emiunet

Environment variables are also commonly used by cli programs.

The article is from 2007. I’m wondering how long it takes now for the same test.

We like fwknop a lot for its cryptography implementation which can prevent MITM attacks. However, we don't like it for relatively complex client setup. (For example, there is no official iOS client). So we built our own cheap version of port-knocking and called it "doormand". It's just a HTTP server (behind nginx) listening for a POST request from clients. If the request is valid, a new iptables rule is added for the knocking IP for 30 seconds. It supports users with secret key (think API token) so we can knock from our workstation easily. It also supports Timebased-OTP (we can even setup so user is required to enter 2 different TOTP's when knocking) so we can knock from mobile devices. All messages are hash'ed with timestamp making it harder to re-play attack. It works great for us (a small team) because now we can knock over HTTPS on our phone/ipad and then SSH-connect to servers.

If I knew somebody else's unique subdomain, I could set my browser cookie on my local computer to that value and it seems to just load the other subdomain just fine. I tested this with 2 different browser on my same laptop. Maybe it won't work if the other person is on another computer?

I could also just set the subdomain to anything I like (by setting the cookie value) and it still works just fine.

Ah no, I can still set the cookie to the other person's subdomain on another machine.

Edit: add extra sentence.

Edit2: format.

It may sound strange to some people, but staying at home actually made me more productive. I got more things (work and my own side projects) done in the past month. Except for me missing eating out at cafes, going to the theaters and people watching, I found a lot less distracted working from home.

I want to backup chat messages (just the texts) from my Slack workspaces to local machine. However, I don't have admin permissions and I can't install Apps on workspaces to have that API Key. Thus, I wrote this bash script to use my browser's session key and cookie to curl all the messages (all the way back to the beginning of each channels) and dump them to local storage in JSON format. I can later process the JSON files and import them into a database. But that's later.

Isn't Mint one of Ubuntu variants?