Security on JOURNAL.ROBBI.MY

scoop - next InitializeSecurityContext failed

Wed, 24 Jan 2024 22:52:03 +0800

I’m encountering an issue updating my Scoop package on Windows, and it seems to be related to the Windows Secure Channel.

text

Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.

PS C:\Users\robbi> scoop update *
Updating Scoop...
fatal: 
 unable to access 'https://github.com/ScoopInstaller/Scoop/': 
 schannel: next InitializeSecurityContext failed: Unknown error (0x80092013) 
 - The revocation function was unable to check revocation because the revocation server was offline.
Update failed.

This might be due to a company internal root CA certificate distributed via Active Directory, which could be blocking the update through the certificate chain.

I really disappointed with Boxcryptor and Dropbox

Thu, 22 Dec 2022 17:36:13 +0800

I have been using boxcryptor almost 2 years and I really like it because of some features like:

It is free for personal use
It is cross platform (Windows, Android)
It is easy to use (setup, backup, restore, manage, update)
It is easy to sync / share (with some limitation for personal use plan)
It is easy to encrypt / decrypt

I use boxcryptor to encrypt my Onedrive folder and I really like it. It encrypts my files and folders one bye one per file(s) without need to scramble files like how crytomator works.

Ubuntu Chromium DEB file are actually snap wrapper

Fri, 30 Jul 2021 12:22:25 +0800

The screenshot taken is the latest rev:head (currently when the post published) of chromium-browser/focal package files repository. I really surprise about this kind of packaging. Oh my God, how comes this is allowable?

Seems it start putting and using wrapper to use snap on rev:1505, correct me if I wrong because I don’t use bazaar source code management so much compare to cvs, mercurial and git.

Setup SSH login without password (windows)

Thu, 10 Dec 2020 19:11:00 +0000

bash

# Currently on Windows with MingGW64 terminal
$ uname -a
MINGW64_NT-10.0-18363 AYAM-ITEK-KAMBING 3.1.6-340.x86_64 2020-07-09 14:33 UTC x86_64 Msys

# we must make sure the permissions to files and folders are correct
$ chmod 600 ~/.ssh/authorized_keys 
$ chmod 700 ~/.ssh/

# copy the public key contents from LOCAL MACHINE to REMOTE MACHINE
$ ssh-copy-id -i ~/.ssh/id_rsa.pub robbi@172.217.24.174 -p2222
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "~/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys

Number of key(s) added: 1

Now try logging into the machine, with: "ssh -p '2222' 'robbi@172.217.24.174'"
and check to make sure that only the key(s) you wanted were added.

# try to ssh into remote machine
$ ssh robbi@172.217.24.174 -p 2222
Last login: Fri Dec 11 03:02:27 2020 from 10.0.2.2

[robbi@r0x ~]$ uname -a
Linux r0x 5.9.11-200.fc33.x86_64 #1 SMP Tue Nov 24 18:18:01 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
[robbi@r0x ~]$ cat /etc/fedora-release
Fedora release 33 (Thirty Three)

How to disable ICMP ping replies (linux)

Tue, 08 Dec 2020 01:42:00 +0000

Few weeks ago during server setup phase for one of my project, I notice there is no ICMP or ping replies from server and some port are not able to access.

I told the network engineer to check and seem they blocking the ports and disabling ICMP replies from their firewall configuration.

From that accident I do some google-fu if I can do same thing for personal computer / server. We can setting the kernel variable or use iptable to disable ICMP / ping replies if requested.

Keybase, GPG key and Zoom

Sun, 25 Oct 2020 03:09:00 +0000

I have been using Keybase since 2016 until now and start using PGP since 2009.

Back then before Keybase available, I already use PGP as I mentioned earlier but I having hard with PGP keys because each time I upgrade OS, reformat OS, unrecoverable computer failure or switch newer computer I lost my PGP keys. Some of them don’t have expire date and I lost revoke key to take it down, unfortunately.