I often hear Telegram being described as a “secure Messaging App” or as an “Encrypted Messaging App”, but let’s dive into the details… First of all, Cyber Security is in essence a risk management exercise. in that sense, calling an app as “secure” or “not secure” is meaningless without identifying the context, and the threat […]
Introduction In a previous blog post, I a to run nginx as a reverse proxy, with automatically updated Let’s Encrypt SSL certificates that is entirely depends on several Docker images that were originally developed by Jason Wilder, eliminating the need for the shell scripts and the cron job. The solution uses a nginx-proxy Docker container […]
In today’s digital landscape, PDF documents have become a ubiquitous medium for sharing information, ranging from professionally generated reports to scanned copies of vital documents. There are numerous scenarios, be it for privacy concerns, security protocols, or compliance with legal requirements, where redacting certain pieces of information from these PDFs becomes necessary. A common method […]
If you used a PPA or added an external repository in Debian 11, Ubuntu 22.04, chances are that you recently have been seeing a message like this every time you run apt-get: This is a warning that apt-key is printing out. The tool apt-key was responsible for managing the list of keys used by apt […]
Motivation You are using uncomplicated firewall (ufw) and you realised that your docker web app is accessible via the internet regardless of the status of ufw, then this article is for you. I try here to answer two questions: Why does not ufw work for Docker containers? The answer is very simple, both ufw and […]
Several months ago, I finished reading “The Phoenix Project” by Gene Kim, George Spafford, and Kevin Behr. The book tell the story of an IT operation engineer, Bill Palmer, who get a sudden promotion and have to deal with all sorts of complications and difficulties while being under immense stress during a pivotal moment in […]
Introduction In a previous blog post, I presented a solution to use docker-compose to obtain and renew a Let’s Encrypt SSL certificate and configure NGINX to use it. The solution depended on using two docker-compose files, one for the initialisation and the second for operation, as well as a cron job, and a couple of […]
Recently, I was asked by a customer to help recovering a password of a VeraCrypt encrypted volume they lost access to. I did not wanted to fire a password cracking software like JohnTheRipper or HashCat with brute force attack because that should always be the last resort. The recommended approach for this particular case is […]