This site is not dedicated to mobile devices, however since it is in mobi TLD I'll try to adopt its content to be browsable on handheld with at least 600x* resolution. This is the reason for a top ruler - to define width boundaries.

Otherwise - welcome to my place and hope at least something from here will be usefull to someone.

As the time passes I'm steadily approaching mobile technology area. Well, will see what is going to happen with all of this.

IPSec with DNSSEC v2

Back to our business. On 11 Oct a patch to enable DNSSEC protected DANE CERTs was merged to StrongSWAN's upstream so now you can have interoperability between racoon and strongswan if you need to use CERTs for easy deployment.

The approach is pretty the same, only with StrongSWAN you have additional DNSSEC validation (racoon blindly trusts underlying DNSSEC implementation).

Sat May 10 12:03:26 2014

TT-RSS - why not?

There are many news aggregators, especially after google's improvement on a reader service. All of them however are part of some fog... steam... ah, cloud!

I on the other hand am a cloud to myself. So here TinyTiny RSS aggregator is a perfect match to my needs. Lightweight, no stupid dependencies (well, except phph, but that's bearable), good online web ui and api and hence - external clients

Thu Mar 27 08:22:52 2014 Upd.: Wed Apr 23 23:24:00 2014

Back to basics: PIC is not PC

Microprocessors are good, but don't forget about microcontrollers. Microprocessors are smart but they are flawed - they are too generic, too complex, running too complex code and hence unreliable. Microcontrollers are perfect implementation of KISS. So let's look back to low level - asm, mics, ICs, MCUs, etc.

Sat Nov 2 21:51:36 2013 Upd.: Sun Nov 3 16:18:53 2013

Back to basics: AVR et al.

I was looking closely for a long time to Arduino, however it looked to me always as a way too narrow or too specialised solution. Until I stumbled upon this. And here I understood - I simply must have it.

Sat Nov 2 22:39:24 2013 Upd.: Sun Nov 3 16:02:58 2013

BlueZ 5

Life goes on, everythng changes. With new bluez tree fakehid was completely wiped out from bluetoothd userspace. Now, thanks to David Dillow ps3bt code lives in HID kernel code since commit 5844c1cdb630b537a2ecdf74dab2985e51dc1bd9. Let see how it works...

Sat Nov 10 23:17:31 2012 Upd.: Sat Oct 5 15:16:20 2013

DNS Security

I have always been adept of DJB, sharing his ideas and attitude to ISC products. I still share attitude, and I eager to support new technologies. Indeed. However DJB dns server, despite being neat, light and efficient - does not support many of new stuff. Including IPv6. And DNSSEC. Ok, I know about that amplification and other stuff, however it is here, and now, and works.

Sat Feb 12 05:34:11 2011 Upd.: Fri Aug 16 21:35:53 2013


Since future has come, we need to pace ahead and utilize its merits. One of the benefits of having DNSSEC is independence in making own certs (with DANE) and simplified roll-out of those certs (with CERT RR).

Wed Aug 14 08:43:41 2013

PulseAudio - Connecting the fridge

Granted the fridge has audio components of course...

Now, once we have our audio bus on Jack's shoulders, we can read more good ideas on how to live in this changing world.

Sat Jun 16 09:13:54 2012 Upd.: Sat Aug 3 12:08:37 2013


What I don't like the most is comunists and socialists. What I do like though is OpenSource movement and free beer.

Fri Jul 26 08:45:23 2013

Fuck you, Lenovo

I've recently bought probably the best laptop I've ever had - Lenovo E130, with probably, the worst OS I ever had - windows 8. Initially, knowing Czech distribution is in any case one of the worst in the world - I didn't bother much, and bough whatever model was available in local shops (you don't have a choice in Czech Republic really, never, only crappiest things available).

Tue May 7 23:46:31 2013 Upd.: Mon Jun 10 23:16:25 2013
© ruff 2011