Security - Syn Fin dot Net

Syn Fin dot Net

Sign in Subscribe

Security

A collection of 10 posts

Quick thoughts about Let's Encrypt

So I just switched over from StartSSL to Let’s Encrypt for all of Syn Fin dot Net’s SSL needs and wanted to give a few thoughts about the process: It’s a very different experience getting up and started. I’ve used a variety of SSL CA’s

On the failure to comprehend the definition of "secret"

This seems to be pretty basic and obvious, but a the first rule about keeping a secret is don’t tell people. Frankly, I think Dan should be pretty happy that the details about the DNS vulnerability he discovered took this long to emerge publicly. As he pointed out, 13

LGA: Security Theater

So I was flying out of LaGuardia, NY (LGA) this morning on my way home to San Jose, Ca (SJC). After checking in, I was directed by the nice woman at American Airlines to take my checkin bags to the x-ray machine. There were a lot of bags piling up

mytreo.net hacked or selling email addresses?

So just about every website/company I do business with that requires an email address, I use a unique email address. The email address takes a very simple form: <company name>@synfin.net. The most important rules is that these email address are never used anywhere. So when

Voting 2006

So I just finished voting here in San Jose using one of those Sequoia machines (same as last year). My in person impression hasn’t improved any. 1. Having to check all your votes twice (once on the screen and again on the paper printer) is a pain in the

DHS: So glad they're on our side!

Let’s see, a guy walks into the DHS HQ with a fake Mexican ID which even if it was real wasn’t considered valid identification. So what do the rocket scientists for security do? Why they let him in of course! Now of course, the fake ID was really

RIAA puts profits over lives

I dunno, I should be shocked (shocked I say!), but I’m not… Every so often, the US Copyright Office takes comments regarding the DMCA (the law which makes it a crime to use products you paid for in ways other then the creator intended). Most recently, Sony-BMG (a member

Will Tor have Extrusion Detection?

Richard Bejtlich wonders in light of Tor being able to be used to anonymously attack other systems, will Tor add extrusion detection capabilities? I seriously doubt it. First, there are technical reasons for this, namely each exit node would need to have their own policy since some operators would want

SSL on the cheap

Well I finally got a real SSL certificate, signed by a trusted CA for www.synfin.net. For less then $20/yr no more annoying popups in webbrowsers, mail clients or my Treo. Anyways, overall I’ve got to say that GoDaddy made the process pretty painless and quick. So

Moved to WordPress

Well I finally got sick of writing custom code/templates (I’ve used static files using templates/Makefiles as well as dynamic pages using Perl/HTML::Mason). While I’m quite proficent with Class::DBI and PostgreSQL, it just wasn’t worth the effort of writing all the administrator forms