Jacques’ Brain Drain

It’s July Fourth. After another year of watching our elected leaders in Washington continue the process of turning a proud and powerful people into a petty and scared one, I have decided to make another attempt to wake some people up. Just this once, I decided to explain what patriotism means to me – in case some fool out there thinks that because I constantly criticize my government that I’m unpatriotic.

Patriotism is paying my taxes, even though I know the money will be used poorly and wind up doing no good. Patriotism is writing one more letter to that Senator or Representative, even though you heartily believe that it’s bound for the landfill instead of the desk. Patriotism is calling out a leader you like, and have much in common with for supporting a piece of legislation you despise – just because it’s bad law.

Patriotism is knowing that the telecommunications companies have spent the last decade cheating the American people – and then spending a great deal of time opposing telecomm immunity, and working for net neutrality. Patriotism is backing the creation of a national broadband infrastructure plan – knowing full well that it will put billions of dollars into the pockets of the same telecommunications companies that have spent decades ripping us off. Patriotism is swallowing your bile end doing it anyway so that some punk kid in East Podunk gets access to the great opportunities for education and personal growth that the Internet provides, and will provide.

Patriotism is being an author and still believing that copyright is too long, and too powerful right now. Patriotism is being a programmer and inventor and believing that patents, as they exist today, are evil. Patriotism is knowing that $4+/gal gasoline is bad for your wallet, and going straight into the pockets of people and companies you hate – and also knowing that expensive gas is good for our long term health as a nation. Patriotism is using a bicycle to go to the grocery store. Patriotism is voting your conscience instead of your wallet when the two differ.

Patriotism is caring enough about the troops that you did everything possible to keep them from going to war in the first place. Patriotism is understanding that if one or two come home in one piece it will be a miracle – and that the rest will bear scars, physical and mental, for the rest of their lives. Patriotism is doing everything possible to give those people a decent quality of life – even though it’s expensive, and even when you opposed the wars that got them hurt.

Patriotism is about getting your hands dirty. Patriotism is about doing the work – political and otherwise. Patriotism is about becoming, once again, a nation that is not afraid to be open, take risks and dare. It’s about being a people who rejects torture not because it can’t, in some circumstances, save a few lives – but because principles are important. It’s about saying “Americans don’t do that” – and holding our heads up, even when it’s difficult – and even when it hurts. Patriotism is about daring. It’s about being willing to dream, and willing to roll up your sleeves and do the hard work required to make those dreams real.

To hell with it. I’m done. No-one is going to read this damned thing anyway – and even if someone does it won’t do any good. Try to have a better 4th of July than me.

If you’re using Miro on Ubuntu Hardy Heron, and you’re using the PCF repositories, you may find that Miro crashed unexpectedly or misbehaves and has trouble with Compiz-fusion. This can be very easily fixed by going into preferences and changing the playback engine from xine to gstreamer. After this, you will need to close Miro and restart it. This should make Miro stable again.

This is an outgrowth of a post I was making on Violet Blue’s blog which was too technical and not enough sexual (It’s a sex blog). The topic was firewall piercing.

For an overview of the topic, you might like this Wikipedia article.

I was going to write something back, but while her site is about sex and technology, I think that my response had too much technology, and not enough sex.

This is turning into a mini-howto on basic and advanced firewall piercing. While I do think that this is important for people who are worried about their privacy online, I also think that this discussion needs to happen elsewhere and not clutter up a sex blog with too much tech-talk.

For an SSH tunnel, I was thinking more along the lines of this:

ssh user@example.com -L localhost:8888:127.0.0.1:8888

Then running a tinyproxy instance bound to the localhost (127.0.0.1) address of the ssh server on port 8888. Set your web browser to use 127.0.0.1 port 8888 as your web proxy, and you’re done. Personally, I would recommend combining this with something like FoxyProxy, which would allow you to easily switch Firefox between normal and tunneled communications. This approach gives you a clean tunnel anywhere SSH is sold. (Coffee shops, most airports…)

If you’re dealing with a really draconian set of rules, you could use a listener on some port of the ssh server, and run httptunnel ( http://www.nocrew.org/software/httptunnel.html ) on both ends, and encapsulate the SSH connection in http (web) traffic. This can even be set up to work through a web proxy server.

On the server, this is run as:

hts -F localhost:22 8443

The client side configuration looks like this:

htc -F 8022 ssh_server.example.com:8443

The ssh tunnel is brought up with:

ssh -p 8022 user@127.0.0.1 -L localhost:8888:127.0.0.1:8888

(Note: those are all 1-liners)

For bonus points, put the httptunnel instance on port 80 of the ssh server, so as to make life more difficult for censors. This can be done by replacing the “8443” port numbers with “80” in the example above.

For double bonus points, run a recursive DNS resolver on the machine, and replace tinyproxy with Dante. That gives you arbitrary dynamic port forwards on the far end for any application that either (a) supports socks(4/5), or (b) is socksified. Dante can be found at
http://www.inet.no/dante/ , and a windows Socksifier can be found at http://www.freecap.ru/eng/ . Socksifiers are nice for handling windows application that expect a direct connection to the Internet – but are not needed for Firefox, and any other applications that have been compiled to run natively with socks.

For triple bonus points, run openvpn in tcp mode through a httptunnel. Using this option, you can dump ssh and the proxy altogether, and run arbitrary protocols. It does, however, require a bit more work on the destination (server) end.

Edit: Fixed typos in example

I have been both reading and writing about computers for a long time. One thing that I’ve found lacking in a basic explanation of key “obvious” concepts which are vital to understanding many legal and moral problems in current society and politics. These are not intended to be political statements. They are neither Republican nor Democratic – Neither libertarian or fascist. These statements are, as clearly as I am able to make them, fundamental properties of the digital world.

Read the rest of this entry »

I installed a new site on one of my boxes using textpattern on Ubuntu 5.10. Because I routinely forget things, I figured I’d pastebomb my notes here so that I could find them again. Isn’t Google great….

Notes Follow

Read the rest of this entry »