X-Git-Url: https://pere.pagekite.me/gitweb/homepage.git/blobdiff_plain/33fc5a041005b7a54a30d87382f9b6155029ccfc..a06b8c3e32cdfaf1a49f59c0c47e69d2b04cb404:/blog/index.html diff --git a/blog/index.html b/blog/index.html index 542a0db9b6..f82f196e94 100644 --- a/blog/index.html +++ b/blog/index.html @@ -19,6 +19,214 @@ +
+
DÃ¥rlig med sikkerhetsoppdateringer for Ruters billettautomater i Oslo?
+
13th February 2019
+

For +syv år siden oppdaget jeg at billettautomater for +kollektivtrafikken i Oslo kjørte +Windows 2000 +Professional. Operativsystemet har ikke fått sikkerhetsfikser fra +Microsoft siden 2010-07-13 i følge dem selv. Den samme versjonen av +operativsystemet var i bruk +for +to og et halvt år siden, og jammen er det ikke også i bruk den dag +i dag:

+ +

[Bilde av Ruters billettautomat med Windows 2000-feilmelding]

+ +

Bildet er tatt i dag av Kirill Miazine og tilgjengelig for bruk med +bruksvilkårene til +Creative +Commons Attribution 4.0 International (CC BY 4.0).

+ +

Kanskje det hadde vært +bedre +med gratis kollektivtrafikk, slik at vi slapp å stole på +datakompetansen til Ruter for å verne våre privatliv samt holde +personopplysninger og betalingsinformasjon unna uvedkommende. Eneste +måten å sikre at hvor en befinner seg ikke kan hentes ut fra Ruters +systemer er å betale enkeltbilletter med kontanter. Jeg vet at Ruter +har en god historie om hvor personvernvennlige mobil-app og +RFID-kortene er, men den historien er ikke mulig å uavhengig +kontrollere uten priviligert tilgang til interne system og blir dermed +bare nok en god historie basert på tillit til de som forteller +historien. Det er ikke slik en sikrer privatsfæren. Det gjør en ved +å sikre at det ikke (kan) registreres informasjon om ens person.

+ +

Som vanlig, hvis du bruker Bitcoin og ønsker å vise din støtte til +det jeg driver med, setter jeg pris på om du sender Bitcoin-donasjoner +til min adresse +15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b. +Merk, betaling med bitcoin er ikke anonymt. :)

+
+
+ + + Tags: norsk, ruter. + + +
+
+
+ +
+
Stortinget vedtar maskinlesbart register over 20% av selskapseierne i Norge
+
7th February 2019
+

Jeg registrerer med glede at Stortinget i dag har +vedtatt +at det skal vedlikeholdes et åpent og maskinlesbart register over +reelle rettighetshavere i Norge. Her kan en kanskje få et +register som kan brukes til å analysere eierskap og kontroll i Norge +maskinelt og knytte det til internasjonale databaser som +OpenCorporates. Det liker +jeg.

+ +

Den vedtatte grense på 25 prosents eierandel fikk stor +oppmerksomhet i debatten. Jeg ser fra enkel analyse av skatteetatens +eierskapsregister at 80.4% av alle selskapseiere i registeret har +mindre enn 25% eierandel, mot 73.8% som har mindre enn 5% eierandel. +En grense på 25% vil altså utelukke 80.4% av selskapseierne fra det +vedtatte registeret, og en grense på 5% vil skjule 73.8%. En må helt +ned i registrering av eierandeler over circa 0.002% for å få mer enn +halvparten av selskapseierne i Norge. Mon tro hvor langt ned en må i +eierprosent for å få med alle eierskapene til politisk valgte +representanter?

+ +

Jeg biter meg også merke i at Sivert Bjørnstad fra FrP +tilsynelatende tror at aksjonærregisteret er et eksisterende åpent +register, på tross av at det så vidt jeg vet kun deles ved personlig +oppmøte hos skatteetaten og ikke er tilgjengelig i maskinlesbart +format for enhver, og dermed så langt ikke er importert inn i +OpenCorporates. Det anser jeg ikke for et spesielt åpent register. +Debatten ga ellers lite håp om at situasjonen bedrer seg, da +finansministeren bare henviste til en fraværende næringsministeren og +ikke ville uttale seg om et skikkelig aksjonærregister snart dukker +opp.

+ +

Som vanlig, hvis du bruker Bitcoin og ønsker å vise din støtte til +det jeg driver med, setter jeg pris på om du sender Bitcoin-donasjoner +til min adresse +15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b. +Merk, betaling med bitcoin er ikke anonymt. :)

+
+
+ + + Tags: norsk, offentlig innsyn. + + +
+
+
+ +
+
Websocket from Kraken in Valutakrambod
+
1st February 2019
+

Yesterday, the Kraken virtual currency exchange announced +their +Websocket service, providing a stream of exchange updates to its +clients. Getting updated rates quickly is a good idea, so I used +their API +documentation and added Websocket support to the Kraken service in +Valutakrambod today. The python library can now get updates +from Kraken several times per second, instead of every time the +information is polled from the REST API.

+ +

If this sound interesting to you, the code for valutakrambod is +available from +github. +Here is example output from the example client displaying rates in a +curses view:

+ +

+           Name Pair   Bid         Ask         Spr    Ftcd    Age
+ BitcoinsNorway BTCEUR   2959.2800   3021.0500   2.0%   36    nan    nan
+       Bitfinex BTCEUR   3087.9000   3088.0000   0.0%   36     37    nan
+        Bitmynt BTCEUR   3001.8700   3135.4600   4.3%   36     52    nan
+         Bitpay BTCEUR   3003.8659         nan   nan%   35    nan    nan
+       Bitstamp BTCEUR   3008.0000   3010.2300   0.1%    0      1      1
+           Bl3p BTCEUR   3000.6700   3010.9300   0.3%    1    nan    nan
+       Coinbase BTCEUR   2992.1800   3023.2500   1.0%   34    nan    nan
+         Kraken+BTCEUR   3005.7000   3006.6000   0.0%    0      1      0
+        Paymium BTCEUR   2940.0100   2993.4400   1.8%    0   2688    nan
+ BitcoinsNorway BTCNOK  29000.0000  29360.7400   1.2%   36    nan    nan
+        Bitmynt BTCNOK  29115.6400  29720.7500   2.0%   36     52    nan
+         Bitpay BTCNOK  29029.2512         nan   nan%   36    nan    nan
+       Coinbase BTCNOK  28927.6000  29218.5900   1.0%   35    nan    nan
+        MiraiEx BTCNOK  29097.7000  29741.4200   2.2%   36    nan    nan
+ BitcoinsNorway BTCUSD   3385.4200   3456.0900   2.0%   36    nan    nan
+       Bitfinex BTCUSD   3538.5000   3538.6000   0.0%   36     45    nan
+         Bitpay BTCUSD   3443.4600         nan   nan%   34    nan    nan
+       Bitstamp BTCUSD   3443.0100   3445.0500   0.1%    0      2      1
+       Coinbase BTCUSD   3428.1600   3462.6300   1.0%   33    nan    nan
+         Gemini BTCUSD   3445.8800   3445.8900   0.0%   36    326    nan
+         Hitbtc BTCUSD   3473.4700   3473.0700  -0.0%    0      0      0
+         Kraken+BTCUSD   3444.4000   3445.6000   0.0%    0      1      0
+  Exchangerates EURNOK      9.6685      9.6685   0.0%   36  22226    nan
+     Norgesbank EURNOK      9.6685      9.6685   0.0%   36  22226    nan
+       Bitstamp EURUSD      1.1440      1.1462   0.2%    0      1      2
+  Exchangerates EURUSD      1.1471      1.1471   0.0%   36  22226    nan
+ BitcoinsNorway LTCEUR      1.0009     22.6538  95.6%   35    nan    nan
+ BitcoinsNorway LTCNOK    259.0900    264.9300   2.2%   35    nan    nan
+ BitcoinsNorway LTCUSD      0.0000     29.0000 100.0%   35    nan    nan
+     Norgesbank USDNOK      8.4286      8.4286   0.0%   36  22226    nan
+

+ +

Yes, I notice the strange negative spread on Hitbtc. I've seen the +same on Kraken. Another strange observation is that Kraken some times +announce trade orders a fraction of a second in the future. I really +wonder what is going on there.

+ +

As usual, if you use Bitcoin and want to show your support of my +activities, please send Bitcoin donations to my address +15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b.

+
+
+ + + Tags: bitcoin, english. + + +
+
+
+ +
+
Strategispillet Unknown Horizons nå tilgjengelig på bokmål
+
23rd January 2019
+

I høst ble jeg inspirert til å bidra til oversettelsen av +strategispillet Unknown +Horizons, og oversatte de nesten 200 strengene i prosjektet til +bokmål. Deretter har jeg gått å ventet på at det kom en ny utgave som +inneholdt disse oversettelsene. Nå er endelig ventetiden over. Den +nye versjonen kom på nyåret, og ble +lastet opp i +Debian for noen få dager siden. I går kveld fikk jeg testet det ut, og +må innrømme at oversettelsene fungerer fint. Fant noen få tekster som +måtte justeres, men ikke noe alvorlig. Har oppdatert +oversettelsen på +Weblate, slik at neste utgave vil være enda bedre. :)

+ +

Spillet er et ressursstyringsspill ala Civilization, og er morsomt +Ã¥ spille for oss som liker slikt. :)

+ +

Som vanlig, hvis du bruker Bitcoin og ønsker å vise din støtte til +det jeg driver med, setter jeg pris på om du sender Bitcoin-donasjoner +til min adresse +15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b. +Merk, betaling med bitcoin er ikke anonymt. :)

+
+
+ + + Tags: debian, norsk. + + +
+
+
+
Debian now got everything you need to program Micro:bit
22nd January 2019
@@ -708,222 +916,6 @@ Merk, betaling med bitcoin er ikke anonymt. :)

-
-
Why is your site not using Content Security Policy / CSP?
-
9th December 2018
-

Yesterday, I had the pleasure of watching on Frikanalen the OWASP -talk by Scott Helme titled -"What We’ve Learned From -Billions of Security Reports". I had not heard of the -Content -Security Policy standard nor its ability to "call home" when a -browser detect a policy breach (I do not follow web page design -development much these days), and found the talk very illuminating.

- -

The mechanism allow a web site owner to use HTTP headers to tell -visitors web browser which sources (internal and external) are allowed to -be used on the web site. Thus it become possible to enforce a "only -local content" policy despite web designers urge to fetch programs -from random sites on the Internet, like the one -enabling -the attack reported by Scott Helme earlier this year.

- -

Using CSP seem like an obvious thing for a site admin to implement -to take some control over the information leak that occur when -external sources are used to render web pages, it is a mystery more -sites are not using CSP? It is being -standardized under W3C these -days, and is supposed by most web browsers

- -

I managed to find a -Django middleware for implementing CSP and was happy to discover -it was already in Debian. I plan to use it to add CSP support to the -Frikanalen web site soon.

- -

As usual, if you use Bitcoin and want to show your support of my -activities, please send Bitcoin donations to my address -15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b.

-
-
- - - Tags: english, standard, web. - - -
-
-
- -
-
New and improved Frikanalen Kodi addon version 0.0.3
-
8th November 2018
-

If you read my blog regularly, you probably know I am involved in -running and developing the Norwegian -TV channel Frikanalen. It is an open channel, allowing everyone -in Norway to publish videos on a TV channel with national coverage. -You can think of it as Youtube for national television. -In addition to distribution on RiksTV and Uninett, Frikanalen is also -available as a Kodi addon. The last few days I have updated the code -to add more features. A -new -and improved version 0.0.3 Frikanalen addon was just made -available via the Kodi repositories. This new version include a -option to browse videos by category, as well as free text search -in the video archive. It will now also show the video duration in the -video lists, which were missing earlier. A new and experimental -link to the HD video stream currently being worked on is provided, for -those that want to see what the CasparCG -output look like. The alternative is the SD video stream, generated -using MLT. CasparCG is controlled by our -mltplayout -server which instead of talking to mlt is giving PLAY instructions -to the CasparCG server when it is time to start a new program.

- -

By now, you are probably wondering what kind of content is being -played on the channel. These days, it is filled with technical -presentations like those from NUUG, -Debconf, Makercon, and TED, -but there are also some periods with -EMPT TV and -P7. - -

As usual, if you use Bitcoin and want to show your support of my -activities, please send Bitcoin donations to my address -15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b.

-
-
- - - Tags: english, frikanalen, kodi, video. - - -
-
-
- -
-
Time for an official MIME type for patches?
-
1st November 2018
-

As part of my involvement in -the Nikita -archive API project, I've been importing a fairly large lump of -emails into a test instance of the archive to see how well this would -go. I picked a subset of my -notmuch email database, all public emails sent to me via -@lists.debian.org, giving me a set of around 216 000 emails to import. -In the process, I had a look at the various attachments included in -these emails, to figure out what to do with attachments, and noticed -that one of the most common attachment formats do not have -an -official MIME type registered with IANA/IETF. The output from -diff, ie the input for patch, is on the top 10 list of formats -included in these emails. At the moment people seem to use either -text/x-patch or text/x-diff, but neither is officially registered. It -would be better if one official MIME type were registered and used -everywhere.

- -

To try to get one official MIME type for these files, I've brought -up the topic on -the -media-types mailing list. If you are interested in discussion -which MIME type to use as the official for patch files, or involved in -making software using a MIME type for patches, perhaps you would like -to join the discussion?

- -

As usual, if you use Bitcoin and want to show your support of my -activities, please send Bitcoin donations to my address -15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b.

-
-
- - - Tags: debian, english, standard. - - -
-
-
- -
-
Measuring the speaker frequency response using the AUDMES free software GUI - nice free software
-
22nd October 2018
-

- -

My current home stereo is a patchwork of various pieces I got on -flee markeds over the years. It is amazing what kind of equipment -show up there. I've been wondering for a while if it was possible to -measure how well this equipment is working together, and decided to -see how far I could get using free software. After trawling the web I -came across an article from DIY Audio and Video on -Speaker -Testing and Analysis describing how to test speakers, and it listing -several software options, among them -AUDio MEasurement -System (AUDMES). It is the only free software system I could find -focusing on measuring speakers and audio frequency response. In the -process I also found an interesting article from NOVO on -Understanding -Speaker Specifications and Frequency Response and an article from -ecoustics on -Understanding -Speaker Frequency Response, with a lot of information on what to -look for and how to interpret the graphs. Armed with this knowledge, -I set out to measure the state of my speakers.

- -

The first hurdle was that AUDMES hadn't seen a commit for 10 years -and did not build with current compilers and libraries. I got in -touch with its author, who no longer was spending time on the program -but gave me write access to the subversion repository on Sourceforge. -The end result is that now the code build on Linux and is capable of -saving and loading the collected frequency response data in CSV -format. The application is quite nice and flexible, and I was able to -select the input and output audio interfaces independently. This made -it possible to use a USB mixer as the input source, while sending -output via my laptop headphone connection. I lacked the hardware and -cabling to figure out a different way to get independent cabling to -speakers and microphone.

- -

Using this setup I could see how a large range of high frequencies -apparently were not making it out of my speakers. The picture show -the frequency response measurement of one of the speakers. Note the -frequency lines seem to be slightly misaligned, compared to the CSV -output from the program. I can not hear several of these are high -frequencies, according to measurement from -Free Hearing Test -Software, an freeware system to measure your hearing (still -looking for a free software alternative), so I do not know if they are -coming out out the speakers. I thus do not quite know how to figure -out if the missing frequencies is a problem with the microphone, the -amplifier or the speakers, but I managed to rule out the audio card in my -PC by measuring my Bose noise canceling headset using its own -microphone. This setup was able to see the high frequency tones, so -the problem with my stereo had to be in the amplifier or speakers.

- -

Anyway, to try to role out one factor I ended up picking up a new -set of speakers at a flee marked, and these work a lot better than the -old speakers, so I guess the microphone and amplifier is OK. If you -need to measure your own speakers, check out AUDMES. If more people -get involved, perhaps the project could become good enough to -include in Debian? And if -you know of some other free software to measure speakers and amplifier -performance, please let me know. I am aware of the freeware option -REW, but I want something -that can be developed also when the vendor looses interest.

- -

As usual, if you use Bitcoin and want to show your support of my -activities, please send Bitcoin donations to my address -15oWEoG9dUPovwmUL9KWAnYRtNJEkP1u1b.

-
-
- - - Tags: english, nice free software. - - -
-
-
-

RSS feed