Gaël Duval’s homepage - Ulteo, Mandrake, Mandriva…

That’s the more impressive rock band I’ve listened to since early Smashing Pumpkins and early Placebo. The Simple.

Yes, this is apparently the first sound that has been successfully recorded. The French song “Au clair de la lune”, was recorded by Edouard-Léon Scott in year… 1860 on a phonoautogram. It could only be decoded recently with modern techniques. Listen to it!

[this is a repost of my answer to someone who wondered about security of personal data on Ulteo forums]

Let me explain my way of thinking about this issue.

At first, let’s assume that data integrity and confidentiality are the two needed requirements:

• we want to be able to retrieve data, as long as we need it, whatever happens on the earth (bombs, earthquakes…)
• we want to ensure that no one but authorized people can read the data, use it or modify it

Now there are different cases. Let’s take these two cases to simplify:

1. your personal data : most of time they are stored on your computer. As a result, they are totally unsafe for several reasons: someone can break into your computer and steal your data, or you can be stolen your harddrive (laptop), or your house can go into fire etc. A slightly different case is your online data. For instance, Gmail, Yahoo! mail etc. They won’t guarantee anything but “doing the best” to secure the data. It means that it’s likely that they have advanced security systems (but who knows), that they have redundant servers around the planet etc. So, it’s more likely that your data get more secured if they are stored online in this case. Anyway, they are not really confidential: Gmail reads your emails to generate ads for instance. Additionally, it happens that they close accounts, for any reason. I know people who got their Yahoo! mail account closed because the Terms of Services weren’t respected (without any further detail). Later, they were unable to get in touch with someone at Yahoo! to get it back and lost all emails. Maybe in some cases that’s a bug. Worse: laws permit that your data can get accessed by government agencies anytime for any “good reason” (as far as I know that’s the case for Google in the USA and Blackberry in the UK). So there is still a risk to have your data vanish in the air, even if they are stored online on a big service.
2. data within a corporation (ie “sensitive data”). Here, everything depends on the corporate’s policy about data security. Most of the time, I think there is a good level of integrity for the data, assumed that there are mechanisms to get the data replicated to other geographical places for instance. Confidentiality is certainly worse because security cannot be perfect, and also because many people within corporates use Gmail, Blackberry and other services intensively, apparently even for sensitive transactions/discussions. This is a real (known) issue for strategic corporations that need a high level of confidentiality.

Now, what I think, is that the key answer to data integrity and confidentiality is:

• redundancy to address the integrity problem
• heavy encryption to address confidentiality

For instance, with tools such as GPG and Thunderbird Enigmail (which are provided and installed by default on Ulteo), you can encrypt your sensitive emails very easily. The only constraint is that you first need to import your receiver public key first, but that needs to be done only once. Then, all you need to do is to select “encrypt message” when writing your email. With a 2048 or 4096 bits encryption key, this even removes the need to have any security or encryption “on the line” (TLS, SSL…).

In this case you can even add a personal gmail account in CC: as a safe backup! You won’t be able to read the email content within Gmail, but if you happen to need it, you can retrieve the email and decrypt it locally. And Gmail won’t be able to read the content of these archives in any way.

In the same spirit, Ulteo also integrates the Kopete “Silc” plugin that provides a totally secured IRC chat.

Now, there is the question of data that are stored at Ulteo. Right now, I can’t tell you more that “we’re doing our best to secure your data”. This means security measures on servers, and replication. But I agree that it’s not an ultimate solution.

We plan to provide an encryption feature that would permit us (and you) to store *only* encrypted data, that could be used/decrypted only by the owner of the data, using his credentials.

In this case, you would have a local secured directory where you could put all your sensitive data, and this would be the same on Ulteo online services. So in the bad case where you would be stolen your harddrive, or in the case Ulteo servers would be cracked, nobody but you couldn’t read your secured data.

Gaël.

Automatic synchronization of documents with the Ulteo Online Desktop, automatic upgrading, new “My Digital life” panel, installation in about 3 minutes, hundreds applications available… That’s what you’ll find in this just-released installable version of Ulteo Application System. We have made it with a clear goal in mind: make the PC user’s life still easier. I hope you’ll apreciate it… (download, release notes…)

This is the begining of the end of the offline mode:

Today, I’ve spent some time meeting with Ladislav Bodnar. Ladislav is the (nice) guy behind distrowatch.com!, a reference Linux website, one of the biggest and certainly one of the nicest ones. Ladislav was coming from Tapei, Taiwan for two days in Paris. I didn’t dare tasting his nice present yet, a kind of litchy-candies under a plastic film, because everything is written in (traditionnal) Chinese and I’m so blind about Asian languages. But tomorrow I will do, for sure. Will keep you updated.

The Ulteo main web server is experiencing a big, big, rush. It’s been under an heavy load for two days, and of course, page loading is sometimes slower than expected… We have performed urgency tasks, such as moving static stuff to other servers, but the rush is really too big. That’s the Slashdot effect, which is not turning into a too bad situation because our servers have a good connectivity and still answers… Of course we’re planning to switch to bigger servers, with some redundancy, but this will of course take a few days. So, be patient, register and come back later if you don’t succeed to launch a session or don’t want to wait… Apologizes for that situation, but we didn’t expect a so big and explosive rush…

Gaël.

P S and we are also reading all your warm emails! It seems that you like it, and we are going to make it still better, with some stuff that you do not even expect…

Last days have been extremely busy with the finalization of a partnership of Ulteo with  a major Open Source organization. Their software can soon be accessed through the Ulteo Online Desktop in one click, without any download or installation. Finally some publicly available stuff Stay tuned! And I can’t wait the release of the V2 of this stuff which has been under heavy development internally for several months.

Antony Garrett Lisi is a 39 years old physicist who is not attached to any laboratory, and whose main activity is surf. Anyway, he just caught some attention from the physics community since he posted a 31-page theory “An Exceptionally Simple Theory of Everything” aimed at unifiying all the physics theories. Comments from the physics community go from “joke” to “revolutionary”. Read the full paper (if you can!), or just a summary. Update: you can watch a video simulation of the theory.

God… where are you?