Category: Security

Security

Arming an escaped convict– giving Artillery to a Jailbroken iPod Touch

Some achievements are too easy, but that shouldn’t be construed as complaint. This one was pure fun. Keeping in mind dire warnings of the dangers of rooting my iPod from security professionals I know and respect, I decided to root a spare iPod, so I wouldn’t have to worry so much about security for my primary one with all its precious info. Once rooted, how … Continue reading Arming an escaped convict– giving Artillery to a Jailbroken iPod Touch

smathermatherLeave a comment
Security

Beefing up the firewall using Artillery — part 2

So, how easy is it to install and use Artillery?  Really easy.  I’ve now installed it on Debian, Ubuntu, and Mac OS X.  But, assuming you don’t believe me, I’ll walk you through the steps.  Warning for my advanced readers– this is an entry level post… . Artillery is maintained in a subversion repository, so the best way to get it and keep it up-to-date … Continue reading Beefing up the firewall using Artillery — part 2

smathermatherLeave a comment
Security

Beefing up the firewall using Artillery

We have a project that an external group is helping with, and wanted a hardened machine for them to ssh into without worries. For projects like this, I recommend you wander over to secmaniac to see Dave Kennedy’s blog on security related stuff.  He’s got out a relatively new tool (a few months old) that’s (a first for him) on the defensive side of security … Continue reading Beefing up the firewall using Artillery

smathermather1 Comment
GeoServer, Other, Security

#OGC Web Services and #Security

A while back, I had a (somewhat cryptic) post on OGC services and security.  A couple months later, I saw this post on GeoSolution’s site on GeoServer security and the ins and outs of various options, from native to proxied security.  It is quite a bit more nuanced than my own… .  I recommend you read it, even if you don’t use GeoServer– it is … Continue reading #OGC Web Services and #Security

smathermatherLeave a comment
Analysis, Database, Ecology, PostGIS, Security, SQL

Postgis for breakfast: ST_Donut — Revision

A commenter on my last ST_Donut post pointed out that we were essentially using not one but two buffers and and ST_Intersection to test where a point lay.  Bad Spatial SQL. Very bad Spatial SQL. Actually, at Paul Ramsey’s PostGIS for Power Users presentation at FOSS4G this year, I think he mentioned not doing that very thing, and I chuckled to myself, “Well, even I … Continue reading Postgis for breakfast: ST_Donut — Revision

smathermatherLeave a comment
Analysis, Database, Ecology, PostGIS, Security, SQL

Postgis for breakfast: ST_Donut

This post typed into my iPod as an homage. Assisted today by my collegue, J. Stein. Moderate obfuscation of locations is an important technique for the protection of data, say something sensitive like the nesting locations of the very rare and strange fuzzy-bellied gnat catcher. We still want to display the data, but want to make it slightly wrong. A naive approach would place it … Continue reading Postgis for breakfast: ST_Donut

smathermather3 Comments
GeoServer, Other, Security

OGC Web Services and Security

I’ve been starting to inform myself on authentication/authorization schemes for OGC Web Services (OWS). This is because, while I’m pretty pleased with most of the functionality basic mapping of our internal GeoExt/GeoServer/PostGIS stack, user editing is the next natural step. As it is now, users can access a variety of really detailed useful layers, print to PDF, and for the most part the interface is … Continue reading OGC Web Services and Security

smathermather4 Comments