<?xml version="1.0" encoding="UTF-8"?><rss version="0.92">
<channel>
	<title>The Sentinel</title>
	<link>http://edgesentinel.com</link>
	<description></description>
	<lastBuildDate>Mon, 13 Dec 2010 23:11:56 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	<!-- generator="WordPress/3.0.4" -->

	<item>
		<title>The Gawker Crack</title>
		<description><![CDATA[There have been a flurry of posts about Gawker Media servers being broken into. Most articles have stayed above the technical details of how this happened, but after analyzing the actual data files in question, it appears the issue was Gawker&#8217;s reliance on Symmetric Encryption, specifically the DES cipher, and using it seemingly without salt. [...]]]></description>
		<link>http://edgesentinel.com/2010/12/the-gawker-crack/</link>
			</item>
	<item>
		<title>Hosting That Repository</title>
		<description><![CDATA[li pre { background-color:#505050; color: #99ff66; margin-left: 2em; padding-left: 1em; } Several weeks back setting up a local repository for .deb packages. Well we&#8217;re growing and adding machines, so it was time to move that local repository to a centralized location. It shouldn&#8217;t be hard, but it did have a few more steps than I [...]]]></description>
		<link>http://edgesentinel.com/2010/11/hosting-that-repository/</link>
			</item>
	<item>
		<title>He&#8217;s Having a (H)MAC Attack!</title>
		<description><![CDATA[In building a stateless web services API (e.g. a RESTful one), developers often must consider the chance that an attacker might attempt to spoof a call on behalf of a legitimate client. For example, if the attacker—Evil Enterprises—were to spoof a request to an event logging API used legitimately by Alpha Incorporated with garbage or [...]]]></description>
		<link>http://edgesentinel.com/2010/10/hes-having-a-hmac-attack/</link>
			</item>
	<item>
		<title>VMware Tools on Ubuntu Server 10.04</title>
		<description><![CDATA[All of the help I could find for setting up Ubuntu in a VM (using VMware Fusion on my Mac) assumes you&#8217;re using the Desktop version, with all the pretty Gnome/Nautilus crap prettiness. In case anybody else gets stuck trying to install the VMware Tools (to provide useful features like access to your host (Mac) [...]]]></description>
		<link>http://edgesentinel.com/2010/09/vmware-tools-on-ubuntu-server-10-04/</link>
			</item>
	<item>
		<title>What&#8217;s In a Name?</title>
		<description><![CDATA[We&#8217;re hard at work on product design and development, fundraising, and build-out, but still don&#8217;t have the perfect name. So I built a naming tool to help myself, and made it public to help others. It&#8217;s fairly simple, taking a user-supplied dictionary of terms, concatenating them with random prefixes and suffixes, and checking the WHOIS. [...]]]></description>
		<link>http://edgesentinel.com/2010/09/whats-in-a-name/</link>
			</item>
	<item>
		<title>Static IP for VMWare Fusion</title>
		<description><![CDATA[While trying to test an Apache installation running inside a VMWare Fusion instance, I found something irritating: Every time my Mac resumed from sleep, the IP address the guest OS used would increment by one, meaning whatever test scripts I was running from Safari or Firefox on my Mac would need to be adjusted to [...]]]></description>
		<link>http://edgesentinel.com/2010/08/static-ip-for-vmware-fusion/</link>
			</item>
	<item>
		<title>Hosting .deb Packages Locally</title>
		<description><![CDATA[As I described in , since we&#8217;re using Ubuntu we wanted to use the Ubuntu package management tools&#8212;apt and dpkg&#8212;to install our custom stuff. After I built the package, I wanted to use apt to install it, because while dpkg will identify the dependencies, it won&#8217;t install them (which is lame, but a documented gap). [...]]]></description>
		<link>http://edgesentinel.com/2010/08/hosting-deb-packages-locally/</link>
			</item>
	<item>
		<title>Building Custom .deb Packages and Chroots</title>
		<description><![CDATA[Since we&#8217;re running Ubuntu LTS 10.04 on our servers, it seemed appropriate to deploy our software using the built-in package management utilities. Overkill for now, but the added expense was small enough that it felt worthwhile (as opposed to gold-plating; the general admonition is to avoid building for scale until just before you have to). [...]]]></description>
		<link>http://edgesentinel.com/2010/08/building-custom-deb-packages/</link>
			</item>
	<item>
		<title>mod_perl and PerlChildInitHandler</title>
		<description><![CDATA[mod_perl provides a number of server lifecycle handlers, which allow you to hook various parts of the initiation sequence to log configuration files or logging before Apache starts handling your individual requests. Unfortunately, for reasons still not clear, when I tried to run initialization in the PerlChildInitHandler, it would correctly initialize but then the values [...]]]></description>
		<link>http://edgesentinel.com/2010/08/mod_perl-and-perlchildinithandler/</link>
			</item>
</channel>
</rss>

