2014 archive

Dec 24 2014

merry christmas 2014

As I have noted before, 24 December is trivia’s birthday. Since my first post dates from 24 December 2006, today is trivia’s eighth birthday. It seems like only yesterday. I haven’t posted much in the last few months. I have a lot of material I need to cover, and a backlog of articles I want …

Continue reading

Permanent link to this article: http://baldric.net/2014/12/24/merry-christmas-2014/

Dec 13 2014

solidarity with the tor project

On Thursday 11 December, Roger Dingledine of the Tor project posted the following email to the “tor-talk” mail list (to which I am subscribed). I’d like to draw your attention to https://blog.torproject.org/blog/solidarity-against-online-harassment https://twitter.com/torproject/status/543154161236586496 One of our colleagues has been the target of a sustained campaign of harassment for the past several months. We have decided …

Continue reading

Permanent link to this article: http://baldric.net/2014/12/13/solidarity-with-the-tor-project/

Nov 27 2014

independent hit

On trying to reach the website of the Independent newspaper today (the Grauniad is trying my patience of late), I received the following response: Closing the popup takes you to this page: I haven’t checked whether this is simply a DNS redirect or an actual compromise of the Indy site, but however the graffiti was …

Continue reading

Permanent link to this article: http://baldric.net/2014/11/27/independent-hit/

Sep 26 2014

CVE-2014-6271 bash vulnerability

Guess what I found in trivia’s logs this morning? – – [25/Sep/2014:10:48:13 +0100] “GET /cgi-sys/defaultwebpage.cgi HTTP/1.0” 404 345 “-” “() { :;}; /bin/ping -c 1” I’ll bet a lot of cgi scripts are being poked at the moment. Check your logs guys. A simple grep “:;}” access.log will tell you all you need …

Continue reading

Permanent link to this article: http://baldric.net/2014/09/26/cve-2014-6271-bash-vulnerability/

Aug 13 2014

net neutrality

My apologies that this is a few weeks late – but it still bears posting. John Oliver at HBO gave the best description of the net neutrality argument I have seen so far. Following that broadcast, the FCC servers were, rather predictably, overwhelmed by the outraged response from the trolls that Oliver set loose. Unfortunately, …

Continue reading

Permanent link to this article: http://baldric.net/2014/08/13/net-neutrality/

Aug 11 2014

levison on dime

Ladar Levison and Stephen Wyatt presented the upcoming Dark Internet Mail Environment (DIME) at Defcon22 this week. According to El Reg, Levison, who shut down Lavabit, his previous mail service rather than comply with FBI demands that he divulge the private SSL certificates used to encrypt traffic on that service, said: “I’m not upset that …

Continue reading

Permanent link to this article: http://baldric.net/2014/08/11/levison-on-dime/

Jul 28 2014

punctuation matters

There is a nice tweet over at @NSA_PR. It reads: We take your privacy, seriously. Beyond parody.

Permanent link to this article: http://baldric.net/2014/07/28/punctuation-matters/

Jul 23 2014

department of dirty

Like most ‘net users I get my fair share of spam. Most of it gets binned automatically by my email system, but of course some still gets through so I am used to hitting the delete button on random email from .ru domains offering me the opportunity to “impress my girl tonight”. Most such phishing …

Continue reading

Permanent link to this article: http://baldric.net/2014/07/23/department-of-dirty/

Jul 21 2014


I get my domestic ADSL connectivity from the rather excellent people at Andrews and Arnold. Here’s why. And this is the original reason I moved to them. They also happily take (and similarly reply to) GPG encrypted support questions. Good guys. Thoroughly recommended. Now can you /really/ see BT doing any of that? ‘thought not.

Permanent link to this article: http://baldric.net/2014/07/21/drip/

Jun 30 2014

inappropriate use of technology

I have been travelling a lot over the last few months (Czech Republic, Scotland, France, Germany, Austria, Slovenia, Croatia, Italy). That travel, plus my catching up on a load of reading is my excuse for the woeful lack of posts to trivia of late. But hey, sometimes life gets in the way of blogging – …

Continue reading

Permanent link to this article: http://baldric.net/2014/06/30/inappropriate-use-of-technology/

May 30 2014

a new app

My newspaper of choice, the Guardian, has for some time produced its own android (and iOS of course) app. I have often used the android app on my tablet to catch up on emerging news items at the end of the day. I also read the BBC news app for the same reason. Yesterday I …

Continue reading

Permanent link to this article: http://baldric.net/2014/05/30/a-new-app/

Apr 16 2014

nsa operation orchestra

In February of this year, Poul-Henning Kamp (a.k.a “PHK”) gave what now looks to be a peculiarly prescient presentation as the closing keynote to 2014’s FOSDEM. In the presentation (PDF), PHK posits an NSA operation called ORCHESTRA which is designed to undermine internet security through a series of “disinformation” or “misinformation”, or “misdirection” sub operations. …

Continue reading

Permanent link to this article: http://baldric.net/2014/04/16/nsa-operation-orchestra/