Sunday, October 3, 2021

How to Validate the Integrity of the Downloaded KeePassXC File on Mac

Download from https://keepassxc.org/download/ the birnary, signature and hash files.
KeePassXC-2.6.6-x86_64.dmg
KeePassXC-2.6.6-x86_64.dmg.sig
Value from KeePassXC-2.6.6-x86_64.dmg.DIGEST
ab96033c16459de5a95e1f9e5864a5bd8cc47b4f3dee2c68ede6199dd44286ec  KeePassXC-2.6.6-x86_64.dmg

At the terminal:
$ openssl dgst -sha256 KeePassXC-2.6.6-x86_64.dmg
SHA256(KeePassXC-2.6.6-x86_64.dmg)= ab96033c16459de5a95e1f9e5864a5bd8cc47b4f3dee2c68ede6199dd44286ec

Use the search function in any text editor to seach and compare the hash value before install.

$ gpg --verify KeePassXC-2.6.6-x86_64.dmg.sig
gpg: assuming signed data in 'KeePassXC-2.6.6-x86_64.dmg'
gpg: Signature made Sat Jun 12 10:52:46 2021 PDT
gpg:                using RSA key C1E4CBA3AD78D3AFD894F9E0B7A66F03B59076A8
gpg: Can't check signature: No public key

$ gpg --keyserver pgp.mit.edu --recv C1E4CBA3AD78D3AFD894F9E0B7A66F03B59076A8
gpg: key CFB4C2166397D0D2: 1 duplicate signature removed
gpg: key CFB4C2166397D0D2: public key "KeePassXC Release <release@keepassxc.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1

$ gpg --verify KeePassXC-2.6.6-x86_64.dmg.sig KeePassXC-2.6.6-x86_64.dmg
gpg: Signature made Sat Jun 12 10:52:46 2021 PDT
gpg:                using RSA key C1E4CBA3AD78D3AFD894F9E0B7A66F03B59076A8
gpg: Good signature from "KeePassXC Release <release@keepassxc.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: BF5A 669F 2272 CF43 24C1  FDA8 CFB4 C216 6397 D0D2
     Subkey fingerprint: C1E4 CBA3 AD78 D3AF D894  F9E0 B7A6 6F03 B590 76A8
    

Validate integrity of LibreOffice downloaded files on Mac

On this page https://www.libreoffice.org/download/download/, click info
https://download.documentfoundation.org/libreoffice/stable/7.2.1/mac/x86_64/LibreOffice_7.2.1_MacOS_x86-64.dmg.mirrorlist

Mirrors for LibreOffice_7.2.1_MacOS_x86-64.dmg
File information

Filename: LibreOffice_7.2.1_MacOS_x86-64.dmg
Path: /libreoffice/stable/7.2.1/mac/x86_64/LibreOffice_7.2.1_MacOS_x86-64.dmg
Size: 267M (279867887 bytes)
Last modified: Fri, 10 Sep 2021 09:43:36 GMT (Unix time: 1631267016)
SHA-256 Hash: b83e841360fa6ee9e42bfc1579ce9ae135972d6e7a01e79d1b975c2b855ff152
SHA-1 Hash: ad46a513f7c2047f632d8a3929a23b74aaebcc3d
MD5 Hash: 741cd9f35e133d0b2cc1944dc362cb0f
BitTorrent Information Hash: bcb717c49259229b9108c0967679dc2f53c9aba9
PGP signature available

At the terminal:
$ openssl dgst -sha256 LibreOffice_7.2.1_MacOS_x86-64.dmg
SHA256(LibreOffice_7.2.1_MacOS_x86-64.dmg)= b83e841360fa6ee9e42bfc1579ce9ae135972d6e7a01e79d1b975c2b855ff152

Search and compare the hash sum match before install

Monday, September 7, 2020

Validate integrity of VirtualBox downloaded files on Mac

$ openssl dgst -sha256 VirtualBox-6.1.14-140239-OSX.dmg 
SHA256(VirtualBox-6.1.14-140239-OSX.dmg)= 3abeee4822707db2f949431391dba27827840aa5390a9ec4e1bafdc5c8c3aaaa

$ openssl dgst -sha256 Oracle_VM_VirtualBox_Extension_Pack-6.1.14.vbox-extpack
SHA256(Oracle_VM_VirtualBox_Extension_Pack-6.1.14.vbox-extpack)= b224e796e886b19bce69f0aaedf6ca82bad0ca29c61fb0ed86166efb84356942

3abeee4822707db2f949431391dba27827840aa5390a9ec4e1bafdc5c8c3aaaa *VirtualBox-6.1.14-140239-OSX.dmg
b224e796e886b19bce69f0aaedf6ca82bad0ca29c61fb0ed86166efb84356942 *Oracle_VM_VirtualBox_Extension_Pack-6.1.14.vbox-extpack

Reference:

Sunday, August 16, 2020

How to make Microsoft Edge Chromium and Classis Edge run side by side

The Microsoft Edge Chromium is so good that you may not need to keep Classic Edge in your computer. But in case you need to keep both versions, here is a tip from https://geekermag.com/use-microsoft-edge-chromium-classic-edge-side-by-side/

Modify Window Registry using RegEdit to set this key to 1: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\EdgeUpdate
 

Make key EdgeUpdate if it does not exist.





Further reading:

Sunday, February 23, 2020

Cybersecurity Tips

* SLOW DOWN.
* Stop and Think.
* Don't click. Copy and paste a link into web browser.
* Research first.
* Lock your computer, cellphone when you're away.
* Backup before make any change, on daily, and weekly.
* Using KeePass or KeePassXC on Mac for password manager.
* 7-Zip or Keka for macOS file archiver
* Write it down. Pen and paper are good.
* Email with plain text mode.
* Airplane mode if not in use.
* Power off if not in use.
* Install only necessary app.
* Uninstall if no longer need.
* Use CerUtil or gpg to verify the integrity of downloaded file.
Before installing, you should always verify that your download matches
the signature that is published alongside the release package!
* Use Two-Factor Authentication (2FA) if provide.
* Keep it simple.

Friday, April 20, 2018

Tip: Using Visual Studio Code to reformat SQL script

Here is a no cost to reformat SQL script 


But, no capital keywords


Sunday, September 4, 2016

Cloud Computing

Cloud Computing today is a trend. Popular cloud computing are Amazon Web Services (AWS), Microsoft Azure, IBM Cloud, ... 

Cloud Computing like a private Local Area Network (LAN) on the internet. For most business, Cloud Computing is a cost effective. Instead of spend thousand dollars or more per month, they spend less. Instead of maintain a group of Information Technology (IT) professional, they may need only one. They don't need much of network engineer, network administrator.

So, first they are outsource software development. Then, outsource IT help desk. Now, companies outsource the IT infrastructure. 

The questions is:

  1. In which scenarios, moving to Cloud Computing is cost saving?
  2. How about security, privacy?