VirtualTam's bookmarks

41. OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs | DigitalOcean 2022-02-24

    tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

    [ permalink ]
42. PASETO - Platform-Agnostic SEcurity TOkens 2022-02-21

    tags: cryptography, network/http, security, security/authentication

    [ permalink ]

    • https://github.com/paragonie/paseto
    • https://github.com/paseto-standard/paseto-rfc
    • https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid
43. YARA - The pattern matching swiss knife for malware researchers 2022-02-19

    tags: binary, malware, security

    [ permalink ]

    • https://github.com/virustotal/yara
    • https://yara-rules.github.io/blog/
    • https://github.com/Yara-Rules
44. Casdoor - An Identity and Access Management / Single-Sign-On platform with web UI supporting OAuth 2.0 / OIDC and SAML authentication 2022-01-31

    tags: security/authentication, security/oauth, single-sign-on

    [ permalink ]

    • https://github.com/casdoor/casdoor
45. The curious case of the Raspberry Pi in the network closet 2022-01-30

    tags: datacenter, network, raspberry-pi, security, wifi

    [ permalink ]
46. Cloud Hypervisor - Run Cloud Virtual Machines Securely and Efficiently 2022-01-24

    tags: intel, linux, microsoft, programming/rust, virtualization/kvm

    [ permalink ]

    • https://github.com/cloud-hypervisor/cloud-hypervisor
    • https://www.linuxfoundation.org/press-release/linux-foundation-to-host-the-cloud-hypervisor-project-creating-a-performant-lightweight-virtual-machine-monitor-for-modern-cloud-workloads/
47. serverfault - What are the canonical answers we've discovered over the years? 2021-11-20

    tags: datacenter, linux, network, security, server, sysadmin

    [ permalink ]
48. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch 2021-11-14

    tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/tcp, network/transport-layer-security, observability/elastic/elasticsearch

    [ permalink ]
49. glauth - a lightweight LDAP server for development, home use, or CI 2021-10-19

    tags: network/ldap, programming/go, security/authentication, security/authorization

    [ permalink ]

    • https://github.com/sonicnkt/glauth-ui
50. Terraform code quality - CloudSkiff 2021-08-21

    tags: cloud, configuration-management/terraform, infrastructure/automation, security

    [ permalink ]

    • https://github.com/tfutils
    • https://github.com/terraform-linters
    • https://terraform-compliance.com/
    • https://github.com/aquasecurity/tfsec
51. Dropbear SSH - a relatively small SSH server and client 2021-08-08

    tags: network/ssh, programming/c, security/authentication

    [ permalink ]

    • https://github.com/mkj/dropbear
    • https://www.cyberciti.biz/security/how-to-unlock-luks-using-dropbear-ssh-keys-remotely-in-linux/
    • Dropbear SSH closing connection when attempting to connect as non root user
52. Crypto Museum 2021-05-23

    tags: cryptography, device, history, museum, security

    [ permalink ]
53. Home Assistant, Pwned Passwords and Security Misconceptions 2021-03-12

    tags: internet-of-things, network/http, security, security/password

    [ permalink ]
54. 389ds in containers 2021-01-20

    tags: linux/container/docker, network/ldap, security/authentication, security/authorization

    [ permalink ]

    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_1_foundations.html
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_2_searching.html
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_3_filters.html
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_4_schema_and_objects.html
    • https://github.com/389ds/389-ds-base/blob/master/docker/389-ds-fedora/Dockerfile
55. FusionDirectory — a solution to daily management of data stored in an LDAP directory 2021-01-20

    tags: linux/container/docker, network/ldap, security/authentication, security/authorization

    [ permalink ]

    • https://github.com/tiredofit/docker-fusiondirectory
    • https://hub.docker.com/r/tiredofit/fusiondirectory
56. Storing hashes: bcrypt, pbkdf2, sha256-crypt, sha512-crypt 2021-01-03

    tags: cryptography, cryptography/hash, cryptography/hash/bcrypt, cryptography/hash/pbkdf2, cryptography/hash/sha, security/password

    [ permalink ]

    • https://security.stackexchange.com/questions/4781/do-any-security-experts-recommend-bcrypt-for-password-storage
    • https://security.stackexchange.com/questions/17421/how-to-store-salt
    • https://codahale.com/how-to-safely-store-a-password/
    • https://security.stackexchange.com/questions/133239/what-is-the-specific-reason-to-prefer-bcrypt-or-pbkdf2-over-sha256-crypt-in-pass
    • https://security.stackexchange.com/questions/211/how-to-securely-hash-passwords/31846
57. Kubernetes basic authentication with Traefik - Stack Overflow 2020-12-21

    tags: linux/container/kubernetes, network, network/http, network/reverse-proxy, security/authentication

    [ permalink ]
58. Open Distro for Elasticsearch | Open Distro 2020-12-20

    tags: cloud, cloud/aws, machine-learning, observability/elastic/elasticsearch, observability/logging, observability/tracing, programming/java, security/authentication, security/authorization

    [ permalink ]

    • https://github.com/opendistro-for-elasticsearch
    • https://aws.amazon.com/blogs/aws/new-open-distro-for-elasticsearch/
    • https://opendistro.github.io/for-elasticsearch/blog/releases/2020/12/announcing-trace-analytics/
    • https://logz.io/blog/open-distro-for-elasticsearch/
59. Enhanced SSL Load Balancing with Server Name Indication (SNI) TLS Extension - HAProxy Technologies 2020-12-11

    tags: network/dns, network/http-server/haproxy, network/reverse-proxy, network/server-name-indication, network/tcp, network/transport-layer-security

    [ permalink ]

    • https://discourse.haproxy.org/t/req-ssl-sni-and-ssl-termination/2139/3
    • com/@olivier.ragain/haproxy-https-load-balancing-on-sni-207c17398d19
60. X.509 v3 Certificates | Learn mTLS the Hard Way 2020-09-08

    tags: cryptography/certificate, cryptography/encryption, network/transport-layer-security, openssl, security

    [ permalink ]