February 2012 - security-devroom

Re: [security-devroom] Please confirm you agree to have the video of your talk published
by Paul Bakker 21 Feb '12

21 Feb '12

Hi Kai, I agree to having the two videos of my talk published via bittorrent and archived on video.fosdem.org.. Regards, Paul On Wed Feb 8 21:03:27 CET 2012 Kai Engert wrote: > We forgot to do this on paper this year... > > Anders, Tomas, Kashyap, Branko, Chris, Benedikt, Paul, > could you please reply to this list, and confirm that > > you agree that the recording of your talk in the security room at > Fosdem 2012 will be published via bittorrent and archived on > video.fosdem.org. > > I will publish the bittorrent as soon as I have heard back (agree or > not agree) from each of you. > > (Does anyone of you have the email address of Paul Bakker, or are you > on this list?) > > Thank you! > Kai

2 2

[security-devroom] Videos now available for download via bittorrent
by Kai Engert 10 Feb '12

10 Feb '12

http://kuix.de/fosdem2012/fosdem_2012_talks_webm.torrent Please keep your bittorrent client running after downloading, in order to help seeding. Thanks. Kai -- Sending me encrypted e-mail: - get my S/MIME cert from https://kuix.de/smime-keyserver/ - get my GPG/PGP key from http://pgp.uni-mainz.de/

1 0

[security-devroom] Please confirm you agree to have the video of your talk published
by Kai Engert 09 Feb '12

09 Feb '12

We forgot to do this on paper this year... Anders, Tomas, Kashyap, Branko, Chris, Benedikt, Paul, could you please reply to this list, and confirm that you agree that the recording of your talk in the security room at Fosdem 2012 will be published via bittorrent and archived on video.fosdem.org. I will publish the bittorrent as soon as I have heard back (agree or not agree) from each of you. (Does anyone of you have the email address of Paul Bakker, or are you on this list?) Thank you! Kai -- Sending me encrypted e-mail: - get my S/MIME cert from https://kuix.de/smime-keyserver/ - get my GPG/PGP key from http://pgp.uni-mainz.de/

6 5

[security-devroom] Presentation in pdf and odp
by Бранко Мајић 08 Feb '12

08 Feb '12

Hello everyone, If you want to, you can also download my presentation in the pdf and odp formats from the following two links: https://ftp.majic.rs/deployment_and_use_x509_free_software.pdf https://ftp.majic.rs/deployment_and_use_x509_free_software.odp The 'ftp' part is there just because I didn't have a better idea, so no ftp interface just to warn you :) Best regards P.S. I swear I'm more honest than Honest Achmed for certificate issuance :D -- Branko Majic Jabber: branko(a)majic.rs Please use only Free formats when sending attachments to me. Бранко Мајић Џабер: branko(a)majic.rs Молим вас да додатке шаљете искључиво у слободним форматима.

1 0

[security-devroom] PolarSSL (last minute addition)
by Branko Majic 05 Feb '12

05 Feb '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There will be a talk "PolarSSL: Open Source Crypto/SSL & Government Accredations" held at 12:15 in the devroom. This is a last-minute addition, so I hope some people will catch this mail. Best regards - -- Branko Majic Jabber: branko(a)majic.rs Please use only Free formats when sending attachments to me. Бранко Мајић Џабер: branko(a)majic.rs Молим вас да додатке шаљете искључиво у слободним форматима. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBAgAGBQJPLmKXAAoJEKMf8HaMRBUHwHcQAIyYoQrQ2fY9Li37wv9LZhzM tbmRvHTbfxv4EKdOsIIsRofsEwDPYKsR434EW5NdsPogSphq74kogkGe63y3ju0F cymqDjCz2Tu2u8UfJILgVVwOo6zCJFpIpa4ifD1Uo2x7ZdEcMCDZxy5hwk1KrrKK Lo7uqhGXSgtI5iBD+7LUhHrtSj0mEKe/HPSz3oqLG0cESkV+ce56+49S8m0WMZLM 5ZhZ65E2NQSH/INeZXkkP9TplGmG8Zkmy0V7qWOqlSyjZvbDp5HaSoM3e3nQ4Gft 1d8a2DGesGEzjKpScfUHf2QBZGVFMIumlC7BF939gIctbwucByWCSX4UNAv6AXCR 2HPNJc90LTH5/NKXqJOisBW8qZs0gJa4it/SyjkT9Kxo81YzSqoQYhrcAvY8uFzz YprzeZUK9dhn0W3/6hY3FDOtT7WLRsVo90/t3f3X+eSXQ0v1IBComYXvzsS8qzHV QIq/nWL9zC7zDaA3hmMAy0EnIIgJmk9GeMWulNV9xVdDrWGOheei3si5chIHf8qQ x2i57868qafR7C3ygE8HQaBk37qy/XJou8bAqSPZYDBIn8FD6etbiH5yRJXyFO6L tAG7tBveJA0CyuAG2+/HFndJx8KlJQQCc83asXG7R7piqfQ4ow/zPX08RnFncpUk rztZ12AqJvvFtvXnAN2f =5kiR -----END PGP SIGNATURE-----

1 0

[security-devroom] Smartcard workshop confirmation
by Jean-Michel Pouré - GOOZE 05 Feb '12

05 Feb '12

Dear all, Smartcard workshop is scheduled at 13:00 on Sunday. We will make a donation of 70 free ePass2003 tokens to the audience. I realize that my train is arriving at 11:47 at Gare du Midi. Then there is around 30 minutes of train. This schedule is short. I might arrive around 12:45 sharp. So wait for me. Hope there is not too much snow! Kind regards, -- Jean-Michel Pouré - Gooze - http://www.gooze.eu

1 1

[security-devroom] [Talk/Demo Submission] Dogtag Certificate System (open source PKI)
by Kashyap Chamarthy 04 Feb '12

04 Feb '12

Heya, Here is my talk/demo submission for "Hardware Security and Cryptography" room at Fosdem. I also added it to the below wiki (I'd prefer to do a demo if time permits) http://www.opensc-project.org/opensc/wiki/FOSDEM2012 Abstract for 'Dogtag Certificate System': -------------------------------------------------- This talk gives a brief overview of Dogtag Certificate System, an open-source and open-standards based scalable PKI(public-key infrastructure) solution. It lets you manage digital certificate life cycle -- common operations like certificate issuance, revocation, retrieval, renewal, manage Certificate Revocation Lists, certificate status checking using OCSP, key archival/recovery. The talk also provides a deployment overview of different configurable subsystems like CA(Certificate Authority) -- this is the core part of certificate system which handles basic certificate management operations. Other subsystems include DRM(data recovery manager) -- which is used for 'key' archival and recovery; OCSP(online certificate status protocol) -- for checking whether a certificate is valid. RA(Registration Authority) -- for locally generating and submitting certificate requests(and validate them) effectively reducing load on CA. There are couple of other subsystems for token management (TKS/TPS) Demonstration: ------------------- If possible, I'd also prefer to show a quick demo of configuring different subsystems like CA, KRA(Key Recovery Archival), OCSP, RA(Registration Authority) using virtual machines on my laptop with the current upstream dogtag pki . This would hopefully be useful for sys. admins trying to deploy an enterprise class PKI. (I'd be using some test scripts[2], but, I may use slightly updated scripts at that time of demo.) Affiliation/Bio: ---------------- I'm Kashyap Chamarthy, a test engineer at Red Hat. I help test open source Identity and Security(PKI) technologies[2][3]. I also test and deploy a lot of upstream Linux(KVM based) virtualization as part of my lab infrastructure. Looking ahead to learn some finer details about open-source crypto at FOSDEM and meet some cool folks. [1] http://kashyapc.fedorapeople.org/dogtag-pki/ [2] http://pki.fedoraproject.org [3] http://freeipa.org

4 5

[security-devroom] recording talks
by Kai Engert 01 Feb '12

01 Feb '12

If desired and nobody else wants to bring a camera to record all the talks, I offer to bring the same camera and tripod that we had last year to record the talks. However, this year I won't be able to spend all my time in the security room, I need to participate in the Mozilla room, too. Would anyone of you be willing to take care of operating the camera while I'm away? Maybe we should meet early at 10, so I can answer questions regarding the camera. I want to go to the welcome keynote at 10:30. I can help with the initial setup of the camera in our room at 10:55. I probably will be away from 11:30, so I'd like to ask that you watch the camera during the lunch break (it's rather small, you can take it with you). I will be back by 15:50 for the final CAcert talk. I assume recording on Saturday is sufficient, as the events on Sunday are workshops. Who's interested to help? Greetings Kai -- Sending me encrypted e-mail: - get my S/MIME cert from https://kuix.de/smime-keyserver/ - get my GPG/PGP key from http://pgp.uni-mainz.de/

2 1

Re: [security-devroom] [FOSDEM] Smartcard workshop at FOSDEM 2012
by Jean-Michel Pouré - GOOZE 01 Feb '12

01 Feb '12

Le mardi 31 janvier 2012 à 11:50 +0100, Wouter Simons a écrit : > on a personal note :) > is there any oportunity to register for this work-shop or is it first > come first served ? You are right. Last year, we donated 100 smartcards at FOSDEM. People rushed in the room and some left immediately. As a result 50% of the audience had no smartcard. To avoid this situation, there are 3 different situations: 1) You may register online for a free ePass2003: http://www.gooze.eu/feitian-epass-2003-free-software-developer-kit Indicate "FOSDEM 2012" during checkout. Give your real name and address as a normal checkout. You only need to pick-up your token at FOSDEM, on first day (Saturday) or second day (Sunday) in the dev romm. I will be sitting in front of the room with OpenSC hackers. 50 ePass2003 will be reserved this way. First in, first served. 2) You may receive a free ePass2003 during the smartcard workshop. 50 additional ePass2003 will be available for the smartcard workshop audience. You will have to register writing your name on a paper. We wan to avoid people picking-up the ePass2003 and leaving immediately. So that the audience can hack around the ePass2003 during the workshop. 3) Free software kits If you are taking part in a free software project and would like to implement security features around hardware tokens, GOOZE ***always*** donates the epass2003. Just register on this page and we will ship to your address: http://www.gooze.eu/feitian-epass-2003-free-software-developer-kit Make a full description of your token. We always verify information, even looking at source code before shipping a free token. This usually takes 24/48 hours before your order is validated or rejected. The reason why we donate the ePass2003 to free software communities is that until recently tokens were very expensive and exotic hardware. Donating a token is a first step before people discover this ***proven*** technology. Hope this helps. Kind regards, -- Jean-Michel Pouré - Gooze - http://www.gooze.eu

5 11