Thursday, December 8. 2011On distributing binaries
Many software developers don't care about security. A typical
Java developer downloads the Eclipse binary from eclipse.org, a
website that doesn't even support https. He then continues to
install binary eclipse plugins from several different web
sites. Once development starts, maven continues to pull in
hundreds of plugins and dependencies without checking their
origin.
Continue reading "On distributing binaries"How do you still want to trust this machine with your private passwords or gpg key? I don't. Therefor I do java development at least in a chroot'ed environment. To make this point a bit less theoretic I've collected examples of compromised downloads or servers in recent months. Tuesday, October 11. 2011Gemeinsam für globalen Wandelenglish abstract: call to assembly on October 15th in Constance (Germany). ATTAC Konstanz und www.echte-demokratie-jetzt.de laden ein zur Versammlung "Gemeinsam für globalen Wandel" am 15. Oktober 2011 um 15:10 Uhr auf die Marktstätte (in Bankennähe)
Weltweit gehen an diesem Tag Menschen auf die Straße, um darüber ins Gespräch zu kommen, in welcher Gesellschaft sie leben wollen. Mit ihnen gemeinsam empören wir uns darüber, dass heute die Interessen von Banken und Konzernen vielfach über die Interessen der Menschen gestellt werden, und die Kluft zwischen Arm und Reich immer größer wird. Wir sehen uns durch Politik und Wirtschaft nicht mehr repräsentiert und wollen selbst für grundlegende Veränderungen eintreten. Wir engagieren uns für neue Wege aus der Krise, jenseits von Parteien, Gewerkschaften und anderen Gruppeninteressen. Darüber wollen wir auch in Konstanz auf der Marktstätte miteinander reden. Zur Information, wie sich Menschen in anderen Ländern für ihre Anliegen einsetzen, wird es einen Informationsstand über die Protestbewegungen in Spanien, Griechenland, Israel, Chile und den USA geben. Weitere Informationen:
Sunday, May 29. 2011Is it really that hard?
It's 2011. Computers are here for a couple of decades now, but they still don't help me with the most simple problems. I've been asked once again about a recommendation for a GroupWare and still don't know what to say. This are the simple requirements:
Manage my Mails, Calendar, Contacts, Files, Knowledge (Wiki) and ToDos (including IssueTracker). Let me synchronize these informations with mobile devices and for offline work. Allow collaboration and sharing. I started professional programming in 2006 with the eGroupWare project, which provides the above functionality more or less, but I still can't recommend it. Neither could I recommend any other system I know of (Tine 2.0, OpenGroupWare, OpenExchange, Horde, Kolab, ...?) since they violate one or more of my secondary requirements:
This kind of software is on the top position on my Things-To-Do-When-I-Have-Time. But on the other hand I know that many have already started such projects and either they did not deliver sufficient functionality or there code base is a PITA. Yes, I'm ranting once again. But please show me a decent GroupWare and I'll praise you on any occassion! Or should I make this my project for my bachelor thesis: A Contacts+Mail server/web frontend in Scala using CouchDB, Dovecot? What do you think? Sunday, May 29. 2011Keysigning @ Berlin Buzzwords
Whenever you download some software from the Apache Software Foundation, there is a small .asc file besides every software release. This tiny file is a cryptographic signature to protect you from accidentally downloading and running malware.
 Put your key signing fingerprints in your badge! However this signature is only as good as the web-of-trust between you and the Release Manager of the Software project. At BerlinBuzzWords many developers and users will gather at one place. This is a unique occasion to strengthen the web-of-trust. Therefor we want to encourage and remind you to use the occassion for keysigning! For lack of time there won't be an official keysigning party, but you have occassion during lunch, coffee break or the barbecue to do quick one-to-one keysignings. You should bring print-outs of your key fingerprints and identification documents. If you put the fingerprints in your batch (see picture) everyone can easily see them and ask you for a quick trust exchange. We may also mark a "keysigning corner" somewhere where people can go and meet others for key signing. Hints:
Wednesday, April 6. 2011Debconf and other travel plansIf you're going to Debconf and would like to take a train, please have a look at the Arrivals page in the debconf wiki!
These are my travel plans for the next months:
mai: BarCamp Kirche 2.0, Linuxtag, Fernuni
june: Kirchentag, Ruhrgebiet
juli: Fernuni, Debconf (Bosnia)
|
Links |
