Complete guide to secure SSH access on Proxmox VE 9+ using key authentication, least privilege principle, and hardened configuration
Bluesky SSH Authentication #2
Addressing the glaring omissions from yesterday’s proof of concept, such as the fact that you could sign in as any user, you couldn’t revoke access, all hosts had the same users, and there was no mapping between Bluesky handles and POSIX users, I have updated mtelvers/bluesky-ssh-key-extractor and newly published mtelvers/bluesky-collection.
*sshole · sshhole.com
openssh on musl linux has been letting people into password-less accounts since 2016.
Security advisory: openssh-server password authentication bypass | Alpine Linux
Alpine Linux
Own Your Code Forever - A Private Git Server Setup Guide with Tailscale and Forgejo
Proxies all the way down.
A couple of days ago, exe.dev raised a lot of money1. I decided to poke around with it a little, and signed up. Their trial is 7 days long, so despite having no actual plans, I just started doing stuff. In doing so, I noticed a few interesting things that I thought were worth a quick writeup: I didn’t have to configure an SSH key to be able to ssh exe.dev. I could SSH to my VM despite not having a unique IP and no support for SNI in SSH. The GitHub Integration, which allowed me to clone private repositories, didn’t require any host-side configuration. The second item, SSH with non-unique IPs, despite SSH having no host header or SNI equivalent, is already covered by exe.dev themselves, so I won’t go through it here2. The other two, I want to run through quickly.
Proxmox Virtual Environment
Proxmox Virtual Environment is a free and open-source server virtualization platform developed by Proxmox Server Solutions GmbH. It is based on Debian and combines Kernel-based Virtual Machine (KVM) for hardware-assisted virtual machines with LXC for Linux system containers in a single management environment.
UCAN - User Controlled Authorization Network
A trustless, secure, local-first, user-originated, distributed authorization scheme.
Linux Firewalls: How to Actually Secure a Cloud Server (iptables, nftables, firewalld, ufw)
A practical guide to the four major Linux firewall technologies - iptables, nftables, firewalld, and ufw. Covers real-world cloud server hardening with concrete examples, from locking down SSH to b...
Remotely unlock a Filevault encrypted disk with macOS 26 Tahoe via SSH and a Tailscale Subnet Router
An Excruciatingly Detailed Guide To SSH (But Only The Things I Actually Find Useful)
Oh you like SSH? Name every flag.
The one good feature of macOS Tahoe 26
Complete OS Guide: Proxmox How It Works, Orientation and Curiosities – LINUXMIND.DEV
Proxmox is an open-source server virtualization environment that combines two virtualization technologies: kernel-based virtual machines (KVM) and Linux containers (LXC). It offers a unified management interface for running virtual machines, containers, storage, and network configurations in a single platform. Widely adopted by enterprises, small businesses, and home lab enthusiasts, Proxmox simplifies deployment and administration of virtual infrastructure.
A Gentle Introduction to Secure Computation
In Fall 2015, I took CS 276, a graduate level introduction to theoretical cryptography. For the final project, I gave a short presentation on secure computation.