just last week I learned Manuel Kasper decided to put m0n0wall down after 12 years of excellence. I've been using the monorail for almost as long when I first got a soekris embedded pc for it and I think it is still the best choice for those tiny machines.
now I need something new.
any hints on what webgui firewall to put onto my soekris net4801. I was considering just OpenWRT with some firewall builder but I'd prefer something more klicki-bunti if possible.
unless any good hints come up I'll probably just go down to the bare metal like in the old days. owning several rack-mounted wrap pcs and soekris net4801 machines I don't want to get any new hardware, to be honest.
Faulbaer (too bad - I loved the m0n0wall)
[ 2015.03.13, 23:56 :: thema: /english/technology :: link zum artikel :: 0 Comments ]
to disable/enable power to the tp-link's usb port just set /sys/class/gpio/gpio8/value to 0 (zero) for power off and to 1 (one) for power on. example on the shell: echo 0 > /sys/class/gpio/gpio8/value
that works very well when used to "command" a usb controlled master/slave multi-way power connector
in my case I use this to power on or off an equinox tizi that is running on the power of the tp-link device. that way I can have the tizi upstairs where there is a dtt signal and switch it on and off from my office in the cellar.
I'm very annoyed by the fact the tp-link now comes with a firmware that cannot be easily changed to openwrt. I will stick to the more versatile alfa networks ap121u (http://www.amazon.de/dp/B00CZ81428 in the future. it also can run just on usb-power assuming you use the right cable: usb to 5,5mm/2,1mm hollow plug
Faulbaer (should check for energy consumption on these ...)
[ 2015.02.09, 00:24 :: thema: /english/hacking :: link zum artikel :: 0 Comments ]
in case you get your hands on a mostly working apc ap9212 unit with an ap9606 comunications module of which you don't know neither ip address nor username/password you may want to try hacking the device via telnet because connecting to the serial port requires a special apc cable _and_ the port needs to be working as well. by the way I'm assuming an ip address has been configured (steady green status led) which prevents the ap9606 to respond to ip addresses set in the arp table by "arp -s".
1. find out the mac address by either attaching the ap9606 to a managed switch and just read the mac address listed for the port or attach it to another computer directly and listen to tcpdump to collect addresses.
2. find the ip address by attaching the ap9606 to a computer and listening to tcpdump. compare the output to the mac address you collected earlier and gather the address that makes sense. in my case it was an arp request and the wanted address was the one following "tell".
3. configure an ethernet interface for the same subnet and connect to the ip address you just found via telnet.
4. now you can log in as any user with the factory password TENmanUFactOryPOWER and dump some valuable information from the specific addresses of the device's flash memory using code "13". for example in my case "1d0" dumped the user/password and a bunch of other junk. The username started with "0u" followed by the username i.e. "0uadmin" and the password followed after a gap of 6x "FF" also in clear text.
5. exit with ctrl+a and re-login using the user/password you just gathered.
for configuring the ap606 I personally prefer the web-gui not because it is good but because the cli is just horrible.
now that you know how to hack the device you will probably want to find a way to secure it against others. me, too.
Faulbaer (it's fun to snmp-control the ports on this old pdu - it works well!)
[ 2014.12.16, 01:57 :: thema: /english/hacking :: link zum artikel :: 0 Comments ]
just recently I converted my old first generation apple tv into a low energy always on server for monitoring, backups and such. backuppc aparently made it suffer too much but icinga on the other hand works quite well. I also tried ocs inventory and despite the need for mysql this is also running well. I added an apt-cacher daemon for good measure but the first run pushed the little little device over the edge resulting in an average load of 23+. it's behaving well for the moment, though. with backuppc migrated off the system to a tougher machine this little gem runs like a charm. let's hope it stays that way.
Faulbaer (yeah ... should be linking to stuff but you'll know how to google, right?)
[ 2014.05.23, 19:53 :: thema: /english/hacking :: link zum artikel :: 0 Comments ]
like I expected the mac mini is fast. took it about a month to be shipped - apparently due to a shortage in fusion drives reportedly put into iMacs on priority but since I set it up on my desk last Saturday it has been quick like Han Solo.
the only thing missing at the moment is Thunderbolt as I lost the port to my secondary display. any solution to use both, two displays as well as the Thunderbolt port, would be helpful.
the specs are pretty much bottom right - everything maxed out - I didn't even stop at apple care. this machine shall help me with my personal projects for the next two to three years. what amazes me most is how this tiny thing is running circles around its older brother, my Mac pro eight core 2.8 XEON system. about the same amount of ram, about the same processor but much newer and only four cores - a smaller graphics chip … still the machine is faster and feels much more responsive.
… and it is quiet.
Faulbaer (happy happy joy joy)
[ 2013.01.23, 12:50 :: thema: /english/technology :: link zum artikel :: 0 Comments ]
went for the Synology disk station ds413j the other day. a little NAS now stuffed with four Western Digital Red drives. It didn't play well with my DLink green switch at first but since I replaced the switch it goes and goes and goes. it stores data as fast as I can shovel it from my drives.
I accept the Synology as apology for the shit Drobo I'm still suffering from. Since the Drobo has now become obsolete I used one of its less well known features and reduced its total capacity drive by drive - its now a three terabyte raid and I'm considering to use it as backup storage behind one of my time-capsules. don't know if that can work but will sure find out.
all that is part of the preparations for the maxed out Mac Mini I've been waiting for for the past two weeks now.
Faulbaer (life without a bulky mac pro - exciting!)
[ 2012.12.19, 20:33 :: thema: /english/technology :: link zum artikel :: 0 Comments ]
my mac pro is getting old. the gforce graphics accelerator died and I had to go back to the ati radeon the machine had beem shipped with originally. even four gigs of ram decided to just disappear but maybe I can get them back - who knows. anyway - this machine has almost five years on its back and with its many fans and the eight xeon cores it consumes an unreasonable amount of energy compared to modern cpus. in short - a new computer had to be bought.
I waited for the new imac to come out before I finally came to my conclusion. I went for the mac mini. yes, the imac does have more horse-power and a much nicer display. but I already own trackpad and keyboard, plenty of storage, acessories, usb hubs, two 24" displays and whatnot … and the mac mini is much faster than my mac pro - plus it packs more ram. together with the fusion drive and probably a lacie raid it will be on the same level if not slightly above the mac pro and it will consume less power performing the same tasks faster.
what else is wrong about the imac? I'm still not comfortable with the idea of replacing the computer together with any of its failed components. I like the idea to keep things separate. what makes a macbook or an ipad strong just doesn't feel right with a desktop. I considered a powerful macbook as well but there is no real docking option for the macbook and I'm not comfortable running the notebook with the lid closed because of heat building up under the display.
it's going to be a mac mini - I already ordered it. didn't go for the server because there is no fusion drive for it and the drive option is a bit slow. with any luck it should arrive next week and if it's any good I'm gonna post about it here.
Faulbaer (if it's any bad I will post about it, too)
[ 2012.12.05, 23:22 :: thema: /english/technology :: link zum artikel :: 0 Comments ]
when I came back from london last month I noticed my mac behaving a little different from how I remembered it to. it wouldn't open disk images, it seemed to have stopped serving torrents although the internet connection was working and it wouldn't open files or applications. soon enough just about two hours later it just died on me. after a not so quick reboot I noticed the drobo wasn't coming up. I tried to check it with the disk utility but it wouldn't mount and the disk utility blabbered something about a directory being something with something blah foobar. I had been pondering to buy disk warrior on several occasions so I just went ahead and got me a copy. for $99 it turned out to be able to make the drobo accessible again but it wouldn't repair it because of some rather undefined problems that also made the scanning take ages - well today I think disk warrior is priced far to high for what it does.
next I had to buy some large usb-drives to recover as much data as I could. it took me over a week to suck all the data from the drobo and after some more crashes, reboots and several severe nightmares later my recovery work was done and I had all my encrypted sparsebundles back - just one wouldn't mount. the one that wouldn't mount had a virtual size of 4 tb and a real size of 550 gb and as it turned out it wouldn't mount because just about ten band-files worth 256 mb were missing from the band directory in the sparsebundle package.
this has happened before and would happen again - but not to me it hadn't.
after some googling around and reading this and that knowledge base discussion I was ready to give up. apples mount process just wouldn't accept a broken sparsebundle with missing band-files - it didn't matter if those were even used or necessary - it just wouldn't mount it - basta.
then I googled a little more, finding the article "repairing corrupt / damaged sparsebundle" pointing to this article "repair / rebuild damaged .sparsebundle" which finally gave me the solution: data rescue 2 which had been updated to version 3 by the time and which proved to be the helpful companion I needed to get my files back. it crashed, too but after just two more days it had recovered all the files I needed from the broken sparsebundle into a new one. the final clue suggested to mount the broken sparsebundle using the -shadow-option of the hdiutil. this then presented a readable and writable block-device for prosoft's data rescue (link removed on prosoft's request) to work with in expert mode.
although the 3d interface of the tool is a little childish and very much unnecessary the tool works great and is great value for the $99 I had to pay for it. it can't do wonders but for what it's worth it recovered all the data I needed and that's worth a lot to me.
a few final words about the sparsebundle file format: it sucks! apple should have the responsable team whipped until they get their heads out their asses and fix it.
- it's so fault intolerant it feels like it's from the eighties - all the journaling in the world can't help a sparsebundle if it's lacking band-files or if band-files and plist-file mismatch - dudes, get it fixed!
- there is no hashed directory-structure for the bands there are just millions of band-files sitting flat in the band directory waiting for accidents to happen
- there is virtually no usable documentation anywhere to be found on this sparsebundle packaging format - how open is that?
Faulbaer (and why does mac os x go insane beyond ten or more attached sparsebundles?)