1. net use * /delete
2. nbtstat -R
3. ipconfig /flushdns
4. rundll32.exe keymgr.dll, KRShowKeyMgr

1. Disconnects existing connections to shares
2. Flushes the netbios name cache
3. Flushes the dns cache
4. Opens the password manager for you to delete remembered passwords.

Weller's Well Stocked Kitchen

This is a list of staples and old reliables that should always be on hand at home. This list is intended as a shopping check list. This list is part lifestyle and part disaster plan (catastrophic and fiscal). Generally, I’m thinking about a family of four for at least 3 months. The idea is to plan ahead; first, by getting things bulk and on sale such that this list of essentials is on hand inexpensively; second, by prepping, thawing and soaking such that your cooking plans are at least 8 hours ahead of your eating plans (see the cooking pyramid).

Ingredients to Stock

Baking

Baking powder

Baking soda

Chocolate (semi-sweet, bitter-sweet & Dutch process cocoa)

Cornstarch

Extracts (almond, orange, vanilla)

Flour (all purpose, unbleached, whole wheat)

Food coloring

Frosting

Mixes (cake, pudding, Jell-O)

Sugar (Brown, white, powdered)

Vanilla beans

Vegetable Shortening

Yeast

Dried Goods

Beans (15 bean, Pinto, Black, Kidney, Lentils, Red, White Navy)

Bread crumbs (regular & panko)

Cereals (oatmeal & Bob’s red mill)

Corn meal (blue & yellow)

Couscous

Crackers (salty, savory, graham)

Fruit (currants, dates, raisins, “just fruit”)

Pancake Mix

Pasta (Macaroni, Rice Noodles, Shells , Vermicelli , angel hair, egg noodles, fettuccine, fusille, lasagna, linguine, penne, spaghetti )

Powdered milk

Rice (Arborio, Brown, Jasmine, White, Wild)

Vegetables (“just veggies”, mushrooms)

Canned/Preserved Goods

Artichoke hearts

Beans (baked, black, kidney, refried, pinto)

Broth (beef, chicken, vegetable)

Capers

Fruit (apple sauce, pears, peaches, pineapple, cherries, mandarins)

Green chilies

Jams & Jellies

Meats (chicken, tuna, clams)

Mexican Sauces (enchilada, mole)

Milk (sweetened condensed, evaporated, coconut)

Olives (green, black)

Peanut butter

Pickles (sweet, dill & relish)

Soups (tomato, cream mushroom, cream celery, chicken noodle)

Tomatoes (sundried, paste, sauce, whole, chopped)

Vegetables (corn, peas, green beans, mushrooms, water chestnuts, roasted peppers)

Vinegars & Oils

Non-stick spray

Oils (olive, sesame, vegetable, almond, truffle)

Vinegars (apple cider, white wine, red wine, balsamic, raspberry, rice)

Herbs & Spices

All Spice

Anise seeds

Basil leaves

Bay leaves

Caraway seeds

Cardamom

Cayenne pepper

Celery salt

Chili powder

Chives

Cinnamon

Cilantro

Cloves

Coriander

Cream of tartar

Cumin (ground)

Dill weed

Dried mustard

Fennel seeds

Garlic powder

Garlic salt

Ginger

Herbs de providence

Italian seasoning

Lemon peel

Lemon pepper

Marjoram

Mint

Montreal steak seasoning

Nutmeg

Onion (powder & flakes)

Oregano

Paprika

Packets (Hollandaise sauce, Sloppy joe mix, Taco seasoning)

Parsley

Peppercorns (black, white, green)

Poppy seeds

Red pepper flakes

Rosemary

Saffron

Sage

Salt (regular & kosher)

Sesame seeds

Tapatio hot sauce

Tarragon

Thyme

Turmeric

Condiments

A1 sauce

Barbeque sauce

Hoisin sauce

Honey

Horseradish

Ketchup

Lemon & lime juice

Mayonnaise

Molasses

Mustard (regular & Dijon)

Pasta sauce (red & white)

Ponzu sauce

Salad dressing (Italian & ranch at least)

Salsa

Soy sauce

Syrup (maple, corn)

Teriyaki sauce

Worcestershire sauce

Beverages

Cocoa

Coffee (beans, filters, coffee mate)

EmergenC

Ginger ale

Juices (frozen)

Tea (regular Lipton, herbal: mint, chamomile, Echinacea, orange)

Water

Beer, Wine, Spirits

Beer (pale, stout/porter)

Spirits (rum, scotch, whiskey, gin, tequila, vodka)

Wine (white, red, port, sherry)

Fresh Produce

Fruit (seasonal, lemons, limes, apples, bananas, oranges)

Garlic

Herbs (various: parsley, basil, cilantro, poultry/beef medleys)

Onions (red & white)

Potatoes

Vegetables (seasonal, lettuce, spinach, tomatoes, cucumbers, broccoli, carrots, mushrooms, celery, peppers)

Fresh Refrigerator

Butter (salted & unsalted)

Cheese (cottage, cheddar, parmesan, jack)

Eggs

Milk (1%, cream, buttermilk)

Plain yogurt

Sour cream

Frozen Protein

Bacon

Beef (ground, roast, corned, steaks)

Chicken (breasts, whole)

Lunch meats

Pork (chops, loin, sausage)

Seafood (fish, shrimp, shellfish)

Frozen Non-protein

Bread

Butter

Fruit (strawberries, blueberries, peaches)

Philo dough

Puff pastry

Tortillas (flour, corn)

Vegetables (mixed, green beans, corn, peas, broccoli, sugar snap peas, tater tots)

Ideas & Miscellany

Disposables

Aluminum foil

Butcher paper

Freezer paper

Paper lunch bags

Paper towels

Parchment paper

Sandwich and bread bags (cheaper than Ziplocs for short term storage)

Saran wrap

Wax Paper

Ziplocs (quart & gallon)

Favorite Staple Dishes

Baked chicken (mustard, orange, parmesan, etc.)

Baked fish (crusted, hobo pack, etc.)

Beef, potatoes, & salad (3 course meal, pot roast etc.)

Mexican (tacos, burritos, chille, pesole, carne, etc.)

Pasta (spaghetti, alfredo, lasagna, etc.)

Soups, stews & chowders

Stir Fry

Some Ideas to pre-prepare & freeze

Beans, cooked

Buttermilk biscuit dough

Chicken, cooked and diced or shredded

Chili

Ground beef, browned

Ham, cooked and diced

Meatballs, formed but raw

Onions, chopped and sauteed

Peppers & onions, chopped and sauteed

Pesto

Spaghetti sauce

Stock

Essential Gadgets

Blender

Crock Pot

Food processor

Hand mixers (beaters & drink)

Mixer (kitchenaid)

Pressure cooker

Pets

Cats (wet food, dry food, cat litter, tuna, milk)

Parrot (nuts, pellets, people food)

Rabbit (timothy complete pellets, timothy hay, paper based litter, herbs, lettuce, carrots)

Format your usb (call it the L: drive)

Copy truecrypt exe, sys, and x64 sys onto the usb drive L:

Use truecrypt to create a new .tc encrypted file on your L: drive

In the autorun.inf replace _xaF9cQun with the name of your .tc file

Save autorun.inf

Copy autorun.inf to usb drive L:

Remove and re-attach usb drive

You should see it has a truecrypt icon

Right click it to see the true crypt options

Mount attaches your .tc file as the K: drive [default if you double click the L: drive]

Unmount removes the K: drive

Now you have a self mounting encrypted usb drive.

Finally, for New Year's, me, Sarah, and a few friends are taking over her parents' house while they are in Mexico. It'll be a relatively quiet new years with a bonfire on the lake, more skiing and hot tubbing in the snow.

Happy Holidays and here's to a great new year!]]> http://jimweller.com/2008/12/merry-christmas-and-happy-new.html http://jimweller.com/2008/12/merry-christmas-and-happy-new.html Tue, 23 Dec 2008 08:31:44 -0900 vmware esxi. So I switched my home linux server from a physical server to a VM. Here are my terse notes on moving a linux p2v (physical to virtual).

Boot the vm from knoppix and start netcat listening for a disk image
nc -l -p 9001 | gunzip | dd of=/dev/sda

On the physical machine (I did it live becuase it moves slow), netcout out. The 192.168 address is the vm's IP from knoppix+dhcp.
dd if=/dev/sda | gzip | nc 192.168.0.25 9001 -q 10

getting dd progress, use another console run
kill -USR1

vmware console; alt+f1, "unsupported", root password.

Busybox and some custom vmware stuff. That's it. No ssh, no inetd.

I did it over a 802.11G wireless bridge, so a bit slow. ]]> http://jimweller.com/2008/09/linux-p2v-notes.html http://jimweller.com/2008/09/linux-p2v-notes.html Mon, 08 Sep 2008 17:52:23 -0900 I just recieved my ten year token gift, a glass plaque that says, "For 10 years of Dedicated Service to the The University of Alaska." It has been a great 10 years. Working for a University is noble work. It feels good. You have an incredible amount of freedom (especially on the net) that would be stymied by proxies and firewalls in a corporate environment. I've gotten to do really cool things with really heavy iron.

I've also grown up here. You can see from the image that I stared as a student back in the 90's. I've gradually climbed up the ranks into engineering and later leadership. It's given me some great experience and a hell of a resume. Thanks UAA!

Windows supports file and printer sharing traffic by using the Server Message Block (SMB) protocol directly hosted on TCP. This differs from earlier operating systems, in which SMB traffic requires the NetBIOS over TCP (NBT) protocol to work on a TCP/IP transport.

445 (SMB) is preferable over 137, 138, and 139 (old NetBIOS over TCP/IP aka NBT). In a nutshell SMB uses DNS and direct contact. NBT uses broadcasts and WINS.

So, NetBIOS isn't really necessary anymore. I have it turned off on all my windows clients. I just tested disabling it in the samba server at home and it works fine; even a little snappier. I'm not even running nmbd anymore. You must have domain resolution though; either FQDN or search domains.

Note no more 139 listening ports

styx:/var/log# netstat -anp | grep smbd
tcp        0      0 127.0.0.1:445           0.0.0.0:*               LISTEN     6128/smbd
tcp        0      0 192.168.0.2:445         0.0.0.0:*               LISTEN     6128/smbd

Then here's my smb.conf file. Some nice tricks in there.

[global]

# Biographical information
server string = %h server (Samba %v)
workgroup = SYMB

# winpopups suck
message command = /bin/true

# not a print server
load printers = no

# yeah! Netbios is over.
disable netbios = yes
smb ports = 445
#dns proxy = no
#local master = yes
#os level = 20
#wins support = true
#netbios name = styx
#netbios aliases = house household home

# Do something sensible when Samba crashes: mail the admin a backtrace
panic action = /usr/share/samba/panic-action %d

# security
passwd program = /usr/bin/passwd %u
encrypt passwords = true
passdb backend = tdbsam
obey pam restrictions = yes
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
security = share
max log size = 1000

# network options
socket options = TCP_NODELAY
bind interfaces only = yes
interfaces = lo 127.0.0.1/32 eth1 192.168.0.0/24

# logging
syslog = 2
syslog only = yes
log level = 2
log file = /dev/null

# locking
# technically, reduces performance, but no contention errors
oplocks = no
fake oplocks = yes
kernel oplocks = no
level2 oplocks = no

[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   create mask = 0664
   directory mask = 0775
   hosts allow = 192.168.0.

[household]
 path=/mnt/family
 comment=communal
 browseable=yes
 writable=yes
 public=yes
 force user=smb
 force group=smb
 force create mode = 0664
 force directory mode = 0775
 hosts allow = 192.168.0.

He's most recent project legacy is Alice; learning software to teach programming through building virtual worlds. I love this! I spent so many hours playing Rocky's Boots [2] on the Commodore64. Rocky's Boots, a 2D "virtual reality" program, allowed you to run around a "dungeon room" environment. Each room had circuits and a written lesson on the circuit.

The trick with Rocky's Boots was to drag all the generators and circuits into the final room so that you could build really complicated machines. We would NOT reboot the computer so that we could keep the room's state. You can play it on an emulator still :)

I like engineering learning software. I cultivate fantasies of creating kinesthetic software for choreagraphers and first person shooter games for learning taxonomies (biology, chemistry, history...). This software was important to me where it was available; Rocky's Boots, Math Invaders, Letter Invaders. 2nd life is making its way into universities fast (including ours). I believe much of my learning all through school could have been massively accelerated. Quoting Dr. Pauschs's Lecture, "[...] particularly with middle school girls, if you present it as a story telling exercise, they are perfectly willing to learn how to write computer software." Being a boy, commanding "robots" around with the boot, was gratifying. But maybe stories and relationships are better for girls. It's about finding the right context; statistically for a group and individually for a person

Dr. Pausch was inspiring; dreams, life, learning, and engineering. He did it all and, I believe, left an indelible mark at the beginning of a great journey.

If you've played with intermmediate certificate authorities (like godaddy), then you probably know some of the pain of configuring certs for different applications. You usually test with your browser and are frustrated with continual "Invalid Certificate" prompts. Here's a command line way to check your SSL negotiation for HTTPS (or an SSL over TCP).

 echo GET | openssl s_client -connect www.google.com:443 -state

This sends and HTTP GET request to www.google.com on TCP port 443. The output helps you analyze the certificate chain and certificate contents. The output looks like this.

CONNECTED(00000003)
---
Certificate chain
 0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=www.google.com
   i:/C=ZA/O=Thawte Consulting (Pty) Ltd./CN=Thawte SGC CA
 1 s:/C=ZA/O=Thawte Consulting (Pty) Ltd./CN=Thawte SGC CA
   i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIDITCCAoqgAwIBAgIQPI06ZO4Y3RtzC6GS7viYGzANBgkqhkiG9w0BAQUFADBM
MQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkg
THRkLjEWMBQGA1UEAxMNVGhhd3RlIFNHQyBDQTAeFw0wODA1MDIxNzAyNTVaFw0w
OTA1MDIxNzAyNTVaMGgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlh
MRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKEwpHb29nbGUgSW5jMRcw
FQYDVQQDEw53d3cuZ29vZ2xlLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkC
gYEAmxntXaVWr0lm23n9whx4Tk8RpYqs4pTu4+JLwAMlp5nMZeHslK6u8KeZvBDX
7YcwR81Q+a/T0/QLjUeKLuLOU5uRmX8eXPkb1umTZ+NK+M/EjAxo0ZdURw4KJDCn
gpSu3q4/v7oUxviykI42reHQvhaas15yOEnadKE//9KHge0CAwEAAaOB5zCB5DAo
BgNVHSUEITAfBggrBgEFBQcDAQYIKwYBBQUHAwIGCWCGSAGG+EIEATA2BgNVHR8E
LzAtMCugKaAnhiVodHRwOi8vY3JsLnRoYXd0ZS5jb20vVGhhd3RlU0dDQ0EuY3Js
MHIGCCsGAQUFBwEBBGYwZDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AudGhhd3Rl
LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL3d3dy50aGF3dGUuY29tL3JlcG9zaXRv
cnkvVGhhd3RlX1NHQ19DQS5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQUF
AAOBgQAxCmyinulUGRZomZHWQ8trtMxszLD78e6BvwArb1ASxq8CKjbBKN7FTFYg
bfU9QrkYgSCy3Vdd674yhFBFUW7N5C4qOIifUu0o//yNV7WtZK5NDg7ZPay4/mZM
FY9EUvp8PATtfzdhBP7V6bmwnv6lEWnJY9ZGgW8A2HIvgjdEwQ==
-----END CERTIFICATE-----
subject=/C=US/ST=California/L=Mountain View/O=Google Inc/CN=www.google.com
issuer=/C=ZA/O=Thawte Consulting (Pty) Ltd./CN=Thawte SGC CA
---
No client certificate CA names sent
---
SSL handshake has read 1765 bytes and written 328 bytes
---
New, TLSv1/SSLv3, Cipher is RC4-SHA
Server public key is 1024 bit
SSL-Session:
    Protocol  : TLSv1
    Cipher    : RC4-SHA
    Session-ID: FA90A39B0BD274C71247A40506D5BBA3B1107CB1C5FE7C246B0354D703ED405B
    Session-ID-ctx:
    Master-Key: 04DC328CB4B2D392FE9FFC5B85015311456C5EF6412F9A47BBFBB4D6E38B9721
51080984DD8A6E52872AE5E773C149E1
    Key-Arg   : None
    Krb5 Principal: None
    Start Time: 1216690549
    Timeout   : 300 (sec)
    Verify return code: 20 (unable to get local issuer certificate)
---

The Pwnie Awards is an annual awards ceremony celebrating the achievements and failures of security researchers and the security community. It is also very, very funny.

Wordpess was nominated for the "Mass 0wnage" category. Note the link to Common Vulnerabilities Exposure data. Wordpress has had like 50 in the last year. Movable type has had four in their entire history. This on the heels of my switch to MovableType is reaffirming.

for i in *.pdf;do echo $i
    convert -quality 100 $i `echo $i | sed -e 's/\.pdf/-%d\.jpg/g'`
done

It says for every PDF use convert at 100% JPEG quality. The nasty backtick echo at the end converts FILE.pdf to FILE-%d.jpg. %d is convert's way of numbering the pages. If you don't use %d you'll just get a single jpg from a multi page pdf.]]> http://jimweller.com/2008/07/convert-pdf-to-jpg-nice-little.html http://jimweller.com/2008/07/convert-pdf-to-jpg-nice-little.html Mon, 21 Jul 2008 17:30:00 -0900 Nial Kennedy has a nice post on setting up google site maps for your blog. I extended his example by including more than just the blogs. I added my own static pages to the XML feed. I also use the MT markup to include my MT pages (as opposed to entries). Here it is. If the code wrap is ugly on a smaller screen, then click the permalink.

<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://google.com/schemas/sitemap/0.84">

<url>
<loc><$MTBlogURL encode_xml="1"$></loc>
<priority>1.0</priority>
</url>


<url>
<loc>http://jimweller.com/jim-weller/jim/dbsgmlqs/</loc>
<lastmod><$MTDate utc="1" format="%Y-%m-%dT%H:%M:%SZ"$></lastmod>
</url>

<url>
<loc>http://jimweller.com/jim-weller/jim/java_proc_sched/</loc>
<lastmod><$MTDate utc="1" format="%Y-%m-%dT%H:%M:%SZ"$></lastmod>
</url>

<url>
<loc>http://jimweller.com/jim-weller/jim/palmdevqs/</loc>
<lastmod><$MTDate utc="1" format="%Y-%m-%dT%H:%M:%SZ"$></lastmod>
</url>
<url>
<loc>http://jimweller.com/jim-weller/jim/titrax/</loc>
<lastmod><$MTDate utc="1" format="%Y-%m-%dT%H:%M:%SZ"$></lastmod>
</url>
<url>
<loc>http://jimweller.com/jim-weller/jim/lfw/</loc>
<lastmod><$MTDate utc="1" format="%Y-%m-%dT%H:%M:%SZ"$></lastmod>
</url>
<url>
<loc>http://jimweller.com/jim-weller/jim/wedding/</loc>
<lastmod><$MTDate utc="1" format="%Y-%m-%dT%H:%M:%SZ"$></lastmod>
</url>
<url>
<loc>http://jimweller.com/jim-weller/jim/vc98asmqs/</loc>
<lastmod><$MTDate utc="1" format="%Y-%m-%dT%H:%M:%SZ"$></lastmod>
</url>
<url>
<loc>http://jimweller.com/jim-weller/jim/dbxmlqs/</loc>
<lastmod><$MTDate utc="1" format="%Y-%m-%dT%H:%M:%SZ"$></lastmod>
</url>


<MTpages lastn="9999">
	<url>
	<loc><$MTPagePermalink encode_xml="1"$></loc>
	<lastmod><$MTPageModifiedDate utc="1" format="%Y-%m-%dT%H:%M:%SZ"$></lastmod>
	</url>
</MTpages>


<MTEntries lastn="9999">
	<url>
	<loc><$MTEntryPermalink encode_xml="1"$></loc>
	<lastmod><$MTEntryModifiedDate utc="1" format="%Y-%m-%dT%H:%M:%SZ"$></lastmod>
	</url>
</MTEntries>

</urlset>