via http://sebsauvage.net/links/?f4HwZA

http://www.ibmemployee.com/

configs à faire sur https://subscribe.free.fr/login/
puis rebouter (ou aller sur la TV menu Param et faire reboot depuis l'interface )

Sur la V6 il y a aussi un accès Web...
https://mafreebox.freebox.fr

Je pense que le default c'est 192.168.0.0 avec GW 0.1

GKH post https://plus.google.com/111049168280159033135/posts/RchL4R3FqhE

http://www.theregister.co.uk/2014/10/14/nasty_ssl_30_vulnerability_to_drop_tomorrow/
http://www.theregister.co.uk/2014/10/14/google_drops_ssl_30_poodle_vulnerability/

https://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html

test: https://www.poodletest.com/
better test: https://dev.ssllabs.com

http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566
https://wiki.mozilla.org/Talk:Security/Server_Side_TLS

sur blog de Joe Schreiber (alienvault)

et http://www.adam27.org/spip.php?article160

trèèès complet http://www.wfg.woodwind.org/flute/index.html
ex, la quatrième octave http://www.wfg.woodwind.org/flute/fl_alt_4.html (

see also discussion at https://bugzilla.redhat.com/show_bug.cgi?id=1141597
there is a fix and a fix to the fix, two CVE:
CVE-2014-6271 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271 https://security-tracker.debian.org/tracker/CVE-2014-6271
CVE-2014-7169 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7169 https://security-tracker.debian.org/tracker/CVE-2014-7169

Journal linuxfr http://linuxfr.org/users/tankey/journaux/mets-a-jour-ton-bash-maintenant

suivre sur touitteure: https://twitter.com/hashtag/shellshock
(MS) http://www.troyhunt.com/2014/09/everything-you-need-to-know-about.html
scanner http://blog.erratasec.com/2014/09/bash-shellshock-scan-of-internet.html
shellshock pour les nuls http://blog.ippon.fr/2014/09/26/shell-shock-un-obus-dans-les-dents-de-bash/

more bash bugs http://lcamtuf.blogspot.fr/2014/09/bash-bug-apply-unofficial-patch-now.html

un exploit http://www.alienvault.com/open-threat-exchange/blog/attackers-exploiting-shell-shock-cve-2014-6721-in-the-wild

Shellshocker - Repository of "Shellshock" Proof of Concept Code - https://github.com/mubix/shellshocker-pocs

X-force http://securityintelligence.com/how-bash-shellshock-bug-couldve-been-avoided-7-years-ago/

passeport http://vosdroits.service-public.fr/particuliers/F14079.xhtml
http://french.france.usembassy.gov/visas/besoinvisa.html
ESTA https://esta.cbp.dhs.gov/esta/application.html?execution=e1s1

Kristin Paget - Shmoocon 2012: Credit Card Fraud: The Contactless Generation
https://www.shmoocon.org/2012/presentations/Paget_shmoocon2012-credit-cards.pdf
la vidéo https://www.youtube.com/watch?v=HRXb-FZ6WFM

NFCproxy http://blackwinghq.com/assets/labs/presentations/EddieLeeDefcon20.pdf

l'original, https://code.google.com/p/readnfccc/
Open source tool developped and showed for Hackito Ergo Sum 2012 - "Hacking the NFC credit cards for fun and debit ;)"
et la vidéo http://www.ustream.tv/recorded/21805507
idem via korben http://korben.info/les-cartes-bancaires-sans-contact-nfc-ne-sont-pas-securisees.html

SRX Series: Configure Chassis Cluster SRX 650 - Juniper KBTV http://www.youtube.com/watch?v=j6xfrXW_GiA
(text version http://kb.juniper.net/kb15503 see links at the bottom)
SRX HA Configuration Generator: http://www.juniper.net/support/tools/srxha/
https://www.juniper.net/techpubs/software/junos-security/junos-security10.0/junos-security-swconfig-security/id-11293.html

http://forums.juniper.net/t5/SRX-Services-Gateway/How-to-know-that-the-SRX-is-deployed-Active-active-or-Active/td-p/33936

et
http://www.tunnelsup.com/configuring-ha-on-juniper-srx-through-junos
http://forums.networkinfrastructure.info/juniper-srx-appliances/nsrp-activepassive-versus-activeactive-setup/

Asciidoctor is a fast text processor and publishing toolchain for converting AsciiDoc content to HTML5, DocBook 5 (or 4.5) and other formats.
(écrit en ruby)

Asciidoc: http://www.methods.co.nz/asciidoc/

Trouvé dans cette intéressante dépêche, à propos de C: http://linuxfr.org/users/dcp/journaux/int-foo-int-float

Great guidance from IEEE's Center for Secure Design

via Sean: The following link is quite relevant to us: http://www.s3.eurecom.fr/docs/usenixsec14_costin.pdf It's about automated scans of embedded firmware images and is quite recent.
http://www.eurecom.fr/en/publication/4323/detail/a-large-scale-analysis-of-the-security-of-embedded-firmwares

a large catalog of interesting publications: http://www.s3.eurecom.fr/publications.html

Une backdoor dans un routeur Netis/Netcore
http://www.nearsecurity.net/love-china-netisbackdoor-exploitation/

Here is a series of articles by Neil Brown that look at Linux control groups. As more articles are published, this page will be updated to serve as an index.

In this paper, we explore the performance of traditional virtual machine deployments, and contrast them with the use of Linux containers. We use a suite of workloads that stress the CPU, memory, storage and networking resources.

Our results show that containers result in equal or better performance than VM in almost all cases. Both VMs and containers require tuning to support I/O-intensive applications. We also discuss the implications of our performance results for future cloud architecture

https://plus.google.com/111049168280159033135/posts/Ncx6CUWKfPA