< <journal "^\d\d\d\d-\d\d-\d\d.*Web">
> <journal search tag:web>
Stuff about the world wide web (WWW): Structure, history, weirdness.
Well… I think I lost about 12h on all my wikis. I thought: “Upgrade from Debian Wheezy to Jessie? No Problem!” I never saw a big huge blinking warning saying that you shouldn’t do it if you’re a guest on a virtual machine. But systemd replaces sysvinit, which requires a newer kernel, which the host doesn’t have! Everything works until you reboot. At which point the network doesn’t come back up. You can’t switch from systemd to sysvinit because downloading the packages doesn’t work anymore. You can’t scp the deb files to your server because all you have is a serial console. On your end, it looks like ssh. And yet, whatever I tried wouldn’t work. Because networking doesn’t work on the host.
And that’s when I discovered some flaws in my backup. What a disappointment. How exactly was Perl installed? Why doesn’t the backup contain the Apache config files for those sites that had SSL added to them?
Kallobombus. I thought I had documented it all. Not so.
Todo items for tomorrow:
Sometimes I wonder whether I should move Oddmuse away from Perl 5 to something else. Something I would like to learn. An opportunity to redo everything, from scratch. Not many people are using Oddmuse, so I might as well write something else, for myself.
Redirection good. Broken links bad. Cool URIs don't change.
Web Decay Graph. “This is a very sad graph.” – Tim Bray
OK, so apparently I need to look my site’s setup again. I hate these sysadmin problems. I would love to not worry about security issues, trusting my GNU/Linux distro to simply do the right thing. But it can’t upgrade my sites SSL setup. Currently the architecture does no allow that. Each site has config files, each site has its own certificates.
I should probably automate this in some way.
Today I saw two posts on Google+ I found interesting. In the first, Rob said that he would like to finance a zine in order to get all the news but not “the Internet”. I said that back when we all just had websites and used ftp to post new stuff the Internet was a peaceful place!
I wonder about browser extension that hides all the comments, everywhere. I think those are the source of all grief. Yes, it’s sad! I know of the Herp Derp extension for YouTube. I’m sure there are others!
In another post, people were discussing how we react to provocative posts by others. What if they disabled comments? Are we happy because it saves us from wasting our energy? Are we incensed because the medium implies that we’ll only post what we’re also willing to discuss? That’s certainly how I feel! For myself, this is my daily Google+ challenge: not to post any political stuff. For if I did, I wouldn’t want to read the counterpoints. I still feel the need to rant, though! What to do? Because I also hate posts where I cannot comment, I don’t want to post and disable comments. My solution is to keep the political stuff on Twitter. There, I retweet a lot. Or I’ll write a few well chosen words, add a link and post it. If I’m interested in reading the opinions of others, I can follow them on Twitter and read the stuff they link to. Perfect! I remember people saying that 140 characters was not enough. But now I’m seeing that on G+, having more characters doesn’t improve the experience of politics and religion.
I’m trying to figure out how to use mod_cache. The following in my
VirtualHost section doesn’t seem to make a difference. The wiki is still getting invoked.
CacheEnable mem /wiki/feed/full/RPG MCacheSize 100000000 MCacheMaxObjectSize 1000000
(This RSS file is about 99k.)
The wiki is logging these requests to a file and I’m requesting the URL from the command-line using
curl. Hm, must investigate later.
Tried adding this:
CacheEnable mem /wiki/feed/full/ MCacheMaxStreamingBuffer 1000000
Tried replacing it with:
CacheEnable disk /wiki/feed/full/RPG
Giving up. Damn you, mod_cache.
I’ve been using Chrome for a day now and this wiki doesn’t look as good as it does using Firefox, on Windows.
Something about the fonts is not making me happy.
Googling… Stackoverflow has something about webfonts, anti-aliasing, and a note that 37 will fix this. I guess I hadn’t used Chrome in a long time. Let’s see whether an update fixes this.
Restarting… I am not impressed.
Adding Symbola to the site and to the CSS.
Fiddling some more. Increased the font size. Getting rid of Arial Narrow or whatever it was for header and footer. Getting rid of bold for the moment and replacing it with small caps. WTF am I doing!?
Unhappy… Noticia Text by JM Solé? Should I use the webfonts from the Google network or serve from my own server? More traces being left behind…
sfnt2woff to convert ttf files to woff. The files are significantly smaller, now. Using Noticia Text and Symbola by George Douros (for the smileys). Everything seems to work on Chrome. Now anti-aliasing for the header and footer looks a bit crummy on Firefox (Windows). Wow. Such pain.
At home… Things look pretty good on Firefox (OSX). Oh well. I think this is going to be the new look for a while.
Hop on the time machine!
My server has fail2ban installed.
“Fail2ban scans log files (e.g. /var/log/apache/error_log) and bans IPs that show the malicious signs – too many password failures, seeking for exploits, etc. Generally Fail2Ban is then used to update firewall rules to reject the IP addresses for a specified amount of time, although any arbitrary other action (e.g. sending an email) could also be configured. Out of the box Fail2Ban comes with filters for various services (apache, courier, ssh, etc).”
Ever since I installed fail2ban, it showed no activity. Until now. Weird!
Is this due to the Shellshock vulnerability? First public disclosure 2014-09-24, activity starting 2014-10-06. It’s weird, though. I thought Shellshock would involve bash scripts as CGI scripts, called via Apache but these failures are ordinary SSH login attempts as seen on /var/log/auth.log:
Oct 13 11:49:38 alexschroeder sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.127.116.11 user=root Oct 13 11:49:40 alexschroeder sshd: Failed password for root from 18.104.22.168 port 3462 ssh2 Oct 13 11:49:43 alexschroeder sshd: Failed password for root from 22.214.171.124 port 3462 ssh2 Oct 13 11:49:45 alexschroeder sshd: Failed password for root from 126.96.36.199 port 3462 ssh2 Oct 13 11:49:45 alexschroeder sshd: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.8.131.52 user=root Oct 13 11:49:50 alexschroeder sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.108.40.206 user=root Oct 13 11:49:51 alexschroeder sshd: Failed password for root from 220.127.116.11 port 4067 ssh2 Oct 13 11:49:54 alexschroeder sshd: Failed password for root from 18.104.22.168 port 4067 ssh2 Oct 13 11:49:56 alexschroeder sshd: Failed password for root from 22.214.171.124 port 4067 ssh2 Oct 13 11:49:56 alexschroeder sshd: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=126.96.36.199 user=root
Bin wieder am Rumstudieren wegen sozialen Medien. Politisches Zeug und so passiert bei mir vor allem auf Twitter, aber die bringen immer mehr so Facebook Ideen. Grössere Grafiken war ja OK, aber jetzt gibt es immer mehr Werbetweets und neu wollen sie auch beliebte Beiträge von fremden Leuten einblenden, oder gewisse Tweets ausblenden, eben der ganze Scheiss, der hier auf Facebook auch passiert. Und so frage ich mich natürlich: Was gibt es für Alternativen?
Da wäre mal App.net – aber die haben in ihren Terms of Service eine schreckliche Passage drinnen: “You agree to defend, indemnify and hold us harmless from and against any and all costs, damages, liabilities, and expenses (including attorneys’ fees, costs, penalties, interest and disbursements) we incur in relation to, arising from, or for the purpose of avoiding, any claim or demand from a third party relating to your use of the Service or the use of the Service by any person using your account, including any claim that your use of the Service violates any applicable law or regulation, or the rights of any third party, and/or your violation of these Terms.”
Grauenhaft! Aber eigentlich wäre es cool: Kostet $36/Jahr und hat dafür garantiert keine Werbung und ein vernünftiges Business Modell.
Dann meldet sich mein Sinn für freie Software und flüstert: Wenn ich schon wechsel, warum nicht auf GNU Social? Zum Beispiel bei Load Average oder GNU Social Deutschland? Und so bin ich am Pröbelen…
Auf alle Fälle muss man sich keine Illusionen machen: Die allermeisten Freunde folgen einem ja nicht zu neuen Medien. Man muss einfach dort neue Freunde finden. Das muss ja eigentlich gehen! Ich bin da optimistisch.
Über mein Rollenspielhobby schreibe ich übrigens vor allem auf Google+ – irgendwann sind die Leute von Twitter einfach massenhaft ausgewandert. Das war ein seltsames Phänomen.
Wer schon dort ist, sagt Hallo! 😜
As far as I can tell, there is App.net and GNU Social (formerly Status Net).
App.net offers a Twitter-like experience, API access, and no ads but it costs. The free option offers, 500MB of file storage and following up to 40 accounts (plenty to get started). Upgrading costs $36/year, which is an OK price but I pay just $25/year for my Flickr Pro account… The default client you download, called App.net on my phone, also gives you a totally confusing non-Twitter experience involving Broadcast. I had no idea what this was and switched to Riposte.
Then I discovered the following passage in the App.net Terms of Service:
You agree to defend, indemnify and hold us harmless from and against any and all costs, damages, liabilities, and expenses (including attorneys’ fees, costs, penalties, interest and disbursements) we incur in relation to, arising from, or for the purpose of avoiding, any claim or demand from a third party relating to your use of the Service or the use of the Service by any person using your account, including any claim that your use of the Service violates any applicable law or regulation, or the rights of any third party, and/or your violation of these Terms.
I don’t think I can use this service! Specially considering this:
These Terms and any action related thereto will be governed by the laws of the State of California without regard to or application of its conflict of law provisions or your state or country of residence. All claims, legal proceedings or litigation arising in connection with the Services will be brought solely in the federal or state courts located in San Francisco County, California, United States, and you consent to the jurisdiction of and venue in such courts and waive any objection as to inconvenient forum.
Remember the abominable, cruel and unusual punishment called Three Strikes? No thank you! If I can choose, California is unacceptable.
So what about the alternative? That would be GNU Social. Now I need to decide whether I want to install my own instance or whether to join an existing server. For now, I’m kensanata on Load Average, one of the existing services.