Firefox 3 – “force” your add on compatible with it

  • On the url bar, type “about:config”
  • Right click on any of the empty space, click new –> boolean
  • In the box, preference name –> extensions.checkCompatibility
  • specified the value –> false

restart firefox and Voila !!!

mount hfsplus (mac os file system) under Debian linux

Have an external hard disk with hfsplus or hfs+ partition on it? This is how you can mount it under linux (specifically, Debian) :

in os x :

  • disable journaling in the partition/external hdd in disk utility or use run the command “diskutil disableJournal /dev/disk1s1″ in terminal.

in linux :

  • apt-get install hfs*
  • mount -t hfsplus -o rw /dev/sdb1 /mnt/extdisk

Voila !!!

How To Generate a Certificate Signing Request (CSR) for an SSL Certificate

This short tutorial is for Apache2.x + OpenSSL

It’s advice to make a special directory for certificate for easy management and control. Create a new directory;

mkdir -p /path-to-dir/sslcerts/example.takizo.com

And now cd to your working directory to start generate CSR cert.

cd /path-to-dir/sslcerts/example.takizo.com

You have 2 options here, generate private key with password or without password. One of the hassle of having password protected private key is it will prompt for password during apache start up, most of the time it’s by user preference whether to generate private key with password or not.

Generate Private Key

Generate key with password protected

openssl genrsa -des3 -out example.takizo.com.key 1024

Generate key without password protected

openssl genrsa -out example.takizo.com.key 1024

After you have generated the RSA private key, now it’s time to generate CSR with the RSA private you have created earlier.

openssl req -new -key example.takizo.com.key -out example.takizo.com.csr

Please take note on the prompt field while generating CSR key;

Common Name: Usually the domain name you would like to protect, if you are going to generate the key for http://example.takizo.com/index.php, the the Common Name would be example.takizo.com

Organization: Your organization name, for example Takizo Tech

Organization Unit: Your organization unit name, for example Systems Engineering

City or Locality: For example, Kuala Lumpur

State or Province: For example, Wilayah Persekutuan

Country: For example, Malaysia.

Submit your CSR to your SSL Certificate to your provider and wait for the CRT file. Also please take note that every SSL provider will equip with documentation on how to generate CSR. You are advice to follow the documentation.

Generate apache SSL Sign Key

Quick Tips for Apache’s SSL

generate new key
openssl req -new > takizo.cert.csr

disable passphrase for generated the key:
openssl rsa -in privkey.pem -out takizo.cert.key

convert request into signed cert
openssl x509 -in takizo.cert.csr -out takzio.cert.crt -req -signkey takizo.cert.key -days 1000

Malaysia ISP TMNet Blocked malaysia-today.net Through DNS NULL Route

Silly thing to know that MCMC instructed Malaysia’s monopoly ISP, TMNet to block off malaysia-today.net website through DNS null routing. Below is the result we found through TMNET’s DNS Servers;


dig @202.188.1.5 www.malaysia-today.net

; <<>> DiG 9.4.2 <<>> @202.188.1.5 www.malaysia-today.net
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55057
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;www.malaysia-today.net.                IN      A

;; AUTHORITY SECTION:
malaysia-today.net.     3600    IN      SOA     ns1.blocked. blocked.tm.net.my. 1 900 600 86400 3600

For your information It's not exactly blocking, but DNS null route blocking.

How Does DNS Null Route Works?

In DNS world, human being can't remember IP Addresses all the time, that's why DNS existed to translate a domain name to an IP address.

For example when you access to malaysia-today.net it will translate to 72.47.236.85, 202.71.97.141 or 202.75.62.114. Those who are using TM Net DNS, it will translate malaysia-today.net to 127.0.0.1 (localhost your machine local IP Address).

Further that, malaysia-today.net still able to access through IP Addresses list below;

72.47.236.85
202.71.97.141
202.75.62.114

No Censorship on Internet? My Foot!

No censorship on internet? F*** ME.. It's now happened in Malaysia. Besides, I strongly suggest user switch over to opendns for better surfing. Visit the website for more info. It seem like Tun Mahathir's effort of bringing up Cyberjaya (MSC) is drown by the government. No Censorship? Ahem...

Last but... not least... Soon or later I think MCMC will block chedet.com too :) So watch out Tun, your MSC has soon become MSCC (Multimedia Super Censorship Corridor!)