VirtualTam's bookmarks

101. gVisor - OCI-compatible sandbox runtime that provides a virtualized container environment 2019-04-15

     tags: linux, linux/container, linux/kernel, security, userspace

     [ permalink ]

     • https://github.com/google/gvisor
     • https://cloud.google.com/blog/products/gcp/open-sourcing-gvisor-a-sandboxed-container-runtime
102. Dr. Xu Zhongxing's speech: Fuchsia OS Introduction Complete Record and Slide Download 2019-03-26

     tags: fuchsia, google, linux/container, operating-system, security

     [ permalink ]

     • https://github.com/xuzhongxing/fuchsia-notes
103. Vuls · Agentless Vulnerability Scanner for Linux/FreeBSD 2019-03-22

     tags: programming/testing, security, sysadmin

     [ permalink ]

     • https://github.com/future-architect/vuls
104. Go repository structure templates 2019-03-13

     tags: database, network/http, programming/go, security/authentication, source-code-management, web

     [ permalink ]

     • https://github.com/katzien/go-structure-examples
       • https://www.youtube.com/watch?v=oL6JBUk6tj0
     • https://medium.com/@benbjohnson/standard-package-layout-7cdbc8391fc1
     • https://github.com/golang-standards/project-layout
     • https://github.com/ribice/gorsk-gin
     • https://github.com/gothinkster/golang-gin-realworld-example-app
     • https://github.com/mmcmm/go-gin-starter
     • https://www.reddit.com/r/golang/comments/3focff/ask_golang_have_you_built_a_complex_website_in/
     • https://github.com/volatiletech/authboss/wiki/Integration-with-gin-gonic
     • https://github.com/thewhitetulip/web-dev-golang-anti-textbook
105. hydra: OpenID Connect certified OAuth2 Server - cloud native, security-first, open source API security for your infrastructure. Written in Go. SDKs for any language. 2019-03-13

     tags: programming/go, security, security/authentication, security/authorization, security/oauth, security/openid

     [ permalink ]
106. authboss: The boss of http auth. A modular authentication system for the web. 2019-03-13

     tags: programming/api, programming/go, security/authentication, security/authorization, security/token

     [ permalink ]
107. FusionAuth - Identity management - Authentication, authorization, user management, reporting, analytics 2019-03-13

     tags: programming/api, security/authentication, security/authorization, security/password, security/token, web

     [ permalink ]
108. Cycle error when trying to create AWS VPC security groups using Terraform - Stack Overflow 2019-02-20

     tags: cloud/aws, configuration-management/terraform, cycle, graph

     [ permalink ]

     TL;DR: break the dependency cycle by declaring rules between two of the groups from the dependency chain with aws_security_group_rule

     • https://github.com/hashicorp/terraform/issues/539
     • https://github.com/hashicorp/terraform/issues/530
     • https://github.com/hashicorp/terraform/pull/1620
     • https://omarkhawaja.com/terraform-resolving-aws-security-group-cyclic-dependency/
109. Audit a MySQL or MariaDB database 2019-02-19

     tags: database, database/mariadb, database/mysql, observability, performance, security/audit

     [ permalink ]

     • https://vincent.composieux.fr/article/auditer-une-base-de-donnees-mysql-ou-mariadb
110. Talos - a modern Linux distribution designed to be secure, immutable, and minimal. 2019-02-18

     tags: linux, linux/container/docker, linux/container/kubernetes

     [ permalink ]

     • https://github.com/autonomy/talos
111. Gorsair: Gorsair hacks its way into remote docker containers that expose their APIs. 2019-02-15

     tags: linux/container/docker, network/tcp, pentest, security

     [ permalink ]
112. Google Online Security Blog: Introducing Adiantum: Encryption for the Next Billion Users 2019-02-13

     tags: algorithm, cryptography, cryptography/encryption, security

     [ permalink ]

     • https://github.com/google/adiantum
     • https://github.com/lukechampine/adiantum
     • https://tosc.iacr.org/index.php/ToSC/article/view/7360
113. ClusterFuzz - a scalable fuzzing infrastructure which finds security and stability issues in software 2019-02-08

     tags: analysis, data, google, input, programming/python, security

     [ permalink ]

     • https://github.com/google/clusterfuzz
     • https://github.com/google/oss-fuzz
     • https://llvm.org/docs/LibFuzzer.html
     • http://lcamtuf.coredump.cx/afl/
     • https://security.googleblog.com/2018/11/a-new-chapter-for-oss-fuzz.html
     • https://opensource.googleblog.com/2019/02/open-sourcing-clusterfuzz.html
114. nginx-quick-reference: This notes describes how to improve Nginx performance, security and other important things. 2019-02-08

     tags: cipher, cryptography/encryption, network/http, network/http-server/nginx, network/transport-layer-security, security, server

     [ permalink ]
115. Dynamic secrets on Kubernetes pods using Vault – Guy Maliar – Medium 2019-02-01

     tags: consul, linux/container/kubernetes, security, security/password, vault

     [ permalink ]
116. The Cryptopals Crypto Challenges 2019-01-30

     tags: challenge, cryptography, hack, mathematics, programming, security

     [ permalink ]

     • https://blog.pinboard.in/2013/04/the_matasano_crypto_challenges/
117. subspace: A simple WireGuard VPN server GUI 2019-01-27

     tags: linux, network, network/vpn, network/vpn/wireguard, security, web

     [ permalink ]

     • https://www.reddit.com/r/selfhosted/comments/ajxtg3/a_simple_wireguard_vpn_server_gui/
     • original repository: https://github.com/subspacecloud/subspace
118. [JENKINS-32118] Document Jenkins security settings so Robot Framework log/report can be opened - Jenkins JIRA 2019-01-23

     tags: continuous-integration/jenkins, plugin, programming/testing, robot-framework

     [ permalink ]

     • https://issues.jenkins-ci.org/browse/JENKINS-38338
119. Cross-Origin Resource Sharing (CORS) | MDN 2019-01-23

     tags: domain, network/dns, network/http, security, server

     [ permalink ]

     • https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials
     • https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers
     • https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Methods
     • https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin
120. server-configs: Boilerplate configurations for various web servers. 2019-01-23

     tags: apache, network/http, network/http-server/apache-httpd, network/http-server/nginx, network/transport-layer-security, server

     [ permalink ]

     • https://github.com/h5bp/server-configs-apache
     • https://github.com/h5bp/server-configs-nginx