FutureBody

sysctlで設定可能な項目について調査した内容。

A funky shell thingy that I've never seen before

So you're in posix sh and you want to do the equivalent of this in bash:

foo | tee >(bar) >(baz) >/dev/null

(Suppose that bar and baz don't produce output. Add redirections where needed if that's not the case.)

Client-side SSL

For excessively paranoid client authentication.

Updated Apr 5 2019:

because this is a gist from 2011 that people stumble into and maybe you should AES instead of 3DES in the year of our lord 2019.

some other notes:

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

	/etc/sysctl.conf:

	kernel.printk = 4 4 1 7
	kernel.printk_ratelimit = 5
	kernel.printk_ratelimit_burst = 10
	net.ipv6.conf.lo.disable_ipv6 = 1

	net.ipv6.conf.all.disable_ipv6 = 1
	net.ipv6.conf.default.disable_ipv6 = 1

	"""
	Temporary module to allow for sqlite databases during development. Remove once
	we get an actual database.
	"""
	import peewee
	from peewee_async import AsyncDatabase
	import playhouse.sqlite_ext as sqlite_ext

	try:
	import aiosqlite

	#!/usr/bin/env python

	'''
	It has been tested with either py2 or py3.
	Beware ancient versions of Linux kernel which may not support SOCK_NONBLOCK
	or the memory mapped ring buffer.

	BPF filter listed below is compiled form of "not port 22"
	if you want to change it, do something like

	#!/usr/bin/env python
	#DiabloHorn https://diablohorn.com
	#raw python pcap creater
	#based on
	# http://askldjd.com/2014/01/15/a-reasonably-fast-python-ip-sniffer/
	#additional references
	# http://www.kanadas.com/program-e/2014/08/raw_socket_communication_on_li.html

	import sys
	import time


	当对后端的多台动态应用服务器做负载均衡时，ip_hash指令能够将某个客户端IP的请求通过哈希算法定位到同一台后端服务器上。这样，当来自某个IP的用户在后端Web服务器A上登录后，再访问该站点的其他URL，能够保证其访问的还是后端Web服务器A。
	如果不采用ip_hash指令，假设来自某个IP的用户在后端Web服务器A上登录后，再访问该站点的其他URL，有可能被定向到后端Web服务器B,C...上，由于用户登录后SESSION信息是记录在服务器A上的，B,C...上没有，这时就会提示用户来登录

	在ip_hash策略中，它选择最初的server的方法是根据请求客户真个IP计算出一个哈希值，再根据哈希值选择后台的服务器。
	1）由IP计算哈希值的算法如下，其中公式中hash初始值为89，iphp->addr[i]表示客户真个IP，通过三次哈希计算得出一个IP的哈希值：

	for (i = 0; i < 3; i++) {

	hash = (hash * 113 + iphp->addr[i]) % 6271;