Dell M3800 Mobile Workstation, ships with [Ubuntu] Linux (Fedora has issues)

Dell M3800, ships with LinuxDell Precision M3800 Mobile workstation, ships with Linux


  • Ubuntu, surely it will work with Fedora
  • 4K2K display (3180×2160)
  • 16GB RAM
  • 1TB mSATA


  • NVIDIA Quadro K1100M
  • 4th Generation Intel i7 (Haswell)


  • No RJ45 Ethernet; need a USB-to-Ethernet dongle.


Archaeological order, derivitave and “metoo” stuff on top, original work and announcements below.

Heavy, heavy, retargeting off of the product page.

Dell Precision M3800 CTO Laptop, RetargetingProgram


Dell M3800; Complete Order Page 1; Screenshot from 2015-03-30 19:20:33, tranche 1Dell M3800; Complete Order Page 1; Screenshot from 2015-03-30 19:20:33, tranche 2Dell M3800; Complete Order Page 1; Screenshot from 2015-03-30 19:20:33, tranche 3M3800; Complete Order Page 1; Screenshot from 2015-03-30 19:20:33, tranche 4Dell M3800; Complete Order Page 1; Screenshot from 2015-03-30 19:20:33, tranche 5

Roundup of Facebook Announcements from F8 2015


  • Messenger Platform
    • 600M MAU
    • has an email feature
    • Something about apps within Messenger
      • Ditty
      • GIF
      • Giphy
      • FlipLip Voice Changer
      • ESPN App
      • There are 40 apps.
  • Messenger for Business
    • crypto email for the young pepole
    • data mine the receipts for trak-n-targ.
  • Facebook Comments
    • Plugins for comments
  • 360° Video “soon”
    • Something about multiple cameras
  • Parse SDK for Internet of Things (IoT)
    • Parse Explorer, a debugger
  • Facebook pays, has paid, developers
  • Facebook Analytics
    • for Apps
  • Facebook Video Player, embedded videos
  • Virtual Rality is cool, no announcement
  • WhattsApp, no announcement
  • Facebook, has deep learning
  • Facebook Ads
    • LiveRail
    • Partners (twelve)
      • AppsFlyer
      • AppLift
      • AppLovin
      • Appsalar
      • Fyber (SponsorPay)
      • Kochava
      • InMobi
      • Millennial Media
      • Supersonic
      • Tune
    • Non-participants
      • Apple iAd
      • Google
      • Twitter
      • Yahoo
    • No announcements
      • Facebook Custom Audiences
      • Facebook Exchange (FBX)
      • Atlas
    • Claim: native ads “work: 7x better than banner ads


  • Deborah Liu, Facebook Platform
  • David Marcus, Messenger Platform
  • Mark Trefgarne, Product Director (and former LiveRail CEO), LiveRail of Facebook.

Via: backfill

SOLVED: How does one convert a normal (non-bare) Git Repository to a bare repository?

git clone --bare source-reponame target-reponame

Yet doing a clone doesn’t preserve config options,


Replace the contents of repo with the contents of repo/.git, then tell the repository that it is now a bare repository.

cd repo
mv .git .. && rm -fr *
mv ../.git .
mv .git/* .
rmdir .git
git config --bool core.bare true
cd ..; mv repo repo.git # renaming just for clarity



The problem is exhibited as

Whereas Google Code is Dead Code Walking, one must acquire control of the code left thereon.  Copying dbd-modules from Subversion SCM to Git SCM via the recipe.

$ git clone ../svn/dbd-modules ../git/dbd-modules
...time passes...
$ cd /views
$ git clone ssh://
$ vi ...files...
$ git commit
Waiting for Emacs...
[master 8512c73] document the README, LICENSE A regular Makefile ... that crudely builds
 3 files changed, 259 insertions(+)
 create mode 100644 LICENSE
 create mode 100644 Makefile
 create mode 100644 README

$ git remote -v
origin	ssh:// (fetch)
origin	ssh:// (push)

$ git push
warning: push.default is unset; its implicit value is changing in
Git 2.0 from 'matching' to 'simple'. To squelch this message
and maintain the current behavior after the default changes, use:

  git config --global push.default matching

To squelch this message and adopt the new behavior now, use:

  git config --global push.default simple

See 'git help config' and search for 'push.default' for further information.
(the 'simple' mode was introduced in Git 1.7.11. Use the similar mode
'current' instead of 'simple' if you sometimes use older versions of Git)

Counting objects: 6, done.
Delta compression using up to 12 threads.
Compressing objects: 100% (5/5), done.
Writing objects: 100% (5/5), 5.10 KiB | 0 bytes/s, done.
Total 5 (delta 1), reused 0 (delta 0)
remote: error: refusing to update checked out branch: refs/heads/master remote: error: By default, updating the current branch in a non-bare repository remote: error: is denied, because it will make the index and work tree inconsistent remote: error: with what you pushed, and will require 'git reset --hard' to match remote: error: the work tree to HEAD. remote: error: remote: error: You can set 'receive.denyCurrentBranch' configuration variable to remote: error: 'ignore' or 'warn' in the remote repository to allow pushing into remote: error: its current branch; however, this is not recommended unless you remote: error: arranged to update its work tree to match what you pushed in some remote: error: other way. remote: error: remote: error: To squelch this message and still keep the default behaviour, set remote: error: 'receive.denyCurrentBranch' configuration variable to 'refuse'. To ssh:// ! [remote rejected] master -> master (branch is currently checked out) error: failed to push some refs to 'ssh://'

What you don’t know about Internet algorithms is hurting you | Washington Post

What you don’t know about Internet algorithms is hurting you. (And you probably don’t know very much!); Caitlin Dewey; In The Washington Post; 2015-03-23.

tl;dr => entertainment uses algorithms, algorithms are bad



In archaeological order, newer more derivative works on top, older original matieral down below


The branded concepts of the activism


Pantheon of the activists, cited
  • Eli Pariser
    attributed as an activist
  • Christian Sandvik
    attributed as a communications researcher
  • Zeynep Tufekci
    attributed as a sociologist



This is just a silly & transparent ploy to make a connection to a non-technical audience.  Everyone can relate to Important Art.

Progression: Triptych

OkCupid Compatibility CalculationHello WorldVia: backfill

Certificate Transparency

Certificate Transparency, a project of Google


  • RFC 6962Certificate Transparency; Ben Laurie, Adam Langly, Emilia Kasper (Google); IETF; 2013-06.
  • NIST Workshop; 2013-04.
    • Certificate Transparency (Presentation I); Adam Langley, Ben Laurie Emilia Kasper, Al Cutter, Stephen McHenry (Google); 17 slides
    • New Window of Opportunity (Presentation II); Ben Wilson (DigiCert); 11 slides
      Teaser: Certificate Transparency – A Certification Authority’s Perspective
  • Ben Laurie, Cory Doctorow; Computing: “Secure the Internet”; In Nature, Issue 491; 2012-11-15; paywalled.



Certificate Transparency Project

Via: backfill

Attention Decay in Science | Della Briotta Parolo, Pan, Ghosh, Huberman, Kaski, Fortunato

Pietro Della Briotta Parolo, Raj Kumar Pan, Rumi Ghosh, Bernardo A. Huberman, Kimmo Kaski, Santo Fortunato; Attention Decay in Science; preprint; Elsevier (submitted to some journal of theirs); submitted: 2015-03-09; 12 pages; arXiv:1503.01881.


The exponential growth in the number of scientific papers makes it increasingly difficult for researchers to keep track of all the publications relevant to their work. Consequently, the attention that can be devoted to individual papers, measured by their citation counts, is bound to decay rapidly. In this work we make a thorough study of the life-cycle of papers in different disciplines. Typically, the citation rate of a paper increases up to a few years after its publication, reaches a peak and then decreases rapidly. This decay can be described by an exponential or a power law behavior, as in ultradiffusive processes, with exponential fitting better than power law for the majority of cases. The decay is also becoming faster over the years, signaling that nowadays papers are forgotten more quickly. However, when time is counted in terms of the number of published papers, the rate of decay of citations is fairly independent of the period considered. This indicates that the attention of scholars depends on the number of published items, and not on real time.

Via: backfill

HOWTO: Use Client-Supplied Certificate Authentication on a WordPress Blog

Client Certificate Authentication; a WordPress Plugin


 <Location /wp-login.php>
    SSLVerifyClient optional
    <IfModule mod_rewrite.c>
        RewriteEngine   on
        RewriteCond  %{HTTP_USER_AGENT}  .*Safari.*
        RewriteCond  %{SSL:SSL_CLIENT_VERIFY} !=SUCCESS
        RewriteRule  .* /wp-admin [redirect,last]
<Location /wp-admin>
    SSLVerifyClient require

Not Covered

Once the plugin is in place, all interfaces that once used passwords will need to use an appropriate client certificate.  For example the WordPress API.

<Location /xmlrpc.php>
    SSLVerifyClient require



Configuration of WordPress is “standard.”  Get that working first.

Plugin: Client Certificate Authentication

Via: instructions, FAQ.

Apache httpd


<VirtualHost *:443>
    SSLEngine On
    SSLCertificateFile      pki/trustanchor/com.baker.STAR.crt
    SSLCertificateKeyFile   pki/trustanchor/com.baker.STAR.key
    SSLCertificateChainFile pki/trustanchor/intermediate.crt
    SSLCACertificateFile    pki/bloggists/all.crt
    SSLCARevocationFile     pki/bloggists/revocation.crl
    # SSLCADNRequestFile (defaults to SSLCACertificateFile)
    # <ifVersion >= 2.4> SSLCARevocationCheck  chain
    DocumentRoot /var/wordpress/t99
    <Directory "/var/wordpress/t99">
	Options Indexes FollowSymLinks
        # AllowOverride is needed to get wordpress permalinks to work (respect .htaccess)
	AllowOverride All
        # This is needed for permalinks to work on WordPress without using .htaccess files
	RewriteEngine On
        RewriteBase /
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteCond %{REQUEST_FILENAME} !-d
	RewriteRule . /index.php [L]
    RedirectMatch permanent ^/credits?(/|/.*)?$$1
    RedirectMatch permanent ^/polic(y|ie)s?(/|/.*)?$$2
    Redirect permanent /robots.txt
    Header set P3P "CP=\"There is no P3P policy. Learn why here:\""
    <Location /wp-login.php>
	SSLVerifyClient optional
	RewriteEngine   on
	RewriteRule  .* /wp-admin [redirect,last]
    <Location /wp-admin>
	SSLVerifyClient require
        SSLOptions +FakeBasicAuth +ExportCertData
	# The plugin consults
	#   SSL_CLIENT_S_DN_CN for the name.
	#   SSL_CLIENT_S_DN_Email for the email
        SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)-/ and %{SSL_CLIENT_S_DN_O} eq "Baker" and %{SSL_CLIENT_S_DN_OU } in {"Bloggist", "Bloggists"} )

Via: backfill

Federal Trade Commission Workshop on Cross-Device Tracking on 2015-11-16

Workshop on Cross-Device Tracking at the Federal Trade Commission; 2015-11-16.


  • Jessica Rich, Director of the Bureau of Consumer Protection, Federal Trade Commission.
  • Lesley Fair, bloggist, George Washington University, Federal Trade Commission.


  • What’s the state of the art?
  • How are companies tracking consumers across different devices?
  • What are the pros and cons for consumers and advertisers?
  • What does the privacy and security landscape look like?
  • How can companies be more transparent about what they’re doing?
  • What can be done to give consumers more control?
  • How do existing industry self-regulatory programs apply?


<quote ref=”presser“>The use of multiple devices creates a challenge for companies that want to reach these consumers with relevant advertising.  The traditional method of using cookies to track consumers’ online activities are proving to be less effective. A cookie may not provide  a complete picture of a consumer who uses different web browsers at home, at work and on their mobile device, for example.
Industry has adopted different approaches to address this issue, from simply having consumers log in to be able to use a site or service from a different device, to methods that rely on various characteristics about a user to match their behavior from one device to another – often without the consumers’ awareness or control.</quote>


  • 2015-03-18 Questions Posed
  • 2015-10-16 Public commentariat closes
  • 2015-11-16 Workshop
  • 2015-12-16 Post-workshop commentariat closes



Via: backfill


Gimbal, Inc.
11010 Roselle St, Ste 150
San Diego CA 92121-1226
United States

Gimbal Store

Gimbal Proximity BeaconsGimbal Proximity Beacon Specification Sheet

Gimbal Proximity SDK Deployment ConceptMonetization

  • This is a “for rent” scheme
    You don’t own these devices or control the service, not really. PAYGO-in-the-Cloud.
  • Use of Gimbal beacons requires a Gimbal Developer Account
  • Fees follow the count of user count
    the number of users whose devices use the Gimbal SDK and contact the Gimbal backend servers.

References: Daniel Eagle


  • Accuracy: maybe.
  • Cost: seems cheap enough
  • Proprietary Lockin: mild but definitely present; c.f. that library jarfile SDK.
  • Platform Lockin: iOS is definitly the primary
    Android seems a very very distant second thought.
  • Organizational Reliabliity: it’s a PAYGO-in-the-Cloud service model
    This seems to be the centerpiece risk issue.
    <quote>Also, in order for the SDK to work it has to call home to the Gimbal backend service once every 24 hours.</quote>

The devices, SDK & service are closed and single-supplier.  Your use is dependent upon the kindness & SLAs of Gimbal’s financial health.  Fear this and plan for this as you design. Envision that you’ll wake up some morning to read that they are shutting down the service (they can’t run it even at cost, they’ve sold it, they’ve found a better business model with someone else, they need to move offshore to get access to cheaper labor, etc.).


  • Supports
    • Apple-native
    • Android
      • Client deployment is new & rough; beta.
      • Manager app is not available.
  • Line
    • Series 10
    • Series 20
    • Series 21
  • Gimbal Beacon Manager App (Apple only)
  • Beacon Proximity Beacon Series, specification; 1 page (all 3 products)
    • Bluetooth® Smart (aka Bluetooth 4.0 Low Energy)
    • Channels at 2.4GHz for non-connectable advertisements.
      • Channel 37 (2402MHz)
      • Channel 38 (2426 MHz)
      • Channel 39 (2480 MHz)
    • Compatible with iBeacon.
    • Configurable via Gimbal Manager/Gimbal Beacon Manager App
    • Modes
      • foreground
      • foreground/background
    • Levels
      • Low => -23dBm
      • Full => 0dBm, expect 164 ft (50m)
  • Gimbal Manager Servers




Via: backfill.


  • Eventbase
    • The app lets you meet people who are “nearby”
    • Concepts
      • indoor location
      • indoor geo-location
      • “hyper-local networking.”
    • Promotional Partners
      • USA Networks
      • something about experiential marketing at the conference
  • Jeff Sinclair, co-founder, Eventbase
  • Ben West,, co-founder, Eventbase.
  • Gimbal
    • spun out of Qualcomm
    • Transmitter units are $3-$50.


(the Conference App)

Eventbase South by Southwest mobile app

Beyond Retail, Savvy Marketers Can Use Beacons in 2015 | Signal

Beyond Retail, Savvy Marketers Can Use Beacons;; (Signal); In Their Blog; 2015-03-19.
Nick Knise was an intern at Signal; he is an undergraduate at Northwestern University.


Signal Products

A recitation
  • Signal Fuse Platform
  • Signal Open Data Platform
  • Signal Unfied Customer View


  • Stroking Data Gold: Apple iBeacons; Tomas Rodriguez (Signal); In Their Blog; 2014-10-22.
    Tomas Rodriguez is Product Marketing Manager at Signal.

    • Apple iOS 8
    • iWatch
    • iBeacon
    • Bluetooth
    • Something vague about privacy
    • Something about how a shopping cart appears on the lock screen when the marketers are pounding your box; attributed to Apple Insider.



A recitation
  • Macy’s
  • Dockers
  • UGG


a recitation
  • Airport of Copenhagen
  • Airport of Shanghai
  • Airport of Miami
  • National Slate Museum, Wales, UK
  • National Roman Legion Museum, Wales, UK


Via: backfill

Geofencing API | W3C

Geofencing API; editor: Marijn Kuisselbrink (Google); W3C; 2015-03-18.


  • Service Workers; editors: Alex Russell (Google), Jungkee Song (Samsung), Jake Archibald (Google); Working Draft; W3C; 2015-02-03.
  • Geolocation API Specification; editor: Andrei Popescu.(Google);  Recommendation; W3C; 2013-10-24.
  • Web IDL; editor: Cameron McCormack (Mozilla); Candidate Recommendation; W3C; 2012-04-19.


The following code extracts illustrate how to use this API to be notified of geographic regions being entered or left.

Example 1: Monitor a region
  function(serviceWorkerRegistration) {
        new CircularGeofenceRegion({
          name: "myfence",
          latitude: 37.421999,
          longitude: -122.084015,
          radius: 1000
        }), {includePosition: true}).then(
      function(geofence) {
        // If more than just a name needs to be stored with a geofence, now
        // would be the time to store this in some storage.
      }, function(error) {
        // During development it often helps to log errors to the
        // console. In a production environment it might make sense to
        // also report information about errors back to the
        // application server.
Example 2: Respond to a region being entered
self.ongeofenceenter = function(event) {

  // If this is not a geofence of interest anymore, remove it.
  if ( !== "myfence") {
Example 3: Respond to an error condition
self.ongeofenceerror = function(event) {

  // Some error condition occured. The region is no longer monitored, and won't
  // trigger any more events.

  // Try to re-monitor, although depending on the error this might fail.
    function(geofence) {
      // re-monitoring succeeded, new geofence will have a different ID.
    }, function(error) {
      // re-monitoring failed.
Example 4: Unmonitor a region in response to some other event

// Either look geofence up by name:
self.onsomeevent = function(event) {
  event.waitUntil(self.registration.geofencing.getAll({name: "myfence"}).then(
    function(geofences) {
      for (let i = 0; i < geofences.length; ++i) {

// Or look geofence up by ID:
self.onsomeotherevent = function(event) {
  let geofence_id = "" /* somehow get the ID of a geofence */;
    function(geofence) {

Via: backfill

git svn, svnsync | Git and Subversion


Google Code is now Dead Code Walking, it’s time to acquire copies of the necessary sources mastered there.


dbd-modulesSeveral Apache modules to allow Apache 2.2+ to access databases using DBD



cd /vault/git/svn/
mkdir dbd-modules
svnadmin create dbd-modules
cat > dbd-modules/hooks/pre-revprop-change <<EOF
exit 0;
chmod +x dbd-modules/hooks/pre-revprop-change

svnsync init file:///vault/git/svn/
# one line of output

svnsync sync file:///vault/git/svn/ 
# ... lots and lots of output

cd /vault/git/clones
git svn clone file:///vault/git/svn/ -T trunk -b branches -t tags

Also, -s is the same as -T trunk -b branches -t tags

SOLVED: POST fails in SSL with ‘request body exceeds maximum size (131072) for SSL buffer’


  1. Turn KeepAlive to On
  2. Set SSLRenegBufferSize to a very large value


  • Large media uploads fail in WordPress
  • Where “large” is over 128K.



The apache log files indicate this problem with lines of the form

request body exceeds maximum size (131072) for SSL buffer, referer:
could not buffer message body to allow SSL renegotiation to proceed, referer:


  • Ensure that a GET occurs before the POST such that SSL renegotiation does not occur in the same SSL session.
  • Thus KeepAlive is required..
  • Ensure that the KeepAlive interval is respected between the GET and the POST.
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 30



Archaeological order … more original materials deeper down the stack…

Data Brokers: A Call for Transparency and Accountability | FTC

Data Brokers: A Call for Transparency and Accountability; Federal Trade Commission; 2014-05; 110 pages.



  1. Acxiom
  2. Corelogic
  3. Datalogix
  4. eBureau
  5. ID Analytics
  6. Intelius
  7. PeekYou
  8. RapLeaf
  9. Recorded Future



Via: backfill.

Installing Cgit on Fedora 18 with Apache v2.4


  • Fedora 18 (2013)


$ rpm -q cgit
$ rpm -q -l cgit

Um … wow, for a point-ought release there sure is a lot of new stuff! Contra Semantic Versioning v2.0.0 and Jimi Wales Wiki.


SOLVED[fail]: Android WebView does not support Client Certificates at all

Problem Statement



Partial success…

  • Webware => just works
    • desktop officework browser
      i.e. Firefox 29+
    • mobile browser => “just works”
      i.e. Chrome 40, Blink 537.36, Android 4.4.4 (what is that, Jelly Bean, Key Lime Pie?, Lollipop?)
  • Appware => FAIL
    • Android does not work, cannot be made to work.
    • WordPress Android is unuseable in this mode.

Environment: Webby Officework Desktop

Outcome: just works


  • Firefox (Fedora) “just works”
  • Chrome (Android) “just works”


  • User receives the certificate as a PKCS #12 (a .p12 file)
  • Install fhe certificate
    • … in the browser (Firefox, Linux)
    • … in the operating system (Android)

Environment: WordPress Android

Outcome: FAIL

  • Do not use Android WordPress on these blogs
  • Use the webby interface with Chrome.
  • WordPress Android uses an embedded WebView which does not implement client certificates at all.


Others have tried … but Android does not yet support this concept