Monthly Archives: March 2015

Dell M3800 Mobile Workstation, ships with [Ubuntu] Linux (Fedora has issues)

Posted on by

Dell M3800, ships with LinuxDell Precision M3800 Mobile workstation, ships with Linux

Configured

  • Ubuntu, surely it will work with Fedora
  • 4K2K display (3180×2160)
  • 16GB RAM
  • 1TB mSATA

Standard

  • NVIDIA Quadro K1100M
  • 4th Generation Intel i7 (Haswell)

Issues

  • No RJ45 Ethernet; need a USB-to-Ethernet dongle.

Promotions

Archaeological order, derivitave and “metoo” stuff on top, original work and announcements below.

Heavy, heavy, retargeting off of the product page.

Dell Precision M3800 CTO Laptop, RetargetingProgram

Order

Dell M3800; Complete Order Page 1; Screenshot from 2015-03-30 19:20:33, tranche 1Dell M3800; Complete Order Page 1; Screenshot from 2015-03-30 19:20:33, tranche 2Dell M3800; Complete Order Page 1; Screenshot from 2015-03-30 19:20:33, tranche 3M3800; Complete Order Page 1; Screenshot from 2015-03-30 19:20:33, tranche 4Dell M3800; Complete Order Page 1; Screenshot from 2015-03-30 19:20:33, tranche 5

Roundup of Facebook Announcements from F8 2015

Posted on by

Mentions

  • Messenger Platform
    • 600M MAU
    • has an email feature
    • Something about apps within Messenger
      • Ditty
      • GIF
      • Giphy
      • FlipLip Voice Changer
      • ESPN App
      • There are 40 apps.
  • Messenger for Business
    • crypto email for the young pepole
    • data mine the receipts for trak-n-targ.
  • Facebook Comments
    • Plugins for comments
  • 360° Video “soon”
    • Something about multiple cameras
  • Parse SDK for Internet of Things (IoT)
    • Parse Explorer, a debugger
  • Facebook pays, has paid, developers
  • Facebook Analytics
    • for Apps
  • Facebook Video Player, embedded videos
  • Virtual Rality is cool, no announcement
  • WhattsApp, no announcement
  • Facebook, has deep learning
  • Facebook Ads
    • LiveRail
    • Partners (twelve)
      • AppsFlyer
      • AppLift
      • AppLovin
      • Appsalar
      • Fyber (SponsorPay)
      • Kochava
      • InMobi
      • Millennial Media
      • Supersonic
      • Tune
    • Non-participants
      • Apple iAd
      • Google
      • Twitter
      • Yahoo
    • No announcements
      • Facebook Custom Audiences
      • Facebook Exchange (FBX)
      • Atlas
    • Claim: native ads “work: 7x better than banner ads

Who

  • Deborah Liu, Facebook Platform
  • David Marcus, Messenger Platform
  • Mark Trefgarne, Product Director (and former LiveRail CEO), LiveRail of Facebook.

Via: backfill

SOLVED: How does one convert a normal (non-bare) Git Repository to a bare repository?

Posted on by
Crude
git clone --bare source-reponame target-reponame

Yet doing a clone doesn’t preserve config options,

Better

Replace the contents of repo with the contents of repo/.git, then tell the repository that it is now a bare repository.

cd repo
mv .git .. && rm -fr *
mv ../.git .
mv .git/* .
rmdir .git
git config --bool core.bare true
cd ..; mv repo repo.git # renaming just for clarity

Referenced

Actualities

The problem is exhibited as

Whereas Google Code is Dead Code Walking, one must acquire control of the code left thereon.  Copying dbd-modules from Subversion SCM to Git SCM via the recipe.

$ git clone ../svn/dbd-modules ../git/dbd-modules
...time passes...
...elsewhere...
$ cd /views
$ git clone ssh://git.emerson.baker.org/vault/git/clones/dbd-modules
$ vi ...files...
$ git commit
Waiting for Emacs...
[master 8512c73] document the README, LICENSE A regular Makefile ... that crudely builds
 3 files changed, 259 insertions(+)
 create mode 100644 LICENSE
 create mode 100644 Makefile
 create mode 100644 README

$ git remote -v
origin	ssh://git.emerson.baker.org/vault/git/clones/dbd-modules (fetch)
origin	ssh://git.emerson.baker.org/vault/git/clones/dbd-modules (push)

$ git push
warning: push.default is unset; its implicit value is changing in
Git 2.0 from 'matching' to 'simple'. To squelch this message
and maintain the current behavior after the default changes, use:

  git config --global push.default matching

To squelch this message and adopt the new behavior now, use:

  git config --global push.default simple

See 'git help config' and search for 'push.default' for further information.
(the 'simple' mode was introduced in Git 1.7.11. Use the similar mode
'current' instead of 'simple' if you sometimes use older versions of Git)

Counting objects: 6, done.
Delta compression using up to 12 threads.
Compressing objects: 100% (5/5), done.
Writing objects: 100% (5/5), 5.10 KiB | 0 bytes/s, done.
Total 5 (delta 1), reused 0 (delta 0)
remote: error: refusing to update checked out branch: refs/heads/master remote: error: By default, updating the current branch in a non-bare repository remote: error: is denied, because it will make the index and work tree inconsistent remote: error: with what you pushed, and will require 'git reset --hard' to match remote: error: the work tree to HEAD. remote: error: remote: error: You can set 'receive.denyCurrentBranch' configuration variable to remote: error: 'ignore' or 'warn' in the remote repository to allow pushing into remote: error: its current branch; however, this is not recommended unless you remote: error: arranged to update its work tree to match what you pushed in some remote: error: other way. remote: error: remote: error: To squelch this message and still keep the default behaviour, set remote: error: 'receive.denyCurrentBranch' configuration variable to 'refuse'. To ssh://git.emerson.baker.org/vault/git/clones/dbd-modules ! [remote rejected] master -> master (branch is currently checked out) error: failed to push some refs to 'ssh://git.emerson.baker.org/vault/git/clones/dbd-modules'

What you don’t know about Internet algorithms is hurting you | Washington Post

Posted on by

What you don’t know about Internet algorithms is hurting you. (And you probably don’t know very much!); Caitlin Dewey; In The Washington Post; 2015-03-23.

tl;dr => entertainment uses algorithms, algorithms are bad

Mentions

Previously

In archaeological order, newer more derivative works on top, older original matieral down below

Concepts

The branded concepts of the activism

Who

Pantheon of the activists, cited
  • Eli Pariser
    attributed as an activist
  • Christian Sandvik
    attributed as a communications researcher
  • Zeynep Tufekci
    attributed as a sociologist

Actualities

Artwork

This is just a silly & transparent ploy to make a connection to a non-technical audience.  Everyone can relate to Important Art.

Progression: Triptych

OkCupid Compatibility CalculationHello WorldVia: backfill

Certificate Transparency

Posted on by

Certificate Transparency, a project of Google

Descriptive

  • RFC 6962 – Certificate Transparency; Ben Laurie, Adam Langly, Emilia Kasper (Google); IETF; 2013-06.
  • NIST Workshop; 2013-04.
    • Certificate Transparency (Presentation I); Adam Langley, Ben Laurie Emilia Kasper, Al Cutter, Stephen McHenry (Google); 17 slides
    • New Window of Opportunity (Presentation II); Ben Wilson (DigiCert); 11 slides
      Teaser: Certificate Transparency – A Certification Authority’s Perspective
  • Ben Laurie, Cory Doctorow; Computing: “Secure the Internet”; In Nature, Issue 491; 2012-11-15; paywalled.

Materials

Actualities

Certificate Transparency Project

Via: backfill

Attention Decay in Science | Della Briotta Parolo, Pan, Ghosh, Huberman, Kaski, Fortunato

Posted on by

Pietro Della Briotta Parolo, Raj Kumar Pan, Rumi Ghosh, Bernardo A. Huberman, Kimmo Kaski, Santo Fortunato; Attention Decay in Science; preprint; Elsevier (submitted to some journal of theirs); submitted: 2015-03-09; 12 pages; arXiv:1503.01881.

Abstract

The exponential growth in the number of scientific papers makes it increasingly difficult for researchers to keep track of all the publications relevant to their work. Consequently, the attention that can be devoted to individual papers, measured by their citation counts, is bound to decay rapidly. In this work we make a thorough study of the life-cycle of papers in different disciplines. Typically, the citation rate of a paper increases up to a few years after its publication, reaches a peak and then decreases rapidly. This decay can be described by an exponential or a power law behavior, as in ultradiffusive processes, with exponential fitting better than power law for the majority of cases. The decay is also becoming faster over the years, signaling that nowadays papers are forgotten more quickly. However, when time is counted in terms of the number of published papers, the rate of decay of citations is fairly independent of the period considered. This indicates that the attention of scholars depends on the number of published items, and not on real time.

Via: backfill

HOWTO: Use Client-Supplied Certificate Authentication on a WordPress Blog

Posted on by

Client Certificate Authentication; a WordPress Plugin

Theory

 <Location /wp-login.php>
    SSLVerifyClient optional
    <IfModule mod_rewrite.c>
        RewriteEngine   on
        RewriteCond  %{HTTP_USER_AGENT}  .*Safari.*
        RewriteCond  %{SSL:SSL_CLIENT_VERIFY} !=SUCCESS
        RewriteRule  .* /wp-admin [redirect,last]
    </IfModule>
</Location>
<Location /wp-admin>
    SSLVerifyClient require
</Location>

Not Covered

Once the plugin is in place, all interfaces that once used passwords will need to use an appropriate client certificate.  For example the WordPress API.

<Location /xmlrpc.php>
    SSLVerifyClient require
</Location>

Configuration

WordPress

Configuration of WordPress is “standard.”  Get that working first.

Plugin: Client Certificate Authentication

Via: instructions, FAQ.

Apache httpd

/etc/httpd/vhost/com.baker.t99.conf

<VirtualHost *:443>
    SSLEngine On
    SSLCertificateFile      pki/trustanchor/com.baker.STAR.crt
    SSLCertificateKeyFile   pki/trustanchor/com.baker.STAR.key
    SSLCertificateChainFile pki/trustanchor/intermediate.crt
    SSLCACertificateFile    pki/bloggists/all.crt
    SSLCARevocationFile     pki/bloggists/revocation.crl
    # SSLCADNRequestFile (defaults to SSLCACertificateFile)
    # <ifVersion >= 2.4> SSLCARevocationCheck  chain
    ServerName t99.baker.com
    ServerAdmin webmaster@baker.com
    DocumentRoot /var/wordpress/t99
    <Directory "/var/wordpress/t99">
	Options Indexes FollowSymLinks
        # AllowOverride is needed to get wordpress permalinks to work (respect .htaccess)
	AllowOverride All
        # This is needed for permalinks to work on WordPress without using .htaccess files
	RewriteEngine On
        RewriteBase /
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteCond %{REQUEST_FILENAME} !-d
	RewriteRule . /index.php [L]
    </Directory>
    RedirectMatch permanent ^/credits?(/|/.*)?$ https://credits.baker.com$1
    RedirectMatch permanent ^/polic(y|ie)s?(/|/.*)?$ https://policies.baker.com$2
    Redirect permanent /robots.txt https://txt-robots.baker.com/
    Header set P3P "CP=\"There is no P3P policy. Learn why here: http://policies.baker.com/p3p\""
    <Location /wp-login.php>
	SSLVerifyClient optional
	RewriteEngine   on
	# SSL:SSL_CLIENT_VERIFY is { NONE, SUCCESS, GENEROUS or FAILED:reason }
	RewriteCond  %{SSL:SSL_CLIENT_VERIFY} !=SUCCESS
	RewriteRule  .* /wp-admin [redirect,last]
    </Location>
    <Location /wp-admin>
	SSLVerifyClient require
        SSLOptions +FakeBasicAuth +ExportCertData
	# The plugin consults
	#   SSL_CLIENT_S_DN_CN for the name.
	#   SSL_CLIENT_S_DN_Email for the email
        SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)-/ and %{SSL_CLIENT_S_DN_O} eq "Baker" and %{SSL_CLIENT_S_DN_OU } in {"Bloggist", "Bloggists"} )
    </Location>
</VirtualHost>

Via: backfill

Federal Trade Commission Workshop on Cross-Device Tracking on 2015-11-16

Posted on by

Workshop on Cross-Device Tracking at the Federal Trade Commission; 2015-11-16.

Mentions

  • Jessica Rich, Director of the Bureau of Consumer Protection, Federal Trade Commission.
  • Lesley Fair, bloggist, George Washington University, Federal Trade Commission.

Questions

  • What’s the state of the art?
  • How are companies tracking consumers across different devices?
  • What are the pros and cons for consumers and advertisers?
  • What does the privacy and security landscape look like?
  • How can companies be more transparent about what they’re doing?
  • What can be done to give consumers more control?
  • How do existing industry self-regulatory programs apply?

Statement

<quote ref=”presser“>The use of multiple devices creates a challenge for companies that want to reach these consumers with relevant advertising.  The traditional method of using cookies to track consumers’ online activities are proving to be less effective. A cookie may not provide  a complete picture of a consumer who uses different web browsers at home, at work and on their mobile device, for example.
Industry has adopted different approaches to address this issue, from simply having consumers log in to be able to use a site or service from a different device, to methods that rely on various characteristics about a user to match their behavior from one device to another – often without the consumers’ awareness or control.</quote>

Dates

  • 2015-03-18 Questions Posed
  • 2015-10-16 Public commentariat closes
  • 2015-11-16 Workshop
  • 2015-12-16 Post-workshop commentariat closes

Announcements

Promotions

Via: backfill

Gimbal

Posted on by

Gimbal, Inc.
11010 Roselle St, Ste 150
San Diego CA 92121-1226
United States

Gimbal Store

Gimbal Proximity BeaconsGimbal Proximity Beacon Specification Sheet

Gimbal Proximity SDK Deployment ConceptMonetization

  • This is a “for rent” scheme
    You don’t own these devices or control the service, not really. PAYGO-in-the-Cloud.
  • Use of Gimbal beacons requires a Gimbal Developer Account
  • Fees follow the count of user count
    the number of users whose devices use the Gimbal SDK and contact the Gimbal backend servers.

References: Daniel Eagle

Risks

  • Accuracy: maybe.
  • Cost: seems cheap enough
  • Proprietary Lockin: mild but definitely present; c.f. that library jarfile SDK.
  • Platform Lockin: iOS is definitly the primary
    Android seems a very very distant second thought.
  • Organizational Reliabliity: it’s a PAYGO-in-the-Cloud service model
    This seems to be the centerpiece risk issue.
    <quote>Also, in order for the SDK to work it has to call home to the Gimbal backend service once every 24 hours.</quote>

The devices, SDK & service are closed and single-supplier.  Your use is dependent upon the kindness & SLAs of Gimbal’s financial health.  Fear this and plan for this as you design. Envision that you’ll wake up some morning to read that they are shutting down the service (they can’t run it even at cost, they’ve sold it, they’ve found a better business model with someone else, they need to move offshore to get access to cheaper labor, etc.).

Products

  • Supports
    • Apple-native
    • Android
      • Client deployment is new & rough; beta.
      • Manager app is not available.
  • Line
    • Series 10
    • Series 20
    • Series 21
  • Gimbal Beacon Manager App (Apple only)
  • Beacon Proximity Beacon Series, specification; 1 page (all 3 products)
    • Bluetooth® Smart (aka Bluetooth 4.0 Low Energy)
    • Channels at 2.4GHz for non-connectable advertisements.
      • Channel 37 (2402MHz)
      • Channel 38 (2426 MHz)
      • Channel 39 (2480 MHz)
    • Compatible with iBeacon.
    • Configurable via Gimbal Manager/Gimbal Beacon Manager App
    • Modes
      • foreground
      • foreground/background
    • Levels
      • Low => -23dBm
      • Full => 0dBm, expect 164 ft (50m)
  • Gimbal Manager Servers

Specifications

Mentions

Promotions

Via: backfill.

Mentions

  • Eventbase
    • The app lets you meet people who are “nearby”
    • Concepts
      • indoor location
      • indoor geo-location
      • “hyper-local networking.”
    • Promotional Partners
      • USA Networks
      • something about experiential marketing at the conference
  • Jeff Sinclair, co-founder, Eventbase
  • Ben West,, co-founder, Eventbase.
  • Gimbal
    • spun out of Qualcomm
    • Transmitter units are $3-$50.

Actualities

(the Conference App)

Eventbase South by Southwest mobile app

Beyond Retail, Savvy Marketers Can Use Beacons in 2015 | Signal

Posted on by

Beyond Retail, Savvy Marketers Can Use Beacons;; (Signal); In Their Blog; 2015-03-19.
Nick Knise was an intern at Signal; he is an undergraduate at Northwestern University.

Products

Signal Products

A recitation
  • Signal Fuse Platform
  • Signal Open Data Platform
  • Signal Unfied Customer View

Previously

  • Stroking Data Gold: Apple iBeacons; Tomas Rodriguez (Signal); In Their Blog; 2014-10-22.
    Tomas Rodriguez is Product Marketing Manager at Signal.
    Mentions

    • Apple iOS 8
    • iWatch
    • iBeacon
    • Bluetooth
    • Something vague about privacy
    • Something about how a shopping cart appears on the lock screen when the marketers are pounding your box; attributed to Apple Insider.

Mentions

Brands

A recitation
  • Macy’s
  • Dockers
  • UGG

Demonstrations

a recitation
  • Airport of Copenhagen
  • Airport of Shanghai
  • Airport of Miami
  • National Slate Museum, Wales, UK
  • National Roman Legion Museum, Wales, UK

Referenced

Via: backfill

Geofencing API | W3C

Posted on by

Geofencing API; editor: Marijn Kuisselbrink (Google); W3C; 2015-03-18.

Referenced

  • Service Workers; editors: Alex Russell (Google), Jungkee Song (Samsung), Jake Archibald (Google); Working Draft; W3C; 2015-02-03.
  • Geolocation API Specification; editor: Andrei Popescu.(Google);  Recommendation; W3C; 2013-10-24.
  • Web IDL; editor: Cameron McCormack (Mozilla); Candidate Recommendation; W3C; 2012-04-19.

Example

The following code extracts illustrate how to use this API to be notified of geographic regions being entered or left.

Example 1: Monitor a region
// https://example.com/webapp.js
navigator.serviceWorker.register('serviceworker.js').then(
  function(serviceWorkerRegistration) {
    serviceWorkerRegistration.geofencing.add(
        new CircularGeofenceRegion({
          name: "myfence",
          latitude: 37.421999,
          longitude: -122.084015,
          radius: 1000
        }), {includePosition: true}).then(
      function(geofence) {
        console.log(geofence.id);
        // If more than just a name needs to be stored with a geofence, now
        // would be the time to store this in some storage.
      }, function(error) {
        // During development it often helps to log errors to the
        // console. In a production environment it might make sense to
        // also report information about errors back to the
        // application server.
        console.log(error);
      }
    );
  });
Example 2: Respond to a region being entered
// https://example.com/serviceworker.js
self.ongeofenceenter = function(event) {
  console.log(event.geofence.id);
  console.log(event.geofence.region.name);

  // If this is not a geofence of interest anymore, remove it.
  if (event.geofence.region.name !== "myfence") {
    event.waitUntil(event.geofence.remove());
  }
};
Example 3: Respond to an error condition
// https://example.com/serviceworker.js
self.ongeofenceerror = function(event) {
  console.log(event.geofence.id);
  console.log(event.geofence.region.name);
  console.log(event.error);

  // Some error condition occured. The region is no longer monitored, and won't
  // trigger any more events.

  // Try to re-monitor, although depending on the error this might fail.
  event.waitUntil(self.registration.geofencing.add(event.geofence.region).then(
    function(geofence) {
      // re-monitoring succeeded, new geofence will have a different ID.
    }, function(error) {
      // re-monitoring failed.
    }
  ));
};
Example 4: Unmonitor a region in response to some other event
// https://example.com/serviceworker.js

// Either look geofence up by name:
self.onsomeevent = function(event) {
  event.waitUntil(self.registration.geofencing.getAll({name: "myfence"}).then(
    function(geofences) {
      for (let i = 0; i < geofences.length; ++i) {
        geofences[i].remove();
      }
    }
  ));
};

// Or look geofence up by ID:
self.onsomeotherevent = function(event) {
  let geofence_id = "" /* somehow get the ID of a geofence */;
  event.waitUntil(self.registration.geofencing.getById(geofence_id).then(
    function(geofence) {
      geofence.remove();
    }
  ));
};

Via: backfill

git svn, svnsync | Git and Subversion

Posted on by
Whereas

Google Code is now Dead Code Walking, it’s time to acquire copies of the necessary sources mastered there.

Specimen

dbd-modules – Several Apache modules to allow Apache 2.2+ to access databases using DBD

References

Recipe

cd /vault/git/svn/com.google.code
mkdir dbd-modules
svnadmin create dbd-modules
cat > dbd-modules/hooks/pre-revprop-change <<EOF
#!/bin/sh
exit 0;
EOF
chmod +x dbd-modules/hooks/pre-revprop-change

svnsync init file:///vault/git/svn/com.google.code/dbd-modules  http://dbd-modules.googlecode.com/svn
# one line of output

svnsync sync file:///vault/git/svn/com.google.code/dbd-modules 
# ... lots and lots of output

cd /vault/git/clones
git svn clone file:///vault/git/svn/com.google.code/dbd-modules -T trunk -b branches -t tags

Also, -s is the same as -T trunk -b branches -t tags

SOLVED: POST fails in SSL with ‘request body exceeds maximum size (131072) for SSL buffer’

Posted on by

tl;dr

  1. Turn KeepAlive to On
  2. Set SSLRenegBufferSize to a very large value

Condition

  • Large media uploads fail in WordPress
  • Where “large” is over 128K.

Configuration

Diagnostics

The apache log files indicate this problem with lines of the form

request body exceeds maximum size (131072) for SSL buffer, referer: https://example.com/wp-admin/media-new.php
could not buffer message body to allow SSL renegotiation to proceed, referer: https://example.com/wp-admin/media-new.php

Solution

  • Ensure that a GET occurs before the POST such that SSL renegotiation does not occur in the same SSL session.
  • Thus KeepAlive is required..
  • Ensure that the KeepAlive interval is respected between the GET and the POST.
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 30

Refereces

Background

Archaeological order … more original materials deeper down the stack…

Data Brokers: A Call for Transparency and Accountability | FTC

Posted on by

Data Brokers: A Call for Transparency and Accountability; Federal Trade Commission; 2014-05; 110 pages.

Mentioned

Brokers

  1. Acxiom
  2. Corelogic
  3. Datalogix
  4. eBureau
  5. ID Analytics
  6. Intelius
  7. PeekYou
  8. RapLeaf
  9. Recorded Future

Referenced

Promotions

Via: backfill.

Installing Cgit on Fedora 18 with Apache v2.4

Posted on by

Expectations

  • Fedora 18 (2013)

Actualities

$ rpm -q cgit
cgit-0.9.2-1.fc18.i686
$ rpm -q -l cgit
/etc/cgitrc
/etc/httpd/conf.d/cgit.conf
/usr/libexec/cgit/filters
/usr/libexec/cgit/filters/about-formatting.sh
/usr/libexec/cgit/filters/commit-links.sh
/usr/libexec/cgit/filters/html-converters
/usr/libexec/cgit/filters/html-converters/man2html
/usr/libexec/cgit/filters/html-converters/md2html
/usr/libexec/cgit/filters/html-converters/resources
/usr/libexec/cgit/filters/html-converters/resources/markdown.pl
/usr/libexec/cgit/filters/html-converters/resources/rst-template.txt
/usr/libexec/cgit/filters/html-converters/rst2html
/usr/libexec/cgit/filters/html-converters/txt2html
/usr/libexec/cgit/filters/syntax-highlighting.py
/usr/libexec/cgit/filters/syntax-highlighting.pyc
/usr/libexec/cgit/filters/syntax-highlighting.pyo
/usr/libexec/cgit/filters/syntax-highlighting.sh
/usr/share/cgit
/usr/share/cgit/cgit.css
/usr/share/cgit/cgit.png
/usr/share/doc/cgit-0.9.2
/usr/share/doc/cgit-0.9.2/COPYING
/usr/share/doc/cgit-0.9.2/README
/usr/share/doc/cgit-0.9.2/README.SELinux
/usr/share/doc/cgit-0.9.2/cgitrc.5.html
/usr/share/man/man5/cgitrc.5.gz
/var/cache/cgit
/var/www/cgi-bin/cgit

Um … wow, for a point-ought release there sure is a lot of new stuff! Contra Semantic Versioning v2.0.0 and Jimi Wales Wiki.

References

SOLVED[fail]: Android WebView does not support Client Certificates at all

Posted on by

Problem Statement

Context

Outcome

Partial success…

  • Webware => just works
    • desktop officework browser
      i.e. Firefox 29+
    • mobile browser => “just works”
      i.e. Chrome 40, Blink 537.36, Android 4.4.4 (what is that, Jelly Bean, Key Lime Pie?, Lollipop?)
  • Appware => FAIL
    • Android does not work, cannot be made to work.
    • WordPress Android is unuseable in this mode.

Environment: Webby Officework Desktop

Outcome: just works

Cases

  • Firefox (Fedora) “just works”
  • Chrome (Android) “just works”

Configuration

  • User receives the certificate as a PKCS #12 (a .p12 file)
  • Install fhe certificate
    • … in the browser (Firefox, Linux)
    • … in the operating system (Android)

Environment: WordPress Android

Outcome: FAIL

  • Do not use Android WordPress on these blogs
  • Use the webby interface with Chrome.
  • WordPress Android uses an embedded WebView which does not implement client certificates at all.

Referenced

Others have tried … but Android does not yet support this concept