Information Security

Enable ToFU (Trust on First Use) with OpenSSH

Feb 11, 2023 · 2 min read · Linux FOSS/Linux Programmability Ansible Information Security ·

Ansible is a fantastic tool for Linux-based and NOS-based automation. Have you seen this error before? 1"changed": false, "msg": "Failed to connect to the host via ssh: Host key verification failed." When you use Ansible with SSH transport (as opposed to an API), you rely on the SSH key trust …

Security patches are available for VMware vCenter 8.0 - Let's try the new vCenter Lifecycle Manager!

Dec 17, 2022 · 2 min read · VMWare Home Lab Information Security vSphere ·

Share on:

Let's take a look at the new lifecycle management process for vCenter. The old process via the VAMI was easy to execute - the industry is upping the ante with automated pre- and post-testing. Cisco's NX-OS installer is another example - complex procedures (in Cisco's case, sequential PGA or microcode updates) invite …

Track Certificate Expiration with Jenkins and Python 3!

Oct 23, 2022 · 5 min read · Linux Python FOSS/Linux Jenkins Continuous Delivery Design Patterns Information Security ·

Share on:

CI/CD tools aren't just for automatically deploying apps! Jenkins excels at enabling an engineer to automatically execute and test code - but, it has a hidden super-power: Automating boring and intensive IT tasks(removing toil). Let's take a common and relatable IT problem - it doesn't matter if you're a DevOps …

Identity theft has gotten out of hand. Here are basic ways to protect yourself.

Aug 13, 2022 · 7 min read · Information Security ·

Share on:

It's not a matter of if you will be the victim of a breach, but when. Wired is starting to track breaches by halves (as a general tech publication), and security vendors are moving to monthly reporting due to the volume. It's 2022, and it seems everyone loves to over-share on social media. This may feel good but …

Deploy Root Certificates to Debian-based Linux systems with Ansible

Mar 19, 2022 · 3 min read · Linux FOSS/Linux Ansible Information Security ·

Share on:

There are numerous advantages to deploying an internal root CA to an enterprise: Autonomy: Enterprises can control how their certificates are issued, structured, and revoked independently of a third party. Slow or fast replacement cycles are permissible if you control the infrastructure, letting you customize the CA to …