Wednesday, December 21, 2011
Sunday, December 4, 2011
Color Sheet
Neutral Colors
Color Name | Color Code |
---|---|
Pearly Gates | |
Pale Olive | |
Ultra Pure White | |
Frosted Lime | |
White Orchid | |
Green Veil | |
Gray Cliffs | |
Far Horizon | |
Plantation White | |
Warm Summer | |
Ivory Tusk | |
Eggshell Cream | |
Toasted Meringue | |
Light Sand | |
Carmel Tan | |
Wedding Veil | |
Subtle White | |
Warm Shadow | |
Sand Box | |
Frosted Peach | |
Dusted Pink | |
Porcelain White | |
Light Adobe | |
Barely Blushing | |
Dusty Trail | |
Ostrich Feather | |
White Sail | |
Morning Fog | |
Dove Beige |
Tuesday, November 29, 2011
Saturday, November 26, 2011
Wikitravel and travel resources offline
- Compete Wikitravel offline
First you need to download the wikitravel data dump here. It is just a text archive with all the text from the website. The archive format .bz2 file keeps the size small at only 40MB. You have several options for reading this file type.
The easiest if you are traveling with a laptop is to download wikitaxi or BZ reader. These readers will work for any wiki dump which means if you want the entire Wikipedia resource available offline (~6GB) you can access it without having to extract it. If you have the space this is also a fantastic thing to have while you travel. You never know what you’ll want to look up.
- On mobile devices
For increased portability there are also options for smart phones and ipods. Depending on your device it can loaded with varying degrees of ease. The best interface by far is the wiki2travel app for the jail broken ipod or iphone. The Oxygen guide is the best for the Android OS, though is far inferior to wiki2travel for the iphone.
There is support for other devices as well, but I haven’t tried any of them. There are also a few apps that let you download and store the wiki travel pages and maps a la carte. One good example is itravelfree. The paid version lets you download and store everything offline. It is only $3 which is a bargain to have all the travel information you could want at your fingertips. Compare that to $30 for a single country Lonely Planet guide book.
If wikitravel doesn’t have a lot of detail on the destination you’re looking at Lonely Planet has offered an attractive answer to buying a paperback guide book. They now offer downloadable .pdf versions of most of their guides as well as the option to buy single chapters at a reduced price. Introductory planning chapters are always free which can help with your first-cut travel planning.
Friday, November 25, 2011
Tuesday, November 22, 2011
青椒炒鸡蛋
作者:陆芳 时间:2011-7-5 14:27:33
黄绿搭配,色彩美观,口味鲜香。
基本材料
新鲜青椒150克,鸡蛋3个,豆油60克,精盐、香油、葱花各适量。
制作方法
1.把青椒用清水洗净,去籽切成细丝。将鸡蛋打在碗里,加适量食盐,用筷子搅拌均匀。
2.锅内放油(40克),烧热,将蛋汁倒入,炒好倒出,备用。
3.往锅内倒入余油,烧热,放入葱花炝锅,稍微发黄即可,随后放入青椒丝,加精盐炒几下,见青椒丝翠绿色时,放入炒好的鸡蛋,翻炒均匀,用香油烹一下,即可出锅。
美味提示
有些人喜欢放味精,其实在炒鸡蛋时最好不要放味精,这是最起码的常识。因为鸡蛋富含大量的谷氨酸和一 制作方法(11张)部分氯化钠,当鸡蛋被加热后,鸡蛋中的这两种物质会合成新的物质,这种物质化学名称叫谷氨酸钠,味精的主要成分就是这种物质,食物在加入这种物质后会有鲜味。但是,炒鸡蛋的时候如果放入味精这种物质,经过分解后的味精就会严重的破坏鸡蛋本身合成的自然鲜味。所以,建议各位家庭主妇在炒鸡蛋时切忌放入味精,这样才能保证鸡蛋的原汁原味。
Thursday, July 14, 2011
Power supply discussion
The reason is simple. Quality power supplies are not only able to deliver their rated power, but they also deliver it in a cleaner and more stable manner.
This means that you will have to use less voltage to your CPU when overclocking, it also helps to prolong the life of your hardware when they are provided with clean, unfluctuating power.
Also, the power supply lasts longer.
There are many things a good power supply has.
Look for operational features like OCP (Overcurrent Protection), OVP/UVP (Overvoltage/Undervoltage protection), SCP (Short circuit Protection), PFC (Power factor correction) and such.
If you open up a quality power supply, chances are you'll find the following traits.
Sunday, June 5, 2011
Monday, May 2, 2011
User management in Linux
ACLs are configured based on the system of UIDs. These are unique for each accounts. root account is UID 0 .UID 0-999 are typically reserved for system accounts.
Although there is only one UID 0 for administrator login, it is possible to “create” another administrator account by pointing said ID to UID 0. What we are doing is to create a replica of root ID.
useradd –o –u 0 userid
where –0 allow the creation of a user account with a duplicate (non-unique) UID , and –u link the ID to root UID.
Having another root level account on a system may not be desirable for user security governance and tracking. The use of sudo is recommended instead of having multiple administrator logins.
In Centos,
# visudo
Search for the commands section to grant the ID specific access rights. For example, to grant ID acme with root access with sudo, add a line underneath root.
## Allow root to run any commands anywhere
root ALL=(ALL) ALL
acme ALL=(ALL) ALL
Set a password
# passwd user
Set password expiry date
# chage -m 0 user where -m is the minimum no of days
Saturday, April 30, 2011
Fixing Windows 7 boot problems
- Changing the active partition
Boot to repair mode on your windows CD. Under command prompt, run Diskpart
Look for the disk number with List disk
Select Disk x where x is the disk number from above
List Partition and look for the windows partition number
Select Partition x where x is the windows partition
With the active partition loaded correctly, the repair function now has the correction partition to work on.
- Restoring the boot sector on the active partition
The commandline way to rebuild the boot code.
Under Windows Vista and above, boot to repair mode on your windows CD
bootsect.exe /nt60 SYS /force where SYS refers to the system partition used to boot Windows. Replace SYS with ALL to update the boot code on all volumes that can be used as Windows boot volumes.
Sunday, April 24, 2011
Loading IPTables rules on reboot
- On Debian,
Save the rules to a file
#iptables-save > /etc/firewall.conf
Create a startup script so ifupdown loads these rules on boot:
vi /etc/network/if-up.d/iptables
#!/bin/sh
iptables-restore < /etc/firewall.conf
chmod +x /etc/network/if-up.d/iptables
Reboot, and check rules with iptables -L
- On CentOS,
/sbin/service iptables save
This executes the iptables init script, which runs the /sbin/iptables-save program and writes the current iptables configuration to /etc/sysconfig/iptables. The existing /etc/sysconfig/iptables file is saved as /etc/sysconfig/iptables.save.
The next time the system boots, the iptables init script reapplies the rules saved in /etc/sysconfig/iptables by using the /sbin/iptables-restore command.
You can also save the iptables rules to a separate file for distribution, backup or other purposes. To save your iptables rules, type the following command as root:
[root@myserver ~]# iptables-save > <filename>
where <filename> is a user-defined name for your ruleset.
If distributing the /etc/sysconfig/iptables file to other machines, type /sbin/service iptables restart for the new rules to take effect.
Note the difference between the iptablescommand (/sbin/iptables), which is used to manipulate the tables and chains that constitute the iptables functionality, and the iptablesservice (/sbin/iptables service), which is used to enable and disable the iptables service itself.
To flush existing iptables rules
#!/bin/sh
echo "Stopping firewall and allowing everyone..."
# Delete and flush. Default table is "filter". Others like "nat" must be explici# tly stated.
iptables -F
iptables -X
iptables --delete-chain
iptables -t nat -F
iptables -t nat -X
# Delete all chains that are not in default filter and nat table
iptables --table nat --delete-chain
iptables -t mangle -F
iptables -t mangle -X
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT
chmod +x stop.fw4
./stop.fw4
Configure NAT with iptables
vi start.fw4
#!/bin/bash
LOGLIMIT="5/m"
LOGLIMITBURST="10"
iptables -I INPUT 1 -i lo -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
#change port 33322 to configured SSH port
iptables -A INPUT -p tcp --dport 33322 -j ACCEPT
#open UDP 123 for NTP
iptables -A INPUT -p udp --sport 123 --dport 123 -j ACCEPT
#for openvpn and pptp access
iptables -A INPUT -p udp --dport 1194 -j ACCEPT
iptables -t nat -A POSTROUTING -o venet0 -j SNAT --to rem.ot.e.ip
iptables -A FORWARD -i venet0 -o tun0 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i tun0 -o venet0 -j ACCEPT
#block others
iptables -N LOGDROP
iptables -A INPUT -j LOGDROP
iptables -A LOGDROP -p tcp -m limit --limit $LOGLIMIT --limit-burst $LOGLIMITBURST -j LOG --log-level 7 --log-prefix "TCP LOGDROP: "
iptables -A LOGDROP -p udp -m limit --limit $LOGLIMIT --limit-burst $LOGLIMITBURST -j LOG --log-level 7 --log-prefix "UDP LOGDROP: "
iptables -A LOGDROP -p icmp -m limit --limit $LOGLIMIT --limit-burst $LOGLIMITBURST -j LOG --log-level 7 --log-prefix "ICMP LOGDROP: "
iptables -A LOGDROP -f -m limit --limit $LOGLIMIT --limit-burst $LOGLIMITBURST -j LOG --log-level 7 --log-prefix "FRAGMENT LOGDROP: "
iptables -A LOGDROP -j DROP
chmod +x start.fw4
./start.fw4
- To list rules,
# iptables -L
To list masquerade and NAT rules,
# iptables -t nat -L
Updating OS on VPS
Debian
# apt-get update
# apt-get upgrade
Centos
Type the following command to get a list of packages that are going to be updated, enter:
# yum list updates
To upgrade your box, enter:
# yum update
Initial SSH setup
- On Debian, useradd is a low level utility for adding users. Administrators should usually use adduser(8) instead.
- On Fedora or CentOS systems, adduser is just a symbolic link to useradd
- adduser <user>
Change SSH port and deny root SSH login
- vi /etc/ssh/sshd_config
- Replace default port 22 with <random port>
- Disable Root login PermitRootLogin no
- iptables -A INPUT -p tcp --dport <new SSH port> -j ACCEPT
Restart SSH service
- service ssh reload
Friday, April 22, 2011
DNS leaking with browsers
Following on this great DNS leakage test with Firefox , I ran my own simple browser privacy tests on browsers i use frequently.
Setup used for the test
- Remote SSH host
- Opera 11.10 Build 2092
- Chrome 10.0.648.205 with Proxy Switchy! 1.6.3
- Firefox 4.0
- IE 9.0.8112.16421
- Plink 0.60.9149.0
- MyEN Tunnel v3.5.2 to build TCP SSH tunnels for SOCKS5 proxy. More stable and better speed(Hulu) than opening a dynamic proxy with Putty (putty shell@xx.xx.xx.xx -fND localhost:7777)
- DNS Randomness test . Great tool for testing DNS leakage.
- Client DNS: OpenDns , ISP DNS
- Remote DNS: Remote host DNS
Results:
Browser | Proxy | Notes |
Firefox | Client | Uses client DNS out of the box |
Firefox with network.proxy.socks_remote_dns TRUE | Remote | Enable this in about:config. Tells firefox to use DNS SOCKS5 |
Chrome | Remote | |
IE | Client | |
Opera | NA | Not SOCKS compatible as of tested version. |
Conclusion: Chrome has the best result out of the box. It looks up URLs using the remote DNS once you point chrome to a SOCKS5 proxy. There is no need for additional configuration or socks server traversing application.
Firefox requires an additional tweak to force remote DNS lookup.
I could not find a native way of forcing remote DNS lookup in IE. One alternative is to disable client side DNS caching in windows, probably not what you want on a corporate network. Another is to “socksify” IE with sockscap or widecap.
Opera has no socks support. Boo. There is always widecap or sockscap, but why bother when you can use chrome?
Random discovery: Your company domain admin may have a AD group policy that enables corporate proxy on your browser, overriding your SOCKS5 proxy selection. This is annoying and recurring, the browser changing to corporate proxy when you think you are surfing on the SOCKS5 proxy.
To workaround this on Chrome with Proxy Switchy, with Socks proxy selected configure the following in Switchy configuration.
Auto apply last selected proxy profile on startup.
Monitor Proxy Changes
Revert proxy changes done by other apps.
With this, you know your web traffic on Chrome is encrypted.
Monday, April 11, 2011
NWN2 Essence List
Code | Item |
nx1_cft_ess_air01 | volatile air essence |
nx1_cft_ess_air02 | brilliant air essence |
nx1_cft_ess_air03 | pristine air essence |
nx1_cft_ess_earth01 | volatile earth essence |
nx1_cft_ess_earth02 | brilliant earth essence |
nx1_cft_ess_earth03 | pristine earth essence |
nx1_cft_ess_fire01 | volatile fire essence |
nx1_cft_ess_fire02 | brilliant fire essence |
nx1_cft_ess_fire03 | pristine fire essence |
nx1_cft_ess_water01 | volatile water essence |
nx1_cft_ess_water02 | brilliant water essence |
nx1_cft_ess_water03 | pristine water essence |
nx1_cft_ess_power01 | volatile power essence |
nx1_cft_ess_power02 | brilliant power essence |
nx1_cft_ess_power03 | pristine power essence |
nx1_cft_ess_spirit01 | volatile spirit essence |
nx1_cft_ess_spirit02 | brilliant spirit essence |
nx1_cft_ess_spirit03 | pristine spirit essence |
nx1_cft_ess_coven | Slumbering Coven Esssence |
Sunday, April 10, 2011
NWN2 Feat List
Code | Feat |
0 | FEAT_ALERTNESS |
1 | DEL_FEAT_AMBIDEXTERITY |
2 | FEAT_ARMOR_PROFICIENCY_HEAVY |
3 | FEAT_ARMOR_PROFICIENCY_LIGHT |
4 | FEAT_ARMOR_PROFICIENCY_MEDIUM |
5 | FEAT_CALLED_SHOT |
6 | FEAT_CLEAVE |
7 | FEAT_COMBAT_CASTING |
8 | FEAT_DEFLECT_ARROWS |
9 | FEAT_DISARM |
10 | FEAT_DODGE |
11 | FEAT_EMPOWER_SPELL |
12 | FEAT_EXTEND_SPELL |
13 | FEAT_EXTRA_TURNING |
14 | FEAT_GREAT_FORTITUDE |
15 | FEAT_IMPROVED_CRITICAL_CLUB |
16 | FEAT_IMPROVED_DISARM |
17 | FEAT_IMPROVED_KNOCKDOWN |
18 | FEAT_IMPROVED_PARRY |
19 | FEAT_IMPROVED_POWER_ATTACK |
20 | FEAT_IMPROVED_TWO_WEAPON_FIGHTING |
21 | FEAT_IMPROVED_UNARMED_STRIKE |
22 | FEAT_IRON_WILL |
23 | FEAT_KNOCKDOWN |
24 | FEAT_LIGHTNING_REFLEXES |
25 | FEAT_MAXIMIZE_SPELL |
26 | FEAT_MOBILITY |
27 | FEAT_POINT_BLANK_SHOT |
28 | FEAT_POWER_ATTACK |
29 | FEAT_QUICKEN_SPELL |
30 | FEAT_RAPID_SHOT |
31 | FEAT_SAP |
32 | FEAT_SHIELD_PROFICIENCY |
33 | FEAT_SILENCE_SPELL |
34 | DEL_FEAT_SKILL_FOCUS_ANIMAL_EMPATHY |
35 | FEAT_SPELL_FOCUS_ABJURATION |
36 | FEAT_SPELL_PENETRATION |
37 | FEAT_STILL_SPELL |
38 | **** |
39 | FEAT_STUNNING_FIST |
40 | FEAT_TOUGHNESS |
41 | FEAT_TWO_WEAPON_FIGHTING |
42 | FEAT_WEAPON_FINESSE |
43 | FEAT_WEAPON_FOCUS_CLUB |
44 | FEAT_WEAPON_PROFICIENCY_EXOTIC |
45 | FEAT_WEAPON_PROFICIENCY_MARTIAL |
46 | FEAT_WEAPON_PROFICIENCY_SIMPLE |
47 | FEAT_WEAPON_SPECIALIZATION_CLUB |
48 | FEAT_WEAPON_PROFICIENCY_DRUID |
49 | FEAT_WEAPON_PROFICIENCY_MONK |
50 | FEAT_WEAPON_PROFICIENCY_ROGUE |
NWN2 Spell List
Code | Spell |
0 | Acid_Fog |
1 | Aid |
2 | Animate_Dead |
3 | Barkskin |
4 | Bestow_Curse |
5 | Blade_Barrier |
6 | Bless |
7 | Summon_Djinni |
8 | Blindness_and_Deafness |
9 | Bulls_Strength |
10 | Burning_Hands |
11 | Call_Lightning |
12 | Summon_Clockroach |
13 | Cats_Grace |
14 | Chain_Lightning |
15 | Charm_Monster |
16 | Charm_Person |
17 | Charm_Person_or_Animal |
18 | Circle_of_Death |
19 | Mass_Inflict_Light_Wounds |
20 | Clairaudience_and_Clairvoyance |
21 | Summon_Ivory_Handmaiden |
22 | DEL_Cloak_of_Chaos |
23 | Cloudkill |
24 | Color_Spray |
25 | Cone_of_Cold |
26 | Confusion |
27 | Contagion |
28 | Control_Undead |
29 | Create_Greater_Undead |
30 | Create_Undead |
31 | Cure_Critical_Wounds |
32 | Cure_Light_Wounds |
33 | Cure_Minor_Wounds |
34 | Cure_Moderate_Wounds |
35 | Cure_Serious_Wounds |
36 | Darkness |
37 | Daze |
38 | Death_Ward |
39 | Delayed_Blast_Fireball |
40 | Dismissal |
41 | Dispel_Magic |
42 | Divine_Power |
43 | Dominate_Animal |
44 | Dominate_Monster |
45 | Dominate_Person |
46 | Doom |
47 | Elemental_Shield |
48 | Elemental_Swarm |
49 | Bears_Endurance |
50 | Endure_Elements |
Saturday, February 19, 2011
Barron's 2011 Roundtable, Part Three -- Think Contrarian
Source: http://online.barrons.com/article/SB50001424052970204331604576104252848553210.html#articleTabs_panel_article%3D1
By LAUREN R. RUBLIN | MORE ARTICLES BY AUTHOR
Meryl Witmer, Marc Faber, Mario Gabelli and Oscar Schafer share their investment picks for 2011 in the final
Barron's 2011 Roundtable, Part Two -- All Over the Map
Source:http://online.barrons.com/article/SB50001424052970204853904576090250370348320.html?mod=BOL_twm_fs#articleTabs_panel_article%3D1
By LAUREN R. RUBLIN | MORE ARTICLES BY AUTHOR
In the second installment of the Roundtable, our pros' picks range widely over commodities, previous metals, financial stocks and big-cap tech. Two better-than-bonds plays.