VirtualTam's bookmarks

1. h2c Smuggling: Request Smuggling Via HTTP/2 Cleartext (h2c) 2024-11-04

   tags: network/http, network/reverse-proxy, programming/go, security, websocket

   [ permalink ]

   • BishopFox/h2csmuggler
2. awesome-limits - System limits that, when breached, led to someone having a bad time 2024-11-01

   tags: distributed-system, infrastructure/site-reliability-engineering, linux, network, observability

   [ permalink ]
3. SSHFP - Secure SHell FingerPrint DNS Records 2024-10-27

   tags: cryptography/elliptic-curve, network/dns, network/dnssec, network/ssh

   [ permalink ]

   • IANA - DNS SSHFP Resource Record Parameters
   • ssh - How do I generate SSHFP records?
   • Oh SSH-it, What’s My Fingerprint? A Large-Scale Analysis of SSH Host Key Fingerprint Verification Records in the DNS
     • gehaxelt/sshfp-dns-measurement
     • APNIC - Improving SSH’s security with SSHFP DNS records

   RFCs:

   • RFC 4251 - The Secure Shell (SSH) Protocol Architecture
   • RFC 4255 - Using DNS to Securely Publish Secure Shell (SSH) Key Fingerprints
4. feed reader best practices | Rachel By The Bay 2024-10-26

   tags: feed, network/http, network/http/header, personal-knowledge/blog, storage/cache, web/syndication

   [ permalink ]

   Test feed:

   • feed reader score project
   • A sysadmin's rant about feed readers and crawlers
   • Feeds, updates, 200s, 304s, and now 429s
   • So many feed readers, so many bizarre behaviors
   • The feed reader score service is now online

   RFCs:

   • RFC 1945 - Hypertext Transfer Protocol - HTTP/1.0 - If-Modified-Since
   • RFC 7232 - Hypertext Transfer Protocol (HTTP/1.1): Conditional Requests - Entity Tag (ETag)
   • RFC 9110 - HTTP Semantics

   Related:

   • Bret Simmons - NetNewsWire and Conditional GET Issues
   • John Brayton - Feed Polling for Unread Cloud
   • Jeff Kaufman - Looking at RSS User-Agents
   • Chris Siebenmann - The case of the very old If-Modified-Since HTTP header
   • ETag and HTTP caching
   • HTTP Conditional Requests Explained
   • Caching - What takes precedence: the ETag or Last-Modified HTTP header?
5. Crucible - A distributed network-replicated block storage service 2024-10-25

   tags: distributed-system, programming/rust, storage/block-storage, virtualization

   [ permalink ]

   • Oxide RFD 60 - Storage Architecture Considerations
   • Oxide RFD 177 - Implementation of Data Storage
6. Protoscope - A simple, human-editable language for representing and emitting the Protobuf wire format 2024-10-23

   tags: network/grpc, programming/go, protocol-buffers

   [ permalink ]
7. raffomania/linkblocks - A federated network to bookmark, share and discuss good web pages with your friends 2024-07-21

   tags: personal-knowledge/bookmark, programming/rust, web/syndication

   [ permalink ]
8. Stirling-PDF - Self-hosted PDF manipulation tool 2024-06-22

   tags: image/optical-character-recognition, linux/container/docker, network/http, pdf, programming/java

   [ permalink ]
9. Swift on Server 2024-06-12

   tags: cloud/aws, linux/container/docker, network/grpc, network/http, network/http/openapi, programming/swift

   [ permalink ]

   • swift-server
   • Packaging Applications for Deployment
   • swift-server/swift-openapi-lambda
   • swift-server/swift-aws-lambda-runtime
   • swift-server/swift-aws-lambda-events
   • grpc/grpc-swift
10. Adventures In Rust: Bringing Exchange Support To Thunderbird 2024-06-04

    tags: email, microsoft/exchange, network/http, programming/rust, programming/xml, thunderbird

    [ permalink ]
11. Crowdsec - Curated Threat Intelligence Powered by the Crowd 2024-05-29

    tags: bsd, linux/iptables, network/firewall, observability/logging, programming/go

    [ permalink ]

    • crowdsecurity/crowdsec
    • Documentation
      • Docker / Podman Deployment
      • Data Sources
      • Parsers
      • Configuration
      • Observability / Prometheus
      • OpenAPI Specification
    • Blog
      • Building a Network for Small Businesses Part 1: Hardware
      • Building a Network for Small Businesses Part 2: Running Configurations
      • Building a Network for Small Businesses Part 3: Attack Scenarios
    • Discussion on HN (2020)
12. Building a Kubernetes Home Lab on the Raspberry Pi 2024-05-28

    tags: cryptography/certificate-authority, distributed-system, linux/container, linux/container/kubernetes, network/dns, raspberry-pi, self-hosting

    [ permalink ]

    1. Architecture & Roadmap
    2. Setup Kubernetes Management Node and Private Certificate Authority
    3. Configuring a Multi-Architecture Build Process
    4. Local DNS Services
13. CoreDNS - DNS and Service Discovery 2024-05-28

    tags: network/dns, network/dnssec, programming/go

    [ permalink ]

    • coredns/coredns
    • Quick Start
    • Plugins
      • dnssec
      • file - Serve zone data from an RFC 1035-style file
    • Running CoreDNS as a DNS Server in a Container
14. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management 2024-05-27

    tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/http-server/traefik, network/reverse-proxy, network/transport-layer-security, programming/go

    [ permalink ]

    • Run a private online TLS certificate authority in a Docker container
    • Configure popular ACME clients to use a private CA with the ACME protocol
    • Run your own private CA & ACME server using step-ca
    • Build a Tiny Certificate Authority For Your Homelab
15. /r/WireGuard - Has anyone successfully figured out how to use IPv6 MASQUERADE? 2024-05-16

    tags: linux, linux/iptables, network/address-translation, network/ipv6, network/vpn/wireguard

    [ permalink ]
16. Quartz - A fast, batteries-included static-site generator that transforms Markdown content into fully functional websites 2024-05-15

    tags: personal-knowledge/digital-garden, programming/node.js, programming/typescript, web/static

    [ permalink ]

    • jackyzha0/quartz
    • Obsidian Compatibility
    • Digital garden - Networked Thought
17. NS-3 Network Simulator - A discrete-event network simulator for Internet systems, targeted primarily for research and educational use 2024-05-08

    tags: network, programming/c, programming/c++, programming/python, programming/xml, simulator, user-interface/qt

    [ permalink ]

    • nsnam/ns-3-dev
    • Tutorial
    • Installation
    • Models
    • NetAnim - Animates a previously executed simulation using an XML trace file generated during a simulation
18. /r/rss - Is there an open-source tool that converts emails into an RSS feed? 2024-05-04

    tags: email, feed/atom, feed/rss, network/imap, newsletter, programming/node.js, programming/python

    [ permalink ]

    • leafac/kill-the-newsletter - Convert email newsletters into Atom feeds
    • remko/atomail - Convert (E-Mail) messages into RSS feeds
19. pyinfra - Automate infrastructure using Python 2024-05-03

    tags: infrastructure, linux, network/ssh, python

    [ permalink ]

    • pyinfra-dev/pyinfra
20. Leela Zero - Go engine with no human-provided knowledge, modeled after the AlphaGo Zero paper 2024-05-02

    tags: game/go, neural-network, programming/c++, programming/java, research

    [ permalink ]

    • leela-zero/leela-zero
    • featurecat/lizzie - Leela Zero Interface
    • Mastering the game of Go without human knowledge [PDF]