Errata Security: How The Intercept Outed Reality Winner http://blog.erratasec.com/2017/06/how-intercept-outed-reality-winner.html?utm_source=Sailthru&utm_medium=email&utm_campaign=New%20Campaign&utm_term=%2ASituation%20Report#.WTalP0opChA

I would advice to secure the admin area with an addition basic-auth layer

A dangerous precedent
The United States government demanded that Apple weakens the security on iOS. Tim Cook, Apple’s CEO, replied.

Rather than asking for legislative action through Congress, the FBI is proposing an unprecedented use of the All Writs Act of 1789 to justify an expansion of its authority.

The government would have us remove security features and add new capabilities to the operating system, allow … ⌘ Read more

@edsu agreed. it seems like they should be one file. I don’t see anything super private/security risky in the config.

Security by profanity: Insult hackers in the language of the country they’re connecting from

Heartbleed vulnerability in OpenSSL
A serious security\
 vulnerability has been discovered in OpenSSL. All stable
NixOS releases prior to version
13.10.35708.15a465c are vulnerable. (You can
see your current version by running nixos-version.) To
upgrade to the latest NixOS version, run nixos-rebuild
switch –upgrade. You can verify whether you are safe by
running

$ nix-store -qR /run/current-system | grep openssl

If this shows any OpenSSL ve … ⌘ Read more

NixOS 13.10 released
We have released NixOS 13.10, the first stable branch of NixOS.
Its goal is to provide a safe branch for production environments
that need bug fixes and security updates, but not the
potentially destabilising changes that sometimes occur on the
unstable branch. You can get NixOS 13.10 ISOs and VirtualBox
appliances from the download\
 page. See the announcement
for … ⌘ Read more

Nix 1.4 released
Nix 1.4
has been released. This is primarily a bug fix release that
addresses a security problem in multi-user mode. See the release\
 notes for details. For installation information, see the manual. ⌘ Read more

Nix 0.11 released
Nix\
 0.11 has been released. This is a major new release
representing over a year of development. The most important
improvement is secure multi-user support. It also features many
usability enhancements and language extensions, many of them
prompted by NixOS, the purely functional Linux distribution
based on Nix. See the [release\
 notes](https://web.archive.org/web/20140913055323/https://releases.nixos.org … ⌘ Read more

Ron Paul on War and Foreign Policy
Ron Paul: War and Foreign Policy

We can continue to fund and fight no-win police actions around the globe, or we can refocus on securing America and bring the troops home. No war should ever be fought without a declaration of war voted upon by the Congress, as required by the Constitution.

Under no circumstances should the U.S. again go to war as the result of a resolution that comes from … ⌘ Read more

Blue Security has gone down
Blue Security has announced it has ceased their anti-spam operations. From their website (which could be down as I type this):

As we cannot build the Blue Security business on the foundation we originally envisioned, we are discontinuing all of our anti-spam activities on your behalf and are exploring other, non spam-related avenues for our technological developments. As much as it saddens us, we … ⌘ Read more

Secure sharing paper accepted for ASE 2005
The paper “Secure Sharing Between Untrusted Users in a
Transparent Source/Binary Deployment Model” has been accepted at
ASE 2005. This
paper describes how a Nix store can be securely shared by
multiple users who may not trust each other; i.e., how do we
prevent one user from installing a Trojan horse that is
subsequently executed by some other user? ⌘ Read more

Microsoft Security Bulletins
This is the second time that I receive a Microsoft Security Bulletin and, since Microsoft uses PGP to sign their bulletins, I have decided to check their signature validity. I don’t know if this has been a flaw in the past as well, since I delete those bulletins without even reading them most of the time, but in the two occassions I have checked them, they had failed to verify, since the signature is bad.

[-- Begin GPG Output (Wed Jul 13 08:30:48 2005) --]
Sign ... ⌘ [Read more](https://collantes.us/2005/07/13/microsoft-security-bulletins/)

The worse Web Browser
Not too long ago I was an Internet Explorer fan. The pages I went to looked fine under it, the experience seemed rich. There were no complains. Then I started fiddling with CSS and moving away from tables. I experienced the advantages of the PNG format and I loved it. I experienced functionability I never saw before. I got tired of hearing about major problems and running security updates. I got my eyes opened.

I wonder why it took that long. Perhaps Mozilla Firefox was not that polis … ⌘ Read more

Parsing PHP code
I am trying to implement a little hack that will allow the use of PHP code within posts. Since I am the only “author” here, I do not think that will bring much of a security risk. This post is intended to test this hack. I will try the following, < ?php echo(“This hack has worked”); ?> to see if it does the trick. And here it goes:

This concludes this test. ⌘ Read more