Ky-Anh Huynh icy

Exporting your 2FA tokens from Authy to transfer them into another 2FA application

IMPORTANT - Update regarding deprecation of Authy desktop apps

Past August 2024, Authy stopped supported the desktop version of their apps:
See Authy is shutting down its desktop app | The 2FA app Authy will only be available on Android and iOS starting in August for details.

And indeed, after a while, Authy changed something in their backend which now prevents the old desktop app from logging in. If you are already logged in, then you are in luck, and you can follow the instructions below to export to tokens.

If you are not logged in anymore, but can find a backup of the necessary files, then restore those files, and re-install Authy 2.2.3 following the instructions below, and it should work as expected.

UFW

I use Ubuntu’s Uncomplicated firewall because it is available on Ubuntu and it's very simple.

Install UFW

if ufw is not installed by default be sure to install it first.

Some examples of SNAT, DNAT with iptables with comments

mainly used in start-up script

How to test 'safely'

When we play with iptables aka firewall we might end up in situation, where we execute rule, which has unforseen impact - lock yourself out. Recovering from this situation is necessity.

How to:

Enable reboot via SMS.

Test all commands in shell first before putting them into Start-up script. This way the command will be wiped out, when unit is rebooted.

masquarade all outgoing packets to be WLAN0 IP

Overview

Pivotal Story

This is an investigation into our susceptibility to Slow HTTP Attacks. These attacks take advantage of how typical web servers process requests and employ several strategies to achieve the same result. By keeping connections open longer than normal, they thereby prevent new connections from being opened and the server will either hang or return 503.

The question is less about whether we are vulnerable, but rather to what extent. Any server can be DoS’d, it’s just a matter of how easy it is to execute.

	#!/usr/bin/env ruby

	# Purpose : Re-update missing drawing objects' metadata in projects.json
	# Author : Ky-Anh Huynh
	# Date : 2024-03-21
	# License : MIT

	require 'rubygems'
	require 'json'
	require 'securerandom'

	# Tested on QNAP TVS-1282T3
	# connect to NAS thru SSH (ssh -p <port> admin@<NAS IP>)

	ROOTCA=<custom-rootca>.crt

	cp /share/NFSv\=4/<somewhere>/<custom-rootca>.crt /usr/certs
	ln -s /usr/certs/$ROOTCA /usr/certs/`openssl x509 -hash -noout -in /usr/certs/$ROOTCA`.0

	#!/usr/bin/env ruby
	#
	# Homepage: https://github.com/icy/k8s-select
	#
	# Purpose : Select the objects you want from maninfests,
	# as you may not want to deploy everything.
	# Author : Ky-Anh Huynh
	# Date : 2019-12
	# License : MIT
	# Example :

	#!/bin/sh
	# script to automate the creation of chroot jail
	# w/ minimal executables to run git

	export CHROOT=/var/chroot

	function copy_binary() {
	for i in $(ldd $*\|grep -v dynamic\|cut -d " " -f 3\|sed 's/://'\|sort\|uniq)
	do
	cp --parents $i $CHROOT

	# The goal: create a list of maps of subnet mappings so we don't have to statically hard-code them in aws_lb
	# https://www.terraform.io/docs/providers/aws/r/lb.html#subnet_mapping
	locals {
	# These represent dynamic data we fetch from somewhere, such as subnet IDs and EIPs from a VPC module
	subnet_ids = ["subnet-1", "subnet-2", "subnet-3"]
	eips = ["eip-1", "eip-2", "eip-3"]
	}

	# Here's the hack! The null_resource has a map called triggers that we can set to arbitrary values.
	# We can also use count to create a list of null_resources. By accessing the triggers map inside of

	*
	Author: Ky-Anh Huynh
	Original script: https://gist.github.com/mikaelz/11b956c3d2e078105a19dd9df70dbf27
	Usage:
	ticker : Your ticker name, eg. ETH-EUR
	token : A random string otherwise yahoo output may be a bit messy
	You should have random token on each call!
	*/
	function MyYahooTicker(ticker,token) {
	var ticker = ticker \|\| "SXR8.DE";