Category: Unix \ Linux

[Windows/Ubuntu] Install chromeIPass: KeePass2 to Chromium Password Management

This post is outdated, the plugin in question does not exist anymore. I would recommend to use "Kee" (https://www.kee.pm/) plugin - but please as bridge to KeePass Password Safe 2 - and not in its own database mode 🙂

I really loved KeeFox, an cool tool which let you use KeePass2 as Password Safe for your Firefox Passwords.
But today, I use Chrome - so no KeeFox for me anymore. And I really do not like the "Synchronize Password" Feature of Google.
So... chomeIPass it is ;)!

Windows:
( from http://diantokam.blogspot.de/2013/12/integrating-keepass-2-with-chrome.html )
1.) Install Chrome and KeePass2 ( http://keepass.info/download.html )
2.) Download KeePassHttp.plgx from the Github Repo: https://github.com/pfn/keepasshttp/blob/master/KeePassHttp.plgx?raw=true
3.) Move the KeePassHttp.plgx to the C:\Program Files (x86)\KeePass Password Safe 2\ folder
4.) Start KeePass2
5.) Install the Chrome Plugin: https://chrome.google.com/webstore/detail/chromeipass/ompiailgknfdndiefoaoiligalphfdae
6.) Click on the new KeePass Icon in Chrome, click on Connect and check KeePass which should Ask for a "New Key Association" - aka Pairing from Chrome with KeePass2. Give it a uniqe Key name, like Chrome Windows Main PC - and klick Save.
7.) Go to a password protected website - a pop up from KeePass2 should ask wheter it is allowed to give the already saved credentials to Chromium, Allow it.

Ubuntu:
( from http://askubuntu.com/questions/130627/how-to-integrate-keepass-and-chrome-chromium-using-chromipass )

Hint: As correctly pointed out by "H.R." in the comments, it is not recommended to install software from an untrusted source, like jtaylors keeps ppa. It is correct that jtaylor does not seem to be a part of the keepass2 team, hence his ppa is flagged as outside of keepass and "untrusted" - however, his ppa linked and recommended by the keepass team to install on Ubuntu. You can always build the program from sourcecode yourself, which I will not describe here, hence this post is over 4 years old and not applicable anymore, as the Chromium Password Manager does not even exist anymore.

1.) Install Chromium and KeePass2:
sudo apt-add-repository ppa:jtaylor/keepass
sudo apt-get update
sudo apt-get install keepass2 mono-complete chromium
2.) Download KeePassHttp.dll and Newtonsoft.Json.dll from the Github Repo: https://github.com/pfn/keepasshttp/blob/master/mono/KeePassHttp.dll?raw=true
https://github.com/pfn/keepasshttp/blob/master/mono/Newtonsoft.Json.dll?raw=true
3.) Move both files to /var/lib/keepass2
cd ~/Downloads
sudo mv KeePassHttp.dll /usr/lib/keepass2/
sudo mv Newtonsoft.Json.dll /usr/lib/keepass2/
4.) Start KeePass2
5.) Install the Chrome Plugin: https://chrome.google.com/webstore/detail/chromeipass/ompiailgknfdndiefoaoiligalphfdae
6.) Click on the new KeePass Icon in Chrome, click on Connect and check KeePass which should Ask for a "New Key Association" - aka Pairing from Chrome with KeePass2. Give it a uniqe Key name, like Chrome Windows Main PC - and klick Save.
7.) Go to a password protected website - a pop up from KeePass2 should ask wheter it is allowed to give the already saved credentials to Chromium, Allow it.

Netflow on Ubuntu

Netflow consists of three parts:
The collector, which collects the connection data on a host,
the capture, which receives data from collectors and writes them to disk in binary format,
the dump tool, which presents the data

We use fprobe as collector and nfcapd as capture tool:


sudo apt-get install fprobe nfdump

fprobe wants to be configured during the installation. It asks for the interface which should be listend upon and where the flow collector does listen. In our example, eth0 should be listend upon and the flow collector is situated on the same computer. Please use 127.0.0.1:9995 for that.

You can edit the frpobe file again:

/etc/default/fprobe

#fprobe default configuration file

INTERFACE="eth0"
FLOW_COLLECTOR="127.0.0.1:9995"

#fprobe can't distinguish IP packet from other (e.g. ARP)
OTHER_ARGS="-fip"

nfcapd needs to be configured by hand.
You need to set nfcapd_start to yes:

/etc/default/nfdump

# nfcapd is controlled by nfsen
nfcapd_start=yes

To change the destination folder of the capture files, change the hardcoded DATA_BASE_DIR in /etc/init.d/nfdump

After that, start the services:

sudo service fprobe stop
sudo service nfdump stop
sudo service fprobe start
sudo service nfdump start

After that, you can evaluate the resulting data

cd /var/cache/nfdump
nfdump -R REPLACE_WITH_FIRST_FILE_BEGINNING_WITH_nfcapd.

You can also define a filter with " ", i.e. nfdump -R nfcapd.201510260926 "port 3720" or "ip 8.8.8.8"

Additional infos:
http://nfdump.sourceforge.net/

Click to access Netflow.pdf

Click to access ripe50-plenary-tue-nfsen-nfdump.pdf

Open-source / private Evernote alternative: Paperwork

I use tools like Google Keep and Evernote from time to time to manage my pile of recipies, data and "knowledge" (what ever that'd be ;)). However, I don't feel really comfortable and looked for alternatives. There are certain plugins for ownCloud, however, these are basically text-editors at best... Never liked that idea. So I came around Paperwork: http://paperwork.rocks/.
Truth beeing told: It is still in development. It is as bleeding edge as it gets. Sharp as a knife. And yes - I forgot to do backups of my (until then not used) database and lost a lot of data on an simple update... (Yep, the reason why I introduced you to automysqlbackup some days ago...).
But at the moment, it is working very well and I like it very much. I think it will become an really great tool :)!

Private Dropbox/Google Drive/File Sync: Syncthing

I tested quite a lot of sync tools out there: Dropbox, G-Drive, Bittorrent Sync, ownCloud, plain Rsync,... You name it.
But to be true, I never really liked any tool that much: It never really *worked out* somehow: The Mobile Apps were bad, "Servers" did eat up too much performance, etc. etc.
And we don't want to forget these little itching problems with privacy - thinking about Dropbox, G-Drive and the now closed source Bittorrent Sync...
Well - enter Syncthing: https://syncthing.net/
In truth I can only say one thing: It works. It just, plainly, works for syncing data from your mobile devices to your swarm of servers or pcs.
So give it a shot :)!

[RaspPi] Virtual Accesspoint on Xbian

Little How To to get an Virtual AP running on XBian.
I did NOT choose to install an DHCP Server on Xbian, as I just wanted to use the central one in my network.

1.) Install software
sudo apt-get update
sudo apt-get install install hostapd hostap-utils iw bridge-utils

2.) Update hostapd
cd ~
wget http://www.adafruit.com/downloads/adafruit_hostapd.zip
unzip adafruit_hostapd.zip
sudo mv /usr/sbin/hostapd /usr/sbin/hostapd.ORIG
sudo mv hostapd /usr/sbin
sudo chmod 755 /usr/sbin/hostapd

3.) Configure hostapd
sudo vi /etc/hostapd/hostapd.conf

interface=wlan0
bridge=br0
driver=rtl871xdrv
ssid=MY_SSID
hw_mode=g
ieee80211n=1
channel=11
macaddr_acl=0
auth_algs=1
ignore_broadcast_ssid=0
wpa=3
wpa_passphrase=MY_PASSWORD
wpa_key_mgmt=WPA-PSK
wpa_pairwise=TKIP
rsn_pairwise=CCMP

sudo vi /etc/default/hostapd

Change
#DAEMON_CONF=""
to
DAEMON_CONF="/etc/hostapd/hostapd.conf"
and save file

4.) Configure hostapd autostart
sudo update-rc.d hostapd enable

5.) Configure IPv4 Forward
sudo vi /etc/sysctl.conf

add
net.ipv4.ip_forward=1
to the end of the file and save

6.) Configure interfaces
# You will need to change the IP address and network to your networks settings!
sudo vi /etc/network/interfaces

auto lo br0
iface lo inet loopback

iface eth0 inet dhcp
allow hotplug wlan0
iface wlan0 inet manual

iface br0 inet static
bridge-ports eth0 wlan0
address 192.168.1.75
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
gateway 192.168.1.1

7.) Configure rc.local for boot
sudo vi /etc/rc.local

add before exit 0

ifup br0
/etc/init.d/hostapd restart

save and exit

8.) Reboot
sudo reboot

Material used and thanks to:
https://learn.adafruit.com/setting-up-a-raspberry-pi-as-a-wifi-access-point/overview
http://www.instructables.com/id/How-to-make-a-WiFi-Access-Point-out-of-a-Raspberry/#step1
https://wiki.debian.org/BridgeNetworkConnections

[RaspPi] Snappy Ubuntu Core on Raspberry Pi 2

Well, I finally got my Raspberry Pi 2 and just could not hold back and wanted to test Snappy Ubuntu Core and give a little introduction and how that thing works.

Ok, but short into: What is Snappy Ubuntu Core?
Well it is meant to be a secure operating system for embedded applications.
It is based on an transactional system-management and can even rollback upgrades of the system core.
There are three kinds of Snappy Ubuntu Core Components:
Snappy Ubuntu Core itself (Core), Frameworks and Apps.
Frameworks can access the Core in certain ways and thus need to be reviewed by the Ubuntu Team.
Apps are completly isolated from each other and have limited access to the system, therefore they don't need special security profiles or reviews, which makes publishing easier.
Ok, and everything is controlled via the command "snappy".

Let's install Snappy Ubuntu Core:
1.) Get the Image from http://www.raspberrypi.org/downloads/ and a Raspberry Pi 2. It needs the ARMv7 architecture and won't run on a RPi 1.
2.) Use the SD Formatter ( https://www.sdcard.org/downloads/formatter_4/ ) with Size Adjustment (you'll find it under Options) ON to format your Micro SD Card and the latest Win32 Disk Imager ( http://sourceforge.net/projects/win32diskimager/ ) to burn the Image to that Micro SD Card.
3.) Plug your RPi 2 into your Keyboard / Monitor / Network Connection, insert the Micro SD Card and let it boot.
4.) The Login Credentials are ubuntu / ubuntu

Ok. Now that we got Snappy Ubuntu Core running on our RPi 2 - how about using it?
We can login via Keyboard / Monitor using the CLI, or use SSH - if we know the IP Address of our RPi2.
Login Credentials remain the same.
Additionally, we can browser from any PC on the same network to http://:4200/ - which is the unsecured (NO LOGIN!) web device manager called WebDM. We can use it to install new Apps and work on the RPi 2. But as said, it has no authentication in this version - so... Don't use this box for anything more than testing / dev work!

After login in, we can find out the most important things via uname -a, top, df -h, date and ifconfig.

Snappy Ubuntu Core uses about 128 MB of RAM while beeing idle.

The most important thing is to activate the NTP Client on your Box. Otherwise the RTC will start at somewhere around 1970 and your system won't be able to update anything, as the certificates on your device will be invalid. So enable that via the command sudo timedatectl set-ntp true. You could also set the time manually via i.e. sudo date -s "Tue 2 Mar 21:33 UTC 2015".

After that is done, we can watch or current installed apps, frameworks and system via snappy info. An exact view on our system with version numbers and which part is active (due to the transactional style we can have multiple versions installed and even switch back to the older version if something fails on the upgrade) can be seen via sudo snappy versions -a. To get the latest version information (i.e. like sudo apt-get update), we use the command sudo snappy update-versions and watch the new versions via sudo snappy versions -a. We can finally upgrade the system via sudo snappy update ubuntu-core for i.e. updating the core. After an sudo reboot, the latest version will come up and also be shown on the sudo snappy versions -a screen.

Little Hint: On my last test, Snappy showed this output:
ubuntu@localhost:~$ sudo snappy versions -a
Part Tag Installed Available Fingerprint Active
ubuntu-core edge 2 3 f442b1d8d6db3f *
ubuntu-core edge 3 - d3fe721a35104a R
webdm edge 0.1 - 1604c8b7c9f6c5 *
Run 'snappy update' and reboot to use the new ubuntu-core.

Which means the new Version should come up on Reboot ("Active, R") - however, even after rebooting several times and other trys - I could not get it to work and change to Version 3 of the Ubuntu Core :/!

Last but not least: How to find and install new apps? Very easy.
Just enter i.e. snappy search to find the App you're looking for and install it with sudo snappy install or via the WebDM System.

More infos can be found on the Website of Snappy Ubuntu Core: https://developer.ubuntu.com/en/snappy/

PS: As already added, this release is still in its beta stages and is not really "snappy" in terms of speed compared to an Raspbian or similiar Image. Also there are not a lot of Apps to choose from and there are several security problems like the complete open WebDM. Be advised that Snappy Ubuntu Core is NOT YET READY FOR PRODUCTION USE.

[RaspPi] Raspberry Pi and the ili9341 Display

https://www.youtube.com/watch?v=cEcIem6R4aQ

1.) Enable SPI
# remove or comment out the spi blacklist line
sudo nano /etc/modprobe.d/raspi-blacklist.conf

2.) Install
a) FBTFT drivers as loadable modules
sudo REPO_URI=https://github.com/notro/rpi-firmware rpi-update
sudo shutdown -r now

OR

b) FBTFT drivers built into the kernel proper
sudo REPO_URI=https://github.com/notro/rpi-firmware BRANCH=builtin rpi-update
sudo shutdown -r now

3.) Install the frame buffer driver (as root):
apt-get install xserver-xorg-video-fbdev

4.) Configure frame buffer driver:
sudo vi /usr/share/X11/xorg.conf.d/99-fbdev.conf
Section "Device"
Identifier "myfb"
Driver "fbdev"
Option "fbdev" "/dev/fb1"
EndSection

5.) add Autostart:
( the gpios= Pins need to be changed to YOUR specification and connection! )
sudo vi /etc/modules
fbtft_device custom name=tm022hdh26 gpios=reset:25,led:23,dc:24 rotate=90 bgr=1
#on my selfbuild shield
#from usb -> sd card laengs
#fbtft_device custom name=tm022hdh26 gpios=reset:25,led:23,dc:24 rotate=180 bgr=1
#from cinch -> hdmi quer
#fbtft_device custom name=tm022hdh26 gpios=reset:25,led:23,dc:24 rotate=270 bgr=1

6.) add Auto login:
sudo vi /etc/inittab
#1:2345:respawn:/sbin/getty --noclear 38400 tty1
1:2345:respawn:/bin/login -f pi tty1 /dev/tty1 2>&1

7.) add Autostart X:
sudo vi /etc/rc.local
su -l pi -c "env FRAMEBUFFER=/dev/fb1 startx &"

8.) Console at boot
Add kernel argument to file /boot/cmdline.txt
fbcon=map:10

Infos taken from:
https://github.com/notro/fbtft/wiki#install
http://marcosgildavid.blogspot.de/2014/02/getting-ili9341-spi-screen-working-on.html

Video was played with this worm-of-a-command-string:
sudo mplayer -nolirc -vo fbdev2:/dev/fb1 -fs -x 320 -y 240 -zoom -framedrop -lavdopts lowres=1:fast:skiploopfilter=all ~/BadApple.avi