Marcin Antkiewicz marcinantkiewicz

Note, a lot of content here is from SIRA lists/posts. If you are interested in the topic, please join SIRA.

TODO

Group items in a sane way.
The papers probably should be listed in a quotable format of some standard. Same with books?
This list grew a bit big, probably should be split into separate lists per category. I started listing by person, but it probably makes no sense.
The books and podcasts are the only lists that I think are substantial. The rest is not even stubs.

Books

Some of the books are available used on Ebay, for a fraction of the Amazon price.

CLICK ME

print("hello world!")

Ubertooth

For docs go to the source. Lots of outdated info floating around the Internet: https://github.com/greatscottgadgets/ubertooth/
- Yes, first step is to update the firmware.
hardware: various all over the world, Amazon too. Cheapest (2017, $120 shipped): https://www.sparkfun.com/products/10573
You will also want a normal bluetooth interface. Built in, or "Amazon Basics" work. I like to have a dedicated one.

Setup:

	# tls has to be enabled on :443 so that the connection can be terminated there before the redirect is sent back.

	$SERVER["socket"] == ":80" {
	$HTTP["host"] =~ ".*" {
	url.redirect = (""=>"https://%0:8443/manage/site/default/dashboard")
	}
	}

	$SERVER["socket"] == ":443" {
	$HTTP["host"] =~ ".*" {

	//will miss cookies with httpOnly attribute set

	function printCookie(match){
	var cookies = document.cookie.split(";");
	var cookie = {};
	for (var i=0; i<cookies.length; i++){
	header = cookies[i].trim();
	marker = header.indexOf("=");
	name = header.substr(0,marker);
	value = header.substr(marker+1);

	USG and UAP - security gateway and access ponit adoption/initial config
	- devices want to live on 192.168.1 network.
	- IP address can be set through the controller, in the Networks tab, or using CLI (configure, set interfaces ethernet eth1 address 10.10.10.1/24, delete interfaces ethernet eth1 address 192.168.1.1/24,
	commit)
	- the DNS name used in the Controller tab must resolve to the right IP, else succesful adoption will requie login to the device and "mca-cli, set-inform http://controller-IP-or-resolving-fqdn):8080/inform


	Controller setup:
	-- runs fine in docker
	-- cloud key is convenient, but it was flakey for me. This is not expected, people have good luck with them.

	function msa_scan_arp () {
	## Discover hosts on a /24 that respond to arp requests.
	# Write information about hosts that responded to a file.
	#
	# ex: msa_resolve_arp 192.168.1 arp-scan.txt
	# yep, this is an ugly hack
	# arping -w should provide a qicker timeout for IPs that do not respond, but it works in a way I do not seem to understand.

	NET=$1; shift;
	FILENAME=$1; shift

	auto bond0
	iface bond0 inet static
	address 10.1.10.1
	netmask 255.255.255.0
	hwaddress ether aa:aa:aa:aa:aa:aa # else mac can float based on what's bonded
	post-up ifenslave bond0 eth1 eth2 eth3 eth4 eth5


	# to verify/monitor
	cat /proc/net/bonding/bond0

	Movign a bootable ISO to USB drive on OSX:

	- Insert the USB drive. For portability, format as FAT
	- The drive will mount, unmount the volume (but do not "eject")

	user $ sudo diskutil unmountDisk /dev/disk2
	Unmount of all volumes on disk2 was successful

	- I need a GPT partition, in place of some junk here, so OSX formating tools will work just fine:

	#https://geoff.greer.fm/2017/07/16/thinkpad-x62/

	#!/bin/sh

	# Disable the NMI watchdog
	echo '0' > '/proc/sys/kernel/nmi_watchdog';

	# Runtime power management for I2C devices
	for i in /sys/bus/i2c/devices/*/device/power/control ; do
	echo auto > ${i}