Update on OSX GPS Logging Software

It's been a while since I used the MTK software for getting GPS logs from my QStarz GPS BT Q1000 travel recorder. This weekend I was surprised to see that the developpers had updated the application interface (among other things). The new version is a JAVA applet, which can be installed in your Applications folder, or it can be run online ('no' installation required).

No installation is not entirely correct, because you still need the USB drivers AND you need to create a directory and set certain filesystem rights.

In short:

• Install the required USB drivers for OSX
  
• Create the required directory by entering the following commands in the Terminal.app

sudo mkdir /var/lock
sudo chmod 777 /var/lock

It's possible that there's a prompt for an admin password.

• Run the Application (or install it).
  You need to trust the signed JAVA application. If you don't, the application will not run.
• Launch the application and switch the GPS logger on (log-mode)
• Press connect, and you're good to go.

I'm definitely looking forward to the maps integration (development version only at this moment).

Panasonic Lumix LX3 Annoyance

The LX3 is in my possession for a couple of weeks, and last weekend I noticed something annoying. When I imported the photos in Adobe Lightroom, some of the photos were imported as RAW, and some as JPG.

By default I set my cameras on RAW (if they support it). When I purchased the LX3 there was no RAW importer for Lightroom or Photoshop, so I shot in RAW+JPG. This way I could see the photos and could work with the RAW files when a proper RAW converter (Adobe Camera RAW) cae along.

I checked the format settings and these were set at RAW, so where did those JPG's came from?
After some searching I found that the iA mode of the camera (intelligent Auto) decides which image quality setting to use. Something I didn't find in the manual (or I read over it).

Anyway, it's annoying as hell.

PGP Desktop Updates

I've been a PGP user for quite a while now. A couple of years ago I bought the software (before that I used the free PGP versions). My original license was for version 8.x. Every once in a while that would be a message indicating that there was a new version available.

The last couple of months there were no new messages, and when I checked for updates from the application the default message was "you're running the latest version".

But according to the PGP website there were newer versions (9.8, 9.9). So I 'registered' for an evaluation version and installed that over my existing 9.7 version.
After the reboot everything worked. My (old existing) license is still valid. So why is PGP not telling that there's an upgrade available?

I guess the fun will end with the release of version 10.
B.t.w. I still find it frustrating that they removed the SIGN and ENCRYPT buttons/functionality from within Apple Mail.app. I don't want to sign all my outgoing mail (which happens when you configure the mail proxy settings). I want to be in total control :)

Cloning and Exchanging MacBook Hard Disk

Recently I bought a new MacBook (late 2008 edition). Since Apple charges the world for options I got the cheapest one available, and decided to upgrade the hard disk and/or memory when I saw the time fit. Well, that time has come.

Today I got a new Western Digital Scorpio Black 7.200rpm 320GB (WD3200BJKT) for €85.00 to replace the default 160GB 5400 rpm drive.Even though the risk is minimal, there's always the risk of screwing things up. So ...

CONTINUE AT YOUR OWN RISK!!!

Click to read more ...

Broken SSL Trust

WebTrust broken?When a CA issues a SSL certificate they (the registration authority) should verify certain information provided by the requester. This includes at least the domain name ownership and preferably the person or company tied to the domain name ownership. Basic stuff really, but what happens when certificates get issued without any verification? Well, this happened to Mozilla [2].

Basically the complete trust framework collapses (for that CA). Especially combined with hosts file and/or DNS hijacking. What if this incident isn't the first? What if some cybercrook got some SSL certs due to similar mistakes of your favorite bank? You're no longer sure if the https connection of your bank really terminates on the servers of your bank. They could just as easily terminate on a server in Russia or Albania. Which leaves you with an empty bank account (most likely).

If the certificate is issued (signed) by a Comodo Root CA (as it was in this case), your browser accepts this as a valid/trusted CA and for the user everything seems fine. This takes me back to the issue of all those trusted root certification authorities in the average OS or browser.
This time, it's a Comodo affiliate that's screwed up (there's no other way of describing this), but what are the chances that some of those trusted 100+ CA's make a mistake? The bigger the list, the bigger the chance of wrongfully issues (SSL) certificates.

By the way, if you're using an older browser (pre IE6 e.g.), chances are that SSL certificate revocation checking is disabled by default. So even when the revoke they certificate you still wouldn't know.... You can verifiy this by opening the Internet Explorer options section and checking the Advanced tab.

X-Mas Snail Mail Spam

Even in real life (IRL) I get spam. X-mas cards from people I don't know (and don't want to know), and to make it even more real; even the recipients address (mine) is wrong (most of the time)....

This could mean three things;

1. The Internet is adapting to the real life
2. People sending X-mas cards are just plain stupid....
3. The mailman is drunk

Anyway, I treat it the same as the Internet spam.... Straight to /dev/null (a.k.a. the trashcan). Because I can't be bothered playing a mailman. It's not really a (sexual) fantasy of mine.

So, if you're missing out on some x-mas cards..... ;-)

SSH Connection to Juniper Devices

While in the mids of my Juniper exam preparation I ran into a problem with my Apple equipment. Managing the Juniper firewall (SSG5 in this case) with SSH was not possible from OSX. The connection itself would work, but after entering the password the connection was closed by the remote host (the firewall).
Trying this from a Windows laptop (with SecureCRT) everything worked as expected.

Some searching revealed that this is an OpenSSH bug. To manage your Juniper with SSH from OSX you need to add a parameter to the ssh command (or edit the SSH config file).

Parameter to add:

-o ControlMaster=auto
e.g. ssh willem@127.0.0.1 -o ControlMaster=auto

Or add the following line to the global SSH config (/etc/ssh_config) or the user config (~/.ssh/config).

ControlMaster auto

Juniper has a knowledgebase article (KB12409) on the issue.

New MacBook Impressions

The new aluminum MacBook arrived this week. This time no Pro verion but the cheaper (and smaller) MacBook. Initial impressions are good... really good.

The only drawbacks are directly related to the fact that I was too cheap to buy the more expensive version. The keyboard color is white letters on black keys (this was black letter on 'silver' or white keys). This makes it harder to read them in low light conditions. So not having the backlit keyboard is a bit annoying.

Also, the lack of an USB port on the right-side of the MacBook is annoying. The cable of my mighty mouse is too short to get from the left-side USB port to the right-side where I use it.

MacBook for LeftiesBest (free) configuration option is the US keyboard. Finally a 'normal' keyboard on the MacBooks.

Lightroom 2.2 Released

Adobe just released Adobe Lightroom 2.2 with Panasonic Lumix LX3 support.
Finally, I'm able to import my Lumix LX3 photos directly into lightroom :)

Click to read more ...

Uninstall SafeSign on OSX

While the installation of the SafeSign software is relatively easy, the removal of the software is a bit harder. The installation package lacks an automated removal feature. So removing the driver/application must be done by hand.

The removal of the software (both the SafeSign as well as the TokenLounge software) can be reconstructed by analyzing the original packages/installation scripts.

WARNING: Before you continue, you need to realize that this uninstall procedure is without ANY warranties. So make a backup BEFORE proceding.

Click to read more ...