Blogs

Recent Posts

TIL Apt Takes 'Direct' In Proxy Statement

2020-12-25
I was playing around in a contained network where only some of the connections should go through a proxy. From man apt-transport-http: ... The various APT configuration options support the special …

Commit Security

2020-08-03
It’s quite usual that people push their credentials to a public git repo on the internet. What published is published, a push -f does not unpublish, and recovery isn’t that obscure.

Revisiting WriteFreely Configuration

2020-07-27
My WriteFreely configuration has changed quite many times, which is more frequent than posting. 😉

Enabling Encrypted SNI

2020-05-18
I was trying to pass the Encrypted SNI test, but it wasn’t smooth as silk. My resolver NextDNS support the feature, but the test page finds otherwise. So skimmed over the document, found …

Simplifying My WriteFreely configurations

2020-05-11
I was using customized systemd unit files and timers to keep this blog up, this is against the spirit of standardization! So I moved to a much simpler configuration.

Updating a vulnerable TPM

2020-05-01
An unsigned long long time ago, a mass amount of TPMs and smartcards were hit by a flaw in the Infineon codebase. They have released an update, but still, we can see unpatched modules in the wild.

Write-Up: Setting Up This WriteFreely Blog

2020-01-23
Recently I found that WriteFreely suits me well. at the date of the setup, it has a few issues: Daemon process runs as root; No native image hosting;