Petr Safarcik safarcik

Keybase proof

I hereby claim:

I am psafarcik on github.
I am psafarcik (https://keybase.io/psafarcik) on keybase.
I have a public key ASBl6Lk7-Hd3NkiXvcxYwSEln-wjd17QMTyBN554A-8PZAo

To claim this, I am signing this object:

PCI DSS

NOTE: Work in progress

TODO: Identity management, two-factor auth, OpenVPN, Logstash, log shippers, IIS logs, OSSEC, Snort, Suricata, snorby, restart iis w/o admin role,

PCI DSS. Guidelines

PCI Compliance with Open Source at (Almost) Zero Cost. Part 1 - http://rafeeqrehman.com/2011/05/24/zero-cost-pci-compliance/
PCI Compliance with Open Source at (Almost) Zero Cost. Part 2 - http://rafeeqrehman.com/2011/07/17/zero-cost-pci-compliance-part-2/

Java, do you trust me? 🤔

Using openssl to test an SSL connection to google.com, using a CA file that's been pulled out from a Java keystore. For those days when you want to verify that you've got the right certificate in the store:

Download the Equifax root certificate (which is the root CA for Google)
Import the certificate into a new Java keystore
Export the certificate back out again
Convert the certificate to PEM
Use openssl to test an SSL connection to Google with that cert

terminal tips && tricks

ctrl + L            - clean terminal  
ctrl + R            - search in bash history  
alt + .             - list of command arguments

basic commands

pwd - acutal workspace path

PSQL

Magic words:

psql -U postgres

If run with -E flag, it will describe the underlaying queries of the \ commands (cool for learning!).

Most \d commands support additional param of __schema__.name__ and accept wildcards like *.*

	set nocompatible
	source ~/.vim/plugins.vim

	syntax enable
	set number
	set expandtab
	set tabstop=2
	set shiftwidth=2
	set softtabstop=2
	set backspace=indent,eol,start

	./jboss-cli.sh

	embed-server --std-out=echo --server-config=standalone.xml

	module add --name=org.postgres --resources=/tmp/postgresql-42.1.1.jar --dependencies=javax.api,javax.transaction.api

	exit

	#!/bin/bash
	export TERM=xterm-color
	export CLICOLOR=1
	export GREP_OPTIONS='--color=auto'
	# export LSCOLORS=Exfxcxdxbxegedabagacad
	export LSCOLORS=gxfxcxdxbxegedabagacad # Dark lscolor scheme
	# Don't put duplicate lines in your bash history
	export HISTCONTROL=ignoredups
	# increase history limit (100KB or 5K entries)
	export HISTFILESIZE=100000