Author: ro
-
How to build a more secure personal computer
Latest update: Jan 2021 This guide is based on the BIOS UEFI replacement called Coreboot which runs on an ASUS F2A85-M or F2A85-M PRO mainboard with an AMD A10-5800K CPU with integrated graphics. 1. Introduction and aim This initial idea came up with the uprising problems and vulnerabilities of Intel ME and AMD Secure Technology (PSP). After having…
-
System alternatives without Intel ME / iAMT and AMD PSP / Secure Technology
Last update: Jan 2021 Due to a lack of documentation and possiblities to deactivate these “secure execution environments” those can’t be disabled on our own. If you are interested you can read some more details about Intel ME/iAMT and AMD Platform Secure Processor / AMD Secure Technology. This article is providing an overview about possible solutions. From today’s…
-
How to: Install a privacy friendly Jitsi Meet on Ubuntu and run it securely
Meta Last update: Jan 2021Tested with: Ubuntu 21.04 and 18.04 Prerequisites If you intend to run Jitsi on your new publicly accessible server, reachable under meet.yourdomain.com, you should change the name of your host accordingly in both files and reboot your machine: These instructions also take care of the TLS certificate. If the server is…
-
How to: Backup or sync files with 7-Zip CLI
Last update: Dec 2017 Motivation Sometimes we just want to backup files with very simple tools in order to keep it simple and stupid. Although it’s well documented, many people do not know, that the 7-Zip command line tool can also update the backup target in case some files changed within the source. Environment Requirements…
-
Cybersecurity threats 2021
Last update: Dec 2020 If you are not already familiar with the importance of cybersecurity, maybe some economic figures in the following info-graphic might create some awareness for that topic. With the concept of ransomware as a method of attack cyber-crime has definitely become an attractive business model. Source: https://cybersecurityventures.com/hackerpocalypse-cybercrime-report-2016 Old friends Ransomware / malware.…
-
AMD processors without AMD PSP / Secure Technology
Last update: Nov 2020 If we want to find the latest CPU which is not equipped with any secure execution environment, we need to look into the official and other documentations, which are available publicly. From news in the media we assume the secure execution environment to be integrated somewhere around 2013. Available documents are:…
-
Zugriffskontrollstrategien / Access Control Models
Letztes Update: Nov 2020 Dieser Artikel vermittelt einen Überblick über die verschiedenen geläufigen Zugriffskontrollstrategien: Discretionary Access Control (DAC) Auch bekannt als: benutzerbestimmbare Zugriffskontrolle. Für jedes Objekt O, welches von Benutzer A erstellt wird, ist automatisch Benutzer A der Eigentümer dieses Objekts. Benutzer A darf nun als Eigentümer des Objekts allein entscheiden, welche Zugriffsrechte (z. B. Lesen/Schreiben)…
-
Die Grenzen der digitalen Selbstverteidigung
Letztes Update: Oct 2020 Kleine Literaturübersicht Es gibt viele gute Gründe im Zeitalter der globalen Informationssammlung unser Grundrecht auf informationelle Selbstbestimmung wahrzunehmen. Jeder, der sich hierzu schon mal seine Gedanken gemacht hat, ist sicherlich auf die eine oder andere Literatur gestoßen. Der sicherheitsbewusste Leser findet auf dem Markt eine relativ übersichtliche Anzahl an Titeln (chronologisch…
-
How to install XFCE and VNC on a headless Ubuntu 18.04
Latest update: Dev 2019 I’ve tested some tutorials on the internet which guide through the installation of VNC. Unfortunately some of them just didn’t work out therefore I’m writing down the current way that works flawlessly. Prerequisites:– Freshly installed Ubuntu 18.04 server edition (headless installation – no GUI).– We assume all commands are typed in…