What exactly does redirect_program do? No one knows for sure, some say that it is the very reason the internet works, while others speculate that the previous statement is nothing but rubish. The world may never know, however just because we don’t know what it does doesn’t mean we can’t use it!

Ok but seriously what does the redirect_program tag actually allow us to do. This tag is used to specify the location of the executable for the URL redirector. So you can basicaly create a program that can rewrite the requested URLs that are passing though squid. So one could play around with the data that is passing though squid pretty much on the fly. What is great about it, is that it’s very easy to program for and has many real world uses.

None of which we will talk about here.

So being who I am, and knowing what I do. I decided to create a script that would take the data that users are getting and replace it with my own files. Because everyone and anyone was getting rick rolled or rick rolling others, I decided that I would make a proxy that would rick roll the user in just about
any way possible.

Thus the rick roll perl script for squid redirect_program was created. Or RRR for short. It can actually stand for 2 things there, Rick Roll Redirect or Rick Roll pRoxy. The choice is yours, I normally just call it the Rick Roll Proxy. But the name means nothing.

Now this is all fun but you need to actually edit your victims proxy settings if you want them to go though your proxy… at least if you don’t “OWN” the network. So while normally running this script on a squid box with apache is enough, I decided it would work best if we didn’t give the users a choice in
the matter.

So I’ve put together some iptable rules that one can run on just about any router that accepts them to force the users to use the proxy. What is nice about this is that it can be started and stopped as often as you want. So you could create a rule to start rick rolling everyone on the network for 1 minute
every hour. Or just have it on all the time.

The 2 scripts you’ll need are located at:

http://haxbyjaku.com/rrrproxy/

The first one is the iptable rules (proxy.sh), and the second is the redirect_program (rrr.pl) that you will want to call in squid. To enable the redirect_program tag simply open up your squid config (normally /etc/squid.conf or /etc/squid/squid.conf) and find the commented out part of redirect_program. Uncomment it and give it the path to the file. (Make sure it has access) And then restart squid.

Now doing that is not all you need to do. In the rrr.pl file you’ll notice a variable called “$server”, this by default will call the files from my site. All located at http://haxbyjaku.com/rrrproxy/ however, if you want to add your own files or keep it going as fast as possible you’ll want to store the files locally on the server running apache or some other web service.

Now, with that setup and running anyone using your proxy will get the files listed in the rrr.pl file replaced with files related to a rick roll, or anything you might of replaced them with. However, like we mentioned that is only if they change their proxy settings. So the next step that you’re gonna want to do is run the proxy.sh script on your iptables based router. Or create your own rules if you have something else.

I use a wrt54gs at home which is running dd-wrt. So all I have to do is SSH in edit a few of the variables in the proxy.sh file, and execute it. After about 2 seconds anyone on the network that is browsing the web will start to get their files replaced automatically.

You’re going to want to edit 3 or 4 variables in the proxy.sh file. The first one being the “INTERNAL_NETWORK” this should match your internal network IP range. Most routers use the default one mentioned in the file, but it could be anything.

The 2nd variable is the “ROUTER_IP”. This is the main private IP of the router. If this is not correct then you can cause your entire network to fail until you either reboot the router or disable the iptable rule.

The 3rd and 4th varibles will be the PROXY_SERVER, and PROXY_PORT. Make sure you put the correct IP and PORT in otherwise it will not work. These should be the settings you use for your squid proxy. The IP could be the same as the ROUTER_IP variable or even the same IP you specfied in the rrr.pl for the SERVER_IP. It could even be different then both of those. I’ll let you decide on what IP it should be.

After that run the script and you’re all set to go. Anyone on the network should be getting their files replaced with the rickroll files and you should get a huge laugh out of it. I highly suggest setting up your own webserver with the files, but I understand not everyone has space where they could store them.

However, I’m not gonna include how you should setup your web server if you have access to one, you should already know how to do that especially you’re gonna start messing around with proxies and re-writing traffic. But if you really can’t figure it out and you need help, send me a message and I’ll help you out as best as I can.

I also used to have a VMware image that had the proxy and all software setup and ready for use, however because it had gotten used for more and more projects I’m unwilling to release it at this time. If there is a big enough response on it I will re-create it and distribute it. I hope you are able to understand this post and include some rick rolls in others lives with the information you received.

The site that did the tracking was http://www.flightstats.com and it did an amazing job with updating where we were in real-time. Now being me, I found a quick and easy way to grab the GPS coordinates from the site and import them into my database. It was a quick and dirty shell script that was all of 3 lines of code. So I won’t be sharing it, however I do think it is something that should be added to my overall GPS tracking suite.

I’m going to start looking into other GPS type location services, such as FourSquare, and FireEagle and try to build a framework around all of them that allows one to update all of them by updating one. So if anyone can think of any other apps or services out there that allow one to share their GPS location with friends or just track it, let me know and I’ll see what I can do.

Also, one last thing I’d like to share. With the flight tracker I decided to have my script run every minute to pull the information. It’s pretty amazing how far planes get in a single minute. Here is a screenshot of when I started the script.

GPS Flight Points

So after my post yesterday about how I update my location on my site I got a reply from @andre_vans that told me about a project called “PlayNice”. The GIThub source is at http://github.com/natfriedman/playnice and the the creator of it has a blog post about it at http://nat.org/blog/2009/08/playnice-google-apple/.

Now I mentioned in my post yesterday that I wanted to be able to use some sort of push notification on the iPhone so that my site could ask for an update and the phone would comply. This would require a custom app on the iPhone to automatically execute something when it has a push notification. Now I’m not even sure if that is possible at this stage as that would almost be like the app is running in the background, which apple does not allow yet. However, Apple has such a service built into the phone that allows anyone with a MobileMe account linked to their iPhone to get the location of the device.

So with that PlayNice will basically log in as you on your MobileMe account and launch the locate phone feature. Now the neat thing about this is that it also updates to your Google Latitude account. This make’s it pretty much perfect for what I want to do. With the source code freely available and easy to understand it was a breeze adding 3 lines of code to update my map backend whenever the PlayNice script is ran. If you wan’t to do the same with most of the code from my post yesterday then follow me past the break. Otherwise, ignore me.

Now that you are here we know who the true Jaku fans are.

Alright so the code that we used yesterday, we only need the mologogo part. So the “update.html” is pretty much useless but you could still certainly use it. What is important here is that you follow the steps in yesterdays post to get the database and mologogo backend software working. Once you do that you will need to make a change to the “submit_2343.php” file or whatever you renamed it to. All you need to do is uncomment lines 41 and 42. This will allow those variables to work again.

The next step is to download the PlayNice code from http://github.com/natfriedman/playnice and follow the install instructions. After doing that you will want to edit the “playnice.php” file and add the following lines around line 91.

$lat = "$iphoneLocation->latitude";
$lon = "$iphoneLocation->longitude";
system ("/usr/bin/curl LOCATION_OF_UPDATE.PHP?pointType=GPS'&'name=Jaku'&'lat=$lat'&'lon=$lon");

Now you don’t need to make those variables if you use the the full $iphoneLocation->latitude\longitude names in your system call, but it looks cleaner.

After you make that change your GPS updates should start getting populated in your GPS map backup.

Up next for me is the creation of a new backup now that I have the simplest update, it’s time to clean up that backend.

The main part is the use of the Mologogo software. Which I used because I had a old boost mobile cell phone and this was the easiest and fastest way to get my location up on the web. It was also the cheapest at $1 dollar a day. After the iPhone came out I developed my own application to get my location and update the mologogo software that way. This was awesome because I could get rid of the boost mobile phone and I only had to carry a single phone then. However after almost every update to the iPhone software, I had to wait for a new jailbreak and then I had to change my code to work. This became a huge hassle and I had to deal with it after every update.

When the iPhone 2.0 software came out I assumed I wouldn’t have to do that anymore. Except for the fact that in order to actually use any application that you wrote, you needed to pay the developer fee. So instead I decided to get my location another way. On many of the twitter iPhone apps it would allow you to update your location and this would then update the GPS coordinates shown on your twitter.com page. This was an easy way to get the location of myself without the need of writing a new custom app. So I wrote some code that would look on my twitter page and find the location of me and check to see if it had updated since the last time it checked. This solution was great because it would only update as much as I wanted, and wouldn’t drain my battery since my phone would do none of the work. However, a few months after this went live twitter decided to change their design and at first the location info was no longer shown. So I had to come up with a new idea.

Now, so far I’ve had 3 different ways to update my location. The first being the boost mobile phone, that worked great except for the fact thatI would forget to charge the phone and it was an additional $30ish a month for me to tell people where I was at. If anything people should of paid me for that info. The second was developing an app that would work on the iPhone and update my location every now and then. What was great about that was, it did not cost anything additional because it was on my main phone, and I didn’t have to worry about the phone not being charged since I always charge my iPhone. Then the 3rd solution was to use a 3rd party site that happens to get my location from another 3rd party app and just parse the data that way. This failed because I had to rely on 2 3rd party companies and hope they don’t make any drastic changes.

Now out of all 3 of the ways I’ve updated my phone, I enjoyed the 2nd the most. Since it wasn’t hard to do, it was just either a pain to wait for the next jailbreak or to pay for the developer license. So with the new iPhone 3.0 update, they allowed you to do something quite magical. You can now get your GPS coordinates though Safari on the iPhone! This was perfect. So I made a page, that would do the geolocation call that Safari now supports. After some testing I was able to get the calls to update a URL by tricking the javascript code I used to into thinking it was going to call an image. I coded my first version of the software off of the code found at http://smithsrus.com/gps-geolocation-in-safari-on-iphone-os-3-0/ and the 2nd version I coded around the source code found on http://www.thecssninja.com/javascript/geolocation-iphone the 2nd version allowed me to
view exactly where I was on the map and looked awesome so I only needed to make some specfic changes so that it could post the data to my site.

I have included the files I use for the Mologogo portion of the site as well as the 2nd version code that I use to find my iPhone’s location. The main plus side on using the webbrowser to update my location is that it can work on multiple platforms without any changes. As long as the device and webbrowser support the new location feature you could use this on anything.

Now, since all of this has happened. I became an iPhone Developer, or at least I paid to be one. So I’ve been toying around with the idea of developing a new app that will use the push feature. I’m not quite sure if it can be done, but basically when ever someone visited my site it would send a push notification to my phone to get the latest GPS coordinates. Now, incase I get a huge amount of traffic I would limit it so that it would only do so every 10 minutes or so after the first push is sent out since it could get rather annoying.

The thing is, I’m not sure if one is able to get information from the phone like that. Perhaps it should be called “Pull” but if I can somehow tie in push alerts to activate a certain function on my phone then I don’t need to worry about opening another app to update my location ever again.

You can download the files in one nice package at http://haxbyjaku.com/gps_code.tar.gz

We are past the story time and so now I will describe how you can download and setup the software. There’s gonna be a few things that might be a bit complicated but it’s fairly easy to do if you’re able to read code.

Once you get the software downloaded you will need to modify a few things. In the molo_config.php file, you will want to update the nickname that it updates the location as, as well as the HTTP_HOST and google maps key labeled as GMAPS_KEY. And of course you’ll want to put in your own database settings. Now the cool thing about the mologogo code is that if the correct tables are not in the database it will create them for you, as long as you give the mysql user enough access to do so.

The 2nd file you’ll want to update is the update.html file. You will want to update USER_NAME and the SITE_URL_REFRESHES_EVERY_30_SECONDS parts of this file. Now I also suggest re-naming this file and the submit.php file something randomish but still easy for you to remember. The reason is that if anyone can figure out what the file names are they could post their own GPS data as yours. So while it’s not the worst thing in the world, it could confuse you if you start to see other peoples locations on your map.

If you have any questions or comments please let me know and I’ll do what I can to help.

With pastebin you are able to post to a sub-domain, as well as put a name along with the post and even set how long the data should stay up. So I’ve made it possible for you to edit those settings in the script so that if you want to post as “bob” and keep the data up there for a day you can do all of that.

The easiest way to install this would be the following 2 commands

sudo curl haxbyjaku.com/pastebin -o /usr/bin/pastebin
sudo chmod +x /usr/bin/pastebin

I know that you won’t run sudo on commands that download code from my server, but you can trust it since you get to see everything.

After it is installed I suggest editing the file as well so that you can set your own settings such as username or pastebin URL. Once that is all set simple run a command like "echo test | pastebin" in your terminal and you’ll get the URL that pastebin posted it to. You can even do something like "echo /etc/passwd | pastebin" and it will work exactly as you expect it to.

I’ve pasted the code after the break as well.


#!/bin/bash
#Pastebin poster, created by Jaku

curl -i -d "code2=$CODE&paste=Send&expiry=$RETAIN&poster=$USER&format=$TEXT" $URL -s| grep -i Location:


So like I said, it’s not very complicated but it certainly does get the job done. Let me know if you have any comments or questions!

The Agreement – Shmoocon 2009

Slides will be posted soon.

Changes in the past few months include:

Working nights now, 1am to 9am, instead of normal days.
Moved into a new apartment. Much nicer and better view.
Working on a few new projects, but this time with friends instead of alone.
Been driving a bit more.

Otherwise, I don’t have to much else to say. In about 2 weeks, there should be a post about one of the projects. Some of you know a bit of the details, but the one’s that don’t should enjoy it. I will also be doing a new presentation at the next 2600 meeting in June. You won’t want to miss this one.

I’ve also been using it to tether to my laptop for internet, this has been great as my internet at home does not exist at the moment. In fact I’m posting this blog update from my laptop using my iPhone for the internet. My favorite application would have to be the one that installs all the other applications. Sure I can download the apps from their websites and then mess around with terminal, but it’s so much easier to just touch install on the iPhone and have it download and install for me. Anyways here are some screen shots of my haxed phone, and I’ll post another update soon with more info on all the apps and stuff.