New post.

[homepage.git] / blog / index.rss

diff --git a/blog/index.rss b/blog/index.rss
index 3698e521f7f7a121b5e0a15bf4c16fbc0fc577c9..530fc6ddc36454fcacb7388847fc50eb93743633 100644 (file)
--- a/blog/index.rss
+++ b/blog/index.rss
@@ -7,920 +7,547 @@
                 <atom:link href="http://people.skolelinux.org/pere/blog/index.rss" rel="self" type="application/rss+xml" />
        
        <item>
-               <title>Oversette bokmål til nynorsk, enklere enn du tror takket være Apertium</title>
-               <link>http://people.skolelinux.org/pere/blog/Oversette_bokm_l_til_nynorsk__enklere_enn_du_tror_takket_v_re_Apertium.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Oversette_bokm_l_til_nynorsk__enklere_enn_du_tror_takket_v_re_Apertium.html</guid>
-                <pubDate>Thu, 24 Nov 2016 10:50:00 +0100</pubDate>
-               <description>&lt;p&gt;I Norge er det mange som trenger å skrive både bokmål og nynorsk.
-Eksamensoppgaver, offentlige brev og nyheter er eksempler på tekster
-der det er krav om målføre.  I tillegg til alle skoleoppgavene som
-elever over det ganske land skal levere inn hvert år.  Det mange ikke
-vet er at selv om de kommersielle alternativene
-&lt;a href=&quot;https://translate.google.com/&quot;&gt;Google Translate&lt;/a&gt; og
-&lt;a href=&quot;https://www.bing.com/translator/&quot;&gt;Bing Translator&lt;/a&gt; ikke kan
-bidra med å oversette mellom bokmål og nynorsk, så finnes det et
-utmerket fri programvarealternativ som kan.  Oversetterverktøyet
-Apertium har støtte for en rekke språkkombinasjoner, og takket være
-den utrettelige innsatsen til blant annet Kevin Brubeck Unhammer, kan
-en bruke webtjenesten til å fylle inn en tekst på bokmål eller
-nynorsk, og få den automatoversatt til det andre målføret.  Resultatet
-er ikke perfekt, men et svært godt utgangspunkt.  Av og til er
-resultatet så bra at det kan benyttes uten endringer.  Jeg vet
-f.eks. at store deler av Joomla ble oversatt til nynorsk ved hjelp
-Apertium.  Høres det ut som noe du kan ha bruk for?  Besøk i så fall
-&lt;a href=&quot;https://www.apertium.org/&quot;&gt;Apertium.org&lt;/a&gt; og fyll inn
-teksten din i webskjemaet der.
-
-&lt;p&gt;Hvis du trenger maskinell tilgang til den bakenforliggende
-teknologien kan du enten installere pakken
-&lt;a href=&quot;https://tracker.debian.org/apertium-nno-nob&quot;&gt;apertium-nno-nob&lt;/a&gt;
-på en Debian-maskin eller bruke web-API-et tilgjengelig fra
-api.apertium.org.  Se
-&lt;a href=&quot;http://wiki.apertium.org/wiki/Apertium-apy&quot;&gt;API-dokumentasjonen&lt;/a&gt;
-for detaljer om web-API-et.  Her kan du se hvordan resultatet blir for
-denne teksten som ble skrevet på bokmål over maskinoversatt til
-nynorsk.&lt;/p&gt;
-
-&lt;hr/&gt;
-
-&lt;p&gt;I Noreg er det mange som treng å skriva både bokmål og nynorsk.
-Eksamensoppgåver, offentlege brev og nyhende er døme på tekster der
-det er krav om målføre.  I tillegg til alle skuleoppgåvene som elevar
-over det ganske land skal levera inn kvart år.  Det mange ikkje veit
-er at sjølv om dei kommersielle alternativa
-&lt;a href=&quot;https://translate.google.com/&quot;&gt;Google *Translate&lt;/a&gt; og
-&lt;a href=&quot;https://www.bing.com/translator/&quot;&gt;Bing *Translator&lt;/a&gt; ikkje
-kan bidra med å omsetja mellom bokmål og nynorsk, så finst det eit
-utmerka fri programvarealternativ som kan.  Omsetjarverktøyet
-*Apertium har støtte for ei rekkje språkkombinasjonar, og takka vera
-den utrøyttelege innsatsen til blant anna Kevin Brubeck Unhammer, kan
-ein bruka *webtjenesten til å fylla inn ei tekst på bokmål eller
-nynorsk, og få den *automatoversatt til det andre målføret.
-Resultatet er ikkje perfekt, men eit svært godt utgangspunkt.  Av og
-til er resultatet så bra at det kan nyttast utan endringar.  Eg veit
-t.d. at store delar av *Joomla vart omsett til nynorsk ved hjelp
-*Apertium.  Høyrast det ut som noko du kan ha bruk for?  Besøk i så
-fall &lt;a href=&quot;https://www.apertium.org/&quot;&gt;*Apertium.org&lt;/a&gt; og fyll inn
-teksta di i *webskjemaet der.
-
-&lt;p&gt;Viss du treng *maskinell tilgjenge til den *bakenforliggende
-teknologien kan du anten installera pakken
-&lt;a href=&quot;https://tracker.debian.org/apertium-nno-nob&quot;&gt;*apertium-*nno-*nob&lt;/a&gt;
-på ein *Debian-maskin eller bruka *web-*API-eit tilgjengeleg frå
-*api.*apertium.org.  Sjå
-&lt;a href=&quot;http://wiki.apertium.org/wiki/Apertium-apy&quot;&gt;*API-dokumentasjonen&lt;/a&gt;
-for detaljar om *web-*API-eit.  Her kan du sjå korleis resultatet vert
-for denne teksta som vart skreva på bokmål over *maskinoversatt til
-nynorsk.&lt;/p&gt;
+               <title>How does it feel to be wiretapped, when you should be doing the wiretapping...</title>
+               <link>http://people.skolelinux.org/pere/blog/How_does_it_feel_to_be_wiretapped__when_you_should_be_doing_the_wiretapping___.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/How_does_it_feel_to_be_wiretapped__when_you_should_be_doing_the_wiretapping___.html</guid>
+                <pubDate>Wed, 8 Mar 2017 11:50:00 +0100</pubDate>
+               <description>&lt;p&gt;So the new president in the United States of America claim to be
+surprised to discover that he was wiretapped during the election
+before he was elected president.  He even claim this must be illegal.
+Well, doh, if it is one thing the confirmations from Snowden
+documented, it is that the entire population in USA is wiretapped, one
+way or another.  Of course the president candidates were wiretapped,
+alongside the senators, judges and the rest of the people in USA.&lt;/p&gt;
+
+&lt;p&gt;Next, the Federal Bureau of Investigation ask the Department of
+Justice to go public rejecting the claims that Donald Trump was
+wiretapped illegally.  I fail to see the relevance, given that I am
+sure the surveillance industry in USA believe they have all the legal
+backing they need to conduct mass surveillance on the entire
+world.&lt;/p&gt;
+
+&lt;p&gt;There is even the director of the FBI stating that he never saw an
+order requesting wiretapping of Donald Trump.  That is not very
+surprising, given how the FISA court work, with all its activity being
+secret.  Perhaps he only heard about it?&lt;/p&gt;
+
+&lt;p&gt;What I find most sad in this story is how Norwegian journalists
+present it.  In a news reports the other day in the radio from the
+Norwegian National broadcasting Company (NRK), I heard the journalist
+claim that &#39;the FBI denies any wiretapping&#39;, while the reality is that
+&#39;the FBI denies any illegal wiretapping&#39;.  There is a fundamental and
+important difference, and it make me sad that the journalists are
+unable to grasp it.&lt;/p&gt;
 </description>
        </item>
        
        <item>
-               <title>Hyperions magasin Pegasus går for Creative Commons</title>
-               <link>http://people.skolelinux.org/pere/blog/Hyperions_magasin_Pegasus_g_r_for_Creative_Commons.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Hyperions_magasin_Pegasus_g_r_for_Creative_Commons.html</guid>
-                <pubDate>Tue, 22 Nov 2016 20:10:00 +0100</pubDate>
-               <description>&lt;p&gt;For noen dager siden ble jeg tipset av min venn Andreas
-Aanerud om at &lt;a href=&quot;http://magasinetpegasus.no&quot;&gt;magasinet
-Pegasus&lt;/a&gt; skulle ta i bruk
-&lt;a href=&quot;https://creativecommons.org/&quot;&gt;Creative
-Commons&lt;/a&gt;-lisensiering på sine artikler.  Han fortalte at den
-direkte årsaken var at han hadde blitt inspirert av å lese
-&lt;a href=&quot; http://www.lulu.com/shop/http://www.lulu.com/shop/lawrence-lessig/fri-kultur/paperback/product-22441576.html&quot;&gt;boken
-Fri kultur&lt;/a&gt;
-(&lt;a href=&quot;https://github.com/petterreinholdtsen/free-culture-lessig&quot;&gt;github&lt;/a&gt;)
-og foreslått endringen.  Jeg ble veldig glad for å høre
-dette, da det er det første konkrete tilfellet jeg har hørt om der den
-norske oversettelsen av &lt;a href=&quot;http://www.free-culture.cc/&quot;&gt;
-Lawrence Lessigs bok Free Culture&lt;/a&gt; som jeg ga ut i fjor høst hadde
-fått noen til å ta i bruk Creative Commons.&lt;/p&gt;
-
-&lt;p&gt;Andreas fikk boken av meg som takk for at han inviterte meg til
-&lt;a href=&quot;http://www.gathering.org/&quot;&gt;The Gathering&lt;/a&gt;, og jeg er veldig
-glad for at den falt i smak.  Jeg ble nysgjerrig på hva som var
-bakgrunnen for denne policy-endringen hos Hyperion og han sa seg
-villig til å la seg intervjue til bloggen min. &lt;/p&gt;
-
-&lt;blockquote&gt;
-
-&lt;p&gt;&lt;strong&gt;Hvilke tanker gjorde du deg da boken lå i hånden første
-gang?&lt;/strong&gt;&lt;/p&gt;
-
-&lt;p&gt;Jeg husker da jeg fikk boken, etter en omvisning på The Gathering i
-2016, der jeg var Core Organizer.  The Gathering er jo et sted hvor en
-fremmer delingskultur, i alt fra kode, til løsninger og «hacks», så en
-kan vel si at boken er veldig relevant!&lt;/p&gt;
-
-&lt;p&gt;Mine første tanker om boken, var at den trengte et grafisk løft.
-Selv har jeg dysleksi og er ikke verdens beste i å lese, men for meg
-så skal ikke det bety at jeg ikke klarer å lese.  Jeg har jo også mine
-egne tanker om «Fri kultur», ettersom jeg har jobbet med noen norske
-filmer via NRK og TV2 og nå sitter som en teknisk leder i
-filmavdelingen til Schjærven Reklamebyrå.&lt;/p&gt;
-
-&lt;p&gt;&lt;strong&gt;Har du lest boken, og hva tenker du om den nå?&lt;/strong&gt;&lt;/p&gt;
-
-&lt;p&gt;Jeg har lest boken, og for meg er det jo veldig moro å kunne si at
-Disney var en pirat og nå ha bevisene.  Men det å gå fra Disney via
-RIAA, og så igjennom en jungel av teknikk og programmering og ende opp
-med spørsmålet om vi alle piratkopierer litt, er enda bedre.  For ja,
-boken klarer å få frem en diskusjon om åndsverk på en god måte
-gjennom en samling historier, men den viste meg også et bilde, hvor
-teknologi blir kneblet, og ikke får lov til å utvikle seg, ettersom
-«opphavsrettsinnehaverne» bryr seg mer om sin industri enn om verden
-går fremover.  Ta f.eks. internettradio!  Hvorfor tuller vi med DAB+
-og alt det der, når radio kan være en app på alle telefoner i dag.
-Men den største tanken som jeg satt igjen med, er at vi må få færre
-advokater og flere tenkere som kan dra oss vekk fra de feilene vi er i
-ferd med å ende opp i.&lt;/p&gt;
-
-&lt;p&gt;&lt;strong&gt;Har budskapet i boken påvirker deg og det du holder på
-med?&lt;/strong&gt;&lt;/p&gt;
-
-&lt;p&gt;The Gathering sin moderforening er
-&lt;a href=&quot;http://www.kandu.no/&quot;&gt;KANDU&lt;/a&gt;, som er et stolt medlem av &lt;a
-href=&quot;http://n4f.no/&quot;&gt;Hyperion&lt;/a&gt;.  Hyperion har et mandat igjennom
-sitt interne magasin Pegasus å fremme Hyperion sine
-medlemsarrangementer og kultur. Dette tror jeg er veldig viktig, og en
-av de viktigste virkemidlene det magasinet nå har fått, er pålegget om
-å publisere alt under de forskjellige Creative Commons
-retningslinjer. Grunnen til at Pegasus kan velge fritt blant lisensene
-til Creative Commons er deres bruk av freelancere m.m. som også må få
-sine rettigheter dekket.&lt;/p&gt;
-
-&lt;p&gt;Det er et steg i riktig retning som jeg håper, vil gi lokalaviser,
-nasjonale aviser, bloggere m.m. muligheten til å referere til Pegasus
-sitt innhold uten å måtte be om tillatelse først, som i bunnen vil
-hjelpe oss å spre vår kultur i Hyperion.&lt;/p&gt;
-
-&lt;p&gt;&lt;strong&gt;Hva fikk Pegasus til å vedta retninglinjer om bruk av
-Creative Commons, og hvordan kom dere frem til en slik
-policy?&lt;/strong&gt;&lt;/p&gt;
-
-&lt;p&gt;Dette skjedde på Hyperion sitt landsting, hvor jeg ønsket å fremme
-Creative Commons som en retning som flere mener magasinet burde ta,
-hvordan Pegasus tar det i bruk er mer opp til redaksjonen. Det som var
-trist er at en del har misforstått hva Creative Commons er.  Vi fikk
-en veldig het «debatt» på facebook i etterkant hvor noen blant annet
-mener at dette vedtaket har drept Pegasus.&lt;/p&gt;
-
-&lt;p&gt;Personlig syntes jeg disse reaksjonene er rare, ettersom Pegasus er
-et medlemsmagasin og magasinet sitt mål er å spre vår fantastiske
-kultur.  Jeg mener at Ceative Commons-bruksvilkår på artikler skaper
-en veldig god mulighet til å spre denne kulturen.  Det gjør at større
-og mindre aviser kan låne artikler fra medlemsmagasinet og publisere
-det hos seg, slik at effekten nettopp er fremme vår kultur.&lt;/p&gt;
-
-&lt;p&gt;Jeg gleder meg til å se hvordan redaksjonen håndhever bruken av
-Creative Commons.&lt;/p&gt;
-
-&lt;p&gt;&lt;strong&gt;Hvem tror du kunne ha mest nytte av å lese Fri
-kultur?&lt;/strong&gt;&lt;/p&gt;
-
-&lt;p&gt;Jeg tror at boken Fri kultur bør leses av de som ønsker en debatt
-om nye medier, samt de som jobber med medier og føler seg «truet» av
-utviklingen. Kanskje det kan være et lysglimt om at vi må heller være
-med å utvikle oss, enn å stoppe opp og «beskytte» våre eier-, penge-
-og materielle interesser.&lt;/p&gt;
-
-&lt;p&gt;Spørsmålet for redaksjoner vil vel være om de «tjener» på klikk og
-sine artikler via annonser, i så fall ville jeg tenkt litt rundt
-spredningen.  Nettavisen Digi.no gjorde en analyse i 2015 som var
-veldig fin. Hvor de måtte konkludere med at de fikk ut budskapet
-bedre, men de mistet inntekter på annonsevisning.&lt;/p&gt;
-
-&lt;p&gt;Derfor for et magasin som skal «spre» kultur, så burde Creative
-Commons være en no-brainer, en kunne også kanskje argumentere med at
-NRK også burde gjøre dette, ettersom de ikke lever av reklame, og vi
-betaler for innholdet deres.&lt;/p&gt;
-
-&lt;p&gt;&lt;strong&gt;Kommer du til å anbefale boken til noen du
-kjenner?&lt;/strong&gt;&lt;/p&gt;
-
-&lt;p&gt;Absolutt!  Jeg har faktisk tenkt å gi den videre som en vandrebok,
-til redaksjonen i Pegasus slik at de kan lese den og få noen ider og
-tanker om fri kultur.&lt;/p&gt;
-
-&lt;p&gt;&lt;strong&gt;Du sier at boken klarer å få frem viktig en diskusjon om
-  vern av åndsverk.  Boken er jo skrevet med bakgrunn i USAs
-  Copyright-lovgiving og ikke den norske åndsverksloven.  Hva gjør at
-  du mener boken er relevant for den norske debatten?&lt;/strong&gt;&lt;/p&gt;
-
-&lt;p&gt;En av tingene boken pekte på var tanken om hvor opphavsretten skal
-ligge.  Skal den ligge hos den som skriver sangen, den som fremfører
-eller den som tar opp sangen.  Og når spørsmålet kom tilbake i en
-software-utgave, «hvordan kan Adobe styre opphavsretten i sin eBook
-Publisher» så føler jeg at vi kommer inn på spennende tanker som jeg
-mener vi glemmer i norsk åndsverksdebatt.  USA har rett å slett et
-«større bilde» som kanskje vi kan ta lærdom av.&lt;/p&gt;
-
-&lt;/blockquote&gt;
-
-&lt;p&gt;Jeg er veldig spent på hvordan redaksjonen i Pegasus kommer til å
-ta i bruk Creative Commons, og gleder meg til neste tegn på at
-bokutgivelsen har fått noen til å tenke mer på problemene med dagens
-åndsverksvern.&lt;/p&gt;
+               <title>Norwegian Bokmål translation of The Debian Administrator&#39;s Handbook complete, proofreading in progress</title>
+               <link>http://people.skolelinux.org/pere/blog/Norwegian_Bokm_l_translation_of_The_Debian_Administrator_s_Handbook_complete__proofreading_in_progress.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Norwegian_Bokm_l_translation_of_The_Debian_Administrator_s_Handbook_complete__proofreading_in_progress.html</guid>
+                <pubDate>Fri, 3 Mar 2017 14:50:00 +0100</pubDate>
+               <description>&lt;p&gt;For almost a year now, we have been working on making a Norwegian
+Bokmål edition of &lt;a href=&quot;https://debian-handbook.info/&quot;&gt;The Debian
+Administrator&#39;s Handbook&lt;/a&gt;.  Now, thanks to the tireless effort of
+Ole-Erik, Ingrid and Andreas, the initial translation is complete, and
+we are working on the proof reading to ensure consistent language and
+use of correct computer science terms.  The plan is to make the book
+available on paper, as well as in electronic form.  For that to
+happen, the proof reading must be completed and all the figures need
+to be translated.  If you want to help out, get in touch.&lt;/p&gt;
+
+&lt;p&gt;&lt;a href=&quot;http://people.skolelinux.org/pere/debian-handbook/debian-handbook-nb-NO.pdf&quot;&gt;A
+
+fresh PDF edition&lt;/a&gt; in A4 format (the final book will have smaller
+pages) of the book created every morning is available for
+proofreading.  If you find any errors, please
+&lt;a href=&quot;https://hosted.weblate.org/projects/debian-handbook/&quot;&gt;visit
+Weblate and correct the error&lt;/a&gt;.  The
+&lt;a href=&quot;http://l.github.io/debian-handbook/stat/nb-NO/index.html&quot;&gt;state
+of the translation including figures&lt;/a&gt; is a useful source for those
+provide Norwegian bokmål screen shots and figures.&lt;/p&gt;
 </description>
        </item>
        
        <item>
-               <title>Coz profiler for multi-threaded software is now in Debian</title>
-               <link>http://people.skolelinux.org/pere/blog/Coz_profiler_for_multi_threaded_software_is_now_in_Debian.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Coz_profiler_for_multi_threaded_software_is_now_in_Debian.html</guid>
-                <pubDate>Sun, 13 Nov 2016 12:30:00 +0100</pubDate>
-               <description>&lt;p&gt;&lt;a href=&quot;http://coz-profiler.org/&quot;&gt;The Coz profiler&lt;/a&gt;, a nice
-profiler able to run benchmarking experiments on the instrumented
-multi-threaded program, finally
-&lt;a href=&quot;https://tracker.debian.org/pkg/coz-profiler&quot;&gt;made it into
-Debian unstable yesterday&lt;/A&gt;.  Lluís Vilanova and I have spent many
-months since
-&lt;a href=&quot;http://people.skolelinux.org/pere/blog/Coz_can_help_you_find_bottlenecks_in_multi_threaded_software___nice_free_software.html&quot;&gt;I
-blogged about the coz tool&lt;/a&gt; in August working with upstream to make
-it suitable for Debian.  There are still issues with clang
-compatibility, inline assembly only working x86 and minimized
-JavaScript libraries.&lt;/p&gt;
-
-&lt;p&gt;To test it, install &#39;coz-profiler&#39; using apt and run it like this:&lt;/p&gt;
-
-&lt;p&gt;&lt;blockquote&gt;
-&lt;tt&gt;coz run --- /path/to/binary-with-debug-info&lt;/tt&gt;
-&lt;/blockquote&gt;&lt;/p&gt;
-
-&lt;p&gt;This will produce a profile.coz file in the current working
-directory with the profiling information.  This is then given to a
-JavaScript application provided in the package and available from
-&lt;a href=&quot;http://plasma-umass.github.io/coz/&quot;&gt;a project web page&lt;/a&gt;.
-To start the local copy, invoke it in a browser like this:&lt;/p&gt;
-
-&lt;p&gt;&lt;blockquote&gt;
-&lt;tt&gt;sensible-browser /usr/share/coz-profiler/viewer/index.htm&lt;/tt&gt;
-&lt;/blockquote&gt;&lt;/p&gt;
-
-&lt;p&gt;See the project home page and the
-&lt;a href=&quot;https://www.usenix.org/publications/login/summer2016/curtsinger&quot;&gt;USENIX
-;login: article on Coz&lt;/a&gt; for more information on how it is
-working.&lt;/p&gt;
+               <title>Unlimited randomness with the ChaosKey?</title>
+               <link>http://people.skolelinux.org/pere/blog/Unlimited_randomness_with_the_ChaosKey_.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Unlimited_randomness_with_the_ChaosKey_.html</guid>
+                <pubDate>Wed, 1 Mar 2017 20:50:00 +0100</pubDate>
+               <description>&lt;p&gt;A few days ago I ordered a small batch of
+&lt;a href=&quot;http://altusmetrum.org/ChaosKey/&quot;&gt;the ChaosKey&lt;/a&gt;, a small
+USB dongle for generating entropy created by Bdale Garbee and Keith
+Packard.  Yesterday it arrived, and I am very happy to report that it
+work great!  According to its designers, to get it to work out of the
+box, you need the Linux kernel version 4.1 or later.  I tested on a
+Debian Stretch machine (kernel version 4.9), and there it worked just
+fine, increasing the available entropy very quickly.  I wrote a small
+test oneliner to test.  It first print the current entropy level,
+drain /dev/random, and then print the entropy level for five seconds.
+Here is the situation without the ChaosKey inserted:&lt;/p&gt;
+
+&lt;blockquote&gt;&lt;pre&gt;
+% cat /proc/sys/kernel/random/entropy_avail; \
+  dd bs=1M if=/dev/random of=/dev/null count=1; \
+  for n in $(seq 1 5); do \
+     cat /proc/sys/kernel/random/entropy_avail; \
+     sleep 1; \
+  done
+300
+0+1 oppføringer inn
+0+1 oppføringer ut
+28 byte kopiert, 0,000264565 s, 106 kB/s
+4
+8
+12
+17
+21
+%
+&lt;/pre&gt;&lt;/blockquote&gt;
+
+&lt;p&gt;The entropy level increases by 3-4 every second.  In such case any
+application requiring random bits (like a HTTPS enabled web server)
+will halt and wait for more entrpy.  And here is the situation with
+the ChaosKey inserted:&lt;/p&gt;
+
+&lt;blockquote&gt;&lt;pre&gt;
+% cat /proc/sys/kernel/random/entropy_avail; \
+  dd bs=1M if=/dev/random of=/dev/null count=1; \
+  for n in $(seq 1 5); do \
+     cat /proc/sys/kernel/random/entropy_avail; \
+     sleep 1; \
+  done
+1079
+0+1 oppføringer inn
+0+1 oppføringer ut
+104 byte kopiert, 0,000487647 s, 213 kB/s
+433
+1028
+1031
+1035
+1038
+%
+&lt;/pre&gt;&lt;/blockquote&gt;
+
+&lt;p&gt;Quite the difference. :) I bought a few more than I need, in case
+someone want to buy one here in Norway. :)&lt;/p&gt;
+
+&lt;p&gt;Update: The dongle was presented at Debconf last year.  You might
+find &lt;a href=&quot;https://debconf16.debconf.org/talks/94/&quot;&gt;the talk
+recording illuminating&lt;/a&gt;.  It explains exactly what the source of
+randomness is, if you are unable to spot it from the schema drawing
+available from the ChaosKey web site linked at the start of this blog
+post.&lt;/p&gt;
 </description>
        </item>
        
        <item>
-               <title>How to talk with your loved ones in private</title>
-               <link>http://people.skolelinux.org/pere/blog/How_to_talk_with_your_loved_ones_in_private.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/How_to_talk_with_your_loved_ones_in_private.html</guid>
-                <pubDate>Mon, 7 Nov 2016 10:25:00 +0100</pubDate>
-               <description>&lt;p&gt;A few days ago I ran a very biased and informal survey to get an
-idea about what options are being used to communicate with end to end
-encryption with friends and family.  I explicitly asked people not to
-list options only used in a work setting.  The background is the
-uneasy feeling I get when using Signal, a feeling shared by others as
-a blog post from Sander Venima about
-&lt;a href=&quot;https://sandervenema.ch/2016/11/why-i-wont-recommend-signal-anymore/&quot;&gt;why
-he do not recommend Signal anymore&lt;/a&gt; (with
-&lt;a href=&quot;https://news.ycombinator.com/item?id=12883410&quot;&gt;feedback from
-the Signal author available from ycombinator&lt;/a&gt;).  I wanted an
-overview of the options being used, and hope to include those options
-in a less biased survey later on.  So far I have not taken the time to
-look into the individual proposed systems.  They range from text
-sharing web pages, via file sharing and email to instant messaging,
-VOIP and video conferencing.  For those considering which system to
-use, it is also useful to have a look at
-&lt;a href=&quot;https://www.eff.org/secure-messaging-scorecard&quot;&gt;the EFF Secure
-messaging scorecard&lt;/a&gt; which is slightly out of date but still
-provide valuable information.&lt;/p&gt;
-
-&lt;p&gt;So, on to the list.  There were some used by many, some used by a
-few, some rarely used ones and a few mentioned but without anyone
-claiming to use them.  Notice the grouping is in reality quite random
-given the biased self selected set of participants.  First the ones
-used by many:&lt;/p&gt;
-
-&lt;ul&gt;
-
-&lt;li&gt;&lt;a href=&quot;https://whispersystems.org/&quot;&gt;Signal&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;Email w/&lt;a href=&quot;http://openpgp.org/&quot;&gt;OpenPGP&lt;/a&gt; (Enigmail, GPGSuite,etc)&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://www.whatsapp.com/&quot;&gt;Whatsapp&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;IRC w/&lt;a href=&quot;https://otr.cypherpunks.ca/&quot;&gt;OTR&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;XMPP w/&lt;a href=&quot;https://otr.cypherpunks.ca/&quot;&gt;OTR&lt;/a&gt;&lt;/li&gt;
-
-&lt;/ul&gt;
-
-&lt;p&gt;Then the ones used by a few.&lt;/p&gt;
-
-&lt;ul&gt;
-
-&lt;li&gt;&lt;a href=&quot;https://wiki.mumble.info/wiki/Main_Page&quot;&gt;Mumble&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;iMessage (included in iOS from Apple)&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://telegram.org/&quot;&gt;Telegram&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://jitsi.org/&quot;&gt;Jitsi&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://keybase.io/download&quot;&gt;Keybase file&lt;/a&gt;&lt;/li&gt;
-
-&lt;/ul&gt;
-
-&lt;p&gt;Then the ones used by even fewer people&lt;/p&gt;
-
-&lt;ul&gt;
-
-&lt;li&gt;&lt;a href=&quot;https://ring.cx/&quot;&gt;Ring&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://bitmessage.org/&quot;&gt;Bitmessage&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://wire.com/&quot;&gt;Wire&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;VoIP w/&lt;a href=&quot;https://en.wikipedia.org/wiki/ZRTP&quot;&gt;ZRTP&lt;/a&gt; or controlled &lt;a href=&quot;https://en.wikipedia.org/wiki/Secure_Real-time_Transport_Protocol&quot;&gt;SRTP&lt;/a&gt; (e.g using &lt;a href=&quot;https://en.wikipedia.org/wiki/CSipSimple&quot;&gt;CSipSimple&lt;/a&gt;, &lt;a href=&quot;https://en.wikipedia.org/wiki/Linphone&quot;&gt;Linphone&lt;/a&gt;)&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://matrix.org/&quot;&gt;Matrix&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://kontalk.org/&quot;&gt;Kontalk&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://0bin.net/&quot;&gt;0bin&lt;/a&gt; (encrypted pastebin)&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://appear.in&quot;&gt;Appear.in&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://riot.im/&quot;&gt;riot&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://www.wickr.com/&quot;&gt;Wickr Me&lt;/a&gt;&lt;/li&gt;
-
-&lt;/ul&gt;
-
-&lt;p&gt;And finally the ones mentioned by not marked as used by
-anyone. This might be a mistake, perhaps the person adding the entry
-forgot to flag it as used?&lt;/p&gt;
-
-&lt;ul&gt;
-
-&lt;li&gt;Email w/Certificates &lt;a href=&quot;https://en.wikipedia.org/wiki/S/MIME&quot;&gt;S/MIME&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://www.crypho.com/&quot;&gt;Crypho&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://cryptpad.fr/&quot;&gt;CryptPad&lt;/a&gt;&lt;/li&gt;
-&lt;li&gt;&lt;a href=&quot;https://github.com/ricochet-im/ricochet&quot;&gt;ricochet&lt;/a&gt;&lt;/li&gt;
-
-&lt;/ul&gt;
-
-&lt;p&gt;Given the network effect it seem obvious to me that we as a society
-have been divided and conquered by those interested in keeping
-encrypted and secure communication away from the masses.  The
-finishing remarks &lt;a href=&quot;https://vimeo.com/97505679&quot;&gt;from Aral Balkan
-in his talk &quot;Free is a lie&quot;&lt;/a&gt; about the usability of free software
-really come into effect when you want to communicate in private with
-your friends and family.  We can not expect them to allow the
-usability of communication tool to block their ability to talk to
-their loved ones.&lt;/p&gt;
-
-&lt;p&gt;Note for example the option IRC w/OTR.  Most IRC clients do not
-have OTR support, so in most cases OTR would not be an option, even if
-you wanted to.  In my personal experience, about 1 in 20 I talk to
-have a IRC client with OTR.  For private communication to really be
-available, most people to talk to must have the option in their
-currently used client.  I can not simply ask my family to install an
-IRC client.  I need to guide them through a technical multi-step
-process of adding extensions to the client to get them going.  This is
-a non-starter for most.&lt;/p&gt;
-
-&lt;p&gt;I would like to be able to do video phone calls, audio phone calls,
-exchange instant messages and share files with my loved ones, without
-being forced to share with people I do not know.  I do not want to
-share the content of the conversations, and I do not want to share who
-I communicate with or the fact that I communicate with someone.
-Without all these factors in place, my private life is being more or
-less invaded.&lt;/p&gt;
+               <title>Detect OOXML files with undefined behaviour?</title>
+               <link>http://people.skolelinux.org/pere/blog/Detect_OOXML_files_with_undefined_behaviour_.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Detect_OOXML_files_with_undefined_behaviour_.html</guid>
+                <pubDate>Tue, 21 Feb 2017 00:20:00 +0100</pubDate>
+               <description>&lt;p&gt;I just noticed
+&lt;a href=&quot;http://www.arkivrad.no/aktuelt/riksarkivarens-forskrift-pa-horing&quot;&gt;the
+new Norwegian proposal for archiving rules in the goverment&lt;/a&gt; list
+&lt;a href=&quot;http://www.ecma-international.org/publications/standards/Ecma-376.htm&quot;&gt;ECMA-376&lt;/a&gt;
+/ ISO/IEC 29500 (aka OOXML) as valid formats to put in long term
+storage.  Luckily such files will only be accepted based on
+pre-approval from the National Archive.  Allowing OOXML files to be
+used for long term storage might seem like a good idea as long as we
+forget that there are plenty of ways for a &quot;valid&quot; OOXML document to
+have content with no defined interpretation in the standard, which
+lead to a question and an idea.&lt;/p&gt;
+
+&lt;p&gt;Is there any tool to detect if a OOXML document depend on such
+undefined behaviour?  It would be useful for the National Archive (and
+anyone else interested in verifying that a document is well defined)
+to have such tool available when considering to approve the use of
+OOXML.  I&#39;m aware of the
+&lt;a href=&quot;https://github.com/arlm/officeotron/&quot;&gt;officeotron OOXML
+validator&lt;/a&gt;, but do not know how complete it is nor if it will
+report use of undefined behaviour.  Are there other similar tools
+available?  Please send me an email if you know of any such tool.&lt;/p&gt;
 </description>
        </item>
        
        <item>
-               <title>My own self balancing Lego Segway</title>
-               <link>http://people.skolelinux.org/pere/blog/My_own_self_balancing_Lego_Segway.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/My_own_self_balancing_Lego_Segway.html</guid>
-                <pubDate>Fri, 4 Nov 2016 10:15:00 +0100</pubDate>
-               <description>&lt;p&gt;A while back I received a Gyro sensor for the NXT
-&lt;a href=&quot;mindstorms.lego.com&quot;&gt;Mindstorms&lt;/a&gt; controller as a birthday
-present.  It had been on my wishlist for a while, because I wanted to
-build a Segway like balancing lego robot.  I had already built
-&lt;a href=&quot;http://www.nxtprograms.com/NXT2/segway/&quot;&gt;a simple balancing
-robot&lt;/a&gt; with the kids, using the light/color sensor included in the
-NXT kit as the balance sensor, but it was not working very well.  It
-could balance for a while, but was very sensitive to the light
-condition in the room and the reflective properties of the surface and
-would fall over after a short while.  I wanted something more robust,
-and had
-&lt;a href=&quot;https://www.hitechnic.com/cgi-bin/commerce.cgi?preadd=action&amp;key=NGY1044&quot;&gt;the
-gyro sensor from HiTechnic&lt;/a&gt; I believed would solve it on my
-wishlist for some years before it suddenly showed up as a gift from my
-loved ones. :)&lt;/p&gt;
-
-&lt;p&gt;Unfortunately I have not had time to sit down and play with it
-since then.  But that changed some days ago, when I was searching for
-lego segway information and came across a recipe from HiTechnic for
-building
-&lt;a href=&quot;http://www.hitechnic.com/blog/gyro-sensor/htway/&quot;&gt;the
-HTWay&lt;/a&gt;, a segway like balancing robot.  Build instructions and
-&lt;a href=&quot;https://www.hitechnic.com/upload/786-HTWayC.nxc&quot;&gt;source
-code&lt;/a&gt; was included, so it was just a question of putting it all
-together.  And thanks to the great work of many Debian developers, the
-compiler needed to build the source for the NXT is already included in
-Debian, so I was read to go in less than an hour.  The resulting robot
-do not look very impressive in its simplicity:&lt;/p&gt;
-
-&lt;p align=&quot;center&quot;&gt;&lt;img width=&quot;70%&quot; src=&quot;http://people.skolelinux.org/pere/blog/images/2016-11-04-lego-htway-robot.jpeg&quot;&gt;&lt;/p&gt;
-
-&lt;p&gt;Because I lack the infrared sensor used to control the robot in the
-design from HiTechnic, I had to comment out the last task
-(taskControl).  I simply placed /* and */ around it get the program
-working without that sensor present.  Now it balances just fine until
-the battery status run low:&lt;/p&gt;
-
-&lt;p align=&quot;center&quot;&gt;&lt;video width=&quot;70%&quot; controls=&quot;true&quot;&gt;
-   &lt;source src=&quot;http://people.skolelinux.org/pere/blog/images/2016-11-04-lego-htway-balancing.ogv&quot; type=&quot;video/ogg&quot;&gt;
-&lt;/video&gt;&lt;/p&gt;
-
-&lt;p&gt;Now we would like to teach it how to follow a line and take remote
-control instructions using the included Bluetooth receiver in the NXT.&lt;/p&gt;
-
-&lt;p&gt;If you, like me, love LEGO and want to make sure we find the tools
-they need to work with LEGO in Debian and all our derivative
-distributions like Ubuntu, check out
-&lt;a href=&quot;http://wiki.debian.org/LegoDesigners&quot;&gt;the LEGO designers
-project page&lt;/a&gt; and join the Debian LEGO team.  Personally I own a
-RCX and NXT controller (no EV3), and would like to make sure the
-Debian tools needed to program the systems I own work as they
-should.&lt;/p&gt;
+               <title>Ruling ignored our objections to the seizure of popcorn-time.no (#domstolkontroll)</title>
+               <link>http://people.skolelinux.org/pere/blog/Ruling_ignored_our_objections_to_the_seizure_of_popcorn_time_no___domstolkontroll_.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Ruling_ignored_our_objections_to_the_seizure_of_popcorn_time_no___domstolkontroll_.html</guid>
+                <pubDate>Mon, 13 Feb 2017 21:30:00 +0100</pubDate>
+               <description>&lt;p&gt;A few days ago, we received the ruling from
+&lt;a href=&quot;http://people.skolelinux.org/pere/blog/A_day_in_court_challenging_seizure_of_popcorn_time_no_for__domstolkontroll.html&quot;&gt;my
+day in court&lt;/a&gt;.  The case in question is a challenge of the seizure
+of the DNS domain popcorn-time.no.  The ruling simply did not mention
+most of our arguments, and seemed to take everything ØKOKRIM said at
+face value, ignoring our demonstration and explanations.  But it is
+hard to tell for sure, as we still have not seen most of the documents
+in the case and thus were unprepared and unable to contradict several
+of the claims made in court by the opposition.  We are considering an
+appeal, but it is partly a question of funding, as it is costing us
+quite a bit to pay for our lawyer.  If you want to help, please
+&lt;a href=&quot;http://www.nuug.no/dns-beslag-donasjon.shtml&quot;&gt;donate to the
+NUUG defense fund&lt;/a&gt;.&lt;/p&gt;
+
+&lt;p&gt;The details of the case, as far as we know it, is available in
+Norwegian from
+&lt;a href=&quot;https://www.nuug.no/news/tags/dns-domenebeslag/&quot;&gt;the NUUG
+blog&lt;/a&gt;.  This also include
+&lt;a href=&quot;https://www.nuug.no/news/Avslag_etter_rettslig_h_ring_om_DNS_beslaget___vurderer_veien_videre.shtml&quot;&gt;the
+ruling itself&lt;/a&gt;.&lt;/p&gt;
 </description>
        </item>
        
        <item>
-               <title>Aktivitetsbånd som beskytter privatsfæren</title>
-               <link>http://people.skolelinux.org/pere/blog/Aktivitetsb_nd_som_beskytter_privatsf_ren.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Aktivitetsb_nd_som_beskytter_privatsf_ren.html</guid>
-                <pubDate>Thu, 3 Nov 2016 09:55:00 +0100</pubDate>
-               <description>&lt;p&gt;Jeg ble så imponert over
-&lt;a href=&quot;https://www.nrk.no/norge/forbrukerradet-mener-aktivitetsarmband-strider-mot-norsk-lov-1.13209079&quot;&gt;dagens
-gladnyhet på NRK&lt;/a&gt;, om at Forbrukerrådet klager inn vilkårene for
-bruk av aktivitetsbånd fra Fitbit, Garmin, Jawbone og Mio til
-Datatilsynet og forbrukerombudet, at jeg sendte følgende brev til
-forbrukerrådet for å uttrykke min støtte:
-
-&lt;blockquote&gt;
-
-&lt;p&gt;Jeg ble veldig glad over å lese at Forbrukerrådet
-&lt;a href=&quot;http://www.forbrukerradet.no/siste-nytt/klager-inn-aktivitetsarmband-for-brudd-pa-norsk-lov/&quot;&gt;klager
-inn flere aktivitetsbånd til Datatilsynet for dårlige vilkår&lt;/a&gt;.  Jeg
-har ønsket meg et aktivitetsbånd som kan måle puls, bevegelse og
-gjerne også andre helserelaterte indikatorer en stund nå.  De eneste
-jeg har funnet i salg gjør, som dere også har oppdaget, graverende
-inngrep i privatsfæren og sender informasjonen ut av huset til folk og
-organisasjoner jeg ikke ønsker å dele aktivitets- og helseinformasjon
-med.  Jeg ønsker et alternativ som &lt;em&gt;ikke&lt;/em&gt; sender informasjon til
-skyen, men derimot bruker
-&lt;a href=&quot;http://people.skolelinux.org/pere/blog/Fri_og__pen_standard__slik_Digistan_ser_det.html&quot;&gt;en
-fritt og åpent standardisert&lt;/a&gt; protokoll (eller i det minste en
-dokumentert protokoll uten patent- og opphavsrettslige
-bruksbegrensinger) til å kommunisere med datautstyr jeg kontrollerer.
-Er jo ikke interessert i å betale noen for å tilrøve seg
-personopplysninger fra meg.  Desverre har jeg ikke funnet noe
-alternativ så langt.&lt;/p&gt;
-
-&lt;p&gt;Det holder ikke å endre på bruksvilkårene for enhetene, slik
-Datatilsynet ofte legger opp til i sin behandling, når de gjør slik
-f.eks. Fitbit (den jeg har sett mest på).  Fitbit krypterer
-informasjonen på enheten og sender den kryptert til leverandøren.  Det
-gjør det i praksis umulig både å sjekke hva slags informasjon som
-sendes over, og umulig å ta imot informasjonen selv i stedet for
-Fitbit.  Uansett hva slags historie som forteller i bruksvilkårene er
-en jo både prisgitt leverandørens godvilje og at de ikke tvinges av
-sitt lands myndigheter til å lyve til sine kunder om hvorvidt
-personopplysninger spres ut over det bruksvilkårene sier.  Det er
-veldokumentert hvordan f.eks. USA tvinger selskaper vha. såkalte
-National security letters til å utlevere personopplysninger samtidig
-som de ikke får lov til å fortelle dette til kundene sine.&lt;/p&gt;
-
-&lt;p&gt;Stå på, jeg er veldig glade for at dere har sett på saken.  Vet
-dere om aktivitetsbånd i salg i dag som ikke tvinger en til å utlevere
-aktivitets- og helseopplysninger med leverandøren?&lt;/p&gt;
-
-&lt;/blockquote&gt;
-
-&lt;p&gt;Jeg håper en konkurrent som respekterer kundenes privatliv klarer å
-nå opp i markedet, slik at det finnes et reelt alternativ for oss som
-har full tillit til at skyleverandører vil prioritere egen inntjening
-og myndighetspålegg langt foran kundenes rett til privatliv.  Jeg har
-ingen tiltro til at Datatilsynet vil kreve noe mer enn at vilkårene
-endres slik at de forklarer eksplisitt i hvor stor grad bruk av
-produktene utraderer privatsfæren til kundene.  Det vil nok gjøre de
-innklagede armbåndene «lovlige», men fortsatt tvinge kundene til å
-dele sine personopplysninger med leverandøren.&lt;/p&gt;
+               <title>A day in court challenging seizure of popcorn-time.no for #domstolkontroll</title>
+               <link>http://people.skolelinux.org/pere/blog/A_day_in_court_challenging_seizure_of_popcorn_time_no_for__domstolkontroll.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/A_day_in_court_challenging_seizure_of_popcorn_time_no_for__domstolkontroll.html</guid>
+                <pubDate>Fri, 3 Feb 2017 11:10:00 +0100</pubDate>
+               <description>&lt;p align=&quot;center&quot;&gt;&lt;img width=&quot;70%&quot; src=&quot;http://people.skolelinux.org/pere/blog/images/2017-02-01-popcorn-time-in-court.jpeg&quot;&gt;&lt;/p&gt;
+
+&lt;p&gt;On Wednesday, I spent the entire day in court in Follo Tingrett
+representing &lt;a href=&quot;https://www.nuug.no/&quot;&gt;the member association
+NUUG&lt;/a&gt;, alongside &lt;a href=&quot;https://www.efn.no/&quot;&gt;the member
+association EFN&lt;/a&gt; and &lt;a href=&quot;http://www.imc.no&quot;&gt;the DNS registrar
+IMC&lt;/a&gt;, challenging the seizure of the DNS name popcorn-time.no.  It
+was interesting to sit in a court of law for the first time in my
+life.  Our team can be seen in the picture above: attorney Ola
+Tellesbø, EFN board member Tom Fredrik Blenning, IMC CEO Morten Emil
+Eriksen and NUUG board member Petter Reinholdtsen.&lt;/p&gt;
+
+&lt;p&gt;&lt;a href=&quot;http://www.domstol.no/no/Enkelt-domstol/follo-tingrett/Nar-gar-rettssaken/Beramming/?cid=AAAA1701301512081262234UJFBVEZZZZZEJBAvtale&quot;&gt;The
+case at hand&lt;/a&gt; is that the Norwegian National Authority for
+Investigation and Prosecution of Economic and Environmental Crime (aka
+Økokrim) decided on their own, to seize a DNS domain early last
+year, without following
+&lt;a href=&quot;https://www.norid.no/no/regelverk/navnepolitikk/#link12&quot;&gt;the
+official policy of the Norwegian DNS authority&lt;/a&gt; which require a
+court decision.  The web site in question was a site covering Popcorn
+Time.  And Popcorn Time is the name of a technology with both legal
+and illegal applications.  Popcorn Time is a client combining
+searching a Bittorrent directory available on the Internet with
+downloading/distribute content via Bittorrent and playing the
+downloaded content on screen.  It can be used illegally if it is used
+to distribute content against the will of the right holder, but it can
+also be used legally to play a lot of content, for example the
+millions of movies
+&lt;a href=&quot;https://archive.org/details/movies&quot;&gt;available from the
+Internet Archive&lt;/a&gt; or the collection
+&lt;a href=&quot;http://vodo.net/films/&quot;&gt;available from Vodo&lt;/a&gt;.  We created
+&lt;a href=&quot;magnet:?xt=urn:btih:86c1802af5a667ca56d3918aecb7d3c0f7173084&amp;dn=PresentasjonFolloTingrett.mov&amp;tr=udp%3A%2F%2Fpublic.popcorn-tracker.org%3A6969%2Fannounce&quot;&gt;a
+video demonstrating legally use of Popcorn Time&lt;/a&gt; and played it in
+Court.  It can of course be downloaded using Bittorrent.&lt;/p&gt;
+
+&lt;p&gt;I did not quite know what to expect from a day in court.  The
+government held on to their version of the story and we held on to
+ours, and I hope the judge is able to make sense of it all.  We will
+know in two weeks time.  Unfortunately I do not have high hopes, as
+the Government have the upper hand here with more knowledge about the
+case, better training in handling criminal law and in general higher
+standing in the courts than fairly unknown DNS registrar and member
+associations.  It is expensive to be right also in Norway.  So far the
+case have cost more than NOK 70 000,-.  To help fund the case, NUUG
+and EFN have asked for donations, and managed to collect around NOK 25
+000,- so far.  Given the presentation from the Government, I expect
+the government to appeal if the case go our way.  And if the case do
+not go our way, I hope we have enough funding to appeal.&lt;/p&gt;
+
+&lt;p&gt;From the other side came two people from Økokrim.  On the benches,
+appearing to be part of the group from the government were two people
+from the Simonsen Vogt Wiik lawyer office, and three others I am not
+quite sure who was.  Økokrim had proposed to present two witnesses
+from The Motion Picture Association, but this was rejected because
+they did not speak Norwegian and it was a bit late to bring in a
+translator, but perhaps the two from MPA were present anyway.  All
+seven appeared to know each other.  Good to see the case is take
+seriously.&lt;/p&gt;
+
+&lt;p&gt;If you, like me, believe the courts should be involved before a DNS
+domain is hijacked by the government, or you believe the Popcorn Time
+technology have a lot of useful and legal applications, I suggest you
+too &lt;a href=&quot;http://www.nuug.no/dns-beslag-donasjon.shtml&quot;&gt;donate to
+the NUUG defense fund&lt;/a&gt;.  Both Bitcoin and bank transfer are
+available. If NUUG get more than we need for the legal action (very
+unlikely), the rest will be spend promoting free software, open
+standards and unix-like operating systems in Norway, so no matter what
+happens the money will be put to good use.&lt;/p&gt;
+
+&lt;p&gt;If you want to lean more about the case, I recommend you check out
+&lt;a href=&quot;https://www.nuug.no/news/tags/dns-domenebeslag/&quot;&gt;the blog
+posts from NUUG covering the case&lt;/a&gt;.  They cover the legal arguments
+on both sides.&lt;/p&gt;
 </description>
        </item>
        
        <item>
-               <title>Experience and updated recipe for using the Signal app without a mobile phone</title>
-               <link>http://people.skolelinux.org/pere/blog/Experience_and_updated_recipe_for_using_the_Signal_app_without_a_mobile_phone.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Experience_and_updated_recipe_for_using_the_Signal_app_without_a_mobile_phone.html</guid>
-                <pubDate>Mon, 10 Oct 2016 11:30:00 +0200</pubDate>
-               <description>&lt;p&gt;In July
-&lt;a href=&quot;http://people.skolelinux.org/pere/blog/How_to_use_the_Signal_app_if_you_only_have_a_land_line__ie_no_mobile_phone_.html&quot;&gt;I
-wrote how to get the Signal Chrome/Chromium app working&lt;/a&gt; without
-the ability to receive SMS messages (aka without a cell phone).  It is
-time to share some experiences and provide an updated setup.&lt;/p&gt;
-
-&lt;p&gt;The Signal app have worked fine for several months now, and I use
-it regularly to chat with my loved ones.  I had a major snag at the
-end of my summer vacation, when the the app completely forgot my
-setup, identity and keys.  The reason behind this major mess was
-running out of disk space.  To avoid that ever happening again I have
-started storing everything in &lt;tt&gt;userdata/&lt;/tt&gt; in git, to be able to
-roll back to an earlier version if the files are wiped by mistake.  I
-had to use it once after introducing the git backup.  When rolling
-back to an earlier version, one need to use the &#39;reset session&#39; option
-in Signal to get going, and notify the people you talk with about the
-problem.  I assume there is some sequence number tracking in the
-protocol to detect rollback attacks.  The git repository is rather big
-(674 MiB so far), but I have not tried to figure out if some of the
-content can be added to a .gitignore file due to lack of spare
-time.&lt;/p&gt;
-
-&lt;p&gt;I&#39;ve also hit the 90 days timeout blocking, and noticed that this
-make it impossible to send messages using Signal.  I could still
-receive them, but had to patch the code with a new timestamp to send.
-I believe the timeout is added by the developers to force people to
-upgrade to the latest version of the app, even when there is no
-protocol changes, to reduce the version skew among the user base and
-thus try to keep the number of support requests down.&lt;/p&gt;
-
-&lt;p&gt;Since my original recipe, the Signal source code changed slightly,
-making the old patch fail to apply cleanly.  Below is an updated
-patch, including the shell wrapper I use to start Signal.  The
-original version required a new user to locate the JavaScript console
-and call a function from there.  I got help from a friend with more
-JavaScript knowledge than me to modify the code to provide a GUI
-button instead.  This mean that to get started you just need to run
-the wrapper and click the &#39;Register without mobile phone&#39; to get going
-now.  I&#39;ve also modified the timeout code to always set it to 90 days
-in the future, to avoid having to patch the code regularly.&lt;/p&gt;
-
-&lt;p&gt;So, the updated recipe for Debian Jessie:&lt;/p&gt;
-
-&lt;ol&gt;
-
-&lt;li&gt;First, install required packages to get the source code and the
-browser you need.  Signal only work with Chrome/Chromium, as far as I
-know, so you need to install it.
-
-&lt;pre&gt;
-apt install git tor chromium
-git clone https://github.com/WhisperSystems/Signal-Desktop.git
-&lt;/pre&gt;&lt;/li&gt;
-
-&lt;li&gt;Modify the source code using command listed in the the patch
-block below.&lt;/li&gt;
-
-&lt;li&gt;Start Signal using the run-signal-app wrapper (for example using
-&lt;tt&gt;`pwd`/run-signal-app&lt;/tt&gt;).
-
-&lt;li&gt;Click on the &#39;Register without mobile phone&#39;, will in a phone
-number you can receive calls to the next minute, receive the
-verification code and enter it into the form field and press
-&#39;Register&#39;.  Note, the phone number you use will be user Signal
-username, ie the way others can find you on Signal.&lt;/li&gt;
-
-&lt;li&gt;You can now use Signal to contact others.  Note, new contacts do
-not show up in the contact list until you restart Signal, and there is
-no way to assign names to Contacts.  There is also no way to create or
-update chat groups.  I suspect this is because the web app do not have
-a associated contact database.&lt;/li&gt;
-
-&lt;/ol&gt;
-
-&lt;p&gt;I am still a bit uneasy about using Signal, because of the way its
-main author moxie0 reject federation and accept dependencies to major
-corporations like Google (part of the code is fetched from Google) and
-Amazon (the central coordination point is owned by Amazon).  See for
-example
-&lt;a href=&quot;https://github.com/LibreSignal/LibreSignal/issues/37&quot;&gt;the
-LibreSignal issue tracker&lt;/a&gt; for a thread documenting the authors
-view on these issues.  But the network effect is strong in this case,
-and several of the people I want to communicate with already use
-Signal.  Perhaps we can all move to &lt;a href=&quot;https://ring.cx/&quot;&gt;Ring&lt;/a&gt;
-once it &lt;a href=&quot;https://bugs.debian.org/830265&quot;&gt;work on my
-laptop&lt;/a&gt;?  It already work on Windows and Android, and is included
-in &lt;a href=&quot;https://tracker.debian.org/pkg/ring&quot;&gt;Debian&lt;/a&gt; and
-&lt;a href=&quot;https://launchpad.net/ubuntu/+source/ring&quot;&gt;Ubuntu&lt;/a&gt;, but not
-working on Debian Stable.&lt;/p&gt;
-
-&lt;p&gt;Anyway, this is the patch I apply to the Signal code to get it
-working.  It switch to the production servers, disable to timeout,
-make registration easier and add the shell wrapper:&lt;/p&gt;
-
-&lt;pre&gt;
-cd Signal-Desktop; cat &amp;lt;&amp;lt;EOF | patch -p1
-diff --git a/js/background.js b/js/background.js
-index 24b4c1d..579345f 100644
---- a/js/background.js
-+++ b/js/background.js
-@@ -33,9 +33,9 @@
-         });
-     });
- 
--    var SERVER_URL = &#39;https://textsecure-service-staging.whispersystems.org&#39;;
-+    var SERVER_URL = &#39;https://textsecure-service-ca.whispersystems.org&#39;;
-     var SERVER_PORTS = [80, 4433, 8443];
--    var ATTACHMENT_SERVER_URL = &#39;https://whispersystems-textsecure-attachments-staging.s3.amazonaws.com&#39;;
-+    var ATTACHMENT_SERVER_URL = &#39;https://whispersystems-textsecure-attachments.s3.amazonaws.com&#39;;
-     var messageReceiver;
-     window.getSocketStatus = function() {
-         if (messageReceiver) {
-diff --git a/js/expire.js b/js/expire.js
-index 639aeae..beb91c3 100644
---- a/js/expire.js
-+++ b/js/expire.js
-@@ -1,6 +1,6 @@
- ;(function() {
-     &#39;use strict&#39;;
--    var BUILD_EXPIRATION = 0;
-+    var BUILD_EXPIRATION = Date.now() + (90 * 24 * 60 * 60 * 1000);
- 
-     window.extension = window.extension || {};
- 
-diff --git a/js/views/install_view.js b/js/views/install_view.js
-index 7816f4f..1d6233b 100644
---- a/js/views/install_view.js
-+++ b/js/views/install_view.js
-@@ -38,7 +38,8 @@
-             return {
-                 &#39;click .step1&#39;: this.selectStep.bind(this, 1),
-                 &#39;click .step2&#39;: this.selectStep.bind(this, 2),
--                &#39;click .step3&#39;: this.selectStep.bind(this, 3)
-+                &#39;click .step3&#39;: this.selectStep.bind(this, 3),
-+                &#39;click .callreg&#39;: function() { extension.install(&#39;standalone&#39;) },
-             };
-         },
-         clearQR: function() {
-diff --git a/options.html b/options.html
-index dc0f28e..8d709f6 100644
---- a/options.html
-+++ b/options.html
-@@ -14,7 +14,10 @@
-         &amp;lt;div class=&#39;nav&#39;&gt;
-           &amp;lt;h1&gt;{{ installWelcome }}&amp;lt;/h1&gt;
-           &amp;lt;p&gt;{{ installTagline }}&amp;lt;/p&gt;
--          &amp;lt;div&gt; &amp;lt;a class=&#39;button step2&#39;&gt;{{ installGetStartedButton }}&amp;lt;/a&gt; &amp;lt;/div&gt;
-+          &amp;lt;div&gt; &amp;lt;a class=&#39;button step2&#39;&gt;{{ installGetStartedButton }}&amp;lt;/a&gt;
-+          &amp;lt;br&gt; &amp;lt;a class=&quot;button callreg&quot;&gt;Register without mobile phone&amp;lt;/a&gt;
-+
-+        &amp;lt;/div&gt;
-           &amp;lt;span class=&#39;dot step1 selected&#39;&gt;&amp;lt;/span&gt;
-           &amp;lt;span class=&#39;dot step2&#39;&gt;&amp;lt;/span&gt;
-           &amp;lt;span class=&#39;dot step3&#39;&gt;&amp;lt;/span&gt;
---- /dev/null   2016-10-07 09:55:13.730181472 +0200
-+++ b/run-signal-app   2016-10-10 08:54:09.434172391 +0200
-@@ -0,0 +1,12 @@
-+#!/bin/sh
-+set -e
-+cd $(dirname $0)
-+mkdir -p userdata
-+userdata=&quot;`pwd`/userdata&quot;
-+if [ -d &quot;$userdata&quot; ] &amp;&amp; [ ! -d &quot;$userdata/.git&quot; ] ; then
-+    (cd $userdata &amp;&amp; git init)
-+fi
-+(cd $userdata &amp;&amp; git add . &amp;&amp; git commit -m &quot;Current status.&quot; || true)
-+exec chromium \
-+  --proxy-server=&quot;socks://localhost:9050&quot; \
-+  --user-data-dir=$userdata --load-and-launch-app=`pwd`
-EOF
-chmod a+rx run-signal-app
-&lt;/pre&gt;
-
-&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
-activities, please send Bitcoin donations to my address
-&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&amp;label=PetterReinholdtsenBlog&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;
+               <title>Nasjonalbiblioteket avslutter sin ulovlige bruk av Google Skjemaer</title>
+               <link>http://people.skolelinux.org/pere/blog/Nasjonalbiblioteket_avslutter_sin_ulovlige_bruk_av_Google_Skjemaer.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Nasjonalbiblioteket_avslutter_sin_ulovlige_bruk_av_Google_Skjemaer.html</guid>
+                <pubDate>Thu, 12 Jan 2017 09:40:00 +0100</pubDate>
+               <description>&lt;p&gt;I dag fikk jeg en skikkelig gladmelding.  Bakgrunnen er at før jul
+arrangerte Nasjonalbiblioteket
+&lt;a href=&quot;http://www.nb.no/Bibliotekutvikling/Kunnskapsorganisering/Nasjonalt-verksregister/Seminar-om-verksregister&quot;&gt;et
+seminar om sitt knakende gode tiltak «verksregister»&lt;/a&gt;.  Eneste
+måten å melde seg på dette seminaret var å sende personopplysninger
+til Google via Google Skjemaer.  Dette syntes jeg var tvilsom praksis,
+da det bør være mulig å delta på seminarer arrangert av det offentlige
+uten å måtte dele sine interesser, posisjon og andre
+personopplysninger med Google.  Jeg ba derfor om innsyn via
+&lt;a href=&quot;https://www.mimesbronn.no/&quot;&gt;Mimes brønn&lt;/a&gt; i
+&lt;a href=&quot;https://www.mimesbronn.no/request/personopplysninger_til_google_sk&quot;&gt;avtaler
+og vurderinger Nasjonalbiblioteket hadde rundt dette&lt;/a&gt;.
+Personopplysningsloven legger klare rammer for hva som må være på
+plass før en kan be tredjeparter, spesielt i utlandet, behandle
+personopplysninger på sine vegne, så det burde eksistere grundig
+dokumentasjon før noe slikt kan bli lovlig.  To jurister hos
+Nasjonalbiblioteket mente først dette var helt i orden, og at Googles
+standardavtale kunne brukes som databehandlingsavtale.  Det syntes jeg
+var merkelig, men har ikke hatt kapasitet til å følge opp saken før
+for to dager siden.&lt;/p&gt;
+
+&lt;p&gt;Gladnyheten i dag, som kom etter at jeg tipset Nasjonalbiblioteket
+om at Datatilsynet underkjente Googles standardavtaler som
+databehandleravtaler i 2011, er at Nasjonalbiblioteket har bestemt seg
+for å avslutte bruken av Googles Skjemaer/Apps og gå i dialog med DIFI
+for å finne bedre måter å håndtere påmeldinger i tråd med
+personopplysningsloven.  Det er fantastisk å se at av og til hjelper
+det å spørre hva i alle dager det offentlige holder på med.&lt;/p&gt;
 </description>
        </item>
        
        <item>
-               <title>NRKs kildevern når NRK-epost deles med utenlands etterretning?</title>
-               <link>http://people.skolelinux.org/pere/blog/NRKs_kildevern_n_r_NRK_epost_deles_med_utenlands_etterretning_.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/NRKs_kildevern_n_r_NRK_epost_deles_med_utenlands_etterretning_.html</guid>
-                <pubDate>Sat, 8 Oct 2016 08:15:00 +0200</pubDate>
-               <description>&lt;p&gt;NRK
-&lt;a href=&quot;https://nrkbeta.no/2016/09/02/securing-whistleblowers/&quot;&gt;lanserte
-for noen uker siden&lt;/a&gt; en ny
-&lt;a href=&quot;https://www.nrk.no/varsle/&quot;&gt;varslerportal som bruker
-SecureDrop til å ta imot tips&lt;/a&gt; der det er vesentlig at ingen
-utenforstående får vite at NRK er tipset.  Det er et langt steg
-fremover for NRK, og når en leser bloggposten om hva de har tenkt på
-og hvordan løsningen er satt opp virker det som om de har gjort en
-grundig jobb der.  Men det er ganske mye ekstra jobb å motta tips via
-SecureDrop, så varslersiden skriver &quot;Nyhetstips som ikke krever denne
-typen ekstra vern vil vi gjerne ha på nrk.no/03030&quot;, og 03030-siden
-foreslår i tillegg til et webskjema å bruke epost, SMS, telefon,
-personlig oppmøte og brevpost.  Denne artikkelen handler disse andre
-metodene.&lt;/p&gt;
-
-&lt;p&gt;Når en sender epost til en @nrk.no-adresse så vil eposten sendes ut
-av landet til datamaskiner kontrollert av Microsoft.  En kan sjekke
-dette selv ved å slå opp epostleveringsadresse (MX) i DNS.  For NRK er
-dette i dag &quot;nrk-no.mail.protection.outlook.com&quot;.  NRK har som en ser
-valgt å sette bort epostmottaket sitt til de som står bak outlook.com,
-dvs. Microsoft.  En kan sjekke hvor nettverkstrafikken tar veien
-gjennom Internett til epostmottaket vha. programmet
-&lt;tt&gt;traceroute&lt;/tt&gt;, og finne ut hvem som eier en Internett-adresse
-vha. whois-systemet.  Når en gjør dette for epost-trafikk til @nrk.no
-ser en at trafikken fra Norge mot nrk-no.mail.protection.outlook.com
-går via Sverige mot enten Irland eller Tyskland (det varierer fra gang
-til gang og kan endre seg over tid).&lt;/p&gt;
-
-&lt;p&gt;Vi vet fra
-&lt;a href=&quot;https://no.wikipedia.org/wiki/FRA-loven&quot;&gt;introduksjonen av
-FRA-loven&lt;/a&gt; at IP-trafikk som passerer grensen til Sverige avlyttes
-av Försvarets radioanstalt (FRA).  Vi vet videre takket være
-Snowden-bekreftelsene at trafikk som passerer grensen til
-Storbritannia avlyttes av Government Communications Headquarters
-(GCHQ).  I tillegg er er det nettopp lansert et forslag i Norge om at
-forsvarets E-tjeneste skal få avlytte trafikk som krysser grensen til
-Norge. Jeg er ikke kjent med dokumentasjon på at Irland og Tyskland
-gjør det samme.  Poenget er uansett at utenlandsk etterretning har
-mulighet til å snappe opp trafikken når en sender epost til @nrk.no.
-I tillegg er det selvsagt tilgjengelig for Microsoft som er underlagt USAs
-jurisdiksjon og
-&lt;a href=&quot;https://www.theguardian.com/world/2013/jul/11/microsoft-nsa-collaboration-user-data&quot;&gt;samarbeider
-med USAs etterretning på flere områder&lt;/a&gt;.  De som tipser NRK om
-nyheter via epost kan dermed gå ut fra at det blir kjent for mange
-andre enn NRK at det er gjort.&lt;/p&gt;
-
-&lt;p&gt;Bruk av SMS og telefon registreres av blant annet telefonselskapene
-og er tilgjengelig i følge lov og forskrift for blant annet Politi,
-NAV og Finanstilsynet, i tillegg til IT-folkene hos telefonselskapene
-og deres overordnede.  Hvis innringer eller mottaker bruker
-smarttelefon vil slik kontakt også gjøres tilgjengelig for ulike
-app-leverandører og de som lytter på trafikken mellom telefon og
-app-leverandør, alt etter hva som er installert på telefonene som
-brukes.&lt;/p&gt;
-
-&lt;p&gt;Brevpost kan virke trygt, og jeg vet ikke hvor mye som registreres
-og lagres av postens datastyrte postsorteringssentraler.  Det vil ikke
-overraske meg om det lagres hvor i landet hver konvolutt kommer fra og
-hvor den er adressert, i hvert fall for en kortere periode.  Jeg vet
-heller ikke hvem slik informasjon gjøres tilgjengelig for.  Det kan
-være nok til å ringe inn potensielle kilder når det krysses med hvem
-som kjente til aktuell informasjon og hvor de befant seg (tilgjengelig
-f.eks.  hvis de bærer mobiltelefon eller bor i nærheten).&lt;/p&gt;
-
-&lt;p&gt;Personlig oppmøte hos en NRK-journalist er antagelig det tryggeste,
-men en bør passe seg for å bruke NRK-kantina.  Der bryter de nemlig
-&lt;a href=&quot;http://www.lovdata.no/all/hl-19850524-028.html#14&quot;&gt;Sentralbanklovens
-paragraf 14&lt;/a&gt; og nekter folk å betale med kontanter.  I stedet
-krever de at en varsle sin bankkortutsteder om hvor en befinner seg
-ved å bruke bankkort.  Banktransaksjoner er tilgjengelig for
-bankkortutsteder (det være seg VISA, Mastercard, Nets og/eller en
-bank) i tillegg til politiet og i hvert fall tidligere med Se &amp; Hør
-(via utro tjenere, slik det ble avslørt etter utgivelsen av boken
-«Livet, det forbannede» av Ken B. Rasmussen).  Men hvor mange kjenner
-en NRK-journalist personlig?  Besøk på NRK på Marienlyst krever at en
-registrerer sin ankost elektronisk i besøkssystemet.  Jeg vet ikke hva
-som skjer med det datasettet, men har grunn til å tro at det sendes ut
-SMS til den en skal besøke med navnet som er oppgitt.  Kanskje greit å
-oppgi falskt navn.&lt;/p&gt;
-
-&lt;p&gt;Når så tipset er kommet frem til NRK skal det behandles
-redaksjonelt i NRK.  Der vet jeg via ulike kilder at de fleste
-journalistene bruker lokalt installert programvare, men noen bruker
-Google Docs og andre skytjenester i strid med interne retningslinjer
-når de skriver.  Hvordan vet en hvem det gjelder?  Ikke vet jeg, men
-det kan være greit å spørre for å sjekke at journalisten har tenkt på
-problemstillingen, før en gir et tips.  Og hvis tipset omtales internt
-på epost, er det jo grunn til å tro at også intern eposten vil deles
-med Microsoft og utenlands etterretning, slik tidligere nevnt, men det
-kan hende at det holdes internt i NRKs interne MS Exchange-løsning.
-Men Microsoft ønsker å få alle Exchange-kunder over &quot;i skyen&quot; (eller
-andre folks datamaskiner, som det jo innebærer), så jeg vet ikke hvor
-lenge det i så fall vil vare.&lt;/p&gt;
-
-&lt;p&gt;I tillegg vet en jo at
-&lt;a href=&quot;https://www.nrk.no/ytring/elektronisk-kildevern-i-nrk-1.11941196&quot;&gt;NRK
-har valgt å gi nasjonal sikkerhetsmyndighet (NSM) tilgang til å se på
-intern og ekstern Internett-trafikk&lt;/a&gt; hos NRK ved oppsett av såkalte
-VDI-noder, på tross av
-&lt;a href=&quot;https://www.nrk.no/ytring/bekymring-for-nrks-kildevern-1.11941584&quot;&gt;protester
-fra NRKs journalistlag&lt;/a&gt;.  Jeg vet ikke om den vil kunne snappe opp
-dokumenter som lagres på interne filtjenere eller dokumenter som lages
-i de interne webbaserte publiseringssystemene, men vet at hva noden
-ser etter på nettet kontrolleres av NSM og oppdateres automatisk, slik
-at det ikke gir så mye mening å sjekke hva noden ser etter i dag når
-det kan endres automatisk i morgen.&lt;/p&gt;
-
-&lt;p&gt;Personlig vet jeg ikke om jeg hadde turt tipse NRK hvis jeg satt på
-noe som kunne være en trussel mot den bestående makten i Norge eller
-verden.  Til det virker det å være for mange åpninger for
-utenforstående med andre prioriteter enn NRKs journalistiske fokus.
-Og den største truslen for en varsler er jo om metainformasjon kommer
-på avveie, dvs. informasjon om at en har vært i kontakt med en
-journalist.  Det kan være nok til at en kommer i myndighetenes
-søkelys, og de færreste har nok operasjonell sikkerhet til at vil tåle
-slik flombelysning på sitt privatliv.&lt;/p&gt;
+               <title>Bryter NAV sin egen personvernerklæring?</title>
+               <link>http://people.skolelinux.org/pere/blog/Bryter_NAV_sin_egen_personvernerkl_ring_.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Bryter_NAV_sin_egen_personvernerkl_ring_.html</guid>
+                <pubDate>Wed, 11 Jan 2017 06:50:00 +0100</pubDate>
+               <description>&lt;p&gt;Jeg leste med interesse en nyhetssak hos
+&lt;a href=&quot;http://www.digi.no/artikler/nav-avslorer-trygdemisbruk-ved-a-spore-ip-adresser/367394&quot;&gt;digi.no&lt;/a&gt;
+og
+&lt;a href=&quot;https://www.nrk.no/buskerud/trygdesvindlere-avslores-av-utenlandske-ip-adresser-1.13313461&quot;&gt;NRK&lt;/a&gt;
+om at det ikke bare er meg, men at også NAV bedriver geolokalisering
+av IP-adresser, og at det gjøres analyse av IP-adressene til de som
+sendes inn meldekort for å se om meldekortet sendes inn fra
+utenlandske IP-adresser.  Politiadvokat i Drammen, Hans Lyder Haare,
+er sitert i NRK på at «De to er jo blant annet avslørt av
+IP-adresser. At man ser at meldekortet kommer fra utlandet.»&lt;/p&gt;
+
+&lt;p&gt;Jeg synes det er fint at det blir bedre kjent at IP-adresser
+knyttes til enkeltpersoner og at innsamlet informasjon brukes til å
+stedsbestemme personer også av aktører her i Norge.  Jeg ser det som
+nok et argument for å bruke
+&lt;a href=&quot;https://www.torproject.org/&quot;&gt;Tor&lt;/a&gt; så mye som mulig for å
+gjøre gjøre IP-lokalisering vanskeligere, slik at en kan beskytte sin
+privatsfære og unngå å dele sin fysiske plassering med
+uvedkommede.&lt;/p&gt;
+
+&lt;P&gt;Men det er en ting som bekymrer meg rundt denne nyheten.  Jeg ble
+tipset (takk #nuug) om
+&lt;a href=&quot;https://www.nav.no/no/NAV+og+samfunn/Kontakt+NAV/Teknisk+brukerstotte/Snarveier/personvernerkl%C3%A6ring-for-arbeids-og-velferdsetaten&quot;&gt;NAVs
+personvernerklæring&lt;/a&gt;, som under punktet «Personvern og statistikk»
+lyder:&lt;/p&gt;
+
+&lt;p&gt;&lt;blockquote&gt;
+
+&lt;p&gt;«Når du besøker nav.no, etterlater du deg elektroniske spor. Sporene
+dannes fordi din nettleser automatisk sender en rekke opplysninger til
+NAVs tjener (server-maskin) hver gang du ber om å få vist en side. Det
+er eksempelvis opplysninger om hvilken nettleser og -versjon du
+bruker, og din internettadresse (ip-adresse). For hver side som vises,
+lagres følgende opplysninger:&lt;/p&gt;
+
+&lt;ul&gt;
+&lt;li&gt;hvilken side du ser på&lt;/li&gt;
+&lt;li&gt;dato og tid&lt;/li&gt;
+&lt;li&gt;hvilken nettleser du bruker&lt;/li&gt;
+&lt;li&gt;din ip-adresse&lt;/li&gt;
+&lt;/ul&gt;
+
+&lt;p&gt;Ingen av opplysningene vil bli brukt til å identifisere
+enkeltpersoner. NAV bruker disse opplysningene til å generere en
+samlet statistikk som blant annet viser hvilke sider som er mest
+populære. Statistikken er et redskap til å forbedre våre
+tjenester.»&lt;/p&gt;
+
+&lt;/blockquote&gt;&lt;/p&gt;
+
+&lt;p&gt;Jeg klarer ikke helt å se hvordan analyse av de besøkendes
+IP-adresser for å se hvem som sender inn meldekort via web fra en
+IP-adresse i utlandet kan gjøres uten å komme i strid med påstanden om
+at «ingen av opplysningene vil bli brukt til å identifisere
+enkeltpersoner».  Det virker dermed for meg som at NAV bryter sine
+egen personvernerklæring, hvilket
+&lt;a href=&quot;http://people.skolelinux.org/pere/blog/Er_lover_brutt_n_r_personvernpolicy_ikke_stemmer_med_praksis_.html&quot;&gt;Datatilsynet
+fortalte meg i starten av desember antagelig er brudd på
+personopplysningsloven&lt;/a&gt;.
+
+&lt;p&gt;I tillegg er personvernerklæringen ganske misvisende i og med at
+NAVs nettsider ikke bare forsyner NAV med personopplysninger, men i
+tillegg ber brukernes nettleser kontakte fem andre nettjenere
+(script.hotjar.com, static.hotjar.com, vars.hotjar.com,
+www.google-analytics.com og www.googletagmanager.com), slik at
+personopplysninger blir gjort tilgjengelig for selskapene Hotjar og
+Google , og alle som kan lytte på trafikken på veien (som FRA, GCHQ og
+NSA).  Jeg klarer heller ikke se hvordan slikt spredning av
+personopplysninger kan være i tråd med kravene i
+personopplysningloven, eller i tråd med NAVs personvernerklæring.&lt;/p&gt;
+
+&lt;p&gt;Kanskje NAV bør ta en nøye titt på sin personvernerklæring?  Eller
+kanskje Datatilsynet bør gjøre det?&lt;/p&gt;
 </description>
        </item>
        
        <item>
-               <title>Isenkram, Appstream and udev make life as a LEGO builder easier</title>
-               <link>http://people.skolelinux.org/pere/blog/Isenkram__Appstream_and_udev_make_life_as_a_LEGO_builder_easier.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Isenkram__Appstream_and_udev_make_life_as_a_LEGO_builder_easier.html</guid>
-                <pubDate>Fri, 7 Oct 2016 09:50:00 +0200</pubDate>
-               <description>&lt;p&gt;&lt;a href=&quot;http://packages.qa.debian.org/isenkram&quot;&gt;The Isenkram
-system&lt;/a&gt; provide a practical and easy way to figure out which
-packages support the hardware in a given machine.  The command line
-tool &lt;tt&gt;isenkram-lookup&lt;/tt&gt; and the tasksel options provide a
-convenient way to list and install packages relevant for the current
-hardware during system installation, both user space packages and
-firmware packages. The GUI background daemon on the other hand provide
-a pop-up proposing to install packages when a new dongle is inserted
-while using the computer.  For example, if you plug in a smart card
-reader, the system will ask if you want to install &lt;tt&gt;pcscd&lt;/tt&gt; if
-that package isn&#39;t already installed, and if you plug in a USB video
-camera the system will ask if you want to install &lt;tt&gt;cheese&lt;/tt&gt; if
-cheese is currently missing.  This already work just fine.&lt;/p&gt;
-
-&lt;p&gt;But Isenkram depend on a database mapping from hardware IDs to
-package names.  When I started no such database existed in Debian, so
-I made my own data set and included it with the isenkram package and
-made isenkram fetch the latest version of this database from git using
-http.  This way the isenkram users would get updated package proposals
-as soon as I learned more about hardware related packages.&lt;/p&gt;
-
-&lt;p&gt;The hardware is identified using modalias strings.  The modalias
-design is from the Linux kernel where most hardware descriptors are
-made available as a strings that can be matched using filename style
-globbing.  It handle USB, PCI, DMI and a lot of other hardware related
-identifiers.&lt;/p&gt;
-
-&lt;p&gt;The downside to the Isenkram specific database is that there is no
-information about relevant distribution / Debian version, making
-isenkram propose obsolete packages too.  But along came AppStream, a
-cross distribution mechanism to store and collect metadata about
-software packages.  When I heard about the proposal, I contacted the
-people involved and suggested to add a hardware matching rule using
-modalias strings in the specification, to be able to use AppStream for
-mapping hardware to packages.  This idea was accepted and AppStream is
-now a great way for a package to announce the hardware it support in a
-distribution neutral way.  I wrote
-&lt;a href=&quot;http://people.skolelinux.org/pere/blog/Using_appstream_with_isenkram_to_install_hardware_related_packages_in_Debian.html&quot;&gt;a
-recipe on how to add such meta-information&lt;/a&gt; in a blog post last
-December.  If you have a hardware related package in Debian, please
-announce the relevant hardware IDs using AppStream.&lt;/p&gt;
-
-&lt;p&gt;In Debian, almost all packages that can talk to a LEGO Mindestorms
-RCX or NXT unit, announce this support using AppStream.  The effect is
-that when you insert such LEGO robot controller into your Debian
-machine, Isenkram will propose to install the packages needed to get
-it working.  The intention is that this should allow the local user to
-start programming his robot controller right away without having to
-guess what packages to use or which permissions to fix.&lt;/p&gt;
-
-&lt;p&gt;But when I sat down with my son the other day to program our NXT
-unit using his Debian Stretch computer, I discovered something
-annoying.  The local console user (ie my son) did not get access to
-the USB device for programming the unit.  This used to work, but no
-longer in Jessie and Stretch.  After some investigation and asking
-around on #debian-devel, I discovered that this was because udev had
-changed the mechanism used to grant access to local devices.  The
-ConsoleKit mechanism from &lt;tt&gt;/lib/udev/rules.d/70-udev-acl.rules&lt;/tt&gt;
-no longer applied, because LDAP users no longer was added to the
-plugdev group during login.  Michael Biebl told me that this method
-was obsolete and the new method used ACLs instead.  This was good
-news, as the plugdev mechanism is a mess when using a remote user
-directory like LDAP.  Using ACLs would make sure a user lost device
-access when she logged out, even if the user left behind a background
-process which would retain the plugdev membership with the ConsoleKit
-setup.  Armed with this knowledge I moved on to fix the access problem
-for the LEGO Mindstorms related packages.&lt;/p&gt;
-
-&lt;p&gt;The new system uses a udev tag, &#39;uaccess&#39;.  It can either be
-applied directly for a device, or is applied in
-/lib/udev/rules.d/70-uaccess.rules for classes of devices.  As the
-LEGO Mindstorms udev rules did not have a class, I decided to add the
-tag directly in the udev rules files included in the packages.  Here
-is one example.  For the nqc C compiler for the RCX, the
-&lt;tt&gt;/lib/udev/rules.d/60-nqc.rules&lt;/tt&gt; file now look like this:
+               <title>Where did that package go? &amp;mdash; geolocated IP traceroute</title>
+               <link>http://people.skolelinux.org/pere/blog/Where_did_that_package_go___mdash__geolocated_IP_traceroute.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Where_did_that_package_go___mdash__geolocated_IP_traceroute.html</guid>
+                <pubDate>Mon, 9 Jan 2017 12:20:00 +0100</pubDate>
+               <description>&lt;p&gt;Did you ever wonder where the web trafic really flow to reach the
+web servers, and who own the network equipment it is flowing through?
+It is possible to get a glimpse of this from using traceroute, but it
+is hard to find all the details.  Many years ago, I wrote a system to
+map the Norwegian Internet (trying to figure out if our plans for a
+network game service would get low enough latency, and who we needed
+to talk to about setting up game servers close to the users.  Back
+then I used traceroute output from many locations (I asked my friends
+to run a script and send me their traceroute output) to create the
+graph and the map.  The output from traceroute typically look like
+this:
 
 &lt;p&gt;&lt;pre&gt;
-SUBSYSTEM==&quot;usb&quot;, ACTION==&quot;add&quot;, ATTR{idVendor}==&quot;0694&quot;, ATTR{idProduct}==&quot;0001&quot;, \
-    SYMLINK+=&quot;rcx-%k&quot;, TAG+=&quot;uaccess&quot;
+traceroute to www.stortinget.no (85.88.67.10), 30 hops max, 60 byte packets
+ 1  uio-gw10.uio.no (129.240.202.1)  0.447 ms  0.486 ms  0.621 ms
+ 2  uio-gw8.uio.no (129.240.24.229)  0.467 ms  0.578 ms  0.675 ms
+ 3  oslo-gw1.uninett.no (128.39.65.17)  0.385 ms  0.373 ms  0.358 ms
+ 4  te3-1-2.br1.fn3.as2116.net (193.156.90.3)  1.174 ms  1.172 ms  1.153 ms
+ 5  he16-1-1.cr1.san110.as2116.net (195.0.244.234)  2.627 ms he16-1-1.cr2.oslosda310.as2116.net (195.0.244.48)  3.172 ms he16-1-1.cr1.san110.as2116.net (195.0.244.234)  2.857 ms
+ 6  ae1.ar8.oslosda310.as2116.net (195.0.242.39)  0.662 ms  0.637 ms ae0.ar8.oslosda310.as2116.net (195.0.242.23)  0.622 ms
+ 7  89.191.10.146 (89.191.10.146)  0.931 ms  0.917 ms  0.955 ms
+ 8  * * *
+ 9  * * *
+[...]
 &lt;/pre&gt;&lt;/p&gt;
 
-&lt;p&gt;The key part is the &#39;TAG+=&quot;uaccess&quot;&#39; at the end.  I suspect all
-packages using plugdev in their /lib/udev/rules.d/ files should be
-changed to use this tag (either directly or indirectly via
-&lt;tt&gt;70-uaccess.rules&lt;/tt&gt;).  Perhaps a lintian check should be created
-to detect this?&lt;/p&gt;
-
-&lt;p&gt;I&#39;ve been unable to find good documentation on the uaccess feature.
-It is unclear to me if the uaccess tag is an internal implementation
-detail like the udev-acl tag used by
-&lt;tt&gt;/lib/udev/rules.d/70-udev-acl.rules&lt;/tt&gt;.  If it is, I guess the
-indirect method is the preferred way.  Michael
-&lt;a href=&quot;https://github.com/systemd/systemd/issues/4288&quot;&gt;asked for more
-documentation from the systemd project&lt;/a&gt; and I hope it will make
-this clearer.  For now I use the generic classes when they exist and
-is already handled by &lt;tt&gt;70-uaccess.rules&lt;/tt&gt;, and add the tag
-directly if no such class exist.&lt;/p&gt;
-
-&lt;p&gt;To learn more about the isenkram system, please check out
-&lt;a href=&quot;http://people.skolelinux.org/pere/blog/tags/isenkram/&quot;&gt;my
-blog posts tagged isenkram&lt;/a&gt;.&lt;/p&gt;
-
-&lt;p&gt;To help out making life for LEGO constructors in Debian easier,
-please join us on our IRC channel
-&lt;a href=&quot;irc://irc.debian.org/%23debian-lego&quot;&gt;#debian-lego&lt;/a&gt; and join
-the &lt;a href=&quot;https://alioth.debian.org/projects/debian-lego/&quot;&gt;Debian
-LEGO team&lt;/a&gt; in the Alioth project we created yesterday.  A mailing
-list is not yet created, but we are working on it. :)&lt;/p&gt;
+&lt;p&gt;This show the DNS names and IP addresses of (at least some of the)
+network equipment involved in getting the data traffic from me to the
+www.stortinget.no server, and how long it took in milliseconds for a
+package to reach the equipment and return to me.  Three packages are
+sent, and some times the packages do not follow the same path.  This
+is shown for hop 5, where three different IP addresses replied to the
+traceroute request.&lt;/p&gt;
+
+&lt;p&gt;There are many ways to measure trace routes.  Other good traceroute
+implementations I use are traceroute (using ICMP packages) mtr (can do
+both ICMP, UDP and TCP) and scapy (python library with ICMP, UDP, TCP
+traceroute and a lot of other capabilities).  All of them are easily
+available in &lt;a href=&quot;https://www.debian.org/&quot;&gt;Debian&lt;/a&gt;.&lt;/p&gt;
+
+&lt;p&gt;This time around, I wanted to know the geographic location of
+different route points, to visualize how visiting a web page spread
+information about the visit to a lot of servers around the globe.  The
+background is that a web site today often will ask the browser to get
+from many servers the parts (for example HTML, JSON, fonts,
+JavaScript, CSS, video) required to display the content.  This will
+leak information about the visit to those controlling these servers
+and anyone able to peek at the data traffic passing by (like your ISP,
+the ISPs backbone provider, FRA, GCHQ, NSA and others).&lt;/p&gt;
+
+&lt;p&gt;Lets pick an example, the Norwegian parliament web site
+www.stortinget.no.  It is read daily by all members of parliament and
+their staff, as well as political journalists, activits and many other
+citizens of Norway.  A visit to the www.stortinget.no web site will
+ask your browser to contact 8 other servers: ajax.googleapis.com,
+insights.hotjar.com, script.hotjar.com, static.hotjar.com,
+stats.g.doubleclick.net, www.google-analytics.com,
+www.googletagmanager.com and www.netigate.se.  I extracted this by
+asking &lt;a href=&quot;http://phantomjs.org/&quot;&gt;PhantomJS&lt;/a&gt; to visit the
+Stortinget web page and tell me all the URLs PhantomJS downloaded to
+render the page (in HAR format using
+&lt;a href=&quot;https://github.com/ariya/phantomjs/blob/master/examples/netsniff.js&quot;&gt;their
+netsniff example&lt;/a&gt;.  I am very grateful to Gorm for showing me how
+to do this).  My goal is to visualize network traces to all IP
+addresses behind these DNS names, do show where visitors personal
+information is spread when visiting the page.&lt;/p&gt;
+
+&lt;p align=&quot;center&quot;&gt;&lt;a href=&quot;www.stortinget.no-geoip.kml&quot;&gt;&lt;img
+src=&quot;http://people.skolelinux.org/pere/blog/images/2017-01-09-www.stortinget.no-geoip-small.png&quot; alt=&quot;map of combined traces for URLs used by www.stortinget.no using GeoIP&quot;/&gt;&lt;/a&gt;&lt;/p&gt;
+
+&lt;p&gt;When I had a look around for options, I could not find any good
+free software tools to do this, and decided I needed my own traceroute
+wrapper outputting KML based on locations looked up using GeoIP.  KML
+is easy to work with and easy to generate, and understood by several
+of the GIS tools I have available.  I got good help from by NUUG
+colleague Anders Einar with this, and the result can be seen in
+&lt;a href=&quot;https://github.com/petterreinholdtsen/kmltraceroute&quot;&gt;my
+kmltraceroute git repository&lt;/a&gt;.  Unfortunately, the quality of the
+free GeoIP databases I could find (and the for-pay databases my
+friends had access to) is not up to the task.  The IP addresses of
+central Internet infrastructure would typically be placed near the
+controlling companies main office, and not where the router is really
+located, as you can see from &lt;a href=&quot;www.stortinget.no-geoip.kml&quot;&gt;the
+KML file I created&lt;/a&gt; using the GeoLite City dataset from MaxMind.
+
+&lt;p align=&quot;center&quot;&gt;&lt;a href=&quot;http://people.skolelinux.org/pere/blog/images/2017-01-09-www.stortinget.no-scapy.svg&quot;&gt;&lt;img
+src=&quot;http://people.skolelinux.org/pere/blog/images/2017-01-09-www.stortinget.no-scapy-small.png&quot; alt=&quot;scapy traceroute graph for URLs used by www.stortinget.no&quot;/&gt;&lt;/a&gt;&lt;/p&gt;
+
+&lt;p&gt;I also had a look at the visual traceroute graph created by
+&lt;a href=&quot;http://www.secdev.org/projects/scapy/&quot;&gt;the scrapy project&lt;/a&gt;,
+showing IP network ownership (aka AS owner) for the IP address in
+question.
+&lt;a href=&quot;http://people.skolelinux.org/pere/blog/images/2017-01-09-www.stortinget.no-scapy.svg&quot;&gt;The
+graph display a lot of useful information about the traceroute in SVG
+format&lt;/a&gt;, and give a good indication on who control the network
+equipment involved, but it do not include geolocation.  This graph
+make it possible to see the information is made available at least for
+UNINETT, Catchcom, Stortinget, Nordunet, Google, Amazon, Telia, Level
+3 Communications and NetDNA.&lt;/p&gt;
+
+&lt;p align=&quot;center&quot;&gt;&lt;a href=&quot;https://geotraceroute.com/index.php?node=4&amp;host=www.stortinget.no&quot;&gt;&lt;img
+src=&quot;http://people.skolelinux.org/pere/blog/images/2017-01-09-www.stortinget.no-geotraceroute-small.png&quot; alt=&quot;example geotraceroute view for www.stortinget.no&quot;/&gt;&lt;/a&gt;&lt;/p&gt;
+
+&lt;p&gt;In the process, I came across the
+&lt;a href=&quot;https://geotraceroute.com/&quot;&gt;web service GeoTraceroute&lt;/a&gt; by
+Salim Gasmi.  Its methology of combining guesses based on DNS names,
+various location databases and finally use latecy times to rule out
+candidate locations seemed to do a very good job of guessing correct
+geolocation.  But it could only do one trace at the time, did not have
+a sensor in Norway and did not make the geolocations easily available
+for postprocessing.  So I contacted the developer and asked if he
+would be willing to share the code (he refused until he had time to
+clean it up), but he was interested in providing the geolocations in a
+machine readable format, and willing to set up a sensor in Norway.  So
+since yesterday, it is possible to run traces from Norway in this
+service thanks to a sensor node set up by
+&lt;a href=&quot;https://www.nuug.no/&quot;&gt;the NUUG assosiation&lt;/a&gt;, and get the
+trace in KML format for further processing.&lt;/p&gt;
+
+&lt;p align=&quot;center&quot;&gt;&lt;a href=&quot;http://people.skolelinux.org/pere/blog/images/2017-01-09-www.stortinget.no-geotraceroute-kml-join.kml&quot;&gt;&lt;img
+src=&quot;http://people.skolelinux.org/pere/blog/images/2017-01-09-www.stortinget.no-geotraceroute-kml-join.png&quot; alt=&quot;map of combined traces for URLs used by www.stortinget.no using geotraceroute&quot;/&gt;&lt;/a&gt;&lt;/p&gt;
+
+&lt;p&gt;Here we can see a lot of trafic passes Sweden on its way to
+Denmark, Germany, Holland and Ireland.  Plenty of places where the
+Snowden confirmations verified the traffic is read by various actors
+without your best interest as their top priority.&lt;/p&gt;
+
+&lt;p&gt;Combining KML files is trivial using a text editor, so I could loop
+over all the hosts behind the urls imported by www.stortinget.no and
+ask for the KML file from GeoTraceroute, and create a combined KML
+file with all the traces (unfortunately only one of the IP addresses
+behind the DNS name is traced this time.  To get them all, one would
+have to request traces using IP number instead of DNS names from
+GeoTraceroute).  That might be the next step in this project.&lt;/p&gt;
+
+&lt;p&gt;Armed with these tools, I find it a lot easier to figure out where
+the IP traffic moves and who control the boxes involved in moving it.
+And every time the link crosses for example the Swedish border, we can
+be sure Swedish Signal Intelligence (FRA) is listening, as GCHQ do in
+Britain and NSA in USA and cables around the globe.  (Hm, what should
+we tell them? :) Keep that in mind if you ever send anything
+unencrypted over the Internet.&lt;/p&gt;
+
+&lt;p&gt;PS: KML files are drawn using
+&lt;a href=&quot;http://ivanrublev.me/kml/&quot;&gt;the KML viewer from Ivan
+Rublev&lt;a/&gt;, as it was less cluttered than the local Linux application
+Marble.  There are heaps of other options too.&lt;/p&gt;
 
 &lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
 activities, please send Bitcoin donations to my address
@@ -929,44 +556,74 @@ activities, please send Bitcoin donations to my address
        </item>
        
        <item>
-               <title>Aftenposten-redaktøren med lua i hånda</title>
-               <link>http://people.skolelinux.org/pere/blog/Aftenposten_redakt_ren_med_lua_i_h_nda.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Aftenposten_redakt_ren_med_lua_i_h_nda.html</guid>
-                <pubDate>Fri, 9 Sep 2016 11:30:00 +0200</pubDate>
-               <description>&lt;p&gt;En av dagens nyheter er at Aftenpostens redaktør Espen Egil Hansen
-bruker
-&lt;a href=&quot;https://www.nrk.no/kultur/aftenposten-brukar-heile-forsida-pa-facebook-kritikk-1.13126918&quot;&gt;forsiden
-av papiravisen på et åpent brev til Facebooks sjef Mark Zuckerberg om
-Facebooks fjerning av bilder, tekster og sider de ikke liker&lt;/a&gt;.  Det
-må være uvant for redaktøren i avisen Aftenposten å stå med lua i
-handa og håpe på å bli hørt.  Spesielt siden Aftenposten har vært med
-på å gi Facebook makten de nå demonstrerer at de har.  Ved å melde seg
-inn i Facebook-samfunnet har de sagt ja til bruksvilkårene og inngått
-en antagelig bindende avtale.  Kanskje de skulle lest og vurdert
-vilkårene litt nærmere før de sa ja, i stedet for å klage over at
-reglende de har valgt å akseptere blir fulgt?  Personlig synes jeg
-vilkårene er uakseptable og det ville ikke falle meg inn å gå inn på
-en avtale med slike vilkår.  I tillegg til uakseptable vilkår er det
-mange andre grunner til å unngå Facebook.  Du kan finne en solid
-gjennomgang av flere slike argumenter hos
-&lt;a href=&quot;https://stallman.org/facebook.html&quot;&gt;Richard Stallmans side om
-Facebook&lt;/a&gt;.
-
-&lt;p&gt;Jeg håper flere norske redaktører på samme vis må stå med lua i
-hånden inntil de forstår at de selv er med på å føre samfunnet på
-ville veier ved å omfavne Facebook slik de gjør når de omtaler og
-løfter frem saker fra Facebook, og tar i bruk Facebook som
-distribusjonskanal for sine nyheter.  De bidrar til
-overvåkningssamfunnet og raderer ut lesernes privatsfære når de lenker
-til Facebook på sine sider, og låser seg selv inne i en omgivelse der
-det er Facebook, og ikke redaktøren, som sitter med makta.&lt;/p&gt;
-
-&lt;p&gt;Men det vil nok ta tid, i et Norge der de fleste nettredaktører
-&lt;a href=&quot;http://people.skolelinux.org/pere/blog/Snurpenot_overv_kning_av_sensitiv_personinformasjon.html&quot;&gt;deler
-sine leseres personopplysinger med utenlands etterretning&lt;/a&gt;.&lt;/p&gt;
-
-&lt;p&gt;For øvrig burde varsleren Edward Snowden få politisk asyl i
-Norge.&lt;/p&gt;
+               <title>Introducing ical-archiver to split out old iCalendar entries</title>
+               <link>http://people.skolelinux.org/pere/blog/Introducing_ical_archiver_to_split_out_old_iCalendar_entries.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Introducing_ical_archiver_to_split_out_old_iCalendar_entries.html</guid>
+                <pubDate>Wed, 4 Jan 2017 12:20:00 +0100</pubDate>
+               <description>&lt;p&gt;Do you have a large &lt;a href=&quot;https://icalendar.org/&quot;&gt;iCalendar&lt;/a&gt;
+file with lots of old entries, and would like to archive them to save
+space and resources?  At least those of us using KOrganizer know that
+turning on and off an event set become slower and slower the more
+entries are in the set.  While working on migrating our calendars to a
+&lt;a href=&quot;http://radicale.org/&quot;&gt;Radicale CalDAV server&lt;/a&gt; on our
+&lt;a href=&quot;https://freedomboxfoundation.org/&quot;&gt;Freedombox server&lt;/a/&gt;, my
+loved one wondered if I could find a way to split up the calendar file
+she had in KOrganizer, and I set out to write a tool.  I spent a few
+days writing and polishing the system, and it is now ready for general
+consumption.  The
+&lt;a href=&quot;https://github.com/petterreinholdtsen/ical-archiver&quot;&gt;code for
+ical-archiver&lt;/a&gt; is publicly available from a git repository on
+github.  The system is written in Python and depend on
+&lt;a href=&quot;http://eventable.github.io/vobject/&quot;&gt;the vobject Python
+module&lt;/a&gt;.&lt;/p&gt;
+
+&lt;p&gt;To use it, locate the iCalendar file you want to operate on and
+give it as an argument to the ical-archiver script.  This will
+generate a set of new files, one file per component type per year for
+all components expiring more than two years in the past.  The vevent,
+vtodo and vjournal entries are handled by the script.  The remaining
+entries are stored in a &#39;remaining&#39; file.&lt;/p&gt;
+
+&lt;p&gt;This is what a test run can look like:
+
+&lt;p&gt;&lt;pre&gt;
+% ical-archiver t/2004-2016.ics 
+Found 3612 vevents
+Found 6 vtodos
+Found 2 vjournals
+Writing t/2004-2016.ics-subset-vevent-2004.ics
+Writing t/2004-2016.ics-subset-vevent-2005.ics
+Writing t/2004-2016.ics-subset-vevent-2006.ics
+Writing t/2004-2016.ics-subset-vevent-2007.ics
+Writing t/2004-2016.ics-subset-vevent-2008.ics
+Writing t/2004-2016.ics-subset-vevent-2009.ics
+Writing t/2004-2016.ics-subset-vevent-2010.ics
+Writing t/2004-2016.ics-subset-vevent-2011.ics
+Writing t/2004-2016.ics-subset-vevent-2012.ics
+Writing t/2004-2016.ics-subset-vevent-2013.ics
+Writing t/2004-2016.ics-subset-vevent-2014.ics
+Writing t/2004-2016.ics-subset-vjournal-2007.ics
+Writing t/2004-2016.ics-subset-vjournal-2011.ics
+Writing t/2004-2016.ics-subset-vtodo-2012.ics
+Writing t/2004-2016.ics-remaining.ics
+%
+&lt;/pre&gt;&lt;/p&gt;
+
+&lt;p&gt;As you can see, the original file is untouched and new files are
+written with names derived from the original file.  If you are happy
+with their content, the *-remaining.ics file can replace the original
+the the others can be archived or imported as historical calendar
+collections.&lt;/p&gt;
+
+&lt;p&gt;The script should probably be improved a bit.  The error handling
+when discovering broken entries is not good, and I am not sure yet if
+it make sense to split different entry types into separate files or
+not.  The program is thus likely to change.  If you find it
+interesting, please get in touch. :)&lt;/p&gt;
+
+&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
+activities, please send Bitcoin donations to my address
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&amp;label=PetterReinholdtsenBlog&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;
 </description>
        </item>