Skip to main content

Posts

Compile OpenSSH 9

Install  yum install rpm-build zlib-devel openssl-devel pam-devel libselinux-devel gcc perl-devel libXt-devel gtk2-devel make -y wget -c https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.3p2.tar.gz ./configure --with-pam --with-selinux --with-privsep-path=/var/lib/sshd/ --sysconfdir=/home/saz163user/ssh ./configure make make install

Use the CIA triad to protect organizations

The CIA triangle is a concept that can assist organisations think about risk while developing systems and security policies. It consists of three components that cybersecurity analysts and organisations strive to maintain: confidentiality, integrity, and availability. Maintaining an acceptable level of risk and ensuring that systems and policies are developed with these factors in mind aids in the establishment of a successful security posture, which refers to an organization's ability to manage its defence of key assets and data as well as respond to change.  Confidentiality The concept of confidentiality states that only people with permission can access particular resources or data. The application of design principles, such as the concept of least privilege, can improve secrecy inside an organisation. The least privilege principle restricts users' access to only the data they need to finish tasks relevant to their jobs. One technique to keep private data secure and secret i...

Importance of 2 factor authentication

Two-factor authentication (2FA) is an additional layer of security for online accounts and systems. It improves password security and considerably minimises the danger of unauthorised access to sensitive information. Here are some of the most important reasons why 2FA is crucial: Account Security is Increased: 2FA adds an extra step to the authentication process, forcing users to submit two pieces of identification in order to access their accounts. This usually consists of something the user knows (e.g., a password) and something the user has (e.g., a unique code issued to their mobile device). Even if an attacker obtains or guesses a password, they still need the second factor to get access. Password Vulnerabilities Mitigation: Passwords are frequently the weakest link in security as they are easily forgotten, stolen, or cracked. Even if a password is compromised, an attacker would still require the second factor, such as a physical device or biometric identity, to get unauthorised a...

Kerberos Authentication Protocol

  Kerberos Authentication Protocols is a network authentication protocol that provides secure communication over an insecure network by using secret-key cryptography. It was originally developed at MIT and is now widely used in many different organizations, including Microsoft Windows. Kerberos authentication works by using a third-party authentication server to verify the identities of users and services. When a user requests access to a resource, such as a file server, the user's computer sends a request to the Kerberos authentication server. The authentication server verifies the user's identity and issues a ticket-granting ticket (TGT) that the user can use to request access to other resources on the network. The user then presents the TGT to a ticket-granting server (TGS), which issues a service ticket for the requested resource. The user presents this service ticket to the resource server, which grants access if the ticket is valid. Kerberos authentication is widely used ...

Extend the BTRFS volume on Azure

To extend a BTRFS volume on Azure, you'll need to follow these steps: 1. Identify the name of the BTRFS volume that you want to extend. You can do this by running the following command: sudo btrfs filesystem show This will show you a list of all the BTRFS volumes on your system, along with their names and sizes. 2. Stop any services or applications that are using the BTRFS volume that you want to extend. 3. Use the Azure portal or Azure CLI to extend the size of the Azure disk that the BTRFS volume is on. This will increase the available space on the disk, but not yet on the BTRFS volume itself. 4. Use the following command to resize the BTRFS volume to use the new space: sudo btrfs filesystem resize max /path/to/mount/point Replace "/path/to/mount/point" with the actual path to the mount point of the BTRFS volume that you want to extend. 5. Verify that the BTRFS volume has been extended by running the following command: sudo btrfs filesystem show This should show that th...

Decentralized DNS Explanation

 Distributed DNS (Domain Name System) is a system designed to distribute domain name resolution services across a distributed network of computers, rather than relying on a central authority or single point of failure. Traditional DNS systems rely on centralized organizations to manage and maintain records of domain names and their corresponding IP addresses. In a distributed DNS system, the responsibility for maintaining records is distributed across a network of nodes, with each node maintaining a copy of the entire domain name database. This improves security, resilience, and resistance to censorship as the system is not controlled by a single entity. Distributed DNS can be achieved using a variety of technologies, including blockchain, peer-to-peer networks, distributed hash tables, and more. These technologies allow users to register and manage domain names in a decentralized manner, ensuring the robustness and security of the system.

Wine HQ installation on FreeBSD

I keep on wandering on the internet go get the correct steps to install WineHQ on FreeBSD as the steps provided on WineHQ website are not updated and even the i386 package of Wine is not available in FBSD ports. By following the below steps I hope the WineHQ will start working properly on your Bestie system. sudo pkg update and then  sudo pkg install wine wine-gecko wine-mono wine-proton then run winecfg since the i386 (32 Bit) packages have been dropped from ports, we must enable them at the OS level. /usr/local/share/wine/pkg32.sh install wine mesa-dri the above lines should be run without sudo.  Enable the temporary mount point  sudo mount -t procfs proc /proc To make it permanent add: proc /proc procfs rw 0 0 to /etc/fstab.