2b

Simple guide for fulldisk encryption with Proxmox and ZFS native encryption

Install normally using the installer, after the setup reboot into recovery mode (from the USB stick). Make sure to install in UEFI mode (you need systemd-boot).

If the USB stick is not working for you, because of the old Kernel version (2.6.x), you can also use an Ubuntu 19.10 / 20.04 boot stick. ZFS suport is enabled there out of the box.

Steps:

Mixed Markdown and Shell Scripting

: By the power of this magic string: ex: set ft=markdown ;:<<'```shell' #, this file is now both a markdown document and an executable shell script. chmod +x it and try running it!

The above line does just what it says. More specifically, when placed within in the first 5 lines and preceded only by blank lines or #-prefixed markdown headers:

The first part of the magic string makes github and various editors (e.g. atom with the vim-modeline packge) treat the file as having markdown syntax (even if the file doesn't have an extension)
The second part (if run in a shell), makes the shell skip execution until it encounters the next ```shell block.

(The line also has to start with a : so that it's valid shell code.)

WannaCry|WannaDecrypt0r NSA-Cyberweapon-Powered Ransomware Worm

Virus Name: WannaCrypt, WannaCry, WanaCrypt0r, WCrypt, WCRY
Vector: All Windows versions before Windows 10 are vulnerable if not patched for MS-17-010. It uses EternalBlue MS17-010 to propagate.
Ransom: between $300 to $600. There is code to 'rm' (delete) files in the virus. Seems to reset if the virus crashes.
Backdooring: The worm loops through every RDP session on a system to run the ransomware as that user. It also installs the DOUBLEPULSAR backdoor. It corrupts shadow volumes to make recovery harder. (source: malwarebytes)
Kill switch: If the website www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com is up the virus exits instead of infecting the host. (source: malwarebytes). This domain has been sinkholed, stopping the spread of the worm. Will not work if proxied (source).

update: A minor variant of the viru

	#!/bin/bash

	set -e

	HELP="
	Usage: $0 -h ROUTER_IP -u USER

	Copy the ssh public key of current logged-in user to a Huawei router.

	arguments:

	#
	# This is the ultimate HAProxy 2.0 "Getting Started" config
	# It demonstrates many of the features available which are now available
	# While you may not need all of these things, this can serve
	# as a reference for your own configurations.
	#
	# Have questions? Check out our community Slack:
	# https://slack.haproxy.org/
	#

	# not an exhaustive list

	nsurlsessiond "icloud sync"
	fseventsd "macos file system events"
	WindowServer "macos windows"
	DisplayLinkManager "macos driver"
	configd "macos dynamic configuration"
	displaypolicyd "macos process"
	CommCenter "macos keychain"
	kernel_task "macos kernel"

	#!/usr/bin/env bash

	# IMPORTANT: Run this script from /home/<USER>/ directory: bash -c "$(curl SCRIPT_URL)"


	# (optional): Preparing the environment if you want to install zen from source:
	# Once you get the VM up and running you need to login with your root account and run below commands.
	# apt-get update && apt-get upgrade -y
	# apt-get install -y build-essential pkg-config libc6-dev m4 g++-multilib autoconf libtool ncurses-dev unzip git python zlib1g-dev wget bsdmainutils automake libgtk2.0-dev && apt-get autoremove -y

	###
	# Proxmox or other server kernel params cheap tune and secure.
	# Try it if you have heavy load on server - network or memory / disk.
	# No harm assumed but keep your eyes open.
	#
	# @updated: 2020-02-06 - more params used, adjust some params values, more comments on params
	#

	### NETWORK ###

	#---------------------------------------------------------------------
	# Example configuration for a possible web application. See the
	# full configuration options online.
	#
	# http://haproxy.1wt.eu/download/1.4/doc/configuration.txt
	#
	#---------------------------------------------------------------------

	global
	log 127.0.0.1 local2

	# Install Homebrew
	/usr/bin/ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"

	# Install QEMU OSX port with ARM support
	brew install qemu
	export QEMU=$(which qemu-system-arm)

	# Dowload kernel and export location
	brew install wget
	wget https://github.com/dhruvvyas90/qemu-rpi-kernel/raw/master/kernel-qemu-4.4.34-jessie