1a06-efed-a72039190c2a@geeklan.co.uk>
 <a965c6aa-a249-3693-60c8-3721f9c1deab@ceetonetechnology.com>
Message-ID: <20170331.104433.1823426464978073915.jun@soum.co.jp>

From: George Rosamond <george at ceetonetechnology.com>
Subject: Re: [talk] Fwd: 2017-03-25-netbsd-hpcmips.img
Date: Fri, 31 Mar 2017 01:29:00 +0000

>>>   and comes as you are as you want to be.
>>> - tpctl: touch panel calibration:
>>>   click + 5 times + return
> I realized I missed that... but then it's unclear what to "click" "five
> times" to calibrate.. right or left mouse?  I tried a bunch of things,
> but still have to wait those 5-10 minutes.

tpctl means "touch panel control", special setting for hpcmips/arm/sh.
I'll make comment out next hpcmips image.

> I would love to upload a dmesg to dmesgd.nycbug.org for it... but since
> the wi(4) driver for my wireless PCMCIA cards isn't included in this
> image, and there's no ethernet, no USB..  I have to get a NetBSD box up
> to mount the CF card to post it.

What kind of card you have? give me some infomation to re-compile kernel.

> Sorry for combining a how-to with a mention of the tpctl-induced headache...

yup!thanx for your report.

--
Jun Ebihara



From skreuzer at exit2shell.com  Thu Mar 30 21:01:34 2017
From: skreuzer at exit2shell.com (Steven Kreuzer)
Date: Thu, 30 Mar 2017 21:01:34 -0400
Subject: [talk] a Guardian article
In-Reply-To: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
Message-ID: <41168CE9-5842-427D-BEE2-3365E28F90E3@exit2shell.com>


> On Mar 30, 2017, at 8:38 PM, George Rosamond <george at ceetonetechnology.com> wrote:
> 
> Yet another article about mitigating the sale of user data by ISPs...
> except this one features a picture which is piqued my interest...
> 
> https://www.theguardian.com/technology/2017/mar/30/privacy-protection-web-browsing-history-data-congress
> 
> Anyone notice the cover in the lower right corner?

Zoom...
Enhance?
Enhance?

https://www.flickr.com/photos/wocintechchat/25497553460/sizes/h/ <https://www.flickr.com/photos/wocintechchat/25497553460/sizes/h/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20170330/2907c89b/attachment.htm>

From spork at bway.net  Thu Mar 30 22:16:11 2017
From: spork at bway.net (Charles Sprickman)
Date: Thu, 30 Mar 2017 22:16:11 -0400
Subject: [talk] a Guardian article
In-Reply-To: <4312d454-8081-6884-1958-2e2eb8eed944@iki.fi>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
 <4312d454-8081-6884-1958-2e2eb8eed944@iki.fi>
Message-ID: <5E9DCFF7-328F-4C00-875F-75550CDBCD9F@bway.net>


> On Mar 30, 2017, at 9:20 PM, Antti Kantee <pooka at iki.fi> wrote:
> 
> On 31/03/17 00:38, George Rosamond wrote:
>> Yet another article about mitigating the sale of user data by ISPs...
>> except this one features a picture which is piqued my interest...
>> 
>> https://www.theguardian.com/technology/2017/mar/30/privacy-protection-web-browsing-history-data-congress
> 
> Does anyone have recommendations for a daemon which creates fake traffic?

A Tor exit node? :)

> 
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk



From spork at bway.net  Thu Mar 30 22:19:44 2017
From: spork at bway.net (Charles Sprickman)
Date: Thu, 30 Mar 2017 22:19:44 -0400
Subject: [talk] a Guardian article
In-Reply-To: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
Message-ID: <95D9BE1C-88B6-4C6C-A082-18304500F8F8@bway.net>


> On Mar 30, 2017, at 8:38 PM, George Rosamond <george at ceetonetechnology.com> wrote:
> 
> Yet another article about mitigating the sale of user data by ISPs...
> except this one features a picture which is piqued my interest...
> 
> https://www.theguardian.com/technology/2017/mar/30/privacy-protection-web-browsing-history-data-congress
> 
> Anyone notice the cover in the lower right corner?
> 
> Can you imagine a technical library with both *that* book and an ASP.net
> AJAX book on the same floor?
> 
> funny stock photos?

There?s a story there too:

http://www.wocintechchat.com/blog/wocintechphotos <http://www.wocintechchat.com/blog/wocintechphotos>
> 
> g
> 
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20170330/e285c170/attachment.htm>

From jkeenan at pobox.com  Thu Mar 30 22:04:46 2017
From: jkeenan at pobox.com (James E Keenan)
Date: Thu, 30 Mar 2017 22:04:46 -0400
Subject: [talk] a Guardian article
In-Reply-To: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
Message-ID: <155ee88b-4923-5446-a7c9-8010ec9d42ad@pobox.com>

On 03/30/2017 08:38 PM, George Rosamond wrote:
> Yet another article about mitigating the sale of user data by ISPs...
> except this one features a picture which is piqued my interest...
>
> https://www.theguardian.com/technology/2017/mar/30/privacy-protection-web-browsing-history-data-congress
>

And speaking of theguardian.com articles ...

<shameless_self_promotion>

https://www.theguardian.com/world/2017/mar/20/mapping-gun-murders-micro-level-new-data-2015

# followed by

https://culturedperl.com/gun-violence-using-perl-to-analyze-publicly-available-data-4697b6d7dc1f

</shameless_self_promotion>




From mirimir at riseup.net  Thu Mar 30 22:35:41 2017
From: mirimir at riseup.net (Mirimir)
Date: Thu, 30 Mar 2017 20:35:41 -0600
Subject: [talk] a Guardian article
In-Reply-To: <5E9DCFF7-328F-4C00-875F-75550CDBCD9F@bway.net>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
 <4312d454-8081-6884-1958-2e2eb8eed944@iki.fi>
 <5E9DCFF7-328F-4C00-875F-75550CDBCD9F@bway.net>
Message-ID: <41c96554-e9e3-758e-522d-e0f9a5446454@riseup.net>

On 03/30/2017 08:16 PM, Charles Sprickman wrote:
> 
>> On Mar 30, 2017, at 9:20 PM, Antti Kantee <pooka at iki.fi> wrote:
>>
>> On 31/03/17 00:38, George Rosamond wrote:
>>> Yet another article about mitigating the sale of user data by ISPs...
>>> except this one features a picture which is piqued my interest...
>>>
>>> https://www.theguardian.com/technology/2017/mar/30/privacy-protection-web-browsing-history-data-congress
>>
>> Does anyone have recommendations for a daemon which creates fake traffic?
> 
> A Tor exit node? :)

Or install Hola VPN, which routes users through other users' uplinks.
And sells them as a service through Luminati.



From george at ceetonetechnology.com  Fri Mar 31 09:03:00 2017
From: george at ceetonetechnology.com (George Rosamond)
Date: Fri, 31 Mar 2017 13:03:00 +0000
Subject: [talk] Fwd: 2017-03-25-netbsd-hpcmips.img
In-Reply-To: <20170331.104433.1823426464978073915.jun@soum.co.jp>
References: <20170330.230319.203573543282020634.jun@soum.co.jp>
 <5c8e5de5-893e-1a06-efed-a72039190c2a@geeklan.co.uk>
 <a965c6aa-a249-3693-60c8-3721f9c1deab@ceetonetechnology.com>
 <20170331.104433.1823426464978073915.jun@soum.co.jp>
Message-ID: <4bff576c-13e0-959f-4dd4-cd3182faec92@ceetonetechnology.com>

Jun Ebihara:
> From: George Rosamond <george at ceetonetechnology.com>
> Subject: Re: [talk] Fwd: 2017-03-25-netbsd-hpcmips.img
> Date: Fri, 31 Mar 2017 01:29:00 +0000
> 
>>>>   and comes as you are as you want to be.
>>>> - tpctl: touch panel calibration:
>>>>   click + 5 times + return
>> I realized I missed that... but then it's unclear what to "click" "five
>> times" to calibrate.. right or left mouse?  I tried a bunch of things,
>> but still have to wait those 5-10 minutes.
> 
> tpctl means "touch panel control", special setting for hpcmips/arm/sh.
> I'll make comment out next hpcmips image.

There's touch panel control support on the WorkPad?  That confused me...

Also why is $TERM set to wsvt25?  vt220 seems work for me better for the
screen size.

> 
>> I would love to upload a dmesg to dmesgd.nycbug.org for it... but since
>> the wi(4) driver for my wireless PCMCIA cards isn't included in this
>> image, and there's no ethernet, no USB..  I have to get a NetBSD box up
>> to mount the CF card to post it.
> 
> What kind of card you have? give me some infomation to re-compile kernel.
> 

:)

I have three cards donated by other NYC*BUG people.

* rtw (on OpenBSD) Realtek 8180 RTL8180F which is a Linksys 802.11b card

* another Realtek 8185 which uses re(4) I think.  It's from Encore
Electronics

* then the closest to wokring is the wi(4) from Microsoft MN-520 which I
think requires firmware.  ISL3873 PRISM2.5

Huge thanks if you could add any of those drivers in... it saves me from
having to cross-compile on some other ancient hardware.


>> Sorry for combining a how-to with a mention of the tpctl-induced headache...
> 
> yup!thanx for your report.

Thank you for making this easy without having to cross-compile.

Not quite sure how I'm going to use this.. but I'm positive I wont build
perl from source like Sevan :)

Any ideas on using resize_ffs(8) besides doing from another NetBSD box?

g



From george at ceetonetechnology.com  Fri Mar 31 09:06:00 2017
From: george at ceetonetechnology.com (George Rosamond)
Date: Fri, 31 Mar 2017 13:06:00 +0000
Subject: [talk] a Guardian article
In-Reply-To: <95D9BE1C-88B6-4C6C-A082-18304500F8F8@bway.net>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
 <95D9BE1C-88B6-4C6C-A082-18304500F8F8@bway.net>
Message-ID: <7687eedd-bc3b-b6cc-7191-2be7b8ecbb91@ceetonetechnology.com>

Charles Sprickman:
> 
>> On Mar 30, 2017, at 8:38 PM, George Rosamond <george at ceetonetechnology.com> wrote:
>>
>> Yet another article about mitigating the sale of user data by ISPs...
>> except this one features a picture which is piqued my interest...
>>
>> https://www.theguardian.com/technology/2017/mar/30/privacy-protection-web-browsing-history-data-congress
>>
>> Anyone notice the cover in the lower right corner?
>>
>> Can you imagine a technical library with both *that* book and an ASP.net
>> AJAX book on the same floor?
>>
>> funny stock photos?
> 
> There?s a story there too:
> 
> http://www.wocintechchat.com/blog/wocintechphotos <http://www.wocintechchat.com/blog/wocintechphotos>

Ah interesting.

Good stuff Spork!

g



From george at ceetonetechnology.com  Fri Mar 31 09:09:00 2017
From: george at ceetonetechnology.com (George Rosamond)
Date: Fri, 31 Mar 2017 13:09:00 +0000
Subject: [talk] a Guardian article
In-Reply-To: <41c96554-e9e3-758e-522d-e0f9a5446454@riseup.net>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
 <4312d454-8081-6884-1958-2e2eb8eed944@iki.fi>
 <5E9DCFF7-328F-4C00-875F-75550CDBCD9F@bway.net>
 <41c96554-e9e3-758e-522d-e0f9a5446454@riseup.net>
Message-ID: <6baf995a-9a88-b32d-e752-6daa5c64cba5@ceetonetechnology.com>

Mirimir:
> On 03/30/2017 08:16 PM, Charles Sprickman wrote:
>>
>>> On Mar 30, 2017, at 9:20 PM, Antti Kantee <pooka at iki.fi> wrote:
>>>
>>> On 31/03/17 00:38, George Rosamond wrote:
>>>> Yet another article about mitigating the sale of user data by ISPs...
>>>> except this one features a picture which is piqued my interest...
>>>>
>>>> https://www.theguardian.com/technology/2017/mar/30/privacy-protection-web-browsing-history-data-congress
>>>
>>> Does anyone have recommendations for a daemon which creates fake traffic?
>>
>> A Tor exit node? :)
> 
> Or install Hola VPN, which routes users through other users' uplinks.
> And sells them as a service through Luminati.

I think it depends on what he means by "fake traffic." My first read of
his email was to assume he meant "fake news."... oh these crazy times...

Tor, without acting as an exit, can generate encrypted traffic depending
on usage and configuration.

Or you could just run a background script pulling/pushing traffic over
ftp/curl/fetch/wget from a $hosts list...

It really depends on what exactly the purpose of generating fake traffic is.

g



From pooka at iki.fi  Fri Mar 31 10:56:05 2017
From: pooka at iki.fi (Antti Kantee)
Date: Fri, 31 Mar 2017 14:56:05 +0000
Subject: [talk] a Guardian article
In-Reply-To: <6baf995a-9a88-b32d-e752-6daa5c64cba5@ceetonetechnology.com>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
 <4312d454-8081-6884-1958-2e2eb8eed944@iki.fi>
 <5E9DCFF7-328F-4C00-875F-75550CDBCD9F@bway.net>
 <41c96554-e9e3-758e-522d-e0f9a5446454@riseup.net>
 <6baf995a-9a88-b32d-e752-6daa5c64cba5@ceetonetechnology.com>
Message-ID: <3804711a-d2cd-7988-69a8-afdd0883f31c@iki.fi>

On 31/03/17 13:09, George Rosamond wrote:
> Mirimir:
>> On 03/30/2017 08:16 PM, Charles Sprickman wrote:
>>>
>>>> On Mar 30, 2017, at 9:20 PM, Antti Kantee <pooka at iki.fi> wrote:
>>>>
>>>> On 31/03/17 00:38, George Rosamond wrote:
>>>>> Yet another article about mitigating the sale of user data by ISPs...
>>>>> except this one features a picture which is piqued my interest...
>>>>>
>>>>> https://www.theguardian.com/technology/2017/mar/30/privacy-protection-web-browsing-history-data-congress
>>>>
>>>> Does anyone have recommendations for a daemon which creates fake traffic?
>>>
>>> A Tor exit node? :)
>>
>> Or install Hola VPN, which routes users through other users' uplinks.
>> And sells them as a service through Luminati.
>
> I think it depends on what he means by "fake traffic." My first read of
> his email was to assume he meant "fake news."... oh these crazy times...
>
> Tor, without acting as an exit, can generate encrypted traffic depending
> on usage and configuration.
>
> Or you could just run a background script pulling/pushing traffic over
> ftp/curl/fetch/wget from a $hosts list...

Well, if the attack is the ISP looking at your traffic, generating a 
profile, and selling that to advertisers (or who knows where), and fake 
traffic is the countermeasure, then fake traffic should somehow prevent 
the attack from happening.  In other words, the traffic should look like 
a handful of people browsing, but be "all over the place" so as to 
prevent profiling -- e.g. generate traffic both to fox news and msnbc 
and also somewhere else for actual news.

I fear that approaches such as a tor exit node supply traffic which is 
all too easy to discard from consideration for the profile.

Hmm, I just wrote a mail about a subject I don't know anything about and 
hope someone else did the work.  The spirit of open source is truly in me!



From venture37 at geeklan.co.uk  Fri Mar 31 11:00:53 2017
From: venture37 at geeklan.co.uk (Sevan Janiyan)
Date: Fri, 31 Mar 2017 16:00:53 +0100
Subject: [talk] Fwd: 2017-03-25-netbsd-hpcmips.img
In-Reply-To: <4bff576c-13e0-959f-4dd4-cd3182faec92@ceetonetechnology.com>
References: <20170330.230319.203573543282020634.jun@soum.co.jp>
 <5c8e5de5-893e-1a06-efed-a72039190c2a@geeklan.co.uk>
 <a965c6aa-a249-3693-60c8-3721f9c1deab@ceetonetechnology.com>
 <20170331.104433.1823426464978073915.jun@soum.co.jp>
 <4bff576c-13e0-959f-4dd4-cd3182faec92@ceetonetechnology.com>
Message-ID: <b7ac4e7b-c632-6010-5915-a4e5e189551c@geeklan.co.uk>

Hello,

On 31/03/2017 14:03, George Rosamond wrote:
>> tpctl means "touch panel control", special setting for hpcmips/arm/sh.
>> I'll make comment out next hpcmips image.
> 
> There's touch panel control support on the WorkPad?  That confused me...

No, there are other devices supported in the hpcmips port which do however
http://wiki.netbsd.org/ports/hpcmips/supported_machines/

>>> I would love to upload a dmesg to dmesgd.nycbug.org for it... but since
>>> the wi(4) driver for my wireless PCMCIA cards isn't included in this
>>> image, and there's no ethernet, no USB..  I have to get a NetBSD box up
>>> to mount the CF card to post it.
>>
>> What kind of card you have? give me some infomation to re-compile kernel.
>>
> 
> :)
> 
> I have three cards donated by other NYC*BUG people.
> 
> * rtw (on OpenBSD) Realtek 8180 RTL8180F which is a Linksys 802.11b card
> 
> * another Realtek 8185 which uses re(4) I think.  It's from Encore
> Electronics
> 
> * then the closest to wokring is the wi(4) from Microsoft MN-520 which I
> think requires firmware.  ISL3873 PRISM2.5
> 
> Huge thanks if you could add any of those drivers in... it saves me from
> having to cross-compile on some other ancient hardware.

The only cards which will work on a device of this vintage is PCMCIA
cards (ISA in Card form factor), more recent Cardbus cards (PCI in Card
form factor) wont.

You can distinguish the two types by the presence of the gold strip
above the connector. That means the card is of a cardbus type & wont
work. eg
https://upload.wikimedia.org/wikipedia/commons/d/df/XJACK_network_card_extended.jpg
< wont work.

rtw & re are pci devices. :(

How about a nice ne(4) device instead? (any 10Mbps PCMCIA card, some
100Mbps PCMCIA cards).
All supported wifi cards should be compiled in, I think.

What do you need to do to get the Microsoft card working usually?

>>> Sorry for combining a how-to with a mention of the tpctl-induced headache...
>>
>> yup!thanx for your report.
> 
> Thank you for making this easy without having to cross-compile.
> 
> Not quite sure how I'm going to use this.. but I'm positive I wont build
> perl from source like Sevan :)

Dedicated awk workstation? :D
or
Implement:
https://www.netbsd.org/gallery/presentations/riastradh/asiabsdcon2015/pkgsrc-cross-paper.pdf

> Any ideas on using resize_ffs(8) besides doing from another NetBSD box?

Can you use the following rc script? (normally
http://cvsweb.netbsd.org/bsdweb.cgi/src/distrib/utils/embedded/files/resize_disklabel?rev=1.1&content-type=text/x-cvsweb-markup&only_with_tag=MAIN


Sevan



From george at ceetonetechnology.com  Fri Mar 31 11:05:00 2017
From: george at ceetonetechnology.com (George Rosamond)
Date: Fri, 31 Mar 2017 15:05:00 +0000
Subject: [talk] a Guardian article
In-Reply-To: <3804711a-d2cd-7988-69a8-afdd0883f31c@iki.fi>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
 <4312d454-8081-6884-1958-2e2eb8eed944@iki.fi>
 <5E9DCFF7-328F-4C00-875F-75550CDBCD9F@bway.net>
 <41c96554-e9e3-758e-522d-e0f9a5446454@riseup.net>
 <6baf995a-9a88-b32d-e752-6daa5c64cba5@ceetonetechnology.com>
 <3804711a-d2cd-7988-69a8-afdd0883f31c@iki.fi>
Message-ID: <a4bcae81-4302-c944-b521-a209188411c1@ceetonetechnology.com>

Antti Kantee:
> On 31/03/17 13:09, George Rosamond wrote:
>> Mirimir:
>>> On 03/30/2017 08:16 PM, Charles Sprickman wrote:
>>>>
>>>>> On Mar 30, 2017, at 9:20 PM, Antti Kantee <pooka at iki.fi> wrote:
>>>>>
>>>>> On 31/03/17 00:38, George Rosamond wrote:
>>>>>> Yet another article about mitigating the sale of user data by ISPs...
>>>>>> except this one features a picture which is piqued my interest...
>>>>>>
>>>>>> https://www.theguardian.com/technology/2017/mar/30/privacy-protection-web-browsing-history-data-congress
>>>>>>
>>>>>
>>>>> Does anyone have recommendations for a daemon which creates fake
>>>>> traffic?
>>>>
>>>> A Tor exit node? :)
>>>
>>> Or install Hola VPN, which routes users through other users' uplinks.
>>> And sells them as a service through Luminati.
>>
>> I think it depends on what he means by "fake traffic." My first read of
>> his email was to assume he meant "fake news."... oh these crazy times...
>>
>> Tor, without acting as an exit, can generate encrypted traffic depending
>> on usage and configuration.
>>
>> Or you could just run a background script pulling/pushing traffic over
>> ftp/curl/fetch/wget from a $hosts list...
> 
> Well, if the attack is the ISP looking at your traffic, generating a
> profile, and selling that to advertisers (or who knows where), and fake
> traffic is the countermeasure, then fake traffic should somehow prevent
> the attack from happening.  In other words, the traffic should look like
> a handful of people browsing, but be "all over the place" so as to
> prevent profiling -- e.g. generate traffic both to fox news and msnbc
> and also somewhere else for actual news.

First, I'm not sure if generating fake traffic is necessarily the best
mitigation to surveillance. It would need to be sufficiently randomized
to not be clearly segmented as "fake".

There was some Firefox plugin a few years back out of NYU that tried to
do this with queries to various search engines. An early version of it
was dismissed by Schneier IIRC.

It would seem the best countermeasure to ISP surveillance is using HTTPS
for www browsing if you're concerned about content, although obviously
the meta-data (source, destination, when, from where, etc) isn't hidden.

If you're just looking at mitigating surveillance and your sole
adversary is the ISP, then Tor for all TCP traffic makes sense,
including IMAP and SSH. An alternative is certainly VPNs in this case,
although then if you're using a provider, you're now concentrating all
traffic you're attempting to hide with one choke-point.

> 
> I fear that approaches such as a tor exit node supply traffic which is
> all too easy to discard from consideration for the profile.
> 

Tor traffic *should* just look like HTTPS traffic and there are other
pluggable transports available (eg, Meek and obfsproxy) which give
different traffic profiles. You could also utilize a Tor bridge remote
from your location so all traffic just flows to that point and enters
the Tor network after the bridge.

> Hmm, I just wrote a mail about a subject I don't know anything about and
> hope someone else did the work.  The spirit of open source is truly in me!

Are we going to startup that auto-invoice feature on this lists?  High-time!

;)

g



From viewtiful.icchan at gmail.com  Fri Mar 31 11:22:18 2017
From: viewtiful.icchan at gmail.com (Robert Menes)
Date: Fri, 31 Mar 2017 11:22:18 -0400
Subject: [talk] Fwd: 2017-03-25-netbsd-hpcmips.img
In-Reply-To: <a965c6aa-a249-3693-60c8-3721f9c1deab@ceetonetechnology.com>
References: <20170330.230319.203573543282020634.jun@soum.co.jp>
 <5c8e5de5-893e-1a06-efed-a72039190c2a@geeklan.co.uk>
 <a965c6aa-a249-3693-60c8-3721f9c1deab@ceetonetechnology.com>
Message-ID: <CA+TaHT239Hu_J9mVsekf-+c7wzs3bHHQzrn9ymbzLMV4jvuPWg@mail.gmail.com>

I've grabbed the new image and will be dd'ing it to a card later today.

I've wanted to make 2 partitions on a CF card (one FAT16 for WinCE and one
I will dd
the new hpcmips image to), but am not certain if this will work. Will test
with latest
 kernel and hpcboot.

I have an Orinoco Wireless Gold PCMCIA card I also want to try to see if I
can get
working in NetBSD.

--Robert

On Thu, Mar 30, 2017 at 9:29 PM, George Rosamond <
george at ceetonetechnology.com> wrote:

> Sevan Janiyan:
> > WorkPad owners, heads up :o)
> >
>
> Anyone else out there with a WorkPad besides myself and Robert?
>
> They seem to run around $100 on Ebay... although I was fortunate to
> pickup three for that amount a while back.  Sorry.. .all the extras are
> gone!
>
> These subnotebook/whatever devices provide an idea of where things could
> have gone in 1999... but didn't. To have hours and hours of battery time
> in that year is incredible. I think my Toshiba Tecra from that year did
> 60 minutes, without any networking. And this is a MIPS chip, running
> clunky WindowsCE burned in as firmware. It has a similar
> weight/size/feel as a Thinkpad x120e, although the display is only 8"
> (diagonal).
>
> Some quick notes to deal with the obvious for those who do have one and
> will test the image.
>
> These boot automatically into WindowsCE and you have to 'next' 'next'
> 'next' through some basic stuff.
>
> With the CF card (with the posted image below) inserted, click your way
> to "My Handheld PC" then to "Storage Card" and select "hpcboot" with the
> cutesy little red car icon.
>
> It's a Windows binary that boots the system into NetBSD.  Think uboot
> for Windows-only hardware.
>
> The only options to change with the NetBSD boot program are:
>
> the Windows path to the CF card (likely \Storage Card\)
>
> the next field should be netbsd-GENERIC.gz
>
> Then in the next line, the hardware, which in (our) this case is a
> WorkPad z50 2601 1AU.
>
> then boom, click "boot"
>
> The NetBSD image will then boot.. and things will start looking more
> familiar.
>
> One particular thing with this image (as opposed to past ones).
>
> Once the boot process (seems) is done, there's a blank screen with a
> cross cursor in the middle of the screen.  It looks like X is in the
> middle of booting, and it just sits for a bit. It ends up tpctl is
> hanging and ultimately fails to start, which delays a login prompt for
> 5-10 minutes.  Removing it from /etc/rc.conf clears up the long boot delay.
>
> Rereading below:
>
> >
> >>   and comes as you are as you want to be.
> >> - tpctl: touch panel calibration:
> >>   click + 5 times + return
>
> I realized I missed that... but then it's unclear what to "click" "five
> times" to calibrate.. right or left mouse?  I tried a bunch of things,
> but still have to wait those 5-10 minutes.
>
> I tried to use resize_ffs to use up the whole 4G CF card I'm using for
> the 2G image, but will have to figure out the NetBSD version of
> OpenBSD's bsd.rd... or mount it from a NetBSD box to do it.
>
> I would love to upload a dmesg to dmesgd.nycbug.org for it... but since
> the wi(4) driver for my wireless PCMCIA cards isn't included in this
> image, and there's no ethernet, no USB..  I have to get a NetBSD box up
> to mount the CF card to post it.
>
> Other utterly stupid things to note:
>
> 1.  if the battery isn't locked, the WorkPad will not turn on.
>
> 2.  these devices cant be powered-down, they only suspend (and give that
> impressive battery-time). You have to remove the battery and unplug the
> power.
>
> Sorry for combining a how-to with a mention of the tpctl-induced
> headache...
>
> Certainly worth tinkering with these things if you happen upon one.
>
> g
>
>
> > Sevan
> > -------- Forwarded Message --------
> > Subject: 2017-03-25-netbsd-hpcmips.img
> > Date: Thu, 30 Mar 2017 23:03:19 +0900 (JST)
> > From: Jun Ebihara <jun at soum.co.jp>
> > To: port-hpcmips at netbsd.org
> >
> > I've updated 2017-03-25-netbsd-hpcmips.img.gz for hpcmips.
> >
> > http://cdn.netbsd.org/pub/NetBSD/misc/jun/hpcmips/7.1/
> 2017-03-25-netbsd-hpcmips.img.gz
> >
> > Feature:
> > - NetBSD 7.1 201703240150Z hpcmips from nyftp.netbsd
> > - pkgsrc: /usr/pkgsrc: 2017-03-18
> > - new build of hpcboot.exe: mips-hpcboot.exe by Sevan Janiyan
> >   http://mail-index.netbsd.org/port-hpcmips/2017/03/30/msg000303.html
> > - dmesg:
> >   https://github.com/ebijun/NetBSD/blob/master/dmesg/
> hpcmips/7.1/sigmarion
> >
> > - Copy image to CompactFlash
> > - Set hpcmips machine.
> > - boot hpcboot.exe
> > -- select Machine
> > -- select root partition
> >   and comes as you are as you want to be.
> > - tpctl: touch panel calibration:
> >   click + 5 times + return
> > - login root (no passwd)
> >
> > Features:
> >   - fit size for 2GB CF Card
> >
> > Installed Packages:
> >  not yet.
> >
> >
> > Keyboard layout checkpoint:
> > /etc/wscons.conf
> >  #encoding sv
> >  #encoding us.swapctrlcaps
> >  encoding jp
> >
> > /root/.xinitrc
> >  setxkbmap -model jp106 jp
> >
> > Build sample script:
> >  https://github.com/ebijun/NetBSD/tree/master/hpcmips/Image
> >
> > Guide:
> >  https://github.com/ebijun/NetBSD/blob/master/Guide/hpcmips.rst
> >
> > --
> > Jun Ebihara
> >
> > _______________________________________________
> > talk mailing list
> > talk at lists.nycbug.org
> > http://lists.nycbug.org/mailman/listinfo/talk
> >
>
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
>



-- 
Nobody's ever lost in life...they're merely taking the scenic route.
==============================
Please avoid sending me Word or PowerPoint attachments.
See http://www.gnu.org/philosophy/no-word-attachments.html
==============================
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1.2
GCS/S/M/MU d- s+: a37 C++(+++) UL++++>$ P++ L+++ E+ W+ N+ o+ K++ w--- O-
M !V PS+ PE Y+ PGP(+) t+ 5++ X++ R tv b+++ DI+++ D++(---) G++ e+ h-
r++ y+
------END GEEK CODE BLOCK------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20170331/2f013d0b/attachment.htm>

From venture37 at geeklan.co.uk  Fri Mar 31 11:25:48 2017
From: venture37 at geeklan.co.uk (Sevan Janiyan)
Date: Fri, 31 Mar 2017 16:25:48 +0100
Subject: [talk] Fwd: 2017-03-25-netbsd-hpcmips.img
In-Reply-To: <CA+TaHT239Hu_J9mVsekf-+c7wzs3bHHQzrn9ymbzLMV4jvuPWg@mail.gmail.com>
References: <20170330.230319.203573543282020634.jun@soum.co.jp>
 <5c8e5de5-893e-1a06-efed-a72039190c2a@geeklan.co.uk>
 <a965c6aa-a249-3693-60c8-3721f9c1deab@ceetonetechnology.com>
 <CA+TaHT239Hu_J9mVsekf-+c7wzs3bHHQzrn9ymbzLMV4jvuPWg@mail.gmail.com>
Message-ID: <50451b1b-7da0-98f3-29f7-10273612ce47@geeklan.co.uk>



On 31/03/2017 16:22, Robert Menes wrote:
> I've wanted to make 2 partitions on a CF card (one FAT16 for WinCE and
> one I will dd
> the new hpcmips image to), but am not certain if this will work. Will
> test with latest
>  kernel and hpcboot.

I think Jun's image has everything you need. Just dd the image (it
contains 2 partitions already).

Sevan



From pooka at iki.fi  Fri Mar 31 11:25:51 2017
From: pooka at iki.fi (Antti Kantee)
Date: Fri, 31 Mar 2017 15:25:51 +0000
Subject: [talk] a Guardian article
In-Reply-To: <a4bcae81-4302-c944-b521-a209188411c1@ceetonetechnology.com>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
 <4312d454-8081-6884-1958-2e2eb8eed944@iki.fi>
 <5E9DCFF7-328F-4C00-875F-75550CDBCD9F@bway.net>
 <41c96554-e9e3-758e-522d-e0f9a5446454@riseup.net>
 <6baf995a-9a88-b32d-e752-6daa5c64cba5@ceetonetechnology.com>
 <3804711a-d2cd-7988-69a8-afdd0883f31c@iki.fi>
 <a4bcae81-4302-c944-b521-a209188411c1@ceetonetechnology.com>
Message-ID: <11dcae0a-9513-0a8a-3fff-a70d19f23916@iki.fi>

On 31/03/17 15:05, George Rosamond wrote:
>> Well, if the attack is the ISP looking at your traffic, generating a
>> profile, and selling that to advertisers (or who knows where), and fake
>> traffic is the countermeasure, then fake traffic should somehow prevent
>> the attack from happening.  In other words, the traffic should look like
>> a handful of people browsing, but be "all over the place" so as to
>> prevent profiling -- e.g. generate traffic both to fox news and msnbc
>> and also somewhere else for actual news.
>
> First, I'm not sure if generating fake traffic is necessarily the best
> mitigation to surveillance. It would need to be sufficiently randomized
> to not be clearly segmented as "fake".

I'd say it needs to be sufficiently *non*-randomized.  typo?

> It would seem the best countermeasure to ISP surveillance is using HTTPS
> for www browsing if you're concerned about content, although obviously
> the meta-data (source, destination, when, from where, etc) isn't hidden.
>
> If you're just looking at mitigating surveillance and your sole
> adversary is the ISP, then Tor for all TCP traffic makes sense,
> including IMAP and SSH. An alternative is certainly VPNs in this case,
> although then if you're using a provider, you're now concentrating all
> traffic you're attempting to hide with one choke-point.

End-to-end encryption where possible is of course a given, but in this 
case I'm not trying to hide who I am -- the ISP already knows where I 
live.  Like fake news is not about keeping things confidential -- 
something will leak anyway -- neither is fake traffic.  It's about 
giving the adversary much to choose from, in which case they tend to 
choose whatever suits their purposes.



From george at ceetonetechnology.com  Fri Mar 31 11:56:00 2017
From: george at ceetonetechnology.com (George Rosamond)
Date: Fri, 31 Mar 2017 15:56:00 +0000
Subject: [talk] a Guardian article
In-Reply-To: <11dcae0a-9513-0a8a-3fff-a70d19f23916@iki.fi>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
 <4312d454-8081-6884-1958-2e2eb8eed944@iki.fi>
 <5E9DCFF7-328F-4C00-875F-75550CDBCD9F@bway.net>
 <41c96554-e9e3-758e-522d-e0f9a5446454@riseup.net>
 <6baf995a-9a88-b32d-e752-6daa5c64cba5@ceetonetechnology.com>
 <3804711a-d2cd-7988-69a8-afdd0883f31c@iki.fi>
 <a4bcae81-4302-c944-b521-a209188411c1@ceetonetechnology.com>
 <11dcae0a-9513-0a8a-3fff-a70d19f23916@iki.fi>
Message-ID: <b568dddd-eb7a-a61c-ee5b-480e39475752@ceetonetechnology.com>

Antti Kantee:
> On 31/03/17 15:05, George Rosamond wrote:
>>> Well, if the attack is the ISP looking at your traffic, generating a
>>> profile, and selling that to advertisers (or who knows where), and fake
>>> traffic is the countermeasure, then fake traffic should somehow prevent
>>> the attack from happening.  In other words, the traffic should look like
>>> a handful of people browsing, but be "all over the place" so as to
>>> prevent profiling -- e.g. generate traffic both to fox news and msnbc
>>> and also somewhere else for actual news.
>>
>> First, I'm not sure if generating fake traffic is necessarily the best
>> mitigation to surveillance. It would need to be sufficiently randomized
>> to not be clearly segmented as "fake".
> 
> I'd say it needs to be sufficiently *non*-randomized.  typo?
> 

Understood. You were clear about that.... but responding more below.

>> It would seem the best countermeasure to ISP surveillance is using HTTPS
>> for www browsing if you're concerned about content, although obviously
>> the meta-data (source, destination, when, from where, etc) isn't hidden.
>>
>> If you're just looking at mitigating surveillance and your sole
>> adversary is the ISP, then Tor for all TCP traffic makes sense,
>> including IMAP and SSH. An alternative is certainly VPNs in this case,
>> although then if you're using a provider, you're now concentrating all
>> traffic you're attempting to hide with one choke-point.
> 
> End-to-end encryption where possible is of course a given, but in this
> case I'm not trying to hide who I am -- the ISP already knows where I
> live.  Like fake news is not about keeping things confidential --
> something will leak anyway -- neither is fake traffic.  It's about
> giving the adversary much to choose from, in which case they tend to
> choose whatever suits their purposes.

I agree that separate from end-to-end encryption, customized 'white
noise' can be useful mitigation but the specs of such a solution matter.

Ike had a story about Russian mitigation of German radio surveillance
during WWII. The Russians had numbers and relied on that for their
solution. *Everyone* spoke on the wire, about *everything*. The weather,
the latest radio broadcast performances, their kids' birthdays... and
since German radio surveillance relied upon individuals who could
understand Russian, the volume was beyond their capacity. The German
surveillance solution couldn't scale. Meanwhile, unencrypted high-value
communications continued in this large pool of noise.

Apparently this tactic continued well into the Cold War against US
surveillance.

The difference today is scaling. Digitized communications are easier to
collect in volume, and to store and process, without relying on
individuals to listen-in.

Digital surveillance can also more easily parse and discover anomalies
in  the traffic. And then it can be correlated with cell phone traffic, etc.

Your local ISP surveillance device says: "I am watching lots of traffic,
and while I see the usual queries to the news www sites, I also see that
they are accessing Chase bank on the first of each month."

The point is white noise needs to be customized insofar as anomalies
can't be easily identified.  It has to be lots of banks that are
accessed, including (you) the target's own banks, at regular sloppy
intervals.

Of course, this is assuming a level of sophistication in terms of
surveillance processing... but who really knows today.

I would just run a Tor bridge at home to make your traffic sloppier, and
in the process you're also helping censored internet users around the
world :)

g



From pooka at iki.fi  Fri Mar 31 12:32:39 2017
From: pooka at iki.fi (Antti Kantee)
Date: Fri, 31 Mar 2017 16:32:39 +0000
Subject: [talk] a Guardian article
In-Reply-To: <b568dddd-eb7a-a61c-ee5b-480e39475752@ceetonetechnology.com>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
 <4312d454-8081-6884-1958-2e2eb8eed944@iki.fi>
 <5E9DCFF7-328F-4C00-875F-75550CDBCD9F@bway.net>
 <41c96554-e9e3-758e-522d-e0f9a5446454@riseup.net>
 <6baf995a-9a88-b32d-e752-6daa5c64cba5@ceetonetechnology.com>
 <3804711a-d2cd-7988-69a8-afdd0883f31c@iki.fi>
 <a4bcae81-4302-c944-b521-a209188411c1@ceetonetechnology.com>
 <11dcae0a-9513-0a8a-3fff-a70d19f23916@iki.fi>
 <b568dddd-eb7a-a61c-ee5b-480e39475752@ceetonetechnology.com>
Message-ID: <3a979b30-744d-6bae-0519-934eb85d16a0@iki.fi>

On 31/03/17 15:56, George Rosamond wrote:
> Ike had a story about Russian mitigation of German radio surveillance
> during WWII. The Russians had numbers and relied on that for their
> solution. *Everyone* spoke on the wire, about *everything*. The weather,
> the latest radio broadcast performances, their kids' birthdays... and
> since German radio surveillance relied upon individuals who could
> understand Russian, the volume was beyond their capacity. The German
> surveillance solution couldn't scale. Meanwhile, unencrypted high-value
> communications continued in this large pool of noise.
>
> Apparently this tactic continued well into the Cold War against US
> surveillance.
>
> The difference today is scaling. Digitized communications are easier to
> collect in volume, and to store and process, without relying on
> individuals to listen-in.

Nice story.  I assume they were talking about the weather etc. because 
everyone is not capable of creating believable military-like traffic. 
Since everyone can listen now, like we've been discussing, the key is to 
figuring out how to generate military-like traffic instead of just 
birthdays and the rainy weather.

> Digital surveillance can also more easily parse and discover anomalies
> in  the traffic. And then it can be correlated with cell phone traffic, etc.

That's just one more reason why my cell phones only do voice/sms, and 
why I don't really carry them around all that often.  (well, the real 
reason is that I don't get disturbed very often that way)

> Your local ISP surveillance device says: "I am watching lots of traffic,
> and while I see the usual queries to the news www sites, I also see that
> they are accessing Chase bank on the first of each month."

That's the computer science solution to figuring out which bank we use. 
The [computer] engineering solution would be for the ISP to look at the 
check.

> The point is white noise needs to be customized insofar as anomalies
> can't be easily identified.  It has to be lots of banks that are
> accessed, including (you) the target's own banks, at regular sloppy
> intervals.

Maybe the solution is to feed normal traffic into some machine learning 
algorithm?  I've been wanting to do machine learning anyway, here's a 
nice itch to [not] scratch.



From bobleigh at twomeeps.com  Fri Mar 31 13:17:53 2017
From: bobleigh at twomeeps.com (Bob Leigh)
Date: Fri, 31 Mar 2017 13:17:53 -0400
Subject: [talk] a Guardian article
In-Reply-To: <3a979b30-744d-6bae-0519-934eb85d16a0@iki.fi>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
 <4312d454-8081-6884-1958-2e2eb8eed944@iki.fi>
 <5E9DCFF7-328F-4C00-875F-75550CDBCD9F@bway.net>
 <41c96554-e9e3-758e-522d-e0f9a5446454@riseup.net>
 <6baf995a-9a88-b32d-e752-6daa5c64cba5@ceetonetechnology.com>
 <3804711a-d2cd-7988-69a8-afdd0883f31c@iki.fi>
 <a4bcae81-4302-c944-b521-a209188411c1@ceetonetechnology.com>
 <11dcae0a-9513-0a8a-3fff-a70d19f23916@iki.fi>
 <b568dddd-eb7a-a61c-ee5b-480e39475752@ceetonetechnology.com>
 <3a979b30-744d-6bae-0519-934eb85d16a0@iki.fi>
Message-ID: <CAKbQ-o4dZSdcCkLraDpdLV6+MtmD08UC34=s3ak3+-XBO461ag@mail.gmail.com>

On Fri, Mar 31, 2017 at 12:32 PM, Antti Kantee <pooka at iki.fi> wrote:

>  I assume they were talking about the weather etc. because everyone is not
> capable of creating believable military-like traffic. Since everyone can
> listen now, like we've been discussing, the key is to figuring out how to
> generate military-like traffic instead of just birthdays and the rainy
> weather.


Don't forget Clifford Stoll in "The Cuckoo's Egg":

"Vell, you see, zee spy from Hannover seeks ze secret information, yes?"
 Martha said.  "We give him just vhat he vants -- secret military spy
secret.  Lots of zem.  Oodles of secrets."

"Tell me, Natyasha dahlink, zees secrets, vhere shall ve get them from?  Ve
don't know any military secrets."

"Ve make them up, Boris!"


So history DOES repeat itself!

  ----
Bob Leigh
Cambridge, MA
bobleigh at twomeeps.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20170331/58b20dc8/attachment.htm>

From pvarga at pvrg.net  Fri Mar 31 13:20:47 2017
From: pvarga at pvrg.net (Peter Varga)
Date: Fri, 31 Mar 2017 13:20:47 -0400
Subject: [talk] a Guardian article
In-Reply-To: <3a979b30-744d-6bae-0519-934eb85d16a0@iki.fi>
References: <e1f7010a-40d3-7304-fd9d-701dd254eaef@ceetonetechnology.com>
 <4312d454-8081-6884-1958-2e2eb8eed944@iki.fi>
 <5E9DCFF7-328F-4C00-875F-75550CDBCD9F@bway.net>
 <41c96554-e9e3-758e-522d-e0f9a5446454@riseup.net>
 <6baf995a-9a88-b32d-e752-6daa5c64cba5@ceetonetechnology.com>
 <3804711a-d2cd-7988-69a8-afdd0883f31c@iki.fi>
 <a4bcae81-4302-c944-b521-a209188411c1@ceetonetechnology.com>
 <11dcae0a-9513-0a8a-3fff-a70d19f23916@iki.fi>
 <b568dddd-eb7a-a61c-ee5b-480e39475752@ceetonetechnology.com>
 <3a979b30-744d-6bae-0519-934eb85d16a0@iki.fi>
Message-ID: <1490980847.3211557.930110800.0699DF38@webmail.messagingengine.com>



On Fri, Mar 31, 2017, at 12:32, Antti Kantee wrote:
> On 31/03/17 15:56, George Rosamond wrote:
> > Ike had a story about Russian mitigation of German radio surveillance
> > during WWII. The Russians had numbers and relied on that for their
> > solution. *Everyone* spoke on the wire, about *everything*. The weather,
> > the latest radio broadcast performances, their kids' birthdays... and
> > since German radio surveillance relied upon individuals who could
> > understand Russian, the volume was beyond their capacity. The German
> > surveillance solution couldn't scale. Meanwhile, unencrypted high-value
> > communications continued in this large pool of noise.
> >
> > Apparently this tactic continued well into the Cold War against US
> > surveillance.
> >
> > The difference today is scaling. Digitized communications are easier to
> > collect in volume, and to store and process, without relying on
> > individuals to listen-in.

Even mid size companies can do on their connections, less data then
tapping the backbones.

> 
> Nice story.  I assume they were talking about the weather etc. because 
> everyone is not capable of creating believable military-like traffic. 
> Since everyone can listen now, like we've been discussing, the key is to 
> figuring out how to generate military-like traffic instead of just 
> birthdays and the rainy weather.

You mean military-grade traffic with all the characteristics of network
traffic.  I parse military-like as in traffic similar to military
traffic.  e.g.: military like vehicle, versus military grade vehicle.

> 
> > Digital surveillance can also more easily parse and discover anomalies
> > in  the traffic. And then it can be correlated with cell phone traffic, etc.
> 
> That's just one more reason why my cell phones only do voice/sms, and 
> why I don't really carry them around all that often.  (well, the real 
> reason is that I don't get disturbed very often that way)
> 
> > Your local ISP surveillance device says: "I am watching lots of traffic,
> > and while I see the usual queries to the news www sites, I also see that
> > they are accessing Chase bank on the first of each month."
> 
> That's the computer science solution to figuring out which bank we use. 
> The [computer] engineering solution would be for the ISP to look at the 
> check.

Adversary knows the date and approximate time is already a help to an
attack, in some case an MITM could work.  As happened before many many
years ago, certain routers at big ISPs would send out spam for say an
hour, inside job.

> 
> > The point is white noise needs to be customized insofar as anomalies
> > can't be easily identified.  It has to be lots of banks that are
> > accessed, including (you) the target's own banks, at regular sloppy
> > intervals.
> 
> Maybe the solution is to feed normal traffic into some machine learning 
> algorithm?  I've been wanting to do machine learning anyway, here's a 
> nice itch to [not] scratch.

Yes, it is a solution, that works.  This should have its own thread. 
:-)

> 
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk



From george at ceetonetechnology.com  Fri Mar 31 15:53:00 2017
From: george at ceetonetechnology.com (George Rosamond)
Date: Fri, 31 Mar 2017 19:53:00 +0000
Subject: [talk] Fwd: 2017-03-25-netbsd-hpcmips.img
In-Reply-To: <50451b1b-7da0-98f3-29f7-10273612ce47@geeklan.co.uk>
References: <20170330.230319.203573543282020634.jun@soum.co.jp>
 <5c8e5de5-893e-1a06-efed-a72039190c2a@geeklan.co.uk>
 <a965c6aa-a249-3693-60c8-3721f9c1deab@ceetonetechnology.com>
 <CA+TaHT239Hu_J9mVsekf-+c7wzs3bHHQzrn9ymbzLMV4jvuPWg@mail.gmail.com>
 <50451b1b-7da0-98f3-29f7-10273612ce47@geeklan.co.uk>
Message-ID: <baae2727-da3d-437b-3858-833ea9252b65@ceetonetechnology.com>

Sevan Janiyan:
> 
> 
> On 31/03/2017 16:22, Robert Menes wrote:
>> I've wanted to make 2 partitions on a CF card (one FAT16 for WinCE and
>> one I will dd
>> the new hpcmips image to), but am not certain if this will work. Will
>> test with latest
>>  kernel and hpcboot.
> 
> I think Jun's image has everything you need. Just dd the image (it
> contains 2 partitions already).

Yes... Jun made this as idiot-proof as possible.  Real straight-forward.

Images like this are a good entry-drug IMHO.  With FreeBSD's crochet
which was originally a script for BeagleBone image create, it was
amazingly fun to toy with and tweak images. But with FreeBSD now
generating various arm images, it probably increased the user-base
enormously.

g



From george at ceetonetechnology.com  Fri Mar 31 15:57:00 2017
From: george at ceetonetechnology.com (George Rosamond)
Date: Fri, 31 Mar 2017 19:57:00 +0000
Subject: [talk] Fwd: 2017-03-25-netbsd-hpcmips.img
In-Reply-To: <b7ac4e7b-c632-6010-5915-a4e5e189551c@geeklan.co.uk>
References: <20170330.230319.203573543282020634.jun@soum.co.jp>
 <5c8e5de5-893e-1a06-efed-a72039190c2a@geeklan.co.uk>
 <a965c6aa-a249-3693-60c8-3721f9c1deab@ceetonetechnology.com>
 <20170331.104433.1823426464978073915.jun@soum.co.jp>
 <4bff576c-13e0-959f-4dd4-cd3182faec92@ceetonetechnology.com>
 <b7ac4e7b-c632-6010-5915-a4e5e189551c@geeklan.co.uk>
Message-ID: <6fed77f5-7af0-6de7-25a8-e105ee65edb4@ceetonetechnology.com>

Sevan Janiyan:
> Hello,
> 
> On 31/03/2017 14:03, George Rosamond wrote:
>>> tpctl means "touch panel control", special setting for 
>>> hpcmips/arm/sh. I'll make comment out next hpcmips image.
>> 
>> There's touch panel control support on the WorkPad?  That confused 
>> me...
> 
> No, there are other devices supported in the hpcmips port which do 
> however http://wiki.netbsd.org/ports/hpcmips/supported_machines/

Ah, got it.

> 
>>>> I would love to upload a dmesg to dmesgd.nycbug.org for it... 
>>>> but since the wi(4) driver for my wireless PCMCIA cards isn't 
>>>> included in this image, and there's no ethernet, no USB..  I 
>>>> have to get a NetBSD box up to mount the CF card to post it.
>>> 
>>> What kind of card you have? give me some infomation to
>>> re-compile kernel.
>>> 
>> 
>> :)
>> 
>> I have three cards donated by other NYC*BUG people.
>> 
>> * rtw (on OpenBSD) Realtek 8180 RTL8180F which is a Linksys
>> 802.11b card
>> 
>> * another Realtek 8185 which uses re(4) I think.  It's from Encore
>>  Electronics
>> 
>> * then the closest to wokring is the wi(4) from Microsoft MN-520 
>> which I think requires firmware.  ISL3873 PRISM2.5
>> 
>> Huge thanks if you could add any of those drivers in... it saves
>> me from having to cross-compile on some other ancient hardware.
> 
> The only cards which will work on a device of this vintage is PCMCIA
>  cards (ISA in Card form factor), more recent Cardbus cards (PCI in 
> Card form factor) wont.
> 
> You can distinguish the two types by the presence of the gold strip 
> above the connector. That means the card is of a cardbus type & wont
>  work. eg 
> https://upload.wikimedia.org/wikipedia/commons/d/df/XJACK_network_card_extended.jpg
>

Yup.
> 
Got it.

> 
< wont work.
> 
> rtw & re are pci devices. :(
> 
> How about a nice ne(4) device instead? (any 10Mbps PCMCIA card, some
>  100Mbps PCMCIA cards). All supported wifi cards should be compiled 
> in, I think.
> 
> What do you need to do to get the Microsoft card working usually?
> 

I have those three cards... just need the wi(4) driver for the Microsoft
MN-520 card, which is the only ISA format one I have.

>>>> Sorry for combining a how-to with a mention of the 
>>>> tpctl-induced headache...
>>> 
>>> yup!thanx for your report.
>> 
>> Thank you for making this easy without having to cross-compile.
>> 
>> Not quite sure how I'm going to use this.. but I'm positive I wont 
>> build perl from source like Sevan :)
> 
> Dedicated awk workstation? :D or Implement: 
> https://www.netbsd.org/gallery/presentations/riastradh/asiabsdcon2015/pkgsrc-cross-paper.pdf
>

ha!  "And this is my computer just for sed and awk" is a tough line to
justify a square foot in NYC's real estate climate!

>
> 
>> Any ideas on using resize_ffs(8) besides doing from another NetBSD 
>> box?
> 
> Can you use the following rc script? (normally 
> http://cvsweb.netbsd.org/bsdweb.cgi/src/distrib/utils/embedded/files/resize_disklabel?rev=1.1&content-type=text/x-cvsweb-markup&only_with_tag=MAIN
>

Cool.

I'll check that out later.

Huge thanks Sevan and Jun.

g



From george at ceetonetechnology.com  Fri Mar 31 16:17:00 2017
From: george at ceetonetechnology.com (George Rosamond)
Date: Fri, 31 Mar 2017 20:17:00 +0000
Subject: [talk] NYC*BUG Upcoming, including April 5 on yes.c
Message-ID: <43557a6f-48b7-5ede-e75f-f5870bff4899@ceetonetechnology.com>

A bunch of upcoming meetings and BSD Cons upcoming:

Getting to yes.c, Mike Burns
Wednesday, April 5, 18:45, LMHQ, 150 Broadway, 20th Floor, Manhattan
Notice: Location Change

Let's read a classic: yes.c. We can look at OpenBSD, FreeBSD, NetBSD,
GNU, Illumos, and Unix 7th ed. implementations. With the many different
authors and distinct cultures we will be sure to have much to discuss
and compare. Some things to think about: what are some uses for the yes
command? What errors can occur, and how are they handled? How did GNU
manage to make this program 88 lines long? How did Illumos get this
program indented by five tabs?

The inspiration is the shared metaphors and expressions we have in
natural language due to common books (e.g. Hitchhiker's Guide to the
Galaxy, Romeo and Juliet) and movies (e.g. Hackers, A Christmas Carol).
Come prepared for a poetry slam crossed with a book club.

Speaker Bio

Mike is an OpenBSD contributor, port maintainer, and long-time BSD user.
He's new to town, having previously run the Classical Code Reading Group
of Stockholm.

*****

Building Open Source Random Number Generators, Rob Seward
Wednesday, May 3, 18:45, LMHQ, 150 Broadway, 20th Floor, Manhattan

*****

BSDCan 2017 in Ottawa, Canada with the conference from June 9-10 and the
tutorials June 7-8.

https://www.bsdcan.org/2017/

****

vBSDCon 2017 has announced its CFP:

Verisign is hosting its 3rd vBSDcon, scheduled for September 8 - 9,
2017, in Reston, VA.  A Call For Presentations is currently open and
submissions are being accepted at vBSDcon.com.  CFP administration is
being conducted through EasyChair, which require accounts to upload
submissions for consideration.  Our call is open through April 30, 2017.
 So get your submissions in soon!

Again, submissions can be made at vBSDcon.com!

*****

EuroBSDCon 2017 has announced its CFP:

On behalf of the EuroBSDCon 2017 Program Committee, here is the Call for
Proposals for the EuroBSDCon 2017 conference which will take place in
Paris, France from 21st through 24th of September 2017:

https://2017.eurobsdcon.org/call-for-proposals/

Closing date for the CfP is April, 30th.



From viewtiful.icchan at gmail.com  Fri Mar 31 17:54:19 2017
From: viewtiful.icchan at gmail.com (Robert Menes)
Date: Fri, 31 Mar 2017 17:54:19 -0400
Subject: [talk] NYC*BUG Upcoming, including April 5 on yes.c
In-Reply-To: <43557a6f-48b7-5ede-e75f-f5870bff4899@ceetonetechnology.com>
References: <43557a6f-48b7-5ede-e75f-f5870bff4899@ceetonetechnology.com>
Message-ID: <CA+TaHT2sKf=mN4sQ69feW6xGeoVe9Pr4PioHVjYSXgk=00EGpg@mail.gmail.com>

I'll be there like shareware! :)

--Robert

On Mar 31, 2017 4:17 PM, "George Rosamond" <george at ceetonetechnology.com>
wrote:

> A bunch of upcoming meetings and BSD Cons upcoming:
>
> Getting to yes.c, Mike Burns
> Wednesday, April 5, 18:45, LMHQ, 150 Broadway, 20th Floor, Manhattan
> Notice: Location Change
>
> Let's read a classic: yes.c. We can look at OpenBSD, FreeBSD, NetBSD,
> GNU, Illumos, and Unix 7th ed. implementations. With the many different
> authors and distinct cultures we will be sure to have much to discuss
> and compare. Some things to think about: what are some uses for the yes
> command? What errors can occur, and how are they handled? How did GNU
> manage to make this program 88 lines long? How did Illumos get this
> program indented by five tabs?
>
> The inspiration is the shared metaphors and expressions we have in
> natural language due to common books (e.g. Hitchhiker's Guide to the
> Galaxy, Romeo and Juliet) and movies (e.g. Hackers, A Christmas Carol).
> Come prepared for a poetry slam crossed with a book club.
>
> Speaker Bio
>
> Mike is an OpenBSD contributor, port maintainer, and long-time BSD user.
> He's new to town, having previously run the Classical Code Reading Group
> of Stockholm.
>
> *****
>
> Building Open Source Random Number Generators, Rob Seward
> Wednesday, May 3, 18:45, LMHQ, 150 Broadway, 20th Floor, Manhattan
>
> *****
>
> BSDCan 2017 in Ottawa, Canada with the conference from June 9-10 and the
> tutorials June 7-8.
>
> https://www.bsdcan.org/2017/
>
> ****
>
> vBSDCon 2017 has announced its CFP:
>
> Verisign is hosting its 3rd vBSDcon, scheduled for September 8 - 9,
> 2017, in Reston, VA.  A Call For Presentations is currently open and
> submissions are being accepted at vBSDcon.com.  CFP administration is
> being conducted through EasyChair, which require accounts to upload
> submissions for consideration.  Our call is open through April 30, 2017.
>  So get your submissions in soon!
>
> Again, submissions can be made at vBSDcon.com!
>
> *****
>
> EuroBSDCon 2017 has announced its CFP:
>
> On behalf of the EuroBSDCon 2017 Program Committee, here is the Call for
> Proposals for the EuroBSDCon 2017 conference which will take place in
> Paris, France from 21st through 24th of September 2017:
>
> https://2017.eurobsdcon.org/call-for-proposals/
>
> Closing date for the CfP is April, 30th.
>
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20170331/b7c6fb06/attachment.htm>

From jun at soum.co.jp  Fri Mar 31 19:09:52 2017
From: jun at soum.co.jp (Jun Ebihara)
Date: Sat, 01 Apr 2017 08:09:52 +0900 (JST)
Subject: [talk] Fwd: 2017-03-25-netbsd-hpcmips.img
In-Reply-To: <4bff576c-13e0-959f-4dd4-cd3182faec92@ceetonetechnology.com>
References: <a965c6aa-a249-3693-60c8-3721f9c1deab@ceetonetechnology.com>
 <20170331.104433.1823426464978073915.jun@soum.co.jp>
 <4bff576c-13e0-959f-4dd4-cd3182faec92@ceetonetechnology.com>
Message-ID: <20170401.080952.1256340530233954208.jun@soum.co.jp>

From: George Rosamond <george at ceetonetechnology.com>
Subject: Re: [talk] Fwd: 2017-03-25-netbsd-hpcmips.img
Date: Fri, 31 Mar 2017 13:03:00 +0000

>> tpctl means "touch panel control", special setting for hpcmips/arm/sh.
>> I'll make comment out next hpcmips image.
> There's touch panel control support on the WorkPad?  That confused me...

hpcmips machines except IBM Z50 has touch panel.
So at that time,I can't imagine this situation,IBM Z50 user report to me.

> Also why is $TERM set to wsvt25?  vt220 seems work for me better for the
> screen size.

Switch vt220 to wsvt25 on wscons support comes to hpcmips.I think.

> I have three cards donated by other NYC*BUG people.
> * rtw (on OpenBSD) Realtek 8180 RTL8180F which is a Linksys 802.11b card
> * another Realtek 8185 which uses re(4) I think.  It's from Encore
> Electronics


> * then the closest to wokring is the wi(4) from Microsoft MN-520 which I
> think requires firmware.  ISL3873 PRISM2.5

thanx.

> Huge thanks if you could add any of those drivers in... it saves me from
> having to cross-compile on some other ancient hardware.

try 4 lines on ANY machine you have:
ftp ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-current/tar_files/src.tar.gz
tar xzvf src.tar.gz -C /usr
cd /usr/src
./build.sh -m hpcmips release

> Not quite sure how I'm going to use this.. but I'm positive I wont build
> perl from source like Sevan :)

I try to make 
pkgsrc/x11/mlterm  .. to sixel graphic displayable console
pkgsrc/net/sayaka  .. twitter client.

> Any ideas on using resize_ffs(8) besides doing from another NetBSD box?

connect CF card via USB dongle.
and 
http://wiki.netbsd.org/ports/evbarm/raspberry_pi/
"Growing the root file-system"

--
Jun Ebihara