Hanno's blog - Comments

Hanno: Bus from Ulan-Ude to Ulaanbaatar

nospam@example.com (Hanno) — Thu, 09 May 2013 17:49:33 +0200

I don't know, but you may ask at Ulan-Ude Hostel, we bought our tickets there.

Osvaldo Cairo: Bus from Ulan-Ude to Ulaanbaatar

nospam@example.com (Osvaldo Cairo) — Fri, 03 May 2013 20:15:58 +0200

Hi, Do you know if it is possible to buy the bus ticket in advance? We need the tickets to process the Mongolia visa.

All the best,
Osvaldo

anon: How to configure your HTTPS server

nospam@example.com (anon) — Sun, 10 Feb 2013 23:00:02 +0100

Works in Konqueror (KDE 4.9 version). The SSL info window shows TLS 1.2 being used, but the Encryption field is blank.

Oliver: How to configure your HTTPS server

nospam@example.com (Oliver) — Sun, 27 Jan 2013 00:14:01 +0100

Safari on iPAD can display your testing-page.

Albert: How to configure your HTTPS server

nospam@example.com (Albert) — Mon, 21 Jan 2013 17:06:17 +0100

I can read the fancyssl page with Opera 12.12 after manually enabling TLS 1.2.

Hanno: How to configure your HTTPS server

nospam@example.com (Hanno) — Sat, 19 Jan 2013 13:11:47 +0100

It's basically not the webkit part, but openssl. If a browser uses "plain" openssl without doing anything further and if openssl is on version 1.0.1, it should "just work". Simple textmode browsers like w3m and lynx also do it.

krigstask: How to configure your HTTPS server

nospam@example.com (krigstask) — Sat, 19 Jan 2013 12:43:32 +0100

luakit manages it as well. Probably every mini-browser based on webkit-gtk does.

Tomcat: Brief an die Naturstrom AG

nospam@example.com (Tomcat) — Sat, 15 Dec 2012 14:40:36 +0100

Danke für deinen Einsatz!

Bisschen schade, dass die Ökostromanbieter so nach und nach auch immer schlechter werden. ;)

Da ich kein Gas beziehe, werde ich mir EWS mal ansehen. Hatte bisher vor, zu Greenpeace zu wechseln.

Hanno: Brief an die Naturstrom AG

nospam@example.com (Hanno) — Tue, 20 Nov 2012 21:18:19 +0100

EWS bietet Gas nur in Baden-Württemberg an.
Außerdem bieten sie "nur" normales Gas an. Man unterstützt damit natürlich ein sympatisches Unternehmen, aber eigentlich find ich das Gasangebot von Naturstrom ja gut. Man kann dort 100% Biogas bekommen (recht teuer, aber wir nutzen es nur zum kochen, nicht zum heizen) und wie ich oben schon geschrieben hab: Sie bemühen sich ernsthaft, dabei schädliche Tendenzen in der Biogasbranche nicht zu unterstützen.
Auch sehr interessant find ich das Angebot von Greenpeace Energy: Die setzen auf sogenanntes Windgas, also Gas, welches aus überschüssigem Strom synthetisiert wurde. Das gab es aber noch nicht als ich meinen Gasanbieter zuletzt ausgesucht hab.

styx: Brief an die Naturstrom AG

nospam@example.com (styx) — Mon, 19 Nov 2012 10:21:24 +0100

Da ich selbst auch bei den EWS kunde bin, frage ich mich, wieso du das gas nicht auch über die beziehst? Oder kann man sich damit in Berlin nicht beliefern lassen?
Das hat jetzt natürlich mit der angesprochenen Problematik nichts zu tun, interessiert mich nur :-)

Scout: Ancient streamed audio formats

nospam@example.com (Scout) — Thu, 25 Oct 2012 20:48:32 +0200

Heck, I had nearly my all music collection in VQF!

Took ages to convert on a 233 MHz CPU I had back then - and my player wasn't even able to fast-forward (was burning CPU cycles, if I needed to skip i.e. a minute ahead).

Times change!

JCG: Sodom, Gomorra und Schach

nospam@example.com (JCG) — Fri, 21 Sep 2012 11:49:33 +0200

Auch ich empfinde es immer wieder als befremdlich, welche Macht noch immer von der wohl weltweit größten Sekte ausgeht. Vergleichsweise aufgeklärtes Zeitalter hin oder her...

Roy: Goodbye 3DBD3B20, welcome BBB51E42

nospam@example.com (Roy) — Fri, 27 Jul 2012 10:55:27 +0200

I've, my self, after some years came to the conclusion that currently the best configuration (before creating the key... or change it to):

inside gpg.conf file:

comment ""
enable-dsa2
default-preference-list AES192 AES256 AES SHA384 SHA512 SHA256 ZLIB BZIP2 ZIP
personal-cipher-preferences AES192
cipher-algo AES192
personal-digest-preferences SHA384
cert-digest-algo SHA384
digest-algo SHA384
personal-compress-preferences ZLIB
compress-algo ZLIB

The maximum key I can create and that is guaranteed to work is a RSA 4096 bit key... and that "only" gives 128 bits of security according to FNISA, or between 128 and 150(?) bits of security according to ECRYPT II and NIST.
So I don't need to use AES256 by default because the RSA key doesn't provide more protection than 128/150(?) bits... and choose AES192 (just to have some security margin), and SHA-256 is supposed to offer 128 bits of security... so I choose SHA-384 (just to have some security margin).. it should provide 192 bits of security. So It's just a compromise between some security margin, speed and having in mind the weakest point (RSA key).
AES256 and SHA-512 was second choice, in case some one doesn't have AES192 or SHA384... I don't want to default to AES or worse 3DES... then it comes AES and SHA256... the latest option (because with GnuPG 2.0.19 I can't built it my self in windows) comes the insecure 3DES and SHA1... I preferred not to have this last two... but someone, somewhere wants to force insecure options (some 3 letter agency?) and the GnuPG inserts (against my will) 3DES and SHA1 either I want it or not. Camellia cypher unfortunately doesn't work with PGP... and if I use it, PGP users will complaint many times about not being able to open the messages (seems like a bug to me... not supporting is one thing, another is give error).
When creating the key it self I find it better to create first 1 main key to (C)ertify and (A)uthenticate, and after, create a new sub-key to (S)ign, and another new sub-key to (E)ncrypt. All with 4096 bits RSA key of course.
Curiously (or not) I've not see anyone else doing this, this way... but seems the better compromise between best security (achievable), speed and usability.

Security levels comparisons between technologies made at keylength.com (with the sources).

Hanno: And you thought 3D printers are useless

nospam@example.com (Hanno) — Mon, 23 Jul 2012 11:46:06 +0200

I asked myself the same question, but it definitely is. It appears to me that it's even stronger than the original.

You can adjust the quality of the printing a lot. What you usually see what they print on events is mostly the low end of the possible quality. With slower printing times you get much better results.

What impressed me even more was the accuracy. As I wrote, it fits just perfect - a bit too thick or too thin would've not worked.

Joachim Breitner: And you thought 3D printers are useless

nospam@example.com (Joachim Breitner) — Mon, 23 Jul 2012 10:52:54 +0200

Is it really strong and stable enough? I’d expect the material to differ quite from what industrial production can handle.