fedops blog

Privacy in Computing

Fri 02 September 2022

Using Yubikeys for SSH

Posted by fedops in Security   

Something I've been meaning to try for a while was using a physical MFA token in conjunction with SSH to secure connections to remote servers. I've been casually reading blogs on the subject, but it seemed to be a bit of faff surrounding the issue.

Then when the OpenSSH project released version 8.2 it came with support built-in and "only" like 2.5 years later I finally got around to try it out...

Part …

Read more...


Tue 30 August 2022

Selfhosted Calendaring

Posted by fedops in Software   

I've avoided delving into the calendaring topic for a long while. It seemed a hassle and also I wasn't sure how to best integrate work and private calendars. I don't have very many private appointments anyway, and the ones I do have should ideally also block out the respective times in my work calendar so people don't book me for a meeting when I'm at the dentist or something. So I just put my private …

Read more...


Wed 25 May 2022

The Case for Per-Service Email Addresses

Posted by fedops in Security   

Phishing, online scams, and identity theft are big problems. All three of them are quite closely related, and to a significant degree revolve around something virtually everyone has these days - an email address. Let's look at the definitions real quick:

Phishing is a type of social engineering where an attacker sends a fraudulent (deceptive) message designed to trick a person into revealing sensitive information to the attacker.

A scam is a deceptive scheme or trick …

Read more...


Mon 06 December 2021

Read the M365 EULA

Posted by fedops in Cloud   

In July 2020 The Register, our usual source of unbiased news (ahem), ran an interesting piece on a pending court case against Microsoft in California. Within the article the actual complaint document was linked via courtlistener.com, to wit: https://www.courtlistener.com/recap/gov.uscourts.cand.362635/gov.uscourts.cand.362635.1.0.pdf.

This thing makes for good, if somewhat dry, reading. It's information straight from the horse's mouth, though; you might be …

Read more...


Mon 19 July 2021

NSO Pegasus Summary

Posted by fedops in Phone   

In late July 2021 Amnesty International together with The Citizen Lab published an analysis showing the widespread use of NGO Group's Pegasus software. Pegasus is a type of spyware that is commercially available to anyone willing to pay the asking price, and can be used to spy on the carrier of a mobile phone using pretty much any technological feature of the phone. Reading messages and Emails, turning on the camera and microphone, capturing keystrokes …

Read more...