Dyrehaven
It’s oh so quiet
It’s a boy!
Crete, Greece
Last month, we went on a delayed honeymoon to Crete, Greece. The weather couldn’t have been better and neither could the food, so needless to say, we spent quite a lot of time near the pool. We did manage to save some time for a road trip or two and I just don’t want to keep the pictures from you.
More pictures here.
Note to self: IPv6 on Hetzner
Hetzner has a strange IPv6 routing setup where the default gateway is not in the same subnet as the host. Clearly, this is to avoid wasting space on glue nets, but it does not look pretty. Obviously, Linux just ignores the fact that it isn’t supposed to work, but no such luck on FreeBSD. As Bitmand wrote some time ago, it can be solved with a static route but the FreeBSD startup scripts, apply the default route before static routes, leaving it no other option but to reject the default route as it has no route to its target at that time. Instead of hacking the startup scripts, this can be solved easier with two static routes with fixed order, which is still a hack though not as ugly and less error prone when upgrading the system files. For reference, especially for myself next time I need this, here’s my full ipv6 startup configuration:
rc.conf:
ipv6_enable="YES"
ipv6_default_interface="re0"
ipv6_static_routes="defgw def"
ipv6_route_defgw="2a01:XXXX:XXXX:XXXX::1/59 -prefixlen 59 -iface re0"
ipv6_route_def="default 2a01:XXXX:XXXX:XXXX::1"
ipv6_ifconfig_re0="2a01:YYYY:YYYY:YYYY::2/64"
systctl.conf
net.inet6.ip6.accept_rtadv=1
Moving to Copenhagen
Finally, last weekend the rest of my things were moved from Tranbjerg near Aarhus to Amager near Copenhagen. The trip (pictures) included both a quiet and beautiful ferry trip across the Kattegat and a trip to western Jutland with the tiny truck. The end result: A lot of boxes everywhere…
Summary of the FreeBSD Ports and Packages Summit at BSDCan 2011
Just a quick note to point to my slides that summarize the Ports and Packages Summit at the FreeBSD DevSummit during BSDCan 2011, which can be found here. Also, we looking forward to feedback on the PKGNG project that was announced earlier and will replace the current pkg_* tools to handle ports installation and package handling and which will be a focus for portmgr over the next few months.
Skype for Mac 5.x security vulnerability
As the Leave Comment feature on Skype’s blog does not seem to work in Safari, I’ll leave some comment on this here. Some serious information is incorrect or missing from Skype’s security information for Skype for Mac 5.x (2.x is rerported not to be affected).
Skype released a very terse message on their Mac blot today pointing to an earlier post on their Security blog. The information in this post is either incorrect or there is another vulnerability out there that they haven’t informed their users about yet. The vulnerability described in the blog post explicitly states that a specially crafted, malicious “message would have to come from someone already in your Skype Contact List”. I have seen many crashes over the last few weeks with version 5.1.0.914, none of which caused by messages from people in my contact list, but by contact requests, which for obvious reasons can be sent by people not (yet) in ones contact list.
If these crashes are related to this vulnerability, it would contradict both Skype’s statement that the malicious message has to be sent by an approved contact and that the vulnerability is not exploited in the wild. Hopefully, Skype is right and they are unrelated, but to err on the safe side I would recommend anyone using Skype for Mac 5.x to not wait for Skype to release a new version next week, but to upgrade immediately to the latest release 5.1.0.922 here. This version will not show up via the Check for Updates menu as Skype deemed the hotfix non-critical, exactly because it can only be caused by approved contacts and is not seen in the wild, so their users have to find out and install the update manually themselves.
Update: Skype has released Skype for Mac 5.1.0.935 which includes unspecified Security updates with no further explanation as they wish to “wait for the majority of our users to update before detailing / discussing any of the specific issues that have been fixed”.
Update 2:Legitimate contact requests also crash Skype.
Vestamager
With the lovely spring weather during the Easter holidays, it was time to explore so-called nature around a major city like Copenhagen. Not far from here is the nature reserver Vestamager. As can be seen in the picture below, it’s actually so close to downtown Copenhagen that you can see Town Hall. Even with Copenhagen Airport, modern highrises, and a highway constantly visible and audible in the background, it’s quite a nice outting, especially only with a 15 minute metro ride.