I learned a few things from this list: [WayBack] 50 Battery Hacks – Battery Experts
Via: [WayBack] I learned a lot! – Lars Fosdal – Google+
–jeroen
Archive for the ‘Power User’ Category
50 Battery Hacks – Battery Experts
Posted by jpluimers on 2018/11/02
Posted in LifeHacker, Power User | Leave a Comment »
Topic: “Request Feedback” button vanished | WordPress.com Forums
Posted by jpluimers on 2018/11/02
Too bad, as it was fun while it lasted:
- [WayBack] Topic: “Request Feedback” button vanished | WordPress.com Forums: page 1
- [WayBack] Topic: “Request Feedback” button vanished | WordPress.com Forums: page 2
- [WayBack] Topic: “Request Feedback” button vanished | WordPress.com Forums: page 3
Even worse: the change was not announced, so people find out after the fact. A similar thing happened back in the “Press This” removal process (which got restored).
The cool things about the “Request Feedback” were these:
Share this:
Posted in Bookmarklet, Power User, SocialMedia, Web Browsers, WordPress | Leave a Comment »
PSBL: Passive Spam Block List powered by Spamikaze
Posted by jpluimers on 2018/11/01
On my research list: [WayBack] Passive Spam Block List:
PSBL is an easy-on, easy-off blacklist that does not rely on testing and should reduce false positives because any user can remove their ISP’s mail server from the list.
The idea is that 99% of the hosts that send me spam never send me legitimate email, but that people whose mail server was used by spammers should still be able to send me email.
This results in a simple listing policy: an IP address gets added to the PSBL when it sends email to a spamtrap, that email is not identified as non-spam and the IP address is not a known mail server.
Via: Hans Wolters commenting at [WayBack] For my research list: Source: Bruteforce login prevention… – Jeroen Wiert Pluimers – Google+
References:
- [WayBack] FrontPage – Spamikaze Wiki
- rikvanriel/spamikaze: Spamikaze spam blocking dnsbl maintenance tools
- [WayBack] Passive Spam Block List: FAQ
- [WayBack] Passive Spam Block List: Howto
- [WayBack] ‘E-maildienst niet langer betrouwbaar’ | Computable.nl
–jeroen
Share this:
Posted in *nix, *nix-tools, Development, Perl, Power User, Scripting, Software Development | Leave a Comment »
airbus-seclab/crashos
Posted by jpluimers on 2018/10/30
Cool repository, but contact your cloud provider before trying…: [WayBack] airbus-seclab/crashos.
via:
- [WayBack] Shit found on github: crashos – The Isoblog.
- [WayBack] Shit found on github: CrashOS is a minimalist Operating System which aims to lead to hypervisor crashs, hence its name. – Kristian Köhntopp – Google+
–jeroen
Share this:
Posted in Fusion, Hyper-V, KVM Kernel-based Virtual Machine, Power User, Proxmox, View, VirtualBox, Virtualization, VMware, VMware ESXi, VMware Workstation | Leave a Comment »
Language Accessory Pack for Office – Office Support
Posted by jpluimers on 2018/10/29
For my link archive: [WayBack] Language Accessory Pack for Office – Office Support (short-link)
All supported languages for Office 2010, 2013 and 2066/newer versions.
–jeroen
Share this:
Posted in Office, Office 2010, Office 2013, Office 2016, Power User, Windows | Leave a Comment »
Install on openSUSE / SLES – Zabbix.org
Posted by jpluimers on 2018/10/29
Interesting: [Archive.is] Install on openSUSE / SLES – Zabbix.org is possible and there are packages for this on the OpenSuSE site itself for the various kinds of distributions.
For instance, Tumbleweed is at http://download.opensuse.org/repositories/server:/monitoring/openSUSE_Tumbleweed/
Good introductions on Zabbix are via [WayBack] Stephen Fritz on Systems Engineering: Installing and Configuring Basic Zabbix Functionality on Debian Wheezy who has a [Archive.is] zabbix tag.
Other links are at Welcome to workaround.org – tips around open source and Linux stuff.
And there is www.zabbix.com/documentation
–jeroen
Share this:
Posted in *nix, Linux, openSuSE, Power User, SuSE Linux, Tumbleweed | Leave a Comment »
121 – NOS Teletekst: xs4all and T-mobile internet outage
Posted by jpluimers on 2018/10/28
This time I was not affected, but many people were by the [WayBack] 121 – NOS Teletekst: xs4all and T-mobile outage:
NOS Teletekst 121 Kort nieuws binnenland Tienduizenden mensen zijn getroffen door een internetstoring.Abonnees van verschillende providers zoals T-Mobile en XS4ALL,hebben er last van.De problemen begonnen om 2.30 uur en doen zich verspreid over het land voor.Een technisch team van KPN is op zoek naar de oorzaak van de storing.XS4ALL meldt dat 35.000 abonnees zijn gedupeerd. In Barneveld zijn bij een schuurbrand 20.000 kippen omgekomen.De brand brak vanmorgen vroeg uit;de oorzaak is nog onbekend.De brandweer wist te voorkomendat een tweede schuur ook vlam vatte. Dit jaar zijn al veel dieren gedood door stalbranden.Zo kwamen bij twee branden in Limburg 35.000 kippen om. volgende nieuws weer&verkeer sport
Ga terug naar de navigatie, het begin van de inhoud.
Trying to grab the above page as PNG, made me find the old teletekst web-interface is directory browseable, but dysfunctional: [WayBack] Directory Listing For /webtekst.html/
Lots of people were affected as you can see at
[Archive.is] Storingsoverzicht | Allestoringen Realtime overzicht van storingen. Problemen? Wij helpen je verder.
They are powered by Downdetector which has a world-wide monitoring service [Archive.is] Status overview | Downdetector, and seems situated in Haarlem. Cool thing: they have similar sites for many other countries:
allestörungen.at | allestörungen.ch | allestörungen.de | allestoringen.be | allestoringen.nl | aussieoutages.com | canadianoutages.com | downdetector.ae | downdetector.cl |downdetector.co.nz | downdetector.co.za | downdetector.com | downdetector.com.ar | downdetector.com.br | downdetector.dk | downdetector.es | downdetector.fi | downdetector.fr |downdetector.hk | downdetector.ie | downdetector.in | downdetector.it | downdetector.jp | downdetector.mx | downdetector.no | downdetector.pl | downdetector.pt | downdetector.ru |downdetector.se | downdetector.sg | downdetector.co.uk | downdetector.web.tr |
- [WayBack] Over Ons Allestoringen
- [WayBack] About us Downdetector Realtime overview of issues and outages with all kinds of services. Having issues? We help you find out what is wrong.Ookla, LLC
Spaarnwouderstraat 37
2011 AB Haarlem
The Netherlands- [WayBack] Serinus42
- [WayBack] Serinus42 BV | Haarlem
Usually uptime robot warns me on time, and this time my connections were OK:
Share this:
Posted in History, Power User | Leave a Comment »
The Ridiculous Bandwidth Costs of Amazon, Google and Microsoft Cloud Computing – Arador
Posted by jpluimers on 2018/10/26
In this article I compare the costs of network bandwidth transferred out of Amazon EC2, Google Cloud Platform, Microsoft Azure and Amazon Lightsail.
Bandwidth costs are one of the most ridiculously expensive components of cloud computing, and there are some serious inconsistencies in the industry, especially with Amazon.
[…]
If you move a significant amount of data you should think twice before moving to the cloud, these bandwidth prices are truly ridiculous and there’s no way they can be justified when compared to colocation facilities.
Source: [Archive.is] The Ridiculous Bandwidth Costs of Amazon, Google and Microsoft Cloud Computing – Arador
–jeroen
Share this:
Posted in Amazon.com/.de/.fr/.uk/..., Cloud, Containers, Infrastructure, Power User | Leave a Comment »
I have a sudden urge to organize my cables.
Posted by jpluimers on 2018/10/26
Cable pr0n
[WayBack] I have a sudden urge to organize my cables. – Lars Fosdal – Google+
and more cable pr0n…
[WayBack] Cable Porn; The Art of Tidy Data Centers
–jeroen
Share this:
Posted in Fun, LifeHacker, Power User | 1 Comment »
GitHub – yandex/gixy: Nginx configuration static analyzer
Posted by jpluimers on 2018/10/26
[WayBack] GitHub – yandex/gixy: Nginx configuration static analyzer
Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection.
…
Right now Gixy can find:
- [ssrf] Server Side Request Forgery
- [http_splitting] HTTP Splitting
- [origins] Problems with referrer/origin validation
- [add_header_redefinition] Redefining of response headers by “add_header” directive
- [host_spoofing] Request’s Host header forgery
- [valid_referers] none in valid_referers
- [add_header_multiline] Multiline response headers
- [alias_traversal] Path traversal via misconfigured alias
You can find things that Gixy is learning to detect at Issues labeled with “new plugin”
This helps you prevent an nginx configuration issue that can server too many static content by using ../ in the web request which got a lot of attention last week, but was in fact already found during 2016 HCTF by Aklis, and presented by Orange Tsai (twitter/github/blog) various times in 2018, including [WayBack] hack.lu 2018.
.
Related:
- [WayBack] htctf 你没走过的套路 – Th1s’s Bl0g which has a very good Google Translate
- Earlier presentation by Orange Tsai at blackhat 2018 USA: [WayBack] us-18-Orange-Tsai-Breaking-Parser-Logic-Take-Your-Path-Normalization-Off-And-Pop-0days-Out-2.pdf
- [WayBack] x0rz en Twitter: “Nginx off-by-slash vulnerability, cool trick presented by @orange_8361 at #hacklu… “
- [WayBack] Orange Tsai on Twitter: “Be careful the Nginx configuration, or use https://github.com/yandex/gixy to scan your configuration!… “
- [WayBack] Orange: This is 🍊 speaking
- [WayBack] Talks – hack.lu 2018
- hack.lu 2018 videos are being uploaded at https://www.youtube.com/channel/UCI6B0zYvK-7FdM0Vgh3v3Tg/videos
- [WaBack] Hier ein Hackerterrorcybercyber gegen nginx. twitter… – Kristian Köhntopp – Google+
–jeroen
Share this:
Posted in *nix, DevOps, nginx, Power User, Security | Leave a Comment »
The Wiert Corner - irregular stream of stuff 