Ulaş SAYGIN UlasSAYGINIM

Content Security Policy

with Content Security Policy (CSP) enabled(and a browser that supports it(http://caniuse.com/#feat=contentsecuritypolicy), you can tell the browser that it can only download content from the domains you explicitly allow http://www.html5rocks.com/en/tutorials/security/content-security-policy/ https://www.owasp.org/index.php/Content_Security_Policy I need to change our application code so we can increase security by disabling 'unsafe-inline' 'unsafe-eval'

Networking

#Debugging (See also Traffic analysis) ##Linux

# ethtool eth0              # Show the ethernet status (replaces mii-diag)
# ethtool -s eth0 speed 100 duplex full # Force 100Mbit Full duplex

ethtool -s eth0 autoneg off # Disable auto negotiation

Debian 8 Hardening

Update root's mail recipient. Open /etc/aliases replacing [email protected] with an administrator's email address. This is where logs will be emailed.
```
root:     [email protected]
```
Update the the default umask to 027. Edit the file /etc/init.d/rc and change the following setting:

umask 027

#Unix Toolbox

This document is a collection of Unix/Linux/BSD commands and tasks which are useful for IT work or for advanced users. This is a practical guide with concise explanations, however the reader is supposed to know what s/he is doing.

##Unix Toolbox revision 14.4

The latest version of this document can be found at http://cb.vu/unixtoolbox.xhtml. Replace .xhtml on the link with .pdf for the PDF version and with .book.pdf for the booklet version. On a duplex printer the booklet will create a small book ready to bind. This XHTML page can be converted into a nice PDF document with a CSS3 compliant application (see the script example). See also the about page.
Error reports and comments are m

	<?php
	/**
	* simple method to encrypt or decrypt a plain text string
	* initialization vector(IV) has to be the same when encrypting and decrypting
	*
	* @param string $action: can be 'encrypt' or 'decrypt'
	* @param string $string: string to encrypt or decrypt
	*
	* @return string
	*/

	#!/bin/sh
	# sysctls for jail needs to be
	# allow.raw_sockets=true,allow.sysvipc=1

	# Enable sshd
	sed -i .bak 's/sshd_enable="NO"/sshd_enable="YES"/' /etc/rc.conf
	rm /etc/rc.conf.bak

	# Add sudo
	pkg install sudo

	#include "FastLineReader.h"

	// POSIX
	#include <sys/types.h>
	#include <sys/mman.h>
	#include <sys/stat.h>
	#include <fcntl.h>
	#include <unistd.h>
	#include <errno.h>


	# uname -a
	FreeBSD blynk.waitman.net 11.0-CURRENT FreeBSD 11.0-CURRENT #0 r275492: Fri Dec 5 06:52:11 PST 2014 [email protected]:/usr/obj/usr/src/sys/BLYNK amd64


	# usbconfig -d 0.5 dump_device_desc
	ugen0.5: <CSR8510 A10 vendor 0x0a12> at usbus0, cfg=0 md=HOST spd=FULL (12Mbps) pwr=ON (100mA)

	bLength = 0x0012
	bDescriptorType = 0x0001

	import UIKit

	extension UIImage {

	// Based on http://stackoverflow.com/a/1262395/449607
	// Optimized for JPEG output
	func imageResized(longEdge : CGFloat) -> UIImage {
	func radians (degrees : Double) -> CGFloat {
	return CGFloat(degrees * M_PI/180)
	}

	See the bash script below. :)

	Tested on debian bookworm-slim (`docker pull debian:bookworm-slim`).

	### Prerequisites

	```bash
	apt update
	apt install -y build-essential wget bison
	```