Hyundeok Park airglow923

How to setup your own CA with OpenSSL

For educational reasons I've decided to create my own CA. Here is what I learned.

First things first

Lets get some context first.

To remove a submodule you need to:

Delete the relevant section from the .gitmodules file.
Stage the .gitmodules changes git add .gitmodules
Delete the relevant section from .git/config.
Run git rm --cached path_to_submodule (no trailing slash).
Run rm -rf .git/modules/path_to_submodule (no trailing slash).
Commit git commit -m "Removed submodule "
Delete the now untracked submodule files rm -rf path_to_submodule

How to make a Release Android App debuggable

Let's say you want to access the application shared preferences in /data/data/com.mypackage.
You could try to run adb shell and then run-as com.mypackage ( or adb shell run-as com.mypackge ls /data/data/com.mypackage/shared_prefs), but on a production release app downloaded from an app store you're most likely to see:

run-as: Package 'com.mypackage' is not debuggable

References:

Overview

Priority values

From man page: man apt_preferences

security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict

m3u8 Downloading

Open Chrome Developer tools and click the Network tab.
Navigate to the page with the video and get it to start playing.
Filter the list of files to "m3u8".
Find master.m3u8 or index.m3u8 and click on it.
Save the file to disk and look inside it.
If the file contains a single m3u8 master url, copy that one instead.
Run the program m3u8x.
Paste the same m3u8 url in both textboxes (URL and Quality URL) and click "Headers" and set the referral url and user-agent from the request as found in Chrome.

How to use?

Copy content of vsix-bookmarklet, create a bookmark in your browser.
Navigate to the web page of the VS Code extension you want to install.
Click the bookmark you just created, then click the download button.
After download finished, rename the file extension to *.vsix.
In VS Code, select Install from VSIX... in the extension context menu.

	/*
	* Example of `builder' design pattern.
	* Copyright (C) 2011 Radek Pazdera
	*
	* This program is free software: you can redistribute it and/or modify
	* it under the terms of the GNU General Public License as published by
	* the Free Software Foundation, either version 3 of the License, or
	* (at your option) any later version.
	*
	* This program is distributed in the hope that it will be useful,

	### 1: Drop invalid packets ###
	/sbin/iptables -t mangle -A PREROUTING -m conntrack --ctstate INVALID -j DROP

	### 2: Drop TCP packets that are new and are not SYN ###
	/sbin/iptables -t mangle -A PREROUTING -p tcp ! --syn -m conntrack --ctstate NEW -j DROP

	### 3: Drop SYN packets with suspicious MSS value ###
	/sbin/iptables -t mangle -A PREROUTING -p tcp -m conntrack --ctstate NEW -m tcpmss ! --mss 536:65535 -j DROP

	### 4: Block packets with bogus TCP flags ###


	// --------------------------------------------------------------------------------------
	// Atomic singly-linked intrusive list using 128-bits Compare And Swap (AKA: DCAS).
	// Keeps a version counter with the list head to prevent the A-B-A problem.
	//
	// Based on the implementation found in moodycamel.com:
	// http://moodycamel.com/blog/2014/solving-the-aba-problem-for-lock-free-free-lists
	//
	// My implementation uses raw GCC/Clang atomics intrinsics. While in theory
	// std::atomic of a struct of exactly 16 bytes and properly aligned could