Apr 162017
 

I am a racist.

I am prejudiced in favour of the human race.

Of course it is more common to find people who use the word race in reference to sub-divisions of humans, but you usually find that that as you look closer at each sub-division, it has less and less meaning. For instance, “white” in Europe is sub-divided into French, German, Italian, Scandinavian, Birtish, English, Irish, Welsh, … And as you look closer at those sub-sub-divisions, they are also divided up. At the lowest level, there is “family” and “not family”.

The imperative to categorise people into “races” comes from a useful trait for problem solving, but if it doesn’t tell you anything useful, why categorise “race”? There are plenty of more useful categories to put people into.

This was kicked off by a sudden surge in the number of YouTube videos on DNA results that show up for me. Which of course showed the entirely predictable result that almost everyone is a mixture of different ancestors. And people are shocked, distressed, or annoyed about the fact that that their perceived racial identity is smaller than expected.

A DNA test for me will show no shocking results – I know with certainty that all my ancestors for well over 10,000 years were human. As a rough guess, 75% of my ancestors were from somewhere in northwest Europe, with 25% from all sorts of surprising places. The proportions may change, and the higher the proportion of surprising places, the more interesting a story some of my ancestors have to tell.

Apr 062017
 

One of the possibilities when setting a password is to use non-ASCII characters, such as ¨þ¨ (that is a thorn). Well perhaps something a little more secure than just a single character.

But just how sensible is it?

The first thing to bear in mind is that you need to be able to enter the password reliably in all circumstances. A tale from the mists of time: I once set a root password on a Unix machine that included the ¨@¨ character, which normally worked fine but failed on the system console because on that terminal the old Unix tty was still active and ¨@¨ would erase a line, making it impossible to enter the password.

Fortunately I realised what the problem was before it became more than a little annoying.

But the point still remains – if you cannot type a password, you cannot authenticate. So for passwords such as firmware passwords, system encryption passwords, or normal computer account passwords, a password containing Unicode characters is probably a very bad idea.

But for when you have full control over your computer(s), such as for web account passwords, a password containing Unicode characters is worth considering.

So how safe is a password containing a Unicode character anyway? Well, on my usual password cracking machine, john the ripper is unable to crack the password ¨þ¨ in approximately 24 hours. Of course that is a bit of a cheat as john the ripper does not by default check Unicode characters, and if it did it would be able to crack a one character password. But it would take longer; adding Unicode characters increases the space that john the ripper needs to search in order to find your password.

And perhaps more importantly makes it less likely for a password guesser (Hydra for example) to be successful.

So if you normally use a password such as thistlethinthorn, changing it to þistleþinþorn is worth considering. Or indeed changing the separator between words in a multiword password to a Unicode character: thistle☠thin☠thorn, or red¡whistle¡wheel.

Apr 032017
 

Since getting a HiDPI screen, I have been plagued with claws mail merrily doing the right thing with proper emails, but showing HTML emails at a tiny size.

Whilst it doesn’t appear to be a preference you can change in the normal way, there is a zoom variable you can change within the Claws preferences file. Quit claws, and edit ~/.claws-mail/.clawsrc and scroll down through the file until you find the “[Fancy]” section :-

[fancy]
enable_images=1
enable_remote_content=1
enable_scripts=0
enable_plugins=0
open_external=1
zoom_level=100
enable_java=0
enable_proxy=0

Change the “zoom_level” to a suitable percentage (such as 200).

Mar 232017
 

It may be a bit early to comment in this way with 5 dead, and 40 injured after the attack in Westminster yesterday.

But it could easily have been so much worse.

For those who are not aware, every afternoon Westminster is crawling with hundreds or thousands of pedestrians. Any half-competent attacker armed with a vehicle would have a hard job keeping the casualty figures down to 50-odd.

And then to leap out of a hired car armed with a couple of knives just makes the attacker look pathetic.

Yes this is the worst terrorist attack in London for a decade – which just goes to show just how little terrorism there really is.

Yes there were deaths and terrible injuries, but to me it seems that mocking the attacker is an appropriate reaction.

If you look at recent terrorist attacks in Europe, most of the terrorists turn out to be pathetic petty criminals, and it won’t surprise me if this latest attacker also turns out to be a petty criminal. He’s certainly cowardly, pathetic and incompetent.

The New Defence

Mar 182017
 

The TiPro programmable keyboards are quite fun for those who are into their keyboards, but with one big problem: the programming tool is Windows only. Well at least if you happen to have a USB-based TiPro; otherwise you need to set up the serial interface as the PS/2 interface is only usable for programming with a 32-bit Windows.

As it turns out, if you try to run it under a virtual machine and assign the USB device of the keyboard to the virtual machine, it still fails – somehow it doesn’t like staying assigned to the virtual machine. However there is a fix for this – using the command-line VirtualBox tools to set up a permanent USB filter.

To assign, first of all determine the name of your virtual machine with :-

VboxManage list vms

Next, add a USB filter – you can normally assign it to “slot” (or index) 1, but you may have to check what slots are available if you already do this :-

VBoxManage usbfilter add 1 --target "W10" --name TiPro --vendorid 0x1222 --productid 0xfaca

Once that is done, the Windows tool should be able to find the keyboard to start programming it. If necessary, reboot the virtual machine or try assigning the USB device via the menu option.

During programming it is helpful to remember than raw USB HID codes can be used by right-clicking in the input field for a key, selecting “Text Input” and inputing the code in the form “/${hex hid code} ${hex hid code}\” – such as “/69 69\” (a list can be found at: http://www.usb.org/developers/hidpage/Hut1_12v2.pdf)

Removal at the end:

VBoxManage usbfilter remove 1 --target "W10"

After the removal it seems that disconnecting and reconnecting the device is necessary for Linux to pick it up (or possibly a udevadm trigger).

b