ssl_error_weak_server_ephemeral_dh_key

The solution

Adito supports a lot of different SSL-ciphers and some of them has weak Diffie-Hellman (DH) keys.
Here is a guide that worked for me and ensures secure connection to Adito (as before).

If you want to read more about the problem visit https://weakdh.org/ it checks your browser at the same time.

Use alternative browser or temporary enter these commands in Firefox:

• about:config
• Search for security.ssl3.dhe_rsa_aes
• Doubleclick to set values to false on security.ssl3.dhe_rsa_aes_128_sha and security.ssl3.dhe_rsa_aes_256_sha

Login to your Adito account and then follow the guide

Press the “Server” link under System Configuration

Push the “SSL” tab and you’ll see a list of ciphers

Adito states the following regarding the Adito client (this is very important)

Supported Ciphers

The list of SSL ciphers supported by Adito. If the selected cipher list is empty then all available ciphers are supported, if you edit this list then ensure that SSL_RSA_WITH_RC4_128_MD5 is selected as this is required by the Adito Agent.

WARNING: Editing these properties may cause compatibility problems with some older browsers.

I removed every TLS_* entry from this list and added all the SSL_* ciphers.
(Please do some research on which ciphers that are most usefull for your organization)

Press OK when you have updated the ciphers list

A restart of the Adito server is required. Existing users will be thrown out!

Press OK to restart Adito now

Press OK on the redundant confirmation regarding restart

Just wait 10 seconds. It displays an abort function if you actually did not read the messages before

The restart takes some time, and only works if you use it in service mode.
If you are using console, you have to close and restart the consolewindow.

Now remove the exceptions in Firefox as you changed before (security.ssl3.dhe_rsa_aes_128_sha and security.ssl3.dhe_rsa_aes_256_sha), and login to your Adito server using Firefox.

You are ready to use Adito on any browser again

If you haven’t update your Adito so clients can use Java 1.8, please see the page Installer-SVN!
Applet is valid signed and recompiled with JDK 1.8!

Oracle are still strict in their handling of unsigned applet, so it has to be properly signed to run.

Certum.eu have yet again provided me with a yearly cert, and this time I’ll promise to renew it

I’ve only released the SVN-version with support for v1.8.

This version uses my extension-store and are probably the most bug-fixed version out.

Download the installer from here

If you want to make Adito work on Java 1.8 or newer, follow the guide or download the SVN-installer with signed applet from here.

Please note that description is for Windows users, but the code-changes in step 5 can be implemented to Linux for correct compile.

The JDK will also install the JRE (Java Run time), so a simple test after installation is to run “java.exe -version” in a command-prompt

You can test ANT by typing “ant -version” in the command-prompt. It should state “Apache Ant(TM) version 1.9.4 compiled on April 29 2014”.

Save all the files and you’re ready to compile.

Please ignore the warnings and others messages during compile. It did not cause any problems with my installation.

Messages like “[javac] warning: [options] source value 1.5 is obsolete and will be removed in a future release” could potential be failing in the future.

To run the installer and first-time setup type: “ant install”. To run Adito normal just run “ant” in the directory, it is the same as “ant start-using-java”.

Wrapper does not work as expected, but my updated installer fixes that.

Please note that a Adito for Java 1.8-installer version is on its way, just waiting for a updated cert.

I have recently been granted 1 year certificate from Certum.eu and used it on the Adito project.
Certum.eu CA is included in Java, IE, Firefox, Chrome, etcetera; so end users have the chain already.
An article regarding signing existing jars, will be published later.

When you launch the client you still will get the SSL-certificate error.
To fix this you have to buy a SSL-certificate for you site, but for now Java accept self-signed SSL-certs.

When the actual applet launch, the certificate present the signed-title.
Certum always add “Open source developer x, x” in their certificates.

Please note that a certificate is not equal to safe code. When an applet has a cert, it is always executed outside the sandbox.
Meaning that you grant full access to your computer. Since I only provide the installer I cannot take any responsibility regarding what Adito does with your system! No changes has been done to the binaries on this release, only the cert and webpage template change.

After you pushed “run” the client run as normal

Download the new version from the Adito SVN R706 page.
Please backup before you update!

Spotiamp needed some bugfixes regarding some changes in service.
While I was at it, the client got a new icon and some eye-candy.

Overwrite old Spotiamp.exe with this version, all handling of commercials and settings are unchanged.
Download it from the Spotiamp-page

Oracle probably think that this increase the security of their “swiss cheese executable container” called java.

Adito is no longer developed and at the time it was, Java was “the-way-todo-it”.

Adito from my site is a unsigned applet, the default setup action now is to block it.

The best way to get rid of the problem is to decrease the security settings to “Medium”.

But you can add exceptions for your own site, and still keep “security” high.

Below this method is explained.

Here is the problem when you run Adito without rights to run:

To fix this go to the control-panel, then run Java-settings:

Go to the security-tab and push the “Edit site list”:

Add your site to the security list, this is the same as in your browser addressfield:

Now when you reload your Adito-agent, you will be presented with this prompt:

If you accept the risk, check it and push run.

(The Adito-agent is compiled by me, unchanged from source.)

The agent should be running like before.

Adblock = ON

Hardware.no commercial for adblockers

Adblock = OFF

Hardware.no with commercial

If you also got annoyed, add this filter to your adblock-exception-rules:

@@||hardware.no/js/adtech_ad.js
@@||hardware.no/js/adtech*.js

If you don’t care about comments on the site, block jQuery all together, add:

http://static.tek.no/js/jquery.min.js?cb=1369321785
or
http://static.tek.no/js/jquery.min.js*

(Source)

Earlier attempts does not work as expected. This will hide the commercial and show content

@@||tek.no$elemhide

That way the commercials and popups are long-gone-silver.

HW.no is active and tries to block attempts for blocking this.
If they are serious they should use sessions and hide articles behind a userportal solution.

If you have other sites that you would like to share tips like this, please let me know in the comment field!

The DS47 BIOS installed (DS47D000.100). I’ve requested Shuttle for support, and they probably needs to update the BIOS.

This video is from our main Automation-project at college HiT, back in 2005.
Sorting metal and plastic, packing metal for stock of 2 or 4 and sort plastic for stock of 4 balls.
Model was partly build when we took it over.

We installed the following to enhance the model:
* Siemens S7-300 w/Profibus controller
* High-speed input FM350 for S7-300
* As-i bus master for S7-300
* As-i bus I/O-hub (in “field”)
* Step-motor controller AT15R05
* Step-motor
* Siemens Profibus Touch Panel TP170B

We solved the task using Siemens S7 STL, SCL and HiGraph to minimize the cycle-time and resource usage.

A Norwegian report can be downloaded here

Hopefully that will make the Adito solutions more open to everybody

Going from 9700 spam in October to 17 in November is pretty awesome.
There aren’t many people that leaves comments on the site, but this reduction actually makes the site work faster.

I haven’t read about any spammers been caught nor that Akismet have upgraded their detection routines, if anybody know please let me know!

I have been requested to create a credit card calendar solution (lommekalender in Norwegian) to bring in your pocket.
A couple of afternoons have went to finish this off and now it is now open for all!

Check out an example here

Generate your own calendars from http://kalender.werner.no/

This kind of printouts require some labour, from your side
Find your scissors and cut out the calendars, flip vertical together and glue together.
Laminate the paper to ensure it withhold normal usage in wallet.

A picture says more than 1000-words, so here is some from my early testing.
(Please note that my crappy printer does not have any color, this is more a size-testing thing)

The article break down the essence to what needs to be handled.
It is also a nice little wrapper to get the data out, quick.

There is also a presentation CStatic that displays a Apple / Android / Windows 8 look-a-like simple keyboard.

Read the whole article here: Multi language on-screen keyboard using Windows keyboard dlls

I’m looking to buy a Nexus 10 tablet as a Christmas gift for myself, but Google blocked me, wtf?
An arrogant attitude of “No we don’t want your money, we don’t ship your way” is something i would expect from Apple or Microsoft.

Norwegians are techno-freaks and it sure shows, here is a quote from G+ Google Norway page;

Q:
Hello Google Norway, where can I get information or updates of when Nexus 10 will be out in Norway / Scandinavia?
I know this is not the correct thread to mention this, but I would appreciate if someone at least reply back.
At least 6 other people who have not received a response from you about issues.

A:
Google Norway AS – Nov 19, 2012
Hello! Sorry for a slow feedback!
There are not any specific date for launch locally, so unfortunately we have no specific answer for you. We put out the message here as soon as we know anything!

Source

When Google Norway does not know, then you are forcing users to the “grey markets” through eBay.com.
Is that what you want by this approach?

Footnote:
I didn’t buy any tablet and saved my money for now. After reading comments, I’m not even sure if the Nexus is right for me…
But I sure hope Google changes the marketing strategy for the next release. Maybe then our money has some value to them.

Regards an angry viking!

After opening the chassis I found two problems a 50mm and 30mm fans squeeeaking like hell

My solution was easy enough:
* Remove the DVD-burner (who uses that anyway?)
* Remove / disable the fans
* Add a 120mm fan to extract air
* Add a SSD-drive for less noise and more speed (I had a old 30GB spare that I used)

Here is my final result

Read more if you want check out how it fits inside and building tips!

These are the tools and stuff you need:
* A multifunction All rounder (this for instance)
* A grill (this for instance)
* One half of a SSD bracket (see picture below)
* A drill/driver + drill bits
* 120 mm fan (I used a Mist 120x120x25mm, 54.4 m³/time, 16.5 dB(A))
* SSD drive (2,5″ connection & power is ready)

First off mark the position you can fit the fan and still get the lid on, then drill 2 holes. I used the grill as template for making an internal square.
This square was then cut using the all rounder, this was the result:

120mm fan fitted on the top lid, the blue markings are me messing around with ideas

The screws goes through the grill and into the fan

Use half of the SSD brackets and mark a position under the “DVD-lip”. Drill 2 holes and attached it through the chassis (remember to fit SSD to bracket before attaching)

Here is an overview of the insides, notice that I have unplugged the 30mm fan, but didn’t bother to remove it.
The extra SATA-cable is actually attached to the SSD SATA-cable, so I couldn’t remove that.

The DVD-front was removed from the slim-drive and just fitted with duck-tape in front (not very neat, I know )

In BIOS I have overclocked the CPU without any problem.
I have also set the fan-speed to maximum, to ensure that the 120mm fan will move enough air.
Remember: Set the GPU shared memory to 512 MB for smoother playback on the 330!

As for the noise part, try different BIOS-options regarding the speed of the fan.
A 120mm fan does not create a high pitch sound and is probably the best choice for such application.

If you are looking for just replacing the old fans with more quiet version, check out MythTV-Wiki

In windows there are kbd**.dll-files that contain arrays of scan codes, virtual keys and characters linked to VK/SC. To avoid inventing the wheel again, I tried to use these.

My developer computer is a Win7-x64, and I have a VM running WinXP (32-bit) on it.
I created a 32-bit application, with default MFC-configuration.
I noticed that the pVkToWcharTable is NULL on the 64-bit machine and not NULL on the 32-bit machine after running the init KbdLayerDescriptor(). This occurred even if they loaded the same 32-bit-dll.

I tried several solutions, but all of them required to compile one 32-bit and one 64-bit version of the program. That wasn’t a satisfying solution for me, so I created a wrapper to handle such special events.

Read the article Load and init keyboard-dlls in a 64-bit enviroment (KbdLayerDescriptor), to read and download my example from the picture above.

If there are other clever souls out there who have a better way of doing it, please let me know!

CodeProject

Update! I have been told that these drives DO have TLER: http://www.pcper.com/news/Storage/WD-Red-drives-do-support-TLER, but there are other threads stating that is has TLER-similar functions.

The TLER is present, but you probably should run the drives in RAID 6 because of the low URE rating of 10^14!

————-

After the grand launch of Western Digital Red drives I got excited!
At last a TLER (similar to ERC or CCTL) affordable drive, they have commercials stating that this is for RAID-systems.
The excitement went sour after contacting WD support.

We sincerely apologize for the inconveniences, we will be more than glad to assist you with this issue, only the WD RE drives have the TLER feature in order to avoid any dropouts from the raid. If you want to use a WD Red drive on a RAID environment, it will work however, this drive does not have the TLER feature.

In my main server I have an Adaptec 3805 hardware RAID-controller.
Earlier I used 8xWD Green 1 TB drives with RAID 6 on it. They worked ok, very few dropout.
For 6 months ago I bought 8xWD Green 2 TB drives (WD20EARX) and now the “Abort”-count is sky-high

Adaptec support replied to me that the WD Green drives does not have TLER and are the worst kind to put into a RAID.

I replied to WD support asking why the WD Red drives are so RAID-friendly, since they do not have TLER.

We apologize for the inconveniences. The WD Red and the WD Green work the same in a RAID environment because they do not have the TLER feature. However, the WD Red have been tested in the following NAS systems:
WD Red Compatibility
WD Support ref: ref:_00DU0Jpn7._500U04E2hu:ref

Most disturbing reply is that WD Red and WD Green work the same in RAID, they couldn’t state any difference.

New features
* Dragable icons in Windows taskbar, change the order as you like (only left / right)
* Hotkey support
* Several bugfixes (eg forever tab-mode)

Hotkeys
Ctrl + Tab = Change tab to the right
Ctrl + Shift + Tab = Change tab to the left
Ctrl + F4 = Close current tab
Ctrl + N = New window
Ctrl + Shift + N = Change name on window
(Note: Last two only works if the main window is active!)

Download
Please download the updated version of Acrobat MDI-ish from this page

Earlier included features
* Tab-browser feature (all windows are forced maximized)
* Autostart with Windows (not when portable)
* Installer
* Gets the MDI feature back to your Acrobat!
* Multimonitor support with MDI!
* Systray control
* Multiple looks on the frame; Windows 2000/XP, Office 2003 / 2007

Note:
The comments section is now fixed to show 20 latest comments.
Comments are for your help on my software!

Check out the uptime

See the System Boot Time for last boot date

At post-date the server have been up for 246 days (8 months, 2 days).
Windows is stable and can handle the virtualization as well as Vmware

My developer VM TBone has been running almost equal amount of time

I’m now in the process of implementing ESXi 4.x to my alternative server.
Microsoft do not support Linux very well, so my ESXi shall handle Linux from now on

Wish me luck!

New colors, just for fun

Bugupdate:
* UNICODE support handling of Artist and title in commercials
* Tracks without Artist or Title can be added as commercials
* Converts commercials.ini from ANSI to UNICODE silently

New features:
* Better adsupport handling (after 15 secs the interface are displayed again)

Please download here, note that the Visual Studio 2010 Redistributable Package (x86) is required.

When opening the bottom lid I got a surprise; there are only 2 slots and their were filled already with 2x4GB.
I start googl’in and didn’t find the information as easy as I wanted.

Sharing is caring you know, so here is a tip:
Below the keyboard is two free slots!

You have to dismount the keyboard by following the guide on this picture:

(Source of picture)

Make sure that you unscrew the correct screws, there is a small “K” mark in the plastic for them.
You only need to unscrew 2 of them, the third is used to push the keyboard up.
On mine there is a blank metallic screw near the 3,5″ drive and black above the RAM.

Note:
When keyboard is loose, handle with care!
There is a small ribbon-cable that you don’t need to unplug just to install the RAM.
Just flip the keyboard, install and snap the keyboard back in it place.

Suggestion:
Change the 2,5″ drive with a SSD to experience great speed and less noise, you’ll never regret that!

Warranty note:

Thank you for contacting ASUS Customer Service.
My name is Daniel and it’s my pleasure to help you with your problem.

Please be kindly informed that the two other slots are underneath the motherboard and are not accessible except if you want to void the warranty.

We hope we have been of assistance.

As a comment to the support; no you haven’t been giving me any assitance!
ASUS advertise with 4 RAM slots, but you have to void the warranty to actual get it installed.
Studid and probably illegal marketing of features a normal user cannot reach, be warned!

My hardware is: Asrock ION330 (works great for 720p and 1080p)

I have been running XBMC on 8.10 (Intreprid) for quite a while and now I have updated to 11.04 (Natty).
Everything works fine, but HEY!, tearing on SD / HD material, argh!!!

Step 1. Getting rid of Unity
Guess I’m getting old, but I don’t like to “search” or pin my stuff to a bar + many people reported that Unity is a tear problem.
First go to the system settings:

Goto the systemsettings in ubuntu

Second to the login screen:

Start the Login Screen function and change the session variable to "Ubuntu Classi"

With these changes you are rid of Unity and back to the god’ol Ubuntu.
Tip: You can also make your user automatic login on the Login Screen, check it out while you’re there.
(Pictures are snagged from here, thanks mate…)

Step 2. Changing the xorg.conf
I tried several tips on how to get the tearing off.
I didn’t know that the Composite was manadatory to disable on my ION box, but it is…

To add this open a terminal then write

sudo nano /etc/X11/xorg.conf

Goto the bottom and add the text below.

Section “Extensions”
Option “Composite” “Disable”
EndSection

Tip:
While you are in the xorg.conf, why not add all the entries suggested by the XBMC wiki:
http://wiki.xbmc.org/index.php?title=HOW-TO:Install_Ubuntu_and_XBMC_on_Asus_EeeBox_PC_EB1501#Generate_an_xorg.conf_file

Tip 2: Alternative to write the xorg.conf yourself;

sudo nvidia-xconfig -no-composite

Now reboot and get your tearfree VDPAU ION computer to work as expected!

Compiz and others, check this out:
If you are running Compiz or maybe have a ATI card (or something) please check out this post

Not for the faint heart
I use the unstable NVIDIA drivers, if you experience any trouble you should try them.
Use this guide to add a new entry to the repositary, then include this PPA: ppa:ubuntu-x-swat/x-updates
(Get more updates here and here)

They have services like Hulu.com, Pandora.com and Netflix.com that we don’t.

Now how do you get in contact on these services without installing any TAPI devices on a computer? (like eg hotspotshield.com or Hamachi does)

The answer: UltraSurf.com

For a visual guide on how it works check out this video:

I had successfully connected to all services and love that Pandora is back on my pc!

New features
* Tab-browser feature (all windows are forced maximized)
* Autostart with Windows (not when portable)
* Installer
* Some bugfixes with systray and hide windows

Download
Please download the updated version of Acrobat MDI-ish from this page

Earlier included features
* Gets the MDI feature back to your Acrobat!
* Multimonitor support with MDI!
* Systray control
* Multiple looks on the frame; Windows 2000/XP, Office 2003 / 2007

Screenshot of new installer and gui