Image of the glider from the Game of Life by John Conway
Skip to content

{ Category Archives } Security

OpenPGP, Android and RFC 3676

Now that I own an HTC Evo 4g, I’ve noticed that email is less than optimal. I blame the screen size, and the lack of good fonts and font sizes, but nonetheless, I’ve found some annoyances in my life with my Android device, and I’m guessing others are experiencing the same annoyances, be it on [...]

Elliptic Curve Cryptography in OpenSSH

I’ve been meaning to add this as a post, as it’s light and quick, but as the release of OpenSSH 5.7, Elliptic Curve Cryptography has been implemented. Why should you care? The generated keys are substantially smaller, the algorithm is faster and lighter, giving a break to slower CPUs and the cryptanalysis hasn’t shown any [...]

Image Puzzle – 2

In keeping with my previous post almost 4 years ago, these images will circumvent Digital Restrictions Management on Sony PS3 consoles. I have also licensed them under the Creative Commons Attribution 3.0 United States license. Enjoy!

SSH Known Hosts Fingerprints and Hostnames

i just came across this today, so I thought I’d share. It’s been more than a month since my last post (which is really out of my element), so I’m definitely due. However, I make no promises about making more frequent posts in the future. Today, someone came into the #unix channel on Freenode asking [...]

Password Cards

I’m actually surprised that I haven’t blogged this already. This is a topic that is right up my alley, so it definitely belongs here. How many times have you been told that you need to use secure passwords? This includes using uppercase and lowercase letters, numbers and symbols. You’re told to make your password hard [...]

Create Your Own Graphical Web of Trust

I created my GnuPG key back in 2004, and I’ve been very active with it since (thank you Glen). I have also seen graphical representations of the Web of Trust for a specific public keyring, and I’ve always been curious how I could create my own. Well, last night I finally buckled down and figured [...]

OFTC, SSL, NickServ and Irssi

I’m on a bit of an IRC kick with the blogging lately, mainly because it seems I’m usually fine tuning my settings, and I like to share what I find. Hopefully, someone finds these posts useful. For today’s post, I’ve picked setting up an SSL connection on OFTC and securely identifying to NickServ when connecting. [...]

Freenode, SSL and SASL Authentication with Irssi

Last night, Freenode made the migration from hyperion-ircd to a fork of charybdis-ircd they’re calling ircd-seven. There are a few notable changes in the new ircd code that are worth mentioning here that are of benefit to end users and clients. They are the ability to use OpenSSL encryption between client and server and the [...]

How Travelers Can Protect Their Data

I used to travel quite extensively around the country, and even had the opportunity to leave the country and go abroad. My laptop was always with me. As a result, I was very concerned for the integrity and safety of my data. As such, I took the necessary precautions that travelers can take when their [...]

Evil Maid

Two weeks ago, we had the Utah Open Source Conference, and I gave a presentation on how to crack passwords when you have physical access to a box. You can find my slides and materials here (3MB tar.gz). As an overview of my presentation, I discussed that if you have physical access to a machine, [...]

Scrubbing Hard Disk Data

I’ve recently had the opportunity with wiping 13 SCSI drives. The drives are small- 36 and 18 gigabyte drives, and they do contain sensitive data. They will be sent off to a third party for physical destruction, but we need to make sure that the data is completely overwritten on the disk in a secure [...]

GnuPG Up And Close

Every GNU/Linux distribution ships with GnuPG by default. While they all don’t ship with the same GUI frontend, they do ship with the the same CLI backend. So, we’ll be interfacing with that throughout this informational session. I’m not presenting this as anything necessarily useful. Rather, I hope you find it informational/educational, and learn a [...]

My SSH Tips – Yes, More Than One

There is a meme going on with Planet Debian right now about SSH tips. Here’s mine. I used to travel the country teaching Linux System Administrators. I have spent many a day in airports, hotels and training centers. Whenever there was a network connection available, I was on it, mainly with SSH. SSH is so [...]

GNU Shred

So, due to the bad shape of the economy I was let go from my position as a Linux instructor and guru. As unfortunate as it is, I have to press forward looking for the best job that fits my skill set. However, the point of this post isn’t to complain about being laid off, [...]

Identification vs Identity

I had an interesting discussion yesterday at work, that I would like to share here. It was in regards to when the proper time presents itself to show identification versus identifying them on the outset. As you can probably imagine, this was the subject of GnuPG key signing. So, let’s start first with a couple [...]