Category: all
A free yubikey w/ a cheap subscription to wired? What’s the catch?
So reddit revealed today they had been hacked. By someone redirecting SMS, so their 2-factor authentication was hacked. Hmm. Well, we all knew SS7 had flaws. The Yubikey. Its a relatively simple way for the average person to have 2-factor without the hassle. And they cost about $50. USB-A, USB-C, NFC, etc. For Windows, Mac,…
Capture the traffic of a process (and nothing more)
We’ve all been there. We want to know what traffic some python script or something creates. But, well, its the cloud era, and our device is chirping all the time at DNS, at gmail, etc. We try capturing too much and then filtering out. We try idling down the other culprits. If only there was…
Less is more
Less is more. Famous saying, perhaps less well known person (Ludwig Mies van der Rohe). Another way to look at this is “Perfection is achieved, not when there is nothing more to add, but when there is nothing left to take away” (Antoine de Saint-Exupery). Course he also said ‘Dessine-moi un mouton!’ which became a…
Attack of the rack: the killer was in the house!
You know the joke about the crappy horror movie, they trace the IP, its 127.0.0.1, the killer was in the house (localhost)? True story, this just happened to me. So settle down and listen to a tale of NAT, Proxy, Kubernetes, and Fail2Ban (AKA Rack Attack in ruby land). You see, we run a modest…
The agony of NFS: the knife twists a bit more
Recently Google announced Filestore. I was all set to rejoice, after my heartbreaks of recent days. After all, it seemed like NFS might have been the answer for me, but I would have to have it run outside of Kubernetes. So it was with great joy I signed up for the beta program, and even…
