My Little Pocket Universe
To add an extra layer of security to your server, especially when you are working on a shared client, you can add SSHFP records to the DNS record of the host. This allows the ssh client to pull the hash of the server from DNS to add an extra layer of verification that the host … Read more
If you have the HashKnownHosts option for your ssh client set to yes, then you have a more secure known_hosts file so that a bad actor cannot easily get a list of the hosts you connect to, which is a good idea. However, it also hides it from you, so if you need to remove … Read more
While I was updating some settings with my bind server on Ubuntu 20, I noticed a lot of queries for “pizzaseo.com”, which appears to be some kind of marketing company trying to scrape for data. On reading out in forums about it, apparently they’re looking for vulnerable pi-hole servers that are exposed to the internet. … Read more
A while back, I found a nice TrueType font that mimicked the old DEC terminals. It was made by taking the ROMs of a DEC VT220, and creating the TTF font based on that data. It occurred to me that it would also make a really great replacement for the linux console font, where it … Read more
Sometimes it’s desirable to have a back door into a system that is behind a firewall. ssh is a security person’s best friend, and worst nightmare. This is more in the latter category, but as an admin, incredibly useful. I have a server that I can get outbound connections to anywhere, but do not have … Read more
When I was installing Ubuntu linux, I tried to set up 20.04.2 with LACP bonding during the install, and the installer kept crashing. So, to get through the install, I just configured one port with the basic info, and then updated the OS after to have the bonding. I do recommend that you make the … Read more
Traditionally, on *nix systems, cron (or one of its derivatives) is used. It’s possible to use cron on the Mac, but it’s deprecated. launchd is the preferred method. The set up is a little more complex because it’s a bit of XML code, but it’s very straightforward. See the launchd.plist man page or the launchd … Read more
There are a lot of tutorials out in the netland, but almost all of them are out of date, or didn’t address my use case. I run my own domain (can you guess what it is?), and I wanted to allow a couple of users I have that don’t have static IP addresses to be … Read more
For some strange reason, in the land of the internet when people create books with flowable text (i.e. novels), they use the PDF format, which is simply awful for the medium. Yet when they have a content that lends itself perfectly to the PDF format, like comics, they instead use an unnecessary made-up format that … Read more
Install gpsd and chrony (chrony should already be installed) Connect your GPS and determine its device name. If it is a USB GPS, the easiest way to do that is to do an ls in /dev, then plug in the device, and do another ls and see what changes. The device name will likely be … Read more