Thomas Witt thomaswitt

Automatic updates with yum-cron

If you are on RHEL make sure optional repos are enabled:

subscription-manager repos --enable rhel-7-server-optional-rpms

Then install yum-cron:

Setting up Yubikey with SSH and Git on Windows 10 + Powershell

Based on the following guides:

Install dependencies

Install Gpg4win
Install PuTTY

Run SSH Agent w/Modified Options (MacOS Big Sur, No Homebrew, No SIP Modification)

The following will show you how you can modify the startup options of the SSH agent supplied by MacOS in a non-invasive way. This can be useful for doing things like setting a key lifetime, which can then be used with AddKeysToAgent in your ~/.ssh/config to automate the timing out of saved keys. This ensures that your passphrase is re-asked for periodically without having to shutdown, re-log, or having it actually persisted in keychain, the latter being almost as bad as having no passphrase at all, given that simply being logged in is generally enough to then use the key.

This method does not modify the system-installed SSH agent service (com.openssh.ssh-agent), but rather duplicates its functionality into a user-installed launch agent where we can then modify the options. Modifying the system-installed service is becoming increasingly harder to do; SIP generally protects

Guide to Using DDRescue to Recover Data

Start command:

ddrescue -d /dev/sda output.img output.mapfile

NOTE: If direct disc access is not available in your system, try raw devices.

Using A Yubikey For SSH Authentication

Intro

Why do we need this?

Answer is simple – Security! Alternatives include storing private keys directly on a workstation – which makes them poorly protected in multitude of attacks. A better option is to use encrypted usb key but leaving inserted and unsealed usb key for a long time is insecure, while inserting it and removing it back and forth all the time is tedious.

YubiKey suits much better for this purpose by making your SSH keys much more secure while maintaining a great user experience.

What is Yubikey

YubiKey is a hardware security key which provides Universal 2nd Factor (U2F) cryptographic tokens through a USB and/or NFC interface. This means you have to explicitly authorize a new SSH session by tapping the YubiKey. The private SSH key should be useless to a malicious user who does not have access to the physical YubiKey on which the second private key is stored.

Edit: This doesn't work for lists > 20 items, because pagination does not work. Please see here

This script allows extracting name and coordinates for gmaps shared lists. It is incredibly unstable and may break anytime. Good luck figuring out why, because the syntax is extremely confusing and basically makes no sense at all. Thanks to google for not providing an api for this after LITERALLY 12 YEARS

How to use this script:

Share a list and open the link in a browser window. It will redirect. The new link will look like this: google.com/maps/@<your coords>/data=....
Take the data-portion and paste it into the following link: https://google.com/maps/@/data=?ucbcb=1

	#!/usr/bin/python
	from enum import Enum
	import time
	import requests
	import RPi.GPIO as GPIO

	# For this package see gist: https://gist.github.com/flxkid/2c8af86d51dc3532b6e0a085b8727e48
	from TCS34725 import TCS34725
	from colormath.color_objects import sRGBColor, LabColor
	from colormath.color_conversions import convert_color

	# Shadowrocket: 2020-12-13 10:10:56
	[General]
	bypass-system = true
	skip-proxy = 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, localhost, *.local, e.crashlytics.com, captive.apple.com
	bypass-tun = 10.0.0.0/8,100.64.0.0/10,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.0.0.0/24,192.0.2.0/24,192.88.99.0/24,192.168.0.0/16,198.18.0.0/15,198.51.100.0/24,203.0.113.0/24,224.0.0.0/4,255.255.255.255/32
	#dns-server = 119.29.29.29,114.114.114.114,223.5.5.5,8.8.8.8
	ipv6 = false

	[Rule]
	DOMAIN-SUFFIX,rfi.fr,PROXY

	# edit the login message
	vi /etc/motd

	# switch to usable repos - iSH defaults often failed with EOF errors
	echo https://dl-cdn.alpinelinux.org/alpine/v3.13/main > /etc/apk/repositories
	echo https://dl-cdn.alpinelinux.org/alpine/v3.13/community >> /etc/apk/repositories

	# install some basics
	apk add zsh bash
	apk add sed attr dialog dialog-doc bash bash-doc bash-completion grep grep-doc

	#!/Users/samuelkordik/.pyenv/shims/python
	# ReadingListCatcher
	# - A script for exporting Safari Reading List items to Markdown and Pinboard
	# Originally by Brett Terpstra 2015, <https://brettterpstra.com/2015/01/06/reading-list-catcher/>
	# Modifications by Zach Fine made in 2020 to use the original reading list item in the
	# posts to pinboard.
	# Updated 2021-06-21 by Samuel Kordik to fix errors due to deprecated API in plistlib,
	# changes to Pinboard api and Pinboard python lib; added enhanced logging output
	# and error handling to work as a cron job or shell script.
	# Uses code from <https://gist.github.com/robmathers/5995026>