<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Yoooder.com &#187; Security</title>
	<atom:link href="http://yoooder.com/wordpress/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://yoooder.com/wordpress</link>
	<description>Just another WordPress weblog</description>
	<lastBuildDate>Fri, 08 Jul 2011 14:13:38 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Penetration testing my apartment</title>
		<link>http://yoooder.com/wordpress/2007/09/penetration-testing-my-apartment/</link>
		<comments>http://yoooder.com/wordpress/2007/09/penetration-testing-my-apartment/#comments</comments>
		<pubDate>Tue, 25 Sep 2007 06:10:19 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[Life Hacks]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Tips]]></category>
		<category><![CDATA[Toy Helicopters Fuck with me so bad!]]></category>

		<guid isPermaLink="false">http://yoooder.com/wordpress/?p=12</guid>
		<description><![CDATA[Problem: It's 1:00am, in a town where you don't really know anyone, you're locked out of your apartment, and the only things you have on you are a cell phone and a toy RC helicopter (it has LED's that blink, I thought it would be cool to fly in the dark). Objective: Gain entry to [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Problem:</strong> It's 1:00am, in a town where you don't really know anyone, you're locked out of your apartment, and the only things you have on you are a cell phone and a toy RC helicopter (it has LED's that blink, I thought it would be cool to fly in the dark).</p>
<p><strong>Objective:</strong> Gain entry to your dwelling without having to a) wake up the neighbor or b) explain to a cop that your ID is just behind the door you're trying to jimmy.<span id="more-12"></span></p>
<p><strong>*My* Solution (your mileage may vary):</strong> Perform a preliminary port-scan before proceeding to more intensive penetration testing.  Start with all the doors...  my main door is around back, and it leads to the three apartments in the house I live in.  It happens to be unlatched (rare, as it has a hydraulic ram to close it and automatically locks) however the inner door to my apartment is locked tight.  I've no credit card handy to attempt to pop the lock, however it would be futile--I've tried before.</p>
<p>On to the front door; it's a shaky old thing that lacks a locking knob, has two cheap-o mini-deadbolts and a sliding chain lock to hold it tight.  At first try it's shut and locked, no luck here.  The two windows to the apartment are also unhelpful, one is locked and the other has an AC unit bolted in.</p>
<p>Back to the front door.  I shouldered it pretty firmly and was surprised when it gave!  Turns out the wood has swollen with the humidity to where only 1 of the 2 little deadbolts catch, and only by a small amount.  So I'm left with a sliding chain lock between me and bed.  The chain lock is installed correctly though, and the door must be closed for it to be locked or unlocked.  fuck</p>
<p><strong>Final solution:</strong> Scavenge, fortunately there's a construction site in the back yard (they're building a new garage) and I manage to find some twine.  I cut off about 6' (with a utility knife I found) and tie one end around the end of the chain, on the little knob piece that slides in the rail and actually locks the door.  Then I run the twine up the inside of the door (inside the apartment, same side as the lock), over the top, and down the front.  Pull the door to where it almost latches and start tugging on the twine.  Amazingly it only took about 10 seconds of fiddling to pop the chain out of it's rail, and voila!</p>
<p>Maybe later I'll post about a string-&amp;-baseball injection attack on a large leaf-server (ie: Tree) which holds (another) toy helicopter problem.</p>
]]></content:encoded>
			<wfw:commentRss>http://yoooder.com/wordpress/2007/09/penetration-testing-my-apartment/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Creating an encrypted volume</title>
		<link>http://yoooder.com/wordpress/2007/03/backlog-03192007-2/</link>
		<comments>http://yoooder.com/wordpress/2007/03/backlog-03192007-2/#comments</comments>
		<pubDate>Tue, 20 Mar 2007 03:40:22 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[Encryption]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Tips]]></category>

		<guid isPermaLink="false">http://yoooder.com/wordpress/?p=11</guid>
		<description><![CDATA[I needed to meet my company's required security policy for taking source code offsite: 256bit AES encryption. Since the source code I had on my laptop was within a Virtual Machine, I thought it would be a good solution to make an encrypted filesystem big enough for the VM, and only mount it when I [...]]]></description>
			<content:encoded><![CDATA[<p>I needed to meet my company's required security policy for taking source code offsite: 256bit AES encryption.</p>
<p>Since the source code I had on my laptop was within a Virtual Machine, I thought it would be a good solution to make an encrypted filesystem big enough for the VM, and only mount it when I wanted to work.</p>
<p>Here's my requirements:<br />
- Encrypted FS that is (un)mountable whenever need be<br />
- Passphrase to mount the filesystem<br />
- 30GB of storage within the filesystem, to accomodate the 30GB VM disk.<span id="more-11"></span></p>
<p>First, we create a file that will become the filesystem.  Using dd we make it the size we want:<br />
dd if=/dev/zero bs=1G count=30 of=/home/steve/devel_image</p>
<p>Here's what the attributes mean:<br />
if is the input file since we're making an empty file we'll set if to /dev/zero, which will give us an empty file of zeros<br />
of is the output file, or the file you want to create.  Here I'm telling it to make a file called devel_image in my /home/steve folder<br />
bs is the bytes, but I like to call it the bucket size, since the way it is used is to declare your unit size.  Here 1G means we wants 1GB chunks, or buckets.  You can give it different units, 1M, 5G, whatever.<br />
count is the number of buckets you wish to use.  Since we want a 30GB file, and are using 1G buckets, we'll need 30 of them to make 30GB.</p>
<p>This makes a 30GB file called devel_image in my home directory, and takes some time to complete (30 gigs is kinda big, y'know?)</p>
<p>Next we setup a loopback device (which will make the system see the file as a drive).  using losetup you can create the device, and you can even add encryption at this point--however it's becomming deprecated, and better to handle the encryption on it's own (as cryptoloop support will be removed from the kernel at some point</p>
]]></content:encoded>
			<wfw:commentRss>http://yoooder.com/wordpress/2007/03/backlog-03192007-2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Wiping a hard drive</title>
		<link>http://yoooder.com/wordpress/2007/03/backlog-03192007/</link>
		<comments>http://yoooder.com/wordpress/2007/03/backlog-03192007/#comments</comments>
		<pubDate>Mon, 19 Mar 2007 22:40:05 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Tips]]></category>

		<guid isPermaLink="false">http://yoooder.com/wordpress/?p=10</guid>
		<description><![CDATA[Wiping a HardDrive is a common task at the workplace or whenever you're getting ready to sell a PC. There is a utility to do just such a thing in almost all Linux Bootdisks called shred. Shred can be used to wipe files, or whole drives. To wipe a drive, the following parameters are good [...]]]></description>
			<content:encoded><![CDATA[<p>Wiping a HardDrive is a common task at the workplace or whenever you're getting ready to sell a PC.  There is a utility to do just such a thing in almost all Linux Bootdisks called shred.</p>
<p>Shred can be used to wipe files, or whole drives.  To wipe a drive, the following parameters are good to know<br />
-z     After shredding, one more pass will be made to write all zeros to the drive, not necessary, but it hides the fact that the disk has been shredded<br />
-v     Display messages about progress, which is handy since shredding a drive takes a fair deal of time<br />
-n x    x is the number of passes you wish to make.  3 is a good number, and if you use the -z option it will be 3 shredding passes followed by a 4th pass to zero out all the data</p>
<p>Put it together and pass it a drive to wipe:<br />
shred -zvn 3 /dev/sda</p>
<p>And voila, all your private data goes bye-bye</p>
]]></content:encoded>
			<wfw:commentRss>http://yoooder.com/wordpress/2007/03/backlog-03192007/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

