Security Leftovers

• 2021 CWE Most Important Hardware Weaknesses

  The 2021 Hardware List is a compilation of the most frequent and critical errors that can lead to serious vulnerabilities in hardware. An attacker can often exploit these vulnerabilities to take control of an affected system, obtain sensitive information, or cause a denial-of-service condition.

• Security updates for Thursday

  Security updates have been issued by openSUSE (salt), Slackware (bind), SUSE (salt), and Ubuntu (php5, php7.0, php7.2, php7.4, php8.0).

• Enhance the security of your open-source applications and share feedback

  Are you spending time on high-impact, high-value activities, or are you constantly derailed by maintenance, support, and deployment challenges? Does your organisation consume open-source software that needs security patching? Where do you get the security updates from, and how do you track what’s available? Are you responsible for vulnerability management, compliance, and long term maintenance of the software running on top of Ubuntu in your organisation? Do you have reliable processes, tools, and metrics to ensure that you have the visibility needed to run all of your stack securely?

• Cisco Releases Security Updates for Multiple Products

  Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisory

today's howtos

• How To Install Munin on Ubuntu 20.04 LTS - idroot

  In this tutorial, we will show you how to install Munin on Ubuntu 20.04 LTS. For those of you who didn’t know, Munin is a web-based tool to monitor system and network statistics. Munin shows this information through Graphs. It helps the system administrators to collect various system information that can be viewed via a web interface such as processor load, hard disk usage, network traffic, access to server services on one or more computers, and more. This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of the Munin server monitoring on Ubuntu 20.04 (Focal Fossa). You can follow the same instructions for Ubuntu 18.04, 16.04, and any other Debian-based distribution like Linux Mint.

• How to Install Ruby on Rails on Debian 11

  Ruby on Rails is a free, open-source, and one of the most popular application stacks used for creating sites and web apps. It is written in Ruby programming language and follows the MVC concept. It comes with the Rails development framework that makes app development easier. There are many well-known applications based on Rails, such as Github, Airbnb, Soundcloud, etc. In this tutorial, I will show you how to install Ruby on Rails on a Debian 11 system.

• How to Install Python 3.9 on Rocky Linux 8

  Python is a programming language that can be used to create just about anything. From full-scale games to web applications, and even simple scripts for your PC or Mac. Python has been around since the late 1980s and continues to be one of the most popular languages in use today. Today’s tutorial will show you how to install Python 3.9 programming language on a Rocky Linux 8 system.

• How to Install Yarn JS (Node) Package Manager on Debian 11 – VITUX

  Yarn is a package manager for Javascript. It is meant to replace npm (node package manager). Yarn uses a different way to install packages. Instead of installing from the registry, it installs packages from other nodes in your network that have already downloaded the package and its dependencies. This can speed up installations, especially in projects with lots of node modules. Yarn works exactly the same as npm, but with some benefits. First of all, it tells you which version of a package that was installed is compatible with your project. This makes it easier if you need to roll back or update packages. Secondly, it makes your packages more secure. Every package’s checksum is validated before it’s run by Yarn. This means that if a developer installs an outdated or corrupted package, Yarn will be able to detect the error, show the error in an easy-to-read format, and allow them to correct it before executing the code. It isn’t easy to say whether the yarn is better than npm or vice versa. It’s just different. If you want an easy-to-use package manager that makes your packages more secure, the yarn might be the answer. If you are a developer, chances are you have heard of Yarn. Installing yarn on Debian 11 can be tricky if you’re unfamiliar with the process, but this tutorial will walk you through the process step-by-step so that after reading this post, installing Yarn should be as easy as 1-2-3!

• How to Record Your Desktop Screen in Ubuntu 21.10 Wayland with Kooha | UbuntuHandbook

  Looking for how to record Ubuntu desktop in Wayland session? Here’s how to do it in Ubuntu 21.10 using Kooha. Ubuntu switched to “Wayland” session since Ubuntu 21.04. However, many apps, e.g., Kazam, Peek and vokoscreen-NG, do not support it. Some apps including OBS-Studio claim to support for Wayland, but either record blank screen or just refuse to work! The best solution in my opinion is switch back to Xorg session. To do so, simply log out, select your user and then choose “Ubuntu on Xorg” via bottom-right gear button menu. All the apps will work once you login with Xorg. For those sticking to the default Wayland, Kooha is one of good choices until GNOME’s “in-shell” screenshot & screencast UI is out.

• How to configure automatic updates in Ubuntu Server - blackMORE Ops

  This guide explains how to configure automatic updates in Ubuntu Server 20.04. This tutorial is based on the following official Ubuntu Documentation article: Ubuntu Server Guide » Package Management » Automatic Updates. If you just want to do it, scroll down to the end and copy paste the two configuration file configs and you’re done. If you want to understand it and tweak, then keep reading.

• How to create an Application Load Balancer on AWS

  Load Balancer falls under the EC2 services of AWS. An Application Load Balancer works at the seventh layer of the Open Systems Interconnection (OSI) model, the application layer. We can add and remove targets from our load balancer as per our needs without affecting the flow of requests to the application. Application Load Balancer supports for path-based routing: forward requests based on the URL in the request, host-based routing: forward requests based on the host field in the HTTP header, routing based on fields in the request, registering targets by IP address: targets outside the VPC for the load balancer can also be added. These are a few of the benefits of using the Application Load Balancer.

• How to edit files inside Docker container? - blackMORE Ops

  Just migrating everything to bunch of new RaspberryPi 4 8GB from my VMware farm. Instead of using multiple Raspberry Pi 4, I decided to use Docker and move as many I can into each one of these. I’ve think Home Assistant (with supervisor), Pi-Hole, Pi-VPN, UnBound and my NoIP2 scripts one Raspberry Pi4 8GB Pi running Debian 11 BullsEye and docker and Plex Server onto another Pi should do the trick. Anyhow, ran into an interesting problem with Undound where I needed to edit the configuration file nano application.yaml or vi unbound.sh and it said, nano or vi wasn’t installed.

• Configuring TACACS+ Server With A Simple GUI | Linux Journal

  Managing authentication and authorization in a large-scale network is a challenge: the passwords need to be set and rotated every now and then, access to certain configuration settings needs to be controlled and, finally, users’ actions need to be logged somewhere. This poses a need for a centralized controller in the network that is responsible for such functions. Modern routers and switches, which typically run Linux operating systems, support TACACS+ protocol that enables system administrators to implement flexible rules for authentication and authorization. However, TACACS+ server implementation for Linux operating system, although neat, lacks a graphical user interface which makes daemon configuration a smooth and intuitive process. In the next few paragraphs, we will discuss how to configure the TACACS+ daemon on Linux operating system and demonstrate how to deploy a simple, yet intuitive, GUI used for the configuration of the TACACS+ instance. TACACS+, which stands for Terminal Access Controller Access-Control System Plus, is a protocol mainly designed by Cisco and standardized in RFC8907. The primary goal of the protocol is to handle authentication and authorization of commands executed on remote telecommunication hardware on a centralized server. TACACS+ is a great protocol and can be compared to RADIUS. Its key advantages are the following: it allows scrambling or obfuscating (although, not really encrypting in a cryptographic sense) the entire payload with help of MD5 hash function and a secret shared between telecommunication hardware and a central server, it supports TCP protocol for transport, and it provides the possibility of carrying out AAA functions in a flexible way. More details on the protocol can be found in the corresponding RFC.

• Install Veritas Cluster server on CentOS 8 | RHEL 8 step by step - Unixcop

  This step-by-step guide intended to provide practical documentation for installing InfoScale Enterprise 7.4.1 in a non-production capacity. There is a innumerable of configurations for software products and the one used in this article is only meant to be used to demonstrate InfoScale’s . In this article we are about to learn how to Install Veritas Cluster server on CentOS 8 | RHEL 8 step by step. So The installation of InfoScale can_be performed using ISO installer, YUM, Response file, Kick start installer or from System management Satellite server. Also In our article, we are going to accomplish the installation using ISO installer.

• Kubernetes: Install using MicroK8s on Ubuntu - Anto ./ Online

  This guide will show you how to install Kubernetes using MicroK8s on Ubuntu. MicroK8s makes it super easy to get going with Kubernetes. Additionally, MicroK8s is bundled with tools such as Prometheus. So you simply enable a feature if you need it.

• How to install Anydesk on Ubuntu / Linux Mint - Unixcop

  AnyDesk is a closed source remote desktop application distributed by AnyDesk Software GmbH. The proprietary software program provides platform independent remote access to personal computers and other devices running the host application Due to this, the program often employed by internet scammers to take control of their victims computer over the internet. It offers remote control, file transfer, and VPN functionality. Also Anydesk has an attractive user-friendly interface and administrative tools through which you can easily manage the remote systems. WithAnyDesk, you can record everything you see on your computer as a video file so you can play back at any time. So In this guide, we will show you how to install AnyDesk on Ubuntu 20.04 and Linux Mint 20 After that you can easily access your team member or friend’s system.

Raspberry Pi Compute Module 4 Powers New PiCam Carrier Board

Users of Raspberry Pi Compute Module 4 boards who want to use the official Raspberry Pi Camera Module are left with a number of choices. Do they use the dedicated IO board or another carrier board? The latter is a popular option as the dedicated IO board is designed for development rather than daily use. We found Ledato's new PiCam module listed for $40 on Adafruit, and it looks like just the thing for CM4 camera projects. The PiCam module is the same size as the Compute Module (sold separately), and can be mounted directly on top of the board via four M2.5 screw points, with just a small offset to assemble a very small Raspberry Pi camera system, perfect for adding computer vision in small places. The Raspberry Pi 4, and the Compute Module 4 offer decent machine learning / computer vision using TensorFlow Lite, so a carrier board such as PiCam offers embedded machine learning projects a little more power over higher priced alternatives. Also: RPi CM4 carrier with camera connector sells for $40