July 2018 - Blind-sysadmins - lists.hodgsonfamily.org

Enabling memory integrity protection on Windows 10 Pro 1803
by Jason White 12 Aug '18

12 Aug '18

On the aforementioned Lenovo laptop (Windows 10 Pro 1803 with updates applied), I tried unsuccessfully to enable memory integrity protection in Windows Defender Security Center to improve over-all security. First, I discovered scripts on Lenovo's Web site that enabled me to change the UEFI (BIOS) settings from within Windows. https://support.lenovo.com/us/en/solutions/ht100612 This is much better than having to enlist help to change the firmware configuration. I enabled Intel virtualization support, then rebooted the machine and confirmed that virtualization was in fact enabled using System Information. I wanted virtualization anyway, so this was a desirable change on multiple grounds - not only the need to enable it for virtualization-based security. I then tried to enable memory integrity protection in Windows Defender Security Center. The resulting error message, presented as a notification, asserts: "Memory integrity can't be started. There may be an incompatability.. There may be an incompatability on your device.. . Received at 8:51 PM" I'm curious - has anyone else here tried it, and if so, with what results? I'm running JAWS 2018, although I have no reason to believe that it may be involved other than the fact that it uses its own video and braille display drivers. Various hardware drivers from their respective vendors are of course installed as well. For anyone who has enabled Memory Integrity Protection, have there been any adverse consequences?

2 2

letsencrypt with acme.sh
by David Mehler 31 Jul '18

31 Jul '18

Hello, Do we have anyone using acme.sh to issue letsencrypt wildcard certificates? If so, I'm wondering which one of these commands is right? The first is: acme.sh --issue --dns dns_api -d example.com -d '*.example.com' --ecc --keylength ec-256 --ocsp this seems like it's asking for a tld and then the same domain with a wildcard. Or is this one right? acme.sh --issue --dns dns_api -d '*.example.com' --ecc --keylength ec-256 --ocsp Thanks. Dave.

2 1

Re: networking, static printer, subnets, bridging, ddwrt
by Chris T 28 Jul '18

28 Jul '18

I haven’t DDWRT, but it might be possible to add a second IP address to the Rueter in the range the printer is in. Alias IP address. I seem to remember doing this using the command line IP addr add command. used Cheers Chris Turner Sent from mobile. > On 28 Jul 2018, at 11:41, Andrew Hodgson <andrew(a)hodgson.io> wrote: > > Hi, > > You may be able to do something with Arp on the clients but why on earth do you not want to change the printer's IP address? Even at work I never really configured anything with statics for this reason, if stuff had a static IP address it went into the DHCP reserved table. > > Andrew. > > -----Original Message----- > From: David Mehler <dave.mehler(a)gmail.com> > Sent: 28 July 2018 06:53 > To: blind-sysadmins <blind-sysadmins(a)lists.hodgsonfamily.org> > Subject: [Blind-sysadmins] networking, static printer, subnets, bridging, ddwrt > > Hello, > > I've factory reset my ddwrt router and configured it per request on a > non-1 subnet specifically 192.168.200.0/24. In doing so I neglected to remember that my printer does not get it's IP via dhcp nor a dhcp reservation, it's statically assigned in this case my old subnet configuration of 192.168.1.200. > > My question is can I via a bridge or a vlan, set up ddwrt so that anyone on 200.0/24 can see the printer and when jobs are sent to it they go to that bridge/vlan and arrive at the printer for printing. > Changing the printer interface is preferably not possible. > > Thanks. > Dave. > _______________________________________________ > Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org > To unsubscribe send an email to blind-sysadmins-leave(a)lists.hodgsonfamily.org > _______________________________________________ > Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org > To unsubscribe send an email to blind-sysadmins-leave(a)lists.hodgsonfamily.org

3 2

networking, static printer, subnets, bridging, ddwrt
by David Mehler 28 Jul '18

28 Jul '18

Hello, I've factory reset my ddwrt router and configured it per request on a non-1 subnet specifically 192.168.200.0/24. In doing so I neglected to remember that my printer does not get it's IP via dhcp nor a dhcp reservation, it's statically assigned in this case my old subnet configuration of 192.168.1.200. My question is can I via a bridge or a vlan, set up ddwrt so that anyone on 200.0/24 can see the printer and when jobs are sent to it they go to that bridge/vlan and arrive at the printer for printing. Changing the printer interface is preferably not possible. Thanks. Dave.

2 1

ddwrt, shortcut forwarding engine, and bluetooth coexistence mode?
by David Mehler 28 Jul '18

28 Jul '18

Hello, To any users of dd-wrt v24 3.x recent builds. I've got two options i'm not sure of and searching makes me more confused. The first, which is enabled is shortcut forwarding engine. The second which is disabled for both 2.4 and 5Ghz networks is bluetooth coexistence. Impressions appreciated. Thanks. Dave.

2 1

Re: ownCloud or nextCloud accessibility issues?
by David Mehler 24 Jul '18

24 Jul '18

Hello, Thanks for your reply. Do you want to see the entire phpinfo output or just know that I can get it? If the latter then yes I can get phpinfo output. The requested information is below: access.log: xxx.xxx.xxx.xxx- - [24/Jul/2018:12:08:23 -0400] "GET / HTTP/1.1" 301 237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko" xxx.xxx.xxx.xxx- - [24/Jul/2018:12:08:33 -0400] "GET / HTTP/2.0" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko" xxx.xxx.xxx.xxx- - [24/Jul/2018:12:08:33 -0400] "GET /index.php/apps/files/ HTTP/2.0" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko" xxx.xxx.xxx.xxx- - [24/Jul/2018:12:08:33 -0400] "GET /index.php/apps/files/ HTTP/2.0" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko" xxx.xxx.xxx.xxx- - [24/Jul/2018:12:08:33 -0400] "GET /index.php/apps/files/ HTTP/2.0" 403 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko" error.log: [Tue Jul 24 12:08:33.748625 2018] [:error] [pid 62256:tid 34546620160] [client xxx.xxx.xxx.xxx:55878] client denied by server configuration: /usr/local/www/nextcloud/index.php Virtual host configuration: # The cloud.example2.com http virtual host <VirtualHost *:80> ServerAdmin webmaster(a)example2.com ServerName cloud.example2.com DocumentRoot "/usr/local/www/nextcloud/" ErrorLog /usr/vhosts/example2.com/logs/error.log CustomLog /usr/vhosts/example2.com/logs/access.log combined ErrorDocument 404 /errordocs/error404.htm # share well-known for renewal via Let's Encrypt! Alias "/.well-known/acme-challenge" "/usr/local/www/.well-known/acme-challenge" <IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{REQUEST_URI} !^/.well-known/acme-challenge/.* RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [QSA,L,R=301] </IfModule> </VirtualHost> # The example2.com https virtual host <VirtualHost *:443> ServerAdmin webmaster(a)example2.com ServerName cloud.example2.com DirectoryIndex index.php DocumentRoot "/usr/local/www/nextcloud/" ErrorLog /usr/vhosts/example2.com/logs/ssl-error.log CustomLog /usr/vhosts/example2.com/logs/access.log combined ErrorDocument 404 /errordocs/error404.htm # Uncomment the below 2 lines when deploy http2 H2Direct on Protocols h2 h2c http/1.1 SSLEngine on SSLCertificateFile "/usr/local/etc/ssl/acme/example2.com/fullchain.pem" SSLCertificateKeyFile "/usr/local/etc/ssl/acme/private/example2.com/privkey.pem" # HSTS (mod_headers is required) (15768000 seconds = 6 months) Header always set Strict-Transport-Security "max-age=15768000" #AcceptPathInfo On <Directory "/usr/local/www/nextcloud/"> Options FollowSymLinks SSLRequireSSL AllowOverride All Require all granted </Directory> <Directory "/usr/local/www/nextcloud/apps/"> Options FollowSymLinks SSLRequireSSL AllowOverride All Require all granted </Directory> <Directory "/usr/local/www/nextcloud/apps/files/"> Options FollowSymLinks SSLRequireSSL AllowOverride All Require all granted </Directory> </VirtualHost> Thanks. Dave. On 7/24/18, Andrew Hodgson <andrew(a)hodgson.io> wrote: > Hi, > > Post the web server logs and also can you get a phpinfo page running? [1] > > 1: > https://mediatemple.net/community/products/dv/204643880/how-can-i-create-a-… > > Andrew. > ________________________________________ > From: David Mehler [dave.mehler(a)gmail.com] > Sent: 24 July 2018 16:15 > To: Blind sysadmins list > Subject: [Blind-sysadmins] Re: ownCloud or nextCloud accessibility issues? > > Hi, > > Thanks, I don't see how, I did a chown -R www:www nextcloud so the web > server should be able to read everything. > > Thanks. > Dave. > > > On 7/24/18, Simon Eigeldinger <simon.eigeldinger(a)vol.at> wrote: >> seems to be a permissions problem there with your files. >> >> >> Am 23.07.2018 um 02:35 schrieb David Mehler: >>> Hi, >>> >>> Thanks. I've got nextcloud installed with tasks, notes, and contacts >>> installed. I'm getting an error about forbidden can not access >>> /index.php/apps/files/ when I atempt to access the main page and/or >>> trying to set the admin usage. >>> >>> Thanks. >>> Dave. >>> >>> >>> On 7/21/18, Simon Eigeldinger <simon.eigeldinger(a)vol.at> wrote: >>>> Hi Dave, >>>> >>>> Well we use nextcloud which should be used anyway. >>>> owncloud basically is maintained now like openoffice. >>>> the accessibility could need some love but it works. >>>> it needs a little bit of playing around sometimes but in total it >>>> works. >>>> >>>> Greetings, >>>> Simon >>>> >>>> >>>> Am 21.07.2018 um 21:52 schrieb David Mehler: >>>>> Hello, >>>>> >>>>> Do we have any users who have set up and used either or both of >>>>> ownCloud and nextCloud? If so, what are your impressions regarding any >>>>> accessibility issues with the UI or any clients >>>>> Android/iOs/Windows/Mac/Linux? >>>>> >>>>> Any issues or opinions appreciated. >>>>> >>>>> Thanks. >>>>> Dave. >>>>> _______________________________________________ >>>>> Blind-sysadmins mailing list -- >>>>> blind-sysadmins(a)lists.hodgsonfamily.org >>>>> To unsubscribe send an email to >>>>> blind-sysadmins-leave(a)lists.hodgsonfamily.org >>>>> >>>> >>>> --- >>>> Diese E-Mail wurde von Avast Antivirus-Software auf Viren geprüft. >>>> https://www.avast.com/antivirus >>>> _______________________________________________ >>>> Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org >>>> To unsubscribe send an email to >>>> blind-sysadmins-leave(a)lists.hodgsonfamily.org >>>> >>> _______________________________________________ >>> Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org >>> To unsubscribe send an email to >>> blind-sysadmins-leave(a)lists.hodgsonfamily.org >>> >> _______________________________________________ >> Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org >> To unsubscribe send an email to >> blind-sysadmins-leave(a)lists.hodgsonfamily.org >> > _______________________________________________ > Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org > To unsubscribe send an email to > blind-sysadmins-leave(a)lists.hodgsonfamily.org > _______________________________________________ > Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org > To unsubscribe send an email to > blind-sysadmins-leave(a)lists.hodgsonfamily.org >

1 0

ownCloud or nextCloud accessibility issues?
by David Mehler 24 Jul '18

24 Jul '18

Hello, Do we have any users who have set up and used either or both of ownCloud and nextCloud? If so, what are your impressions regarding any accessibility issues with the UI or any clients Android/iOs/Windows/Mac/Linux? Any issues or opinions appreciated. Thanks. Dave.

3 5

enabling remote audio as a blind person
by Armin Moradi 23 Jul '18

23 Jul '18

Hello, i have an v-Server, running Windows Server 2008 R2. I want enabling audio for my remote Desktop connection. How i enable remote audio for the remote desktop connection? Regards Armin Moradi

2 1

Accessible voice and text chat clients/systems
by Bill Dengler 23 Jul '18

23 Jul '18

Hello, This might not be the right list for this sort of thing, but I figured it’d be worth a shot. With Skype’s accessibility degrading on Windows and virtually disappearing on the Mac after recent updates, I’m looking for alternatives. I’m looking for a service (or collection of services used together) for realtime voice and text chat. The services must have accessible, native (i.e. not a web view) apps on Windows, Mac, iOS and Android. I am willing to consider an app with a web view if accessibility is excellent. Incoming text chat messages must be automatically read aloud for JAWS users. The following features are nice to have, in rough order of most to least important, but are not required: 1. Automatic reading of incoming text chat messages for NVDA, VoiceOver users. 2. End-to-end encryption. 3. Use of the Opus codec (or something similar) allowing for high, yet stable audio quality depending on network conditions. 4. Conference/group chat support. 5. Based on open standards (or has a public API), so if the app breaks we can find/write another. A few options I thought of: faceTime/iMessage: doesn’t work for Windows/Android/non-Apple users. Whatsapp/Signal/Slack: desktop apps are web based Discord: desktop app is web based, reports of inaccessibility on mobile Telegram: accessibility on mobile is hit and miss Google Duo/Alo: no desktop apps at all Running my own XMPP/SIP server: no XMPP clients that I know of autoread for JAWS, I am responsible for running my own servers (not in itself a bad thing but makes it harder to communicate with those not connected to my server), difficult to use for nontechnical users. Twiter direct messages: will not be realtime after streaming API is shut down, no solution for voice chat. Any ideas on other services I can investigate? Thanks in advance, Bill

5 9

Win 10 Pro and sysprep
by Eigeldinger Simon 20 Jul '18

20 Jul '18

Hi all, Anyone done a sysprep on win 10 pro? I seem to have issues with the win 10 standard apps. I have also read a buch of stuff online but some talked about nearly taking windows apart to make a sysprep with generalizing and some where not giving hints. Greetings and thanks, Simon

3 5