https://fritz.wtf/ Recent content on Steffen Fritz Hugo -- gohugo.io de-de Wed, 31 Jan 2024 11:07:47 +0200 https://fritz.wtf/posts/update_31012024/ Wed, 31 Jan 2024 11:07:47 +0200 https://fritz.wtf/posts/update_31012024/ A lot happened in the last months. I joined a huge company as an endpoint security engineer, I started the development of FileTrove (https://filetrove.fritz.wtf) and I have become self-employed on a part-time basis (https://fritz-itc.de), besides the endpoint security stuff. I picked up again the development of mxcheck (https://mxcheck.fritz.wtf) and a final, modest contribution to the Marbach-Weimar-Wolfenbüttel research community was published in one volume, see https://fritz.wtf/page/publikationen/. So, if you have a need for Linux or security consulting, hit me up! https://fritz.wtf/posts/mxcheck_page/ Tue, 28 Feb 2023 11:07:47 +0200 https://fritz.wtf/posts/mxcheck_page/ mxcheck, the e-mail server security scanner, got his own documentation page: https://mxcheck.fritz.wtf https://fritz.wtf/posts/macos_ossec/ Mon, 06 Dec 2021 22:00:00 +0200 https://fritz.wtf/posts/macos_ossec/ Just a few notes how I got ossec, the host intrusion detection system, up and running on a Mac M1. You need the command line tools installed with xcode-select —install and homebrew ready on your system. Run brew install pcre2 openssl Download the source tar ball from https://www.ossec.net/download-ossec/ and then… $ tar xvfz ossec-* $ cd ossec-* $ export CPATH=/opt/homebrew/include/ $ export LIBRARY_PATH=/opt/homebrew/lib $ ln -s /opt/homebrew/Cellar/openssl@1.1/1.1.1k/include/openssl/ /opt/homebrew/include/openssl $ ./install.sh https://fritz.wtf/posts/notmuch_netviel/ Wed, 31 Mar 2021 22:00:00 +0200 https://fritz.wtf/posts/notmuch_netviel/ Recently I used Mailstore in a Windows environment and liked the idea of a fast, graphical frontend for searching a-lot-of e-mails and its archiving cababilities. Mailstore is free for private use, but closed-source and not available for Linux or Unix. As I use offlineimap and the mail system notmuch on my homeserver for archiving e-mails, I came up with this setup, adding netviel behind a reverse proxy to the stack on FreeBSD: https://fritz.wtf/posts/filedriller_1/ Wed, 30 Dec 2020 22:00:00 +0200 https://fritz.wtf/posts/filedriller_1/ filedriller v1.0-BETA-4 was released. filedriller walks a directory tree and identifies all regular files by type with siegfried. Furthermore it creates UUIDv4s, calculates hash sums and entropies. filedriller can also check if the file is in the NSRL. The NSRL check expects a Redis server that serves NSRL SHA-1 hashes. You can use my docker image, i.e. docker pull ampoffcom/nslredis As I use more and more Codeberg instead of Github, you can find the source code on Codeberg. https://fritz.wtf/posts/nsrl/ Fri, 18 Dec 2020 17:00:47 +0200 https://fritz.wtf/posts/nsrl/ A short article I wrote for 2600 - The Hacker Quarterly. It is about the National Software Reference Library and what they and you can do with it. 2600 is going through tough times right now and I would appreciate it very much if you would buy the magazine, https://store.2600.com/collections/pdf-downloads The NSRL For Hackers First published in 2600, 37:3 The National Software Reference Library (NSRL) is something you probably never heard of, although it is one of the largest software collections in the world. https://fritz.wtf/posts/pacaudit_6/ Mon, 07 Dec 2020 22:40:47 +0200 https://fritz.wtf/posts/pacaudit_6/ Pacaudit had a bug that could cause wrong results to be displayed. Since the tool was intended to serve security and I have no time to fix it, I discontinued it and deleted the AUR. The Github repo is archived. Please use arch-audit from the comunity repo. https://fritz.wtf/posts/saotome/ Sat, 02 May 2020 13:12:42 +0200 https://fritz.wtf/posts/saotome/ Roaming around the web and Google maps in the Covid-19-lockdown I noticed there is a special place west of Sao Tome. There are a lot of pictures in the Gulf of Guniea, in the triangle of Sao Tome, St. Helena and Ascension. These pictures don’t belong there. I found no other place in Google maps where are images wrongly placed by geo tags in this quantity. Use street view on the following location link: https://fritz.wtf/posts/pacaudit_5/ Sat, 22 Feb 2020 10:40:47 +0200 https://fritz.wtf/posts/pacaudit_5/ pacaudit v1.1.2 was released, install it via trizen or any other AUR pkg manager and read the man page. trizen -S pacaudit man pacaudit pacaudit has a alpm-hook (since v1.1.1), so you will get a warning if you try to install a vulnerable package. v1.1.2 checks if security.archlinux.org is up and running. If not a message is shown and pacaudit returns without checking local packages. Comments on AUR, github or via email are highly appreciated! https://fritz.wtf/posts/pacaudit_4/ Sun, 03 Nov 2019 22:40:47 +0200 https://fritz.wtf/posts/pacaudit_4/ pacaudit v1.1.0 is ready, install it via trizen or any other AUR pkg manager and read the man page. trizen -S pacaudit man pacaudit There is the idea that pacaudit could be a pacman hook to warn the user when she tries to install a vulnerable package. If you’d like to help with this task, checkout the issue page on github. Comments on AUR, github or via email are highly appreciated! https://fritz.wtf/posts/xmpp/ Fri, 01 Nov 2019 22:40:47 +0200 https://fritz.wtf/posts/xmpp/ After years of not using it I will stop my xmpp/jabber service. https://fritz.wtf/posts/gobagit/ Sat, 06 Jul 2019 11:07:47 +0200 https://fritz.wtf/posts/gobagit/ gobagit is a command line tool and golang library to work with the BagIt format I am writing currently. I really like the bagit format because it is simple, a standard (RFC 8493) and widely used. gobagit is available in version 0.2.0 and under heavy development, check the dev branch. I’d like to get some feedback, so drop me an issue or star on github. https://github.com/steffenfritz/bagit You don’t have to build the tool yourself, just download a pre-built from the release page https://fritz.wtf/page/abk/ Thu, 02 May 2019 22:35:06 +0100 https://fritz.wtf/page/abk/ Sommersemester 2020 Folien und Codebeispiele auf Anfrage Sommersemester 2019 Folien und Codebeispiele auf Anfrage Sommersemester 2016 Folien und Codebeispiele auf Anfrage Images Diskettenabbilder auf Anfrage Screencasts Image mit dd erstellen Image mit ddrescue erstellen Offset feststellen Image mounten https://fritz.wtf/posts/pacaudit_3/ Thu, 02 May 2019 22:40:47 +0200 https://fritz.wtf/posts/pacaudit_3/ pacaudit v1.0.1 is ready, install it via trizen and read the man page. trizen -S pacaudit Comments on AUR, github or via email are highly appreciated! Github https://fritz.wtf/page/publikationen/ Sat, 20 Oct 2018 09:09:30 +0100 https://fritz.wtf/page/publikationen/ Publikationen Wenn es nicht so gut läuft. Emulation, Eigenschaften und Ästhetik, In: Madeleine Brook et al. (Hrsg.): Verschwinden. Vom Umgang mit materialen und medialen Verlusten in Archiv und Bibliothek, Wallstein Verlag, Göttingen 2024. filedriller - Marrying Siegfried and the National Software Reference Library. iPRES 2021 - Proceedings of 17th International Conference on Preservation. Beijing, 2021. The NSRL for Hackers, In: 2600 - The Hacker Quarterly, Band 37 Heft 3. New York, 2020. https://fritz.wtf/posts/mxcheck/ Wed, 17 Oct 2018 11:07:47 +0200 https://fritz.wtf/posts/mxcheck/ I needed a tool to check mail servers for open relaying and proper dns settings. There are several web sites providing such services, but I like my tools locally if possible. As I couldn’t find such a tool, I wrote one. You can find it on Github: https://github.com/steffenfritz/mxcheck With golang installed you can go get it with go get github.com/steffenfritz/mxcheck Usage is simple: ./mxcheck -t TARGETHOST https://fritz.wtf/page/impressum/ Wed, 17 Oct 2018 08:52:06 +0100 https://fritz.wtf/page/impressum/ Snailmail Steffen Fritz Hauffstraße 4 71696 Möglingen eMail steffen [AT] fritz.wtf GnuPG Download PublicKey Datenschutz Erklärung zum Datenschutz für fritz.wtf und amp-off.com Von allen Besuchern werden gespeichert und für 14 Tage aufbewahrt: Datum/Uhrzeit, abgerufene Seiten, Statuscodes des Webservers, Browser/Betriebssystem, der Referer, die IP-Adresse Die Daten erhebe ich auf Grund meines berechtigten Interesses (s. Art. 6 Abs. 1 lit. f. DSGVO) über Zugriffe auf die Website und speichere diese als „Server-Logfiles“ auf dem Server der Website ab. https://fritz.wtf/posts/roy_aur/ Fri, 14 Jul 2017 21:35:47 +0200 https://fritz.wtf/posts/roy_aur/ I wrote a PKGBUILD file for roy. With this handy tool you can create custom signature files for siegfried, the “signature-based file format identification tool. Install it on Arch Linux with yaourt -S roy roy and siegfried are developed by Richard Lehane. For more info check http://www.itforarchivists.com/siegfried https://fritz.wtf/posts/siegfried_aur/ Sat, 22 Apr 2017 13:12:47 +0200 https://fritz.wtf/posts/siegfried_aur/ I wrote a PKGBUILD file for siegfried, the “signature-based file format identification tool, implementing the National Archives UK’s PRONOM file format signatures and freedesktop.org’s MIME-info file format signatures Install it on Arch Linux with yaourt -S siegfried The package is called siegfried, the binary sf. After the installation run sf -update to fetch a recent version of the signature database. Siegfried is developed by Richard Lehane. For more info check http://www. https://fritz.wtf/posts/pacaudit_2/ Sun, 05 Mar 2017 23:49:47 +0200 https://fritz.wtf/posts/pacaudit_2/ pacaudit v0.3.1 is ready, install it via yaourt. Comments on AUR, github or via email are highly appreciated! Github https://fritz.wtf/posts/pacaudit_1/ Sat, 04 Mar 2017 23:49:47 +0200 https://fritz.wtf/posts/pacaudit_1/ pacaudit v0.3.0 is ready and needs some testing. Btw, there are some changes. If pacaudit is executed without flags, it just prints the number of vulnerable packages installed. If executed with -v in verbose mode, it prints the names of the packages, the severities and all CVE. If executed with -n in Nagios mode, it just prints OK, WARNING or CRITICAL. A man page is added. Read it with groff -man -Tascii pacaudit. https://fritz.wtf/posts/pacaudit/ Sun, 19 Feb 2017 13:12:47 +0200 https://fritz.wtf/posts/pacaudit/ I wrote a little, but useful helper. pacaudit checks installed packages against known vulnerabilities listed on https://security.archlinux.org. You should run it after an update because we don’t check for packages that are fixed. It would be no problem to check against all known vulnerabilities, just change the source URL in the code (see the github link), yet it makes no sense to me for a rolling release distribution. You can install it with https://fritz.wtf/posts/siegfried_port/ Wed, 11 Jan 2017 21:35:47 +0200 https://fritz.wtf/posts/siegfried_port/ Siegfried is in the FreeBSD ports. Freshports https://fritz.wtf/posts/rewrhist/ Tue, 13 Dec 2016 22:18:47 +0200 https://fritz.wtf/posts/rewrhist/ Not a paper, but a short article. First published in 2600 - The Hacker Quarterly. Download pdf https://fritz.wtf/posts/hopeconf/ Thu, 21 Jul 2016 22:18:47 +0200 https://fritz.wtf/posts/hopeconf/ All talks will be streamed at https://www.hope.net https://fritz.wtf/posts/hinweis/ Tue, 05 Jul 2016 22:18:47 +0200 https://fritz.wtf/posts/hinweis/ Alle Unterlagen und Testdaten finden sich hier. Bei Fragen: Fragen. -> steffen AT fritz.wtf https://fritz.wtf/posts/usbimg/ Wed, 29 Jun 2016 22:18:47 +0200 https://fritz.wtf/posts/usbimg/ Image des USB-Sticks: https://fritz.wtf/sitzung_1_usb.img.zip Image erstellen unter Linux mit dd: dd if=/dev/sdb of=/sitzung_1_usb.img Hashsumme erstellen mit sha1 sha1 sitzung_1_usb.img > hash.sha1 Image mounten file -s sitzung_1_usb.img parted sitzung_1_usb.img; unit; B; print sudo mount -o loop,ro,offset=1048576 sitzung_1_usb.img /mnt/image https://fritz.wtf/posts/hackermag/ Thu, 09 Jun 2016 13:42:47 +0200 https://fritz.wtf/posts/hackermag/ When you’re interested in infosec, you are probably looking for some good hacking and infosec magazines. Here is an overview of zines I read on a regular basis. 2600 - The Hacker Quarterly Founded: 1984 Language: English Latest: 2016-06 Level: beginner, advanced Frequency: quarterly Topics: implementation errors, url guessing, politics, activism URL: http://2600.com Price print: $27 p.a. USA and Canada / $38 p.a. overseas PoC||GTFO Founded: 2013 Language: English Latest: 2016-03 https://fritz.wtf/posts/siegfried_freebsd/ Wed, 01 Jun 2016 21:04:41 +0200 https://fritz.wtf/posts/siegfried_freebsd/ Last weekend I ported siegfried to FreeBSD. Siegfried is an advanced file identification tool, using the National Archives UK’s PRONOM and freedesktop’s MIME-info file format signatures. It’s written in Go and compared to other file id tools pretty fast. The port can be found on github, it is waiting to be added to the ports tree. https://fritz.wtf/posts/dh_mai_2016_1/ Sun, 29 May 2016 22:05:20 +0200 https://fritz.wtf/posts/dh_mai_2016_1/ DH Box – Digital Humanities Virtual Workbench : “Setting up an environment for digital humanities computational work can be time-consuming and difficult. DH Box addresses this problem by streamlining installation processes and providing a digital humanities laboratory in the cloud through simple sign-in via a web browser” : http://dhbox.org/ A blog post on dhbox.org by Tony Hirst : ouseful.info KB Research : Dataset KBK-1M containing 1.6 Million Newspaper Images available for researchers : kbreserach. https://fritz.wtf/posts/digipress_mai_2016/ Sat, 28 May 2016 22:05:20 +0200 https://fritz.wtf/posts/digipress_mai_2016/ News from the digital preservation community Euan Cochrane wrote a nice tool for the identification of floppy disk formats from kryoflux stream files: github ffmprovisr - Making FFmpeg Easier: github Tracking versions with PAV: The PAV ontology specializes the W3C PROV-O standard to give a lightweight approach to recording details about a resource, giving its Provenance, Authorship and Versioning. https://practicalprovenance.wordpress.com Migrating Files to Preservation Formats - Theory: http://archival-integration.blogspot.de There Will Be No Digital Dark Age : Archivists on the Issues is a forum for archivists to discuss the issues we are facing today. https://fritz.wtf/posts/praxisreport/ Thu, 19 May 2016 22:18:47 +0200 https://fritz.wtf/posts/praxisreport/ My article Praxisreport: Verfahren zur Evaluierung der Archivierbarkeit von Webobjekten is free available: Praxisreport: Verfahren zur Evaluierung der Archivierbarkeit von Webobjekten https://fritz.wtf/posts/dh_mai_2016/ Fri, 13 May 2016 22:05:20 +0200 https://fritz.wtf/posts/dh_mai_2016/ LIBREAS – Call for Papers: Post-Digital Humanities aus bibliotheks- und informationswissenschaftlicher Sicht : https://libreas.wordpress.com Neoliberal Tools (and Archives): A Political History of Digital Humanities : https://lareviewofbooks.org Response to “Neoliberal Tools: A Political History of Digital Humanities” : http://alisonhedley.com Tagungsbericht Digitale Daten in den Geisteswissenschaften. Interdisziplinäre Perspektiven für semantische und strukturelle Analysen : www.hsozkult.de Interview Bildungsmaterialien bereitstellen und entwickeln über Github : www.dotcomblog.de https://fritz.wtf/posts/digibiz/ Mon, 09 May 2016 09:55:34 +0200 https://fritz.wtf/posts/digibiz/ How will business histories be written from digital records? “The National Records of Scotland, in collaboration with the University of Glasgow’s Centre for Business History in Scotland (CBHS), is hosting a one day conference on the theme of using digital records for business history research. The conference will be held in Edinburgh on Monday 9th May 2016, and is an exciting opportunity for archivists, historians and technical experts with an interest in business records to meet and discuss the challenges and opportunities presented by the shift of records from the physical to the digital. https://fritz.wtf/posts/digipres_april_2016/ Sat, 30 Apr 2016 13:12:12 +0200 https://fritz.wtf/posts/digipres_april_2016/ News from the digital preservation community W3C - Packaging on the Web: This document describes an approach for creating packages of files for use on the web. The approach is to package them using a new application/package media type The Archive.org v1 API specification: on Github warcprox - WARC writing MITM HTTP/S proxy: Fork on Github Do Multiple Listeners to the Public Twitter Sample Stream Receive the Same Tweets?: Microsoft Research https://fritz.wtf/posts/open365/ Sat, 30 Apr 2016 13:12:12 +0200 https://fritz.wtf/posts/open365/ eyeOS, bought by Telefonica in 2014, is developing an open source alternative to Office365. It is called Open365 - not that creative. Nevertheless, it looks good, it feels good and there are sync clients for Linux, OS X and Windows. Open365 provides LibreOffice Writer, Impress and Calc, a calendar and an address book. In the next few weeks eyeOS will provide a download and therefore the possibility to have Open365 on premises. https://fritz.wtf/posts/goml/ Wed, 27 Apr 2016 13:12:12 +0200 https://fritz.wtf/posts/goml/ When learning a new programming language, you need a project. Here is mine for learning Go. It’s is called goml and one day it will be a machine learning library. Pull requests and comments are highly welcome! https://fritz.wtf/posts/iceland/ Mon, 25 Apr 2016 13:12:26 +0200 https://fritz.wtf/posts/iceland/ In april I visited Iceland and took some pictures. You can find them here.