Aug 072013
 

Certificate with key size greater than RSA512 or DES512 bits not supported

Beste Sicherheit die man für Geld kaufen kann… Anstatt mitzuteilen, dass erst eine Lizenz eingespielt werden muss…

Mrz 052013
 

configuring/updating a plantronics voyager legend headset is quite a pita:

  • you need windoze
  • install some software which has no startmenu-entry, does not start after install
  • does not demand admin-rights when you start the .exe by hand w/o admin-rights
  • does not show up anywhere (but task-manager) after beeing started, so you can not shut it down the normal way
  • the configuration runs via a web-interface (http://www.plantronics.com/us/support/myheadset/updater/) which then talks to the running process which listens on 0.0.0.0/[::]:8011
  • this the updater-website then runs some javascript which talks via XML with the local process and plantronics.com. in a ugly way (okay it is XML…)

Here some examples:

Query: http://127.0.0.1:8011/isThereAnInoperableDeviceAttached?_=someID
Reply: OK

Query: http://127.0.0.1:8011/getDeviceList?_=someID
Reply:

<?xml version="1.0" encoding="utf-8"?>
<ArrayOfDeviceDescrip xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
  <DeviceDescrip name="Voyager Legend" pid="115" fwVersion="44" />
</ArrayOfDeviceDescrip>

Query:

http://127.0.0.1:8011/getExtendedDeviceDescription?xml=%3CExtendedDeviceQuery%20pid%3D%22115%22%3E%3CPStoreSetting%3Elanguage%3C/PStoreSetting%3E%3CPStoreSetting%3EvocalystPhoneNumber%3C/PStoreSetting%3E%3CPStoreSetting%3EenableAnswerIgnoreVR%3C/PStoreSetting%3E%3CPStoreSetting%3EenableDonDoff%3C/PStoreSetting%3E%3CPStoreSetting%3EenableA2DP%3C/PStoreSetting%3E%3CPStoreSetting%3EenableIncomingCallerAnnouncement%3C/PStoreSetting%3E%3CPStoreSetting%3EenableMuteVoicePrompt%3C/PStoreSetting%3E%3CPStoreSetting%3EmuteReminderTimeout%3C/PStoreSetting%3E%3CPStoreMap%20url%3D%22http%3A//www.plantronics.com/inc/support/myheadset/updater/psmap/bt_0044.PLT_Moorea_PStoreSettingConfiguration.xml%22%20/%3E%3C/ExtendedDeviceQuery%3E&_=someID

Reply:

<?xml version="1.0" encoding="utf-8"?>
<DeviceDescripEx xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Voyager Legend" pid="115" fwVersion="44">
  <Settings>
    <NvPair name="language" value="0x407" />
    <NvPair name="vocalystPhoneNumber" value="+492222222" />
    <NvPair name="enableAnswerIgnoreVR" value="0x1" />
    <NvPair name="enableDonDoff" value="0x1" />
    <NvPair name="enableA2DP" value="0x1" />
    <NvPair name="enableIncomingCallerAnnouncement" value="0x1" />
    <NvPair name="enableMuteVoicePrompt" value="0x1" />
    <NvPair name="muteReminderTimeout" value="0x15" />
  </Settings>
</DeviceDescripEx>

As that seems not to be enough we have an GET request to an statistics/tracking-interface by plantronics (URI decoded):

http://www.plantronics.com/moriniSrv/postMetrics?xml=<?xml version="1.0" encoding="UTF-8" ?>
<UpdateDescrip pid="115" downloadUrl="http://www.plantronics.com/inc/support/myheadset/updater/dfu/bt_0115_0044.PLT_Moorea_GBR_EN_dfu.dfu" postUpdateDelaySecs="20"><BeforeUpdateDeviceDescrip name="Voyager Legend" pid="115" fwVersion="44"><Settings><NvPair name="enableIncomingCallerAnnouncement" value="0x1" /><NvPair name="language" value="0x407" /><NvPair name="vocalystPhoneNumber" value="+4922222" /><NvPair name="enableMuteVoicePrompt" value="0x1" /><NvPair name="muteReminderTimeout" value="0x15" /><NvPair name="enableDonDoff" value="0x1" /><NvPair name="enableA2DP" value="0x1" /><NvPair name="enableAnswerIgnoreVR" value="0x1" /></Settings></BeforeUpdateDeviceDescrip><AfterUpdateDeviceDescrip name="Voyager Legend" pid="115" fwVersion="44"><Settings><NvPair name="enableIncomingCallerAnnouncement" value="1" /><NvPair name="language" value="0x809" /><NvPair name="vocalystPhoneNumber" value="+492222222" /><NvPair name="enableMuteVoicePrompt" value="1" /><NvPair name="muteReminderTimeout" value="15" /><NvPair name="enableDonDoff" value="1" /><NvPair name="enableA2DP" value="1" /><NvPair name="enableAnswerIgnoreVR" value="0x1" /></Settings></AfterUpdateDeviceDescrip><SaveAndRestore><PStoreSetting>informationPhoneNumber</PStoreSetting><PStoreSetting>scoOpenTone</PStoreSetting></SaveAndRestore><PStoreMap_before url="http://www.plantronics.com/inc/support/myheadset/updater/psmap/bt_0044.PLT_Moorea_PStoreSettingConfiguration.xml" /><PStoreMap_after url="http://www.plantronics.com/inc/support/myheadset/updater/psmap/bt_0044.PLT_Moorea_PStoreSettingConfiguration.xml" /></UpdateDescrip>&_=someID

So what is this? Modern software-design?

Feb 112007
 

As CNR ships proprietary software, does it use DRM? Is CNR going to be shipped by default in Ubuntu?

For me, those would be real killer-arguments against Ubuntu and Canonical. I mean, Canonical has the right to make money with Ubuntu but then they should please do so supporting or selling Ubuntu and not integrating third party applications.

The question that I ask myself is: „Is Canonical evil?“

I mean,
* Launchpad is closed source in order to compete with Red Hat and other Linux vendors [1]
* Mark does a lot of FUD against Red Hat, who contribute a lot to the FOSS community (also on the upstream side) which Canonical does not do.
Ubuntu kills Debian by taking it’s packages to universe, modifying them and not contributing back (there would be other ways fixing bugs in Universe, for example, fixing bugs in Debian and then syncing).
* Rosetta destroys upstream translations: Some nice users think “Hey, let’s translate this application / change some string” and translate it using Rosetta. The translations do not have any quality and upstream does not receive the changes. In most cases, Ubuntu gets bad translations. Yes, I already posted that and a possible “fix” to Rosetta-users ML.
* Dapper-commercial: Canonical surely gets money for doing d-c and not few. It fears me that one single company can say “Hey, let’s make a dapper-commercial repository and let’s ask our developers to modify gnome-app-install in a stable release so that it automatically adds a new repository on Canonical server”.

This and some things that I can’t remember are the reasons for not contributing to Ubuntu anymore on the side of fixing bugs. Though, I will still use it as my OS, since it is the best one I ever used. I think that since Canonical is the financier of Ubuntu, they can drive it the way they want. But it does not strength the trust me (maybe the community) if they do such things.

[1] http://charismacode.blogspot.com/2007/01/powers-and-repositories-ubuntu-and.html Over time, it will be open sourced. Right now we compete with Progeny and Red Hat and other companies, so we need to have a unique offering to do so effectively, and that’s Launchpad.

[2] http://www.markshuttleworth.com/archives/77

Some links about that:
http://forums.lugradio.org/viewtopic.php?t=2271&view=previous
http://geekz.co.uk/lovesraymond/archive/cancomical-lynchpad
http://azure.humbug.org.au/~aj/blog/2005/09/04
http://charismacode.blogspot.com/2007/01/powers-and-repositories-ubuntu-and.html