Introduction to BGP Routing and Security - Part 2: Preventing Transit
Preventing your autonomous system from becoming a transit AS.
JamieWeb (jamieweb.net)
Website of Jamie Scaife - United Kingdom
Latest posts
Tor is a Great SysAdmin Tool
Using Tor to aid various system administration tasks, including checking firewall rules, bypassing internal network restrictions and connecting to remote systems that are behind NAT/CGNAT.
Introduction to BGP Routing and Security - Part 1: BGP Peering with Quagga
Installing and configuring the Quagga network routing software suite and establishing a BGP peering session to exchange routing information.
Using SPF Macros to Solve the Operational Challenges of SPF
Improving the maintainability, auditability and effectiveness of your SPF policy using SPF macros.
Introduction to BGP Routing and Security - Prelude: Connecting to the DN42 Overlay Network
Registering your own AS (Autonomous System) and IP address ranges in the DN42 registry, and then connecting to a peer with a VPN tunnel.
Restricting Who Can Issue Certificates for Your Domain with CAA
Using Certificate Authority Authorisation (CAA) to restrict the Certificate Authorities that are permitted to issue certificates for your domain.
Testing Your Ability at Spotting Lookalike Domain Names
Creating a JavaScript app to test how good you are at identifying potential lookalike domain names.
Securing Inbound Email Transport with MTA-STS and STARTTLS-Everywhere
Implementing the new MTA-STS specification and adding your domain to the STARTTLS-Everywhere list to help secure inbound email transport.
A Look at PureDarwin - an OS based on the open source core of macOS
An overview of the PureDarwin project, which is a community effort to produce a more usable version of Darwin OS, the open source base behind modern Mac OS.
Understanding PGP/GPG Key Server Output
A reference guide to PGP/GPG key server search output.
Deploying a Tor Onion v3 Hidden Service Using Ansible
Using the Ansible configuration management tool to automatically deploy a Tor Onion v3 Hidden Service to a Linux machine.
Serving security.txt Using a Cloudflare Worker
If your Content Management System or hosting provider doesn't allow you to host a proper security.txt file, you can instead use Cloudflare Serverless Workers to serve the file directly from Cloudflare.
Automating the Integrity Verification Process for Downloaded Software
A script to automatically download and perform integrity verifications for specific pre-programmed software packages.
My Interview With Giulio D'Agostino
I was recently a guest on the 'Conversations in Cyberspace' podcast.
Managing Your SSH known_hosts Using Git
Using Git to centrally manage, verify, update and distribute your SSH known_hosts.
Installing UBports Ubuntu Touch on the Meizu MX4 Ubuntu Edition
Installing UBports Ubuntu Touch on the original Meizu MX4 Ubuntu Edition using ubports-installer.
Forwarding Tor Hidden Services to Another Server Across the Internet
Using a reverse HTTP proxy to forward Tor Hidden Services across the internet to another server.
Taking Content Security Policy to the Extreme! - Policies on a Per-page Basis
Implementing a Content Security Policy on your PHP website with fine-grain control over the policy on a per-page basis.
Restricting and Locking Down SSH Users
Restricting SSH users to specific commands, directories and system access.
Introduction to Reverse Engineering with radare2 Cutter - Part 3: Solving a Crackme Challenge
Solving a beginner crackme challenge using radare2 Cutter.
Transferring Domain Names to Cloudflare Registrar
Screenshots and information on the transfer-in process for Cloudflare Registrar.
Using a Bloom Filter to Anonymize Web Server Logs
Anonymizing personal data in web server access logs in order to improve data security and comply with the GDPR.
Introduction to Reverse Engineering with radare2 Cutter - Part 2: Analysing a Basic Program
Analysing a basic program using static analysis in radare2 Cutter.
Booting a Physical Windows 10 Disk Using VirtualBox on Linux
Configuring VirtualBox on Linux to boot a physical Windows 10 disk connected via SATA or USB.
Introduction to Reverse Engineering with radare2 Cutter - Part 1: Key Terminology and Overview
An overview of some key reverse engineering terminology and details on the various interfaces and tools available in radare2 Cutter.
Automatically Testing Your Content Security Policy Using Travis-CI and Headless Chrome Crawler
A Travis-CI build configuration for automatically testing your website's Content Security Policy.
Launching a Public HackerOne Security Vulnerability Disclosure Program
A write-up of launching the public HackerOne security vulnerability disclosure program for JamieWeb.
Using a Public Wi-Fi Hotspot Securely
Connecting to hotel Wi-Fi through a Raspberry Pi and forwarding an external VPN connection.
Let's Encrypt SCTs in Certificates
Let's Encrypt certificates now have Signed Certificate Timestamps (SCTs) included by default.
Disabling TLS 1.0 and TLS 1.1
Assessing browser compatibility and disabling older TLS protocol versions.
Registering a Namecoin .bit Domain
Using Namecoin Core to register a .bit domain and setting up ncdns.
Tor Onion v3 Vanity Address
Generating a vanity address for Onion v3 Hidden Services.
security.txt Internet Draft
A look at the security.txt draft specification.
Tor Onion v3 Hidden Service
Testing the new Tor Onion v3 Hidden Services.
iPad Mini iOS 6
Using iOS 6 on the iPad Mini + iOS 6 Security.
Pastebin Keyword Alerts
Using the Pastebin Alerts Service.
Upgrading to IPv6
Setting up and configuring IPv6 on JamieWeb.
Hosts File Site Blocking
Blocking sites using the hosts file and an integrity verification script.
How to Install and Configure 'InspIRCd' on Linux
In-depth guide for installing and configuring InspIRCd on Linux.
Creating the IRC Drawing Bot
Thought process and development of the IRC Drawing Bot.
Chrome Site Whitelist Extension
Discussing the Chrome extension that I am developing.
Subgraph OS Overview
An overview of Subgraph OS: Adversary Resistant Computing.
Tor Hidden Service
Setting up a Tor Hidden Service for my site.
Blocking Exloitable Content
Blocking exploitable web content in your browser.
Proof Of Timestamp
Cryptographically proving a timestamp.
Identicon Gravity Animation
Animated collapsing identicon.
New Site Design + Layout!
New, more modern looking design, built better.
Plainsight Enciphering Demo
Enciphering text and files using Plainsight.
iPhone System Clock
iPhone 4 behaving strangely because of an incorrect system clock.
Ubuntu Phone Review
A month with the Ubuntu Phone.