VirtualTam's bookmarks

141. opensnitch: OpenSnitch is a GNU/Linux port of the Little Snitch application firewall. 2018-12-26

     tags: application, linux, network, network/firewall, programming/go, security

     [ permalink ]
142. ec2.py: Dynamic inventory does not work with assumed roles in shared config · Issue #25718 · ansible/ansible · GitHub 2018-12-26

     tags: cloud-computing/aws, configuration-management/ansible, programming/python, security/authentication, security/authorization

     [ permalink ]

     • https://github.com/ansible/ansible/blob/6318229bc424e5bb95b83b5ddad355a8c315d0f7/contrib/inventory/ec2.ini#L186
     • https://github.com/ansible/ansible/pull/34279#issuecomment-355136912
     • https://docs.ansible.com/ansible/latest/plugins/inventory/aws_ec2.html
143. Why is `--duplicate-cn` not recommended in OpenVPN? - Server Fault 2018-12-26

     tags: cryptography/certificate, network, network/vpn, security

     [ permalink ]
144. ferm and docker playing together 2018-12-21

     tags: ferm, linux, linux/container/docker, linux/iptables, linux/kernel, network, network/firewall, security

     [ permalink ]

     • https://github.com/diefans/ferment
     • https://blog.urth.org/2018/06/01/making-docker-play-nice-with-ferm-firewalls-on-linux/
     • https://unrouted.io/2017/08/15/docker-firewall/
     • https://github.com/wikimedia/puppet/commit/74050c6233c8b5ae291d3d7f5131a587941c50ac
     • https://github.com/moby/moby/issues/12294#issuecomment-432921518
     • https://github.com/Jamesits/systemd-named-netns
145. ldapbrowse: Console LDAP browser 2018-12-13

     tags: command-line, network/ldap, security/authentication, security/authorization

     [ permalink ]
146. The next version of HTTP won’t be using TCP | Ars Technica 2018-11-27

     tags: google, network, network/http, network/quic, performance, protocol, security

     [ permalink ]

     • https://mailarchive.ietf.org/arch/msg/quic/RLRs4nB1lwFCZ_7k0iuz0ZBa35s
     • https://datatracker.ietf.org/meeting/98/materials/slides-98-edu-sessf-quic-tutorial-00.pdf
     • https://www.reddit.com/r/networking/comments/9wriid/http3quic_and_the_yawning_abysmal_division/
     • https://www.reddit.com/r/programming/comments/9wncor/httpoverquic_to_be_renamed_http3/
     • https://www.youtube.com/watch?v=uVf_yyMfIPQ
     • https://github.com/lucas-clemente/quic-go
147. crt.sh | Certificate Search 2018-11-21

     tags: cryptography/certificate, letsencrypt, network/http, network/transport-layer-security, security

     [ permalink ]

     • https://transparencyreport.google.com
148. The Underhanded C Contest 2018-11-16

     tags: backdoor, programming, programming/c, security, security/obfuscation

     [ permalink ]

     • https://en.wikipedia.org/wiki/Underhanded_C_Contest
149. Displaying a remote SSL certificate details using CLI tools - Server Fault 2018-11-15

     tags: command-line, cryptography/certificate, network/nmap, network/transport-layer-security, openssl, security

     [ permalink ]
150. Macaroons: Cookies with Contextual Caveats for Decentralized Authorization in the Cloud – Google AI 2018-11-12

     tags: cookie, network/http, research, security, web

     [ permalink ]

     • https://theory.stanford.edu/~ataly/Papers/macaroons.pdf
     • https://github.com/rescrv/libmacaroons
     • https://github.com/go-macaroon/macaroon
     • http://macaroons.io/
151. mysql - What column type/length should I use for storing a Bcrypt hashed password in a Database? - Stack Overflow 2018-10-21

     tags: cryptography/hash, database, database/mariadb, database/mysql, programming/sql, security/password

     [ permalink ]

     • https://stackoverflow.com/questions/51008351/bcrypt-hashedsecret-too-short-to-be-a-bcrypted-password
     • https://stackoverflow.com/questions/247304/what-data-type-to-use-for-hashed-password-field-and-what-length
152. Manage sensitive data with Docker secrets | Docker Documentation 2018-09-27

     tags: linux/container/docker, secret, security, security/authentication, security/password, security/token

     [ permalink ]

     • https://github.com/moby/moby/issues/13490
153. Jenkins Pipeline and Google Cloud Registry 2018-09-20

     tags: cloud-computing/gcp, continuous-integration/jenkins, linux/container/docker, linux/container/kubernetes, pipeline, registry, security/authentication, security/token

     [ permalink ]

     • https://medium.com/google-cloud/how-to-push-docker-image-to-google-container-registry-gcr-through-jenkins-job-52b9d5ce9f7f
     • https://cloud.google.com/solutions/using-jenkins-for-distributed-builds-on-compute-engine
     • https://codeascraft.com/2018/06/05/deploying-to-google-kubernetes-engine/
154. jib: Build container images for your Java applications. 2018-09-19

     tags: linux/container, linux/container/docker, programming/java, programming/java/maven, security

     [ permalink ]

     • https://cloudplatform.googleblog.com/2018/07/introducing-jib-build-java-docker-images-better.html
     • https://dzone.com/articles/building-docker-image-for-a-spring-boot-app
     • https://www.reddit.com/r/programming/comments/8xen0j/jib_google_container_tool_for_building_java/
     • https://news.ycombinator.com/item?id=17497026
155. Using Kubernetes in Jenkins (declarative?) pipelines 2018-09-14

     tags: continuous-integration/jenkins, linux/container/docker, linux/container/kubernetes, pipeline

     [ permalink ]

     Kubernetes plugin and examples:

     • https://github.com/jenkinsci/kubernetes-plugin
     • https://jenkins.io/doc/pipeline/steps/kubernetes/

     Kubernetes pipeline plugin:

     • https://github.com/jenkinsci/kubernetes-pipeline-plugin
     • https://jenkins.io/doc/pipeline/steps/kubernetes-pipeline-steps/

     Relevant issues:

     • https://issues.jenkins-ci.org/browse/JENKINS-48135 - Multiple containers in declarative pipelines
     • https://issues.jenkins-ci.org/browse/JENKINS-51353 - Request for volumes in declarative pipelines

     Persisting volumes:

     • https://kubernetes.io/docs/concepts/storage/persistent-volumes/
     • https://cloud.google.com/kubernetes-engine/docs/concepts/persistent-volumes
     • https://devopscube.com/persistent-volume-google-kubernetes-engine/
     • http://www.monkeylittle.com/blog/2017/02/08/adding-persistent-volumes-to-jenkins-with-kubernetes-volumes.html
     • https://stackoverflow.com/questions/48068973/volume-mounting-in-jenkins-on-kubernetes

     Declarative pipelines with YAML spec:

     • https://github.com/jenkinsci/kubernetes-plugin/blob/master/examples/declarative-multiple-containers.groovy
     • https://stackoverflow.com/questions/47470498/how-to-define-multiple-containers-in-declarative-pipeline

     Scripted pipelines:

     • https://www.twistlock.com/2018/07/24/jenkins-pipeline-kubernetes-building-containers-integrating-security/

     XML (!):

     • https://itnext.io/running-jenkins-builds-in-containers-458e90ff2a7b
156. The X-Windows Disaster – Don Hopkins 2018-09-10

     tags: display, graphics, linux/x11, network/ssh, programming/c, protocol, remote, security/authentication, unix

     [ permalink ]
157. RabbitMQ - Password Hashing 2018-08-28

     tags: cryptography/hash, message-broker/rabbitmq, programming/python, security, security/authentication, security/password

     [ permalink ]

     • https://www.rabbitmq.com/passwords.html
     • https://stackoverflow.com/questions/41306350/how-to-generate-password-hash-for-rabbitmq-management-http-api
     • https://gist.github.com/christianclinton/faa1aef119a0919aeb2e
     • https://stackoverflow.com/questions/9594125/salt-and-hash-a-password-in-python
     • https://docs.python.org/3/library/hashlib.html
     • https://docs.python.org/3/library/base64.html
158. Building Docker Images for Static Go Binaries – Kelsey Hightower – Medium 2018-08-18

     tags: linux, linux/container/docker, network/transport-layer-security, programming/go

     [ permalink ]
159. Linux-Kernel Archive: [PATCH v1 0/3] WireGuard: Secure Network Tunnel 2018-08-01

     tags: linux, network/vpn, network/vpn/wireguard

     [ permalink ]

     • https://marc.info/?l=linux-netdev&m=153306429108040&w=2
     • https://marc.info/?l=linux-netdev&m=153306429908043&w=2
     • https://marc.info/?l=linux-netdev&m=153306437408074&w=2
     • https://marc.info/?l=linux-netdev&m=153306440208084&w=2
     • https://lkml.org/lkml/2017/11/10/666
     • https://www.phoronix.com/scan.php?page=news_item&px=WireGuard-Plans-November-2017
     • https://www.phoronix.com/scan.php?page=news_item&px=WireGuard-V1-Review
160. Mac OS X - Creating Launch Daemons and Agents 2018-07-30

     tags: apple/macos, continuous-integration, security, service, system, user

     [ permalink ]

     • http://nsbogan.com/mobile%20ci/2015/02/01/mobile-ci-daemon-vs-agent
     • https://stackoverflow.com/questions/16875401/daemon-vs-user-agent-convention-on-osx
     • https://superuser.com/questions/763532/logstash-agent-doesnt-run-as-a-daemon-on-mac-os-x-10-9-1#764209