crypto, security, tech, web

February 5, 2016

The free certs from https://letsencrypt.org/ do indeed work as described. I wanted to check them out for some public facing services I wanted to run. To get the certificate you run a...

cats, hack, security, virtual

stupid docker tricks #239192

February 2, 2016

1) Limit max processes on container; unfortunately docker seems intent on me not doing docker stupid tricks, so this is actually a bit of a pain on some systems… but if...

code, crypto, hack, philosophy, security

d3ck, d3ck, goose

May 13, 2015

A bit over 2 years ago I started on a journey that has become a bit surreal; I had what seemed like a modest goal, simply create something that would...

dinosaur, friend, people, security, Uncategorized

It was 20 years ago today…

April 5, 2015

… and a few lifetimes… that wietse and I released SATAN.  What a long strange journey, as they say. Thanks to all the folks who used it, to the friends who...

code, security, tech

really, really, really nuke iptables

February 9, 2015

I think this is the way to really clear out all the stuff in iptables, the arcane packet filtering thing for Linux. At least… I think. My take on it,...