VirtualTam's bookmarks

41. Debugging Certificate Errors 2023-02-18

    tags: cryptography/certificate, curl, network/http, network/transport-layer-security, openssl

    [ permalink ]

    • https://www.netmeister.org/whatsthatcert/
42. badssl.com - Memorable site for testing clients against bad SSL configs 2023-02-18

    tags: cryptography/certificate, internet/browser/chrome, network/http, network/transport-layer-security

    [ permalink ]

    • https://github.com/chromium/badssl.com
43. Fake Dog for Home Security 2022-12-15

    tags: diy, dog, internet-of-things, security, sensor

    [ permalink ]

    • https://news.ycombinator.com/item?id=32250487
44. LWN - Identity management for WireGuard 2022-12-14

    tags: network/vpn/wireguard, security, security/authentication, security/authorization, security/oauth, security/openid

    [ permalink ]
45. Signing Git Commits with Your SSH Key 2022-09-15

    tags: network/ssh, security, source-code-management/git

    [ permalink ]
46. Cloudflare Research | OPAQUE: An Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks 2022-07-12

    tags: cloud-computing/cloudflare, cryptography/encryption, security/authentication, security/password

    [ permalink ]

    • https://blog.cloudflare.com/opaque-oblivious-passwords/
    • OPAQUE: An Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks
    • https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-opaque
    • https://blog.cryptographyengineering.com/2018/10/19/lets-talk-about-pake/
47. authentik - an open-source Identity Provider focused on flexibility and versatility 2022-07-12

    tags: configuration-management/terraform, identity, programming/go, programming/python, security/authentication, security/authorization

    [ permalink ]

    • https://github.com/goauthentik/authentik
    • https://github.com/goauthentik/terraform-provider-authentik
48. lldap: Light LDAP implementation 2022-07-12

    tags: network/ldap, programming/rust, security/authentication, security/authorization

    [ permalink ]
49. How can I run ssh-add automatically, without a password prompt? 2022-06-28

    tags: command-line, network/ssh, security/authentication

    [ permalink ]

    • https://www.openssh.com/txt/release-7.2
    • https://unix.stackexchange.com/questions/269121/openssh-have-ssh-add-keys-to-agent-as-needed

    Host blah
    AddKeysToAgent yes
    ForwardAgent   yes
    

50. TLS Expiry and Uptime Monitor for URLs - Prometheus Blackbox | Grafana 2022-05-01

    tags: network/transport-layer-security, observability/grafana, observability/time-series/prometheus

    [ permalink ]

    • https://prometheus.io/docs/guides/multi-target-exporter/
    • https://github.com/prometheus/blackbox_exporter/blob/master/example.yml
51. NanoID: A tiny (130 bytes), secure, URL-friendly, unique string ID generator for JavaScript 2022-04-03

    tags: database, programming/api, programming/go, programming/javascript, security/authentication

    [ permalink ]

    • https://zelark.github.io/nano-id-cc/
    • https://github.com/matoous/go-nanoid
    • https://planetscale.com/blog/why-we-chose-nanoids-for-planetscales-api
52. OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs | DigitalOcean 2022-02-24

    tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

    [ permalink ]
53. PASETO - Platform-Agnostic SEcurity TOkens 2022-02-21

    tags: cryptography, network/http, security, security/authentication

    [ permalink ]

    • https://github.com/paragonie/paseto
    • https://github.com/paseto-standard/paseto-rfc
    • https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid
54. YARA - The pattern matching swiss knife for malware researchers 2022-02-19

    tags: binary, malware, security

    [ permalink ]

    • https://github.com/virustotal/yara
    • https://yara-rules.github.io/blog/
    • https://github.com/Yara-Rules
55. Casdoor - An Identity and Access Management / Single-Sign-On platform with web UI supporting OAuth 2.0 / OIDC and SAML authentication 2022-01-31

    tags: security/authentication, security/oauth, single-sign-on

    [ permalink ]

    • https://github.com/casdoor/casdoor
56. The curious case of the Raspberry Pi in the network closet 2022-01-30

    tags: datacenter, network, network/wireless/wifi, raspberry-pi, security

    [ permalink ]
57. Cloud Hypervisor - Run Cloud Virtual Machines Securely and Efficiently 2022-01-24

    tags: intel, linux, microsoft, programming/rust, virtualization/kvm

    [ permalink ]

    • https://github.com/cloud-hypervisor/cloud-hypervisor
    • https://www.linuxfoundation.org/press-release/linux-foundation-to-host-the-cloud-hypervisor-project-creating-a-performant-lightweight-virtual-machine-monitor-for-modern-cloud-workloads/
58. serverfault - What are the canonical answers we've discovered over the years? 2021-11-20

    tags: datacenter, linux, network, security, server, sysadmin

    [ permalink ]
59. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch 2021-11-14

    tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/tcp, network/transport-layer-security, observability/elastic/elasticsearch

    [ permalink ]
60. glauth - a lightweight LDAP server for development, home use, or CI 2021-10-19

    tags: network/ldap, programming/go, security/authentication, security/authorization

    [ permalink ]

    • https://github.com/sonicnkt/glauth-ui