VirtualTam's bookmarks

181. Welcome | OWASP Python Security Project

     2018-05-17
     owasp programming/python security

     Permalink
182. How To Choose an Effective Firewall Policy to Secure your Servers | DigitalOcean

     2018-05-15
     linux network network/firewall policy security server

     Permalink
     • http://www.chiark.greenend.org.uk/%7Epeterb/network/drop-vs-reject
     • https://security.stackexchange.com/questions/22686/is-it-good-practice-to-manually-lock-down-ports-on-each-host
     • https://security.stackexchange.com/questions/22711/is-it-a-bad-idea-for-a-firewall-to-block-icmp/22713
     • https://serverfault.com/questions/84963/why-not-block-icmp/84981
183. Proxmox: Networking, Firewall, Security

     2018-05-15
     linux linux/debian network network/firewall network/router security virtualization/proxmox

     Permalink
     • https://pve.proxmox.com/wiki/Network_Configuration
     • https://pve.proxmox.com/wiki/Firewall
     • https://pve.proxmox.com/wiki/Fail2ban
     • https://forum.proxmox.com/threads/how-to-implement-fail2ban-on-host.3583/
     • https://forum.proxmox.com/forums/proxmox-ve-networking-and-firewall.17/
     • https://myatus.com/p/guide-firewall-and-router-with-proxmox-extending-its-us/
     • https://www.kiloroot.com/secure-proxmox-install-sudo-firewall-with-ipv6-and-more-how-to-configure-from-start-to-finish/
     • https://blog.waccabac.com/gestion-du-pare-feu-de-proxmox-ve-4/
184. Wladimir Palant's notes: Master password in Firefox or Thunderbird? Do not bother!

     2018-05-07
     internet/browser/firefox mozilla security security/password thunderbird

     Permalink
     • https://cynosureprime.blogspot.fr/2017/08/320-million-hashes-exposed.html
     • https://blog.codinghorror.com/hacker-hack-thyself/
     • https://www.microsoft.com/en-us/research/publication/a-large-scale-study-of-web-password-habits/
185. HTTPS Certificate Configuration (Version 4.x and newer) - Proxmox VE

     2018-05-04
     letsencrypt network/http network/transport-layer-security virtualization/proxmox

     Permalink
     • https://forum.proxmox.com/threads/let%E2%80%99s-encrypt-with-proxmox-ve.26842/
     • https://forum.proxmox.com/threads/certificate-startup-problems.25815/
186. mitmproxy - an interactive HTTPS proxy

     2018-05-02
     network network/http network/packet network/proxy programming/python security

     Permalink
     • https://github.com/mitmproxy/mitmproxy
     • https://docs.mitmproxy.org/stable/
     • https://github.com/ustwo/mastermind
187. Matrix and Riot confirmed as the basis for France’s Secure Instant Messenger app | Matrix.org

     2018-04-27
     france government instant-messaging web

     Permalink
188. Cilium: HTTP, gRPC, and Kafka Aware Security and Networking for Containers with BPF and XDP

     2018-04-24
     linux linux/container linux/container/docker linux/container/kubernetes linux/kernel/ebpf network programming/api route security

     Permalink
     • https://cilium.readthedocs.io/en/latest/gettingstarted/
     • http://docs.cilium.io/en/latest/bpf/
     • https://github.com/cilium/cilium
     • https://cilium.io/blog/2018/04/24/cilium-10/
189. Use multi-stage builds | Docker Documentation

     2018-04-15
     build linux/container linux/container/docker security

     Permalink
190. Docker - FreeIPA

     2018-04-05
     linux linux/centos linux/container/docker network/ldap security/authentication user

     Permalink
     • https://github.com/freeipa/freeipa-container
     • https://hub.docker.com/r/freeipa/freeipa-server/
     • https://www.adelton.com/docs/docker/complex-application-in-container
     • https://www.redhat.com/archives/freeipa-users/2017-March/msg00339.html
191. ansible-lockdown: Ansible playbook roles for security

     2018-04-05
     configuration-management/ansible linux linux/red-hat security

     Permalink
     • https://iase.disa.mil/stigs/os/unix-linux/Pages/index.aspx
     • https://www.cisecurity.org/cis-benchmarks/
192. Counter-alchemists: please stop transforming blockchain fever into IT boredom

     2018-03-27
     blockchain cryptography cryptography/hash data digital money security

     Permalink
193. tls - How do I use "openssl s_client" to test for (absence of) SSLv3 support?

     2018-03-07
     cryptography/certificate network/http network/transport-layer-security openssl web

     Permalink
     • https://www.madboa.com/geek/openssl/
     • https://major.io/2012/02/07/using-openssls-s_client-command-with-web-servers-using-server-name-indication- sni/
     • https://www.feistyduck.com/library/openssl-cookbook/online/ch-testing-with-openssl.html
194. On Securing the Kubernetes Dashboard

     2018-02-28
     linux linux/container linux/container/docker linux/container/kubernetes security security/authentication

     Permalink
     • https://blog.redlock.io/cryptojacking-tesla
     • https://github.com/kubernetes/dashboard
     • https://www.youtube.com/watch?v=od8TnIvuADg
     • https://schd.ws/hosted_files/kccncna17/d8/Hacking%20and%20Hardening%20Kubernetes%20By%20Example%20v2.pdf
195. We’re Opening X-Pack | Elastic

     2018-02-28
     observability/elastic security security/authentication

     Permalink
     • https://www.elastic.co/blog/heya-elastic-stack-and-x-pack
     • https://www.elastic.co/blog/doubling-down-on-open
     • https://twitter.com/bluxte/status/968675301499654144
     • https://www.elastic.co/blog/opening-x-pack-phase-1-complete
196. Weak cryptographic standards removal notice | GitHub Engineering

     2018-02-23
     cryptography/encryption network/http network/transport-layer-security security source-code-management/github

     Permalink
197. Google Cloud Platform Blog: 7 ways we harden our KVM hypervisor at Google Cloud: security in plaintext

     2018-02-20
     cloud-computing linux virtualization virtualization/kvm

     Permalink
198. xkcd: 2018 CVE List

     2018-02-19
     comics exploit parody security xkcd

     Permalink
199. Revue stratégique de cyberdéfense | Secrétariat général de la défense et de la sécurité nationale

     2018-02-15
     internet leak research/whitepaper security

     Permalink
     • http://www.sgdsn.gouv.fr/uploads/2018/02/20180206-np-revue-cyber-public-v3.3-publication.pdf
     • https://blog.lukaszolejnik.com/highlights-of-french-cybersecurity-strategy/
200. security - What is a retpoline and how does it work? - Stack Overflow

     2018-02-11
     linux linux/kernel meltdown security spectre

     Permalink
     • https://support.google.com/faqs/answer/7625886
     • https://git.kernel.org/pub/scm/linux/kernel/git/ak/linux-misc.git/commit/?h=spec/retpoline-415-1
     • https://lkml.org/lkml/2018/1/4/724