Open-Source
guest@6admin.io:~$ ls ~/tags/open-source
One Blocking Pin, Four CVEs: The Band-Aid That Wins Is the One That Disappears
How a security audit on a Dockerized Foreman stack turned into merged contributions in Foreman core, Dynflow and Jenkins.
log0u7.hyperv: the second dynamic inventory, this time from the hypervisor
An Ansible collection on Galaxy that builds the inventory from Hyper-V itself: VMs queried over WinRM or PSRP, native Cacheable and Constructable mixins, state/host/tag groups and the design choices that differ from a DNS-based inventory.
Your DNS zone is already an inventory: the log0u7.dns collection
An Ansible dynamic inventory built from DNS records, without zone transfers: TXT manifests, SRV records, DNS-SD (RFC 6763) and naming patterns, resolved in parallel. Plus the reverse converter that turns any inventory into a BIND zone.
SSH in 2021: what thirteen years changed since the 2008 series
This blog's SSH series ended in 2013 with PKCS#8. Here is the 2021 version, complete and secure: Ed25519, FIDO2 keys, certificates, sshd hardening, Include and Match, ProxyJump and multiplexing. What 2008 did hopefully, 2021 does with primitives.
Counting CVEs tells you nothing about security
Why lining up CVE counts to declare one system safer than another is a biased argument. A thought experiment with two fictional operating systems and a reminder that most proprietary flaws are neither disclosed nor public.
Dennis Ritchie has left #world
The tribute to Dennis Ritchie, creator of C and co-developer of Unix, with the C code that says goodbye. And the contrast with the media coverage of the previous week.