blog


tech-notes Very short notes with no explanations. Primarily useful to enrich the search, and to act as a brain dump.
Topic Replies Views Activity
Access as a process - purpose-based Access - Zero Trust for the rest of us
blog
automation ,  agile ,  compliance ,  zero-trust ,  security_management

Access as a process - purpose-based Access - Zero Trust for the rest of us In recent years tech-focused companies started to consolidate their development and operations organizations. Some followed the DevOps scheme m…

2 766 August 27, 2021
How to rock at Serverless - from beginner to Knative and Kubeless
blog
automation ,  coding ,  cloud ,  devops ,  linux ,  jenkins ,  java ,  javascript ,  spring ,  react ,  serverless ,  micro-services ,  python ,  kubernetes ,  knative

This is a hands-on lab guide for engineers. It assumes some experience but there are a lot of links and annotations. How to rock at Serverless - from beginner to Knative and Kubeless Motivation: building services…

2 1758 August 26, 2021
VMware ESXi remote code execution - steps to defend your systems (CVE-2020-3992)
blog
esxi ,  vmware ,  linux ,  ovirt
1 257 June 1, 2021
A technical look a Horusec - OpenSource Risk-driven Application Security for DevOps (SAST / DAST / CAST)
tech-notes
sast ,  dast ,  cast ,  jenkins ,  continuous-integration ,  containers ,  code-reviews ,  coding ,  devops
1 455 May 19, 2021
Pf-dup on a PfSense gateway for separate distributed IDS sensors
blog
intrusion-detection ,  openbsd ,  pfsense ,  linux ,  suricata ,  esxi ,  vmware ,  zeek ,  cnc ,  lab-building
1 650 May 16, 2021
KubeCon + CloudNativeCon Europe 2021+ Pipeline hack - my wrap-up
blog
compliance ,  security_management ,  devops ,  kubernetes ,  linux ,  information_management ,  infosec_con
1 212 May 14, 2021
Discourse as a blog / knowledge base since Nov 2015. Documentation is not boring
blog
editorial ,  discourse-app ,  information_management
1 278 May 3, 2021
Rate limiting (Technitium) DNS with pfSense (Community Edition)
blog
dns ,  firewall ,  network-engineering ,  pfsense
1 599 April 29, 2021
How to use ssh ProxyCommands on Windows 10 from Powershell
blog
ssh ,  windows-environment ,  linux ,  openbsd
1 7045 April 29, 2021
Motivation for Risk Analysis to improve Risk Management? Or do we just manage the chaos?
blog
iso-27005 ,  iso-27001 ,  fair ,  iso-31000 ,  data_science ,  compliance ,  security_metrics
1 436 April 29, 2021
Quick-tipp: Windows Group Policy for Software Restrictions in suspicious folders
tech-notes
windows-environment ,  active-directory ,  group-policies ,  quick-tipp
1 420 April 29, 2021
Quick-tipp: use Online file systems from WSL 1 (Ubuntu on Windows 10)
tech-notes
quick-tipp ,  windows ,  wsl_1
1 382 April 29, 2021
Quick-tipp: use Eclipse Theia as a Cloud-IDE like a web-version of VScode
tech-notes
quick-tipp ,  private_cloud ,  coding
1 548 April 29, 2021
Linux Without Borders, Edition 2 (Feb 2020): Windows Subsystem for Linux, X Window System and Remote Desktop Protocol - thin client experiences for lean DevOps teams
blog
linux-desktop ,  windows-environment ,  linux ,  x11 ,  rdp ,  gloss
1 935 April 29, 2021
Quick-tip: create tickets with the REST API of an on-premise JIRA / JSD using robust Bash functions
blog
json ,  bash ,  coding ,  jira
1 942 April 29, 2021
Corelan Win32 Advanced Exploit Development class at BruCon 2019 - the story with 6 months of homework
blog
windbg ,  offdev ,  security_management ,  incident_response ,  windows ,  heap ,  rop ,  infosec_con
1 2718 April 29, 2021
What happened at Elbsides (BSides in Hamburg) 2019
blog
reverse_engineering ,  infosec_con
1 432 April 29, 2021
Using Discourse as a Wiki / Knowledge Base - improvements
blog
discourse-app ,  knowledge-base ,  information_management
1 1272 April 29, 2021
Quick-tipp: install Windows 10 updates from Powershell
tech-notes
quick-tipp ,  powershell ,  windows-environment ,  basics ,  automation
1 601 April 29, 2021
Next-gen DataScience with Kotlin, Krangl and Graal Substrate VM AOT (Ahead Of Time)
blog
spring ,  data-science ,  kotlin ,  graal ,  krangl ,  coding ,  javascript ,  react ,  cloud
1 1306 April 29, 2021
Small security improvements - zero trust, zero budget, zero time, countless risks
blog
hsts ,  dnssec ,  livepatch ,  pfsense ,  spf ,  dkim ,  side-channel-attack ,  vmware ,  dmarc ,  arc ,  security_management ,  bimi ,  securitytxt
1 1033 April 29, 2021
Advanced Fuzzing & Crash Analysis (HITB 3-day training, May '19) - personal revue
blog
fuzzing ,  smt ,  windows ,  devops ,  linux ,  offdev ,  afl
1 1622 April 29, 2021
Getting your favorite Windows laptop ready for a security con - no bullshit guide
tech-notes
windows ,  quick-tipp ,  hardening
1 723 April 29, 2021
Quick-tip: coding with IDE-features and focus - Eclim and NeoVim
blog
coding ,  vim ,  eclipse
1 1657 April 29, 2021
Go and data-frames - JSON reading without mapping - get ready to machine-learn
blog
data_science ,  json ,  coding ,  golang ,  cloudflare ,  docker ,  superset
1 2272 April 29, 2021
Quick-tip: switch to Java 8 SDK on Mac OS X (2018)
blog
java ,  mac-os-x ,  coding
1 2669 April 29, 2021
The Cynefin framework to overlay formative security management approaches
blog
security_management ,  project_management ,  audit ,  influence_models ,  devops ,  knowledge-compression ,  six-sigma ,  cmmi
1 1107 April 29, 2021
The Zero-Trust proxy hype - can we reverse-proxify everything and ditch VPNs?
blog
proxy ,  oauth2 ,  letsencrypt ,  zero-trust ,  compliance ,  nist ,  rsa ,  sso ,  gitlab
1 7569 April 29, 2021
A look at algo VPN and pfSense NAT - beyond double-NAT and fragmentation
blog
mobile ,  vpn ,  ipsec ,  ansible
1 2247 April 29, 2021
Inspec with Jenkins, Ansible and Splunk for compliance dashboards - self-auditing CI platforms
blog
rsyslog ,  automation ,  compliance ,  security_metrics ,  ansible ,  jenkins
1 6363 April 29, 2021