HN user

emiunet

30 karma

meet.hn/city/vn-Hà-Nội

Interests: Technology

---

Posts4
Comments30
View on HN
Port knocking 6 years ago

We like fwknop a lot for its cryptography implementation which can prevent MITM attacks. However, we don't like it for relatively complex client setup. (For example, there is no official iOS client). So we built our own cheap version of port-knocking and called it "doormand". It's just a HTTP server (behind nginx) listening for a POST request from clients. If the request is valid, a new iptables rule is added for the knocking IP for 30 seconds. It supports users with secret key (think API token) so we can knock from our workstation easily. It also supports Timebased-OTP (we can even setup so user is required to enter 2 different TOTP's when knocking) so we can knock from mobile devices. All messages are hash'ed with timestamp making it harder to re-play attack. It works great for us (a small team) because now we can knock over HTTPS on our phone/ipad and then SSH-connect to servers.

If I knew somebody else's unique subdomain, I could set my browser cookie on my local computer to that value and it seems to just load the other subdomain just fine. I tested this with 2 different browser on my same laptop. Maybe it won't work if the other person is on another computer?

I could also just set the subdomain to anything I like (by setting the cookie value) and it still works just fine.

Ah no, I can still set the cookie to the other person's subdomain on another machine.

Edit: add extra sentence.

Edit2: format.

It may sound strange to some people, but staying at home actually made me more productive. I got more things (work and my own side projects) done in the past month. Except for me missing eating out at cafes, going to the theaters and people watching, I found a lot less distracted working from home.

I want to backup chat messages (just the texts) from my Slack workspaces to local machine. However, I don't have admin permissions and I can't install Apps on workspaces to have that API Key. Thus, I wrote this bash script to use my browser's session key and cookie to curl all the messages (all the way back to the beginning of each channels) and dump them to local storage in JSON format. I can later process the JSON files and import them into a database. But that's later.

Thanks a lot for the post. What suprised me the most was the fact that Google is serving 40K (now 47K in live statistic) requests per second. That was way below what I thought. Each Apache server without real optimization running on a typical physical machine would be able to serve 40-50 requests/second; so they only need a thousand of servers to do 50K requests/second. Or am I missing something?

I have been using Google Apps and actually have an "evil" thought whenever I heard someone is switching off of Google: maybe, the more people leaving Google, the better its performance will be (for the ones who stay) (ie: their servers will be less busy)

Practical Tmux 12 years ago

Very much depending on what sort of installation (not the distro itself) you've got. Most of Minimal installation doesn't come with screen nor tmux by default.

me too :(

Error (500) Something went wrong. Don't worry, your files are still safe and the Dropboxers have been notified. Check out our Help Center and forums for help, or head back to home.

Hmm.. URL followed by anything will return the same (not 404) page: http://rsr.io/hacker

Some info about the server:

< HTTP/1.1 200 OK < Date: Thu, 26 Dec 2013 09:47:29 GMT < Server: Apache/2.2.22 (Debian) < Content-Location: posts.php < Vary: negotiate,Accept-Encoding < TCN: choice < X-Powered-By: PHP/5.4.4-14 < Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 < Content-Type: text/html