Centroid.EU Blog

(this blog is mostly encrypted - adults only)

Previous Page

2016 Year in Review

December 8th, 2016

A bit earlier than most years here is the review for 2016.

December 8th, 2016	This year in review 2016.
December 1st, 2016	Our Mass-surveilance problem
November 29th, 2016	Blueberries
November 23rd, 2016	My OpenBSD bridge inside Freifunk Franken
November 23rd, 2016	The Hydrogen Economy
November 19th, 2016	OpenBSD Donation Time
November 10th, 2016	A real exciting Idea
November 9th, 2016	Government (NASA) Space Program likely to suffer under..
November 9th, 2016	Donald Trump is president of the US-elect
November 8th, 2016	Arctic Fibre aquired by Quintillion Networks
November 8th, 2016	First day of Snow for the Season
October 31st, 2016	Shades can say so much!
October 31st, 2016	Happy Hallowe'en!
October 21st, 2016	Will Internet Surveillance in Germany decelerate our..
October 20th, 2016	Delphinusdnsd name approaches 2 years old
October 18th, 2016	Got 4 Puffy Mugs today
October 18th, 2016	Autumns Dress
October 16th, 2016	An idea and a plea for our worlds society
October 13th, 2016	Ordered 4 Puffy Mugs
October 13th, 2016	Upgraded io.solarscale.de to OpenBSD 6.0
October 11th, 2016	My core network
October 8th, 2016	Usutu Virus killing Blackbirds
October 6th, 2016	Good News
October 4th, 2016	I got credited to a bug report
October 4th, 2016	I've turned on the heat for 2016/2017
September 30th, 2016	FreeBSD Donation
September 30th, 2016	Victim of spoofed Mail
September 27th, 2016	My IPv6 setup at M-net (german provider)
September 20th, 2016	Ordered a book from Amazon
September 20th, 2016	Equinox in two days
September 14th, 2016	Stand up for Snowden
September 14th, 2016	TLS for centroid.eu blog, when?
September 9th, 2016	One more panic chronicle entry
August 30th, 2016	I had photographed Vega and Constellation Hercules
August 30th, 2016	The whereabouts of HD164595 in Hercules
August 24th, 2016	OpenBSD 6.0 Poster arrived
August 22nd, 2016	Ordered a Banana Pi R1 Routerboard and Case
August 22nd, 2016	Delphinusdnsd: Next week selfathon
August 19th, 2016	Eleven Reasons to be excited about the future of Tech..
August 19th, 2016	The Panic Chronicles
August 16th, 2016	My all-prime angled triangles
August 15th, 2016	less surveilance
August 9th, 2016	New self-portrait of me
August 5th, 2016	Psychosis: put to the test (my first psychosis)
August 5th, 2016	DSL: a question I've always wondered
August 5th, 2016	O Really?  Do we really need NATO?
August 5th, 2016	Ordered 4 books
August 2nd, 2016	If I were to vote in the US Election today
July 30th, 2016		Freifunk Project fail
July 24th, 2016		Did you know: DoS report law
July 23rd, 2016		Finally quit Twitter
July 23rd, 2016		Media blackout of SZ.de yesterday
July 22nd, 2016		Quitting Twitter tomorrow at noon
July 22nd, 2016		The WTC conspiracy
July 19th, 2016		Sick of it
July 18th, 2016		My Stargate
July 15th, 2016		Ordered two books
July 13th, 2016		It's not me
July 5th, 2016		EU could be un-democratic
July 4th, 2016		Being Freifunk Active
July 2nd, 2016		The missing link
June 29th, 2016		Changs at $HOME
June 26th, 2016		Ordered books from Amazon
June 25th, 2016		I hunt sysadmins
June 25th, 2016		EU, somethign must change
June 24th, 2016		Idea Brainstorming for Britain
June 24th, 2016		Goodbye Britannia
June 21st, 2016		Happy Summer!
June 20th, 2016		June Solstice in 3 days
June 18th, 2016		Received seven Freifunk Routers
June 12th, 2016		Most cannot see the milky way
June 10th, 2016		Energiewende in Danger
June 10th, 2016		Why I prefer BIND over unbound currently
June 4th, 2016		OpenBSD Donation Time
June 4th, 2016		Brexit, I'd like UK to stay
June 4th, 2016		Gotthard Base Tunnel
May 26th, 2016		Moved delphinusdnsd
May 21st, 2016		Turkeys government?  No go!
May 20th, 2016		Instead of Toronto, Ireland?
May 16th, 2016		5 days left for americas.centroid.eu
May 15th, 2016		Ordered books
May 12th, 2016		Donated $5 to ISC
May 12th, 2016		The need for a mesh network
May 12th, 2016		Stoererhaftung has been eliminated in Germany
May 10th, 2016		Europeans love English!
May 7th, 2016		One router too many?  The add-up.
May 7th, 2016		RPI Guest AP done, but not for 2.4 GHz
May 5th, 2016		Not passing down my RPI after all
May 3rd, 2016		My dreamworld
May 2nd, 2016		Blog's birthday
May 2nd, 2016		Considering an SSD upgrade
May 1st, 2016		13,500 positions in the German Cyber Army
April 22nd, 2016	Doing a training session this summer
April 15th, 2016	Stand down!  OK.
April 13th, 2016	12 months of Parship
April 7th, 2016		VDSL not until February 2017
April 7th, 2016		Registered a new domain
March 30th, 2016	I waited 3 years for this moment
March 28th, 2016	Ordered 100 Mbit Internet
March 27th, 2016	A rare word on politics
March 27th, 2016	Handing down my Raspberry Pi model B
March 27th, 2016	Very cool presentation by Agarwal
March 21st, 2016	Spring now...
March 19th, 2016	Making a turn-key dns server out of DelphinusDNSD
March 14th, 2016	Lordy Lordy loook who is Forty
March 6th, 2016		30 Years of Personal Computing History
March 6th, 2016		After 16 years, I got a TV
March 3rd, 2016		Ordered a backup Firewall
March 1st, 2016		New VDSL modem turned on
March 1st, 2016		19 days until March Equinox
February 24th, 2016	New Access Point in my apartment
February 24th, 2016	Venus broke
February 23rd, 2016	Registered domain zeropager.de
February 20th, 2016	Getting a TV after 16 years having none
February 18th, 2016	Apple is right (in this case)
February 12th, 2016	DSL Link issues, Provider refuses to help me...
February 8th, 2016	Delphinusdnsd waht's next in development?
February 3rd, 2016	Ten days from now is Year Three
February 3rd, 2016	Electricity for 2015 way up
January 29th, 2016	Delphinusdnsd 1.0.1 released
January 23rd, 2016	All Domain Names signed
January 22nd, 2016	Delphinusdnsd - ironing out the DNSSEC bugs
January 21st, 2016	What's up down with the Canadian Dollar?
January 20th, 2016	Preparing to sign my zones -> DNSSEC
January 19th, 2016	To Human Artificial Systems
January 9th, 2016	Dissecting WebShoppy Mac OS X trojan
January 8th, 2016	Organized Crime is the Enemy
January 6th, 2016	Donation time
January 3rd, 2016	The invisible man
January 1st, 2016	How hard can changing a password be?
January 1st, 2016	When a book loses significance
January 1st, 2016	Delphinusdnsd 1.0.0 Released
December 31st, 2015	More power from Arabia and Sahara?
December 29th, 2015	Our XMAS Dinner
Enjoy the memories.


Our Mass-surveilance problem

December 1st, 2016

I just watched Edward Snowden on a clip on youtube during dinner and he made a great speech regarding that presidents can't fix the mass surveilance problem and that we must fix it (as a world movement). He said we must weigh the should we and shouldn't we or something, because lately it's been the can or can't we. This reminded me that the german BND (spy service) has been given 150 million EUR to spy on people's snapchat and other encrypted forms of communication. We have to work against the powerstructures that want to take our privacy and route around these.

BTW there is fake news possibly saying that Julian Assange has been kidnapped by CIA. Fake news can be so annoying because they could turn out to be real. Julian, I hope you're OK!



November 29th, 2016

At my local supermarket I picked up a batch of blueberries. When I ate them I noticed a change in vision and a hightened awareness. This made me curious what I experienced. For one it enacted in my visual senses, so that must be the occipital lobe area of the brain. Reading online about this fruit I found that it is classed a "superfood", a nutrition bomb so to speak. It is high in Vitamin C and K and has manganese. It is good to have when you have nutritional deficiencies. It sure made a diff for me this afternoon. Also its latin name of its genus: vaccinium sounds like the english vaccine. Maybe there is a relation. I'm glad I experimented with this.


My OpenBSD bridge inside Freifunk Franken

November 23rd, 2016

Freifunk Franken is a network that is partitioned into what's called hoods. While the entire network consists of, my hood has or something. I'm in the Hassberge Sued Hood which is centered around Hassfurt. Each hood represents a Layer 2 (Datalink layer) network, so you can reach within 1 IP Hop everything inside it. Since geographically my parents house and my apartment are in the same Hood, I set up an OpenBSD machine as a bastion host between my internal network and the freifunk franken network to do IPSEC tunneling in order to have security and integrity between my parents house and my house. The bastion host I set up at my parents house looks like this:

It is a PC-ENGINES APU router that does not have forwarding between its interface, hence there is no way to misroute things.

I've been running this for a few weeks now and have hooked up SIP phones to this. The phone conversations are clear as ever (38 ms ping). Knowing that they are encrypted is a big bonus.


The Hydrogen Economy

November 23rd, 2016

My dad thinks this is a real good concept. The Hydrogen Economy. Unfortunately we're not there yet, but rest be assured our militaries submarines have been using these for quite a while. Maybe in another lifetime will we civilians make use of this.


OpenBSD Donation Time

November 19th, 2016

Part 2/2 of this year, I have donated 100 EUR to Theo de Raadt. This wraps up my donations to all *BSD's this year. BTW the donation meter at OpenBSD foundation is almost filled to the goal. Congrats OpenBSD!


A real exciting Idea

November 10th, 2016

Yesterday I was brainstorming how to "sign" binaries in OpenBSD, and I caught an itch. I don't know if I'll ever do this but I've given it thoughts since yesterday. First though I want to show you this, here. I'm not the only person that thinks a signed binary in OpenBSD would be a good idea. So then I thought about how to do this a little.

In the kernel the exec routines for reading an ELF binary would have to be modified in the following way. It reads the ELF program header table and expects a PT_OPENBSD_ELFSEC program header identification. By reading in the entire binary upon exec, given that the user is not root (a suser check) and caching shows no binary behing checked before (a walk of a LIST), the kernel HMAC checksums the binary with a key that was ioctl'ed into the kernel at boottime under securelevel 0, in fact this check is only done if the securelevel is > 0. It then compares the section of PT_OPENBSD_ELFSEC and it it matches it discards the read file, and lets read-on-demand take over for the file. It is running a genuinely "signed" binary.

In userland there is 4 programs that get modified. Binutils, strip, elfsec and elfsecd. When compiling new programs the PT_OPENBSD_ELFSEC program header gets added to the ELF program headers. As root you can execute any signed binary becasue then it doesn't matter if signed or not, a hacker has all control over the system. When binaries are compiled make calls strip with a new argument which will "bless" a binary with the elfsec program when root. When a non-root user it is checked first if a user is allowed to bless binaries and then elfsec speaks with elfsecd to bless a binary with the private key that only root can read, a bunch of descriptor passing within the imsg framework would work out nicely. The elfsec binary should also be able to bless entire directories such as /bin, /sbin, /usr/bin, /usr/sbin etc.

This is the track I have wrapped my thoughts around. Dunno if it's worth it but the installer program would need to be modified to rebless new binaries in an upgrade. That would satisfy all those naysayers that say it would never work. In the end result you prevent someone else from importing binaries that you don't want runnning on your system. Perhaps a worm of sorts. It's another level of security and it would cost an attacker a lot of resources to crack the private key to each binary. It would slow down a system somewhat, but I've been using SSD's for a few years now and don't see this as much of an issue, also there is caching which should speed this up.

Hehe, thinking of vapourware can be mind consuming for sure :-).


Government (NASA) Space Program likely to suffer under Trump

November 9th, 2016

I talked a little about the American and European space programs in the past. Now on one hand it was a GOP under Dubya Bush who wanted Moon to Mars. However Trump has other priorities. He wants to fix the potholes in America first. He makes economic sense, there is no glory when your infrastructure is failing. But we likely won't see much action until at least 2021, that's after his first term is my thought. With Obama the American Space Program suffered but Obama set something in motion that was perhaps a smart move. The private space industry, SpaceX, boeing, those sorts of private enterprises.


Donald Trump is president of the US-elect

November 9th, 2016

I did not cheer for Hillary and I did not cheer for Trump. Americans failed to look for the alternatives. My favourite was Jill Stein, who got very little votes if any. I did not cheer for the "lesser evil" I turned my thoughts away from the Clinton-Trump pair, even though people tried to tell me I had to chose. I don't have to chose, I chose the alternative. Hopefully the Donald will not wreck too much in relations between my country and the USA. I count on the real alternative, the US Green Party.


Arctic Fibre aquired by Quintillion Networks

November 8th, 2016

Today is the first day of snow I experienced in 2016 fall season. In 2013 I experienced the same first few days of snow in Iqaluit, Nunavut. Because I saw a connection I researched the past and found in a link that Arctic Fibre of Toronto, Canada was aquired by Quintillion Networks last june. Quintillion Networks seems to be run by people from Alaska. It reminded me how my friend in Iqaluit said that Barrow, Alaska has a lot in common with Iqaluit (I think he said that on twitter). Anyhow the Canadian part joining with the Alaskan part and stretching to the UK is probably in limbo since it's been pushed back to Phase 3. But here is hoping that Iqaluit will get terrestrial submersed fibre optic cable some day.


Next Page


RSS Feed

Click here for RSS

On this day in

Other links

Have feedback?

By clicking on the header of an article you will be served a cookie. If you do not agree to this do not click on the header. Thanks!

Using a text-based webbrowser?

... such as lynx? Welcome back it's working again for the time being.

Older Blog Entries

Powered by BCHS