<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Security &#8211; Roumazeilles.net</title>
	<atom:link href="https://www.roumazeilles.net/news/en/wordpress/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>https://www.roumazeilles.net/news/en/wordpress</link>
	<description>Technology opinions and others</description>
	<lastBuildDate>Thu, 17 Jun 2021 19:54:45 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	
	<item>
		<title>Test your firewall</title>
		<link>https://www.roumazeilles.net/news/en/wordpress/2020/11/25/test-your-firewall/</link>
					<comments>https://www.roumazeilles.net/news/en/wordpress/2020/11/25/test-your-firewall/#respond</comments>
		
		<dc:creator><![CDATA[Yves Roumazeilles]]></dc:creator>
		<pubDate>Wed, 25 Nov 2020 20:09:13 +0000</pubDate>
				<category><![CDATA[Routers & networks]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[firewall]]></category>
		<category><![CDATA[test]]></category>
		<guid isPermaLink="false">https://www.roumazeilles.net/news/en/wordpress/?p=16010</guid>

					<description><![CDATA[Shields up! Shields up! will allow you to test the security of your Internet conection. If you have a firerwall, you will know if it is correctyl configured. If you don&#8217;t, you will know what risks you are taking. I invite you to visit the rest of the web site, too. It covers security aspects linked [&#8230;]]]></description>
										<content:encoded><![CDATA[
<h2 class="wp-block-heading">Shields up!</h2>



<p><a href="http://www.grc.com/">Shields up!</a> will allow you to test the security of your Internet conection. If you have a firerwall, you will know if it is correctyl configured. If you don&#8217;t, you will know what risks you are taking.</p>



<p>I invite you to visit the rest of the web site, too. It covers security aspects linked to an Internet connection (more for personal computers than enterprise networks, though). You will even find good comparisons and selection of tools like&nbsp;<a href="http://www.grc.com/su-firewalls.htm">personal firewalls</a>. Recommended.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.roumazeilles.net/news/en/wordpress/2020/11/25/test-your-firewall/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Security on Roumazeilles.net</title>
		<link>https://www.roumazeilles.net/news/en/wordpress/2016/09/15/security-on-roumazeilles-net/</link>
					<comments>https://www.roumazeilles.net/news/en/wordpress/2016/09/15/security-on-roumazeilles-net/#respond</comments>
		
		<dc:creator><![CDATA[Yves Roumazeilles]]></dc:creator>
		<pubDate>Wed, 14 Sep 2016 22:00:12 +0000</pubDate>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Liberties]]></category>
		<category><![CDATA[Routers & networks]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[SSL]]></category>
		<category><![CDATA[web site]]></category>
		<guid isPermaLink="false">https://www.roumazeilles.net/news/en/wordpress/?p=14085</guid>

					<description><![CDATA[Minor technical information for those of you who are sensitive to their online safety. One of the recommended steps to a better privacy and safety is using web site under the SSL protocol (accessing them with https:// instead of http://). Now, Roumazeilles.net helps you and can be transparently accessed through both addresses: https://www.Roumazeilles.net/ http://www.Roumazeilles.net/ &#160; [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>Minor technical information for those of you who are sensitive to their online safety. One of the recommended steps to a better privacy and safety is using web site under the SSL protocol (accessing them with <strong>http<span style="color: red;">s</span>://</strong> instead of <strong>http://</strong>).</p>
<p>Now, Roumazeilles.net helps you and can be transparently accessed through both addresses:</p>
<p style="text-align: center;"><a href="https://www.Roumazeilles.net/">http<span style="color: red;">s</span>://www.Roumazeilles.net/</a></p>
<p style="text-align: center;"><a href="http://www.Roumazeilles.net/">http://www.Roumazeilles.net/</a></p>
<p>&nbsp;</p>
<p>For most people, this will change nothing. For those who prefer to keep some of their browsing (a little more) discreet, it may help.</p>
<p><span id="more-14085"></span></p>
<p>Useful reading: <a href="https://www.eff.org/https-everywhere%20">HTTPS Everywhere | Electronic Frontier Foundation</a></p>
<p>If you really want to go into more gory technical details, I can mention that this move was made possible (easy) by my web hosting provider (<a href="https://www.ovh.com/">OVH</a>) who provides a free SSL certificate that I only needed to enable in my administration interface.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.roumazeilles.net/news/en/wordpress/2016/09/15/security-on-roumazeilles-net/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Nearly 1 million American terrorists according to FBI</title>
		<link>https://www.roumazeilles.net/news/en/wordpress/2008/05/05/nearly-1-million-american-terrorists-according-to-fbi/</link>
					<comments>https://www.roumazeilles.net/news/en/wordpress/2008/05/05/nearly-1-million-american-terrorists-according-to-fbi/#respond</comments>
		
		<dc:creator><![CDATA[Yves Roumazeilles]]></dc:creator>
		<pubDate>Mon, 05 May 2008 03:05:07 +0000</pubDate>
				<category><![CDATA[Liberties]]></category>
		<category><![CDATA[Lists]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[TSA]]></category>
		<category><![CDATA[USA]]></category>
		<guid isPermaLink="false">https://www.roumazeilles.net/news/en/wordpress/2008/05/05/nearly-1-million-american-terrorists-according-to-fbi/</guid>

					<description><![CDATA[In September 2007, the Inspector General of the Justice Department reported that the Terrorist Screening Center (the FBI-administered organization that consolidates terrorist watch list information in the United States) had over 700,000 names in its database as of April 2007 &#8211; and that the list was growing by an average of over 20,000 records per [&#8230;]]]></description>
										<content:encoded><![CDATA[<p><img decoding="async" src="/images/bomb.png" alt="Is it a terrorist attack?" align="left"><em>In September 2007, the Inspector General of the Justice Department reported that the Terrorist Screening Center (the FBI-administered organization that consolidates terrorist watch list information in the United States) had over 700,000 names in its database as of April 2007 &#8211; and that the list was growing by an average of over 20,000 records per month.</em> [<a href="http://www.usdoj.gov/oig/reports/FBI/a0741/final.pdf">1</a>]</p>
<p>Interestingly, this statement allows to believe that by June 2008 the list will have grown to 1 million terrorists in the US of A. I believe that Americans can be silly, but I doubt that one out of 230 is a dangerous moron attempting to end western civilization next time he or she will take a plane.</p>
<p>I suggest that you have a look at the astonishing list of &#8220;<a href="http://www.aclu.org/privacy/spying/watchlistcounter.html">unlikely suspects</a>&#8221; displayed in this article from ACLU. It includes US Senators and US Congressmen (and their spouses), war heroes, John Does with a common name, dead 9/11 hijackers, foreign presidents (dead as Saddam Hussein or alive like Evo Morales), pop star singers and toddlers.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.roumazeilles.net/news/en/wordpress/2008/05/05/nearly-1-million-american-terrorists-according-to-fbi/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>TSA recent failures</title>
		<link>https://www.roumazeilles.net/news/en/wordpress/2008/02/09/tsa-recent-failures/</link>
					<comments>https://www.roumazeilles.net/news/en/wordpress/2008/02/09/tsa-recent-failures/#respond</comments>
		
		<dc:creator><![CDATA[Yves Roumazeilles]]></dc:creator>
		<pubDate>Sat, 09 Feb 2008 21:15:14 +0000</pubDate>
				<category><![CDATA[Liberties]]></category>
		<category><![CDATA[Photo safari]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[Use your D-SLR]]></category>
		<category><![CDATA[Web sightings]]></category>
		<category><![CDATA[9/11]]></category>
		<category><![CDATA[aircraft]]></category>
		<category><![CDATA[airport]]></category>
		<category><![CDATA[airport security]]></category>
		<category><![CDATA[Customs]]></category>
		<category><![CDATA[fail]]></category>
		<category><![CDATA[plane]]></category>
		<category><![CDATA[police]]></category>
		<category><![CDATA[TSA]]></category>
		<guid isPermaLink="false">https://www.roumazeilles.net/news/en/wordpress/2008/02/09/tsa-recent-failures/</guid>

					<description><![CDATA[The TSA (or Transportation Security Administration) is in charge in the US of the organization the safe transportation of people in planes and through airports. Unfortunately, either they have a lot of other responsibilities (which is true) and fail at this one (which is also true), or they utterly incompetent at insuring the security of [&#8230;]]]></description>
										<content:encoded><![CDATA[<p><img src='https://www.roumazeilles.net/news/en/wordpress/wp-content/uploads/2008/02/hsas.jpg' alt='Homeland Security Advisory System - Threat levels' align="right">The TSA (or Transportation Security Administration) is in charge in the US of the organization the safe transportation of people in planes and through airports. Unfortunately, either they have a lot of other responsibilities (which is true) and fail at this one (which is also true), or they utterly incompetent at insuring the security of the passengers (true again).</p>
<p>I have been amazed at the number of horror stories that I could find lately about their abysmal track record, so here is a short compilation I made just for your your laughs (or cries).</p>
<ul>
<li>TSA has opened a blog web site. It was supposed to help passengers. It has been the focus of a lot of attention from Internet users. They recently <a href="http://www.boingboing.net/2008/02/06/tsa-apologizes-to-bl.html">apologized to the <strong>blogesphere</strong> (<em>sic</em>) for arbitrary gadget screenings</a> (at least in San Francisco SFO, they required <a href="http://www.boingboing.net/2008/01/31/new-tsa-requirement.html"><strong>all</strong> electronic devices and cable to be removed from bags for screening</a>)</li>
<p><!--adsense#square_left-->	</p>
<li>TSA has a no-fly list of people who should not board airplanes for fear of terrorism. This list is a shame since it contains <a href="http://www.cbsnews.com/stories/2006/10/05/60minutes/main2066624.shtml">tens of thousands of names</a> remotely linked to terrorists (if they are dead, like Mohamed Atta known for dying on 9/11, they do not even get removed from the list) and even very common names are included making the life of thousands of innocent people impossible in airports. Like <a href="http://www.boingboing.net/2008/01/10/another-fiveyearold.html">Sam Adams, 5, probably very dangerous</a> despite his nice smiling little face.</li>
<li>Speaking of faces, TSA started to train its screeners with some facial expressions that are considered ground for additional screening and interrogation (in a program called SPOT (Screening Passengers by Observation Technique) probably only a thin veil on &#8220;<em>let&#8217;s stop this guy because I don&#8217;t like his face</em>&#8220;). Unfortunately, they would not say if you should avoid smiling or making faces to the TSA personnel. After that, you immediately think about George Orwell&#8217;s <em>1984</em> (&#8220;facecrime&#8221;) and Kafka&#8217;s <em>Trial</em> (not to speak of Stalinist behavioral crimes). And when you see how untrained the screeners are&#8230;</li>
<li>Speaking about training, should I mention the cases where the agents are so unable to handle your belongings that they drop them on the floor. Don&#8217;t mention dropping a T-shirt. Think about pro-photo equipment like <a href="http://forums.dpreview.com/forums/readflat.asp?forum=1021&#038;message=24324569&#038;q=tsa+drop&#038;qf=m">here</a> or <a href="http://forums.dpreview.com/forums/readflat.asp?forum=1018&#038;message=24652820&#038;q=agency&#038;qf=m">here</a>.</li>
<li>TSA and some English goons decided that transporting liquids was a major terrorist danger. Even if it is the milk bottle of Junior, the Coke for Dad or the Perrier for Mom. So, now, liquids in more than 100ml are prohibited from your carry-on luggage (even though it is more or less admitted that <a href="http://yro.slashdot.org/article.pl?sid=06/12/13/1827212">the threat was exaggerated</a>). Except if they are in a clear plastic bag. What has this to do with security? Does it make a difference between the following two eye mascara sticks?</li>
<p><center></p>
<table>
<tr>
<td><img decoding="async" src="https://www.crazyauntpurl.com/images/blog/mascara-of-destruction.jpg" alt="Terror Mascara" width=200 height=133></td>
<td><img decoding="async" src="https://www.crazyauntpurl.com/images/blog/mascara-threat-neutralized.jpg" alt="Safe Mascara" width=200 height=133></td>
</tr>
<tr colspan=2>
<td><font size="-2">Images copyright of <a href="http://www.crazyauntpurl.com/archives/2007/10/index.php">Crazy Aunt Purl</a></font></td>
</tr>
</table>
<p></center></p>
<li>Even pilots are annoyed at <a href="http://jetlagged.blogs.nytimes.com/2007/12/28/the-airport-security-follies/index.html">bullshit &#8220;security&#8221; procedures</a> that the TSA has put into place. [The linked article has interesting references to British Security officials admitting that the &#8220;liquid bomb plot&#8221; public statements were <em>overcooked, inaccurate and &#8220;unfortunate.&#8221;</em></li>
<p><!--adsense#top_post_right-->	</p>
<li>The TSA web site supposed to help people request their removal from the no-fly list has been demonstrated as a major Internet security risk, <a href="http://www.theregister.co.uk/2007/02/21/tsa_website_snafu/">it looks more like a scam</a> with all the security errors/snafus than an important US national asset handling personal data.</li>
<li>Sometimes, you can get stuck on the no-fly list for non-obvious reasons. Like <a href="http://www.nytimes.com/2008/01/20/arts/design/20shat.html?_r=1&#038;adxnnl=1&#038;adxnnlx=1200978397-jKI5YGvMx3wpdl8IkJDx1A&#038;oref=slogin">artist Ramak Fazel</a> or <a href="http://www.washingtonpost.com/wp-dyn/articles/A39772-2004Sep21.html">singer Cat Stevens</a>.</li>
</ul>
<p>After that, would you be surprised if I told you that:</p>
<ul>
<li>There is a web site collecting complaints and horror stories about TSA: <a href="http://www.tsacomplaints.com/">TSAcomplaints.com</a></li>
<li>Privacy International ranks <a href="http://www.privacyinternational.org/article.shtml?cmd%5b347%5d=x-347-559597">US, UK, Russia and China in the same &#8220;black&#8221; category of countries where wishing for privacy is becoming just day-dreaming</a> (&#8220;endemic surveillance societies&#8221; to quote them).</li>
<li>Even, <em>according to a story [&#8230;] in the London Daily Mail newspaper, the British government has had enough with the &#8220;War on Terror&#8221; hype.</em> [from <a href="http://www.spurgeonworld.com/blog/archives/2007/12/index.html">Spurgeon Blog</a>]</li>
<li>I am in no hurry to test the US borders by taking a plane to go and see my American friends. Sorry Veronica, Renata, Bing, Michael, and others.</li>
</ul>
]]></content:encoded>
					
					<wfw:commentRss>https://www.roumazeilles.net/news/en/wordpress/2008/02/09/tsa-recent-failures/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Boeing 787 Dreamliner &#8211; network vulnerability risk</title>
		<link>https://www.roumazeilles.net/news/en/wordpress/2008/02/01/boeing-787-dreamliner-network-vulnerability-risk/</link>
					<comments>https://www.roumazeilles.net/news/en/wordpress/2008/02/01/boeing-787-dreamliner-network-vulnerability-risk/#respond</comments>
		
		<dc:creator><![CDATA[Yves Roumazeilles]]></dc:creator>
		<pubDate>Fri, 01 Feb 2008 21:38:16 +0000</pubDate>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Security]]></category>
		<guid isPermaLink="false">https://www.roumazeilles.net/news/en/wordpress/2008/02/01/boeing-787-dreamliner-network-vulnerability-risk/</guid>

					<description><![CDATA[everybody told you about it, Boeing is preparing a new medium range jet airplane that will do everything but coffee: It is nice, it is light, it eats 25% less fuel, it is less noisy. But it has two problems: Boeing was forced to announce a dealy for the first deliveries (EADS-Airbus is not the [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>everybody told you about it, Boeing is preparing a new medium range jet airplane that will do everything but coffee: It is nice, it is light, it eats 25% less fuel, it is less noisy.</p>
<p><a href='https://www.roumazeilles.net/news/fr/wordpress/wp-content/uploads/2008/01/boeing_787_rollout_photo.jpg' title='Boeing 787 Dreamliner - Copyright Boeing'><img src='https://www.roumazeilles.net/news/fr/wordpress/wp-content/uploads/2008/01/boeing_787_rollout_photo.thumbnail.jpg' alt='Boeing 787 Dreamliner - Copyright Boeing' align="right"/></a>But it has two problems:</p>
<ul>
<li>Boeing was forced to announce a dealy for the first deliveries (EADS-Airbus is not the only one to have such difficulties here)</li>
<li>The FAA, US Federal Aviation Authority, is troubled by the sight of this airpline having a computer network open to the passengers. Here, I would say it&#8217;s rather good news bringing plenty of in-flight computer fun (email, web, IM, network games, etc.) but Boeing had a bad idea: The public network seems not to be isolated enough from the on-board network. So, the FAA is afraid of the possibility that some passengers may break havoc (voluntarily or not) on the plane&#8217;s instruments.</li>
</ul>
<p>Sources: <a href="http://www.futura-sciences.com/fr/sinformer/actualites/news/t/aeronautique-1/d/soupcons-de-vulnerabilite-informatique-dans-le-boeing-787_14221/">Futura Sciences</a> and <a href="http://www.wired.com/politics/security/news/2008/01/dreamliner_security">Wired</a>.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.roumazeilles.net/news/en/wordpress/2008/02/01/boeing-787-dreamliner-network-vulnerability-risk/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
	</channel>
</rss>
