100SILEX, de 0 ŕ 100 s: potential
1522 5 Simple steps to secure TT-RSS reader
secure tt-rss, tt-rss security
5 Simple steps to secure TT-RSS reader
July 27, 2015 by Anand Leave a Comment
Share: share htpcBeginner
We recently presented Tiny Tiny RSS to you as a great alternative to Google reader, which is one more way you can extend the functionality of your home server or your hosting space. Hopefully, you already exported your data from Google Reader. In this post, we will show you how to secure TT-RSS reader to prevent unauthorized access. Tiny Tiny RSS is an open source web-based news feed (RSS/Atom) reader and aggregator, designed to allow you to read news from any location, while feeling as close to a real desktop application as possible. As we previously explained, it makes an ideal candidate to replace Google Reader. While there are services like Feedly and Newsblur grabbing the crowd Google Reader, which some of you may prefer, there are a group of people who would like to run a RSS reader on their own server and keep things private. Assuming that you have already installed Tiny Tiny RSS on your alternative to Google reader or hosting space, we will now show you how to secure TT-RSS reader.
Secure TT-RSS Reader
One of the main reasons to move to an RSS aggregator like TT-RSS is maintaining your privacy. So if you do not secure TT-RSS reader well you are not only making your data available public but also making your system vulnerable to potential attacks. Choosing a strong username and password while setting your TT-RSS is the first basic thing that you can do to secure TT-RSS reader. Listed below are few more ways you can increase TT-RSS readerâ€™s security.
1. Rename TT-RSS Folder
One of the first lines of defense is to not use tt-rss in your URL to access your TT-RSS reader. To do this on your hosting account, use a folder name other than tt-rss while installing TT-RSS. On your Linux home server, edit /etc/tt-rss/apache.conf and change the first /tt-rss to something else. An example is shown below.
TT-RSS Rename URL
TT-RSS Rename URL
After making the change, restart your TT-RSS and Apache to apply the changes:
sudo service tt-rss restart
sudo serivce apache2 reload
Your TT-RSS reader is now available through the new URL (example: http://mydomain.com/myreader) only.
Amazon Kindle Fire HDX
2. Enable SSL
Accessing TT-RSS through http sends all information as unencrypted data. This could mean less privacy due to potential sniffing. The solution is to encrypt the data during transfer, which makes sniffing by hackers harder. To enable and enforce HTTPS access on Linux servers with Apache, install the following run-time libraries:
sudo apt-get install libssl0.9.8 libpam0g openssl
Restart your Apache server as shown above. You should now be able to access your TT-RSS reader with HTTPS. Note that you may have to have a SSL certificate generated. Refer to Apache documentation if you want to generate your own certificate. By default, the system will install self-signed certificates for you. These certificates are likely to raise warnings when you point your browser to the site.
3. Disable Single User Mode
By default the single user mode is already disabled (in /etc/tt-rss/config.php). Enabling single user mode will also disable TT-RSS login system. Therefore, keep the single user mode disabled.
Disable Single User Mode
Disable Single User Mode
A better way to make it a single user system is by limiting the number of registrations to 1 as described below. For whatever reason, you still want to enable single user mode, make sure you implement Apache Authentication method described below.
4. Self Registrations
Self registrations allow a visitor to register themselves, which could reduce TT-RSS security. If your TT-RSS will be for personal use only, then you may want to disable user registration by setting â€śENABLE_REGISTRATIONâ€ť to â€śfalseâ€ť.
TT-RSS Self Registrations
TT-RSS Self Registrations
To further secure TT-RSS Reader, uou may also want to change â€śREG_MAX_USERSâ€ť to â€ś1â€ť to make your account the only account on TT-RSS.
asus n66uASUS RT-N66U Dual-Band Wireless-N900 Gigabit Router
asus n66u reviewsFind out why it is rated the best wireless router in its class.
5. Apache Authentication
Last but not the least, enable Authentication. This is even more important if you have enabled â€śSingle User Modeâ€ť describe above. Every time you access TT-RSS, you will be asked for a username and password as shown in the picture below:
Secure TT-RSS Reader
On your hosting account this equivalent to password protecting a directory, in this case the TT-RSS directory. To do this on your Ubuntu server, you will have to create a .htpasswd file. More information is available in Apache documentation. But the easiest way to achieve this is to use one of the htpasswd generators available online.
After you enter the username and password two code blocks will be generated. Copy the contents of the .htpasswd code block and save it to /etc/apache2/.htpasswd_ttrss. Next, copy the contents of the .htaccess code block and add it to /etc/tt-rss/apache.conf as shown below:
TT-RSS Apache Authentication
TT-RSS Apache Authentication
Save and exit. Restart both TT-RSS and Apache previous shown above. You should be prompted for a password every time you try to access TT-RSS. Some may think that this double authentication method is an extra inconvenience. But I would rather be safe than sorry.
Go ahead, secure Tiny Tiny RSS Reader and enjoy reading articles on your private secure RSS Reader.
1386 Retro Synth Ads: Sound Master Memory Rhythm SR-88, Keyboard 1982
Sound Master Memory Rhythm SR-88 drum machine 1-page advertisement from page 67 in Keyboard Magazine August 1982.
Hmmm. Not sure how I feel about this ad. There just seems to be a lot going on.
For example, am I supposed to know who "The Rhythm Section" is? The fact that they include themselves in an already long ad title suggests they must be some kind of a big deal. And then you find their name again in the bottom left-hand corner:
"The SR-88. Another innovative product from The Rhythm Section by Sound Master Distributed exclusively by JTG of Nashville."
So, let me get this straight. JTG of Nashville is the distributor of the SR-88 which was created by The Rhythm Section which is somehow owned or operated by Sound Master.
That is waaaaay to much information. Sounds like something political is going on there, and readers unfortunately get stuck in the middle of it.
There also seems to be a lot of ad-copy which actually doesn t give me much information. Reason #4 gives readers the most info including instant stop/start, variable tone and output switches, and a write/play mode indicator. The most I glean out of the four other reasons put together is: 16 rhythms, clock pulse and a price of under $200.
The actual specs that are probably most important to potential buyers are inexplicably shoved into the bottom right-hand corner.
Luckily for me, there are a few resources on the Web with more information about this beast. Unluckily for blog readers, as soon as I started looking for more info, I got swept up in a certain SR-88/Boss DR-55 controversy.
Comparing the SR-88 and Boss DR-55
One of the first Web sites I hit while looking for info on the SR-88 was Dubsounds.com. The site includes a great little write-up on the SR-88, but, more interesting was finding out about a little controversy about whether the SR-88 or the very similar Boss DR-55 came out first.
The two do seem mighty similar in functionality. For comparison purposes, I did a quick search on MATRIXSYNTH to find more photos. . A great photo of a gray SR-88 can be found in this December 2005 SR-88 MATRIXSYNTH auction post and the less common, but definitely more cool, blue SR-88 can be seen in this January 2011 MATRIXSYNTH auction post.
Comparing the two to the Amdek RMK-100
Interestingly, it s not just these two machines that look and function similarly. In this May 2009 MATRIXSYNTH SR-88 auction post commenter "PAC" notices:
"Interesting. I have an Amdek RMK-100 (sold as kit), very similar!"
Never heard of it, so I Googled "Amdek RMK-100" to see just how similar it was to both the DR-55 and the SR-88. Turns out (according to the Internet) that Amdek products were made by Boss/Roland back in 80s, and, not only that, but that the RMK-100 is actually the kit version of the Boss DR-55. Makes sense on why it would also be similar to the SR-88.
I found an ebay auction for an Amdek RMK-100 going on right now with a great photo of the front panel (see below), and indeed it does share a lot with the DR-55 and SR-88 - but definitely not identical to either one.
For example, it looks like the Amdek and SR-88 share a similar filler function that as far as I can tell is not available on the DR-55. And the DR-55 and the RMK-100 share a similar accent function that I don t see on the SR-88.
Now where does the Electro Dynamics Corporation Programmable Rhythm SR-99 fit in?
I also came across another machine with similar features - the Programmable Rhythm SR-99. No - not manufactured by Sound Master, but by Electro Dynamics Corporation. And, it too resembles the others in functionality, and especially the SR-88 in design also.
I ve included a row of photos below to help make the comparison between the two. The SR-88 photo is from the 2005 MATRIXSYNTH auction post and the EDC SR-99 photo is from the excellent BigBlueWave.co.uk site. I ve also thrown in a photo from another recent E-bay listing that included both - plus boxes and manuals! Sick!
Obviously, Sound Master and EDC are somehow connected, although I can t find any info on the Internet concerning these two companies. I do know that they were both advertising separately in Keyboard Magazine in late 1983, making it unlikely that one of the companies changed their name to the other. Anyone know anything?
And then there is the Clef Master Rhythm...
Now, I m going to throw in a late entry. It s Sunday night, and I just came across this August 2010 MATRIXSYNTH auction post for the Clef Master Rhythm. It not only shares part of the name of one of the other units ("Master"), it too has many features of the other rhythm machines, and identical innards as the DR-55, but is expanded to include even more sounds:
"This is essentially a fully expanded Boss DR-55 feature-wise and tone-wise. The circuits are identical (schematically and tonally) to the Boss DR-55, but the Clef Master Rhythm gives you way more instruments than the Boss DR-55..."
Interestingly, according to the post, it pre-dates the Boss DR-55 - and also came in a kit form like the Amdek.
"The Clef Master Rhythm came out a little before the Boss DR-55 in late 1979/early 1980. It was sold in two versions and available in greater quantities in Europe than in the United States. One version was a kit that the user put together and another one was a prebuilt machine."
A photo from the MATRIXSYNTH post really helps show the similarities in functions with the others:
What does it all mean?
So, looking at all five machines, its almost like there was a rhythm machine salad bar of some sort in Japan, and each company stepped up to it and picked out which features they wanted to include in their product.
And that begs the question - since we know there was a kit form available and there are claims that the Clef Master even has the same circuits as the DR-55, could all five products (and probably others) have used the exact same internal parts - each company choosing which features to include and then customizing in their respective rhythm machine? And if so, were those parts supplied by Amdek, or did all five get their internal parts from some other manufacturer?
And if that is the case, then the question of whether the SR-88 or DR-55 came first doesn t really matter much, since it is likely that the kit components would have been available first. Plus, we have that one auction post with the claim that the Clef Master came out before the DR-55 - making it all even more confusing to figure out.
Or, am I totally off the mark on all this? Were they all created separately? Maybe I ve just been fixated on this a little too much...
I ll keep on looking for more info on these companies and any connection they might have, but if anyone want to buy all four and open them up to take a look - it would be muchly appreciated. :D
Posted by RetroSynthAds at 12:05 PM
Labels: 1982, amdek, clef master, dr-55, drum machine, electro dynamics corporation, keyboard magazine, rmk-100, Sound Master, sr-88, sr-99
Here s a funny thing - I seem to remember Clef in the early 1980s as a British company that made electronic pianos (touch-sensitive ones!) in kit form. Deep in the back of my mind I recall seeing them at a music fair in London with a couple of their pianos and some drum machines including a prototype drum/bass/chord sequencer called something like a "Band-Box". But it WAS a long time ago.
February 12, 2012 at 12:36 PM
Looks like (for once) my memory didn t fail me. Here is a 1982 ad for Clef Electronics showing all the products I mentioned, plus a natty-looking little monosynth! BTW, I owned an EDC SR99 drum machine in the mid-1980s, but replaced it with a Yamaha RX-21 a couple of years later.
February 12, 2012 at 12:46 PM
722 Making AJAX Applications Crawlable - Google Code
If you're running an AJAX application with content that you'd like to appear in search results, we have a new process that, when implemented, can help Google (and potentially other search engines) crawl and index your content. Historically, AJAX applications have been difficult for search engines to process because AJAX content is produced dynamically by the browser and thus not visible to crawlers. While there are existing methods for dealing with this problem, they involve regular manual maintenance to keep the content up-to-date.
Learn why search engines don't see the content you see and what needs to happen to fix this.
Getting started guide
Get started in making your AJAX application visible to search engines. If you are in a hurry, you can start here, but AJAX crawling is a complex topic, so we recommend reading all the documentation.
Creating HTML snapshots
Learn more about creating HTML snapshots, and which technique might be best suited for your application.
Frequently asked questions
Having trouble? Check out the frequently asked questions.
Get the details.
366 How to Track Down Anyone Online
When you're trying to find someone online, Google's not the only game in town. In the last two years, a handful of new people search engines have come onto the scene that offer better ways to pinpoint people info by name, handle, location, or place of employment. While there's still no killer, one-stop people search, there are more ways than ever to track down a long-lost friend, stalk an ex, or screen a potential date or employee. The next time you wonder, "What ever happened to so-and-so?" you've got a few power people search tools to turn to.
How to Track Down Anyone Online, software, productivity, technology, downloads, life hacks, hacker, lifehacks, computing, lifestyle, timesavers, health, internet, personal technology, DIY, projects, tricks, advice, backup, email, Mac, Windows, Firefox, Google, Yahoo, Gmail, keyboard shortcuts, household, HOWTO, how to's, tutorials
340 7-things-to-stop-doing-now-on-facebook: Personal Finance News from Yahoo! Finance
Using a Weak Password
Avoid simple names or words you can find in a dictionary, even with numbers tacked on the end. Instead, mix upper- and lower-case letters, numbers, and symbols. A password should have at least eight characters. One good technique is to insert numbers or symbols in the middle of a word, such as this variant on the word "houses": hO27usEs!
Leaving Your Full Birth Date in Your Profile
More from ConsumerReports.org:
â€˘ Millions of Users Exposing Personal Information
â€˘ Tested: 119 Laptops, Desktops, Netbooks and iPad
â€˘ Electronics Reviews
It's an ideal target for identity thieves, who could use it to obtain more information about you and potentially gain access to your bank or credit card account. If you've already entered a birth date, go to your profile page and click on the Info tab, then on Edit Information. Under the Basic Information section, choose to show only the month and day or no birthday at all.
Overlooking Useful Privacy Controls
For almost everything in your Facebook profile, you can limit access to only your friends, friends of friends, or yourself. Restrict access to photos, birth date, religious views, and family information, among other things. You can give only certain people or groups access to items such as photos, or block particular people from seeing them. Consider leaving out contact info, such as phone number and address, since you probably don't want anyone to have access to that information anyway.
Popular Stories on Yahoo!:
â€˘ 20 Best Cities to Ride Out the Recession
â€˘ Wealth Ranking: You're Richer Than You Think
â€˘ 7 Expenses You Can Ditch in Retirement
More from Yahoo! Finance
Posting Your Child's Name in a Caption
Don't use a child's name in photo tags or captions. If someone else does, delete it by clicking on Remove Tag. If your child isn't on Facebook and someone includes his or her name in a caption, ask that person to remove the name.
Mentioning That You'll Be Away From Home
That's like putting a "no one's home" sign on your door. Wait until you get home to tell everyone how awesome your vacation was and be vague about the date of any trip.
Letting Search Engines Find You
To help prevent strangers from accessing your page, go to the Search section of Facebook's privacy controls and select Only Friends for Facebook search results. Be sure the box for public search results isn't checked.
Permitting Youngsters to Use Facebook Unsupervised
Facebook limits its members to ages 13 and over, but children younger than that do use it. If you have a young child or teenager on Facebook, the best way to provide oversight is to become one of their online friends. Use your e-mail address as the contact for their account so that you receive their notifications and monitor their activities. "What they think is nothing can actually be pretty serious," says Charles Pavelites, a supervisory special agent at the Internet Crime Complaint Center. For example, a child who posts the comment "Mom will be home soon, I need to do the dishes" every day at the same time is revealing too much about the parents' regular comings and goings.
101 - 201