icy

# Tested on QNAP TVS-1282T3
# connect to NAS thru SSH (ssh -p <port> admin@<NAS IP>)

ROOTCA=<custom-rootca>.crt

cp /share/NFSv\=4/<somewhere>/<custom-rootca>.crt /usr/certs
ln -s /usr/certs/$ROOTCA /usr/certs/`openssl x509 -hash -noout -in /usr/certs/$ROOTCA`.0

icy

UFW

I use Ubuntu’s Uncomplicated firewall because it is available on Ubuntu and it's very simple.

Install UFW

if ufw is not installed by default be sure to install it first.

icy

#!/usr/bin/env ruby
#
# Homepage: https://github.com/icy/k8s-select
#
# Purpose : Select the objects you want from maninfests,
#           as you may not want to deploy everything.
# Author  : Ky-Anh Huynh
# Date    : 2019-12
# License : MIT
# Example :

icy

Some examples of SNAT, DNAT with iptables with comments

mainly used in start-up script

How to test 'safely'

When we play with iptables aka firewall we might end up in situation, where we execute rule, which has unforseen impact - lock yourself out. Recovering from this situation is necessity.

How to:

• Enable reboot via SMS.
• Test all commands in shell first before putting them into Start-up script. This way the command will be wiped out, when unit is rebooted.

masquarade all outgoing packets to be WLAN0 IP

icy

#!/bin/sh
# script to automate the creation of chroot jail
# w/ minimal executables to run git

export CHROOT=/var/chroot

function copy_binary() {
    for i in $(ldd $*|grep -v dynamic|cut -d " " -f 3|sed 's/://'|sort|uniq)
      do
        cp --parents $i $CHROOT

icy

# The goal: create a list of maps of subnet mappings so we don't have to statically hard-code them in aws_lb
# https://www.terraform.io/docs/providers/aws/r/lb.html#subnet_mapping
locals {
  # These represent dynamic data we fetch from somewhere, such as subnet IDs and EIPs from a VPC module
  subnet_ids = ["subnet-1", "subnet-2", "subnet-3"]
  eips       = ["eip-1", "eip-2", "eip-3"]
}

# Here's the hack! The null_resource has a map called triggers that we can set to arbitrary values. 
# We can also use count to create a list of null_resources. By accessing the triggers map inside of

icy

*
   Author: Ky-Anh Huynh
   Original script: https://gist.github.com/mikaelz/11b956c3d2e078105a19dd9df70dbf27
   Usage:
     ticker : Your ticker name, eg. ETH-EUR
     token  : A random string otherwise yahoo output may be a bit messy
              You should have random token on each call!
*/
function MyYahooTicker(ticker,token) {
  var ticker = ticker || "SXR8.DE";

icy

Overview

• Pivotal Story

This is an investigation into our susceptibility to Slow HTTP Attacks. These attacks take advantage of how typical web servers process requests and employ several strategies to achieve the same result. By keeping connections open longer than normal, they thereby prevent new connections from being opened and the server will either hang or return 503.

The question is less about whether we are vulnerable, but rather to what extent. Any server can be DoS’d, it’s just a matter of how easy it is to execute.

Articles

• Mitigating DDoS Attacks with NGINX
• Qualys: Slow HTTP POST Vulnerability

icy

icy

Only in AdguardForiOS/: AdguardExtension
Only in AdguardForiOS/: AdguardSafariExtension-iOS.xcworkspace
Only in AdguardForiOS/: Builder
Only in AdguardForiOS/: classStyleTemplate.txt
Only in AdguardForiOS/: fastlane
Only in AdguardForiOS/: Gemfile
Only in AdguardForiOS/: Gemfile.lock
diff -r AdguardForiOS/.git/config VisafeIOS/.git/config
7c7
< 	url = https://github.com/AdguardTeam/AdguardForiOS.git