Recent content in Home on ./concord.sh
I have an abusive relationship with IPv6. Admittedly, I’m a bit of a stickler for “doing things the right way,” and part of that includes making sure my self-hosted apps are accessible over an IPv6-only network. In today’s age that means using dual-stack networking. Unfortunately, it seems most residential ISPs are not doing IPv6 “the right way.” Or, the…
This is a follow-up post to UEFI Secure Boot the Right Way in which I answer some questions I have received and to address some confusion and clarify some erroneous information. Not only that, but I will share some additional information that I found out about after publication of that post! 😃 PCR 7 and Microsoft’s Third-Party/Vendor CA Certificate In my original post I expressed concern…
Security around the Linux boot process is a bit of a touchy subject. In fact, if you dig deep enough you’ll find that there are many ways to boot a Linux system in general. There’s many different bootloaders, for example, each with their own strengths and weaknesses. In addition, depending on the system’s or the user’s requirements, the system may also require booting with…
My girlfriend has been using Kubuntu 20.04 on her laptop almost since it was released. Her intent was to become more familiar with Linux and computing in general, which I am more than happy to help with. She was very enthusiastic from the beginning about delving into the innards of a Linux desktop, but I didn’t want to overwhelm her with something as technical as Gentoo just yet. So, because…
A couple weeks ago I was coming into work and wanted to quickly finish up some experimentation I was doing with regards to setting up automatic disk decryption at boot using TPM 2.0 and LUKS. I have been using full disk encryption (FDE) for a while now but I wanted to try out the different ways that systemd-cryptsetup supports unlocking the disk. Of the various methods, it seems that using a TPM…
Some icons are provided by Font Awesome under a CC BY 4.0 License . The Terminus font is licensed under the GPL-2 and the OFL-1.1 . The OpenSans font is licensed under the Apache-2.0 license. The hugo-notice component is licensed under the GPL-3.0 or later . All other content is licensed under a CC BY 4.0 License , unless otherwise explicitly noted.
Clang is pivoted to become the next-generation C/C++ compiler for modern systems. It aims to provide better diagnostics, be easier to integrate with IDEs, and have a license that is more compatible with commercial products. 1 On Gentoo, Clang is already available as a compiler that can be used system-wide instead of GCC. The primary motivation for this is to take better advantage of…
madaidan’s Insecurities https://madaidans-insecurities.github.io/ madaidan is a security researcher most known for his contributions to the Whonix project. He is a knowledgeable individual who maintains an accurate and detailed collection of guides and bulletins on various privacy and security topics on his site. GrapheneOS https://grapheneos.org/ GrapheneOS is a third-party Android…
If you run your own Nextcloud instance, one of the things you will need to do when finalizing setup is to configure Nextcloud’s internal cron service . The default and least reliable option is AJAX, which will run the cron service each time a Nextcloud page is requested. The immediate problem here is that if your Nextcloud instance does not have much continuous usage (like mine), especially…
Today I noticed that for some reason on one of my Gentoo boxes, I needed to authenticate as root in order to start and stop services, when on my other boxes I would authenticate as my currently logged in user. Normally I like to run sudo -i or sudo -s in order to run multiple tasks in the same session, and this was never previously a problem until I recently locked down the root account such that…
Only today did I notice that my Gitea instance was unable to create new repositories. A furious search turned up this issue regarding the issue. This comment explains it in more detail. The fix is to run this on the Gitea database: SELECT SETVAL( 'public.access_id_seq' , COALESCE( MAX (id), 1 ) ) FROM public . access ; SELECT SETVAL( 'public.access_token_id_seq' , COALESCE( MAX (id), 1 ) ) FROM…
And so as of the time of writing this, my blog is now officially live. I am still adding content to my other pages and will soon add a links page, but for now I leave any readers with this notice and a wide future of upcoming content. I also anticipate uploading the full source of the site to a public Git repository. Until next time, see ya.
My personal blog.
I’m 0xC0ncord, or just “Concord,” and this site is a place where I talk to myself. I write about various information security topics. I contribute to open source projects such as the SELinux reference policy and work in systems administration professionally. This site is the work of a personal motivation effort to share as much useful information I gather publicly, in the hopes…