VirtualTam's bookmarks

281. Shoreline Firewall 2016-12-01

     tags: linux, network, network/firewall, network/ip, route, security

     [ permalink ]

     • http://www.shorewall.net/two-interface.htm
     • http://www.shorewall.net/manpages/shorewall-snat.html
     • https://wiki.debian.org/HowTo/shorewall
282. 389 Directory Server 2016-12-01

     tags: 389-ds, directory, linux, linux/centos, linux/fedora, linux/red-hat, network/ldap, security/authentication

     [ permalink ]

     • https://www.linux.com/learn/simplify-ldap-fedoras-389-directory-server
     • https://www.rockstable.org/389-ds
     • https://github.com/jtgasper3/docker-images/tree/master/389-ds

     Administration WebApps:

     • http://directory.fedoraproject.org/docs/389ds/administration/webapps-install.html
     • http://directory.fedoraproject.org/docs/389ds/administration/dsgw.html
     • http://directory.fedoraproject.org/docs/389ds/administration/orgchart.html

     Install guides:

     • http://www.unixmen.com/install-and-configure-ldap-server-in-centos-7/
     • http://www.unixmen.com/manage-389-directory-server-graphically-using-389-management-console/
     • http://jensd.be/125/linux/rhel/install-mate-or-xfce-on-centos-7
     • http://unix.stackexchange.com/questions/181503/how-to-install-desktop-environments-on-centos-7
283. OPNsense® - Open Source Firewall - High-end Security Made Easy™ 2016-10-28

     tags: bsd/freebsd, linux, network, network/firewall, programming/c, programming/php

     [ permalink ]

     • opnsense
     • opnsense/core
     • opnsense/plugins
     • Architecture
     • About the Fork
284. Secure Your Containers with this One Weird Trick – Red Hat Enterprise Linux Blog 2016-10-19

     tags: capabilities, linux, linux/container, linux/container/docker, root, security

     [ permalink ]

     Docker allows dropping the root account's Linux capabilities

     • http://man7.org/linux/man-pages/man7/capabilities.7.html
     • https://www.kernel.org/pub/linux/libs/security/linux-privs/kernel-2.2/capfaq-0.2.txt
285. OpenSSL Command-Line HOWTO 2016-10-18

     tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

     [ permalink ]
286. EPIC - Electronic Privacy Information Center 2016-08-21

     tags: communication, data, digital, internet, privacy, security

     [ permalink ]

     via https://www.schneier.com/

287. UK Government - Digital Service Standard 2016-08-16

     tags: continuous-integration, dependency, development, digital, open, qa, quality, software, source

     [ permalink ]

     1. Understand user needs
     2. Do ongoing user research
     3. Have a multidisciplinary team
     4. Use agile methods
     5. Iterate and improve frequently
     6. Evaluate tools and systems
     7. Understand security and privacy issues
     8. Make all new source code open
     9. Use open standards and common platforms
     10. Test the end-to-end service
     11. Make a plan for being offline
     12. Make sure users succeed first time
     13. Make the user experience consistent with GOV.UK
     14. Encourage everyone to use the digital service
     15. Collect performance data
     16. Identify performance indicators
     17. Report performance data on the Performance Platform
     18. Test with the minister
288. The International Obfuscated C Code Contest 2016-08-09

     tags: code, development, hack, linux, programming/c, security/obfuscation

     [ permalink ]
289. SATAN | Just found this gem amongst some old books in our office 2016-08-05

     tags: acronym, network, observability, pun, santa, satan, security, sysadmin

     [ permalink ]

     "The price for securing your network is eternal vigilance and also your soul." "Whose soul? We're sysadmins." "Oh, right. End users. Hang on, I have a jar of them under my desk. Let me get one out for you."

290. How To Create an SSH CA to Validate Hosts and Clients with Ubuntu | DigitalOcean 2016-05-26

     tags: client, cryptography/certificate, cryptography/certificate-authority, network/ssh, security/authentication, server, sysadmin

     [ permalink ]
291. Survive The Deep End: PHP Security 2016-04-09

     tags: development, network/transport-layer-security, programming/php, security, server, web

     [ permalink ]
292. Authentication Cheat Sheet - OWASP 2016-01-12

     tags: guidelines, owasp, security, security/authentication, security/password, web

     [ permalink ]
293. SSH with authentication key instead of password 2016-01-07

     tags: linux, linux/debian, network, network/ssh, security/authentication, security/password, sysadmin, unix

     [ permalink ]
294. IonicaBizau/cli-github · GitHub 2015-09-09

     tags: command-line, console, programming/node.js, security/oauth, source-code-management/git, source-code-management/github, terminal

     [ permalink ]

     A fancy GitHub client for command line.

     via http://ionicabizau.net/blog/15

295. HTML Purifier - Filter your HTML the standards-compliant way! 2015-09-02

     tags: code, programming/html, security, web, xss

     [ permalink ]
296. Mailvelope - OpenPGP encryption for webmails 2015-08-27

     tags: cryptography/encryption, cryptography/pgp, email, gpg, message, privacy, security

     [ permalink ]
297. agilob in the Net | Better security, privacy and anonymity in Firefox 2015-08-04

     tags: internet/browser, internet/browser/firefox, security, web

     [ permalink ]
298. PHP security checklist | sk89q 2015-08-04

     tags: programming/php, programming/script, security, security/authentication, server, session

     [ permalink ]
299. sslh - Applicative Protocol Multiplexer 2015-08-02

     tags: multiplexer, network, network/http, network/ssh, network/transport-layer-security, protocol

     [ permalink ]

     "blocking an SSH port for a Linux user is like taking a mouse away from a Windows user"

     via http://www.linuxjournal.com/content/one-port-rule-them-all via http://www.rutschle.net/tech/sslh.shtml

300. [tor-talk] Why the Web of Trust Sucks 2015-08-02

     tags: cryptography/pgp, gpg, key, network/tor, security/identification, signature, trust, web

     [ permalink ]