Allgemein

OpenVPN connects successfully, then immediately disconnects

Veröffentlicht am von Markus Fritsche

If you’re using OpenVPN 2.4 or higher, there’s a changed behaviour within OpenVPN: expired certificate revocation lists will no longer be accepted by the server. A client will successfully connect, then disconnect. The log on the server will print something like:

VERIFY ERROR: depth=0, error=CRL has expired: C=US, ST=CA, L=Ubuntu, O=Org, CN=client1, emailAddress=mymail@example.org
OpenSSL: error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed
TLS_ERROR: BIO read tls_read_plaintext error
TLS Error: TLS object -> incoming plaintext read error
TLS Error: TLS handshake failed
Fatal TLS error (check_tls_errors_co), restarting

I startet /etc/openvpn/openvpn-server1/easy-rsa/revoke-full „dummy“ which gave an error but recreated the revocation list. Make sure to change „default_crl_days“ in your openssl configuration beforehand!

Allgemein

Denial of service as a service

Veröffentlicht am von Markus Fritsche

Twitter today announced it was acquiring the “trust and safety as a service” startup Smyte to help it better address issues related to online abuse, harassment, spam, and security on its platform. But it also decided to immediately shut down access to Smyte’s API without warning, leaving Smyte’s existing customers no time to transition to a new service provider

Quelle: Twitter ‘smytes’ customers

Ohne Worte.

IT

Ubuntu 18.04 & gnome3

Veröffentlicht am von Markus Fritsche

Ubuntu 18.04 desktop (vanilla edition) switched to using gnome3 instead of their own unity desktop.

I’m switching to using xubuntu-desktop, since the new Ubuntu standard desktop combines the flaws of gnome3 with the flaws of Ubuntus desktop user interface.

IT

Ubuntu & xrdp server black screen on login

Veröffentlicht am von Markus Fritsche

I am running a xrdp server for when I need a full desktop on one of my android devices – if I’m using remote login for gui stuff, I’m using x2go.

Recently, the xrdp server stopped working. Looking for ways to fix it didn’t yield a proper result. I finally found the solution:

Due to upgrading my ubuntu server installation by using „do-release-upgrade“, an old libglib-2.0.0 was left over in /lib/x86_64-linux-gnu/ (version 4800.0). That library took priority over the new installed version in /usr/lib/x86_64-linux-gnu/ (version 5600.1). The error I saw was

„undefined symbol: g_date_copy“

After deleting /lib/x86_64-linux-gnu/libglib* and doing „apt –reinstall install libglib2.0-0“, I am able to log in to xfce4 again.

IT/Surftipps

Dark Patterns, The Ratchet · Jacques Mattheij

Veröffentlicht am von Markus Fritsche

The cumulative effect of all those little ratchets on your privacy is rather terrible, but there is no denying it: you were along for the ride and you had the option to ‘opt out’ at every step. Not just from that one dialogue: from all of them by refusing to use products that are fielded by companies that engage in these unethical practices. Say no to ‘The Ratchet’ and it’s sick family of dark patterns designed to little-by-little chip away at your privacy, kick products and companies like that to the kerb where they belong. That’s the only way to really opt out.

Quelle: Dark Patterns, The Ratchet · Jacques Mattheij

Dark Patterns ist sowieso ein interessantes Blog, dass „dunkle Patterns“ beschreibt, also Benutzeroberflächen und Prozesse, die so gestaltet sind, dass der Nutzer etwas zustimmt, dem er/ sie eigentlich nicht zustimmen will…

Gesellschaft/IT

Cloudsäuberung

Veröffentlicht am von Markus Fritsche

Die neuen Dienstleistungsbedingungen von Microsoft für Services wie Skype, Xbox Live, Bing, Cortana oder Cloud-Angebote untersagen beleidigende Äußerungen. Auch Pornos und explizite Gewaltdarstellungen sind künftig tabu.

heise

Google löscht Pornos oder das, was sie dafür halten, Microsoft macht Moralfilter als Service. Dit is halt cloud.

IT

Delve for android

Veröffentlicht am von Markus Fritsche

… is useless – at least for me. We’re not an „all Microsoft“ kind of organisation. This way, it just shows if somebody had the time to save documents on our corporate sharepoint site. Yay…

[X] Uninstall