It’s time to ditch cloud based password managers. There.. I said it. What we are doing when we use them is giving ownership and management of our trusted secrets to someone else, and hoping that they will be able to protect them from bad guys, and make sure they are available when we need them.
That’s a heck of an ask, isn’t it? I’ve been a LastPass customer for a very, very long time.. I use it to share secrets with my family, I use it on my mobile device to log into apps. It’s a safe bet to say it’s a critical piece of how I operate, and they have never once let me down. That said, if they asked for money to continue using their service, I’d have to pay. If they had a security event where secrets were compromised or if they lost my data, I’d be in very, very bad shape.
In this article, I will talk about how to set up a WebDAV share that’s protected by HTTPS using Traefik, Let’s Encrypt, and a WebDAV container on your own server, and use it to sync your secrets with devices.
I’ve been using this for a while now, and have found it a great little trick for accessing services that are blocked due to a firewall.
It’s pretty simple, you just have a few parts to the command string. The first command argument tells ssh to forward a local port (LP) to a remote machine Remote) on a remote port (RP). The second part is something you’re probably familiar with, the destination that you’re connecting to (Destination).
A cardinal rule with computer security is that if you have physical access to a computer, you can pretty much do whatever your heart desires to it. Luckily, this includes removing the grub password from a linux box so that you can restore the root password…
Your best course of action in doing this is to download a bootable linux cd. The one that I tested this with is a worthwhile download even if you’re just reading this for fun.
I recently got a file that could have been contaminated by some kind of a virus. I decided not to risk my newly installed, and unprotected Win 2k3 Server installation, so I found a great scanner online that scans it with multiple viruses at once.
First of all, this entry is not being entered in Drupal 4.7, I haven’t had the time to get that set up yet.
The other day I decided to take a look at my server logs, which is something that I should have been doing all along. I found out that more than one host has been brute force / dictionary scanning my ssh server. I decided that even though my passwords are strong, that I really didn’t want people to have the ability to do that. Fortunately for me there are some tools out there that work great for this very purpose. The one that I chose is called DenyHosts.
The Tor Network uses something called Onion Routing. Tor’s functionality is pretty simple. You run a daemon on a computer on your network (the tor client) and it connects to a server inside the tor network. Once your transmitted packets are inside the tor network they are routed through the different servers in a way so that no server knows the complete path that a packet takes. On top of this, all transmission inside the tor network is encrypted in order to prevent Man in the Middle Attacks.