Simple Mobile Push Notifications Posted: September 17, 2024 at 12:00 PM security signal web TL ; DR : Check out WPN for code that implements push notifications to your browser (mobile or desktop). Background ¶ I run my own server/services, so it’s helpful to be able to receive notifications, such as when a hard drive starts throwing errors, or when I get an SMS to my home phone, or when snapaid…
Isolated IP Management Updated: August 25, 2023 at 4:15 PM Originally Posted: August 17, 2023 at 12:00 PM FreeBSD jails Edited on 2023-08-25 to add how to start the jail on each boot. The latest iteration of my home firewall has a spare interface. Many switches these days have a dedicated management interface, and I wanted something similar for my firewall. I want an interface that I can plug in,…
tmux beginners guide Posted: November 15, 2022 at 12:00 PM tweets Originally Posted: Sun Aug 07 18:40:30 +0000 2022 First, here’s the .tmux.conf I use (alt text to copy/paste). This remaps the control key from ctrl-b (^B) to ctrl-a which is more natural for me. Next is split windows, to have two windows side by side: ^A %, to have top/bottom: ^A “. To move between windows, ^A then one of h (up) j…
Nearly Complete Guide to RNG on a microcontroller Posted: February 12, 2022 at 11:50 AM microcontroller rng security Security depends upon cryptography and which in turn depends upon a Random Number Generator ( RNG ). An RNG is used for key generation (both symmetric and asymmetric) and key negotiation (session establishment). The later is an absolute requirement to ensure that communications can…
CODEpendence Posted: July 7, 2021 at 11:16 AM git GitHub security TL ;dr: If you use submodules that point to a GitHub repo, make sure that the commit id matches an offical branch or tag, especially if upgraded via a PR or submitted patch. This issue was disclosed to GitHub via the HackerOne Bug Bounty program and resolved by them in a timely manner. The writeup is available and is the same one…
Installing FreeBSD on a PC Engines APU4C2 Posted: August 8, 2019 at 11:08 PM FreeBSD I recently upgraded my internet connection, and needed some additional performance, so I purchased a APU .4C2 . When I tried to boot it up, I would get to loading the kernel, but then I would not get anything. After a quick search I found Dr. David A. Eckhardt’s post on How to Install FreeBSD 12.0 on a PC Engines…
Using Signal on a server Posted: April 8, 2019 at 1:54 PM security signal For a long while, I’d been using an email to SMS gateway to push important notifications from my server, such as SMART error messages, to my phone. After all the NSA warrantless surveillance , I made a commitment to encrypt as much of my communications as possible. When Signal came out, I adopted it because of it’s strong…
Crash Dumps: Do I submit them? Posted: October 23, 2018 at 3:54 PM security TL ; DR : No, do not submit your crash dumps. Consumers: No company has sane crash dump policies to ensure your privacy and PII is protected, minimized and secured. Companies: You need to ensure that crash dumps are handled in a secure manner and that crash dumps are just that: a crash dump. Anything not directly related…
TLS Client Authentication Leaks User Info (pre- TLS1 .3) Posted: October 15, 2018 at 10:54 AM security TLS It’s been long known that TLS is not the best privacy protecting protocol in that SNI leaks what domain the client connects to. I’m a bit surprised that I haven’t seen the failure to protect user information when using client authentication mentioned, but it’s likely that TLS client…
Making FreeBSD magnet links Updated: December 7, 2022 at 12:20 PM Originally Posted: July 3, 2018 at 4:49 PM FreeBSD magnet Note: This was originally posted here , but things have been improved since then and so it has been updated. For the last few years, I’ve been producing torrents and publishing magnet links, but there is some special work that I do to make these. The first few releases, I…
Making FreeBSD magnet links Posted: July 3, 2018 at 4:49 PM FreeBSD magnet ⚠ ️ This post is old, the most up to date one is here . For the last few years, I’ve been producing torrents and publishing magnet links, but there is some special work that I do to make these. The first few releases, I inserted a bogus tracker into the torrent, because despite there being plenty of tools out there for…
Unusable Insecurity Posted: March 16, 2018 at 1:40 PM security Many people claim that security is hard, and in many cases it is hard, but that isn’t an excuse to make it harder than it needs to be. There are many layers to security, but adding extra layers, or making security controls inscrutable is a great way to ensure insecurity. Security needs to be simple and straightforward to configure, and…
Adventures in Autobahn/ WAMP Security Posted: September 17, 2017 at 12:21 PM security WAMP web Or how security continues to suck because: It’s Hard and Someone Else’s Problem™ ¶ For a personal project, I’ve decided to use WAMP to move some events and messages around between different components. I decided on the AutoBahn libraries and Crossbar.io as the router. I was already somewhat familiar w/…
Installing and running NetBSD and OpenBSD under bhyve Posted: July 28, 2015 at 8:37 PM bhyve FreeBSD NetBSD OpenBSD These instructions assume that you have downloaded the install ISO from the respective sources. These were doing with specific versions, and there may be minor changes with older and newer versions. These instructions could possibly be more simple, such as not using separate device…
XML Schema Validation for the command line Posted: May 7, 2015 at 2:17 PM schema xml It turns out that unless you use a full fledge XML editor, validating your XML document against a schema is difficult. Most tools require you to specify a single schema file. If you have an XML document that contains more than one name space this doesn’t work too well as often, each name space is in a separate…
Building bhyve Images using makefs and mkimg Posted: October 29, 2014 at 8:57 PM bhyve FreeBSD Recently Neel Natu committed work to enable bhyve to run on AMD processors. My main development machine is an AMD A10-5700, so the commit enables me to use bhyve for testing. EDIT : Anish Gupta did the work that Neel Natu committed. Thanks Anish! I had previously built images using makefs and mkimg for a…
Python ctypes wrapper for FLAC Posted: March 15, 2014 at 5:11 PM audio FLAC Python As many people know, I’ve a fan of Python and I have been using it for over 15 years now. One of the recent improvements that Python has made is the inclusion of ctypes, which allows you to write a wrapper around shared libraries in Python making it much easier to integrate libraries. Previously you’d have to know…
CTF + ARMeb + debugging Posted: March 5, 2014 at 7:21 PM arm ctf debugging I’ve been working on making the AVILA board work again with FreeBSD. Thanks to Jim from Netgate for sending me a board to do this work. I still have a pending patch waiting to go through bde to fix an unaligned off_t store which gets things farther, but with the patch I’m getting a: panic: vm_page_alloc: page 0xc0805db0 is…