fmaury/seirdy.one
1
0
Fork 0
mirror of https://git.sr.ht/~seirdy/seirdy.one synced 2024-11-23 12:52:10 +00:00
Code Issues Projects Releases Wiki Activity

Add ssh-auditor and other details to "Uses" page

Browse source
This commit is contained in:
Rohan Kumar 2022-09-11 20:50:12 -07:00
parent a214dcd6b8
commit a4812c72c9
No known key found for this signature in database
GPG key ID: 1E892DB2A5F84479
4 changed files with 51 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
content/about/ssh-policy.txt Normal file
View file

@ -0,0 +1,30 @@
#
# Custom policy based on seirdy.one (created on 2022/09/11)
#
# The name of this policy (displayed in the output during scans). Must be in quotes.
name = "Custom Policy (based on seirdy.one on 2022/09/11)"
# The version of this policy (displayed in the output during scans). Not parsed, and may be any value, including strings.
version = 1
# The banner that must match exactly. Commented out to ignore banners, since minor variability in the banner is sometimes normal.
# banner = "SSH-2.0-OpenSSH_8.8"
# The compression options that must match exactly (order matters).
# I've never needed it.
compressions = none
# The host key types that must match exactly (order matters).
# Why do other key types still exist lmao
host keys = ssh-ed25519
# The key exchange algorithms that must match exactly (order matters).
key exchanges = sntrup761x25519-sha512@openssh.com
# The ciphers that must match exactly (order matters).
ciphers = chacha20-poly1305@openssh.com
# The MACs that must match exactly (order matters).
# MACs are redundant with the chacha20-poly1305 cipher; don't use any.
macs =

6
content/about/uses.gmi
View file

@ -1,5 +1,9 @@
Here's the software I use. I've recently started to reduce my use of TUIs in favor of CLIs, for a variety of reasons. When possible, I try to use lightweight programs that can run on any machine, from a single-board computer to a giant desktop. I don't ever want to feel like I need to upgrade my hardware to do the same tasks as before: hardware upgrades should only be justified by my use-cases significantly changing, existing hardware being broken beyond repair, or upstream abandonment of security patches.
## Hardware
My main computer is a 2013 HP Elitebook 840 G1. It has a dual-core Intel i5-4300U CPU (Haswell), with simultaneous multithreading disabled.
## Environment
* OS: Fedora 36
@ -42,6 +46,7 @@ Here's the software I use. I've recently started to reduce my use of TUIs in fav
* rnp, a ping tool that supports TCP and QUIC "pings" to estimate handshake latency.
* both curl and xh for HTTP testing.
* kinvolk's wrk2 fork and bombardier for HTTP load-testing
* ssh-auditor
## Other tools:
@ -54,6 +59,7 @@ Here's the software I use. I've recently started to reduce my use of TUIs in fav
* Efficient Compression Tool (better than Zopfli/ZopfliPNG)
* scc
* Pandoc
* ghq, a VCS repository manager in the style of $GOPATH
=> https://github.com/psanford/wormhole-william wormhole-william
=> https://github.com/eafer/rdrview rdrview

19
content/about/uses.md
View file

@ -11,7 +11,7 @@ Here's the software I use. I've recently started to reduce my use of <abbr title
Hardware
--------
My main computer is a 2013 HP Elitebook 840 G1. It has an Intel i5-4300U CPU, with simultaneous multithreading disabled.
My main computer is a 2013 HP Elitebook 840 G1. It has a dual-core Intel i5-4300U CPU (Haswell), with simultaneous multithreading disabled.
Environment
-----------
@ -46,7 +46,7 @@ mpd
: My music player daemon, paired with [my mpd scripts](https://sr.ht/~seirdy/mpd-scripts/) and [mpd-mpris](https://github.com/natsukagami/mpd-mpris).
mpv
: My video player. I have three builds of mpv: one normal build, and two with decoder libraries that have profile-guided optimization for different types of video (anime, and live-action that includes heavy filmgrain). Often paired with [yt-dlp](https://github.com/yt-dlp/yt-dlp) and [mpv_sponsorblock](https://github.com/po5/mpv_sponsorblock).
: My video player. I have three builds of mpv: one normal build, and two with decoder libraries that have profile-guided optimization for different types of video (anime, and live-action that includes heavy filmgrain). Often paired with [yt-dlp](#yt-dlp) and [mpv_sponsorblock](https://github.com/po5/mpv_sponsorblock).
: Also my main image viewer, since FFmpeg recently got support for JPEG-XL and AVIF.
[swayimg](https://github.com/artemsen/swayimg)
@ -122,7 +122,10 @@ Every administrator needs some tools to test their servers.
: cURL supports a wide variety of features, protocols, TLS libraries, etc. `xh` is more focused on HTTP. I like to use both; when I don't need the features of cURL, I use xh for its simple color output and HTTPie-like syntax. Plus, it's nice to be able to test a server with two different HTTP+TLS implementations.
[wrk2 (fork)](https://github.com/kinvolk/wrk2) OR [bombardier](https://github.com/codesenberg/bombardier)
: Two great HTTP load-testers. wrk2 is mostly abandoned, but this fork has since added some features. When I need to test something like HTTP/2, I reach for bombardier. I haven't yet evaluated different HTTP/3 load-testers; I might have to hive h2load+nghttp3 a look.
: Two great HTTP load-testers. wrk2 is mostly abandoned, but this fork has since added some features. When I need to test something like HTTP/2, I reach for bombardier. I haven't yet evaluated different HTTP/3 load-testers; I might have to give h2load+nghttp3 a look.
[ssh-audit](https://github.com/jtesta/ssh-audit)
: I check my SSH config against [this SSH policy](../ssh-policy.txt). It's based on the GrapheneOS infrastructure's SSH configs.
Other tools
-----------
@ -131,7 +134,7 @@ Everyday utilities I can't live without:
jq
: Interpreter for the jq domain-specific programming language. Indespensible for creating, manipulaitng, and filtering data.
: Interpreter for the jq domain-specific programming language. Indispensable for creating, manipulating, and filtering data.
fzf
: A fuzzy-finder that blends the CLI and TUI. Used for my program launcher, tab-completion, shell history search, Neovim menus (with telescope.nvim), and command-line path-completion.
@ -150,7 +153,7 @@ z.lua
[rdrview](https://github.com/eafer/rdrview)
: The Readability algorithm on the command-line. Pairs nicely with Pandoc and/or w3m to extract and manipulate article content.
[Efficient Compression Tool](https://github.com/fhanau/Efficient-Compression-Tool) (`ect`)
[Efficient Compression Tool](https://github.com/fhanau/Efficient-Compression-Tool)
: The last word in optimizing gzip or PNG size. Runs circles around Zopfli, ZopfliPNG, oxipng, etc. I use it in combination with `brotli` to compress all static text and PNGs on this site.
[scc](https://github.com/boyter/scc)
@ -162,6 +165,12 @@ Pandoc
bmake
: Much simpler than GNU Make, and good for ensuring that Makefiles are portable.
[ghq](https://github.com/x-motemen/ghq)
: A tool to manage version-control clones (Git, Mercurial, et al) in the style of `$GOPATH`. I have hundreds of repositories cloned from several different remotes, and this takes care of organizing them in my filesystem.
<a href="https://github.com/yt-dlp" id="yt-dlp">yt-dlp</a>
: Download videos from hundreds of different sites, including YouTube. Integrates with external downloaders like aria2 and downloads DASH chunks in parallel to max out your connection speed. yt-dlp also integrates with Sponsorblock to add skippable chapters for the segments I'd otherwise have to manually skip (sponsored content, subscription-begging, an ending segment featuring other videos, and other useless bullshit). I've forgotten what it's like to watch a video ad.
This website
------------

1
static/ssh-policy.txt Symbolic link
View file

@ -0,0 +1 @@
../content/about/ssh-policy.txt