Press "Enter" to skip to content

nuxx.net Posts

Marked Bottle

This evening I finally got around to marking up some of my water bottles with one-third and half marks. Since I frequently mix up two or three hours worth of sports drink stuff in them (typically from Infinit Nutrition) I like to drink half or one third of the bottle per hour. I’d previously guessed at what 1/3 and 1/2 of the volume would be, but apparently I was a bit off. The dent in the bottle must have thrown me a bit.

By the time these markings wear off I’ll likely have these levels memorized and won’t need to redo them.

(Note that this bottle contains enough mix to meet my caloric needs for three hours of riding. Despite being filled to just below the Breakaway Bicycles & Fitness logo it’ll all dissolve pretty readily in one bottle of water.)

Leave a Comment

Nupla PA375-LESG Pulaski Axe

Wednesday evening UPS delivered my new Pulaski, a tool combining an axe and an adz, and commonly used in wilderness firefighting and trail construction. I’ve been borrowing one for the past year or so but I wanted my own, so I looked around and ended up picking up this one, a Nupla PA375-LESG.

Made in the US and available from Amazon for ~$53 it seemed like a pretty reasonable purchase. I particularly like the ribbed handle which should make it feel a bit more solid when used with wet hands.

I also added this photo to the Wikipedia Pulaski article because it previously didn’t have a good photo of the tool’s head; just a man swinging the tool, with the head lost in shadows.

Leave a Comment

Boulevard Connector?

While out riding to Lake Orion and back on Tuesday I noticed that the construction of the connector between the Paint Creek Trail and the Kern Road safety path (near the Clarkston / Kern / PCT intersection) is nearing completion and it appears that the base of it will split into a boulevard (with a median / central reservation).

If this is the case and the extra path isn’t just for construction access it’ll be nice. This is a notoriously blind corner and coming down this path towards the PCT currently requires some careful looking and neck craning to be sure one doesn’t ride out in front of someone else. Hopefully this’ll improve the sight lines and make for a better intersection.

Leave a Comment

Timeouts with PHP as FastCGI, phpBB + reCAPTCHA + DNSBL, Apache 2.2, mod_fcgi, and FastCgiExternalServer

Sunday evening after migrating the MMBA Forum to a new webserver I received email from a user claiming that they were unable to sign up for the forum, receiving an 500 Internal Server Error some time after clicking submit. The problem ended up being the signup page taking longer than expected to run and timing out and was resolved by increasing the timeout by adding -idle-timeout 60 to the FastCgiExternalServer line in the vhost’s config.

More specifically, I’d just moved from an older server running lighttpd to a new one using the venerable Apache HTTP Server v2.2. Both setups had per-vhost FastCGI setups pointing to PHP instances running as the user who owned the vhost, which helps ensure that compromised PHP apps affect only files/sites owned by that the user.

For example, lighttpd would be set up something like this:

fastcgi.server = ( ".php" =>
  ( "socket" => "/var/run/php-fastcgi/username/username-php-fastcgi.sock",
    "check-local" => "disable",
    "broken-scriptfilename" => "enable"
  )
)

Apache uses something like this:

FastCgiExternalServer /var/run/php-fastcgi/vhosts/example.com -socket /var/run/php-fastcgi/users/username/username-php-fastcgi.sock
AddHandler php-fastcgi .php
Action php-fastcgi /php-fastcgi
Alias /php-fastcgi /var/run/php-fastcgi/vhosts/example.com

During the forum signup, to help cut down on the number of spammy accounts created, there are both reCAPTCHA and DNS Blacklist checks that occur before the account creation actually happens. These were taking longer than the default 30 second timeout, causing the FastCGI interface to time out and close the connection, resulting in log entries such as this:

[Sun Apr 15 20:00:09 2012] [error] [client 192.168.0.2] FastCGI: comm with server "/var/run/php-fastcgi/vhosts/mmba.org" aborted: idle timeout (30 sec)

This led me to increase the FastCgiExternalServer timeout in mod_fastcgi by adding -idle-timeout 60, doubling it from its default, as follows:

FastCgiExternalServer /var/run/php-fastcgi/vhosts/example.com -socket /var/run/php-fastcgi/users/username/username-php-fastcgi.sock -idle-timeout 60
AddHandler php-fastcgi .php
Action php-fastcgi /php-fastcgi
Alias /php-fastcgi /var/run/php-fastcgi/vhosts/example.com

The problem then went away.

I’m not exactly sure why this cropped up with the move to Apache, but I suspect that on lighttpd there was a considerably longer default timeout. This can be set in the lighttpd config by setting idle-timeout, but I wasn’t able to easily figure out what the default is. It’s possible I’ll have to further tune this further in the future, but at least I now know why the problem was occurring.

Yes, I know this isn’t a perfect solution, but it’s been proven to work when sites are compromised by automatic tools that attempt to change/delete all they can. In each case that I’ve experienced the damage has typically been limited to content in that user’s home directory. This would not be good mitigation against something which attempted privilege escalation once on the box, went after the httpd itself, etc.

1 Comment

Blanding’s Turtle Rescue

While out riding at Stony Creek today, just before finishing up a segment of single track, I came around a corner and almost hit a turtle. It was walking along the middle of some grooved, dry, sunny sandy single track, and liable to get run over. When I passed it quickly pulled its head and legs in, so after quickly stopping I was able to easily moved it off the trail, but not before taking this picture of it. On my next pass through the turtle was nowhere to be seen, so hopefully it has made its way back to a more suitable piece of land.

It turns out that this is a Blanding’s Turtle, a Michigan Protected Species. According to MSU it is categorized as S3, or “rare or uncommon in state (on the order of 21 to 100 occurrences)”.

Leave a Comment

Large Bottle of ProLink

I really like ProGold’s ProLink chain lube, and I’ve been using it for a couple years. Since my smaller 4oz bottles were running out I picked up a large 16oz one and refilled the others. With the large 16oz bottle costing around $19 on Amazon I was able to refill the smaller bottles for half the price of buying new ones. This worked out pretty well, and pouring from the soda bottle-sized neck into the small squeeze bottle necks was easier than planned.

The only odd / amusing thing is that the 16oz bottle comes with a spray head. As I normally lubricate my chain one drop at a time (one drop per roller) I can’t ever see the need for dumping that much chain lube on anything in one go. Maybe if I was using it to lube industrial chains… Maybe…

Leave a Comment

Arataki Manuka Honey

Some friends of mine (Erik and Kristi) recently took a trip to New Zealand, and they brought back some of this Arataki Manuka Honey. I’m really enjoying this stuff, as it’s a nicely thick, creamy honey with a very strong flower-y taste. It goes very well on medium-toasted English muffins.

Leave a Comment

New WickWërks Middle Rings

Today two new middle rings from WickWërks arrived in the mail. Earlier last week I emailed the folks over there asking about some rumored stainless steel middle rings, and while they replied saying that project is on hold, they offered me some replacement aluminum rings for $10/ea. That was a deal I couldn’t pass up, as I really like their rings and will likely have worn through my current middle ring by the end of the year.

They also mentioned a set of 22-33-44 tooth rings that are coming out soon… Those sound pretty nifty. I’d bet there’s something neat they figured out with the 11-tooth step between rings.

Leave a Comment

Scotch 2228 for Chainstay Protection

Up to this point I’d used an old tube cable-tied on for chainstay protection and it has worked out pretty well. Recently I’d been reading about 3M’s Scotch 2228 Rubber Mastic Tape for the same purpose, and when doing some spring cleaning on the Titus I decided to give it a go.

At $5.57/roll (1″ wide x 4′ long, found at Lowes) it wasn’t as cheap as a tube, but like the UHMW tape it’s far less than a specific commercial solution and looks much better. The tape comes on a paper-backed roll and sticks nicely to the frame like other materials, but the magic happens when the tape is laid on itself: it fuses together and becomes essentially a solid piece of rubber. This means that it cannot be removed once applied and one must get the initial installation right, but I found that peeling the tape off the backing just as it was wrapped worked nicely, tearing away the resulting strip of paper as it got too long.

After application the surface of the tape is very slightly tacky after application meaning that dust and lint readily sticks to it, but a quick wipe-down with glass cleaner removed this and seemed to seal the surface. I suspect that within a couple weeks it’ll be more similar to a rubber tube. The directions on the box recommend overwrapping it with electrical tape, but for bicycle uses I don’t think this’ll be necessary. To ensure that it was well stuck and fused I spent some time squeezing it snug against itself, and while doing this it only seemed to bind better.

The tape is to be stretched when installed, but with a base thickness of 1.65mm when half-lapped it builds up fairly quickly, ending up thicker than the wrapped tube I’d previously used. The one roll perfectly fit the chainstay, and I ended up finishing unrolling it just as I got near the end, so with a little bit of stretching it wrapped around and seated nicely. Here is another view of how it came out. There is another 3M / Scotch product, 2229 which is the same material but 3.2mm thick, but I think it’d be overkill for this application. Building up to 5-6mm of rubber (once stretched) will possibly contribute to clearance issues.

Time will tell if it holds up as nicely as cable-tied tube, but thus far I’m happy with this choice. It matches the frame nicely, is thicker than a tube, installed reasonably easily, was affordably priced, and was available locally.

2 Comments