if it's owən » Security http://owened.net it's probably awesome Fri, 30 Jul 2010 06:04:39 +0000 en hourly 1 http://wordpress.org/?v=abc How do you explain the security of open source to non-techs? http://owened.net/2009/02/16/how-do-you-explain-the-security-of-open-source-to-non-techs http://owened.net/2009/02/16/how-do-you-explain-the-security-of-open-source-to-non-techs#comments Mon, 16 Feb 2009 00:34:33 +0000 Owen http://owened.net/2009/02/16/how-do-you-explain-the-security-of-open-source-to-non-techs/ Simple:

If I take a letter, lock it in a safe, hide the safe somewhere in New York, then tell you to read the letter, that’s not security. That’s obscurity. On the other hand, if I take a letter and lock it in a safe, and then give you the safe along with the design specifications of the safe and a hundred identical safes with their combinations so that you and the world’s best safecrackers can study the locking mechanism – and you still can’t open the safe and read the letter – that’s security.

It’s an interesting analogy that non-technical people can understand. The problem of course lies with those who are ‘semi-technical’ – those that know what source code looks like, but do not understand what can be done with it. They think they have some knowledge when in reality they do not. The problem is: how do you convince these people that they do not know enough to make comment, without offending them (especially if they are a client of yours)?

The answer is simple: make sure you have securely configured their F/LOSS systems and invite them to have a penetration test carried out.

Post inspired by/stolen from Slashdot.

]]> http://owened.net/2009/02/16/how-do-you-explain-the-security-of-open-source-to-non-techs/feed 0 Protected: MS06-040: the aftermath http://owened.net/2006/08/13/ms06-040-the-aftermath http://owened.net/2006/08/13/ms06-040-the-aftermath#comments Sun, 13 Aug 2006 22:49:34 +0000 Owen http://owened.net/2006/08/13/ms06-040-the-aftermath/

This post is password protected. To view it please enter your password below:


]]> http://owened.net/2006/08/13/ms06-040-the-aftermath/feed 3 Protected: WiFi exploited at driver level http://owened.net/2006/08/05/wifi-exploited-at-driver-level http://owened.net/2006/08/05/wifi-exploited-at-driver-level#comments Sat, 05 Aug 2006 07:30:51 +0000 Owen http://owened.net/2006/08/05/wifi-exploited-at-driver-level/

This post is password protected. To view it please enter your password below:


]]> http://owened.net/2006/08/05/wifi-exploited-at-driver-level/feed 0 Windows 98/ME/NT and Windows XP SP1 Support Termination http://owened.net/2006/07/17/windows-98ment-and-windows-xp-sp1-support-termination http://owened.net/2006/07/17/windows-98ment-and-windows-xp-sp1-support-termination#comments Mon, 17 Jul 2006 11:00:49 +0000 Owen http://oblong.gotdns.org/2006/07/17/windows-98ment-and-windows-xp-sp1-support-termination/ Support for Microsofts’ ageing Windows 9x series of operating systems, Windows NT and Windows XP SP1 will all end this year, presumably in preparation for the release of Vista sometime early next year.

This is a problem. Though this problem is larger than you may think; not only are the ‘mum and dad’ users of computers being stiffed (50 to 70 million estimated computer systems worldwide are still running Windows 98 or Windows ME [1], and all of which can potentially become part of a massive botnet), educational institutions (public schools and the like) who cannot afford to pay the expensive Microsoft Tax — those still running their educational networks on Windows 98 and alike — are going to be hit hardest by this.

And won’t I know it.

I do casual IT support at a local primary school which caters to the educational needs of special children, consequently it is a small school (maybe 30-40 students in all) and the majority of their computers are donated. We’ve got everything from Pentium 200Mhz systems right up to Pentium 4 3Ghz systems, and everything in between. Most of them are running Windows 98; some are running Windows 95; and the rest are running various versions of Windows XP; SP1 and SP2.

Due to the fact that official Microsft support for Windows 98 and ME has ended as at July 11th 2006 [2], and support for Service Pack 1 under WindowsXP will be dropped as at October 10th 2006 [3], Aspley Special School is going to have to undergo some changes in their software repository.

What I have in mind is something that I doubt will be easy to implement, but this ease of implementation I am presuming will have nothing to do with the software itself, or the hardware for that matter, but it will be entirely because of red tape and psychological issues. What I would like to do is install Edubuntu school-wide for all of the students to use. The existing WindowsXP installations would remain (as these XP machines are used by the teachers). The problems facing me, I am guessing, would be due to licencing issues and the availability of the appropriate educational software for students under the Linux operating system.

But, I will endeavour to produce a table of comparison between existing software solutions (Windows 98 and third-party educational software suites versus Edubuntu and its associated educational software suites). Hopefully I can produce a meaningful comparison and prompt a conversion.

]]> http://owened.net/2006/07/17/windows-98ment-and-windows-xp-sp1-support-termination/feed 2