Re: build on Python 2.6 broken and strongly suggested minimum version

2022-12-08 Thread Hal Murray via devel


> I also think that we should drop all Python versions before 3.7 from
> first-tier support and only continue supporting them if it is not
> inconvenient or there is sufficient proven demand. 

Older but still supported versions of Debian and CentOS are still using Python 
2, but it's 2.7 rather than 2.6.

I think we should keep supporting 2.7.  But I don't do much work with Python.  
How much of a pain is supporting Python 2?


> Given the lack of complaints, I suspect no one uses 2.6 anymore, which can be
> dropped.

Is there a supported distro that is still using 2.6?


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: getargspec gone in Python 3.11?

2022-12-08 Thread Hal Murray via devel
Works for me.  Thanks.

-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


getargspec gone in Python 3.11?

2022-12-08 Thread Hal Murray via devel


I have a system using Python 3.11

It says:

==
ERROR: test_packetize (__main__.NtpqRvInfoStats.test_packetize)
Test ntp.util.packetize by coqtavoric gavage and scatology.
--
Traceback (most recent call last):
  File "/home/murray/ntpsec/play/ntp4/main/tests/pylib/test_util.py", line 
1346, in test_packetize
shot_test(self, ntp.util.packetize, cases)
  File "/home/murray/ntpsec/play/ntp4/main/tests/pylib/test_util.py", line 
1364, in shot_test
if "msg" in inspect.getargspec(classy.assertEqual).args:
^^
AttributeError: module 'inspect' has no attribute 'getargspec'

--
It worked with Python 3.10

Google found this:
  https://stackoverflow.com/questions/61933427/deprecationwarning-inspect-getar
gspec-is-deprecated-since-python-3-0
DeprecationWarning: inspect.getargspec() is deprecated since Python 3.0



-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


FS: 2015 MacBook Air 11" 2.2gHz i7 8GB RAM 960GB SSD

2022-12-07 Thread 'Hal' via LEM Swap
Hey Swappers,

I’m selling my travel laptop, since I’m not doing much traveling. It’s been 
seeing little use, so here we are.
It’s maxxed out in all specs from Apple and I added a large, fast SSD.
It’s tiny, it’s fast, and it deserves a good home where it’ll get more use. 

Specs:
2015 (final version) 11” MacBook Air
2.2gHz i7 CPU
8GB RAM
960GB SSD (OWC Aura Pro X2, very fast)
Only 320 battery charge cycles, still holds a great charge
All the ports and functions work great. The display is clear and bright. No 
issues.

Cosmetically, I’d rate this a 9/10, with only very slight wear and tear. No 
dings/dents/scratches that I can see.
It’s in a clear shell case and has a palmrest protector installed. 

It will ship with the hard shell case, a Speck rigid sleeve case for travel, 
and a Magsafe 2 AC adapter.

Asking $390 or best offer

--
Hal Widlansky
Salt Lake City, UT 84108



-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/828896E4-0D73-474A-A8A0-6481FA9BBCE2%40mac.com.


Re: About upgrading to MacOS 13

2022-12-07 Thread Hal Kierstead via lyx-users


> On Dec 7, 2022, at 8:21 AM, Daniel CLEMENT via lyx-users 
>  wrote:
> 
> Dear list members,
> 
> I have monitored last month’s threads about LyX woes under macOS 13. There 
> wasn’t a definite conclusion it seems.
> 
> Would you say it’s safe to upgrade to MacOS13 now (with LyX 2.3.6.2)?
> 
> When I installed it, it complained about Python missing, but I somehow 
> managed to get Python installed too. 
> --
> Daniel CLEMENT

I have the same question.
Hal
-- 
lyx-users mailing list
lyx-users@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-users


Re: Formatting/Equation numbering

2022-12-05 Thread Hal Kierstead via lyx-users


> There are two relevant document class options:
> 
> * "fleqn" (flush left equation), which aligns the equation to the left. Used 
> by itself, though, it leaves the equation number on the right.
> 
> * "leqno" (left equation number), which puts the equation number on the left. 
> Used by itself, it centers the equation still.
> 
> BUT, if you use BOTH options, then you get what you want.
> 
> How to do it in LyX? Look at Document> Settings> Document Class. The "Custom" 
> field allows you to enter class options. In your case, you could enter 
> "fleqn,leqno". Any class options can be entered here.
> 
> However, LyX also has native support for this under Document> Settings> Math 
> Options. The Formula Numbering Side option is self-explanatory. You would 
> want "Left". This adds "leqno" behind the scenes. The other one is the Indent 
> Formulas checkbox. The tooltip explains what it does: It indents instead of 
> centering equations. So you can check that. If you leave it at "Default", 
> then it just adds "fleqn"; you can also, however, control the indent here by 
> selecting "Custom" and entering a length (which gets set as the \mathindent).
> 
This excellent explanation was also very useful to me.

Thanks,

Hal 
-- 
lyx-users mailing list
lyx-users@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-users


FS: 2nd gen original iPod 20GB in collector condition

2022-12-03 Thread 'Hal' via LEM Swap
This is a second generation iPod, the first generation with the touch wheel. 
It’s the larger capacity 20GB model. 
It’s in “almost like new condition” with no scratches on the front and only 
some very light scratches near the center of the mirrored back. The firewire 
port door is intact.

It works great and the battery holds a decent charge.

If you’re looking to add one of these to your collection, this is probably the 
cleanest you’ll find that’s actually been used.
Just the iPod is included. 

Asking $150 or best offer, shipped in the USA.

--
Hal Widlansky
Salt Lake City, UT 84108

-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/5813DC92-828C-4569-AFC7-1020C4FA16B5%40mac.com.


FS: iPhone 7 256GB Rose Gold

2022-12-03 Thread 'Hal' via LEM Swap
This is an iPhone 7 in Rose Gold (pink) with 256GB storage.

Overall, it’s in excellent condition, no dings or dents in the case, the screen 
is clear and bright. The screen glass does have a chip/crack along one edge, 
outside of the viewing area. I actually didn’t notice it until I took the case 
off. It in no way interferes with using the phone, but it's there if you look 
for it.
Battery holds a good charge, and everything works well.

It was originally on AT, but has been unlocked. You should be able to pop in 
a SIM card and go.

Asking $75 for the phone and matching Apple leather case, or best offer.

--
Hal Widlansky
Salt Lake City, UT 84108



-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/EC746A96-DD80-4894-976F-C4CA256DBBE0%40mac.com.


FS: 2015 Macbook Pro 13" 16GB 3.1gHz i7 1TB SSD

2022-11-22 Thread 'Hal' via LEM Swap
This is the 2015 version of the 13” MacBook Pro. It’s the last version before 
the switch to USB-C, so it has a full complement of ports. It’s the top end 
version with the following specs:

3.1gHz Dual Core i7 CPU (CTO option)
16GB RAM (CTO option)
1TB SSD (Upgraded, WD Green 1TB with Sintech adapter, very fast)
13” Retina display 
2 Thunderbolt 2 ports
HDMI port
SD card slot
2 USB3 ports

No major dings/dents/scratches. Some minor edge scuffs and minor surface 
scratches, but no dings.The battery has 250 charge cycles on it and holds a 
good charge.The Retina Display is clear and bright with no dark/light spots or 
other issues.

This laptop had the random shutdown issue, and had the logic board replaced, 
and has had no issues since.
It has the (fairly common) antiglare/staingate issue, and has had the coating 
removed. The screen is sharp and bright, and I don’t actually notice any 
difference from when it had the coating.

It has a clean install of MacOS Big Sur, and will ship with just the laptop and 
a magsafe2 AC adapter.

Asking $550 or best offer.

--
Hal Widlansky
Salt Lake City, UT 84108

-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/B1808DE3-A6C9-4043-B813-BDFCAC1D03FC%40mac.com.


Re: Testing

2022-11-20 Thread Hal Murray via devel


Worked for me.  Thanks.

What did you do/find?  Is it likely to stay working?


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


[MARMAM] New publication: Current global population size, post-whaling trend and historical trajectory of sperm whales

2022-11-16 Thread Hal Whitehead
The following paper has just been published:


Whitehead, H., and M. Shin. 2022. Current global population size, post-whaling 
trend and historical trajectory of sperm whales. Scientific Reports 12: 19468.

It is open access and available at:

https://doi.org/10.1038/s41598-022-24107-7


Abstract:

The sperm whale lives in most deep ice-free waters of the globe. It was 
targeted during two periods of whaling peaking in the 1840’s and 1960’s. Using 
a habitat suitability model, we extrapolated estimates of abundance from visual 
and acoustic surveys to give a global estimate of 736,053 sperm whales (CV = 
0.218) in 1993. Estimates of trends in the post-whaling era suggest that: 
whaling, by affecting the sex ratio and/or the social cohesion of females, 
reduced recovery rates well after whaling ceased; preferentially-targeted adult 
males show the best evidence of recovery, presumably due to recruitment from 
breeding populations; several decades post-whaling, sperm whale populations not 
facing much human impact are recovering slowly, but populations may be 
declining in areas with substantial anthropogenic footprint. A theta-logistic 
population model enhanced to simulate spatial structure and the non-removal 
impacts of whaling indicated a pre-whaling population of 1,949,698 (CV = 0.178) 
in 1710 being reduced by whaling, and then then recovering a little to about 
844,761 (CV = 0.209) in 2022. There is much uncertainty about these numbers and 
trends. A larger population estimate than produced by a similar analysis in 
2002 is principally due to a better assessment of ascertainment bias.


Hal Whitehead, Dalhousie University (hwhit...@dal.ca)
___
MARMAM mailing list
MARMAM@lists.uvic.ca
https://lists.uvic.ca/mailman/listinfo/marmam


Re: [Linuxptp-devel] [PATCH 2/4] Add sock servo.

2022-11-15 Thread Hal Murray
>> What about rcl_sock or refclock_sock? It's used in the file linked by 
Miroslav.
> Both of those sound good to me. Slight preference to refclock_sock if its not 
> too long.

How about SOCK?

In the ntp context, we already have SHM and PPS.  Both show up in the refid 
slot in packets.

Just to make sure we are on the same wavelength...  I'm looking for a term 
that can be used as a handle when the context is well known for things like 
"Try SOCK, it worked for me."


-- 
These are my opinions.  I hate spam.





___
Linuxptp-devel mailing list
Linuxptp-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/linuxptp-devel


Re: [Linuxptp-devel] [PATCH 2/4] Add sock servo.

2022-11-14 Thread Hal Murray
>> How specific is this to chronyd?
> AFAIK no other application implements the server side of the protocol.
>> Would it make sense to call this chronysock
>> instead of just sock?
> Yes, that makes sense. If there are no other issues with the
> patches, I can resend.

Calling it chronysock has the disadvantage of sounding like only chrony should 
use it.

>> The implementation seems fine but its using an interface that was defined by
>> chrony. I suppose another application could implement the same interface
>> though..

> ntpsec might be interested in implementing it. We'll see.

Is there a URL for the spec?  I don't want an RFC.  Good comments in a header 
file may be enough.  A separate document may be better if there are 
complications that need explaining.

Is there a version number?  (or plan for how to update things)



I agree that the current SHM setup is far from wonderful.  There is a clean 
way to make SHM read-only by receivers so you can have multiple receivers.  
That would let you run gpsmon while chronyd/ntpd is running.





-- 
These are my opinions.  I hate spam.





___
Linuxptp-devel mailing list
Linuxptp-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/linuxptp-devel


[Corpora-List] Recruiting graduate and undergraduate summer research interns for Data-Driven Accessibility at Microsoft Research

2022-10-31 Thread Hal Daume via Corpora
Dear corpora readers:

We -- Danielle Bragg, Alex Lu, and Hal Daumé III -- are looking to hire
research interns to work on data-driven accessibility research projects,
alongside leading researchers and engineers in the field. We are recruiting
both graduate research interns and undergraduate research interns for
Summer 2023. (ASL recruitment video: https://youtu.be/Gb-8CTpKxhU.)

Our team takes a human-centered and data-driven approach to advancing the
state of accessible technologies. Recent work has focused on data
collection methods, sign language modeling, understanding concerns and
perspectives of user communities, and building novel apps and experiences.
You can learn more about some of the team’s recent efforts at the data-driven
accessibility systems page
<https://www.microsoft.com/en-us/research/project/data-driven-accessibility-systems/>.
These positions sit within Microsoft Research New York City, with
opportunities to collaborate with Microsoft Research New England and others
across the company. Our team is highly interdisciplinary and offers the
opportunity to interact with diverse researchers.

For graduate students, please apply (short research statement and two
letters) at the Research Intern Portal
<https://careers.microsoft.com/us/en/job/1483492/Research-Intern-Data-Driven-Accessibility>
.

For undergraduate students, please apply to the MSR Undergraduate Research
Internship and mention one or more of us by name (CV, 2-3 reference
letters, and two essays) at the Undergraduate Research Intern Portal
<https://www.microsoft.com/en-us/research/academic-program/undergraduate-research-internship-computing/>
.

Microsoft is an equal opportunity employer. All qualified applicants will
receive consideration for employment without regard to age, ancestry,
color, family or medical care leave, gender identity or expression, genetic
information, marital status, medical condition, national origin, physical
or mental disability, political affiliation, protected veteran status,
race, religion, sex (including pregnancy), sexual orientation, or any other
characteristic protected by applicable laws, regulations and ordinances.
We also consider qualified applicants regardless of criminal histories,
consistent with legal requirements.

If you need assistance and/or a reasonable accommodation due to a
disability during the application or the recruiting process, please send a
request via the Accommodation request form
<https://careers.microsoft.com/us/en/accommodationrequest>.

Sincerely,
Danielle Bragg, Alex Lu, and Hal Daumé III
___
Corpora mailing list -- corpora@list.elra.info
https://list.elra.info/mailman3/postorius/lists/corpora.list.elra.info/
To unsubscribe send an email to corpora-le...@list.elra.info


[mailop] Industry standards

2022-10-20 Thread Hal Murray via mailop

> That's the industry standard: block after abuse. Instead, t-online.de uses
> block-and-maybe-unblock-after-contact. This is not how email is supposed to
> work. 

I thought the standard was your server, your rules.

It's fine to whine and rant here, but that isn't going to change anything.

Fighting spam is expensive.  Receivers have to filter out the crap.  Senders 
have to get through the filters.

Does anybody have any suggestions for how a help small sites?


-- 
These are my opinions.  I hate spam.



___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [chrony-dev] Diagnosing pre-shared key authentication failure

2022-10-13 Thread Hal Murray


avaman...@gmail.com said:
> P.S. About logging, some (rate-limited) warnings against such failures would
> actually be very interesting to security teams.

With your security team hat on, what would you want to know and what would you 
do if you got a report that said IP address xxx had N authentication failures?



-- 
These are my opinions.  I hate spam.




-- 
To unsubscribe email chrony-dev-requ...@chrony.tuxfamily.org with "unsubscribe" 
in the subject.
For help email chrony-dev-requ...@chrony.tuxfamily.org with "help" in the 
subject.
Trouble?  Email listmas...@chrony.tuxfamily.org.



Re: [PATCH v2] hw/smbios: support for type 8 (port connector)

2022-10-03 Thread Hal Martin
Hello,

Any update on merging this?

Kind regards,
Hal

On Fri, Aug 12, 2022 at 5:04 PM Michael S. Tsirkin  wrote:
>
> On Fri, Aug 12, 2022 at 03:51:53PM +0200, Hal Martin wrote:
> > PATCH v1: add support for SMBIOS type 8 to qemu
> > PATCH v2: incorporate patch v1 feedback and add smbios type=8 to 
> > qemu-options
>
> history after --- pls
>
> > internal_reference: internal reference designator
> > external_reference: external reference designator
> > connector_type: hex value for port connector type (see SMBIOS 7.9.2)
> > port_type: hex value for port type (see SMBIOS 7.9.3)
> >
> > After studying various vendor implementationsi (Dell, Lenovo, MSI),
> > the value of internal connector type was hard-coded to 0x0 (None).
> >
> > Example usage:
> > -smbios 
> > type=8,internal_reference=JUSB1,external_reference=USB1,connector_type=0x12,port_type=0x10
> >  \
> > -smbios type=8,internal_reference=JAUD1,external_reference="Audio 
> > Jack",connector_type=0x1f,port_type=0x1d \
> > -smbios 
> > type=8,internal_reference=LAN,external_reference=Ethernet,connector_type=0x0b,port_type=0x1f
> >  \
> > -smbios 
> > type=8,internal_reference=PS2,external_reference=Mouse,connector_type=0x0f,port_type=0x0e
> >  \
> > -smbios 
> > type=8,internal_reference=PS2,external_reference=Keyboard,connector_type=0x0f,port_type=0x0d
> >
> >
> > Signed-off-by: Hal Martin 
>
> We are in freeze, I tagged this for after the release.
> Just to make sure pls ping me after the release if possible.
>
>
>
> > ---
> >  hw/smbios/smbios.c   | 63 
> >  include/hw/firmware/smbios.h | 10 ++
> >  qemu-options.hx  |  2 ++
> >  3 files changed, 75 insertions(+)
> >
> > diff --git a/hw/smbios/smbios.c b/hw/smbios/smbios.c
> > index 60349ee402..578cae0f0a 100644
> > --- a/hw/smbios/smbios.c
> > +++ b/hw/smbios/smbios.c
> > @@ -111,6 +111,13 @@ static struct {
> >  .processor_id = 0,
> >  };
> >
> > +struct type8_instance {
> > +const char *internal_reference, *external_reference;
> > +uint8_t connector_type, port_type;
> > +QTAILQ_ENTRY(type8_instance) next;
> > +};
> > +static QTAILQ_HEAD(, type8_instance) type8 = 
> > QTAILQ_HEAD_INITIALIZER(type8);
> > +
> >  static struct {
> >  size_t nvalues;
> >  char **values;
> > @@ -337,6 +344,29 @@ static const QemuOptDesc qemu_smbios_type4_opts[] = {
> >  { /* end of list */ }
> >  };
> >
> > +static const QemuOptDesc qemu_smbios_type8_opts[] = {
> > +{
> > +.name = "internal_reference",
> > +.type = QEMU_OPT_STRING,
> > +.help = "internal reference designator",
> > +},
> > +{
> > +.name = "external_reference",
> > +.type = QEMU_OPT_STRING,
> > +.help = "external reference designator",
> > +},
> > +{
> > +.name = "connector_type",
> > +.type = QEMU_OPT_NUMBER,
> > +.help = "connector type",
> > +},
> > +{
> > +.name = "port_type",
> > +.type = QEMU_OPT_NUMBER,
> > +.help = "port type",
> > +},
> > +};
> > +
> >  static const QemuOptDesc qemu_smbios_type11_opts[] = {
> >  {
> >  .name = "value",
> > @@ -718,6 +748,26 @@ static void smbios_build_type_4_table(MachineState 
> > *ms, unsigned instance)
> >  smbios_type4_count++;
> >  }
> >
> > +static void smbios_build_type_8_table(void)
> > +{
> > +unsigned instance = 0;
> > +struct type8_instance *t8;
> > +
> > +QTAILQ_FOREACH(t8, , next) {
> > +SMBIOS_BUILD_TABLE_PRE(8, T0_BASE + instance, true);
> > +
> > +SMBIOS_TABLE_SET_STR(8, internal_reference_str, 
> > t8->internal_reference);
> > +SMBIOS_TABLE_SET_STR(8, external_reference_str, 
> > t8->external_reference);
> > +/* most vendors seem to set this to None */
> > +t->internal_connector_type = 0x0;
> > +t->external_connector_type = t8->connector_type;
> > +t->port_type = t8->port_type;
> > +
> > +SMBIOS_BUILD_TABLE_POST;
> > +instance++;
> > +}
> > +}
> > +
> >  static void smbios_build_type_11_table(void)
> >  {
> >  char count_str[128];
> > @@ -1030,6 +1080,7 @@

FS: 2015 13" MacBook Pro 3.1gHz i7 16GB 1TB

2022-09-21 Thread 'Hal' via LEM Swap
This is the 2015 version of the 13” MacBook Pro. It’s the last version before 
the switch to USB-C, so it has a full complement of ports. It’s the top end 
version with the following specs:

3.1gHz Dual Core i7 CPU (CTO option)
16GB RAM (CTO option)
1TB SSD (Upgraded, WD Blue SN550 1TB with Sintech adapter, very fast)
13” Retina display (with screen protector installed)
2 Thunderbolt 2 ports
HDMI port
SD card slot
2 USB3 ports
Hard shell case on it since new
Palmrest protector installed

This laptop basically looks new. No dings/dents/major scratches. The battery 
has 10 charge cycles on it and holds a good charge.The Retina Display is clear 
and bright with no dark/light spots or other issues. It’s had the screen 
protector installed for several years, and has no marks on the display. 

It’s been my backup laptop for several years, and only traveled with me once or 
twice. The rest of the time it’s been on a shelf, or been used on my desk 
plugged into a Thunderbolt display. It works great, looks great, and is very 
fast with the 16GB of ram and the upgraded SSD.

It has a clean install of MacOS Big Sur, and will ship with the hard shell case 
and an Apple Magsafe 2 AC adapter.

Asking $550 or best offer.

--
Hal Widlansky
Salt Lake City, UT 84108



-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/B1FB3D85-3A15-47CC-82A0-27CD6F9BEE6D%40mac.com.


Re: [mailop] SMTP noise from *.bouncer.cloud

2022-09-06 Thread Hal Murray via mailop

ra...@usebouncer.com said:
> - marketing teams coming to us from Marketing SaaSs, who, during customer
> onboarding, notice that the quality of email lists is low and send their
> customers to us to clean it first. 

My alarm bells went off on one of your first messages when you said little 
guys need to spam because otherwise they couldn't compete with the big guys.

Many marketing people just don't get it when it comes to spam.  They can 
always come up with some way to rationalize that their spam isn't spam.  I 
wonder if it is genetic.

Vernon Schryver has a wonderful list:
  Spam is That Which We Don't Do
  https://www.rhyolite.com/anti-spam/that-which-we-dont.html

There is a wide range of spam -- from crooks and Viagra to people who don't 
know better.  There are also lots of people who do know better, but try to 
push the limits a bit, or push too hard and try to talk their way out of it.

There is also a wide range of email marketing consultants.  Some sell lists 
and spamming services.  Some will encourage confirmed opt-in.  Some would be 
happy to hire somebody else to do the dirty work of cleaning their lists.

---

> - if you don't want us to verify your email addresses - please let us know
> and we will consider them as blocked (no need even to spend your time on
> feeding the firewall or block list), 

That's opt-out.



-- 
These are my opinions.  I hate spam.



___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] SMTP noise from *.bouncer.cloud

2022-09-06 Thread Hal Murray via mailop

Radek Kaczynski said:
> That's interesting indeed - we haven't implemented SMTP VRFY as it is very
> uncommon.
> However, I truly think that it would be great to use VRFY instead of "broken
> SMTP trick".
> I would be more than happy to pay to use it - or give back to the community
> or charity. 

If you want people to take you seriously, I suggest you put your energy into 
figuring out how to convince people that your customers are not spammers.

I have no idea how you could do that.

-- 
These are my opinions.  I hate spam.



___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


[Corpora-List] Survey Study on Sign Language Computation using Machine Learning  

2022-08-18 Thread Hal Daume
Hello! We are a team of researchers from MSR New England and New York. We are 
seeking participants (aged 18 or older) who have experience in machine learning 
or are interested in applying machine learning to developing computational 
models for signed languages for a survey study.



The purpose of this project is to explore how machine learning practitioners 
can better build machine learning models for sign language computation (e.g., 
recognition/translation). We want to understand your general motivations in 
working with machine learning problems and expected challenges when newly 
working with sign language data and tasks. Please know that sign language 
knowledge or sign language computation experience is NOT required to 
participate in this project.

The survey can be found at 
https://forms.office.com/r/7LPnkdTFLN<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforms.office.com%2Fr%2F7LPnkdTFLN=05%7C01%7Chal3%40microsoft.com%7C8c38aea74a2d481fc10208da7f003827%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637961936221008883%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=Gb%2BdpF4jkuJZyNvOEJ0PXB6CrNIOz7Vn5z5JQo7al2o%3D=0>
 along with a consent form for further details. For every submission of the 
survey, $10 will be donated to LEAD-K (Language Equity and Acquisition for Deaf 
Kids), up to the first 50 submissions. The survey receives one submission per 
person.

Once you agree to consent, you will be directed to the survey questions. It 
will take about 30 minutes to answer the questions, including your experience 
in machine learning and sign language computation (if any), understanding of 
sign language culture, and demographics such as your age or education level. 



Your responses will be anonymous, unless you choose to provide your name and 
email address for future contact where you will be invited to participate in a 
paid study to collaborate with American Sign Language experts. Your name and 
email address will never be shared outside of the research team.



Please complete the survey by Tuesday, 8/23 and feel free to forward this to 
other colleagues who may be interested!



Thank you so much for your consideration!

Rie Kamikubo, Danielle Bragg, Alex Lu, Hal Daumé III

___
Corpora mailing list -- corpora@list.elra.info
https://list.elra.info/mailman3/postorius/lists/corpora.list.elra.info/
To unsubscribe send an email to corpora-le...@list.elra.info


Re: [TLS] Getting started, clock not set yet

2022-08-14 Thread Hal Murray
Thanks.

> It's been a few years, but IIRC my thinking was that the degree of trust
> required in the Roughtime servers' long-term public keys is very low: you're
> trusting them only for one server's assertion of the current time, not for
> general web traffic; and if you ask enough servers, the likelihood of being
> tricked into trusting a bad timestamp is very low even over long time
> periods. 

I've been assuming self-signed certificates with long lifetimes -- one per 
server.

> Such an attack would require both access to a large number of long-term
> private keys whose public keys are embedded in the client attack target, as
> well as the ability to intercept traffic intended for each of these servers
> at whatever moment the client initiates the Roughtime protocol (which
> probably implies a long-term undetected network presence). This is clearly a
> higher bar than simply trusting a web PKI certificate signed some
> indeterminate time ago without respecting the expiration date and without
> being able to update CRLs on startup (which also poses trust anchor turtles
> all the way down).

> In other words, much of the security of the scheme is in the practical
> difficulty of mounting a successful attack even if the keys have been
> compromised. NTS doesn't even attempt to address this kind of attack vector. 

Is there a first order difference between NTS using self signed certificates 
and Roughtime?

There have been semi-endless debates about how many NTP servers to use.  (I 
haven't seen one recently.)  With 3 servers, 2 can outvote 1 bad guy. With 4 
servers, you still have 3 if one is down.  ...  Adding security complicates 
that discussion.  You have to add deliberate malfeasance to the list of things 
that can go wrong.  And things can change over 10 years.

Are there any good papers or web pages discussing the security of TLS?



One quirk on my 10 year problem.  If the boxes are sitting on a shelf, it's at 
least possible to open them up and update firmware.  It would be expensive, 
but it is another branch of the cost-benefit tree.



Again, thanks for your helpful input.


-- 
These are my opinions.  I hate spam.



___
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls


Re: [TLS] Getting started, clock not set yet

2022-08-13 Thread Hal Murray
> IIRC, this is one of the main arguments for advancing Roughtime:

I took a look at draft 06.  I don't see how it helps.  Am I missing something?

Here is the key section:

6.4 Validity of Response
  A client MUST check the following properties when it receives a
  response. We assume the long-term server public key is known to the
  client through other means.

If I can distribute valid long-term keys, I can use them to sign the 
certificates for NTS-KE servers and don't need Roughtime to get started.



-- 
These are my opinions.  I hate spam.



___
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls


[PATCH v2] hw/smbios: support for type 8 (port connector)

2022-08-12 Thread Hal Martin
PATCH v1: add support for SMBIOS type 8 to qemu
PATCH v2: incorporate patch v1 feedback and add smbios type=8 to qemu-options

internal_reference: internal reference designator
external_reference: external reference designator
connector_type: hex value for port connector type (see SMBIOS 7.9.2)
port_type: hex value for port type (see SMBIOS 7.9.3)

After studying various vendor implementationsi (Dell, Lenovo, MSI),
the value of internal connector type was hard-coded to 0x0 (None).

Example usage:
-smbios 
type=8,internal_reference=JUSB1,external_reference=USB1,connector_type=0x12,port_type=0x10
 \
-smbios type=8,internal_reference=JAUD1,external_reference="Audio 
Jack",connector_type=0x1f,port_type=0x1d \
-smbios 
type=8,internal_reference=LAN,external_reference=Ethernet,connector_type=0x0b,port_type=0x1f
 \
-smbios 
type=8,internal_reference=PS2,external_reference=Mouse,connector_type=0x0f,port_type=0x0e
 \
-smbios 
type=8,internal_reference=PS2,external_reference=Keyboard,connector_type=0x0f,port_type=0x0d


Signed-off-by: Hal Martin 

---
 hw/smbios/smbios.c   | 63 
 include/hw/firmware/smbios.h | 10 ++
 qemu-options.hx  |  2 ++
 3 files changed, 75 insertions(+)

diff --git a/hw/smbios/smbios.c b/hw/smbios/smbios.c
index 60349ee402..578cae0f0a 100644
--- a/hw/smbios/smbios.c
+++ b/hw/smbios/smbios.c
@@ -111,6 +111,13 @@ static struct {
 .processor_id = 0,
 };
 
+struct type8_instance {
+const char *internal_reference, *external_reference;
+uint8_t connector_type, port_type;
+QTAILQ_ENTRY(type8_instance) next;
+};
+static QTAILQ_HEAD(, type8_instance) type8 = QTAILQ_HEAD_INITIALIZER(type8);
+
 static struct {
 size_t nvalues;
 char **values;
@@ -337,6 +344,29 @@ static const QemuOptDesc qemu_smbios_type4_opts[] = {
 { /* end of list */ }
 };
 
+static const QemuOptDesc qemu_smbios_type8_opts[] = {
+{
+.name = "internal_reference",
+.type = QEMU_OPT_STRING,
+.help = "internal reference designator",
+},
+{
+.name = "external_reference",
+.type = QEMU_OPT_STRING,
+.help = "external reference designator",
+},
+{
+.name = "connector_type",
+.type = QEMU_OPT_NUMBER,
+.help = "connector type",
+},
+{
+.name = "port_type",
+.type = QEMU_OPT_NUMBER,
+.help = "port type",
+},
+};
+
 static const QemuOptDesc qemu_smbios_type11_opts[] = {
 {
 .name = "value",
@@ -718,6 +748,26 @@ static void smbios_build_type_4_table(MachineState *ms, 
unsigned instance)
 smbios_type4_count++;
 }
 
+static void smbios_build_type_8_table(void)
+{
+unsigned instance = 0;
+struct type8_instance *t8;
+
+QTAILQ_FOREACH(t8, , next) {
+SMBIOS_BUILD_TABLE_PRE(8, T0_BASE + instance, true);
+
+SMBIOS_TABLE_SET_STR(8, internal_reference_str, 
t8->internal_reference);
+SMBIOS_TABLE_SET_STR(8, external_reference_str, 
t8->external_reference);
+/* most vendors seem to set this to None */
+t->internal_connector_type = 0x0;
+t->external_connector_type = t8->connector_type;
+t->port_type = t8->port_type;
+
+SMBIOS_BUILD_TABLE_POST;
+instance++;
+}
+}
+
 static void smbios_build_type_11_table(void)
 {
 char count_str[128];
@@ -1030,6 +1080,7 @@ void smbios_get_tables(MachineState *ms,
 smbios_build_type_4_table(ms, i);
 }
 
+smbios_build_type_8_table();
 smbios_build_type_11_table();
 
 #define MAX_DIMM_SZ (16 * GiB)
@@ -1346,6 +1397,18 @@ void smbios_entry_add(QemuOpts *opts, Error **errp)
UINT16_MAX);
 }
 return;
+case 8:
+if (!qemu_opts_validate(opts, qemu_smbios_type8_opts, errp)) {
+return;
+}
+struct type8_instance *t;
+t = g_new0(struct type8_instance, 1);
+save_opt(>internal_reference, opts, "internal_reference");
+save_opt(>external_reference, opts, "external_reference");
+t->connector_type = qemu_opt_get_number(opts, "connector_type", 0);
+t->port_type = qemu_opt_get_number(opts, "port_type", 0);
+QTAILQ_INSERT_TAIL(, t, next);
+return;
 case 11:
 if (!qemu_opts_validate(opts, qemu_smbios_type11_opts, errp)) {
 return;
diff --git a/include/hw/firmware/smbios.h b/include/hw/firmware/smbios.h
index 4b7ad77a44..e7d386f7c8 100644
--- a/include/hw/firmware/smbios.h
+++ b/include/hw/firmware/smbios.h
@@ -189,6 +189,16 @@ struct smbios_type_4 {
 uint16_t processor_family2;
 } QEMU_PACKED;
 
+/* SMBIOS type 8 - Port Connector Information */
+struct smbios_type_8 {
+struct smbios_

[TLS] Getting started, clock not set yet

2022-08-08 Thread Hal Murray
I work on NTP software.  NTS (Network Time Security) uses TLS.

Many security schemes get tangled up with time.  TLS has time limits on 
certificates.  That presents a chicken-egg problem for NTP when getting 
started.

I'm looking for ideas, data, references, whatever?

Is there other work in this area?
Is there any sort of consensus on how close a clock needs to be when checking 
certificates?

At this point, I divide the problem into 3 chunks.

The first case is easy.  I'll call it the RTC case.  Most PCs, laptops, and 
servers have some sort of battery backed clock.  As long as it is close 
enough, everything just works.
  But how close is close enough?
  You need a plan for when the battery dies and such.
Set the clock from the BIOS.
ssh in and set the clock.  That requires setting up the ssh keys ahead of 
time.

The second case is something like a Raspberry Pi.  They don't have RTCs.  
Debian has a fake-hwclock module that writes the time to the disk every hour.  
I call this the one year case.  What happens when you leave it on the shelf 
for a year?
  Certificates are generally available with only a 1 year lifetime.  That's 
built into popular browsers so everybody else gets stuck with the decision.
  After a year, nothing works.  After 6 months, half of your servers should 
still work.
  A vendor could setup 2 servers with their certificates 6 months out of phase 
so that 1 will last at least a year.

Note that games and IoT gear sold through retail channels will hit this 
problem if they sit on a shelf for a year.


The really hard case is the 10 year problem.  Consider a spare board sitting 
on the shelf for 10 years.  That's longer than batteries will last for RTCs.  
Phone companies used to work on this time frame.  I think we need to provide 
them guidance.  I've seen two ways.
  One is to manually set the clock somewhere in the replace-the-board process. 
 I'm picturing a USB port where the technician can plug in his laptop.  The 
laptop can set the time.
  The other is to use a certificate with a long lifetime.  Are those available 
or does that turn into a self-signed certificate?

There is also DNSSEC.  I don't know anything about that yet.  For the 1 year 
or 10 year cases, you could "cache" the data in /etc/hosts.  Then you need a 
cron job to keep the cache up to date.

Does this make sense?  Am I on the right track?  ...



-- 
These are my opinions.  I hate spam.



___
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls


Re: [chrony-dev] nts_ke_server calling UTI_GetRandomBytesUrandom

2022-08-03 Thread Hal Murray


un...@physics.ubc.ca said:
>  Are you stating that /dev/urandom is not available on the machine you are
> using? 

No.  A crypto package is needed for shared keys.  I/we hadn't considered 
building without shared keys.

> You are using Linux I believe.

NTPsec builds/runs on Linux, FreeBSD, NetBSD, and probably anything that is 
POSIX enough and supports ntp_adjtime().

-- 
These are my opinions.  I hate spam.




-- 
To unsubscribe email chrony-dev-requ...@chrony.tuxfamily.org with "unsubscribe" 
in the subject.
For help email chrony-dev-requ...@chrony.tuxfamily.org with "help" in the 
subject.
Trouble?  Email listmas...@chrony.tuxfamily.org.



Re: [chrony-dev] nts_ke_server calling UTI_GetRandomBytesUrandom

2022-08-03 Thread Hal Murray


mlich...@redhat.com said:
> Is OpenSSL required in NTPsec? chrony can be built with no crypto library, so
> it needs a random generator that's always available. That's /dev/urandom. 

Not currently.  Thanks for the suggestion.

-- 
These are my opinions.  I hate spam.




-- 
To unsubscribe email chrony-dev-requ...@chrony.tuxfamily.org with "unsubscribe" 
in the subject.
For help email chrony-dev-requ...@chrony.tuxfamily.org with "help" in the 
subject.
Trouble?  Email listmas...@chrony.tuxfamily.org.



Re: [chrony-dev] nts_ke_server calling UTI_GetRandomBytesUrandom

2022-08-02 Thread Hal Murray


mlich...@redhat.com said:
> I was surprised to see they switched arc4random in glibc to getrandom(). That
> has a significant performance impact on chronyd, as it calls the function for
> each generated RX and TX timestamp. In my 

NTPsec uses OpenSSL and their crypto package.  I noticed significant CPU going 
into randomness.  On investigation, there is high overhead.  The cycles per 
byte isn't horrible for longer chunks.  It's things like calling getpid() 
called during setup.

I've contemplated using a big buffer.  Fill it with one call to amortize the 
overhead.  Pass out small chunks as needed.  I haven't written any code.

---

The code I use to poke around is in attic/random.c

Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz

Running on OpenSSL 3.0.5 5 Jul 2022
 times in ns avg  fastest  lng
getpid():389(simple kernel call)
clock_gettime:19(overhead of fastest)
random(): 18   36
RAND_bytes():   2122 20384
RAND_bytes():   2110 2041   16
RAND_bytes():   2363 2231   32
RAND_bytes():   2720 2628  160
RAND_bytes():   3090 2980  320
RAND_priv_bytes():  2120 20344
RAND_priv_bytes():  2107 2025   16
RAND_priv_bytes():  2326 2231   32
RAND_priv_bytes():  2732 2625  160
RAND_priv_bytes():  3107 2981  320


-- 
These are my opinions.  I hate spam.




-- 
To unsubscribe email chrony-dev-requ...@chrony.tuxfamily.org with "unsubscribe" 
in the subject.
For help email chrony-dev-requ...@chrony.tuxfamily.org with "help" in the 
subject.
Trouble?  Email listmas...@chrony.tuxfamily.org.



Re: [mailop] HR 8160 and SB 4409: The "You're not allowed to run political campaign email through your spam filter" act

2022-07-30 Thread Hal Murray via mailop

Is there any hard data?  This seems like thesis bait.  I'd expect there to be 
a steady trickle of papers or reports with good data on political spam.  Where 
are they?

I hear lots of complaints by conservatives/Republicans that the spam filters 
are biased against them.  If they send more spam, I'd expect more of their 
mail to get blocked.  But that's because they are sending spam, not because 
the filters are biased.  I'd really like to see hard data to back that up or 
refute it.

How about a trial with the house and senate mail systems?  :)



-- 
These are my opinions.  I hate spam.



___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


FS: Mac Mini 2012 Server 2.6gHz i7 16GB Ram 4TB Fusion Drive

2022-07-27 Thread 'Hal' via LEM Swap
I’m reconfiguring my home network, and am taking this mini out of service. 
It was used as an iTunes media server for streaming movies to my AppleTV and 
backing up my mobile devices.

It’s the top-spec 2012 Mac Mini (CTO) with the following specs:
2.6 gHz Quad-core i7 CPU
16GB RAM (upgraded to the maximum)
Dual internal SATA drives, configured as a single 4TB Fusion Drive:
  2TB (spinning disc) hard drive
  2TB Crucial SSD

The Fusion Drive makes it really fast, and the quad core CPU and 16GB of RAM 
make it a great workstation or server.

All of the usual ports and other features. It works great, has no obvious 
physical imperfections (scratches, dings, etc.)
It’s got a clean install of Mac OS Mojave installed. Comes with just the Mac 
Mini and a generic (black) power cord.

Asking $550 shipped in the US.

--
Hal Widlansky
Salt Lake City, UT 84108



-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/274ED8D8-3CA5-47B4-AE5A-969E962D6575%40mac.com.


[coreboot] Intel sandybridge northbridge with ibexpeak southbridge?

2022-07-19 Thread Hal Martin
Hello,

I have a platform (Advantech NAMB-3250MB, used in some Riverbed
appliances) which uses Sandy/Ivy Bridge CPUs, but has a DH89xxCC
southbridge which according to ifdtool is Ibex Peak. [3]

The ME firmware version from the vendor firmware is 6.0.50.1244 which
also corresponds to Ibex Peak (Series 5) and not Cougar Point (Series
6). [1]

I did not know it was possible to pair a Series 5 chipset with
Sandy/Ivy Bridge, since the DH89xxCC only supports DMI 1
(intel-communications-chipset-89xx-series-datasheet.pdf page 5) and
Sandy/Ivy Bridge support DMI 2.0 [2]

It would appear that using northbridge/intel/sandybridge with
southbridge/intel/ibexpeak in coreboot is not supported:
/opt/coreboot/util/crossgcc/xgcc/bin/i386-elf-ld.bfd:
build/romstage/northbridge/intel/sandybridge/early_dmi.o: in function
`early_init_dmi':
/opt/coreboot/src/northbridge/intel/sandybridge/early_dmi.c:175:
undefined reference to `early_pch_init_native_dmi_pre'
/opt/coreboot/util/crossgcc/xgcc/bin/i386-elf-ld.bfd:
/opt/coreboot/src/northbridge/intel/sandybridge/early_dmi.c:215:
undefined reference to `early_pch_init_native_dmi_post'
/opt/coreboot/util/crossgcc/xgcc/bin/i386-elf-ld.bfd:
build/romstage/northbridge/intel/sandybridge/raminit.o: in function
`init_dram_ddr3':
/opt/coreboot/src/northbridge/intel/sandybridge/raminit.c:322:
undefined reference to `early_pch_init_native'
src/arch/x86/Makefile.inc:185: recipe for target
'build/cbfs/fallback/romstage.debug' failed
make: *** [build/cbfs/fallback/romstage.debug] Error 1

There is no early_pch_init_native_* in src/southbridge/intel/ibexpeak

Is it safe to assume that IronLake northbridge is not applicable to
Sandy/Ivy Bridge CPUs?

In which case, I guess the only way this platform could ever be
supported is if the missing early_pch_init_native_* functions are
implemented for IbexPeak?

Kind regards,
Hal Martin

[1] https://en.wikichip.org/wiki/intel/management_engine

[2] 
https://www.intel.com/content/www/us/en/products/platforms/details/crystal-forest.html?s=Newest

[3] ./ifdtool dump.bin
PCH Revision: 5 series Ibex Peak
FLMAP0:0x02040002
 NR:  2
 FRBA:0x40
 NC:  1
 FCBA:0x20
FLMAP1:0x10100206
 ISL: 0x10
 FPSBA:   0x100
 NM:  2
 FMBA:0x60
FLMAP2:0x0120
 PSL: 0x0001
 FMSBA:   0x200
FLUMAP1:   0x02ef
 Intel ME VSCC Table Length (VTL):2
 Intel ME VSCC Table Base Address (VTBA): 0x000ef0

ME VSCC table:
 JID0:  0x004b25bf
   SPI Component Vendor ID:0xbf
   SPI Component Device ID 0:  0x25
   SPI Component Device ID 1:  0x4b
 VSCC0: 0x20092009
   Lower Erase Opcode: 0x20
   Lower Write Enable on Write Status: 0x50
   Lower Write Status Required:Yes
   Lower Write Granularity:1 bytes
   Lower Block / Sector Erase Size:4KB
   Upper Erase Opcode: 0x20
   Upper Write Enable on Write Status: 0x50
   Upper Write Status Required:Yes
   Upper Write Granularity:1 bytes
   Upper Block / Sector Erase Size:4KB

OEM Section:
00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
10: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
20: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
30: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff

Found Region Section
FLREG0:0x
 Flash Region 0 (Flash Descriptor):  - 0fff
FLREG1:0x07ff0400
 Flash Region 1 (BIOS): 0040 - 007f
FLREG2:0x03ff0001
 Flash Region 2 (Intel ME): 1000 - 003f
FLREG3:0x0fff
 Flash Region 3 (GbE): 00fff000 - 0fff (unused)
FLREG4:0x0fff
 Flash Region 4 (Platform Data): 00fff000 - 0fff (unused)

Found Component Section
FLCOMP 0x0010001c
 Dual Output Fast Read Support:   not supported
 Read ID/Read Status Clock Frequency: 20MHz
 Write/Erase Clock Frequency: 20MHz
 Fast Read Clock Frequency:   20MHz
 Fast Read Support:   supported
 Read Clock Frequency:20MHz
 Component 2 Density: 4MB
 Component 1 Density: 8MB
FLILL  0x
 Invalid Instruction 3: 0x00
 Invalid Instruction 2: 0x00
 Invalid Instruction 1: 0x00
 Invalid Instruction 0: 0x00
FLPB   0x
 Flash Partition Boundary Address: 0x00

Found PCH Strap Section
PCHSTRP0  : 0x00205602
PCHSTRP1  : 0x010f
PCHSTRP2  : 0x9000
PCHSTRP3  : 0x
PCHSTRP4  : 0x00c8e000
PCHSTRP5  : 0x
PCHSTRP6  : 0x
PCHSTRP7  : 0x
PCHSTRP8  : 0x
PCHSTRP9  : 0x
PCHSTRP10 : 0x00010044
PCHSTRP11 : 0x9997
PCHSTRP12 : 0x
PCHSTRP13 : 0x
PCHSTRP14 : 0x
PCHSTRP15 : 0x000e
AltMeDisable bit is not set

Found Master Section
FLMSTR1:   0x (Host CPU/BIOS)
 Platform Data Region Write Access: enabled
 GbE Region Write Access:   enabled
 Intel ME Region Write Access:  enabled
 Host CPU/BIOS Region Write Access: enabled
 Flash Descriptor Write Access: enabled
 Platform Data Region Read

FS 2nd gen original iPod 20GB in collector condition

2022-07-18 Thread 'Hal' via LEM Swap
This is a second generation iPod, the first generation with the touch wheel. 
It’s the larger capacity 20GB model. 
It’s in “almost like new condition” with no scratches on the front and only 
some very light scratches near the center of the mirrored back. The firewire 
port door is intact.

It works great and the battery holds a decent charge.

If you’re looking to add one of these to your collection, this is probably the 
cleanest you’ll find that’s actually been used.
Just the iPod is included. 

Asking $150 or best offer, shipped in the USA.

--
Hal Widlansky
Salt Lake City, UT 84108

-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/8EEA65DF-9191-4252-903C-AD10EBAA703C%40mac.com.


Re: [DNG] Lennart now working for Microsoft

2022-07-13 Thread hal
On July 13, 2022 3:31:37 PM CDT, Syeed Ali  wrote:
:: Microsoft has a great interest in embracing Linux via WSL with the
:: intent to obsolete the need to dual boot.  With many critical
:: distributions and software requiring systemd, it only makes sense to
:: make sure that WSL has complete support; indeed better support than on
:: Linux.  Combined Windows and WSL can thereby be extended nicely in ways
:: pure Linux cannot.
:: 
:: ___
:: Dng mailing list
:: Dng@lists.dyne.org
:: https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Microsoft has only an interest in not having any competition. from DOS, to  
Internet Explore vs. Netscape, to SCO Linux. Every few years they try again. 
this is all just another example. 
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[time-nuts] Re: GPS failed

2022-07-11 Thread Hal Murray via time-nuts


Andy Talbot said:
> I also heard a case of a GPS antenna going unstable, oscillating and taking
> out most of the boats in a marina.   The Radio Communications Agency (as our
> enforcement body was then, before it became Ofcom) had to be called out to
> identify the problem. 

There was an interesting story about a similar event in GPS World back in Jan 
2003
This was from TV antenna amplifiers that were oscillating in/near the GPS band.
It/they took out the Moss Landing (Monterey Bay) harbor.

The Hunt for RFI
  http://gpsworld.com/the-hunt-rfi/
Unjamming a Coast Harbor
James R. Clynch, Andrew A. Parker, George Badger, Wilbur R. Vincent, Paul 
McGill, Richard W. Adler


-- 
These are my opinions.  I hate spam.


___
time-nuts mailing list -- time-nuts@lists.febo.com
To unsubscribe send an email to time-nuts-le...@lists.febo.com


[PATCH] Add support for SMBIOS type 8 (Port Connector Information)

2022-07-10 Thread Hal Martin


This patch adds support for SMBIOS type 8 to qemu.

internal_reference: internal reference designator
external_reference: external reference designator
connector_type: hex value for port connector type (see SMBIOS 7.9.2)
port_type: hex value for port type (see SMBIOS 7.9.3)

After studying various vendor implementationsi (Dell, Lenovo, MSI),
the value of internal connector type was hard-coded to 0x0 (None).

Example usage:
-smbios 
type=8,internal_reference=JUSB1,external_reference=USB1,connector_type=0x12,port_type=0x10
 \
-smbios type=8,internal_reference=JAUD1,external_reference="Audio 
Jack",connector_type=0x1f,port_type=0x1d \
-smbios 
type=8,internal_reference=LAN,external_reference=Ethernet,connector_type=0x0b,port_type=0x1f
 \
-smbios 
type=8,internal_reference=PS2,external_reference=Mouse,connector_type=0x0f,port_type=0x0e
 \
-smbios 
type=8,internal_reference=PS2,external_reference=Keyboard,connector_type=0x0f,port_type=0x0d

Signed-off-by: Hal Martin 

---
 hw/smbios/smbios.c   | 65 
 include/hw/firmware/smbios.h | 10 ++
 2 files changed, 75 insertions(+)

diff --git a/hw/smbios/smbios.c b/hw/smbios/smbios.c
index 60349ee402..11fe75ece0 100644
--- a/hw/smbios/smbios.c
+++ b/hw/smbios/smbios.c
@@ -111,6 +111,13 @@ static struct {
 .processor_id = 0,
 };
 
+struct type8_instance {
+const char *internal_reference, *external_reference;
+uint8_t connector_type, port_type;
+QTAILQ_ENTRY(type8_instance) next;
+};
+static QTAILQ_HEAD(, type8_instance) type8 = QTAILQ_HEAD_INITIALIZER(type8);
+
 static struct {
 size_t nvalues;
 char **values;
@@ -136,6 +143,7 @@ static QEnumLookup type41_kind_lookup = {
 },
 .size = 10
 };
+
 struct type41_instance {
 const char *designation, *pcidev;
 uint8_t instance, kind;
@@ -337,6 +345,29 @@ static const QemuOptDesc qemu_smbios_type4_opts[] = {
 { /* end of list */ }
 };
 
+static const QemuOptDesc qemu_smbios_type8_opts[] = {
+{
+.name = "internal_reference",
+.type = QEMU_OPT_STRING,
+.help = "internal reference designator",
+},
+{
+.name = "external_reference",
+.type = QEMU_OPT_STRING,
+.help = "external reference designator",
+},
+{
+.name = "connector_type",
+.type = QEMU_OPT_NUMBER,
+.help = "connector type",
+},
+{
+.name = "port_type",
+.type = QEMU_OPT_NUMBER,
+.help = "port type",
+},
+};
+
 static const QemuOptDesc qemu_smbios_type11_opts[] = {
 {
 .name = "value",
@@ -718,6 +749,27 @@ static void smbios_build_type_4_table(MachineState *ms, 
unsigned instance)
 smbios_type4_count++;
 }
 
+static void smbios_build_type_8_table(void)
+{
+unsigned instance = 0;
+struct type8_instance *t8;
+
+QTAILQ_FOREACH(t8, , next) {
+
+SMBIOS_BUILD_TABLE_PRE(8, T0_BASE + instance, true);
+
+SMBIOS_TABLE_SET_STR(8, internal_reference_str, 
t8->internal_reference);
+SMBIOS_TABLE_SET_STR(8, external_reference_str, 
t8->external_reference);
+// most vendors seem to set this to None
+t->internal_connector_type = 0x0;
+t->external_connector_type = t8->connector_type;
+t->port_type = t8->port_type;
+
+SMBIOS_BUILD_TABLE_POST;
+instance++;
+}
+}
+
 static void smbios_build_type_11_table(void)
 {
 char count_str[128];
@@ -1030,6 +1082,7 @@ void smbios_get_tables(MachineState *ms,
 smbios_build_type_4_table(ms, i);
 }
 
+smbios_build_type_8_table();
 smbios_build_type_11_table();
 
 #define MAX_DIMM_SZ (16 * GiB)
@@ -1346,6 +1399,18 @@ void smbios_entry_add(QemuOpts *opts, Error **errp)
UINT16_MAX);
 }
 return;
+case 8:
+if (!qemu_opts_validate(opts, qemu_smbios_type8_opts, errp)) {
+return;
+}
+struct type8_instance *t;
+t = g_new0(struct type8_instance, 1);
+save_opt(>internal_reference, opts, "internal_reference");
+save_opt(>external_reference, opts, "external_reference");
+t->connector_type = qemu_opt_get_number(opts, "connector_type", 0);
+t->port_type = qemu_opt_get_number(opts, "port_type", 0);
+QTAILQ_INSERT_TAIL(, t, next);
+return;
 case 11:
 if (!qemu_opts_validate(opts, qemu_smbios_type11_opts, errp)) {
 return;
diff --git a/include/hw/firmware/smbios.h b/include/hw/firmware/smbios.h
index 4b7ad77a44..e7d386f7c8 100644
--- a/include/hw/firmware/smbios.h
+++ b/include/hw/firmware/smbios.h
@@ -189,6 +189,16 @@ struct smbios_type_4 {
 uint16_t processor_family2;
 } QEMU_PACKED;
 
+/* SMBIOS type 8 

Adafruit Pi GPS HAT -- serial port stuck

2022-07-08 Thread Hal Murray via devel


Has anybody seen the serial port get stuck?

It's software/kernel.  I can see the bits with a scope.

It works as expected until it runs out of satellites.  Then, sometimes it 
doesn't recover.

Restarting ntpd doesn't fix it.  Rebooting does.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


refid_str meets Facebook's servers

2022-07-07 Thread Hal Murray via devel


I'm working on #733 -- teaching ntpstats to record info for rejected 
responses.  I have the code working so I'm playing with hack scripts to search 
for interesting cases.  That uncovered an interesting quirk.

refid_str is only used by record_raw_stats in ntp_util.
It was used by ntpq before it was converted to python.

It converts a refid to a string.  For stratum 1, the refid is text, like 
"GPS".  That gets converted to ".GPS."  The forth slot in the GPS case is 0/NUL

Facebook is returning "FB  ".  It is padding with spaces rather than NULs.  So 
refid_str turns that into ".FB  .".  I assume the extra dots are quote marks 
to show the spaces.

The down side of that is that Python's string.split turns that into 2 words: 
".FB" and ".".

Anybody object if I "fix" that by dropping trailing spaces?
And then drop the "."s which are just clutter?

While I am in there, should I translate all non-printing characters to "?" or 
something like that?


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


[time-nuts] Re: Should a double oven XO be thermally isolated or just draft protected?

2022-07-01 Thread Hal Murray via time-nuts


Dr. David Kirkby said:
> I removed an HP 10811A OCXO from a 5370B time interval counter the other day
> and put it into a HP 5352B 40 GHz frequency counter. One thing that really
> struck me is that in the 5370B there was a shroud around the OCXO, which is
> around 5 mm away from the sides of the OCXO. It's made of aluminium. But
> there's nothing like that in the frequency counter.

I think the 5370B has a fan so a shroud to keep the air currents away from the 
OCXO seems like a good idea.

Is there a fan in the 5352B?

-- 
These are my opinions.  I hate spam.


___
time-nuts mailing list -- time-nuts@lists.febo.com
To unsubscribe send an email to time-nuts-le...@lists.febo.com


[coreboot] Cisco Meraki use coreboot in some MX products and will not provide the source code

2022-06-29 Thread Hal Martin
Hello,

Several Cisco Meraki products (MX84, MX250) are using the coreboot
bootloader. Meraki are also distributing coreboot builds for these products
via their update mechanism.

In October 2021, I requested the corresponding coreboot source code for the
MX84 from open-sou...@meraki.com. Another individual requested the coreboot
source code for the MX250 around the same time. We own the devices in
quesiton.

To date, Meraki have not provided the source code or provided an
explanation as to the delay in providing the source code. The last reply I
received was in January, and they have not replied to any of my follow up
requests.

As coreboot is GPL licensed software, I wanted to inform the coreboot
community that I believe Cisco Meraki are not acting in good faith and are,
in my opinion, violating the GPL by not providing the coreboot source code
upon request.

Kind regards,
Hal Martin
___
coreboot mailing list -- coreboot@coreboot.org
To unsubscribe send an email to coreboot-le...@coreboot.org


[time-nuts] Re: What's the best HP OCXO for frequency counter reference?

2022-06-28 Thread Hal Murray via time-nuts


Adrian Godwin said:
> If you use the ovened oscillator for temporary use away from the home GPSDO,
> how good will the oscillator be with those interruptions to power /
> temperature, and will it stabilise during the period you're using it there ? 

You can solve that with a UPS and/or a gizmo that plugs into a car accessory 
socket.

How much does the mechanical jostling as gear gets moved from bench to car to 
table effect the frequency?


-- 
These are my opinions.  I hate spam.


___
time-nuts mailing list -- time-nuts@lists.febo.com
To unsubscribe send an email to time-nuts-le...@lists.febo.com


FS: 2015 11" MacBook Air 8GB RAM 128GB SSD

2022-06-23 Thread 'Hal' via LEM Swap
Hey swaplisters,

I’m selling one of my MacBook Air spares.

This is the final version of the 11” MacBook Air that Apple made (2015 model). 

Specs are:
8GB RAM
1.6gHz Dual-core i5 CPU
128GB flash storage (Apple OEM SSD)
Intel HD Graphics 6000 with 1.5GB VRAM, shared with system memory

It has the usual complement of ports, USB3, Thunderbolt2, etc. Everything works 
great.
The battery only has 75 charge cycles on it, and still holds an excellent 
charge.

The screen has no scratches or bright spots, and almost no wear on the 
keyboard. The palmrests and trackpad are similarly like new. The bottom of the 
case has 1 tiny dent and a couple of surface scratches. The outside of the lid 
had some larger superficial scratches, but no dings/dents or dented corners. 
Overall, I’d rate the cosmetic condition about 8/10. 

It’s super small and light and makes a great travel or student laptop. 
It has a clean install of MacOS Big Sur installed.

It comes with the laptop in a hard shell (translucent gray) case and an Apple 
Magsafe 2 power supply.

Asking $200, shipped in the US

--
Hal Widlansky
Salt Lake City, UT 84108



-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/33D65384-2810-4865-B3E4-9B9DCF8B3B5B%40mac.com.


FS: 2015 11" MacBook Air 8GB RAM 128GB SSD

2022-06-14 Thread 'Hal' via LEM Swap
This is the final version of the 11” MacBook Air that Apple made (2015 model). 

Specs are:
8GB RAM
1.6gHz Dual-core i5 CPU
128GB flash storage (Apple OEM SSD)
Intel HD Graphics 6000 with 1.5GB VRAM, shared with system memory

It has the usual complement of ports, USB3, Thunderbolt2, etc. Everything works 
great.
The battery only has 75 charge cycles on it, and still holds an excellent 
charge.

The screen has no scratches or bright spots, and almost no wear on the 
keyboard. The palmrests and trackpad are similarly like new. The bottom of the 
case has 1 tiny dent and a couple of surface scratches. The outside of the lid 
had some larger superficial scratches, but no dings/dents or dented corners. 
Overall, I’d rate the cosmetic condition about 8/10. 

It’s super small and light and makes a great travel or student laptop. 
It has a clean install of MacOS Big Sur installed.

It comes with the laptop in a hard shell (translucent gray) case and an Apple 
Magsafe 2 power supply.

Asking $250, shipped in the US

--
Hal Widlansky
Salt Lake City, UT 84108



-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/B0AB3CE7-03F7-4223-803E-0025861C6630%40mac.com.


FS: 1TB Apple.Samsung OEM SSD for Macbook Pro 2013-2015

2022-06-12 Thread 'Hal' via LEM Swap
This is an original Apple/Samsung 1TB SSD PCIE blade module, pulled from a 2015 
15” MacBook Pro.
It works great, is very fast, and has been tested and reformatted. 
It should work in any 2013-2015 MacBook Pro model, as well as other Macs that 
use the same form factor.

Asking $150 shipped in the US.

--
Hal Widlansky
Salt Lake City, UT 84108



-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/FC9523F5-AEAE-43CC-B641-9B870E9ABA06%40mac.com.


Re: 2012 Mac Mini 2.3GHz i7, Magsafe adapters

2022-06-10 Thread 'Hal' via LEM Swap
Hey there. Are these Minis still available? If so, could you install the 128GB 
and the 1TB drive both? I think those hold 2 drives, right? I’d want to set 
them up as a fusion drive. :-) 
Thanks,
-Hal

> On Jun 10, 2022, at 9:04 AM, Josh Calvetti  wrote:
> 
> I have two of these Mac Minis available. Both are identical models from 2012 
> with the quad core i7 at 2.3Ghz. Great little home server! These are both 
> running 10.9.5 at present, zeroed out to an empty admin account. 8GB of RAM, 
> 1TB HDD- I'd be happy to install a 128GB SSD instead, if you'd prefer. I 
> don't have anything larger, unfortunately.
> 
> Looking for $150 shipped, or if you want both I'll do $250. I don't have the 
> official white power cables any more, unfortunately.
> 
> I also have (4) 85W Magsafe 1 adapters with the extension cable. Three have 
> the L-shaped connector, one has the white T connector. All are in good shape 
> with no fraying.
> 
> $20 shipped for each, or I'll send you the lot for $60.
> 
> Josh Calvetti
> Pittsburgh, PA 15216
> 
> -- 
> You received this message because you are a member of the LEM Swap group.
> To post to this group, send email to lemswap@googlegroups.com
> To unsubscribe, send an email *from your subscribed address* to 
> lemswap+unsubscr...@googlegroups.com
> LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. 
> Reply directly to the person who posted, never to the list.
> Software piracy is illegal and not allowed on LEM Swap. Except for freeware 
> and software originally provided with computers, no software is to be left on 
> hard drives unless the original installer (not a burned copy) is included, 
> along with any required registration number, password, etc.
> Shipments valued at US$100 or more should be insured, and shipments valued at 
> US$25 or more should be shipped so they can be tracked.
> See the list FAQ http://lowendmac.com/2014/lem-swap/ 
> <http://lowendmac.com/2014/lem-swap/>
> for guidelines on postings, feedback, and dispute resolution. Seller feedback 
> at http://groups.google.com/group/swap-feedback 
> <http://groups.google.com/group/swap-feedback>
> --- 
> You received this message because you are subscribed to the Google Groups 
> "LEM Swap" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to lemswap+unsubscr...@googlegroups.com 
> <mailto:lemswap+unsubscr...@googlegroups.com>.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/lemswap/f777b51e-b8a0-47e6-81d4-15655955a8dcn%40googlegroups.com
>  
> <https://groups.google.com/d/msgid/lemswap/f777b51e-b8a0-47e6-81d4-15655955a8dcn%40googlegroups.com?utm_medium=email_source=footer>.

-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/B0A1092E-79C0-44A1-BB48-078342766F55%40mac.com.


[time-nuts] Re: Turning off display on HP 58503 A or B

2022-06-03 Thread Hal Murray via time-nuts


Lon, K5JV said:
> Comments from anyone who has actually seen inside one of these ovens would be
> appreciated. 

http://www.realhamradio.com/GPS-oven-journey.htm

--

For lots of info on the Z3801A start here:
  http://www.realhamradio.com/GPS_Frequency_Standard.htm
(Time sink warning.)


-- 
These are my opinions.  I hate spam.


___
time-nuts mailing list -- time-nuts@lists.febo.com
To unsubscribe send an email to time-nuts-le...@lists.febo.com


FS: 2015 11" MacBook Air 8GB RAM 128GB SSD

2022-06-02 Thread 'Hal' via LEM Swap
This is the last version of the 11” MacBook Air (2015 model), and has the 
following specs:
8GB RAM
1.6gHz Dual-core i5 CPU
128GB flash storage (Apple OEM SSD)
Intel HD Graphics 6000 with 1.5GB VRAM, shared with system memory

It has the usual complement of ports, USB3, Thunderbolt2, etc. Everything works 
great.
The battery has 70 charge cycles on it, and still holds an excellent charge.

The screen has no scratches or bright spots, and almost no wear on the 
keyboard. The palmrests and trackpad are similarly like new. The bottom of the 
case has 1 tiny dent and a couple of surface scratches. The outside of the lid 
had some larger superficial scratches, but no dings/dents or dented corners. 
Overall, I’d rate the cosmetic condition about 8/10. 

It’s super small and light and makes a great travel or student laptop. It has a 
clean install of MacOS Big Sur installed.

It comes with the laptop in a hard shell (translucent gray) case. No AC adapter 
is included.

Asking $275, shipped in the US

—
Hal Widlansky
Salt Lake City, UT 84108



-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/4F893E32-C8ED-4305-A3CA-4FBED6FD49DE%40mac.com.


[time-nuts] Re: Ublox M6T -M8T

2022-05-30 Thread Hal Murray via time-nuts


Matthias Welwarsky said:
> Only frequencies that are even multiples of the internal crystal frequency
> (48MHz) are "clean". Everything else is, as Bob puts it, "drop a pulse, add a
>  pulse" approximations. However, that's normally easy to filter. 

How clean?  It's a GPS, not a GPSDO, so I'd expect the 48 MHz is free running 
rather than locked to GPS time.

Take the PPS case.  There will be adds/drops going on to correct for the 
frequency error in the 48 MHz crystal.  The pattern will change as the 
frequency changes with temperature or whatever.  That's how you get hanging 
bridges.  :)

Assume it is off by roughly 1 PPM.  That's well within specs for a crystal.  I 
just want a number for the back of an envelope.

For 10KHz, 1 PPM is an add/drop every 100 cycles.  I'll bet you can catch that 
on a scope running in persistance mode.



-- 
These are my opinions.  I hate spam.


___
time-nuts mailing list -- time-nuts@lists.febo.com
To unsubscribe send an email to time-nuts-le...@lists.febo.com


FS: Space Gray 2019 13" MacBook Pro - Quad 2.8ghz i7 16GB RAM 1TB SSD

2022-05-27 Thread 'Hal' via LEM Swap
This is the “top spec” CTO Space Gray 2019 MacBook Pro 13” (Touchbar, Touch-ID, 
4 Thunderbolt 3 ports)

Specs are:
2.8gHz Quad-core i7 CPU
16GB RAM
1TB SSD
Intel Iris Plus Graphics 655
Four Thunderbolt 3 ports
Retina Display with True Tone technology
Updated/revised keyboard mechanism
Works perfectly and only has 65 charge cycles on the battery. 
It never really left my desk, where it was plugged into a Thunderbolt display 
and wireless keyboard/mouse.

Here’s a link to the full specs:
https://everymac.com/systems/apple/macbook_pro/specs/macbook-pro-core-i7-2.8-quad-core-13-mid-2019-touch-bar-specs.html
 
<https://everymac.com/systems/apple/macbook_pro/specs/macbook-pro-core-i7-2.8-quad-core-13-mid-2019-touch-bar-specs.html>

It’s been in a hard shell case and had a palmrest protector on it since new, so 
it’s easily a 9.5/10. Display is perfect.
No visible wear on the keyboard, case, etc. No dings/dents/scratches that I can 
see.

Ships with the hard case, the original box, AC adapter and USB-C/power cable. 
Box is a little beat up, but the laptop is perfect.

Asking $949 or best reasonable offer.

--
Hal Widlansky
Salt Lake City, UT 84108

-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/60E2981A-5780-40D7-81A1-EF094205DFE7%40mac.com.


[time-nuts] Re: Suggestions solicited for Pi/GPSDO ntp server

2022-05-26 Thread Hal Murray via time-nuts


> I think it's about time to retire my old former cell site GPSDO.
> Technology has improved and I'm thinking of setting up a Raspberry Pi based
> ntp server for the local devices. (I also have some spare Pi's, so...)

> Does anyone have any suggestions for a good solid Pi/GPSDO setup and code for
> such a purpose? Something like Leo's device but, of course, much cheaper? 

How nutty of a NTP server do you want?

How much of a Linux hacker are you?  Do you need a detailed step-by-step guide 
or are rough hints good enough?

There are several varieties of GPS HAT available.  Ballpark $50.  I think most 
of them come with good setup directions.

There are several/many web pages describing how to set things up.  This is the 
classic.

The Raspberry Pi as a Stratum-1 NTP Server
  https://www.satsignal.eu/ntp/Raspberry-Pi-NTP.html

Google for >Raspberry Pi GPS NTP setup< will find many others.

-

That's GPS, no DO.  If you have a GPSDO that you like you will have to convert 
to 3V logic and wire it up: RX, TX, PPS.

--

Pis up to 3 have their Ethernet connected over USB so there is 125 
microseconds of fuzz on the timing.  You would have to put your time-nut hat 
on to notice that.  The Ethernet on the Pi 4 has a direct connection.

The Pi 3 and Pi 4 come with BlueTooth on the serial port.  You have to disable 
that or setup another serial port.

You can use either chrony or ntpsec.  You can use GPSD, or go direct with most 
GPS devices.

Pi IO pins are 3V only.

Linux changes.  Some of the setup descriptions may be old enough to be out of 
date.

There are also minor differences between distros.


-- 
These are my opinions.  I hate spam.


___
time-nuts mailing list -- time-nuts@lists.febo.com
To unsubscribe send an email to time-nuts-le...@lists.febo.com


Authentication in ntpq

2022-05-25 Thread Hal Murray via devel
Some commands in ntpq require authentication.

I just tried it, and it wants an MD5 password.  MD5 is way old.  Is there a 
way to switch to AES?

-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: [DNG] Microsoft azure and devuan

2022-05-21 Thread hal
On May 20, 2022 1:50:54 PM CDT, Steve Litt  wrote:
::* *
:: \ o /
::  \|/ 
::   | Y O U   R O C K !
::  / \  _  
:: /   \/
::/
::   -
:: 
:: Tell me what Free Software looks like:
:: 
:: THIS is what Free Software looks like!
:: 
:: Nice move, Peter!
:: 

I'll second that! Great story to boot.
Really grateful for everyone's efforts here to keep Linux going!
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: ntpsec | solve #714, #737 by removing ill-conceived test. (!1270)

2022-05-14 Thread Hal Murray via devel
> Not yet in the delvel emailarchives: What distro is broken by this?

I've only seen it on FreeBSD.  It's in the development branch and will be in 
13.1 which will be released in a few days.

It's in clang.  Unless FreeBSD has broken their copy, it will appear in other 
distros as things get updated.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: ntpsec | solve #714, #737 by removing ill-conceived test. (!1270)

2022-05-14 Thread Hal Murray via devel


Gary said:
> I'm OK with commenting it out, just the two lines, until we figure out what
> clang is doing.  But I'd rather figure it out... 

I agree that we should figure it out, but we should get the release out first.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: ntpsec | solve #714, #737 by removing ill-conceived test. (!1270)

2022-05-14 Thread Hal Murray via devel
I'm cc-ing devel so this doesn't get lost on gitlab.  Let's move the 
discussion real email..


> include/ntp_fp.h:58 defines l_fp as a uint64_4, I can find no current 
> contrary definitions.

We need to make a cleanup pass in this area.

On the wire, it's unsigned.  As soon as the code gets 2 of them, it does a 
subtract so we need a signed version.  We need to check for underflow on the 
initial subtract.

There is also u_fp, a 32 bit version.  The comment says there is a s_fp, but I 
can't find it.

---

I think we should comment out this test until we get the release out.
Please include references to both issues and this message/thread.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


FS: 2014 13" MacBook AIr i7 8GB RAM 512GB SSD

2022-05-14 Thread 'Hal' via LEM Swap
This is the CTO model of the 13” MacBook Air from 2014. It was maxxed out to 
the highest specs for that model:

13” Display
1.7gHz i7 dual-core CPU
8GB RAM
512GB SSD
All of the usual features (bluetooth, wifi, thunderbolt port, 2 USB 3 ports, 
etc)

Full details on this model are:
https://everymac.com/systems/apple/macbook-air/specs/macbook-air-core-i7-1.7-13-early-2014-specs.html
 
<https://everymac.com/systems/apple/macbook-air/specs/macbook-air-core-i7-1.7-13-early-2014-specs.html>

Functionally perfect, quite fast, it's running a clean install of OSX Big Sur. 
Cosmetically it’s a 9/10, only showing shiny spots on some of the keys, no 
other real wear. No dings/dents/big scratches, etc. It was kept in a case, so 
the outside surfaces look brand new. Screen looks great, no bright/dark spots.
Battery has about 350 cycles on it, and holds a great charge.

Ships with the MacBook Air and the original Apple AC adapter and extension cord.

Asking $400 shipped in the US.

--
Hal Widlansky
Salt Lake City, UT 84108



-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/9F5C5AEC-BCBB-4F41-8D93-CCBBCCEDB54E%40mac.com.


REDUCED: Space Gray 2019 13" MacBook Pro with 2.8ghz i7 16GB RAM 1TB SSD

2022-05-14 Thread 'Hal' via LEM Swap
This is the “top spec” CTO Space Gray 2019 MacBook Pro 13” (Touchbar, Touch-ID, 
4 Thunderbolt 3 ports)

Specs are:
2.8gHz quad-core i7 CPU
16GB RAM
1TB SSD
Intel Iris Plus Graphics 655
Retina Display with True Tone technology
Updated/revised butterfly keyboard mechanism
Works perfectly and only has 65 charge cycles on the battery. 
It never really left my desk, where it was plugged into a Thunderbolt display 
and wireless keyboard/mouse.

Here’s a link to the full specs:
https://everymac.com/systems/apple/macbook_pro/specs/macbook-pro-core-i7-2.8-quad-core-13-mid-2019-touch-bar-specs.html
 
<https://everymac.com/systems/apple/macbook_pro/specs/macbook-pro-core-i7-2.8-quad-core-13-mid-2019-touch-bar-specs.html>

It’s been in a hard shell case and had a palmrest protector on it since new, so 
it’s easily a 9.5/10. Display is perfect.
No visible wear on the keyboard, case, etc. No dings/dents/scratches that I can 
see.

Ships with the hard case, the original box, AC adapter and USB-C/power cable. 
Box is a little beat up, but the laptop is perfect.

Asking $999 shipped in the US.

--
Hal Widlansky
Salt Lake City, UT 84108

-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/FB8AE707-02B3-44CC-A573-3DBCFBCA281F%40mac.com.


Re: Raspberry Pi startup: certificate is not yet valid

2022-05-11 Thread Hal Murray via devel


Thanks.


> I like you suggestion of ntpd using "-g" to get the system time close, before
> checking any certificates. 

It was Richard's suggestion, not mine.  The idea was to only skip the date 
checks and do the rest of the certificate checking.

I don't like it for 2 reasons.

The main reason is that it's a hole in securty.  I don't want to clutter up 
security discussions and documentation with that very unlikely case.

The second reason is that OpenSSL isn't setup to skip only the date check.  We 
could easily implement your version of no-check, but that would make the tiny 
security hole a big hole.

--

I think the alternative is to get the clock reasonably close before running 
ntpd.

PCs with RTC/CMOS/TOY clocks are simple.  We will have to document potential 
troubles wtih dead batteries.

The problem is with Raspberry Pis and similar low-end systems that don't have 
a hardware clock.

As far as I can tell, each distro does it differently.  So we will have to 
document what to do on each distro.

> The problem I see a lot is that a lot of Pi's are started with no network
> connection, and a bad time, so swclock is commonly used before starting ntpd.

What is swclock?  What distros does it run on?

I think the Linux kernel sets the clock to the build time or something similar.

Debian/Ubuntu have fake-hwclock.  It updates the time in a file on halt and 
every hour so you have decent restart time on boot after a crash.  It's "just" 
a shell script so it should be easy to copy to other distros.

I haven't found anything for Fedora.

I haven't looked for FreeBSD or NetBSD.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: Raspberry Pi startup: certificate is not yet valid

2022-05-10 Thread Hal Murray via devel


Gary said:
>> Should we do something like set the time to the time stamp of the
>> drift file? (if it is significantly newer than the current time)

> Nope.  Don't get in a fight with the OS. 

Could you please say more.

The whole purpose of ntpsec is to keep good time.  If we know the clock is way 
off, what's wrong with taking a big step to get a lot closer so certificate 
checking has a better chance of working?



-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: Raspberry Pi startup: certificate is not yet valid

2022-05-09 Thread Hal Murray via devel


Richard Laager said:
> I believe you're looking for "fake-hwclock". It periodically saves the time
> to a file (allegedly*  /etc/fake-hwclock.data) and restores it on boot. 

Thanks.

I discovered fake-hwclock via Google but it wasn't on my system and the 
discussion I was looking at was very old so I assumed it had been replaced or 
something.  Looks like Ubuntu just didn't include it in their img file that I 
used.

I installed it and things are happy.

I think this is a good-enough solution.

Basically, we have to document that the clock has to be close-enough and what 
close-enough means.

Cold-stanbys sitting on the shelf for many years won't work.
PCs with dead CMOS/TOY clock battries won't work.

(Let's Encrypt certificates are only valid for 90 days.)

IoT devices on a store shelf for a few months might not work.

Working Raspberry PIs that sit on the shelf for long enough may not work.

You can fix the stanby/store shelf problem by carefully setting up certificates 
with a long lifetime.

--

> I still think we need a more comprehensive approach to this bootstrapping
> problem. The problem is, I don't have the time to write it. But I gave my
> thoughts before: https://lists.ntpsec.org/pipermail/devel/2019-February/
> 007576.html 

That looks reasonable, but complicated.

I'm not planning to work on anything like that.

--

>> That could backfire if, somehow, the system time got set into the future.
>I had that happen once. It might have been due to a GPS rollover.

GPS rollover seems more likely to go the other way -- that is step back by 20 
years.

It would go forwards if it was broken, you used fudge to fix it, and then the 
software got fixed and you installed the new software without removing the 
fudge.



-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Raspberry Pi startup: certificate is not yet valid

2022-05-09 Thread Hal Murray via devel


Does anybody know how the initial time gets set on a Raspberry Pi -- before 
ntpd gets called?

I have a recently setup system that gets initialized to 2022-04-01
and is trying  to use a certificate that was created after that.  :)

Should we do something like set the time to the time stamp of the drift file?  
(if it is significantly newer than the current time)

That could backfire if, somehow, the system time got set into the future.

A variation on this would be a system sitting on a shelf for a long time.

Do we have a document that collects interesting things about NTS and 
certificates?

-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


FS: Space Gray 2019 13" MacBook Pro with 2.8ghz i7 16GB RAM 1TB SSD

2022-05-07 Thread 'Hal' via LEM Swap
This is a “top spec” CTO Space Gray 2019 MacBook Pro 13” (Touchbar, Touch-ID, 4 
Thunderbolt 3 ports)

Specs are:
2.8gHz quad-core i7 CPU
16GB RAM
1TB SSD
Intel Iris Plus Graphics 655
Retina Display with True Tone technology
Updated/revised butterfly keyboard mechanism
Works perfectly and only has 65 charge cycles on the battery. 
It never really left my desk, where it was plugged into a Thunderbolt display 
and wireless keyboard/mouse.

Here’s a link to the full specs:
https://everymac.com/systems/apple/macbook_pro/specs/macbook-pro-core-i7-2.8-quad-core-13-mid-2019-touch-bar-specs.html
 
<https://everymac.com/systems/apple/macbook_pro/specs/macbook-pro-core-i7-2.8-quad-core-13-mid-2019-touch-bar-specs.html>

It’s been in a hard shell case and had a palmrest protector on it since new, so 
it’s easily a 9.5/10. Display is perfect.
No visible wear on the keyboard, case, etc. No dings/dents/scratches that I can 
see.

Ships with the hard case, the original box, AC adapter and USB-C/power cable. 
Box is a little beat up, but the laptop is perfect.

Asking $1100 shipped in the US.

--
Hal Widlansky
Salt Lake City, UT 84108



-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/57399078-865A-48F2-9912-D478EB115342%40mac.com.


[time-nuts] Re: Simple simulation model for an OCXO?

2022-05-04 Thread Hal Murray


att...@kinali.ch said:
> FFT based systems take a white, normal distributed noise source, Fourier
> transform it, filter it in frequency domain and transform it back. Runtime is
> dominated by the FFT and thus O(n*log(n)). There was a nice paper by either
> Barnes or Greenhall (or both?) on this, which I seem currently unable to
> find. This is also the method employed by the bruiteur tool from sigma-theta.

> Biggest disadvantage of this method is, that it operates on the whole sample
> length multiple times. I.e it becomes slow very quickly, especially when the
> whole sample length is larger than main memory. But they deliver exact
> results with exactly the spectrum / time-correlation you want. 

What sort of times and memory are interesting?

You can rent a cloud server with a few hundred gigabytes of memory for a few 
$/hour.




-- 
These are my opinions.  I hate spam.


___
time-nuts mailing list -- time-nuts@lists.febo.com -- To unsubscribe send an 
email to time-nuts-le...@lists.febo.com
To unsubscribe, go to and follow the instructions there.


Knob: certificates for NTS-KE vs web

2022-05-02 Thread Hal Murray via devel
I think I've figured out why I think my knob is interesting.

For the web, there are zillions of clients, most non-technical.  A client is 
likely to connect to many servers, often new/different ones on different days. 
 It all has to just work, straight out of the box.

For NTS-KE, an at least somewhat technical admin sets things up.  A client 
will only ever contact the few servers that are explicitly configured by the 
admin.  The S in NTS-KE is security.  It seems reasonable to me for the admin 
setting things up, or at least some of them, to be willing to spend a bit of 
time making things more secure.

My knob is a tiny step in that direction.

I think we need a man/web page to cover this area.  What can an admin do to 
make things more secure?

I'm far from a security wizard.  The biggest risk that I can see is the root 
server collection that comes packaged with most distros.  We should be able to 
write a script that figures out what cert in the root collection each server 
needs.  I've poked a bit in that area, but don't have a recpie yet

-

Note that NTS doesn't tell you anything about the quality of the time you will 
get, just that you will get it (probably) from the site you expect to get it 
from rather than from a bad guy doing some sort of MITM attack.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: Release, wildcards, etc

2022-04-29 Thread Hal Murray via devel
[Mail to devel has about a 10 hour delay.]

Sorry for not providing more context on my first try.

> "nts nowildcards" changes the default from wildcards allowed to not allowed.
> server blah, blah "nowildcards" turns off wildcards for this slot
> server blah, blah "wildcardsOK" allows wildcards for this slot
> wildcardsOK has priority over either/both nowildcards 

The context was testing my knob patch.  I said there were only 8 cases to 
test.  That's from 8 combinations of 3 flags.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: Release, wildcards, etc

2022-04-28 Thread Hal Murray via devel


> Sorry, I'm not following what you mean here. Do you have a patch or merge
> request that I can look at? 

I should be able to explain it.

In the config file:

"nts nowildcards" changes the default from wildcards allowed to not allowed.

server blah, blah "nowildcards" turns off wildcards for this slot
server blah, blah "wildcardsOK" allows wildcards for this slot
wildcardsOK has priority over either/both nowildcards

If that doesn't work, I'll send a patch.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: [mailop] WTaF? I just got spammed BY Active Campaign

2022-04-27 Thread Hal Murray via mailop
> so I typically wouldn't even wax poetic about it here on Mailop,

I think ESPs and ISPs should know better and be setting a good example.

Publicity here may encourage others not to do the same thing.

How did a guy like that get past HR?
If you were running HR, could you filter out people like that?

How many places will post this thread above the water cooler?

--

Who was the ISP that spammed every email address they could find in their mail 
logs?  including people who were only in there because they had reported spam.


-- 
These are my opinions.  I hate spam.



___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: getting answers from DNS queries

2022-04-25 Thread King, Harold Clyde (Hal) via bind-users
That's fair. I can see queries come into my DNS server, but I can't find 
answers to thoughts queries. I have an RPZ zone and I get a log file that says 
PASSTHROUGH or NXDOMAIN. That tells me that the request was served or denied. I 
want something that will tell me the answer to each query. I have my server set 
to denied requests for recursion. So I know those will be denied, I want that 
for every query. I compile each new release and use that for production. Is 
there something I can set at compile-time? Perhaps I add an option to the 
logging statement? I kinda lost my google-fu on this one and I really am 
thankful to y'all for any help that you might have.


--

Hal King  - h...@utk.edu
Systems Administrator
Office of Information Technology
Shared Services

The University of Tennessee
103c5 Kingston Pike Building
2309 Kingston Pk. Knoxville, TN 37996
Phone: 974-1599
[cid:f96c691b-14fb-43c3-81bb-27c0801dd170]


From: Ondřej Surý
Sent: Monday, April 25, 2022 10:37 AM
To: King, Harold Clyde (Hal)
Cc: bind-users
Subject: Re: getting answers from DNS queries

> I asked this last week, but I didn't an answer.

Probably because I still don’t know what you mean. You need to better
articulate your problem and your question.

Ondrej
--
Ondřej Surý (He/Him)
ond...@isc.org

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 25. 4. 2022, at 16:11, King, Harold Clyde (Hal) via bind-users 
>  wrote:
>
> I asked this last week, but I didn't an answer. Who can I tell if a DNS query 
> is refused or answered? Is it in the log files? Can a compile-time option 
> help me access it? Sorry to repeat but I really need to know this.
>
> Thank in advance.
>
>
> --
>
> Hal King  - h...@utk.edu
> Systems Administrator
> Office of Information Technology
> Shared Services
>
> The University of Tennessee
> 103c5 Kingston Pike Building
> 2309 Kingston Pk. Knoxville, TN 37996
> Phone: 974-1599
> 
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
>
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
>
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


getting answers from DNS queries

2022-04-25 Thread King, Harold Clyde (Hal) via bind-users
I asked this last week, but I didn't an answer. Who can I tell if a DNS query 
is refused or answered? Is it in the log files? Can a compile-time option help 
me access it? Sorry to repeat but I really need to know this.

Thank in advance.


--

Hal King  - h...@utk.edu
Systems Administrator
Office of Information Technology
Shared Services

The University of Tennessee
103c5 Kingston Pike Building
2309 Kingston Pk. Knoxville, TN 37996
Phone: 974-1599
[cid:00350bec-9764-4740-8d61-e8bec49334bc]
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Big picture half-baked thoughts

2022-04-25 Thread Hal Murray via devel


What's the right way to think about how security fits into our priorities?  
How should we use that to prioritize our work?

Should we split this discussion into NTP and TLS/KE?


Eric wants to convert our current code base to Go.  In terms of security, how 
does that compare with getting our code running on Windows?  How do we think 
about that sort of trade off?

There is another feature we need.  The current code wakes up every second.  
That's evil if you want to save battery power.   How important are laptops?


Our code doesn't do OCSP.  How important is that?  Alternatives?
[One example I looked at cached the answer for a week.  How does that fit into 
security?]

One of the attack modes with TLS is that one of the CAs on a distro's root 
cert list gets compromised, either due to company incompetence or state level 
arm twisting.  How important is it to restrict the root CAs?  Do we need 
features/code on the NTP package for that?  [We have a ca option on the server 
command.  I think we need a script to tell somebody which root CA a site is 
using.]



-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: Getting ready for a release, wildcards

2022-04-25 Thread Hal Murray via devel
Thanks again for your helpful comments.

On the cert documentation ...

What is our target audience?  Admins who already know about certificates or 
newbies who are getting a certificate for the first time?  (This was my first.)

Is there a certificates-for-newbies document we can reference?
If not, should we write one?


On my knobs...

What is our role in this corner of the security world?  Should we explore the 
edges where convenient, or blindly follow what everybody else is doing?

Is there a document discussing the big picture security of TLS?
I'm looking for something that describes what "everybody else" is doing and 
the risks of various options, things to think about, ...

---

Thanks for the wildcard link:
  https://gist.github.com/joepie91/7e5cad8c0726fd6a5e90360a754fc568
Should we add that to our documentation?  Where?



I like your "science fair project" tag.

Science fairs can be educational.  What is the tradeoff between clutter and 
education?  How should we decide?


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: Release, wildcards, etc

2022-04-22 Thread Hal Murray via devel


Richard Laager said:
> 8 cases? I thought it was one setting, which would be 2 cases.
> Can you expand upon what you're actually proposing? Ideally as a merge
> request, but at least explain the knobs here. 

nts nowildcards at the top level to set the default
nowildcards at the server level
wildcardsOK at the server level to override the default


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: Getting ready for a release, wildcards

2022-04-22 Thread Hal Murray via devel
> +1 to NOT making this a knob.

Would you please say more.

It would be invisible unless you go looking for it.

Are you against unnecessary knobs in general?  If I had pushed this code a 
month or 3 ago when we weren't discussing a release or wildcards, would you 
have spoken up against it?

I wonder how many unnecessary features there are in the current code base.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: Release, wildcards, etc

2022-04-21 Thread Hal Murray via devel
[Eric: There are a couple of preceding messages to devel in the mail 
someplace.]

> I'd like to get https://gitlab.com/NTPsec/ntpsec/-/merge_requests/1264 merged
> and then do the release.

> Is there anything else that we want in the release?

I'm sorry that we have gotten off on the wrong foot (feet?).

I'll try to review and maybe fill in a few blanks.

It's time for a release in general.  Fixing the wildcard bug is a good excuse 
to do it now.  There is no rush or deadline.

You are putting me in an awkward position by asking me to approve your patch 
when I want to do something else.  I think your fix will do what you want.  I 
haven't actually tested it.

You have a simple fix for the wildcards.  I have a more complicated one, with 
knobs that you don't like.  If it wasn't for tangling with your fix, I would 
have just pushed this code.

I'm not sure why you don't like my knobs.  Several possibilities:

1) more code to test.
  There are 8 cases.  I think I tested them all.  If it will make you happy, 
I'll test again, being careful to check all 8 cases.

2) it's useless clutter
  I'd like to experiment with it.  Other than general clutter, I can't think 
of any reason not to include my knobs.

3) you want to get the release out soon and don't want to think about knobs.
  As far as I know, there is no rush on the release.
  I'll help more with testing if my knobs are in.

4) others?



I can't think of anything else that needs to go into this release.

I have some code that adds another line to the (already noisy) client side 
logging for the KE exchange to display the SAN:DNS list from the certificate.  
I think it should go in, but I'll wait until after the release if you prefer.

We should scan the issues and merge requests.  (James has several that we have 
all been negligent about approving or providing feedback.)

-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: Getting ready for a release, wildcards

2022-04-21 Thread Hal Murray via devel
Richard Laager said:
> Sure, that's all true. But, I'm not sure why you felt the need to  mention
> this. That is how everything works. In general, it's not even  guaranteed
> that a TLS-speaking daemon knows its own (external) hostname.  It obviously
> can't know what is in the client's trust store. 

Somebody complained about being able to load a certificate with a wildcard 
that the same code wouldn't accept as a client.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: Getting ready for a release, wildcards

2022-04-21 Thread Hal Murray via devel
> I would rather not add knobs unless someone asks for this to be a knob.

Nobody outside is ever going to ask for this knob.  It's a grubby detail.  
Only geeks know that the concept exists.

I want this knob so I/we can experiment.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: Getting ready for a release, wildcards

2022-04-21 Thread Hal Murray via devel
[The mail system is in sloth mode again.]

matthew.sel...@twosigma.com said:
> I don't think we should have a knob for disabling wildcards. This is not the
> sort of knob that operators expect (what other software provides such a
> knob?) and we're just adding another code path to test.

I'll be interested in other opinions.

Just because nobody else does it doesn't mean it's a bad idea.  Somebody has 
to go first.

If it's extra code on our end, think of all the code in OpenSSL that we don't 
exercise if we don't allow wildcards.

I have running code.  The default is to allow wildcards so nobody will get 
surprised.

I can push later today.  If you want to go the merge request route, somebody 
will have to give me a lesson.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: How can I tell if a quiry is answered or denied

2022-04-20 Thread King, Harold Clyde (Hal) via bind-users
That's not in my version of bind-9.16.23.

Thanks anyway!


--

Hal King  - h...@utk.edu
Systems Administrator
Office of Information Technology
Shared Services

The University of Tennessee
103c5 Kingston Pike Building
2309 Kingston Pk. Knoxville, TN 37996
Phone: 974-1599
[cid:d0cf86b5-1da2-47ba-9a66-0e3522260ce4]

From: Jeff Sumner 
Sent: Wednesday, April 20, 2022 4:25 PM
To: King, Harold Clyde (Hal) ; bind-users 

Subject: Re: How can I tell if a quiry is answered or denied

You don't often get email from kc4...@gmail.com. Learn why this is 
important<http://aka.ms/LearnAboutSenderIdentification>





***

You can turn on answer logging:



rndc answerlog







Apologies- I believe the above is likely specific to EIP DNS builds.



J
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


How can I tell if a quiry is answered or denied

2022-04-20 Thread King, Harold Clyde (Hal) via bind-users
I'm trying to find bad actors stretching out my load on my main DNS server I 
can't tell from the query log if a host is denied an answer, or given an 
answer. Also, can I get the answer in my logs? I got one great answer today, 
maybe I'm pushing my luck, but I do feel lucky.


--

Hal King  - h...@utk.edu
Systems Administrator
Office of Information Technology
Shared Services

The University of Tennessee
103c5 Kingston Pike Building
2309 Kingston Pk. Knoxville, TN 37996
Phone: 974-1599
[cid:fe5c07f5-ef0a-4dd8-a8d0-f22481933b6b]
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Getting ready for a release, wildcards

2022-04-20 Thread Hal Murray via devel


I just pushed 2 tweaks.  One is to update the nts cert documentation to say 
that it doesn't do any checking on the certificate.

The other is a hack patch to aes_siv.c to supress deprecated warnings from 
OpenSSL 3.

Is anybody (else) using OpenSSL 3?

It's trivial on FreeBSD.  Just install openssl-devel-3.0.2
(3.0.3 will be out soon)

For others, HOWTO-OpenSSL should be enough.
If not, please fix it, or tell me where you got it trouble or ...

--

I think I understand the wildcard tangle.  They are generally considered OK.

My plan is to fixup the code so that the default is to accept wildcards but 
it's easy to turn them off.  Details TBD.

Can anybody think of any other optional features that would make things 
slightly more secure?

We should start collecting ideas in this area.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Re: Reading secondary PTR files

2022-04-20 Thread King, Harold Clyde (Hal) via bind-users
Thank you that did the trick!


--

Hal King  - h...@utk.edu
Systems Administrator
Office of Information Technology
Shared Services

The University of Tennessee
103c5 Kingston Pike Building
2309 Kingston Pk. Knoxville, TN 37996
Phone: 974-1599
[cid:7843e9a7-77dc-4edb-92f4-95ba78de367b]

From: Larry Rosenman 
Sent: Wednesday, April 20, 2022 9:56 AM
To: King, Harold Clyde (Hal) 
Cc: bind-users 
Subject: Re: Reading secondary PTR files

You don't often get email from l...@lerctr.org. Learn why this is 
important<http://aka.ms/LearnAboutSenderIdentification>

this is what I use with 9.18.1
named-compilezone -f raw -F text -o - 0.1.0.0.0.0.0.0.b.d.c.f.2.0.6.2.ip6.arpa 
0.1.0.0.0.0.0.0.b.d.c.f.2.0.6.2.ip6.arpa.signed


On 04/20/2022 8:42 am, King, Harold Clyde (Hal) via bind-users wrote:

I  need to read the reverse zone in txt and I'm not sure how to decode the file 
with named-compilezone. Does anyone know the part I'm missing?
named-compilezone -f raw -F text -o 
/etc/named/secondary/9.249.192.in-addr.arpa.db 9.249.192 
/etc/named/secondary/9.249.192.in-addr.arpa.db


--

Hal King  - h...@utk.edu
Systems Administrator
Office of Information Technology
Shared Services

The University of Tennessee
103c5 Kingston Pike Building
2309 Kingston Pk. Knoxville, TN 37996
Phone: 974-1599
[cid:16504630076260111f6e158884917586@lerctr.org]




--
Larry Rosenman 
http://www.lerctr.org/~ler<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.lerctr.org%2F~ler=05%7C01%7Chck%40utk.edu%7C6cebeb03aae44b96901908da22d5a086%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C637860598513880738%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C=lstRONgc2LQLeer%2FBMd52bIRmIenyDC0PukWdDamADM%3D=0>
Phone: +1 214-642-9640 E-Mail: 
l...@lerctr.org<mailto:l...@lerctr.org>
US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Release, wildcards, etc

2022-04-20 Thread Hal Murray via devel


> Sigh. I should get up to speed onmn crypto and certificates.  I doubt I can
> do it fast enough to be useful on this one, though. 

Service Names in TLS
  https://datatracker.ietf.org/doc/draft-ietf-uta-rfc6125bis/
It's 24 pages with the usual amount of boiler plate so only half of that is 
serious reading.



To get in the right mind set, you should watch a few of Moxie Marlinspike's 
talks.
He's a good speaker.

DEF CON 17 - Moxie Marlinspike - More Tricks for Defeating SSL
  https://www.youtube.com/watch?v=5dhSN9aEljg
48 minutes -- hacking SSL

DEF CON 18 - Moxie Marlinspike - Changing Threats To Privacy: From TIA to 
Google
  https://www.youtube.com/watch?v=DoeNbZlxfUM
43 minutes -- Privacy

DEF CON 19 - Moxie Marlinspike - SSL And The Future Of Authenticity
  https://www.youtube.com/watch?v=UawS3_iuHoA
46 minutes -- trusting CAs


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


Reading secondary PTR files

2022-04-20 Thread King, Harold Clyde (Hal) via bind-users
I  need to read the reverse zone in txt and I'm not sure how to decode the file 
with named-compilezone. Does anyone know the part I'm missing?
named-compilezone -f raw -F text -o 
/etc/named/secondary/9.249.192.in-addr.arpa.db 9.249.192 
/etc/named/secondary/9.249.192.in-addr.arpa.db

--

Hal King  - h...@utk.edu
Systems Administrator
Office of Information Technology
Shared Services

The University of Tennessee
103c5 Kingston Pike Building
2309 Kingston Pk. Knoxville, TN 37996
Phone: 974-1599
[cid:36fbaf98-8bc3-4d0b-8a9a-8eeade380eaa]
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS

2022-04-19 Thread Hal Murray


man X509_check_host says:
   If set, X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS restricts name values
   which start with ".", that would otherwise match any sub-domain in the
   peer certificate, to only match direct child sub-domains.  Thus, for
   instance, with this flag set a name of ".example.com" would match a
   peer certificate with a DNS name of "www.example.com", but would not
   match a peer certificate with a DNS name of "www.sub.example.com"; this
   flag only applies to X509_check_host.

I haven't see the idea of ".example.com" being special in any of the RFCs I've 
been looking at.  Can somebody give me a lesson in this area?

Is there any way to turn it off totally while still allowing * type wildcards?


-- 
These are my opinions.  I hate spam.





Re: How does a client get the server's SAN/DNS strings

2022-04-16 Thread Hal Murray
openssl-us...@dukhovni.org said:
> Can you explain *why* you want the list of DNS names?
> Is this just for logging..

Yes, just for logging.


-- 
These are my opinions.  I hate spam.





How does a client get the server's SAN/DNS strings

2022-04-16 Thread Hal Murray
I can get the subject and issuer with
  X509_get_subject_name and X509_get_issuer_name

I'm looking for something similar to get the SAN/DNS strings used to verify 
that this certificate is valid for the hostname provided via SSL_set1_host

Any API will be slightly complicated since there may be more than one SAN/DNS 
string.



-- 
These are my opinions.  I hate spam.





Re: [Important] New behavior for spam handling on this list

2022-04-11 Thread Hal Kierstead via lyx-users
Many thanks for the question and answer. This is certainly a problem that I 
have been having.

Hal

> On Apr 11, 2022, at 5:11 AM, Pavel Sanda via lyx-users via lyx-users 
>  wrote:
> 
> On Thu, Apr 07, 2022 at 12:44:54PM -0400, Steve Litt via lyx-users wrote:
>> Like every other free software project, LyX is underdocumented. The
>> lowest hanging fruit you have is to make a single index for all the
>> documents available under LyX' help menu. Every time I go there to look
>> something up, I spend 25 minutes going from document to document
>> looking for the subject. I'm sure I'm not alone.
> 
> You could get small help by changing search scope when using
> Advanced search->Settings->All manuals.
> 
> Pavel
> -- 
> lyx-users mailing list
> lyx-users@lists.lyx.org
> http://lists.lyx.org/mailman/listinfo/lyx-users

-- 
lyx-users mailing list
lyx-users@lists.lyx.org
http://lists.lyx.org/mailman/listinfo/lyx-users


FS: Late 2013 13" Macbook Pro 2.8gHz i7 16GB RAM

2022-04-09 Thread 'Hal' via LEM Swap
This is a clean late 2013 13” Macbook Pro with the following specs:
2.8gHz dual core i7 CPU
16GB RAM
512GB SSD

All ports (USB, Thunderbolt, etc) work with no issues.

I’d rate it an 8.5-9 on a 10-scale, as it shows some wear (shininess) on the 
keys and light scratches on the bottom of the case. No dings/dents. The display 
is clear and bright, and only has very superficial wear/marks/light scratches. 
Nothing that distracts from normal use. I’m happy to send pics of the laptop.

The battery was replaced last year and has 135 charge cycles. 
Ships with a clean install of Mac OSX Big Sur, as well as the Apple AC adapter.

Asking $350 shipped in the US.

--
Hal Widlansky
Salt Lake City, UT 84108



-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/6D6C0822-6A76-4E0C-8313-19A940108C5C%40mac.com.


Re: NTS doesn't work with 1.1.8 shipped with Ubuntu 20.04 LTS

2022-04-07 Thread Hal Murray via devel


Richard Laager said:
> I've been aware this is a problem, but literally nobody has complained to me

> Additionally, it's a backwards incompatible change..

There is a potential case where this could screwup.  Consider somebody with s 
server running 20.04.  It will happily serve clients that are also running 
20.04.  If this is "fixed", the server and clients need to be updated in sync.

I think it's best to put this on the back burner until a user gets interested.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


NTS doesn't work with 1.1.8 shipped with Ubuntu 20.04 LTS

2022-04-07 Thread Hal Murray via devel
Ubuntu ships 1.1.8 with 20.04 LTS.  NTS doesn't quite work.

1.1.8 was released before the RFC came out.  There were a couple of late 
changes.  The port number we can fix in the config file.  There was an 
incompatable change to the string used to make keys.  There is no easy fix for 
that.

We could hack our NTS-KE server to also listen on another port and use the old 
string on that port.  Aside from being an ugly hack, it only works for our 
servers.  (and nts.ntp.se which already does something like that)

Can anybody give me a lesson in Ubuntu release procedures?

Are they likely to be interested in fixing this?  (so NTS works)

The fix to 1.1.8 is a simple change to a text literal.  Can they fix their 
copy of the source if we send a patch file?  Would it help if we released a 
patched version of 1.1.8?  ...

Could we convince them to update to Debian's 1.2.0+xx?  (or our 1.2.0, or 
1.2.1 our current release)

--

Long story here:
  Incompatibility between NTS in ntpsec 1.2.1 and 1.1.8?
  https://gitlab.com/NTPsec/ntpsec/-/issues/732


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


[Wikitech-l] Give WMF Feedback on Model Cards

2022-04-04 Thread Hal Triedman
Hi all,

The WMF Privacy and Machine Learning Platform teams are developing model
cards to increase visibility, transparency, and accountability of
algorithmic decision-making on WMF platforms. A model card
<https://arxiv.org/abs/1810.03993> is a document about a machine learning
model that seeks to answer basic questions about the model in a clear and
concise manner. The broad goal of this project is for every ML model hosted
by WMF to have a model card for the community and public to understand,
discuss, and govern that model.

We would love for you to give some feedback on the talk page of our
prototype:
https://meta.wikimedia.org/wiki/User:HTriedman_(WMF)/Language_Agnostic_Link-Based_Article_Topic_Model_Card

We're specifically looking to answer the following questions:
- What aspects of the model card are useful, informative, or helpful?
- What aspects of the model card are confusing or unhelpful?
- Are there any features or sections that aren't on the model card that you
would like to see?

Thanks so much!
Hal
___
Wikitech-l mailing list -- wikitech-l@lists.wikimedia.org
To unsubscribe send an email to wikitech-l-le...@lists.wikimedia.org
https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/

FS: Apple Airpods 3

2022-04-04 Thread 'Hal' via LEM Swap
I have a like-new set of Apple AirPods 3 for sale. This is the new version that 
Apple introduced last fall, with spatial audio, improved sound, etc.

I bought these over the holidays, but haven’t used them more than a dozen 
times. The work and sound fantastic. Comes with the AirPods in the Apple 
wireless charging case as well as a rubber cover for the case and an Apple 
Lightning to USB-A cable. The charging case has been in the cover since new, so 
it’s scratch-free.

Apple sells them for $179 new, and these are as close as you can get without 
buying them new in the box. 
I’ve wiped the AirPods down with rubbing alcohol and cleaned the speakers with 
AirSquares cleaning putty, so they’re clean and ready to pair and go.

Asking $130 shipped in the US.

--
Hal Widlansky
Salt Lake City, UT 84108



-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/C396AFC8-2019-4020-AD33-84EB36F86DA9%40mac.com.


[time-nuts] Re: Low Phase Noise70 10 MHz bench signal source sought

2022-04-02 Thread Hal Murray


rich...@karlquist.com said:
> The tester they used for ADEV consisted of a special 10811 that was 500 Hz
> off frequency driving a dual mixer box (Model 10514?) which produced a 500 Hz
> beat note, which then drove an ADEV system  (model 5490?).  Only a few of the
> offset 10811's were produced due to the obvious disruption to the production
> line because of the offset frequency. 

What can mortals do if they want a good reference oscillator with an offset?

Or maybe I should turn that around.  How good can I get if I want an offset?  
And how do I do that?


-- 
These are my opinions.  I hate spam.


___
time-nuts mailing list -- time-nuts@lists.febo.com -- To unsubscribe send an 
email to time-nuts-le...@lists.febo.com
To unsubscribe, go to and follow the instructions there.


[time-nuts] Re: The STM32 GPSDO, a short presentation

2022-04-01 Thread Hal Murray


nea...@gmail.com said:
> And, I assume that since we have no idea if the used rubidium oscillator from
> ebay is working properly anymore (aside from output seen on a counter), then
> we should take that rubidium oscillator to a calibration vendor and pay them
> to test it, correct? 

I think an amateur can do a reasonable job of calibrating a rubidium.  I 
wouldn't adjust anything, just measure the actual frequency and use that as a 
correction factor when processing other data.

The idea is to assume it has good long term stability and compare it with GPS 
(which has very very good long term stability).

Do you know about TVB's picDIV and picPET?
  http://www.leapsecond.com/pic/

If you have a scope, use a picDIV to make a PPS from the rubidium.  Compare 
the PPS from GPS with the PPS from the rubidium.  Reset the picDIV until they 
are close together.  They will drift slowly.  Hopefully very slowly.  Come 
back in an hour or day and see how far they have drifted.  Now do the math.  
Repeat.

I have a Rigol scope.  I'm pretty sure I could program it to automate the data 
collection.

If you have a counter/timer that your PC can talk to, measure the time from 
one PPS to the other.


If you have a PC, get a picPET, clock it from the rubidium and watch the PPS 
from a GPS.  The picDIV is only accurate to 400 ns.  You can get a lot better 
than that if you pick your times to match when the picPET shifts across a 
clock edge.

Mumble.  I don't know how to describe that in words that will be easy to 
understand.  It will be obvious after you see it.  Consider reading a clock 
that only ticks once per second, like the typical CMOS clock on a PC.  Assume 
your PC has a clock and you want to know how far off it is.  Spin reading the 
CMOS clock until it changes.  Then grab your PC clock.  That gets you your PC 
clock close to the beginning of a second.

For the picPET, instead of using 2 samples 24 hours apart, adjust the 
start/stop times for your 24 hour run to start right after the picPET 
fraction-within-a-second changes.


For more accuracy, get a TAPR TICC.  $229
  https://tapr.org/product/tapr-ticc/
Thanks John.  You did a wonderful job.


-- 
These are my opinions.  I hate spam.


___
time-nuts mailing list -- time-nuts@lists.febo.com -- To unsubscribe send an 
email to time-nuts-le...@lists.febo.com
To unsubscribe, go to and follow the instructions there.


[time-nuts] Self monitoring

2022-03-31 Thread Hal Murray

kb...@n1k.org said:
> You really can???t compute things like ADEV by observing the device against
> itself. You need an external / stable reference that is (hopefully) much more
>  accurate than the GPSDO to compare it to.  

What can I conclude when looking at data collected internally by a GPSDO (or 
NTP)?


-- 
These are my opinions.  I hate spam.


___
time-nuts mailing list -- time-nuts@lists.febo.com -- To unsubscribe send an 
email to time-nuts-le...@lists.febo.com
To unsubscribe, go to and follow the instructions there.

[time-nuts] Temperature effect on delay of FatPPS :)

2022-03-29 Thread Hal Murray
I'm putting some data collection toys back together.

I've got a TAPR TICC watching a couple of PPS signals.

The clock for the TICC comes from a HP 5334B with the good crystal option.  
It's not right-on in frequency, but there is no control voltage that might be 
wiggling around so it should be stable.

This setup is half backwards.  I'm using the PPS to calibrate the frequency of 
the TICC reference clock, then assuming the reference clock is short term 
stable and using it to examine the short term characteristics of the PPS 
signals.

The green line is the PPS signal from a Sure demo board with a SKG16B GPS chip.
  http://www.leapsecond.com/pages/MG1613S/

The wander in the green line is a combination of warmup and temperature.  The 
5334B was off for several months.  This graph starts on day 18.  The wiggles 
are easy to see on an expanded scale but that blows the FatPPS signal off 
scale.  The daily temperature swings are roughly the same size as the daily 
drift.  (Another graph for another message...)

The PPS signals are connected via clip leads to handy places.  One of those 
was after a FatPPS.  That signal is upside down so the TICC is triggering on 
the trailing edge.  No problem, I thought, I can just fix that up when 
graphing things.  :)

After I saw the initial results, I put a temperature probe on the FatPPS.  The 
spike at 18 hours is the direct morning sun peeking through the houses and 
trees across the street.


-- 
These are my opinions.  I hate spam.

___
time-nuts mailing list -- time-nuts@lists.febo.com -- To unsubscribe send an 
email to time-nuts-le...@lists.febo.com
To unsubscribe, go to and follow the instructions there.

FS: Apple 1TB SSD for 2013-2015 MacBook Pro

2022-03-27 Thread 'Hal' via LEM Swap
I pulled this SSD from my mid-2015 15” MacBook Pro with Retina Display. 
It will fit in any late 2013 to mid 2015 MacBook Pro. 
It doesn’t need any adapter or firmware mods, it's plug and play.

It’s the 1TB OEM Apple/Samsung blade-type SSD. 
Works great, I just needed more space. Tested with Disk Utility and there were 
no errors.

Asking $150 shipped in USA or best offer.

--
Hal Widlansky
Salt Lake City, UT 84108

-- 
You received this message because you are a member of the LEM Swap group.
To post to this group, send email to lemswap@googlegroups.com
To unsubscribe, send an email *from your subscribed address* to 
lemswap+unsubscr...@googlegroups.com
LEM-Swap is not a discussion list; it is for buying & selling Mac stuff. Reply 
directly to the person who posted, never to the list.
Software piracy is illegal and not allowed on LEM Swap. Except for freeware and 
software originally provided with computers, no software is to be left on hard 
drives unless the original installer (not a burned copy) is included, along 
with any required registration number, password, etc.
Shipments valued at US$100 or more should be insured, and shipments valued at 
US$25 or more should be shipped so they can be tracked.
See the list FAQ http://lowendmac.com/2014/lem-swap/
for guidelines on postings, feedback, and dispute resolution. Seller feedback 
at http://groups.google.com/group/swap-feedback
--- 
You received this message because you are subscribed to the Google Groups "LEM 
Swap" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to lemswap+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/lemswap/0CD42BFC-2CE6-4DB0-9B8A-366F60D4FE5D%40mac.com.


Re: Test #2

2022-03-24 Thread Hal Murray via devel
Note the time stamps on the received headers.  There is still a delay I don't 
understand on the handoff from lists.ntpsec.org to mx.ntpsec.org

That could be a feature rather than a bug -- if we remember it and think a bit 
longer about what we are typing and try to make every message high quality.


Received: from lists.ntpsec.org (lists.int.ntpsec.org [192.168.9.59])
by mx.ntpsec.org (Postfix) with ESMTP id 2156A2869E7;
Thu, 24 Mar 2022 12:54:23 + (UTC)
...
Received: from mx.ntpsec.org (unknown [192.168.9.57])
 by lists.ntpsec.org (Postfix) with ESMTP id 3033A3C0276
 for ; Thu, 24 Mar 2022 10:23:55 + (UTC)


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


[Wiki-research-l] Give WMF feedback on model cards

2022-03-23 Thread Hal Triedman
Hi all,

The WMF Privacy and Machine Learning Platform teams are developing model
cards to increase visibility, transparency, and accountability of
algorithmic decision-making on WMF platforms. The broad goal is for every
ML model hosted by WMF to have a model card for the community and public to
understand, discuss, and govern that model.

We would love for you to give some feedback on the talk page of our
prototype:
https://meta.wikimedia.org/wiki/User:HTriedman_(WMF)/Language_Agnostic_Link-Based_Article_Topic_Model_Card

Thanks so much!
Hal
___
Wiki-research-l mailing list -- wiki-research-l@lists.wikimedia.org
To unsubscribe send an email to wiki-research-l-le...@lists.wikimedia.org


[time-nuts] Re: Why Jan 6th?

2022-03-22 Thread Hal Murray


j...@luxfamily.com said:
> I've been hunting around for the origin of GPS zero - Why is it 0UTC Jan  6,
> 1980?   Is it a subtle joke about "Twelfth Night"? Does it have some  useful
> properties that "end of year" does not? 

GPS weeks start on Sunday.  That was the first Sunday in 1980.


-- 
These are my opinions.  I hate spam.


___
time-nuts mailing list -- time-nuts@lists.febo.com -- To unsubscribe send an 
email to time-nuts-le...@lists.febo.com
To unsubscribe, go to and follow the instructions there.


Re: NTPsec panic and abort

2022-03-18 Thread Hal Murray via devel
Interesting.  Thanks.

That exit is what happens if you try to adjust the time by too large a step.  
It's just a sanity check -- assuming that exiting ntpd is better than making a 
large adjustment.

I forget what the default max-step is.  You can change it via the config file. 
 You can bypass that check for the first adjustment with a -g on the command 
line.

>> Mar 18 05:10:10 gw1 ntpd[2200]: CLOCK: Panic: offset too big: -604800.000
What time zone is your logging using?

>> 59655 86030.616 NMEA(0) $GPRMC,235350,A,.,_,_.,_,000.0,31=
5.7,170322,001.5,W*__

> Note the spurious "100322" date that is 1 week in the past.

I don't see a "100322".  I see 17 rather than 10.

I'm assuming you copied the wrong chunk from the clockstats file.


> I have never come across such an ntpd abort before. This is the first time
> I'm seeing it.
Mostly, GPS units don't lie.

> Can this condition be handled in any other way, so that the service doesn't
> terminate?

How should ntpd decide if the GPS is lying or the time really is off by a week?


Do you have any other servers in your config file?

If there are several working servers, they should out-vote a lying GPS.
But the GPS has a prefer so I'm not sure what would happen.

You are using the PPS in the NMEA driver.  I don't think that needs the prefer.

I usually run with a separate PPS driver so I get the statistics from the PPS 
driver.  That case does need the prefer.


-- 
These are my opinions.  I hate spam.



___
devel mailing list
devel@ntpsec.org
https://lists.ntpsec.org/mailman/listinfo/devel


<    1   2   3   4   5   6   7   8   9   10   >