Thanks to everyone that come to visit or even leave a comment. It’s really good to know someone is still visiting my small space.

The reason I stopped writing blog is because I’ve get involved in a really really big project, and got quite busy. The project is still not finished, but is in a good shape. I think I’ll get sometime to update this blog.

The reason I came to visit my own blog is because I was looking for an old article . And the reason I looked for that old article is because I’ve got myself a new PC. With the summer getting hotter and hotter, my old AMD3000+ machine halts several times a day. I know switching to a bigger fan might help, but, well, it is getting slow and the halting is an good excuse for a new one

So I go get myself an I5-750 machine, with 4G RAM. It’s much faster than the old one. It is so fast that a buildworld in a FreeBSD on FreeBSD virtualbox client is faster than the real 3000+ machine. I also got myself a Dell 2410 and setup a two-monitor desktop. Finally I can have two 1024×1200 window sitting side by side, it looks really nice

So much for the news. I’ll get back and update my blog because again, I found it’s a good for future work if I wrote the tips down.

Enjoy the life and live with passion.

Share This

- Blackberry 8300. After 7 years, my Simense 3568i stops working. I was planning to get some simple mobile with bluetooth and EDGE, to get the N810 online when there’s no WIFI available, because right now EDGE is the most reliable data link I can get, and in the near future I might switch one of WCDMA, CDMA2000, or TDSCDMA for 3G data link. But well, an oppotunity pops up and I get this fancy mobile. And I got nothing to complain: The screen is good, the keyboard is good, and I might finally get a chance to write some Java code

- Nokia N810. This is the key of my new toys. Because I’m maitaining some servers, both Windows and *nix, I need a way to access them when I’m not in front of my workstation. And ofcause I don’t want to bring a laptop with me while shopping And IMO, to really do some work, especially on remote Windows machines, I’ll need a 640*480 screen resolution at least. There are a few mobile with this resolution but they are too expensive to me, especially when I’m planning to change to a new phone in the near future. The keyboard is not as good as the BlackBerry but the screen is really good. And with OpenSSH and Rdesktop, I can leave my laptop at home if I travel within 3 days.

- Dell Inspiron 1525. This is a replacement of my 7 year-old Inspiron 4100. This is pretty the low end of the 15′ laptop line, because I have a desktop machine at home and I’ll only bring it with me when I travel more than 3 days, which is very rare. Now the primary usage of it is to sitting in the living room so my wife could watch some movie while I’m working at the desktop

Share This

select address, count(address) as cnt
from mailing_list
group by address
having cnt > 1
order by cnt;

Share This

The problem is, my Emacs configuration is too complicated and depending on a lot of external tools. It is not easy to get all the things running when you come to a new machine. And Emacs is not on every machine, especially when I was on other people’s machines.

So I decided to make up a light weight vim configuration, so I can use it quickly everywhere.  Here’s a list of the plugins I choose: taglist,  pydoc, code_complete, matchit, and SearchComplete.

And I think  zsh is not available everywhere too so I’ll need some setup for bash.

Share This

The functions all works good after installing the driver. However the zoom button in the middle of the keyboard is… useless. I would rather use it for scroll. So I Googled around and looks I’m not alone Olivier Dagenais has posted two good articles: Hacking the Microsoft Natural Ergonomic Keyboard 4000 and Hacking the Microsoft Natural Ergonomic Keyboard 4000, redux.To me, it’s quite simple: just open the C:\Program Files\Microsoft IntelliType Pro\commands.xml file, and search for “zoom”. Pay attention to the “app name” it is in, and change those you want from “ZoomIn” to “ScrollUp”, and from “ZoomOut” to “ScrollDown”. Then kill the “itype.exe” process, and click the “microsoft keyboard” shortcut on the desktop to restart it again.

Everything works smoothly. I didn’t notice an acceleration for the scroll though. I’m using the 6.20.148.0 driver, which is the latest as the time of writing.

Share This

First of all we’ll need to setup FreeBSD as a network bridge.

This should return “bridge0″ if this is the first bridge you created.

And we’ll add the two interface used on the bridge. It’s “rl0″ and “vr0″ in my case:

Now bring the bridge up. Note the two interface need to be up too.

If you want an IP address of the box, assign it to the bridge

Now the bridge should work. To make dummynet work, we’ll need to recompile the kernel:
add

to the kernel config file and rebuild it. Then add

to /etc/rc.conf.

Make sure you have filewall_type=”open” in /etc/rc.conf and/or options IPFIREWALL_DEFAULT_TO_ACCEPT in your kernel config file before you do the reboot if you are doing this remotely. Or you’ll block yourself out.

Now enable ifpw on the bridge

OK, we can now add a pipe:

Note the “1000″ in the command line. Do a

first and choose a good place for the pipe.

Now it’s time to shape the traffic. To add some delay:

or add some package lost:

Reference:

A nice tutorial

The FreeBSD hand book about bridging

The FreeBSD hand book about IPFW

dummynet(4)

ipfw(8)

Share This

I find this out because the cracker created a new user on his server, and runs the password scanner on his server to gain access to more servers.

The cracker deleted the C source code of the scanner, but left some shell scrip running. And here is how it works: The scanner got a pretty large username/password match database, and the scanner will run through this database against all the computers online. Pretty simple, hmmm? And with some simple tricks, like scan those machines has SSH connection with the current machine, it get pretty efficient.

The thing scares me most is that they’ve got a really large database. Not only the usual words in dictionary or simply phases like “letmein”, I saw things like “mima” which is the Chinese pronunciation of “password”. There are also some password that I think from other langnuages.

And my friend confirmed his sys admin used to use some really simple password. So, use SSH2 key auth whenever you got a chance, and when you have to use a password, nomatter on SSH or not, never think your password is complicated enough.

Share This

So in short, I can use the “mstsc” command to bring up windows remote desktop connection. The command itself will give the usual remote desktop connection dialog. And I can also use some command line parameters to speed this up:

This is pretty handful if you can’t access the windows start up menu as me.

Share This

The most problem of setting up Vsftpd with file based virtual user on FreeBSD is that we don’t have pam_userdb. So we’ll use /usr/ports/security/pam_pwdfile instead.

So after installing the vsftpd and pam_pwdfile ports, do the following:

(1) in /etc/pam.d, make a file named “vsftpd” and put the following lines in it:

(2) make a password file with the apache htpasswd utility:

(3) make a local user with “nologin” as the shell and disable password login. I use “vsftp” for this.

(4) in /usr/local/etc/vsftpd.conf, disable anonymous access and enable local user access, and then add the following:

Note the value of “guest_usrname” is the local user name you made in step (3)

(5) make a directory /usr/local/etc/vsftpd, and write user specific configurations in a file named after the user’s login name. For example, someone with full write access will have something like this:

(6) It should be OK now, add vsftpd_enable=”YES” into /etc/rc.conf as usual, and restart vsftpd to see if everything works fine.

Share This

还有什么 比死亡更容易
还有什么 比倒下更有力
没有火炬
我只有勇敢点燃我自己
用牺牲 证明我们的勇气

还有什么 比死亡更恐惧
还有什么 比子弹更无敌
没有躲避
是因为我们永远在一起
用牺牲 证明我们没放弃

Share This