Paolo Pizzolongo

Articoli nella categoria News

Setting Up Full Disk Encryption on Debian 9 Stretch

Mag 01, 2019 Lascia un commento ~ Scritto da paolo

I say “Full” disk encryption but that’s not entirely correct: there is still a small partition /boot that’s unencrypted. That contains your kernel, grub config and initrd and needs to be unencrypted so we can start booting and decrypt the rest of the OS.

So let’s get started:

Installing

Boot up your CD, USB flash drive, ISO file or install media of choice and select Graphical install.

CD Boot

Select your language.

Select a language

Select your location.

Select a location

Set your keyboard layout.

Configure the Keyboard

Pick a name for your computer.

Configure the network

Set your local domain.

Configure the network

I personally leave the root password blank, this disables the root account and instead sets you up with a first user that can run sudo to become root.

set up users and passwords

Enter your full name.

set up users and passwords

Pick your username (the default is usually pretty good).

set up users and passwords

Set your password.

set up users and passwords

Set your timezone.

Configure the clock

The encryption:
This is where the magic happens, actually it’s quite simple, we are going to pick “Guided – use entire disk and set up encrypted LVM” and then just go with the defaults.

Partition disks

Select the volume to install Debian. (This will wipe whatever you have on that disk!!)

Partition disks

Pick “All files in one partition (recommended for new users)”.

Partition disks

Pick ‘Yes’ to write the changes to the disks.

Partition disks

Now the disk will be writen with random data, this is to prevent analysis of the disk. This step can be skipped by pressing cancle but it’s highly reccomend you wait it out. It could take several minutes to a few hours so now is an absolutely smashing time to go and have a cup of tea.

Partition disks

Now set a passphrase for your disk.

Partition disks

Select “Finish partitioning and write changes to disk”

Partition disks

Pick ‘Yes’ to write the changes to the disks.

Partition disks
Continue the installation

Now we continue the installation as per normal.

Pick ‘No’ for any extra CDs.

configure the package manager

Pick your country to find a local mirror .

configure the package manager

And pick your mirror of choice, often (at least in Australia) you will find your local ISP has a mirror and this will likely be fastest for you.

configure the package manager

Enter any proxy information (most times this will be blank)

configure the package manager

You are given the option to opt-in to Debian’s statistics collection.

Configure the popularity contest

Pick your software, I’ve gone with KDE as my desktop of choice but it’s a matter of personal taste.

Debian Software Selection

Install GRUB

Install the grub boot loader on a hard disk

Pick your boot disk.

Install the grub boot loader on a hard disk

and finish the installation.

Finish the installation
Boot your system

Now when you boot up you should presented with a prompt asking for the key to decrypt sda5_crypt (your encrypted volumne)

Enter your passphrase (Note: you won’t see characters as you type)

Finish the installation

Now you can log in and enjoy your new Debian system

VSFTPD Error 500 OOPS

Ago 08, 2018 Lascia un commento ~ Scritto da paolo

insert
allow_writeable_chroot=YES

into:
/etc/vsftpd/vsftpd.conf

il 75% delle app per Android tracciano l’utente

Dic 20, 2017 Lascia un commento ~ Scritto da paolo

https://www.techrepublic.com/article/over-75-of-android-apps-are-secretly-tracking-users/

 

con tag , , ,

Best Exchange ActiveSync Mail Apps for AndroidForWork

Ago 01, 2017 Lascia un commento ~ Scritto da paolo

Today we’ll talk about Exchange ActiveSync Mail Apps for AndroidForWork environment.

In my company we use Blackberry UEM 12.6 as MDM platfrom; with the new functionalities of Android For Work we can enable only some apps for the Play Store and block all the other ones.

As Mail apps we tested Blackberry Hub, Outlook by Microsoft, BlueMail by Blue Mail Inc, Email Exchange by MailWise and Vmware Boxer on mainly Samsung S7 devices.

Here some considerations and at the end the definitive choice.

Blackberry Hub

PROS:

  • Good integration with the UEM Environment
  • Good Support for Exchange/ActiveSync
  • Receive settings and configurations from UEM

CONS:

  • not working with hybrid configuration of Exchange and office 365
  • Free only for 30 days and purchasable only by single user, not via B2B channel

Outlook

PROS:

  • Very good support of Exchange and Office 365 connections; quick, clean and essential app.
  • completely free and without advertising

CONS:

  • no integration with the system calendar and partially with the address book (in-app option to sync contacts but a lot of problems for searching into Company Exchange Global Address List)
  • No week-view into integrated Calendar
  • Very slow sync for mail and calendar events (even 30 minutes late!!)

BlueMail

PROS:

  • Good support of Exchange and Office365 (but only with thirdy-part provided ActiveSync component)
  • Perfect sync with the company GAL
  • Perfect sync with the Calendar
  • Completely free and without advertising

CONS:

  • Without the default Android e-mail client and without another app that wake up the ActiveSync feature BlueMail cannot manage ActiveSync accounts.

VmWare Boxer

PROS:

  • Good support of Exchange and Office365
  • Perfect sync with the company GAL
  • Perfect sync with the Calendar
  • Completely free and without advertising

CONS:

  • some minor features outlook-desktop style are missing

MailWise

PROS:

  • Good support of Exchange and Office365
  • Perfect sync with the company GAL
  • Perfect sync with the Calendar

CONS:

  • the free version of the app requests upgrade to pro version for 2.99$.

Conclusion

At the end of the tests we decided to use VmWare Boxer as default mail/calendar/address book client for Android because of the limits and lacks of the other apps.

In the future we hope that Blackberry could resolve the license issues and the office 365 (also in hybrid configuration) support for its Android suite apps because this could effort security, limitations and control on the users accounts.

 

con tag , , , , , , , , , ,

how to know what type of object we handle with powershell

Giu 29, 2017 Lascia un commento ~ Scritto da paolo

This simple powershell script returns True o False if our object is of the same specified type or not.

<# $object contains my username string #>
$object="MyUser"
<# $type contains the type string (User or Group or Computer or OU) #>
$type="User" 

$seek = [System.DirectoryServices.DirectorySearcher]"LDAP://dc=contoso,dc=com"
$seek.Filter = “(&(name=$object)(objectCategory=$type))”
 
Write-Host($seek.FindOne() -ne $null)
con tag ,

Note Dicom

Giu 07, 2016 Lascia un commento ~ Scritto da paolo

https://www.clearcanvas.ca/Home/tabid/421/Default.aspx

https://www.neologica.it/ita/home

OsiriX, The world famous medical images viewer


con tag , ,

Travel Proposal 1

Lug 09, 2013 Lascia un commento ~ Scritto da paolo

Reinebringen, E10, 8390 Reine, Norvegia

con tag ,