Daniel Brakk dnbrakk

High-Level Security Profile Generator

(originally from my proposal on moby/moby#17142 (comment) but generic)

The profile would generate artificats of an apparmor profile and seccomp filters.

Obviously doesn't have to be toml since that's super hipster :p

Assumptions

no one is going to sit and write out all the syscalls/capabilities their app needs
automatic profiling would be super cool but like aa-genprof it is never

Tuning Intel Skylake and beyond for optimal performance and feature level support on Linux:

Note that on Skylake, Kabylake (and the now cancelled "Broxton") SKUs, functionality such as power saving, GPU scheduling and HDMI audio have been moved onto binary-only firmware, and as such, the GuC and the HuC blobs must be loaded at run-time to access this functionality.

Enabling GuC and HuC on Skylake and above requires a few extra parameters be passed to the kernel before boot.

Instructions provided for both Fedora and Ubuntu (including Debian):

Note that the firmware for these GPUs is often packaged by your distributor, and as such, you can confirm the firmware blob's availability by running:

Disabling GNOME Tracker and Other Info

GNOME's tracker is a CPU and privacy hog. There's a pretty good case as to why it's neither useful nor necessary here: http://lduros.net/posts/tracker-sucks-thanks-tracker/

After discovering it chowing 2 cores, I decided to go about disabling it.

Directories

Sublime Text 3 Setup

Install Package Control

Install Package Control for easy package management.

Open the console with Ctrl+`
Paste in the following:

Firefox telemetry and data collection denial

This is a fork of haasn "Firefox bullshit removal" Also heavily based off pyllyukko "Firefox hardening" https://github.com/pyllyukko/user.js/

This guide has been tested to work on Firefox 68.1.0ESR and will probably work with other versions

Instead of manually editing about:config, make changes to the user.js file

###How to use the user.js file

	Getting Started

	Https://wizardforcel.gitbooks.io/web-hacking-101/content/ Web Hacking 101 Chinese
	Https://wizardforcel.gitbooks.io/asani/content/ Easy to get Android security Chinese version
	Https://wizardforcel.gitbooks.io/lpad/content/ Android penetration test study manual Chinese version
	Https://wizardforcel.gitbooks.io/kali-linux-web-pentest-cookbook/content/ Kali Linux Web Penetration Test Cheats Chinese Version
	Https://github.com/hardenedlinux/linux-exploit-development-tutorial Linux exploit Development Primer
	Https://www.gitbook.com/book/t0data/burpsuite/details burpsuite actual guide
	Http://www.kanxue.com/?article-read-1108.htm=&winzoom=1 Penetration Testing Node.js Application
	Https://github.com/qazbnm456/awesome-web-security Web Security Information and Resources List


	##############################################
	# #
	# dnscrypt-proxy configuration #
	# #
	##############################################

	## This is an example configuration file.
	## You should adjust it to your needs, and save it as "dnscrypt-proxy.toml"
	##

	MusicBrainz Naming
	$if(%albumartist%,%artist% - ,) %album% - $num(%tracknumber%,2) - %title%