_azure

azure @ 2008-12-29T00:55:00

2008-12-29T06:57:04Z

https://osuny.co.uk/~azure/txt/openbsd_thinkpad_x41_tablet.txt

.----------------------------------------------------------------------------.
|                                                                            |
|-----------------/ OpenBSD on the Thinkpad X41 Tablet /---------------------|
|                                                                            |
`----------------------------------------------------------------------------'
 azure@osuny.co.uk ============================== https://osuny.co.uk/~azure

Linux and OSX86 have not cornered the market for *nix-based Tablet PCs. The linuxwacom [1] driver project has been ported to FreeBSD as a package and can also be coaxed to compile on OpenBSD/i386 systems. Kernel modules are not required for the tablet to function normally.

_/ Compiling linuxwacom

linuxwacom-0.8.2 is available from Sourceforge:

[ http://prdownloads.sourceforge.net/linuxwacom/linuxwacom-0.8.2.tar.bz2 ]

At this point you will need to edit src/xdrv/xf86Wacom.c and comment out lines 928-939. Otherwise the compile will fail with complaints from the USB-specific code.

# gmake && gmake install

_/ Modifying the Running Kernel to Recognize the X41's Serial Tablet

Because the Wacom hardware in most Tablet PCs utilizes non-standard serial configurations, it is necessary to modify the OpenBSD kernel to detect the X41's Wacom Penabled [2] tablet:

ukc> change com

ukc> quit

Saving modified kernel.

Upon reboot your system should detect the com0 device:

com0 at isa0 port 0x200/8 irq 5: ns16550a, 16 byte fifo

_/ Xorg Configuration

---/ xorg.conf

Download my xorg.conf here:

[ https://osuny.co.uk/~azure/x41/conf/xorg.conf ]

Information about the serial tablet must be added to xorg.conf:

Section "ServerLayout"
      Identifier     "default"
      Screen      0  "Screen0" 0 0
      InputDevice    "Mouse0" "CorePointer"
      InputDevice    "Keyboard0" "CoreKeyboard"
      InputDevice    "cursor" "SendCoreEvents"
      InputDevice    "stylus" "SendCoreEvents"
EndSection

Section "InputDevice"
      Driver        "wacom"
      Identifier    "cursor"
      Option        "Device"        "/dev/tty00"
      Option        "Type"          "cursor"
      Option        "ForceDevice"   "ISDV4"
      Option        "Mode"          "Absolute"
      Option        "TPCButton"     "on"
EndSection

Section "InputDevice"
      Driver        "wacom"
      Identifier    "stylus"
      Option        "Device"        "/dev/tty00"
      Option        "Type"          "stylus"
      Option        "ForceDevice"   "ISDV4"
EndSection

---/ .xinitrc

Download my .xinitrc here:

[ https://osuny.co.uk/~azure/x41/conf/xinitrc ]

The keycodes for the X41's tablet buttons are as follows:

reset          keycode 198
rotate         keycode 204
toolbox        keycode 199
esc            keycode 203
return         keycode 200
left arrow     keycode 206
right arrow    keycode 205

_/ Acknowledgments

Thanks to Joshua Stein [3] for pointing me in the right direction.

---/ References:

[1]
[ http://linuxwacom.sourceforge.net ]

[2]
[ http://www.wacom.com/tabletpc/what_is_penabled.cfm ]

[3]
[ http://jcs.org ]
[ http://tinyurl.com/9j3p7y ]

.---------------------------------------------------------------------------.
|                                                                           |
|   _azure                                                                  |
|                                                                           |
`---------------------------------------------------------------------------'

EOF

yeah, bash

2008-12-26T06:23:42Z

azure @ 2008-11-26T23:46:00

2008-11-27T05:46:47Z

http://harmful.cat-v.org

azure @ 2008-10-26T23:26:00

2008-10-27T04:27:50Z

Web Security Horror Stories

View SlideShare presentation or Upload your own. (tags: webapps xss)

eMachines T3302 | Mac OS X 10.5.2

2008-04-11T04:48:23Z

Installed:

Leopard-10.5.2-AMD-EFI-Rev2.iso, 9.2.0 ToH kernel
Ableton Live 6.0.7
Adobe Creative Suite 3 Premium
Crossover Office 6.2
Manga Sutdio Debut 3.0
Reason 4

Works:

Sound works out of the box with the AC97 driver from install DVD
PS2 or USB mouse and keyboard work out of the box

Doesn't Work:

Quartz/OpenGL graphics are not supported by the native S3 Unichrome chipset. I installed an NVidia GeoForce FX5200 (128MB) which works with the nvinject driver from the install DVD. The unit does not have integrated WiFi so I bought a cheap USB dongle.

Notes:

The T3302 comes standard with an 2GHz AMD Sempron 3300+ CPU and 512MB of PC3200 DDR400 RAM. The Sempron 3300+ supports the full range of SSE2 and SSE3 instructions, so both Universal Binaries and Rosetta run flawlessly. The motherboard only supports 2GB of RAM across two memory slots, so I added a single 1GB stick until I decide it's worth paying for the extra 512MB.

I bought this machine in 2005 for $250. Total investment including hardware upgrades is just over $300.

Thinkpad X41 tablet | OSX 10.5.2

2008-04-01T04:09:42Z

Installed:

Kalyway 10.5.1 DVD, Kalyway 10.5.2 combo updater, 9.2.0 universal kernel
Ableton Live 6.0.7
Adobe Creative Suite 3 Premium
Crossover Office 6.2
Reason 4

Works:

Graphics Quartz/OpenGL works out of the box
Modem works out of the box
Mouse pointer works out of the box
Power Management (with PowerManagement.bundle)
Sound works out of the box
Tablet (with TabletMagic driver)
Wifi (with Artheros card)

Doesn't Work:

The X41's 1.6GHz Centrino CPU only supports SSE2 instructions, and as such Rosetta apps don't always function properly. PPC binaries such as Manga Studio Debut 3.0 (the main reason I wanted to run OSX on this tablet) crash frequently and in unpredictable ways.

The PC version of Manga Studio Pro EX, which functions more or less perfectly in Crossover Office under OpenSUSE 10.2, suffers from strange tablet behavior when run on this same hardware under OSX. Contrary to the expected behavior, the stylus requires a significant amount of pressure in order to register a mark on the screen.

Presently, I am looking to upgrade to the Thinkpad X61 tablet, which sports a multi-touch tablet screen as well as a Core 2 Duo CPU that supports the full SSE3 instruction set, and thus should handle Rosetta applications with no problems.

azure @ 2008-03-24T02:37:00

2008-03-24T07:39:01Z

CYBERTECH #23

2007-10-01T03:47:34Z

has been released.

http://www.digivill.net/~ticom

azure @ 2007-06-08T17:52:00

2007-06-08T22:53:20Z

NOTE: TLB code too large, using trampolines
[ using 273456 bytes of bsd ELF symbol table ]
Copyright (c) 1982, 1986, 1989, 1991, 1993
        The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2007 OpenBSD. All rights reserved.  http://www.OpenBSD.org

OpenBSD 4.1 (GENERIC) #128: Sun Mar 11 05:33:22 MDT 2007
    deraadt@sgi.openbsd.org:/usr/src/sys/arch/sgi/compile/GENERIC
real mem = 268435456
rsvd mem = 7020544
avail mem = 228564992
using 2867 buffers containing 13418496 bytes of memory
mainbus0 (root)
cpu0 at mainbus0: MIPS R10000 CPU rev 2.7 194 MHz with R10000 FPU rev 0.0
cpu0: cache L1-I 32KB D 32KB 2 way, L2 1024KB 2 way
macebus0 at mainbus0: crime rev 10.1
clock0 at macebus0: TOD with DS1687, ticker on int5 using count register
macepcibr0 at macebus0: mace rev 1, host system O2
pci0 at macepcibr0 bus 0
ahc0 at pci0 dev 1 function 0 "Adaptec AIC-7880" rev 0x00: irq 9
ahc0: Host Adapter Bios disabled.  Using default SCSI device parameters
scsibus0 at ahc0: 16 targets 
sd0 at scsibus0 targ 2 lun 0: < SEAGATE, ST318275LC, 0001 > SCSI2 0/direct fixed
sd0: 17366MB, 11721 cyl, 10 head, 303 sec, 512 bytes/sec, 35566480 sec total
cd0 at scsibus0 targ 4 lun 0: < TOSHIBA, CD-ROM XM-5701TA, 0167 > SCSI2 5/cdrom removable
ahc1 at pci0 dev 2 function 0 "Adaptec AIC-7880" rev 0x00: irq 10
ahc1: Host Adapter Bios disabled.  Using default SCSI device parameters
scsibus1 at ahc1: 16 targets
com0 at macebus0: ns16550a, 16 byte fifo
com0: console
com1 at macebus0: ns16550a, 16 byte fifo
mec0 at macebus0: MAC-110 rev 1, address 08:00:69:05:bb:ba
nsphy0 at mec0 phy 8: DP83840 10/100 PHY, rev. 1
mavb0 at macebus0: AD1843 rev 1
audio0 at mavb0
boot device: sd0.
root on sd0a
ahc0: target 2 using 16bit transfers
ahc0: target 2 synchronous at 10.0MHz, offset = 0x8
rootdev=0x0 rrootdev=0x900 rawdev=0x902

Cybertech #23

2007-04-27T03:12:51Z

OSUNY RETURNS (again)

2007-04-10T05:10:06Z

ssh bbs@osuny.co.uk

 +---------------------------------------------------+
 |  Intellectual Property Policy for OSUNY U.K. BBS  |
 +---------------------------------------------------+

In accordance with Title 17 U.S.C. Section 107, the material within is
distributed without profit to those who have expressed a prior interest
in receiving the included information for research and educational
purposes.  Use of this system constitutes the expression of prior
interest.


.+===============================================+.
|                                                 |     
|     _  ,^.  _                                   |
|   ,'/ -' '- \`.                                 |
|  / |   \ /   | \                                |
| |  |   | |   |  |                               |
| |   \_,' `._/   |  __   __ __  __  __  _  _     |    
| |               | (( \  || ||  ||\ ||  \\//     |
|  \             /   \\   || ||  ||\\||   )/      |
|   `.         .'   \_))  \\_//  || \||  //       |
|     `--._.--'                                   |
|                                  u.k.           |
|                                                 |     
|                                                 |
`+===============================================+' 


---------------------------------------------------------------------------
            Someday they won't let you, so now you must agree
        The times they are a-telling, and the changing isn't free
        You've read it in the tea leaves, and the tracks are on TV
                          Beware the savage jaw
                                 Of 1984
---------------------------------------------------------------------------
===========================================================================
  SSH1 RSA fingerprint: 33:b8:83:ec:3c:c2:85:38:d6:8b:f9:af:14:27:45:c8
  SSH2 RSA fingerprint: a4:94:b5:00:83:68:9c:ef:8b:b6:3a:9f:df:af:89:31
===========================================================================

           bbs100 3.0 by Walter de Jong <walter@heiho.net> (C) 2006

Enter your name:

New GnuPG key

2006-12-17T05:47:58Z

https://osuny.co.uk/~azure/txt/azure.gpg.asc

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.2.2 (OpenBSD)
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=ndA/
-----END PGP PUBLIC KEY BLOCK-----

azure @ 2006-09-29T21:47:00

2006-09-30T02:48:59Z

Hack: Home Repair / Renovations

Previous

From: _azure 21:40
To: ALL 4 of 4
936.4

The appraisal was going great until the guy turns to me and says:

"This is a bit of a personal question. What's your conception of God?"

I should have seen it coming. He'd already told me I seemed like a smart fellow (a dead give away that someone is about to pitch a religion to you). I was in the middle of elaborating on "gray goo" and the implications of ubiquitious nanotechnology when he posed this philosophical conundrum to me. Of course, there were a myriad of possible ways to address his query. I paused briefly and then simply explained that round about my late teens/early twenties it occurred to me that perfectly acceptable explanations of natural processes existed which did not require the presence of a guiding intelligence. I also related to him that, after navigating my childhood in a profoundly religious mode, I had perhaps pursued scholarship of the supporting documentation (of the Abrahamic religions) much farther than could comfortably accomodate any reasonable faith in their conceits. I told him that the Bible at my mother's church is different than the Bible at my friend's church, and then asked him what his source of information about God was. After all, a child isn't born with built-in knowledge of God or his Commandments; hence the need to write it all down in something called Scripture. Naturally, instead of addressing my points he answered my question with a question: "Really?"

He offered that some scientists have begun to research the book of Genesis and are finding scientific proof that it is an accurate account of the origins of the universe. Apparently, there are new scientific theories stating that the world is 6,000 years old.

I countered this by suggesting that it was perfectly concievable that God, if he exists, could have created the world yesterday, complete with fossils, rock strata, etc -- all the history we know and love. There is no reason to ignore entire fields of legitimate scientific study simply in order to maintain the sanctity of dubiously translated tribal texts from pre- Magna Carta civilization. His face just stayed blank, and that's when I realized he wasn't really thinking about this stuff, just repeating it from some unnamed source. (I know, how obvious, right?)

He said I needed to clean the leaves out of my gutter.

_azure

azure @ 2003-07-22T11:06:00

2003-07-22T18:06:58Z

God damn it's been a long time since I updated this.

ECN

2003-02-27T16:20:10Z

Getting pf(4) to play with ECN:

With the OpenBSD 3.2-RELEASE, some of the improper syntax that used to
work with pf.conf(5) no longer works. On several of my systems I was
getting the intended behavior of `flags S/SA' rules by using `flags S/A'.

My bad.

Previously, pf(4) ignored ECN flags. With the 3.2-RELEASE, `E' became
a flags option, and my former, improper use of `flags S/A' no longer
worked at all. On most of my systems I switched to `flags S'
(recommended at the time in the website documentation for former users
of the `flags S/A' option) -- which dumps *everything* but packets set
to SYN (until the connection is established -- I run "default deny" and
"keep state" -- afterwards packets are judged according to the rules
listed next in the ruleset).

This had the unfortunate side-effect of also breaking connectivity for
some hosts who had enabled ECN (though strangely not for any of my OpenBSD
machines -- both with custom kernels, or stock kernels -- all with
ECN enabled by default).

After discussing the issue with ajax when I was way too tired last night,
and following his advice as to new flags to use in my rulesets, I've
gone with the following:

`flags S/FSRPAU'

which accepts only SYN out of the possible FIN, SYN, RST, PUSH, ACK, and
URG. As ajax astutely pointed out, there's no reason we should accept
any other flags besides CWR or ECE while establishing the initial connection.

Better granularity. Better pizza.

---

From the newest pf.conf(5):

 "flags [a]/[b] | /[b]

     The rule only applies to TCP packets that have the flags [a] set
     out of set [b].  Flags not specified in [b] are ignored.  The flags
     are: (F)IN, (S)YN, (R)ST, (P)USH, (A)CK, (U)RG, (E)CE, and C(W)R.

     flags S/S   Flag SYN is set.  The other flags are ignored.

     flags S/SA  Out of SYN and ACK, exactly SYN may be set.  SYN,
                 SYN+PSH, SYN+RST match, but SYN+ACK, ACK and ACK+RST do
                 not.  This is more restrictive than the previous exam-
                 ple.

     flags /SFRA
                 If the first set is not specified, it defaults to none.
                 All of SYN, FIN, RST and ACK must be unset."

FLASH

2003-02-14T14:55:53Z

Stop asking if you can take over my livejournal!

Momentary lapse of judgement.

2003-01-22T17:12:16Z

After a few days, my

Internet -> bmf -> SpamAssassin -> bmf -> Inbox

setup started going apeshit and looping into oblivion -- filling my Inbox with multiple copies of almost (but not quite!) every message received.

Computers are starting to pile up again.

Clinical Heartburn

2003-01-14T15:58:08Z

I am forcing the issue this morning and trying to appear as if I am awake, even though I'm not.

Dostoevsky it is.

hand cam photo 3, 2001

Thinkpad T20

2003-01-12T03:25:25Z

A bad pixel keeps appearing; disappearing; and then re-appearing on the new ThinkPad. Heartburn ensues.

Uncertain how much longer the smooth veneer of personality will hold up. Opportunists are already trying to wedge crowbars into the cracks.

Bland.

2003-01-08T16:35:33Z

Finished (finally) some flashram stuff. Ready to ship it off.

Gave up on my father's PC (forcibley introduced into my work area after his uninvited appearance). His new 60gb drive may be hosed, as Maxtor's Max Blast II utility chokes trying to partition his drive. I've had this damn machine for three weeks and only got a chance to look at it yesterday.

Can't stop sneezing this morning.

Will the U.S. conscript soldiers before 2010?

Completely Optional.

2003-01-06T17:09:41Z

So I'm walking down the hallway at work and I come across a piece of raw bacon on the floor.

---

Apparently someone heard me several times on the phone with UPS trying to straighten out a shipping disaster in which a laptop I sent via them was completely obliterated (of course, the claims process is never straight-forward). This morning, a huge (giftwrapped!) package was on my desk when I came in. It weighed a squintillion pounds. So I rip off the wrapping paper, and it's a completely demolished desktop PC. There is a fist-sized puncture wound in the case!

irc.openprojects.net

2003-01-06T15:25:20Z

Not that it would matter. No one has uttered a phonetic grunt in any of the channels I idle in for months.

---

"Burnt out" doesn't describe it. Then again, what would?

Burn your notebooks.

2003-01-03T15:06:35Z

... BitchX: Servers exhausted. Restarting.
... Connecting to port 6667 of server calvino.openprojects.net [refnum 0]
... Unable to connect to port 6667 of server calvino.openprojects.net: unknown
          host

A pathetic attempt at snow last night only lightly dusted the birdshit on my car.

Up late again for no good reason. This time I was reading an inferior quality Star Wars trade paperback on the john. I'm not getting very much done.

Some fun shit came in the mail yesterday. Reminds me that I need to ship some stuff out.

Snow predicted today!

2003-01-02T15:37:33Z

Never eat raisin bran at 2:30am.

The Nikon 4500 will soon be mine. Representing the final obstacle in my decades-long bid for total municipal domination; the acquisition of this digital camera will ensure a smooth transition from the old regime. Next: State politics!

I have hit and miss success with Hong Kong DVDs. Last year I ordered Jin Roh and the entire Lain series-- in Region 0, Japanese audio/English subtitles -- and had really good luck with great quality disks and no defects. Then I got confident and ordered a 3-disk of the Soultakers series. Horrible translation that beared only phonetic resemblence to English (though the disk played fine in my PS2)! I shrugged off that meager investment ($9.95) and tried again with Osamu Tezuka's Metroporisu ($4.95 from Malaysia). Another great transfer (though it was full screen and seemed to have some clipping) with a basically nonsensical translation. After springing the big bucks for a few Pioneer releases, I experienced a moment of weakness and plopped down another $4.95 for a Malaysian copy of Spirited Away (not yet available domestically). Great translation this time -- but THE THING WOULDN'T PLAY CORRECTLY IN MY PS2. There was an odd slow motion/stuttering effect that
made watching the flick impossible. I donated it to a friend who took it home and it played fine on his cheapo (but dedicated) DVD head unit. Am I really saving money?

At Christmas someone was kind enough to get me Robert A. Stinnett's Day of Deceit: The Truth About FDR and Pearl Harbor. Buh.

Recent weather:

Low 20s. Low 40s. Low 20s. High 50s. Low 20s. Low 50s. Low 60s. Low 30s. Low 20s.

Barf.

BBS100

2002-12-19T02:20:04Z

http://www.heiho.net/bbs100