Cameron Conn camconn

Cryptographic Best Practices

Putting cryptographic primitives together is a lot like putting a jigsaw puzzle together, where all the pieces are cut exactly the same way, but there is only one correct solution. Thankfully, there are some projects out there that are working hard to make sure developers are getting it right.

The following advice comes from years of research from leading security researchers, developers, and cryptographers. This Gist was [forked from Thomas Ptacek's Gist][1] to be more readable. Additions have been added from

⚠️ Content below I now consider obsolete. My latest guide is now located here: Technical guide for using YubiKey series 4 for GPG and SSH. Please consult that resource instead.

Quick GPG Smartcard Guide

Java Serialization & final class attributes

The SmartWeb BusinessObject class defines a protected attribute named logger carrying the logger for subclasses. The BusinessObject class implements Serializable thus it needs to define the logger attribute as transient because Commons Logging loggers are non serializable.

The problem arises whenever you deserialize a BusinessObject subclass because the logger attribute will not be deserialized (it has not be serialized at all!)

Stevey's Google Platforms Rant

I was at Amazon for about six and a half years, and now I've been at Google for that long. One thing that struck me immediately about the two companies -- an impression that has been reinforced almost daily -- is that Amazon does everything wrong, and Google does everything right. Sure, it's a sweeping generalization, but a surprisingly accurate one. It's pretty crazy. There are probably a hundred or even two hundred different ways you can compare the two companies, and Google is superior in all but three of them, if I recall correctly. I actually did a spreadsheet at one point but Legal wouldn't let me show it to anyone, even though recruiting loved it.

I mean, just to give you a very brief taste: Amazon's recruiting process is fundamentally flawed by having teams hire for themselves, so their hiring bar is incredibly inconsistent across teams, despite various efforts they've made to level it out. And their operations are a mess; they don't real

	###
	###
	### UPDATE: For Win 11, I recommend using this tool in place of this script:
	### https://christitus.com/windows-tool/
	### https://github.com/ChrisTitusTech/winutil
	### https://www.youtube.com/watch?v=6UQZ5oQg8XA
	### iwr -useb https://christitus.com/win \| iex
	###
	### OR take a look at
	### https://github.com/HotCakeX/Harden-Windows-Security

	/**
	* LR-parsing.
	*
	* Canonical collection of LR(0) items.
	*
	* by Dmitry Soshnikov <dmitry.soshnikov@gmail.com>
	* MIT Style License (C) 2015
	*
	* See this "rock-painting" to get the picture of what we're building here:
	*

	#include "svm.h"
	#include <iostream>

	#include "opencv2/opencv.hpp"
	#include "opencv2/highgui/highgui.hpp"
	#include "opencv2/ml/ml.hpp"
	#include <iostream>

	using namespace cv;
	using namespace std;

	obj-m += rootkit.o

	all:
	make -C /lib/modules/$(shell uname -r)/build M=$(PWD) modules

	clean:
	make -C /lib/modules/$(shell uname -r)/build M=$(PWD) clean

	# bigdecoder.py, by aderyn@gmail.com, 2009-03-01
	#
	# decoder for .BIG-format files utilized by Red Alert 3 and C&C: Zero Hours
	# among others. .big is a trivial archival format. quite frankly, this is
	# probably the simplest compound file format imaginable.
	#
	# this script is written for microsoft windows. it can probably be easily
	# adapted for other platforms, but i haven't tried.
	#
	# file structure:

	URxvt.perl-ext-common: font-size,selection-to-clipboard
	URxvt.clipboard.autocopy: true
	URxvt.clipboard.copycmd: xclip -in -selection clipboard