Johan Bové

Web developer and Studio Lead at Deloitte Digital in Düsseldorf, Germany.

What is Infonet?

Infonet, a channel of the Biovision Farmer Communication Programme (FCP), provides scientific and practical validated information and knowledge related to plant (crop), animal, human and environmental health.

The resource gives farmers, trainers, students, and extension workers quick access to up-to-date and locally relevant agricultural information and related topics. Infonet-Biovision’s aim is to increase human and animal welfare and health, improve regional and local food security and at the same time conserve the environment and biodiversity.

Who do you trust more to manage your private mobile devices, to provide security and theft protection? A global well-known company offering services for free, but in return of access to your accounts, or a smaller, not so well known, privately held company which you pay a monthly fee for?

#Anyoneelse having this annoying Android app issue where authentication does not persist in an app if the app's storage is NOT on the "Internal Shared Storage", but on the extra SD card? Security over convenience I suppose.

Replaced Rainloop with Roundcube on my Yunohost server after reading about the severe security issue and the lack of patching from the maintainers.

Solene'% : What security does a default OpenBSD installation offer?

Who needs games when you can have fun as a web developer figuring out how to get to most secure and still usable content-security-policy for your web sites and web apps.

What is BGP? | BGP routing explained | Cloudflare

Border Gateway Protocol (BGP) is the routing protocol for the Internet. Much like the post office processing mail, BGP picks the most efficient routes for delivering Internet traffic.

#DHL Tried to send an e-mail from my personal e-mail account to hza-ffm@zoll.de-mail.de and apparently there is such a thing as a closed e-mail system.

3 min read

The e-mail address is on a very official looking "invitation to pay" from Deutsche Post DHL Group in Frankfurt am Main with no other phone number or whatsoever.

NO WAY I will create an email account with de-mail just to be able to send DHL Group a complaint, but an official complaint to the Bürgerbeauftragter will be sent out shortly.

Geman Digitalization in all its messy glory...

This is the response you get when you try to email the address mentioned:

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

<poststelle.hza-ffm@zoll.de-mail.de> failed: host
 mx.de-mail-t-systems.de-mail.de (83.125.35.23) said: 554 5.7.1
 <poststelle.hza-ffm@zoll.de-mail.de>: Recipient address rejected: Ihre E-Mail
 wurde abgewiesen, da es sich bei De-Mail um einen geschlossenen Mailverbund
 handelt.  Aufgrund der besonderen Anforderungen an das De-Mail System bzgl.
 Technik, Sicherheit, Integritaet und Vertraulichkeit, ist es nicht moeglich,
 eine normale E-Mail an eine De-Mail Adresse zuzustellen. Eine De-Mail Adresse
 erhalten Sie hier:  http://www.telekom.de/de-mail Your e-mail was rejected
 because De-Mail is a closed mail group. Due to the special requirements of the
 De-Mail system regarding technology, security, integrity and confidentiality,
 it is not possible to send a normal e-mail to a De-Mail address. You can get a
 De-Mail address here: http://www.telekom.de/de-mail (in reply to RCPT
 command)

Reporting-MTA: dns; REDACTED
Received-from-MTA: dns;  REDACTED
Arrival-Date: Wed, 04 Aug 2021 08:51:04 +0200
X-Original-ID: 56787f61-f4f0-11eb-aa4b-001a4a4cb9a5

Final-Recipient: rfc822; poststelle.hza-ffm@zoll.de-mail.de
Action: failed
Status: 5.7.1
Remote-MTA: dns; mx.de-mail-t-systems.de-mail.de (83.125.35.23)
Diagnostic-Code: smtp; 554 5.7.1 <poststelle.hza-ffm@zoll.de-mail.de>:
 Recipient address rejected: Ihre E-Mail wurde abgewiesen, da es sich bei
 De-Mail um einen geschlossenen Mailverbund handelt.  Aufgrund der besonderen
 Anforderungen an das De-Mail System bzgl. Technik, Sicherheit, Integritaet und
 Vertraulichkeit, ist es nicht moeglich, eine normale E-Mail an eine De-Mail
 Adresse zuzustellen. Eine De-Mail Adresse erhalten Sie hier: 
 http://www.telekom.de/de-mail Your e-mail was rejected because De-Mail is a
 closed mail group. Due to the special requirements of the De-Mail system
 regarding technology, security, integrity and confidentiality, it is not
 possible to send a normal e-mail to a De-Mail address. You can get a De-Mail
 address here: http://www.telekom.de/de-mail (in reply to RCPT command)

Content-security-policies are an evil necessity. Setting them up securely takes away some fun out of publishing online.

Introducing Firefox's new Site Isolation Security Architecture - Mozilla Hacks - the Web developer blog

Azure Active Directory passwordless sign-in | Microsoft Docs

Content-Security-Policy Header ⟶ CSP Reference & Examples

Got again a nice A+ score from Mozilla Observatory tester for my https://johanbove.info site after fixing issues with the Strict-Transport-Security header and the inline styles content security policy using base256 hashes

Before You Turn On Two-Factor Authentication…

Many online accounts allow you to supplement your password with a second form of identification, which can prevent some prevalent attacks. internet, security, syndicated

#pocket #reading

Technology Preview for secure value recovery

At Signal, we want to make privacy simple. From the beginning, we’ve designed Signal so that your information is in your hands rather than ours. Technologies like Signal Protocol secure your messages so that they are never visible by anyone but you and the intended recipients. security, signal, social media, syndicated

#pocket #reading

My reasons to support the Gemini Internet Protocol

3 min read

Why do I believe Gemini is great for personal Internet presences? First of all, it's a real grass-roots initiative which I am very excited about.

If you're reading this, chances are high you are already using Gemini. But for history reasons and to share my opinions of Gemini I would like to offer you here some views of mine.

Collecting some of the strong-points of Gemini from my perspective of having some experience with Gopher and running personal websites.

Fast and lightweight

It's very easy on the system resources. So the protocol works really well on slower hardware without any problems. Hosting on a Raspberry Pi3 is easy-peasy.
Since there are no fancy design in Gemini capsules, it is really optimized for low bandwidth.
It should work really fine on a feature-phone, like for KaiOS. I don't believe there is a client yet for KaiOs at this time.
It's fairly easy to build clients and servers for the protocol.

Simple yet complete

The specifications provide enough functionality to do basically what you would expect to be able to do online.
Much lower learning curve compared to Gopher and HTML. You can start publishing Gemini pages within minutes.
Even-though the syntax is limited, it still gives enough playroom for creative expression.
Use of TLS certificates promises security and privacy.
It is more international than US-centric Gopher.
The procol supports the UTF-8 character set so any language can be used to publish sites in.
This should help make the protocol more popular in non-ascii wielding regions in the World.

Easy to publish

Content will be probably first of all stored in static text files which are future-proof and easy to maintain.
Many servers already available that require minimal technical skills.
Yes, you still need a server, but there are many collectives which you can join to facilitate this.

Focus

No popups, animations, videos, sound effects.
Focus on actual content instead of fluff and effects.
No advertisemens and commercial tracking.
No Facebook, Google or Twitter.

Accessible

Power of formatting goes into the clients or readers. Like in the good old days of the early Web, people are expected to style the content to their own liking.
It's pure text, has simple navigation rules, so should be great for people with disabilities.
No JavaScript so you really see what you get.

And on top of this, the young Gemini community is driven to make this a success!

I'm sold.

ps. I published this first in plain text on my Gemini capsule and now that I copy paste this into a HTML document I can really tell just how easy it is to publish on Gemini.

How hackers steal your keys and secrets

After hunting for security bugs I've realized clients I’m working with are not familiar enough (or at all) with basic “hacking” techniques. API keys, passwords, SSH encrypted keys, and certificates are all great mechanisms of protection, as long they are kept secret. javascript, node.js, programming, security, syndicated, web dev

It's 2020 so not only is your mouse config tool a Node.JS Electron app, it's also pwnable by an evil webpage

Earlier this year, peripheral maker Kensington patched its desktop software to close a vulnerability that could have been exploited by malicious websites to quietly hijack victims' computers. node.js, security, syndicated

Element secure messenger review

Element is another encrypted chat app for the security conscious to consider, offering not just end-to-end encryption but also decentralized storage, so your message data isn't held in one place by one company – you can even set up your own server, if you want to. decentralization, internet, matrix, syndicated, tech