1/29/2016 Video Writeup EFF-CTF 2016

For a while I've been trying to understand a little bit about reversing and low level stuff, sometimes it becomes a little difficult but if you want you can, so this post it is to highlight a youtube channel that I've been checking in this vacations it the Liveoverflow's great videos that solves a few reversing challenges. As you know the most recent security conference was  the Usenix enigma as it's commonly in this kind of Cons there was a Capture The Flag , The EFF was runing a hacking contest at Enigma!  The challenges included web hacking, binary analysis, cryptography challenges, and more.


So LiveOverflow solve this after a few hours and he posted this on his youtube channel, so here it is .

11/28/2015 Linux Kernel, Security or Myth?

Recently I was reading an interesting interview who Craig Timberg made to Torvalds. Clearly the principal argument in the interview is the increase of known vulnerabilities in the linux Kernel and obviously the mindset of the lead developer of Linux, who is arguing that security is another concern more.

Even more broadly, the battle over Linux security is a fight over the future of the online world. At a time when leading computer scientists are debating whether the Internet is so broken that it needs to be replaced, the network is expanding faster than ever, layering flaw upon flaw in an ever-expanding web of insecurity. Perhaps the best hope for fixing this, some experts argue, lies in changing the operating system that — more than any other — controls these machines.

Kernel Security is pretty important right now and if you don't believe in that check the statistics in android's phone usage, also you can take a quick Look at a few recent kernel security holes that has been discovered Buffer Overflows, initialization failures and the list goes on. The point is that been Torvalds the king of geeks he is obviously going to be the king of the bad guys if they don't review properly commits and new patches, security is above usability or I think so, that's why Security of Linux even as it became a bigger is more important, but seriously Torvalds just said that People in security is just too paranoid.I remember when  long time ago Linux in its early days was widely considered a safer choice than Windows or other commercial operating systems, but now it has been disappear slowly. I have to say that not all problems did not involve the kernel itself, but they're there, and it's becoming a popular target for hackers building “botnets,” and the companies that sell them surveillance tools like Finfisher.

Could be The Kernel Security taking as a relevant topic ?

References:
[1] http://www.washingtonpost.com/sf/business/2015/11/05/net-of-insecurity-the-kernel-of-the-argument/
[2] https://lwn.net/Articles/661086/
[3] https://lwn.net/Articles/662627/
[4] http://bits-please.blogspot.com.co/2015/08/android-linux-kernel-privilege.html
[5] https://lwn.net/Articles/662219/

5/03/2011 i3 en Openbsd

Durante esta semana un compañero de estudio me a pedido que organize su sistema,diciendo que simplemente era para hacer una instalacion de Openbsd y Organizar los servicios comunes para desarrollar web(Servidor Apache+Mysql..)yo creyendo en pablo decidio hoy martes ir a su casa a revisar y hacerle el favor de una vez.Cuando el me dijo realmente parecia sencillo y era realizar configuraciones de rutina:

• Configuracion de Usuarios


• Configuracion Packet Filter


• Configuracion de Apps


• Configuracion Grsecurity (Aunque ya no tan necesario)


• Configuracion de X11


• SSH


• Pkg

entre otras tareitas que quizas cualquiera con capacidad lectora pudiece ;-D hacerlo Llegando a su casa me encuentro con esta sorpresa :

Dentro de mi (Realmente este man tiene excelentes maquinas :-( ),en fin comence y me di a la tarea de configurar y organizar toda el particionado de los 8 Tb que me habia  dejando para la tarea, un disco de un 1 Tb por aparte para la instalacion de dos linux,quedando asi lo que organize :

• Power Edge :OpenBsd 4.9
  Torre Tower Multiple : particion /var/log
  Y dos Desktops normales :Otros linux
  Y algunos otros discos sin particionar

La cuestion es que todo tenia que verse en dos monitores lo cual no sabia hacer asi que encontre este articulo
http://www.ibm.com/developerworks/library/os-mltihed/ muy interesante por cierto.

Realizando todo con normalidad me tope con un problema con el pkg y era que no salia internet ....habiendo olvidado reiniciar decidi hacerlo por que parecia un error en  un archivo en perl

/usr/libdata/perl5/site_perl/i386-openbsd/rpc/types.ph

quedandome con la duda ?.ahora si simplemente haciendo :
#echo 'export PKG_PAHT=ftp://ftp.openbsd.org/pub/OpenBSD/4.9/packages/xx/'>> ~.profile
me quite el problema de estar exportando la ruta de los paquetes asi cada vez que reinicie no voy a tener 
ese problema
instalando I3
Para los que no sepais que es I3 dejo su definicion :

i3 is a tiling window manager, completely written from scratch.

i3 was created because wmii, our favorite window manager at the time, didn’t provide some features we wanted (multi-monitor done right, for example), had some bugs, didn’t progress since quite some time and wasn’t easy to hack at all (source code comments/documentation completely lacking). Still, we think the wmii developers and contributors did a great job. Thank you for inspiring us to create i3.

Please be aware that i3 is primarily targeted at advanced users and developers.

Lo primero que se hace es descargar el packete ya sea desde los ports o paquetes en este caso :

#pkg_check

#pkg_add i3

# pkg_info i3
Information for inst:i3-3.5.1p2

Comment:
improved dynamic tiling window manager

Description:
i3 is an improved dynamic, tiling window manager originally inspired
by wmii.

Maintainer: David Coppa <dcoppa@openbsd.org>

WWW: http://i3.zekjur.net/

una vez tenemos i3 instalado podemos ver que  en nuestro usuario sin permiso no puede iniciar las x de  i3 si
no las de Fvwn.para ello solo hacemos en nuestro archivo .xinitrc la llamada a i3
$mkdir ~/.i3
$cp /etc/i3/config ~/.i3/config
$ vi ~/.xinitrc

añadimos las siguientes lineas
#!/bin/sh
xsetroot -solid black
exec /usr/local/bin/i3
$ln -s ~/.xinitrc ~/.Xsession
Y eso fue todo por hoy :-d