VirtualTam's bookmarks

161. NPM, Yarn and private repositories 2018-06-08

     tags: continuous-integration, linux/container/docker, network/proxy, package, programming/node.js, repository, security/authentication, yarn

     [ permalink ]

     Hosting private repositories and using them in CI/CD:

     • https://docs.npmjs.com/private-modules/intro
     • https://docs.npmjs.com/private-modules/ci-server-config
     • https://docs.npmjs.com/private-modules/docker-and-private-modules

     Threads:

     • https://stackoverflow.com/questions/45191189/nexus-manager-npm-401-unauthorized
     • https://stackoverflow.com/questions/40845598/how-do-i-use-multiple-npm-registries-in-yarn
     • https://github.com/yarnpkg/yarn/issues/606
     • https://github.com/yarnpkg/yarn/pull/839
     • https://github.com/yarnpkg/yarn/pull/871
     • https://github.com/yarnpkg/yarn/issues/4451
     • https://github.com/yarnpkg/yarn/issues/4862
     • https://github.com/npm/npm/issues/16528

     Articles:

     • https://pdudits.github.io/2016/11/16/Setting-up-Angular2-CLI-with-Maven-in-enterprise-network.html

     node-sass binaries:

     • https://github.com/sass/node-sass#binary-configuration-parameters
     • https://github.com/sass/node-sass/releases
     • https://github.com/sass/node-sass/issues/1466
     • https://github.com/sass/node-sass/issues/1554
     • https://github.com/sass/node-sass/issues/1635
     • https://github.com/sass/node-sass/issues/1991
     • https://github.com/sass/node-sass/issues/2115
     • https://github.com/sass/node-sass/issues/2361
     • https://stackoverflow.com/questions/40178767/is-it-possible-to-install-node-sass-without-downloading-from-github-during-the-p
162. KeePass / KeePassX / KeePassXC 2018-05-27

     tags: apple/macos, linux, microsoft/windows, mobile/android, security, security/password, web

     [ permalink ]

     • https://keepass.info/
     • https://www.keepassx.org/
     • https://keepassxc.org/
     • https://superuser.com/questions/878902/whats-the-difference-between-keepass-and-keepassx
     • https://sourceforge.net/p/keepass/discussion/329220/thread/f9f016d5/
     • https://keepassxc.org/docs/#faq-keepassx
163. OpenVPN-install: Set up your own OpenVPN server on Debian, Ubuntu, Fedora CentOS, and Arch Linux 2018-05-24

     tags: linux, network, network/vpn, security

     [ permalink ]

     • https://angristan.fr/installer-facilement-serveur-openvpn-debian-ubuntu-centos/
     • https://github.com/Nyr/openvpn-install
164. OpenVPN Community Software 2018-05-24

     tags: cryptography/public-key-infrastructure, cryptography/rsa, linux, network, network/transport-layer-security, network/vpn, security

     [ permalink ]

     • https://openvpn.net/index.php/open-source/documentation/miscellaneous/78-static-key-mini-howto.html
     • https://openvpn.net/index.php/open-source/documentation/howto.html
     • https://openvpn.net/index.php/open-source/documentation/miscellaneous/76-ethernet-bridging.html
     • https://wiki.archlinux.org/index.php/OpenVPN
     • https://wiki.archlinux.org/index.php/Easy-RSA
     • https://wiki.debian.org/OpenVPN
165. BeyondCorp | Run Zero Trust Security Like Google 2018-05-18

     tags: google, infrastructure, network, public, security

     [ permalink ]

     • https://ai.google/research/pubs/pub43231
166. [ANNOUNCE] Alpha Snapshots of WireGuard for Android and macOS 2018-05-18

     tags: apple/macos, linux, mobile/android, network, network/vpn, network/vpn/wireguard, security

     [ permalink ]

     • http://latacora.singles/2018/05/16/there-will-be.html
     • http://noiseprotocol.org/
     • https://news.ycombinator.com/item?id=17091618
167. Welcome | OWASP Python Security Project 2018-05-17

     tags: owasp, programming/python, security

     [ permalink ]
168. How To Choose an Effective Firewall Policy to Secure your Servers | DigitalOcean 2018-05-15

     tags: linux, network, network/firewall, policy, security, server

     [ permalink ]

     • http://www.chiark.greenend.org.uk/%7Epeterb/network/drop-vs-reject
     • https://security.stackexchange.com/questions/22686/is-it-good-practice-to-manually-lock-down-ports-on-each-host
     • https://security.stackexchange.com/questions/22711/is-it-a-bad-idea-for-a-firewall-to-block-icmp/22713
     • https://serverfault.com/questions/84963/why-not-block-icmp/84981
169. Proxmox: Networking, Firewall, Security 2018-05-15

     tags: linux, linux/debian, network, network/firewall, network/router, security, virtualization/proxmox

     [ permalink ]

     • https://pve.proxmox.com/wiki/Network_Configuration
     • https://pve.proxmox.com/wiki/Firewall
     • https://pve.proxmox.com/wiki/Fail2ban
     • https://forum.proxmox.com/threads/how-to-implement-fail2ban-on-host.3583/
     • https://forum.proxmox.com/forums/proxmox-ve-networking-and-firewall.17/
     • https://myatus.com/p/guide-firewall-and-router-with-proxmox-extending-its-us/
     • https://www.kiloroot.com/secure-proxmox-install-sudo-firewall-with-ipv6-and-more-how-to-configure-from-start-to-finish/
     • https://blog.waccabac.com/gestion-du-pare-feu-de-proxmox-ve-4/
170. Wladimir Palant's notes: Master password in Firefox or Thunderbird? Do not bother! 2018-05-07

     tags: internet/browser/firefox, mozilla, security, security/password, thunderbird

     [ permalink ]

     • https://cynosureprime.blogspot.fr/2017/08/320-million-hashes-exposed.html
     • https://blog.codinghorror.com/hacker-hack-thyself/
     • https://www.microsoft.com/en-us/research/publication/a-large-scale-study-of-web-password-habits/
171. HTTPS Certificate Configuration (Version 4.x and newer) - Proxmox VE 2018-05-04

     tags: letsencrypt, network/http, network/transport-layer-security, virtualization/proxmox

     [ permalink ]

     • https://forum.proxmox.com/threads/let%E2%80%99s-encrypt-with-proxmox-ve.26842/
     • https://forum.proxmox.com/threads/certificate-startup-problems.25815/
172. mitmproxy - an interactive HTTPS proxy 2018-05-02

     tags: network, network/http, network/packet, network/proxy, programming/python, security

     [ permalink ]

     • https://github.com/mitmproxy/mitmproxy
     • https://docs.mitmproxy.org/stable/
     • https://github.com/ustwo/mastermind
173. Matrix and Riot confirmed as the basis for France’s Secure Instant Messenger app | Matrix.org 2018-04-27

     tags: france, government, instant-messaging, web

     [ permalink ]
174. Cilium: HTTP, gRPC, and Kafka Aware Security and Networking for Containers with BPF and XDP 2018-04-24

     tags: linux, linux/container, linux/container/docker, linux/container/kubernetes, linux/kernel/ebpf, network, programming/api, route, security

     [ permalink ]

     • https://cilium.readthedocs.io/en/latest/gettingstarted/
     • http://docs.cilium.io/en/latest/bpf/
     • https://github.com/cilium/cilium
     • https://cilium.io/blog/2018/04/24/cilium-10/
175. Use multi-stage builds | Docker Documentation 2018-04-15

     tags: build, linux/container, linux/container/docker, security

     [ permalink ]
176. Docker - FreeIPA 2018-04-05

     tags: linux, linux/centos, linux/container/docker, network/ldap, security/authentication, user

     [ permalink ]

     • https://github.com/freeipa/freeipa-container
     • https://hub.docker.com/r/freeipa/freeipa-server/
     • https://www.adelton.com/docs/docker/complex-application-in-container
     • https://www.redhat.com/archives/freeipa-users/2017-March/msg00339.html
177. ansible-lockdown: Ansible playbook roles for security 2018-04-05

     tags: configuration-management/ansible, linux, linux/red-hat, security

     [ permalink ]

     • https://iase.disa.mil/stigs/os/unix-linux/Pages/index.aspx
     • https://www.cisecurity.org/cis-benchmarks/
178. Counter-alchemists: please stop transforming blockchain fever into IT boredom 2018-03-27

     tags: blockchain, cryptography, cryptography/hash, data, digital, money, security

     [ permalink ]
179. tls - How do I use "openssl s_client" to test for (absence of) SSLv3 support? 2018-03-07

     tags: cryptography/certificate, network/http, network/transport-layer-security, openssl, web

     [ permalink ]

     • https://www.madboa.com/geek/openssl/
     • https://major.io/2012/02/07/using-openssls-s_client-command-with-web-servers-using-server-name-indication- sni/
     • https://www.feistyduck.com/library/openssl-cookbook/online/ch-testing-with-openssl.html
180. On Securing the Kubernetes Dashboard 2018-02-28

     tags: linux, linux/container, linux/container/docker, linux/container/kubernetes, security, security/authentication

     [ permalink ]

     • https://blog.redlock.io/cryptojacking-tesla
     • https://github.com/kubernetes/dashboard
     • https://www.youtube.com/watch?v=od8TnIvuADg
     • https://schd.ws/hosted_files/kccncna17/d8/Hacking%20and%20Hardening%20Kubernetes%20By%20Example%20v2.pdf