VirtualTam's bookmarks

81. Let's build a compiler 2019-11-08

    tags: grammar, parser, pascal, security/token, text

    [ permalink ]

    • https://compilers.iecc.com/crenshaw/
82. A look at Go lexer/scanner packages - Fatih Arslan 2019-11-07

    tags: data, grammar, parser, programming/go, security/token, text

    [ permalink ]

    • https://medium.com/@farslan/hcl-parser-family-in-pure-go-86589a5648fb
    • https://github.com/hashicorp/hcl/pull/45
83. hashcat - advanced password recovery 2019-11-04

    tags: cryptography/encryption, cryptography/hash, security, security/password

    [ permalink ]

    • https://hashcat.net/wiki/
    • https://github.com/hashcat/hashcat
84. Docker & UFW 2019-10-24

    tags: linux/container/docker, linux/iptables, network, security, ufw

    [ permalink ]

    • https://github.com/moby/moby#4737
    • https://github.com/docker/for-linux/issues/690
    • https://stackoverflow.com/questions/30383845/what-is-the-best-practice-of-docker-ufw-under-ubuntu
    • https://www.mkubaczyk.com/2017/09/05/force-docker-not-bypass-ufw-rules-ubuntu-16-04/
    • https://www.techrepublic.com/article/how-to-fix-the-docker-and-ufw-security-flaw/
    • https://www.linux.com/news/how-fix-docker-and-ufw-security-flaw/
    • https://svenv.nl/unixandlinux/dockerufw/
    • https://blog.viktorpetersson.com/2014/11/03/the-dangers-of-ufw-docker.html
    • https://news.ycombinator.com/item?id=27613217
85. ssh_scan: A prototype SSH configuration and policy scanner 2019-10-24

    tags: cipher, cryptography/elliptic-curve, cryptography/rsa, mozilla, network/ssh, security

    [ permalink ]

    • https://mozilla.github.io/ssh_scan/
86. GitLab Container Registry | GitLab 2019-10-21

    tags: continuous-integration, continuous-integration/continuous-delivery, linux/container/docker, registry, security/authentication, security/authorization, source-code-management/git, source-code-management/gitlab

    [ permalink ]

    • https://docs.gitlab.com/ce/administration/packages/container_registry.html
    • https://docs.docker.com/registry/deploying/
87. RFC 2222 - Simple Authentication and Security Layer (SASL) 2019-10-21

    tags: email, linux, network/ldap, network/smtp, security, security/authentication, unix

    [ permalink ]

    • https://en.wikipedia.org/wiki/Simple_Authentication_and_Security_Layer
    • https://tools.ietf.org/html/rfc2444
    • https://tools.ietf.org/html/rfc4422
    • https://tools.ietf.org/html/rfc4752
88. apt - Import the repository signing key behind a proxy - Ask Ubuntu 2019-10-16

    tags: cryptography/pgp, cryptography/pgp/gnupg, gpg, network/http, network/ldap, security

    [ permalink ]
89. ModSecurity: Open Source Web Application Firewall 2019-09-17

    tags: apache, network, network/http-server/apache-httpd, network/proxy, security, web

    [ permalink ]

    • https://github.com/SpiderLabs/ModSecurity
    • https://www.digitalocean.com/community/tutorials/how-to-set-up-mod_security-with-apache-on-debian-ubuntu
90. NAXSI - an open-source, high performance, low rules maintenance WAF for NGINX 2019-09-17

    tags: linux/kernel, network, network/http, network/http-server/nginx, network/proxy, security

    [ permalink ]

    • https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-naxsi-on-ubuntu-14-04
91. Pomerium, a standardized interface to add access control whether an application itself has authorization or authentication baked-in 2019-09-16

    tags: network/http, network/proxy, programming/api, security, security/authentication, user, web

    [ permalink ]

    • https://github.com/pomerium/pomerium
92. ubuntu - Is it possible to use Ansible authorized_key exclusive with multiple keys? - Stack Overflow 2019-09-08

    tags: configuration-management/ansible, cryptography/public-key-infrastructure, network/ssh, security, security/authentication

    [ permalink ]

    • https://docs.ansible.com/ansible/latest/modules/authorized_key_module.html
    • https://github.com/ansible/ansible-modules-core/commit/6f6d7f5c18296e3fe84fa5aef674948753ff52ae
    • https://github.com/ansible/ansible/issues/11347
93. trailscraper: A command-line tool to get valuable information out of AWS CloudTrail 2019-08-08

    tags: cloud-computing/aws, observability/logging, programming/python, security, user

    [ permalink ]
94. AWS Tutorial: Enable Your Users to Configure Their Own Credentials and MFA Settings - Identity and Access Management 2019-08-08

    tags: cloud-computing/aws, programming/api, security, security/authentication, security/authorization, user

    [ permalink ]

    • https://aws.amazon.com/blogs/security/how-to-delegate-management-of-multi-factor-authentication-to-aws-iam-users/
    • https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_aws_my-sec-creds-self-manage.html
    • https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html
95. testssl.sh: Testing TLS/SSL encryption anywhere on any port 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/shell/bash, web

    [ permalink ]
96. ssllabs-scan: A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing. 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/go

    [ permalink ]
97. The GNU Privacy Handbook - Key Management - Subkeys 2019-07-30

    tags: cryptography/pgp, cryptography/pgp/gnupg, source-code-management/git

    [ permalink ]

    • What exactly is a subkey?
    • Improve the Security of Your OpenPGP Key by Using Subkeys
    • PGP - Why have separate encryption subkey
    • Using OpenPGP subkeys in Debian development
    • PSA: want to use a new subkey to sign your commits?
98. FreeIPA Installation du serveur et de son réplica | Worteks 2019-07-25

    tags: kerberos, network/ldap, samba, security/authentication, security/authorization, user

    [ permalink ]

    • https://www.worteks.com/fr/2018/03/29/freeipa-part1/
    • https://www.worteks.com/fr/2018/04/16/freeipa-partie-2-clients-hbac-sudo-mots-de-passe/
    • https://www.worteks.com/fr/2018/05/07/freeipa-partie-3-haute-disponibilite-automount/
    • https://www.worteks.com/fr/2019/05/23/freeipa-partie-4-seconds-facteurs-dauthentification/
99. How do you achieve fully centralized, unified user management with true SSO? : selfhosted 2019-07-22

    tags: network/ldap, security/authentication, security/authorization, self-hosting, single-sign-on, user

    [ permalink ]
100. Federation with Keycloak and FreeIPA - Red Hat Customer Portal 2019-07-22

     tags: network/ldap, red-hat, security/authentication, security/authorization, single-sign-on, user

     [ permalink ]