https://grepular.com/Abusing_HTTP_Status_Codes_to_Expose_Private_Information
A clever pseudo-hack that allows a web site to determine if I'm logged into facebook / gmail / digg / possibly other sites based on various urls which are only accessible to logged in users. Obviously smashed by noscript... :-)
http://doc.bazaar.canonical.com/bzr.dev/en/user-reference/authentication-help.html
How to save usernames / passwords so bazaar doesn't ask for them every time. Handy.
https://www.berrange.com/posts/2011/12/18/multi-factor-ssh-authentication-using-yubikey-and-ssh-public-keys-together/
Article on how to use a YubiKey alongside SSH RSA key based login. Bit of a hack, but it appears to work. Nice.
https://github.com/firnsy/yubipam/#readme
PAM module that allows offline authentication against a yubikey. Requires a key to be retrieved from yubico by sending email plus payment info, etc. Less secure than online validation. Only supports single factor auth, username + token, no password.
http://www.pyrosoft.co.uk/blog/2010/10/27/import-your-own-rsa-ssh-key-into-amazon-ec2/
How to get custom RSA SSH keypairs into EC2. There is one region missing from this post.
https://github.com/tfheen/ykfde#readme
Script to enable a yubikey to be used with luks full disk encryption. Very interesting...
http://blog.rootshell.be/2009/03/27/yubikey-authentication-on-linux/
Article explaining how to use yubipam to enable yubikey authentication on a linux machine. However, yubipam only supports single factor auth, username + token, no additional password.
