GavinHollinger.com

GPSBabel

noreply@blogger.com (Gavin Hollinger) — Sun, 13 May 2012 17:23:00 +0000

I like to log some of the places I go with the GPS in my phone or other devices to measure the distance I have walked and such. Sometimes, I forget to turn it off or want to process the log files in some way to share them with someone. http://www.gpsbabel.org/ is a really cool program to process GPS data sets so they contain only the data you want and in the format you want.

It runs on Linux, Windows and MAC.

Here is the method I used to install gpsbabel-1.4.3 on Ubuntu 10.04.4 LTS.

Download gpsbabel-1.4.3.tar.gz then open a terminal

cd /usr/src

mv /home/user/Downloads/gpsbabel-1.4.3.tar.gz ./

tar -xvzf gpsbabel-1.4.3.tar.gz

rm gpsbabel-1.4.3.tar.gz

cd gpsbabel-1.4.3/

./configure

make

make install

That should have been the end of it but for some reason I was getting the error:

"bash: /usr/bin/gpsbabel: No such file or directory" so I fixed that with:

ln -s /usr/local/bin/gpsbabel /usr/bin/gpsbabel

Links:

KML format

Simplify Filter

Remove Waypoints

Use the Track Filter to extract points between two times

Examples from myself, the docs and the net:

Shrink a huge track log down to 50 points, and avoid creating tons of waypoints:

gpsbabel -t -i kml -f HUGE.kml -x nuketypes,waypoints,routes -x simplify,count=50 -o kml,track=1,points=0 -F SMALL.kml

gpsbabel -t -i kml -f HUGE.kml -x nuketypes,waypoints,routes -x simplify,crosstrack,error=2m -x position,distance=1m -x track,pack,split,title="ACTIVE LOG # %Y%m%d%h" -o kml,points=0 -F SMALL.kml

Add a time value to a trackpoint, if the trackpoint contains no time value. Start at the 6 th of May, 2010 at 6 AM and increment 5 seconds between each trackpoint:
gpsbabel -i kml -f in.kml -x track,faketime=20100506060000+5 -o gtrnctr -F out.tcx

To get only the parts of a track that were mapped on 20 July 2005 between 10 AM and 6 PM, use this command line:
gpsbabel -t -i gpx -f in.gpx -x track,start=2005072010,stop=2005072018 -o gpx -F out.gpx

Changing audio codec using ffmpeg

noreply@blogger.com (Gavin Hollinger) — Sun, 26 Feb 2012 04:24:00 +0000

I like to download 1080p video from http://www.lds.org/ but the audio codec they use does not work on the Samsung LN46C530F1FXZA TV I have. Streaming is not supported natively on that model so I download the video with my PC, and then convert the audio and copy it to my USB flash drive in one step using the following ffmpeg command.

ffmpeg -threads 2 -i /home/USER/Downloads/Example-1080p-eng.mp4 -vcodec copy -acodec libmp3lame -ab 160kb -ac 2 -ar 44100 /media/FlashDisk/Example-1080p-eng.mp4

Virtual Interfaces, vlan tags, Ethernet bridging, spanning tree, and openvpn on linux.

noreply@blogger.com (Gavin Hollinger) — Fri, 24 Feb 2012 17:32:00 +0000

This post is just a collection of rough code snips and URL's to jog my memory on a few concepts in the future. It is NOT a how to and will probably not be useful to anyone else but you never know. The /etc/network/interfaces snip below was part of a creative workaround for an unreliable and out dated wide area Ethernet network I had to deal with that had no money or desire for repair or upgrade. It has now been removed from service but at the time the main network would go down for extended periods in the winter when the rural Utah mountain tops were expensive to reach by helicopter or snow cat. Using free Linux tools I could create virtual interfaces, bridge them together with spanning tree and openvpn and route the low volume critical traffic over two low cost DSL connections to restore connectivity around the broken parts.

#/etc/network/interfaces
#Note that MTU must be reduced to 1496 due to 4 byte VLAN tag.  Some ethernet drivers do not handel this automatically.
#http://www.linuxjournal.com/node/7268/print
#As mentioned earlier, 802.1q works by tagging each frame with a 4-byte VLAN identifier. However, some Ethernet drivers assume the maximum frame size is 1,500 bytes. The addition of the 4-byte tag does not leave as much room for data. Thus, although small packets are sent and received correctly, large packets fail. The solution is either to drop the MTU of the VLAN device or to correct the assumptions of the driver.
#Patches are available on the Linux VLAN Web site for a variety of cards (see Resources). Several drivers work correctly out of the box (or tar.gz, as the case may be), including the e100 driver for Intel-based cards.
#

auto ppp0
iface ppp0 inet ppp
pre-up ifconfig eth0 0.0.0.0
pre-up ifconfig eth1 0.0.0.0
pre-up vconfig set_name_type DEV_PLUS_VID_NO_PAD
pre-up vconfig add eth0 1
pre-up vconfig add eth0 3751
pre-up vconfig add eth0 3757
pre-up vconfig add eth1 1
pre-up vconfig add eth1 3751
pre-up vconfig add eth1 3757
pre-up ifconfig eth0.1 0.0.0.0
pre-up ifconfig eth1.1 0.0.0.0
pre-up ifconfig eth0.3751 0.0.0.0
pre-up ifconfig eth1.3751 0.0.0.0
pre-up ifconfig eth0.3757 0.0.0.0
pre-up ifconfig eth1.3757 0.0.0.0
pre-up brctl addbr br1
pre-up brctl addbr br3751
pre-up brctl addbr br3757
pre-up brctl stp br1 on
pre-up brctl stp br3751 on
pre-up brctl stp br3757 on
pre-up brctl setbridgeprio br1 0
pre-up brctl setbridgeprio br3751 0
pre-up brctl setbridgeprio br3757 0
pre-up brctl addif br1 eth0.1
pre-up brctl addif br1 eth1.1
pre-up brctl addif br3751 eth0.3751
pre-up brctl addif br3751 eth1.3751
pre-up brctl addif br3757 eth0.3757
pre-up brctl addif br3757 eth1.3757
pre-up ifconfig br1 172.31.141.126
pre-up ifconfig br1 broadcast 172.31.141.127 netmask 255.255.255.240
pre-up ifconfig br1 mtu 1496
pre-up ifconfig br3751 192.168.141.126
pre-up ifconfig br3751 broadcast 192.168.143.255 netmask 255.255.252.0
pre-up ifconfig br3751 mtu 1496
pre-up ifconfig br3757 192.168.0.2
pre-up ifconfig br3757 broadcast 192.168.0.255 netmask 255.255.255.0
pre-up ifconfig br3757 mtu 1496
pre-up sleep 45s
post-down ifconfig br3757 mtu 1500
post-down ifconfig br3757 0.0.0.0
post-down ifconfig br3757 down
post-down ifconfig br3751 mtu 1500
post-down ifconfig br3751 0.0.0.0
post-down ifconfig br3751 down
post-down ifconfig br1 mtu 1500
post-down ifconfig br1 0.0.0.0
post-down ifconfig br1 down
post-down brctl delif br3757 eth1.3757
post-down brctl delif br3757 eth0.3757
post-down brctl delif br3751 eth1.3751
post-down brctl delif br3751 eth0.3751
post-down brctl delif br1 eth1.1
post-down brctl delif br1 eth0.1
post-down brctl setbridgeprio br3757 100
post-down brctl setbridgeprio br3751 100
post-down brctl setbridgeprio br1 100
post-down brctl stp br3757 off
post-down brctl stp br3751 off
post-down brctl stp br1 off
post-down brctl delbr br3757
post-down brctl delbr br3751
post-down brctl delbr br1
post-down ifconfig eth1.3757 down
post-down ifconfig eth0.3757 down
post-down ifconfig eth1.3751 down
post-down ifconfig eth0.3751 down
post-down ifconfig eth1.1 down
post-down ifconfig eth0.1 down
post-down vconfig rem eth1.3757
post-down vconfig rem eth1.3751
post-down vconfig rem eth1.1
post-down vconfig rem eth0.3757
post-down vconfig rem eth0.3751
post-down vconfig rem eth0.1
post-down vconfig set_name_type VLAN_PLUS_VID_NO_PAD
post-down ifconfig eth1 down
post-down ifconfig eth0 down
provider dsl-qwest

http://openvpn.net/index.php/open-source/documentation/install.html?start=1
http://library.linode.com/networking/openvpn/ubuntu-10.04-lucid
https://help.ubuntu.com/10.10/serverguide/C/openvpn.html
http://openvpn.net/index.php/open-source/documentation/howto.html#startup

On Windows run as admin or it service. Otherwise, it cannot apply forced route data.
http://openvpn.se/files/howto/openvpn-howto_run_openvpn_as_nonadmin.html
HKEY_LOCAL_MACHINE\SOFTWARE\OpenVPN-GUI\allow_service

Create new host key:
cd /etc/openvpn/easy-rsa
source vars
./pkitool new-host-name

Revoke old host key:

cd /etc/openvpn/easy-rsa
source vars
./revoke-full old-host-name

Updates funny

noreply@blogger.com (Gavin Hollinger) — Tue, 21 Feb 2012 03:42:00 +0000

Using TrueCrypt NTFS/Windows disks in Linux

noreply@blogger.com (Gavin Hollinger) — Sat, 07 Jan 2012 10:25:00 +0000

If you are running Linux, full disk encryption of many many types has been around for years. Here are some links to get you started:
https://help.ubuntu.com/community/EncryptedFilesystems
http://archimedesden.wordpress.com/2011/10/21/yet-another-full-disk-encryption-with-ubuntu-11-10/
I like these notes on key storage a lot:
https://wiki.archlinux.org/index.php/System_Encryption_with_LUKS#External_Storage_on_a_USB_Drive

The rest of this post is for the poor people forced to run Windows on machines that might easily be stolen, but still want to use the NTFS disk in Linux. Many thanks to the TrueCrypt folk for thinking of us Linux users and making the Windows software available on a donation basis.

I am running TrueCrypt System Encryption version 7.1 on my NTFS Windows disks, and quite pleased with the performance of it. The steps below show how to mount such a drive in Knoppix 6.7 in the event you need to edit your files in your favorite live Linux distribution.

The full docs are here:
http://www.truecrypt.org/docs/
Download the files. 32 or 64 bit / graphic or text depending on your needs:
wget http://www.truecrypt.org/download/truecrypt-7.1-linux-console-x64.tar.gz
wget http://www.truecrypt.org/download/truecrypt-7.1-linux-console-x86.tar.gz
wget http://www.truecrypt.org/download/truecrypt-7.1-linux-x86.tar.gz
wget http://www.truecrypt.org/download/truecrypt-7.1-linux-x64.tar.gz
Extract the file:
tar -xvzf truecrypt-7.1-linux-console-x86.tar.gz
Install:
./truecrypt-7.1-setup-console-x86
Read the help for your version:
truecrypt -t -h
Mount sda1 on /mnt:
truecrypt -t -k "" --protect-hidden=no -m=system /dev/sda1 /mnt
View / Edit your files as needed.
Unmount sda1:
truecrypt -t -d /dev/sda1
Uninstall TrueCrypt:
sudo bash
truecrypt-uninstall.sh

$ truecrypt -h
Usage: truecrypt [--auto-mount <str>] [--backup-headers] [--background-task] [-C] [-c] [--create-keyfile] [--delete-token-keyfiles] [-d] [--display-password] [--encryption <str>] [--explore] [--export-token-keyfile] [--filesystem <str>] [-f] [--fs-options <str>] [--hash <str>] [-h] [--import-token-keyfiles] [-k <str>] [-l] [--list-token-keyfiles] [--load-preferences] [--mount] [-m <str>] [--new-keyfiles <str>] [--new-password <str>] [--non-interactive] [-p <str>] [--protect-hidden <str>] [--protection-keyfiles <str>] [--protection-password <str>] [--random-source <str>] [--restore-headers] [--save-preferences] [--quick] [--size <str>] [--slot <str>] [--test] [-t] [--token-lib <str>] [-v] [--version] [--volume-properties] [--volume-type <str>] [Volume path] [Mount point]
--auto-mount=<str>             Auto mount device-hosted/favorite volumes
--backup-headers               Backup volume headers
--background-task              Start Background Task
-C, --change                   Change password or keyfiles
-c, --create                   Create new volume
--create-keyfile               Create new keyfile
--delete-token-keyfiles        Delete security token keyfiles
-d, --dismount                 Dismount volume
--display-password             Display password while typing
--encryption=<str>             Encryption algorithm
--explore                      Open explorer window for mounted volume
--export-token-keyfile         Export keyfile from security token
--filesystem=<str>             Filesystem type
-f, --force                    Force mount/dismount/overwrite
--fs-options=<str>             Filesystem mount options
--hash=<str>                   Hash algorithm
-h, --help                     Display detailed command line help
--import-token-keyfiles        Import keyfiles to security token
-k, --keyfiles=<str>           Keyfiles
-l, --list                     List mounted volumes
--list-token-keyfiles          List security token keyfiles
--load-preferences             Load user preferences
--mount                        Mount volume interactively
-m, --mount-options=<str>     TrueCrypt volume mount options
--new-keyfiles=<str>           New keyfiles
--new-password=<str>           New password
--non-interactive              Do not interact with user
-p, --password=<str>           Password
--protect-hidden=<str>         Protect hidden volume
--protection-keyfiles=<str>    Keyfiles for protected hidden volume
--protection-password=<str>    Password for protected hidden volume
--random-source=<str>          Use file as source of random data
--restore-headers              Restore volume headers
--save-preferences             Save user preferences
--quick                        Enable quick format
--size=<str>                   Size in bytes
--slot=<str>                   Volume slot number
--test                         Test internal algorithms
-t, --text                     Use text user interface
--token-lib=<str>              Security token library
-v, --verbose                  Enable verbose output
--version                      Display version information
--volume-properties            Display volume properties
--volume-type=<str>            Volume type

Synopsis:

truecrypt [OPTIONS] COMMAND
truecrypt [OPTIONS] VOLUME_PATH [MOUNT_DIRECTORY]

Commands:

--auto-mount=devices|favorites
Auto mount device-hosted or favorite volumes.

--backup-headers[=VOLUME_PATH]
Backup volume headers to a file. All required options are requested from the
user.

-c, --create[=VOLUME_PATH]
Create a new volume. Most options are requested from the user if not specified
on command line. See also options --encryption, -k, --filesystem, --hash, -p,
--random-source, --quick, --size, --volume-type. Note that passing some of the
options may affect security of the volume (see option -p for more information).

Inexperienced users should use the graphical user interface to create a hidden
volume. When using the text user interface, the following procedure must be
followed to create a hidden volume:
1) Create an outer volume with no filesystem.
2) Create a hidden volume within the outer volume.
3) Mount the outer volume using hidden volume protection.
4) Create a filesystem on the virtual device of the outer volume.
5) Mount the new filesystem and fill it with data.
6) Dismount the outer volume.
If at any step the hidden volume protection is triggered, start again from 1).

--create-keyfile[=FILE_PATH]
Create a new keyfile containing pseudo-random data.

-C, --change[=VOLUME_PATH]
Change a password and/or keyfile(s) of a volume. Most options are requested
from the user if not specified on command line. PKCS-5 PRF HMAC hash
algorithm can be changed with option --hash. See also options -k,
--new-keyfiles, --new-password, -p, --random-source.

-d, --dismount[=MOUNTED_VOLUME]
Dismount a mounted volume. If MOUNTED_VOLUME is not specified, all
volumes are dismounted. See below for description of MOUNTED_VOLUME.

--delete-token-keyfiles
Delete keyfiles from security tokens. See also command --list-token-keyfiles.

--export-token-keyfile
Export a keyfile from a security token. See also command --list-token-keyfiles.

--import-token-keyfiles
Import keyfiles to a security token. See also option --token-lib.

-l, --list[=MOUNTED_VOLUME]
Display a list of mounted volumes. If MOUNTED_VOLUME is not specified, all
volumes are listed. By default, the list contains only volume path, virtual
device, and mount point. A more detailed list can be enabled by verbose
output option (-v). See below for description of MOUNTED_VOLUME.

--list-token-keyfiles
Display a list of all available security token keyfiles. See also command
--import-token-keyfiles.

--mount[=VOLUME_PATH]
Mount a volume. Volume path and other options are requested from the user
if not specified on command line.

--restore-headers[=VOLUME_PATH]
Restore volume headers from the embedded or an external backup. All required
options are requested from the user.

--save-preferences
Save user preferences.

--test
Test internal algorithms used in the process of encryption and decryption.

--version
Display program version.

--volume-properties[=MOUNTED_VOLUME]
Display properties of a mounted volume. See below for description of
MOUNTED_VOLUME.

MOUNTED_VOLUME:
Specifies a mounted volume. One of the following forms can be used:
1) Path to the encrypted TrueCrypt volume.
2) Mount directory of the volume's filesystem (if mounted).
3) Slot number of the mounted volume (requires --slot).

Options:

--display-password
Display password characters while typing.

--encryption=ENCRYPTION_ALGORITHM
Use specified encryption algorithm when creating a new volume.

--filesystem=TYPE
Filesystem type to mount. The TYPE argument is passed to mount(8) command
with option -t. Default type is 'auto'. When creating a new volume, this
option specifies the filesystem to be created on the new volume (only 'FAT'
and 'none' TYPE is allowed). Filesystem type 'none' disables mounting or
creating a filesystem.

--force
Force mounting of a volume in use, dismounting of a volume in use, or
overwriting a file. Note that this option has no effect on some platforms.

--fs-options=OPTIONS
Filesystem mount options. The OPTIONS argument is passed to mount(8)
command with option -o when a filesystem on a TrueCrypt volume is mounted.
This option is not available on some platforms.

--hash=HASH
Use specified hash algorithm when creating a new volume or changing password
and/or keyfiles. This option also specifies the mixing PRF of the random
number generator.

-k, --keyfiles=KEYFILE1[,KEYFILE2,KEYFILE3,...]
Use specified keyfiles when mounting a volume or when changing password
and/or keyfiles. When a directory is specified, all files inside it will be
used (non-recursively). Multiple keyfiles must be separated by comma.
Use double comma (,,) to specify a comma contained in keyfile's name.
Keyfile stored on a security token must be specified as
token://slot/SLOT_NUMBER/file/FILENAME. An empty keyfile (-k "") disables
interactive requests for keyfiles. See also options --import-token-keyfiles,
--list-token-keyfiles, --new-keyfiles, --protection-keyfiles.

--load-preferences
Load user preferences.

-m, --mount-options=OPTION1[,OPTION2,OPTION3,...]
Specifies comma-separated mount options for a TrueCrypt volume:
headerbak: Use backup headers when mounting a volume.
nokernelcrypto: Do not use kernel cryptographic services.
readonly|ro: Mount volume as read-only.
system: Mount partition using system encryption.
timestamp|ts: Do not restore host-file modification timestamp when a volume
   is dismounted (note that the operating system under certain circumstances
   does not alter host-file timestamps, which may be mistakenly interpreted
   to mean that this option does not work).
See also option --fs-options.

--new-keyfiles=KEYFILE1[,KEYFILE2,KEYFILE3,...]
Add specified keyfiles to a volume. This option can only be used with command
-C.

--new-password=PASSWORD
Specifies a new password. This option can only be used with command -C.

-p, --password=PASSWORD
Use specified password to mount/open a volume. An empty password can also be
specified (-p ""). Note that passing a password on the command line is
potentially insecure as the password may be visible in the process list
(see ps(1)) and/or stored in a command history file or system logs.

--protect-hidden=yes|no
Write-protect a hidden volume when mounting an outer volume. Before mounting
the outer volume, the user will be prompted for a password to open the hidden
volume. The size and position of the hidden volume is then determined and the
outer volume is mounted with all sectors belonging to the hidden volume
protected against write operations. When a write to the protected area is
prevented, the whole volume is switched to read-only mode. Verbose list
(-v -l) can be used to query the state of the hidden volume protection.
Warning message is displayed when a volume switched to read-only is being
dismounted.

--protection-keyfiles=KEYFILE1[,KEYFILE2,KEYFILE3,...]
Use specified keyfiles to open a hidden volume to be protected. This option
may be used only when mounting an outer volume with hidden volume protected.
See also options -k and --protect-hidden.

--protection-password=PASSWORD
Use specified password to open a hidden volume to be protected. This option
may be used only when mounting an outer volume with hidden volume protected.
See also options -p and --protect-hidden.

--quick
Do not encrypt free space when creating a device-hosted volume. This option
must not be used when creating an outer volume.

--random-source=FILE
Use FILE as a source of random data (e.g., when creating a volume) instead
of requiring the user to type random characters.

--slot=SLOT
Use specified slot number when mounting, dismounting, or listing a volume.

--size=SIZE
Use specified size in bytes when creating a new volume.

-t, --text
Use text user interface. Graphical user interface is used by default if
available. This option must be specified as the first argument.

--token-lib=LIB_PATH
Use specified PKCS #11 security token library.

--volume-type=TYPE
Use specified volume type when creating a new volume. TYPE can be 'normal'
or 'hidden'. See option -c for more information on creating hidden volumes.

-v, --verbose
Enable verbose output.

IMPORTANT:

If you want to use TrueCrypt, you must follow the security requirements and
security precautions listed in chapter 'Security Requirements and Precautions'
in the TrueCrypt documentation (file 'TrueCrypt User Guide.pdf').

Examples:

Create a new volume:
truecrypt -t -c

Mount a volume:
truecrypt volume.tc /media/truecrypt1

Mount a volume as read-only, using keyfiles:
truecrypt -m ro -k keyfile1,keyfile2 volume.tc

Mount a volume without mounting its filesystem:
truecrypt --filesystem=none volume.tc

Mount a volume prompting only for its password:
truecrypt -t -k "" --protect-hidden=no volume.tc /media/truecrypt1

Dismount a volume:
truecrypt -d volume.tc

Dismount all mounted volumes:
truecrypt -d

Below are notes from installing TrueCrypt System Encryption on Windows:

TIP: If you want to avoid burning the TrueCrypt Rescue Disk.iso file to CD you can just copy it to some other secure computer and then loop mount the iso in Windows using SlySoft Virtual CloneDrive 5450 to skip the verify process. DO NOT DO THIS UNLESS YOU ARE SURE YOU CAN LATER BURN THE DISK YOU NEED IN AN EMERGENCY!

This is the info that TrueCrypt tells you to print at various stages of the install:

IMPORTANT NOTES -- PLEASE READ OR PRINT (click 'Print'):

Note that none of your files will be encrypted before you successfully restart your computer and start Windows. Thus, if anything fails, your data will NOT be lost. However, if something does go wrong, you might encounter difficulties in starting Windows. Therefore, please read (and, if possible, print) the following guidelines on what to do if Windows cannot start after you restart the computer.

What to Do If Windows Cannot Start

------------------------------------------------

Note: These instructions are valid only if you have not started encrypting.

- If Windows does not start after you enter the correct password (or if you repeatedly enter the correct password but TrueCrypt says that the password is incorrect), do not panic. Restart (power off and on) the computer, and in the TrueCrypt Boot Loader screen, press the Esc key on your keyboard (and if you have multiple systems, choose which to start). Then Windows should start (provided that it is not encrypted) and TrueCrypt will automatically ask whether you want to uninstall the pre-boot authentication component. Note that the previous steps do NOT work if the system partition/drive is encrypted (nobody can start Windows or access encrypted data on the drive without the correct password even if he or she follows the previous steps).

- If the previous steps do not help or if the TrueCrypt Boot Loader screen does not appear (before Windows starts), insert the TrueCrypt Rescue Disk into your CD/DVD drive and restart your computer. If the TrueCrypt Rescue Disk screen does not appear (or if you do not see the 'Repair Options' item in the 'Keyboard Controls' section of the TrueCrypt Rescue Disk screen), it is possible that your BIOS is configured to attempt to boot from hard drives before CD/DVD drives. If that is the case, restart your computer, press F2 or Delete (as soon as you see a BIOS start-up screen), and wait until a BIOS configuration screen appears. If no BIOS configuration screen appears, restart (reset) the computer again and start pressing F2 or Delete repeatedly as soon as you restart (reset) the computer. When a BIOS configuration screen appears, configure your BIOS to boot from the CD/DVD drive first (for information on how to do so, please refer to the documentation for your BIOS/motherboard or contact your computer vendor's technical support team for assistance). Then restart your computer. The TrueCrypt Rescue Disk screen should appear now. In the TrueCrypt Rescue Disk screen, select 'Repair Options' by pressing F8 on your keyboard. From the 'Repair Options' menu, select 'Restore original system loader'. Then remove the Rescue Disk from your CD/DVD drive and restart your computer. Windows should start normally (provided that it is not encrypted).

Note that the previous steps do NOT work if the system partition/drive is encrypted (nobody can start Windows or access encrypted data on the drive without the correct password even if he or she follows the previous steps).

Note that even if you lose your TrueCrypt Rescue Disk and an attacker finds it, he or she will NOT be able to decrypt the system partition or drive without the correct password.

IF POSSIBLE, PLEASE PRINT THIS TEXT (click 'Print' below).

How and When to Use TrueCrypt Rescue Disk (After Encrypting)

-----------------------------------------------------------------------------------

I. How to Boot TrueCrypt Rescue Disk

To boot a TrueCrypt Rescue Disk, insert it into your CD/DVD drive and restart your computer. If the TrueCrypt Rescue Disk screen does not appear (or if you do not see the 'Repair Options' item in the 'Keyboard Controls' section of the screen), it is possible that your BIOS is configured to attempt to boot from hard drives before CD/DVD drives. If that is the case, restart your computer, press F2 or Delete (as soon as you see a BIOS start-up screen), and wait until a BIOS configuration screen appears. If no BIOS configuration screen appears, restart (reset) the computer again and start pressing F2 or Delete repeatedly as soon as you restart (reset) the computer. When a BIOS configuration screen appears, configure your BIOS to boot from the CD/DVD drive first (for information on how to do so, please refer to the documentation for your BIOS/motherboard or contact your computer vendor's technical support team for assistance). Then restart your computer. The TrueCrypt Rescue Disk screen should appear now. Note: In the TrueCrypt Rescue Disk screen, you can select 'Repair Options' by pressing F8 on your keyboard.

II. When and How to Use TrueCrypt Rescue Disk (After Encrypting)

1) If the TrueCrypt Boot Loader screen does not appear after you start your computer (or if Windows does not boot), the TrueCrypt Boot Loader may be damaged. The TrueCrypt Rescue Disk allows you to restore it and thus to regain access to your encrypted system and data (however, note that you will still have to enter the correct password then). In the Rescue Disk screen, select 'Repair Options' > 'Restore TrueCrypt Boot Loader'. Then press 'Y' to confirm the action, remove the Rescue Disk from your CD/DVD drive and restart your computer.

2) If you repeatedly enter the correct password but TrueCrypt says that the password is incorrect, the master key or other critical data may be damaged. The TrueCrypt Rescue Disk allows you to restore them and thus to regain access to your encrypted system and data (however, note that you will still have to enter the correct password then). In the Rescue Disk screen, select 'Repair Options' > 'Restore key data'. Then enter your password, press 'Y' to confirm the action, remove the Rescue Disk from your CD/DVD drive, and restart your computer.

3) If the TrueCrypt Boot Loader is damaged, you can avoid running it by booting directly from the TrueCrypt Rescue Disk. Insert your Rescue Disk into your CD/DVD drive and then enter your password in the Rescue Disk screen.

4) If Windows is damaged and cannot start, the TrueCrypt Rescue Disk allows you to permanently decrypt the partition/drive before Windows starts. In the Rescue Disk screen, select 'Repair Options' > 'Permanently decrypt system partition/drive'. Enter the correct password and wait until decryption is complete. Then you can e.g. boot your MS Windows setup CD/DVD to repair your Windows installation.

Note: Alternatively, if Windows is damaged (cannot start) and you need to repair it (or access files on it), you can avoid decrypting the system partition/drive by following these steps: If you have multiple operating systems installed on your computer, boot the one that does not require pre-boot authentication. If you do not have multiple operating systems installed on your computer, you can boot a WinPE or BartPE CD/DVD or you can connect your system drive as a secondary or external drive to another computer and then boot the operating system installed on the computer. After you boot a system, run TrueCrypt, click 'Select Device', select the affected system partition, click 'OK', select 'System' > 'Mount Without Pre-Boot Authentication', enter your pre-boot authentication password and click 'OK'. The partition will be mounted as a regular TrueCrypt volume (data will be on-the-fly decrypted/encrypted in RAM on access, as usual).

Note that even if you lose your TrueCrypt Rescue Disk and an attacker finds it, he or she will NOT be able to decrypt the system partition or drive without the correct password.

shred

noreply@blogger.com (Gavin Hollinger) — Tue, 27 Dec 2011 20:48:00 +0000

If you have ever wondered how to remove your personal data from old computers before selling them or throwing them away, shred is included in most linux distributions and does a nice enough job.

Boot using your favorite linux. Ubuntu Knoppix Debian
If you have multiple disks, check twice: fdisk -l
Stop using the disk: umount /dev/sdi1
Read the caution (below) and in the man page: man shred
Shred it only one time, and fill with zeros: shred -n1 -v -z /dev/sdi

You may also like:
Darik's Boot And Nuke

# fdisk -l

Disk /dev/sdi: 10.2 GB, 10248118272 bytes
255 heads, 63 sectors/track, 1245 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x9da19da1

   Device Boot      Start         End      Blocks   Id  System
/dev/sdi1   *           1        1244     9992398+   7  HPFS/NTFS


Write one pass of random data to the entire disk, then erase it by writing zeros:
shred -n1 -v -z /dev/sdi


The same thing works on individual files:  
# shred -n9 -v -z Junk.txt
shred: Junk.txt: pass 1/10 (random)...
shred: Junk.txt: pass 2/10 (555555)...
shred: Junk.txt: pass 3/10 (000000)...
shred: Junk.txt: pass 4/10 (6db6db)...
shred: Junk.txt: pass 5/10 (random)...
shred: Junk.txt: pass 6/10 (ffffff)...
shred: Junk.txt: pass 7/10 (492492)...
shred: Junk.txt: pass 8/10 (aaaaaa)...
shred: Junk.txt: pass 9/10 (random)...
shred: Junk.txt: pass 10/10 (000000)...




CAUTION: Note that shred relies on a very  important  assumption:  that
the  file system overwrites data in place.  This is the traditional way
to do things, but many modern file system designs do not  satisfy  this
assumption.   The following are examples of file systems on which shred
is not effective, or is not guaranteed to  be  effective  in  all  file
system modes:

* log-structured or journaled file systems, such as those supplied with
AIX and Solaris (and JFS, ReiserFS, XFS, Ext3, etc.)

* file systems that write redundant data and  carry  on  even  if  some
writes fail, such as RAID-based file systems

*  file  systems  that  make snapshots, such as Network Appliance's NFS
server

* file systems that cache in temporary locations, such as NFS version 3
clients

* compressed file systems

In  the  case  of  ext3 file systems, the above disclaimer applies (and
shred is thus of limited  effectiveness)  only  in  data=journal  mode,
which  journals  file  data  in addition to just metadata.  In both the
data=ordered (default) and data=writeback modes, shred works as  usual.
Ext3  journaling  modes  can  be  changed  by adding the data=something
option to the mount  options  for  a  particular  file  system  in  the
/etc/fstab file, as documented in the mount man page (man mount).

In  addition, file system backups and remote mirrors may contain copies
of the file that cannot be removed, and that will allow a shredded file
to be recovered later.

CAcert

noreply@blogger.com (Gavin Hollinger) — Thu, 15 Dec 2011 11:09:00 +0000

Here are my notes on how to get https connections working on your *.domain.com Name Based Virtual hosts using Apache 2 and https://www.cacert.org/ This is not SNI! See http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI for that.

Generate your CSR(Certificate Signing Request) using the commands below, hit enter on everything except "Common Name" put *.domain.com in Common Name

openssl genrsa -out privkey.pem 4096
openssl req -new -key privkey.pem -out cert.csr
cat cert.csr

Log in to CAcert.org
After verifying your domain, Add a Server cert and paste the contents of cert.csr

cat privkey.pem >> asterisk.domain.com.pem

add your new cert with the privkey in one file

vi asterisk.domain.com.pem

edit apache config

cd /etc/apache2/mods-enabled/
ln -s ../mods-available/ssl.conf ssl.conf
ln -s ../mods-available/ssl.load ssl.load

vi /etc/apache2/sites-available/default

Duplicate your *:80 entry's with the following changes

NameVirtualHost *:443
<VirtualHost *:443>
SSLEngine on
SSLCertificateFile /etc/apache2/cacert.org/asterisk.domain.com.pem

/etc/init.d/apache2 restart

Importing the CAcert.org for Chromium and firefox did not work quite right for me. They still prompted invalid cert.

sudo apt-get install ca-certificates libnss3-tools
certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org" -i /usr/share/ca-certificates/cacert.org/cacert.org.crt
firefox /usr/share/ca-certificates/cacert.org/*.crt

9 Things That Motivate Employees More Than Money

noreply@blogger.com (Gavin Hollinger) — Wed, 14 Dec 2011 19:18:00 +0000

The link to this article by Ilya Pozin was broken for me today but I agree with the message from my experience, success and failures. In an effort to remember to work on some of these items in my own life, I dug it out of a cache to post it here:

9 Things That Motivate Employees More Than Money
Don't show 'em the money (even if you have it). Here are nine better ways to boost morale.
By Ilya Pozin

The ability to motivate employees is one of the greatest skills an entrepreneur can possess. Two years ago, I realized I didn’t have this skill. So I hired a CEO who did.

Josh had 12 years in the corporate world, which included running a major department at Comcast. I knew he was seasoned, but I was still skeptical at first. We were going through some tough growing pains, and I thought that a lack of cash would make it extremely difficult to improve the company morale.

I was wrong.

With his help and the help of the great team leaders he put in place, Josh not only rebuilt the culture, but also created a passionate, hard-working team that is as committed to growing and improving the company as I am.

Here are nine things I learned from him:

Be generous with praise. Everyone wants it and it’s one of the easiest things to give. Plus, praise from the CEO goes a lot farther than you might think. Praise every improvement that you see your team members make. Once you’re comfortable delivering praise one-on-one to an employee, try praising them in front of others.
Get rid of the managers. Projects without project managers? That doesn’t seem right! Try it. Removing the project lead or supervisor and empowering your staff to work together as a team rather then everyone reporting to one individual can do wonders. Think about it. What’s worse than letting your supervisor down? Letting your team down! Allowing people to work together as a team, on an equal level with their co-workers, will often produce better projects faster. People will come in early, stay late, and devote more of their energy to solving problems.
Make your ideas theirs. People hate being told what to do. Instead of telling people what you want done; ask them in a way that will make them feel like they came up with the idea. “I’d like you to do it this way” turns into “Do you think it’s a good idea if we do it this way?”
Never criticize or correct. No one, and I mean no one, wants to hear that they did something wrong. If you’re looking for a de-motivator, this is it. Try an indirect approach to get people to improve, learn from their mistakes, and fix them. Ask, “Was that the best way to approach the problem? Why not? Have any ideas on what you could have done differently?” Then you’re having a conversation and talking through solutions, not pointing a finger.
Make everyone a leader. Highlight your top performers’ strengths and let them know that because of their excellence, you want them to be the example for others. You’ll set the bar high and they’ll be motivated to live up to their reputation as a leader.
Take an employee to lunch once a week. Surprise them. Don’t make an announcement that you’re establishing a new policy. Literally walk up to one of your employees, and invite them to lunch with you. It’s an easy way to remind them that you notice and appreciate their work.
Give recognition and small rewards. These two things come in many forms: Give a shout out to someone in a company meeting for what she has accomplished. Run contests or internal games and keep track of the results on a whiteboard that everyone can see. Tangible awards that don’t break the bank can work too. Try things like dinner, trophies, spa services, and plaques.
Throw company parties. Doing things as a group can go a long way. Have a company picnic. Organize birthday parties. Hold a happy hour. Don’t just wait until the holidays to do a company activity; organize events throughout the year to remind your staff that you’re all in it together.
Share the rewards—and the pain. When your company does well, celebrate. This is the best time to let everyone know that you’re thankful for their hard work. Go out of your way to show how far you will go when people help your company succeed. If there are disappointments, share those too. If you expect high performance, your team deserves to know where the company stands. Be honest and transparent.

Ilya Pozin
Ilya Pozin founded his first company, Ciplex, at age 17. The digital marketing and creative agency caters to small businesses and startups. Ciplex, which has received the Inc.500/5000 award for two consecutive years, is headquartered in Los Angeles with offices in New York, Jerusalem, Serbia, and Germany. In 2010 Ilya hired a new CEO and moved into the President/CMO role so that he could focus on building new ventures. Originally from Russia, he currently resides in L.A. with his wife and daughter.

Ubuntu Live CD Customization

noreply@blogger.com (Gavin Hollinger) — Sat, 15 Oct 2011 08:42:00 +0000

Not sure what part of this failed, but my customized ISO file would not boot from USB flash. No time now but I will try again and correct someday.

This was tested using Ubuntu 11.10 (Oneiric Ocelot)

sudo bash
cd
apt-get install squashfs-tools genisoimage
mkdir ~/livecdtmp
cp -a /ubuntu-11.10-desktop-amd64.iso ./livecdtmp/
cd livecdtmp/
mkdir mnt
mount -o loop ubuntu-11.10-desktop-amd64.iso mnt
rsync --exclude=/casper/filesystem.squashfs -a mnt/ extract-cd
unsquashfs mnt/casper/filesystem.squashfs
mv squashfs-root edit
cp /etc/resolv.conf edit/etc/
cp /etc/hosts edit/etc/
mount --bind /dev/ edit/dev
chroot edit

mount -t proc none /proc
mount -t sysfs none /sys
mount -t devpts none /dev/pts
export HOME=/root
export LC_ALL=C
dpkg-reconfigure tzdata

vi /etc/apt/sources.list

# /etc/apt/sources.list
deb http://archive.ubuntu.com/ubuntu/ oneiric main restricted universe multiverse
deb-src http://archive.ubuntu.com/ubuntu/ oneiric main restricted universe multiverse
deb http://security.ubuntu.com/ubuntu/ oneiric-security main restricted universe multiverse
deb-src http://security.ubuntu.com/ubuntu/ oneiric-security main restricted universe multiverse
deb http://archive.ubuntu.com/ubuntu/ oneiric-updates main restricted universe multiverse
deb-src http://archive.ubuntu.com/ubuntu/ oneiric-updates main restricted universe multiverse
# Google testing repository
deb http://dl.google.com/linux/deb/ testing non-free

wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | apt-key add -

apt-get update

apt-get upgrade

apt-get install mc aptitude sipcalc vim ssh moc chromium-browser wine flashplugin-installer picasa vlc mozilla-plugin-vlc

apt-get -y install gstreamer0.10-ffmpeg gstreamer0.10-plugins-bad gstreamer0.10-plugins-bad-multiverse gstreamer0.10-plugins-ugly

apt-get install ubuntu-restricted-extras

vi /etc/default/rcS

If you run Windows and do not like the clock wrong later:
vi /etc/default/rcS
Change UTC=yes to UTC=no
ntpdate us.pool.ntp.org

aptitude clean
rm -rf /tmp/* ~/.bash_history

rm -rf /tmp/* ~/.bash_history
rm /etc/hosts
rm /etc/resolv.conf
rm /var/lib/dbus/machine-id

dpkg-divert --rename --remove /sbin/initctl

umount /proc || umount -lf /proc
umount /sys
umount /dev/pts
exit
umount edit/dev

chmod +w extract-cd/casper/filesystem.manifest
chroot edit dpkg-query -W --showformat='${Package} ${Version}\n' > extract-cd/casper/filesystem.manifest
cp extract-cd/casper/filesystem.manifest extract-cd/casper/filesystem.manifest-desktop
sed -i '/ubiquity/d' extract-cd/casper/filesystem.manifest-desktop
sed -i '/casper/d' extract-cd/casper/filesystem.manifest-desktop

rm extract-cd/casper/filesystem.squashfs
mksquashfs edit extract-cd/casper/filesystem.squashfs -b 1048576

printf $(sudo du -sx --block-size=1 edit | cut -f1) > extract-cd/casper/filesystem.size
#vim extract-cd/README.diskdefines
cd extract-cd
rm md5sum.txt
find -type f -print0 | sudo xargs -0 md5sum | grep -v isolinux/boot.cat | sudo tee md5sum.txt
IMAGE_NAME="UBUNTU64"
mkisofs -D -r -V "$IMAGE_NAME" -cache-inodes -J -l -b isolinux/isolinux.bin -c isolinux/boot.cat -no-emul-boot -boot-load-size 4 -boot-info-table -o ../ubuntu-11.10-desktop-amd64-custom.iso .

cp ../ubuntu-11.10-desktop-amd64-custom.iso /media/934B-8A3B/boot/iso/
vi /media/934B-8A3B/boot/grub/grub.cfg

menuentry "ubuntu-11.10-desktop-amd64-custom.iso" {
loopback loop /boot/iso/ubuntu-11.10-desktop-amd64-custom.iso
linux (loop)/casper/vmlinuz boot=casper iso-scan/filename=/boot/iso/ubuntu-11.10-desktop-amd64-custom.iso noeject noprompt splash --
initrd (loop)/casper/initrd.lz
}

df -kh
eject /media/934B-8A3B

menuentry "persistent rw ubuntu-11.10-desktop-amd64.iso" {
loopback loop /boot/iso/ubuntu-11.10-desktop-amd64.iso
linux (loop)/casper/vmlinuz boot=casper persistent rw iso-scan/filename=/boot/iso/ubuntu-11.10-desktop-amd64.iso noeject noprompt splash --
initrd (loop)/casper/initrd.lz
}

menuentry "KNOPPIX_V6.7.1DVD-2011-09-14-EN.iso" {
loopback loop /boot/iso/KNOPPIX_V6.7.1DVD-2011-09-14-EN.iso
linux (loop)/boot/isolinux/linux boot=knoppix iso-scan/filename=/boot/iso/KNOPPIX_V6.7.1DVD-2011-09-14-EN.iso ramdisk_size=100000 lang=en vt.default_utf8=0 apm=power-off initrd=minirt.gz nomce libata.force=noncq hpsa.hpsa_allow_any=1 loglevel=1 tz=localtime
initrd (loop)/boot/isolinux/minirt.gz
}

References:
https://help.ubuntu.com/community/LiveCDCustomization
http://www.gavinhollinger.com/2011/04/boot-multiple-iso-files-on-single-usb.html
https://help.ubuntu.com/community/RestrictedFormats

sftp in a chroot jail using openssh

noreply@blogger.com (Gavin Hollinger) — Fri, 14 Oct 2011 00:56:00 +0000

For years I have used ssh, rsync and sftp to move files over the net safely encrypted.

Here is how to create a small group of users on Ubuntu 10.04.3 LTS that have SFTP access but only within a single folder "chroot".

The client:
simple, my favorite is: FileZilla

The Server:
The example below, worked for me on Ubuntu 10.04.3 LTS:

# vi /etc/ssh/sshd_config

#Subsystem sftp /usr/lib/openssh/sftp-server
Subsystem sftp internal-sftp

Match group sftponly
ChrootDirectory /sftp
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp

Group, Folder, Restart commands:
# groupadd sftponly
# mkdir /sftp
# mkdir /sftp/home

# service ssh restart

Note about folders:
In your /etc/passwd the home folder will be /home/UserName, yet, because of the chroot, when you sftp, the client will still show /home/UserName but on the physical disk in the server, the files will really be in /sftp/home/UserName

Adding users:
# useradd -b /home -M -N -g sftponly -s /bin/false UserName
# mkdir /sftp/home/UserName
# chown UserName:sftponly UserName

# passwd UserName

Generating Keys:

# mkdir /sftp/home/UserName/.ssh

# ssh-keygen -t rsa

Enter file in which to save the key:

/sftp/home/UserName/.ssh/id_rsa

# cat /sftp/home/UserName/.ssh/id_rsa.pub > /sftp/home/UserName/.ssh/authorized_keys

Removing Users:
# userdel -r UserName
# rm -rf /sftp/home/UserName

References:
http://wiki.lapipaplena.org/index.php/How_to_mount_SFTP_accesses
https://help.ubuntu.com/10.04/serverguide/C/openssh-server.html
http://www.debian-administration.org/articles/590

DD Netcat bzip

noreply@blogger.com (Gavin Hollinger) — Mon, 26 Sep 2011 02:28:00 +0000

Tonight the Kids Windows 7 PC crashed. Despite my better judgement to just load Ubuntu, I decided to take pitty on their desire to play Windows games. The large disk that origionally came with the PC was put in the media server, so I needed a way to restore from the factory partition over a network connection. I decided to adapt DD and this and this to my needs. Sample only, edit for your needs, and use only parts applicable to your system / task. DO NOT DIRECTLY CUT AND PASTE EVERYTHING WITHOUT THINKING FIRST.

Source disk info:  
fdisk -l /dev/sdc
Disk /dev/sdc: 1000.2 GB, 1000204886016 bytes
255 heads, 63 sectors/track, 121601 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0xf0615ad1

   Device Boot      Start         End      Blocks   Id  System
/dev/sdc1               1        2481    19922944   27  Unknown
/dev/sdc2   *        2481        2494      102400    7  HPFS/NTFS
/dev/sdc3            2494      121602   956734464    7  HPFS/NTFS


target disk info: fdisk -l /dev/sdb

Disk /dev/sdb: 500.1 GB, 500107862016 bytes
255 heads, 63 sectors/track, 60801 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0xf0615ad1

   Device Boot      Start         End      Blocks   Id  System




#Get the partition data
ssh -p 22 root@10.0.0.1 "dd if=/dev/sdc bs=512 count=1" | dd of=/dev/sdb bs=512 count=1
#Copy first two partitions
ssh -p 22 root@10.0.0.1 "dd if=/dev/sdc1" | dd of=/dev/sdb1
ssh -p 22 root@10.0.0.1 "dd if=/dev/sdc2" | dd of=/dev/sdb2

#delete and re-create the third one
fdisk /dev/sdb



Next time, I might try using NetCat if I do not need the encryption that ssh offers:
target disk: 
nc -l 19000 | bzip2 -d | dd bs=8225280 of=/dev/sdb count=1
source disk: 
dd bs=8225280 if=/dev/sdc count=1 | bzip2 -c | nc 10.0.0.1 19000



Another example restore from an old gzip compressed image file on a remote pc:

ssh -p 22 root@10.0.0.1 "dd if=/your/remote/backup/file\ with\ spaces\ escaped.gz" | gunzip -c -d | sudo dd of=/dev/sda

While above command is running you can check how far along it is by sending USR1 to the dd sda process id:

ps -def | grep dd | grep sda

kill -USR1 $YOUR-DD-PROCESSID

Trio V2 SL

noreply@blogger.com (Gavin Hollinger) — Tue, 13 Sep 2011 03:49:00 +0000

This is not my review, but we did buy these at big lots, and this is the unit:
http://youtu.be/3rj-BJUdfPs

So I like low cost gadgets that do not require windows to motivate the kids to work a bit. Our family got 6 of the Trio V2 SL by machspeed.com.

Video converting on Ubuntu proved easy using ffmpeg.

Audio .flv to .mp3:
ffmpeg -threads 2 -i "InYouTubeVideo.flv" -acodec libmp3lame -ab 160kb -ac 2 -ar 44100 "output.mp3"

Read all about the options using man ffmpeg

For you windows people, the included software to convert videos resulted in audio and video way out of sync. Use winff instead.

For music video, use the original video frame rate and don't change the audio at all for better audio quality and larger files:
ffmpeg -i InputFile.avi -f avi -s 220x176 -b 192k -bt 64k -vcodec mpeg4 -vtag xvid -deinterlace -acodec copy OutputFile.avi

If the source music video does not have compatible audio, I find these options usually sound well enough:
ffmpeg -i InputFile.mkv -f avi -s 220x176 -b 192k -bt 64k -vcodec mpeg4 -vtag xvid -acodec libmp3lame -ar 44100 -ab 128k -ac 2 OutputFile.avi

Make a 1 min sample 1:25-2:25 (-ss 00:01:25 -t 00:01:00) with something like:
ffmpeg -i InputFile.mkv -r 15 -f avi -s 220x176 -b 192k -bt 64k -vcodec mpeg4 -vtag xvid -deinterlace -acodec libmp3lame -ar 32000 -ab 96k -ac 2 -ss 00:01:25 -t 00:01:00 OutputFile.avi

Full Video with 15 frames per sec, leave -r 15 off to not change:
ffmpeg -i InputFile.mkv -r 15 -f avi -s 220x176 -b 192k -bt 64k -vcodec mpeg4 -vtag xvid -deinterlace -acodec libmp3lame -ar 32000 -ab 96k -ac 2 OutputFile.avi

If you get the error "Invalid pixel aspect ratio":
change the "-vcodec libxvid" to "-vcodec mpeg4 -vtag xvid". All the examples above have been edited.

The camcorder mode makes files 320x240 with 15 frames per second:
-r 15 -s 320x240

From the book:
Features
2.0” full color TFT screen (resolution:220x176)
Supports the following audio formats: MP3, WMA, OGG, APE, FLAC, WAV and
AAC
Supports the following image formats: JPEG, BMP, GIF, TIF and PNG;
Supports the following video formats: AVI, WMV (non encrypted), FLV, RM,
RMVB and 3GP;
1.3MP digital camera and video recorder
Built in microphone for voice recordings
Supports eBook files in .txt format
High Speed USB 2.0 interface

This kids had trouble charging them and turning them on/off:

Power On/Off:
To power the player on, set the power switch to the ON position, and press and hold
the PLAY button for 5 seconds, or until you see the loading and Trio screens. To
power the player off, press and hold the PLAY button for 5 seconds, or until the
device powers off, then set the power switch to the OFF position.

Charging
To charge your player, set the power switch to the ON position, and connect the
player to a powered USB port on your computer, or to a USB wall adapter. It will take
approximately 6 hours to completely charge a fully drained battery.
Note- if using a wall adapter, please ensure that the adapter is 5V, and between 400
and 600mA.

PHOTO CAMERA
On the main menu, highlight “Photo Camera” and briefly press the OK button to
enter the camera mode.
1. Briefly press the OK button to take pictures;
2. Press and hold the OK button to enter the Camera submenu.
Resolution:
320×240, 640×480, 1280×960, the default is 640×480.
Self-timer: off, 5 sec, 10 sec, 15 sec, 20 sec. default is off.
Shutter sound: off, sound 1, sound 2, sound 3; default is sound 1.
3. Use the Next or Previous buttons to zoom in or out.

VIDEO CAMERA
On the main menu, highlight “video Camera” and briefly press the OK button to enter
the video recording mode.
1.
Briefly press the OK button to start recording and press it again to pause.
Briefly press the M button to exit, the system will automatically save the file
before exiting.
2.
Press and hold the OK button to enter the Video Camera submenu.
Resolution: 320*240. This is the only setting at this time.
Record quality: high, medium, low, automatic; the default is high.

Here are some presets for you if you are using winff.

Just paste them into a new file: "Trio V2 SL machspeed.com.wff"

<?xml version="1.0"?>
<presets>
<Triov2a320>
<label>Trio V2 SL - 220x176 Highest 320k Audio - Best Quality for Music Videos</label>
<params>-f avi -s 220x176 -b 192k -bt 64k -vcodec mpeg4 -vtag xvid -acodec libmp3lame -ar 44100 -ab 320k -ac 2</params>
<extension>avi</extension>
<category>Trio V2 SL machspeed.com</category>
</Triov2a320>
<Triov2a192>
<label>Trio V2 SL - 220x176 Higher 192k Audio - Higher Quality for Music Videos</label>
<params>-f avi -s 220x176 -b 192k -bt 64k -vcodec mpeg4 -vtag xvid -acodec libmp3lame -ar 44100 -ab 192k -ac 2</params>
<extension>avi</extension>
<category>Trio V2 SL machspeed.com</category>
</Triov2a192>
<Triov2a128>
<label>Trio V2 SL - 220x176 High 128k Audio - Better for Music Videos</label>
<params>-f avi -s 220x176 -b 192k -bt 64k -vcodec mpeg4 -vtag xvid -acodec libmp3lame -ar 44100 -ab 128k -ac 2</params>
<extension>avi</extension>
<category>Trio V2 SL machspeed.com</category>
</Triov2a128>
<Triov2a128v15>
<label>Trio V2 SL - 220x176 15 frames High 128k Audio - Better for Music Videos</label>
<params>-r 15 -f avi -s 220x176 -b 192k -bt 64k -vcodec mpeg4 -vtag xvid -acodec libmp3lame -ar 44100 -ab 128k -ac 2</params>
<extension>avi</extension>
<category>Trio V2 SL machspeed.com</category>
</Triov2a128v15>
<Triov2a96>
<label>Trio V2 SL - 220x176 Medium 96k Audio - Better for Long Movies</label>
<params>-f avi -s 220x176 -b 192k -bt 64k -vcodec mpeg4 -vtag xvid -deinterlace -acodec libmp3lame -ar 32000 -ab 96k -ac 2</params>
<extension>avi</extension>
<category>Trio V2 SL machspeed.com</category>
</Triov2a96>
<Triov2a96v15>
<label>Trio V2 SL - 220x176 15 frames Medium 96k Audio - Better for Long Movies</label>
<params>-r 15 -f avi -s 220x176 -b 192k -bt 64k -vcodec mpeg4 -vtag xvid -deinterlace -acodec libmp3lame -ar 32000 -ab 96k -ac 2</params>
<extension>avi</extension>
<category>Trio V2 SL machspeed.com</category>
</Triov2a96v15>
<Triov2a96v25>
<label>Trio V2 SL - 220x176 25 frames Medium 96k Audio - Better for Long Movies</label>
<params>-r 25 -f avi -s 220x176 -b 192k -bt 64k -vcodec mpeg4 -vtag xvid -deinterlace -acodec libmp3lame -ar 32000 -ab 96k -ac 2</params>
<extension>avi</extension>
<category>Trio V2 SL machspeed.com</category>
</Triov2a96v25>
</presets>

apcupsd using ubuntu and the BE550G APC Back-UPS ES 550

noreply@blogger.com (Gavin Hollinger) — Mon, 29 Aug 2011 03:48:00 +0000

http://www.apcupsd.org/
http://www.apc.com/resource/include/techspec_index.cfm?base_sku=BE550G

#/var/log/messages

#generic-usb 0003:051D:0002.0004: hiddev96,hidraw3: USB HID v1.10 Device [APC Back-UPS ES 550 FW:843.K1 .D USB FW:K1 ] on usb-0000:00:04.0-8/input0



apt-get install apcupsd apcupsd-doc apcupsd-cgi gapcmon

vi /etc/default/apcupsd

ISCONFIGURED=yes



vi /etc/apcupsd/apcupsd.conf

UPSCABLE usb

UPSTYPE usb

DEVICE

BATTERYLEVEL 20

MINUTES 12



#send text message via Google Voice

vi /etc/apcupsd/onbattery

vi /etc/apcupsd/offbattery

/usr/local/bin/gvoice -b -e user@gmail.com -p pass send_sms 1NPANXXXXXX,1NPANXXXXXX "Power On/Off: http://HOST/cgi-bin/apcupsd/multimon.cgi" > /dev/null 2>&1



service apcupsd start



#Check the status of your UPS from shell

apcaccess status localhost:3551





#Link to cgi-bin per your /etc/apache2/sites-enabled/000-default

mkdir /XXXXXX/cgi-bin

cd /XXXXXX/cgi-bin

ln -s /usr/lib/cgi-bin/apcupsd apcupsd



http://XXXXXX/cgi-bin/apcupsd/multimon.cgi





lsusb -v



Bus 002 Device 004: ID 051d:0002 American Power Conversion Uninterruptible Power Supply

Device Descriptor:

  bLength                18

  bDescriptorType         1

  bcdUSB               1.10

  bDeviceClass            0 (Defined at Interface level)

  bDeviceSubClass         0 

  bDeviceProtocol         0 

  bMaxPacketSize0         8

  idVendor           0x051d American Power Conversion

  idProduct          0x0002 Uninterruptible Power Supply

  bcdDevice            1.06

  iManufacturer           3 APC

  iProduct                1 Back-UPS ES 550 FW:843.K1 .D USB FW:K1 

  iSerial                 2 3B1809X60412  

  bNumConfigurations      1

  Configuration Descriptor:

    bLength                 9

    bDescriptorType         2

    wTotalLength           34

    bNumInterfaces          1

    bConfigurationValue     1

    iConfiguration          0 

    bmAttributes         0xe0

      Self Powered

      Remote Wakeup

    MaxPower                2mA

    Interface Descriptor:

      bLength                 9

      bDescriptorType         4

      bInterfaceNumber        0

      bAlternateSetting       0

      bNumEndpoints           1

      bInterfaceClass         3 Human Interface Device

      bInterfaceSubClass      0 No Subclass

      bInterfaceProtocol      0 None

      iInterface              0 

        HID Device Descriptor:

          bLength                 9

          bDescriptorType        33

          bcdHID               1.10

          bCountryCode           33 US

          bNumDescriptors         1

          bDescriptorType        34 Report

          wDescriptorLength     845

         Report Descriptors: 

           ** UNAVAILABLE **

      Endpoint Descriptor:

        bLength                 7

        bDescriptorType         5

        bEndpointAddress     0x81  EP 1 IN

        bmAttributes            3

          Transfer Type            Interrupt

          Synch Type               None

          Usage Type               Data

        wMaxPacketSize     0x0006  1x 6 bytes

        bInterval              10

Device Status:     0x0000

  (Bus Powered)

Adapted from
http://forums.fedoraforum.org/showthread.php?t=213529

Scan a windows drive for virus with linux, knoppix, clamscan, f-prot

noreply@blogger.com (Gavin Hollinger) — Mon, 04 Jul 2011 06:04:00 +0000

#boot knoppix without compiz fusion
knoppix no3d
#boot knoppix in text mode
knoppix 2
#list partitions
fdisk -l
#mount partitions
mount /dev/sda1 /media/sda1

# Set your time and date if you want
apt-get update
apt-get install ntpdate
dpkg-reconfigure tzdata
ntpdate 2.us.pool.ntp.org

# Scan with http://www.clamav.net/
apt-get update
apt-get install clamav-freshclam
#Remove proxy
vi /etc/clamav/freshclam.conf
freshclam
clamscan -ir /media/sda1

#Scan with f-prot - fpupdate does not work in the unix-trial version so you will be scanning with old definitions. clamscan above will be current.
http://www.f-prot.com/download/corporate/

cd /tmp
#wget http://files.f-prot.com/files/unix-trial/fp-Linux.x86.64-ws.tar.gz
wget http://files.f-prot.com/files/unix-trial/fp-Linux-x86_32-ws.tar.gz
tar -xvzf fp-Linux-x86_32-ws.tar.gz
rm fp-Linux-x86_32-ws.tar.gz
cd f-prot
./install-f-prot.pl
fpscan /media/sda1

MBR Recovery

noreply@blogger.com (Gavin Hollinger) — Sat, 04 Jun 2011 22:44:00 +0000

If you have a special master boot record, you may want to back it up.
If something wipes it out, it is easy to restore.

Sample only, Edit for your needs, and use only parts applicable to your system / task.
DO NOT DIRECTLY CUT AND PASTE EVERYTHING.

#Mount some disk space on some other pc. As a last resort, Windows file share via samba

mkdir /media/smb

mount -t smbfs -o username=you,password=pass //10.4.4.4/share /media/smb

mkdir /media/smb/whateverfolder
cd /media/smb/whateverfolder

#Store info about your drive and partitions.
fdisk -l > fdisk-l.txt
cat fdisk-l.txt

#backup the master boot record and partition table 512, boot record only 448
dd if=/dev/sda of=MBR-PT512 bs=512 count=1

#restore
dd if=MBR-PT512 of=/dev/sda bs=512 count=1

Other notes for making drive images and backups:

To backup:
#dd if=/dev/sda conv=sync,noerror bs=64K | gzip -c > sda.img.gz
#dd_rescue -i -l dd-log -v /dev/sda - | gzip -9 -c > sda.img.gz
dd_rescue -i -l dd-log-backup -v /dev/sda sda.img

To restore your system:
#gzip -x sda.img.gz | dd of=/dev/sda conv=sync,noerror bs=64K
#gzip -x sda.img.gz | dd_rescue -i -l dd-log -v - /dev/sda
dd_rescue -i -l dd-log-restore -v sda.img /dev/sda

#RSYNC Examples
rsync -vaHxe 'ssh -p 22' --progress --compress-level=9 --numeric-ids --log-file=log-2010-10-22 --delete --delete-excluded user@host.com:/source/ /dest-path/

#DeltaCopy rsync for windows via cygwin
rsync.exe -v -rlt -z --chmod=a=rw,Da+x --delete --rsync-path=/usr/bin/rsync --rsh='ssh -p 22' "/cygdrive/C/" "user@host.com:/dest-path/"

dnsmasq OpenDNS without NXDOMAIN hijacking.

noreply@blogger.com (Gavin Hollinger) — Sat, 21 May 2011 14:42:00 +0000

I like opendns but don't like having DNS return for hosts that do not exist.

I run dnsmasq so there is one easy fix for all the computers at my home no mater the Operating System.

See bogus-nxdomain items below

vi /etc/dnsmasq.conf

# Block a big list of domains
conf-dir=/etc/dnsmasq.d
#conf-file=/etc/dnsmasq.d/blockdomains.conf

#Send most DNS lookups to opendns.com
server=208.67.222.222
server=208.67.220.220

# some ISP services only resolve internally so send all bresnan.net lookups to 69.146.17.2

server=/bresnan.net/69.146.17.2

# Block some DNS results that we do not want
bogus-nxdomain=64.94.110.11
#unregistered search.bresnan.net 216.24.138.161
bogus-nxdomain=216.24.138.161
#unregistered opendns.com site 208.69.32.132
bogus-nxdomain=208.69.32.132
#blocked opendns.com site 67.215.65.130 2010-10-22
bogus-nxdomain=67.215.65.130

# get the list of domains to block, and save to temp file
wget -O /tmp/blockdomains http://pgl.yoyo.org/as/serverlist.php?hostformat=dnsmasq&showintro=0&mimetype=plaintext

# clean it up because above sends extra html junk
grep address= /tmp/blockdomains > /etc/dnsmasq.d/blockdomains.conf

# remove temp file
rm /tmp/blockdomains

#Check results or edit / add / delete items
vi /etc/dnsmasq.d/blockdomains.conf

# Restart and test
/etc/init.d/dnsmasq restart

Links:
http://www.debian-administration.org/articles/535
http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html
http://pgl.yoyo.org/as/
http://www.opendns.com/
http://benworks.wordpress.com/2008/07/21/rogers-does-it-againhijacking-failed-dns-lookups/

Toll Free

noreply@blogger.com (Gavin Hollinger) — Mon, 02 May 2011 04:58:00 +0000

Actual 800 numbers ran out many years ago. People like them because it makes a new business look like it has been around longer. Some old people still do not know that 888, 877, 866, 855 are also toll free. You can still get them but pretty much you need to buy them from someone who already has one. I have the following 800 toll free numbers available for $5.00 per month. Includes 100 min of us 48 calls. 4 cents per min after that. These are better for business use, like recorded information, voice mail to email etc.

If you have high speed internet and want a wall mounted phone at your house without paying for a land line, these work for that too but you are better off using an 888, 877, 866, 855 because you will get less wrong number calls. I have thousands of those or can order exactly what you want for $25

Here is a site to see what your phone number spells:
http://www.phonespell.org/

Here is the list:
8002201610
8002764823
8003522949
8003887895
8004898236
8006031440
8006588297
8006798954

No longer available as of 2011-05-02:
8002160531
8002162431
8003538526
8005098379
8005168013
8005983596
8006475602
8006762879
8006798958
8006798959
8006823676
8006829263
8006829638
8006829646
8006947452
8006947498
8008386326
8008739420
8009109381
8009282957
8009286431
8009594578
8009652969

Bresnan / Optimum capacity expanded, much better speeds and a lower price.

noreply@blogger.com (Gavin Hollinger) — Mon, 02 May 2011 02:05:00 +0000

Update 13 Jan 2012 - Bresnan Communications is now Optimum.
http://www.optimum.com/
I now pay less $64.90 and speeds in Cedar City are usually much closer to the faster advertised 30 meg down 5 meg up.

Internet Poor/Inconsistent tonight - Bresnan 84720 2011-05-01 7pm

Current ISP: Bresnan
Price: $66.89/mo
Advertised Speed Download: 18 Meg
Advertised Speed Upload: 1 Meg
Zip: 84720

Current plan:
Bresnan OnLine Speed Plus.™
Now with, up to 18 Mbps downloads and 1 Mbps uploads.

Test sites:

http://www.internetpulse.net/

http://www.bresnan.com/services/high-speed_internet/speed_test

http://www.speedtest.net/

http://www.pingtest.net/

http://www.dslreports.com/speedtest?flash=1

http://www.numion.com/YourSpeed3/ImageList.php?Top100=1

http://www.numion.com/YourSpeed3/Run.php?QuickStart=MaxSpeed

http://www.numion.com/YourSpeed3/Run.php?QuickStart=SurfSpeed

Boot multiple ISO files on single USB flash drive using GRUB2 with and without persistence.

noreply@blogger.com (Gavin Hollinger) — Sat, 30 Apr 2011 22:51:00 +0000

I used ubuntu-11.04-desktop-amd64.iso to create this.
sudo bash at beginning so I don't need sudo on every command.
If you use something else, you may also need apt-cache show grub-pc

See Below for grub.cfg example, edit to taste, remove unused items.

Notes adapted from:
http://www.pendrivelinux.com/boot-multiple-iso-from-usb-via-grub2-using-linux/

http://www.paranoids.at/?page=grub2stick

http://www.pendrivelinux.com/how-to-create-a-larger-casper-rw-loop-file/

DO NOT DIRECTLY CUT AND PASTE THESE INTO YOUR SYSTEM!!
YOU MUST EDIT TO YOUR NEEDS OR YOU MAY DESTROY YOUR DATA!

I do not want to wipe the existing data on the drive, just add linux to it:
so first check where the PC mounted it using df -kh, mount and fdisk -l

Remount without sync if needed, then

grub-install --force --no-floppy --root-directory=/media/XXXXX /dev/sdX



Copy your ISO files into place, I recommend /boot/iso/

Create empty 3 gig file full of zeros for persistence
dd if=/dev/zero of=/isodevice/casper-rw bs=3G count=1

format the file
mkfs.ext3 -F /isodevice/casper-rw




wget pendrivelinux.com/downloads/multibootlinux/grub.cfg -o /isodevice/boot/grub/grub.cfg
vi /isodevice/boot/grub/grub.cfg

set timeout=5
set default=0

menuentry "persistent rw ubuntu-11.04-desktop-amd64.iso" {
 loopback loop /boot/iso/ubuntu-11.04-desktop-amd64.iso
 linux (loop)/casper/vmlinuz boot=casper persistent rw iso-scan/filename=/boot/iso/ubuntu-11.04-desktop-amd64.iso noeject noprompt splash --
 initrd (loop)/casper/initrd.lz
}

menuentry "KNOPPIX_V6.7.1DVD-2011-09-14-EN.iso" {
 loopback loop /KNOPPIX_V6.7.1DVD-2011-09-14-EN.iso
 linux (loop)/boot/isolinux/linux knoppix bootfrom=KNOPPIX_V6.7.1DVD-2011-09-14-EN.iso ramdisk_size=100000 lang=en vt.default_utf8=0 apm=power-off initrd=minirt.gz nomce libata.force=noncq hpsa.hpsa_allow_any=1 loglevel=1 tz=localtime
 initrd (loop)/boot/isolinux/minirt.gz
}

menuentry "text only g7-1219wm KNOPPIX_V6.7.1DVD-2011-09-14-EN.iso" {
 loopback loop /KNOPPIX_V6.7.1DVD-2011-09-14-EN.iso
 linux (loop)/boot/isolinux/linux knoppix 2 nomodeset bootfrom=KNOPPIX_V6.7.1DVD-2011-09-14-EN.iso ramdisk_size=100000 lang=en vt.default_utf8=0 apm=power-off initrd=minirt.gz nomce libata.force=noncq hpsa.hpsa_allow_any=1 loglevel=1 tz=localtime
 initrd (loop)/boot/isolinux/minirt.gz
}

menuentry "ubuntu-11.10-alternate-amd64.iso" {
 loopback loop /boot/iso/ubuntu-11.10-alternate-amd64.iso
 linux (loop)/linux --
 initrd (loop)/initrd.gz
}

menuentry "ubuntu-11.04-desktop-amd64.iso" {
 loopback loop /boot/iso/ubuntu-11.04-desktop-amd64.iso
 linux (loop)/casper/vmlinuz boot=casper iso-scan/filename=/boot/iso/ubuntu-11.04-desktop-amd64.iso noeject noprompt splash --
 initrd (loop)/casper/initrd.lz
}

menuentry "ubuntu-11.04-desktop-i386.iso" {
 loopback loop /boot/iso/ubuntu-11.04-desktop-i386.iso
 linux (loop)/casper/vmlinuz boot=casper iso-scan/filename=/boot/iso/ubuntu-11.04-desktop-i386.iso noeject noprompt splash --
 initrd (loop)/casper/initrd.lz
}

menuentry "linuxmint-10-gnome-dvd-amd64.iso" {
 loopback loop /boot/iso/linuxmint-10-gnome-dvd-amd64.iso
 linux (loop)/casper/vmlinuz file=/cdrom/preseed/mint.seed boot=casper initrd=/casper/initrd.lz iso-scan/filename=/boot/iso/linuxmint-10-gnome-dvd-amd64.iso noeject noprompt splash --
 initrd (loop)/casper/initrd.lz
}

menuentry "kiwi-10.08.iso" {
 loopback loop /boot/iso/kiwi-10.08.iso
 linux (loop)/casper/vmlinuz boot=casper iso-scan/filename=/boot/iso/kiwi-10.08.iso noeject noprompt splash --
 initrd (loop)/casper/initrd.lz
}

menuentry "KNOPPIX_V6.7.1DVD-2011-09-14-EN.iso" {
 loopback loop /KNOPPIX_V6.7.1DVD-2011-09-14-EN.iso
 linux (loop)/boot/isolinux/linux knoppix bootfrom=KNOPPIX_V6.7.1DVD-2011-09-14-EN.iso ramdisk_size=100000 lang=en vt.default_utf8=0 apm=power-off initrd=minirt.gz nomce libata.force=noncq hpsa.hpsa_allow_any=1 loglevel=1 tz=localtime
 initrd (loop)/boot/isolinux/minirt.gz
}

menuentry "linuxmint-11-gnome-dvd-64bit.iso" {
 loopback loop /boot/iso/linuxmint-11-gnome-dvd-64bit.iso
 linux (loop)/casper/vmlinuz boot=casper iso-scan/filename=/boot/iso/linuxmint-11-gnome-dvd-64bit.iso noeject noprompt splash --
 initrd (loop)/casper/initrd.lz
}









Once you are rebooted with the shiney new persistance file working:
df -kh

Run Synaptic package manager or your favorite, way to update sources etc.

vi /etc/apt/sources.list
deb cdrom:[Ubuntu 11.04 _Natty Narwhal_ - Release amd64 (20110427.1)]/ natty main restricted
deb http://mirrors.us.kernel.org/ubuntu/ natty main restricted universe multiverse
deb-src http://mirrors.us.kernel.org/ubuntu/ natty main restricted universe multiverse
deb http://mirrors.us.kernel.org/ubuntu/ natty-security main restricted universe multiverse
deb-src http://mirrors.us.kernel.org/ubuntu/ natty-security main restricted universe multiverse
deb http://mirrors.us.kernel.org/ubuntu/ natty-updates main restricted universe multiverse
deb-src http://mirrors.us.kernel.org/ubuntu/ natty-updates main restricted universe multiverse
# Google testing repository
deb http://dl.google.com/linux/deb/ testing non-free
 
Import the google key files so you can use Picasa from google:
wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | sudo apt-key add -

Now install all your favorite packages:
apt-get update
apt-get upgrade
apt-get install mc aptitude sipcalc vim ssh moc chromium-browser wine flashplugin-installer picasa vlc mozilla-plugin-vlc



If you like to use proprietary CODEC to play streaming video, audio, MP3, mpeg1, mpeg2, mpeg4, avi, wmv, wma, etc. 
https://help.ubuntu.com/community/RestrictedFormats
http://www.stchman.com/codecs.html
# apt-get -y install gstreamer0.10-ffmpeg gstreamer0.10-plugins-bad gstreamer0.10-plugins-bad-multiverse gstreamer0.10-plugins-ugly gstreamer0.10-plugins-ugly-multiverse

Fix your time zone:
# dpkg-reconfigure tzdata

If you run Windows and do not like the clock wrong later:
vi /etc/default/rcS
Change UTC=yes to UTC=no

Clear the ubuntu package cache to save space on your small flash drive
# apt-get clean







http://www.google.com/support/forum/p/Picasa/thread?tid=7a8ec009325ff854&hl=en
http://www.google.com/support/forum/p/Picasa/thread?tid=77c38e02f35c8fcb&hl=en
http://www.google.com/support/forum/p/Picasa/thread?tid=06e0d1b3fa165d81&hl=en
http://www.google.com/support/forum/p/Picasa/thread?tid=6509b77271b16cdf&hl=en


I transfered from vista down to XP by simply copying the db3 folder.  I did not use the backup feature in picasa at all because all my photos were on a network share, and already accessible to both computers.  

Picasa db storage:
Win XP: C:\Documents and Settings\YourUserNameHere\Local Settings\Application Data\Google\Picasa2\db3
Win Vista: C:\Users\YourUserNameHere\AppData\Local\Google\Picasa2\db3

Win 7: 
C:\Users\g\AppData\Local\Google\Picasa2\db3
C:\Users\g\AppData\Local\Google\Picasa2\contacts






I have not tested but upgrading to picasa 3.8 may work per:
http://www.webupd8.org/2010/04/how-to-install-picasa-36-in-ubuntu.html
cd /home/ubuntu/Desktop
wget http://dl.google.com/picasa/picasa38-setup.exe
double click the picasa38-setup.exe file on your desktop and install Picasa 3.8 with the default settings

Now all we have to do is copy the Picasa 3.8 files over 3.0 using the following command:
sudo cp -r ~/.wine/drive_c/Program\ Files/Google/Picasa3/* /opt/google/picasa/3.0/wine/drive_c/Program\ Files/Google/Picasa3/

Now run Picasa 3.8 from Applications > Graphics > Picasa > Picasa.
Important note: Don't click the "Places" button as it will freeze Picasa 3.8 and it will fail to start again!

Prolific USB-to-Serial Comm Port PL2303 - Windows for Linux People

noreply@blogger.com (Gavin Hollinger) — Tue, 12 Apr 2011 03:37:00 +0000

So Linux worked right out of the box but Windows........

Required reading, searching, locating updated Drivers, Docs and on and on and on...

Sabrent SBT-USC1M Serial adapter - USB
1 88218 00055 2
S/N: 200000301730

SBT-USC1M is perfect for use with serial devices that you would want to convert to USB. This unique cable allows you to use bridge/connectivity between the Universal Serial Bus (USB) and Serial Port Interface. The USB PDA/Serial Adapter provides you with an external serial (DB-9 male) Plug-n-Play connection for use with computers, notebooks, and hand held computing devices that support USB. The PDA/USB Serial Adapter has a standard type A USB plug. This USB PDA/Serial Adapter provides PDAs, digital cameras, modems, and ISDN terminal adapters with high quality serial connections at a data transfer rate of over 500 Kbps. This makes the USB interface transparent to serial peripherals, allowing them to easily interface with USB computers. It eliminates the setup hassle found with traditional serial port connections. This device also supports energy saving suspend and resume operations.

http://www.prolific.com.tw/support/files//IO%20Cable/PL-2303/Drivers%20-%20Generic/Windows/allinone/PL2303_Prolific_DriverInstaller_v130.zip

http://www.prolific.com.tw/eng/downloads.asp?ID=31

http://www.prolific.com.tw/support/files//IO%20Cable/PL-2303/Drivers%20-%20Generic/Windows/allinone/PL2303_Prolific_DriverInstaller_v1210.zip

PL-2303 Driver Setup Installer, Prolific Edition
Setup Installer Revision Note History
===========================================

System Requirement:
  . Supports the following Windows OSes:
 - Windows 98SE
 - Windows ME
 - Windows 2000 SP4
 - Windows XP SP2 and above (32 & 64 bit)
 - Windows Server 2003 (32 & 64 bit)
 - Windows Server 2008 / 2008 R2 (32 & 64 bit)
 - Windows Vista (32 & 64 bit)
 - Windows 7 (32 & 64 bit)
       NOTE: For Windows 7, please use RC build 7100 or above build version.
  . USB host controller
  . Device using PL-2303H/HX/X version chip
 

Supported device ID and product strings:
  . VID_067B&PID_2303 for "Prolific USB-to-Serial Comm Port"


Driver Versions:
-------------------
 - Windows 98/ME Driver: v2.0.0.19
 - Windows 2000/XP/Server2003 (32 & 64-bit) WDM WHQL Driver: v2.0.13.130
 - Windows Vista/7/Server2008 (32 & 64-bit) WDF WHQL Driver: v3.3.11.152


Release Notes:
---------------
PL2303 Driver Installer v1.3.0
  Changes from Installer v1.2.10:
 Driver Changes - 
  - No driver change

 Installer Changes - 
  - Fixed "Modify/Repair" Menu options to show correct installer version.

   Installer & Build date: 1.3.0 (2010-7-15)
 
   Language Support: 
 - English (default)
 - Chinese (Traditional) 
 - Chinese (Simplified)
 - Japanese


========================================
Prolific Technology Inc.
http://www.prolific.com.tw









The PL-2303X can be distinguished from a PL-2303 by checking bMaxPacketSize0 for the device using lsusb -v -d 067b:2303 (as root). If bMaxPacketSize0 is 64, you probably have a PL-2303X


# lsusb -v -d 067b:2303

Bus 002 Device 010: ID 067b:2303 Prolific Technology, Inc. PL2303 Serial Port
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               1.10
  bDeviceClass            0 (Defined at Interface level)
  bDeviceSubClass         0 
  bDeviceProtocol         0 
  bMaxPacketSize0        64
  idVendor           0x067b Prolific Technology, Inc.
  idProduct          0x2303 PL2303 Serial Port
  bcdDevice            3.00
  iManufacturer           1 Prolific Technology Inc.
  iProduct                2 USB-Serial Controller
  iSerial                 0 
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength           39
    bNumInterfaces          1
    bConfigurationValue     1
    iConfiguration          0 
    bmAttributes         0x80
      (Bus Powered)
    MaxPower              100mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           3
      bInterfaceClass       255 Vendor Specific Class
      bInterfaceSubClass      0 
      bInterfaceProtocol      0 
      iInterface              0 
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x000a  1x 10 bytes
        bInterval               1
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x02  EP 2 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x83  EP 3 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               0
Device Status:     0x0000
  (Bus Powered)









https://help.ubuntu.com/community/CiscoConsole

or:

apt-get install minicom

# vi /etc/minicom/minirc.9600N81-ttyUSB0

pu port             /dev/ttyUSB0
pu baudrate         9600
pu bits             8
pu parity           N
pu stopbits         1
pu rtscts           No
pu minit
pu mreset
pu mdialpre
pu mdialsuf
pu mdialpre2
pu mdialsuf2
pu mdialpre3
pu mdialsuf3
pu mconnect
pu mnocon1
pu mnocon2
pu mnocon3
pu mnocon4
pu mhangup
pu mdialcan
pu mautobaud        No
pu hasdcd           No


# minicom 9600N81-ttyUSB0


Some people do this:
ln -sf /dev/ttyUSB0 /dev/ttyS0

Others just use /dev/ttyUSB0 directly like above.

Sprint integrates Google Voice

noreply@blogger.com (Gavin Hollinger) — Tue, 29 Mar 2011 05:15:00 +0000

I am a big fan of Google Voice but now it can be a little more native with sprint. I think this is probably cool. However, I do like to keep options open when it comes to my monthly recurring expenses. How hard is it to move away from sprint if I do not like something and continue using Google voice with another carrier?

Sprint integrates Google Voice

http://googlevoiceblog.blogspot.com/2011/03/sprint-integrates-google-voice.html

http://www.google.com/googlevoice/sprint/

http://www.sprint.com/googlevoice/

AT&T to Acquire T-Mobile USA from Deutsche Telekom

noreply@blogger.com (Gavin Hollinger) — Tue, 22 Mar 2011 04:21:00 +0000

AT&T to Acquire T-Mobile USA from Deutsche Telekom

Linux is the Operating System of choice for Supercomputers like the Tianhe-1A

noreply@blogger.com (Gavin Hollinger) — Sat, 19 Mar 2011 21:27:00 +0000

Reading about the Tianhe-1A today, and noticed that most of the Top 500 computer systems run Linux. It is no secret that Linux has been my operating system of choice since I was a poor Student. I found this graph showing Supercomputer Operating Systems to show that people with very large budgets like it just as much.

Warning, you might need a magnifying glass to find windows and mac on this chart:

Side note: I still pronounce Linux wrong and probably will forever. The red neck in me I guess. When I first started using it, it was new enough that no one I talked with physically in rural Utah could correct me. When I was at SUU, one of my favorite professors tried but old habits die hard.

IMG00063-20110315-1505.jpg

noreply@blogger.com (Gavin Hollinger) — Tue, 15 Mar 2011 21:13:00 +0000

Amazing day on Navajo Mountain today. ATV quit so Paul went on up by himself while I wait. I must say the time to pause and enjoy the spring weather has been very peaceful and nice. Poor service here so I cannot do much work other than gather the garbage out of my truck. This post will go out later when I have service again.
37:00:46.00, -110:50:24.10

IMG00410-20110302-1619.jpg

noreply@blogger.com (Gavin Hollinger) — Thu, 03 Mar 2011 00:02:00 +0000

Fox hunt 826.5 http://www.cellphone-mate.com/contact.html