- FOSDEM - lists.fosdem.org

fosdem.org does not support TLS 1.[12]
by Tom Marble 16 Jan '14

16 Jan '14

All: As everyone in our community can benefit from improving security I thought I would share this observation with everyone. I recently realized that Iceweasel, by default, is not configured to not support the recent versions of TLS yet it accepts weak ciphers. You can check your browser here (notably TLS version) https://www.howsmyssl.com/ Here's how to fix this in Firefox http://kb.mozillazine.org/Security.tls.version.* I set security.tls.version.min = 2 (require at least TLS 1.1) I set security.tls.version.max = 3 (support TLS 1.2) As for the accepted ciphers I went to about:config, searched for RC4 and set all variables to false. Now when I encounter a website that insists on TLS 1.0 or RC4 I know it's insecure (and I load it in another, vulnerable browser). That's how I found fosdem.org doesn't support TLS 1.1 or 1.2. Server Check https://www.ssllabs.com/ssltest/analyze.html?d=fosdem.org Currently TLS 1.1 and 1.2 are not supported! Server Fix (TLS versions and cipher suites for PFS) https://wiki.mozilla.org/Security/Server_Side_TLS For example on my server I favor PFS and completely disable RC4, for example: SSLProtocol all -SSLv2 SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128:AES256:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK SSLHonorCipherOrder on SSLCompression off Stay safe out there! --Tom

3 2

Driving from Bremen to FOSDEM
by Martin Scheffler 15 Jan '14

15 Jan '14

Hi all, I'm driving from Bremen to FOSDEM. Starting friday afternoon, returning sunday lateish. I have up to four free seats, so drop me a line if you want to join in. It would be nice if you could kick in for gas money. Cheers, Martin

1 0

Keysigning: please submit your keys
by Niels Laukens 13 Jan '14

13 Jan '14

The keysigning infrastructure seems to have held up well this year. I spent some time today preparing the infrastructure for FOSDEM 2014. Same procedure as last year: if you intend to participate in the keysigning event, please submit the keys you'd like to have signed to ksp.fosdem.org. If you're using GnuPG, that can be easily accomplished with: % gpg --keyserver ksp.fosdem.org --send-key <your-keyid> Please check that your key was correctly submitted by pointing a webbrowser at http://ksp.fosdem.org/. If your key is missing after you submitted it, send me an email and I'll try to find out what's up. Key submissions close Monday before FOSDEM to give me some time to try to remember how I generated the lists again. Get submitting.

3 5

Re: [FOSDEM] LPI, fridaynight event
by Kristof Provost 13 Jan '14

13 Jan '14

On 2014-01-13 14:11:10 (+0100), Hamza Abdelkebir <hamza.abdelkebir(a)gmail.com> wrote: > How can I register for LPI exam sessions at FOSDEM? > https://fosdem.org/2014/certification/ (Registration procedure) > Is there a fridaynight event as past years? > https://fosdem.org/2014/practical/beerevent/ Regards, Kristof

1 0

LPI, fridaynight event
by Hamza Abdelkebir 13 Jan '14

13 Jan '14

Hello, How can I register for LPI exam sessions at FOSDEM? Is there a fridaynight event as past years? Thanks, Hamza

2 1

Call for Participation in the Smalltalk Devroom at FOSDEM2014
by Stephan Eggermont 13 Jan '14

13 Jan '14

Call for Participation in the Smalltalk Devroom at FOSDEM 2014. http://www.fosdem.org, please forward " A devroom for the Pharo, Squeak, Amber, GST, Etoilé, Seaside, Moose Smalltalk projects & Newspeak as derived language. Smalltalk environments offer a very high development productivity, unmatched by their successors. Come do some pair programming with us and experience yourself the advantages of a real OO environment" The meetup will take place Saturday, February 1, 2014, from 9AM until 5PM, building AW. This room has 72 seats, a VGA video projector and wireless internet. More information will be available later. If there are volunteers to record video content, the FOSDEM organization kindly offered to provide needed equipment & instructions. Please let me know if you would be willing to spend some time pointing a camera at a speaker. Proposals on content and format are welcome. People interested in running a session should send me an email at stephan ( @ ) stack ( dot ) nl with 'FOSDEM2014’ in the subject and the following information: - Their name - The project they are associated with - A short bio, to be put on the website along with their speaker name - (optionally) a picture of themselves - The title of their session (which will go on the website and in the booklet) - A abstract describing the session in further detail. - The desired length of the session. - The desired time slot in which they want to hold the session. I will send out updates on a regular basis to the lists and anyone stating his interest. Suggested values for the duration are 55min, 25min, 6m40 (Pecha Kucha). The desired time slot is meant to help you prevent conflicts with other dev rooms in which you might have a talk or your travel arrangements. There are alternative, non smalltalk-specific tracks available: lightning talk and the main track The deadline for submissions is December 31, 23:00 GMT+1. Devroom related URLs: http://www.pharo-project.org http://www.squeak.org/ http://etoileos.com/ http://www.seaside.st/ http://smalltalk.gnu.org/ http://www.moosetechnology.org http://amber-lang.net http://newspeaklanguage.org/ http://www.esug.org First proposal already arrived: Stefan Marr proposed: I could give a presentation on SOM (Simple Object Machine) Smalltalk. I would especially go into detail of the Truffle-based and the RPython (PyPy) based implementations to show modern ways of language implementations with the goal of achieving high performance.

2 1

Fosdem App + Key signing party
by Ludovic Hirlimann 12 Jan '14

12 Jan '14

Hello, The key signing party doesn't show up in the fosdem app , is there a reason for that ? (eg schedule for it is well known) Ludo -- http://sietch-tabr.tumblr.com/ http://www.flickr.com/photos/lhirlimann/

2 1

workshop room
by Anne nicolas 11 Jan '14

11 Jan '14

Hi Is it plan to have a free room so that projects can book for 1h for meetings, as in previous years? Thanks in advance -- Anne http://www.mageia.org

2 1

Python and Mozilla schedule
by Carles Pina i Estany 09 Jan '14

09 Jan '14

Hello, The Python and Mozilla devrooms schedules are not in the Fosdem webpage: https://fosdem.org/2014/schedule/track/python/ https://fosdem.org/2014/schedule/track/mozilla/ I just realized that the Python one is here: http://python-fosdem.org/schedule Is the Mozilla one available at some place? Thank you, -- Carles Pina i Estany Web: http://pinux.info || Blog: http://pintant.cat

3 3

Accommodation available!
by dptrash＠arcor.de 06 Jan '14

06 Jan '14

Hello, I have prepaid a non-smoking double room from 31.01. (Check-In 15:00) till 02.01. at the Hotel de Fierlant. Does someone need an accommodation? Price is 120 EUR (which I also prepaid). Regards, Dennis

1 1