X-Git-Url: http://pere.pagekite.me/gitweb/homepage.git/blobdiff_plain/aaf3a8d6ac3f87b3060fda22f11cb474d2e37af0..98c59e0ffce652f2b0d5a3ab223cafb7e2d9619f:/blog/index.rss diff --git a/blog/index.rss b/blog/index.rss index 317126122a..bc37987b61 100644 --- a/blog/index.rss +++ b/blog/index.rss @@ -6,6 +6,248 @@ http://people.skolelinux.org/pere/blog/ + + Retten til kontant betaling er en rettighet som må brukes for å beholdes + http://people.skolelinux.org/pere/blog/Retten_til_kontant_betaling_er_en_rettighet_som_m__brukes_for___beholdes.html + http://people.skolelinux.org/pere/blog/Retten_til_kontant_betaling_er_en_rettighet_som_m__brukes_for___beholdes.html + Tue, 11 Dec 2018 10:00:00 +0100 + <p><a href="https://www.fn.no/Om-FN/Avtaler/Menneskerettigheter/FNs-verdenserklaering-om-menneskerettigheter">FNs +menneskerettighetserklæring</a> artikkel 13 første punkt lyder som +følger:</p> + +<p><blockquote> +Enhver har rett til å bevege seg fritt og til fritt å velge +oppholdssted innenfor en stats grenser. +</blockquote></p> + +<p>Det er altså en menneskerett å kunne bevege seg fritt i landet. +For å bevege seg fritt i landet, så må en kunne bevege seg uten å bli +sporet. Det vil i dagens samfunn innebære å bevege seg uten å legge +igjen digitale spor og uten å være radiomerket. Hvis en vet at ens +bevegelser, hvor en befinner seg når, og hvem som befinner seg i +nærheten, blir samlet inn og gjort tilgjengelig for fremmede, det være +seg myndighetene eller private organisasjoner, så kan en ikke lenger +bevege seg fritt. Dette gjør at det er en forutsetning for å ha glede +av retten til å bevege seg fritt i landet at en motstår fristelsen til +å legge igjen digitale spor når en betaler for seg. Rettigheter som +ikke blir brukt, blit fjernet. Den eneste måten i dag å unngå å legge +igjen digitale spor når en betaler for seg, er å betale med kontanter, +samt takke nei til å legge igjen navn og adresse (slik f.eks. Elkjøp +ber om &mdash; jeg sier de kan legge inn 'anonym anonym' når +datasystemet deres trenger et navn). Personlig anbefaler jeg å +konsekvent bruke kontant betaling når man beveger seg rundt, for å +bidra til forsvaret av menneskerettighetene i Norge. Kanskje noe også +for deg? Merk at det ikke er tilstrekkelig for å unngå sporing å +betale med kontanter, men det er et lite steg i riktig retning.</p> + +<p>Det er flere andre argumenter i tillegg til +menneskerettighetsargumentet for å bruke kontanter. I går hadde +Dagbladet en utmerket kommentar av sin journalist John Olav Egeland om +hvilket +<a href="https://www.dagbladet.no/kultur/kontantlost-diktatur/70543434">kontantløst +diktatur</a> som venter oss hvis mange nok slutter å insistere på å +betale med kontanter. Jeg anbefaler deg å lese den.</p> + +<p>Som vanlig, hvis du bruker Bitcoin og ønsker å vise din støtte til +det jeg driver med, setter jeg pris på om du sender Bitcoin-donasjoner +til min adresse +<b><a href="bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b</a></b>. +Merk, betaling med bitcoin er ikke anonymt. :)</p> + + + + + Why is your site not using Content Security Policy / CSP? + http://people.skolelinux.org/pere/blog/Why_is_your_site_not_using_Content_Security_Policy___CSP_.html + http://people.skolelinux.org/pere/blog/Why_is_your_site_not_using_Content_Security_Policy___CSP_.html + Sun, 9 Dec 2018 15:00:00 +0100 + <p>Yesterday, I had the pleasure of watching on Frikanalen the OWASP +talk by Scott Helme titled +"<a href="https://frikanalen.no/video/626080/">What We’ve Learned From +Billions of Security Reports</a>". I had not heard of the +<a href="https://en.wikipedia.org/wiki/Content_Security_Policy">Content +Security Policy standard</a> nor its ability to "call home" when a +browser detect a policy breach (I do not follow web page design +development much these days), and found the talk very illuminating.</p> + +<p>The mechanism allow a web site owner to use HTTP headers to tell +visitors web browser which sources (internal and external) are allowed to +be used on the web site. Thus it become possible to enforce a "only +local content" policy despite web designers urge to fetch programs +from random sites on the Internet, like the one +<a href="https://securityaffairs.co/wordpress/68966/hacking/browsealoud-plugin-hack.html">enabling +the attack</a> reported by Scott Helme earlier this year.</p> + +<p>Using CSP seem like an obvious thing for a site admin to implement +to take some control over the information leak that occur when +external sources are used to render web pages, it is a mystery more +sites are not using CSP? It is being +<a href="https://www.w3.org/TR/CSP/">standardized under W3C</a> these +days, and is supposed by most web browsers</p> + +<p>I managed to find <a href="https://github.com/mozilla/django-csp">a +Django middleware for implementing CSP</a> and was happy to discover +it was already in Debian. I plan to use it to add CSP support to the +Frikanalen web site soon.</p> + +<p>As usual, if you use Bitcoin and want to show your support of my +activities, please send Bitcoin donations to my address +<b><a href="bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b</a></b>.</p> + + + + + New and improved Frikanalen Kodi addon version 0.0.3 + http://people.skolelinux.org/pere/blog/New_and_improved_Frikanalen_Kodi_addon_version_0_0_3.html + http://people.skolelinux.org/pere/blog/New_and_improved_Frikanalen_Kodi_addon_version_0_0_3.html + Thu, 8 Nov 2018 10:30:00 +0100 + <p>If you read my blog regularly, you probably know I am involved in +running and developing the <a href="https://frikanalen.no/">Norwegian +TV channel Frikanalen</a>. It is an open channel, allowing everyone +in Norway to publish videos on a TV channel with national coverage. +You can think of it as Youtube for national television. +In addition to distribution on RiksTV and Uninett, Frikanalen is also +available as a Kodi addon. The last few days I have updated the code +to add more features. A +<a href="https://kodi.tv/addon/plugins-video-add-ons/frikanalen-nett-tv">new +and improved version 0.0.3 Frikanalen addon</a> was just made +available via the Kodi repositories. This new version include a +option to browse videos by category, as well as free text search +in the video archive. It will now also show the video duration in the +video lists, which were missing earlier. A new and experimental +link to the HD video stream currently being worked on is provided, for +those that want to see what the <a href="https://casparcg.com/">CasparCG</a> +output look like. The alternative is the SD video stream, generated +using MLT. CasparCG is controlled by our +<a href="https://github.com/Frikanalen/mltplayout/">mltplayout +server</a> which instead of talking to mlt is giving PLAY instructions +to the CasparCG server when it is time to start a new program.</p> + +<p>By now, you are probably wondering what kind of content is being +played on the channel. These days, it is filled with technical +presentations like those from <a href="https://www.nuug.no/">NUUG</a>, +<a href="https://www.debconf.org/">Debconf</a>, Makercon, and TED, +but there are also some periods with +<a href="https://www.empo.no/">EMPT TV</a> and +<a href="https://www.p7.no/">P7</a>. + +<p>As usual, if you use Bitcoin and want to show your support of my +activities, please send Bitcoin donations to my address +<b><a href="bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b</a></b>.</p> + + + + + Time for an official MIME type for patches? + http://people.skolelinux.org/pere/blog/Time_for_an_official_MIME_type_for_patches_.html + http://people.skolelinux.org/pere/blog/Time_for_an_official_MIME_type_for_patches_.html + Thu, 1 Nov 2018 08:15:00 +0100 + <p>As part of my involvement in +<a href="https://gitlab.com/OsloMet-ABI/nikita-noark5-core">the Nikita +archive API project</a>, I've been importing a fairly large lump of +emails into a test instance of the archive to see how well this would +go. I picked a subset of <a href="https://notmuchmail.org/">my +notmuch email database</a>, all public emails sent to me via +@lists.debian.org, giving me a set of around 216 000 emails to import. +In the process, I had a look at the various attachments included in +these emails, to figure out what to do with attachments, and noticed +that one of the most common attachment formats do not have +<a href="https://www.iana.org/assignments/media-types/media-types.xhtml">an +official MIME type</a> registered with IANA/IETF. The output from +diff, ie the input for patch, is on the top 10 list of formats +included in these emails. At the moment people seem to use either +text/x-patch or text/x-diff, but neither is officially registered. It +would be better if one official MIME type were registered and used +everywhere.</p> + +<p>To try to get one official MIME type for these files, I've brought +up the topic on +<a href="https://www.ietf.org/mailman/listinfo/media-types">the +media-types mailing list</a>. If you are interested in discussion +which MIME type to use as the official for patch files, or involved in +making software using a MIME type for patches, perhaps you would like +to join the discussion?</p> + +<p>As usual, if you use Bitcoin and want to show your support of my +activities, please send Bitcoin donations to my address +<b><a href="bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b</a></b>.</p> + + + + + Measuring the speaker frequency response using the AUDMES free software GUI - nice free software + http://people.skolelinux.org/pere/blog/Measuring_the_speaker_frequency_response_using_the_AUDMES_free_software_GUI___nice_free_software.html + http://people.skolelinux.org/pere/blog/Measuring_the_speaker_frequency_response_using_the_AUDMES_free_software_GUI___nice_free_software.html + Mon, 22 Oct 2018 08:40:00 +0200 + <p><img src="http://people.skolelinux.org/pere/blog/images/2018-10-22-audmes-measure-speakers.png" align="right" width="40%"/></p> + +<p>My current home stereo is a patchwork of various pieces I got on +flee markeds over the years. It is amazing what kind of equipment +show up there. I've been wondering for a while if it was possible to +measure how well this equipment is working together, and decided to +see how far I could get using free software. After trawling the web I +came across an article from DIY Audio and Video on +<a href="https://www.diyaudioandvideo.com/Tutorial/SpeakerResponseTesting/">Speaker +Testing and Analysis</a> describing how to test speakers, and it listing +several software options, among them +<a href="https://sourceforge.net/projects/audmes/">AUDio MEasurement +System (AUDMES)</a>. It is the only free software system I could find +focusing on measuring speakers and audio frequency response. In the +process I also found an interesting article from NOVO on +<a href="http://novo.press/understanding-speaker-specifications-and-frequency-response/">Understanding +Speaker Specifications and Frequency Response</a> and an article from +ecoustics on +<a href="https://www.ecoustics.com/articles/understanding-speaker-frequency-response/">Understanding +Speaker Frequency Response</a>, with a lot of information on what to +look for and how to interpret the graphs. Armed with this knowledge, +I set out to measure the state of my speakers.</p> + +<p>The first hurdle was that AUDMES hadn't seen a commit for 10 years +and did not build with current compilers and libraries. I got in +touch with its author, who no longer was spending time on the program +but gave me write access to the subversion repository on Sourceforge. +The end result is that now the code build on Linux and is capable of +saving and loading the collected frequency response data in CSV +format. The application is quite nice and flexible, and I was able to +select the input and output audio interfaces independently. This made +it possible to use a USB mixer as the input source, while sending +output via my laptop headphone connection. I lacked the hardware and +cabling to figure out a different way to get independent cabling to +speakers and microphone.</p> + +<p>Using this setup I could see how a large range of high frequencies +apparently were not making it out of my speakers. The picture show +the frequency response measurement of one of the speakers. Note the +frequency lines seem to be slightly misaligned, compared to the CSV +output from the program. I can not hear several of these are high +frequencies, according to measurement from +<a href="http://freehearingtestsoftware.com">Free Hearing Test +Software</a>, an freeware system to measure your hearing (still +looking for a free software alternative), so I do not know if they are +coming out out the speakers. I thus do not quite know how to figure +out if the missing frequencies is a problem with the microphone, the +amplifier or the speakers, but I managed to rule out the audio card in my +PC by measuring my Bose noise canceling headset using its own +microphone. This setup was able to see the high frequency tones, so +the problem with my stereo had to be in the amplifier or speakers.</p> + +<p>Anyway, to try to role out one factor I ended up picking up a new +set of speakers at a flee marked, and these work a lot better than the +old speakers, so I guess the microphone and amplifier is OK. If you +need to measure your own speakers, check out AUDMES. If more people +get involved, perhaps the project could become good enough to +<a href="https://bugs.debian.org/910876">include in Debian</a>? And if +you know of some other free software to measure speakers and amplifier +performance, please let me know. I am aware of the freeware option +<a href="https://www.roomeqwizard.com/">REW</a>, but I want something +that can be developed also when the vendor looses interest.</p> + +<p>As usual, if you use Bitcoin and want to show your support of my +activities, please send Bitcoin donations to my address +<b><a href="bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b</a></b>.</p> + + + Web browser integration of VLC with Bittorrent support http://people.skolelinux.org/pere/blog/Web_browser_integration_of_VLC_with_Bittorrent_support.html @@ -38,7 +280,7 @@ what the strange x-scheme-handler style MIME types in desktop files are used for. By adding x-scheme-handler/magnet to the MimeType entry in the desktop file, at least the browsers Firefox and Chromium will suggest to start VLC when selecting a magnet URI on a web page. The -end result is that now, with the plugin installed in Buster og Sid, +end result is that now, with the plugin installed in Buster and Sid, one can visit any <a href="https://archive.org/details/CopyingIsNotTheft1080p">Internet Archive page with movies</a> using a web browser and click on the @@ -462,189 +704,6 @@ would love to hear from you. Note that for some of the services I've implemented a trading API. It might be the topic of a future blog post.</p> -<p>As usual, if you use Bitcoin and want to show your support of my -activities, please send Bitcoin donations to my address -<b><a href="bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b</a></b>.</p> - - - - - VLC in Debian now can do bittorrent streaming - http://people.skolelinux.org/pere/blog/VLC_in_Debian_now_can_do_bittorrent_streaming.html - http://people.skolelinux.org/pere/blog/VLC_in_Debian_now_can_do_bittorrent_streaming.html - Mon, 24 Sep 2018 21:20:00 +0200 - <p>Back in February, I got curious to see -<a href="http://people.skolelinux.org/pere/blog/Using_VLC_to_stream_bittorrent_sources.html">if -VLC now supported Bittorrent streaming</a>. It did not, despite the -fact that the idea and code to handle such streaming had been floating -around for years. I did however find -<a href="https://github.com/johang/vlc-bittorrent">a standalone plugin -for VLC</a> to do it, and half a year later I decided to wrap up the -plugin and get it into Debian. I uploaded it to NEW a few days ago, -and am very happy to report that it -<a href="https://tracker.debian.org/pkg/vlc-plugin-bittorrent">entered -Debian</a> a few hours ago, and should be available in Debian/Unstable -tomorrow, and Debian/Testing in a few days.</p> - -<p>With the vlc-plugin-bittorrent package installed you should be able -to stream videos using a simple call to</p> - -<p><blockquote><pre> -vlc https://archive.org/download/TheGoat/TheGoat_archive.torrent -</pre></blockquote></p> - -</p>It can handle magnet links too. Now if only native vlc had -bittorrent support. Then a lot more would be helping each other to -share public domain and creative commons movies. The plugin need some -stability work with seeking and picking the right file in a torrent -with many files, but is already usable. Please note that the plugin -is not removing downloaded files when vlc is stopped, so it can fill -up your disk if you are not careful. Have fun. :)</p> - -<p>I would love to get help maintaining this package. Get in touch if -you are interested.</p> - -<p>As usual, if you use Bitcoin and want to show your support of my -activities, please send Bitcoin donations to my address -<b><a href="bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b</a></b>.</p> - - - - - Using the Kodi API to play Youtube videos - http://people.skolelinux.org/pere/blog/Using_the_Kodi_API_to_play_Youtube_videos.html - http://people.skolelinux.org/pere/blog/Using_the_Kodi_API_to_play_Youtube_videos.html - Sun, 2 Sep 2018 23:40:00 +0200 - <p>I continue to explore my Kodi installation, and today I wanted to -tell it to play a youtube URL I received in a chat, without having to -insert search terms using the on-screen keyboard. After searching the -web for API access to the Youtube plugin and testing a bit, I managed -to find a recipe that worked. If you got a kodi instance with its API -available from http://kodihost/jsonrpc, you can try the following to -have check out a nice cover band.</p> - -<p><blockquote><pre>curl --silent --header 'Content-Type: application/json' \ - --data-binary '{ "id": 1, "jsonrpc": "2.0", "method": "Player.Open", - "params": {"item": { "file": - "plugin://plugin.video.youtube/play/?video_id=LuRGVM9O0qg" } } }' \ - http://projector.local/jsonrpc</pre></blockquote></p> - -<p>I've extended kodi-stream program to take a video source as its -first argument. It can now handle direct video links, youtube links -and 'desktop' to stream my desktop to Kodi. It is almost like a -Chromecast. :)</p> - -<p>As usual, if you use Bitcoin and want to show your support of my -activities, please send Bitcoin donations to my address -<b><a href="bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b</a></b>.</p> - - - - - Software created using taxpayers’ money should be Free Software - http://people.skolelinux.org/pere/blog/Software_created_using_taxpayers__money_should_be_Free_Software.html - http://people.skolelinux.org/pere/blog/Software_created_using_taxpayers__money_should_be_Free_Software.html - Thu, 30 Aug 2018 13:50:00 +0200 - <p>It might seem obvious that software created using tax money should -be available for everyone to use and improve. Free Software -Foundation Europe recentlystarted a campaign to help get more people -to understand this, and I just signed the petition on -<a href="https://publiccode.eu/">Public Money, Public Code</a> to help -them. I hope you too will do the same.</p> - - - - - A bit more on privacy respecting health monitor / fitness tracker - http://people.skolelinux.org/pere/blog/A_bit_more_on_privacy_respecting_health_monitor___fitness_tracker.html - http://people.skolelinux.org/pere/blog/A_bit_more_on_privacy_respecting_health_monitor___fitness_tracker.html - Mon, 13 Aug 2018 09:00:00 +0200 - <p>A few days ago, I wondered if there are any privacy respecting -health monitors and/or fitness trackers available for sale these days. -I would like to buy one, but do not want to share my personal data -with strangers, nor be forced to have a mobile phone to get data out -of the unit. I've received some ideas, and would like to share them -with you. - -One interesting data point was a pointer to a Free Software app for -Android named -<a href="https://github.com/Freeyourgadget/Gadgetbridge/">Gadgetbridge</a>. -It provide cloudless collection and storing of data from a variety of -trackers. Its -<a href="https://github.com/Freeyourgadget/Gadgetbridge/#supported-devices">list -of supported devices</a> is a good indicator for units where the -protocol is fairly open, as it is obviously being handled by Free -Software. Other units are reportedly encrypting the collected -information with their own public key, making sure only the vendor -cloud service is able to extract data from the unit. The people -contacting me about Gadgetbirde said they were using -<a href="https://us.amazfit.com/shop/bip?variant=336750">Amazfit -Bip</a> and -<a href="http://www.xiaomimi6phone.com/xiaomi-mi-band-3-features-release-date-rumors/">Xiaomi -Band 3</a>.</p> - -<p>I also got a suggestion to look at some of the units from Garmin. -I was told their GPS watches can be connected via USB and show up as a -USB storage device with -<a href="https://www.gpsbabel.org/htmldoc-development/fmt_garmin_fit.html">Garmin -FIT files</a> containing the collected measurements. While -proprietary, FIT files apparently can be read at least by -<a href="https://www.gpsbabel.org">GPSBabel</a> and the -<a href="https://apps.nextcloud.com/apps/gpxpod">GpxPod</a> Nextcloud -app. It is unclear to me if they can read step count and heart rate -data. The person I talked to was using a -<a href="https://buy.garmin.com/en-US/US/p/564291">Garmin Forerunner -935</a>, which is a fairly expensive unit. I doubt it is worth it for -a unit where the vendor clearly is trying its best to move from open -to closed systems. I still remember when Garmin dropped NMEA support -in its GPSes.</p> - -<p>A final idea was to build ones own unit, perhaps by basing it on a -wearable hardware platforms like -<a href="https://learn.adafruit.com/flora-geo-watch">the Flora Geo -Watch</a>. Sound like fun, but I had more money than time to spend on -the topic, so I suspect it will have to wait for another time.</p> - -<p>While I was working on tracking down links, I came across an -inspiring TED talk by Dave Debronkart about -<a href="https://archive.org/details/DavedeBronkart_2010X">being a -e-patient</a>, and discovered the web site -<a href="https://participatorymedicine.org/epatients/">Participatory -Medicine</a>. If you too want to track your own health and fitness -without having information about your private life floating around on -computers owned by others, I recommend checking it out.</p> - -<p>As usual, if you use Bitcoin and want to show your support of my -activities, please send Bitcoin donations to my address -<b><a href="bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b</a></b>.</p> - - - - - Privacy respecting health monitor / fitness tracker? - http://people.skolelinux.org/pere/blog/Privacy_respecting_health_monitor___fitness_tracker_.html - http://people.skolelinux.org/pere/blog/Privacy_respecting_health_monitor___fitness_tracker_.html - Tue, 7 Aug 2018 16:00:00 +0200 - <p>Dear lazyweb,</p> - -<p>I wonder, is there a fitness tracker / health monitor available for -sale today that respect the users privacy? With this I mean a -watch/bracelet capable of measuring pulse rate and other -fitness/health related values (and by all means, also the correct time -and location if possible), which is <strong>only</strong> provided for -me to extract/read from the unit with computer without a radio beacon -and Internet connection. In other words, it do not depend on a cell -phone app, and do make the measurements available via other peoples -computer (aka "the cloud"). The collected data should be available -using only free software. I'm not interested in depending on some -non-free software that will leave me high and dry some time in the -future. I've been unable to find any such unit. I would like to buy -it. The ones I have seen for sale here in Norway are proud to report -that they share my health data with strangers (aka "cloud enabled"). -Is there an alternative? I'm not interested in giving money to people -requiring me to accept "privacy terms" to allow myself to measure my -own health.</p> - <p>As usual, if you use Bitcoin and want to show your support of my activities, please send Bitcoin donations to my address <b><a href="bitcoin:15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b">15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b</a></b>.</p>