ricardbejarano

22 ms·

1. 151.▲
   by ricardbejarano 8y ago

   > Will this git repo still be updated then? Will the user remember to pull latest version and regenerate latest image? I use this image myself, so I have an incentive to keep it up-to-date and secure. Usually, I upgrade in less than 24h
2. 152.▲
   Show HN: Small, secure Nginx Docker image(github.com)

   38 points by ricardbejarano 8y ago|5 comments
3. 153.▲
   Fixing Cron Jobs in Mojave(blog.bejarano.io)

   1 points by ricardbejarano 8y ago|0 comments
4. 154.▲
   by ricardbejarano 8y ago

   Now, yes. Thanks for asking this, I just finished setting it up. For anyone reading this: If: 1. you are on macOS, 2. you used brew to install GnuPG: brew install gnupg, 3. after generating your GPG key pair, these two commands fail...
5. 155.▲
   Ask HN: How do you keep track of binary versions (in systems you administer)

   1 points by ricardbejarano 8y ago|0 comments
6. 156.▲
   Enabling TLS 1.3 support in Nginx(blog.bejarano.io)

   1 points by ricardbejarano 8y ago|0 comments
7. 157.▲
   Scaling Up to Your First 10M Users (AWS Re:Invent 2018) [video](youtube.com)

   3 points by ricardbejarano 8y ago|0 comments
8. 158.▲
   Domain name validation with regular expressions(blog.bejarano.io)

   1 points by ricardbejarano 8y ago|0 comments
9. 159.▲
   by ricardbejarano 8y ago

   I consider Apple to be the only respectable bigtech left, that said, I can't avoid to make the following reasoning: - Apple is US-based, therefore subject to PRISM (and any other surveillance program we don't know about) - There&#
10. 160.▲
    by ricardbejarano 8y ago

    I second this.
11. 161.▲
    by ricardbejarano 8y ago

    Could you elaborate?
12. 162.▲
    by ricardbejarano 8y ago

    Thanks for pointing that out! I can't believe I missed that!
13. 163.▲
    by ricardbejarano 8y ago

    It's due to Night Shift, set it to a custom schedule (or enable location services but only for time zone settings)
14. 164.▲
    by ricardbejarano 8y ago

    I was inspired in part by this guide, it's very full-featured, but I wanted to give the community a simplified version of it, it contains too much text/bloat/detail which, don't get me wrong, it's awesome for those
15. 165.▲
    by ricardbejarano 8y ago

    IIRC, Google DNS and Cloudflare DNS both support "DNS over TLS" and "DNS over HTTPS", that's the reason I recommend them in the first place.
16. 166.▲
    by ricardbejarano 8y ago

    The sources I recall while writing this: - https://github.com/drduh/macOS-Security-and-Privacy-Guide - https://github.com/CISOfy/lynis - https://nvlpubs.nist.gov/nistpubs/spec
17. 167.▲
    by ricardbejarano 8y ago

    Thanks for the feedback! Standard accounts are recommended by Apple itself as a best practice in lieu of administrator accounts. Also, sudo is not available in standard accounts which protects against any would-be vulnerability. I updated t
18. 168.▲
    by ricardbejarano 8y ago

    I don't think he meant "failure" so much but rather criticise the fact that operating systems sometimes deliver not-the-greatest defaults. To be fair, macOS has a very strong default set, this just takes it the extra mile.
19. 169.▲
    by ricardbejarano 8y ago

    One of my sources was this guide, it's great.
20. 170.▲
    by ricardbejarano 8y ago

    > An attacker could trigger the utility and direct a Mac to a site with malware without user interaction, so it's best to disable this feature and log in to captive portals using your regular Web browser, provided you have first dis
21. 171.▲
    by ricardbejarano 8y ago

    Thanks for your feedback! I agree with your points and I updated the post so.
22. 172.▲
    by ricardbejarano 8y ago

    macOS is pretty secure by default but there are some extra steps you can take towards improving on that regard, Apple itself has a bunch of very basic steps listed here: https://help.apple.com/machelp/mac/10.12&#x2
23. 173.▲
    by ricardbejarano 8y ago

    True. I put it as a failover for Cloudflare's 1.1.1.1 because they both support DNS over TLS and DNS over HTTPS and even though DNS servers are rarely down, I didn't want to recommend a single point of failure with Cloudflare&#x27
24. 174.▲
    by ricardbejarano 8y ago

    I agree that "secure by default" should be, well, the default. I envy OpenBSD's way of delivering a secure system out-of-the-box, instead of everyone else's "pretty much secure but...".
25. 175.▲
    Hardening macOS(blog.bejarano.io)

    159 points by ricardbejarano 8y ago|74 comments
26. 176.▲
    by ricardbejarano 8y ago

    Command Line Heroes: https://www.redhat.com/en/command-line-heroes Podcast by RedHat on tech history, systems, open source, cloud... Very well produced (like, really well produced) but few episodes. Season 2 is airing
27. 177.▲
    by ricardbejarano 8y ago

    VirualBox does not work: https://www.virtualbox.org/ticket/17805 tl;dr: Mojave blocks the VBoxDrv.kext <5.3 kernel extension from loading because "it will panic the machine if allowed to load", and it&#x27
28. 178.▲
    Ask HN: What issues would one encounter running serverless email?

    1 points by ricardbejarano 8y ago|0 comments
29. 179.▲
    by ricardbejarano 8y ago

    So they want users to ditch one centralized service provider with another? I have no Google/Microsoft/iCloud account, ProtonMail has been covering my (pretty basic) email needs for well over three years now, and now I'm leavi