news
today's howtos
-
OSTechNix ☛ How to Verify Fedora ISO Integrity and Authenticity
Learn how to verify the integrity and authenticity of a Fedora ISO from the command line using SHA256 checksums and GPG signatures.
-
University of Toronto ☛ Exim's feature of "tainted" strings is a heuristic
Exim has a complex system of string expansion that is part of it being a mailer construction kit. Modern versions of Exim have two sorts of strings, "tainted" strings, which are untrusted data from the outside world and so may contain bad stuff, and untainted strings, which are trusted. This is a good thing for security but is somewhat of a pain in practice. Over time, Exim has been moving to disallow more and more uses of tainted strings and thus requiring configuration changes, as came up for us recently. When dealing with Exim's tainting, I've found it useful to remind myself that it's a heuristic, and as a heuristic it's biased towards being simple and clearly secure even if that makes you jump through extra hoops.
-
Make Use Of ☛ I used to SSH into my home server for everything until I installed these 3 containers
I’ve always treated SSH as the front door to my home servers. If I wanted to check on a Docker container, read its logs, edit a Compose file, or just copy something across, I opened a terminal first.
Of course, doing any of this over SSH isn’t exactly difficult, but every small job means remembering another command or installing another utility.
Portainer, Dozzle, and File Browser Quantum put the work I usually do in SSH into three browser tabs. Together, they used only 283 MB of memory on my Home Ops server. I’ll still need SSH when something inevitably breaks, but the boring administrative work no longer happens in the terminal.