Nordine Ben Bachir nordineb

Generating Authy passwords on other authenticators

There is an increasing count of applications which use Authy for two-factor authentication. However many users who aren't using Authy, have their own authenticator setup up already and do not wish to use two applications for generating passwords.

Since I use 1Password for all of my password storing/generating needs, I was looking for a solution to use Authy passwords on that. I couldn't find any completely working solutions, however I stumbled upon a gist by Brian Hartvigsen. His post had a neat code with it to generate QR codes for you to use on your favorite authenticator.

His method is to extract the secret keys using Authy's Google Chrome app via Developer Tools. If this was not possible, I guess people would be reverse engineering the Android app or something like that. But when I tried that code, nothing appeared on the screen. My guess is that Brian used the

A Guide to Encrypting Files with Mac OS X

This guide will demonstrate the steps required to encrypt and decrypt files using OpenSSL on Mac OS X. The working assumption is that by demonstrating how to encrypt a file with your own public key, you'll also be able to encrypt a file you plan to send to somebody else using their private key, though you may wish to use this approach to keep archived data safe from prying eyes.

Too Long, Didn't Read

Assuming you've already done the setup described later in this document, that id_rsa.pub.pcks8 is the public key you want to use, that id_rsa is the private key the recipient will use, and secret.txt is the data you want to transmit…

Encrypting

$ openssl rand 192 -out key

$ openssl aes-256-cbc -in secret.txt -out secret.txt.enc -pass file:key

Minishift on Qemu with Windows Hypervisor Platform accelerator support

Requirements

Windows 10 (updated after april 2018) with Hyper-V enabled. Download the Qemu binary from https://shadycode.com/qemu-binaries-for-windows-64-bit-with-hyper-v-and-haxm-support/ Note: build instructions are here: https://shadycode.com/how-to-build-qemu-with-hyper-v-acceleration-msys2/

	[merge]
	keepBackup = false
	tool = p4merge
	[mergetool "p4merge"]
	cmd = /Applications/p4merge.app/Contents/Resources/launchp4merge "\"$PWD/$BASE\"" "\"$PWD/$REMOTE\"" "\"$PWD/$LOCAL\"" "\"$PWD/$MERGED\""
	keepTemporaries = false
	trustExitCode = false
	keepBackup = false
	[diff]
	tool = p4merge

	#!/usr/bin/env bash

	set -Eeuo pipefail
	trap cleanup SIGINT SIGTERM ERR EXIT

	script_dir=$(cd "$(dirname "${BASH_SOURCE[0]}")" &>/dev/null && pwd -P)

	usage() {
	cat <<EOF
	Usage: $(basename "${BASH_SOURCE[0]}") [-h] [-v] [-f] -p param_value arg1 [arg2...]

	.---------------------------------------------------------------------------.
	\| \|
	\| Bash Redirections Cheat Sheet \|
	\| \|
	+---------------------------------------------------------------------------+
	\| \|
	\| Created by Peteris Krumins ([email protected]) \|
	\| www.catonmat.net -- good coders code, great coders reuse \|
	\| \|
	+-----------------------------.---------------------------------------------+

	:: Windows 10 Hardening Script
	:: This is based mostly on my own personal research and testing. My objective is to secure/harden Windows 10 as much as possible while not impacting usability at all. (Think being able to run on this computer's of family members so secure them but not increase the chances of them having to call you to troubleshoot something related to it later on). References for virtually all settings can be found at the bottom. Just before the references section, you will always find several security settings commented out as they could lead to compatibility issues in common consumer setups but they're worth considering.
	:: Obligatory 'views are my own'. :)
	:: Thank you @jaredhaight for the Win Firewall config recommendations!
	:: Thank you @ricardojba for the DLL Safe Order Search reg key!
	:: Thank you @jessicaknotts for the help on testing Exploit Guard configs and checking privacy settings!
	:: Best script I've found for Debloating Windows 10: https://github.com/Sycnex/Windows10Debloater
	:

	<key name="Colors" modified="2015-12-10 22:46:43" build="151210">
	<value name="Count" type="dword" data="00000001"/>
	<key name="Palette1" modified="2015-12-10 22:46:43" build="151210">
	<value name="Name" type="string" data="Material Theme"/>
	<value name="ColorTable00" type="dword" data="004d4335"/>
	<value name="ColorTable01" type="dword" data="006b60eb"/>
	<value name="ColorTable02" type="dword" data="008de8c3"/>
	<value name="ColorTable03" type="dword" data="0095ebf7"/>
	<value name="ColorTable04" type="dword" data="00c4cb80"/>
	<value name="ColorTable05" type="dword" data="009024ff"/>

	param(
	[parameter(mandatory=$true, valuefrompipeline=$true)]
	$TargetHost,
	[switch] $force
	)
	begin {
	$packages = @( `
	@{ Name = "rewrite.msi"; Url = "http://download.microsoft.com/download/6/7/D/67D80164-7DD0-48AF-86E3-DE7A182D6815/rewrite_2.0_rtw_x64.msi" }, `
	@{ Name = "webpi.msi"; Url = "http://download.microsoft.com/download/B/0/0/B00FEF21-79DE-48B0-8731-F9CFE70CE613/WebPlatformInstaller_3_10_amd64_en-US.msi" }, `
	@{ Name = "webfarm.msi"; Url = "http://download.microsoft.com/download/3/4/1/3415F3F9-5698-44FE-A072-D4AF09728390/webfarm_amd64_en-US.msi" }, `

	Function Test-DownloadUri {
	<#
	.SYNOPSIS
	Tests that a url is valid
	.DESCRIPTION
	Returns a status code from an http request of a url. Used to verify that download links work.
	.PARAMETER Uri
	The url that we are checking is valid
	.INPUTS
	N/A