webframp

Probably one of the easiest things you'll ever do with gpg

Install Keybase: https://keybase.io/download and Ensure the keybase cli is in your PATH

First get the public key

keybase pgp export | gpg --import

Next get the private key

webframp

• There is debate around whether Kyber-512 provides adequate security compared to the AES-128 benchmark. NIST claims it meets this level factoring in memory access costs, but others argue the analysis is uncertain.

• NIST's analysis added 40 bits of estimated security to Kyber-512's post-quantum security level due to memory costs, bringing it above the AES-128 threshold. Critics question this calculation.

• NTRU provides greater flexibility than Kyber in supporting a wider range of security levels. At some levels it also has better performance and security than Kyber options.

• The security of lattice-based cryptosystems like Kyber and NTRU is not fully understood, and there is a risk of better attacks being discovered in the future.

• Standardizing a system like Kyber-512 that may have limited security margin could be reckless given lattice cryptanalysis uncertainties.

webframp

{
  description = "some nix based tooling";

  inputs = {
    # Default to nixpkgs unstable channel - ensure we have access to latest tools
    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";

    # Pure Nix flake utility functions, can simplify some tasks
    flake-utils.url = "github:numtide/flake-utils";
  };

webframp

{ config, lib, pkgs, ... }:

{
  # Enable User Setup
  # https://rycee.gitlab.io/home-manager/index.html#sec-install-nix-darwin-module
  imports = [ <home-manager/nix-darwin> ];
  home-manager.useGlobalPkgs = true;

  networking.hostName = "megatron";

webframp

A Mostly usable Windows workstation for macOS or Linux users

Especially starting with Windows 10, it isn't all that bad to work on day to day. It just requires a bit of setup out of the box to make it behave better just like those other platforms, and is sufficiently different so as to be non obvious to experienced Linux or macOS users.

Pick and choose what to do from below that fits your needs.

Note: I use emacs, like emacs keybindings and do a bit of Chef development,

webframp

import os
import re


def zsh_to_fish(cmd):
    return (cmd.replace('&&', '; and ')
               .replace('||', '; or '))


def is_valid_fish(cmd):

webframp

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

webframp

{ config, lib, pkgs, ... }:

{
  # Enable User Setup
  # https://rycee.gitlab.io/home-manager/index.html#sec-install-nix-darwin-module
  imports = [ <home-manager/nix-darwin> ];
  home-manager.useGlobalPkgs = true;

  # System settings
  # Explained: https://gist.github.com/MatthewEppelsheimer/2269385

webframp

Reset root/admin password

Lost the root/admin password? You can reset it using the command-line. Recipe adapted from gitlab issue #308.

# start the console
sudo gitlab-rails console

webframp

Internet Scale Services Checklist

A checklist for designing and developing internet scale services, inspired by James Hamilton's 2007 paper "On Desgining and Deploying Internet-Scale Services."

• http://mvdirona.com/jrh/talksandpapers/jamesrh_lisa.pdf

Basic tenets

• Does the design expect failures to happen regularly and handle them gracefully?
• Have we kept things as simple as possible?