diff options
Diffstat (limited to 'research/computing')
| -rw-r--r-- | research/computing/services.md | 49 | ||||
| -rw-r--r-- | research/computing/thinkpad.md | 2 | ||||
| -rw-r--r-- | research/computing/token.md | 97 |
3 files changed, 102 insertions, 46 deletions
diff --git a/research/computing/services.md b/research/computing/services.md index 1a2e66f..e21fdc3 100644 --- a/research/computing/services.md +++ b/research/computing/services.md @@ -1,6 +1,8 @@ [[!meta title="Free and Open Source Services"]] -This is a FOSS listing for service hosting. Staying on this list doesn't mean +An awesome list of FOSS "services". + +This is a cureted FOSS listing for service hosting. Staying on this list doesn't mean that a given software is recommended or audited in the spirit of the [Franklin Street Statement on Freedom and Network Services](http://wiki.p2pfoundation.net/Franklin_Street_Statement_on_Freedom_and_Network_Services). @@ -39,7 +41,7 @@ Misc: * [BigBlue Button](http://www.bigbluebutton.org). * [Rocket.Chat](https://rocket.chat/#!). * [Mattermost](https://about.mattermost.com/). -* [Riot. Break through.](https://riot.im/). +* [Riot. Break through](https://riot.im/). * [Signal Server](https://github.com/whispersystems/signal-server). * [Wire Server](https://github.com/wireapp/wire-server). * [Katzenpost](https://katzenpost.mixnetworks.org/). @@ -135,7 +137,9 @@ Social networking * [RedMatrix](https://redmatrix.me/). * [Hubzilla](http://hubzilla.org/). * [commento: A lightweight, open source, tracking-free comment engine alternative to Disqus](https://github.com/adtac/commento) -* Calendar: [Demosphere](https://demosphere.net/en/content/download) with [browser extension](https://demosphere.net/en/content/browser-extension). +* Calendar: + * [Demosphere](https://demosphere.net/en/content/download) with [browser extension](https://demosphere.net/en/content/browser-extension). + * [Gancio](https://gancio.org/): a shared agenda for local communities. Timebanking ----------- @@ -198,6 +202,11 @@ Office * [SocialCalc](https://www.socialtext.net/open/socialcalc) ([código](https://github.com/audreyt/socialcalc)). * [OBM - Open Business Management](http://obm.org). * [Etherpad](http://etherpad.org/) ([puppet-etherpad](https://git.fluxo.info/?p=puppet-etherpad.git); [vim-etherpad](https://github.com/guyzmo/vim-etherpad) as a proof-of-concept). +* [HedgeDoc - Ideas grow better together](https://hedgedoc.org/): (formerly + known as CodiMD) is an open-source, web-based, self-hosted, collaborative + markdown editor. You can use it to easily collaborate on notes, graphs and even + presentations in real-time. All you need to do is to share your note-link to + your co-workers and they’re ready to go. * [Ethercalc](http://www.ethercalc.org) ([código](https://github.com/audreyt/ethercalc)). * [HedgeDoc](https://docs.hedgedoc.org/): create real-time collaborative markdown notes. * [HackMD - Collaborative Markdown Knowledge Base](https://hackmd.io/#). @@ -227,7 +236,8 @@ Office * [Discourse](https://www.discourse.org/): "civilized discussion for your community". * [mat2 web](https://dustri.org/b/mat2-for-the-web.html). -Finance: +Finance +------- * [Timestrap: time tracking and invoicing](https://github.com/overshard/timestrap). * [ihatemoney - Account manager](https://ihatemoney.org/) ([code](https://github.com/spiral-project/ihatemoney)). @@ -236,8 +246,9 @@ Finance: Conferences ----------- -* [EasyChair Smart CFP](https://easychair.org/cfp/). +* [pretalx — CfP and scheduling for conferences](https://pretalx.com): From Call for Papers to schedule – build your conference! * [frab - conference management system](https://frab.github.io/frab/) with [ANGELSYSTEM - online tool for coordinating helpers and work shifts on large events](https://engelsystem.de/index_en.html). +* [EasyChair Smart CFP](https://easychair.org/cfp/). URL shorteners -------------- @@ -312,6 +323,11 @@ Media managers * [PeerTube](https://github.com/Chocobozzz/PeerTube). * [DTube](https://github.com/dtube). +Asset manages +------------- + +* [Snipe-IT - Free open source IT asset management](https://snipeitapp.com) ([repository](https://github.com/snipe/snipe-it)). + Image galeries -------------- @@ -324,6 +340,7 @@ Dynamic: * [Coppermine](http://coppermine-gallery.net). * [Zenphoto](http://www.zenphoto.org). * [Plogger](http://www.plogger.org). +* [thumbor](https://www.thumbor.org/): open-source smart on-demand image cropping, resizing and filters. Static: @@ -389,6 +406,13 @@ Mobilization * [LimeSurvey](http://www.limesurvey.org). * [Loomio](https://github.com/loomio/loomio). +Decision-making +--------------- + +* [Decidim](https://decidim.org/): digital platform for citizen participation. + Free/libre, open and safe technology. With all democratic guarantees. + Reprogramming democracy is now possible with Decidim. + Email ----- @@ -418,6 +442,13 @@ Bookmarks * [wallabag: a self hostable application for saving web pages](https://wallabag.org/en) with [wallabag-cli](https://github.com/Nepochal/wallabag-cli). * [prismo](https://gitlab.com/mbajur/prismo). * [linkding: Self-hosted bookmark service](https://github.com/sissbruecker/linkding). +* [Lemmy - A link aggregator for the fediverse](https://join-lemmy.org/): + selfhosted social link aggregation and discussion platform. It is completely + free and open, and not controlled by any company. This means that there is no + advertising, tracking, or secret algorithms. Content is organized into + communities, so it is easy to subscribe to topics that you are interested in, + and ignore others. Voting is used to bring the most interesting items to the + top. Libraries --------- @@ -463,6 +494,14 @@ Radio * [OpenWebRX](https://sdr.hu/openwebrx) ([código](https://github.com/simonyiszk/openwebrx)). +Education +--------- + +* [Openki](https://gitlab.com/Openki/Openki/): Course-Organization-Platform: A + tool to build up and organize local communities – Open education for real. +* [Kiwix lets you access free knowledge – even offline](https://www.kiwix.org/) with + [kiwix-serve](https://www.kiwix.org/en/downloads/kiwix-serve/). + References ---------- diff --git a/research/computing/thinkpad.md b/research/computing/thinkpad.md index 7ac9270..fa7a04d 100644 --- a/research/computing/thinkpad.md +++ b/research/computing/thinkpad.md @@ -231,3 +231,5 @@ Exemplo: * [Lenovo Laptop Repair - iFixit](https://www.ifixit.com/Device/Lenovo_Laptop). * [IBM Laptop Repair - iFixit](https://www.ifixit.com/Device/IBM_Laptop). * [CPU-Upgrade](http://www.cpu-upgrade.com). +* [Welcome to ThinkPads.org! - ThinkPads.org](https://libthinkpad.github.io/projects/) +* [ThinkPad FRU parts catalog - ThinkPads.org](https://libthinkpad.github.io/fru/) diff --git a/research/computing/token.md b/research/computing/token.md index 9aaeb66..dbe0e4f 100644 --- a/research/computing/token.md +++ b/research/computing/token.md @@ -2,62 +2,77 @@ Sobre tokens criptográficos USB. -## Gnuk +## Intro + +* [ImperialViolet - Security Keys](https://www.imperialviolet.org/2017/08/13/securitykeys.html). + +## FST-01: Gnuk and Neug + +### FST-01 + +* [FST-01](https://www.gniibe.org/FST-01/fst-01.html "FST-01") (Gniibe) +* [FST-01](https://seeeddoc.github.io/FST-01/ "FST-01") (Seedstudio) +* [unixjazz / DIYNuk · GitLab](https://gitlab.com/unixjazz/DIYNuk "unixjazz / DIYNuk · GitLab") +* [» Reading and Writing Firmware on an STM32 using SWD](https://cybergibbons.com/hardware-hacking/reading-and-writing-firmware-on-an-stm32-using-swd/ "» Reading and Writing Firmware on an STM32 using SWD") + * [Serial Wire Debug (SWD) - Silicon Labs](https://community.silabs.com/s/article/serial-wire-debug-swd-x?language=en_US "Serial Wire Debug (SWD) - Silicon Labs") + * [ST-LINK/V2 - ST-LINK/V2 in-circuit debugger/programmer for STM8 and STM32 - STMicroelectronics](https://www.st.com/en/development-tools/st-link-v2.html "ST-LINK/V2 - ST-LINK/V2 in-circuit debugger/programmer for STM8 and STM32 - STMicroelectronics") + * [STM8S-DISCOVERY - Discovery kit with STM8S105C6 MCU - STMicroelectronics](https://www.st.com/en/evaluation-tools/stm8s-discovery.html "STM8S-DISCOVERY - Discovery kit with STM8S105C6 MCU - STMicroelectronics") + * [FST-01 gnuk firmware update via USB - Raymii.org](https://raymii.org/s/tutorials/FST-01_firmware_upgrade_via_usb.html "FST-01 gnuk firmware update via USB - Raymii.org") + * [FST-01 - Seeed Wiki](http://wiki.seeed.cc/FST-01/). + * [Questions - FST-01 Q&A Forum](http://no-passwd.net/askbot/questions/). + * [Programming the FST-01 (gnuk) with a Bus Pirate + OpenOCD](https://www.earth.li/~noodles/blog/2015/08/program-fst01-with-buspirate.html). + +### Gnuk * [Free Software Initiative of Japan - gnuk](http://www.fsij.org/category/gnuk.html) * [Gnuk Documentation — Gnuk Documentation 1.0 documentation](http://www.fsij.org/doc-gnuk/) * [Gnuk - Noisebridge](https://noisebridge.net/wiki/Gnuk). -* [FST-01 - Seeed Wiki](http://wiki.seeed.cc/FST-01/). -* [Questions - FST-01 Q&A Forum](http://no-passwd.net/askbot/questions/). -* [Programming the FST-01 (gnuk) with a Bus Pirate + OpenOCD](https://www.earth.li/~noodles/blog/2015/08/program-fst01-with-buspirate.html). * [Gnuk Token and GnuPG scdaemon](https://fosdem.org/2018/schedule/event/hwenablement_gnuk_token_and_gnupg_scdaemon/). -* [FST-01 gnuk firmware update via USB](https://raymii.org/s/tutorials/FST-01_firmware_upgrade_via_usb.html). * [Gnuk source code](https://salsa.debian.org/gnuk-team/gnuk/gnuk). -* Threat modeling: - * [How safe is Gnuk against side channel attacks, USB sniffer, or electron/tunneling microscope? - FST-01 Q&A Forum](http://no-passwd.net/askbot/question/33/how-safe-is-gnuk-against-side-channel-attacks-usb/). - * [How does Gnuk protect against attacks to extract private keys? - FST-01 Q&A Forum](http://no-passwd.net/askbot/question/32/how-does-gnuk-protect-against-attacks-to-extract/). - * [What types of risk are more likely? What's "best practice" against that? - FST-01 Q&A Forum](http://no-passwd.net/askbot/question/68/what-types-of-risk-are-more-likely-whats-best/). - -## Safenet eToken E5110 - -No Debian, instale o [MUSCLE](https://pcsclite.alioth.debian.org/): - sudo apt install libccid pcsc-tools opensc pcscd libpcsclite1 +### Neug -Plugue a parada e execute: +* [NeuG, a True Random Number Generator Implementation](https://www.gniibe.org/memo/development/gnuk/rng/neug.html "NeuG, a True Random Number Generator Implementation") +* [Gnuk / gnuk / neug · GitLab](https://salsa.debian.org/gnuk-team/gnuk/neug "Gnuk / gnuk / neug · GitLab") + * [NeuG USB True Random Number Generator | Hacker News](https://news.ycombinator.com/item?id=16080019 "NeuG USB True Random Number Generator | Hacker News") +* [Gnuk, NeuG, FST-01](https://incenp.org/dvlpt/docs/fsij-gnuk-neug/index.html "Gnuk, NeuG, FST-01") + * [How can I install Gnuk on FST-01 with NeuG 1.0.5?](http://www.gniibe.org/FST-01/q_and_a/gnuk_install_over_neug.html "How can I install Gnuk on FST-01 with NeuG 1.0.5?") + * [udev-rules for my FST-01 gnuk security token](https://lists.gnu.org/archive/html/help-guix/2018-07/msg00051.html "udev-rules for my FST-01 gnuk security token") + * [Device Configuration for Gnuk Token with libusb — Gnuk Documentation 1.0 documentation](http://www.fsij.org/doc-gnuk/udev-rules.html "Device Configuration for Gnuk Token with libusb — Gnuk Documentation 1.0 documentation") + * [How to install or update NeuG firmware with STLink/v2 debugger on FST-01](https://demsh.org/post/neug-memo/ "How to install or update NeuG firmware with STLink/v2 debugger on FST-01") + * [How can I use NeuG standalone device on my Debian box?](https://www.gniibe.org/FST-01/q_and_a/neug-standalone-device.html "How can I use NeuG standalone device on my Debian box?") + * [linux - Using the NeuG TRNG with /dev/random? - Unix & Linux Stack Exchange](https://unix.stackexchange.com/questions/354188/using-the-neug-trng-with-dev-random#433397 "linux - Using the NeuG TRNG with /dev/random? - Unix & Linux Stack Exchange") - opensc-tool --list-readers +### Threat modeling -## SafeNet Authentication Client +* [How safe is Gnuk against side channel attacks, USB sniffer, or electron/tunneling microscope? - FST-01 Q&A Forum](http://no-passwd.net/askbot/question/33/how-safe-is-gnuk-against-side-channel-attacks-usb/). +* [How does Gnuk protect against attacks to extract private keys? - FST-01 Q&A Forum](http://no-passwd.net/askbot/question/32/how-does-gnuk-protect-against-attacks-to-extract/). +* [What types of risk are more likely? What's "best practice" against that? - FST-01 Q&A Forum](http://no-passwd.net/askbot/question/68/what-types-of-risk-are-more-likely-whats-best/). -Para uso no mundo corporativo e institucional, como OAB e afins. Você não vai -querer usar os drivers proprietários a não ser que seja forçado, certo? +### Programando o FST-01 -TL;DR: pra usar o eToken E5110 pra assinar documentos no navegador você -precisará de drivers específicos e proprietários, como -[estes fornecidos pela GlobalSign](https://support.globalsign.com/ssl/ssl-certificates-installation/safenet-drivers). +Agradecimento ao `unixjazz` do projeto [DIYNuk](https://gitlab.com/unixjazz/DIYNuk) por fornecer estas instruções! -Minha dica é configurar esses drivers apenas num ambiente virtualizado ou, -preferencialmente, numa máquina específica. +Roteiro baseado no programador (STLink) ligado a um STM8 com os pinos soldados: -Curioso que no fim das contas a OAB conseguiu seu lugar ao sol no mercado -da certificação digital apesar da implantação do modelo governamental escolhido -para o certificado raíz brasileiro, história contada no livro -[Leviatã Eletrônico](http://www.scielo.br/scielo.php?script=sci_arttext&pid=S1517-45222010000300013). +1. Ligar ambas as pacas conforme [este diagrama dos + pinos](https://www.gniibe.org/memo/development/gnuk/hardware/stlinkv2-stm8s-discovery.html). +2. Configurar o ST-Link (programador) no PC. Instruções + [aqui](https://www.gniibe.org/FST-01/q_and_a/swd-debugger.html). +3. Compilar (mesmo procedimento para Gnuk e Neug (se diz Noisy com sotaque + japones)) conforme [estas instruções](https://www.gniibe.org/memo/development/gnuk/gnuk-building-for-stm32-part-of-stm8s-discovery-kit.html). -Anteriormente, a [Gemalto comprou a SafeNet](http://www.gemalto.com/press/Pages/Gemalto-to-acquire-SafeNet,the-worldwide-leader-in-data-and-software-protection.aspx) -e por um tempo ficou muito mais difícil para baixar o driver do eToken E5110, que além de ser proprietário ainda ficou privativo! -Maluco fez [até script](https://gist.github.com/dex4er/1354710) pra automatizar essa zica. -[Aqui](https://site.solutinet.com.br/2015/manuais/instaladores/) há versões recentes das bibliotecas e do cliente de autenticação -proprietário (dica [daqui](https://diadialinux.wordpress.com/2017/03/02/instalar-etoken-alladin-usar-sites-do-governo-com-certificado-digital-e-assinar-documentos-pdf/)). +Em geral, o procedimento e' o seguinte: -Referêcias: +1. Instalar o [ultimo NeuG do repo do Debian](https://salsa.debian.org/gnuk-team/gnuk/neug). +2. Instalar o GNU Toolchan for ARM (4.5 ou maior). +3. Instalar o OpenOCD (pacote do Debian). +4. Compilar o NeuG. +5. Configurar o ST-Link com as seguintes regras do udev (por exemplo em `/etc/udev/rules.d/10-stlink.rules`): -* [Token-Based Authentication | SafeNet eToken 5110 USB Authenticator](https://safenet.gemalto.com/multi-factor-authentication/authenticators/pki-usb-authentication/etoken-5110-usb-token/) -* [Guia](http://poddarprofessional.com/demo/DIGITAL%20SIGNATURE/UTILITIES/E-token%20Drivers%20For%20LINUX/eToken_PKI_Client_Linux_4_55_Reference_Guide.pdf). -* [eToken Pro 72k and Linux - r3blog](https://r3blog.nl/index.php/etoken-pro-72k/). -* [Install SafeNet eToken PRO on Ubuntu 14.04 LTS](https://www.vleeuwen.net/2015/05/install-safenet-etoken-pro-on-ubuntu-14-04-lts). + ACTION=="add", SUBSYSTEM=="usb", ATTR{idVendor}=="0483", \ + ATTR{idProduct}=="3748", GROUP="tape", MODE="664", SYMLINK+="stlink" -## Misc - -* [ImperialViolet - Security Keys](https://www.imperialviolet.org/2017/08/13/securitykeys.html). +6. Plugar o ST-Link, rodar o OpenOCD e escrever o binario na flash do STM8 + conforme [este procedimento](https://www.gniibe.org/memo/development/gnuk/gnuk-installation-to-stm32-part-of-stm8s-discovery-kit.html) +7. Pronto! Agora basta [ler a serial](https://www.gniibe.org/FST-01/q_and_a/neug-standalone-device.html). |