Category Archives: Security

Debian, ProFTPD, FTPS, TLS, SSL, and SSL23_GET_SERVER_HELLO:unknown protocol

Recently I needed to test against an FTPS server. No big deal, I thought to myself, I’ll just set one up real quick. Boy did I end up having a hard time with that. Not because the task was actually hard but because there’s a bit of a general haziness about the whole idea of [...]

Erlang + HTML5 + IRC = pretty much awesome

as someone who uses IRC every day for work… I find this to be a very cool idea, even though I can’t really trust sending my traffic through a 3rd party. IRCCloud.com

Adding a second authentication factor to WordPress

UPDATE: I’ve added the plugin to the WordPress.org repository. If it gathers interest/attention then I may develop it further and add more stuff like SMS gateway support, configuration, etc… See: http://wordpress.org/extend/plugins/second-factor/ I really don’t know why, but the idea of adding a second authentication factor to WordPress blogs took hold of my brain tonight and [...]

Using PHP and OpenSSH with username/password auth

It turns out that this is actually a tricky problem. It’s super easy to use the OpenSSH command line stuff via PHP when you have key based authentication set up, but it’s not at all easy to use when you want to go the user/pass route. This is for a couple of reasons: First you [...]

PHP SSH2 code

I’ve had a need to use the PHP SSH2 PECL recently (working on making a product, at work, more efficient) And thought I would share some of the preliminary code. You can find it here: vpssh.phps The most interesting thing is not vpssh_core or it’s exec (though it’s good code) the really interesting thing is [...]

Postfix, DKIMproxy, Spamc

If you’re running any moderately busy mail server you’re probably using spamassassins spamc/spamd to check for spam because its tons more efficient than piping the mail through the spamassassin cli. Assuming that you do, and that you plan on adding DKIM proxy to the mix to verify  and sign emails you need to put things [...]

Any… good… php devs out there looking for some side work?

I know a group of guys looking to do some cool stuff who could use a few good contractors. Drop me an e-mail with maybe a sample or something cool you did in php and I’ll pass it on. apokalyptik apokalyptik com — Subject: “PHP Consulting” (I’ll likely completely overlook your mail if you use [...]

This cold of mine just WILL NOT quit…

It’s still hanging in there like a monkey on my back.  Speaking of colds… Vista is off to a cold start, security wise, isn’t it? Already a privilege escalation vulnerability letting local restricted users become local admins.  “UNBREAKABLE ORACLE VISTA!”

Trying out NoListing

I’m trying out this “nolisting” idea which is, really clever. Of course I read about it on slashdot. I’ll be very interested to see how well it works on apokalyptik.com e-mail.  If I remember both to check and to report I’ll put up some graphs. This post ought to serv both as a reminder for [...]

Down with HTML E-Mail!

Begin rant I’m with Jeremy on this one… Lets face it, e-mail is broken.  We have long since outgrown it, we have been living with the pains of ot for a long time now.  It’s everyones favorite internet whipping boy. “I hate spam” “I hate stupid forwards” “I hate huge attachments”.  We spend all our [...]