Rocket scientist. Computer hacker. Geek before it was cool.
BTC Donations:
1AU9qGkSubhR24r8Y4WEoV8bccZjeT2dKg
I've had a Gmail account since the service launched back in 2004. Much has changed in that time, and sadly, we've grown apart. It was finally time to cut ties and move on to greener pastures. It turned out to be a lot easier than I'd thought.
A while back while playing 'RegEx Golf' for email extraction, I found out that the '+' sign is a valid email address character. Not only that, but many mail systems (including Gmail) treat it as the start of a tag. So sending an email to [email protected] is treated as though the message was sent to [email protected]. Once I learned that, I had a brainstorm.
A few weeks ago, I wrote about using a dictionary attack to crack a virtual Linux box. In that post, I mentioned using pam_cracklib.so to harden your system against this type of attack. In this post, I'm going to elaborate on that a bit by showing how to do this, and talk about why a sysadmin would want to do so.
I've spent the last few weeks participating in the SecureSet War Games Denver, and it's been a lot of fun. The sessions are a mix of security lectures and hands on activities, with a few CTF type events thrown in there. We recently did a CTF game for gaining root access on a remote Linux VM, where we would need to identify and exploit weaknesses in the system as fast as possible. The winner would get a Sphero Ollie.
In this post, I'll talk about some ways to ensure your SSH sessions stay private.
Concluding this set of posts on PGP, I'm going to talk about some safe ways to share a PGP identity between a desktop and a laptop.
In keeping with the theme of the past few weeks, I'm going to cover some questions you should ask yourself before creating a PGP identity
The OpenPGP standard allows people to sign, encrypt and decrypt files, directories, messages, etc. In this post, we'll look at what PGP is, how it's used, and some guidelines for setting it up securely.