Archive

Posts Tagged ‘security’

Papers analyzed, grid

October 11th, 2009 bodom_lx No comments

I’ve just finished to analyze the 12 papers of my research activity. I’m going to prepare a grid to summary and underline the main aspects. These will surely contain proposed solutions about the barriers against dynamic car pooling, UI design, social aspects and capital, security issues. We also bought the domain, that will be revealed when the WIKI will be set up

Related posts

Change MSN address

May 26th, 2008 bodom_lx No comments

VERSIONE IN ITALIANO
Dear Msn buddy, I’m going to change account.
For technical and political reasons I won’t continue to either use Microsoft Window Live Messenger or its protocol MSN Messenger.
I’m going to use Jabber/XMPP.
I would like to keep in touch with you and my other 200 contacts, so I decided to Read more…

Related posts

Server updates for the new year

January 2nd, 2008 bodom_lx No comments

Happy new year everybody!
I’m sure you found my site offline quite a lot of times in the last week. I decided to format the whole server and to move from the UML virtualisation system to the more convenient Xen system, which is still in beta testing at Linode but full working for my personal needing. The decision to switch to Xen was because of its support to multicore CPUs, needed by a couple of applications I’m using for personal studies.
The linux distribution I’ve chosen is Debian Etch again, stable, quite fast and easy to be maintained.
The software has been updated and some security tips have been adopted, and thanks to the free resources upgrade by Linode, Apache server has came back.
I’m really enjoying my VPS experience =)

Related posts

How to write secure php scripts – useful links

October 31st, 2007 bodom_lx No comments

If you’re interested in writing secure php sites, there are some useful sources to be read.
I suggest some links:

  • Writing Secure Php from the author of another useful article about mod_rewrite (Ilovejackdaniels.com), three pages
  • Creating a Secure Php Login Script A little tutorial from devshed.com
  • SecurePHP Yeah cool! A wiki about secure php! Lots of interesting articles!
  • Php Security Guide From PHP Security Consortium
  • Pro PHP Security A book written by Chris Snyder and Michael Southwell, well written. You should really buy it!…Ok…I’m about at page 150 of 500 but..I’s interesting, anyway :-P

Related posts

How to manage a card reader and the FSFE crypto card

December 17th, 2006 bodom_lx 9 comments

Just after 15 days I’m publishing a second English tutorial. This time I’ll speak about the Fellowship crypto card and how to make it work with a card reader (don’t you know what I’m talking about? Read this page about the fsfe card).
There are some nice tutorials around the net, I assembled them and there you will find how to install a card reader (in this case the famous SCR335) under Ubuntu, but it should work with every distro which uses Udev.
With this tutorial, you will be able to access your smart card reader without being root!
This tutorial is COPY & PASTE capable, if you don’t want to read all the comments, you can just copy and past these commands in your terminal, it should work without adjustments
EDIT: you don’t need pcscd/libpcsclite-dev, I would really thank Michael Kallas and Matthias Kirschner for their help!
First, install libusb-dev:

sudo apt-get install libusb-dev


I reccommend to install pcsc for accessing the card reader:

sudo apt-get install pcsc-tools pcscd


Now we need to set up the Udev rules and scripts, for accessing the usb card reader.
Download gnupg-ccid.rules in the right dir:

cd /etc/udev/
sudo wget http://www.fsfe.org/en/content/download/17665/125518/file/gnupg-ccid.rules

Download gnupg-ccid in the scripts dir:

cd /etc/udev/scripts/ (create it if it doesn’t exists)
sudo wget http://www.fsfe.org/en/content/download/17248/121800/file/gnupg-ccid

We need to set the correct permissions and a symbolic link:

sudo chmod +x /etc/udev/scripts/gnupg-ccid
sudo ln -s /etc/udev/gnupg-ccid.rules /etc/udev/rules.d/gnupg-ccid.rules

All the configuration files are in the right place and with the right permissions by now.

You will now create a group scard, give this group permission to access the smart card reader, and include the users who should have access to the card reader to this group.

sudo addgroup scard
sudo addgroup $USER scard

If $USER doesn’t work, replace it with your user login name.
Then create the file /etc/udev/rules.d/smart_card.rules using this command (thanks to gerloff)

cd /etc/udev/rules.d/
sudo wget http://download.task3.cc/smart_card.rules


Install libpcslite-dev (you need it because of some Udev problems)

sudo apt-get install libpcsclite-dev


Restart the system. You can verify the correct installation of the card reader with:

gpg –card-status

I hope you will find this tutorial useful :D

Credits:

Related posts

Usi un Browser alternativo? Sei una seccatura per la legge

September 2nd, 2005 bodom_lx No comments

Cnet ha da poco postato un articolo che denuncia da parte dell’High Technology Crime Investigation Association l’uso dei browser alternativi (come il grande FireFox, o il veloce Opera) come impedimento per le indagini investigative. La stessa Cnet prende a mio avviso un po’ in giro Exploder, scrivendo:

Internet Explorer hides nothing from police and other investigators who examine PCs to discover which sites the user has visited,[...]
Investigators know the location of the IE browser cache, cookie files and history, and they know how to read those files

Insomma, Exploder é un browser lento, non supporta bene XHTML, si inventa tag suoi e non supera nessun test CSS. Neppure la futura versione 7 non é in grado di superare l’acid test.
In veritá nessun browser la supera del tutto, ma se FireFox arriva a rappresentare almeno il 90% dell’immagine creata, Explorer 6 rappresenta solo i colori della faccina che se vede creare, andando a disegnare sullo schermo un bel quadro impressionista di forma quadrangolare. Explorer 7 fa la stessa cosa, e questo significa che questi (3? 4?) anni di sviluppo sono serviti alla m$ solo per agiungere il tabbed browsing…

… E non fa nulla per garantirci un po’ di privacy … La sicurezza in piú dei browser alternativi sta semplicemente nella diversa organizzazione dei file, i loro nomi e la loro localizzazione.
Grazie al cielo esistono alternative..
Cosa devo ancora scrivere per farvi passare tutti a FireFox? Ah si, le sue estensioni per aumentare la privacy! http://extensionroom.mozdev.org/list.php/Firefox/privacy e https://addons.mozilla.org/extensions/showlist.php?application=firefox&category=Privacy%20and%20Security

Related posts