Top all-time · #15460
<i class='fa-solid fa-compass-drafting'></i> kang's things & stuff
Personal blog · insecure.wssecuritysystems
<i class='fa-solid fa-compass-drafting'></i> kang's things & stuff is a personal blog at insecure.ws about security and systems. Since 2013, 5 different Hacker News readers have linked it 5 times. The last post was in 2023, but the archive is still widely read.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for posts on Linux containers and SSH security, such as systemd-nspawn notes and a write-up on abusing SSH-agent for lateral movement.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
kang’s webpage
What Hacker News says?
I've a more or less similar script that uses overlayfs. More less than more... since it uses machined really. But it's easy to to grab commands from there and put in bocker for ex. You just need to replace the btrfs commands by the overlayfs mount, it's almost nothing :) https://github.com/gdestuynder/mctl/ See also this terrible draft https://www.insecure.ws/linux/systemd_nspawn.html
Comment linking /linux/systemd_nspawn.html
on “Show HN: Bocker – Docker implemented in 100 lines of bash”Submitted Setting up OATH toolkit as a story · 3 points
HN discussionGood find! I was always curious how this worked. I'm a big fan of tools like secretive[1] that can help solve this problem by using biometrics to shift the UX/security trade-off and thus make it feasible to always require some kind of authentication to sign a token with a key. I'm not aware of any tools that do the same for Linux, and a quick Google search doesn't turn up much[2]. It does look like you can at least…
Comment linking /2013/09/25/ssh-agent-notification.html
on “Zero Effort Private Key Compromise: Abusing SSH-Agent for Lateral Movement”Submitted Configuring OpenSSH with OATH and public keys (2 factor authentication) as a story · 3 points
HN discussionSubmitted Easy SSL/TLS Configuration for Apache/mod_ssl as a story · 1 points
HN discussion