World of Workout

by dave
January 1, 2012

A typical work day for most geeks and nerds most likely involves lengthy periods of sitting at a desk, calculating, coding, researching, IRC, etc.
A typical evening routine might involve similar activities such as online gaming, coding, researching, IRC, etc.

This sedentary lifestyle has become the norm for many of us who’ve spent more time online than off. Even as I type this, I assure you I’m not being very active. I refer you now to this list of preventable causes of death. Please note the words “preventable” and “death”; they’re pretty serious.

Get off your ass!
There are plenty of things you can do that involve physical activity, but perhaps the most common (and most feared among geeks) is a fitness gym membership. This is probably the easiest way to stay fit, and it’s almost exactly like everyone’s favourite MMO…

World of Warcraft!

If you’re unfamiliar with World of Warcraft (or WoW for short), it’s a subscription based multiplayer online game that involves building your character up through challenges and repetitive quests. To compare, a gym is a subscription based multiperson activity that involves building your person up through challenges and repetition.

I recall when I first started playing WoW, and the steep learning curve involved with getting the hang of the game dynamics. I had the same feeling when I walked into the gym for the first time; looking around at all these strange sets of equipment, not knowing where to start. In most gyms, they have exercise stations that have simple instructions posted. With WoW, you have the help of quest givers; computer controlled characters with the function of providing players with a challenge. They’re pretty easy to find, as they have a giant exclamation mark over their head.

Compare:
In Warcraft you obtain a quest from a quest giver. “Hello player! You must go to *location* and kill 12 *things* and return to me”
In the gym, you find a machine or set of weights. “Hello active one! You must lift *weight* 12 times and then drink water”

When starting WoW (or any other online game), everyone is masked by their avatar. Essentially, everyone is anonymous. This leads to a difficult time for new players, as comments fly around from more experienced players to discourage and demoralize. “NEWB! dont u no ur spell rotation yet?!” In the gym on the other hand, because people are there in the flesh, they are slightly more responsible for their actions and interactions. People are generally polite and keep to themselves.

After a while, WoW starts to make sense, and you find a groove with your character for levelling or progressing. You start to find your favourite “daily quests”; quests that are designed to allow for daily repetition with incremental growth rewards. You will find that after a few weeks attending the gym, you’ll have a routine that you like; say 20 minutes of cardio on this machine, then a round of weights followed by stretching. With both of these routines, you are able to mentally detach from your activity and simply zone out. This allows for a nice relaxing mental decompression period.

The day after a rather strenuous workout, many people wake up to find a stiff or static feeling in their muscles. A good stretch and a hot shower is really all it takes to remedy this. You might be surprised to learn that WoW can be quite exhausting, but if you’ve ever been part of a raid, you’d understand. I was class leader for warlocks in my raiding guild for 2 years. We were farming end game content from Sunday night to Thursday night. As class leader, I was responsible for organizing the other warlocks and preparing them for the run. This meant I had be online by 8:00pm, and have everyone ready to go by 9:00pm. Getting 25 or 40 different people into roles is no easy task, so it takes dedication and perseverance. On most nights, the run would extend far past midnight. There were some weeks where 3:00am was common, several nights in a row as we tried, failed, tried again to defeat a challenge. Going in to work after 3 or 4 nights of this rigorous gaming would lead to severe exhaustion by the weekend. Stretching was no help.

I would say that the one thing I do miss about playing WoW was the teamwork aspect. Getting 40 people together to willingly partake in a militaristic simulation requiring strict role adherence was no mean feat. This is not something you’d find at the gym, but it’s rather humourous to imagine a group of people all pitching in their strength to attempt to lift a large quantity of weight, too large for an individual person.

Don’t forget to loot your hound.

  •   •   •   •   •

Setting an IP on an APC UPS

by dave
August 25, 2011

It is now 14:28 in the afternoon on a particularly busy day. Our power went off last night and our UPS (APC 1400XL with AP9617 management cards) all lost battery power before the building came back on. Today, I tasked myself with configuring our UPS to properly alert me, and perform a graceful shutdown on our servers.

Fails.

I plugged the Network Management card into a network switch, and watched on the DHCP server for a request from an APC MAC address (00:C0:B7:xx:xx:xx by the way). Nothing showed up at first. I thought this would be no problem if I logged in over serial, so I grabbed an RS-232 cable and plugged it into the management port on the back of the UPS.

DO NOT EVER PLUG A NON-APC PROVIDED SERIAL CABLE INTO THE BACK OF AN APC UPS. THE UPS WILL SHUT DOWN WITHOUT ANY WARNING WHATSOEVER.

So our UPS went down, taking out one of our Avaya IP Office modules (which was another problem to deal in its own right). What a great feature. Thanks APC.

Once the UPS was running again, I tried in vain to reset the network card, try other cables, different ports on the switch. Finally and automagically, I could see the DHCP offer showing up in my logs. It would sit there for about 45 seconds before disappearing to try again. This is when I found out about Option 43.

Option 43

Option 43 is a DHCP option for encapsulating vendor ID information into a DHCP response. For more information, read up on RFC2132, under section 8.4. In the case of an APC device, the hex code for this option would be 010431415043 (I know it looks like decimal, but trust me; it’s hex). This may work for you. Or in my case, it may not. APC uses this option as an authentication measure.

PING!

If none of the aforementioned solutions solved this problem for you, then you might have to resort to using ping.

That’s right; I said PING.

First, select an IP that’s unused on your network. Then create a local ARP entry with the MAC address of your device linked to that IP. Then, simply ping that IP with a packet size of 113 bytes.


[dave@sixtee:~#] sudo arp -s 192.168.x.x 00:C0:B7:XX:XX:XX
[dave@sixtee:~#] ping 192.168.x.x -s 113

Seriously folks, I could not make this up.

  •   •   •   •   •

OpenBSD Backdoors

by dave
December 15, 2010

If you’re not on the OpenBSD security mailing list, this may pass you by.

These are pretty serious allegations that 10 years ago, the FBI committed nefarious code to the OpenBSD code base; specifically the IPSEC stack. This stack was used and reused in many other projects, and implemented by many large organizations. This is a serious hole, if these allegations are indeed true.


-----Original Message-----
From: owner-security-announce@openbsd.org [mailto:owner-security-announce@openbsd.org] On Behalf Of Theo de Raadt
Sent: Tuesday, December 14, 2010 4:18 PM
To: security-announce@openbsd.org
Subject: Allegations regarding OpenBSD IPSEC

I have received a mail regarding the early development of the OpenBSD IPSEC stack. It is alleged that some ex-developers (and the company they worked for) accepted US government money to put backdoors into our network stack, in particular the IPSEC stack. Around 2000-2001.

Since we had the first IPSEC stack available for free, large parts of the code are now found in many other projects/products. Over 10 years, the IPSEC code has gone through many changes and fixes, so it is unclear what the true impact of these allegations are.

The mail came in privately from a person I have not talked to for nearly 10 years. I refuse to become part of such a conspiracy, and will not be talking to Gregory Perry about this. Therefore I am making it public so that
(a) those who use the code can audit it for these problems,
(b) those that are angry at the story can take other actions,
(c) if it is not true, those who are being accused can defend themselves.

Of course I don't like it when my private mail is forwarded. However the "little ethic" of a private mail being forwarded is much smaller than the "big ethic" of government paying companies to pay open source developers (a member of a community-of-friends) to insert privacy-invading holes in software.

----

From: Gregory Perry
To: "deraadt@openbsd.org"
Subject: OpenBSD Crypto Framework
Thread-Topic: OpenBSD Crypto Framework
Thread-Index: AcuZjuF6cT4gcSmqQv+Fo3/+2m80eg==
Date: Sat, 11 Dec 2010 23:55:25 +0000
Message-ID: <8D3222F9EB68474DA381831A120B1023019AC034@mbx021-e2-nj-5.exch021.domain.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Status: RO

Hello Theo,

Long time no talk. If you will recall, a while back I was the CTO at NETSEC and arranged funding and donations for the OpenBSD Crypto Framework. At that same time I also did some consulting for the FBI, for their GSA Technical Support Center, which was a cryptologic reverse engineering project aimed at backdooring and implementing key escrow mechanisms for smart card and other hardware-based computing technologies.

My NDA with the FBI has recently expired, and I wanted to make you aware of the fact that the FBI implemented a number of backdoors and side channel key leaking mechanisms into the OCF, for the express purpose of monitoring the site to site VPN encryption system implemented by EOUSA, the parent organization to the FBI. Jason Wright and several other developers were responsible for those backdoors, and you would be well advised to review any and all code commits by Wright as well as the other developers he worked with originating from NETSEC.

This is also probably the reason why you lost your DARPA funding, they more than likely caught wind of the fact that those backdoors were present and didn't want to create any derivative products based upon the same.

This is also why several inside FBI folks have been recently advocating the use of OpenBSD for VPN and firewalling implementations in virtualized environments, for example Scott Lowe is a well respected author in virtualization circles who also happens top be on the FBI payroll, and who has also recently published several tutorials for the use of OpenBSD VMs in enterprise VMware vSphere deployments.

Merry Christmas...

Gregory Perry
Chief Executive Officer
GoVirtual Education

"VMware Training Products & Services"

  •   •   •   •   •

Supercrawl 2010

by dave
September 26, 2010

  •   •   •   •   •

An Open Letter to GO Transit

by dave
September 20, 2010

Dear GO Transit

Curiosity certainly hit me hard this morning, as I sat on the QEW Express from Hamilton to Union Station. Curiosity as to why there are no washrooms on the GO Buses. Somehow, the magnitude of perplexment I was experiencing began to manifest itself physically within my own body.

It started with the feeling that I had to burp. However the pressure in my torso seemed reluctant to simply pass through my esophagus, instead gurgling deeper into my stomach and beyond. It was then that I heard a disembodied voice within my own head.

“No” it said, “you need to experience the lack of toilet facilities to its absolute fullest if you are to truly understand your destiny”.

At this point, my shamanic guide left me, confused and bewildered. What could this mean? Why me? Why now?

By this time, we were already on the highway. Barely. It was too late to ask the driver to pull over. The gurgling in my stomach turned into an intense pain, just below my ribs. I held on to the side of my seat as the pain dulled and washed away. *phew*. The gurgling continued. I was nearing the approach of my daily nap, when another sharp pain, this one a few inches over, woke me up with a terrifying amount of OUCH, accompanied by profuse sweating and chills. Clearly, something was up.

This went on, with the pain moving along inside of me with each passing wave. Everytime it would get worse, until we were in Mississauga. I thought I was done for. The pain had finally reached my back door, and it was knocking hard to get out. Each wave now, was accompanied by the danger that with one wrong move, I could very likely dump a half litre of hot mud into my trousers. Clenching proved extremely difficult because of the cramping I was experiencing in my abdomen muscles.

At one point, I was so absorbed by my pain and situation that I found myself moaning out loud. Luckily no one on the bus acknowledged my involuntary groans. Panic struck me at one point, and I was prepared to ask the driver to stop. This was it. I was going to explode. I held back simply based on the fact that I didn’t have a fucking clue where the fuck we were. I held fast, and found relief at the end of yet another wave. Scenes of the chestburster from Alien were starting to feel like a reality. More like ass-burster, amirite?

The sight of Union Station was certainly to my relief. I was first to stand up to get off, however my way was blocked by about 20+ people. Waiting felt like an eternity. Finally, it was my turn, just as the next pressure wave came on, this time MUCH stronger as I was standing up.

Now, have you ever heard of the phenomenon where toilet proximity strongly affects your ability to “hang in there”, so that the closer you get to the toilet, the more your body wants to expel whatever happens to be in the torpedo bay?

Well, this was one of those cases. I knew that I was on the home stretch, and with a sense of determination, I somehow managed to dash across the platform, get inside the bus terminal, then slam into the mens bathroom at an unruly speed. At this point, my proximity to clench ratio was beginning to reach a dangerous point.

I rounded the corner of the bathroom to find that the only stall in the men’s room was occupied. THE ONLY STALL. Just one! For the entire Bus terminal! I quickly shot down the idea of doing a bow-legged hustle into the train area of Union Station, and thought better to simply stroll calmly into the women’s bathroom and hope to remain unseen.

With a quick pucker of my back end, I relented to simply stand there in complete agony. The most intense, crushing wave of pain slipped over me. It felt like I’d ingested 8 litres of hot motor oil, full of carnivorous ants that all had mini chainsaws and were slowly dismantling me from the inside. I stood there, out of breath, sweating, entertaining thoughts of simply depanting myself and letting loose into the urinal, when the toilet flushed! The young man stepped out, looked at me like I was a drug addict, eager to get my nose into whatever I had in my pocket. I’m sure I looked like a wreck. Wide-eyed, disheveled hair, sweating, white-knuckled and clammy.

I won’t go into too much detail about the rest, however I will certainly comment on the cleanliness (or rather, the lack thereof) of the stall, even at 8:45AM on a Monday. Simply disgusting. I would NOT take my family there for a picnic. Pitiful and disgusting. That said, it was an emergency, so I cleaned the seat as best I could, turned around, had my pants down faster than the speed of sound (which turned out to be a good thing. The sonic boom masked the whooshing sound of about 4 litres of hot stomach acid, and the young man that was still washing his hands didn’t have to hear what sounded like 12 third graders all puking into a garbage can overtop of me giggling hysterically at my victorious accomplishment of having actually made it to the toilet).

So my question to you, GO Transit, is why are there no toilets on the GO Buses? I travel on average 2.5 hours a day on the QEW express and have for 5 years. I know that I’m not the only one that’s experienced toilet angst. I myself have already had to have the driver pull over once a few years back so I could let fly my last 4 pints of the night with my willy dangling into oncoming traffic. I can think of many other times we’ve stopped to let someone vomit, or urinate, or worse. In the winter, it’s even worse. I’ve been stuck in traffic up to 3 hours before. One driver was nice enough to pull over at a Tim Hortons and let us all use the bathroom and then grab a coffee and get back on the bus.

Love always,

Dave

P.S. I still do appreciate the ride to work everyday.

Sending my comments

Sending my comments

  •   •   •   •   •