Storing a GPG keyStoring a GPG key
Chris Lamb has suggested storing a GPG key on a RAID-5 device [1]. The idea is that it can be stored on several physical block devices such that losing just[...]
Category: Security
Secure Computation on an Insecure BaseSecure Computation on an Insecure Base
Julien Goodwin asks whether an insecure platform can perform secure computation [1]. My immediate reaction was to recall Charles Babbage’s quote On two occasions I have been asked,—”Pray, Mr. Babbage,[...]
LCA 2008 Security Blogging ContestLCA 2008 Security Blogging Contest
I have decided to run a contest for security related blog posts that appear on Planet Linux Conf Au [1]. That Planet is for people who are attending Linux Conf[...]
Bruce Schneier Advocates no EncryptionBruce Schneier Advocates no Encryption
Bruce has written an interesting post about wireless encryption [1]. His main ideas seem to be that it’s nice to provide emergency net access for random people, that attempting to[...]
SE Linux in other DistributionsSE Linux in other Distributions
Recently a user has been asking about SE Linux support in MEPIS [1]. He seems to expect that as the distribution is based on Debian it should have the same[...]
Safe Banking by SMS?Safe Banking by SMS?
Is it possible to secure Internet banking with SMS? As secure tokens are too expensive ($10 or more in bulk) and considered to be too difficult to use by many[...]
Restorecon Equivalent for Unix PermissionsRestorecon Equivalent for Unix Permissions
SE Linux has a utility named restorecon to set (or reset) the security context. This is useful for many reasons, corrupted filesystems, users removing files or changing the context in[...]
SecureCon LectureSecureCon Lecture
On Thursday at Secure Con [1] I gave a lecture about SE Linux that went according to plan, and they gave me a nice bottle of Penfolds Shiraz afterwards (thanks[...]
SecureCon TutorialSecureCon Tutorial
My SecureCon tutorial went quite badly today. After having network problems and having both the Xen servers crash for no apparent reason I had to give up and give an[...]