A long time ago, I set up an internal PKI so I could create my own TLS certificates to add to internal devices and HTTPS servers. I used this primarily for my EdgeOS router since that was the main device I would log into that would give me a warning about untrusted certificates. That was… Continue reading Adding a SAN to a certificate using OpenSSL
Investigating a WordPress Compromise
It’s been a while since I updated this blog, and this lack of attention (and falling behind a few versions in WordPress) led to this very site getting hacked! Fortunately, I was quickly alerted to it thanks to Google, and if nothing else, this presents an interesting case study in investigating what happened. Full details… Continue reading Investigating a WordPress Compromise
A few thoughts
So we’ve electioneered. And some things have happened. Unsolicited thoughts below the jump.
PKI Revisited
A little more than two years ago, I set up a PKI and did a post on it. The main goal was to get a certificate on my EdgeOS router to get proper HTTPS support without the annoying red X. When I did it, however, I didn’t do it quite right, and so I decided… Continue reading PKI Revisited
Netflow and Splunk
Yesterday, I told the tale of getting netflow data out of my EdgeOS router. Once I started actually receiving data, I wanted to get it into Splunk. I figured that I would have to set up a directory for netflow log data from nfdump, then set up a reader to have Splunk ingest the data.… Continue reading Netflow and Splunk
EdgeOS and Netflow
Update: Since I wrote this blog post in 2016, I’ve turned off netflow on my router. Why? Because I upgraded to gigabit fiber, and when netflow is enabled, it throttled my speed to 150 Mb/s or so. Not good! Giving up netflow is a small price to pay for full gigabit speeds. If you do… Continue reading EdgeOS and Netflow
2015 Tax Incidence
Hey, it’s tax time again!
Encrypt All The Things
I am a security guy, and my profession is to protect the good guys – all of you – from the bad guys. Although the world is not full of bad guys, there are a lot of them, and the funny thing about information security is that the most poorly-skilled bad guy out there only… Continue reading Encrypt All The Things
Flat ain’t simple
Long time no blog, eh? There’s been a lot of politicking going on lately, what with the presidential campaigns and debates and all, and lots of talk about tax plans. A favorite talking point about a tax plan is the argument that a flat tax will make taxes simpler. A flat tax is many things,… Continue reading Flat ain’t simple
New Sonja Pictures
I don’t always post when I upload new Sonja pictures, but I will in this case. I just uploaded a bunch of pictures from this weekend when we were in Wisconsin with my brother and his girlfriend. They are located here.