[HacktionLab] More on the unencrypted swap issue
John
johnc at aktivix.org
Sun Jul 25 02:10:26 BST 2010
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
Thought I'd give another example of the issue I flagged in my previous
post. My apologies for labouring the point but I thought that perhaps my
last post wasn't entirely clear.
This presumes that swap is /dev/sda2 , is unencrypted, and you can run
these commands as root.
The approach below is crude but yielded a (partial) browsing history
extracted from unencrypted swap
strings /dev/sda2 >./temp.txt
grep http:// temp.txt > http.txt
more http.txt
Cheers,
John
hacktionlab-request at lists.psand.net wrote:
> Send HacktionLab mailing list submissions to
> hacktionlab at lists.psand.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.psand.net/cgi-bin/mailman/listinfo/hacktionlab
> or, via email, send a message with subject or body 'help' to
> hacktionlab-request at lists.psand.net
>
> You can reach the person managing the list at
> hacktionlab-owner at lists.psand.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of HacktionLab digest..."
>
>
> Today's Topics:
>
> 1. Re: finished proofreading - now need further help was: Tech
> Tools for Activists book (Pete Speller)
> 2. Re: finished proofreading - now need further help was: Tech
> Tools for Activists book (Pete Speller)
> 3. Re: finished proofreading - now need further help was: Tech
> Tools for Activists book (ana)
> 4. Re: HacktionLab Digest, Vol 27, Issue 6 (John)
> 5. Can someone please.. (reeler reeler)
> 6. Yes Men film (Tim Dobson)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sat, 24 Jul 2010 12:03:40 +0100
> From: Pete Speller <petespeller at riseup.net>
> Subject: Re: [HacktionLab] finished proofreading - now need further
> help was: Tech Tools for Activists book
> To: "HacktionLab at lists.psand.net HacktionLab at lists.psand.net"
> <hacktionlab at lists.psand.net>
> Message-ID: <2EEBD6D6-D286-4FF4-96AC-D46CAA7BAC80 at riseup.net>
> Content-Type: text/plain; charset=us-ascii
>
> Hi all
>
> I know this is a bit late as this book has been in development for ages, but I am just finishing re-writing and updating a how-to booklet on projection actions that I co-wrote for Students for a Free Tibet a few years back. when I have uploaded it (hopefully later today) could the link be added to the Further Info section?
>
> Pete
>
>
> On 24 Jul 2010, at 11:51, Mara wrote:
>
>>
>> On 24/07/2010 09:01, Mike Harris wrote:
>>> Hi again,
>>>
>>> This is great, it seems like we have finally arrived!
>>>
>>> The next Climate Camp in August seems to me like a good date to aim for
>>> to have it ready to distribute it there.
>> That sounds good. Maybe we can also try and have a UK wide day of events
>> (gpg workshops, linux install sessions, talks, film screenings...) in as
>> many places as possible as a launch day? Through advertising the events
>> people will hear about the booklet, and gain some practical skills as
>> well. I'm sure we could do something in London, anyone else up for
>> organising an event? Plus we could try and get some donations in that
>> can go towards the printing.
>>
>> Mara
>>
>>> I propose then that we at least get a run printed by Oxford Green Print
>>> (as we discussed at the April meeting in Oxford) and ferried up to
>>> climate camp. I can organise the printing and probably getting them up
>>> there.
>>>
>>> Artwork-wise, perhaps I propose asking Tony to do something simple based
>>> around the style used for this year's BarnCamp flyers? I think it would
>>> be nice, though not essential, to have a photo for every article.
>>>
>>> We've got some funds to get the first couple of runs going. I can get a
>>> quote off Green Print to use as a yardstick for others to get local
>>> quotes as well...
>>>
>>> what reckon ye?
>>>
>>> Mike.
>>>
>>> Mike Harris
>>> w: http://mbharris.co.uk
>>> t: +44 7811 671 893
>> _______________________________________________
>> HacktionLab mailing list
>> HacktionLab at lists.psand.net
>> http://lists.psand.net/cgi-bin/mailman/listinfo/hacktionlab
>
>
>
>
> ------------------------------
>
> Message: 2
> Date: Sat, 24 Jul 2010 13:34:10 +0100
> From: Pete Speller <petespeller at riseup.net>
> Subject: Re: [HacktionLab] finished proofreading - now need further
> help was: Tech Tools for Activists book
> Cc: "HacktionLab at lists.psand.net HacktionLab at lists.psand.net"
> <hacktionlab at lists.psand.net>
> Message-ID: <79144D6F-EBC9-48B6-B9F8-D3D02747F556 at riseup.net>
> Content-Type: text/plain; charset=us-ascii
>
> The link http://www.archive.org/details/HowToProjectionActions
> On 24 Jul 2010, at 12:03, Pete Speller wrote:
>
>> Hi all
>>
>> I know this is a bit late as this book has been in development for ages, but I am just finishing re-writing and updating a how-to booklet on projection actions that I co-wrote for Students for a Free Tibet a few years back. when I have uploaded it (hopefully later today) could the link be added to the Further Info section?
>>
>> Pete
>>
>>
>> On 24 Jul 2010, at 11:51, Mara wrote:
>>
>>>
>>> On 24/07/2010 09:01, Mike Harris wrote:
>>>> Hi again,
>>>>
>>>> This is great, it seems like we have finally arrived!
>>>>
>>>> The next Climate Camp in August seems to me like a good date to aim for
>>>> to have it ready to distribute it there.
>>> That sounds good. Maybe we can also try and have a UK wide day of events
>>> (gpg workshops, linux install sessions, talks, film screenings...) in as
>>> many places as possible as a launch day? Through advertising the events
>>> people will hear about the booklet, and gain some practical skills as
>>> well. I'm sure we could do something in London, anyone else up for
>>> organising an event? Plus we could try and get some donations in that
>>> can go towards the printing.
>>>
>>> Mara
>>>
>>>> I propose then that we at least get a run printed by Oxford Green Print
>>>> (as we discussed at the April meeting in Oxford) and ferried up to
>>>> climate camp. I can organise the printing and probably getting them up
>>>> there.
>>>>
>>>> Artwork-wise, perhaps I propose asking Tony to do something simple based
>>>> around the style used for this year's BarnCamp flyers? I think it would
>>>> be nice, though not essential, to have a photo for every article.
>>>>
>>>> We've got some funds to get the first couple of runs going. I can get a
>>>> quote off Green Print to use as a yardstick for others to get local
>>>> quotes as well...
>>>>
>>>> what reckon ye?
>>>>
>>>> Mike.
>>>>
>>>> Mike Harris
>>>> w: http://mbharris.co.uk
>>>> t: +44 7811 671 893
>>> _______________________________________________
>>> HacktionLab mailing list
>>> HacktionLab at lists.psand.net
>>> http://lists.psand.net/cgi-bin/mailman/listinfo/hacktionlab
>>
>> _______________________________________________
>> HacktionLab mailing list
>> HacktionLab at lists.psand.net
>> http://lists.psand.net/cgi-bin/mailman/listinfo/hacktionlab
>
>
>
>
> ------------------------------
>
> Message: 3
> Date: Sat, 24 Jul 2010 15:52:21 +0100
> From: ana <anap at riseup.net>
> Subject: Re: [HacktionLab] finished proofreading - now need further
> help was: Tech Tools for Activists book
> To: hacktionlab at lists.psand.net
> Message-ID: <4C4AFE25.3030201 at riseup.net>
> Content-Type: text/plain; charset=windows-1252
>
> Hi again, and thanks for all your answers and suggestions! more below
> tho, including links not working.
>
> i do not think we are ready to go to the printers yet. There is at least
> one question of mine that has not been answered. Anyway, going chapter
> by chapter ...
>
> I have applied changes to the things I asked helpf for, in this way:
>
> ----- I changed all won't and can't and it's to will not and can not and
> it is - except in the long quote in free-as-in-freedom, because it is a
> quote. hope i didn't miss any one.
>
> As I went along, I checked the links, and these ones do not work:
>
> ---- chapter Browsing the Internet Anonymously :
>
> Your browser and operating system store a lot of information about you,
> probably without your knowledge. For this reason we recommend using
> Firefox on a GNU/Linux system, and following the instructions at
> http://tiny.booki.cc/?0ER8
>
> ---- chapter free as in freedom:
>
> the last one, ref. to the quote
> Evan Prodromou, "RMS on Cloud Computing: ?Stupidity?", CC BY-SA,
> <http://autonomo.us/2008/09/rms-on-cloud-computing-stupidity>
> at least my browswer could not redirect properly
>
>
> Then the questions I asked and their answers:
>
> ---- In the chapter about uploading your media:
>
> "Indymedia.org.uk allows you to upload video files anonymously but you
> don't get a streaming video player or an RSS feed."
>
> I would just say "Indymedia.org.uk allows you to upload video files
> anonymously and streaming video player and RSS feeds are being worked on
> in various indymedia sites in the UK"
>
> (since no one answered my question on this and other lists...)
> no answer in say, 3 days? and I or any one can commit that change?
>
>>> ---- In the chapter on How to get pages removed from Google Cache
>>>
>>> this phrase is gramatically incorrect and can not be understood:
>>> "In this case, only the URL is needed. This process was repeated for the
>>> http:// and https:// pages, but it is if this is necessary. "
>>>
>
> thanks for the info, Mark. I've written:
>
> For pages that are availalbe using both "https" and "http", it is best
> to make the request for both URLs to be sure both caches are updated.
>
>> ---- In the chapter Free as in Freedom, I have a minor problem with this
>> phrase:
>>
>> There has never been a major virus outbreak on GNU/Linux,
>>
>> when has there been a minor one?
>
> Wow thanks for all that info, Ben. I've gone with the following phrase,
> then:
>
> "Virus outbreaks in the context of GNU/Linux are so unheard of, and so
> quickly fixed when they have happened, that they have become the stuff
> of legend"
>
>
> ---- Further down the same chapter, this para,
>
> "What are the prospects and strategies for keeping the benefits of free
> software in an age of collaboration mediated by software services? One
> strategy, argued for in "The equivalent of free software for online
> services" by Kragen Sitaker (see <
> http://lists.canonical.org/pipermail/kragen-tol/2006-July/000818.html>),
> is that centralised services need to be re-implemented as peer-to-peer
> services that can run on computers as free software under users'
> control. This is an extremely interesting strategy, but a very long term
> one, for it is both a computer science challenge and a social one. "
>
>> I thought this was an interesting read but I don't think it's a high
>> priority for our target audience.
>
> Following Mark's comment (thanks Mark) , I took it out.
>
> --- In the same chapter, in this phrase:
> "namely to ensure that people retain democratically self-managed control
> over their own information infrastructure"
>
> I took out the word democratically - thanks too Mark.
>
> This book on internet security is gonna rock.
>
> ana
>
>
>
>
> ------------------------------
>
> Message: 4
> Date: Sat, 24 Jul 2010 22:02:26 +0100
> From: John <johnc at aktivix.org>
> Subject: Re: [HacktionLab] HacktionLab Digest, Vol 27, Issue 6
> To: hacktionlab at lists.psand.net
> Message-ID: <4C4B54E2.50406 at aktivix.org>
> Content-Type: text/plain; charset=us-ascii
>
> Hi,
>
> There is a serious error in the methodology outlined in the link:
>
> http://tiny.booki.cc/?FCZr
>
> which appears on
>
> http://www.booki.cc/tech-tools-for-activists/hiding-stuff-on-your-computer/
>
> By only encrypting your home partition and not swap as well you
> potentially expose sensitive information in plain text, including passwords!
>
> As root, run the following on a linux system with a non encrypted swap
> partition.
>
> grep -a yourpasswordhere /dev/sda2
>
> replace yourpasswordhere with a password you use for a user etc. on your
> system. Replace /dev/sda2 with your swap device.
>
> You can find swap by running (as root)
>
> fdisk -l
>
> The Id will be 82.
>
> I tried this on Debian squeeze and could see user passwords etc.
>
> Why not just use the debian or ununtu installer to encrypt home and swap
> using dm-crypt during installation. The debian installer won't even
> entertain encrypting a partition unless swap is also encrypted.
>
> Solidarity,
> John
>
> hacktionlab-request at lists.psand.net wrote:
>> Send HacktionLab mailing list submissions to
>> hacktionlab at lists.psand.net
>
>> To subscribe or unsubscribe via the World Wide Web, visit
>> http://lists.psand.net/cgi-bin/mailman/listinfo/hacktionlab
>> or, via email, send a message with subject or body 'help' to
>> hacktionlab-request at lists.psand.net
>
>> You can reach the person managing the list at
>> hacktionlab-owner at lists.psand.net
>
>> When replying, please edit your Subject line so it is more specific
>> than "Re: Contents of HacktionLab digest..."
>
>
>> Today's Topics:
>
>> 1. Re: finished proofreading - now need further help was: Tech
>> Tools for Activists book (Mike Harris)
>> 2. Re: finished proofreading - now need further help was: Tech
>> Tools for Activists book (Mike Harris)
>> 3. Re: finished proofreading - now need further help was: Tech
>> Tools for Activists book (Mara)
>
>
>> ----------------------------------------------------------------------
>
>> Message: 1
>> Date: Sat, 24 Jul 2010 08:52:26 +0100
>> From: Mike Harris <mike at mbharris.co.uk>
>> Subject: Re: [HacktionLab] finished proofreading - now need further
>> help was: Tech Tools for Activists book
>> To: ana <anap at riseup.net>
>> Cc: hacktionlab at lists.psand.net
>> Message-ID: <4C4A9BBA.60201 at mbharris.co.uk>
>> Content-Type: text/plain; charset=ISO-8859-1
>
>> Great work Ana
>>> I have made the amendments I thought, like putting full words to the few
>>> acronyms that didn't have them, substituted some "n't"s with full
>>> "not"s, indicated in which chapter more info could be found instead of
>>> just "elsewhere" ...
>>>
>> I agree with that, generally in writing it's better not to use the
>> contracted forms. I spot that there's still some instances of things
>> like won't and can't. May be we should replace all of them, to be
>> stylistically consistent?
>
>
>> Mike.
>
>
>
>> ------------------------------
>
>> Message: 2
>> Date: Sat, 24 Jul 2010 09:01:50 +0100
>> From: Mike Harris <mike at mbharris.co.uk>
>> Subject: Re: [HacktionLab] finished proofreading - now need further
>> help was: Tech Tools for Activists book
>> To: ana <anap at riseup.net>
>> Cc: hacktionlab at lists.psand.net
>> Message-ID: <4C4A9DEE.9030309 at mbharris.co.uk>
>> Content-Type: text/plain; charset=ISO-8859-1
>
>> Hi again,
>
>> This is great, it seems like we have finally arrived!
>
>> The next Climate Camp in August seems to me like a good date to aim for
>> to have it ready to distribute it there.
>
>> I propose then that we at least get a run printed by Oxford Green Print
>> (as we discussed at the April meeting in Oxford) and ferried up to
>> climate camp. I can organise the printing and probably getting them up
>> there.
>
>> Artwork-wise, perhaps I propose asking Tony to do something simple based
>> around the style used for this year's BarnCamp flyers? I think it would
>> be nice, though not essential, to have a photo for every article.
>
>> We've got some funds to get the first couple of runs going. I can get a
>> quote off Green Print to use as a yardstick for others to get local
>> quotes as well...
>
>> what reckon ye?
>
>> Mike.
>
>> Mike Harris
>> w: http://mbharris.co.uk
>> t: +44 7811 671 893
>
>
>
>> ana wrote:
>>> Hi again,
>>>
>>> I have now read the booki twice. Thanks so much to every one who have
>>> made it possible , it shows it is well thought and articulated, I'd said
>>> brilliant indeed - apart from a few small things ;)
>>>
>>> I have made the amendments I thought, like putting full words to the few
>>> acronyms that didn't have them, substituted some "n't"s with full
>>> "not"s, indicated in which chapter more info could be found instead of
>>> just "elsewhere" ...
>>>
>>> There are a few small things I feel could be further improved, but for
>>> which I need your help.
>>>
>>> ---- In the chapter about uploading your media:
>>>
>>> "Indymedia.org.uk allows you to upload video files anonymously but you
>>> don't get a streaming video player or an RSS feed."
>>>
>>> but you do get this in various local sites don't you? do we not want to
>>> include this? or mention the drupal capabilities, now that the drupal
>>> aggregator is going to be deployed soon?
>>>
>>> http://www.booki.cc/tech-tools-for-activists
>>>
>>> ---- In the chapter on How to get pages removed from Google Cache
>>>
>>> this phrase is gramatically incorrect and can not be understood:
>>> "In this case, only the URL is needed. This process was repeated for the
>>> http:// and https:// pages, but it is if this is necessary. "
>>>
>>> I'd just write:
>>> "you need to repeat the process for the same urls, but writing "https"
>>> instead of "http" at the beginning"
>>> but the original phrase doesn't make it clear to me if i would be
>>> correct so I need help.
>>>
>>> ---- In the chapter Free as in Freedom, I have a minor problem with this
>>> phrase:
>>>
>>> There has never been a major virus outbreak on GNU/Linux,
>>>
>>> when has there been a minor one?
>>>
>>> I think we could say that "there has never been a virus outbreak", or at
>>> least that "virus outbreaks are unheard of" on gnu linux.
>>>
>>>
>>> ---- Further down the same chapter, this para,
>>>
>>> "What are the prospects and strategies for keeping the benefits of free
>>> software in an age of collaboration mediated by software services? One
>>> strategy, argued for in "The equivalent of free software for online
>>> services" by Kragen Sitaker (see <
>>> http://lists.canonical.org/pipermail/kragen-tol/2006-July/000818.html>),
>>> is that centralised services need to be re-implemented as peer-to-peer
>>> services that can run on computers as free software under users'
>>> control. This is an extremely interesting strategy, but a very long term
>>> one, for it is both a computer science challenge and a social one. "
>>>
>>> I find a bit irrelevant for people not involved in developing software.
>>> I almost was put off from going on reading myself. Which would be a pity
>>> because the simil with restaurants and friends' houses is very valid.
>>>
>>> --- In the same chapter, in this phrase:
>>> "namely to ensure that people retain democratically self-managed control
>>> over their own information infrastructure"
>>>
>>> is the word "democratically" important? i would take it out for redundant.
>>>
>>> Thanks for all the work again, and for any help/opinion/vision you can
>>> give me now.
>>>
>>> ana
>>>
>>> _______________________________________________
>>> HacktionLab mailing list
>>> HacktionLab at lists.psand.net
>>> http://lists.psand.net/cgi-bin/mailman/listinfo/hacktionlab
>>>
>>>
>>>
>
>
>> ------------------------------
>
>> Message: 3
>> Date: Sat, 24 Jul 2010 11:51:21 +0100
>> From: Mara <mara at aktivix.org>
>> Subject: Re: [HacktionLab] finished proofreading - now need further
>> help was: Tech Tools for Activists book
>> To: hacktionlab at lists.psand.net
>> Message-ID: <4C4AC5A9.60102 at aktivix.org>
>> Content-Type: text/plain; charset=ISO-8859-1
>
>
>
>> On 24/07/2010 09:01, Mike Harris wrote:
>>> Hi again,
>>>
>>> This is great, it seems like we have finally arrived!
>>>
>>> The next Climate Camp in August seems to me like a good date to aim for
>>> to have it ready to distribute it there.
>> That sounds good. Maybe we can also try and have a UK wide day of events
>> (gpg workshops, linux install sessions, talks, film screenings...) in as
>> many places as possible as a launch day? Through advertising the events
>> people will hear about the booklet, and gain some practical skills as
>> well. I'm sure we could do something in London, anyone else up for
>> organising an event? Plus we could try and get some donations in that
>> can go towards the printing.
>
>> Mara
>
>>> I propose then that we at least get a run printed by Oxford Green Print
>>> (as we discussed at the April meeting in Oxford) and ferried up to
>>> climate camp. I can organise the printing and probably getting them up
>>> there.
>>>
>>> Artwork-wise, perhaps I propose asking Tony to do something simple based
>>> around the style used for this year's BarnCamp flyers? I think it would
>>> be nice, though not essential, to have a photo for every article.
>>>
>>> We've got some funds to get the first couple of runs going. I can get a
>>> quote off Green Print to use as a yardstick for others to get local
>>> quotes as well...
>>>
>>> what reckon ye?
>>>
>>> Mike.
>>>
>>> Mike Harris
>>> w: http://mbharris.co.uk
>>> t: +44 7811 671 893
>
>
>> ------------------------------
>
>> _______________________________________________
>> HacktionLab mailing list
>> HacktionLab at lists.psand.net
>> http://lists.psand.net/cgi-bin/mailman/listinfo/hacktionlab
>
>
>> End of HacktionLab Digest, Vol 27, Issue 6
>> ******************************************
>
- ------------------------------
Message: 5
Date: Sat, 24 Jul 2010 22:25:21 +0100
From: reeler reeler <reeler2615 at hotmail.co.uk>
Subject: [HacktionLab] Can someone please..
To: <hacktionlab at lists.psand.net>
Message-ID: <BAY146-w19513FE82EEDA04FE1D3E99BA40 at phx.gbl>
Content-Type: text/plain; charset="iso-8859-1"
Hi,
Can someone put up the url for autumn lab 2010.. just can not find it..
thanks...
_________________________________________________________________
http://clk.atdmt.com/UKM/go/197222280/direct/01/
We want to hear all your funny, exciting and crazy Hotmail stories. Tell
us now
- -------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://lists.psand.net/cgi-bin/mailman/private/hacktionlab/attachments/20100724/4d2d9ac5/attachment-0001.htm
- ------------------------------
Message: 6
Date: Sun, 25 Jul 2010 01:02:06 +0100
From: Tim Dobson <lists at tdobson.net>
Subject: [HacktionLab] Yes Men film
To: hacktionlab at lists.psand.net
Message-ID: <4C4B7EFE.2070502 at tdobson.net>
Content-Type: text/plain; charset=ISO-8859-1
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I think people here may be pleasantly amused (and possibly inspired) by
this:
" THE YES MEN FIX THE WORLD is a screwball true story about two gonzo
political activists who, posing as top executives of giant corporations,
lie their way into big business conferences and pull off the world's
most outrageous pranks. This peer-to-peer special edition of the film is
unique: it is preceded by an EXCLUSIVE VIDEO of the Yes Men
impersonating the United States Chamber of Commerce. Because the Yes Men
are being sued for this stunt, p2p is the only way that this film will
get seen. Please spread the word! "
It's available to download for no cost under cc-by-nc-nd
http://vodo.net/yesmen
Thoughts?
Tim
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iQEcBAEBAgAGBQJMS37+AAoJEFGyIhEBWd2Jb+4IAIYZlb7AGL+GYZ9jx6mvOce8
/cxmXRBufFtmRq3upLthfJ89qaDC7GOtqiKtv8kteuuEOkMNob+f72PtDbwt7czC
nTuIfQTTBnnlqy65JqwXbUo3BJoK4fHOlqdKkn4xR7iRXo7Ziis4VRTeZi+9pCxw
CoVLm2QtrsfD26p/zV87goqj2xlRbZjEYHPqnWX9SVssJ0QSr4na7xaF6Sh26+LJ
5rJ2ZmLxJv6/wOP31MmrRGCUNI8IjMXk5K+P3ORJiVHdtemaUKsnqpWSiTjNJE6F
eYdJRp/JeJC6qIzFMey+Bnknm5ckpjJ7IcP7lRhhPqu3hbYJQpKmrPg4m7rVb1w=
=V6a9
- -----END PGP SIGNATURE-----
- ------------------------------
_______________________________________________
HacktionLab mailing list
HacktionLab at lists.psand.net
http://lists.psand.net/cgi-bin/mailman/listinfo/hacktionlab
End of HacktionLab Digest, Vol 27, Issue 7
******************************************
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkxLjwIACgkQ3dgxenAhlGcvogCfaIziweijunf3hYEGk4dxs+iE
fmIAoILtsuw2cb5cUqa/dpucN3v+3YL4
=Ke0E
-----END PGP SIGNATURE-----
More information about the HacktionLab
mailing list