Daniel Law iDanielLaw

NB: This document describles a 'Old-School' way of using Yubikey with SSH

Modern OpenSSH has native support for FIDO Authentication. Its much simpler and should also be more stable with less moving parts. OpenSSH also now has support for signing arbitary files witch can be used as replacement of gnupg. Git also supports signing commits/tags with ssh keys.

Pros of FIDO

Simpler stack / less moving parts
Works directly with ssh, ssh-add and ssh-keygen on most computers
Simpler
Private key can never leave the FIDO device

Cons of FIDO

Client-side SSL

For excessively paranoid client authentication.

Original: https://gist.github.com/mtigas/952344

Convert SSL certificate from CRT format to PEM

openssl x509 -in server.crt -out server.der -outform DER
openssl x509 -in server.der -inform DER -out server.pem -outform PEM

INTRO

Concurrency is a domain I have wanted to explore for a long time because the locks and the race conditions have always intimidated me. I recall somebody suggesting concurrency patterns in golang because they said "you share the data and not the variables".

Amused by that, I searched for "concurrency in golang" and bumped into this awesome slide by Rob Pike: https://talks.golang.org/2012/waza.slide#1 which does a great job of explaining channels, concurrency patterns and a mini-architecture of load-balancer (also explains the above one-liner).

Let's dig in:

	<?php
	// this snippet requires PHP 5.3+
	add_action( 'wp_enqueue_scripts', function() {
	wp_register_style( 'atomic-blocks/ab-cta', '/path/to/atomic-blocks/css/ab-cta.css', array(), 1.0.0 );
	} );

	add_filter( 'render_block', function( $block_content, $block ) {
	if ( 'atomic-blocks/ab-cta' === $block['blockName'] ) {
	ob_start();
	wp_print_styles( $block['blockName'] );

	import React, { Component } from 'react';
	import { BrowserRouter as Router, Route, Link } from "react-router-dom";
	import { Layout, Menu, Icon } from 'antd';

	import Dashboard from './containers/Dashboard/Dashboard';
	import Meseros from './containers/Meseros/Meseros';

	const { Header, Content, Footer, Sider } = Layout;
	const SubMenu = Menu.SubMenu;

	config setup
	charondebug="ike 2, knl 2, cfg 2, net 2, esp 2, dmn 2, mgr 2"

	conn %default
	# keyexchange=ikev2

	conn mikrotik-1
	# Try connect on daemon start
	auto=start

	package main

	import (
	"context"
	"fmt"
	"net"
	"net/http"
	"os"
	"os/exec"
	"os/signal"

	server {
	location ~* (serviceworker\.js)$ {
	add_header 'Cache-Control' 'no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
	expires off;
	proxy_no_cache 1;
	}
	}

	#!/bin/bash

	now=`date +%Y%m%d-%H%M%S`
	day_ago=7
	db_name="DB_NAME"

	base_path="BASE_PATH"
	dump_fpath="$base_path/backup_db-$now.sql.gz"

	sudo -u postgres pg_dump $db_name \| gzip -9 > $dump_fpath

	<?php
	/**
	* Catch php output buffering data over jQuery AJAX
	*
	* @author: Sohel Rana ([email protected])
	* @author url: https://blog.sohelrana.me
	* @link: https://blog.sohelrana.me/catch-php-output-buffering-data-jquery-ajax/
	* @licence MIT
	*/