# Apple
 c
## iFoo

[Securing your iPhone for Travel to a Hostile Environment](https://blog.filippo.io/securing-a-travel-iphone/)
 [​Hwang & Snowden Protecting a Phone](https://www.pubpub.org/pub/direct-radio-introspection)

### Applications

## MacOS

[How to make the Touch Bar slightly more tolerable](https://medium.com/@svinkle/how-to-make-the-touch-bar-slightly-more-tolerable-857d29041f6a)

### Hacks & Tricks MacOS

`diskutil coreStorage unlockVolume E35BB45E-585C-4CF7-8A1B-329A45F03ED6` to mount an encrypted volume
 [​Add Dashboard Widgets to the Desktop](http://osxdaily.com/2013/01/18/add-dashboard-widgets-desktop-mac-os-x/)
 [​Apple Security Guides](https://www.apple.com/support/security/guides/)
 [​Creating your own Homebrew Tap and Formula](http://formalfriday.club/2015/01/05/creating-your-own-homebrew-tap-and-formula.html)
 [​Disable iPhoto Auto_launch in Yosemite](http://apple.stackexchange.com/questions/151821/disable-iphoto-auto-launch-when-connecting-an-iphone-in-yosemite)
 [​El Capitan Hardening Guide](https://github.com/ernw/hardening/blob/master/operating_system/osx/10.11/ERNW_Hardening_OS_X_EL_Captain.md)
 [​macOS Mojave Hardening Guide](https://github.com/ernw/hardening/blob/master/operating_system/osx/10.14/ERNW_Hardening_OS_X_Mojave.md) *[​Encrypting Your Laptop Like You Mean It](https://firstlook.org/theintercept/2015/04/27/encrypting-laptop-like-mean/) [​Fast User Switching on Yosemite](https://support.apple.com/kb/PH18897?locale=en_US)
 [Fix DNS Resolver Search List (obsolete)](https://wiki.rg.net/wiki/MacSearchList)
 `/Applications/VMware\ Fusion.app/Contents/Library/vmrun VMware Fusion Tool`
 [​How to restore privacy](https://fix-macosx.com/)
 [​How to Update OpenSSH on Mac OS X](http://www.dctrwatson.com/2013/07/how-to-update-openssh-on-mac-os-x/)
 [​How to stop Firefox from making automatic connections](https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections)
 [​HyperDrive USB Type-C 5-in-1 Hub with Pass Through Charging](https://www.hypershop.com/products/usb-c-5-in-1-hub-with-pass-though-usb-c-charging)
 [​Internal Files about User (maybe Mountain Lion)](http://sud0man.blogspot.fr/2015/05/artefacts-for-mac-os-x.html)
 [​Mac Config Hacks from Command Line](https://github.com/herrbischoff/awesome-osx-command-line)
 [​OS X Yosemite Security and Privacy Guide](https://github.com/drduh/OS-X-Yosemite-Security-and-Privacy-Guide)
 [​OSX Auditor](https://github.com/jipegit/OSXAuditor)
 [​Safety hacks for Yosemite](https://github.com/kirei/fruitpunch)
 [​Screen Sharing over SSH](http://apple.stackexchange.com/questions/34443/remote-management-vs-screen-sharing)
 [​Setting up a Macintosh as a Development Environment](https://github.com/nicolashery/mac-dev-setup/blob/master/README.md)
 [​Time Machine and Other Info](http://pondini.org/OSX/Home.html)
 [​XServe from Ebay running VMware](http://arstechnica.com/apple/2016/10/life-after-death-for-apples-xserve/)
 [​Yosemite WiFi hacks](http://www.tuaw.com/2014/11/25/heres-the-root-cause-and-a-workaround-for-ios-8-and-yosemite-wi/?ncid=rss_truncated)
 Cmd-Ctrl-Shift-4, then space (cursor turns from cross hairs to a  camera), click once on what I want, and paste wherever I want it is the  way to go.
 [​Remote Mac Access: Screen Sharing via SSH and VNC without iCloud’s Back to my Mac feature](https://elijahcarrel.com/2016/03/31/remote-mac-access-screen-sharing-via-ssh-and-vnc/)
 [​What Makes a Mac Volume Bootable](https://bombich.com/kb/ccc4/what-makes-volume-bootable)
 `sudo scutil --set HostName <new host name>` to change Mac hostname
 [​Allow MacOS FileVault Recovery Key](https://apple.stackexchange.com/questions/304124/recovery-key-set-by-my-company-school-or-institution-on-private-laptop)
 [​Tools to set up a quick macOS VM in QEMU, accelerated by KVM](https://github.com/foxlet/macOS-Simple-KVM/)
*

### Applications

[Bonjour Browser](http://www.tildesoft.com/)
 [​Emacs for MacOS guide](https://www.emacswiki.org/emacs/EmacsForMacOS)
 [​Free OS X Security Tools](https://objective-see.com/products.html)
 [​Karabiner - A powerful and stable keyboard customizer for OS X](https://pqrs.org/osx/karabiner/)
 [​OSXFUSE is a successor to MacFUSE](https://osxfuse.github.io)
 [​Snail Mail - envelope printer](https://github.com/knowuh/SnailMail)

# Conferences

[CoNEXT 2014](http://conferences.sigcomm.org/co-next/2013/program.html)
 [​IMC 2013](http://conferences.sigcomm.org/imc/2013/index.html)
 [​Dagstuhl Critical Infrastructure](http://www.dagstuhl.de/en/program/calendar/semhp/?semnr=13322)
 [​CHES 2014](http://www.chesworkshop.org/ches2014/program.php)
 [​Dagstuhl 2104 Secure Routing](http://www.dagstuhl.de/no_cache/en/program/calendar/semhp/?semnr=15102)
 [BGNOG2 Security Sep 2015](https://wiki.rg.net/wiki/Btnog2Sec)
 [​OARC Oct 2015](https://indico.dns-oarc.net/event/24/timetable/#all.detailed)
 [​NANOG Oct 2015](https://www.nanog.org/meetings/nanog65/agenda)
 [​IMC October 2015](http://conferences2.sigcomm.org/imc/2015/program.html)
 [​IRTF & ISOC Workshop on Research and Applications of Internet Measurements (RAIM) October 2015](https://irtf.org/raim-2015)
 [​CAIDA BGP Hackathon Jan 2016](http://www.caida.org/workshops/bgp-hackathon/1602/)

# Food

[Kossar's Bialys](http://www.kossarsbialys.com/)
 [​Zabar's Smoked Fish](http://www.zabars.com/on/demandware.store/Sites-Zabars-Site/default/Link-Product?pid=211001P&cgid=Smoked_Fish_Counter)
 [​Russ and Daughters Smoked Fish (needs more lead time)](http://shop.russanddaughters.com/store/department/69/Specialty-Smoked-Fish/)
 [​Nabe Mono Basics](http://www.japantimes.co.jp/life/2014/11/18/food/warm-shared-hot-pot/)
 [​Artisan Dutch Cheese shop in Amsterdam](http://bastiaansen-bio.com/index.php?lang=en)
 [​Swiss Chocolate Shop](http://www.laederach.com/ch-en.html)

# Hardware

## FPGA Tools

[YoSys Open Synthesis Suite - Verilogish](http://www.clifford.at/yosys/)
 [​MiGen - Python Toolbox for Building Hardware (produces VHDL)](https://github.com/m-labs/migen)
 [​MyHDL - a python syntax for Verilog - Design Hardware with Python, good docs](http://www.myhdl.org/)
 [​Chisel - Hardware Development Embedded in Scala](https://chisel.eecs.berkeley.edu/)

## General Hardware

[Four hot-pluggable systems (nodes) in a 2U form factor](http://www.supermicro.com/products/system/2U/2027/SYS-2027TR-HTRF_.cfm)
 [​SAMSUNG 850 Pro Series MZ-7KE1T0BW 2.5" 1TB SATA III 3-D Vertical SSD](http://www.newegg.com/Product/Product.aspx?Item=N82E16820147362)
 [​SuperServer 2027TR-HTRF+ - Four servers and lotso 2.5" drives in a box](http://www.supermicro.com/products/system/2U/2027/SYS-2027TR-HTRF_.cfm)
 [​Seagate 8TB drives](http://www.seagate.com/files/www-content/product-content/hdd-fam/seagate-archive-hdd/en-us/docs/archive-hdd-dS1834-3-1411us.pdf)
 [​Open source USB stick computer for security applications](https://www.crowdsupply.com/inverse-path/usb-armory)
 [​Dirty PCBs](http://dirtypcbs.com/)
 [​Cheat Sheed for MegaRaid Controllers `megacli`](http://www.maths.cam.ac.uk/computing/docs/public/megacli_raid_lsi.html)
 [​CWDM Mux/DeMux](http://www.fs.com/16-channels-1ru-rack-mount-duplex-cwdm-mux-demux-p-30414.html)
 [​Solid Optics CWDM-MUX-8CH+UPG+MON Multiplexer](http://solid-optics.com/multiplexers/cwdm-mux/solid-optics-cwdm-mux-8chupgmon-multiplexer-id1665.html)
 [​Logs and accounts machine checks (in particular memory, IO, and CPU hardware errors) on modern x86 Linux systems](http://www.mcelog.org/)
 [​KVM to USB dongle](https://www.epiphan.com/products/kvm2usb)
 [​Bunnie Huang on Good Documntation for Manufacturing](https://www.youtube.com/watch?t=5&v=aV_a5KIogCc)
 [​Bunnie Huang on Design for Manufacturing](https://www.youtube.com/watch?v=QFDsYUuU-mY)

## Novena

[Novena Mail Page](http://www.kosagi.com/w/index.php?title=Novena_Main_Page)
 [​Setting up an ARM virtual machine so you can build an SD image](http://www.red-lang.org/2012/03/setting-up-arm-virtual-machine.html)

## Raspberry PI

[NTP on a Raspberry Pi](http://www.satsignal.eu/ntp/Raspberry-Pi-quickstart.html)

## Toys

[Attiny85-based device to enable and disable write-protection on any SD card](https://github.com/Nephiel/sdlocker-tiny)
 [​Build the SD Locker and Make Your SD Cards More Secure](http://www.seanet.com/~karllunt/sdlocker.html)
 

# Linux / Unix

[Wiki of non-systemd Unix/Linux systems](http://without-systemd.org/wiki/index.php/Main_Pagex)
 [​reptyr: Attach a running process to a new terminal](https://blog.nelhage.com/2011/01/reptyr-attach-a-running-process-to-a-new-terminal/)
 [​Using Containers in Production: Best Practices](https://linode.com/docs/applications/containers/deploying-microservices-with-docker/#using-containers-in-production-best-practices)
 [​VXLAN with plain Linux bridges](https://vincent.bernat.im/en/blog/2017-vxlan-linux)
 [​Linux Kernel Hacking](https://github.com/yeyintminthuhtut/Awesome-Study-Resources-for-Kernel-Hacking)
 [​Linux Ate My RAM](https://www.linuxatemyram.com/)

## Basics

[Basics of the Unix Philosophy](http://www.faqs.org/docs/artu/ch01s06.html)
 [​ntpstick - NTP on a Stick](https://github.com/dave2/ntpstick)
 [​SSH Hardening](https://stribika.github.io/2015/01/04/secure-secure-shell.html)
 [​OSCP Stapling in Apache](https://wiki.apache.org/httpd/OCSPStapling)
 [​ejabberd TLS Security](https://blog.process-one.net/securing-ejabberd-with-tls-encryption/)
 [​Understanding and Using Systemd](https://www.linux.com/learn/understanding-and-using-systemd)

## Emacs

[Magit, A Git Porcelain inside Emacs](http://magit.vc)

## Tools

[Linux dhcpd Options](https://linux.die.net/man/5/dhcp-options)
 [​git move subdirectory of a repo](https://stackoverflow.com/questions/359424/detach-move-subdirectory-into-separate-git-repository/17864475#17864475)

## FreeBSD

[FreeBSD install with gmirror](https://www.ateamsystems.com/tech-blog/installing-freebsd-9-gmirror-gpt-partitions-raid-1/)
 [​portmaster to pkg](https://forums.freebsd.org/threads/convert-from-ports-to-packages.65362/)
 [​Don't Panic! Upgrading FreeBSD to 11.2 on Ganeti](https://www.hactrn.net/blog/2018/11/12/dont-panic-upgrading-freebsd-to-112-on-ganeti/)

## Applications / Linux / Unix

[WordPress Tutorials](http://www.creativebloq.com/web-design/wordpress-tutorials-designers-1012990)
 [​Choosing an HTTP Status Code](http://racksburg.com/choosing-an-http-status-code/)
 [​Scan, index, and archive all of your paper](https://github.com/danielquinn/paperless)
 [​paf's Export photos from Apple Photo.App](https://github.com/patrikhson/photo-export)
 [​iPhoto Library Manager](http://www.fatcatsoftware.com/iplm/)
 [​BlockBlock  continually monitors common persistence locations and displays an alert  whenever a persistent component is added to the OS](https://objective-see.com/products/blockblock.html)
 [​Command-line based presentation tool](https://github.com/visit1985/mdp/)
 [​Magic Wormhole - get things from one computer to another, safely](https://github.com/warner/magic-wormhole)
 [​Upspin: A framework for naming everyone's everything. https://upspin.io](https://github.com/upspin/upspin)

## Hacks / Linux

[Upgrading grub from 0.97 to grub2](https://help.ubuntu.com/community/Grub2/Upgrading)
 `iptables -F sshguard` Get sshguard to stop blocking me after I have screwed up.
 [​Mounting a qcow image as a file system](https://www.kumari.net/index.php/system-adminstration/49-mounting-a-qemu-image) [​Debian Releases](https://www.debian.org/releases/)
 [​Debian Archives Explained](https://www.debian.org/doc/manuals/debian-faq/ch-ftparchives)
 [​Upgrade Debian wheezy to jessie](https://www.rootusers.com/how-to-upgrade-debian-7-wheezy-to-debian-8-jessie/)
 [​Firewall IPTables for IPv6](http://soucy.org/tmp/v6firewall/ip6tables.txt)
 [​A Quick Introduction to Linux Policy Routing](http://blog.scottlowe.org/2013/05/29/a-quick-introduction-to-linux-policy-routing/)
 [​Reset WordPress Password from My SQL](http://codex.wordpress.org/Resetting_Your_Password)
 [​Change default network name (ens33) to old “eth0” on Ubuntu 16.04](http://www.itzgeek.com/how-tos/mini-howtos/change-default-network-name-ens33-to-old-eth0-on-ubuntu-16-04.html)
 [​Great dump/restore recipies](http://www.tcm.phy.cam.ac.uk/~mr349/backup_restore_linux.html)
 [​Python  library to ease the development of encoders and decoders for various  protocols and file formats; contains ASN.1 and CSN.1 compilers](https://github.com/ANSSI-FR/pycrate)
 [​How AppArmor works](https://help.ubuntu.com/lts/serverguide/apparmor.html)

## Tools

[BitTorrentsync security & privacy analysis - Hackito Session results](http://2014.hackitoergosum.org/bittorrentsync-security-privacy-analysis-hackito-session-results/)
 [​Windows - Five portable antivirus and antimalware tools to carry with you at all times](http://www.techrepublic.com/blog/five-apps/five-portable-antivirus-and-antimalware-tools-to-carry-with-you-at-all-times/)
 [​SSH Based Chat](https://medium.com/@shazow/ssh-how-does-it-even-9e43586e4ffc)
 [​How To Create an SSH CA to Validate Hosts and Clients](https://www.digitalocean.com/community/tutorials/how-to-create-an-ssh-ca-to-validate-hosts-and-clients-with-ubuntu)
 [​VANE - A Free Fork of WPScan](https://github.com/delvelabs/vane)
 [​curated list of awesome malware analysis tools and resources](https://github.com/rshipp/awesome-malware-analysis)
 [​R Cheat Sheets](https://www.rstudio.com/resources/cheatsheets/)
 [​Regenerable ed25519 keys for OpenSSH ](https://github.com/ahf/teneo)
 [​GUYMAGER a Free Forensic Imager](http://securityblog.gr/3004/guymager-a-free-forensic-imager/)
 [​DropKick Detect and disconnect WiFi cameras](https://julianoliver.com/output/log_2015-12-18_14-39)
 [​Adding a Signing GPG Key and Hiding the Master](https://alexcabal.com/creating-the-perfect-gpg-keypair/)
 [​How to Tell if an Image, YouTube, etc. are faked](https://theconversation.com/six-easy-ways-to-tell-if-that-viral-story-is-a-hoax-47673)
 [​new openssh key format and bcrypt pbkdf](http://www.tedunangst.com/flak/post/new-openssh-key-format-and-bcrypt-pbkdf)
 [​TLS SNI Test Site: alice.sni.velox.ch](https://alice.sni.velox.ch/)
 [​Top 125 Security Tools](http://sectools.org/)
 ssh keylength `cat .ssh/id_rsa.pub | cut -c 9-60 | openssl base64 -d | hd`
 [​LetsEncrypt client which drops privs](https://marc.info/?l=openbsd-misc&m=146333151523455&w=2)
 [​Penetration Testing Cheat Sheet](https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/)
 [​GOGS - git server in go](https://gogs.io/)
 [​Unified Logging Layer](http://www.fluentd.org/)
 [​Use Wireshark to inspect SSL](https://certsimple.com/blog/ssl-wireshark-mac-osx)
 [​A terminal user-interface for tshark, inspired by Wireshark.](https://github.com/gcla/termshark)
 [​LaTeX, Wrapping text around figures](https://en.wikibooks.org/wiki/LaTeX/Floats,_Figures_and_Captions#Wrapping_text_around_figures)
 [​Advice for writing LaTeX documents](https://github.com/dspinellis/latex-advice)
 [​SED Debugger](http://aurelio.net/projects/sedsed/)
 [​Unix History Repository](https://github.com/dspinellis/unix-history-make)
 [​How To Create a Git Pull Request on GitHub](https://www.digitalocean.com/community/tutorials/how-to-create-a-pull-request-on-github)
 [​JHead - Exif Jpeg header manipulation tool](http://www.sentex.net/~mwandel/jhead/)
 [​NetData, the Linux internal measurement graphing tool from hell](https://github.com/firehol/netdata/wiki/Installation)
 [​A git Tutorial](https://ioparaskev.github.io/git/)
 [​GUI and CLI packet generator tool for ethernet](http://packeth.sourceforge.net/packeth)
 [​Sysdig is a universal system visibility tool with native support for containers](https://github.com/draios/sysdig/wiki)

### Certificate Authority Tools

[XCA, a Small CA for Macintosh](http://sourceforge.net/projects/xca/)
 [​XCA Tutorial](https://techlib.barracuda.com/display/cp/how+to+create+certificates+with+xca)
 [​EJBCA, a Large Enterprise Scale CA Toolset - LGPL but in java](http://www.ejbca.org/)
 [​TinyCA, debian package, may not be maintained](https://packages.debian.org/wheezy/tinyca)
 [​Regenerate Puppet Certificates](https://docs.puppetlabs.com/puppet/3.7/reference/ssl_regenerate_certificates.html)
 [​Safety Tips for iPhone iOS 10](http://www.zdnet.com//article/five-security-settings-in-ios-10-you-should-change/)
 [​Certificate Transparency Collector](https://crt.sh/?q=dom.ain)

## VPNs

`ssh randy@xmpp.rg.net -R 4430:127.0.0.1:443` from pfSense terminal console shell to backdoor when firewall locks you out.
 [​SoftEther VPN Project](https://www.softether.org/)
 [​WireGuard VPN](https://www.wireguard.com/)

# Languages

[SNOBOL4](http://www.snobol4.org/)
 [​Awesome Python frameworks, libraries, software and resources](https://github.com/vinta/awesome-python)

# Networking

## DNS

## DNS Tools

[ZoneMaster DNS Zone Checker](http://www.zonemaster.net/)
 [​NIST DANE Tester](https://www.had-pilot.com/dane/danelaw.html)
 YanDex DNS Servers `77.88.8.1 and 77.88.8.8`
 [​AfNIC ZoneMaster Zone checker](https://zonemaster.net/)
 [​DANE SMTP Validatoe](https://dane.sys4.de/)
 [​Phil Pennock's SMTP DANE TLS Checker](https://github.com/PennockTech/smtpdane)
 [​Flushing Chrome's DNS Cache](http://www.redsome.com/flush-clear-dns-cache-google-chrome-browser/)

## RIRs

[RIR Stats Files Catenated](https://www.nro.net/wp-content/uploads/apnic-uploads/delegated-extended) & [Decode for the above NRO Stats](https://wiki.rg.net/wiki/NROstatsDecode)
 [​Internet Timeline from JPNIC](https://www.nic.ad.jp/timeline/en/)
 [​IPv4 Address Space Transfer Report](https://net.t-labs.tu-berlin.de/~prichter/transfer_report/)

## Routing

[Linux iproute2 Cheat Sheet](http://baturin.org/docs/iproute2/)
 [​BIRD Cheat Sheet](http://bird.network.cz/?get_doc&f=bird-4.html)
 [​IPv6 route lookup on Linux](https://vincent.bernat.im/en/blog/2017-ipv6-route-lookup-linux)
 [​Linux VRF](https://lwn.net/Articles/632522/)

### Routers

[Juniper Routing Engines](http://www.juniper.net/documentation/en_US/release-independent/junos/topics/reference/specifications/routing-engine-m-mx-t-series-specifications-by-model.html) [Cisco IOS ssh key regeneration](http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_ssh/configuration/15-e/sec-usr-ssh-15-e-book/sec-secure-shell-v2.html#GUID-B23486F2-8B65-4E01-8FE5-5F80D307348F)

### Routing Security / RPKI

[Tomo's Cache Server and Router Configuration Instructions.](http://www.jpnap.net/rpki/en/roa_cache/technical_info.html)
 [​Certificates per RIR](http://certification-stats.ripe.net/)
 [​RIR Statistics from SurfNet](http://rpki.surfnet.nl/perrir.html)
 [​NIST Global Prefix/Origin Validation using RPKI](http://rpki-monitor.antd.nist.gov/)
 [​Securing BGP Routing with RPKI and ROAs](http://www.bgpmon.net/securing-bgp-routing-with-rpki-and-roas/)
 [​Daniele's ROA quality Page](http://rpki.me/quality.html)
 [​Daniele's Page of Root Nameserver ROA State](http://rpki.me/dns.html)
 [​RPKI Repository Browser](http://rpki-browser.realmv6.org/)
 [​Internet Protocol Journal on Securing BGP, Huston and Bush](http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_14-2/142_bgp.html)
 [​Renew Child Certs](https://trac.rpki.net/ticket/763)
 [​Google RPKI Puppet Deployment](https://github.com/google/rpki-mgmt/)
 [​Effects of RPKI Deployment on BGP Security](https://www.caida.org/workshops/bgp-traceroute/1108/slides/bgp-traceroute1108_rpki_deployment_study.pdf)

### Routing Tools

[IRR Toolset](https://github.com/irrtoolset/irrtoolset)
 [​bgpq3 - bgp filtering automation for Cisco and Juniper routers](https://github.com/job/bgpq3)
 [​IPv4 and IPv6 prefix aggregation tool](https://github.com/job/aggregate6)
 [​BGP Visualize with Python](https://basimaly-wordpress-com.cdn.ampproject.org/c/s/basimaly.wordpress.com/2017/07/03/bgp-visualization-using-python/amp/)

## Tools

[OpenWRT Replacement](https://www.lede-project.org/)
 [​Lede Guest LAN Set-up](https://wiki.openwrt.org/doc/recipes/guest-wlan-webinterface)
 [​Encapsulation overhead calculator](http://baturin.org/tools/encapcalc/)
 [​Protocol Header Diagram Generator](http://www.luismg.com/protocol/)

# Outreach

## Thailand

[BKNIX 2014.11.06](https://www.flickr.com/photos/127194098@N06/sets/72157648793146330/)

## Workshops

[AIT Bangkok 2012.11.19-22](https://sec-wkshp.rg.net/)
 [​SANOG/Thimphu 2014.01.13-21](https://nsrc.org/workshops/2014/sanog23-security/)
 [​APRICOT 2015](https://web.nsrc.org/workshops/2015/apricot2015/wiki/Track5Agenda)
 [BTNOG2 Thimphu 2015.09.14-17](https://wiki.rg.net/wiki/Btnog2Sec)
 [APRICOT 2016 Security Workshop](https://wiki.rg.net/wiki/Apricot2016Sec)
 [APRICOT 2017 Security Workshop 2017.02.20-24](https://wiki.rg.net/wiki/Apricot2017Sec)
 [​Bhutan NOG 2017 Security Workshop](https://github.com/randyqx/bhutannog-sec2017)

# Research / Computer Science

## Measurement

[Graphite - Scalable Realtime Graphing](http://graphite.wikidot.com/)
 [​Broken Promises of Privacy: Responding to the Surprising Failure of Anonymization](http://papers.ssrn.com/sol3/papers.cfm?abstract_id=1450006)
 [​Traffic Analysis - Anonymization](http://www.cs.unc.edu/~fabian/Traffic.html)
 [​IPv4 Address Transfer Report BETA](http://net.t-labs.tu-berlin.de/~prichter/transfer_report/)
 [​Emile Country Jedi](http://sg-pub.ripe.net/emile/ixp-country-jedi/latest/)
 [​The Python Graph Gallery](https://python-graph-gallery.com)

## Miscellaneous Research

[CAIDA BGP Hackathon List Archive](https://mailman.caida.org/mailman/private/bgp-hackathon-participants/)
 [​CAIDA BGP Hackathon BLOG](http://blog.caida.org/best_available_data/2016/01/13/caida-bgp-hackathon-2016-participants/)
 [​CAIDA BGP Hackathon wiki](https://github.com/CAIDA/bgp-hackathon/wiki)
 [​A full-scale simulation of the Internet based on the Border Gateway Protocol (BGP), built on SpatialOS](https://github.com/improbable-public/internet-simulation)
 [​Semantic Scholar Paper Cites and Refs](https://www.semanticscholar.org/)
 [​Graph Traversal Algorith Visualizations](https://workshape.github.io/visual-graph-algorithms/)
 [​Guide for students working with JP Aumasson](https://github.com/veorq/misc/blob/students/STUDENTS.md)
 [​How to Write a Great Research Paper](https://www.youtube.com/watch?v=g3dkRsTqdDA)

# Security

## Cryptography

[Crypto Coding Rules](https://cryptocoding.net/index.php/Coding_rules)
 [​CryptLib Toolkit](https://www.cs.auckland.ac.nz/~pgut001/cryptlib/)
 [​Free, Open Source, Crypto Libraries/Toolkits](https://github.com/libtom)
 [​NaCl Crypto Primitives](https://cr.yp.to/highspeed/naclcrypto-20090310.pdf)
 [​Hard Truths about the Hard Business of finding Hard Random Numbers](http://iang.org/ssl/hard_truths_hard_random_numbers.html)
 [​Matthew Green on December 2014 Snowden Dump](http://blog.cryptographyengineering.com/2014/12/on-new-snowden-documents.html)
 [​Blog for the cryptography group of the University of Bristol](http://bristolcrypto.blogspot.co.uk/)
 [​Performance analysis of different cryptographic algorithms implemented in an FPGA](http://publications.jrc.ec.europa.eu/repository/bitstream/JRC91528/lbna26833enn.pdf)
 [​How Code Breakers Work](http://science.howstuffworks.com/code-breaker.htm)
 [​Jacobian coordinates for short Weierstrass curves (algs to use)](http://www.hyperelliptic.org/EFD/g1p/auto-shortw-jacobian.html)
 [​Apple Crypto Libraries](https://developer.apple.com/cryptography/)
 [​Awesome Cryptogtaphy](https://github.com/sobolevn/awesome-cryptography)
 [​An introductory course on cryptography](https://www.crypto101.io/)
 [​A Stick Figure Guide to the Advanced Encryption Standard (AES)](http://www.moserware.com/2009/09/stick-figure-guide-to-advanced.html)

## General Security

[Capirca,  utilizes common definitions of networks and services and high-level  policy files to facilitate the development and manipulation of network  access control filters (ACLs) for various platforms.  Use with ldpush](https://code.google.com/p/capirca/)
 [​Real HSM Breaches](http://cryptosense.com/real-hsm-breaches/)
 [​OpenTechFund/secure-chat roadmap.  More like a planet survey.](https://github.com/OpenTechFund/secure-chat/blob/master/roadmap.md)
 [​Security  Applications of Formal Language Theory, Len Sassaman, Meredith L.  Patterson, Sergey Bratus, Michael E. Locasto, Anna Shubina](http://www.cs.dartmouth.edu/~sergey/langsec/papers/langsec-tr.pdf)
 [​Hardening Your Web Server](https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/)
 [​Secret Cells, Threats and Assumptions](https://wiki.cacert.org/Risks/SecretCells/ThreatsAndAssumptions)
 [​Mozilla Recommendations for Security/Server Side TLS](https://wiki.mozilla.org/Security/Server_Side_TLS)
 [​SSL Cipher Suite Details of Your Browser](https://cc.dcsec.uni-hannover.de/)
 [​Check out Your Browser's SSL Support](https://www.howsmyssl.com/)
 [​Stop Firefox leaking data about you](https://github.com/amq/firefox-debloat)
 [​Mobile Carrier Super-Cookie Use](http://www.net-security.org/secworld.php?id=18776)
 [​Linux workstation security checklist](https://github.com/lfit/itpol/blob/master/linux-workstation-security.md)
 [​Efficient Group Key Signing Method](https://web.archive.org/web/20110724024707/http://sion.quickie.net/keysigning.txt)
 [​caff, proof of posession of the passphrase of a key sent by the email address associated with that key](https://gist.github.com/Superbil)
 [​OnionShare](https://github.com/micahflee/onionshare/blob/master/README.md)
 [​Journal of Cybersecurity](http://cybersecurity.oxfordjournals.org/)
 [​We Should All Have Something To Hide, Moxie](http://www.thoughtcrime.org/blog/we-should-all-have-something-to-hide/)
 [​A Gentle Introduction to Secure Computation](http://www.alexirpan.com/2016/02/11/secure-computation.html)
 [​FTC - Time to rethink mandatory password changes](https://www.ftc.gov/news-events/blogs/techftc/2016/03/time-rethink-mandatory-password-changes)
 [​Camouflage from face detection](https://cvdazzle.com/)
 [​FreeBSD - a lesson in poor defaults](https://vez.mrsk.me/freebsd-defaults.txt)
 FireFox about:config set `dom.webnotifications.enabled` and `dom.push.enabled` to false to prevent push notifications]
 [​Cyber Security Reading List](https://www.eecs.umich.edu/courses/eecs588/readings.html)
 [​Tech Solidarity Personal Security CheckList Review](https://techsolidarity.org/resources/journalist_checkup.html)
 [​Shared thoughts after 6+ years in Pentesting](https://0x00sec.org/t/shared-thoughts-after-6-years-in-pentesting/2492)
 [​A Catalog of Exploits](https://www.it-sec-catalog.info/analysis_and_exploitation_unprivileged.html)
 [​Blockchain Graveyard, Crypto-Currency Disasters](https://magoo.github.io/Blockchain-Graveyard/)
 [​ipcrypt: IP-format-preserving encryption](https://github.com/veorq/ipcrypt)
 [​F-Secure’s Guide to Evil Maid Attacks](http://images.secure.f-secure.com/Web/FSecure/{319382b2-a040-4c88-bd94-20eed01bf22f}_F-Secure-Evil-Maid-Guide.pdf)
 [​Fuzzing JSON Web Services](https://secapps.com/blog/2018/03/fuzzing-json-web-services)
 [​PEN Tester's Tool List](https://raw.githubusercontent.com/n00py/ReadingList/master/gunsafe.txt)
 [​Awesome Web Security](https://github.com/qazbnm456/awesome-web-security)
 [​Gamified lessons in using encryption in everyday life.  Good for you and good for friends and family.\](https://www.hrw.org/everyday-encryption)

## Privacy Projects

[Privacy Software Workshop Series](https://wiki.techinc.nl/index.php/Privacy_Software_Workshop_Series)
 [​Peer 2 Peer BGP Security](http://wiki.techinc.nl/index.php/P2pbgpsec)
 [​Setting Up I2P and Tor Darknets](https://wiki.techinc.nl/index.php/MeshNet)

## Securing Open Source

[Secure Messaging roadmap from the LEAP project](https://github.com/OpenTechFund/secure-chat/blob/master/roadmap.md)

## Tools

[ROTTEN,  small self-hosting Lisp, designed as a vehicle for exploring Ken Thompson's Reflections on Trusting Trust](https://github.com/rntz/rotten/blob/master/README.md) [Canary Token Generator](http://canarytokens.org/generate)
 [​YubiKey Configuration for GPG, SSH, and U2F](https://research.kudelskisecurity.com/2017/04/28/configuring-yubikey-for-gpg-and-u2f/)
 [​collection of awesome lists, manuals, blogs, hacks, one-liners and tools for Awesome Ninja Admins](https://github.com/trimstray/awesome-ninja-admins)
 [​List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.](https://github.com/toniblyx/my-arsenal-of-aws-security-tools)
 [​Free Security Tools an End User Should Start Using NOW](https://www.safetydetective.com/blog/free-security-tools-that-you-need-to-start-using-now/)
 [​Securing how folk use ssh](https://gist.github.com/lizthegrey/9c21673f33186a9cc775464afbdce820)

# System Administration

## Automation

### Ansible

[http://www.ansibleworks.com/docs/](http://www.ansibleworks.com/docs/)
 [​http://www.ansibleworks.com/docs/faq.html](http://www.ansibleworks.com/docs/faq.html)
 [​http://jinja.pocoo.org/docs/templates/](http://jinja.pocoo.org/docs/templates/)
 [​NSRC Intro (pdf)](https://nsrc.org/workshops/2013/nsrc-ubuntunet-trainers/raw-attachment/wiki/Agenda/intro-ansible.pdf)
 [​append an existing list using set_fact](https://gist.github.com/raags/0f2089ec1208617b86d8)
 [​Module Provided Facts](http://docs.ansible.com/developing_modules.html#module-provided-facts)
 [​for JunOS](https://github.com/Juniper/ansible-junos-stdlib)
 [​for NX-OS](https://github.com/jedelman8/nxos-ansible)
 [​for IOSxr](https://github.com/spotify/napalm)
 [​Bronwyn Tutorial](https://github.com/bronwynlewis/ansible101-network-automation-tutorial)
 [​Finding the size of various object in your postgres database](https://wiki.postgresql.org/wiki/Disk_Usage)
 [​Quadrupling Ansible performance with Mitogen](http://pythonsweetness.tumblr.com/post/171589071872/quadrupling-ansible-performance-with-mitogen)

### Configuration Tools

[LDPush, A cross-vendor network configuration distribution tool](https://code.google.com/p/ldpush/)
 [​CLI tool to push junoscript configs to Juniper network devices](https://github.com/facebook/fbpush)
 [​Python tool to configure networking interfaces on a Linux machine](https://github.com/ypconfig/ypconfig)

## Miscellaneous SysAdmin?

[Check if Upgrade has Dynmic Lib Dependencies which Need Restart](https://github.com/simondeziel/check-deleted-libs)

# Telcos & Lesser Forms of Humor

[Prepaid SIMs Global Wiki](http://prepaid-data-sim-card.wikia.com/wiki/Prepaid_SIM_with_data)

# Virtualization

## Ganeti

[Experimental Ganeti extstorage provider for ZFS volumes](https://github.com/ffzg/ganeti-extstorage-zfs)
 [​Ganeti using LVM over ZFS (zfsonlinux) ](https://groups.google.com/forum/#!topic/ganeti/chZ99mAHuuc)
 [​Installing pfSense as VirtIO on Ganeti](https://doc.pfsense.org/index.php/VirtIO_Driver_Support)
 [​Make a Node Multi-Homed](http://docs.ganeti.org/ganeti/master/man/gnt-node.html#modify)
 [​Also how to Make a Node Multi-Homed](http://docs.ganeti.org/ganeti/master/html/admin.html#replication-network-changes)
 [​Upgrading to 2.12 and Onward](http://docs.ganeti.org/ganeti/2.12/html/upgrade.html)
 [​Ganeti Web Manager](http://ganeti-webmgr.readthedocs.org/en/latest/index.html)
 [​NSRC Instructions for Ganeti Web Manager Installation](https://nsrc.org/workshops/2014/sanog23-virtualization/raw-attachment/wiki/Agenda/ex-ganeti-webmgr.htm)
 [​snf-image - allows Ganeti to launch instances from predefined or untrusted custom Images](https://www.synnefo.org/docs/snf-image/latest/index.html)
 [​Editing Cluster Configuration (/var/lib/ganeti/config.data)](https://code.google.com/p/ganeti/wiki/EditingTheConfiguration)
 [​Cluster Key Replacement](http://docs.ganeti.org/ganeti/2.12/html/cluster-keys-replacement.html)
 [​Generate/Replace SSL Certificates](https://code.google.com/p/ganeti/wiki/GanetiAndSSL)
 `lvextend -L+50G -r /dev/mapper/ganeti-var`
 [​Ganeti Performance Tuning](https://github.com/ganeti/ganeti/wiki/Performance-Tuning)
 [​Using Open vSwitch to allow VMs on two different hosts to communicate over port-based GRE tunnels](http://docs.openvswitch.org/en/latest/howto/tunneling/)

## Misc Cloudware

[OwnCloud](http://owncloud.org/)

# Windows

## Ops Tools

[Win10 is Horrible SpyWare](http://www.metzdowd.com/pipermail/cryptography/2015-July/026136.html)

## Security

[Detekt, a free tool that scans your Windows computer for traces of FinFisher and Hacking Team RCS](https://resistsurveillance.org/)

## Misc Windows Stuff

[Split PowerPoint Animations into PDFs](https://superuser.com/questions/602209/create-a-pdf-from-powerpoint-with-animations)

# Misceleanous

[Framadate, an open doodle replacement](https://framadate.org/8ouws6sxigi2gjdz)
 [​Snowden at IETF, plugs CrypTech at 0:38:00](https://www.youtube.com/watch?v=0NvsUXBCeVA)
 [​How to construct a Nature summary paragrah (aka abstract)](https://archive.psg.com:Abstract-Guide-Nature.pdf)
 [​Web Design: The First 100 Years ](http://idlewords.com/talks/web_design_first_100_years.htm)
 [​White Rabbit Express - Buy anything from Japan](https://www.whiterabbitexpress.com/)
 [​NetFlix Secret Category Codes](http://netflixcodes.me/)
 [​Supranational European Bodies](https://en.wikipedia.org/wiki/Template:Supranational_European_Bodies)
 [​Free Open WebRTC Site](https://appear.in/)
 [​The Small of the Soup](http://web2.uvcs.uvic.ca/elc/studyzone/330/reading/smell1.htm)
 [​O RLY Cover Generator](http://dev.to/rly)
 [​IIJ Lab Conference Calendar](https://cf.iij-group.jp/pages/viewpage.action?title=Conference+schedule&spaceKey=LAB)
 [​LaTeX hints](http://www.read.seas.harvard.edu/~kohler/latex.html)
 [​Big Font Generator](http://www.network-science.de/ascii/)
 [​Levels of Techie Enlightenment](http://hackingdistributed.com/2017/05/04/stages-of-enlightenment/)
 [​Freelance Achievement Stickers](http://www.newyorker.com/humor/daily-shouts/freelance-achievement-stickers)
 [​Fast-Track Arrival Options Around the World](https://thepointsguy.com/2015/07/fast-track-arrival-options-around-the-world/)
 [​Teen Vogue on Know Your Rights If You Get Arrested](http://www.teenvogue.com/story/know-your-rights-if-you-get-arrested)
 [​Data, Past, Present, and Future](https://github.com/data-ppf/data-ppf.github.io/wiki/Syllabus)
 [​Create a Knitting Pattern](https://meowni.ca/knit-a-stitch/)
 [​Tips for Writing Technical Papers by Jennifer Widom](https://cs.stanford.edu/people/widom/paper-writing.html)
 [​Hong Kong Walled City](http://www.scmp.com/news/hong-kong/community/article/2138495/rats-were-something-else-25-years-hong-kongs-kowloon-walled)
 [​The Importance of Deep Work](https://azeria-labs.com/the-importance-of-deep-work-the-30-hour-method-for-learning-a-new-skill/)
 [​Cheap Internet Fax Service](https://wiki.voip.ms/article/Virtual_Fax)
 [​ASCIIdoc Cheat Sheet](https://powerman.name/doc/asciidoc)
 [​Sockets in bash](https://n0where.net/bash-open-tcpudp-sockets)
 [​ITU World Fiber Map](https://www.itu.int/itu-d/tnd-map-public/)
 [​Using Apple Pay for Suica](https://atadistance.net/apple-pay-suica/)
 [​More using Apple Pay for Suica](https://support.apple.com/en-us/HT207155)
 [​Remove Background from an Image](https://www.remove.bg/)
 [​How Corning Makes Super-Pure Glass for Fiber-Optic Cable](https://www.wired.com/story/corning-pure-glass-fiber-optic-cable/)
 [​Stephenson on Undersea Cables](https://www.wired.com/1996/12/ffglass/)
 [​Regular Expression Visualizer](https://jex.im/regulex)
 [​Donald Knuth Lectures Online](https://www.youtube.com/playlist?list=PL94E35692EB9D36F3)
 [​TCPtrace and xplot Cheat Sheet](https://www.arl.wustl.edu/~kenw/courses/cse573s/sp04/pdffiles/tcptrace.pdf)
 [​Candidate First Hiring](https://www.deepsig.io/news/2019/2/5/candidate-first-hiring)
 [​Differential Privacy Made Simpler](https://accuracyandprivacy.substack.com/p/differential-privacy-an-easy-case)
 [​Containers from Scratch](https://ericchiang.github.io/post/containers-from-scratch/)
 [​Let Me Google This For You](http://lmgtfy.com/?q=create+pkcs+%2310)
 [​Custom Knives Jonas](https://jonasblade.com/)
 [​Vonada's Engineering Maxms](http://gunkies.org/wiki/Vonada's_Engineering_Maxims)
 [​Animated Knots](https://www.animatedknots.com/bowline-knot)