0bs1d1an

cross-posted from: https://infosec.pub/post/36928579

Here's how to set up CrowdSec to protect your OpenWrt router.

Running the Security Engine in Docker (server), forwarding logs via Syslog, and using the lightweight firewall bouncer on the router.

Result: community-powered IPS on tiny hardware 🚀

cross-posted from: https://infosec.pub/post/36928579

Here's how to set up CrowdSec to protect your OpenWrt router.

Running the Security Engine in Docker (server), forwarding logs via Syslog, and using the lightweight firewall bouncer on the router.

Result: community-powered IPS on tiny hardware 🚀

Here's how to set up CrowdSec to protect your OpenWrt router.

Running the Security Engine in Docker (server), forwarding logs via Syslog, and using the lightweight firewall bouncer on the router.

Result: community-powered IPS on tiny hardware 🚀

WireGuard is a great VPN protocol. However, you may come across networks blocking VPN connections, sometimes including WireGuard. For such cases, try tunneling WireGuard over HTTPS, which is typically (far) less often blocked. Here's how to do so, using Wstunnel.

cross-posted from: https://infosec.pub/post/36446848

My girlfriend's father wanted to buy a new computer, because of Windows 10 expiring. Nonsense, I suspected, and instead offered to help him test drive Linux Mint. This turned into a successful migration, which I briefly wrote about.

My girlfriend's father wanted to buy a new computer, because of Windows 10 expiring. Nonsense, I suspected, and instead offered to help him test drive Linux Mint. This turned into a successful migration, which I briefly wrote about.

cross-posted from: https://infosec.pub/post/36326391

When not using Google Play services (e.g. GrapheneOS, LineageOS users), Signal can be a real battery drain. Molly with UnifiedPush on the other hand is extremely battery efficient.

Here's how to set this up, using Nextcloud as the UnifiedPush provider.

When not using Google Play services (e.g. GrapheneOS, LineageOS users), Signal can be a real battery drain. Molly with UnifiedPush on the other hand is extremely battery efficient.

Here's how to set this up, using Nextcloud as the UnifiedPush provider.

Hello all,

I developed a tool that scans for certificate issues in GPO, AD CS, and Active Directory. I couldn't find another tool that consolidates these checks—PingCastle catches some, but not all—so I figured I'd try filling the gap.

Big shoutout to Locksmith! This isn’t intended as a clone (aside from maybe the ASCII art nod). That tool is incredibly helpful in securing AD CS. ADCT's focus is more on certificate issues itself, as opposed to misconfigurations in certificate templates and such.

Would love your thoughts, feedback, or feature suggestions.

Rejoice! Our beloved password manager, ZX2C4's pass, sees its Android implementation back on F-Droid. This APS fork has been pushing development forward since some time already, and has finally been published on the aforementioned app store earlier this month.