Category Archives: Hardware

Mac OS X Lion first impressions

I have been using Mac OS X Lion for two days now. This is fresh enough to remember the issues I encountered when installing.

Installation

It took me several tries to find an installation method that worked for me. In the end, the successful method was :

  1. Download the Lion image
  2. Open the image (right-click, Show Package Contents) and extract installESD.dmg
  3. With Disk Utility, burn installESD.dmg on a DVD disk. This makes it bootable.
  4. Restart the Mac, press Command, Option, P, R at boot time to reset the PRAM
  5. Boot from the Lion DVD. It takes 5 minutes to load.
  6. Go to the Disk Utility and Repair permissions
  7. Reboot again from DVD
  8. Install Lion from DVD and take a 35 minutes coffee break

I followed this guide to create the DVD. It could as well be put on a USB stick, but it needs to be one larger than 4Gb.

Usage experience

Quite strangely, it seems that the Java VM was not part of the standard installation. When I accessed a web site requring  Java, OS X kindly offered to download and install it. I restarted the browser and could continue.

Mail.app is an application which is central for me. On first launch, it took one hour to rebuild my (very large) mailboxes. The new three column display is most welcome. I used to use Widemail to achieve this same result in earlier versions. At first, the folder list was hidden. When restored (click “Show” on the second button bar), it was displayed with large characters, pretty inconvenient with a 13″ laptop screen. Quite strangely, this cannot be adjusted through the Mail.app preferences. You need to go to the System Preferences/General, and adjust the Sidebar icon size. This will also change the value for the Finder windows.

As I expected, GPGTools  does not work anymore with the new Mail.app. According to the developers, work is underway to restore the compatibility with the new Mail.app version.

Mission Control replaces the Spaces app for those virtual desktops. It works a bit differently, but it just requires getting used to.

The IPv6 stack has a new version number, dated 2009. The previous one was ten years old. I failed to notice any new feature, though. No DHCPv6, and no GUI option to set the IPv6 Privacy Extensions. By default, it is off. To turn it on requires editing a configuration file. Whether those privacy extensions are a good or bad idea is another debate.

The mouse or trackpad behaves in the opposite direction than it used to. Scrolling to the top requires to slide you fingers down on the trackpad. This can be changed in the System Prefererences/Trackpad, first option.

Other than that, I did not notice major differences. This may explain why the new OS X version still runs happily on a 5 year old MacBook, with 2 Gb of RAM. Apple continues its strategy to make you a captive consumer. FaceTime and Apple Store are linked to your AppleID.

In the end, was the upgrade worth it ? Frankly, the new features in Lion are not something the world has been waiting for anxiously. There is  no compelling reason to upgrade.

Update: after 2 weeks of use, I notice that Lion is slower on the average than Snow Leopard was. After adding 2Gb of RAM to my Macbook, I regained most of the lost speed.

Fritz!Box WLAN 7390 review

I finally got a AVM Fritz!Box WLAN 7390 modem/router to replace the Belgacom-provided BBOX-2, which gave me a few headaches and quite some frustration over the past year. I am happy to report that the Fritz works with Belgacom VDSL2, despite what Belgacom says about the mandatory use of their own broken modem.  Let’s get to the real meat. Some background first. » Read more…

Belgacom DNS resolvers lack EDNS support

The DNS resolvers used by default by Belgacom’s Internet customers lack EDNS support, according  to the test performed from OARC’s DNS Reply Size Test Server

hiram$ dig +short rs.dns-oarc.net txt @195.238.2.21
rst.x476.rs.dns-oarc.net.
rst.x485.x476.rs.dns-oarc.net.
rst.x490.x485.x476.rs.dns-oarc.net.
"195.238.24.113 DNS reply size limit is at least 490"
"195.238.24.113 lacks EDNS, defaults to 512"
"Tested at 2010-08-15 11:00:01 UTC"

hiram$ dig +short rs.dns-oarc.net txt @195.238.2.22
rst.x476.rs.dns-oarc.net.
rst.x485.x476.rs.dns-oarc.net.
rst.x490.x485.x476.rs.dns-oarc.net.
"195.238.25.113 DNS reply size limit is at least 490"
"195.238.25.113 lacks EDNS, defaults to 512"
"Tested at 2010-08-15 11:00:11 UTC

» Read more…

Belgacom’s BBOX2 wastes resources

Belgacom, we have (yet another ) problem with your BBox2 modem.

A background management daemon like TR-98  just cannot be allowed to use 96% CPU all the time, even when doing nothing. Please fix this, or fire your supplier.

Further, I do not use your SIP service, so please give me a way to disable the sipd process. It uses 48% of the available memory.

This is not an efficient use of resources and certainly not “green”. » Read more…

Faille de sécurité dans 500.000 modems Belgacom ?

Les modems BBOX2 qu’utilisent une majorité de clients de Belgacom TV comportent des failles de sécurité importantes. Belgacom revendiquait 589.000 clients pour sa plate-forme TV l’été dernier. Une majorité d’entre eux utilise ce fameux modem. Une combinaison de facteurs ouvre la porte à des actes malveillants, pouvant être commis par des personnes sans connaissances informatiques particulières et pas seulement des ‘hackers’.

  1. Les modems BBOX2 sont tous livrés avec le même mot de passe d’administration. On peut très facilement le trouver via un moteur de recherche: http://www.google.com/search?hl=en&q=BGCVDSL2
  2. Belgacom prétend bloquer l’accès à distance de ces modems via Internet. C’est partiellement exact. Cependant, ces modems sont livrés d’origine avec une connexion WIFI active et non protégée. N’importe qui passant dans la rue peut donc se connecter à une BBOX2 non protégée.
  3. Muni de cet accès administratif, on peut télécharger le fichier de configuration du modem et décrypter les mots de passe qui s’y trouvent. Là aussi, on trouve le nécessaire sur Internet: http://www.webalice.it/zibri/Deobfuscate.html

Après avoir récupéré les identifiants d’un abonné  à Belgacom TV (identifiants de la connexion PPPoE, pour être précis), un pirate peut utiliser ces informations pour perpétrer des actes malveillants en se faisant passer pour cet abonné.

Toutes les informations ci-dessus sont en possession de Belgacom depuis longtemps. J’ai moi-même interrogé l’opérateur, qui n’a pas daigné accuser réception, et encore moins répondu ou proposé des solutions.

Notons également que si cela s’applique aux clients de Belgacom TV, certains abonnés Internet, chez Belgacom comme chez les opérateurs alternatifs qui utilisent le réseau VDSL2 de Belgacom sont également concernés. Le propriétaire du réseau impose en effet aux autres FAI l’utilisation d’un modem semblable au sien, également pourvu d’un mot de passe identique pour tous les abonnés.

» Read more…