Skip to content

Instantly share code, notes, and snippets.

View konklone's full-sized avatar

Eric Mill konklone

646 followers · 80 following
View GitHub Profile
@konklone
konklone / intro-to-open-data-digitalgov-notes.md
Last active April 5, 2016 13:24
@konklone
konklone / cyber.md
Last active March 8, 2016 02:39
@konklone
konklone / test-sha-1.rb
Created January 4, 2016 03:40
given a CSV of domains, test if they have SHA-1 in the chain anywhere
#!/usr/bin/env ruby
require 'csv'
require 'json'
domains = CSV.readlines("sha-1-in-chain-or-not.csv").flatten.sort
in_chain = 0
not_in_chain = 0
@konklone
konklone / debug-log.txt
Created December 30, 2015 14:46
sent message to +[REDACTED] 1451486047832 from +[REDACTED].1
delivery receipt from +[REDACTED].2 1451486047832
delivery receipt from +[REDACTED].1 1451486047832
websocket closed 3001 No response to keepalive request
GET https://textsecure-service-ca.whispersystems.org:4433/v1/devices
GET https://textsecure-service-ca.whispersystems.org:4433/v1/devices 200 Success
opening websocket
websocket open
Error: Bad MAC
Error: Bad MAC
@konklone
konklone / convert-ua-data.py
Created December 23, 2015 22:33
converts ua-capabilities.txt TSV into a CSV file
#!/usr/bin/env python
import csv
import re
input_file = "ua-capabilities.txt"
# double-quote the quotes, save to an intermediary file.
# double-quoting is necessary to parse correctly, otherwise you eventually get:
# _csv.Error: field larger than field limit (131072)
@konklone
konklone / diff-edpubs.gov.md
Last active November 17, 2015 23:51
Some research on why I can't curl edpubs.gov on a server

From my local laptop (Ubuntu 15.10):

$ echo -n | openssl s_client -connect edpubs.gov:443 -servername edpubs.gov -showcerts > edpubs.gov.info

depth=2 C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2009 Entrust, Inc. - for authorized use only", CN = Entrust Root Certification Authority - G2
verify return:1
depth=1 C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2012 Entrust, Inc. - for authorized use only", CN = Entrust Certification Authority - L1K
verify return:1
@konklone
konklone / vets-gov.md
Last active November 12, 2015 19:29
Looking at the homepage of what's now [vets.gov](https://www.vets.gov) over time, during development from March to its November initial public release.
@konklone
konklone / rename-listserv-log-files.rb
Created November 9, 2015 21:29
Rename files exported from L-Soft's LISTSERV software from XXX.LOGYYMM to XXX-YYYYMM.LOG
#!/usr/bin/env ruby
###
# Small script to rename files as exported from L-Soft's LISTSERV.
#
# Files are named with the month in the extension, e.g. SM-COP.LOG1410
# This renames them to be of the form SM-COP-2014-10.log
#
# Written by Eric Mill, eric.mill@gsa.gov. Public domain.
###
@konklone
konklone / ericmill-cabforum-post.md
Last active October 20, 2015 20:32
Better formatted version of https://cabforum.org/pipermail/public/2015-October/006108.html

From: Eric Mill

Re: [cabfpub] Ballot 152 - Issuance of SHA-1 certificates through 2016

(Please feel free to re-post to the public list, if you think it's merited.)

Sigbjørn touched on this point, but I think it bears some elaboration -- the CA/Browser Forum has a few crucial audiences with which it needs to maintain credibility. The browsers and CAs that make it up are the most obvious and important ones.

Large enterprises/customers are also important, and they have a clear voice in this process, which they can express to members of this forum privately and publicly. While they may not always get their way, I would say their interests are well-represented.

@konklone
konklone / digitalgov-third-parties-talk.md
Last active May 27, 2016 12:39
Resources and links from the DigitalGov University talk on "Privacy, Security, and Third Party Web Services"