Mi blog lah! Το ιστολόγιό μου

10Aug/100

Announcing the Certificate Watch (CertWatch) Firefox addon

CertWatch is a Firefox add-on that helps you control how digital certificates are used when you visit secure websites. While there exist tools that help control how, for example, scripts like Javascript are executed (NoScript addon), there has not been a tool for digital certificates.

The closest Firefox addon to the functionality of CertWatch is Certificate Patrol, which keeps track of website certificates and notifies when a revisited website has a different website certificate. CertWatch collects more information than Certificate Patrol and keeps track of root, intermediate and website certificates, plus visit details.

Once you install CertWatch and restart Firefox, CertWatch will take up to 30 seconds to parse all root certificates that your Firefox comes with. Every secure website that you visit is vouched for by some root certificate that pre-exists in Firefox. Your Firefox has about 150 of those root certificates, and you can traditionally view them in Edit»Preferences»Advanced»Encryption»View Certificates»Authorities.

Screenshot of CertWatch 1.0 running for the first-time

Screenshot of CertWatch 1.0 running for the first-time

This is Firefox 4 (beta1) with a new profile. Both Firefox 4 and Firefox 3.6.8 (as found in Ubuntu 10.04) come with 149 root certificates. If you have more than 149, then you accepted yourself extra root certificates which are fully enabled and can vouch for secure websites. As you browse, your Firefox collects intermediate certificates (I plan to explain all these in future posts at certwatch.simos.info). These are added to Firefox without user interaction, as long as the respective root certificate is in Firefox as well.

Screenshot of CertWatch 1.0 Preferences

Screenshot of CertWatch 1.0 Preferences

These are the preferences, accessible from Tools » CertWatch Preferences. When you visit a secure website, there is a process where the website certificate is vouched by the root certificate that Firefox already knows. Between the website and root certificates there could be intermediate certificates, creating what is called a certificate chain.

What the preferences do is specify when you should get a notification while you visit a secure website. The default preferences say that for the certificate chain of a secure website, show the certificate details if any of the website, intermediate or root certificates are encountered for the first time.

Let’s visit https://addons.mozilla.org/ with CertWatch installed.

Screenshot of CertWatch 1.0 - certificates at addons.mozilla.org (animated GIF)

Screenshot of CertWatch 1.0 - certificates at addons.mozilla.org (animated GIF)

Each tab correspond to a certificate. All these three certificates are the certificate chain that verifies the secure website https://addons.mozilla.org/. The numbers at the tab names indicate how many times CertWatch encountered these certificates. It’s the first time, so they all show 1. The black star ★ indicates whether the CertWatch Preferences apply for each certificate. Since the preferences indicate first time only, then all tabs get a star.

From the list of root certificates, only a handful of them will be ever used during your browsing and with CertWatch you now have the facility to figure out which ones are actually being used. At this stage I would consider this as the first most important use of CertWatch; keeping track on how many times certificates are used. If you encounter a new certificate when you visit a revisited website, then this is something to investigate.

CertWatch keeps its copy of certificates in an SQLite database in your Firefox profile. For Linux, the path is ~/.mozilla/firefox/YOURPROFILENAME/CertWatchDB3.sqlite. You can read the database with any SQLite client such as the Firefox Addon SQLite Manager or sqlitebrowser (Packaged in Debian and Ubuntu as sqlitebrowser). In the SQLite database you can view the root/intermediate certificate table, the website certificate table, and the website visits table. In all cases the full certificate is stored in case you want to contribute to the EFF SSL Observatory.

CertWatch is developed on Ubuntu Linux 10.04, with Eclipse 3.6 (Helios) and the JSDT environment.

Install the latest version of CertWatch, which is available from the addons.mozilla.org (AMO) CertWatch page.

Follow the progress of CertWatch at the http://certwatch.simos.info/ CertWatch blog.

Here are some secure websites for testing, https://www.google.com/, https://www.paypal.com/, https://www.facebook.com/, https://twitter.com/

10Aug/100

The Ubuntistas magazine (in Greek)

Ubuntistas is an e-magazine by Ubuntu-gr, the Greek Ubuntu community.

This is the 9th issue of Ubuntistas for May-June-July. You can click on the image above and have a look at the issue. The text should look Greek to you :-) but you can get the gist of the content.

The contributors for the 9th issue of Ubuntistas are

  1. Almpanopoulos Nikos (editing)
  2. Diamantis Dimitris (author)
  3. Kwstaras Giannis (author)
  4. Papadopoulos Dimitris (author, desktop publishing)
  5. Petoumenou Jennie (editing)
  6. Savvidis Solon (author, public relations)
  7. Fwtiadis Grigoris (design)
  8. Fwtiadis Fillipos (author)
  9. Hatzipantelis Pantelis (author, desktop publishing)

I remember the first discussions that led to the creation of the Ubuntistas magazine. It happened at the Ubuntu-gr forum where I was a moderator at that time. As moderator, our goal was to provide a friendly environment so that users get quality help and continue to use Ubuntu. As a result of that, the chances that some of these users would end up giving back to the community would be higher.

My input to the discussion was that there are many way to contribute back and I gave a list of (very boring) things to do. I felt that a magazine endeavor requires many people to cooperate and it was quite complicated task. My belief however was that they should give it a go anyway.

ubuntistasdz0
They did give it a go and we got Ubuntistas Issue #1 (Nov-Dec 2008).
2Jun/100

Stix Fonts, eventually out.

The StixFonts project is a project to produce high quality fonts for academic publications.

It has been in progress for over ten years and there has been a beta about two years and a half ago. At the same time there had been a discussion on the relevant license for these fonts. The first draft of the license would have made the fonts obsolete as soon as they would be released. However, after public consultation, the project selected to use the Open Font License (OFL).

⬟⬠⬢⬤⬣⬲⬳⭆⭄⭃⬨⬍⬎⟲⟴✪◊▼◨◵↺↯⃟

StixFonts support mathematical symbols from Plane 1, however the WordPress post editor is not able to handle them and truncates the post when you save :-( .

Apart from mathematical characters, StixFonts support Latin, Greek and Cyrillic. Compared with DejaVu (default font in Ubuntu), DejaVu still has overall bigger coverage. You would want to use StixFonts if you write academic documents and require to use a wide range of math symbols.

You can get the StixFonts from the StixFonts project website, at version 1.0, in OpenType format. From the zip archive with the fonts, extract the *.otf files into your home directory, in a subfolder called .fonts (if it does not exist, create it). No need to restart the system; any newly restarted applications should be able to see and use the fonts. OpenOffice.org 3.2+ is required (for example, in Ubuntu 10.04) due to the OpenType format of the fonts. If you use OpenOffice.org for your document writing, it might be a good idea to create special styles for your math content and set the StixFonts as the font of those styles. You can type in those math characters using Insert → Special Character… in OpenOffice.org as shown below.

StixFonts in OpenOffice.org 3.2 (Insert Special Character)

These are the mathematical alphanumeric symbols (fraktur style) in Plane 1. You may notice that some characters are missing (such as capital N fraktur style). It’s not a bug. In OpenOffice.org, you click on characters and these are added in a string. Then, when you completed the string with all the special characters you click OK and they are inserted in your document. While we wrote ubuntu as sample text, these are symbols meant for math documents. However, the potential for geekiness in the Facebooks and the Twitters is easy to describe.

The beta version of the StixFonts are already packaged in Debian/Ubuntu as ‘otf-stix’. I suppose the package will be updated soon with the new version 1.0.

15Jan/100

OpenType support in OpenOffice 3.2 (Greek)

The new version 3.2 of OpenOffice.org is being developed and you can currently download the release candidate for your testing purposes.

A big enhancement in OpenOffice.org 3.2 is the support for OpenType fonts. A typical Linux user is able to do most of the tasks with TrueType fonts, however any new exciting fonts available are mostly OpenType fonts. So, OpenOffice.org 3.2 (to be released this month) has OpenType support and most likely Ubuntu 10.04 is going to have OpenOffice.org 3.2.

You can install OpenOffice 3.2 RC (or final, in a few weeks) on your Ubuntu by downloading the relevant archive from download the release candidate. Extract the files and enter the DEBS/ subdirectory. Then, run sudo dpkg -i *.deb in order to install the development version of OpenOffice 3.2. The installed files are located in /opt/ooo-dev3/program/ and you run now run swriter (for Writer). It is quite possible there is already a relevant PPA repository; tell me in the comments and I’ll update here.

We test with the Greek Font Society OpenType fonts, which are distributed with the OpenFont License. The Debian/Ubuntu repositories already have the GFS fonts packaged for you. You can either install the fonts with your package manager (open synaptic package manager, search for ttf-gfs), or run from the command line

sudo apt-get install ttf-gfs-artemisia ttf-gfs-baskerville ttf-gfs-bodoni-classic ttf-gfs-complutum ttf-gfs-didot-classic ttf-gfs-gazis ttf-gfs-neohellenic ttf-gfs-solomos ttf-gfs-theokritos

Here is a screenshot of the PDF file of GFS Fonts Sample. With OpenOffice.org 3.1 or earlier these fonts would not appear in Writer and would be replaced with the default OpenOffice.org font. In addition, if you tried to export to PDF, you would get the default font (that is, the OpenType fonts do not get embedded in the PDF file either).

Here is the .odf file of the GFS Fonts Sample. If you load it in OpenOffice.org 3.1, you will notice that the default OpenOffice.org font will appear for each line in the sample file. If you load the sample .odt file in OpenOffice.org 3.2, you need to have the GFS OpenType fonts installed beforehand.

The GFS fonts support Greek, Greek Polytonic and several ancient Greek characters. See How to type Greek, Greek Polytonic in Linux for instructions on how to configure and use the Greek keyboard layout in Linux. Note that to type Greek Polytonic, you do not need anymore to select the Polytonic layout; the default «Greek» keyboard layout has been updated so that you can type Greek, Greek Polytonic and Ancient Greek characters.  Ergo, άᾷᾂϡϖϝ€ϕͼϾʹ͵ϐϛ.

9Aug/0922

Laptop without Windows, an update for Dell, Asus, Acer, Compaq

It is very difficult to buy a computer without Windows (that is, to buy it with either Linux, FreeDOS or no OS) in the European market.

Why would you want to buy a laptop without pre-installed Windows?

  1. Because you are simply not going to use Windows (for example, you plan to use a Linux distribution)
  2. Because your school has an Developer Academic Alliance (formerly MSDN AA) with Microsoft and they provide the Windows software for you
  3. Because your organisation has a company-wide agreement for Microsoft software, and you do not wish to pay twice for Windows.
  4. Because you somehow have a Windows license or Windows package installation box already.

Sadly, when talking to the sales personnel of a manufacturer, it might look an easier strategy to just mention points 2 or 3. There is already some prior knowledge with the sales personnel that large organisations do not need the pre-installed Windows software.

Dell used to sell the N Series laptops with Ubuntu Linux, however they do not sell them anymore, at least in Europe. I contacted a Dell customer care manager on this issue and I was told that N Series laptops are available when you call Dell Sales by phone. I did just that, however the telephone salesperson explained that they do not have N Series laptops anymore. He verified with his own manager.

Dell does sell netbooks with Ubuntu Linux in Europe. For example, the Dell Mini or the Dell Latitude 2100. The situation with the netbooks is almost perfect, but…

Dell UK Latitude 2100, Choose early between XP or Ubuntu

What would be desirable is to provide the option, when you customize the Latitude 2100, to be able to select the operating system under the Operating System options. In this way, the customer is in a position to make a better decision between the differences of the two options.

Dell Greece, select the operating system while customizing the computer

In a regional Dell website, it is possible to select the operating system while you are customizing the computer. In this case, when you select Ubuntu Linux, you can easily see that you are saving €30 compared to the initial price.

It is not clear why Dell UK and Dell Germany do not provide the facility that we see with Dell Greece. Normally the localised editions of a website take any changes later than the main languages (English, German).

Updated (soon after posted): It is possible to get the Dell UK page for the Latitude 2100 so that both pre-installed Windows and Ubuntu appear in the same section. It might be an update that has been rolled out just recently. When you visit the Customise page,  you can now see that by selecting pre-installed Ubuntu Linux, you save £24 compared to pre-installed XP.

What would be ideal is for the consumer to have the option to avoid the pre-installed Windows, in a way shown above at the Dell Greece website for the Latitude 2100. Having options for Ubuntu Linux or FreeDOS (for those who already have a Windows license) would be the best value for the customers. This would make Dell the best company around.

So, what’s going on with the other laptop manufacturers?

Acer, Asus, Compaq and HP do not appear to sell computers without pre-installed Windows to the European market. I have not been able to locate retailers that would sell a laptop with FreeDOS, let alone a Linux distribution.

Is this the case with Acer, Asus, Compaq and HP in other markets?

Acer Laptop with FreeDOS (SE Asian market) Asus Laptop with FreeDOS (SE Asian market) Compaq Laptop with FreeDOS (SE Asian market)

This is an example of laptop models from the SE Asian market. The laptops come with FreeDOS and if you want pre-installed Windows, you pay extra (€53 or $74). The quoted price for the laptop is not subjected to local tax for the specific SE Asian country. Here is the price equivalent for each laptop,

Acer: €325 or $460

Asus: €525 or $745

Compaq: €365 or $515

Manufacturers such as Lenovo and Toshiba appear as black sheep to me, regarding the European market. Lenovo is supposed to sell laptops with SuSE Linux, however I could not find an example. Toshiba is completely out of the radar. They might not be a big laptop manufacturer.

What would be great for the European customer is to have the option to buy a product without pre-installed Windows. And this option of buying a computer without pre-installed Windows should be a visible and accessible option.

1Jul/090

guadec, gsoc l10n-el, ellak-conf

guadec

I am attending GUADEC this year, thanks to the sponsorship by the GNOME Foundation!

sponsored-badge-shadow

I am organising the GNOME Localisation BoF, which takes place on Friday, 10th July, 2009, at 17:00. I am also having a session on the GNOME translator command line tool gnome-i18n-manage-vcs on the same day at 15:00.

gsoc

A few months ago, there was a program in Greece, along the lines of the Google Summer of Code, to help Greek developers in FLOSS projects. The program was organised by EELLAK, a Greek non-profit, composed of 25 institutions of the tertiary education and research centres. As it took place during the spring, it was nicknamed Greek Spring of Code (gsoc).

Apart from developing software, the program had a localisation angle, and we applied for the localisation of GNOME 2.26 to the Greek language. In practice, this meant that we had to lift the documentation translations from 32% to 100%, complete the remaining UI translations.

GNOME-226-el

We achieved the goal ;-) .

Many contributors helped in this effort; Jennie Petoumenou (also co-organiser in the effort), Marios Zindilis, Fotis Tsamis, Kostas Papadimas, Nikos Charonitakis, Sterios Prosiniklis, Giannis Katsampiris, Michalis Kotsarinis, Vasilis Kontogiannis and Socratis Vavilis.The overall task was difficult, and our team did an amazing task to complete the translations on time. Thank you all, and especially Jennie and Marios for undertaking huge chunks of the translation effort for this release.

Here are the GNOME EL 2.26 deliverables in HTML, PDF.

ellak-conf

The fourth Greek FOSS (ELLAK) conference took place in Athens on the 19-20th June 2009.

p6190288 by Elias Chrysoheris.

We had our annual localisation meetup!

I organised a workshop on git, with a focus on how to use when starting into software development. There was emphasis on using github.com to host and manage the development. In addition, services such as github.com allow to cooperate during the development, making programming a more social and interesting task.

Finally, there was a presentation of the Greek GNOME team efforts for the last year.

29Jun/0921

Microsoft Windows tax refund, from Dell

So I got a new computer from Dell UK. Unfortunatelly it came with Windows Vista Home Premium (32-bit) SP1 and Microsoft Works 9.0, which I did not intend to use. I contacted Dell Customer Care last Wednesday and they promised to call me back to inform me of their course of action. On Thursday morning I got a call that Dell is in the process to issue the refund and that they will contact me during the coming week when they actually issue the refund. I got the call today Monday at 15:09 that the refund has been issued, £31 for Windows Vista Home Premium SP1 and Microsoft Works 9.0.

Dell Credit Note (refund) for Microsoft Windows Vista SP1 and Microsoft Works 9.0

In detail, the Credit Note says

Item No.  Description                    Quantity Unit Price  Net  VAT
          Cust Invd b4 parts recd 3rdpty    -1      26.96   -26.96  S

                                                                 GBP
  VAT Summary                                      Subtotal   -26.96
                                                   Freight      0.00
   VAT    VAT Rate      GBP        GBP             VAT £       -4.04               
   Type     %       Total Net £   VAT £                
    S      15         -26.96      -4.04           
                                                   Total      -31.00

Now, that was the short story for getting my Windows refund. The long story was that I had to go through several weeks of effort to figure out how to get a new computer without Microsoft software. I contacted by phone both Dell and Microsoft and I estimate I was on the phone for about four hours in total. To save you the effort, here are some tips,

  1. You will get stonewalled. I did not get any reliable information on how to buy a computer without Microsoft software while I was researching my options. I actually gave up and proceeded with buying a computer with Windows, considering that my last resort was to use the EULA method as soon as I got it delivered (I would not accept the EULA, thus I would be entitled for a refund or credit).
  2. Apart from phone calls, I spent some time on Dell Chat. In one case, I was told that I can get a computer from the Latitude range with FreeDOS. They would have to get the precise configuration of the computer so that they can give me a quote. We made sure that the configuration was correct (the one in my basket with the one I would get the quote for). It sounded very promising, however, at the end the computer with FreeDOS would be about £30 more expensive than Vista. I asked for clarification on this issue but I did not get any.
  3. You will be often told that you are the first person that asks for a computer without Microsoft software. Try to think that you are a pioneer and don’t feel let down.
  4. When calling by phone, avoid using premium telephone numbers. Get a good SIP account and configure Ekiga or SFLPhone (has recording feature). For Dell UK, try 01344 373727 which apparently is fine even if you are not a Public sector customer.

Microsoft Vista first boot screen, EULA or refund/credit.

By using the software, you accept these terms. If you do not accept them, do not use the software. Instead, contact the manufacturer or installer to determine their return policy for a refund or credit.. (why are there two dots? — simos)

When you first boot a new computer that has Windows pre-installed, you are presented with the above screen. Why would Microsoft give the option to reject their software? I believe the reason is that they want to enter into a contract directly with the customer, thus there is no issue with removing this facility in future versions of Windows (probably for similar reasons, Hotmail now supports POP3, apparently so that small mobile devices can retrieve e-mail. You can now migrate from Hotmail to GMail easily.). However, the whole environment is setup in such a way that virtually noone would be able to pursue a successful refund. One has to scroll the tiny text box in order to find the pictured paragraph (no option to print!). Even the Microsoft Customer Care EMEA are not aware of the option not to accept the EULA.

In your case, if you do not intend to use the pre-installed Microsoft software (apparently includes the case where you already have a license, such as an Academic License), you have the option to reject for a refund or credit. Simply press the Shutdown button and do not accept the license. Then, get on the phone.

Antirrhinum (Snapdragon)

I installed Ubuntu 9.04 (x86_64) and the computer runs fine ;-) .

It was unexpected when Intel got a heavy fine from the EU for anticompetitive practices. Does this practice by Microsoft (making it extremely difficult to obtain a refund or credit) constitute an anticompetitive practice?

10May/097

How to type Greek, Greek Polytonic in Linux

Update 2010: Please see the docs.google.com edition of the guide as it has the latest material. See link below.

There is a new guide on how to write Greek and Greek Polytonic in Linux, and in particular using the latest versions of Linux distributions.

https://docs.google.com/View?docID=dccdrjqk_4cqjn9zcj (LATEST VERSION)

The guide shows in detail how to add the Greek keyboard layout to your Linux desktop, and how to write Greek, Greek Polytonic and other Ancient Greek characters.

The guide is also available in both ODT and PDF format. (both files are somewhat obsolete. use google docs URL from above instead)

For a Greek version of the guide, please see http://docs.google.com/Doc?id=dccdrjqk_3gx3bq5f9 (does not update as often as the English version)

We attach the HTML version of the guide in this post. The docs.google.com version is the latest, please read that instead.

Again, you can find the latest version of this document at
http://docs.google.com/Doc?id=dccdrjqk_4cqjn9zcj
   

Switch to our mobile site