Tenet Nosce

tag:blogger.com,1999:blog-168946262009-11-05T08:23:38.985+02:00Tenet NosceA collection of thoughts, tips and tricks and other ponderings relating to technology.stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.comBlogger53125tag:blogger.com,1999:blog-16894626.post-84575150977899857672009-04-22T14:16:00.002+02:002009-04-22T14:54:13.882+02:002009-04-22T14:54:13.882+02:00OpenSource Project of the day

Over the last couple of weeks I have tried to regularly send a tweet with my choice of Open Source or Free Software security project of the day.For those that missed some, here they are:FreeIPA http://www.freeipa.org/Lynis http://www.rootkit.nl/projects/lynis.htmlKismet https://www.kismetwireless.net/MailWatch http://mailwatch.sourceforge.netSOMAP.org : http://www.somap.org/OpenSC http://

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com1http://blog.stephanbuys.com/2009/04/opensource-project-of-day.htmltag:blogger.com,1999:blog-16894626.post-82140947868188224742008-09-23T15:29:00.002+02:002008-09-23T15:31:49.024+02:002008-09-23T15:31:49.024+02:00m0n0wall plugin for OSSIM

Just released a OSSIM plugin for m0n0wall. Just point your m0n0wall logging to an OSSIM sensor (via syslog) and have fun.Find it here: m0n0wall plugin

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2008/09/m0n0wall-plugin-for-ossim.htmltag:blogger.com,1999:blog-16894626.post-27445468171838191762008-08-26T08:45:00.001+02:002008-08-26T09:04:47.144+02:002008-08-26T09:04:47.144+02:00ipfw and OSSIM

Saw in the CVS update mailing list that my ipfw plugin for OSSIM is now generally available.

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2008/08/ipfw-and-ossim.htmltag:blogger.com,1999:blog-16894626.post-87586543286573091642008-08-19T09:56:00.002+02:002008-08-19T10:00:46.925+02:002008-08-19T10:00:46.925+02:00OpenVAS released

I just read that OpenVAS (http://www.openvas.org), a well-organised fork of Nessus has been released to the world. What really warms my heart is that I see familiar names from the Kolab (http://www.kolab.org) are behind the fork.This is combination with Alienvault's (http://www.alienvault.com) sponsored development of free (announcement) OpenVAS/Nessus plugins makes the whole arena quite exciting

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2008/08/openvas-released.htmltag:blogger.com,1999:blog-16894626.post-9296564810447529262008-07-11T08:29:00.003+02:002008-07-11T08:37:09.011+02:002008-07-11T08:37:09.011+02:00Is FOSS secure by default?

Unfortunately a lot of people equate a lack of software vulnerabilities with security. Here in South Africa we are trying to help institutions to make good choices around FOSS (Fee and Open Source Software) and security looking at policies, procedures, standards and guidelines and how they apply to FOSS.If you think tha FOSS is secure by default please read the following article which highlights

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com2http://blog.stephanbuys.com/2008/07/is-foss-secure-by-default.htmltag:blogger.com,1999:blog-16894626.post-26483924717177854072008-05-01T13:46:00.002+02:002008-05-01T13:51:02.503+02:002008-05-01T13:51:02.503+02:00Mac OSX Hints double whammy

Good day for me today :-)Mac OSX Hints have published two of my Mac hints! Quite pleased with that!http://www.macosxhints.com/article.php?story=20080427091554310andhttp://www.macosxhints.com/article.php?story=20080427091327509

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2008/05/mac-osx-hints-double-whammy.htmltag:blogger.com,1999:blog-16894626.post-20280161325826140112008-04-23T16:41:00.003+02:002008-04-23T16:47:13.639+02:002008-04-23T16:47:13.639+02:00Getting Alex to read you to sleep (Make your own Audiobooks on a Mac)

I have recently undertaken some training in which I have to cover a massive amount of material. Being the natural procrastinator that I am I immediately went on the prowl for better books, better methods and all other sorts of periphery that doesn't actually count as studying.One of these projects was to convert the text versions of my study guides to audio so that I could listen to the text in

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2008/04/getting-alex-to-read-you-to-sleep-make.htmltag:blogger.com,1999:blog-16894626.post-36098212483804057822008-04-23T16:16:00.001+02:002008-04-23T16:16:11.456+02:002008-04-23T16:16:11.456+02:00Suffering and kids dont mix.

So my four year old has pneumonia. I'm sitting here chilling with him in hospital while he watches DVDs. Luckily its not too serious - its more important that he just goes through the medication and rest.The bad part is the kids crying next door. Couple of babies in here - it truly isn't fair that they have to suffer when they are too young to understand.

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com1http://blog.stephanbuys.com/2008/04/suffering-and-kids-dont-mix.htmltag:blogger.com,1999:blog-16894626.post-84002342879154866562008-04-23T11:16:00.001+02:002008-04-23T11:16:54.155+02:002008-04-23T11:16:54.155+02:00Twittered

For all my thousands (not!) of followers, I am also available on Twitter now. Just have a look at the side-pane for more information.

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2008/04/twittered.htmltag:blogger.com,1999:blog-16894626.post-27350929512908151342008-04-09T10:00:00.002+02:002008-04-09T10:58:58.534+02:002008-04-09T10:58:58.534+02:00Getting Things Done with Leopard

Stumbled across this post about how to setup a GTD system with Applications that ship with Leopard. Go check it out: http://dennisbest.org/simple_leopard_gtdI personally use OmniFocus and have found it to be a great productivity booster.

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2008/04/getting-things-done-with-leopard.htmltag:blogger.com,1999:blog-16894626.post-38678605892064010422008-04-09T09:52:00.002+02:002008-04-09T09:56:26.173+02:002008-04-09T09:56:26.173+02:00Time to test Firefox 3 on the Mac

If you have not yet grabbed Firefox 3 Beta 5 from Mozilla (http://www.mozilla.com/en-US/firefox/all-beta.html) you should try it now. Up until Beta 4 plug-ins were pretty broken. I am happy to see that my Nopassword, Del.ico.us, Passwordmaker and other plugins work properly now.

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com1http://blog.stephanbuys.com/2008/04/time-to-test-firefox-3-on-mac.htmltag:blogger.com,1999:blog-16894626.post-38533548630305455462008-02-27T09:22:00.004+02:002008-02-27T10:00:23.637+02:002008-02-27T10:00:23.637+02:00Protecting a Macbook (Pro) against harddrive encryption loophole

In the last couple of days a lot of attention has been given to the paper "Lest We Remember: Cold Boot Attacks on Encryption Keys". The attack outlines how laptop disk encryption is vulnerable due to the properties of RAM and its retention of the encryption keys. Its a pretty sophisticated attack and one can assume that the kind of subject that will perpetrate this attack is pretty serious about

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com1http://blog.stephanbuys.com/2008/02/protecting-macbook-pro-against.htmltag:blogger.com,1999:blog-16894626.post-33390891042782725132008-02-14T10:35:00.002+02:002008-02-14T12:29:05.055+02:002008-02-14T12:29:05.055+02:00FOSS and Security experience in South Africa? Who are you?

Dear Lazyweb,The company that I work for, Exponant, is currently looking for skills in Information Security and FOSS (Free and Open Source Software).If you are an experienced professional in the above areas I would love to hear from you.On the security side we are looking for senior engineers and architects.On the FOSS side we are looking for individuals with experience with FOSS in the

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2008/02/foss-and-security-experience-in-south.htmltag:blogger.com,1999:blog-16894626.post-62184165553372012872008-02-01T14:41:00.000+02:002008-02-01T14:44:58.487+02:002008-02-01T14:44:58.487+02:00Microsoft and Yahoo!

Wow! By far the biggest news of the year is that Microsoft has put in a bid to buy Yahoo!Amazing news on so many levels, Yahoo! has been languishing for years and neither Microsoft or Yahoo! have been able to really respond to Google's dominance in the search market. This hot on the heals of Google's missed earnings...

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2008/02/microsoft-and-yahoo.htmltag:blogger.com,1999:blog-16894626.post-45699124682235366212008-01-28T11:24:00.000+02:002008-01-28T11:30:02.233+02:002008-01-28T11:30:02.233+02:00Open Season for Open Source

Nokia has acquired Trolltech. This hot on the heals of Sun's acquisition of MySQL. It truly is an exciting time and really gratifying for those of us that have been saying for years that Open Source Software is viable and that it makes sense to businesses.I've always had a soft spot for KDE and Trolltech and it really seems like a great opportunity for them to truly become serious players. Webkit

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2008/01/open-season-for-open-source.htmltag:blogger.com,1999:blog-16894626.post-17229709151533887752008-01-16T08:59:00.000+02:002008-01-16T09:22:21.471+02:002008-01-16T09:22:21.471+02:00Want to share your Wi-Fi like Bruce Scheier? Here's how (and no, its not by leaving it open).

I have been giving Bruce Schneier's article about leaving his wireless network open a lot of thought lately. Although I agree that its great to help out your neighbours there are just too many risks to leaving your Wi-Fi open. Paul from Pauldotcom raises very good points to which I wholeheartedly agree. Why risk leaving it open? It is analogous to leaving your sugar on the curb in-case a

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2008/01/want-to-share-your-wi-fi-like-bruce.htmltag:blogger.com,1999:blog-16894626.post-32756240654368800162008-01-11T09:50:00.000+02:002008-01-11T09:54:39.244+02:002008-01-11T09:54:39.244+02:00Steal This Wi-Fi

A very interesting, thought provoking, article by Bruce Schneier.Security is all about tradeoffs, you can choose never to participate in dangerous activities like flying or driving a motorcar but most of us choose to assume the risk.

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2008/01/steal-this-wi-fi.htmltag:blogger.com,1999:blog-16894626.post-37308487343562817292008-01-10T15:17:00.000+02:002008-01-10T15:34:32.443+02:002008-01-10T15:34:32.443+02:00Mac OSS roundup

Thanks for KMF for some of these.Looking for OSS software for Mac OS X?Here is a list of very useful Open Source Software/Free Software directories for the Mac. I have used a couple of these with great success. There inevitably is some duplication, so be warned.Here they are:Open Source Mac (http://www.opensourcemac.org/)FreeSMUG (http://www.freesmug.org/)iUseThis (http://osx.iusethis.com/search?

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com1http://blog.stephanbuys.com/2008/01/mac-oss-roundup.htmltag:blogger.com,1999:blog-16894626.post-86521906573522777762008-01-10T13:52:00.000+02:002008-01-22T07:54:50.857+02:002008-01-22T07:54:50.857+02:00Apple Address Book and Microsoft Exchange (LDAP)

I had a short discussion this afternoon with a fellow Mac fanatic (KMF) discussing the problem we both share and that is: Accessing Microsoft Exchange from Mac OS X.There are three elements that you would mostly be interested in: email, calendar and contacts. This quick howto deals with getting Address Book to work with LDAP (Microsoft Active Directory in our case).Step 1: Determine the default

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com26http://blog.stephanbuys.com/2008/01/apple-address-book-and-microsoft.htmltag:blogger.com,1999:blog-16894626.post-89248416665589486792008-01-03T07:51:00.000+02:002008-01-03T08:03:22.967+02:002008-01-03T08:03:22.967+02:00w00t

I am very pleased to report that some feedback I sent was featured on the Security Now! podcast.There are some podcasts that I make a genuine effort to keep up with and a lot of those come from Leo Laporte's brilliant TWiT network.Just search the shownotes of show 124 for "Stephan Buys" to read my suggestion regarding private browsing by manually managing cookies in Firefox, alternatively listen

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2008/01/w00t.htmltag:blogger.com,1999:blog-16894626.post-82672377595345362122007-12-20T13:43:00.000+02:002007-12-24T12:27:40.429+02:002007-12-24T12:27:40.429+02:00Mac OS X Open Source and Security

Previously I blogged about my regularly used Open Source applications on the Mac. Today I am dealing with some applications that deal with security on the Mac. In my career I wear two hats, one of Open Source advocate/developer/consultant and then also a security consultant hat.I also have a keen interest in keeping my Mac secure when using it from day to day - thus the tools I am about to

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2007/12/mac-os-x-open-source-and-security.htmltag:blogger.com,1999:blog-16894626.post-20995107767579881132007-12-19T09:10:00.000+02:002007-12-19T09:53:33.283+02:002007-12-19T09:53:33.283+02:00Mac OS X Open Source Roundup

As we approach the end of the year, here is a list of really usefull Open Source utilities and applications that I use regularly on my Mac.I run Mac OS X 10.5 (Leopard), but most of the applications should work on Tiger (10.4) as well.Freemind (http://freemind.sourceforge.net/)Indispensable mind-mapping application written in Java. I have been using Freemind for years on Linux, Windows and of

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com2http://blog.stephanbuys.com/2007/12/mac-os-x-open-source-roundup.htmltag:blogger.com,1999:blog-16894626.post-39929786458884198412007-11-28T14:58:00.000+02:002007-12-19T09:08:37.251+02:002007-12-19T09:08:37.251+02:00How to FLOSS

In my never ending quest to discover good up-to-date resources about Open Source Software I stumbled across the following."This guide (developed in the context of the FLOSSMETRICS and OpenTTT projects) present a set of guidelines and suggestions for the adoption of open source software within SMEs, using a ladder model that will guide companies from the initial selection and adoption of FLOSS

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2007/11/how-to-floss.htmltag:blogger.com,1999:blog-16894626.post-8965215515847491992007-11-20T15:14:00.000+02:002007-12-19T09:09:08.361+02:002007-12-19T09:09:08.361+02:00WEP?? Leopard Internet Sharing Woes

I anxiously awaited Leopard in the hope that Intenet Sharing would support WPA. I have a really hard time understanding why Leopard supports Internet Sharing through WEP. Aircrack-ng and other tools can crack WEP in uder a minute - it just does not make sense.Perhaps the Lazyweb can recommend a solution whereby I can do WPA through third party support? From what I understand WPA has the same

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2007/11/wep-leopard-internet-sharing-woes.htmltag:blogger.com,1999:blog-16894626.post-76093913995867397822007-11-16T09:28:00.000+02:002007-12-19T09:09:08.362+02:002007-12-19T09:09:08.362+02:00Leopard Firewall - OS X 10.5.1 relief

I'm glad to report that this morning after updating to Mac OS 10.5.1 the firewall seems to be working as advertised. They dropped the "Block all incoming" moniker and replaced it with "Allow only essential services", which I selected.Also, I enabled "Stealth Mode" under Advanced.I then ran some tests from another host to verify that the firewall was up and it seemed to be performing as advertised

stephanbuyshttp://www.blogger.com/profile/07275466765701557346noreply@blogger.com0http://blog.stephanbuys.com/2007/11/leopard-firewall-os-x-1051-relief.html