Affichage des articles dont le libellé est english. Afficher tous les articles
Affichage des articles dont le libellé est english. Afficher tous les articles

An idiot security auditor

At my current professional position, I am concerned by I.T. security, including auditing (PCI-DSS). PCI-DSS requires the audit to be realized by a Qualified Security Assessor (QSA). This is to say I know a little about the topic.

Now I've just found out about the following story titled "Our security auditor is an idiot, how do I give him the information he wants?" which was certainly a big source of headache, anger and frustration for its writer.

I do not expect to meet the same kind of issues with our QSA, hopefully.

Twitter, Facebook: what the h... ? Que se passe-t-il ?

[VERSION FRANCAISE PLUS BAS]

Face-what? Twit-who ? Did I actually cross the line ? Indeed, I have. So here we go :  Twitter and Facebook. And now a friend is proposing a Google+ account to try it. Let's see.

Anyway, I see this more like "I am opening Internet to my website" that "I am opening myself to Internet". I'll use these social networks points of concentration to notify and redirect to my own website.

EN FRANCAIS DANS LE TEXTE

Que s'est-il passé ? La fin des haricots ? Les poules ont désormais une dentition ? Un mauvais rêve ?

Nope.

J'ai décidé de créer un compte Twitter et un compte Facebook. Je l'envisage plus comme un moyen de faciliter l'accès à mon blog, qu'autre chose. J'envisage d'avantage l'usage de ces réseaux sociaux comme des points de cencentration me permettant de prévenir et de rediriger vers mon propre site.


Two Cisco SUP720-3BXL

I let you guess what is the difference between these two Cisco SUP720-3BXL supervision cards ?
Two Cisco SUP720-3BXL

The one on the left is a regular functionning one, whereas the one on the right is a regular ... no more functionning one.

How to spend a Friday night making sure your backbone network is 100% operational and redundant and everything, instead of having a beer (or whatever you like).

Rentabiliweb in London

Après Rentabiliweb à La Réunion (accès restreint), voici Rentabiliweb à Londres (par une journée presque ensoleillée, et non pluvieuse à souhait comme le prédisait les météorologues).
Rentabiliweb was here (London, UK)

Back ... again ... for how long ?

For more than one year, I have posted simply ... nothing.

Two reasons :
  • I have had to shutdown the server I was formely using for two years and did not take the time to set something else until now. It was my server, and I could use it for free. Thanks to you, "how you know" ;)
  • I did not care for that while too, pretty busy at work.
Maybe this time, I will maintain my site (mostly a blog) for a longer period of time.

Hey, after a couple of years, I have finally added a gallery of my pictures ! Check here. I have decided to use Picasa for the 1GB storage. But I miss the the Flickr's collection feature. I hope Google will add it soon.

A law enforcement to make camera phones "click"

What is it ? A new anti-terrorist and/or anti-pedophile thing ? A law proposal to force cell phones with a camera to make a tone when shotting :
I think this is the kind of idea some of our representatives at the French Parliament could try to come with. Too sad to make me laught.

In wide or open area, what about long-range opticals to safely shot from far ? And for small and closed places, what about opening the cell phone box to unplug the speaker ? This is worthy for any real hunter seeking for a target (a person or a place).

This will only affect common people that would quielty and peacefully take some pictures in the middle of others that would have done it without disturbing every one or yet getting people angry just for the tone, not the pictures done.

Configuring IP aliasing with Mac OS X

For some reason, I want to set up some alternate IP addresses on my MacBook, that runs Mac OS X. Basically, to set up such an address on Mac OS X, you run something like :

ifconfig en0 alias 10.10.0.1 255.255.255.0

This is easy to do it this way, but this is pretty volative : when you reboot your machine, the alias will not be there anymore. Basically, it seems there is no way to keep beyond the reboots ... at least with the workstation version of the operating system. I’ve read on some site (sorry, I didn’t keep it in my bookmark) that Mac OS X Server has such a process, with the script /System/Library/StartupItems/IPAliases/IPAliases, that reads the configuration file /etc/IPAliases.conf. It will the following variable is defined in /etc/hostconfig:

IPALIASES=-YES-

The format of the configuration file is available online at Apple’s developper site.

Actually, I was suprised to see an Apple’ support site article telling you how to set IP aliasing creating the script /Library/StartupItems/IPAliases/IPAliases and the corresponding plist file /Library/StartupItems/IPAliases/StartupParameters.plist. This is just a script that does not use any configuration. Well, this article is about Mac OS X 10.0. At least since 10.3 (I’ve learned the system with this version), you are not supposed to modify anything in /System so I consider that /Library/StartupItems better fits.

Finally, I decided to write the script /Library/StartupItems/IPAliases/IPAliases to reproduce Mac OS X Server’s one behaviour. It is pretty very simple and has nothing magic. Just that it is useful. Notably, I am not sure using a configuration variable put in /etc/hostconfig is «the way» to do with recent version of Mac OS X (Leopard by now). Here it goes:

#! /bin/sh

. /etc/rc.common

CONF=/etc/IPAliases.conf

if [ ! "${IPALIASES:=-NO-}" = "-YES-" ] ; then
exit 0
fi

if [ ! -f "$CONF" ] ; then
ConsoleMessage "File $CONF does not exist. No IP aliases to define."
exit 0
fi

cat $CONF | grep -vE '^[[:space:]]*(#.*)? | while read ALIAS ; do
INTERFACE=$(echo $ALIAS | cut -f1 -d:)
IPADDR=$(echo $ALIAS | cut -f2 -d:)
NETMASK=$(echo $ALIAS | cut -f3 -d:)
NETMASK=${NETMASK:+netmask $NETMASK}
ifconfig $INTERFACE alias $IPADDR $NETMASK
RET=$?
if [ "$RET" -ne 0 ] ; then
MSG="$RET (error)"
else
MSG="0 (OK)"
fi
ConsoleMessage "IPAliases: ifconfig $INTERFACE alias $IPADDR $NETMASK / returned $MSG"
done

Then the plist file /Library/StartupItems/IPAliases/StartupParameters.plist that goes with it:

{
Description = "IP aliasing startup";
Provides = ("IPAliases");
Requires = ("Network");
OrderPreference = "None";
Messages =
{
start = "Starting IP aliasing";
stop = "Stopping IP aliasing";
};
}

It reads a configuration file named /etc/IPAliases. This is sample:

# IPAliases.conf
#
en0:10.1.0.1/24
en0:10.2.0.1/24

New servers just arrived

The new servers
Early in the afternoon today, a "couple" of new servers have been delivered to the office, mainly for a dedicated application platform. They follow four routers like the ones on the picture. It’s gonna be "fun" when we will move these boxes to the hosting datacenters ... including one in the very middle of Paris (the office is just ... an office, no technical resources).

The new routers (not brand new)
In the meantime, it’s gonna take some time to get them operational and a great opportunity in the case of the routers to learn and improve my knowledge of Internet routing (BGP and so).

Enjoy !

When sysadmins ruled the Earth

Internet est attaqué à l’échelle mondiale par des vers qui le font s’effondrer en partie. Des milliers d’ingénieurs se retrouvent côte à côte pour réparer les dégâts, s’enfermant dans les centaines de centres d’hébergements qui constituent Internet, isolés du monde réel.
 
S’en suit une attaque bien plus concrète et dévastatrice : le Monde est sous le feu d’attaques massives à base d’armes conventionnelles, biologiques et nucléaires.

C’est ainsi que les « sysadmins » deviennent les nouveaux gouvernants du Monde afin de le sauver.

Il s’agit d’une nouvelle de Cory Doctorow qu’il nous présente ici (en anglais) et dont le texte original est disponible ici et ici. Une traduction française est disponible ici.

Il nous explique que cette nouvelle fait partie d’un groupe de cinq autres intitulé Overclocked : Stories of the Future Present publié en 2007. Je n’ai encore lu que celle-ci ; je ne vais pas trainer pour lire les autres !

Pour ceux qui ne savent pas quoi faire de leur pause déjeuner, voici une lecture toute trouvée.

From my "100000km" CBF600 to my "Bumblebee" CBF1000

The day I got my 1st motorcycle
I have bought my first motorcycle, a Honda CBF600SA4 with 95,200km. I have learned to drive and passed my driver license with a CBF600N so I already knew that bike a little bit. I trusted my local Honda store when he made me a proposal for that ’S’ one, and I have started my experience as a motorcycle driver with it. This is a bike that makes you very confortable on board (excepted under the rain where I doubt any motorcycle will ever make me feel safe).

100,000km
A few months later and after the symbolic 100,000km step, I have made quick estimations about the coming expenses : 2 front brake disks, rear shock and chain kit to replace, major revision and engine distribution at 120,000km.

Moreover, on the freeway, with a passenger on-board, the engine is limited for accelerations forcing me to step down from the 6th to the 4th gear, regularly thinking about the engaged gear in some situations, etc. The maximum speed is definitely not a problem for me : I will probably never reach the 200kph that a CBF 600 can do, or maybe on a race circuit. And I and my favorite passenger have had nice trips on little roads without any problem for re-accelerations under 100kph.

102,000km
I was and am still convinced that the CBF 600 is an excellent motorcycle, easy to ride, perfect to learn to drive and so reliable. I will still advise the CBF600 for a new motorcycle driver.

But I would prefer to put money in a recent or new bike more than an "old" (only three years) one. I am also interested in getting more torque (too early for my experience, I admit).

After more budget estimations and some negociations with my local Honda store, I have finally acquired a brand new Honda CBF 1000 A8 in yellow.

Just bought Bumblebee
I have just completed the first 1,000km : what a pleasure to have a new bike (more confortable for everything) and this sweety and smoothy engine ! Its maximum torque is at 6500rpm (8200rpm for the 600cc) and it is very easy to drive inner cities (commuting in Paris, as a typical example). No need to go far with the right handle nor to worry about the engaged gear. Just ride.

Note that a CBF1000 is not something like a Kawa Z1000 or a Triumph Speed Triple which are very beautiful, but also more "sport" styled (I did not say "race"). I have choosen the CBF1000 because I can afford it, because of Honda reliability, because I have a local Honda store I trust, because I have appreciated the CBF600, because the people I know who has one love it.

I just hope that the weather in France will get better, as it is anything but sunny, on the contrary of my "Bumblebee" CBF1000.

Fear is also what our leaders may wish

Last year, I’ve published a short article titled “Fear is what terrorrists want” with a reference to Bruce Schneier. I also think fear may might what our leaders may wish, as a way to have more control on the people, as a way to justify privacy violation by the gouvernments in many countries with the main consequence to have our freedom reduced.

Today, on the same topic, Bruce Schneier he tells us to «Refuse to be Terrorized», by Schneier, referencing the action «I am not afraid», which proposes to contact your officials and tell them to «stop being afraid, and stop acting out of fear». This action is specific to the USA, but I think it may apply to other countries, including France and the UK.

Final shutdown of my historical server

Thursday 20 December, 2007, 03:00 GMT+1 :

indiana:/# halt -n -f -p

This is the final shutdown of my «historical server» , indiana.

In 2001, when I was still a student, I’ve had the opportunity to put my own machine at a small local ISP near Bordeaux (France) named Atlantic Line. The machine was already set and running at home for a year for homework. One year later, this ISP was merged into a bigger local ISP : Alienor. My server moved to Alienor with all the other machines without any kind of requirement from the ISP, which I appreciated much. Some time ago, I was the sysadmin for the French LUG ABUL which was hosted by Atlantic Line and is hosted by Alienor for a couple of years by now. This justified my own server. As long as I have quit this LUG for a while, it made sense it was time to have my server removed.

Thank you very much, Alienor and the ABUL, for having let me have my first own server on the Internet for these years.

This machine let me discover Debian GNU/Linux and has been through many releases :
  • 2000 : a mix of Potato as stable + Woody as testing,
  • 2001 : Woody as stable,
  • 2004 : Sarge as stable,
  • 2007 : Etch as stable.
All apt-get update && apt-get dist-upgrade were operated remotely (from Japan for the upgrade to Woody !) without a hitch, only minor problems. It has run Apache, OpenLDAP, Cyrus+Postfix+Amavis+SpamAssassin+Clamav, MySQL, Nagios, Cacti, OpenVPN ... and obviously GNU/Linux.

Since its beginning, I’ve had to change the hardware once in 2005 but the running system was strictly duplicated (tar c|tar x), so for me, it was a seven year old system that I have shutdown tonight.
By the way, the hardware was failing for a few days (some block disk errors with SMART and CPU/MB temperature peaks - some fan issue ? - were monitored). It was really the time to end it.

For those who may think «hey guy, seven years does not make it historical», I tell you : it is, to me. It corresponds to a period where we started the battle against software patents in Europe, where the first Libre Software Meeting sessions were organized, where I personally discovered the Free Software state of mind, not just the technical aspect (my first Linux experience was in 1996). It does matter to me.

And for those wondering why I’ve done a halt -n -f -p, the reason is : a couple of dd if=/dev/random of=/dev/hd? just before, still remotely. You guess ?

A proposal for a limited time marriage in Germany

What a surprising news I read this morning !

Gabriele Pauli, from the CSU party in Germany, makes the following proposal: a marriage would initially last after seven years. Later, the couple could decide to sign up for an extension (still limited the extension ? It is not precised)

Moreover, the CSU is a social-christian party. What a hot stuff !

About the idea itself, I have never thought about such a thing. Is it good a bad, and what should be the conditions, I do not have any opinion yet.

In France, we have an alternative to the marriage since the late 90’s called the « PACS » (PActe Civil de Solidarité) or « Solidarity Civil Pact ». It was initially for gays and lesbians an opportunity to have an official civil status as a couple, as long as I doubt we will see the marriage authorized for homosexuals before a long long time in France. But it is available to anyone, including heterosexuals, obviously.
So, could it be something that can happen in France and other countries ? Is it interesting ? I think it is worthy to debate about it, whatever the conclusion is.

With the rate of divorce in western societies, we could think the answer is « yes ». Basically I immediately see a first potential drawback: credits. When two married persons go to their bank clerk to ask for a long-term credit to buy their new home, planning to have children and so, the bank clerk could say «the Bank requests that you are married for at least seven years or you have already extended your initial time of marriage ». I understand this point of view. Having a default limited duration could eventually raise the amount of couple breaking after a couple of years, as it would more easy than divorcing. This is a risk for banks.

Now, you will say I see black everywhere. Well ... I only tend to anticipate issues and this is where the debate must take place. I let you think about the positive aspects !

References:

70,000 ballots canceled during a Scottish election

On the 3rd of September, the BBC revealed that during the last recent Scottish elections in May, about 70,000 ballots have been automatically canceled by the counting machines with no human oversight.

Actually, about 140,000 ballots were counted as spoilt and some of them were automatically rejected. What were the conditions to reject these 70,000s ? Is it « we take randomly an half of the spoilt ballots and we reject them » ? Or yet « we reject 50% of the spoilt ballot for each possible result » ? What is the method ? This is a public election concerning all Scottish people, so it should be definitely released and broadcasted to the citizens.

Apart of that, « the Conservative Party condemned the Scotland Office for being slow to release the information ». If the BBC investigation did not lead to this announce, would it have ever been released ?

In 2003, in Belgium, 4096 ballots that were cancelled. Wikipedia article says «The error was only detected because she had more preferential votes that her own list which is impossible in the voting system. The official explanation was The spontaneous creation of a bit at the position 13 in the memory of the computer».

What’s next ? A million of canceled/forgotten/changed ballots ?

Deezer, a streaming music platform

I’ve discovered another streaming music platform, Deezer. You can listen to music for free searching through their available tracks and create playlists once you’ve registered. You can even upload your own MP3s to share them.

It is not a brand new platform as it was formely known as Blogmusik, but it had to be shut down in March ’07 because of the SACEM. It was re-opened one month later. On the 22nd of August, Deezer announced to have a settlement with the SACEM and other music copyright holders, and that new deals are to come.

I don’t understand (yet) the origin of their tracks: is it only made of users contributions or more ? I admit I haven’t looked at all the details. There is a page dedicated to questions. Maybe you can start here.
Based on various news and the official web site:
  • it is legal and free of fees, the business model is based on ads; by the way, a "big button" proposes you to go on iTunes to order the current track;
  • it is streaming only, you cannot download music nor store it on your computer;
  • you can upload your own MP3s, set some playlists, share both of them;
  • it uses Flash;
  • you can add two different widgets to your web site: one proposing one of your playlist, one proposing a specific track.

Anonymity and the Tor Network

Anonymity and privacy are two separate things. Do not confuse.

Here

[ws] Color Scheme Generator 2

A color scheme generator when you are, i.e, looking for colors fitting together for a new website.

Here

Spam topics

Today, I was cleaning some mail servers’ queues, deleting as much spam as I could in a reasonable amount of time and effort.

"As much" means several thousands per server and "reasonable amount of time and effort" means no more than 2 or 3 hours (doing other stuff at the same time).

Ok, you will tell me "hey guys, where have you been for the last couple of years ?" Most of the spam I’ve quickly identified, targeted and deleted was about:
  • sex (get a bigger one and so)
  • congratulations for being the winner of a game you have never participated to (lottery, heritage, ...)
  • assistance requests
  • urgent ! things

So, here again, yes, spam stuff is around sex and money.

Yeah, I know this for a while. I personally receive thousands of spam each month (just a few missed, hopefully). But well ... really seeing this in from of your eyes, make you wonder a little bit more about our world.

9rules Design Community

"The best web content on design and a lot more."

Here

Fear is what terrorrists want

For almost five years now, we can’t spend a day without one news about some arrested terrorrists, an avoided plot, a false positive alarm to explosive or chemicals in an airport or whatever maintaining a state of fear.

For five years now, terrorrism is the big thing of the politicians, police, army, and news industry.

For five years now, fear is what news industry fed us with in its daily menu, helping politicians to achieve their goals, finally helping terrorrists goal: make us fear.

Bruce Schneier wrote an excellent article about this. I share his thoughts about what is happening these days and refuse to fall into this state of fear. Everyone must be careful, as you are careful not to cross the street when a car is coming, but we must not be scared «oh a car is going to suddenly drive on me if I decide to cross the street, what am I going to do !!!».

We must live our lifes, and not play this game. Damn it, let’s just live.