[blog.rayfoo] Infosec, DFIR, tech geekery, thoughts and whatnot

21Nov/090

Project: SecureMe

Will start to write some posts on how to get things up and running with the project that I mentioned last week, thanks for the wait.

In order for everyone to be on the same page, let's call this project "SecureMe", hopefully this would increase the basic protection you'd get when surfing from a public hotspot.

I can't (and won't) guarantee that you will be 100% safe from all those bad guys out there, but with this it would make it a lot harder for any Tom, Dick or Harry to sit down in the same cafe/MacDonalds/BK/your-favourite-hangout-place and start looking into your Facebook account and whatnot.

If your machine has been compromised with a virus/malware/adware/botnet, all bets are off.  This would require a cleanup before you can trust what your machine does (unfortunately).

This is a simple VPN tunnel + HTTP proxy + DNS resolver, so that your traffic will not be modified, or listened to by the fellows mentioned above.  As such, no anti-virus screening/protections for now.  One thing that might help is that I'm using OpenDNS to help resolve the DNS queries, and it automatically comes with a certain amount of protection against phishing sites :)

You won't be totally anonymous with this service: I won't hesitate to turn over information if you have been found to be using this service to do nefarious deeds against other people/servers, of if you use it to access stuff that's illegal anyway.

I'll be using this project to learn, so I will need to keep some logs for my own analysis and accountability (see above).  But I will not use this to infringe on your privacy (duh!), not as if I'd want to anyway. ;)

Lastly, though this is workable, it's not perfect yet.  I'll be changing things here and there from time to time if needed to improve this service, so no promises that you won't ever have to change anything ok?  It's a free(/donor) service anyway, so no one has to be obliged, ok? :)

Hope this helps you whoever you are, and pleaseeee do give me feedback ok?  Have fun!

PS: Signups are still available for now, for those who wish to help trial this free service :)

15Nov/092

New project coming up

Going to provide a trial run of a free (/donor-ware) service for people pretty soon, which is targeted at those who have to access the internet via public wifi hotspots.

Using a combination of easily available/open-source/free tools, it would provide pretty good basic protection against network sniffers/attackers for thse folks.

Why free/donor-ware?  I'm not looking to earn big bucks (if at all) out of this, probably just enough to cover the running costs would be nice.  And this project would be more of a learning experience for me rather than a business opportunity.

More details to be released soon, thanks to those who've responded to my initial call for trial helpers!

26Aug/090

URL Shortener project, start!

Started a bit on my URL Shortener project, making use of the opportunity to get my hands dirty with the CodeIgniter framework.

CodeIgniter is really easy to learn and use, I'm thinking of adding OWASP's ESAPI's functionality as a plugin (if it's worth the effort) in the future, so that more people will come to hear of it, and use it :)

Meanwhile, have been stuck with a redirect loop problem when I test out my (test) codes with Aptana's built-in Jetty server, for reasons unknown. I guess I'll have to try nginx + PHP-FPM to see whether the source of the problem is really Jetty, or something else...