https://blog.ibj.io/ Recent content on blog.ibj.io Hugo -- gohugo.io en-us Wed, 17 Jul 2019 21:21:03 -0700 https://blog.ibj.io/personal-identity-attestation/ Wed, 17 Jul 2019 21:21:03 -0700 https://blog.ibj.io/personal-identity-attestation/ I’m here to jump on the “PGP is bad” bandwagon. I recently read “The PGP Problem”, a blog post all about how PGP is an aged, bizarre, yet still incredibly relevant piece of personal identity software. I’m not going to rehash the points that are made in that post. It is a really good post, you should read it if you haven’t – not only because what I’ll write after is an extension of this post, but also because its some great content. https://blog.ibj.io/letsencrypt/ Fri, 22 Mar 2019 00:17:29 -0400 https://blog.ibj.io/letsencrypt/ LetsEncrypt is really helpful for properly securing services. Obviously, this is a topic thats been beaten to death by countless other people, so I’ll try to tread lightly on the details of LE specifically and jump straight to my use and solution. My problem is a bit more grand than I need TLS certificates - I’ve been using TLS certificates from LetsEncrypt for some time now, but the way I used to have external traffic routing into my homelab made it difficult to also sign traffic coming from within my homelab. https://blog.ibj.io/syncookies-and-cuda/ Sun, 17 Mar 2019 20:29:23 -0400 https://blog.ibj.io/syncookies-and-cuda/ I was recently tasked with coming up with a project that related to security vulnerabilities in a class that I’m taking. I decided to evaluate the security of syncookies in Linux against a brute force attack. The end goal was to devise a way to brute force the secret held by the Linux kernel for use with syncookies so that artificial syncookies could be fabricated, thus being able to short circuit the 3-way handshake and generate various types of denial of service attacks.