I have just updated my instructions on how to create a TfL Underground Line Status Display with more information. I have also included links to additional TfL Data sources.
https://itigloo.com/raspberry-pi/london-underground-tube-service-display/
Blog
Linux Shell Scripting Cookbook available Free – Today Only
For the next 18 hours Packtpub Linux Shell Scripting eBook is available for free.
Get it here.
Configuring HSTS & OCSP Stapling
There are a couple of new technologies that are becoming more widely used that you may what to think about using. I have written a couple of pages explaining what they are and how to use them. They are definitely worth a look if you are a web server administrator.
How to Configure OCSP Stapling on Apache HTTP Server
How to Configure HTTP Strict Transport Security on Apache & NGINX
How to secure SSH
I found this article today that goes into a lot of depth on how to properly secure SSH. It is definitely worth a read.
https://stribika.github.io/2015/01/04/secure-secure-shell.html
What is good about this article is that it covers all the various Cipher Suites available to SSH and which are secure and how to disable those that are of lower quality.
One thing to note. This article was written on 4th January 2015. This is great for now, but be aware that in 1 year, 6 months or even next week, things could have changed.
Ubuntu 14.04 LTS to get Native Netflix support
In a recent discussion with Ubuntu developers, it seems that Netflix will soon work natively on Ubuntu 14.04 LTS in the Google Chrome browser.
This has become possible because of the development of the HTML5 player.
The only prerequisite is for the NSS security package to be upgraded to at least version 3.17. This is planned to occur in the next couple of weeks as a standard security enhancement.
At the moment it is possible to watch Netflix on Linux, but only if you adjust the User-Agent string in Google Chrome.
Update 23rd September 2014
I can now confirm that the NSS package has been updated to version 3.17 and that Netflix is now working in Google Chrome.
References
https://lists.ubuntu.com/archives/ubuntu-devel-discuss/2014-September/015050.html
http://www.omgubuntu.co.uk/2014/09/netflix-linux-html5-nss-change-request
https://lists.ubuntu.com/archives/ubuntu-devel-discuss/2014-September/015051.html
OpenSSL SHA256 Certificate Migration
Over the last week Google announced that they were going to stop supporting the SHA-1 algorithm for signing certificates.
Google’s SHA-1 deprecation announcement
Because of this I have created a couple of posts explaining how to migrate to SHA-256 based signatures.
Generate an OpenSSL Certificate Request with SHA-256 Signature
Change OpenSSL Default Signature algorithm
Since I wrote those pages other security companies have started to post their own migration strategies.
Qualys SHA1 Migration: What you need to know
In addition, all the major Certificate Authorities (CA) have started providing customers information specific to their services. So if you have certificates already, then contact your CA for further migration help.
Fresh New Look…
This site was really in need of some Tender Loving Care. To try to rectify that I have given it a nice new theme.
I will also attempt to add a bit more content. I am sure I have lots that would be of benefit to others.
IT Igloo 