Skip to content


I’ll take AcceptMutex flock for the WIN!!!

After applying the new Zipit Z2 Userland image created by soundguy, I became interested in trying to get Apache2 running on the Zipit again. I attempted to install apache2 from apt and received this error again: apache2 emerg function not implemented. After some searching, I found out here that this error is related to the Mutex locking system that Apache2 uses, and the error indicates that the mutex method that Apache was using is not supported by the system. From the AcceptMutex documentation on Apache’s site, I found that there are a couple options that you can choose: uslock|pthread|sysvsem|fcntl|flock|os2sem|tpfcore|none|default

So, in /etc/apache2/apache2.conf, I specified the mutex method with this line: AcceptMutex flock

I stopped and started apache2: /etc/init.d/apache2 stop | /etc/init.d/apache2 start ===> And it worked!

I now have apache2 webserver running on my Zipit.

Next I’m going to try and get some web apps working on it. More to come…

Posted in Zipit.


New Userland on Zipit Z2

After the issues with Apache beat me into submission, I put my Zipit on the shelf for a while to do some other projects. A friend pointed out that Hunter Davis had posted a link to a new Userland image for the Zipit. The pictures impressed me so I took the Zipit off the shelf and loaded up the new userland image. The image was created by SoundGuy, who did a great job on this. The new image is very nice and forms well to the Zipit’s screen size. The image boots right into X and it even has a shutdown script. Go here to download the new image.

This new image is starting to get me interested in trying to get Apache working on the Zipit again. I think there will be more to come…

Posted in Zipit.


New version of Ubuntu will use Yahoo for default Firefox Search

I think it’s very apparent that Google is now the biggest threat to all technology services providers and even many application providers. I’ve noticed that many web based applications with searching capabilities are now prompting the user to choose between Bing or Google as the default search engine during a new install. I first noticed this with Firefox. I think Chrome has become a very real threat to Firefox’s longevity in the marketplace. Firefox is forced to make some alliances that you would have never thought of 5 years ago. If you would have told me in 2005 that in 5 years, Firefox will start leaning toward a search engine service that uses Microsoft’s searching services underneath, I would have told you that you’re crazy. Firefox clearly stomped Internet Explorer in the browser wars, but now Mozilla needs to partner up with their competitor just to fend off new up-in-comers (like their previous partner for searching, Google).

Furthermore, since Canonical ‘negotiated a revenue sharing deal with Yahoo.’, this basically means that Microsoft is paying Ubuntu developers for Ubuntu users that switch to Bing. Again, if you would have told me in 2005 that a Linux distro provider will switch to a Microsoft search engine, because Microsoft will pay them for it… Well you get the idea. Click here to read the official announcement on the ubuntu email distribution list.

On a side note, I’ve been talking to friends, family, and colleagues for awhile about the subject that Google is getting “too big”. They have the search engine market, they’re pretty close to being number 1 in the free email/IM market, they’re a major contender in the smartphone market (which will also destroy the GPS market), they own the largest video sharing website (Youtube), one of the largest blogging platforms (Blogger.com), one of (if not the most) popular mapping websites (Google Maps), etc., etc., etc… I don’t need to layout out all of Google’s services to convey my point that they have the largest market share of Business and Consumer Internet services on the Internet. My point is, there needs to be more competition for Google. Competition will usually keep everyone in check.

I’m not the only one that feels this way. On a recent episode of Diggnation, Alex Albrecht tried explaining to Kevin Rose that Google is becoming a monopoly and it’s not good. Not only is Google a monopoly, they are a monopoly with a MASSIVE warchest, capable of literally walking into another industry that they currently have no stake in and take over that industry. Google has the ability to do this by offering the services in the desired industry for free by leveraging Google’s own services in their monopoly and rolling up the new services into their free public services offering. The danger in this is that Google is doing this type of “industry takeover” so well, that most everyone is jumping to Google’s services offering, because Google really is the best and they aggregate EVERYTHING for you. So what happens when a large company like Google runs EVERYTHING, business/consumer/government services that you use in your home, at work, on your cell phone… Well, you really become at the mercy of Google, a very large multinational corporation. Now, this is coming from a person who is a very strong Google user and fan. I use Google, because they really are the best… But, there really needs to be competition in the internet services marketplace. A strong competitor really needs to emerge to keep this whole thing in check. The only one I see right now that stands a chance at competing is Apple, and they’re falling behind quickly…

I guess only time will tell…

Posted in Technology Economics.


Tracking browsers without cookies or IP addresses

Panopticlick a project sponsored by the EFF to research web browser tracking, without using cookies or the visitor’s IP address.  Here is the blog post on the EFF website.  More impressive, here is the math behind the algorithm that the EFF is using for this project.

From the EFF: “When you visit a website, you are allowing that site to access a lot of information about your computer’s configuration. Combined, this information can create a kind of fingerprint — a signature that could be used to identify you and your computer. But how effective would this kind of online tracking be?  EFF is running an experiment to find out.”

Now here’s some data, navigating to Panopticlick with Firefox in both Windows and Linux, my browser was unique out of over 22,000 other people.  That means that I can be uniquely identified just based on the information obtained by my browser when I navigate to a website (not including my IP address or browser cookies).  If I turn off javascript, or use a tool like NoScript, only 1 in 275 browsers have the same fingerprint is mine.  According to InternetWorldStats.Com, there are approximately 1.73 billion users on the internet as of Dec, 2009.  That means that there are approximately 6.29 million internet users in the world using the same user agent as I am when javascript is turned off.  In North America, there are roughly 253 million web users.  That means that are approximately 920,000 users that use the same user agent as I am when javascript is turned off.  Take that information and correlate with the user’s IP address, it appears to be a pretty unique way to identify an individual.

Now the obvious thing to state is that if a person changes computers or configurations change on the computer, the “fingerprint” would change (not making it a true fingerprint, similar to an IP address).  However, as the algorithm points out, if you can equate the information to another piece of identifiable information, the server would be able to identify you.

Posted in Information Security.


PS3 Hacked!

George Hotz aka geohot, known for hacking the Apple iPhone has hacked the Playstation 3.  George announced that he had hacked the PS3 on Friday, January 22nd.  After playing around inside PS3, he decided to release the details of the exploit today so that others can help contribute to what will hopefully become a new up-incoming PS3 hacking scene.

From his blog entry: “Here’s your silver platter: In the interest of openness, I’ve decided to release the exploit. Hopefully, this will ignite the PS3 scene, and you will organize and figure out how to use this to do practical things, like the iPhone when jailbreaks were first released. I have a life to get back to and can’t keep working on this all day and night.”

Here is a link to George Hotz’s blog entry.

Posted in General.


Segment your wireless network

For some reason, I had a delusion that WPA or WPA-2 was a pretty solid protocol for wireless network encryption if using AES as your encryption method (it might still be if you are not using PSK, but WPA-PSK is the default for most wireless routers out of the box).  The only “good” attack that I knew of was the Rainbow tables attack, which was built out of a brute force dictionary attack on common WIFI ESSID names.  For instance, if you use linksys as your ESSID (which is a common default network name for linksys wireless network devices out of the box), then it’s very likely someone could retrieve your PSK by using this attack.

As processors get more powerful, and the price of that computing power goes down, it becomes easier to perform brute force dictionary attacks.  Now with clusters, even easier because you don’t need to have 1 large ultra-expensive super computer, but rather many average/cheap PCs grouped in a cluster to get the same or more processing power.  The result, WPA Cracker.  WPA Cracker claims to be able to crack your WPA-PSK password in about $20 minutes given a WPA handshake capture (which can be captured very easily by aircrack-ng).

Moral of the story: If you want to run wireless, segment your network or use something else rather than WPA-PSK…  Like RADIUS.

More information: Here

Posted in Information Security.


Cell phones with WIFI, no data plan required

For at least the past 2 years now, I’ve been trying to find a good cell phone that has WIFI capabilities, but does not require a data plan for a “reasonable” price. I really thought that this would not be difficult thing to accomplish. However, I still haven’t found this cell phone yet.

To give you some more insight as to why I’m searching for this device, here is some more information that I think would best explain why I’m looking for this functionality in particular: Many have asked me, “Why don’t you want the data plan?” Simple, data plans for cell phones are too expensive (in my opinion), and I’m too cheap to pay for it. A standard everything data plan costs approximately $30 / month for every major carrier that I have seen. That’s $360 per year. I spent less than that on the last desktop and laptop that I purchased (individually, not combined). $360 is probably my tech budget for entire year. As I said, I’m cheap…

Currently, I use Sprint and I have a $150 credit toward a new phone if I sign up to a new 2 year contract with them . So, I called them and asked them if they have a phone that has WIFI capabilities but does not require a data plan. This was my only requirement for a phone. They came back with only one phone, the Samsung Intrepid. The price tag after discounts and rebates, $150. I asked if they had one cheaper, and they said no. So, I called AT&T. According to the customer service rep, AT&T does not carry a phone with WIFI capabilities that does not require a data plan.  I called Verizon and received the same answer.  After some google searching to just make sure, I found that Verizon and AT&T both have an official stance on this, that they require a data plan for smartphone capable devices that they sell through the respective carriers.  US Cellular also has the same policy.

My last hope was T-Mobile.  They currently have 1 phone that has this capability, the Blackberry Pearl.  One problem: According to the user forums, if you don’t hook up the data plan, the Blackberry functions can not be used.  Apparently, they are not programmed to allow usage of these services with a WIFI connection.  WTF…  I understand why there is no push to fix this, because it’s more incentive to force users into paying for a data plan.  But, let’s look at this logically.

Blackberry provides web services for anyone that purchases Blackberry phones right?  By requiring that I pay for a data plan in order to access the service, you are basically imposing a monthly service fee on me.  How come your competitors don’t do this?  If I purchase an Apple iPhone or Apple iPod Touch, all the built-in applications (the app store, itunes, email apps, etc.) all work with a WIFI connection.  They do not require an additional data plan in order to operate them.  I get these services for free as a complement for purchasing the phone that works with these services.   It’s just one more thing that I think will eventually be part of Blackberry’s demise.

To break into my theory about the future of Smartphones, here’s a review (as I see it) of the current companies in the marketplace.  Palm once ruled the smartphone market.  They were the 900 lb. gorilla in the room.  Blackberry comes along with a slick services platform to complement their phone and swiftly start taking away the market share and became the king of the smartphone market.  Then comes along Apple that has an even slicker services platform and starts cleaning up from a different angle: target consumers first and eventually work your way into the businesses.  Now enters Google, with the slickest services platform to date.  As I see it, Apple and Google Android will be the leaders in the marketplace, with Google Android eventually becoming king (unless Apple is smart enough to extend on their services offering to compete with Google).  Palm is dead and Blackberry is quickly bleeding.  Blackberry still has a chance to rebound, but they are making all the wrong decisions.

In addition to the WIFI with no data plan issue, if I want to develop for the Blackberry and have my application in the marketplace, I have to pay an upfront application fee of $250 which is good to publish 5 applications.  Apple charges $99 per year, Android’s is $25, and Palm is free (if you open source the code, $99 otherwise).  Not to mention that Apple and Google Android allow you to price applications for $0.99 (an impulse buy), where Blackberry requires a minimum app amount of $2.99.

Recently on an episode of Diggnation, Kevin Rose and Alex Albrecht talked about how Blackberry is the “battle tested tank” and that most business people prefer it to the Droid or iPhone.  They’re right…  However, this “tank” still releases new models each year that amount to a new coat of paint (buy our new “blue tank”, it’s pre-waxed!).  All the while, the competition is releasing a tank that can fly.  So, the competing tank doesn’t have as heavy armor, and the main turret isn’t as powerful, but it can fly!  The issue is that Blackberry is releasing the same device in a new shell without any innovation (not on the phones or the services as far as I have seen).  Apple and Google Android on the other hand are innovating, with their devices, OS, and services offering.  This is why Blackberry needs to innovate…  or they will die in this battle.

Back to my original issue, for now I’m confined to using 2 separate devices for this WIFI/Smartphone functions and cellular phone services.  grr….  Interestingly enough, from doing research on this topic, it appears I’m not the only one looking for this functionality in a single device.  Which goes into another theory of mine, eventually data plans will become obsolete because there will be WIFI hotspots everywhere.

Posted in General.


The Ultimate Portable Cellphone/Netbook/E-Book Reader/Tablet Mobile Tech Device

I’ve been waiting for it for awhile, and it’s getting closer and closer to arriving, but it’s still not quite there.  So what I’m looking for is an Powerful, thin, lightweight netbook that doubles as a tablet PC and E-Book reader by folding over the LCD.  The tablet component should not require a stylus to use, but it should be available for writing.  The final component to this is attaching your cellphone to it in such a way that if you were to remove your cellphone, all the data/programs/etc. are on the cellphone for easy accessibility on the go.  This device is very close to a reality, but some of the components still haven’t been put together.

At the CES show, there are some devices that are getting EXTREMELY close to this “ultimate mobile tech device”.  IBM Lenovo has a new hybrid device coming out called the Lenovo U1 Tablet Hybrid that is a tablet with a notebook attachment.  Basically, it’s a tablet device that snaps into a notebook shell and becomes a notebook.  The device comes out later sometime in the 2nd half of 2009 and has an estimated price tag around $1,000.  Watch more about it here.

Another device unveiled at the CES show is the enTourage eDGe 2-Screen eBook/Netbook.  It runs Google Android.  Watch more about it here.

Tekzilla reviewed another netbook that has mult-touch LCD screen.  Estimated price is $500.  Watch more about it here.

Posted in General.


Iptables on Zipit

I tried to get iptables running on the Zipit without any luck.  Here is the type of error I get when attempting to run iptables:

FATAL: Module ip_tables not found.
iptables: can't initialize iptables table `nat': iptables who? (do you need to insmod?)

From the research I’ve done, I believe that Aliosa27’s emdebian Zipit image does not have the packages necessary compiled into the kernel of emdebian in order to run iptables.  So, I would need to add the packages and rebuild the kernel.  The problem is, the emdebian image has broken packages and I’m not sure how to fix them.  For instance, when attempting to install build-essential (the package required in order to build debian packages), it reports that g++ is broken and I don’t really know how to fix it.

So, here’s where I’m at.  I want to run iptables on the Zipit.  I can’t run iptables without recompiling the kernel with the appropriate packages to get iptables working.  I can’t recompile the kernel without build-essential.  Installing build-essential throws error, stating that g++ is a broken package.  Therefore, I can’t get iptables running on the Zipit.

To be clear, I don’t know if this is a problem with emdebian or Aliosa27’s image of emdebian.  I’m going to try and do some more discovery to find that out, and hopefully get iptables up and running on the Zipit.

Posted in Zipit.


Google to end China censorship after e-mail breach

Google stops censoring searches in China, may leave after hackers target protesters’ e-mail

Google is threatening to embargo a superpower, in retaliation for an espionage campaign!  This is big news in the politics of technology and is definitely worth noting.  Here is a link to the article on Yahoo! from the AP.

Here is the official statement from Google about the incident.

Here is another article on the subject.

UPDATE – 01/25/2010

- China releases another statement:  “A statement published by the official state news agency from a spokesperson of China’s Ministry of Industry and Information Technology said the “accusation that the Chinese government participated in a cyberattack, either in an explicit or inexplicit way, is groundless and aims to denigrate China.”  Read more here.

- China has not made a REAL move… yet.  This appears to be an unrelated story at the moment, but is interesting to note.  The founders of Google are cashing in more stock.  Actually, enough stock that would giveup the override voting power that they have combined against the other Google shareholders.  Which would essentially mean that they no longer have total control over the company that they founded.  From the article: “Page and Brin, each worth $12 billion, according to Forbes, currently hold 57.7 million shares of Google’s Class B common stock, representing 18% of Google’s outstanding capital stock and 59% of voting power–enough to override the wishes of all other shareholders if they wanted. After completed the planned sale of 10 million shares, they would collectively own 47.7 million shares representing 15% of outstanding capital stock and 48% voting power.”  Read more here.

UPDATE – 01/22/2010

- “We urge the United States to respect the facts and cease using so-called Internet freedom to make groundless accusations against China.”  Strong words from the Chinese foreign ministry site targeted at the US State Department.  Click here to read more.  From what I’ve seen, it appears it’s still a Stalemate between Google and the Chinese government, with words being thrown to and from the respective governments of the US and China.  Google expressed a commitment to continue business operations in China, but under it’s own terms of no restriction and free access to Chinese citizens.  No other actions have been taken.  China, it’s really your move.

UPDATE – 01/18/2010:

- “The Gmail accounts of foreign reporters in at least two news bureaus in Beijing have been hijacked, a journalists’ group in China said Monday.  The news comes just one week after Google said it had been targeted by recent cyberattacks aimed at accessing the Gmail accounts of Chinese human rights activists.”  Read more here.

- China spins news of google threat.  Read more here.  It appears that China has decided to respond to this incident by not responding at all.  Personally, I think that the Chinese government knows that it is receiving a lot of bad press about this incident in the media across the world and they really don’t know how to respond to it.  I think the strategy for China is to sit and wait for a solution to present itself and ignore everything in the meantime.  As time goes on, people will begin to forget about the story and then China can make their move (whatever that is), when the story is “old news”.

- Google Inc. is investigating whether any of its employees in China played a role in facilitating a major cyber attack that prompted a decision to stop censoring its search results in the country.  Read more here.  This headline actually took me a bit by surprise at first.  Since an investigation on the attack had been already been completed and a report was released naming an Internet Explorer vulnerability as the culprit, I assumed that Google had already investigated all possibilities as to how the security breach had occurred.

UPDATE – 01/15/2010:

- “More victims of chinese hacking attacks come forward”.  The article sites that some of the companies hit were: Dow Chemical, Northrop Grumman, Symantec, and Yahoo.  However, most everyone involved is not saying much about the specifics of any attack targeted against them.  Read more here.

- Google moves to use HTTPS by default for their Gmail service.  Google probably should have done this before, but better late then never.  Read more here.

- The U.S. government in an attempt to address the issue, “will be issuing a formal demarche to the Chinese government in Beijing on this issue in the coming days, probably early next week”.  The U.S. government appears to be trying to tiptoe through a minefield on this issue.  I think they don’t want to get involved if they don’t have to (but, my guess is that they will probably be forced to get involved by the Chinese government).  Read more here.

NOTE – 01/15/2010: I’m very intrigued by this whole story regarding the battle between Google and China for a few reasons:

1.) This first time I’ve ever seen a multinational corporation large enough to basically put a trade embargo on a modern day economic superpower… and they did it, after conducting years of business together without any issue that I can remember.

2.) This is the first time I’ve seen this type of story regarding espionage with good evidence to suggest that the parties involved are BOTH government and corporate interests over multiple countries.  If the Chinese government really sanctioned cyber-attacks against large multinational companies, this is a REALLY big deal.

3.) Depending on how this progresses, you could end up seeing some sort of “cyber-cold war” between a modern superpower country and large multinational corporations, which could escalate to the point where it forces the hand of the U.S. government (in which case, things could really get problematic).  We’ll really have to wait and see what happens, but in the meantime, I find this story very interesting to follow.

UPDATE – 01/14/2010:

- The U.S. government is getting involved regarding Google’s claim that multiple companies were targeted in coordinated attacks sanctioned by the Chinese government .  U.S. Secretary of State, Hillary Clinton, is calling for an explanation from China regarding Google’s allegations.  Read more here.

- VeriSign’s iDefense security lab has published a report with technical details regarding the attack.  “The source IPs and drop server of the attack correspond to a single foreign entity consisting either of agents of the Chinese state or proxies thereof,” the report says.  The article can be found here.

Posted in Technology Politics.