Categories
CERT

The WOW-Effect

This week I had some fun helping a co-working with a paper regarding the effect of WOW64 (the 32-bit environment of 64-bit Windows) on various tools and procedures that security analysts use.

The result is here: The WOW-Effect.

Categories
Tracks

Tracks

Another lazy Saturday track:

Categories
Tracks

Tracks

We did away with the old children’s corner in the living room and the new setup gives us more space. See e.g. these tracks:

(My regular digicams are not available, thus I had to resort to the camera on my old Nokia phone.)

Categories
CERT Internet

#DigiNotar and paying for an audit

The question Mozilla, Microsoft and Apple should be asking themselves now is:

Which other CA do they trust based on an audit by PwC? Their green light on DigiNotar was so flawed that I have serious doubts about anyone else they certified as a trustworthy CA.

This is a bit like the financial rating agencies at the height of the 2008 banking crisis: why the hell should I trust the audit/rating of someone who is paid by the people they are auditing/rating and who need an “all fine”/AAA result?

Categories
Internet

RIP Semantic Web

How many research grants have been awarded to “Semantic Web” research proposals over the last few years? I always maintained that this is a typical academic solution to a problem that will be solved by very simple additions to the existing web like microformats.

Now the search heavyweights have joined the semantic web for real. But not by doing RDF or any of those full blown perfect solutions developed over the last years by burning research money.

As I see it, most of the research projects are now completely obsolete given the launch of schema.org.

Categories
System Administration

Nokia 2680s and iSync

Now that Andrea owns a Mac again it was overdue to get iSync up and running with her Phone.

iSync is nice, but her Nokia 2680 is neither supported by the 10.7 iSync, nor does Nokia provide a suitable plugin. Luckily, there are alternatives. Paul Bain has published a few plugins on his blog, including one for the 3600 Slide. According to one of the comments, that should be pretty easy to adapt for the 2680s.

Installing the plugin and replacing all occurrences of “3600 Slide” with “2680s” was simple, but it didn’t work: iSync still complained about an “unsupported phone”.

The solution became apparent when looking at the log in /var/log: the phone is actually a “2680s-2”, and once I got the strings right, iSync was happy.

To make things easier for others trying to replicate this, here is a zip of the my resulting plugin. (And I hope plain zip did the job, and I’m not running into some macos resource fork & co weirdness.)

HTH.

Categories
Tracks

Tracks

Categories
Austria Pet Peeves

Digitale Signatur mal wieder

Heute hat mich ein Kollege zu einem signiertem PDF befragt: Ist das korrekt und qualifiziert unterschrieben?

Sind wir mal naiv und öffnen es mit Acrobat X. Ja, ist signiert, kann das aber nicht überprüfen. A-Trust tools sind installiert; ein update auf den aktuellen download von a-trust ändert nichts dran, dass ich von dem Teil nur Fehlermeldungen bekomme.

Ok, gut, wozu gibt es einen Online-PDF checker unter https://www.a-trust.at/pdfverify/. Nix da:

Nur gut, dass die RTR bessere Arbeit abliefert: Der Online-Validierer unter https://pruefung.signatur.rtr.at/ funktioniert.

Categories
Life

Sandman, send me some dreams

An evening with two other kids at home: Cooking for the whole pack and then watching the sandman on tv together.

Categories
Life

Murphy’s law

I was invited to give a talk at Donau-Uni Krems and was wondering whether to take the train or drive myself by car. I chose the train.

Big mistake: electrical problems between St. Andrä-Wördern and Tulln, thus we’re delayed for a long time.

I should have stuck to the original plan of taking the car and scoring a crate or two of wine.