attero apfelchips

security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict

using Ansible command line:

ansible-playbook --connection=local 127.0.0.1 playbook.yml

using inventory:

127.0.0.1 ansible_connection=local

Regular Expression Engine Comparison Chart

Many different applications claim to support regular expressions. But what does that even mean?

Well there are lots of different regular expression engines, and they all have different feature sets and different time-space efficiencies.

The information here is just copied from: http://regular-expressions.mobi/refflavors.html

Autofs on Mac OS X

With autofs you can easily mount network volumes upon first access to the folder where you want to mount the volume. Autofs is available for many OS and is preinstalled on Mac OS X so I show you how I mounted my iTunes library folder using this method.

Prepare autofs to use a separate configuration file

autofs needs to be configured so that it knows where to gets its configuration. Edit the file /etc/auto_master and add the last line:

#
# Automounter master map
#

+auto_master # Use directory service

Transmission Blocklist

The Transmission torrent client has an option to set a Blocklist, which helps protect you from getting caught and having the DMCA send a letter/email.

It's as simple as downloading and installing the latest client:

https://transmissionbt.com/download/

	---
	- name: Install MacOS Packages
	hosts: localhost
	become: false
	vars:
	brew_cask_packages:
	- atom
	- docker
	- dropbox
	- firefox

	// ==UserScript==
	// @name Youtube HD
	// @author adisib
	// @namespace namespace_adisib
	// @description Select a youtube resolution and resize the player.
	// @version 2025.04.13
	// @match https://.youtube.com/
	// @noframes
	// @grant GM.getValue
	// @grant GM.setValue

	function safe { Set-Variable WhatIfPreference $true -Scope Global };
	function unsafe { Set-Variable WhatIfPreference $false -Scope Global -WhatIf:$false };

	function isAdmin {
	$user = [Security.Principal.WindowsIdentity]::GetCurrent();
	(New-Object Security.Principal.WindowsPrincipal $user).IsInRole([Security.Principal.WindowsBuiltinRole]::Administrator);
	}

	function shell { Start-Process powershell -WorkingDirectory $PWD -ArgumentList "-NoLogo" };
	function admin { Start-Process powershell -ArgumentList "-NoLogo" -Verb RunAs };

	#!/usr/bin/env bash

	if [[ "$@" == "" \|\| "$@" == -h \|\| "$@" == --help ]]; then

	cat<<EOF
	curl-upload-file - Upload a single file via curl.
	It uses the content type of the file itself.
	This is not a form submission.
	Using \`-\` allows you to read from stdin.

	###
	###
	### UPDATE: For Win 11, I recommend using this tool in place of this script:
	### https://christitus.com/windows-tool/
	### https://github.com/ChrisTitusTech/winutil
	### https://www.youtube.com/watch?v=6UQZ5oQg8XA
	### iwr -useb https://christitus.com/win \| iex
	###
	### OR take a look at
	### https://github.com/HotCakeX/Harden-Windows-Security