T Schaffner tschaffner-te

NOTE: Assuming .vhd image is already uploaded to s3 bucket, the following is the process to import the image when the vmimport role is missing

#create a role policy json file

{
   "Version":"2012-10-17",
   "Statement":[
      {
         "Sid":"",
 "Effect":"Allow",

Google Public NTP [AS15169]:

time.google.com

time1.google.com

time2.google.com

time3.google.com

The netfilter hooks in the kernel and where they hook in the packet flow

The figure below calls out

The netfilter hooks
The order of table traversal

reference

https://kubernetes.io/docs/reference/generated/kubectl/kubectl-commands

cheatsheet

How to calculate accurate entropy of the session ID

1. What is an entropy?

Claude Shannon says:

The entropy is a statistical parameter which measures in a certain sense, how much information is produced on the average for each letter of a text in the language. If the language is translated into binary digits (0 or 1) in the most efficient way, the entropy H is the average number of binary digits required per letter of the original language.

-- NIST Special Publication 800-63-1 - Appendix A: Estimating Password Entropy and Strength

2. Why you need to know the accurate entropy?

Security Advisories / Bulletins linked to Log4Shell (CVE-2021-44228)

Errors, typos, something to say ?

If you want to add a link, comment or send it to me
Feel free to report any mistake directly below in the comment or in DM on Twitter @SwitHak

Other great ressources

Royce Williams list is different, listed by vendors responses:
https://www.techsolvency.com/story-so-far/cve-2021-44228-log4j-log4shell/
TBD

Emulating a Raspberry Pi with QEMU

Goal: Emulate a Raspberry Pi with QEMU in order to run the Raspbian O/S (based on Debian Linux).

The current setup is not ideal. For one thing, the maximum RAM allowed using the "versatile-pb" firmware is 256 Mb. In addition, only the most basic peripherals, a keyboard and mouse, are supported.

A number of articles have been written on this topic. Most are outdated, and the few recent ones are missing key information.

	#!/bin/bash

	# Global variable declarations
	format="plain"
	directories=()
	current_directory=`pwd`
	report_directory="${current_directory}/report/"
	fresh_report_directory="0"

	# usage

	# ---------------------------------------------------------------------------
	#
	# Description: This file holds all my BASH configurations and aliases.
	# Much of this was originally copied from:
	# http://natelandau.com/my-mac-osx-bash_profile/
	#
	# Sections:
	# 1. Environment Configuration
	# 2. Make Terminal Better (remapping defaults and adding functionality)
	# 3. File and Folder Management

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048