Auf http://ngin.de/cduremix/ gibt es die Möglichkeit, die neuen Wahlwerbeplakate von Wolfgang Schäuble, dem deutschen Innenminister mal mit passenderen Schriftzügen als den von der CDU gewählten zu versehen.
Hier ist mein Versuch damit etwas mehr Klarheit in den Wahlkampf bei unseren deutschen Nachbarn zu bringen:
A while back I reported that the Austrian Data Protection Commission was investigating my TOR exit node which was up and running from January until April this year. They were demanding details on who is responsible for this server and if there are any connection logs available. My upstream provider denied disclosure of information on both requests but finally settled by revealing my name as the maintainer of the server.
To my surprise, the Data Protection Commission has now announced that they abandoned the case without stating an explanation for this move. I'm disclosing the suspiciously short document attached to their latest email just in case it will help any other Austrian admin who is running a TOR exit node.
I think I'll abandon my efforts to build a LDAP backed VOIP system. SIP is just too frustrating to me, mostly because of their (IMHO) completely outdated authentication mechanism. For Digest-HA1, which is the only option in SIP, there is already an password-gathering hack out in the wild which affects hard- and softphones by leaking the Challenge Response.
My LDAP tree stores the passwords for the users in their userPassword attribute which only contains the SSHA encrypted version of it so there is no way to extract the clear text password. Digest-HA1 needs to calculates its digest by concatenating user, password and realm and applying MD5 on this string. This leaves me with two options:
- Store the password in clear text form inside LDAP (don't want to because of security concerns)
- Use any other authentication mechanism which transmits the password in clear text (over encrpyted transport like TLS/SSL)
The second one is is not supported by RFC 3261 so I have to resort to the first option which drags in a lot of other issues like securing access to the password while granting users access to the LDAP tree for work and the usage of a proxy DN in LDAP to get a narroed down view on the clear text password.
My conclusion is that I'll dump SIP and discontinue my efforts in this segment.
Gut gemacht und informativ wie ich finde, keine glücklich lächelnden Fotomodels, keine inhaltsleeren Populärfloskeln, die Probleme und Ziele prägnant formuliert. ARRRRRRRRR Piraten, klarmachen zum ändern!
Polizeisirene, und das um 3;45 in der Früh, gepaart mit der Lautsprecherdurchsage: "Hier spricht die Polizei! Bringen sie ihr Auto in Sicherheit! Es kommt das Hochwasser!", da ist einfach nicht ans Schlafen zu denken. Ich bin glücklicherweise ausserhalb der Gefahrenzone, aber der Aufruf hat Erfolg, man sieht um 4 Uhr früh regen Verkehr in ganz Andritz als überall Autos gestartet und umgeparkt werden.
Noch ist gar nichts vom Hochwasser zu bemerken, aber mein Sichtfeld vom Balkon aus ist auch etwas eingeschränkt.