23C3 - The Beginning

Die Faszination im IT-Bereich liegt mitunter darin das es quasi jeden Tag etwas komplett Neues zu entdecken gibt. Diesem Leitsatz folgend gab es gleich am ersten Tag des 23C3 eine geballte Ladung an neuen Themen.

Im ersten Vortrag von Rechtsanwalt Peter Voigt ging es um die Neufassung des deutschen Strafrechtsparagraphen 202c. Der Vortag war insofern interessant als das bereits bekannte Fakten nochmals für den rechtlichen Laien aufbereitet dargestellt wurden. Die Einführung dieser Änderung wird jedenfalls erhebliche negative Auswirkungen auf die Arbeit im IT-Security Bereich haben.

Sputnik RFID
The picture above shows the active RFID tag of the CCC Sputnik Project. The Sputnik project
is an self made location tracking system. The tag consists of an micro-controller and an NRF24L01 RF-IC. The location tracking is based on transmitting the tag ID with 5 different power levels and software based correlation of several readers.

In the next talk "Fudging with Firmware" the speaker mainly focused on how to get started with an firmware image file - like you get it from your DSL-Router vendor.His tool UWfirmforce looks really interesting:

[frank@t01 UWfirmforce-0.0.1]$ wget http://www.uberwall.org/releases/UWfirmforce-0.0.1.tar.gz
[frank@t01 UWfirmforce-0.0.1]$ tar -xzvf UWfirmforce-0.0.1.tar.gz
[frank@t01 UWfirmforce-0.0.1]$ cd UWfirmforce-0.0.1
[frank@t01 UWfirmforce-0.0.1]$ make
make[1]: Entering directory `/tmp/UWfirmforce-0.0.1/plugins'
cc -W -fPIC -Wall -g -O2 -c ar.c

...

cc -o UWfirmforce UWfirmforce.o plugin.o  
UWfirmforce.o: In function `UWfirmforce_dlerror':
/tmp/UWfirmforce-0.0.1/UWfirmforce.c:298: undefined reference to `dlerror'
collect2: ld returned 1 exit status
make: *** [UWfirmforce] Error 1
[frank@t01 UWfirmforce-0.0.1]$ cc -o UWfirmforce UWfirmforce.o plugin.o -ldl
[frank@t01 UWfirmforce-0.0.1]$ ./UWfirmforce -v wgt634u_1_4_1_10.img | less

Analyzing file: wgt634u_1_4_1_10.img
Matching GZIP signature #0 at offset 26788
compression deflate, flags FNAME, 06/04/2005 07:27:46, OS Unix
Score: 100%

Matching CPIO signature #1 at offset 90769
binary big-endian, uid 21197, gid 19184, 16/06/1952 00:54:47
Score: 0%

...

The talk "Java wird Groovy" was even more interesting. It was an short but quite good introduction to Groovy. The final talk of the day about the OpenXPKI project made references to the tools sscep and CertNanny which you should definitely checkout if you have to deal with SSL certificates.

Like yesterday my stack of talks for tomorrow:

23C3 - The Arrival

23C3 Berlin Central Station

Ich bin gerade mit dem Zug in Berlin angekommen um - wie jedes Jahr ;-) - am Kongress des CCC teilzunehmen. Ein ganz besonderer Gruß geht an dieser Stelle an meine Freundin Kerstin, die leider aus beruflichen Gründen nicht mit nach Berlin kommen konnte.

Hier schon mal mein "Vortrags-Stack" für den ersten Tag:

FC6, iSCSI + Oracle RAC and 23C3 -- new stuff for the cold days

Wuff, the year 2006 nearly finished with the speed of light. But there is still one month left with a lot of new stuff to check out.

Last week I upgraded my notebook from Fedora Core 5 to Fedora Core 6. Hey! Everything worked without a problem. Just the usual update of the fedora-release-6-4.noarch.rpm package followed by yum upgrade and I am on FC6...

There are two new OTN articles about iSCSI and Oracle RAC. The first one "Setting Up an Inexpensive iSCSI Linux Cluster Using SLES10 and OCFS2" is from Mark Fasheh and Todd Trichler. The Paper is quite short and only describes how to get the storage part working. This article is also included in the "How-To's" section on the "Download OTN's Greatest Hits CD". The second article "Build Your Own Oracle RAC 10g Release 2 Cluster on Linux and iSCSI" from Jeffrey Hunter includes an complete work through from OS installation to the RAC setup.

Finally the "Fahrplan"/Agenda of the 23C3 conference in Berlin got released too. That is definitely something you should check out...

First Install of Oracle Enterprise Linux

Just finished the download and installation of Oracle Enterprise Linux. As already stated in the news it is essentially Red Hat Enterprise Linux 4.

I hoped for a little bit more customization towards data center or Oracle database installations. Not even the default screen for the firewall or SELinux settings includes some Oracle specific things like port 1521:

Well, but they include some RPMs for ASM (Automatic Storage Management) I could not find on my latest Centos 4.4 DVD:

Disc3:
glade2-2.6.0-1.oracle.i386.rpm
oracleasm-2.6.9-42.0.0.0.1.EL-2.0.3-2.i686.rpm
oracleasm-2.6.9-42.0.0.0.1.ELhugemem-2.0.3-2.i686.rpm
oracleasm-2.6.9-42.0.0.0.1.ELsmp-2.0.3-2.i686.rpm
oracleasm-support-2.0.3-2.i386.rpm

If you want to learn more:

Creating Images with Mono / C#

I just wrote some sample code on how to create GIF images in C#:

using System;
using System.Drawing;
using System.Drawing.Imaging;


public class Tester {
  static void Main() {
    Bitmap bmp = new Bitmap(79,121);
    Graphics graph = Graphics.FromImage(bmp);
    Font font = new Font("Times", 6, FontStyle.Italic);

    for(int i=0; i<10000; i++) {
      graph.Clear(Color.White);
      graph.DrawString(i + " - Test", font, SystemBrushes.WindowText, 1, 1); 
      bmp.Save(i + "foo.gif", ImageFormat.Gif);
    }
  }
}

To compile that code you have to make an reference:

$ mcs -r:System.Drawing pic01.cs

To create 10.000 images takes about 12 seconds on my notebook. If you prefer PNG it takes a little bit longer ~ 26s.