January 2014 - FOSDEM - lists.fosdem.org

Keysigning party on Sunday?
by Boriss Mejias 26 Jan '14

26 Jan '14

Hi all, I couldn't find the information on the schedule, but is the keysigning party going to happen on Sunday midday as previous years? Thanks in advance cheers Boriss

2 1

New Android schedule app available: FOSDEM Companion
by Christophe Beyls [Software] 26 Jan '14

26 Jan '14

Hello, I would like to announce the immediate availability of a new Android schedule application for FOSDEM: Fosdem Companion. It is already available for download on the Google Play Store: https://play.google.com/store/apps/details?id=be.digitalia.fosdem The app is of course open source and available on Github: https://github.com/cbeyls/fosdem-companion-android This is a first release that is already more complete than the previous Android app, more features will probably be added in the future thanks to user feedback. Best regards, Christophe Beyls

4 6

Ride from Berlin (DE) to FOSDEM?
by BM-2cWwFLJYsraFfFaDNhmyezkEijmEgKhsAr＠bitmessage.ch 23 Jan '14

23 Jan '14

Hi list, Anyone traveling from Berlin to FOSDEM on Friday and can give me a ride?

1 0

Ride from Baden-Württemberg Germany to FOSDEM
by Michael Tänzer 19 Jan '14

19 Jan '14

Hi Guys, anyone who can give me a ride from Karlsruhe (I can also travel to another meeting place) to Brussels? -- See you at FOSDEM Michael Tänzer

2 2

Updating a profile - help needed
by Ludovic Hirlimann 18 Jan '14

18 Jan '14

Hello, I'd like to update my speaker profile at https://fosdem.org/2014/schedule/speaker/ludovic_hirlimann/ (profile is probably from 2005, last update from 2009), I've been told that I could use https://penta.fosdem.org/user/forgot_password to reset my password. I've tried many combination of names and emails and all have failed. Who should I bug to get access and update said profile ? Ludo -- http://sietch-tabr.tumblr.com/ http://www.flickr.com/photos/lhirlimann/

2 1

fosdem.org does not support TLS 1.[12]
by Tom Marble 16 Jan '14

16 Jan '14

All: As everyone in our community can benefit from improving security I thought I would share this observation with everyone. I recently realized that Iceweasel, by default, is not configured to not support the recent versions of TLS yet it accepts weak ciphers. You can check your browser here (notably TLS version) https://www.howsmyssl.com/ Here's how to fix this in Firefox http://kb.mozillazine.org/Security.tls.version.* I set security.tls.version.min = 2 (require at least TLS 1.1) I set security.tls.version.max = 3 (support TLS 1.2) As for the accepted ciphers I went to about:config, searched for RC4 and set all variables to false. Now when I encounter a website that insists on TLS 1.0 or RC4 I know it's insecure (and I load it in another, vulnerable browser). That's how I found fosdem.org doesn't support TLS 1.1 or 1.2. Server Check https://www.ssllabs.com/ssltest/analyze.html?d=fosdem.org Currently TLS 1.1 and 1.2 are not supported! Server Fix (TLS versions and cipher suites for PFS) https://wiki.mozilla.org/Security/Server_Side_TLS For example on my server I favor PFS and completely disable RC4, for example: SSLProtocol all -SSLv2 SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128:AES256:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK SSLHonorCipherOrder on SSLCompression off Stay safe out there! --Tom

3 2

Driving from Bremen to FOSDEM
by Martin Scheffler 15 Jan '14

15 Jan '14

Hi all, I'm driving from Bremen to FOSDEM. Starting friday afternoon, returning sunday lateish. I have up to four free seats, so drop me a line if you want to join in. It would be nice if you could kick in for gas money. Cheers, Martin

1 0

Keysigning: please submit your keys
by Niels Laukens 13 Jan '14

13 Jan '14

The keysigning infrastructure seems to have held up well this year. I spent some time today preparing the infrastructure for FOSDEM 2014. Same procedure as last year: if you intend to participate in the keysigning event, please submit the keys you'd like to have signed to ksp.fosdem.org. If you're using GnuPG, that can be easily accomplished with: % gpg --keyserver ksp.fosdem.org --send-key <your-keyid> Please check that your key was correctly submitted by pointing a webbrowser at http://ksp.fosdem.org/. If your key is missing after you submitted it, send me an email and I'll try to find out what's up. Key submissions close Monday before FOSDEM to give me some time to try to remember how I generated the lists again. Get submitting.

3 5

Re: [FOSDEM] LPI, fridaynight event
by Kristof Provost 13 Jan '14

13 Jan '14

On 2014-01-13 14:11:10 (+0100), Hamza Abdelkebir <hamza.abdelkebir(a)gmail.com> wrote: > How can I register for LPI exam sessions at FOSDEM? > https://fosdem.org/2014/certification/ (Registration procedure) > Is there a fridaynight event as past years? > https://fosdem.org/2014/practical/beerevent/ Regards, Kristof

1 0

LPI, fridaynight event
by Hamza Abdelkebir 13 Jan '14

13 Jan '14

Hello, How can I register for LPI exam sessions at FOSDEM? Is there a fridaynight event as past years? Thanks, Hamza

2 1