chmac: security

Sort by: Date / Title / URL

  1. http://www.macresearch.org/tutorial_backups_with_launchd
    Tutorial on how to have launchd automatically run scripts (such as rysnc) when USB devices are plugged in, automated backup when a USB drive is plugged in for example.
  2. http://blog.arnaudlacour.com/2012/11/backing-up-to-usb-drive-when-plugged-in.html
    Tutorial on how to set up OSX to automatically backup when a USB drive is plugged in. Neat.
  3. http://lifehacker.com/5643460/how-to-track-and-potentially-recover-your-stolen-laptop-or-android-with-prey
    Install this, prey, on phone (and laptop?). It's remote wipe, track, etc software, and it's free up to 3 devices apparently.
  4. http://howtonode.org/introduction-to-npm
    Oustanding little introduction to npm and how to use it. One trick, give your user access to /usr/local/ or /usr/lib/node_modules/ so npm doesn't need sudo. Nice.
  5. http://doc.bazaar.canonical.com/bzr.dev/en/user-reference/authentication-help.html
    How to save usernames / passwords so bazaar doesn't ask for them every time. Handy.
  6. https://discussions.apple.com/thread/3508926?start=0&tstart=0
    Apparently one can secure a mac by issuing the command `sudo pmset -a destroyfvkeyonstandby 1` which tells it to destroy the FileVault keys on standby, whether standby to memory or disk.
  7. http://rapidnfc.com/
    UK based NFC seller. Great info on NFC tags, how to program them, how much data they store, and so on. Very handy, seems reasonably priced.
  8. https://www.berrange.com/posts/2011/12/18/multi-factor-ssh-authentication-using-yubikey-and-ssh-public-keys-together/
    Article on how to use a YubiKey alongside SSH RSA key based login. Bit of a hack, but it appears to work. Nice.
  9. http://blog.rootshell.be/2009/03/27/yubikey-authentication-on-linux/
    Article explaining how to use yubipam to enable yubikey authentication on a linux machine. However, yubipam only supports single factor auth, username + token, no additional password.
  10. https://github.com/firnsy/yubipam/#readme
    PAM module that allows offline authentication against a yubikey. Requires a key to be retrieved from yubico by sending email plus payment info, etc. Less secure than online validation. Only supports single factor auth, username + token, no password.
  11. https://github.com/tfheen/ykfde#readme
    Script to enable a yubikey to be used with luks full disk encryption. Very interesting...
  12. https://www.yubico.com/
    The YubiKey is a USB device which appears to the computer as a keyboard. It has only 1 button, which when pressed, enters a one-time-password and then enter (can be configured). This can be verified against an online server, or offline via a few tools.
  13. http://www.mindtwist.de/main/linux/5-linux-security/6-how-to-use-one-time-ssh-passwords-on-debianubuntu.html
    Very interesting article on how to enable single use password logon for Ubuntu. Requires a thing called opie and a few config file changes. Seems very useful...
  14. http://raymorgan.net/web-development/how-to-obfuscate-integer-ids/
    Interesting article on how to obfuscate integer IDs by creating secure hashes which can be verified. Produces long hashes, but they are tamper proof.
  15. http://blog.dustinkirkland.com/2010/06/ecryptfs-backup-strategy.html
    One strategy to backup encrypted ecryptfs data as suggested by the author of ecryptfs. Useful and simple. Backup the metadata and the raw files with rsync.
  16. http://blog.dustinkirkland.com/2011/04/introducing-ecryptfs-recover-private.html
    A critical utility for ecryptfs called ecryptfs-recover-private which automates and simplifies the process of recovering encrypted home directory data from Ubuntu.
  17. http://pastebin.com/yPyK193a
    A different strategy to find an encrypted filename from an unencrypted filename under ecryptfs (Ubunut's encrypted home directory system).
  18. http://www.telmon.org/?p=631
    Interesting article including a script that figures out a mapping from unencrypted filenames into ecryptfs encrypted filenames. Potentially useful.
  19. http://www.howtoforge.com/how-to-set-up-mysql-database-replication-with-ssl-encryption-on-centos-5.4
    Good introduction on setting up mysql replication with SSL encryption. Some of the options have changed in mysql 5.5 (no moremaster-connect-retry) and some settings are not applicable to Ubuntu, but the gist of it is useful.
  20. http://tombuntu.com/index.php/2007/12/12/simple-file-encryption-with-openssl/
    Handy howto on encrypting files with openssl and a passphrase. Dead easy, `openssl aes-256-cbc -salt -in file -out file` then `openssl aes-256-cbc -d in file out file`. Can also be used in pipes like `tar cp /blah | openssl aes-256-cbc -salt -out b.tar``
  21. http://www.strangeloopnetworks.com/
    In a similar vein to cloudflare / yottaa, strangeloop offer a performance enhancement service through a physical / cloud based appliance. It uses the standard techniques, js/css combining, sprites, cdn, tailoring to the browser, and so on. No pricing. :-(
  22. http://www.yottaa.com/
    Similar to CloudFlare but more expensive ($30/mth no ssl, $130/mth with ssl) it accelerates web sites through the use of CDN, js/css combining, etc.
  23. https://www.cloudflare.com/
    loudFlare is an automated CDN / content acceleration type service. It acts as a reverse proxy providing some sort of heuristic security scanning, logging of traffic, and an automatically configured CDN. $15 + $5/site/month.
  24. https://support.mozilla.org/en-US/questions/786035#answer-142961
    How to get an SSL client certificate into Firefox on Android. Copy cert9.db and key4.db from phone's SD card Androiddataorg.mozilla.firefoxfilesmozillaprofile.default to dir. Then `pk12util -i file.p12 -d sql:dir`
  25. http://it.toolbox.com/blogs/securitymonkey/howto-securing-a-website-with-client-ssl-certificates-11500
    A wonderful article on how to setup Client SSL authentication. Includes all the openssl commands and apache config variables.

First / Previous / Next / Last / Page 1 of 2