Generated.

[homepage.git] / blog / index.rss

diff --git a/blog/index.rss b/blog/index.rss
index 05deae8cae3d3ae688fa0c51939c4a7b5b683f3f..bc37987b615fb34478852503c85f8e3c0b278540 100644 (file)
--- a/blog/index.rss
+++ b/blog/index.rss
@@ -7,621 +7,706 @@
                 <atom:link href="http://people.skolelinux.org/pere/blog/index.rss" rel="self" type="application/rss+xml" />
        
        <item>
                 <atom:link href="http://people.skolelinux.org/pere/blog/index.rss" rel="self" type="application/rss+xml" />
        
        <item>

-               <title>Visualizing GSM radio chatter using gr-gsm and Hopglass</title>
-               <link>http://people.skolelinux.org/pere/blog/Visualizing_GSM_radio_chatter_using_gr_gsm_and_Hopglass.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Visualizing_GSM_radio_chatter_using_gr_gsm_and_Hopglass.html</guid>
-                <pubDate>Fri, 29 Sep 2017 10:30:00 +0200</pubDate>
-               <description>&lt;p&gt;Every mobile phone announce its existence over radio to the nearby
-mobile cell towers.  And this radio chatter is available for anyone
-with a radio receiver capable of receiving them.  Details about the
-mobile phones with very good accuracy is of course collected by the
-phone companies, but this is not the topic of this blog post.  The
-mobile phone radio chatter make it possible to figure out when a cell
-phone is nearby, as it include the SIM card ID (IMSI).  By paying
-attention over time, one can see when a phone arrive and when it leave
-an area.  I believe it would be nice to make this information more
-available to the general public, to make more people aware of how
-their phones are announcing their whereabouts to anyone that care to
-listen.&lt;/p&gt;
-
-&lt;p&gt;I am very happy to report that we managed to get something
-visualizing this information up and running for
-&lt;a href=&quot;http://norwaymakers.org/osf17&quot;&gt;Oslo Skaperfestival 2017&lt;/a&gt;
-(Oslo Makers Festival) taking place today and tomorrow at Deichmanske
-library.  The solution is based on the
-&lt;a href=&quot;http://people.skolelinux.org/pere/blog/Easier_recipe_to_observe_the_cell_phones_around_you.html&quot;&gt;simple
-recipe for listening to GSM chatter&lt;/a&gt; I posted a few days ago, and
-will show up at the stand of &lt;a href=&quot;http://sonen.ifi.uio.no/&quot;&gt;Åpen
-Sone from the Computer Science department of the University of
-Oslo&lt;/a&gt;.  The presentation will show the nearby mobile phones (aka
-IMSIs) as dots in a web browser graph, with lines to the dot
-representing mobile base station it is talking to. It was working in
-the lab yesterday, and was moved into place this morning.&lt;/p&gt;
-
-&lt;p&gt;We set up a fairly powerful desktop machine using Debian
-Buster/Testing with several (five, I believe) RTL2838 DVB-T receivers
-connected and visualize the visible cell phone towers using an
-&lt;a href=&quot;https://github.com/marlow925/hopglass&quot;&gt;English version of
-Hopglass&lt;/a&gt;.  A fairly powerfull machine is needed as the
-grgsm_livemon_headless processes from
-&lt;a href=&quot;https://tracker.debian.org/pkg/gr-gsm&quot;&gt;gr-gsm&lt;/a&gt; converting
-the radio signal to data packages is quite CPU intensive.&lt;/p&gt;
-                                       
-&lt;p&gt;The frequencies to listen to, are identified using a slightly
-patched scan-and-livemon (to set the --args values for each receiver),
-and the Hopglass data is generated using the
-&lt;a href=&quot;https://github.com/petterreinholdtsen/IMSI-catcher/tree/meshviewer-output&quot;&gt;patches
-in my meshviewer-output branch&lt;/a&gt;.  For some reason we could not get
-more than four SDRs working.  There is also a geographical map trying
-to show the location of the base stations, but I believe their
-coordinates are hardcoded to some random location in Germany, I
-believe.  The code should be replaced with code to look up location in
-a text file, a sqlite database or one of the online databases
-mentioned in
-&lt;a href=&quot;https://github.com/Oros42/IMSI-catcher/issues/14&quot;&gt;the github
-issue for the topic&lt;/a&gt;.
-
-&lt;p&gt;If this sound interesting, visit the stand at the festival!&lt;/p&gt;
-</description>
-       </item>
-       
-       <item>
-               <title>Easier recipe to observe the cell phones around you</title>
-               <link>http://people.skolelinux.org/pere/blog/Easier_recipe_to_observe_the_cell_phones_around_you.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Easier_recipe_to_observe_the_cell_phones_around_you.html</guid>
-                <pubDate>Sun, 24 Sep 2017 08:30:00 +0200</pubDate>
-               <description>&lt;p&gt;A little more than a month ago I wrote
-&lt;a href=&quot;http://people.skolelinux.org/pere/blog/Simpler_recipe_on_how_to_make_a_simple__7_IMSI_Catcher_using_Debian.html&quot;&gt;how
-to observe the SIM card ID (aka IMSI number) of mobile phones talking
-to nearby mobile phone base stations using Debian GNU/Linux and a
-cheap USB software defined radio&lt;/a&gt;, and thus being able to pinpoint
-the location of people and equipment (like cars and trains) with an
-accuracy of a few kilometer.  Since then we have worked to make the
-procedure even simpler, and it is now possible to do this without any
-manual frequency tuning and without building your own packages.&lt;/p&gt;
-
-&lt;p&gt;The &lt;a href=&quot;https://tracker.debian.org/pkg/gr-gsm&quot;&gt;gr-gsm&lt;/a&gt;
-package is now included in Debian testing and unstable, and the
-IMSI-catcher code no longer require root access to fetch and decode
-the GSM data collected using gr-gsm.&lt;/p&gt;
-
-&lt;p&gt;Here is an updated recipe, using packages built by Debian and a git
-clone of two python scripts:&lt;/p&gt;
-
-&lt;ol&gt;
-
-&lt;li&gt;Start with a Debian machine running the Buster version (aka
-  testing).&lt;/li&gt;
-
-&lt;li&gt;Run &#39;&lt;tt&gt;apt install gr-gsm python-numpy python-scipy
-  python-scapy&lt;/tt&gt;&#39; as root to install required packages.&lt;/li&gt;
-
-&lt;li&gt;Fetch the code decoding GSM packages using &#39;&lt;tt&gt;git clone
-  github.com/Oros42/IMSI-catcher.git&lt;/tt&gt;&#39;.&lt;/li&gt;
-
-&lt;li&gt;Insert USB software defined radio supported by GNU Radio.&lt;/li&gt;
-
-&lt;li&gt;Enter the IMSI-catcher directory and run &#39;&lt;tt&gt;python
-  scan-and-livemon&lt;/tt&gt;&#39; to locate the frequency of nearby base
-  stations and start listening for GSM packages on one of them.&lt;/li&gt;
-
-&lt;li&gt;Enter the IMSI-catcher directory and run &#39;&lt;tt&gt;python
-  simple_IMSI-catcher.py&lt;/tt&gt;&#39; to display the collected information.&lt;/li&gt;
-
-&lt;/ol&gt;
-
-&lt;p&gt;Note, due to a bug somewhere the scan-and-livemon program (actually
-&lt;a href=&quot;https://github.com/ptrkrysik/gr-gsm/issues/336&quot;&gt;its underlying
-program grgsm_scanner&lt;/a&gt;) do not work with the HackRF radio.  It does
-work with RTL 8232 and other similar USB radio receivers you can get
-very cheaply
-(&lt;a href=&quot;https://www.ebay.com/sch/items/?_nkw=rtl+2832&quot;&gt;for example
-from ebay&lt;/a&gt;), so for now the solution is to scan using the RTL radio
-and only use HackRF for fetching GSM data.&lt;/p&gt;
-
-&lt;p&gt;As far as I can tell, a cell phone only show up on one of the
-frequencies at the time, so if you are going to track and count every
-cell phone around you, you need to listen to all the frequencies used.
-To listen to several frequencies, use the --numrecv argument to
-scan-and-livemon to use several receivers.  Further, I am not sure if
-phones using 3G or 4G will show as talking GSM to base stations, so
-this approach might not see all phones around you.  I typically see
-0-400 IMSI numbers an hour when looking around where I live.&lt;/p&gt;
-
-&lt;p&gt;I&#39;ve tried to run the scanner on a
-&lt;a href=&quot;https://wiki.debian.org/RaspberryPi&quot;&gt;Raspberry Pi 2 and 3
-running Debian Buster&lt;/a&gt;, but the grgsm_livemon_headless process seem
-to be too CPU intensive to keep up.  When GNU Radio print &#39;O&#39; to
-stdout, I am told there it is caused by a buffer overflow between the
-radio and GNU Radio, caused by the program being unable to read the
-GSM data fast enough.  If you see a stream of &#39;O&#39;s from the terminal
-where you started scan-and-livemon, you need a give the process more
-CPU power.  Perhaps someone are able to optimize the code to a point
-where it become possible to set up RPi3 based GSM sniffers?  I tried
-using Raspbian instead of Debian, but there seem to be something wrong
-with GNU Radio on raspbian, causing glibc to abort().&lt;/p&gt;
+               <title>Retten til kontant betaling er en rettighet som må brukes for å beholdes</title>
+               <link>http://people.skolelinux.org/pere/blog/Retten_til_kontant_betaling_er_en_rettighet_som_m__brukes_for___beholdes.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Retten_til_kontant_betaling_er_en_rettighet_som_m__brukes_for___beholdes.html</guid>
+                <pubDate>Tue, 11 Dec 2018 10:00:00 +0100</pubDate>
+               <description>&lt;p&gt;&lt;a href=&quot;https://www.fn.no/Om-FN/Avtaler/Menneskerettigheter/FNs-verdenserklaering-om-menneskerettigheter&quot;&gt;FNs
+menneskerettighetserklæring&lt;/a&gt; artikkel 13 første punkt lyder som
+følger:&lt;/p&gt;
+
+&lt;p&gt;&lt;blockquote&gt;
+Enhver har rett til å bevege seg fritt og til fritt å velge
+oppholdssted innenfor en stats grenser.
+&lt;/blockquote&gt;&lt;/p&gt;
+
+&lt;p&gt;Det er altså en menneskerett å kunne bevege seg fritt i landet.
+For å bevege seg fritt i landet, så må en kunne bevege seg uten å bli
+sporet.  Det vil i dagens samfunn innebære å bevege seg uten å legge
+igjen digitale spor og uten å være radiomerket.  Hvis en vet at ens
+bevegelser, hvor en befinner seg når, og hvem som befinner seg i
+nærheten, blir samlet inn og gjort tilgjengelig for fremmede, det være
+seg myndighetene eller private organisasjoner, så kan en ikke lenger
+bevege seg fritt.  Dette gjør at det er en forutsetning for å ha glede
+av retten til å bevege seg fritt i landet at en motstår fristelsen til
+å legge igjen digitale spor når en betaler for seg.  Rettigheter som
+ikke blir brukt, blit fjernet.  Den eneste måten i dag å unngå å legge
+igjen digitale spor når en betaler for seg, er å betale med kontanter,
+samt takke nei til å legge igjen navn og adresse (slik f.eks. Elkjøp
+ber om &amp;mdash; jeg sier de kan legge inn &#39;anonym anonym&#39; når
+datasystemet deres trenger et navn).  Personlig anbefaler jeg å
+konsekvent bruke kontant betaling når man beveger seg rundt, for å
+bidra til forsvaret av menneskerettighetene i Norge.  Kanskje noe også
+for deg?  Merk at det ikke er tilstrekkelig for å unngå sporing å
+betale med kontanter, men det er et lite steg i riktig retning.&lt;/p&gt;
+
+&lt;p&gt;Det er flere andre argumenter i tillegg til
+menneskerettighetsargumentet for å bruke kontanter.  I går hadde
+Dagbladet en utmerket kommentar av sin journalist John Olav Egeland om
+hvilket
+&lt;a href=&quot;https://www.dagbladet.no/kultur/kontantlost-diktatur/70543434&quot;&gt;kontantløst
+diktatur&lt;/a&gt; som venter oss hvis mange nok slutter å insistere på å
+betale med kontanter.  Jeg anbefaler deg å lese den.&lt;/p&gt;
+
+&lt;p&gt;Som vanlig, hvis du bruker Bitcoin og ønsker å vise din støtte til
+det jeg driver med, setter jeg pris på om du sender Bitcoin-donasjoner
+til min adresse
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.
+Merk, betaling med bitcoin er ikke anonymt. :)&lt;/p&gt;

 </description>
        </item>
        
        <item>
 </description>
        </item>
        
        <item>

-               <title>Datalagringsdirektivet kaster skygger over Høyre og Arbeiderpartiet</title>
-               <link>http://people.skolelinux.org/pere/blog/Datalagringsdirektivet_kaster_skygger_over_H_yre_og_Arbeiderpartiet.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Datalagringsdirektivet_kaster_skygger_over_H_yre_og_Arbeiderpartiet.html</guid>
-                <pubDate>Thu, 7 Sep 2017 21:35:00 +0200</pubDate>
-               <description>&lt;p&gt;For noen dager siden publiserte Jon Wessel-Aas en bloggpost om
-«&lt;a href=&quot;http://www.uhuru.biz/?p=1821&quot;&gt;Konklusjonen om datalagring som
-EU-kommisjonen ikke ville at vi skulle få se&lt;/a&gt;».  Det er en
-interessant gjennomgang av EU-domstolens syn på snurpenotovervåkning
-av befolkningen, som er klar på at det er i strid med
-EU-lovgivingen.&lt;/p&gt;
-
-&lt;p&gt;Valgkampen går for fullt i Norge, og om noen få dager er siste
-frist for å avgi stemme.  En ting er sikkert, Høyre og Arbeiderpartiet
-får ikke min stemme
-&lt;a href=&quot;http://people.skolelinux.org/pere/blog/Datalagringsdirektivet_gj_r_at_Oslo_H_yre_og_Arbeiderparti_ikke_f_r_min_stemme_i__r.html&quot;&gt;denne
-gangen heller&lt;/a&gt;.  Jeg har ikke glemt at de tvang igjennom loven som
-skulle pålegge alle data- og teletjenesteleverandører å overvåke alle
-sine kunder.  En lov som er vedtatt, og aldri opphevet igjen.&lt;/p&gt;
-
-&lt;p&gt;Det er tydelig fra diskusjonen rundt grenseløs digital overvåkning
-(eller &quot;Digital Grenseforsvar&quot; som det kalles i Orvellisk nytale) at
-hverken Høyre og Arbeiderpartiet har noen prinsipielle sperrer mot å
-overvåke hele befolkningen, og diskusjonen så langt tyder på at flere
-av de andre partiene heller ikke har det. Mange av
-&lt;a href=&quot;https://data.holderdeord.no/votes/1301946411e&quot;&gt;de som stemte
-for Datalagringsdirektivet i Stortinget&lt;/a&gt; (64 fra Arbeiderpartiet,
-25 fra Høyre) er fortsatt aktive og argumenterer fortsatt for å radere
-vekk mer av innbyggernes privatsfære.&lt;/p&gt;
-
-&lt;p&gt;Når myndighetene demonstrerer sin mistillit til folket, tror jeg
-folket selv bør legge litt innsats i å verne sitt privatliv, ved å ta
-i bruk ende-til-ende-kryptert kommunikasjon med sine kjente og kjære,
-og begrense hvor mye privat informasjon som deles med uvedkommende.
-Det er jo ingenting som tyder på at myndighetene kommer til å være vår
-privatsfære.
-&lt;a href=&quot;http://people.skolelinux.org/pere/blog/How_to_talk_with_your_loved_ones_in_private.html&quot;&gt;Det
-er mange muligheter&lt;/a&gt;.  Selv har jeg litt sans for
-&lt;a href=&quot;https://ring.cx/&quot;&gt;Ring&lt;/a&gt;, som er basert på p2p-teknologi
-uten sentral kontroll, er fri programvare, og støtter meldinger, tale
-og video.  Systemet er tilgjengelig ut av boksen fra
-&lt;a href=&quot;https://tracker.debian.org/pkg/ring&quot;&gt;Debian&lt;/a&gt; og
-&lt;a href=&quot;https://launchpad.net/ubuntu/+source/ring&quot;&gt;Ubuntu&lt;/a&gt;, og det
-finnes pakker for Android, MacOSX og Windows.  Foreløpig er det få
-brukere med Ring, slik at jeg også bruker
-&lt;a href=&quot;https://signal.org/&quot;&gt;Signal&lt;/a&gt; som nettleserutvidelse.&lt;/p&gt;
+               <title>Why is your site not using Content Security Policy / CSP?</title>
+               <link>http://people.skolelinux.org/pere/blog/Why_is_your_site_not_using_Content_Security_Policy___CSP_.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Why_is_your_site_not_using_Content_Security_Policy___CSP_.html</guid>
+                <pubDate>Sun, 9 Dec 2018 15:00:00 +0100</pubDate>
+               <description>&lt;p&gt;Yesterday, I had the pleasure of watching on Frikanalen the OWASP
+talk by Scott Helme titled
+&quot;&lt;a href=&quot;https://frikanalen.no/video/626080/&quot;&gt;What We’ve Learned From
+Billions of Security Reports&lt;/a&gt;&quot;.  I had not heard of the
+&lt;a href=&quot;https://en.wikipedia.org/wiki/Content_Security_Policy&quot;&gt;Content
+Security Policy standard&lt;/a&gt; nor its ability to &quot;call home&quot; when a
+browser detect a policy breach (I do not follow web page design
+development much these days), and found the talk very illuminating.&lt;/p&gt;
+
+&lt;p&gt;The mechanism allow a web site owner to use HTTP headers to tell
+visitors web browser which sources (internal and external) are allowed to
+be used on the web site.  Thus it become possible to enforce a &quot;only
+local content&quot; policy despite web designers urge to fetch programs
+from random sites on the Internet, like the one
+&lt;a href=&quot;https://securityaffairs.co/wordpress/68966/hacking/browsealoud-plugin-hack.html&quot;&gt;enabling
+the attack&lt;/a&gt; reported by Scott Helme earlier this year.&lt;/p&gt;
+
+&lt;p&gt;Using CSP seem like an obvious thing for a site admin to implement
+to take some control over the information leak that occur when
+external sources are used to render web pages, it is a mystery more
+sites are not using CSP?  It is being
+&lt;a href=&quot;https://www.w3.org/TR/CSP/&quot;&gt;standardized under W3C&lt;/a&gt; these
+days, and is supposed by most web browsers&lt;/p&gt;
+
+&lt;p&gt;I managed to find &lt;a href=&quot;https://github.com/mozilla/django-csp&quot;&gt;a
+Django middleware for implementing CSP&lt;/a&gt; and was happy to discover
+it was already in Debian.  I plan to use it to add CSP support to the
+Frikanalen web site soon.&lt;/p&gt;
+
+&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
+activities, please send Bitcoin donations to my address
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;

 </description>
        </item>
        
        <item>
 </description>
        </item>
        
        <item>

-               <title>Simpler recipe on how to make a simple $7 IMSI Catcher using Debian</title>
-               <link>http://people.skolelinux.org/pere/blog/Simpler_recipe_on_how_to_make_a_simple__7_IMSI_Catcher_using_Debian.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Simpler_recipe_on_how_to_make_a_simple__7_IMSI_Catcher_using_Debian.html</guid>
-                <pubDate>Wed, 9 Aug 2017 23:59:00 +0200</pubDate>
-               <description>&lt;p&gt;On friday, I came across an interesting article in the Norwegian
-web based ICT news magazine digi.no on
-&lt;a href=&quot;https://www.digi.no/artikler/sikkerhetsforsker-lagde-enkel-imsi-catcher-for-60-kroner-na-kan-mobiler-kartlegges-av-alle/398588&quot;&gt;how
-to collect the IMSI numbers of nearby cell phones&lt;/a&gt; using the cheap
-DVB-T software defined radios.  The article refered to instructions
-and &lt;a href=&quot;https://www.youtube.com/watch?v=UjwgNd_as30&quot;&gt;a recipe by
-Keld Norman on Youtube on how to make a simple $7 IMSI Catcher&lt;/a&gt;, and I decided to test them out.&lt;/p&gt;
-
-&lt;p&gt;The instructions said to use Ubuntu, install pip using apt (to
-bypass apt), use pip to install pybombs (to bypass both apt and pip),
-and the ask pybombs to fetch and build everything you need from
-scratch.  I wanted to see if I could do the same on the most recent
-Debian packages, but this did not work because pybombs tried to build
-stuff that no longer build with the most recent openssl library or
-some other version skew problem.  While trying to get this recipe
-working, I learned that the apt-&gt;pip-&gt;pybombs route was a long detour,
-and the only piece of software dependency missing in Debian was the
-gr-gsm package.  I also found out that the lead upstream developer of
-gr-gsm (the name stand for GNU Radio GSM) project already had a set of
-Debian packages provided in an Ubuntu PPA repository.  All I needed to
-do was to dget the Debian source package and built it.&lt;/p&gt;
-
-&lt;p&gt;The IMSI collector is a python script listening for packages on the
-loopback network device and printing to the terminal some specific GSM
-packages with IMSI numbers in them.  The code is fairly short and easy
-to understand.  The reason this work is because gr-gsm include a tool
-to read GSM data from a software defined radio like a DVB-T USB stick
-and other software defined radios, decode them and inject them into a
-network device on your Linux machine (using the loopback device by
-default).  This proved to work just fine, and I&#39;ve been testing the
-collector for a few days now.&lt;/p&gt;
-
-&lt;p&gt;The updated and simpler recipe is thus to&lt;/p&gt;
-
-&lt;ol&gt;
-
-&lt;li&gt;start with a Debian machine running Stretch or newer,&lt;/li&gt;
-
-&lt;li&gt;build and install the gr-gsm package available from
-&lt;a href=&quot;http://ppa.launchpad.net/ptrkrysik/gr-gsm/ubuntu/pool/main/g/gr-gsm/&quot;&gt;http://ppa.launchpad.net/ptrkrysik/gr-gsm/ubuntu/pool/main/g/gr-gsm/&lt;/a&gt;,&lt;/li&gt;
-
-&lt;li&gt;clone the git repostory from &lt;a href=&quot;https://github.com/Oros42/IMSI-catcher&quot;&gt;https://github.com/Oros42/IMSI-catcher&lt;/a&gt;,&lt;/li&gt;
-
-&lt;li&gt;run grgsm_livemon and adjust the frequency until the terminal
-where it was started is filled with a stream of text (meaning you
-found a GSM station).&lt;/li&gt;
-
-&lt;li&gt;go into the IMSI-catcher directory and run &#39;sudo python simple_IMSI-catcher.py&#39; to extract the IMSI numbers.&lt;/li&gt;
-
-&lt;/ol&gt;
-
-&lt;p&gt;To make it even easier in the future to get this sniffer up and
-running, I decided to package
-&lt;a href=&quot;https://github.com/ptrkrysik/gr-gsm/&quot;&gt;the gr-gsm project&lt;/a&gt;
-for Debian (&lt;a href=&quot;https://bugs.debian.org/871055&quot;&gt;WNPP
-#871055&lt;/a&gt;), and the package was uploaded into the NEW queue today.
-Luckily the gnuradio maintainer has promised to help me, as I do not
-know much about gnuradio stuff yet.&lt;/p&gt;
-
-&lt;p&gt;I doubt this &quot;IMSI cacher&quot; is anywhere near as powerfull as
-commercial tools like
-&lt;a href=&quot;https://www.thespyphone.com/portable-imsi-imei-catcher/&quot;&gt;The
-Spy Phone Portable IMSI / IMEI Catcher&lt;/a&gt; or the
-&lt;a href=&quot;https://en.wikipedia.org/wiki/Stingray_phone_tracker&quot;&gt;Harris
-Stingray&lt;/a&gt;, but I hope the existance of cheap alternatives can make
-more people realise how their whereabouts when carrying a cell phone
-is easily tracked.  Seeing the data flow on the screen, realizing that
-I live close to a police station and knowing that the police is also
-wearing cell phones, I wonder how hard it would be for criminals to
-track the position of the police officers to discover when there are
-police near by, or for foreign military forces to track the location
-of the Norwegian military forces, or for anyone to track the location
-of government officials...&lt;/p&gt;
-
-&lt;p&gt;It is worth noting that the data reported by the IMSI-catcher
-script mentioned above is only a fraction of the data broadcasted on
-the GSM network.  It will only collect one frequency at the time,
-while a typical phone will be using several frequencies, and not all
-phones will be using the frequencies tracked by the grgsm_livemod
-program.  Also, there is a lot of radio chatter being ignored by the
-simple_IMSI-catcher script, which would be collected by extending the
-parser code.  I wonder if gr-gsm can be set up to listen to more than
-one frequency?&lt;/p&gt;
+               <title>New and improved Frikanalen Kodi addon version 0.0.3</title>
+               <link>http://people.skolelinux.org/pere/blog/New_and_improved_Frikanalen_Kodi_addon_version_0_0_3.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/New_and_improved_Frikanalen_Kodi_addon_version_0_0_3.html</guid>
+                <pubDate>Thu, 8 Nov 2018 10:30:00 +0100</pubDate>
+               <description>&lt;p&gt;If you read my blog regularly, you probably know I am involved in
+running and developing the &lt;a href=&quot;https://frikanalen.no/&quot;&gt;Norwegian
+TV channel Frikanalen&lt;/a&gt;.  It is an open channel, allowing everyone
+in Norway to publish videos on a TV channel with national coverage.
+You can think of it as Youtube for national television.
+In addition to distribution on RiksTV and Uninett, Frikanalen is also
+available as a Kodi addon.  The last few days I have updated the code
+to add more features.  A
+&lt;a href=&quot;https://kodi.tv/addon/plugins-video-add-ons/frikanalen-nett-tv&quot;&gt;new
+and improved version 0.0.3 Frikanalen addon&lt;/a&gt; was just made
+available via the Kodi repositories.  This new version include a
+option to browse videos by category, as well as free text search
+in the video archive.  It will now also show the video duration in the
+video lists, which were missing earlier.  A new and experimental
+link to the HD video stream currently being worked on is provided, for
+those that want to see what the &lt;a href=&quot;https://casparcg.com/&quot;&gt;CasparCG&lt;/a&gt;
+output look like.  The alternative is the SD video stream, generated
+using MLT.  CasparCG is controlled by our
+&lt;a href=&quot;https://github.com/Frikanalen/mltplayout/&quot;&gt;mltplayout
+server&lt;/a&gt; which instead of talking to mlt is giving PLAY instructions
+to the CasparCG server when it is time to start a new program.&lt;/p&gt;
+
+&lt;p&gt;By now, you are probably wondering what kind of content is being
+played on the channel.  These days, it is filled with technical
+presentations like those from &lt;a href=&quot;https://www.nuug.no/&quot;&gt;NUUG&lt;/a&gt;,
+&lt;a href=&quot;https://www.debconf.org/&quot;&gt;Debconf&lt;/a&gt;, Makercon, and TED,
+but there are also some periods with
+&lt;a href=&quot;https://www.empo.no/&quot;&gt;EMPT TV&lt;/a&gt; and
+&lt;a href=&quot;https://www.p7.no/&quot;&gt;P7&lt;/a&gt;.
+
+&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
+activities, please send Bitcoin donations to my address
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;

 </description>
        </item>
        
        <item>
 </description>
        </item>
        
        <item>

-               <title>Norwegian Bokmål edition of Debian Administrator&#39;s Handbook is now available</title>
-               <link>http://people.skolelinux.org/pere/blog/Norwegian_Bokm_l_edition_of_Debian_Administrator_s_Handbook_is_now_available.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Norwegian_Bokm_l_edition_of_Debian_Administrator_s_Handbook_is_now_available.html</guid>
-                <pubDate>Tue, 25 Jul 2017 21:10:00 +0200</pubDate>
-               <description>&lt;p align=&quot;center&quot;&gt;&lt;img align=&quot;center&quot; src=&quot;http://people.skolelinux.org/pere/blog/images/2017-07-25-debian-handbook-nb-testprint.png&quot;/&gt;&lt;/p&gt;
-
-&lt;p&gt;I finally received a copy of the Norwegian Bokmål edition of
-&quot;&lt;a href=&quot;https://debian-handbook.info/&quot;&gt;The Debian Administrator&#39;s
-Handbook&lt;/a&gt;&quot;.  This test copy arrived in the mail a few days ago, and
-I am very happy to hold the result in my hand.   We spent around one and a half year translating it. This paperbook edition
-&lt;a href=&quot;https://debian-handbook.info/get/#norwegian&quot;&gt;is available
-from lulu.com&lt;/a&gt;.  If you buy it quickly, you save 25% on the list
-price.  The book is also available for download in electronic form as
-PDF, EPUB and Mobipocket, as can be
-&lt;a href=&quot;https://debian-handbook.info/browse/nb-NO/stable/&quot;&gt;read online
-as a web page&lt;/a&gt;.&lt;/p&gt;
-
-&lt;p&gt;This is the second book I publish (the first was the book
-&quot;&lt;a href=&quot;http://free-culture.cc/&quot;&gt;Free Culture&lt;/a&gt;&quot; by Lawrence Lessig
-in
-&lt;a href=&quot;http://www.lulu.com/shop/lawrence-lessig/free-culture/paperback/product-22440520.html&quot;&gt;English&lt;/a&gt;,
-&lt;a href=&quot;http://www.lulu.com/shop/lawrence-lessig/culture-libre/paperback/product-22645082.html&quot;&gt;French&lt;/a&gt;
-and
-&lt;a href=&quot;http://www.lulu.com/shop/lawrence-lessig/fri-kultur/paperback/product-22441576.html&quot;&gt;Norwegian
-Bokmål&lt;/a&gt;), and I am very excited to finally wrap up this
-project.  I hope
-&quot;&lt;a href=&quot;http://www.lulu.com/shop/rapha%C3%ABl-hertzog-and-roland-mas/h%C3%A5ndbok-for-debian-administratoren/paperback/product-23262290.html&quot;&gt;Håndbok
-for Debian-administratoren&lt;/a&gt;&quot; will be well received.&lt;/p&gt;
+               <title>Time for an official MIME type for patches?</title>
+               <link>http://people.skolelinux.org/pere/blog/Time_for_an_official_MIME_type_for_patches_.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Time_for_an_official_MIME_type_for_patches_.html</guid>
+                <pubDate>Thu, 1 Nov 2018 08:15:00 +0100</pubDate>
+               <description>&lt;p&gt;As part of my involvement in
+&lt;a href=&quot;https://gitlab.com/OsloMet-ABI/nikita-noark5-core&quot;&gt;the Nikita
+archive API project&lt;/a&gt;, I&#39;ve been importing a fairly large lump of
+emails into a test instance of the archive to see how well this would
+go.  I picked a subset of &lt;a href=&quot;https://notmuchmail.org/&quot;&gt;my
+notmuch email database&lt;/a&gt;, all public emails sent to me via
+@lists.debian.org, giving me a set of around 216 000 emails to import.
+In the process, I had a look at the various attachments included in
+these emails, to figure out what to do with attachments, and noticed
+that one of the most common attachment formats do not have
+&lt;a href=&quot;https://www.iana.org/assignments/media-types/media-types.xhtml&quot;&gt;an
+official MIME type&lt;/a&gt; registered with IANA/IETF.  The output from
+diff, ie the input for patch, is on the top 10 list of formats
+included in these emails.  At the moment people seem to use either
+text/x-patch or text/x-diff, but neither is officially registered.  It
+would be better if one official MIME type were registered and used
+everywhere.&lt;/p&gt;
+
+&lt;p&gt;To try to get one official MIME type for these files, I&#39;ve brought
+up the topic on
+&lt;a href=&quot;https://www.ietf.org/mailman/listinfo/media-types&quot;&gt;the
+media-types mailing list&lt;/a&gt;.  If you are interested in discussion
+which MIME type to use as the official for patch files, or involved in
+making software using a MIME type for patches, perhaps you would like
+to join the discussion?&lt;/p&gt;
+
+&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
+activities, please send Bitcoin donations to my address
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;

 </description>
        </item>
        
        <item>
 </description>
        </item>
        
        <item>

-               <title>«Rapporten ser ikke på informasjonssikkerhet knyttet til personlig integritet»</title>
-               <link>http://people.skolelinux.org/pere/blog/_Rapporten_ser_ikke_p__informasjonssikkerhet_knyttet_til_personlig_integritet_.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/_Rapporten_ser_ikke_p__informasjonssikkerhet_knyttet_til_personlig_integritet_.html</guid>
-                <pubDate>Tue, 27 Jun 2017 17:50:00 +0200</pubDate>
-               <description>&lt;p&gt;Jeg kom over teksten
-«&lt;a href=&quot;https://freedom-to-tinker.com/2017/06/21/killing-car-privacy-by-federal-mandate/&quot;&gt;Killing
-car privacy by federal mandate&lt;/a&gt;» av Leonid Reyzin på Freedom to
-Tinker i dag, og det gleder meg å se en god gjennomgang om hvorfor det
-er et urimelig inngrep i privatsfæren å la alle biler kringkaste sin
-posisjon og bevegelse via radio.  Det omtalte forslaget basert på
-Dedicated Short Range Communication (DSRC) kalles Basic Safety Message
-(BSM) i USA og Cooperative Awareness Message (CAM) i Europa, og det
-norske Vegvesenet er en av de som ser ut til å kunne tenke seg å
-pålegge alle biler å fjerne nok en bit av innbyggernes privatsfære.
-Anbefaler alle å lese det som står der.
-
-&lt;p&gt;Mens jeg tittet litt på DSRC på biler i Norge kom jeg over et sitat
-jeg synes er illustrativt for hvordan det offentlige Norge håndterer
-problemstillinger rundt innbyggernes privatsfære i SINTEF-rapporten
-«&lt;a href=&quot;https://www.sintef.no/publikasjoner/publikasjon/Download/?pubid=SINTEF+A23933&quot;&gt;Informasjonssikkerhet
-i AutoPASS-brikker&lt;/a&gt;» av Trond Foss:&lt;/p&gt;
-
-&lt;p&gt;&lt;blockquote&gt;
-«Rapporten ser ikke på informasjonssikkerhet knyttet til personlig
-  integritet.»
-&lt;/blockquote&gt;&lt;/p&gt;
-
-&lt;p&gt;Så enkelt kan det tydeligvis gjøres når en vurderer
-informasjonssikkerheten.  Det holder vel at folkene på toppen kan si
-at «Personvernet er ivaretatt», som jo er den populære intetsigende
-frasen som gjør at mange tror enkeltindividers integritet tas vare på.
-Sitatet fikk meg til å undres på hvor ofte samme tilnærming, å bare se
-bort fra behovet for personlig itegritet, blir valgt når en velger å
-legge til rette for nok et inngrep i privatsfæren til personer i
-Norge.  Det er jo sjelden det får reaksjoner.  Historien om
-reaksjonene på Helse Sør-Østs tjenesteutsetting er jo sørgelig nok et
-unntak og toppen av isfjellet, desverre.  Tror jeg fortsatt takker nei
-til både AutoPASS og holder meg så langt unna det norske helsevesenet
-som jeg kan, inntil de har demonstrert og dokumentert at de verdsetter
-individets privatsfære og personlige integritet høyere enn kortsiktig
-gevist og samfunnsnytte.&lt;/p&gt;
+               <title>Measuring the speaker frequency response using the AUDMES free software GUI - nice free software</title>
+               <link>http://people.skolelinux.org/pere/blog/Measuring_the_speaker_frequency_response_using_the_AUDMES_free_software_GUI___nice_free_software.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Measuring_the_speaker_frequency_response_using_the_AUDMES_free_software_GUI___nice_free_software.html</guid>
+                <pubDate>Mon, 22 Oct 2018 08:40:00 +0200</pubDate>
+               <description>&lt;p&gt;&lt;img src=&quot;http://people.skolelinux.org/pere/blog/images/2018-10-22-audmes-measure-speakers.png&quot; align=&quot;right&quot; width=&quot;40%&quot;/&gt;&lt;/p&gt;
+
+&lt;p&gt;My current home stereo is a patchwork of various pieces I got on
+flee markeds over the years.  It is amazing what kind of equipment
+show up there.  I&#39;ve been wondering for a while if it was possible to
+measure how well this equipment is working together, and decided to
+see how far I could get using free software.  After trawling the web I
+came across an article from DIY Audio and Video on
+&lt;a href=&quot;https://www.diyaudioandvideo.com/Tutorial/SpeakerResponseTesting/&quot;&gt;Speaker
+Testing and Analysis&lt;/a&gt; describing how to test speakers, and it listing
+several software options, among them
+&lt;a href=&quot;https://sourceforge.net/projects/audmes/&quot;&gt;AUDio MEasurement
+System (AUDMES)&lt;/a&gt;.  It is the only free software system I could find
+focusing on measuring speakers and audio frequency response.  In the
+process I also found an interesting article from NOVO on
+&lt;a href=&quot;http://novo.press/understanding-speaker-specifications-and-frequency-response/&quot;&gt;Understanding
+Speaker Specifications and Frequency Response&lt;/a&gt; and an article from
+ecoustics on
+&lt;a href=&quot;https://www.ecoustics.com/articles/understanding-speaker-frequency-response/&quot;&gt;Understanding
+Speaker Frequency Response&lt;/a&gt;, with a lot of information on what to
+look for and how to interpret the graphs.  Armed with this knowledge,
+I set out to measure the state of my speakers.&lt;/p&gt;
+
+&lt;p&gt;The first hurdle was that AUDMES hadn&#39;t seen a commit for 10 years
+and did not build with current compilers and libraries.  I got in
+touch with its author, who no longer was spending time on the program
+but gave me write access to the subversion repository on Sourceforge.
+The end result is that now the code build on Linux and is capable of
+saving and loading the collected frequency response data in CSV
+format.  The application is quite nice and flexible, and I was able to
+select the input and output audio interfaces independently.  This made
+it possible to use a USB mixer as the input source, while sending
+output via my laptop headphone connection.  I lacked the hardware and
+cabling to figure out a different way to get independent cabling to
+speakers and microphone.&lt;/p&gt;
+
+&lt;p&gt;Using this setup I could see how a large range of high frequencies
+apparently were not making it out of my speakers.  The picture show
+the frequency response measurement of one of the speakers.  Note the
+frequency lines seem to be slightly misaligned, compared to the CSV
+output from the program.  I can not hear several of these are high
+frequencies, according to measurement from
+&lt;a href=&quot;http://freehearingtestsoftware.com&quot;&gt;Free Hearing Test
+Software&lt;/a&gt;, an freeware system to measure your hearing (still
+looking for a free software alternative), so I do not know if they are
+coming out out the speakers.  I thus do not quite know how to figure
+out if the missing frequencies is a problem with the microphone, the
+amplifier or the speakers, but I managed to rule out the audio card in my
+PC by measuring my Bose noise canceling headset using its own
+microphone.  This setup was able to see the high frequency tones, so
+the problem with my stereo had to be in the amplifier or speakers.&lt;/p&gt;
+
+&lt;p&gt;Anyway, to try to role out one factor I ended up picking up a new
+set of speakers at a flee marked, and these work a lot better than the
+old speakers, so I guess the microphone and amplifier is OK.  If you
+need to measure your own speakers, check out AUDMES.  If more people
+get involved, perhaps the project could become good enough to
+&lt;a href=&quot;https://bugs.debian.org/910876&quot;&gt;include in Debian&lt;/a&gt;?  And if
+you know of some other free software to measure speakers and amplifier
+performance, please let me know.  I am aware of the freeware option
+&lt;a href=&quot;https://www.roomeqwizard.com/&quot;&gt;REW&lt;/a&gt;, but I want something
+that can be developed also when the vendor looses interest.&lt;/p&gt;
+
+&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
+activities, please send Bitcoin donations to my address
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;

 </description>
        </item>
        
        <item>
 </description>
        </item>
        
        <item>

-               <title>Updated sales number for my Free Culture paper editions</title>
-               <link>http://people.skolelinux.org/pere/blog/Updated_sales_number_for_my_Free_Culture_paper_editions.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Updated_sales_number_for_my_Free_Culture_paper_editions.html</guid>
-                <pubDate>Mon, 12 Jun 2017 11:40:00 +0200</pubDate>
-               <description>&lt;p&gt;It is pleasing to see that the work we put down in publishing new
-editions of the classic &lt;a href=&quot;http://www.free-culture.cc/&quot;&gt;Free
-Culture book&lt;/a&gt; by the founder of the Creative Commons movement,
-Lawrence Lessig, is still being appreciated.  I had a look at the
-latest sales numbers for the paper edition today.  Not too impressive,
-but happy to see some buyers still exist.  All the revenue from the
-books is sent to the &lt;a href=&quot;https://creativecommons.org/&quot;&gt;Creative
-Commons Corporation&lt;/a&gt;, and they receive the largest cut if you buy
-directly from Lulu.  Most books are sold via Amazon, with Ingram
-second and only a small fraction directly from Lulu.  The ebook
-edition is available for free from
-&lt;a href=&quot;https://github.com/petterreinholdtsen/free-culture-lessig&quot;&gt;Github&lt;/a&gt;.&lt;/p&gt;
-
-&lt;table border=&quot;0&quot;&gt;
-&lt;tr&gt;&lt;th rowspan=&quot;2&quot; valign=&quot;bottom&quot;&gt;Title / language&lt;/th&gt;&lt;th colspan=&quot;3&quot;&gt;Quantity&lt;/th&gt;&lt;/tr&gt;
-&lt;tr&gt;&lt;th&gt;2016 jan-jun&lt;/th&gt;&lt;th&gt;2016 jul-dec&lt;/th&gt;&lt;th&gt;2017 jan-may&lt;/th&gt;&lt;/tr&gt;
-
-&lt;tr&gt;
-  &lt;td&gt;&lt;a href=&quot;http://www.lulu.com/shop/lawrence-lessig/culture-libre/paperback/product-22645082.html&quot;&gt;Culture Libre / French&lt;/a&gt;&lt;/td&gt;
-  &lt;td align=&quot;right&quot;&gt;3&lt;/td&gt;
-  &lt;td align=&quot;right&quot;&gt;6&lt;/td&gt;
-  &lt;td align=&quot;right&quot;&gt;15&lt;/td&gt;
-&lt;/tr&gt;
-
-&lt;tr&gt;
-  &lt;td&gt;&lt;a href=&quot;http://www.lulu.com/shop/lawrence-lessig/fri-kultur/paperback/product-22441576.html&quot;&gt;Fri kultur / Norwegian&lt;/a&gt;&lt;/td&gt;
-  &lt;td align=&quot;right&quot;&gt;7&lt;/td&gt;
-  &lt;td align=&quot;right&quot;&gt;1&lt;/td&gt;
-  &lt;td align=&quot;right&quot;&gt;0&lt;/td&gt;
-&lt;/tr&gt;
-
-&lt;tr&gt;
-  &lt;td&gt;&lt;a href=&quot;http://www.lulu.com/shop/lawrence-lessig/free-culture/paperback/product-22440520.html&quot;&gt;Free Culture / English&lt;/a&gt;&lt;/td&gt;
-  &lt;td align=&quot;right&quot;&gt;14&lt;/td&gt;
-  &lt;td align=&quot;right&quot;&gt;27&lt;/td&gt;
-  &lt;td align=&quot;right&quot;&gt;16&lt;/td&gt;
-&lt;/tr&gt;
-
-&lt;tr&gt;
-  &lt;td&gt;Total&lt;/td&gt;
-  &lt;td align=&quot;right&quot;&gt;24&lt;/td&gt;
-  &lt;td align=&quot;right&quot;&gt;34&lt;/td&gt;
-  &lt;td align=&quot;right&quot;&gt;31&lt;/td&gt;
-&lt;/tr&gt;
-
-&lt;/table&gt;
-
-&lt;p&gt;A bit sad to see the low sales number on the Norwegian edition, and
-a bit surprising the English edition still selling so well.&lt;/p&gt;
-
-&lt;p&gt;If you would like to translate and publish the book in your native
-language, I would be happy to help make it happen.  Please get in
-touch.&lt;/p&gt;
+               <title>Web browser integration of VLC with Bittorrent support</title>
+               <link>http://people.skolelinux.org/pere/blog/Web_browser_integration_of_VLC_with_Bittorrent_support.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Web_browser_integration_of_VLC_with_Bittorrent_support.html</guid>
+                <pubDate>Sun, 21 Oct 2018 09:50:00 +0200</pubDate>
+               <description>&lt;p&gt;Bittorrent is as far as I know, currently the most efficient way to
+distribute content on the Internet.  It is used all by all sorts of
+content providers, from national TV stations like
+&lt;a href=&quot;https://www.nrk.no/&quot;&gt;NRK&lt;/a&gt;, Linux distributors like
+&lt;a href=&quot;https://www.debian.org/&quot;&gt;Debian&lt;/a&gt; and
+&lt;a href=&quot;https://www.ubuntu.com/&quot;&gt;Ubuntu&lt;/a&gt;, and of course the
+&lt;a href=&quot;https://archive.org/&quot;&gt;Internet archive&lt;/A&gt;.
+
+&lt;p&gt;Almost a month ago
+&lt;a href=&quot;https://tracker.debian.org/pkg/vlc-plugin-bittorrent&quot;&gt;a new
+package adding Bittorrent support to VLC&lt;/a&gt; became available in
+Debian testing and unstable.  To test it, simply install it like
+this:&lt;/p&gt;
+
+&lt;p&gt;&lt;pre&gt;
+apt install vlc-plugin-bittorrent
+&lt;/pre&gt;&lt;/p&gt;
+
+&lt;p&gt;Since the plugin was made available for the first time in Debian,
+several improvements have been made to it.  In version 2.2-4, now
+available in both testing and unstable, a desktop file is provided to
+teach browsers to start VLC when the user click on torrent files or
+magnet links.  The last part is thanks to me finally understanding
+what the strange x-scheme-handler style MIME types in desktop files
+are used for.  By adding x-scheme-handler/magnet to the MimeType entry
+in the desktop file, at least the browsers Firefox and Chromium will
+suggest to start VLC when selecting a magnet URI on a web page.  The
+end result is that now, with the plugin installed in Buster and Sid,
+one can visit any
+&lt;a href=&quot;https://archive.org/details/CopyingIsNotTheft1080p&quot;&gt;Internet
+Archive page with movies&lt;/a&gt; using a web browser and click on the
+torrent link to start streaming the movie.&lt;/p&gt;
+
+&lt;p&gt;Note, there is still some misfeatures in the plugin.  One is the
+fact that it will hang and
+&lt;a href=&quot;https://github.com/johang/vlc-bittorrent/issues/13&quot;&gt;block VLC
+from exiting until the torrent streaming starts&lt;/a&gt;.  Another is the
+fact that it
+&lt;a href=&quot;https://github.com/johang/vlc-bittorrent/issues/9&quot;&gt;will pick
+and play a random file in a multi file torrent&lt;/a&gt;.  This is not
+always the video file you want.  Combined with the first it can be a
+bit hard to get the video streaming going.  But when it work, it seem
+to do a good job.&lt;/p&gt;
+
+&lt;p&gt;For the Debian packaging, I would love to find a good way to test
+if the plugin work with VLC using autopkgtest.  I tried, but do not
+know enough of the inner workings of VLC to get it working.  For now
+the autopkgtest script is only checking if the .so file was
+successfully loaded by VLC.  If you have any suggestions, please
+submit a patch to the Debian bug tracking system.&lt;/p&gt;
+
+&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
+activities, please send Bitcoin donations to my address
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;

 </description>
        </item>
        
        <item>
 </description>
        </item>
        
        <item>

-               <title>Release 0.1.1 of free software archive system Nikita announced</title>
-               <link>http://people.skolelinux.org/pere/blog/Release_0_1_1_of_free_software_archive_system_Nikita_announced.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Release_0_1_1_of_free_software_archive_system_Nikita_announced.html</guid>
-                <pubDate>Sat, 10 Jun 2017 00:40:00 +0200</pubDate>
-               <description>&lt;p&gt;I am very happy to report that the
-&lt;a href=&quot;https://github.com/hiOA-ABI/nikita-noark5-core&quot;&gt;Nikita Noark 5
-core project&lt;/a&gt; tagged its second release today.  The free software
-solution is an implementation of the Norwegian archive standard Noark
-5 used by government offices in Norway.  These were the changes in
-version 0.1.1 since version 0.1.0 (from NEWS.md):
+               <title>Release 0.2 of free software archive system Nikita announced</title>
+               <link>http://people.skolelinux.org/pere/blog/Release_0_2_of_free_software_archive_system_Nikita_announced.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Release_0_2_of_free_software_archive_system_Nikita_announced.html</guid>
+                <pubDate>Thu, 18 Oct 2018 14:40:00 +0200</pubDate>
+               <description>&lt;p&gt;This morning, the new release of the
+&lt;a href=&quot;https://gitlab.com/OsloMet-ABI/nikita-noark5-core/&quot;&gt;Nikita
+Noark 5 core project&lt;/a&gt; was
+&lt;a href=&quot;https://lists.nuug.no/pipermail/nikita-noark/2018-October/000406.html&quot;&gt;announced
+on the project mailing list&lt;/a&gt;.  The free software solution is an
+implementation of the Norwegian archive standard Noark 5 used by
+government offices in Norway.  These were the changes in version 0.2
+since version 0.1.1 (from NEWS.md):

 
 &lt;ul&gt;
 
 &lt;ul&gt;

-
- &lt;li&gt;Continued work on the angularjs GUI, including document upload.&lt;/li&gt;
- &lt;li&gt;Implemented correspondencepartPerson, correspondencepartUnit and
-   correspondencepartInternal&lt;/li&gt;
- &lt;li&gt;Applied for coverity coverage and started submitting code on
-   regualr basis.&lt;/li&gt;
- &lt;li&gt;Started fixing bugs reported by coverity&lt;/li&gt;
- &lt;li&gt;Corrected and completed HATEOAS links to make sure entire API is
-   available via URLs in _links.&lt;/li&gt;
- &lt;li&gt;Corrected all relation URLs to use trailing slash.&lt;/li&gt;
- &lt;li&gt;Add initial support for storing data in ElasticSearch.&lt;/li&gt;
- &lt;li&gt;Now able to receive and store uploaded files in the archive.&lt;/li&gt;
- &lt;li&gt;Changed JSON output for object lists to have relations in _links.&lt;/li&gt;
- &lt;li&gt;Improve JSON output for empty object lists.&lt;/li&gt;
- &lt;li&gt;Now uses correct MIME type application/vnd.noark5-v4+json.&lt;/li&gt;
- &lt;li&gt;Added support for docker container images.&lt;/li&gt;
- &lt;li&gt;Added simple API browser implemented in JavaScript/Angular.&lt;/li&gt;
- &lt;li&gt;Started on archive client implemented in JavaScript/Angular.&lt;/li&gt;
- &lt;li&gt;Started on prototype to show the public mail journal.&lt;/li&gt;
- &lt;li&gt;Improved performance by disabling Sprint FileWatcher.&lt;/li&gt;
- &lt;li&gt;Added support for &#39;arkivskaper&#39;, &#39;saksmappe&#39; and &#39;journalpost&#39;.&lt;/li&gt;
- &lt;li&gt;Added support for some metadata codelists.&lt;/li&gt;
- &lt;li&gt;Added support for Cross-origin resource sharing (CORS).&lt;/li&gt;
- &lt;li&gt;Changed login method from Basic Auth to JSON Web Token (RFC 7519)
-   style.&lt;/li&gt;
- &lt;li&gt;Added support for GET-ing ny-* URLs.&lt;/li&gt;
- &lt;li&gt;Added support for modifying entities using PUT and eTag.&lt;/li&gt;
- &lt;li&gt;Added support for returning XML output on request.&lt;/li&gt;
- &lt;li&gt;Removed support for English field and class names, limiting ourself
-   to the official names.&lt;/li&gt;
- &lt;li&gt;...&lt;/li&gt;
- 
+  &lt;li&gt;Fix typos in REL names&lt;/li&gt;
+  &lt;li&gt;Tidy up error message reporting&lt;/li&gt;
+  &lt;li&gt;Fix issue where we used Integer.valueOf(), not Integer.getInteger()&lt;/li&gt;
+  &lt;li&gt;Change some String handling to StringBuffer&lt;/li&gt;
+  &lt;li&gt;Fix error reporting&lt;/li&gt;
+  &lt;li&gt;Code tidy-up&lt;/li&gt;
+  &lt;li&gt;Fix issue using static non-synchronized SimpleDateFormat to avoid 
+      race conditions&lt;/li&gt;
+  &lt;li&gt;Fix problem where deserialisers were treating integers as strings&lt;/li&gt;
+  &lt;li&gt;Update methods to make them null-safe&lt;/li&gt;
+  &lt;li&gt;Fix many issues reported by coverity&lt;/li&gt;
+  &lt;li&gt;Improve equals(), compareTo() and hash() in domain model&lt;/li&gt;
+  &lt;li&gt;Improvements to the domain model for metadata classes&lt;/li&gt;
+  &lt;li&gt;Fix CORS issues when downloading document&lt;/li&gt;
+  &lt;li&gt;Implementation of case-handling with registryEntry and document upload&lt;/li&gt;
+  &lt;li&gt;Better support in Javascript for OPTIONS&lt;/li&gt;
+  &lt;li&gt;Adding concept description of mail integration&lt;/li&gt;
+  &lt;li&gt;Improve setting of default values for GET on ny-journalpost&lt;/li&gt;
+  &lt;li&gt;Better handling of required values during deserialisation &lt;/li&gt;
+  &lt;li&gt;Changed tilknyttetDato (M620) from date to dateTime&lt;/li&gt;
+  &lt;li&gt;Corrected some opprettetDato (M600) (de)serialisation errors.&lt;/li&gt;
+  &lt;li&gt;Improve parse error reporting.&lt;/li&gt;
+  &lt;li&gt;Started on OData search and filtering.&lt;/li&gt;
+  &lt;li&gt;Added Contributor Covenant Code of Conduct to project.&lt;/li&gt;
+  &lt;li&gt;Moved repository and project from Github to Gitlab.&lt;/li&gt;
+  &lt;li&gt;Restructured repository, moved code into src/ and web/.&lt;/li&gt;
+  &lt;li&gt;Updated code to use Spring Boot version 2.&lt;/li&gt;
+  &lt;li&gt;Added support for OAuth2 authentication.&lt;/li&gt;
+  &lt;li&gt;Fixed several bugs discovered by Coverity.&lt;/li&gt;
+  &lt;li&gt;Corrected handling of date/datetime fields.&lt;/li&gt;
+  &lt;li&gt;Improved error reporting when rejecting during deserializatoin.&lt;/li&gt;
+  &lt;li&gt;Adjusted default values provided for ny-arkivdel, ny-mappe,
+   ny-saksmappe, ny-journalpost and ny-dokumentbeskrivelse.&lt;/li&gt;
+  &lt;li&gt;Several fixes for korrespondansepart*.&lt;/li&gt;
+  &lt;li&gt;Updated web GUI:
+     &lt;ul&gt;
+       &lt;li&gt;Now handle both file upload and download.&lt;/li&gt;
+       &lt;li&gt;Uses new OAuth2 authentication for login.&lt;/li&gt;
+       &lt;li&gt;Forms now fetches default values from API using GET.&lt;/li&gt;
+       &lt;li&gt;Added RFC 822 (email), TIFF and JPEG to list of possible file formats.&lt;/li&gt;
+     &lt;/ul&gt;&lt;/li&gt;

 &lt;/ul&gt;
 
 &lt;/ul&gt;
 

-&lt;p&gt;If this sound interesting to you, please contact us on IRC (#nikita
-on irc.freenode.net) or email
+&lt;p&gt;The changes and improvements are extensive.  Running diffstat on
+the changes between git tab 0.1.1 and 0.2 show 1098 files changed,
+108666 insertions(+), 54066 deletions(-).&lt;/p&gt;
+
+&lt;p&gt;If free and open standardized archiving API sound interesting to
+you, please contact us on IRC
+(&lt;a href=&quot;irc://irc.freenode.net/%23nikita&quot;&gt;#nikita on
+irc.freenode.net&lt;/a&gt;) or email

 (&lt;a href=&quot;https://lists.nuug.no/mailman/listinfo/nikita-noark&quot;&gt;nikita-noark
 (&lt;a href=&quot;https://lists.nuug.no/mailman/listinfo/nikita-noark&quot;&gt;nikita-noark

-mailing list).&lt;/p&gt;
+mailing list&lt;/a&gt;).&lt;/p&gt;
+
+&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
+activities, please send Bitcoin donations to my address
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;
+</description>
+       </item>
+       
+       <item>
+               <title>Fetching trusted timestamps using the rfc3161ng python module</title>
+               <link>http://people.skolelinux.org/pere/blog/Fetching_trusted_timestamps_using_the_rfc3161ng_python_module.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Fetching_trusted_timestamps_using_the_rfc3161ng_python_module.html</guid>
+                <pubDate>Mon, 8 Oct 2018 12:30:00 +0200</pubDate>
+               <description>&lt;p&gt;I have  earlier covered the basics of trusted timestamping using the
+&#39;openssl ts&#39; client.  See blog post for
+&lt;a href=&quot;http://people.skolelinux.org/pere/blog/Public_Trusted_Timestamping_services_for_everyone.html&quot;&gt;2014&lt;/a&gt;,
+&lt;a href=&quot;http://people.skolelinux.org/pere/blog/syslog_trusted_timestamp___chain_of_trusted_timestamps_for_your_syslog.html&quot;&gt;2016&lt;/a&gt;
+and
+&lt;a href=&quot;http://people.skolelinux.org/pere/blog/Idea_for_storing_trusted_timestamps_in_a_Noark_5_archive.html&quot;&gt;2017&lt;/a&gt;
+for those stories.  But some times I want to integrate the timestamping
+in other code, and recently I needed to integrate it into Python.
+After searching a bit, I found
+&lt;a href=&quot;https://dev.entrouvert.org/projects/python-rfc3161&quot;&gt;the
+rfc3161 library&lt;/a&gt; which seemed like a good fit, but I soon
+discovered it only worked for python version 2, and I needed something
+that work with python version 3.  Luckily I next came across
+&lt;a href=&quot;https://github.com/trbs/rfc3161ng/&quot;&gt;the rfc3161ng library&lt;/a&gt;,
+a fork of the original rfc3161 library.  Not only is it working with
+python 3, it have fixed a few of the bugs in the original library, and
+it has an active maintainer.  I decided to wrap it up and make it
+&lt;a href=&quot;https://tracker.debian.org/pkg/python-rfc3161ng&quot;&gt;available in
+Debian&lt;/a&gt;, and a few days ago it entered Debian unstable and testing.&lt;/p&gt;
+
+&lt;p&gt;Using the library is fairly straight forward.  The only slightly
+problematic step is to fetch the required certificates to verify the
+timestamp.  For some services it is straight forward, while for others
+I have not yet figured out how to do it.  Here is a small standalone
+code example based on of the integration tests in the library code:&lt;/p&gt;
+
+&lt;pre&gt;
+#!/usr/bin/python3
+
+&quot;&quot;&quot;
+
+Python 3 script demonstrating how to use the rfc3161ng module to
+get trusted timestamps.
+
+The license of this code is the same as the license of the rfc3161ng
+library, ie MIT/BSD.
+
+&quot;&quot;&quot;
+
+import os
+import pyasn1.codec.der
+import rfc3161ng
+import subprocess
+import tempfile
+import urllib.request
+
+def store(f, data):
+    f.write(data)
+    f.flush()
+    f.seek(0)
+
+def fetch(url, f=None):
+    response = urllib.request.urlopen(url)
+    data = response.read()
+    if f:
+        store(f, data)
+    return data
+
+def main():
+    with tempfile.NamedTemporaryFile() as cert_f,\
+        tempfile.NamedTemporaryFile() as ca_f,\
+        tempfile.NamedTemporaryFile() as msg_f,\
+        tempfile.NamedTemporaryFile() as tsr_f:
+
+        # First fetch certificates used by service
+        certificate_data = fetch(&#39;https://freetsa.org/files/tsa.crt&#39;, cert_f)
+        ca_data_data = fetch(&#39;https://freetsa.org/files/cacert.pem&#39;, ca_f)
+
+        # Then timestamp the message
+        timestamper = \
+            rfc3161ng.RemoteTimestamper(&#39;http://freetsa.org/tsr&#39;,
+                                        certificate=certificate_data)
+        data = b&quot;Python forever!\n&quot;
+        tsr = timestamper(data=data, return_tsr=True)
+
+        # Finally, convert message and response to something &#39;openssl ts&#39; can verify
+        store(msg_f, data)
+        store(tsr_f, pyasn1.codec.der.encoder.encode(tsr))
+        args = [&quot;openssl&quot;, &quot;ts&quot;, &quot;-verify&quot;,
+                &quot;-data&quot;, msg_f.name,
+               &quot;-in&quot;, tsr_f.name,
+               &quot;-CAfile&quot;, ca_f.name,
+                &quot;-untrusted&quot;, cert_f.name]
+        subprocess.check_call(args)
+
+if &#39;__main__&#39; == __name__:
+   main()
+&lt;/pre&gt;
+
+&lt;p&gt;The code fetches the required certificates, store them as temporary
+files, timestamp a simple message, store the message and timestamp to
+disk and ask &#39;openssl ts&#39; to verify the timestamp.  A timestamp is
+around 1.5 kiB in size, and should be fairly easy to store for future
+use.&lt;/p&gt;
+
+&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
+activities, please send Bitcoin donations to my address
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;

 </description>
        </item>
        
        <item>
 </description>
        </item>
        
        <item>

-               <title>Idea for storing trusted timestamps in a Noark 5 archive</title>
-               <link>http://people.skolelinux.org/pere/blog/Idea_for_storing_trusted_timestamps_in_a_Noark_5_archive.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Idea_for_storing_trusted_timestamps_in_a_Noark_5_archive.html</guid>
-                <pubDate>Wed, 7 Jun 2017 21:40:00 +0200</pubDate>
-               <description>&lt;p&gt;&lt;em&gt;This is a copy of
-&lt;a href=&quot;https://lists.nuug.no/pipermail/nikita-noark/2017-June/000297.html&quot;&gt;an
-email I posted to the nikita-noark mailing list&lt;/a&gt;.  Please follow up
-there if you would like to discuss this topic.  The background is that
-we are making a free software archive system based on the Norwegian
-&lt;a href=&quot;https://www.arkivverket.no/forvaltning-og-utvikling/regelverk-og-standarder/noark-standarden&quot;&gt;Noark
-5 standard&lt;/a&gt; for government archives.&lt;/em&gt;&lt;/p&gt;
-
-&lt;p&gt;I&#39;ve been wondering a bit lately how trusted timestamps could be
-stored in Noark 5.
-&lt;a href=&quot;https://en.wikipedia.org/wiki/Trusted_timestamping&quot;&gt;Trusted
-timestamps&lt;/a&gt; can be used to verify that some information
-(document/file/checksum/metadata) have not been changed since a
-specific time in the past.  This is useful to verify the integrity of
-the documents in the archive.&lt;/p&gt;
-
-&lt;p&gt;Then it occured to me, perhaps the trusted timestamps could be
-stored as dokument variants (ie dokumentobjekt referered to from
-dokumentbeskrivelse) with the filename set to the hash it is
-stamping?&lt;/p&gt;
-
-&lt;p&gt;Given a &quot;dokumentbeskrivelse&quot; with an associated &quot;dokumentobjekt&quot;,
-a new dokumentobjekt is associated with &quot;dokumentbeskrivelse&quot; with the
-same attributes as the stamped dokumentobjekt except these
-attributes:&lt;/p&gt;
+               <title>Automatic Google Drive sync using grive in Debian</title>
+               <link>http://people.skolelinux.org/pere/blog/Automatic_Google_Drive_sync_using_grive_in_Debian.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Automatic_Google_Drive_sync_using_grive_in_Debian.html</guid>
+                <pubDate>Thu, 4 Oct 2018 15:20:00 +0200</pubDate>
+               <description>&lt;p&gt;A few days, I rescued a Windows victim over to Debian.  To try to
+rescue the remains, I helped set up automatic sync with Google Drive.
+I did not find any sensible Debian package handling this
+automatically, so I rebuild the grive2 source from
+&lt;a href=&quot;http://www.webupd8.org/&quot;&gt;the Ubuntu UPD8 PPA&lt;/a&gt; to do the
+task and added a autostart desktop entry and a small shell script to
+run in the background while the user is logged in to do the sync.
+Here is a sketch of the setup for future reference.&lt;/p&gt;
+
+&lt;p&gt;I first created &lt;tt&gt;~/googledrive&lt;/tt&gt;, entered the directory and
+ran &#39;&lt;tt&gt;grive -a&lt;/tt&gt;&#39; to authenticate the machine/user.  Next, I
+created a autostart hook in &lt;tt&gt;~/.config/autostart/grive.desktop&lt;/tt&gt;
+to start the sync when the user log in:&lt;/p&gt;

 
 

-&lt;ul&gt;
+&lt;p&gt;&lt;blockquote&gt;&lt;pre&gt;
+[Desktop Entry]
+Name=Google drive autosync
+Type=Application
+Exec=/home/user/bin/grive-sync
+&lt;/pre&gt;&lt;/blockquote&gt;&lt;/p&gt;

 
 

-&lt;li&gt;format -&gt; &quot;RFC3161&quot;
-&lt;li&gt;mimeType -&gt; &quot;application/timestamp-reply&quot;
-&lt;li&gt;formatDetaljer -&gt; &quot;&amp;lt;source URL for timestamp service&amp;gt;&quot;
-&lt;li&gt;filenavn -&gt; &quot;&amp;lt;sjekksum&amp;gt;.tsr&quot;
+&lt;p&gt;Finally, I wrote the &lt;tt&gt;~/bin/grive-sync&lt;/tt&gt; script to sync
+~/googledrive/ with the files in Google Drive.&lt;/p&gt;

 
 

-&lt;/ul&gt;
+&lt;p&gt;&lt;blockquote&gt;&lt;pre&gt;
+#!/bin/sh
+set -e
+cd ~/
+cleanup() {
+    if [ &quot;$syncpid&quot; ] ; then
+        kill $syncpid
+    fi
+}
+trap cleanup EXIT INT QUIT
+/usr/lib/grive/grive-sync.sh listen googledrive 2&gt;&amp;1 | sed &quot;s%^%$0:%&quot; &amp;
+syncpdi=$!
+while true; do
+    if ! xhost &gt;/dev/null 2&gt;&amp;1 ; then
+        echo &quot;no DISPLAY, exiting as the user probably logged out&quot;
+        exit 1
+    fi
+    if [ ! -e /run/user/1000/grive-sync.sh_googledrive ] ; then
+        /usr/lib/grive/grive-sync.sh sync googledrive
+    fi
+    sleep 300
+done 2&gt;&amp;1 | sed &quot;s%^%$0:%&quot;
+&lt;/pre&gt;&lt;/blockquote&gt;&lt;/p&gt;

 
 

-&lt;p&gt;This assume a service following
-&lt;a href=&quot;https://tools.ietf.org/html/rfc3161&quot;&gt;IETF RFC 3161&lt;/a&gt; is
-used, which specifiy the given MIME type for replies and the .tsr file
-ending for the content of such trusted timestamp.  As far as I can
-tell from the Noark 5 specifications, it is OK to have several
-variants/renderings of a dokument attached to a given
-dokumentbeskrivelse objekt.  It might be stretching it a bit to make
-some of these variants represent crypto-signatures useful for
-verifying the document integrity instead of representing the dokument
-itself.&lt;/p&gt;
-
-&lt;p&gt;Using the source of the service in formatDetaljer allow several
-timestamping services to be used.  This is useful to spread the risk
-of key compromise over several organisations.  It would only be a
-problem to trust the timestamps if all of the organisations are
-compromised.&lt;/p&gt;
-
-&lt;p&gt;The following oneliner on Linux can be used to generate the tsr
-file.  $input is the path to the file to checksum, and $sha256 is the
-SHA-256 checksum of the file (ie the &quot;&lt;sjekksum&gt;.tsr&quot; value mentioned
-above).&lt;/p&gt;
+&lt;p&gt;Feel free to use the setup if you want.  It can be assumed to be
+GNU GPL v2 licensed (or any later version, at your leisure), but I
+doubt this code is possible to claim copyright on.&lt;/p&gt;
+
+&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
+activities, please send Bitcoin donations to my address
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;
+</description>
+       </item>
+       
+       <item>
+               <title>Valutakrambod - A python and bitcoin love story</title>
+               <link>http://people.skolelinux.org/pere/blog/Valutakrambod___A_python_and_bitcoin_love_story.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Valutakrambod___A_python_and_bitcoin_love_story.html</guid>
+                <pubDate>Sat, 29 Sep 2018 22:20:00 +0200</pubDate>
+               <description>&lt;p&gt;It would come as no surprise to anyone that I am interested in
+bitcoins and virtual currencies.  I&#39;ve been keeping an eye on virtual
+currencies for many years, and it is part of the reason a few months
+ago, I started writing a python library for collecting currency
+exchange rates and trade on virtual currency exchanges.  I decided to
+name the end result valutakrambod, which perhaps can be translated to
+small currency shop.&lt;/p&gt;
+
+&lt;p&gt;The library uses the tornado python library to handle HTTP and
+websocket connections, and provide a asynchronous system for
+connecting to and tracking several services.  The code is available
+from
+&lt;a href=&quot;http://github.com/petterreinholdtsen/valutakrambod&quot;&gt;github&lt;/a&gt;.&lt;/p&gt;
+
+&lt;/p&gt;There are two example clients of the library.  One is very simple and
+list every updated buy/sell price received from the various services.
+This code is started by running bin/btc-rates and call the client code
+in valutakrambod/client.py.  The simple client look like this:&lt;/p&gt;

 
 &lt;p&gt;&lt;blockquote&gt;&lt;pre&gt;
 
 &lt;p&gt;&lt;blockquote&gt;&lt;pre&gt;

-openssl ts -query -data &quot;$inputfile&quot; -cert -sha256 -no_nonce \
-  | curl -s -H &quot;Content-Type: application/timestamp-query&quot; \
-      --data-binary &quot;@-&quot; http://zeitstempel.dfn.de &gt; $sha256.tsr
+import functools
+import tornado.ioloop
+import valutakrambod
+class SimpleClient(object):
+    def __init__(self):
+        self.services = []
+        self.streams = []
+        pass
+    def newdata(self, service, pair, changed):
+        print(&quot;%-15s %s-%s: %8.3f %8.3f&quot; % (
+            service.servicename(),
+            pair[0],
+            pair[1],
+            service.rates[pair][&#39;ask&#39;],
+            service.rates[pair][&#39;bid&#39;])
+        )
+    async def refresh(self, service):
+        await service.fetchRates(service.wantedpairs)
+    def run(self):
+        self.ioloop = tornado.ioloop.IOLoop.current()
+        self.services = valutakrambod.service.knownServices()
+        for e in self.services:
+            service = e()
+            service.subscribe(self.newdata)
+            stream = service.websocket()
+            if stream:
+                self.streams.append(stream)
+            else:
+                # Fetch information from non-streaming services immediately
+                self.ioloop.call_later(len(self.services),
+                                       functools.partial(self.refresh, service))
+                # as well as regularly
+                service.periodicUpdate(60)
+        for stream in self.streams:
+            stream.connect()
+        try:
+            self.ioloop.start()
+        except KeyboardInterrupt:
+            print(&quot;Interrupted by keyboard, closing all connections.&quot;)
+            pass
+        for stream in self.streams:
+            stream.close()

 &lt;/pre&gt;&lt;/blockquote&gt;&lt;/p&gt;
 
 &lt;/pre&gt;&lt;/blockquote&gt;&lt;/p&gt;
 

-&lt;p&gt;To verify the timestamp, you first need to download the public key
-of the trusted timestamp service, for example using this command:&lt;/p&gt;
+&lt;p&gt;The library client loops over all known &quot;public&quot; services,
+initialises it, subscribes to any updates from the service, checks and
+activates websocket streaming if the service provide it, and if no
+streaming is supported, fetches information from the service and sets
+up a periodic update every 60 seconds.  The output from this client
+can look like this:&lt;/p&gt;

 
 &lt;p&gt;&lt;blockquote&gt;&lt;pre&gt;
 
 &lt;p&gt;&lt;blockquote&gt;&lt;pre&gt;

-wget -O ca-cert.txt \
-  https://pki.pca.dfn.de/global-services-ca/pub/cacert/chain.txt
+Bl3p            BTC-EUR: 5687.110 5653.690
+Bl3p            BTC-EUR: 5687.110 5653.690
+Bl3p            BTC-EUR: 5687.110 5653.690
+Hitbtc          BTC-USD: 6594.560 6593.690
+Hitbtc          BTC-USD: 6594.560 6593.690
+Bl3p            BTC-EUR: 5687.110 5653.690
+Hitbtc          BTC-USD: 6594.570 6593.690
+Bitstamp        EUR-USD:    1.159    1.154
+Hitbtc          BTC-USD: 6594.570 6593.690
+Hitbtc          BTC-USD: 6594.580 6593.690
+Hitbtc          BTC-USD: 6594.580 6593.690
+Hitbtc          BTC-USD: 6594.580 6593.690
+Bl3p            BTC-EUR: 5687.110 5653.690
+Paymium         BTC-EUR: 5680.000 5620.240

 &lt;/pre&gt;&lt;/blockquote&gt;&lt;/p&gt;
 
 &lt;/pre&gt;&lt;/blockquote&gt;&lt;/p&gt;
 

-&lt;p&gt;Note, the public key should be stored alongside the timestamps in
-the archive to make sure it is also available 100 years from now.  It
-is probably a good idea to standardise how and were to store such
-public keys, to make it easier to find for those trying to verify
-documents 100 or 1000 years from now. :)&lt;/p&gt;
+&lt;p&gt;The exchange order book is tracked in addition to the best buy/sell
+price, for those that need to know the details.&lt;/p&gt;

 
 

-&lt;p&gt;The verification itself is a simple openssl command:&lt;/p&gt;
+&lt;p&gt;The other example client is focusing on providing a curses view
+with updated buy/sell prices as soon as they are received from the
+services.  This code is located in bin/btc-rates-curses and activated
+by using the &#39;-c&#39; argument.  Without the argument the &quot;curses&quot; output
+is printed without using curses, which is useful for debugging.  The
+curses view look like this:&lt;/p&gt;

 
 &lt;p&gt;&lt;blockquote&gt;&lt;pre&gt;
 
 &lt;p&gt;&lt;blockquote&gt;&lt;pre&gt;

-openssl ts -verify -data $inputfile -in $sha256.tsr \
-  -CAfile ca-cert.txt -text
+           Name Pair   Bid         Ask         Spr    Ftcd    Age
+ BitcoinsNorway BTCEUR   5591.8400   5711.0800   2.1%   16    nan     60
+       Bitfinex BTCEUR   5671.0000   5671.2000   0.0%   16     22     59
+        Bitmynt BTCEUR   5580.8000   5807.5200   3.9%   16     41     60
+         Bitpay BTCEUR   5663.2700         nan   nan%   15    nan     60
+       Bitstamp BTCEUR   5664.8400   5676.5300   0.2%    0      1      1
+           Bl3p BTCEUR   5653.6900   5684.9400   0.5%    0    nan     19
+       Coinbase BTCEUR   5600.8200   5714.9000   2.0%   15    nan    nan
+         Kraken BTCEUR   5670.1000   5670.2000   0.0%   14     17     60
+        Paymium BTCEUR   5620.0600   5680.0000   1.1%    1   7515    nan
+ BitcoinsNorway BTCNOK  52898.9700  54034.6100   2.1%   16    nan     60
+        Bitmynt BTCNOK  52960.3200  54031.1900   2.0%   16     41     60
+         Bitpay BTCNOK  53477.7833         nan   nan%   16    nan     60
+       Coinbase BTCNOK  52990.3500  54063.0600   2.0%   15    nan    nan
+        MiraiEx BTCNOK  52856.5300  54100.6000   2.3%   16    nan    nan
+ BitcoinsNorway BTCUSD   6495.5300   6631.5400   2.1%   16    nan     60
+       Bitfinex BTCUSD   6590.6000   6590.7000   0.0%   16     23     57
+         Bitpay BTCUSD   6564.1300         nan   nan%   15    nan     60
+       Bitstamp BTCUSD   6561.1400   6565.6200   0.1%    0      2      1
+       Coinbase BTCUSD   6504.0600   6635.9700   2.0%   14    nan    117
+         Gemini BTCUSD   6567.1300   6573.0700   0.1%   16     89    nan
+         Hitbtc+BTCUSD   6592.6200   6594.2100   0.0%    0      0      0
+         Kraken BTCUSD   6565.2000   6570.9000   0.1%   15     17     58
+  Exchangerates EURNOK      9.4665      9.4665   0.0%   16 107789    nan
+     Norgesbank EURNOK      9.4665      9.4665   0.0%   16 107789    nan
+       Bitstamp EURUSD      1.1537      1.1593   0.5%    4      5      1
+  Exchangerates EURUSD      1.1576      1.1576   0.0%   16 107789    nan
+ BitcoinsNorway LTCEUR      1.0000     49.0000  98.0%   16    nan    nan
+ BitcoinsNorway LTCNOK    492.4800    503.7500   2.2%   16    nan     60
+ BitcoinsNorway LTCUSD      1.0221     49.0000  97.9%   15    nan    nan
+     Norgesbank USDNOK      8.1777      8.1777   0.0%   16 107789    nan

 &lt;/pre&gt;&lt;/blockquote&gt;&lt;/p&gt;
 
 &lt;/pre&gt;&lt;/blockquote&gt;&lt;/p&gt;
 

-&lt;p&gt;Is there any reason this approach would not work?  Is it somehow against
-the Noark 5 specification?&lt;/p&gt;
-</description>
-       </item>
-       
-       <item>
-               <title>Når nynorskoversettelsen svikter til eksamen...</title>
-               <link>http://people.skolelinux.org/pere/blog/N_r_nynorskoversettelsen_svikter_til_eksamen___.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/N_r_nynorskoversettelsen_svikter_til_eksamen___.html</guid>
-                <pubDate>Sat, 3 Jun 2017 08:20:00 +0200</pubDate>
-               <description>&lt;p&gt;&lt;a href=&quot;http://www.aftenposten.no/norge/Krever-at-elever-ma-fa-annullert-eksamen-etter-rot-med-oppgavetekster-622459b.html&quot;&gt;Aftenposten
-melder i dag&lt;/a&gt; om feil i eksamensoppgavene for eksamen i politikk og
-menneskerettigheter, der teksten i bokmåls og nynorskutgaven ikke var
-like.  Oppgaveteksten er gjengitt i artikkelen, og jeg ble nysgjerring
-på om den fri oversetterløsningen
-&lt;a href=&quot;https://www.apertium.org/&quot;&gt;Apertium&lt;/a&gt; ville gjort en bedre
-jobb enn Utdanningsdirektoratet.  Det kan se slik ut.&lt;/p&gt;
-
-&lt;p&gt;Her er bokmålsoppgaven fra eksamenen:&lt;/p&gt;
-
-&lt;blockquote&gt;
-&lt;p&gt;Drøft utfordringene knyttet til nasjonalstatenes og andre aktørers
-rolle og muligheter til å håndtere internasjonale utfordringer, som
-for eksempel flykningekrisen.&lt;/p&gt;
-
-&lt;p&gt;Vedlegge er eksempler på tekster som kan gi relevante perspektiver
-på temaet:&lt;/p&gt;
-&lt;ol&gt;
-&lt;li&gt;Flykningeregnskapet 2016, UNHCR og IDMC
-&lt;li&gt;«Grenseløst Europa for fall» A-Magasinet, 26. november 2015
-&lt;/ol&gt;
-
-&lt;/blockquote&gt;
-
-&lt;p&gt;Dette oversetter Apertium slik:&lt;/p&gt;
-
-&lt;blockquote&gt;
-&lt;p&gt;Drøft utfordringane knytte til nasjonalstatane sine og rolla til
-andre aktørar og høve til å handtera internasjonale utfordringar, som
-til dømes *flykningekrisen.&lt;/p&gt;
-
-&lt;p&gt;Vedleggja er døme på tekster som kan gje relevante perspektiv på
-temaet:&lt;/p&gt;
-
-&lt;ol&gt;
-&lt;li&gt;*Flykningeregnskapet 2016, *UNHCR og *IDMC&lt;/li&gt;
-&lt;li&gt;«*Grenseløst Europa for fall» A-Magasinet, 26. november 2015&lt;/li&gt;
-&lt;/ol&gt;
-
-&lt;/blockquote&gt;
-
-&lt;p&gt;Ord som ikke ble forstått er markert med stjerne (*), og trenger
-ekstra språksjekk.  Men ingen ord er forsvunnet, slik det var i
-oppgaven elevene fikk presentert på eksamen.  Jeg mistenker dog at
-&quot;andre aktørers rolle og muligheter til ...&quot; burde vært oversatt til
-&quot;rolla til andre aktørar og deira høve til ...&quot; eller noe slikt, men
-det er kanskje flisespikking.  Det understreker vel bare at det alltid
-trengs korrekturlesning etter automatisk oversettelse.&lt;/p&gt;
+&lt;p&gt;The code for this client is too complex for a simple blog post, so
+you will have to check out the git repository to figure out how it
+work.  What I can tell is how the three last numbers on each line
+should be interpreted.  The first is how many seconds ago information
+was received from the service.  The second is how long ago, according
+to the service, the provided information was updated.  The last is an
+estimate on how often the buy/sell values change.&lt;/p&gt;
+
+&lt;p&gt;If you find this library useful, or would like to improve it, I
+would love to hear from you.  Note that for some of the services I&#39;ve
+implemented a trading API.  It might be the topic of a future blog
+post.&lt;/p&gt;
+
+&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
+activities, please send Bitcoin donations to my address
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;

 </description>
        </item>
        
 </description>
        </item>