VirtualTam's bookmarks

241. Guide to the Secure Configuration of Debian 8 | OpenSCAP Security Guide 2017-06-16

     tags: configuration-management/ansible, linux, linux/debian, linux/red-hat, openscap, scap, security

     [ permalink ]

     • https://wiki.debian.org/SCAPGuide
     • https://wiki.debian.org/UsingSCAP
     • https://packages.debian.org/source/jessie/openscap
     • https://clasohm.com/wp/2016/08/16/linux-security-hardening-with-openscap-and-ansible/
     • https://github.com/OpenSCAP/scap-security-guide
242. certificate - What is a Pem file and how does it differ from other OpenSSL Generated Key File Formats? - Server Fault 2017-06-16

     tags: cryptography/certificate, cryptography/public-key-infrastructure, format, key, network/transport-layer-security, openssl, security

     [ permalink ]

     YO DAWG! I SAW YOU LIKE STANDARDS...

243. Ivan Ristić: Deploying Forward Secrecy 2017-06-16

     tags: cryptography, cryptography/encryption, network/transport-layer-security, privacy, security

     [ permalink ]

     • https://wiki.openssl.org/index.php/Diffie_Hellman
     • https://wiki.openssl.org/index.php/Diffie-Hellman_parameters
     • https://wiki.openssl.org/index.php/Manual:Dhparam(1)
     • https://security.stackexchange.com/questions/94390/whats-the-purpose-of-dh-parameters
     • https://en.wikipedia.org/wiki/Forward_secrecy
244. cryptography - XKCD #936: Short complex password, or long dictionary passphrase? - Information Security Stack Exchange 2017-06-02

     tags: comics, cryptography, security/authentication, security/password, strength, xkcd

     [ permalink ]
245. Michal Kosinski: The End of Privacy | Stanford Graduate School of Business 2017-05-29

     tags: data, machine-learning, privacy, security

     [ permalink ]

     • https://www.gsb.stanford.edu/insights/michal-kosinski-ai-already-smarter-we-are
     • https://www.gsb.stanford.edu/insights/michal-kosinski-can-we-out-evolve-artificial-intelligence
246. Build a CRUD Web App With Python and Flask ― Scotch 2017-05-23

     tags: bootstrap, database, framework/flask, programming/css, programming/html, programming/python, programming/sql, security/authentication, tutorial, web, wsgi

     [ permalink ]

     Part 1 - https://scotch.io/tutorials/build-a-crud-web-app-with-python-and-flask-part-one

     • https://github.com/mbithenzomo/project-dream-team-one
     • http://flask.pocoo.org/docs/0.12/config/
     • http://flask.pocoo.org/docs/0.12/patterns/appfactories/
     • http://flask.pocoo.org/docs/0.12/blueprints/
     • http://flask-sqlalchemy.pocoo.org/2.2/config/

     Part 2 - https://scotch.io/tutorials/build-a-crud-web-app-with-python-and-flask-part-two

     • https://github.com/mbithenzomo/project-dream-team-two

     Part 3 - https://scotch.io/tutorials/build-a-crud-web-app-with-python-and-flask-part-three

     • https://github.com/mbithenzomo/project-dream-team-three
247. appsec - How to securely hash passwords? - Information Security Stack Exchange 2017-05-15

     tags: cryptography/hash, cryptography/salt, database, security, security/password

     [ permalink ]
248. cryptography - Do any security experts recommend bcrypt for password storage? - Information Security Stack Exchange 2017-05-15

     tags: cipher, cryptography/hash, cryptography/hash/bcrypt, security, security/password

     [ permalink ]
249. Simulating the Internet Using Unprivileged LXC Container 2017-05-11

     tags: crowd, internet, linux, linux/container, linux/container/lxc, security

     [ permalink ]

     • https://github.com/nsec/the-internet
     • https://www.nsec.io/
250. Publicly Available Spam Filter Training Sets 2017-05-05

     tags: bayesian-filter, dataset, email, email/spam, machine-learning, spamassassin

     [ permalink ]

     • http://www.paulgraham.com/spamarchives.html
     • http://untroubled.org/spam/
     • https://spamassassin.apache.org/old/publiccorpus/
     • https://github.com/dmitrynogin/SpamAssassin
     • http://archive.ics.uci.edu/ml/datasets/Spambase + http://statweb.stanford.edu/~tibs/ElemStatLearn/
     • https://inclass.kaggle.com/c/adcg-ss14-challenge-02-spam-mails-detection
     • https://www.kaggle.com/rtatman/fraudulent-email-corpus
     • https://www.kaggle.com/veleon/ham-and-spam-dataset
     • https://www.kaggle.com/beatoa/spamassassin-public-corpus
     • http://www.csmining.org/index.php/spam-assassin-datasets.html
     • http://artinvoice.hu/spams/
     • http://www2.aueb.gr/users/ion/data/enron-spam/
     • https://security.stackexchange.com/questions/223731/spamassassin-public-corpus
251. ssl - How can I generate a self-signed certificate with SubjectAltName using OpenSSL? - Stack Overflow 2017-04-25

     tags: cryptography/certificate, network/dns, network/transport-layer-security, openssl

     [ permalink ]

     via https://github.com/chef-cookbooks/openssl/issues/37

252. security - How can I reduce the verbosity of certain Ansible tasks to not leak passwords into syslog? - Server Fault 2017-04-22

     tags: configuration-management/ansible, linux, observability/logging, security/password

     [ permalink ]
253. Configure SPF and DKIM in Postfix on Debian 8 2017-04-21

     tags: email, email/dkim, email/postfix, email/spam, email/spf, linux, linux/debian, security/authentication

     [ permalink ]

     DKIM

     • https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail
     • https://wiki.debian.org/opendkim
     • https://help.ubuntu.com/community/Postfix/DKIM

     SPF

     • https://en.wikipedia.org/wiki/Sender_Policy_Framework
     • https://help.ubuntu.com/community/Postfix/SPF

     DMARC

     • https://en.wikipedia.org/wiki/DMARC
     • https://www.skelleton.net/2015/03/21/how-to-eliminate-spam-and-protect-your-name-with-dmarc/
     • https://incenp.org/notes/2016/postfix-policydspf-opendmarc.html
254. Nmap 6 Cookbook: Nmap Cheat Sheet 2017-04-21

     tags: linux, network, network/nmap, performance, port

     [ permalink ]

     • https://security.stackexchange.com/questions/36198/how-to-find-live-hosts-on-my-network
     • https://serverfault.com/questions/376894/how-to-scan-local-network-for-ssh-able-computers
     • https://www.redhat.com/sysadmin/quick-nmap-inventory
255. Scalable and secure access with SSH | Engineering Blog | Facebook Code | Facebook 2017-04-21

     tags: cryptography/certificate, network/ssh, security/authentication

     [ permalink ]
256. GuiGui's show » Comment mettre en place un serveur DNS récursif-cache ouvert dans de bonnes conditions 2017-04-19

     tags: linux, memory/cache, network, network/dns, security, sysadmin

     [ permalink ]
257. Configure HAProxy to Load Balance Sites With SSL 2017-04-04

     tags: network, network/http, network/proxy, network/reverse-proxy/haproxy, network/tcp, network/transport-layer-security

     [ permalink ]
258. micheloosterhof/cowrie: Cowrie SSH/Telnet Honeypot 2017-04-04

     tags: honeypot, security, server

     [ permalink ]
259. SSL/TLS Strong Encryption: How-To - Apache HTTP Server Version 2.4 2017-03-29

     tags: apache, network/http, network/http-server/apache-httpd, network/transport-layer-security

     [ permalink ]
260. future-architect/vuls: Vulnerability scanner for Linux/FreeBSD, agentless, written in Go 2017-03-27

     tags: bsd/freebsd, linux, security

     [ permalink ]

     via https://www.federacy.com/docker_image_vulnerabilities