Postspage

0x0F Worldbackupday News

0x0F Worldbackupday

Again, not much on the server front. But it’s world backup day today!

So for all the things for which I do not already have automated backup I made an effort, so now there is a snapshot of the Anaflabet.net VPS, and i have made an Image of my work computer. Corvo.se already runs automated nightly backups so it should be fine.

This weekend I will do some of this for my home environment as well

Besides that… I’ve watched a lot of movies, and I had some thoughts on each.

Fafner in the Azure: Dead Aggressor
I mentioned this weeks back, and finished watching it weeks back as well. It’s good! It seems with anime there is quite a lot of effort given to flesh out the characters, this anime in particular.
The anime is a little slow to get of the ground, and feels very weird with how all the parents on the island are actually military officers and the island is essentially a big underground military base… and no one seems to have suspected a thing. And no Festum seems to have attacked the island since before the first memories of the eldest child, begging the question “Why now?”. The middle of the series is seriously good though! There is one story arc that is particularly heart-warming, when one of the kid pilots finally gets to ride a mecha and he insists on wearing a toy helmet and using the nickname of his favorite manga character, later we find out that this manga is written by his dad. Sadly, the episodes at the end and near the end feel like they were given less effort. You have learned to root for the protagonists and they have finally started to work well as a team and then yet another new type of Festum shows up and is even more overpowered than those that came before, it causes irreparable damage because this is the third from final episode, it feels like both the enemy and the writer was cheating at this point. The military-style leadership also seems especially lenient of insubordination. Most of the kid-pilots do something like this at some point, usually with dire immediate consequences, Kazuki, our main protagonist is a repeat offender but is only told off the first time.
There is also a recurring scene, a “loading-sequence” of sorts where the mecha is hooked up to a plane and prepared for launch. It is a neat “this is how the stuff works” and “get pumped, time for battle” scene early on, but it gets old quick and feels much too long after a few episodes.
All in all. I strongly recommend Fafner if you like Anime, Mechas, Sci-fi or Drama.

 

Mad Max: Fury Road
This one was a pleasant surprise. The trailer (you know, the thing that interrupts your YouTube pleasure for 5 seconds every now and then) made me think that this movie was not jut stupid in a bad way, but pretentious. What with the sandstorm and the talk about redemption respectively.
After having seen it, I think thirty seconds of this would make for a much better trailer:

Of course the entire movie is not like that but enough of it is! And it is glorious!
But the movie is smart too, and risky, and had a female protagonist that did not seem forced. I also don’t think I’ve seen so many bad-ass grandmas in the same movie before, nor played straight like here. In fact, I think this movie did a good job with all of it’s cast except perhaps for Max himself, who has surprisingly few lines for being the main protagonist.
It’s a clever dumb movie made of awesome!

 

I re-watched The Crow. The old movie with Brandon Lee. You know, the guy that died just before his most famous movie was published.

No, not him.

That guy.

I’m not an actor, but if I was, with the current sampling I think I would stay far away from taking a role with makeup like that. Just to be safe.

So this movie is supposedly one of the main inspirations for the World of Darkness roleplaying games, and I can tell. Even during daytime, the world seems foggy and rainy, and satanist criminals rule the night and burn buildings on halloween for the lulz.

Is the movie good? Yes it is. Definitely.

 

James Bond: Skyfall
Unlike fury road. I had some expectations from this movie, because it is a Bond movie.
It feels schizophrenic in its message. They seemed to want to play the “Bond is old now” angle, what with having an aged and wounded Bond being criticized along with M as being relics from another age. The new Q, a stereotypical nerd, does not give Bond any gadgets of the sort we expect either, saying “we don’t do that stuff anymore”, and states that he can do more damage with a laptop than Bond could do in a lifetime. It feels wrong, and there are many things like this that makes it not feel like a bond movie, and the writing seems to prime the series for another reboot. But at the same time, the movie tries to cash in on nostalgia, especially at the end where they play the classic main theme, on a set that strongly resembles M’s office from the early movies, while introducing the new Moneypenny and M. It felt quite forced. Which is odd because they successfully played on nostalgia just a few scenes before the climax, when they reveal the Aston Martin. And later when they use its machineguns to simple yet great effect.
They kill off Judy’s character M, she slowly bleeds to death throughout the climax of the movie and only once the villain is defeated does she die. This felt lame. If they were going to kill her off anyway, why not have the villain shoot her, or trying desperately to keep her alive so she could die by his hand or something, as it stands, she was killed by a nameless mook with a secret..
The villain also feels undercooked. We get to understand that he felt betrayed somehow, but he never connects the dots as to why and how it is specifically Ms fault. He goes to quite some lengths to take revenge on someone with whom he has about as much relation as Bond has. Also, I have not seen every Craig Bond-movie yet, but this is the second MI-6 agent gone rogue right? That’s that’s one more than too many.
All in all, the movie gets a passing grade. It was entertaining, but i expected more.

 

I re-watched Postal by Uwe Boll
It’s one of the movies that had its bar set so low that it can not fail. I remember watching it and not being impressed however, and that was not too long ago either, but i must have been half asleep because the movie is actually more clever than I remembered it. Of course, if it cut some of the worst excesses such as on-screen genitalia and blood then it would be a pretty good comedy film.

 

I also re-watched Tintin
I first saw this in a theater in 3D, and it was the first movie I’ve seen to make somewhat good use of the 3D effect, what with walking sticks sticking out of the screen and vast deserts and oceans having actual depth.
Story-wise though, I was not that impressed. It’s obvious that they had to pad the story a bit to fill out the running time. But at the same time the story always seems to want to rush to the next thing. One moment the scene is about the pickpocket, then in the very next shot but still in the same scene, Tintin gets kidnapped.
Most egregious, and I can’t tell if this is stupid or ingenious, is the curveball of Sackarin. In the comics, Sackarin is just a collector, he comes across as possibly a bit rude but is shown to be innocent, and a victim of the villains just like Tintin. Here he is introduced faithfully, but he is soon revealed to live in Moulinzart. this is the first major departure from the comics, where the Vogel brothers were the villains living in Moulinzart. The Vogel brothers are not in this movie at all however, and after Tintin is kidnapped he is brought onto a ship instead and we enter The Crab with the Golden Claws for a while. To get back on point however, Sackarin is the antagonist in this movie, the genius being that he very much resembles Red Rackham and therefore it is convincing to say that he is a descendant. The stupidity of this inherited family feud between Rackham and Haddock is ‘why would the grand-children should still care’ about said feud, and is it not conveinent that there is only one living descendant in either family? Sackarin seems to take the feud very personally too, like the haddock in the distant past actually wronged him in some way, not that it is explained how Sackarin found out about the clash between the grandfathers. A clever move nonetheless, just with some stupid implications but it works well as entertainment and keeps fans of the comics guessing.
Other than that, Tintin and Milou are close to the uncanny valley, which is unfortunate because most other characters avoid this quite well, including Haddock and Sackarin who have their fair share of close-ups.
It is definitely a faithful Tintin movie, it’s good!

0x0E Rapsberry and optimizations News

0x0E Rapsberry and optimizations

I ordered a Raspberry Pi 3b last weekend. I’m thinking I will name it Rapsberry, with intentional misspelling. It is only fitting since it will be taking over Anaflabet.net, another intentionally misspelled name.

The cute little device arrived little over one workday after I ordered it! Well done Dustin!

Sadly, I found out (from a source whose opinions I trust) that the SD cards used for raspberries go corrupt all the time, and that it would be a bad idea to run anything critical on such a device.
what this means to me is a challenge to be overcome, I will have to take this into account when building my system then!
From reading online, it seems most corruption is caused by blackouts, and by excessive writing. So that means that the final live version should have some manner of UPS, should run with minimal amount of writing, so reduced logging or logging to memory, and preferably with an alternative storage solution and rigorous backups.

 

I mentioned last week that I started on making a forum for rpg purposes.

Yeah, nevermind. To much work just to get a generic forum that is poorly suited for its intended purpose.
But I found this instead, https://www.tavern-keeper.com/, so I signed up.
Then I found out that the source code is available… That means I could host my own Tavern-keeper!
Damn it, I am a hacker and so I must hack! (In this instance, I take hacker to mean a combination of programmer and enthusiast) So we’ll see how that goes!

 

I did a lot more optimization work on corvo.se too. Mostly plugins though. Now it is running smushed images to save size, memcache to load faster, leverages browser caching, and uses a plugin to minify and inline much of the javascript and css.
Repeat visitors can get load times around 2s, and my Pagespeed Insisghts score went from 79 to 93!
I also did some tweaks to the section backgrounds on the page. They should stretch to cover the entire section now.

I installed a NextCloud, will see about testing it properly, it serves pretty much the same purpose that I intended for my FTP, but it does not replace the FTP. Nextcloud requires a browser, while the FTP is readily available from a freshly installed, terminal-only linux by an unprivileged user!

I also set up a Linux VM at home. I have always been running windows, and since I still enjoy gaming I’ll probably stay with windows for my workstations for a bit longer. But I have found that I cannot progress with the Corvo Project if I cannot also work from home. For that I need plain and simple SSH, FTP, Whois and Host. Putty, Filezilla and a browser could cover that from within windows, but that gives up a degree of oversight and I want to know what is going on, that’s half the point of the project!

I was also going to rant about the stupidity of computer-illiterate people, and the bleeding heart literates who accommodate them, but I’ll just leave it to this here paragraph instead. I don’t want to start my first real online persona by getting known as a grump.

Finally. I also realise that there is a lot of talk and experimentation, and not much migrating of IT going on. I though about this and wether I should put a deadline for when email for instance should be done and the old should be switched of. Should I put it before my birtday? It think I can be “done” long before that! A month from now? Certainly doable with the current pace! But I concluded that I don’t think I need a deadline. There is no rush and there is nothing that suggests that I am slowing down. I do notice a reduced focus compared to the first two weeks. Look at this one! But as long as stuff keeps getting done and I’m not hurting for things to write about here, then I’m good!

0x0D Gotta go fast! News

0x0D Gotta go fast!

Remember that VPS I talked about? I brought the key-file with me home for the weekend, but I left the very long and very random key-phrase at work.
So the test had to wait until this monday…

But it works! First try! Awesome!

I also had some early week troubles with UFW. I activated
UFW when configuroing the OpenVPN server, but that broke my email since the required ports were not open.
Oops…

I sped up my public website a bunch. the Google PageSpeed Tools (https://developers.google.com/speed/pagespeed/) rated my site as 37/100 and suggested a few things, including compression.
So i read up on the deflate module and activated it for all my text resources.
Result? 37 -> 79/100
I could push this further. But I honestly don’t think I will get much farther, since the top of the front page is just a youtube background, and that will always take time to load, and since it is up top it penalizes the PageSpeed score.

Perhaps not 1s, but 3s without browser cache is pretty good! Next big thing would be to trim some of the php and bloat that is not visible. And to do some actual caching!

Finally, I also set up a forum of my own. The intent being to use it for play-by-post roleplaying. I’m thinking ‘maybe not’ though, since it will be lacking some essential features.

I also failed to click publish on this article, so it goes up the week after it was intended for.

Oops…

0x0C Running Deep News

0x0C Running Deep

An productive week in terms of work. But that means a slow week for the Corvo Project.

Supposedly, I should have a VPN server up and running now after having followed this excellent guide:
https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-16-04

I have the .ovpn file sitting on my desktop but I have not yet configured any device to use it. Will get to that in a day or so I hope. I’m thinking my phone will have to do the pilot run, then we’ll be in the deep web, running silent.
Speaking of going deep on the web. I read about that terminology recently. That the deep web is the part we cannot see because it is not available through google, such as business back-ends and intranets and such. Then there’s the “dark” net, which is the all-encrypted networks that require special programs to access.

A place where you are said to be able to order drugs, hire assassins and where you use bitcoin as the common currency…

While I could not care for assassins or drugs, I am interested in crypto-currencies and hacker culture. Maybe I’ll check it out… preferably on a VM.

0x0B Social media and logos News

0x0B Social media and logos

I usually listen to a fairly small set of music, but today i found some sweet new music to repeat!

This is the first post of the new weekly format.

I have not finished any anime or movies since last time, but I have gotten a lot of minor things done.

For one, I have downloaded an icon set and started to use it on the WP-site to get rid of more of the default content.

In the same vein I have started using font-awesome for my social media icons. Facebook and twitter were thrown out in favor of mail and ftp. This goes both for the banner and for the footer.

I’ve never been a huge fan of social media. Essentially just a big ball of “don’t need it”. But I have nevertheless registered for a few such services.

Linkedin was a nigh mandatory signup. But its professional purpose makes it a forgivable sin.

Google on the other hand is mandatory and unavoidable if you want to use Youtube or Hangouts. So I have perhaps the most anemic, non-zero G+ presence in the world. Whereas Youtube is just a vector for video uploads and nothing more.

Deviantart is an old service from the phase in my life where I though it could become a good illustrator. While I still impress myself, I recognize that I am not going to illustrate professionally anytime soon. It has served as a repository for hosting images before Dropbox took that role. Now I am thinking about dropping Dropbox as well for my own solution.

 

In all other news. I did a thought experiment: How many different configurations are there for the standard rubiks cube? It would be trivial to say that there are 3x3x3 pieces and 3x3x3 positions, so 27! configurations right?

Wrong.

It is not so complex and at the same time it is much more so. Rather, there are three types of pieces that do not mix. There are for instance eight corner pieces, these can only be located on the corners so that’s eight positions on the cube. But each position could also be in one of three orientations. So for just the corner pieces there are 8! * 3^8.

Next are the 12 edge pieces. These can only be placed along the edges and could have one of two orientations. So that’s 12! * 2^12 combinations just for the edge pieces.

Finally, there are the middle pieces. these are always locked in relation to each-other, and while they each have 4 orientations, these do not matter. But the cluster of middle pieces can have one of six orientations as a whole. Multiplying our answer by six.

“Possible” cube configurations: 8!*3^8 * 12!*2^12 * 6 = 3,114,144,235,763,269,632,000

Little over 3 Sextillion possible starting states… Fortunately, not all of these are possible without a screwdriver, and those can’t be solved without one 😉

 

Some more tech news. I enabled anonymous access to my FTP again (but with all write operations disabled of course), and once more, vsftp proved more tricky than it needed to be. While it works like a charm and is easy to configure, yet again there was an unexpected relationship between parameters that could have been documented better.

Because I am paranoid, I have configured the FTP to only allow certain very specific users. This is set in a text file. when local_users is enabled this file is read. When local_users is disabled but anonymous is YES then the list does not matter. Turns out when both modes are enabled, the anonymous user needs to be in the list of allowed users.

So now the default behavior is to send a visitor to the anonymous download-only FTP site without prompting for any password. To access the unsafe but passworded ftp user you need to add “username@” before the domain and then enter your credentials.

 

I made a logo for this site and the overall project. Any symbolism was just accidental, but I like to think that the wings/feathers represents freedom and the eye represents knowledge or awareness.

 

I also tried the alias approach to disposable email addresses. With the mail configuration I am using you just add the new address to /etc/aliases and then run newaliases. To send using those aliases is just a matter of adding it to the mail-client.

0x0A Updates and PTR record News

0x0A Updates and PTR record

Some of you might have noticed that a lot of these posts go up on fridays but are written as though they were going up separately.

Initially I intended for this to be a daily exercise, but I find that I’m too busy doing stuff to actually write blog entries for every weekday. So I just made notes and wrote them on a lag.

Of course, the intent always was to reduce the frequency after a while. Once the number of topics to cover started to dry up.

Thus, from now on I intend to make these posts into an irregular thing, with at least one post to summarize the past week going up every Friday. Lets see if this will slide into monthly sooner than I intend it to.

 

Not much in terms of technology today. Added a PTR record for anaflabet because supposedly it helps improve the spam-rating of my emails.

You can test it in bash:

>host -t a anaflabet.net

anaflabet.net has address 185.20.13.114

>host 185.20.13.114

114.13.20.185.in-addr.arpa domain name pointer anaflabet.net.

Besides that I also rounded up some images for all my blog posts so far. Liven things up a bit

 

Not sure what I want to focus on next. I’m thinking maybe some kind of http/s or VPN for next week.

0x09 Graylist News

0x09 Graylist

No fancy pictures or anime reviews this time. This is serious.

Dammit…

 

I usually fall in line when something is “best practice” and try to understand why that is. But this time I don’t get it. So right now I feel like I’m a noob that disagrees with a majority expert opinion on a subject.

Like a first grader arguing with his math teacher.

Yesterday I actually had a fully working email system for both sending and receiving. The test emails I sent to myself yesterday had arrived by the next morning.

Turns out the instructions I followed also included a type of spam-filter called Postgrey. It operates by forcing the sender to implement the SMTP protocol properly. It does so by responding with a temporary error message to every new peer, and it adds that peer to a “graylist”. A properly configured SMTP service would then try again after some time has passed, and if the peer is still persisting after having spent a certain amount of time in the greylist then it is whitelisted and is allowed to deliver the message.

The pros is that this filters out some 80-95% of all the spam sending software out there as of 2007. Not sure exactly how effective it is today but it nevertheless has a large positive effect on reducing spam, and forces mail-services online to be SMTP compliant. And apparently there are “no drawbacks”… at least with respect to the requirements of the SMTP protocol and assuming that all legitimate parties use proper SMTP configurations.

This saves a lot of computing power from going into spam-filters, and forces spammers to implement a proper mail-sender that retries, making their operation more costly! What’s not to like?

Well, the real drawback is that every message from a new sender, including legitimate ones, will be delayed by an amount of time that is at least as big as the greylist quarantine time, and likely much more due to resend timers.

Nowhere is it stated in the SMTP protocol that email needs to be instant. But you know what? Screw that! SMTP happens to be instant most of the time and we happen to like it that way! It may not be an intended feature of the protocol but it is an expected feature! And I’m not ready to sacrifice it to do something that should be handled by the spam filter.

Just because it is not in the SMTP protocol, does not mean it ought not to be. I would rather have the standard changed to include a line like “Email should be instant if possible”.

And this is where I seem to disagree with a lot of folks online who seem to think that greylisting is all good and no bad. A system that manages itself that can be switched on and then be all forgotten about

 

Since no one can force me to run a greylist on my server, and the workload is on me to tune a spam-filter to deal with the extra spam, I commented out postgrey from my postfix configuration.

 

In other news. Turns out my SPF record was faulty. Whitespaces in the middle of the IP that were not visible in my UI due to word wrapping! So, fixed that. Will double check any DNS configurations with a different editor from now on.

0x08 Mechas and SMTP News

0x08 Mechas and SMTP

Loaded another old favorite* anime. If this is not the very first anime I ever watched then it don’t remember what is. Nor do I remember when I watched it for the first and last time but it is sometime in my early teens. Before I grew accustomed to 24/7 internet access.

*: It’s not bad. It was just never a ‘favorite’ like Tsukihime

I don’t have many memories about this anime except that it is about kids piloting mechas, fighting overpowered floating golden creatures, lots of screaming and that it was a gift from one of my cousins.

Is it good? My review will have to wait until I finish it!

 

What about my mail server then? Well, I finished following the guide, and by the end of the day I was able to send with no problems at all. Receiving was trickier however, more on that hassle next time.

0x07 This is Tsukihime! News

0x07 This is Tsukihime!

So I have found myself with a lot of spare time in a confined space without internet access, so I have started watching movies while commuting.

I decided to start with some old favorites to see how they hold up, and I just finished watching Tsukihime today. Last time I watched it was in 2008 or something, so nearly ten years ago. And I fondly remember it as being “Fantastic”. So how does it hold up?

Better than I thought it would. It is no worse than I remembered it!

I also watched 300 again.

I remembered it as mindless schlock. And it still mostly is, but there is some intelligence in there too that did not shine through last time. So it turns out it was better than I remembered it.

 

I also started working on my mail server. Using dovecot and postfix while following this ‘mostly’ excellent guide: https://skrilnetz.net/setup-your-own-mailserver/

Just remember to replace all instances of yourdomain.com and you’ll do fine!

I was not able to send or receive anything yet tho, still a lot of steps left.

But why am I writing this here? Is it not in my tagline that I’m “…paranoid since 2016”? Why am I spelling out my progress publicly like this?

Well, for one I think I’m safe enough with the precautions I’m taking. And secondly. Should my VPS die some day, or if I some day need to re-deploy my infrastructure to another machine, then a bigger worry would be to not be able to replicate my build. At that time I would be glad to have these notes to remind me of how I pulled it off the first time!

The fact that a hacker can find out that I use SSH with key-files and that I have disabled password authentication is not going to make his life much easier.

0x06 Lookin good… and safe News

0x06 Lookin good… and safe

Made a lot of tweaks to this WordPress site, adding a page showing posts in chronological order, messed around with the menus and cleared out a lot of the default content that came with the theme I’m using.

Also installed WordFence to help keep this blog locked up tight.