406 Not Acceptable

I hate Solaris, or should that be Oracle?

Jim — Mon, 01 Mar 2010 11:07:45 +0000

Actually make that I hate both Solaris 9 and Oracle 9. If you ever get asked to set these buggers up on a machine just say no. It probably is a whole lot easier using the current versions! (Or get Oracle to do it for you!)

I had to get this working environment up on an old system at work (programmers get to do hardware, yay!) Running on some old SPARC boxes with not-so-healthy drives and broken backups. Sat back and watched Solaris 9 take about half a day to install! Then the nightmare began…

Next you run into issues with your standard Solaris SPARC machine being headless and Oracle deciding to require a GUI and X windows when all you would do is click ‘ok’ four or five times. So off you go setting up the server to allow remote X connections, only Solaris is bolted down in a number of places to stop this happening (think security.) SSH -x may do some things but not all you need on Solaris!

In case your getting the handy “timeout locking .Xauthority” message, as root you need to copy the /.Xauthority file into the users home directory. Then give ownership using chown to the user. You may need to set up the user’s home directory, have a look at the contents of /etc/passwd to see where the user’s home directory is located. This should reside in /export/home/username/

Then when you actually get xclock and friends running you hit another wall. Oracle needs to link a bunch of files, but Solaris 9 does not come with the required tools! Being an old system you do not get a nice apitude style installer for simple dependencies; you have to go dig around for them yourselves. In case you’re wondering where to go, they’ve been hidden on the second of three install CDs.. Then Oracle will probably crash out for another reason and you’ll be left wanting to grab the nearest gun/axe/chainsaw and finish off the decrepid system yourself.

© jim for 406 Not Acceptable, 2010. | Permalink | No comment | Add to del.icio.us
Post tags: databases, Solaris, ssh, Xauthority

Feed enhanced by Better Feed from Ozh

Meamo becomes Meego, but what of the N900?

Jim — Wed, 24 Feb 2010 18:16:14 +0000

For sometime N900 users have been wondering whether we would get Maemo 6 (Harmatten.) Whilst everyone wants the latest update on their device, and feels let down when it doesn’t happen; Nokia’s transparency with regards to bug fixes exacerbated the desire for the update. Nokia have labeled many bugs with a ‘To be fixed in Harmatten’, basically saying “live with it” — unless the N900 can be upgraded. So if Nokia do leave the N90 behind it could be a damning blow to many fans.

Earlier this month at MWC Nokia and Intel announced the merger between their two opensource Linux based operating systems. I can only assume this is an attempt to cement the operating system alongside iPhone OS and Android as one of the mainstream smartphone operating systems of the future. Whilst Nokia’s Symbian is still the top selling mobile phone operating system, its days look to be numbered with Apple and Google making a big impact in the market.

Still, I am not sure what position there is in the market for Meego. It is highly likely that we will eventually see just a handfull of sucessful operating systems for smartphones. For example, manufacturers like LG, have noticed that using their own custom systems was detrimental to their phone’s sales. Sure the hardware was good, but what use is it if no-one is making software for it? So Meego will have to fight with Android, Windows Mobile, Symbian, and eventually Bada for these manufacturers support.

The issue here is Android already has a number of devices from different manufacturers in the market and it looks like support for Android will steadily grow after a difficult first year (when only HTC offered devices.) It would be a difficult choice manufacturers to switch allegiance, but I would expect a few devices to appear (to test the waters so to speak.) Whilst Windows Mobile seems to have a strong grasp of the business market (alongside the Blackberrys.)

It’s such a shame that Nokia have decided to drop Debian as the upstream for their system with this merge. Whilst I’d like to see an updated system, I can’t say I am happy at losing the ability to install Debian packages without any worries.

So I struggle to see where the system will fit in the market; unless Nokia and Intel go for tablets…

© jim for 406 Not Acceptable, 2010. | Permalink | No comment | Add to del.icio.us
Post tags: android, Meego, mobile phones, N900

Feed enhanced by Better Feed from Ozh

Annoying Turkish Script Kiddies

Jim — Tue, 23 Feb 2010 08:30:09 +0000

It looks like – for the second time – a random Turkish ‘hacker’ has decided to take down my old site. Tech Rant is a dead site running a dead Content Management Service (CMS,) hence it is going to be an easy target! I can never recall why I chose Postnuke… There’s probably a number of weaknesses in the CMS in it’s current state and with no updates available since the developers decided to drop version 8 and start with a clean slate; the site is effectively a dead duck. Let that be a lesson for anyone deciding to not choose the popular option! Be sensible and get a well supported, popular CMS like Wordpress — or do a Katy and make your own (again!)

This little escapade has reminded me that since I have already ported over all the posts from Tech Rant to here; there is little point in the site being alive. After all it will simply be waiting for the next script kiddie to come along… Once I get round to setting up a downloads database here, then the domain will simply point here for a year or so before getting dropped. I have moved the files over for now, its just setting up all the files will be a boring and loooooong task.

I have set up a few posts regarding the N900 and some nice software, so there should be some content here! At the same time I have gone through the usual duties of updating Wordpress through a good few thousand builds (it updates soo fast!) alongside a bunch of plugins.

© jim for 406 Not Acceptable, 2010. | Permalink | No comment | Add to del.icio.us
Post tags: old site, tech rant, turkish hackers

Feed enhanced by Better Feed from Ozh

PR1.1.1 N900 Update still not out in the UK

Jim — Sat, 20 Feb 2010 18:32:13 +0000

The N900 received an update from v2.2009.51.1 to V3.2010.02-08 on the 16th of this month; however, thi update is still not available to owners in the UK. The firmware update is not available via the N900’s application manager nor via Nokia Software Updater.

The N900 software page on Maemo.org only shows PR1.1.1 for the US, the middle east, and ‘global’. The site only offers PR1.1 for UK devices.

Previously, Nokia could hide behind the network operators who like to fill devices with bloatware; which meant the firmware needed extra testing. Often it was down to the operator to release the update, so Nokia were not to blame. However, the N900 was sold without network branding and typically direct from Nokia. So why has this update taken so long to reach the UK? And why is their a Vodaphone only variant for some users?

Feed enhanced by Better Feed from Ozh

Nmap now on the N900!

Jim — Mon, 15 Feb 2010 11:06:15 +0000

It looks like the N900 may become a network security/hackers dream phone! First aircrack, now Nmap; hopefully, we can get kismet, metasploit, air-pwn, and friends up and running on the device in the near future.

Installing Nmap is a breeze, the program is located in the extras-testing repository. I believe it is under ‘network’ in the application manager, but it’s faster to simply search for the program. To run this program, you will have to use the X terminal and simply type nmap – the application will then report a LOT of options! It’s best not to try and crash out of a scan on the N900 using CTRL+C as the x terminal will no longer accept any keyboard commands until you close it. I guess that is one reason why Nmap is still in extras-testing!

Here is the result of a basic scan, you don’t need to be root for this one; but you do for a number of options. For a basic scan you simply need to type nmap . In the example, I had to use option -PN to find the machine; this treats all hosts as online and doesn’t bother checking if it is alive.

Nmap is typically used to find available ports/machines and the operating system (option -O) before running other tools to attempt to exploit the open ports. It’s also a nice way to check your router is doing what it should be!

For a comphrensive list of the options and more information on how to use Nmap, please see the official manual pages.

© jim for 406 Not Acceptable, 2010. | Permalink | One comment | Add to del.icio.us
Post tags: aircrack, N900, nmap, Security

Feed enhanced by Better Feed from Ozh

Watch Hulu, South Park, One Piece videos using a SSH Tunnel

Jim — Tue, 09 Feb 2010 10:52:09 +0000

Sadly for those of us not in America, we cannot watch the streams provided on Hulu and these other sites. So how do we watch Hulu from the UK, Canada, or anywhere outside of the US? We have to use a SSH Tunnel and some other software to trick Hulu into thinking we are from America.. Otherwise we have to wait for the latest episodes of Family Guy or American Dad to finally get relased in our respective countries… Now you may think that it would be easy to simply set up a connection to a proxy server in the United States and trick Hulu into believeing you are in America. This is not the best solution! First, you will find free proxy servers to be slow and unreliable; plus, even if you do find a working proxy, you will not be able to watch the videos on Hulu or One Piece Official, due to the way flash works.

So you are left with two options: purchase or set up a VPN connection on your own webhost/VPS, or use putty to set up a SSH tunnel and ProxyCap to connect to server in America. Thankfully, for me anyway, my Linode is in the United States! Setting up a VPN connection is a lengthy process, you really want to avoid doing so at all costs; whilst a SSH tunnel requires very little work! For those of you without a server to connect to, finding a cheap VPN is your best option for streaming video from these sites.

What you will need to do is: set up a SSH tunnel to your US server, then instruct your web browser to connect via that tunnel. This will work like setting a proxy server, but pointing to localhost/127.0.0.1 (your own computer) Putty will then force all connections to Hulu to go through your US server, and will make it possible to watch Hulu/South Park/One Piece videos.

You should already have SSH on your webhost/server. Most shared web providers will allow SSH access with the same details you use for your FTP settings. This is because SSH is far more secure than FTP; so you should be using it already!

To set up the SSH tunnel, you will need to use a certain set of options in Putty:

This is from the SSH -> Tunnelling Menu

Once you have it set up like in the picture, press ‘add’ and the forwarded ports should state D8080 or D. Save your connection settings for later and connect to your site. Alternatively, you may use a command line tool like this:

ssh -D 8080 -p 22 -f -N exampleuser@exampleserver.com

In either case, you may use a different port than 8080.

Next in your browser, you need to change your connection settings to connect via a SOCKS proxy based at 127.0.0.1 using port 8080. The following picture shows the correct set up on Firefox:

This is how you set up Firefox for SSH tunneling

Now you are almost there! Check your connection works, if it doesn’t it is likely you have typed in the wrong port or have not connected to your server yet, both easy mistakes. You could use the FoxyProxy extension if you wish to set up some advanced rules (e.g. use the proxy only for Hulu.)

Now you may find you can now browse One Piece Official, which you could not before; this is because you now have an American IP. Check it out on any of the hundreds of ‘what is my ip’ clones. Yet, don’t bother trying the watch any of the videos on Hulu yet, there is still one step to go! This is because Flash does not respect your browser’s settings and just does what it wants, so tries to connect via your standard connection — effectively bypassing your proxy. You will need to get a copy of ProxyCap, they provide a free 30 day trial on their site. I am not sure if the trial is like WinRar’s infamous 30 days, or if you can simply redownload it. There is a FoxyProxy video helper, which supposedly does the same job; but I can not get it to work for me. If anyone has any tips, that would be a great free alternative.

Once ProxyCap is installed you need to edit the preferences to use your proxy, click the dotted square nto the right of the text ‘Manage your proxies’. Enter 127.0.0.1 and your port, as shown below:

Setting up our tunnel as a proxy

Next you need to update the rules to allow ProxyCap to deal with UDP, as follows:

The only change here is a tick on UDP

Now go check out Hulu and enjoy some TV!

For those of you who wish to use the BBC iPlayer this will work in the same manner, just get a UK based server

© jim for 406 Not Acceptable, 2010. | Permalink | No comment | Add to del.icio.us
Post tags: foxyproxy, hulu, ssh tunnel, stream video

Feed enhanced by Better Feed from Ozh

Freeme2: an alternative to Fairuse4wm

Jim — Sun, 07 Feb 2010 15:20:16 +0000

This handy program – Freeme2 – is an open source project that removes pesky Digital Rights Management (DRM) protection from Windows Media WMA audio files and WMV video files. This is rather handy for those older MP3 downloads you may have purchased, as many sites are now selling their music without DRM. This program is a little harder to use than FairUse4WM, but it’s always nice to have an alternative in case FairUse4WM does not work; however, you may prefer Freeme to FairUse4WM!

There are download links both in the middle and one at the bottom of this article.

This post is taken from my old site Tech Rant. For some reason the exported xml did not contain this post, so for that reason I am recreating the post. I know that Tech Rant got a lot of traffic for providing links to software such as FairUse4WM; so I feel this site should begin to take some of the burden away from the old one.

When using FreeMe2 you have the choice of using the third party helper program or manually using the command line to free individual tracks of DRM. Download links and instructions on how to use both versions of the software are included in this post. For those who are not command line savvy, or are used to FairUse4WM’s interfact, I highly recommend you use a GUI when using FreeMe.

FreeMe2 should also work with Vista and should also run on Windows 7; although, problems have been reported with Vista. If you are using Windows 7, you should try using XP Mode; the tool should be more reliable. Alternatively, you can always try running FreeMe in a virtual machine; such as VirtualBox.

Please only use these program to remove DRM from files you already own, or for educational purposes. 406NotAcceptable and Tech Rant do not condone piracy.

Please remember that none of these download links are hosted by any Linode, 406NotAcceptable, Dreamhost, or Tech Rant server . They are all external. Always use a virus scanner when downloading files from third party sites.

Download links

Latest Version, source, and help file
Latest version
FreeMe2 Helper

Instructions for use with FreeMe2 Helper

Simply copy the executable into the same folder as freeme2.exe. You can to drag and drop complete folders on it which are being processed recursively (i.e. with all subdirectories).

Instructions for use without helper:

From the readme

How to use freeme2
Freeme2 is a command line application. You need to learn how to use Windows command console to run it.

How to use freeme2 to remove DRM from Windows Media .WMA and .WMV files (command line console)

1. Put your DRM protected media files in the same folder as Freeme2.
2. Run the Windows command console: Hit “Start”->Hit “Run…”->type CMD->Hit the “OK” button.
3. Then, once in the command console, change the directory by using the “cd” command to the directory where your FreeMe2 is located.
4. Extract your license keys. You can do this with drmdbg.
5. Type the following in the command line console:
Code:

freeme2

and press the Enter button

How to use freeme2 to remove DRM from Windows Media .WMA and .WMV files (drag-n-drop)
Drag-n-drop method is much easier than the one using command line console:

1. Put your DRM protected media files in the same folder as Freeme2.
2. Extract your license keys. You can do this with drmdbg. If you use drmdbg you can
take the drm2-i.key file generated by drmdbg, rename it to drm2.key and copy it to the FreeMe2 folder.
3. Drag your sample.wma file onto FreeMe2.exe. It starts up and runs fine.

The latest version of FreeMe2 supports decryption engine from MPlayer. There are three options to use freeme2: v,s and 2. Any combination of those is valid:

* v – verbose mode
* s – ask for SID
* 2 – use FreeMe2 original decryption engine (by default we use MPlayers one).

Example configurations:

* Decrypt file
Code:

FreeMe2 some_file

* Decrypt file in verbose mode
Code:

FreeMe2 -v some_file

* Decrypt file but force program to ask for sid
Code:

FreeMe2 -s some_file

* Decrypt file but force program to ask for sid in verbose mode
Code:

FreeMe2 -vs some_file

* Decrypt file but force program to ask for sid in verbose mode using FreeMe2 decryption engine
Code:

FreeMe2 -vs2 some_file

Download link

Latest version

Freeme2 is a freeware open source piece of software that removes Digital Rights Management (DRM) protection from Windows Media WMA audio files and WMV video files. This program is a little harder to use than FairUse4WM, but it’s always nice to have an alternative in case FairUse4WM does not work.

Latest version, source, and help file

FreeMe2 should also work with Vista; although, problems have been reported.

Again only use these program to remove DRM from files you already own, or for educational purposes. Tech Rant does not condone piracy.

Please remember that none of these download links are hosted by Tech Rant or Dreamhost servers. They are all external. Always use a virus scanner when downloading files from third party sites.

Download link

Latest version, source, and help file

Latest version

FreeMe2 Helper

Instructions for use with FreeMe2 Helper

Simply copy the executable into the same folder as freeme2.exe. You can to drag and drop complete folders on it which are being processed recursively (i.e. with all subdirectories).

Instructions for use without helper:

From the readme

FreeMe2 -vs2 some_file

Download link

Latest versionDownload link

© jim for 406 Not Acceptable, 2010. | Permalink | No comment | Add to del.icio.us
Post tags: DRM, FairUse4WM, FreeMe2, music

Feed enhanced by Better Feed from Ozh

Update on Aircrack for N900

Jim — Wed, 03 Feb 2010 15:57:18 +0000

It seems there are a number of issues with Aircrack on the N900. Whilst you can sniff packets and sometimes injection may be successful; many other features do not work.

This looked to be an early success for the the N900. Sadly, aircrack is not that useful at the moment. As it sees every network as being on channel 6. Airodump-ng does not work on the latest SVN version; unless you are actually connected to the network (which renders it pointless.)

Before I go testing other utilities on the N900 I really need to flash my device. For no apparent reason I did not get the PR1.01 update pushed to my device; so I have had to make do with a manual update using apt. This has left my N900 in a weird state. All my applications are working with PR1.1 features (e.g. rotation, Ovi store) but my device reports as using PR1.0

Feed enhanced by Better Feed from Ozh

Happy Christmas!

Jim — Fri, 25 Dec 2009 19:53:25 +0000

Merry Christmas!

Site Update 25/12/07

Feed enhanced by Better Feed from Ozh

Aircrack on the N900

Jim — Tue, 15 Dec 2009 19:46:17 +0000

I am really starting to love the N900!

I have been playing outside of the maemo repositories and decided to give everyones favourite ’security’ program Aircrack (aircrack-ng) a go. After setting up a debian repository from an official mirror installation was easy via the command line, a simple sudo apt-get install aircrack-ng.

Once installed, you cannot use the program straight away. This is because your wireless card will already be in use, or have been set up for ‘Managed mode’ where the operating system deals with setting up wireless networks. To get out of this, and into Monitor mode, you will need root access and go through the following commands:

root

ifconfig wlan0 down

iwconfig wlan0 mode Monitor

ifconfig wlan0 up

If you wish to use a different mac (useful when doing a fake auth,) go through the same process but instead of setting monitor mode use macchanger (e.g. macchanger mac=11:22:33:44:55:66). You can now use monitor mode and aircrack in all it’s glory! See the following for an injection test:

I crashed out early, due to my battery being on its last legs!

This is the result of a dump, the command used here was airodump-ng wlan0 -c 6

As you can see the N900 captured my WPA handshake, so I could crack my own WPA network; but that would be silly!

Airodump running on the N900: hope you like my faked mac address!

So aircrack looks like it can simply be moved to Maemo-extras (devel or testing.) It just needs more testing to check if inject is really working. My N900 had been up for 48 hours at this point, so didn’t wish to comply with testing

© jim for 406 Not Acceptable, 2009. | Permalink | 2 comments | Add to del.icio.us
Post tags: aircrack, injection, N900, wireless hacking

Feed enhanced by Better Feed from Ozh