I am writing about my experiences as a naval navel-gazer.
Performance Specifications Hardware Software Network Mapping Routing There are a variety of reasons for setting up and maintaining a home labaoratory, and nearly all are beneficial for gaining experience outside of a professional or academic environment. Before setting up a homelab, it's important to assess the underlying goal you have in mind. What will the purpose of your homelab be? attack…
Cybersecurity PenTesting OSINT Blogs Research Privacy Services Development Fonts Blogs Public Access Unix Systems Hosting Providers and DNS Registars Wikis and Gardens Personal Webrings Link Directories Forums Zines and Publications Educational Datasets Archives Other Links to not equate to endorsements. Explore at your own discretion. Cybersecurity direct link to this section Linux Security…
Knowing SQL is essential in various computing domains, everyone uses it, even indirectly in many cases. The Basics direct link to this section data in a SQL database is stored based on a predefined schema requests are known as queries postgres and mySQL are commonly used relational databases used in the industry a primary key is used as an unique identifier the foreign key is a unique identifier…
Syntax Basics operators string concatenation string replication comments essential functions Flow Control Functions Lists The copy Module’s copy() and deepcopy() Functions Dictionaries and Structuring Data Manipulating Strings Automating Tasks Pattern Matching with Regular Expressions Input Validation Reading and Writing Files Organizing Files Debugging Web Scraping Working with Excel Spreadsheets…
Methods direct link to this section Restic is a simple command line tool to perform backups, supports Linux, macOS, and Windows. Borg can also be used for those using BSD distributions. rsync over SSH Best Practices direct link to this section 3 copies of your data, where the first is the original or production data along with 2 more copies store data on 2 different forms of media 1 copy off-site…
Software direct link to this section Text Editor direct link to this section VSCode is my preferred IDE but I gravitate towards Vim for anything else. Coding Font direct link to this section Fira Code Notes direct link to this section I use the foam extension inside of VSCode. I've used Obsidian.md , Evernote, Cherry Tree, One Note, and various other note taking applications before I settled on…
3D motion by CmdrKitten Lorem ipsum dolor sit amet, consectetur adipiscing elit. Quisque vel ligula vel sem hendrerit semper vel eget metus. Duis magna lectus, bibendum sollicitudin dui at, consequat viverra ante. Mauris maximus elit et arcu luctus lacinia. Donec nec turpis in neque lacinia tincidunt nec sed ex. Sed eleifend tincidunt ligula, vel ullamcorper ex scelerisque ac. Maecenas…
Installation Customization Directory Map Collections Content Dates Deployment Work in Progress Plugins I needed a note taking management system that would play nicely with a static site generator, and I didn't want to use tools with restrictive liscensing. Athena is an extendable and minimal pre-configured 11ty theme bundled to work alongside foam and several markdown-friendly vscode plugins.…
the science of secrecy is largely a secret science While authentication keys tend to expire once changed or during single use, decryption keys can remain detrimental to security due to their persistent value in decrypting ciphertext corresponding to those exact keys. [1] In other words, as long as ciphertext is widely available, access to its corresponding decryption key is a security risk.…
Ensuring that data isn't tampered with from unauthorized modification, deletion or addition. This can either be intentional or unintentional degredation of data. Two common points where this occurs can either be during data upload or data storage. Hashing ensures the integrity of data. See authenticity .
One-way function, but can be cracked using rainbow tables [1] and collision attacks [2] . Salting is a technique when a salt value is hashed along with a password, to prevent a known hash attack. Entries with the same password should never have the same hash, therefore salts must have unique values. They can be randomly generated for ease, and large values are preferred. Atwood, Example and then…
Two-way function, the encryption process can be reversed through decryption. This feature makes encryption distinct from hashing . Data encapsulation is not encryption. Hardware direct link to this section AES Vulns direct link to this section DMA attacks replug reboot Software direct link to this section Vulns direct link to this section DMA Cold Boot Freezing of RAM Evil MAID Attacks References…
Encryption ensures the confidentiality of data.
Ensuring that information and communication come from a trusted source. Common techniques used to establish authenticity include authentication, digital certificates, and biometric identification. Closely related to integrity .
This is not a comprehensive guide on Securing Linux servers Booting Daemons Systemd Runit Print Working Directory Create a New User add user to superuser group Managing Permissions Device Managment Manually Mounting Finding UUIDs Building Software From Source Check SSH Logs FAQ Useful information when using the LAMP stack.x Booting direct link to this section Stop the GRUB boot process by pressing…
The use and understanding of Pretty Good Privacy as an encryption standard is misunderstood, even among professionals and whistleblowers. Phil Zimmerman developed PGP encryption software in 1991. It functions as a public encryption system where two individuals need each others' respective public key to communicate. Open PGP refers to this standard, gpg -not the non-free software. You sign with…
The goal of the specification is to successfully creates Ariadne Identity Profiles without the use of openPGP. The ASP is the AIP stored as a cryptographic signature. AIPs describe a identity, whether it's ficticious or not, along with content that can be verified. Other identifiers aside from the profile name are not required, it's a matter of operational security , preference and the user's…
Analysis Time Complexity Space Complexity Recursion Types Gale-Shapely Traveling Salesman Sorting Searching Machine Learning Analysis direct link to this section An algorithm's efficiency is measured in two ways. Time Complexity direct link to this section The amount of time it takes for each statment in an algorithm to complete. Speed does not refer to time but the number of increasing…
Self hosted monitoring tool . Installation direct link to this section Using docker, and assuming that docker is already installed: → cat docker-compose.yml version: '3.3' services: uptime-kuma: image: louislam/uptime-kuma:1 container_name: uptime-kuma volumes: - ./uptime-kuma-data:/app/data ports: - 3001:3001 restart: always PM2 commands direct link to this section Mainly for a docker-free…
A method where security attributes of an existing system are identified to understand security threats and potential mitigation. The overall process involves organizing and analyizing critical details involving the system's infrastructure. The process can be repeated as the system evolves and changes over time. [1] Threat modeling consists of asking ourselves 4 key questions; What are we working…
Infosec direct link to this section Red Teaming direct link to this section DNS Crypt encrypts and anonymizes communication between DNS client and resolver mip22 phishing tool Malicious PDF self explanatory seeker phishes mobile devices for geolocation DOME subdomain enumeration tool ForensiX forensic tool for Google Chrome Blue Teaming direct link to this section Hardening Kitty Linux Monitoring…
Products Cleansers Toners Exfoliants Serums Moisturizer Sunscreen The golden Standard Products direct link to this section I have tried the majority of the products listed below, if I'm not using a specific product anymore it's most likely due to international limitations and trying to reduce my environmental footprint. My skin type leans towards dry and dehydrated, therefore my routine is geared…
Ghost is a headless content management system. I wanted to set up a independent alternative to medium or substack, but I didn't want to rely on ghost.org for mail and hosting. I also wanted to minimize the overall cost for bulk email and other 3rd party services. Dependencies direct link to this section Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04 or Ubuntu 22.04 NGINX (minimum of 1.9.5 for SSL) A…
You must have established SSH between two hosts The most wonderul synchronization tool that can be used locally or remote host. Knowing how to properly utilize rsync can streamline backups. preserves file permissions, modifications, and timestamps symbolic links in absolute and relative paths will be re-created data is only transferred as needed making it efficient transfers occur over SSH for…
I haven't found one of these tutorials in a while so I decided I should do my own. I wanted a rice my barebones Void Linux install using new software. In general ricing a fresh unix installation entails an underlying theme for the best aesthetics. Start out with a color scheme or wallpaper to match it to. Keep in mind that any suckless software used must be compiled by hand. Uninstall anything you…
Hardware Requirements direct link to this section You need a 64 bit Intel or AMD CPU, 6GB of RAM and 32GB of storage space at the very minimum . [1] Input Output Memory Enforced Isolation (IOMMU) must be enabled at the BIOs level so that Qubes can enforce isolation. AMD-Vi in my case, it would be Intel VT-d for Intel users. By design Qubes uses Xen [2] as a bare metal hypervisor, so installing…
statically typed direct link to this section Variable types must be known at compile time. Type inference is the ability to guess the variable type, often as a fallback. Variables types cannot be changed after declaration. Examples: C/C++ C# Java Rust Go Ada JADE Fortran Haskell Pascal Scala dynamically typed direct link to this section Type checking is done at runtime. Typing is associated with…
It's almost like a minimal version of QubesOS. A distro-morphed version of Void Linux running KVM machines from virt-manager . Whonix and Kicksecure can be validated during install but other machines can be set up similar to templates in qubesOS . Requirements direct link to this section UEFI 8GB RAM, 50GB of storage wireless connection unless you have ethernet (recommended) Installation direct…
a new key must be generated for each message key's must be as long as messages [1] https://pages.cs.wisc.edu/~rist/642-spring-2014/shannon-secrecy.pdf ↩︎
There are tons of instant messaging applications out there nowdays, but there is rarely a detailed analysis and comparison of the differences between them. Signal Criticism Session Encryption Matrix XMPP/ Jabber Telegram WhatsApp Signal direct link to this section Centralized service, uses and pioneered the double ratchet algorithm used in other messengers such as Google Messages, Facebook…
Methodology direct link to this section world building - history, background, evidence to support the persona, setting up a layered defense adds more security sub aliases are great but be careful not to contaminate data don't share operational details, your friends will betray you be paranoid, this doesn't work retroactively move onto new personas after enough activity is generated Personal…
The mission of OpenAI is to ensure AGI benefits all of humanity, which means both building safe and beneficial AGI and helping create broadly distributed benefits. We are now sharing what we've learned about achieving our mission, and some facts about our relationship with Elon. We intend to move to dismiss all of Elon’s claims. Example footnote. Elon Musk sought to merge OpenAI into Tesla…
mysql mysql -u USERNAME -pPASSWORD -h HOSTNAMEORIP DATABASENAME References direct link to this section https://www3.ntu.edu.sg/home/ehchua/programming/sql/MySQL_Beginner.html
sequence: objects in order (7,21,57) =/= (57,7,21) set: unordered objects {7,21,57} = {57,7,21} cartesian product: A = {1,2} , B ={x,y} A x B = {(1,x),(1,y),(2,x),(2,y)}
iptables A rule-based firewall that comes pre-installed in most Linux systems. UFW is actually a front-end for iptables. sets of rules in tables are chains ACCEPT – will allow the packet to pass through. DROP – will not let the packet pass through. RETURN – stops the packet from traversing through a chain and tell it to go back to the previous chain. The default filter table has three chains:…
git Git global setup git config --global user.name "Elizabeth" git config --global user.email "lzrddev@riseup.net" Create a local config $ git config --local user.name "Local User" # Create a system config $ sudo git config --system user.name "System User" Push an existing folder cd existing_folder git init --initial-branch=main git remote add origin https://gitlab.com/lzrddev/suckless-setup.git…
FAQ direct link to this section Questions I had abouut Docker but never thought to ask. When is using a virtual machine or going bare metal more appropriate? Legacy applications may perform better on bare metal, anything needed intensive resources will benefit from bare metal. What is a Docker image? The template loaded onto a container. Images are created by the Dockerfile along with a context ,…
setting up a crontab direct link to this section crontab -e # .---------------- minute (0 - 59) # | .------------- hour (0 - 23) # | | .---------- day of month (1 - 31) # | | | .------- month (1 - 12) OR jan,feb,mar,apr ... # | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat # | | | | | # * * * * * command to be executed # # m h dom mon dow command 0 3 * * *…
Very good for the environment and making use of food scraps and other organic matter.. Desired ratio is 30:1 ratio of Carbon to Nitrogen DiY Compost Bin direct link to this section drill holes around a 32 gallon trash bin or bucket put browns over greens and scraps to neutralize odors always have double the browns to greens once the first bin is full transfer compost to a second bin Carbon Sources…
Pre-Installation Post-Installation Setting Up the Network Package Management Service Management Wireguard with MullvadVPN Security Hardening A barebones setup guide for my personal configuration of void. I prefer XFCE to any other desktop environment but I opt for a more minimal setup below: Window Manager: i3 Terminal: alacritty Image Viewer: feh Display Manager: xrandr Text Editor: Kakoune Web…
It's always beneficial to consider your threat model. [ ] Create SSH Keys [ ] Secure /etc/ssh/sshd_config [ ] limit sudousers [ ] limit suusers [ ] firejail to sandbox [ ] firewall or iptables [ ] Disable or remove server services that are not going to be utilized (e.g., FTP, DNS, LDAP, SMB, DHCP, NFS, SNMP, etc.). [ ] use LAN whenever possible [ ] use WPA2 if using wireless Root direct link to…
SSH (Secure Shell) generating ssh-keys direct link to this section ssh-keygen -o ssh-keygen -t ed25519 It is using an elliptic curve signature scheme, which offers better security than ECDSA and DSA. At the same time, it also has good performance. checking for existing keys direct link to this section lzrd@DESKTOP-B0F3S53:~$ ls -la .ssh if there isn't a .ssh directory then you can just make it…
OSINT Introduction Safety and OPSEC Setting up an Environment Finding Related Sites Critical Skills Finding Data Verifying Data Analyzing Data Tools Geolocation Google Dorking People Searches Phone Reverse Lookuup Introduction direct link to this section Safety and OPSEC direct link to this section A robust framework needs to be created for investigative journalists or investigators facing hostile…
cmd line stuff IPs direct link to this section curl ipinfo.io/54.90.107.240 Email direct link to this section curl emailrep.io/john.smith@gmail.com SSH Tunneling direct link to this section ssh -L localport:127.0.0.1:remoteport user@host Visualize like so: ssh -L 127.0.0.1:8080:127.0.0.1:80 user@host SOCKS Proxy direct link to this section SSH -D 8080 user@host NMAP direct link to this section…
Created in 1988 and uses an open protocol, anyone can host their own irc server so it is decentralized. Protocol direct link to this section A client is defined as anything connecting to a server [1] and every client is distinguished with a unique nickname that is a maximum of 9 characters. Servers collect the name of the client's host and the username of the client as well as the server…
The three most important things that differentiates distributions from one another is either package management, community, or philosophy. I don't generally cover derived distributions such as Artix or Linux Mint. I'm not sorry about it. Daily Drivable direct link to this section qubesOS can use Whonix as a disposable qube alongside Fedora or Debian as default templates Void Linux no systemd, uses…
Installation direct link to this section Graphene only officially supports downloading through the Web USB installer or through the command line. [1] You're expected to have 2GB of free memory and 8GB of free storage space, a USB-C cable will be used to transfer data to the mobile device. Obstacles direct link to this section The device I plan to flash will be the Pixel 7, but my carrier has…
Installation direct link to this section I downloaded the memory stick image because I generally prefer to use USB sticks when burning the image files. I simply followed the commands and steps outlined in the FreeBSD documentation [1] . The installer was straightforward and I experienced no issues other than my network interface not being supported. More on this later. Verifying the Image File…
Dependencies direct link to this section Git Nodejs with NPM, use the LTS release Docker engine Installation with Docker direct link to this section Essential scripts and templates are included in the repository. Clone the stable branch and build a docker img: docker build -t cryptpad/cryptpad:version-2024.3.0 . edit the following values in docker-compose.yml : CPAD_MAIN_DOMAIN CPAD_SANDBOX_DOMAIN…
C This page does not cover topics relevant to C Plus Plus . Often dubbed a general-purpose or system programming language due to its close associated with the UNIX system. How to C in 2016 direct link to this section Modern solutions to modern problems in a not so modern programming language. [1] Don't write C if you can avoid it, follow modern rules if you must write C use standard types, not…