Patrick O'Doherty patrickod

Operational PGP

This is a guide on how to email securely.

There are many guides on how to install and use PGP to encrypt email. This is not one of them. This is a guide on secure communication using email with PGP encryption. If you are not familiar with PGP, please read another guide first. If you are comfortable using PGP to encrypt and decrypt emails, this guide will raise your security to the next level.

This is rather out of date and we've all moved past it. Me and Issac are cool now.

Build your own private, encrypted, open-source Dropbox-esque sync folder

Prerequisites:

One or more clients running a UNIX-like OS. Examples are given for Ubuntu 12.04 LTS, although all software components are available for other platforms as well (e.g. OS X). YMMV
A cheap Ubuntu 12.04 VPS with storage. I recommend Backupsy, they offer 250GB storage for $5/month. Ask Google for coupon codes.

Software components used:

Unison for file synchronization
EncFS for folder encryption

Problem: My Node.js processes (drones on Nodejitsu) are repeatedly growing in memory until they crash and get restarted. They are multiple processes responding to websockets connections over socket.io, using socket.io's Redis store to broker messages across connections and broadcast messages.

Conclusion: that socket.io's Redis store's memory usage likely either grows indefinitely, or is just way too high. We also isolated semi-frequent reconnects to the redis client on the part of each node.js process, though this looks unrelated to the overall memory problem.

Possibly related: socketio/socket.io#1040 socketio/socket.io#463

=== edited chat log of #nodejitsu on 25/11/2012 follows ==

	#!/usr/bin/env python2
	"""
	Author: takeshix <[email protected]>
	PoC code for CVE-2014-0160. Original PoC by Jared Stafford ([email protected]).

	Supportes all versions of TLS and has STARTTLS support for SMTP,POP3,IMAP,FTP and XMPP.
	"""

	import sys,struct,socket
	from argparse import ArgumentParser

	GitHub RCE by Environment variable injection Bug Bounty writeup

	Disclaimer: I'll keep this really short but I hope you'll get the key points.

	GitHub blogged a while ago about some internal tool called gerve:
	https://github.com/blog/530-how-we-made-github-fast

	Upon git+sshing to github.com gerve basically looks up your permission
	on the repo you want to interact with. Then it bounces you further in
	another forced SSH session to the back end where the repo actually is.

	/**
	* Super namespace that all our libs and apps will live on. We also extend all
	* of the native Ember classes as well and exclusely use them that way so we can
	* alter the behavior in one place without needing to reopen the original class.
	*
	* We call the super namespace PS for Pivotshare, call it what you'd like.
	*/
	window.PS = Ember.Namespace.create();

	// Create our custom resolver so we can have Ember look up classes on multiple

	#!/bin/bash
	gpg qa.txt.asc
	gpg staging.txt.asc
	gpg production.txt.asc

	# set up flags for Numpy C extentions compiling
	export CFLAGS="-arch i386 -arch x86_64"
	export FFLAGS="-m32 -m64"
	export LDFLAGS="-Wall -undefined dynamic_lookup -bundle -arch i386 -arch x86_64"
	export CC=gcc-4.2
	export CXX="g++ -arch i386 -arch x86_64"

	pip install numpy
	# success!

	# PREREQUISITE
	# Install Docker: http://www.docker.io/gettingstarted/

	# SINGLE COMMAND STRONGLOOP NODE.JS (http://strongloop.com) EVALUATION
	# This will log you in to an isolated lightweight virtual system (LXC)
	# - Base Ubuntu 12.10 (Quantal Quetzal)
	# - StrongLoop Node 1.1 GA

	docker run -i -t adamalex/strongloop bash