adulau

JAR

Verify the signature of a JAR file

jarsigner -verify -certs -verbose -h <YOURJARFILE>.jar

Dump certificate part of a certificate file from a JAR

adulau

AIVE Waste Analysis

Source

JP Florent gave me an XLS file containing the statistic of the waste collected from 2010, 2011 and 2012. The initial file is not really machine friendly as the spreadsheet is used for human reading. This is another important point with open data. Usually a lot of claimed to be "open data" is in an format that you cannot easily parse and need a lot of conversion to be understandable by a machine.

Conversion

adulau

https://github.com/adulau/cve-search

How to choose a CMS? (based on the CVSS?)

$ python search.py -p typo3 -o json  | jq -r '.cvss' | Rscript -e 'mean(as.numeric(read.table(file("stdin"))[,1]))'
[1] 6.161562

$ python search.py -p wordpress -o json  | jq -r '.cvss' | Rscript -e 'mean(as.numeric(read.table(file("stdin"))[,1]))'

[1] 5.622102

adulau

#!/usr/bin/env python
#
# Initially based on sudoku-password card
#
# This software is in the public domain
#
# python password-card.py  -c 100 -p 13 -n 10
#
# Alexandre Dulaunoy (a<AT>foo.be)

adulau

A joint work between Quinn Norton and Alexandre Dulaunoy on how to interact with journalists. The presentation was given at OHM2013.

Talking to the media

You've reached out, or they've reached out to you. It could be everything from a formal request to PR to someone who sat down beside you in a bar. It could be a 30 second breaking news piece, or a book 10 years in the making. Knowing a little bit about the media can make the whole exchange more fruitful and useful not only for you and the journalist, but a public that hasn't had a lot of good information about our world.

Inform yourself

adulau

Notes about Hardware Random Generator

Previously, I used the entropykey from Simtec but it's no more manufactured.

http://www.foo.be/cgi-bin/wiki.pl/TestingSimtecEntropyKey

So I tried to explore all the other options.

XR232-TRNG as USB

adulau

#!/usr/bin/env python
#
# Requirements: ntplib (easy_install ntplib)
#
# How to use it using GNU parallel (to run in //):
#
#  cut -f1 -d";" ntp-monlist-servers.csv | parallel "python test-ntp.py --ip {1}"
#
# Software is free software released under the "Modified BSD license"
#

adulau

dnstap-ldns
./configure libldns_CFLAGS="-I/usr/local/include" libldns_LIBS="-lldns"

fstrm_capture  -t protobuf:dnstap.Dnstap -u /tmp/dnstap.sock -w - -ddddd | ..git/dnstap-ldns/dnstap-ldns -r - 

adulau

Configuration

Before compiling Yaf, you need to compile and install the IPFIX library called libfixbuf is required (https://tools.netsa.cert.org/fixbuf/download.html). You will need libglib2.0-dev to compile libfixbuf.

./configure
make

adulau

• Real-time Inter-network Defense (RID) (2012)
• CYBEX – The Cybersecurity Information Exchange Framework (X.1500)