Platforms for Engineering school labs (Was: Re: RFC: Public targets having a big potential: Engineering schools)

2007-03-02 Thread Gergely Kis

Hello,

Actually we are planning on doing this at the Technical University of Hungary.
I have an Embedded Linux course, where in the past years we used Siemens
Blue2Net devices + HP Ipaq 5500s with Familiar as the target, but the
former device is very low power (50 Mhz PPC, limited peripherials),
and the later is not really designed for Linux, altough it can be used
for education.

We just acquired Glomation GESBC-9315 developer boards, which has
similar parameters as the Neo + a CAN / RS485 bus controller which
makes it useful to demonstrate industrial applications. We also plan
to acquire Neo/OpenMoko devices to replace/complement the Ipaqs.

Best Regards,
Gergely

On 2/25/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:

Something else your post made me think of: Many engineering programs have labs
that involve a particular hardware platform.

OpenMoko would make an ideal platform for labs on all the different
technologies involved: embedded systems programming, small screen UI, hardware
control, modem interfacing and control, GPRS applications, etc.

With access to the openmoko website and sourcecode, instructors have a huge
range of material to work with.

Students will have access to the hardware via JTAG, and more via the lunchbox.

All this at an extremely inexpensive price. I'll bet most lab platforms are
much more expensive as they are low volume development platforms.

Heck, some of you here could be teaching these classes. Perhaps just write up
a proposal and send it to your local college extension program?

Thoughts?

Michael



___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: FOSDEM OpenMoko talk now on video.google.com

2007-03-02 Thread Mike Hodson

On 3/1/07, Ian Stirling [EMAIL PROTECTED] wrote:


Get mplayer, and compile.

This is playable with only the software codecs, no windows dlls are
involved at all. (or at least it worked with them moved out of the usual
place)

As to why I picked it - I don't know offhand the switches to make
mencoder output ogg.
I don't even own a windows box.


As far as I can tell, there is no inbuilt ogm multiplexing or ogg
audio encoding for mencoder yet, and even then, the format of choice
IMHO would be an mkv container, mpeg4 video (either mencoder/ffmpeg's
lavc or xvid) and ogg audio. I'll be one happy man when I can do that
with 1 mencoder command, and not a script to encode audio separately
and multiplex a video segment with an audio segment.

Mike

___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: Possible security hole for Dialers/troyan horses

2007-03-02 Thread Bartłomiej Zdanowski DRP AC2

Martin Raißle napisał(a):

On 3/2/07, Jonathon Suggs [EMAIL PROTECTED] wrote:

In combination of what was said before - the virus scanner - we could
maybe use a database of application hashes, so not every app has to be
configurated but only those that are not found in the database, maybe
this will bring some focus to security to the average user, since not
every app goes along with a warning.
If there are too many warnings user tend to grant any right to any app.

I'm afraid that you're going a bit too far. I thought about making costs 
with illegal calls and smses. Virus protection should appear only when 
viruses appear. Otherwise scanner would kill system's performance (as 
NAV do in my computer and I always disable it while not installing 
unknown apps).
Think about average users. They don't need rating. They sometimes even 
don't know exactly what spam is. It has to be as simple as possible.


--
*Bartłomiej Zdanowski*
Programista
Dział Rozwoju Produktów
AutoGuard  Insurance Sp. z o.o.

Sąd Rejonowy dla m.st. Warszawy, XIII Wydział Gospodarczy Krajowego 
Rejestru Sądowego

KRS: 029534
NIP PL1132219747
ul. Omulewska 27
04-128 Warszawa
tel. +48 22 611 69 23
www.autoguard.pl http://www.autoguard.pl
begin:vcard
fn;quoted-printable:Bart=C5=82omiej Zdanowski
n;quoted-printable:Zdanowski;Bart=C5=82omiej
org;quoted-printable:AutoGuard  Insurance Sp. z o.o.;Dzia=C5=82 Rozwoju Produkt=C3=B3w
adr:;;ul. Omulewska 27;Warszawa;;04-128;Polska
email;internet:[EMAIL PROTECTED]
title:Programista AC2
tel;work:022 611 69 23
tel;cell:603 525 105
x-mozilla-html:TRUE
url:http://www.autoguard.pl
version:2.1
end:vcard

___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: Possible security hole for Dialers/troyan horses

2007-03-02 Thread Martin Raißle

On 3/2/07, Bartłomiej Zdanowski DRP AC2 [EMAIL PROTECTED] wrote:

It has to be as simple as possible.


That's why I think this is a good solution .. users don't have to
think about everything but only the problems, openmoko cannot solve.
Of course a scanner will slow down the thing a bit and unless there
are any problems with viruses it's maybe a bit overdone but something
like chkrootkit or rkhunter for linux is not so bad :)

martin

--
The only secure computer is one that's unplugged, locked in a safe,
and buried 20 feet under the ground in a secret location... and I'm
not even too sure about that one--Dennis Huges, FBI.
___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: Possible security hole for Dialers/troyan horses

2007-03-02 Thread Evgeny
On Fri, 2007-03-02 at 10:19 +0100, Bartłomiej Zdanowski DRP AC2 wrote:

 I'm afraid that you're going a bit too far. I thought about making
 costs with illegal calls and smses. Virus protection should appear
 only when viruses appear.

It still Linux based phone — there is absolutely no real-life viruses
for Linux at this time, trojans are possible treat, but user have to
install them by himself. If he want to install some unsigned/not known
application, the best thing is to warn him about possible treat.
You don't intend to think instead of user, don't you?
 Otherwise scanner would kill system's performance (as NAV do in my
 computer and I always disable it while not installing unknown apps).
Linux based phone you don't need anti-virus at all.
 Think about average users. They don't need rating. They sometimes even
 don't know exactly what spam is. It has to be as simple as possible.
Simple — Yes! Point to stupidity — Don't think so.
-- 
Sincerely Evgeny


___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: Possible security hole for Dialers/troyan horses

2007-03-02 Thread Joe Pfeiffer
Aloril writes:

Fortunately in Linux usually to be able to run executable arriving in
email you need to do following:

1) Save file to disk
2) chmod +x that_file (or equivalent in GUI)
3) run_that_file

That's only because Linux MUA's typically don't implement the 'run
directly from the message' functionality that Outlook does.  Not
giving users the convenience they have come to expect is necessary to
keep this happy state of affairs -- it's nothing inherent in Linux.

___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: Possible security hole for Dialers/troyan horses

2007-03-02 Thread Tim Newsom


On Fri, 2 Mar 2007 6:09, Evgeny wrote:


It still Linux based phone — there is absolutely no real-life viruses
for Linux at this time, trojans are possible treat, but user have to
install them by himself.


That's a pretty strong statement.. Are you absolutely sure there are no 
viruses for linux in the wild?


It would seem to me that the time to think about protection is before 
you have a problem. Granted, you will never catch everything up front. 
However, thinking about and dealing with the trojan, virus , issue is 
not too different from the steps we were taking to notify about 
unintended actions of programs. I.e. Getting a notification and deciding 
on how the action should be handled, etc.  I think Norton Internet 
security does an excellent job on windows.. It knows about many, many 
applications and versions of them, can tell you if it was modified or 
contains known threats including trojans, lets you know when a program 
does something it was not explicitly allowed to do and does it pretty 
well without making my laptop crawl.  Combined with a rootkit detection 
system of some kind it would be great, but I am sure there are still 
holes in it I don't see.  Right?

I would use it on my phone if it existed for that platform.
--Tim
___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: Platforms for Engineering school labs (Was: Re: RFC: Public targets having a big potential: Engineering schools)

2007-03-02 Thread michael

Hi Gergely,

That's wonderful news.

This would make a great story for Linux Journal or Linux Magazine (not to
great mention publicity for OpenMoko).

I will be trying to make contact with those teaching courses like this in the
universities around me (Stanford, UC Berkeley, etc.). If I am able to do so, I
may contact you offlist for more information. I trust that's OK?

Regards,
Michael



On Fri, 2 Mar 2007, Gergely Kis wrote:


Hello,

Actually we are planning on doing this at the Technical University of 
Hungary.

I have an Embedded Linux course, where in the past years we used Siemens
Blue2Net devices + HP Ipaq 5500s with Familiar as the target, but the
former device is very low power (50 Mhz PPC, limited peripherials),
and the later is not really designed for Linux, altough it can be used
for education.

We just acquired Glomation GESBC-9315 developer boards, which has
similar parameters as the Neo + a CAN / RS485 bus controller which
makes it useful to demonstrate industrial applications. We also plan
to acquire Neo/OpenMoko devices to replace/complement the Ipaqs.

Best Regards,
Gergely

On 2/25/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:

 Something else your post made me think of: Many engineering programs have
 labs
 that involve a particular hardware platform.

 OpenMoko would make an ideal platform for labs on all the different
 technologies involved: embedded systems programming, small screen UI,
 hardware
 control, modem interfacing and control, GPRS applications, etc.

 With access to the openmoko website and sourcecode, instructors have a
 huge
 range of material to work with.

 Students will have access to the hardware via JTAG, and more via the
 lunchbox.

 All this at an extremely inexpensive price. I'll bet most lab platforms
 are
 much more expensive as they are low volume development platforms.

 Heck, some of you here could be teaching these classes. Perhaps just write
 up
 a proposal and send it to your local college extension program?

 Thoughts?

 Michael



___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community



___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: Possible security hole for Dialers/troyan horses

2007-03-02 Thread Todd W


From: Bartlomiej Zdanowski AutoGuard Ltd.


Todd W napisał(a):


I don't understand why people think this. I haven't ran in to a phone yet
that I couldn't run my own apps on. A particular account may not
have the proper level of network access, but that has nothing to do with
the capabilities of the phone. Please stop spreading FUD.


You're talking about running apps and I talk about accessing all phone
peripherals and capabilities to very deep level. That's a security
threat. You did not understand me, sorry. I don't spread FUD. I do think
about important issues about developed product.


I've used the J2ME and Windows Moblile SDK's, and neither has prevented me 
from completing tasks. All the tools are there.



Every phone I have seen keeps a log of calls made and messages sent. Web
based account manager apps provide the same data. The monthly bill does
also. I'm not understanding what else you would need?


I would need someone to remember about that while writing phone's
software. Only pointing that it has been already discovered in other
product doesn't guarantee that it will appear in OpenMoko. Maybe you
should laugh at some developer that he thought about LCD display in
Neo1973, because every phone you have seen has a display.


Granted. But I think you are considering things that are a given.


What do you think?

I think you are making a mountain out of a molehill.


I think you have nothing constructive to say. Be critic to show weak
points and propose new solutions in exchange. Sole critic only kills
invention. Remember that.


Thats my point... I think there already are standard solutions in place for 
the issues you bring up. I'm not saying your points are invalid, just that 
they are solved problems (for some definitions of solved).


Todd W.


___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: 'My Account' - a way to store information about the phones owner, so they can be reunited if it's lost.

2007-03-02 Thread Ian Stirling

Paul Wouters wrote:

On Thu, 1 Mar 2007, Ian Stirling wrote:


Reflashing never gets you back a different account number, it keys off the
IMEI, which is not flashable. (well, perhaps it is, but it's not flashable
from the linux side, and AIUI, nobody else knows how at the moment.)


I really hope the IMEI number is not available to every application or even
the kernel itself. Perhaps only when booting the phone with some special setting
in which case it refuses to use the GSM network, so people cannot be coerced 
into
enabling this identifying mark. We already went through this with the pentium
serial number.


You don't have to use this scheme.
If you choose not to, it may be a minute - at most, reading through a 
couple of screens explaining why registering may be a good idea, and 
picking no, and 'don't bother me again.'


If anyone picks up your phone, they will simply see
In shipping from FIC to user (delivery confirmed) as the last entry.

The IMEI is readable out of the modem with standard AT commands.
There is even a standard across all GSM phones to get it to display it.

It's worse than you think.
When you turn the GSM module on, this number uniquely identifies your 
phone, it can be accurately tracked where you are, and 'they' can even 
make voices in your head appear. (if you answer it when they call).




___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: A new approach to Re: Itch3: Anti-lost/theft protection

2007-03-02 Thread Ortwin Regel

The thing has bluetooth so it should be able to connect to the
Wiimote. Using one instead of an internal accelerometer makes sense,
because when you move your phone around, it's hard to keep looking at
the screen.

Ortwin

On 3/1/07, adrian cockcroft [EMAIL PROTECTED] wrote:

I would like to include an accelerometer in a phone design (my own
homebrew design or a future Neo perhaps?), then all the Nintendo Wii
style interactions become possible.

If my phone is locked it asserts that it should be at rest, if someone
picks it up it needs a code or a secret gesture on the touchscreen to
unlock it or set moving locked mode.

if it doesn't get the code it asks to be put down again, if that fails
it complains loudly in speakerphone help, I'm being stolen, put me
back! or whatever audio you like.

It also posts its location to a web service.

Should be easy enough to code, I'm just waiting for the hardware to catch up...

Adrian

On 2/28/07, Attila Csipa [EMAIL PROTECTED] wrote:
 On Wednesday 28 February 2007 21:44, Steven ** wrote:
  Caveat emptor.  Possession of stolen property is still a crime where I
  live, even if you didn't do the actual stealing.

 All I'm saying (IANAL of course) that for many of those items (especially on
 places like ebay) it is very hard for the buyer to establish whether the good
 is actually stolen or not (receipts and boxes can be photoshopped all too
 easy), and he has to rely on a level of reasonable doubt (based on seller
 rating, price, provided images, etc) to determine whether he is getting the
 good from a trustworthy source.

 ___
 OpenMoko community mailing list
 community@lists.openmoko.org
 http://lists.openmoko.org/mailman/listinfo/community


___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community



___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Apple's multitouch pattent?

2007-03-02 Thread mathew davis

Just wonderign if any body knows for sure if apple has a pattent on their
multi touch technology.  check out this video on google.

http://video.google.com/videoplay?docid=6379146923853181774q=moviehl=en

Very impressive stuff.  I mean I am sure that this would probably be a lot
of processing for the neo, but just looking at the video there are so many
things that you can imagine you could do with this technology.  This would
be a perfect peice of technology for an open community.  If it is pattented
then I can't wait until someone else comes up with a similar technology.  I
counted that they had as many as 10 touches on the same panel at one time.
I wonder if they just use some kind of sectioning or something.  Any way's I
am just curious.  That and the voice control could change the way we
interace with things.  I have always thought that the interface between
human and machine has developed very slowly.  I mean the mouse and key board
have been around for ever and they are still the standard method of
communicating with a machine.  Just thought I would post this question here
as every one here seems to be very knowledgable about this kind of thing.
___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: Matchbox panel 2 not installed

2007-03-02 Thread Greg
Hi Wil,

I had the same problem.  On closer investigation it turned out that a missing 
pkgconfig file was the problem.  Two of the demos require it.  After much 
trial and error, I came up with the attached file, which finally solved my 
problems.

Eventually the build went fine, but I never did get around to working out how 
to actually *run* those two demos - I just used the other three (Those two 
create shared libs that need to be called from the running environment I 
think)

You may have to change a few paths in the attached file, but feel free to give 
it a go.  Putting it in /usr/local/lib/pkgconfig directory was what worked 
for me.

Have fun,

Greg.

On Friday 02 March 2007 08:27, Wil Chung wrote:
 So in attempts to get the demos up and running, I found out that I can
 just svn the openmoko tree.  I installed the prerequisites from
 openembedded website
 (http://www.openembedded.org/wiki/OEandYourDistro)

 I then checked out version 1003 from http://svn.openmoko.org/trunk

 And then I followed the instructions here:
 http://wiki.openmoko.org/wiki/How_to_run_OpenMoko_Apps_on_PC

 I was able to compile and install the openmoko-libs.

 However, when I tried running autogen, I got this at the end:

 checking how to hardcode library paths into programs... immediate
 appending configuration tag F77 to libtool
 checking for pkg-config... /usr/bin/pkg-config
 checking pkg-config is at least version 0.9.0... yes
 checking for OPENMOKO... yes
 checking for MATCHBOX_PANEL... configure: error: *** Required Matchbox
 Panel 2 = 0.1 not installed ***

 Am I suppose to download and make a higher version ( 1003) of the
 openmoko tree?

 Wil
prefix=/usr
exec_prefix=${prefix}
libdir=${exec_prefix}/lib
includedir=${prefix}/include

Name: matchbox-panel
Description: Matchbox Panel module dependencies - hack by Greg.
Version: 0.9.2
Libs: -L${libdir} -lmb  
Cflags: -I/usr/lib/glib-2.0/include -I/usr/include/atk-1.0 
-I/usr/include/gtk-2.0 -I/usr/lib/gtk-2.0/include -I/usr/include/cairo 
-I/usr/include/glib-2.0 -I/usr/include/pango-1.0 
-I${includedir}/matchbox-desktop -I${includedir}/matchbox-panel 
-I/usr/include/freetype2___
OpenMoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community