KeePass: password management

Most of us have a multitude of online systems we connect to, some on a regular basis and others from time to time. Each of these systems usually has a unique user ID and password. How many of these can we reasonably remember? Many, many people attempt to keep at least the passwords aligned across systems and often user name as well. The risk is that one of these systems is compromised (or worse, malicious) and suddenly someone other than you has the keys to the castle.

There is also the challenge of picking a strong password. There are several online password generators, and tools that help verify the strength of a password. For a while I was relying on my browser to remember my password (via a cookie) and using randomly generated passwords, when the cookie expired I’d use the “I lost my password” feature to fix it (or just recreate a user). This works ok for throw-away sites (web forums) but really sucks for a site like PayPal.

So I was guilty of password re-use across a number of sites. No longer now that I’ve moved to KeePass. Of course, now I need to ensure that I have one password (for KeePass) that I will not forget and is secure enough. To help in creating one I’ll reference a great article on the usability of passwords, I encourage everyone to read this.

You can get versions of KeePass for almost any platform. For my needs I needed to cover Windows, Linux and Android. On first launch you’ll be asked to create a database (to store passwords) and assign it a password and/or a keyfile.

From the documentation “Key files provide better security than master passwords in most cases. You only have to carry the key file with you, for example on a floppy disk, USB stick, or you can burn it onto a CD. Of course, you shouldn’t lose this disk then.” This is a neat option, but not very practical on my NexusOne.

Once you’ve created your .kdb database on one of your systems, in my case an Ubuntu box – you can move that DB to other systems you’ve got KeePass on. The Android app KeePassDroid happily consumed the (1.x) database created by KeePassX. You need to figure out a method for synchronizing that database across your systems, some people use dropbox or just simply scp.

By using KeePass it is easy to create strong passwords (a generator is built into the app) and track your unique user id and password for all sites you access. Giving yourself a rule that says you’ll switch to a KeePass based password on your next visit to the site will help you move over relatively quickly.

If you need any more encouragement to rethink how you handle passwords and account, just do a quick google search. Better to lose control of one account than all.

How To: Acer AspireOne RAM upgrade

Back in July of 2008 I picked up an Acer AspireOne, one of the first netbooks. Since netbooks have been mostly dropped in favor of tablets, you can pick up a netbook around the $200 price point. Most netbooks seem to take DDR2 laptop RAM, and this can be found on the used market fairly cheap. The 512MB pictured above was $5.

The AspireOne continues to be a useful machine, I’ve recently moved over to the netbook remix for Ubuntu. It does suffer from limited screen real estate, a very slow solid state drive, and prior to the upgrade – only 512MB of RAM. Doubling the RAM for $5 seemed too tempting, especially since it gave me a good excuse to take it apart.

Read on for the gory tear down details..

Continue reading “How To: Acer AspireOne RAM upgrade”

MythBuntu 10.04

Back in 2007 (or so) I built my first MythTV box.  I did it somewhat on the cheap, picking up a refurbished 1.8GHz Pentium desktop machine – adding a Hauppauge WinTV PVR-150 card and a fanless low end NVidia card with TV-Out. My TV feed is a satellite set top box connected to the capture card, controlled by an IR blaster. The TV itself is a standard definition Sony Wega. (yup, totally old school)

In 2007 this machine was one of my first Ubuntu installs, I believe Edgy was the distro at the time. Installing MythTV was a fairly long process, and I needed to recompile LIRC to enable the IR blaster support that the PVR-150 had. Getting guide data required some scripting to connect to the then free Zap2It service that offered up listing information. Somewhere along the way, the free guide service ended and I needed to apply some changes to the system to move to schedules direct which is what I still use today. Other than the initial pain of configuring the machine and refresh to fix the guide data, I had pretty much left it alone.

The one problem is that when I am foolish enough to change my satellite subscription around, getting more (and different) channels – I need to manually go in and configure schedules direct to reflect the channels I actually get (or what to make available on the PVR). Over this last summer I changed my subscription and hadn’t gotten back to fixing the guide data.  I also had a larger hard drive I had been meaning to install into the system. For these reasons I decided it was time to upgrade to MythBuntu.

Initially I tried 10.10 as it was the latest and greatest.  It turns out the hardware I have doesn’t support booting from USB, I did mention this was pretty old school. Not having any blank CDs – I ended up burning a DVD of the iso to do the install. I also had some problems specifying anything beyond the defaults during install (things didn’t work) – thus my recommendation is install using the defaults, then add the nvidia drivers (etc) after you’ve booted the newly installed system.

I will complain here that MCC doesn’t have keyboard navigation controls.  Forcing me to find a USB mouse to connect to the machine to configure things. It also turns out that you want to stick with a screen resolution of no less than 1024×768 as some of the dialogs will not fit on a screens smaller than that.

Sadly it turns out LIRC is horribly broken with the PVR-150 in 10.10. It is a point in time problem hopefully, but it is linked to kernel levels and driver architecture changes. It was a disappointing introduction to MythBuntu, but the PVR-150 while popular is no longer a current product.

Dropping back to 10.04, there are patches available. By the time you read this there may be a solution for 10.10 out there too. Even with this simple guide available for 10.04, I spent a couple of hours trying to sort things out.

Using the mode2 command, I was able to verify that the IR receiver was working correctly.

sudo mode2 --device=/dev/lirc0 -r

This meant that there was an issue with LIRC. In the end it turns out the issue was resolved by getting the correct magic in the /etc/lirc/hardware.conf file. I’ve included a copy of my /etc/lirc configuration files in case anyone needs them. Once you get irw working, you know you’re set.

Somewhere in the shuffle (again I blame MCC) something managed to delete all of the configuration files for LIRC. These reside in .lirc/ and in my case, the root file was valid but all of the data files it points to were empty files. Simply executing

$ mythbuntu-lircrc-generator

fixed things right up.

There was one more stumbling block for me, and that was getting my capture card configured correctly. I had erroneously set a preset channel in the capture card setup. This is a no-no if you’re configured as I am, grabbing bits from a satellite box. This was apparent when I read the embedded description of the field on the setup screen, but frustrating. If I go through this process again I’ll take the time to do a full how-to. If you find this post and are struggling, drop a comment and I’ll try to help.

My primary setup is a combined backend / frontend. If you want to enable additional frontends (as I do), you’ll need to do two changes.

  1. Modify mysql configuration to allow remote access (a security issue, but we’re on my home network so it is ok)
  2. Change the backend configuration to use the machines real IP vs 127.0.0.1 (this is changed in 2 places on the same setup screen)

If you have an iPhone or Android phone, then I’d suggest checking out the various remote control apps. You will need to configure the frontend to allow for network based control. The iPhone app that worked best for me was MyMote (app store link). The Android app I prefer is MythMote.

That’s the tale of about 8 hours of my time sucked into not watching TV, but making it possible to watch TV. MythBuntu does make the whole MythTV install easier, and I’m enjoying some of the newer features that come along with the more recent MythTV builds.