Saturday, August 22, 2015

Valley of Flowers and Badrinath journey

It is indeed a 'Devbhoomi' (Land of Gods). It is Uttarakhand in India. We returned from Valley of Flowers and Badrinath last weekend and I am writing down my experience and itinerary for the same. 

We had a flight to Delhi in the evening of 8th of August. Then we boarded on a train to Haridwar at night and reached there next morning. The railway station was full with pilgrims. We couldn't get a bus direct to Govindghat. Someone suggested to go to Rishikesh and from there we will get a bus to Govindghat. We went to Rishikesh and it took three hours to complete this journey through a bus. Though it should have taken only one but it was a festival season and there were thousands of pilgrims going to offer 'Ganga jal' (holy water of the river Ganga) to Lord Shiva in a temple nearby. I had a chat with one of the devotees and he said that they were going to a place called Neelkanth. The same offering happens at a place called Deoghar (Home of the Lord) now in Jharkhand (earlier in Bihar). So I was able to relate to the activities the pilgrims do and their dressings also which is of saffron color. 

Once we reached Rishikesh, we got to know that we won't get a direct bus to Govindghat but we will get a bus to Chamoli from where we will get a bus/ transporter car to Govindghat. Therefore, we boarded on the bus to Chamoli. There were five of us, three of whom were college friends including me. It was a wonderful journey to Chamoli. We enjoyed a lot and got to see a lot of places which we don't see in our city lives. The air was very soothing and pleasant. It was without the polluted city air. The bus stopped at place and we had lunch there. The food was good. People from several other countries also come and visit these places. The locals on those hilly areas also boarded on the bus now and then and I got a chance to hear their language and observed their lifestyle too. It was a great journey to Chamoli where we reached in the evening. Luckily, we got a vehicle to Joshimath where we reached soon enough to stay at night. We took government run hotel and a double bedroom costed us INR 660. Hot water was available in INR 25 each bucket the very next morning. 

Next morning we started our journey from Joshimath through a four wheeler vehicle (I have forgot the name) and reached Govindghat in an hour or an hour and a half. The trek to Ghangaria (which is a one-road village) started from Govindghat then. It is a 13 km trek mainly ascend alongside the river Lakshman Ganga. Though there are few descends and plain walks too. One can take mules/ porters for the backpacks or self. I took a mule in INR 700 for my backpack after trekking for about four kilometres. The walking stick which I bought from Govindghat in INR 20 helped me a lot throughout the trek. Along the way one can find several small villages where food is available at slightly higher price than plain lands. There was an old lady who was selling Apples along the way. We bought few kilos of apples from her and she seemed to be happy. She had told us about 2013 floods which washed her home away and they had nothing to do. She showed her home down the hill. There were few apple trees near to the river. We stayed in Ghangaria that evening. I got sick the next day and had to take bed rest the entire day. My friends went to Valley of Flowers (VoF) that day which is a 5 km trek from Ghangaria. I went to VoF the next day alone. Going there alone taught me several important aspects of life and I enjoyed it a lot. There were many other trekkers whom I got a chance to interact with along the way to VoF. One of them gave me two chocolates too, I think in courtesy to the water I gave him to drink. They talked to me in Bangla (a very popular language mainly spoken in the eastern part of India and across the globe now). The trekkers included folks from all stages in life. There were kids, old trekkers, and young ones too.  At the end of the trek to VoF I got a chance to talk to an old man who went there with his friends. Though he didn't complete his journey to the inside of VoF and he returned from the river at the perimeter of VoF, but he told me something which I can never forget. My old friend told me, "Though I am returning from here but you, my friend, go ahead and complete this journey". After that he patted on my back as an encouragement to complete the trek. We talked in Bangla and then I realized that many people who go there speak Bangla as I had interacted with few of them and heard others speaking in the same language. There were many groups on the trek like a group of boys and girls who seemed to be from a college, a Mahrashtrian family, many Sikh brothers, etc. 


The Valley of Flowers was covered with lots of flowers and many of them have great medical benefits. The flowers were of various colours ranging form Blue, Yellow, Pink, etc. There was a 25 minutes documentary which we watched the previous evening and it costed INR 30. It gave us good idea about the history of the place and information about the flowers. The VoF and Ghangaria are open to everyone only for a brief period of three months and I got to know from a guide that the flowers which bloom there in huge numbers also may vary in different times within those three months. Initially, there were very less clouds in the valley, but it started increasing as the day passed and it rained sometimes. I went inside the valley and used to stop and view the amazing valley along with its flowers and wonderful natural beauty. I didn't go till the end where there was a beautiful blanket of ice which I could see from a distance in the valley. I knew that I had to return sometime but I didn't want to. There were many waterfalls in the valley which were producing the sound which felt as if I always wanted to hear them. At the end I had to return half-heartedly as I wanted to see more but I was satisfied to some extent since I visited the place at least. Overall it was a wonderful and life-learning experience. 

My friends had gone to Sri Hemkund Sahib ji (which is a Gurudwara) that day and I heard that it was even more difficult trek than VoF. There is a temple called 'Lokpal' where a guide told me that 'Sheshnag' was granted the boon to have birth as 'Lakshman', the younger brother of Lord Rama. 

The day came when we had to trek back to Govindghat and it took about five hours for the same. We went to Badrinath from there through a hired vehicle and visited the temple there. The temple is a must visit holy place near to the river Alakananda and I enjoyed a lot there as very few people were there during that evening. Next morning, we boarded on a sharing vehicle to Joshimath. We also visited Lord Hanuman temple called "Hanuman Chatti" along the way. It is said that Lord Hanuman broke Bheem's ego there and taught him a lesson during Mahabharata times. We had to face landslides at two places. Finally we reached Joshimath and then took another sharing vehicle to Chamoli where we had lunch and took another sharing vehicle to Rishikesh. We reached at Rishikesh at night and then took a bus to Haridwar from where we had reservations in a train to Delhi where we stayed at a friend's appartment. We had flight back to Bangalore on Sunday and thus ended our nine days journey to "Valley of Flowers". 

Here is a list of places you need to be to reach VoF and Badrinath (optimized list which we couldn't follow):
Delhi to Haridwar : Night train
Haridwar to Govindghat: Bus
Govindghat to Ghangaria : Trek/ Mule 
Stay at Ghangaria (@ INR 600 double bed to INR1000 on average).
Ghangaria to Valley of Flowers : Trek (about 5 KM after 2013 floods).
Ghangaria to Hemkund : Trek/ Mule.
Ghangaria to Govindghat : Trek/ Mule.
Govindghat to Badrinath: Bus/ Sharing/hire vehicle.
Stay at Badrinath (@ 300 four bed, guest house near bus stop; other hotels available).
Visit temple and nearby places at Badrinath. 
Badrinath to Haridwar : Bus [or Badrinath to Joshimath/Chamoli and from there to Haridwar/Rishikesh]
Haridwar to Delhi : Train.

NOTE: Suggestion is to take medicines for common issues along with you during the trek on hilly areas and drink mineral water if the local water doesn't suite you.

Friday, June 5, 2015

InMobi hackathon

The day came when I had to go to participate in a Hackathon once again after a long period. It was Saturday and I woke up early morning so that I can reach at the venue on time. InMobi's office in Bangalore is a masterpiece, I must say. First line of selection process was online where our ideas were filtered and we were called at the facility after our ideas were chosen. I was joined by my friend Ravi and like every team we were allotted two cubes - the open cubes at InMobi. After Mohit's sesssion about the hackathon we went to our cubes and settled. All the teams had a mentor and we were asked to formalize our idea within a limited time. It was reviewed by our mentor after the time was over. Then we started thinking about how to approach the problem.

I got a chance to interact with Soumya during lunch. He works at InMobi on databases. He is a cool guy and we interacted a lot and shared some quality time on the lunch table. We went back to our cubes after lunch. I had few discussions with Ravi as he was facing some issues with his web interface. I was thinking about each of the modules of our idea and trying few things on linux and writng scripts for those. It was 3 in the afternoon and there was a laughter session by Sanjay Manaktala. We laughed a lot!! and it was really helpful in rejuvenating a new source of energy within us. We went back and resumed our work. After some time, we had few lines of codes working and we could actually showcase something of our idea. It was 7 in the evening and there was a third round of review by our mentor. We had a great support from Siva and his inputs were truly helpful. We had dinner after some time and I must say that the food was awesome like lunch and breakfast.

It was midnight and we decided to come back to our home and then go back to the arena next morning. We went back to the arena next morning and saw that few folks looked as if they didn't sleep at night. I met with my friend Tushar again in the morning. He had also participated in the Hackathon. It was a wonderful experience and a perfect refresher for me after college. We enjoyed the environment at InMobi a lot and I am eagerly waiting for the next one.  

Monday, March 9, 2015

The FREAK Attack

Last week saw one more security attack. It was named as the "FREAK" attack and is basically an MITM (Man In The Middle) attack which targets the "downgrade to weaker algorithm" property. It downgrades to export grade algorithm. As a countermeasure to this attack, the support for export cipher suites has to be disabled. Several write-ups are worth mentioning and the readers are suggested to go through each of the links mentioned in the references below in detail.  

References:

Saturday, January 24, 2015

virtualbox window resizing

From quite a few days I was annoyed with the small screen size of my Ubuntu installation in virtualbox. Tried a lot of package installations and reboots, but nothing worked. Finally, the following set of commands worked:

sudo apt-get install build-essential module-assistant
sudo m-a prepare
cd to VBOXADDITIONS which is there in /media/
sudo ./VBoxLinuxAdditions.run
sudo reboot

And the window should be fitting the screen after the reboot.

Wednesday, November 12, 2014

Wings of Fire - APJ Abdul Kalam

Recently I visited my home town after one year with my cousin brother and this time I booked train ticket from Bangalore. It has always been a great journey for me whenever I have travelled by train. Watching the fields, distant land, people working, trees, mountains and houses gave me a wonderful experience. I felt that my country indeed has lots to offer and great diversities. My journey started from south western part of India and ended in the eastern part and I reached my home after travelling through six states. It was a long journey of about two days and I was thinking what I should do during my travel. So, I looked into my stack of books and I found a book written by our ex-president, a great scientist and a great teacher, Dr. APJ Abdul Kalam. The book was "Wings of Fire". 

It is indeed a great book which not only gives us the experiences of Dr. Kalam but also motivates us to do the likes. Through his experiences he has imparted a sea of knowledge to us. Apart from all the events which he has beautifully written, I liked his scribbled poems. It felt difficult sometimes to fully understand what he actually meant but I gave sufficient time to each of his stanzas. The end result was that I ended the book while returning from home to Bangalore. An old Bengali gentleman, who was having his reservation in front of mine while returning, told me that he has read the book twice and described me his understandings of the book. He was a very friendly person and liked to talk much.

It was a great learning journey as I travelled by train for so long after three years. At the end I decided to take a book on every journey of mine now onwards. 

Wednesday, October 15, 2014

The POODLE attack on SSL 3.0

Google wrote on its blog about the POODLE attack which seems to be a concern now. Though nvd still says it is under review. One of the recommendations being to disable SSL 3.0 on client (or server or both). Readers are suggested to go through "Recommendations" section here for detailed explanation on the recommendation and "The POODLE Attack" section for explanation on how the attack works. Any comments are appreciated.

Sunday, October 12, 2014

Secure copy - an introduction

Secure copy  [scp] is a remote file copy program which comes as a sub-module in OpenSSH. It uses SSH as underlying protocol to transfer data and uses the same authentication. A simple command to copy a file to a remote host is:

scp file user@remote_ip:

There are several options which we can pass to scp [in the command-line itself] like options for ipv4 [-4], ipv6 [-6], option for enabling compression [-C], specifying per-user config file for ssh [-F ssh_config], etc which are passed to underlying ssh process. Additionally, options can be passed in the format used in ssh_config.

Scp works in source and sink modes i.e. 'from' and 'to' which can be seen in the codes and can be realized from the command line also. Users are suggested to go through its manual page. This can be found either by executing "man 1 scp" in the terminal or from the internet ex. 'manual' link of OpenSSH.

Sometimes we need to debug issues in scp for which we may need to see the process hierarchy. For this, we can have a look at "ps -elf" and "pstree -p" and grep for 'ssh' and 'scp' for knowing the process hierarchy in ssh and scp.

Readers are suggested to comment for any rectification on this post or suggestion.

Wednesday, September 3, 2014

Cryptography I course by Stanford

Online learning has gained much popularity these days. One of these courses is Cryptography I taken by Prof. Dan Boneh of Stanford University through Coursera Inc. I highly recommend this course for those who want to start learning this subject. Even if I have studied few topics of the subject back in college and done some self-study in it, I found the course to be somewhat different. The way of teaching is too good. The course material is a balance of both theoretical and practical aspects and it also highlights some of the open problems in cryptography. The learners need to watch few videos each week and need to answer questions at the end, which they get points for. There is a final test at the end of the course. After successfully taking the test, a certificate of accomplishment is generated within two to three days for the participant. I am waiting for its advanced course: Cryptography II. Readers are suggested to go through the references mentioned below for these courses.

References:

Monday, September 1, 2014

SSH protocol overview

Secure Shell, as the name suggests, is a protocol for getting a shell which can be used to securely execute commands on a remote machine. It supports several other features too. It is a combination of three layers of protocols namely, Transport layer protocol, User authentication protocol and Connection protocol [See references below for RFC links]. 

Transport layer protocol provides confidential channel over insecure network. This layer provides server host authentication, key exchange, encryption, integrity protection. It derives session id that may be used by higher level protocols.

User authentication protocol provides a suite of mechanism that can be used to authenticate the client user to the server.

Connection protocol specifies a mechanism to multiplex multiple streams (channels) of data over the confidential and authenticated transport. It also specifies channels for accessing an interactive shell, for proxy-forwarding various external protocols over the secure transport (including arbitrary TCP/IP protocols) and for accessing secure subsystems on the server host. 

OpenSSH is a wonderful implementation of SSH available online [See below for references].

Few references:

Wednesday, August 20, 2014

crypt function in Linux

Here is a function provided to encrypt a given key with a provided salt. The signature of the function is as follows:
 
char *crypt(const char *key, const char *salt);

 
If a salt given has a format of "$.$...$..." i.e. normally of the hashed password stored in shadow file (look for my previous blogs on shadow file), then the function will interpret the salt and get the type of hash to be used. A hash type could be of MD5 ($1$), SHA256 ($5$), etc. This way one can hash a password provided by a user (the argument 'key') and match/authenticate with the one stored in the shadow file. This function is highly recommended not to be used for any other purpose except authentication. Readers are recommended to go through its manual page and understand its usage. 
 
Here are some references:
man 3 crypt

gnu_libc_crypt
man7_crypt