Carl Bennett carlbennett

I heard from GitHub Two-Factor Authentication](https://github.com/blog/1614-two-factor-authentication) nearly a couple of days ago when I was reading my RSS feed. I enabled it and couldn' push to any of my repositories anymore. Learn in this blog post how to fix it.

Two-Factor Authentication

"Is a process involving two stages to verify the identity of an entity trying to access services in a computer or in a network". Github solves this authentication with sending an SMS to a device which wants to push to their platform.

Enabling Two-Factor Authentication

AWS Elastic Beanstalk deploy user restricted IAM policy

An IAM user policy document to give minimal rights for deploying an Elastic Beanstalk application.

Where:

REGION: AWS region.
ACCOUNT_ID: AWS account ID.
APPLICATION_NAME: Desired target Elastic Beanstalk application name(space).
IAM_INSTANCE_PROFILE_ROLE: The instance profile (IAM role) Elastic Beanstalk EC2 instaces will run under.

Firefox bullshit removal

Updated: Just use qutebrowser (and disable javascript). The web is done for.

[attaching this to a CloudFlare survey why I left them (for DNSimple)]

I was a free user using CloudFlare only for DNS, chiefly because it can simulate CNAME at an apex domain. The apex domains mathdown.net,mathdown.com point to mathdown-cben.rhcloud.com. Cloudflare "CNAME-flattening" nicely returns an A record; unfortunately it's served with a huge TTL of 7 days(!), which causes a long outage when the underlying IP changes.

I asked support how I can lower the TTL (BTW it's great that you provide free support at all) and was told [https://support.cloudflare.com/hc/en-us/requests/522551, emphasis mine]:

This is based on the TTL of your authoritative provider for mathdown-cben.rhcloud.com:

Normally, when you diff an [Ansible vault][], all you see is gibberish.

$ git diff -- group_vars/all/vault.yml
diff --git a/group_vars/all/vault.yml b/group_vars/all/vault.yml
index 245ccf4..90bf9ee 100644
--- a/group_vars/all/vault.yml
+++ b/group_vars/all/vault.yml
@@ -1,111 +1,111 @@
 $ANSIBLE_VAULT;1.1;AES256

	function color_test {
	# Daniel Crisman's ANSI color chart script from
	# The Bash Prompt HOWTO: 6.1. Colours
	# http://www.tldp.org/HOWTO/Bash-Prompt-HOWTO/x329.html
	#
	# This function echoes a bunch of color codes to the
	# terminal to demonstrate what's available. Each
	# line is the color code of one forground color,
	# out of 17 (default + 16 escapes), followed by a
	# test use of that color on all nine background

	#
	# $ fab set_hosts update
	#

	from fabric.api import run, env, sudo
	from fabric.contrib.console import confirm

	env.warn_only = True

	def set_hosts():

	#!/bin/bash
	# Cisco Anyconnect CSD wrapper for OpenConnect

	# Enter your vpn host here
	CSD_HOSTNAME=
	if [[ -z ${CSD_HOSTNAME} ]]
	then
	echo "Define CSD_HOSTNAME with vpn-host in script text. Exiting."
	exit 1
	fi

	#!/bin/bash
	# vim: set expandtab tabstop=4 shiftwidth=4 softtabstop=4:

	# Only display motd if tty and not sudoing as root
	[ "$PS1" ] && [ "$EUID" -ne 0 ] \|\| return 0

	# Run the entire function in its own subshell.
	#
	# The local keyword in functions prevents inheriting values.
	# The subshell prevents exporting them.

	# Fix user and directory permissions:
	find . -type f -print0 \| sudo xargs -0 chmod 664
	find . -type d -print0 \| sudo xargs -0 chmod 775

	# Copy user permissions to group permissions:
	chmod -R g=u .

	# Make new files inherit the group of the container directory
	chmod g+s <directory>