security
The most important updates in Red Hat Enterprise Linux 6
This week’s techmail is The most important updates in Red Hat Enterprise Linux 6. Disclaimer: I didn’t give it that title. =) It mostly looks at the security features of RHEL6 and what makes it compelling (to me, who is more concerned about security than pretty much anything else) as a server operating system. So [...]
Turn your Mac into a security surveillance centre
Last week’s mac techmail was Turn your Mac into a security surveillance centre which discusses the SecuritySpy software and using it to watch the feeds of remote video cameras. Very cool stuff, and shockingly inexpensive (the cameras I got now monitor the exterior of the house, and they were about $100/ea). Nothing super fancy (pan/tilt/zoom [...]
How not to update GPG keys
This seems to be an ongoing saga so now I’m going to vent about it. It is ridiculous that an organization supposedly as secure as CERT can have such poor distribution mechanisms for alerting users of their new GPG keys. It is really important that, when you update GPG keys and distribute the public key [...]
Learn to use extended file attributes in Linux to boost security
This week’s TechMail is Learn to use extended file attributes in Linux to boost security which takes a look at using chattr, getfattr, setfattr, getfacl, and setfacl; tools that can be used to offer more granular security to files and directories. Being able to use SELinux or GrSecurity, AppArmor, and other security enhancements to the [...]
Towards responsible disclosure
This week was interesting, dealing with the supposed “OpenSSH 0day” vulnerability stuff… rumours, innuendo, strange logs and packet capture files… it made for a long week trying to keep an eye on this and sort fact from fiction. Instead of focusing on the issue itself like other blogs and news sites are doing, I thought [...]
Store passwords with pwsafe
This week’s techmail is Store passwords with pwsafe which looks at the pwsafe CLI application that can keep track of all your passwords and login credentials in a safe and secure manner (and throws in strong password generation as a bonus). Really useful app.