Nytt gaveforslag.

[homepage.git] / blog / index.rss

diff --git a/blog/index.rss b/blog/index.rss
index 9e5848ce1772dcb51783e727348d36a399e079e2..17ec41a7de3af81fbe8d69d0cfc669a6054f4326 100644 (file)
--- a/blog/index.rss
+++ b/blog/index.rss
@@ -6,6 +6,161 @@
                 <link>http://people.skolelinux.org/pere/blog/</link>
                 <atom:link href="http://people.skolelinux.org/pere/blog/index.rss" rel="self" type="application/rss+xml" />
        
                 <link>http://people.skolelinux.org/pere/blog/</link>
                 <atom:link href="http://people.skolelinux.org/pere/blog/index.rss" rel="self" type="application/rss+xml" />
        

+       <item>
+               <title>Dårlig med sikkerhetsoppdateringer for Ruters billettautomater i Oslo?</title>
+               <link>http://people.skolelinux.org/pere/blog/D_rlig_med_sikkerhetsoppdateringer_for_Ruters_billettautomater_i_Oslo_.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/D_rlig_med_sikkerhetsoppdateringer_for_Ruters_billettautomater_i_Oslo_.html</guid>
+                <pubDate>Wed, 13 Feb 2019 10:45:00 +0100</pubDate>
+               <description>&lt;p&gt;&lt;a href=&quot;http://people.skolelinux.org/pere/blog/Er_billettautomatene_til_kollektivtrafikken_i_Oslo_uten_sikkerhetsoppdateringer_.html&quot;&gt;For
+syv år siden&lt;/a&gt; oppdaget jeg at billettautomater for
+kollektivtrafikken i Oslo kjørte
+&lt;a href=&quot;http://en.wikipedia.org/wiki/Windows_2000&quot;&gt;Windows 2000
+Professional&lt;/a&gt;.  Operativsystemet har ikke fått sikkerhetsfikser fra
+Microsoft siden 2010-07-13 i følge dem selv.  Den samme versjonen av
+operativsystemet var i bruk
+&lt;a href=&quot;http://people.skolelinux.org/pere/blog/Fortsatt_ingen_sikkerhetsoppdateringer_for_billettautomatene_til_kollektivtrafikken_i_Oslo_.html&quot;&gt;for
+to og et halvt år siden&lt;/a&gt;, og jammen er det ikke også i bruk den dag
+i dag:&lt;/p&gt;
+
+&lt;p align=&quot;center&quot;&gt;&lt;a href=&quot;http://people.skolelinux.org/pere/blog/images/2019-02-13-ruter-win2000pro.jpeg&quot;&gt;&lt;img width=&quot;40%&quot; src=&quot;http://people.skolelinux.org/pere/blog/images/2019-02-13-ruter-win2000pro.jpeg&quot; alt=&quot;[Bilde av Ruters billettautomat med Windows 2000-feilmelding]&quot;&gt;&lt;/a&gt;&lt;/p&gt;
+
+&lt;p&gt;Bildet er tatt i dag av Kirill Miazine og tilgjengelig for bruk med
+bruksvilkårene til
+&lt;a href=&quot;http://creativecommons.org/licenses/by/4.0/&quot;&gt;Creative
+Commons Attribution 4.0 International (CC BY 4.0)&lt;/a&gt;.&lt;/p&gt;
+
+&lt;p&gt;Kanskje det hadde vært
+&lt;a href=&quot;https://www.aftenposten.no/osloby/i/awqgO/Her-kjorer-du-gratis-trikk-og-buss&quot;&gt;bedre
+med gratis kollektivtrafikk&lt;/A&gt;, slik at vi slapp å stole på
+datakompetansen til Ruter for å verne våre privatliv samt holde
+personopplysninger og betalingsinformasjon unna uvedkommende.  Eneste
+måten å sikre at hvor en befinner seg ikke kan hentes ut fra Ruters
+systemer er å betale enkeltbilletter med kontanter.  Jeg vet at Ruter
+har en god historie om hvor personvernvennlige mobil-app og
+RFID-kortene er, men den historien er ikke mulig å uavhengig
+kontrollere uten priviligert tilgang til interne system og blir dermed
+bare nok en god historie basert på tillit til de som forteller
+historien.  Det er ikke slik en sikrer privatsfæren.  Det gjør en ved
+å sikre at det ikke (kan) registreres informasjon om ens person.&lt;/p&gt;
+
+&lt;p&gt;Som vanlig, hvis du bruker Bitcoin og ønsker å vise din støtte til
+det jeg driver med, setter jeg pris på om du sender Bitcoin-donasjoner
+til min adresse
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.
+Merk, betaling med bitcoin er ikke anonymt. :)&lt;/p&gt;
+</description>
+       </item>
+       
+       <item>
+               <title>Stortinget vedtar maskinlesbart register over 20% av selskapseierne i Norge</title>
+               <link>http://people.skolelinux.org/pere/blog/Stortinget_vedtar_maskinlesbart_register_over_20__av_selskapseierne_i_Norge.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Stortinget_vedtar_maskinlesbart_register_over_20__av_selskapseierne_i_Norge.html</guid>
+                <pubDate>Thu, 7 Feb 2019 23:55:00 +0100</pubDate>
+               <description>&lt;p&gt;Jeg registrerer med glede at Stortinget i dag har
+&lt;a href=&quot;https://www.stortinget.no/no/Saker-og-publikasjoner/Saker/Sak/?p=72826&quot;&gt;vedtatt
+at det skal vedlikeholdes et åpent og maskinlesbart register over
+reelle rettighetshavere i Norge&lt;/a&gt;.  Her kan en kanskje få et
+register som kan brukes til å analysere eierskap og kontroll i Norge
+maskinelt og knytte det til internasjonale databaser som
+&lt;a href=&quot;https://opencorporates.com/&quot;&gt;OpenCorporates&lt;/a&gt;.  Det liker
+jeg.&lt;/p&gt;
+
+&lt;p&gt;Den vedtatte grense på 25 prosents eierandel fikk stor
+oppmerksomhet i debatten.  Jeg ser fra enkel analyse av skatteetatens
+eierskapsregister at 80.4% av alle selskapseiere i registeret har
+mindre enn 25% eierandel, mot 73.8% som har mindre enn 5% eierandel.
+En grense på 25% vil altså utelukke 80.4% av selskapseierne fra det
+vedtatte registeret, og en grense på 5% vil skjule 73.8%.  En må helt
+ned i registrering av eierandeler over circa 0.002% for å få mer enn
+halvparten av selskapseierne i Norge.  Mon tro hvor langt ned en må i
+eierprosent for å få med alle eierskapene til politisk valgte
+representanter?&lt;/p&gt;
+
+&lt;p&gt;Jeg biter meg også merke i at Sivert Bjørnstad fra FrP
+tilsynelatende tror at aksjonærregisteret er et eksisterende åpent
+register, på tross av at det så vidt jeg vet kun deles ved personlig
+oppmøte hos skatteetaten og ikke er tilgjengelig i maskinlesbart
+format for enhver, og dermed så langt ikke er importert inn i
+OpenCorporates.  Det anser jeg ikke for et spesielt åpent register.
+Debatten ga ellers lite håp om at situasjonen bedrer seg, da
+finansministeren bare henviste til en fraværende næringsministeren og
+ikke ville uttale seg om et skikkelig aksjonærregister snart dukker
+opp.&lt;/p&gt;
+
+&lt;p&gt;Som vanlig, hvis du bruker Bitcoin og ønsker å vise din støtte til
+det jeg driver med, setter jeg pris på om du sender Bitcoin-donasjoner
+til min adresse
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.
+Merk, betaling med bitcoin er ikke anonymt. :)&lt;/p&gt;
+</description>
+       </item>
+       
+       <item>
+               <title>Websocket from Kraken in Valutakrambod</title>
+               <link>http://people.skolelinux.org/pere/blog/Websocket_from_Kraken_in_Valutakrambod.html</link>
+               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Websocket_from_Kraken_in_Valutakrambod.html</guid>
+                <pubDate>Fri, 1 Feb 2019 22:25:00 +0100</pubDate>
+               <description>&lt;p&gt;Yesterday, the Kraken virtual currency exchange announced
+&lt;a href=&quot;https://blog.kraken.com/post/2019/websockets-public-api-launching-soon/&quot;&gt;their
+Websocket service&lt;/a&gt;, providing a stream of exchange updates to its
+clients.  Getting updated rates quickly is a good idea, so I used
+their &lt;a href=&quot;https://www.kraken.com/en-us/help/websocket-api&quot;&gt;API
+documentation&lt;/a&gt; and added Websocket support to the Kraken service in
+Valutakrambod today.  The python library can now get updates
+from Kraken several times per second, instead of every time the
+information is polled from the REST API.&lt;/p&gt;
+
+&lt;p&gt;If this sound interesting to you, the code for valutakrambod is
+available from
+&lt;a href=&quot;http://github.com/petterreinholdtsen/valutakrambod&quot;&gt;github&lt;/a&gt;.
+Here is example output from the example client displaying rates in a
+curses view:&lt;/p&gt;
+
+&lt;p&gt;&lt;blockquote&gt;&lt;pre&gt;
+           Name Pair   Bid         Ask         Spr    Ftcd    Age
+ BitcoinsNorway BTCEUR   2959.2800   3021.0500   2.0%   36    nan    nan
+       Bitfinex BTCEUR   3087.9000   3088.0000   0.0%   36     37    nan
+        Bitmynt BTCEUR   3001.8700   3135.4600   4.3%   36     52    nan
+         Bitpay BTCEUR   3003.8659         nan   nan%   35    nan    nan
+       Bitstamp BTCEUR   3008.0000   3010.2300   0.1%    0      1      1
+           Bl3p BTCEUR   3000.6700   3010.9300   0.3%    1    nan    nan
+       Coinbase BTCEUR   2992.1800   3023.2500   1.0%   34    nan    nan
+         Kraken+BTCEUR   3005.7000   3006.6000   0.0%    0      1      0
+        Paymium BTCEUR   2940.0100   2993.4400   1.8%    0   2688    nan
+ BitcoinsNorway BTCNOK  29000.0000  29360.7400   1.2%   36    nan    nan
+        Bitmynt BTCNOK  29115.6400  29720.7500   2.0%   36     52    nan
+         Bitpay BTCNOK  29029.2512         nan   nan%   36    nan    nan
+       Coinbase BTCNOK  28927.6000  29218.5900   1.0%   35    nan    nan
+        MiraiEx BTCNOK  29097.7000  29741.4200   2.2%   36    nan    nan
+ BitcoinsNorway BTCUSD   3385.4200   3456.0900   2.0%   36    nan    nan
+       Bitfinex BTCUSD   3538.5000   3538.6000   0.0%   36     45    nan
+         Bitpay BTCUSD   3443.4600         nan   nan%   34    nan    nan
+       Bitstamp BTCUSD   3443.0100   3445.0500   0.1%    0      2      1
+       Coinbase BTCUSD   3428.1600   3462.6300   1.0%   33    nan    nan
+         Gemini BTCUSD   3445.8800   3445.8900   0.0%   36    326    nan
+         Hitbtc BTCUSD   3473.4700   3473.0700  -0.0%    0      0      0
+         Kraken+BTCUSD   3444.4000   3445.6000   0.0%    0      1      0
+  Exchangerates EURNOK      9.6685      9.6685   0.0%   36  22226    nan
+     Norgesbank EURNOK      9.6685      9.6685   0.0%   36  22226    nan
+       Bitstamp EURUSD      1.1440      1.1462   0.2%    0      1      2
+  Exchangerates EURUSD      1.1471      1.1471   0.0%   36  22226    nan
+ BitcoinsNorway LTCEUR      1.0009     22.6538  95.6%   35    nan    nan
+ BitcoinsNorway LTCNOK    259.0900    264.9300   2.2%   35    nan    nan
+ BitcoinsNorway LTCUSD      0.0000     29.0000 100.0%   35    nan    nan
+     Norgesbank USDNOK      8.4286      8.4286   0.0%   36  22226    nan
+&lt;/pre&gt;&lt;/blockquote&gt;&lt;/p&gt;
+
+&lt;p&gt;Yes, I notice the strange negative spread on Hitbtc.  I&#39;ve seen the
+same on Kraken.  Another strange observation is that Kraken some times
+announce trade orders a fraction of a second in the future.  I really
+wonder what is going on there.&lt;/p&gt;
+
+&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
+activities, please send Bitcoin donations to my address
+&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;
+</description>
+       </item>
+       

        <item>
                <title>Strategispillet Unknown Horizons nå tilgjengelig på bokmål</title>
                <link>http://people.skolelinux.org/pere/blog/Strategispillet_Unknown_Horizons_n__tilgjengelig_p__bokm_l.html</link>
        <item>
                <title>Strategispillet Unknown Horizons nå tilgjengelig på bokmål</title>
                <link>http://people.skolelinux.org/pere/blog/Strategispillet_Unknown_Horizons_n__tilgjengelig_p__bokm_l.html</link>


@@ -688,123 +843,5 @@ Merk, betaling med bitcoin er ikke anonymt. :)&lt;/p&gt;
 </description>
        </item>
        
 </description>
        </item>
        

-       <item>
-               <title>Why is your site not using Content Security Policy / CSP?</title>
-               <link>http://people.skolelinux.org/pere/blog/Why_is_your_site_not_using_Content_Security_Policy___CSP_.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Why_is_your_site_not_using_Content_Security_Policy___CSP_.html</guid>
-                <pubDate>Sun, 9 Dec 2018 15:00:00 +0100</pubDate>
-               <description>&lt;p&gt;Yesterday, I had the pleasure of watching on Frikanalen the OWASP
-talk by Scott Helme titled
-&quot;&lt;a href=&quot;https://frikanalen.no/video/626080/&quot;&gt;What We’ve Learned From
-Billions of Security Reports&lt;/a&gt;&quot;.  I had not heard of the
-&lt;a href=&quot;https://en.wikipedia.org/wiki/Content_Security_Policy&quot;&gt;Content
-Security Policy standard&lt;/a&gt; nor its ability to &quot;call home&quot; when a
-browser detect a policy breach (I do not follow web page design
-development much these days), and found the talk very illuminating.&lt;/p&gt;
-
-&lt;p&gt;The mechanism allow a web site owner to use HTTP headers to tell
-visitors web browser which sources (internal and external) are allowed to
-be used on the web site.  Thus it become possible to enforce a &quot;only
-local content&quot; policy despite web designers urge to fetch programs
-from random sites on the Internet, like the one
-&lt;a href=&quot;https://securityaffairs.co/wordpress/68966/hacking/browsealoud-plugin-hack.html&quot;&gt;enabling
-the attack&lt;/a&gt; reported by Scott Helme earlier this year.&lt;/p&gt;
-
-&lt;p&gt;Using CSP seem like an obvious thing for a site admin to implement
-to take some control over the information leak that occur when
-external sources are used to render web pages, it is a mystery more
-sites are not using CSP?  It is being
-&lt;a href=&quot;https://www.w3.org/TR/CSP/&quot;&gt;standardized under W3C&lt;/a&gt; these
-days, and is supposed by most web browsers&lt;/p&gt;
-
-&lt;p&gt;I managed to find &lt;a href=&quot;https://github.com/mozilla/django-csp&quot;&gt;a
-Django middleware for implementing CSP&lt;/a&gt; and was happy to discover
-it was already in Debian.  I plan to use it to add CSP support to the
-Frikanalen web site soon.&lt;/p&gt;
-
-&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
-activities, please send Bitcoin donations to my address
-&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;
-</description>
-       </item>
-       
-       <item>
-               <title>New and improved Frikanalen Kodi addon version 0.0.3</title>
-               <link>http://people.skolelinux.org/pere/blog/New_and_improved_Frikanalen_Kodi_addon_version_0_0_3.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/New_and_improved_Frikanalen_Kodi_addon_version_0_0_3.html</guid>
-                <pubDate>Thu, 8 Nov 2018 10:30:00 +0100</pubDate>
-               <description>&lt;p&gt;If you read my blog regularly, you probably know I am involved in
-running and developing the &lt;a href=&quot;https://frikanalen.no/&quot;&gt;Norwegian
-TV channel Frikanalen&lt;/a&gt;.  It is an open channel, allowing everyone
-in Norway to publish videos on a TV channel with national coverage.
-You can think of it as Youtube for national television.
-In addition to distribution on RiksTV and Uninett, Frikanalen is also
-available as a Kodi addon.  The last few days I have updated the code
-to add more features.  A
-&lt;a href=&quot;https://kodi.tv/addon/plugins-video-add-ons/frikanalen-nett-tv&quot;&gt;new
-and improved version 0.0.3 Frikanalen addon&lt;/a&gt; was just made
-available via the Kodi repositories.  This new version include a
-option to browse videos by category, as well as free text search
-in the video archive.  It will now also show the video duration in the
-video lists, which were missing earlier.  A new and experimental
-link to the HD video stream currently being worked on is provided, for
-those that want to see what the &lt;a href=&quot;https://casparcg.com/&quot;&gt;CasparCG&lt;/a&gt;
-output look like.  The alternative is the SD video stream, generated
-using MLT.  CasparCG is controlled by our
-&lt;a href=&quot;https://github.com/Frikanalen/mltplayout/&quot;&gt;mltplayout
-server&lt;/a&gt; which instead of talking to mlt is giving PLAY instructions
-to the CasparCG server when it is time to start a new program.&lt;/p&gt;
-
-&lt;p&gt;By now, you are probably wondering what kind of content is being
-played on the channel.  These days, it is filled with technical
-presentations like those from &lt;a href=&quot;https://www.nuug.no/&quot;&gt;NUUG&lt;/a&gt;,
-&lt;a href=&quot;https://www.debconf.org/&quot;&gt;Debconf&lt;/a&gt;, Makercon, and TED,
-but there are also some periods with
-&lt;a href=&quot;https://www.empo.no/&quot;&gt;EMPT TV&lt;/a&gt; and
-&lt;a href=&quot;https://www.p7.no/&quot;&gt;P7&lt;/a&gt;.
-
-&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
-activities, please send Bitcoin donations to my address
-&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;
-</description>
-       </item>
-       
-       <item>
-               <title>Time for an official MIME type for patches?</title>
-               <link>http://people.skolelinux.org/pere/blog/Time_for_an_official_MIME_type_for_patches_.html</link>
-               <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Time_for_an_official_MIME_type_for_patches_.html</guid>
-                <pubDate>Thu, 1 Nov 2018 08:15:00 +0100</pubDate>
-               <description>&lt;p&gt;As part of my involvement in
-&lt;a href=&quot;https://gitlab.com/OsloMet-ABI/nikita-noark5-core&quot;&gt;the Nikita
-archive API project&lt;/a&gt;, I&#39;ve been importing a fairly large lump of
-emails into a test instance of the archive to see how well this would
-go.  I picked a subset of &lt;a href=&quot;https://notmuchmail.org/&quot;&gt;my
-notmuch email database&lt;/a&gt;, all public emails sent to me via
-@lists.debian.org, giving me a set of around 216 000 emails to import.
-In the process, I had a look at the various attachments included in
-these emails, to figure out what to do with attachments, and noticed
-that one of the most common attachment formats do not have
-&lt;a href=&quot;https://www.iana.org/assignments/media-types/media-types.xhtml&quot;&gt;an
-official MIME type&lt;/a&gt; registered with IANA/IETF.  The output from
-diff, ie the input for patch, is on the top 10 list of formats
-included in these emails.  At the moment people seem to use either
-text/x-patch or text/x-diff, but neither is officially registered.  It
-would be better if one official MIME type were registered and used
-everywhere.&lt;/p&gt;
-
-&lt;p&gt;To try to get one official MIME type for these files, I&#39;ve brought
-up the topic on
-&lt;a href=&quot;https://www.ietf.org/mailman/listinfo/media-types&quot;&gt;the
-media-types mailing list&lt;/a&gt;.  If you are interested in discussion
-which MIME type to use as the official for patch files, or involved in
-making software using a MIME type for patches, perhaps you would like
-to join the discussion?&lt;/p&gt;
-
-&lt;p&gt;As usual, if you use Bitcoin and want to show your support of my
-activities, please send Bitcoin donations to my address
-&lt;b&gt;&lt;a href=&quot;bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&quot;&gt;15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b&lt;/a&gt;&lt;/b&gt;.&lt;/p&gt;
-</description>
-       </item>
-       

         </channel>
 </rss>
         </channel>
 </rss>