Oct 16, 2013

Fail2ban Proven To Work On My Private Email Server

English: Tux the Penguin is the official emble...
(Photo credit: Wikipedia)
I mentioned a really great program for Linux that actively combats potential hackers a while back. It's called fail2ban. In short, what it does is monitors failed login attempts in all of your logs, and if there are too many attempts on a potential service, it adds the IP address of the attacker to your iptables firewall rules.

Well, for the last few weeks my email server was blocking my own IP address. It would do it several times per day, and it was driving me nuts trying to figure it out. In order to check my email, I had to SSH into my server and reset the firewall rules. Fail2ban was clearly working.

I finally figured out what was causing the lockouts. My daughter has an iPod touch with email configured on it. I had reset her password a month or so ago, but never got around to updating the credentials in her iPod.

Well, it clicked the other day when I saw her playing with it. I updated the password, and voilla! No more lockouts!

Good work fail2ban! It works so good, it locked me out!
Enhanced by Zemanta

Oct 11, 2013

Accessorize Learning: Google Glass Will Change the Way Professors Teach

Photo by tedeytan via Flickr

When it comes to technology in the classroom, 38 percent of college students say they can't go ten minutes without using some type of device, according to a study conducted by Wakefield Research and Coursesmart in 2011. It's no wonder, then, that college professors are eyeing the many benefits of using Google Glass in the classroom. This highly anticipated technological breakthrough has the potential to change the way teachers instruct in both in-person classrooms and online settings.

Revolutionizing training for medical students

Google Glass features an on-board point-of-view camera that can be utilized by professors to create powerful educational videos to be used in the classroom, as well as online. The applications for this technology could revolutionize the way medical students learn about surgical procedures, enabling them to see through the eyes of a surgeon during real-life procedures. Vet techs attending an online program through a school such as pennfoster.edu can see professionals up close and personal with animals. These videos can be presented at lectures to create a question-and-answer approach to learning while students watch the application of their studies come to life.

Step-by-step how-to videos for use in and out of the classroom

In simpler applications, the POV videos can be used for other technical courses, such as engineering, chemistry and physics. Professors can use the videos to either enhance or replace traditional lab experiments, creating a virtual learning experience ideal for students who are attending classes online. Step-by-step videos can help students learn better, as they can be viewed repeatedly, compared to an in-class demonstration that can only be viewed once.

Enhancing the virtual learning experience

Remote teaching and tutoring can be more accessible using Google Glass. While current video chat enables students to see professors, this technology does not allow for easy document sharing, which can be done with the Google Glass application. Instructors can point students to appropriate study guides during a conversation rather than following up afterwards with an email. This collaborative approach to one-on-one teaching is ideal for schools that offer tutoring services or online university courses that require a more personalized approach.
The ability to live stream video might enable professors to simultaneously teach students in the classroom while also facilitating distance learners to attend the class from their laptops or mobile devices. This could change the way e-learning is approached, giving online students the ability to actually see into a classroom.

Note-sharing capabilities improve class interaction

Professors might be able to change their approaches to lecturing while using Google Glass by referring to their notes for each class, instead of placing them on a podium or writing them out on a chalkboard. With the ability to share files, these notes could be shared with an entire classroom, enabling each student to focus on interacting in class instead of quickly writing down notes. The technology behind Google Glass will enable professors to increase engagement with students both in the classroom and online, providing a more fruitful and positive learning experience for students, no matter where they are.

Oct 10, 2013

Cheap VPN Service For Torrenting and Protecting Your Anonymity Online

MPAA doesn't appreciate Ars Technica's decided...
(Photo credit: joe.ross)
Well it finally happened to me. After years of torrenting I finally received a notice from my ISP that I had violated a copyright or two. Well, more specifically my dad received the notice because I was torrenting at his house... Anyway, that's neither here nor there.

I have been using PeerBlock for a long time, but apparently it wasn't good enough, and the MPAA's third party company contacted my parent's ISP (SkyBeam) about the infringement. They didn't threaten any particular actions, it was just a notice. Although I'm sure future infractions would result in my parent's Internet being shut off.

Anyway, at first I considered configuring my torrent clients to use Tor, but apparently that is a bad idea. Another alternative a friend of mine suggested was to ditch Bittorrent and use Usenet. He uses a Usenet service with Sick Beard and pays $10 per month. Well I found something cheaper, a private VPN service!

There are many VPN services out there that protect your information. I settled on TorrentPrivacy though because if you pay annually, it comes out to only $3.99 per month! Plus they were listed on Torrent Freak's 2013 list of VPN's that actually protect your privacy.

TorrentPrivacy works on Linux, Windows and Mac. They offer both OpenVPN connections and PPTP. I had some issues setting it up at first, but that was because PeerBlock was blocking the connection. Once I allowed it, everything was fine.

Bam! Now try to snoop on me SkyBeam! Suck on it MPAA!

Do you use a private VPN service? If so, which one? Why did you choose it? Let us know in the comments.
Enhanced by Zemanta

Oct 4, 2013

The NSA Hasn't Hacked Tor... Yet

English: Tor Logo
English: Tor Logo (Photo credit: Wikipedia)
In the latest revelation from NSA whitleblower, Edward Snowden, it turns out that the NSA and Britain's GCHQ have been targeting the Tor anonymity network. Why? Because that's where the hackers, and criminals play!

Of course, those of us who value our privacy play there too, but that's neither here nor there...

Anyway, although the NSA and GCHQ have some proof of concepts, they have yet to actually hack it according to Snowden!

Via RT:
According to the Guardian’s James Ball, Bruce Schneier and Glenn Greenwald, the NSA’s “current successes against Tor rely on identifying users and then attacking vulnerable software on their computer.”

“While it seems that the NSA has not compromised the core security of the Tor software or network, the documents detail proof-of-concept attacks, including several relying on the large-scale online surveillance systems maintained by the NSA and GCHQ through internet cable taps,” the writers add.

The Guardian has so far published three top-secret government slideshows used to discuss the Tor network and possible vulnerabilities that might compromise users if properly exploited.
So they haven't hacked Tor, but they have found ways to exploit user's computers rather than the Tor network itself. We actually knew that back in August when we learned that there was a vulnerability in the Windows version of the Tor Browser Bundle. Linux and Mac versions were uneffected though.

So be sure to keep using Tor. As of now it is still effective it would seem. Also make sure that you keep your Tor software up-to-date, and make sure to disable javascript, and cookies as that is the primary method they use to compromise you.

Also, don't forget that Tor is built into Bauer-Puntu Linux!
Enhanced by Zemanta

Sep 20, 2013

The Best Tablets for Your Student

Technologically challenged? Then you may not see the benefits of a tablet over a laptop — but your teen does. Whether she's still in high school or headed off to college, the features that tablets offer students are ultra useful. First of all, they're sleek and less cumbersome than a laptop, making them easier to carry from class to class. Most teens are adept at touchscreen typing, thanks to hours spent smartphone texting, but for those who aren't, keyboards can be docked or connected via Bluetooth for typing. Saving notes and documents with these compact devices isn't a problem, either. Many tablets now come with free cloud storage.

With the decision made that a tablet will be the most useful school supply for your kid, the only thing left is the toughest decision of them all: which one should you choose?

Take Note of (and On) the Samsung Galaxy Note

Whether you choose the 8-inch or the 10-inch, students who prefer handwriting their notes to typing will love the Samsung Galaxy Note. It comes with an S Pen, a digitized stylus that makes writing, diagrams and drawings crystal clear. Researching or working among different apps is a snap with the multi-window mode.

X-Perience the Xperia

Lighten your student's load with the Sony Xperia Tablet Z. It's a fabulous reader that's ideal for students who want to go full-on digital with textbooks, eliminating the need to lug the hard copy versions around. Opt for the 10-inch screen for easier reading of said schoolwork and for viewing a video now and then. Every kid needs some downtime, right? The Xperia is a wise choice for the accident-prone, too. Being dust- and water-resistant, an occasional spilled drink or tumble into the dirt won't phase this tablet.

A Good Idea

If what your student is looking for are tablets for music and games, Lenovo has a couple of devices at both ends of the price scale. For a budget tablet, the IdeaTab A1000 is a functional little multimedia tablet that's been optimized for music. The speakers are superior quality, considering that the A1000 is a lower-end model. At the higher end is the super-light Miix 10, with a sharp, HD Multitouch LED screen, perfect for gamers on the go. The Miix comes with a keyboard, too, making it a useful alternative for a laptop.

An Apple for the Student

You knew that Apple would land in a list of tablets somewhere, and here it is. This year, it's the 4th generation that students will be packing back to school, and for good reason. The iPad is just about the closest a tablet can get to a laptop without actually being a laptop. It's a top performer, featuring a range of useful apps, crisp display, a quality camera, and Wi-Fi so fast, you'll get whiplash.

Fire Up Their Education With a Kindle

Originally e-readers, Kindles are now going head-to-head with the big guys as all-purpose tablets. The newest generation, the Kindle Fire HD 8.9, has features you'll find in most budget tablets, such as ease of use, an app library, your choice of email programs, and compatibility with Microsoft Office and OfficeSuite Professional 6. Plus, you can't beat the book and video content available through Amazon Prime. Another thing the Kindle Fire offers that can't be beat — even by the iPad — is the battery life, clocking in at approximately 10 hours.
Enhanced by Zemanta

Sep 18, 2013

How The NSA Bypasses Online Encryption

Ever since the recent Snowden leak revealed that the NSA has the ability to bypass most online encryption I got to thinking about how they would do that. I also wondered if the SSL protected websites I manage were secure from their eavesdropping. I think the answer is yes, they are still secure, and here's why.

The leak said that the NSA is able to break some encryption, but they mostly collude with companies to bypass the encryption altogether. In a recent report from Slate, they specifically named Google as one of the companies that the NSA uses for man in the middle attacks. From that article:
Now, documents published by Fantastico appear to show that, far from “cracking” SSL encryption—a commonly used protocol that shows up in your browser as HTTPS—the spy agencies have been forced to resort to so-called “man-in-the-middle” attacks to circumvent the encryption by impersonating security certificates in order to intercept data.

Prior to the increased adoption of SSL in recent years, government spies would have been able to covertly siphon emails and other data in unencrypted format straight off of Internet cables with little difficulty. SSL encryption seriously dented that capability and was likely a factor in why the NSA started the PRISM Internet surveillance program, which involves obtaining data from Internet companies directly.

However, in some cases GCHQ and the NSA appear to have taken a more aggressive and controversial route—on at least one occasion bypassing the need to approach Google directly by performing a man-in-the-middle attack to impersonate Google security certificates. One document published by Fantastico, apparently taken from an NSA presentation that also contains some GCHQ slides, describes “how the attack was done” to apparently snoop on SSL traffic. The document illustrates with a diagram how one of the agencies appears to have hacked into a target’s Internet router and covertly redirected targeted Google traffic using a fake security certificate so it could intercept the information in unencrypted format.
Okay, so now we know that the NSA can impersonate Google's SSL certificates. How do they do it though? First take a look at this:

If you go to https://www.google.com you can check the certificate as shown above. You will see one interesting detail, and that is that Google is their own certificate authority and therefore can hand out certificates to whomever they want... Including the NSA.

Guess what, Microsoft (Also named in the original Prism leak) does the same thing:


For those who don't know, MSIT stands for Microsoft Internet Authority:


So there you have it, I think it's safe to say that the way they bypass encryption, at least for Google and Microsoft users, is by obtaining certificates from Google's and Microsoft's certificate authorities and use them for man in the middle attacks. If the NSA has agreements with other certificate authorities like Verisign or Comodo, that remains to be seen, but neither of those companies were named in Snowden's leaks.

What do you think about this? Let us know in the comments.

Enhanced by Zemanta

How To Enable TLS 1.1 in Firefox 23

As many of you know, I setup my own email server back when Edward Snowden first leaked the story about the NSA's Prism program. I wanted to get my email off of Google, and not only make an email server as secure as I could, I wanted to make it so that the government couldn't request my emails from a third party without my knowledge with a national security letter.

Anyway, up until last month all modern browsers supported at least TLS 1.1 with the exception of Firefox. Since I don't use Internet Explorer, and I stopped using Chrome because of Google's involvement with the NSA, that really left me with Firefox. Since Firefox didn't support TLS 1.1 or TLS 1.2, I had to configure webmail on my server to use the less secure RC4 128 bit encryption to make my server PCI compliant, and mitigate against the BEAST Attack. Not to mention being able to access it in Firefox.

That's all changed now. Like I said, last month Firefox 23 came out with TLS 1.1 support! The only problem is it's not enabled by default. To enable it you need to do the following:
  • In Firefox type about:config in the address bar and you will get this error:
  • Click the I'll be careful button to proceed
  • Search for security.tls.version.max and change the value from 1 to 2
That's it, now Firefox will be able to visit websites with TLS 1.1. That's good because now you can disable all versions below TLS 1.1 which will mitigate against the BEAST and will allow you to use 256 bit encryption again!

That's exactly what I did on my email server. I configured GnuTLS to use 256 bit encryption and I disabled TLS 1.0, SSL3 and below. I also disabled 128 bit RC4, and disabled RSA to force perfect forward secrecy.

Are you going to force TLS 1.1 and TLS 1.2 now that Firefox supports it? Why or why not? Let us know in the comments.
[Via Hiawatha]
Enhanced by Zemanta



Twitter Delicious Facebook Digg Stumbleupon Favorites More

 
Design by Free WordPress Themes | Bloggerized by Lasantha - Premium Blogger Themes | stopping spam