JDL 2005 in Lyon, France.

À l’occasion des « Journées Du Libre » organisées par l’ALDIL, j’assurerai les personnes qui le souhaitent.

Date : 14 et 15 octobre 2005
Lieu : CPE, campus de la Doua, Villeurbanne (69).

UKUUG/CAcert wrap up

During the UKKUG 2005 Linux Developers Conference we held a CAcert Assurance event. Over the weekend of the conference the three of us organising the assurance assured 35 people nearly all of whom were being assured for the first time at the event.

We suspect also that, once the ball was rolling, a number of people were assured without involving us 🙂

A number of people were interested in the CAcert assurance, but did not have appropriate identity documents with them – which goes to show that despite 2 different mailed out notifications before the event, people just don’t read bumpf.

Many thanks to Werner and Andrew (our Super-Assurers) for giving up a substantial piece of their time for this, and for the many people who helped out.

We aim to do another event like this at the UKUUG Winter Conference.

Conference – mrmcd11b

mrmcd11b: 02-04 September 2005, Darmstadt, Germany

There will be many assurers and an assurance event (no timeplan yet) – more information later here.

Assurance event in Tulsa, Oklahoma USA

The only two assurers in Oklahoma will be at an assurance event at the next Tulsa Linux Users Group meeting this Saturday. For details, see
http://www.tulsalug.org/?q=node/128

For meeting time and place, see http://www.tulsalug.org/

Conference – What-the-hack

What-the-hack 28-31 July 2005, near Den Bosch, Netherlands Some assurers will be there. More information later here. Buy a ticket before May 10th to get a rebate. more info.

Is the UK now unsafe for encryption?

In the wake of the recent bombings in the UK, police in the UK have asked for additional powers to hold terror suspects for up to 3 months without charge if they refuse to hand over encryption keys. While on the surface this sounds like a good way to fight recent happenings it’s no doubt going to be abused like all other knee jerk power grab actions of its kind.

If you are falsely accused and have encrypted files or software to enable you to encrypt things and are in no way, shape or form involved or responsible with the recent state of affairs all I can say is be afraid, be very afraid… http://www.guardian.co.uk/attackonlondon/story/0,16132,1533917,00.html

Real time blacklists – naming and shaming

Long time systems administrators, they tend to either love or hate RBL lists depending what side of things you’re on (or have been on), in most cases people use information returned from these in conjunction with other metrics to more finely tune their spam response rather then using these lists as a be all and end all.

From time to time administrating you will end up on the wrong side of RBL lists more and more however this has less to do with blocking spam, but because of lazy users. Not to mention one of the biggest gripes administrators have to cope with in dealing with RBLs is they are often quite difficult to get off, supposedly to make it difficult on spammers, the jury is still out on that however. You can often find yourself listed even if you weren’t at fault because a large chunk of IP space you happen to be in the middle of is suddenly black listed!

To give some background here, I receive the majority of the bounced emails from the CAcert system and I keep an eye on why emails are being bounced, and it’s quite amusing to read some of the replies, such as people end up black listing their own mail relays.

Others also tend to report emails from us as spam either by accident or because they are simply too lazy to unsubscribe from our mailing lists, or for the emails automatically sent out to verify them on sign up! This almost almost ranks up there with my pet peeve with people black listing APNIC IP ranges (Asia Pacific NIC – which Australia happens to be part of but no where near the highest source of spam, even on a per captia basis!) because “most spam comes from Asia”, which is in fact false and they should black list ARIN instead because most spam comes from the US.

In any case the latest RBL (http://www.stop-spam.info/lookup.php?ip=202.87.16.201) that has come to my attention (they actually brag on their website about how many millions of IPs they have blocked!) basically takes the cake and they should be avoided like the plague. They have blacklisted the IPs CAcert sits on, the only information given is that it’s a country black list (you read right, it’s not a company black list, but an entire country), not to mention a country with a really low spam rate in any case!

This kind of thing is normally taken care of by sending in a report and asking to be removed or exempted from the black list, but I challenge anyone to find a method to contact them via their website within the first few minutes of looking, I’m still looking.

These guys are taking a sledge hammer to break open an egg and they should NOT be used as a RBL at all EVER, in fact this is the worst RBL list I’ve ever seen, and they point you to a page disclaiming all responsibility and that someone else has blocked the emails, but they are responsible for keeping an up to date lists otherwise this is a worst abuse then the spam they claim to be trying to prevent.

Conference – Ottawa Linux Symposium

Russ Herrold will be attending the Ottawa Linux Symposium from July 20-23rd, 2005 which is being held at the Ottawa Congress Centre, Ottawa, Canada

Proposed CAcert assurance at UKUUG Linux Conference, Swansea

I would like to pull together a CAcert assurance event at the UKUUG Linux Conference in Swansea (Wales, UK) between 4 and 7 August 2005.

At present I need to get enough assurers together to make this possible – and I would also be interested in people who would like to be assured.

Conference details are at http://www.ukuug.org/events/linux2005/

If you are interested in this – and it is a provisional event (at least the assurance part) unless I get sufficient interest – then please contact me at nm2715cacert@muesli.org.uk