Saturday, March 19, 2016
Security system update
I made a little bit of progress. I've added a textarea for the GPG private key. Basically, you just paste the ASCII private key into the textarea, we load it into openpgp, prompt for a password, then we begin decrypting all of the incident data. There's a lot more work to be done here.
Redmine, AWS Backup, and more
So, I was looking for a private issue tracker for my personal use. I discovered Redmine and installed it on cloud AWS. I assigned it a domain name and now I can connect and check on my issues, estimating time etc.. It's so extremely convenient. I hope to expand its utility into planning etc.. I'm already reaping the benefits of having priority management built in an accessible manner.
I'm toying with the idea of backing up my data to AWS. I can import a keypair, so the data should remain secure. Right now, I have a 512 GB Magnetic EBS volume attached to one of my micro instances. It should be interesting to try to upload the data to it and see what happens.
I'm toying with the idea of backing up my data to AWS. I can import a keypair, so the data should remain secure. Right now, I have a 512 GB Magnetic EBS volume attached to one of my micro instances. It should be interesting to try to upload the data to it and see what happens.
Friday, March 18, 2016
Redmine, codility, khanacademy, nasm, asm.js and some maintenance
I didn't make any progress on the security system today. Instead, I worked on some other things. I did a little bit more configuration on Redmine. Now, I can track and queue things that I want to get done, and if done correctly, I should be able to track my own time.
I did the first part of the training from Codility. This was an interesting problem. I had to find the largest number of consecutive zeroes in a binary representation of an entire unsigned int. I accomplished this by while looping and shifting the number to the right and checking the value with & or %...I forget. Next time, I'll copy my code. Anyway, I only got an 80%. So, I'll need to do some more work there.
On KhanAcademy, I did some z-scores work. This is pretty simple work. It's simple subtraction and division, table lookups, etc..
I also did a little bit more tutorial programming through nasm. I wanted to implement Fizzbuzz in ASM but didn't quite get there. Instead, I am starting with a fibonacci sample from http://cs.lmu.edu/~ray/notes/nasmtutorial/ and adapting it to the Fizzbuzz problem. Writing it in assembly is a refreshingly low level challenge. There's something therapeutic about the low level operations.
I've done a little investigation into asm.js and WebAssembly since the WebAsm announcement earlier this week. Basically, WebAsm and asm.js are compilation targets via emscripten. A project called binaryen, I believe, can convert asm.js to WebAsm. https://github.com/kripken/emscripten/wiki/WebAssembly
I hooked up my other TB drives, encrypted a partition on one of them and started copying things over. I detected a potential issue through SMART unfortunately. I need to watch that drive to see if it's a real failure or just a false positive.
I did the first part of the training from Codility. This was an interesting problem. I had to find the largest number of consecutive zeroes in a binary representation of an entire unsigned int. I accomplished this by while looping and shifting the number to the right and checking the value with & or %...I forget. Next time, I'll copy my code. Anyway, I only got an 80%. So, I'll need to do some more work there.
On KhanAcademy, I did some z-scores work. This is pretty simple work. It's simple subtraction and division, table lookups, etc..
I also did a little bit more tutorial programming through nasm. I wanted to implement Fizzbuzz in ASM but didn't quite get there. Instead, I am starting with a fibonacci sample from http://cs.lmu.edu/~ray/notes/nasmtutorial/ and adapting it to the Fizzbuzz problem. Writing it in assembly is a refreshingly low level challenge. There's something therapeutic about the low level operations.
I've done a little investigation into asm.js and WebAssembly since the WebAsm announcement earlier this week. Basically, WebAsm and asm.js are compilation targets via emscripten. A project called binaryen, I believe, can convert asm.js to WebAsm. https://github.com/kripken/emscripten/wiki/WebAssembly
I hooked up my other TB drives, encrypted a partition on one of them and started copying things over. I detected a potential issue through SMART unfortunately. I need to watch that drive to see if it's a real failure or just a false positive.
Thursday, March 17, 2016
Security system update
Of course I couldn't leave Rootcrit in the state it is right now. I have openpgp.js loaded finally. I may make a requirejs Mojolicious skeleton available, to make everyone's life easier in the future.
Anyway, I'm generating a keypair in the browser. Very nifty. This could be a service all on its own, actually. It can be integrated into a public keyserver.
Next up, I'll see about 'uploading' a private key to the javascript itself and then trying to decrypt the incident image data and display it to the user in place.
Anyway, I'm generating a keypair in the browser. Very nifty. This could be a service all on its own, actually. It can be integrated into a public keyserver.
Next up, I'll see about 'uploading' a private key to the javascript itself and then trying to decrypt the incident image data and display it to the user in place.
Wednesday, March 16, 2016
Security system update
I just couldn't let the issue with Rootcrit go, so I did some debugging via carton on Mojolicious::Static. I discovered that it was a misunderstanding on my part. The documentation could be a little clearer on this one. When I access "localhost/public/x" it then tries to look in "/home/user/whatever/public/public/x" or in other words, I needed to omit "/public" from my script link. So, I can now move ahead with openpgp.js.
Tuesday, March 15, 2016
Progress on the security system
My plan was to add OpenPGP.js to the Rootcrit system, but unfortunately, I can't seem to get Mojolicious to serve static files no matter what I do. I'm not sure if it's a chmod issue or what. I can clearly see that it's listed in the static files. I may seek help on StackOverflow for the mojolicious issue.
Instead of implementing the solution for Rootcrit, I'm moving ahead with working in Ruby on Rails. This means creating a few different small test case applications, working through railstutorial etc. before tackling the main event.
Instead of implementing the solution for Rootcrit, I'm moving ahead with working in Ruby on Rails. This means creating a few different small test case applications, working through railstutorial etc. before tackling the main event.
Sunday, January 17, 2016
Is someone stealing your wifi? Detect it with this script
I wrote a small Ruby script to detect new mac addresses (roughly equivalent to detecting a new device) on your wireless network. It allows you, via gmail, to receive an alert when a new device is detected on the network, which could mean you have a compromised network.
Here's the gist: https://gist.github.com/beta0x64/afbc46ba7b173f4411ca
Here's the gist: https://gist.github.com/beta0x64/afbc46ba7b173f4411ca
Subscribe to:
Posts (Atom)