The software powering the wiki is Dokuwiki – a fantastic wiki software that’s very feature-rich (thanks to a plugin architecture) but very lightweight (everything is maintained in text files!)

There is however one mild annoyance – Dokuwiki insists on adding a Meta-header advertising the version number and there’s no direct way of turning this off:

Luckily there’s a plugin that can help – the metaheaders plugin. Unfortunately, the plugin does not ship with a configuration UI and the documentation on the plugin page is sparse. In order to disable the “generator” meta that Dokuwiki adds, here’s what you need to do:

1. Create a file called metaheaders.conf.php in the Dokuwiki conf directory. If you are using the dokuwiki package in Debian, the metaheaders.conf.php needs to go into the /etc/dokuwiki directory.

2. Add the following lines to the metaheaders.conf.php file:

<?php
$clear[] = array ( 'name' => 'generator' );

3. Clear the dokuwiki cache – you can do this by issuing a touch command on each txt file in the pages directory under /path/to/dokuwiki/data/pages (or /var/lib/dokuwiki/data/pages in Debian). Or, you can take the nuclear option and remove the cache directory entirely (/var/lib/dokuwiki/data/cache in Debian). Either way, once you’ve done this – you can trigger a full refresh of the page in your browser and check the page headers:

Possibly Related posts

• WordPress build has backdoors built in
• Preventing Version Info Leakage with Dotdeb’s PHP 5.3.2 for Debian
• Flickr RSS Feeds do not respect your privacy

Moving On! The fastest way to upgrade the PHP version on Debian/Lenny “stable” without running into dependency hell is through the dotdeb repositories. Not only does it allow you to upgrade to PHP 5.3.2, you also get the ability to install PHP-FPM through the Debian package manager, instead of having to re-compile PHP from source.

There is one small problem though – once you upgrade using the Dotdeb repository, all your PHP pages have an “X-Powered-By” header included:

If you are serving PHP content using Apache/2 alone, fixing this is relatively simple. Enable mod_headers as follows:

a2enmod headers

Then add the following line to your Virtual Host definition:¹

RequestHeader unset X-Powered-By

Now reload your Apache configuration and the header information should disappear when you do a full refresh of the page in your browser.

On the other hand, it becomes a little more complicated if you are using Nginx as your public web-server and proxying PHP requests to a backend Apache process. Depending on how your Nginx setup is configured to handle PHP requests, you may need to use one of two approaches:

Approach 1 – Nginx directly serves PHP content by proxying to a PHP/FastCGI server

If you have installed PHP-FPM, you will know that it runs as a service listening for any requests on Port 9000. Hence, you could have Nginx serve PHP content using the following directives:

location ~* ^.*\.php$ {
fastcgi_pass   localhost:9000;
fastcgi_param  SCRIPT_FILENAME  /var/www/mywebsite/$fastcgi_script_name;}

To hide your PHP version, add the following directive to the Nginx configuration:

#Prevent version info leakage
fastcgi_hide_header X-Powered-By;

Approach 2 – Nginx serves PHP content by proxying to an Apache process:

In this approach, the Nginx configuration for serving PHP content looks very different from Approach 1:

location ~* ^.*\.php$ {
proxy_pass http://127.0.0.1:80;
}

The directive for hiding the version information also changes as Nginx is now acting as reverse-proxy:

#Prevent version info leakage
proxy_hide_header X-Powered-By;

Reload your Nginx configuration and check that the changes have taken effect by triggering a full refresh of the page in your browser:

1. Note: I don’t use Apache as my front-end web server anymore so this isn’t tested by me. That said, it should work

Possibly Related posts

• Tips on working with FreeNX on a Debian/Ubuntu VPS
• Preventing version Leakage when using Dokuwiki
• Fix Mouse Grabbing/Ungrabbing for a Debian VMWare Image

This may or may not work perfectly for you. Here’s how I fixed a couple of problems that I encountered:

• I can’t connect to the Internet via Wi-Fi from the Virtual Machine

If your host machine connects to the Internet via Wi-Fi, you’ll find that the Virtual Machine cannot browse the net or download any packages. The reason for this is that by default, Wi-Fi adapters are excluded by the VMWare Workstation. You can fix in one of two ways:

1. Remove your Wi-Fi adapter from the Exclusion list – Go to Edit > Virtual Network Editor > Automatic Bridging:

You should see your Wi-Fi adapter listed in the “Do not attempt to bridge” list. Select the adapter and hit Remove. Now try rebooting the Virtual Machine and see if Internet access has started working.

2. Map a specific VMNet Adapter to your Wi-Fi adapter – In the Virtual Network Editor, Choose the Host Virtual Network Mapping tab:

Pick a VMNet Adapter and map it your Wi-Fi adapter. Next go to your Virtual Machine settings and modify the Network option to point to the VMNet Adapter you had modified:

• I’ve shared a folder from the Host PC, but the Linux Virtual Machine can’t see it.

The nice part of using images from the Appliance Marketplace is that VMware tools is typically installed, enabling the best features of the VMWare Workstation such as changing the resolution and Unity View. However, you might find that Shared folders aren’t working properly. To test whether you have a fully working VMware tools install, run the following command:

sudo lsmod | grep vmhgfs

You should something similar to the following output:

# lsmod | grep vmhgfs
vmhgfs                 51336  1

If the command exits without any output, you have an incomplete VMWare tools install. Run the following command:

sudo /usr/bin/vmware-config-tools.pl

Accept the default prompts and wait for the configuration to finish. Now try the following commands:

# modprobe vmhgfs
# lsmod | grep vmhgfs

If the lsmod command returns some output now, you’re all set to start copying-and-pasting files between the Host PC and your Virtual Machine.

Possibly Related posts

• No related posts.

The typical recommendation in such cases is to install VNC and a <Insert preferred desktop environment here>. There are a few problems with this:

1. VNC requires you to open an additional port (or two) at your firewall.

2. VNC relies on it’s own user-authentication database and doesn’t support long passwords.

3. Trying to get usable performance out of VNC is a black art in itself.

The smart answer is NX – a remote desktop solution that relies on SSH for authentication, scales to any sort of connection (all the way down to a 56kbps modem link) and supports multimedia and file-sharing support.

I’m not going to talk about how to install NX on Debian/Ubuntu – there are plenty of guides, including this one on the Ubuntu Wiki.

There are a few “gotchas” when it comes to installing FreeNX on a Debian/Ubuntu VPS and it took a while for me to work out the answers. For the reference of anyone else struggling with these problems then, here are my tips:

• When I use the NoMachine NX Client and try to exit a session, the application seems to “hang”:

One of the best features of NX is robust suspend/resume support for sessions. On a default install of FreeNX however, trying to exit a FreeNX session from the NoMachine NX client doesn’t work. The problem is that a couple of dependencies aren’t included. To fix this, run the following commands:

On Ubuntu –

aptitude install x11-utils

On Debian 5 –

aptitude install x11-utils && aptitude install xterm

Now when you try to exit the session you should see the following dialog box:

• I was told that the NX Client could tunnel sound, but all I get is an error message on my VPS. I was lied to!

Actually the lack of sound is a problem of working with FreeNX on a VPS. You need to install a Sound Daemon – specifically the Gstreamer Sound Daemon. To fix this, run the following commands in Debian/Ubuntu:

aptitude install gstreamer0.10-esd

Once this done, go to System > Preferences > Sound and modify your settings as follows:

Now when you click the Test button, you should hear the soothing sound of a test tone on your local speakers. Note that this isn’t guaranteed to get applications like rhythmbox working and I have no idea on how to go about fixing problems like those. Also keep in mind that the volume control applet will still complain about missing plugins and refuse to “unmute” itself.

• I’m able to login via SSH, but trying to login via NX fails.

I’ll begin this section with a  big caveat – the fix for this problem does involve reducing the security of your SSH config. Another caveat – this problem appears to be isolated to Ubuntu.

Situation – you have disabled clear text passwords in your SSHD config (i.e PasswordAuthentication no) and only allow Public Key authentication.

Problem – The NX client fails when trying to connect to the Server. If you turn on debug-level logging for SSH, you see the following message in your auth.log:

(nx) Failed login for user=<someuser> from <so.me.I.P>

You know the password for <someuser> is correct and have typed in letter-by-letter 10 times now.

Diagnosis – Tracing the root of this problem is very hard for two reasons – 1) the error message is very generic and can occur in a number of scenarios and 2) It seems specific to Ubuntu. Debian does not require any changes to your SSHD config to get FreeNX working.

Solution – The only solution that I could find after multiple iterations with the SSHD Config is to enable clear text passwords. In other words, open the sshd_config file and change the line

PasswordAuthentication no

to

PasswordAuthentication yes

Reboot the SSH daemon and FreeNX will start working without a hitch.

It is worth noting that enabling PasswordAuthentication does not imply the passwords are sent unencrypted – they are still encrypted using the host key. In addition, you can lock down SSH access to specific users/groups using the AllowUsers or AllowGroups directives in your SSH config.

Possibly Related posts

• Preventing Version Info Leakage with Dotdeb’s PHP 5.3.2 for Debian
• Fix Mouse Grabbing/Ungrabbing for a Debian VMWare Image

• Supports RMVB,AVI,DIVX,MKV,MOV,HDMOV,MP4,M4V,PMP,AVC,FLV,VOB,MPG,DAT,MPEG file formats
• Does HDMI Output upto 720P
• Built-in Flash memory of 2GB and USB-Host Support

The feature I was most intrigued by however, was a note buried in the instruction manual – it claimed that the manufacturer would provide firmware upgrades for the device!

Since this a device manufactured in China, even finding the manufacturer’s website took some digging around. Eventually, I did locate the site and after viewing it through Google Translate, I was able to download the upgrade installer. Awesome right?

Well not quite – as I had to go through quite a few hoops to actually get the installer to actually run. I figured that I might as well put down the steps on the Web for other folks who might be having the same problems as I did.

OS Compatibility Warning: The installer simply does not work under Vista. Trying XP Mode etc. on Vista is of no use. I have no idea whether it will work under Wine/Linux but for now I recommend sticking to Windows XP.

1. The latest firmware upgrade for the Q7 can be found here. Scroll down and look for the link text in green (or you can try this direct link, but I have no idea how long it will work)

2. The site is a bit slow, so be prepared to wait 15-20 mins for the file to download, even on a broadband connection.

3. Once you have extracted the files, you will wind up with a set of folders like so:

4. Extract the 2nd set of RAR files and we get the following:

5. If you are on a English-language version of Windows, the Mandarin characters can cause a lot of problems with launching the installer. I recommend renaming the files to something like “q7upgrade.img” or the like.

6. I also suggest placing the files under the root of C: drive or some partition. It definitely won’t work with folder names containing spaces. Here’s the folder structure that worked for me:

7. Next you need to launch the installer application. The 2nd round of RAR file extraction would have created a folder and a disk image. Look for an application called “LiveSuit.exe” in the folder:

8. When you launch LiveSuit.exe, you will get the following window:

Note: If you would like to see the actual Mandarin characters used in the installer and get a translation of what they mean, please see Ashwin Nanjappa’s comment on how to enable Chinese character support & translations in Windows. Thanks Ashwin!

9. Click on the first icon (a packing box?) and locate the IMG file that you had extracted earlier. Once you do this, the second “gear” icon becomes active:

10. Now plugin the Q7 into your PC. It will be recognized in Windows as a USB 2.0 Flash Device

11. Once you get the “Hardware installed” popup in Windows, click on the gears icon in the LiveSuit app (Step 9 above)

12. You get a prompt of which very little is readable, except for one very important button:

13. You will now be prompted to install drivers for the device. The USB Drivers are located in a subfolder inside the folder you launched the Livesuit installer from, i.e:

Once you have navigated to the correct folder with the drivers, your “install drivers wizard” should look like this:

14. You might have to run the Driver install wizard twice before the actual upgrade starts. Once the Driver install completes, the LiveSuit installer takes over:

15. Eventually, you get another unintelligible popup:

16. At this point, you have upgraded your Q7’s firmware – Congratulations! What do you get from this you might ask? Well the highlights are:

• Proper resume from Standby when using the power button on the remote
• Support for SUB format subtitles
• Better MKV Support
• Support for UTF-8/UTF-16 encoded subtitles.

Not bad at all eh? The entire release note is available on the webpage where the firmware is hosted, but you will have rely on Google Translate if you can’t read Mandarin – here’s a translated link

Post-Firmware Upgrade Warning:

• After the upgrade, the On-Screen menus default to Mandarin again. You will have to go into the Settings menu and select the “Globe” icon to be able to change the language back to English.

16. If you are wondering how to exit the LiveSuit application, here’s a hint – it isn’t the regular close button on the App window. Instead you need to click the little running man/AIM icon:

That’s the HowTo. Let me know in the comments if this helps or you have any problems. Happy Viewing!

Possibly Related posts

• Preventing version Leakage when using Dokuwiki
• Preventing Version Info Leakage with Dotdeb’s PHP 5.3.2 for Debian

To summarize, it currently uses:

• 6 different sites for the Calendar – Dopplr, Upcoming, Remember The Milk and fbcal feeding into Google Apps Calendar. Nuevasync syncs a subset of my Google Apps Calendar to my Samsung i600 phone. Remember The Milk feeds into my Google Apps email.
• I use Google Calendar Sync for my desktop calendar that lives in Outlook 2007.
• I had a sync setup between my phone and Outlook as well, but stopped using that after some significant grief.
• I sync my Google Apps mail via IMAP on my phone and backup using POP3 in Outlook 2007.
• Regular Gmail is synced via IMAP and some magic sauce using Seven.

It probably has too many moving parts and is overly dependent on various free services. But it works well enough for me.

Possibly Related posts

• No related posts.

1. Broadcast your location to your friends and FoaF network in the hope of making unexpected connections; and

2. Share comments and rich media (photographs, video, voice etc.) about your experiences at a particular location.

This then, is the state of my location networking experience one year on:

Two problems have remained stubbornly unresolved for that entire period

1. The lack of two-way sync between Brightkite and Fire Eagle – While I can understand why Google Latitude won’t play with Fire Eagle, I’m puzzled by the reluctance of the other players in location networking like Brightkite and Foursquare to integrate with Fire Eagle. Integrating with Fire Eagle would allow location-networking providers to stop worrying about how their users send updates to their service and focus on making the experience more fun to use. Instead, all the players in location-networking are guilty of listening only to the echo-chamber hype of early adopters and providing solutions only for the platforms the geeks love, i.e., the iPhone, the Blackberry Bold generation and the Android OS. This is remarkably short-sighted considering:

a. While the iPhone is the fastest selling Smartphone today, it still isn’t beating older Blackberries, Windows Mobile or the Palm OS in terms of installed base.

b. No Smartphone is coming close to beating the "dumb" cell phones install base

If location-networking is to really become as ubiquitous as social networking, it has to run on a variety of platforms and require little by way of a hardware minimum. The promise of location-networking, to open your phone and see the location of not just your friends but of your FoaF network is truly remarkable. But meeting only the needs of the echo-chamber will keep location-networking a niche product, until it is killed off by the geeks who abandon it for the next cool thing on the horizon.

2.  The lack of rich metadata for any media shared through Brightkite – Let’s ignore the fact that Brightkite does not support video uploads to Flickr (despite the fact that Flickr has had  video in place for over a year now). No, my complaint is about how little metadata is passed to Flickr when I send a photo to Brightkite.

a. No tags

b. No Titles

c. Email subject as description

c. No EXIF data

Using the Email Subject line as a description isn’t a very great idea either – why can’t we specify the Title via Email Subject and the description via Email Body? Isn’t that more logical. The lack of tags means these images are going to be very hard to surface via search. All in all, it’s a very limited and clunky solution for something a lot of other products do very well.

I had hoped that 2009 would be the year that location-networking really started to take off. It now seems like location-networking will continue to stagnate until someone builds a product that not only works for the early adopters, but for the early majority and the users after that

Possibly Related posts

• You never forget your First time…
• Map Apps and journey planners need fixing – in other news I suck at directions
• Make a wish

1. Since Friendfeed allows for “fake follows”, should I just follow everyone who follows me? After all, I never need to see their updates.
2. I finally understand the power of lists in Friendfeed. With every other tool, S/N ratios have to be controlled through manual curation of follow-lists. On Friendfeed, that’s never a concern.
3. A classic sign on Twitter of “spammers” is someone with a huge “following” list. If I did start following 12000 people on Friendfeed would I become a “spammer” in someone’s eyes?
4. If I was following 12000 people on Friendfeed, would that “cheapen” the “silent attention” that I pay to my friends lifestreams. In other words, would their assessment of my “ambient social awareness” be tainted by the thought “he can’t possibly keep up”. After all right now, a lot of conversations with my friends in real life slip between contexts of “on IM you said” and “on twitter I saw..”. Would that disappear if I was following 12000 people here because folks would assume I couldn’t have kept up?
5. Am I plate-of-beans’ing this?

Related idea – Even though URLs on Twitter Profile Pages are no-follow, spammers follows millions to drive up SEO Rankings for URLs in their bios & names. Should Twitter: a) add noindex,nofollow o follower/following profiles? b) remove links to follower/following profiles for not-logged in users/search engine bots? c) remove bio or not-logged in users/search engine bots?

Possibly Related posts

• Information Overload and Creativity – Simplicity is the key
• Trickle blogging
• Spokeo and FriendFeed

Attributing the photo this way is wrong in a couple of ways:

1. Flickr is not the organization that “owns” these photos, it’s merely hosting them.

2. If the photo was licensed under a Creative-Commons license, the Straits Times should have attributed the photographer in the article, under the terms of the license.

I decided to look up who had posted this photo on Flickr to determine which license the photo had been made available under – that’s when it got really puzzling.

I couldn’t locate this image on Flickr and it was only when I broadened my search to Google that I located this image:

Blog post with original image.

Looking through the source of the page, I can’t find any link to Flickr – only to a Japanese-language webpage that has very little information.

So it appears that not only has the Straits Times screwed up how attribution should be done for photos taken from Flickr, they have actually sourced the image from some other website and forgotten to link to the correct website.

Possibly Related posts

• You never forget your First time…
• On the state of location networking
• Make a wish

Hollywood is well known for fake UI in movies – you know, “Unix is easy“¹ or the “VB GUI Interface“. I’d say most geeks get a kick of seeing just how removed from reality Hollywood computers can be.

I was very surprised then to spot a familiar looking application during a scene in the movie “National Treasure” (a fairly forgettable movie otherwise):

I think to myself “Wait. Isn’t that…?“. As if reading my mind, the Director zooms in for a closer look:

Yup that’s Photoshop alright.

What? You don’t believe me. Ok, I created a comparison image those of you who say “fake”:

If that’s a fake, that’s a damn good one. I wonder if Adobe got any royalties for the use of their software in the movie. If they didn’t, I’d say they have pretty good grounds for a lawsuit right there

PS: That blue wallpaper in the background looks awfully familiar too. Any mac-heads can confirm/deny?

1. Whoa! I did not realize this, but apparently the UI on screen during this screen is real! See this wikipedia article. Thanks Ashwin!

Possibly Related posts

• Not even Prof. Muller can save you now