1 <?xml version=
"1.0" encoding=
"ISO-8859-1"?>
2 <rss version='
2.0' xmlns:lj='http://www.livejournal.org/rss/lj/
1.0/'
>
4 <title>Petter Reinholdtsen - Entries from October
2013</title>
5 <description>Entries from October
2013</description>
6 <link>http://people.skolelinux.org/pere/blog/
</link>
10 <title>Det er jo makta som er mest sårbar ved massiv overvåkning av Internett
</title>
11 <link>http://people.skolelinux.org/pere/blog/Det_er_jo_makta_som_er_mest_s_rbar_ved_massiv_overv_kning_av_Internett.html
</link>
12 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Det_er_jo_makta_som_er_mest_s_rbar_ved_massiv_overv_kning_av_Internett.html
</guid>
13 <pubDate>Sat,
26 Oct
2013 20:
30:
00 +
0200</pubDate>
14 <description><p
>De siste måneders eksponering av
15 <a href=
"http://www.aftenposten.no/nyheter/uriks/Her-er-Edvard-Snowdens-mest-omtalte-avsloringer-
7351734.html
">den
16 totale overvåkningen som foregår i den vestlige verden dokumenterer
17 hvor sårbare vi er
</a
>. Men det slår meg at de som er mest sårbare
18 for dette, myndighetspersoner på alle nivåer, neppe har innsett at de
19 selv er de mest interessante personene å lage profiler på, for å kunne
20 påvirke dem.
</p
>
22 <p
>For å ta et lite eksempel: Stortingets nettsted,
23 <a href=
"http://www.stortinget.no/
">www.stortinget.no
</a
> (og
25 <a href=
">http://data.stortinget.no/
">data.stortinget.no
</a
>),
26 inneholder informasjon om det som foregår på Stortinget, og jeg antar
27 de største brukerne av informasjonen der er representanter og
28 rådgivere på Stortinget. Intet overraskende med det. Det som derimot
29 er mer skjult er at Stortingets nettsted bruker
30 <a href=
"http://en.wikipedia.org/wiki/Google_Analytics
">Google
31 Analytics
</a
>, hvilket gjør at enhver som besøker nettsidene der også
32 rapporterer om besøket via Internett-linjer som passerer Sverige,
33 England og videre til USA. Det betyr at informasjon om ethvert besøk
34 på stortingets nettsider kan snappes opp av Svensk, britisk og USAs
35 etterretningsvesen. De kan dermed holde et øye med hvilke
36 Stortingssaker stortingsrepresentantene synes er interessante å sjekke
37 ut, og hvilke sider rådgivere og andre på stortinget synes er
38 interessant å besøke. Stortingets bruk av Google Analytics gjør det
39 dermed enkelt for utenlands etteretning å spore representantenes
40 aktivitet og interesse. Hvis noen av representantene bruker Google
41 Mail eller noen andre tjenestene som krever innlogging, så vil det
42 være enda enklere å finne ut nøyaktig hvilke personer som bruker
43 hvilke nettlesere og dermed knytte informasjonen opp til
44 enkeltpersoner på Stortinget.
</p
>
46 <p
>Og jo flere nettsteder som bruker Google Analytics, jo bedre
47 oversikt over stortingsrepresentantenes lesevaner og interesse blir
48 tilgjengelig for svensk, britisk og USAs etterretning. Hva de kan
49 bruke den informasjonen til overlater jeg til leseren å undres
55 <title>A Raspberry Pi based batman-adv Mesh network node
</title>
56 <link>http://people.skolelinux.org/pere/blog/A_Raspberry_Pi_based_batman_adv_Mesh_network_node.html
</link>
57 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/A_Raspberry_Pi_based_batman_adv_Mesh_network_node.html
</guid>
58 <pubDate>Mon,
21 Oct
2013 11:
40:
00 +
0200</pubDate>
59 <description><p
>The last few days I have been experimenting with
60 <a href=
"http://www.open-mesh.org/projects/batman-adv/wiki
">the
61 batman-adv mech technology
</a
>. I want to gain some experience to see
62 if it will fit
<a href=
"https://wiki.debian.org/FreedomBox
">the
63 Freedombox project
</a
>, and together with my neighbors try to build a
64 mesh network around the park where I live. Batman-adv is a layer
2
65 mesh system (
"ethernet
" in other words), where the mesh network appear
66 as if all the mesh clients are connected to the same switch.
</p
>
68 <p
>My hardware of choice was the Linksys WRT54GL routers I had lying
69 around, but I
've been unable to get them working with batman-adv. So
70 instead, I started playing with a
71 <a href=
"http://www.raspberrypi.org/
">Raspberry Pi
</a
>, and tried to
72 get it working as a mesh node. My idea is to use it to create a mesh
73 node which function as a switch port, where everything connected to
74 the Raspberry Pi ethernet plug is connected (bridged) to the mesh
75 network. This allow me to hook a wifi base station like the Linksys
76 WRT54GL to the mesh by plugging it into a Raspberry Pi, and allow
77 non-mesh clients to hook up to the mesh. This in turn is useful for
78 Android phones using
<a href=
"http://servalproject.org/
">the Serval
79 Project
</a
> voip client, allowing every one around the playground to
80 phone and message each other for free. The reason is that Android
81 phones do not see ad-hoc wifi networks (they are filtered away from
82 the GUI view), and can not join the mesh without being rooted. But if
83 they are connected using a normal wifi base station, they can talk to
84 every client on the local network.
</p
>
86 <p
>To get this working, I
've created a debian package
87 <a href=
"https://github.com/petterreinholdtsen/meshfx-node
">meshfx-node
</a
>
89 <a href=
"https://github.com/petterreinholdtsen/meshfx-node/blob/master/build-rpi-mesh-node
">build-rpi-mesh-node
</a
>
90 to create the Raspberry Pi boot image. I
'm using Debian Jessie (and
91 not Raspbian), to get more control over the packages available.
92 Unfortunately a huge binary blob need to be inserted into the boot
93 image to get it booting, but I
'll ignore that for now. Also, as
94 Debian lack support for the CPU features available in the Raspberry
95 Pi, the system do not use the hardware floating point unit. I hope
96 the routing performance isn
't affected by the lack of hardware FPU
99 <p
>To create an image, run the following with a sudo enabled user
100 after inserting the target SD card into the build machine:
</p
>
103 % wget -O build-rpi-mesh-node \
104 https://raw.github.com/petterreinholdtsen/meshfx-node/master/build-rpi-mesh-node
105 % sudo bash -x ./build-rpi-mesh-node
> build.log
2>&1
106 % dd if=/root/rpi/rpi_basic_jessie_$(date +%Y%m%d).img of=/dev/mmcblk0 bs=
1M
108 </pre
></p
>
110 <p
>Booting with the resulting SD card on a Raspberry PI with a USB
111 wifi card inserted should give you a mesh node. At least it does for
112 me with a the wifi card I am using. The default mesh settings are the
113 ones used by the Oslo mesh project at Hackeriet, as I mentioned in
114 <a href=
"http://people.skolelinux.org/pere/blog/Oslo_community_mesh_network___with_NUUG_and_Hackeriet_at_Hausmania.html
">an
115 earlier blog post about this mesh testing
</a
>.
</p
>
117 <p
>The mesh node was not horribly expensive either. I bought
118 everything over the counter in shops nearby. If I had ordered online
119 from the lowest bidder, the price should be significantly lower:
</p
>
121 <p
><table
>
123 <tr
><th
>Supplier
</th
><th
>Model
</th
><th
>NOK
</th
></tr
>
124 <tr
><td
>Teknikkmagasinet
</td
><td
>Raspberry Pi model B
</td
><td
>349.90</td
></tr
>
125 <tr
><td
>Teknikkmagasinet
</td
><td
>Raspberry Pi type B case
</td
><td
>99.90</td
></tr
>
126 <tr
><td
>Lefdal
</td
><td
>Jensen Air:Link
25150</td
><td
>295.-
</td
></tr
>
127 <tr
><td
>Clas Ohlson
</td
><td
>Kingston
16 GB SD card
</td
><td
>199.-
</td
></tr
>
128 <tr
><td
>Total cost
</td
><td
></td
><td
>943.80</td
></tr
>
130 </table
></p
>
132 <p
>Now my mesh network at home consist of one laptop in the basement
133 connected to my production network, one Raspberry Pi node on the
1th
134 floor that can be seen by my neighbor across the park, and one
135 play-node I use to develop the image building script. And some times
136 I hook up my work horse laptop to the mesh to test it. I look forward
137 to figuring out what kind of latency the batman-adv setup will give,
138 and how much packet loss we will experience around the park. :)
</p
>
143 <title>Perl library to control the Spykee robot moved to github
</title>
144 <link>http://people.skolelinux.org/pere/blog/Perl_library_to_control_the_Spykee_robot_moved_to_github.html
</link>
145 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Perl_library_to_control_the_Spykee_robot_moved_to_github.html
</guid>
146 <pubDate>Sat,
19 Oct
2013 10:
20:
00 +
0200</pubDate>
147 <description><p
>Back in
2010, I created a Perl library to talk to
148 <a href=
"http://en.wikipedia.org/wiki/Spykee
">the Spykee robot
</a
>
149 (with two belts, wifi, USB and Linux) and made it available from my
150 web page. Today I concluded that it should move to a site that is
151 easier to use to cooperate with others, and moved it to github. If
152 you got a Spykee robot, you might want to check out
153 <a href=
"https://github.com/petterreinholdtsen/libspykee-perl
">the
154 libspykee-perl github repository
</a
>.
</p
>
159 <title>Good causes: Debian Outreach Program for Women, EFF documenting the spying and Open access in Norway
</title>
160 <link>http://people.skolelinux.org/pere/blog/Good_causes__Debian_Outreach_Program_for_Women__EFF_documenting_the_spying_and_Open_access_in_Norway.html
</link>
161 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Good_causes__Debian_Outreach_Program_for_Women__EFF_documenting_the_spying_and_Open_access_in_Norway.html
</guid>
162 <pubDate>Tue,
15 Oct
2013 21:
30:
00 +
0200</pubDate>
163 <description><p
>The last few days I came across a few good causes that should get
164 wider attention. I recommend signing and donating to each one of
167 <p
>Via
<a href=
"http://www.debian.org/News/weekly/
2013/
18/
">Debian
168 Project News for
2013-
10-
14</a
> I came across the Outreach Program for
169 Women program which is a Google Summer of Code like initiative to get
170 more women involved in free software. One debian sponsor has offered
171 to match
<a href=
"http://debian.ch/opw2013
">any donation done to Debian
172 earmarked
</a
> for this initiative. I donated a few minutes ago, and
173 hope you will to. :)
</p
>
175 <p
>And the Electronic Frontier Foundation just announced plans to
176 create
<a href=
"https://supporters.eff.org/donate/nsa-videos
">video
177 documentaries about the excessive spying
</a
> on every Internet user that
178 take place these days, and their need to fund the work. I
've already
179 donated. Are you next?
</p
>
181 <p
>For my Norwegian audience, the organisation Studentenes og
182 Akademikernes Internasjonale Hjelpefond is collecting signatures for a
183 statement under the heading
184 <a href=
"http://saih.no/Bloggers_United/
">Bloggers United for Open
185 Access
</a
> for those of us asking for more focus on open access in the
186 Norwegian government. So far
499 signatures. I hope you will sign it
192 <title>Oslo community mesh network - with NUUG and Hackeriet at Hausmania
</title>
193 <link>http://people.skolelinux.org/pere/blog/Oslo_community_mesh_network___with_NUUG_and_Hackeriet_at_Hausmania.html
</link>
194 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Oslo_community_mesh_network___with_NUUG_and_Hackeriet_at_Hausmania.html
</guid>
195 <pubDate>Fri,
11 Oct
2013 14:
10:
00 +
0200</pubDate>
196 <description><p
>Wireless mesh networks are self organising and self healing
197 networks that can be used to connect computers across small and large
198 areas, depending on the radio technology used. Normal wifi equipment
199 can be used to create home made radio networks, and there are several
200 successful examples like
201 <a href=
"http://www.freifunk.net/
">Freifunk
</a
> and
202 <a href=
"http://www.awmn.net/
">Athens Wireless Metropolitan Network
</a
>
204 <a href=
"http://en.wikipedia.org/wiki/List_of_wireless_community_networks_by_region#Greece
">wikipedia
205 for a large list
</a
>) around the globe. To give you an idea how it
206 work, check out the nice overview of the Kiel Freifunk community which
207 can be seen from their
208 <a href=
"http://freifunk.in-kiel.de/ffmap/nodes.html
">dynamically
209 updated node graph and map
</a
>, where one can see how the mesh nodes
210 automatically handle routing and recover from nodes disappearing.
211 There is also a small community mesh network group in Oslo, Norway,
212 and that is the main topic of this blog post.
</p
>
214 <p
>I
've wanted to check out mesh networks for a while now, and hoped
215 to do it as part of my involvement with the
<a
216 href=
"http://www.nuug.no/
">NUUG member organisation
</a
> community, and
217 my recent involvement in
218 <a href=
"https://wiki.debian.org/FreedomBox
">the Freedombox project
</a
>
219 finally lead me to give mesh networks some priority, as I suspect a
220 Freedombox should use mesh networks to connect neighbours and family
221 when possible, given that most communication between people are
222 between those nearby (as shown for example by research on Facebook
223 communication patterns). It also allow people to communicate without
224 any central hub to tap into for those that want to listen in on the
225 private communication of citizens, which have become more and more
226 important over the years.
</p
>
228 <p
>So far I have only been able to find one group of people in Oslo
229 working on community mesh networks, over at the hack space
230 <a href=
"http://hackeriet.no/
">Hackeriet
</a
> at Husmania. They seem to
231 have started with some Freifunk based effort using OLSR, called
232 <a href=
"http://oslo.freifunk.net/index.php?title=Main_Page
">the Oslo
233 Freifunk project
</a
>, but that effort is now dead and the people
234 behind it have moved on to a batman-adv based system called
235 <a href=
"http://meshfx.org/trac
">meshfx
</a
>. Unfortunately the wiki
236 site for the Oslo Freifunk project is no longer possible to update to
237 reflect this fact, so the old project page can
't be updated to point to
238 the new project. A while back, the people at Hackeriet invited people
239 from the Freifunk community to Oslo to talk about mesh networks. I
240 came across this video where Hans Jørgen Lysglimt interview the
241 speakers about this talk (from
242 <a href=
"https://www.youtube.com/watch?v=N2Kd7CLkhSY
">youtube
</a
>):
</p
>
244 <p
><iframe width=
"420" height=
"315" src=
"https://www.youtube.com/embed/N2Kd7CLkhSY
" frameborder=
"0" allowfullscreen
></iframe
></p
>
246 <p
>I mentioned OLSR and batman-adv, which are mesh routing protocols.
247 There are heaps of different protocols, and I am still struggling to
248 figure out which one would be
"best
" for some definitions of best, but
249 given that the community mesh group in Oslo is so small, I believe it
250 is best to hook up with the existing one instead of trying to create a
251 completely different setup, and thus I have decided to focus on
252 batman-adv for now. It sure help me to know that the very cool
253 <a href=
"http://www.servalproject.org/
">Serval project in Australia
</a
>
254 is using batman-adv as their meshing technology when it create a self
255 organizing and self healing telephony system for disaster areas and
256 less industrialized communities. Check out this cool video presenting
258 <a href=
"https://www.youtube.com/watch?v=
30qNfzJCQOA
">youtube
</a
>):
</p
>
260 <p
><iframe width=
"560" height=
"315" src=
"https://www.youtube.com/embed/
30qNfzJCQOA
" frameborder=
"0" allowfullscreen
></iframe
></p
>
262 <p
>According to the wikipedia page on
263 <a href=
"http://en.wikipedia.org/wiki/Wireless_mesh_network
">Wireless
264 mesh network
</a
> there are around
70 competing schemes for routing
265 packets across mesh networks, and OLSR, B.A.T.M.A.N. and
266 B.A.T.M.A.N. advanced are protocols used by several free software
267 based community mesh networks.
</p
>
269 <p
>The batman-adv protocol is a bit special, as it provide layer
2
270 (as in ethernet ) routing, allowing ipv4 and ipv6 to work on the same
271 network. One way to think about it is that it provide a mesh based
272 vlan you can bridge to or handle like any other vlan connected to your
273 computer. The required drivers are already in the Linux kernel at
274 least since Debian Wheezy, and it is fairly easy to set up. A
275 <a href=
"http://www.open-mesh.org/projects/batman-adv/wiki/Quick-start-guide
">good
276 introduction
</a
> is available from the Open Mesh project. These are
277 the key settings needed to join the Oslo meshfx network:
</p
>
279 <p
><table
>
280 <tr
><th
>Setting
</th
><th
>Value
</th
></tr
>
281 <tr
><td
>Protocol / kernel module
</td
><td
>batman-adv
</td
></tr
>
282 <tr
><td
>ESSID
</td
><td
>meshfx@hackeriet
</td
></tr
>
283 <td
>Channel / Frequency
</td
><td
>11 /
2462</td
></tr
>
284 <td
>Cell ID
</td
><td
>02:BA:
00:
00:
00:
01</td
>
285 </table
></p
>
287 <p
>The reason for setting ad-hoc wifi Cell ID is to work around bugs
288 in firmware used in wifi card and wifi drivers. (See a nice post from
290 "<a href=
"http://tiebing.blogspot.no/
2009/
12/ad-hoc-cell-splitting-re-post-original.html
">Information
291 about cell-id splitting, stuck beacons, and failed IBSS merges!
</a
>
292 for details.) When these settings are activated and you have some
293 other mesh node nearby, your computer will be connected to the mesh
294 network and can communicate with any mesh node that is connected to
295 any of the nodes in your network of nodes. :)
</p
>
297 <p
>My initial plan was to reuse my old Linksys WRT54GL as a mesh node,
298 but that seem to be very hard, as I have not been able to locate a
299 firmware supporting batman-adv. If anyone know how to use that old
300 wifi access point with batman-adv these days, please let me know.
</p
>
302 <p
>If you find this project interesting and want to join, please join
303 us on IRC, either channel
304 <a href=
"irc://irc.freenode.net/#oslohackerspace
">#oslohackerspace
</a
>
305 or
<a href=
"irc://irc.freenode.net/#nuug
">#nuug
</a
> on
306 irc.freenode.net.
</p
>
308 <p
>While investigating mesh networks in Oslo, I came across an old
309 research paper from the university of Stavanger and Telenor Research
310 and Innovation called
311 <a href=
"http://folk.uio.no/paalee/publications/netrel-egeland-iswcs-
2008.pdf
">The
312 reliability of wireless backhaul mesh networks
</a
> and elsewhere
313 learned that Telenor have been experimenting with mesh networks at
314 Grünerløkka in Oslo. So mesh networks are also interesting for
315 commercial companies, even though Telenor discovered that it was hard
316 to figure out a good business plan for mesh networking and as far as I
317 know have closed down the experiment. Perhaps Telenor or others would
318 be interested in a cooperation?
</p
>
320 <p
><strong
>Update
2013-
10-
12</strong
>: I was just
321 <a href=
"http://lists.alioth.debian.org/pipermail/freedombox-discuss/
2013-October/
005900.html
">told
322 by the Serval project developers
</a
> that they no longer use
323 batman-adv (but are compatible with it), but their own crypto based
324 mesh system.
</p
>
329 <title>Skolelinux / Debian Edu
7.1 install and overview video from Marcelo Salvador
</title>
330 <link>http://people.skolelinux.org/pere/blog/Skolelinux___Debian_Edu_7_1_install_and_overview_video_from_Marcelo_Salvador.html
</link>
331 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Skolelinux___Debian_Edu_7_1_install_and_overview_video_from_Marcelo_Salvador.html
</guid>
332 <pubDate>Tue,
8 Oct
2013 17:
10:
00 +
0200</pubDate>
333 <description><p
>The other day I was pleased and surprised to discover that Marcelo
334 Salvador had published a
335 <a href=
"https://www.youtube.com/watch?v=w-GgpdqgLFc
">video on
336 Youtube
</a
> showing how to install the standalone Debian Edu /
337 Skolelinux profile. This is the profile intended for use at home or
338 on laptops that should not be integrated into the provided network
339 services (no central home directory, no Kerberos / LDAP directory etc,
340 in other word a single user machine). The result is
11 minutes long,
341 and show some user applications (seem to be rather randomly picked).
342 Missed a few of my favorites like celestia, planets and chromium
343 showing the
<a href=
"http://www.zygotebody.com/
">Zygote Body
3D model
344 of the human body
</a
>, but I guess he did not know about those or find
345 other programs more interesting. :) And the video do not show the
346 advantages I believe is one of the most valuable featuers in Debian
347 Edu, its central school server making it possible to run hundreds of
348 computers without hard drives by installing one central
349 <a href=
"http://www.ltsp.org/
">LTSP server
</a
>.
</p
>
351 <p
>Anyway, check out the video, embedded below and linked to above:
</p
>
353 <iframe width=
"420" height=
"315" src=
"http://www.youtube.com/embed/w-GgpdqgLFc
" frameborder=
"0" allowfullscreen
></iframe
>
355 <p
>Are there other nice videos demonstrating Skolelinux? Please let
356 me know. :)
</p
>