Category Archives: Information

General news/information to the CAcert community or about security in general

Unix / Linux Day 2006 Zweibrücken: CAcert assuring & keysigning party

I’m very proud to announce the upcoming Unix / Linux Day 2006, organised by the UnixAG Zweibrücken. This year’s event is focused on security related topics and is held under the motto: Linux Security Day. Talks include interesting topics such as virtualisation, auditing with Knoppix based live CDs, Solaris dtrace and ofcourse: CAcert!

We will be organising an OpenPGP keysigning party and ofcourse there will be plenty CAcert assurers available for assuring. Right now we have about six assurers. More assurers are always welcome!

Please take a look at http://lsd.unixag.net for mor information.

CAcert Portable Verification Device (PVD)

For the Ohio Linuxfest we had a number of portable verification devices (aka coffee mugs), made up as donationware items. We over estimated the demand and we have a quantity of these left over and are offering them primarily for those in the US (due to postage costs).

We’re offering these mugs for a minimum donation of $10 (unless you want to pick up in the Columbus area or donate more money), the cost break down is $5 for the mug, and $5 is to cover banking fees and postage.

PVD action shot
PVD Logo

Problems with the current location database

As of about 5 minutes ago I put the finishing touches on code to allow people to make changes to the location data.

This includes being able to move locations between regions, adding and deleting locations and adding and deleting regions.

If you delete a region it will also delete any locations hanging off it.

So those making changes should only use deletes as a last resort as this has implications for users that have selected a location for their location.

Moving a location between regions will not have any impact on users as the region will be updated for all users etc.

The plan is to also replace the current system of listing yourself, you will simply be able to type in your location and hopefully the system will be able to narrow it down so this should be a lot quicker and more efficient. Also finding assurers will gain the same ability to type in a location and the system will in turn the system will display the closest 100 assurers.

Currently people store their location against their user record, I’m planning to split this off into it’s own table so users can store multiple locations.

Need Volunteers for the SoCal Linux Expo

I’ve been asked for volunteers to attend the SoCal Linux Expo which is on between the 11th and 12th of Feburary 2006. We’ve been offered a booth and so we are looking for a couple of people to sit on it. We (CAcert Inc) can put funding toward this to cover flights, transfers to and from the airport and hotel accomodation during the Expo.

The conditions for funding is you must currently have 100 assurance points (ie be an assurer), you must be willing to sit on the booth for the majority of the time (10am till 4pm minimum), and preference will be given to those that already have assurances under their belts and/or manned a CAcert booth at other conferences even if it costs a little more for their flights.

Any questions or for further information please email me directly, but there needs to be a decision made on this as soon as possible to ensure people that fly in will have a place to stay etc close to the conference.

Need Volunteers for Apache Con 2005

We’re currently looking for up to 2 people on the North American continent, close to San Diego would be an advantage to us, as we need people to man a CAcert booth for at Apache Con 2005 (10th to the 14th of December), we (CAcert Inc) can allocate some funding that can be used to cover flights/accommodation/other expenses (printing etc).

As always there is a couple of catches, firstly you must currently have 100 assurance points (ie be an assurer), you must be willing to sit on the booth for the majority of the time (10am till 4pm minimum), and preference will be given to those that already have assurances under their belts and/or manned a CAcert booth at other conferences even if it costs a little more for their flights.

Of course the benefit is that you end up getting to spend some time in warm and possibly sunny Southern California during the North American winter 🙂

Any questions or for further information please email me directly, but there needs to be a decision made on this as soon as possible to ensure people that fly in will have a place to stay etc close to the conference.

CAcert root included in Nokia 770

Nokia has included the root certificate of CAcert into the new Nokia 770 Internet Tablet. This makes it possible to use secure websites, encrypt and digitally sign emails with free certificates from CAcert.org.

Currently Knoppix, Debian, Gentoo, Ubuntu, and other Linux distributions have incorporated CAcert into their products already, Nokia is the first commercial vendor to approve CAcert for it’s products. One of the main goals of CAcert was to be included in major browsers and CAcert continues to actively pursue other vendors such as Opera, Mozilla and Microsoft to be included as part of their browsers.

CAcert is a community certification authority that issues free SSL certificates worldwide for individuals and organisations, and CAcert aims to enable better privacy for the Internet. CAcert is committed to high standards of security and verification, to achieve this goal CAcert operates a worldwide network of Assurers who are verifying the identities according to the 4 eyes principle (or better), to have a high level of verification as it is of little benefit having security if you aren’t sure who you really are communicating with at the other end.

Properly securing wireless networks on the cheap

In part the reason CAcert exists is because very early on I realised how much a waste of time many of the security features that existed in the devices at the time (and even now still to a large extent).

Later on 802.1x came into the picture, but that has numerous complications with prerequisites with requiring you to setup RADIUS depending how you decide to go about configuring everything.

It’s worth noting that over the last few years the prices on access point routers have been dropping to the point that they can be now had in Australia for about the AU$100 price point (about US$50-70), the other interesting thing to note is that a number of companies making these devices ended up using linux on them rather then writing a custom OS which in turn lead to them being forced to release source code under provisions in the GPL.

This is where things start to get very interesting because on one hand we have cheap off the shelf small form factor devices and on the other we have th complete source code and tools to make customised firmware versions. These two events lead some smart cookies to take the sources and build up some amazing functionality along the way by taking software in the world of linux software.

So a long story short this is good news for people looking to better secure their wireless network and in such an easy and simplistic manner, via OpenVPN and these embedded devices, OpenVPN is a great choice because it seems as good as IPSec in terms of security, unless you happen to have state secrets to guard and I’m sure there are better options available from commercial vendors.

I’ve just spent the last couple of days experimenting with a Linksys WRT54G and managed to string together a guide on setting up a wireless access point router with OpenVPN and getting a linux laptop to talk to it as well.

SFD Hungary – CAcert Assurance Party

Hungary’s only Software Freedom Day event has been organized in Szeged. It is a city in the south with a big university and high involvement in open source.

There was a CAcert lecture and assurance party successfully held, about 50 new members joined the community. We were three assurers there.

More about the event:
SFD Szeged home: www.inf.u-szeged.hu/opensource/events.php
Lecture slides: www.artificis.hu/talks/sfd05