Whiteout mail

Awareness about security is always something challenging, and have good habits in this Whiteout.ioarea is important. Mail encryption was always a technical complex issue, but now it seems to be easy for users. The answer is this German company Whiteout.io

Installation

Once you install it, you enter your user and generate a PGP key, the first hurdle you find is the way to differentiate between “0” and “O”.

After the installation some useful e-mails are sent to explain you how the public key and the private key use.

Use

Decrypting is slow for the modern life, to open an light e-mail it takes around 1 or 2 seconds, not bad to me.

You will see a “” when the message is encrypted.

The organization of same e-mails in a same line (created by gmail) is not available in Whiteout, so you will see all e-mails from the past ordered in a way that does not make sense to you. This should be improved.

Contacts: if you want to have the contact keys of other users in Whiteout.io you have to import their keys. This will enable encrypted e-mails.

Things that works in a similar way to gmail: Folders,

 

 

SLDC tools

For managing the environments on a software development project we all organize environments and tools to automate the update, deployment, organization of the code within the project.

Some of the more popular tools:

  • Eclipse IDE, for writing code.
  • Git, as Source Code Management System (SCM) to enable the developers to manage releases of code, etc
  • Jenkins , it is a continuous integration application server that watches for code changes from multiple developers working on the same code base. It can automatically build and initiate tests of the code changes. It can also roll-back or roll-forward the code changes.
  • Selenium, is a portable software testing framework for web applications. It provides a record/playback tool for authoring tests without learning a test scripting language (Selenium IDE). It also provides a test domain-specific language (Selenese) to write tests in a number of popular programming languages, including Java, C#, Groovy, Perl, PHP, Python and Ruby.

Advanced Message Queuing Protocol

I have discovered that finally there is an organization that is recognized as standard for protocol: AMQP. They offer examples of products that implement their protocol. amqp-logo

A couple of interesting solutions aligned with this protocol are:

 

  1. Rabit MQ: they have documentation and useful examples. http://www.rabbitmq.com/getstarted.html
  2. QPID, Apache: http://qpid.apache.org/
  3. Red Hat Enterprise MRG: http://www.redhat.com/products/mrg/

I have to see how the communities evolve and the open source solutions grow. Too early to understand what is the leader solution.

Mobile applications are stealing your personal data

You download a free application to your mobile and use it for play to a game, access to weather channel, see stock price or whatever you use it.

This is an interesting article that talks about the abusive situation that exist around the lack of protection of the data stored in your mobile phone.

I see this as an opportunity for those who know how to do it: to create a mobile application that tells you which data is retrieved by each one of the applications that you have installed on your phone!

Fortunately other guys though about it before me: “LBE Security Master”, This app allow you to control each permission of the installed applications (Autorize, Ask me, Refuse), it is implemented for Android.

Unfortunately these apps usually (always?) require root access. This immediately adds it’s own risk, and issues. The alternative can be ADP (Adblock Plus) , it will give more functions if you have root, but it doesn’t need root to work.

For the companies, where they are always looking for security measures to protect the intellectual property they should be thinking about this major issue.

Trusted vendors already offer isolated applications that prevent from these issues, with encryption, password access, etc, but nowadays mobile environments are wild wild west.

Piwigo.org

I have installed Piwigo ,piwigo_org_logo

Good points:

  • Installation and configuration is extremely easy.
  • Upload templates is easy.
  • Generate content is also very intuitive.

Bad points:

  • The time response is not good. The issue is not Piwigo, I would point to the hosting service I have for that, but this is a relevant point for an user visiting the pictures gallery.
  • The look & feel of the templates does not belong to the latest generation of web, and for the look we are required we need to perform it with a better look.

I see it is a good tool, but not for the special needs I have 🙁

MBA & Co, expertise on demand

This is the slogan of this company that offers a platform for posting specific projects, profiles and that connects project demand with employ demand for independent consultants.

http://www.mbaco.com/

The process to create an account enables you to synchronize the data from Linkedin, the type of offers you receive is so varied and you will receive projects that does not fit with your profile (something to improve).

The required profiles are in general so so specific.