LucaFilipozzi

#!/usr/bin/env python3

from base64 import urlsafe_b64decode as b64decode
from box import Box
from jwcrypto.jwk import JWKSet
from jwcrypto.jws import JWS
from orjson import dumps, loads, OPT_INDENT_2
from PIL import Image
from pyxtension.streams import stream
from pyzbar.pyzbar import decode as qrdecode

LucaFilipozzi

how to get an A+ with ssllabs.com and observatory.mozilla.org

apache things

global

  SSLProtocol -all +TLSv1.2 +TLSv1.3
  SSLCipherSuite SSL ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384
  SSLCipherSuite TLSv1.3 TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384

LucaFilipozzi

tracing

The W3C Trace-Context Specification defines two headers, traceparent and tracestate, that provide the ability to trace an interaction across an application stack.

traceparent

traceparent is used to convey trace_id and parent_id from parent to child. For example, from a WAF (F5 BigIP, say) to a Web Server (Apache httpd, say).

Its format is <version>-<trace_id>-<parent_id>-<trace_flags> where (HEXDIGLC = lowercase hexadecmial digit [0-9a-f]):

LucaFilipozzi

ssh-tls-tunnel

stuck behind a firewall that allows only http/https connections? offer ssh over a TLS tunnel!

configure haproxy server to accept TLS connections with ALPN ssh/2.0

configure ssh client to create TLS connections with ALPN ssh/2.0 using ProxyCommand

ssh-port-knock

LucaFilipozzi

data "aws_ami" "buster" {
  most_recent = true
  owners = ["136693071363"]

  filter {
    name = "name"
    values = ["debian-10-amd64-*"]
  }
}

LucaFilipozzi

essential cli utilities:

• aws-vault
• coreutils
• curl +ares +http2 +ssl
• curl-ca-bundle
• direnv
• exa
• fish
• fd
• fzf

LucaFilipozzi

#!/usr/bin/env -S gawk -f
# based on:
# - https://unix.stackexchange.com/a/404415
# - https://gist.github.com/XVilka/8346728

function abs(x) {
    return x < 0 ? -x : x;
}

BEGIN {

LucaFilipozzi

#!/bin/bash
# Copyright (C) 2018 Luca Filipozzi

set -e

src="B5754A69B6BE608C"
from='Luca Filipozzi <[email protected]>'
key="$1"

dir=$(mktemp -d /tmp/gpg-sign-key.XXXXXX)

LucaFilipozzi

-----BEGIN PGP PUBLIC KEY BLOCK-----
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LucaFilipozzi

#!/usr/bin/env python

# exploring all the callbacks

from transitions import Machine, State, Transition

class Matter(Machine):
    def __init__(self, *args, **kwargs):
        Machine.__init__(
                self,