If you are using spamassassin without sa-update you will not like to hear that as of 5 days ago spamassassin has pretty much declared open season on all your mails:

Due to an incredibly gross and dirty bit of rule all properly dated mails get an extra 3.6 added to their score. *kablam*!

Botch/Fix: edit /usr/share/spamassassin/72_active.cf, and change the regexp for FH_DATE_PAST_20XX to something that doesn't fire in the near future (like 20[2-9][0-9]). Don't forget to sa-compile if you use compiled spamassassin rules.

This is not a Beatles song.

Horricle + Sun = the horror, the horror.

I've got a new toy,
(more...)

I hate udev. It does not work in settings very crucial and important to me (ldap-nss) and it's a huge step back from hotplug in terms of useful functionality. Stupid complicated config environment, bloated *and* it does not load modules on demand. Dear udev authors: you can keep that crap and i'll stick to what works, is small and almost semi-elegant: hotplug.
(more...)

Emacs and exmh go together very well, but of course there's spots where things rub across. Today I scratched such an itch successfully: I now have access to exmh's address database from emacs (and so can you).
(more...)

...but quite nice. I've got my own ideas about how to manage my collection of digital photos and so I wrote my own tiny, idiosyncratic but sufficient photo manager five years ago (says rcs; hmm, those years went quickly!).

Now that Conny has a shiny digital camera of her own (and a bit of associated trigger-happiness) she also needs something to organize her pics with. And while my photomanager is fine for me Old Fart, it's a little bit gnarly. So I looked at more user-friendly (but not idiot-friendly) solutions. And voila, the first apt-cache hit was already what I had been looking for.

Martin Herrmann has written "martin's picture viewer" aka mapivi, which is more than just a viewer (a feature which is fairly irrelevant to me). It's written in Perl plus Tk (important to me), it's a photo manager (ditto) and it keeps pretty much all info where relevant: in the photo files themselves. The last is most important IMHO, because it frees me from sundry databases, proprietary overview formats and the like. mapivi uses EXIF and IPTC metadata to record pretty much anything you can think of in extra segments of your jpegs (and other image formats that allow such metadata storage).

The thing is a bit rough in places but works very well for a 0.x release, and the combo of Perl and Tk is really fun to work with.

I've immediately gone full steam ahead and coded the two plugins I need to emulate the few features my photomanager had over mapivi (complete with balloon popup help texts for Conny); also submitted one patch to the upstream author.

Gone is my photomanager, and welcome mapivi. Not Invented Here indeed :-)

I've got a netvista thinclient serving as jukebox in my bedroom. Recently I wanted to switch to a faster wireless adapter, which required moving to the 2.6 kernel series. This is especially painful for the netvistas, but nevertheless possible (despite some sources claiming that it won't work). Here's the rundown.
(more...)

...with a FREE spelling mistake, but nevertheless excellent. (source:some flicker user via Cryptogram)

It's amazing what they managed to squeeze out of that poor 6502...

today i got my new (well, less than a decade old) sun to replace my last dead ultra2: a netra 120 (aka sun fire v120). but what a noisy bugger!
(more...)

should you be so unlucky to have to use a box with onboard Intel "Graphics", specifically a 965Q chipset, and also one of those fat Dell screens which suck at all resolutions but 1680x1050, and maybe even want to run debian Etch (without testing or experimental or somesuch), then you'll hate all the involved hardware manufacturers. (Likely you do that anyway, for unrelated crimes against syadmins but regardless: THIS time i did find a way to coerce them to function.)
(more...)

...but rather with them. Nevertheless, here's a pretty cool game I've started playing recently: Terminus, a space FPS/RPG thingie which rocks: a solid Newtonian physics model, good graphics, both linux and win supported natively (on the retail cds) and so on.

What's even better is that the Underdogs have the game downloadable in its full glory (abandonware; released in 2000).

...and it doesn't dig many if not most of my files. Damn dumb beast!

Well, no more. swish-e seems to be better behaved, and actually works! *duh*

These guys have cooked up a tiny perl CGI frontend (which I've reworked and cut down a lot further), and the search functionality on this site works again.

I've also fixed a long-standing annoyance of blosxom: plugins can't cleanly set the title of a page from the story title, because the header plugins run first and the story plugins have no official access to the output. The fix is Really Dirty, in the best tradition of blosxom which is Abysmally Dirty Code: a plugin with a sub last {...} that massages $blosxom::output. If it finds exactly one story in there, then it changes the <title> to that story's title. Hideous but it works, and the search interface can display story titles instead of just the boring story links.

If you want to play with the Abominable Code for this stuff, let me know. fakefake

I dislike spam, very much, and repeat offenders deserve all my wrath. Here's another use of the iptables recent module in a very cheap and simple manner, to limit the spam blasters' effects on me and my servers' life.

(I've said nice things about ipt_recent before here and here, both with example applications.)

I've just added these extra rules to the firewall setting on my mail servers:

 # smtp access is controlled by previous behaviour: spam me and you lose.
iptables -A INPUT -p tcp --dport 25 -j smtplimited
 # smtp: if mimedefang has flagged you as bad, you lose for 12h
iptables -A smtplimited -m recent --name SMTP --hitcount 1 \
   --seconds $((12*3600)) --rcheck -j TARPIT
 # clean up the old entries to unclog ipt_recent
iptables -A smtplimited -m recent --name SMTP --remove
 # and let people through if they've been good in the past
iptables -A smtplimited -j ACCEPT

My mimedefang filter has been instructed to (do the perl equivalent of) echo "+$ASSHOLE_IP" > /proc/net/ipt_recent/SMTP whenever it detects an asshole that tries to:

• send email with a non-existent sender's address
• send email to one of the spamtraps within my domains
• send email to nonexistent addresses within my domains
• send me spam (where the degree of spamminess is beyond any reason for doubt)
• send me viruses

(The decision logic is actually a bit more complicated: I certainly don't blacklist known forwarders and backup MXes.)

The net effect is that when you do something nasty to me (email-wise), all your subsequent connections to my mail servers are tarpitted for the next 12 hours. Works great, easy to tweak if you want to be more lenient (just up the hitcount and adjust the following --revove rule) and reduces the time my systems have to waste on repeating the checks for surefire rejections on the smtp-envelope level. (I usually get about 5000-10000 rejections per server per day.)

(Clearly not.) But nevertheless, this is a very interesting article about Fitts' Law and how interface design should be affected.

Some of the assertions seem...unfitting, though: for me, moving the mouse to the bottom is the most annoying move, not the least: the mouse has to travel beneath my palm and wrist (I tend to control the mouse with my fingertips and a bend of my wrist and rarely ever lift my elbow off the desk.) Moving to the top I just extend my fingers, so that's faster.

But then I'm weird: I have the mouse on either side, with some bias to the left -- but I'm somewhere between righthanded and ambidextrous otherwise, I switch between two different keyboard layouts every day (german at home, english at work) and so on.

I complained about bank logins a number of times, the last one being citibank's mouse mess. Apart from that I have no major issues with their credit card service...except the insistence on a PDF plugin to read your statement. WTF?!

Well, now they can insist as much as they want because I wield the Greasy Monkey wrench...and I win! This greasemonkey script neuters the plugin-insisting code and also converts the EMBEDded (*spit!*) PDF into a normal plain link. Works for Citibank AU, maybe other incarnations. (BTW, userscripts.org sucks, I lost my password and can't reset it, thus this script will not end up there anytime soon.)

Damn, how I hate those wobdesigner idiots that make you click on virtual keyboards to enter your passwords. Virginmoney/Westpac has such a thing, and a very crappy one, too, but we have a fix. All this involves EczemaScript, not nice but better than suffering.

Now I've got another set of suckers to deal with, Citibank AU. Their setup is less gnarly but still annoying. This time, I produced a fix myself: Citibank-Demouse is a Greasemonkey script that simply clears the hooks that invoke the virtual keyboard; and hey presto! keyboard-entry of your password works again.

Federico Schwindt pointed out the appropriate Citibank UK url, and the script has been updated with this information.

It's not exactly the CSS Zen Garden but not too bad either. I think.

Two weeks ago I rebuilt the chgc website from scratch, with nice new images, no more tables, standards compliant HTML and CSS and so on. I also got rid of \rho's HTML++ thingie and replaced the automation guts with Mason (but still statically rendering everything).

Comparing this with the current setup I'm pleased with the results.

Perl is a programming language, just like C, only it is even weirder.

$ perl -e '$a=3; $b=++$a + $a++; print "$b\n";'
9
$ perl -e '$a=3; $b=++$a + ++$a; print "$b\n";'
10
$ perl -e '$a=3; $b=$a-- + $a++; print "$b\n";'
5
$ perl -e '$a=3; $b=--$a + ++$a; print "$b\n";'
6

My Bizarrotron just broke its indicator needle. Fascinating!

I'm no fan of EczemaScript but the recent Westpac/Virgin mess convinced me that scripting in the browser is not necessarily bad - as long as I control what runs where and when (hence I use NoScript and deny all scripts everywhere except where I know the code).

Yesterday I mucked around with making the local TV guide website bearable - all I really want to see is the innermost table of actual information, minus all the square acres of blinking advertisements and similar drivel.

Upgraded to Firefox 1.5 (actually painless, very different from past experiences), installed the newest (0.6.4) Greasemonkey, found a script that claimed to fix that mess but which was too ugly by far, rewrote it to suit my prefs, done.

I learned a lot about Javascript and DOM (and also where Greasemonkey sucks) than I ever wanted to, but that's fine.

Today I thought about tackling the Virgin problem, but found out that Joel Hockey has already written a nifty simple small script that gives you text-based password entry back (without removing the silly buttons, should you be stupid enough to want them). Thanks, Joel!

But it didn't work. My stubbornness has few limits (and the weather was not flyable today), so I learned still more about JS and GM and the DOM, especially about the recent paranoia that badly affect the new Greasemonkey and wrecks most of the nice things about DOM and JS (if there were any in the first place).

In the end I fixed Joel's script (and sent it back upstream) and am now quite pleased with my army of greased monkeys.

Next step, maybe: adding a squad of platypuses.

I rebuilt my backup-and-music box recently, because the case was ugly and because I needed to fit another disk for online backup.

I had a Sun 811 case lying around, and another similar to a 411. Neither would take the Epia motherboard, PSU, dvd burner, two 3.5" disks and a 20x4 lcd, but together they can throw off the yoke of conformist PCism! *ahem*

So I cut out the plastic top of the 811 and riveted the 411 onto it, which gives me space for the drives. A face for the open rear end of the 411 was cut from the cannibalized pieces of my Sony stereo junk and hot-glued in. The frame for the HDs is an old cut-up drive bay, and the support for the burner is a piece of sheet metal that I riveted in (hot-glue isn't strong enough and I didn't want to use expoxy for no reason at all).

The front with the lcd got a painted fascia (balsa) and the IR sensor was mounted internally this time. After a shitload of further surgery on the cases and innards I ended up with this pleasant look. But you can't see the rear in that photo which is good. None of my small ATX power supplies would fit without totally rebuilding the thing (not-so-perfect an idea as I'd basically have to strip all insulation off, then resolder half the high and low voltage connections and cram all the resulting mess into the franken-case), so I started looking at DC-DC PSUs. Like this one. Which I did eventually buy, thinking "the 90W/145W peak PSU I have used so far, so this 200W thing should do nicely". Cost me about us$100 (with a 9A AC-DC external brick and shipping).

Little did I know, and for that matter, too little effort did I spend on research. Plug it in, fire up, works - somewhat: now I get loads of noise on the audio out connection. Not just mains hum but all kinds of activity-dependent crap as well. This is when I started doing the research I should have done before. It turns out that loads of people hate the PW-200-M for being a crap piece of equipment. First, it's nowhere near 200W, and some other speciality PSU manufacturers have accused the makers of shoddy lying advertising. The 5V rail sagged under the load of my two disks down to less than 3V at times. The 12V line is not regulated, so iff you're not using a regulated brick you'll fry your gear (especially the carputer people hate it for that). The smoothing caps are not exactly large at 390-1000uF. (But the form factor rocks, which is why I bought it...)

Tried pretty much everything non-destructive, like powering only the board from the PW-200-M, trying different 12V supplies to verify the noise is coming from the PW-200-M etc...but no joy. It may be useful for really low-power scenarios where one doesn't care so much about power quality (i.e. non-audio application), but for me it's junk...Bugger.

Back to square one: normal PSUs don't fit. Most high-quality DC-DC PSUs like the Opus gear won't fit or require 19V like the DC2DC converters.... So for the time being, I plopped my normal small ATX PSU like an outboard motor behind the box...with some shielding and extra grounding it doesn't affect radio reception too much. *sigh*

...you see an ad on your Coke bottle that says "5 HUGE GIGS" and you think nah, 5 gigs is nothing special today but I remember when it was not just huge but UNIMAGINABLE only to *blink* and realize that they were talking about *music*...

The iptables recent match module is pretty cool; things like keeping the sodding ssh brute force guessers at bay are trivial: accept only X new connections to the ssh port within a minute, if not coming from a trusted known network. Two iptables-lines.

Unfortunately, the module isn't overly stable internally and there's some rollover bugs like this one. I'd still give it some extra coolness points for allowing me to implement Port Knocking without any userland tools in 5 minutes:
(more...)

The expletive (in Austrian German) applies to the Linksys people, who managed to castrate the WAP11 access point in its version 2.8 but good:
(more...)

A French court has recently decreed that using P2P systems is legal if it's for private use. This includes both up- and downloads. Sweeeet! French Freedom Fries! A nice result that doesn't make the Content Cartel happy.

Link to an article (in German) about this

Applied to computers this kiddo-truism would be like: "Lapdogs are obsolete the moment they leave the factory, and extinct by the time you buy it. You want software to work on it? Here's your two rocks, bang them together and see how you go..."

I've been Having Fun with kernel 2.6.14 and my machines. Lots of Bloody Fun. It takes heaps longer to configure things. The documentation has not exactly gotten better. The (feature-)stability of the 2.6 series is a joke. Some things still don't work. Lots of new things have stopped working. WAAAAAAAH.

The lucky list: ide-cd and ide-scsi still conflict. The latter ist needed for reasonable cd burning. The module documentation blithely says "There is usually no reason to remove modules, but some buggy modules require it". Idiots. The xserver will make your box hiccup badly and fuck up playing of sound if you run it with the previously required niceness. Vmware modules don't build on 2.6 at all, but somebody has cooked up a (really ugly but working) patch. The devmapper maintainer is a clue-resistant idiot who repeatedly refused a one-liner fix for a problem that breaks the use of the disk group so I rolled my own packages. The maestro3 sound support has gotten worse, the chip gets confused every now and then now (and I'm not going with the ALSA suggestion: You can install that bloated crap when you pry the keyboard from my cold, dead fingers.) Loopback (ahem, devmapper) encryption is still not possible for non-root users. Wavemon does no longer work. The netfilter code is fucked up, IP_NF_NAT_LOCAL is gone since around 2.6.11 which means that natting local conns doesn't work anymore. My nice location-independent setup for the proxy (everything configured to use localhost:3128, then NAT that to the real proxy if needed) is now officially unsupported. Thank you, bastards!

And, of course, direct rendering for mach64-derivates is once again absolutely utterly fucked up (uncompilable, incompatible, non-working code). Might be a good thing that with trying to find out and fix all those niggling problems I've got no time to play any games anyway...

On the plus side, however, are things like the kernel key storage api: goodbye quintuple-agent, hello kernel! I'm currently experimenting with code to make that stuff easier to use; Debian packages to follow as soon as things stabilise...

The recent vacation had its very positive sides as well: I brought back about 11GB of condensed music from friends and family.

Much of it was not neatly tagged/named, but &rw mentioned musicbrainz, a project similar to freedb but extended to fingerprints for MP3 and similar.

The stuff is partialy lunixified; Debian packages do exist but the docs suck big-time and the interdependencies between libraries and software are as clear as raw sewage...

The tagger app is a/v as Windows dreck only at the moment, but there's a "simple tagger application" (and Perl and Python interfaces). Do not try the "simple tagger application" tp_tagger from libtunepimp-bin: it sucks oh-so-badly (where have these idiots learned programming and interface design?!).

The perl version tp_tagger.pl (only in the source package) sucks about as badly, but at least one can quickly rip out all the crap and make it work somewhat.

Rant done. The idea behind musicbrainz is very good and I'm sure the system will be used more and more once a reasonable tagger application and docs are available.

A mad norwegian has made this yahoo+google mashup: two frames showing you both search engines' results side-by-side. Very cool, especially as one shouldn't trust google to far anyway. (Nor is yahoo the One Source of Truth)

A firefox searchplugin is available over there.

If I'll ever end up having too much free time on my hands I'll try out some stuff from Abandonia, where classical games are kept alive.

\rho and I "own" some perl software packages related to topicmaps, mainly the XTM package (or libxtm-perl as it's called in Debian).
(more...)

It fells almost like software-archeology to dig through these old RCS revision logs. I can trace back certain constructs in there to my days at aut.alcatel.at and to hints from Klaus Reichl, emacs geek extraordinaire in the Elektra team.

this is how it looks when az has a bad day and takes a big hammer to the mh-e defaults:

;; gehts scheissn mit die bunten smileys...
(setq mh-graphical-smileys-flag nil)

No. Never. NO! Go Away! This is not what I want.
(more...)

(but likely just this time only.) The french consumer protection agency DGCCRF has sued EMI France and the music shop Fnac because their music CDs weren't CDs anymore (because of anti-copying measures that break the Red Book standard).

The French legal system guarantees the right of private copies, and EMI and Fnac broke not just that but also mislead their customers about the (lack of) quality of their product.

If the government wins that suit, then EMI and Fnac would have to call back the CDs and pay E 187k. Nice.

Cryptome is great; unvarnished, nasty, uncompromising. I love it. They've got an RSS feed, too.

"Ken Carpenter called at 1:10 PM to say that getting a court order would be complicated and time-wasting so why doesn't Cryptome be "patriotic" and remove the document in the interest of national security. He said NSA had vetted the document as being important to national security.

Cryptome said it had published his request and he should take a look at it and a reader's response.

Mr. Carpenter logged onto this file, and said, oh no, you published my telephone number and quoted me.

We said that is what we do when a government official gets in touch."

Great job!
Link to that story

A family of collisions in MD5 has been found, and the "vultures are circling" (as Ed Felten put it) quite low above SHA-1. Bugger. Ah well, evolution at work I guess.
Link to Ed Felten's article

I just discovered a very interesting paper by Eben Moglen (of EFF fame) about software, property and anarchism. Not exactly new (1999) but really nice. Let's hope he's right.
Link to the paper

A very interesting article (where's the "rant", though?) on how and why ebooks work pretty well for authors (and their publishers, even though only a few realise this so far).
Link to the article

...says a recent German court judgement, wherein the netfilter project was awarded EUR 100k because Sitecom was using iptables technology in commercial products without abiding by the GPL rules.
Link to the heise article

Some tales of current {soft,hard}ware woes.

iptables doesn't fully like sparc64: the limit module, very useful for limiting log entries in bursty situations, is fubar'd on 64bit archs:

..."the problem is that the limit match does an ugly hack: it stores a pointer in its struct matchinfo. That pointer is 64bits in the kernel, but userspace is 32bits, and thus the compilar only allocates 32bit for the pointer in the structure: boom.

The structure was commented by the original author with: /* Ugly, ugly fucker. */"

Thanks guys, very helpful. Grrrrrrr. Ok, for now my syslogd is set to not sync on the file where these logs go to, to keep the box from melting down because of any silly scanner out there but that's far from perfect.

Then my alcadreck dsl thingie is flaky as hell: it really doesn't like service disconnections, and occasionally doesn't get the always-on connection into always-on state...Time to get a BPAC-5100 and enjoy proper syslog, SNMP, real CLI etc.

And my Ultra1 is showing the onboard HME lockup behaviour: suddenly no more data coming in, but ifdown/ifup fixes the issue. (or is it the alcadreck? seeing collisions and carrier loss errors on a lightly loaded Xover cable doesn't really inspire confidence in the other comms partner even without knowing about the alcadreck...) Built the kernel with the one-liner patch, seems to be ok for now.

And df is fucked on sparc64:

$ df -k /
Filesystem           1k-blocks      Used Available Use% Mounted on
/dev/sda1             -1324350         1         0   6% /
$ df -k //
Filesystem           1k-blocks      Used Available Use% Mounted on
/dev/sda1              1511856     80608   1354448   6% /

So a trailing slash coaxes it into working. Fugly.

And mozilla-firebird with the tabextensions on crashes when trying to do talk to ANZ (who are evil bastards wielding their javascript bludgeon inexpertly, but who - thank eris! - haven't discovered java...yet).

To make debugging easier, at work the same mozilla-firebird with the same extensions, a 99.9%-same config works without a hitch. Oh the joy. Mozilla needs some code to selectively disable each and every javascript function (not just the few silly things like preventing scripts from hiding the toolbar)!

Sigh.

Their Meerkat Open Wire Service is a pretty cool aggregator of all things news; personally I like channel 916 (O'Reilly Net content, with all their open articles) a lot.

Yesterday I added this to my /etc/emacs/site-start.el

(defun browse-url-mozilla-firebird (url arg)
  (shell-command 
   (format "mozilla-firebird -remote 'openURL(%s, new-tab)'" 
           url)))
(setq browse-url-browser-function 'browse-url-mozilla-firebird)
(global-set-key [S-mouse-3] 'browse-url)

and wohee, no more cut-n-mispaste. All hail emacs. Now where do I find something similar for trn (/me can't stand gnus)...

This article on Perl's special variables has reassured my view of the world: all software sucks, plenty. For example, the ".." operator in scalar context is a mighty beast with plenty of tentacles.

But I still like Perl most, compared to all the other scripting languages.

Whenever I've got to do anything with XML (and that's a fair lot with a couple of research efforts re topicmaps and james I feel like I'm in the nearest Crazy Clark's "hardware" aisle: lotsa tools, most overlapping in intended use but all subtly broken and at best fit to round off boltheads or screwheads after keeping you fuming for way too long.

And in the real world those bloody tools aren't even as cheap as Crazy Clark stuff, they require way too much effort.

So rant away like those at XMLsucks.org, go back to XML 2.0alpha? Maybe YAML is the answer to the questions XPath, XPointer, XSLT, XQuery, XUpdate and all the other lousy languages don't answer properly?

A fun to read article on how he fails to see piracy as the evilevilterrorismbadness other blokes try to present it.
Link to an ad-infested version
Linkto the textz variant

A nice article about weblogs and why they are no good in general; I mostly agree with the author.

Why this blog-like site, then? because I want to share things I develop/experience, and because I'm trying to keep my Austrian relatives and friends somewhat informed of my whereabouts - but not to the extent of "What did I eat yesterday"...

This voting system is unproven, high-tech and known insecure. That voting system is proven, low-tech and fairly secure. The Conslutant Price Question: which system are the murkins going to choose?

(a tip: forget common sense. The report? What report? Oh, that report. Well, that report is the work of defaitists, communists and open sourcers. We can't trust them, because of securrrity and terrror <badum-tish>)

Link to abusabletech

The pentagon recently canned SERVE because of the report.

Brian Raiter has written an excellent article about what overhead is involved in building ELF binaries, along with /bin/true in 45 bytes. This is nicely complemented by linuxassembly's guide on (guess what) assembly and Linux.

All very useful if you're a compulsive bit-twiddler and control freak (like me).
Brian Raiter's site
Linuxassembly's guide

...that fights back.

The languages of my choice are

• C
• perl
• and lisp -- despite the saying:

  LISP: To call a spade a thpade.

No real hacker should ever miss the Obfuscated C Contest nor its Perl Counterpart, these are truly awful. Wish I could write gems like those.

Participating or stealing^Wborrowing code from the entries is worth its time for sure, because you'd improve your job security vastly by emanating that weird code :-)

I'm firmly in favour of open source software, whatever exactly you may call it. The dark side would like to condition everybody with propaganda like this, but it is not going to work:

As we all know UNIX is very good for nice, common tasks like shooting yourself in your foot.
(more...)

Of course (#insert <asbestos.h>) emacs is my editor.

Tom Christiansen said:

Emacs is a nice operating system, but I prefer UNIX.

Nevertheless emacs is not my login shell.

Are you familiar with the following?

R$1<@$2>$3	$#error $@ USAGE $: "aaaaaaaaaaah"

Well, I am. Yes, very familiar. And I still like sendmail. Enough said.

There's a faint possibility that you might want to see what anti-spam hacks I've added to version 8.8.8+. Yes, I know that this is almost paleolithic in comparision to today's versions. Still it was a nice setup then. The new stuff is good for all of us, but there goes my effort :-).

Recently I've played with milter, the sendmail on-the-fly filter system - and I still like the beast (must be congenital, then).

...and the daemon is my good-luck charm which I have with..ahem, on myself all the time. The Guru levitation status is what I aspire to.

Check out userfriendly's daemon series: day one, day two, day three, day four, day five and (IMHO the best) day six.