VirtualTam's bookmarks

221. Selfhosted Alternative to Mxtoolbox.com? : selfhosted 2017-08-24

     tags: email, linux, network, network/dns, security, sysadmin

     [ permalink ]

     • https://github.com/heximcz/mxtoolbox
     • https://github.com/p410n3/scananyweb.site
222. Netflix/stethoscope: Personalized, user-focused recommendations for employee information security. 2017-08-22

     tags: device, framework/flask, framework/react, hardware, programming/javascript, programming/python, security

     [ permalink ]

     • http://techblog.netflix.com/2017/02/introducing-netflix-stethoscope.html
     • https://stethoscope.readthedocs.org/
223. Apache Tomcat 8 Configuration Reference (8.0.45) - The AJP Connector 2017-08-16

     tags: apache, network/http, network/http-server/apache-httpd, network/proxy, network/transport-layer-security, programming/java, tomcat, web

     [ permalink ]

     • https://stackoverflow.com/questions/23931987/apache-proxy-no-protocol-handler-was-valid
     • https://serverfault.com/questions/746810/enforcing-client-verification-in-apache-just-for-a-specific-client-certificate
     • https://httpd.apache.org/docs/2.4/mod/mod_ssl.html
     • https://serverfault.com/questions/639317/ah01896-unable-to-determine-list-of-acceptable-ca-certificates-for-client-authe#842857
     • http://www.zeitoun.net/articles/configure-mod_proxy_ajp-with-tomcat/start
     • https://wiki.apache.org/tomcat/FAQ/Connectors
     • https://serverfault.com/questions/785652/how-do-i-configure-apache-to-proxy-tomcat-using-ajp
224. Sshguard 2017-08-08

     tags: ban, linux, network/ssh, observability/logging, security, system

     [ permalink ]
225. My $169 development Chromebook 2017-07-28

     tags: cheap, internet/browser/chrome, laptop, linux, operating-system, privacy, security

     [ permalink ]
226. Alpine Linux Part 1 of 2 | Discovery to Code Execution 2017-07-18

     tags: alpine, exploit, linux, memory, pentest, security

     [ permalink ]

     • https://www.twistlock.com/2017/07/13/alpine-linux-pt-2-twistlock-security-alert/
     • https://www.reddit.com/r/linux/comments/6ntkvb/alpine_linux_exploitation/
227. Planning out my self-host setup for my 2.5TB of data - would love critique! : selfhosted 2017-07-13

     tags: cloud, data, linux, linux/container, linux/container/docker, network/http, network/transport-layer-security, self-hosting, virtualization/proxmox

     [ permalink ]
228. CentOS 7.0 - man page for update-ca-trust (centos section 8) - Unix & Linux Commands 2017-06-30

     tags: cryptography/certificate, linux, linux/centos, linux/red-hat, network/transport-layer-security

     [ permalink ]
229. Ansible setup mysql root password - Stack Overflow 2017-06-26

     tags: configuration-management/ansible, database/mysql, security/password

     [ permalink ]

     • https://docs.ansible.com/ansible/mysql_user_module.html
     • https://docs.ansible.com/ansible/ini_file_module.html
230. Guide to the Secure Configuration of Debian 8 | OpenSCAP Security Guide 2017-06-16

     tags: configuration-management/ansible, linux, linux/debian, linux/red-hat, openscap, scap, security

     [ permalink ]

     • https://wiki.debian.org/SCAPGuide
     • https://wiki.debian.org/UsingSCAP
     • https://packages.debian.org/source/jessie/openscap
     • https://clasohm.com/wp/2016/08/16/linux-security-hardening-with-openscap-and-ansible/
     • https://github.com/OpenSCAP/scap-security-guide
231. certificate - What is a Pem file and how does it differ from other OpenSSL Generated Key File Formats? - Server Fault 2017-06-16

     tags: cryptography/certificate, cryptography/public-key-infrastructure, format, key, network/transport-layer-security, openssl, security

     [ permalink ]

     YO DAWG! I SAW YOU LIKE STANDARDS...

232. Ivan Ristić: Deploying Forward Secrecy 2017-06-16

     tags: cryptography, cryptography/encryption, diffie, hellman, network/transport-layer-security, privacy, security

     [ permalink ]

     • https://wiki.openssl.org/index.php/Diffie_Hellman
     • https://wiki.openssl.org/index.php/Diffie-Hellman_parameters
     • https://wiki.openssl.org/index.php/Manual:Dhparam(1)
     • https://security.stackexchange.com/questions/94390/whats-the-purpose-of-dh-parameters
     • https://en.wikipedia.org/wiki/Forward_secrecy
233. cryptography - XKCD #936: Short complex password, or long dictionary passphrase? - Information Security Stack Exchange 2017-06-02

     tags: comics, cryptography, security/authentication, security/password, strength, xkcd

     [ permalink ]
234. Michal Kosinski: The End of Privacy | Stanford Graduate School of Business 2017-05-29

     tags: data, machine-learning, privacy, security

     [ permalink ]

     • https://www.gsb.stanford.edu/insights/michal-kosinski-ai-already-smarter-we-are
     • https://www.gsb.stanford.edu/insights/michal-kosinski-can-we-out-evolve-artificial-intelligence
235. Build a CRUD Web App With Python and Flask ― Scotch 2017-05-23

     tags: bootstrap, database, framework/flask, programming/css, programming/html, programming/python, programming/sql, security/authentication, tutorial, web, wsgi

     [ permalink ]

     Part 1 - https://scotch.io/tutorials/build-a-crud-web-app-with-python-and-flask-part-one

     • https://github.com/mbithenzomo/project-dream-team-one
     • http://flask.pocoo.org/docs/0.12/config/
     • http://flask.pocoo.org/docs/0.12/patterns/appfactories/
     • http://flask.pocoo.org/docs/0.12/blueprints/
     • http://flask-sqlalchemy.pocoo.org/2.2/config/

     Part 2 - https://scotch.io/tutorials/build-a-crud-web-app-with-python-and-flask-part-two

     • https://github.com/mbithenzomo/project-dream-team-two

     Part 3 - https://scotch.io/tutorials/build-a-crud-web-app-with-python-and-flask-part-three

     • https://github.com/mbithenzomo/project-dream-team-three
236. appsec - How to securely hash passwords? - Information Security Stack Exchange 2017-05-15

     tags: cryptography/hash, cryptography/salt, database, security, security/password

     [ permalink ]
237. cryptography - Do any security experts recommend bcrypt for password storage? - Information Security Stack Exchange 2017-05-15

     tags: cipher, cryptography/hash, cryptography/hash/bcrypt, security, security/password

     [ permalink ]
238. Simulating the Internet Using Unprivileged LXC Container 2017-05-11

     tags: crowd, internet, linux, linux/container, linux/container/lxc, security

     [ permalink ]

     • https://github.com/nsec/the-internet
     • https://www.nsec.io/
239. Publicly Available Spam Filter Training Sets 2017-05-05

     tags: bayesian-filter, dataset, email, email/spam, machine-learning, spamassassin

     [ permalink ]

     • http://www.paulgraham.com/spamarchives.html
     • http://untroubled.org/spam/
     • https://spamassassin.apache.org/old/publiccorpus/
     • https://github.com/dmitrynogin/SpamAssassin
     • http://archive.ics.uci.edu/ml/datasets/Spambase + http://statweb.stanford.edu/~tibs/ElemStatLearn/
     • https://inclass.kaggle.com/c/adcg-ss14-challenge-02-spam-mails-detection
     • https://www.kaggle.com/rtatman/fraudulent-email-corpus
     • https://www.kaggle.com/veleon/ham-and-spam-dataset
     • https://www.kaggle.com/beatoa/spamassassin-public-corpus
     • http://www.csmining.org/index.php/spam-assassin-datasets.html
     • http://artinvoice.hu/spams/
     • http://www2.aueb.gr/users/ion/data/enron-spam/
     • https://security.stackexchange.com/questions/223731/spamassassin-public-corpus
240. ssl - How can I generate a self-signed certificate with SubjectAltName using OpenSSL? - Stack Overflow 2017-04-25

     tags: cryptography/certificate, network/dns, network/transport-layer-security, openssl

     [ permalink ]

     via https://github.com/chef-cookbooks/openssl/issues/37