Ich hatte über mehrere Tage ein IPTV Problem. Hier läuft eine Fritzbox an einem MagentaTV Anschluss. IPTV läuft über Raspi mit Kodi. TV wird eingespeist per DVB-C und über IPTV (MagentaTV). Seit 2 Tagen ruckelten die IPTV Sender plötzlich und waren nicht mehr nutzbar. Die DVB-C Sender hatten keine Probleme.
Ein ähnliches Ruckeln der Sender hatte ich beim Einrichten meines ganzen Setups auch schon gesehen aber dies löste das Aktivieren der WLAN IPTV Optimierung in der Fritzbox.
Goal Setup overview Setup 1 (with PSK) EdgeOS IPSec config strongSwan IPSec config Testing and Debugging Setup 2 (with RSA keys) RSA key format Generate RSA keys Use RSA keys for authentication History: EdgeOS vs. Vyatta vs. VyOS Goal We want to create the following:
IPSec IKEv2 tunnel between an EdgeOS router and Ubuntu Linux (with strongSwan) we only use IPv6 (we invest our energy in the future) authentication via RSA keys should be used (PSK is too insecure regarding man-in-the-middle-attacks) build setup incrementally for better debugging in the first steps PSK setup is shown because it is easier to debug PSK authentication will then be replaces with RSA keys Assumptions for this test:
The first post in this blog was introduced in 2013 (nearly 10 years ago). I used octopressas static website generator. This was a very good decision because it worked very well for a long time.
The best decision was to choose a static website generator and no dynamic website. This saved me much time because security updates are no issue here.
Octopress is now not developed anymore therefore a new static website generator has to be used.
Currently I am playing around with UEFI because every time I have to deal with UEFI something goes wrong. Therefore I decided to test UEFI installations and configurations.
In this article we want to install Windows10 and Debian9 on one device and UEFI should be used as boot mechanism. At the beginning we want to install Windows first and Linux afterwards. In another article we will test the other way around.
Seit August 2016 ist das Gesetz zur Endgerätefreiheit am Internetanschluss in Kraft (https://de.wikipedia.org/wiki/Routerzwang). Somit darf ein Provider nicht mehr darauf bestehen, alleinig den mitgelieferten Provider-Router zu unterstützen. Die Umsetzung bei Kabel Deutschland (KD) ist hier sehr eigenwillig. Es dürfen nur bestimmte Geräte angeschlossen werden. Nicht jedes technisch kompatible Gerät wird hier erlaubt.
Was darf man konkret anschließen?
Laut KD: Das Gerät muss eine vorgegebene KD-Schnittstellenbeschreibung erfüllen. Diese ist zu finden unter https://www.
When publishing content in the internet I decided to have the choice between two categories:
short text/message (https://twitter.com/leosos) more detailed text (this blog) Why I chose Twitter as short message service? I can’t remember. Maybe it was simply there and I wanted to try it out?
The last days some users complained that accessing content via Twitter homepage without logging in is a mess. So I began searching for alternative services.
Today many users sync their photos and videos with some cloud webspace. Other users have privacy concerns and sync with their owncloud installation or a local NAS. I am one of these other users.
With my Jolla smartphone I was looking for a way to easily sync all photos to some local storage. As a result some linux scripting on the phone and a USB stick in my Fritzbox (Router,AP) did the trick.
I have one of these brilliant Lenovo Thinkpad USB keyboards with trackpoint and mouse buttons. This keyboard always worked without problems. Now I upgraded my Ubuntu installation from 15.04 to 15.10. Suddenly after the upgrade the middle mouse button on the keyboard stopped working after the laptop resumes from sleep.
Currently I do not know what the exact problem is. One workaround is to pull the USB cable and reattach it.
A user on twitter pointed out that by browsing my website content from disqus.com is loaded automatically. He was concerned about tracking of users by disqus (and Google Analytics which was also loaded).
I find that is a valid concern and searched for possibilities to make my website more privacy aware. The solution is to lazy load content from disqus.com. This means after a page load, there is a link with note for loading remote content from disqus.
On 32. Chaos Communication Congress there was a talk about “Let’s Encrypt – What launching a free CA looks like”. On this occasion I tried it on the webserver here.
Following the introductions from https://github.com/letsencrypt/letsencrypt installation worked well. Several linux packages (gcc,…) were installed. All configuration was done automatically. Great!
Now this website is SSL-only with a certificate trusted by all main browsers. Before I had an SSL certificate from CAcert (https://www.
Now that I am using Linux again I was looking for software to geo tag photos. My focus was on open source software. Therefore programs like picasa are not in the list. I ended up with the following programs.
For viewing GPS tracks GpsPrune (http://activityworkshop.net/software/gpsprune/) is very good.
To automatically geo-tag photos I use gpsphoto.pl (http://www.carto.net/projects/photoTools/gpsPhoto/). It is a command line tool which is easy to handle if you know what you want.
This week a colleaque of mine wanted to know where the nearest recycling container for paper is. Luckily, I was able to help him :)
This is a typical query for geo databases. But which database has such items included? Yes, Openstreetmapis our friend here. You can find nearly everything in this geo database (even excrement bags for docs, in German “Hundekottütenspender”). Most of you only know the rendered view of the data on the webpage.
“Wie wird das Wetter heute?” Diese Frage stellen sich viele von uns und wollen dann, mal schnell, das Wetter nachschauen. In der letzten Zeit kam bei mir jedoch immer wieder Frust aus folgenden Gründen auf:
Webseiten sind vollgepflastert mit Werbung und helfen dabei, mein Profil für die Werber zu verfeinern Smartphone Apps nehmen sich meine exakte Position und nerven dann auch noch mit Werbung Diese Situation veranlasste mich über Lösungen nachzudenken und diese umzusetzen.
Some weeks ago I was buying a Jolla Phone because in Google’s universe there was to much tracking and advertising und only less privacy. Let’s give an example.
I had a Nexus4 phone with stock Android 5 installed. It is a very nice phone with good hardware. I gave this phone to another person which was happy to have some kind of “newer” phone. Some days ago we meat again and talked about the phone and android settings.
Yesterday “The Intercept” reported about GCHQ and NSA stealing crypto keys for cellphone communication (see https://firstlook.org/theintercept/2015/02/19/great-sim-heist/) At the beginning I thought “oh my good”. After thinking about this for some time I was wondering why I thought this way. It was very clear to me that only end-to-end encryption can defend from spying. Here PGP/GPG is a good example.
When I read the article I was once again very surprised that NSA&co are doing everything to catch all possible traffic and decrypt it.
Ich verabschiede mich in den nächsten Tage von Facebook! Das erklärte Ziel von Facebook (laut neuer AGBs) ist, die Nutzer immer und überall verfolgen zu dürfen und können. Das möchte ich nicht! Ich kann mich nur frei bewegen, wenn ich weiß, dass ich nicht ständig überwacht werde. Diese ganze Enwicklung ist sehr bedenklich.
Aus meiner Sicht gibt es keinen Grund bei Facebook zu bleiben. Oder kann mir jemand von euch einen Grund nennen?
IPv6 is the successor of IPv4 and many parts of the Internet are dual-stack. Therefore, they can handle connections with both protocols. Due to exhausted IPv4 address space, in the near future devices will only get IPv6 addresses. Currently the Internet is in transit from v4 to v6.
I recognized a very strange behavior with my IPv6 configuration and MacOS X 10.9 (Mavericks). The problem was that my Mac had an IPv6 tunnel to enable dual-stack configuration but Firefox was not able to resolve IPv6 domains.
Finally, a new Raspberry Pi is mine.
I love this little small computer. Installing Raspbmc was really easy and it plays videos without any problems.
For several reasons I want to use a keypad to navigate XBMC user interface. I found a keypad with USB at an online auction. It is a Targus keypad, Model: PAUK10E.
First tests revealed that it is not working out of the box the way I thought.
The following article is in German. Because it is German problem with the German ID card.
Seit langem wollte ich mal wieder stolzer Nutzer hyperaktueller Technik sein und mich mit dem Personalausweis auf einer Webseite einloggen. Hatte ja vor ein paar Monaten noch geklappt. Und die verwendete Technik ist ja auch noch nicht so alt. Wir haben:
neuer Personalausweis mit eID Funktion Apple Mac OS 10.9 (Mavericks) Reiner SCT RFID basis Lesegerät AusweisApp Nun zog ich aus um… eigentlich nur Frieden und Glückseligkeit zu finden … fand jedoch nur Abgründe die mich das Fürchten lernten.
The last days a colleague of mine and me, we researched a very strange network behaviour. Now there is a blog article with in depth analysis. It’s very interesting. Detecting a faulty IDS, the hard way.
“This morning, a colleague of mine discovered a rather strange behaviour of our University’s network when trying to download a file with a size of about 80 MB using HTTP. Later that day, we identified a strange behavior of the network itself.
INTRO Some time ago when Nokia was number one in smartphone market and you had to recharge your phone only once a week (I still love my E51) Funambolwas a very good way to handle synchronisation of contacts and calendars using open source software with an open standard protocol (SyncML).
Now, after switching from Symbian to Android synchronisation is still working but I wanted to host all data by myself. Looking for a new software and an open standard protocol I chose CardDAVand CalDAVbecause it is widely known, implemented by many applications and synchronisation service can be hosted by your own, e.
Hello world. This is my first post with octopress. I am really excited using static site generators. Let’s try to blog interesting stuff for this world.
