Rodolfo rodoviario

OverEncrypt

This is a guide that I wrote to improve the default security of my website https://fortran.io , which has a certificate from LetsEncrypt. I'm choosing to improve HTTPS security and transparency without consideration for legacy browser support.

WARNING: if you mess up settings, lose your certificates, or decide to no longer maintain HTTPS certs, these steps can and will make your domain inaccessible.

I would recommend these steps only if you have a specific need for information security, privacy, and trust with your users, and/or maintain a separate secure.example.com domain which won't mess up your main site. If you've been thinking about hosting a site on Tor, then this might be a good option, too.

The best resources that I've found for explaining these steps are https://https.cio.gov , https://certificate-transparency.org , and https://twitter.com/konklone

How to Run VBScripts in Wine

It's very easy but not straight-forward or documented anywhere.

First, install Wine 1.6.2. This version probably isn't required, but it's the version that currently ships with Debian Jessie and it works with VBScript.

Install Winetricks and use it to add the following libraries:

wsh57

Firefox bullshit removal

Due to the incessant swarm of complete and utter nonsense that has been forcing its way into Firefox over time, I've decided to start collecting my personal list of “must-have” about:config tweaks required to turn Firefox into a functional brower.

NOTE: Unfortunately this is somewhat out of date. The comments link to some resources that may be more up-to-date. Patches welcome.

WebSockets

These can be used for nefarious purposes and to bypass access restrictions.

	#!/usr/bin/env python

	import random
	import struct
	import sys

	# Most of the Fat32 class was cribbed from https://gist.github.com/jonte/4577833

	def ppNum(num):
	return "%s (%s)" % (hex(num), num)

	# alias radio='function __radio(){ r=`grep -v "#" radios_nacionales.txt \| grep -m 1 -i $1 \| cut -d" " -f1`; cvlc $r; }; __radio'
	# podria utilizarse mplayer en vez de vlc

	AMs Nacionales

	http://200.68.81.65:8000/am530 Radio Madre 530
	http://wmserver3.aginet.com.ar:19043 Radio Colonia 550
	http://195.154.182.222:26016/;stream/1 Radio Argentina 570
	http://7359.live.streamtheworld.com/CONTINENTAL.mp3 Continental 590
	http://181.119.20.132:8234/stream Rivadavia 630

	#!/bin/sh

	# /etc/NetworkManager/dispatcher.d/pre-up.d/randomize-mac-addresses

	# Configure every saved WiFi connection in NetworkManager with a spoofed MAC
	# address, seeded from the UUID of the connection and the date eg:
	# 'c31bbcc4-d6ad-11e7-9a5a-e7e1491a7e20-2017-11-20'

	# This makes your MAC impossible(?) to track across WiFi providers, and
	# for one provider to track across days.

	# <type>: (If applied, this commit will...) <subject> (Max 50 char)
	# \|<---- Using a Maximum Of 50 Characters ---->\|


	# Explain why this change is being made
	# \|<---- Try To Limit Each Line to a Maximum Of 72 Characters ---->\|

	# Provide links or keys to any relevant tickets, articles or other resources
	# Example: Github issue #23