Bubbles, boundaries, sandboxes, isolation
Part 1: A forever story of securing running code.
Posts by Year
2023
2019
Mueller Report
These are just my notes about the operational security pieces that are relevant to the US’s Mueller report about Russian interference with US elections of 20...
2015
Containers, systemd-nspawn and overlayfs
This is a little blurb about how to use namespaces most efficiently at the time of writting. In particular, systemd-nspawn offers a lot of flexibility, is li...
Sheeva plug
The Sheeva plug is a relatively old ARM-based (ARMv5, Kirkwood/Feroceron CPU) “plug-style” Linux box, with 512Mb NAND flash, an SDCard reader, and an ethern...
2014
VPN and DNS
With split-view DNS and VPN it makes your web browsing and what not slower due to slower DNS resolution. This is a “solution” mainly for Linux and OSX.
GoPro Hero 3 plus (and others?) A/V out fix (USB broken)
The USB socket problem
LDAP as in OpenLDAP’s ldapsearch command
Remember the weird syntax!
GnuPG sane defaults
Sane defaults, as per Mozilla’s Wiki.
Benchmark openssl RSA verify/s on FxOS devices
Curious how fast FirefoxOS devices can verify signatures? Well, I am, as I’d like to know how much we potentially delay installs when using stronger signatur...
2013
getcap, setcap and file capabilities
Linux’s thread/process privilege checking is based on capabilities. They’re flags to the thread that indicate what kind of additional privileges they’re allo...
Can I use an ATX PCI plug as 4-PIN or 8-PIN EPS CPU power plug?
“Can I use an ATX PCI plug as 4-PIN or 8-PIN EPS CPU power plug?”
Bike tires, Tubeless vs (tubes and tubular)
A look at tubeless tires for bicycles
Bicycle pedals, clipless vs straps (vs the world)
I’ve been biking pretty much all my life. My favorite bike has been an old hard tail for a long time, and now it’s cx (cylcocross, it’s like a hard tail but ...
SpyLamp 2 by Integrated Trackers, Anti-theft GPS tracker for your bike
So I decided to spend my hard earned money on a random expensive gadget, well aware of the lack of decent reviews of the product and the price of the sparkfu...
SSL/TLS configuration for Apache (mod_ssl)
Having a decent SSL/TLS configuration for your web server is all the rage lately. And for good reasons, too.
Configuring OpenSSH with OATH and public keys (2 factor authentication)
What’s all this about The benefits of having 2 physically separated factors for authentication needs no introduction. It’s been “recently” popularized by the...
SSH Agent Notification
When using agent forwarding with SSH, your private key never leaves your computer. Signing/authentication requests are instead forwarded to your local agent ...
Simple python venv wrapper
VirtualEnvWrapper is a common wrapper to use Python’s virtual envs. However, thats a huge script to save a few lines of typing. And I don’t like huge script...
2012
Fancy wheels (also called pimp wheels.)
So I though I’d get nice lateral lighting on my bike at night…. err not really, I’d just think lights would look cool.
Crypto-stick (OpenPGP USB stick)
The Crypto-stick (version 1.2) is a tiny USB stick based on the OpenPGP Smartcard standard.
How do magnet links work?
I’m getting that question often and there isn’t any short explanation link. Well, til now.
2011
808
The 808 keychain camera is a well known cheap camera, which can optionally record in HD (720p, 1080p) if you get the right model.
Installing Archlinux (or others) on Vaio Z (Z1 and Z2 series)
This how-to is only interesting if: + you want to keep the softraid setup (aka dmraid) which is the default. + you want to dual-boot with Windows (otherwise ...
2010
Ritewing Zephyr build log
Once upon a time, little kang decided to make a flying wing.
Getting started with PowerShell
Sure am very late to the show, but I recently started to use PowerShell instead of the good old cmd.exe, which honestly, sucks.
Wifi cards txpower, Linux, mac80211 and regulations
So you just got a new 500mW wifi card, like this mighty Alfa Networks AWUS036H.
Control RC aircrafts from your computer.. even if you use Windows
If you’ve read my previous article about controlling your little planes and helis via your computer for, basically free, well, here’s a quick Windows port of...
Control RC aircrafts from your computer.. for 0$
I got interested recently into some USB to PPM devices and related devices, that let you generate PPM signal from your computer. What’s PPM (Pulse Position M...
Ultra micro video controlled heli (Blade mSR)
E-Flite’s Blade mSR is a micro helicopter, using high-end 2.4ghz Spektrum radios. It is a fixed pitch helicopter, mean there’s only one rotor and a real tail...
AF/KLM cheap password recovery
I, for one, fly with Air France KLM a few dozen times a year.
DC-3 / C-47 Build log
Once upon a time, I decided to try to build my own plane from scratch. That is, from nearly complete scratch, you know. Just deciding on one and making it wi...
2009
A little jump in the wifi world, or the 30EUR long range HD video transmission
6 month ago or so, I thought the easiest and quickest way to realize a cheap and decent quality digital video link was to use the widely available wifi chips...
Single program instance
I don’t know why, but this is often overlooked by many people so I’ll put it here. These are snippets to ensure you’re running only one instance of a program...
2008
Terminal emulators
If you’ve code compiling and spitting out thousand of lines, you certainly don’t want your terminal to slow down the process. But some are pretty slow…
XServer-less webpage screenshot
There’s no good solution for that which I know of, and in fact, it would probably require hacking up some well known renderer (Gecko or WebKit mainly).
Olympics weighted medal count scoring
Well, you know the every-4-year buzz about Olympics scoring.
vmware-specific-specific 5.5.x
Kernel driver patches for vmware-5.5.x and various kernels.
Google translation script
In my projects, I have often tons of one-liners to translate. The best translation service I found yet, is, well, Google translation. But switching to the br...
Bulk check SSL certificate expiration
It’s some easy thing to do, but not explained anywhere. Python certificate support is inexistant, coding your own SSL wrapper kinda sucks.. well, there’s ope...
Mac OS 68k Emulation
I always wanted to play those good old games from 1980-1990 on my old Mac. But booting and reinstalling it would be a pain.
2007
CAPTCHA.. WIIB!
Oh, barbarian acronym. I hate it. It sounds like a buzz word, but by buzz word, I mean an horrible one.
Panasonic CF-R3 HDD replacement
Alright. I got a Panasonic CF-R3, yea, pretty old model by now (a few years old actually, but still rockin’). Someday, you’ll decide like me to change the ha...