Skip to content

Instantly share code, notes, and snippets.

View spangey's full-sized avatar

spangey

View GitHub Profile
@spangey
spangey / gist:97fdc2b4f5945d735b6f
Last active August 29, 2015 14:09
random ish...
Arte`
```
ssh-keygen -lv -f .ssh/id_rsa
```
@spangey
spangey / m2sms
Created December 8, 2014 22:02
Email to SMS gateways in YAML
config:
from_address: noreply@domain.com
carriers:
alltel:
name: Alltel
value: @message.alltel.com
ameritech:
name: Ameritech
value: @paging.acswireless.com
@spangey
spangey / m2sms
Created December 8, 2014 22:07
Email to SMS gateways in JSON
{
"config": {
"from_address": "noreply@domain.com"
},
"carriers": {
"alltel": {
"name": "Alltel",
"value": "@message.alltel.com"
},
"ameritech": {
http://nullprogram.com/blog/2012/06/08/
https://wiki.debian.org/Subkeys?action=show&redirect=subkeys
https://futureboy.us/pgp.html
# nigget patented poormans wget ! lulz
#this doesnt work as alsia.. need to think about making the alias work
alias nigget=(echo 'GET /'; echo; sleep 1; ) | telnet $1 80
Thus, switching to AES-256, SHA-512 or any algorithm with a big, mean-looking number, will not give you "more security". It will give you a feeling of safety, in the same way that red cars are often believed to be faster. If that's your thing, then, by all means, use AES -- after all, one point of security is to reduce anxiety. But, scientifically, algorithm switching is not necessary. GnuPG defaults to CAST5 and SHA-1 because this maximizes interoperability with older implementations of OpenPGP.
-s2k-mode n
Selects how passphrases are mangled. If n is 0 a plain passphrase (which is not recommended) will be used, a 1 adds a salt to the passphrase and a 3 (the default) iterates the whole process a number of times (see –s2k-count). Unless --rfc1991 is used, this mode is also used for conventional encryption.
--s2k-count n
Specify how many times the passphrase mangling is repeated. This value may range between 1024 and 65011712 inclusive. The default is inquired from gpg-agent. Note that not all values in the 1024-65011712 range are legal and if an illegal value is selected, GnuPG will round up to the nearest legal value. This option is only meaningful if --s2k-mode is 3.
This explains it quite well in my opinion. By default s2k-mode is set to the 'most secure' method available. With s2k-count you can increase the amount of times your password gets mangled. Honnestly I would just leave it by default for the sake of compatibility. Considering the algorithms you are using (AES-256) you should be quite
Note: It's also a good idea to use an IP that has nothing else bound to it.
# netstat -lnap | grep SERVER_IP
This should show only ntp or such. not a lot of listening ports.
Example:
# netstat -lnap | grep SERVER_IP
udp 0 0 SERVER_IP:123 0.0.0.0:* 4242/ntpd
Step 1:
Run this command on your Server:
Afghanistan, Agent, Agriculture, Agro, Aid, Air borne, Air Marshal, Airplane, Airport, Al Qaeda, Al-Shabaab, Ammonium nitrate, AMTRAK, Anthrax, Antiviral, Artistic Assassins, Assassination, Attack, Authorities, Avalanche, Avian, Bacteria, BART, Biological, Biological event, Biological weapon, Black out, Blister agent, Blizzard, Body scanner, Bomb squad, Bomb threat, Border, Border Patrol, Border Protection, Botnet, Breach, Bridge, Brown out, Brush fire, Brute forcing, Burn, Burst, Cain and abel, Cancelled, Car bomb, Cartel, Center for Disease Control, Chemical, Chemical agent, Chemical burn, Chemical fire, Chemical spill, Chemical weapon, China, Ciudad Juarez, Closure, Cloud, Coast Guard, Cocaine, Collapse, Colombia, Computer infrastructure, Conficker, Consular, Contamination, Conventional weapon, Cops, Crash, Crest, Critical infrastructure, Customs, Cyber attack, Cyber Command, Cyber security, Cyber terror, DDOS, Deaths, Decapitated, Delays, Denial of service, Dirty bomb, Disaster, Disaster assistance,
@spangey
spangey / watchlist.txt
Created January 15, 2015 21:46
compiled list of dhs watch words (txt) sourced from https://epic.org/foia/epic-v-dhs-media-monitoring/Analyst-Desktop-Binder-REDACTED.pdf and the Business Insiders article
Afghanistan, Agent, Agriculture, Agro, Aid, Air borne, Air Marshal, Airplane, Airport, Al Qaeda, Al-Shabaab, Ammonium nitrate, AMTRAK, Anthrax, Antiviral, Artistic Assassins, Assassination, Attack, Authorities, Avalanche, Avian, Bacteria, BART, Biological, Biological event, Biological weapon, Black out, Blister agent, Blizzard, Body scanner, Bomb squad, Bomb threat, Border, Border Patrol, Border Protection, Botnet, Breach, Bridge, Brown out, Brush fire, Brute forcing, Burn, Burst, Cain and abel, Cancelled, Car bomb, Cartel, Center for Disease Control, Chemical, Chemical agent, Chemical burn, Chemical fire, Chemical spill, Chemical weapon, China, Ciudad Juarez, Closure, Cloud, Coast Guard, Cocaine, Collapse, Colombia, Computer infrastructure, Conficker, Consular, Contamination, Conventional weapon, Cops, Crash, Crest, Critical infrastructure, Customs, Cyber attack, Cyber Command, Cyber security, Cyber terror, DDOS, Deaths, Decapitated, Delays, Denial of service, Dirty bomb, Disaster, Disaster assistance, Disas
@spangey
spangey / watchlist.txt
Created January 15, 2015 21:46
compiled list of dhs watch words (txt) sourced from https://epic.org/foia/epic-v-dhs-media-monitoring/Analyst-Desktop-Binder-REDACTED.pdf and the Business Insiders article
Afghanistan, Agent, Agriculture, Agro, Aid, Air borne, Air Marshal, Airplane, Airport, Al Qaeda, Al-Shabaab, Ammonium nitrate, AMTRAK, Anthrax, Antiviral, Artistic Assassins, Assassination, Attack, Authorities, Avalanche, Avian, Bacteria, BART, Biological, Biological event, Biological weapon, Black out, Blister agent, Blizzard, Body scanner, Bomb squad, Bomb threat, Border, Border Patrol, Border Protection, Botnet, Breach, Bridge, Brown out, Brush fire, Brute forcing, Burn, Burst, Cain and abel, Cancelled, Car bomb, Cartel, Center for Disease Control, Chemical, Chemical agent, Chemical burn, Chemical fire, Chemical spill, Chemical weapon, China, Ciudad Juarez, Closure, Cloud, Coast Guard, Cocaine, Collapse, Colombia, Computer infrastructure, Conficker, Consular, Contamination, Conventional weapon, Cops, Crash, Crest, Critical infrastructure, Customs, Cyber attack, Cyber Command, Cyber security, Cyber terror, DDOS, Deaths, Decapitated, Delays, Denial of service, Dirty bomb, Disaster, Disaster assistance, Disas
@spangey
spangey / watchlist.txt
Created January 15, 2015 21:46
compiled list of dhs watch words (txt) sourced from https://epic.org/foia/epic-v-dhs-media-monitoring/Analyst-Desktop-Binder-REDACTED.pdf and the Business Insiders article
Afghanistan, Agent, Agriculture, Agro, Aid, Air borne, Air Marshal, Airplane, Airport, Al Qaeda, Al-Shabaab, Ammonium nitrate, AMTRAK, Anthrax, Antiviral, Artistic Assassins, Assassination, Attack, Authorities, Avalanche, Avian, Bacteria, BART, Biological, Biological event, Biological weapon, Black out, Blister agent, Blizzard, Body scanner, Bomb squad, Bomb threat, Border, Border Patrol, Border Protection, Botnet, Breach, Bridge, Brown out, Brush fire, Brute forcing, Burn, Burst, Cain and abel, Cancelled, Car bomb, Cartel, Center for Disease Control, Chemical, Chemical agent, Chemical burn, Chemical fire, Chemical spill, Chemical weapon, China, Ciudad Juarez, Closure, Cloud, Coast Guard, Cocaine, Collapse, Colombia, Computer infrastructure, Conficker, Consular, Contamination, Conventional weapon, Cops, Crash, Crest, Critical infrastructure, Customs, Cyber attack, Cyber Command, Cyber security, Cyber terror, DDOS, Deaths, Decapitated, Delays, Denial of service, Dirty bomb, Disaster, Disaster assistance, Disas