pages: switch to cdn.icyphox.sh Evaluating BunnyCDN.
Anirudh Oppiliappan x@icyphox.sh
Fri, 29 Apr 2022 11:22:57 +0530
31 files changed,
53 insertions(+),
52 deletions(-)
jump to
M
bin/replace.go
→
bin/replace.go
@@ -18,7 +18,7 @@ fmt.Println("usage: replace [old string] [new string]")
os.Exit(1) } - oldLine, newLine := os.Args[1], os.Args[2] + oldStr, newStr := os.Args[1], os.Args[2] posts, err := os.ReadDir(dir) if err != nil {@@ -33,8 +33,9 @@ }
lines := strings.Split(string(input), "\n") for i, line := range lines { - if strings.Contains(line, oldLine) { - lines[i] = newLine + if strings.Contains(line, oldStr) { + line = strings.ReplaceAll(line, oldStr, newStr) + lines[i] = line } } output := strings.Join(lines, "\n")
M
pages/about.md
→
pages/about.md
@@ -41,7 +41,7 @@
I'm generally uninterested in social media and don't often post on any. If you're interested in **hiring me** -- here's my -[résumé](https://x.icyphox.sh/resume.pdf). +[résumé](https://cdn.icyphox.sh/resume.pdf). ## this site
M
pages/blog/2019-09-27.md
→
pages/blog/2019-09-27.md
@@ -38,7 +38,7 @@ was getting my Minecraft launcher to run. The JRE isn't fully ported to `musl`
yet.[^1] The solution to that is fairly trivial and I plan to write about it soon. (hint: it involves chroots) - + ## Packaging for Alpine
M
pages/blog/2020-in-review.md
→
pages/blog/2020-in-review.md
@@ -56,7 +56,7 @@
- [radicale](https://radicale.org): Cal/CardDAV server - [Pleroma](https://pleroma.social): Single-user federated social media instance -- [filehost](https://x.icyphox.sh) +- [filehost](https://cdn.icyphox.sh) - [gonic](https://github.com/sentriz/gonic): Music streaming server - [crxn](http://deavmi.assigned.network/docs/crxn/site/): Cool network of cool people.
M
pages/blog/2021-05-10.md
→
pages/blog/2021-05-10.md
@@ -28,7 +28,7 @@ below), some infosec work and the usual SRE stuff. I'll probably write
about the observability infrastructure in detail sometime -- perhaps on the company blog. - + I even managed to break prod within the first month! But in all seriousness, it's pretty riveting work, with some very fun people.
M
pages/blog/2021-in-review.md
→
pages/blog/2021-in-review.md
@@ -41,8 +41,8 @@ cloud-native security, and some more Kubernetes.
Oh, and here are a few pictures from our trip to the Maldives.[^1] - - + + [^1]: If you're in Bangalore and are looking for work, definitely consider [applying to DeepSource](https://careers.deepsource.io)!
M
pages/blog/building-forlater.md
→
pages/blog/building-forlater.md
@@ -23,7 +23,7 @@ service that works via email. Email is the perfect tool for this
use-case: works offline; you can organize it however you like; you own your data. - + Pictured above is how forlater works. Each component is explained below.
M
pages/blog/bujo.md
→
pages/blog/bujo.md
@@ -88,7 +88,7 @@
I can't go without posting what it actually looks like in my notebook; so here, have a FOIA-declassified-looking picture of my bullet journal. - + This was when I first attempted the weekly log. Evidently, I struggled to compute dates accurately. And yes, "rice acme" was a task -- one@@ -99,7 +99,7 @@ the book with a pencil and I plan to continue with it until I finsh this
notebook -- there's still about half of it left. I plan to cop a dotgrid notebook for my next one, and start using a pen. - + At first I was sceptical. I didn't think I'd stick to it. But hey, looks like I did. I've been using my bullet journal spinoff method to great
M
pages/blog/covid19-disinfo.md
→
pages/blog/covid19-disinfo.md
@@ -82,7 +82,7 @@ registrations happening. Expect phishing and malware campaigns using the
virus as a theme. In the past 24 hrs, ~450 `.com` domains alone were registered. - + Anywho, there are bigger problems at hand -- like the fact that my uni still hasn't suspended classes!
M
pages/blog/disinfo.md
→
pages/blog/disinfo.md
@@ -142,7 +142,7 @@ Of course, if you're a nobody on Twitter (like me), this is a non-issue for you.
And please, don't do this: - + ## Conclusion
M
pages/blog/ducky-one-2.md
→
pages/blog/ducky-one-2.md
@@ -21,7 +21,7 @@ [Meckeys](https://meckeys.com). They aren't particularly abundant in
variety, but there's some decent prebuilts that you can pick up on there -- and I copped the Ducky One 2 SF. - + It's a 65% board, so unlike standard 60% boards, this comes with arrow keys and the `Del`, `PgUp` and `PgDn` keys. I don't _really_ need the@@ -31,7 +31,7 @@ `~` keys are merged. I have to hit `Shift + Esc` for tilde (same action
as usual), and `Fn + Esc` for the backtick. Takes a bit of relearning, but it's manageable. - + The key switches I went with were the Cherry MX Speed Silvers -- like Reds but actuate a bit faster. As it's my first ever mechanical
M
pages/blog/fb50.md
→
pages/blog/fb50.md
@@ -29,11 +29,11 @@ Android phones have the ability to capture Bluetooth (HCI) traffic
which can be enabled under Developer Options under Settings. We made around 4 "unlocks" from the Android phone, as seen in the screenshot. - + This is the value sent in the `Write` request: - + We attempted replaying these requests using `gattool` and `gattacker`, but that didn't pan out, since the value being written was encrypted.[^1]
M
pages/blog/five-days-tty.md
→
pages/blog/five-days-tty.md
@@ -141,4 +141,4 @@ trying to debug my issues.
I'll now conclude with an obligatory screenshot. - +
M
pages/blog/formula-e.md
→
pages/blog/formula-e.md
@@ -49,7 +49,7 @@ vote each recieve extra power during the race. Yup. You read that right.
They made a World Championship racing series a social media popularity contest. - + My last gripe is with the broadcast. It's so bad! They really should lose the gamer graphics. The driver list on the left is not color coded
M
pages/blog/go-shell-prompt.md
→
pages/blog/go-shell-prompt.md
@@ -223,7 +223,7 @@ PS1='$(~/dotfiles/prompt/prompt) '
``` And here's what it looks like, rendered: - + ## benchmarking
M
pages/blog/hacky-scripts.md
→
pages/blog/hacky-scripts.md
@@ -84,7 +84,7 @@ involves JSON parsing with [`jq`](https://stedolan.github.io/jq/).
That's it! It's so small, but I learnt a ton. For those curious, here's what it looks like running: - + ## Update latest post on the index page
M
pages/blog/ig-opsec.md
→
pages/blog/ig-opsec.md
@@ -117,7 +117,7 @@ altogether (hint: Facebook), but that's a discussion for another day.
Or be like me: - + And that pretty much wraps it up, with a neat little bow.
M
pages/blog/k8s-at-home.md
→
pages/blog/k8s-at-home.md
@@ -35,7 +35,7 @@
Since my RPi is behind a CG-NAT, I'm running a Wireguard mesh that looks something like this: - + Wireguard is fairly trivial to set up, and there are tons of guides online, so I'll skip that bit.@@ -124,7 +124,7 @@ In essence, it makes one of your nodes attract all the traffic,
assigning each `LoadBalancer` service an IP from a configured address pool (not your node IP). In my case: - + However, this assumes that our load balancer node has a public IP. Well it does, but we're still within our Wireguard network. To actually
M
pages/blog/mastodon-to-pleroma.md
→
pages/blog/mastodon-to-pleroma.md
@@ -66,7 +66,7 @@ ## why should you migrate?
Because Pleroma is cleaner, leaner[^3] and prettier looking[^4]. Oh, and we have chats. - + [^1]: [Erlang install guide](http://erlang.org/doc/installation_guide/INSTALL.html) [^2]: [Elixir install guide](https://elixir-lang.org/install.html#compiling-from-source-unix-and-mingw)
M
pages/blog/mnml-browsing.md
→
pages/blog/mnml-browsing.md
@@ -63,4 +63,4 @@ further incentivised to dispose of my Google account.
And here's the screenshot y'all were waiting for: - +
M
pages/blog/my-setup.md
→
pages/blog/my-setup.md
@@ -72,7 +72,7 @@ container. This is convenient for many reasons, keeps your global
namespace clean and a single command to drop into a Kali shell. I use a DigitalOcean droplet (BLR1) as a public filehost, found at -[x.icyphox.sh](https://x.icyphox.sh). The UI is the wonderful +[cdn.icyphox.sh](https://cdn.icyphox.sh). The UI is the wonderful [serve](https://github.com/zeit/serve), by [ZEIT](https://zeit.co). The same box also serves as my IRC bouncer and OpenVPN (TCP), which I tunnel via SSH running on 443. Campus firewall woes.
M
pages/blog/nullcon-2020.md
→
pages/blog/nullcon-2020.md
@@ -97,4 +97,4 @@ Note to the Nullcon organizers: you guys did a fantastic job running the
conference despite Corona-chan's best efforts. I'd like to suggest one little thing though -- please VET YOUR SPEAKERS more! - +
M
pages/blog/nvim-lua.md
→
pages/blog/nvim-lua.md
@@ -291,7 +291,7 @@
vim.o.statusline = table.concat(stl) ``` - + ## this is what being tpope feels like
M
pages/blog/openbsd-hp-envy.md
→
pages/blog/openbsd-hp-envy.md
@@ -152,4 +152,4 @@ / -- --\
~icy ``` - +
M
pages/blog/pi.md
→
pages/blog/pi.md
@@ -83,4 +83,4 @@
And oh, here's the protective case [nerd](https://peppe.rs) fashioned out of cardboard. - +
M
pages/blog/prosody.md
→
pages/blog/prosody.md
@@ -136,7 +136,7 @@ user registrations from XMPP/Jabber clients (security risk!), by setting
`allow_registration = true`. I may have missed something important, so here's [my -config](https://x.icyphox.sh/prosody.cfg.lua) for reference. +config](https://cdn.icyphox.sh/prosody.cfg.lua) for reference. ## Closing notes
M
pages/blog/pycon-wrap-up.md
→
pages/blog/pycon-wrap-up.md
@@ -63,10 +63,10 @@ It's not much, and
I can't be bothered to format them like a collage or whatever, so I'll just dump them here -- as is. - - - - + + + + ## C'est tout
M
pages/blog/r2wars-2020.md
→
pages/blog/r2wars-2020.md
@@ -49,7 +49,7 @@
Ultimately, this bot placed 7th out of 9 contestants -- an underwhelming outcome. I had to fix this. - + ## day 2@@ -99,7 +99,7 @@ These changes paid off, though. I placed 4th on day 2, out of 13
contestants! This screenshot was taken on my phone as I was eating dinner. - + All wasn't well though -- I still lost 4 matches, for the reasons below:@@ -159,7 +159,7 @@ submissions (and some updated submissions), and a lot of them checked
`0x000` for existence of a bot, effectively recking me. I placed 8th out of 14 contestants, with 7 wins and 6 losses. Tough day. - + ## day 4: the finals@@ -175,7 +175,7 @@ were all claimed by ARM, and naturally so -- they had a potential
throughput of 64 bytes per cycle thanks to `stmia`, compared to x86's 32 bytes. Pretty neat! - + ## links and references
M
pages/blog/rop-on-arm.md
→
pages/blog/rop-on-arm.md
@@ -76,16 +76,16 @@ Start by running it, and entering any arbitrary string. On entering a fairly
large string, say, “A” × 20, we see a segmentation fault occur. - + Now, open it up in `gdb` and look at the functions inside it. - + There are three functions that are of importance here, `main`, `winner` and `gadget`. Disassembling the `main` function: - + We see a buffer of 16 bytes being created (`sub sp, sp, #16`), and some calls to `puts()`/`printf()` and `scanf()`. Looks like `winner` and `gadget` are@@ -93,7 +93,7 @@ never actually called.
Disassembling the `gadget` function: - + This is fairly simple, the stack is being initialized by `push`ing `{r11}`, which is also the frame pointer (`fp`). What’s interesting is the `pop {r0, pc}`@@ -107,7 +107,7 @@ in `pc`. Neat.
Moving on to the disassembly of the `winner` function: - + Here, we see a calls to `puts()`, `system()` and finally, `exit()`. So our end goal here is to, quite obviously, execute code via the `system()`@@ -121,7 +121,7 @@
Back to `gdb`, hit `r` to run and pass in a patterned input, like in the screenshot. - + We hit a segfault because of invalid memory at address `0x46464646`. Notice the `pc` has been overwritten with our input.@@ -139,7 +139,7 @@ ```shell
$ python -c 'print("AAAABBBBCCCCDDDDEEEE\x28\x05\x01\x00")' | ./rop2 ``` - + The reason we don’t jump to the first instruction is because we want to control the stack ourselves. If we allow `push {rll, lr}` (first instruction) to occur, the program will `pop`@@ -182,7 +182,7 @@
``` (gdb) find &system, +9999999, "/bin/sh" ``` - + One hit at `0xb6f85588`. The addresses of `gadget` and `system()` can be found from the disassmblies from earlier. Here’s the final exploit code:@@ -201,7 +201,7 @@ Honestly, not too far off from our pseudo-code :)
Let’s see it in action: - + Notice that it doesn’t work the first time, and this is because `/bin/sh` terminates when the pipe closes, since there’s no input coming in from STDIN.
M
pages/blog/signal-vmm.md
→
pages/blog/signal-vmm.md
@@ -102,7 +102,7 @@
ssh -Y pantwo signal-desktop &> /dev/null ``` - + ## caveats
M
pages/uses.md
→
pages/uses.md
@@ -14,7 +14,7 @@ **Asus ROG Flow X13 (2021)**: 13.4" 4K, Ryzen 9 5900HS, 32GB RAM, 1TB
SSD, Nvidia GTX 1650 Max-Q. Even more future proof than the Envy -- evidently. Runs Linux quite well; not sure about BSD. - + **Lotus58**: Split-ortho mechanical keyboard, Gazzew Boba LT switches. **Logitech M221**: An el cheapo wireless mouse that mouses just enough.